@turnkey/sdk-browser 1.16.0 → 2.0.0

package/dist/__clients__/browser-clients.js

@@ -0,0 +1,633 @@
+'use strict';
+
+var http = require('@turnkey/http');
+var baseClient = require('./base-client.js');
+var base = require('../__types__/base.js');
+var utils = require('../utils.js');
+var storage = require('../storage.js');
+var constants = require('../constants.js');
+
+class TurnkeyBrowserClient extends baseClient.TurnkeyBaseClient {
+    constructor(config, authClient) {
+        super(config, authClient);
+        this.login = async (config) => {
+            const readOnlySessionResult = await this.createReadOnlySession(config || {});
+            await storage.saveSession(readOnlySessionResult, this.authClient);
+            return readOnlySessionResult;
+        };
+        /**
+         * Creates a read-write session. This method infers the current user's organization ID and target userId.
+         * To be used in conjunction with an `iframeStamper`: the resulting session's credential bundle can be
+         * injected into an iframeStamper to create a session that enables both read and write requests.
+         *
+         * @param targetEmbeddedKey
+         * @param expirationSeconds
+         * @param userId
+         * @returns {Promise<void>}
+         */
+        this.refereshSession = async (sessionType = base.SessionType.READ_WRITE, targetPublicKey, // TODO: eventually we want to automatically pull this from localStorage/iframe
+        expirationSeconds = constants.DEFAULT_SESSION_EXPIRATION_IN_SECONDS) => {
+            try {
+                if (sessionType === base.SessionType.READ_ONLY) {
+                    if (this instanceof TurnkeyPasskeyClient) {
+                        throw new Error("You must use a passkey client to refresh a read session"); // TODO: support wallet client
+                    }
+                    const readOnlySessionResult = await this.createReadOnlySession({});
+                    const session = {
+                        sessionType: base.SessionType.READ_ONLY,
+                        userId: readOnlySessionResult.userId,
+                        organizationId: readOnlySessionResult.organizationId,
+                        expiry: Number(readOnlySessionResult.sessionExpiry),
+                        token: readOnlySessionResult.session,
+                    };
+                    await storage.storeSession(session, base.AuthClient.Passkey);
+                }
+                if (sessionType === base.SessionType.READ_WRITE) {
+                    if (!targetPublicKey) {
+                        throw new Error("You must provide a targetPublicKey to refresh a read-write session.");
+                    }
+                    const readWriteSessionResult = await this.createReadWriteSession({
+                        targetPublicKey,
+                        expirationSeconds,
+                        invalidateExisting: true,
+                    });
+                    const session = {
+                        sessionType: base.SessionType.READ_WRITE,
+                        userId: readWriteSessionResult.userId,
+                        organizationId: readWriteSessionResult.organizationId,
+                        expiry: Date.now() + Number(expirationSeconds) * 1000,
+                        token: readWriteSessionResult.credentialBundle,
+                    };
+                    if (this instanceof TurnkeyIframeClient) {
+                        await this.injectCredentialBundle(session.token);
+                    }
+                    else {
+                        // Throw an error if the client is not an iframe client
+                        throw new Error("You must use an iframe client to refresh a read-write session");
+                    }
+                    await storage.storeSession(session, base.AuthClient.Iframe);
+                }
+            }
+            catch (error) {
+                throw new Error("Unable to refresh session.");
+            }
+        };
+        /**
+         * Log in with a bundle. This method uses a bundle sent to the end user email
+         * To be used in conjunction with an `iframeStamper`.
+         *
+         * @param bundle
+         * @param expirationSeconds
+         * @returns {Promise<void>}
+         */
+        this.loginWithBundle = async (bundle, // we need a way to get the expiry of this token. Either it lives in the token itself or is returned from the server action and passed again here
+        expirationSeconds) => {
+            if (this instanceof TurnkeyIframeClient) {
+                await this.injectCredentialBundle(bundle);
+            }
+            else {
+                // Throw an error if the client is not an iframe client
+                throw new Error("You must use an iframe client to log in with a session."); //should we default to a "localStorage" client?
+            }
+            const whoAmI = await this.getWhoami();
+            const session = {
+                sessionType: base.SessionType.READ_WRITE,
+                userId: whoAmI.userId,
+                organizationId: whoAmI.organizationId,
+                expiry: Date.now() + Number(expirationSeconds) * 1000,
+                token: bundle,
+            };
+            await storage.storeSession(session, base.AuthClient.Iframe);
+        };
+        /**
+         * Log in with a session object. This method uses a session object from server actions and stores it and the active client in local storage
+         * To be used in conjunction with an `iframeStamper`.
+         *
+         * @param session
+         * @returns {Promise<void>}
+         */
+        this.loginWithSession = async (session) => {
+            if (this instanceof TurnkeyIframeClient) {
+                await this.injectCredentialBundle(session.token);
+            }
+            else {
+                // Throw an error if the client is not an iframe client
+                throw new Error("You must use an iframe client to log in with a session."); //should we default to a "localStorage" client?
+            }
+            await storage.storeSession(session, base.AuthClient.Iframe);
+        };
+        /**
+         * Log in with a passkey.
+         * To be used in conjunction with a `passkeyStamper`
+         *
+         * @param session
+         * @returns {Promise<void>}
+         */
+        this.loginWithPasskey = async (sessionType = base.SessionType.READ_WRITE, iframeClient, targetPublicKey, // TODO: eventually we want to automatically pull this from localStorage/iframe
+        expirationSeconds = constants.DEFAULT_SESSION_EXPIRATION_IN_SECONDS) => {
+            try {
+                // Create a read-only session
+                if (sessionType === base.SessionType.READ_ONLY) {
+                    const readOnlySessionResult = await this.createReadOnlySession({});
+                    const session = {
+                        sessionType: base.SessionType.READ_ONLY,
+                        userId: readOnlySessionResult.userId,
+                        organizationId: readOnlySessionResult.organizationId,
+                        expiry: Number(readOnlySessionResult.sessionExpiry),
+                        token: readOnlySessionResult.session,
+                    };
+                    await storage.storeSession(session, base.AuthClient.Passkey);
+                }
+                // Create a read-write session
+                if (sessionType === base.SessionType.READ_WRITE) {
+                    if (!targetPublicKey) {
+                        throw new Error("You must provide a targetPublicKey to create a read-write session.");
+                    }
+                    const readWriteSessionResult = await this.createReadWriteSession({
+                        targetPublicKey,
+                        expirationSeconds,
+                    });
+                    const session = {
+                        sessionType: base.SessionType.READ_WRITE,
+                        userId: readWriteSessionResult.userId,
+                        organizationId: readWriteSessionResult.organizationId,
+                        expiry: Date.now() + Number(expirationSeconds) * 1000,
+                        token: readWriteSessionResult.credentialBundle,
+                    };
+                    if (!iframeClient) {
+                        throw new Error("You must provide an iframe client to log in with a passkey.");
+                    }
+                    await iframeClient.injectCredentialBundle(session.token);
+                    await storage.storeSession(session, base.AuthClient.Iframe);
+                }
+                else {
+                    throw new Error("Invalid session type passed.");
+                }
+            }
+            catch (error) {
+                throw new Error("Unable to log in with the provided passkey.");
+            }
+        };
+        /**
+         * Log in with a browser wallet.
+         *
+         * @param session
+         * @returns {Promise<void>}
+         */
+        this.loginWithWallet = async (sessionType = base.SessionType.READ_WRITE, iframeClient, targetPublicKey, // TODO: eventually we want to automatically pull this from localStorage/iframe
+        expirationSeconds = constants.DEFAULT_SESSION_EXPIRATION_IN_SECONDS) => {
+            // Create a read-only session
+            if (sessionType === base.SessionType.READ_ONLY) {
+                const readOnlySessionResult = await this.createReadOnlySession({});
+                const session = {
+                    sessionType: base.SessionType.READ_ONLY,
+                    userId: readOnlySessionResult.userId,
+                    organizationId: readOnlySessionResult.organizationId,
+                    expiry: Number(readOnlySessionResult.sessionExpiry),
+                    token: readOnlySessionResult.session,
+                };
+                await storage.storeSession(session, base.AuthClient.Wallet);
+            }
+            // Create a read-write session
+            if (sessionType === base.SessionType.READ_WRITE) {
+                if (!targetPublicKey) {
+                    throw new Error("You must provide a targetPublicKey to create a read-write session.");
+                }
+                const readWriteSessionResult = await this.createReadWriteSession({
+                    targetPublicKey,
+                    expirationSeconds,
+                });
+                const session = {
+                    sessionType: base.SessionType.READ_WRITE,
+                    userId: readWriteSessionResult.userId,
+                    organizationId: readWriteSessionResult.organizationId,
+                    expiry: Date.now() + Number(expirationSeconds) * 1000,
+                    token: readWriteSessionResult.credentialBundle,
+                };
+                if (!iframeClient) {
+                    throw new Error("You must provide an iframe client to log in with a wallet.");
+                }
+                await iframeClient.injectCredentialBundle(session.token);
+                await storage.storeSession(session, base.AuthClient.Iframe);
+            }
+            else {
+                throw new Error("Invalid session type passed.");
+            }
+        };
+        /**
+         * Creates a read-write session. This method infers the current user's organization ID and target userId.
+         * To be used in conjunction with an `iframeStamper`: the resulting session's credential bundle can be
+         * injected into an iframeStamper to create a session that enables both read and write requests.
+         *
+         * @param targetEmbeddedKey
+         * @param expirationSeconds
+         * @param userId
+         * @returns {Promise<SdkApiTypes.TCreateReadWriteSessionResponse>}
+         */
+        this.loginWithReadWriteSession = async (targetEmbeddedKey, expirationSeconds = constants.DEFAULT_SESSION_EXPIRATION_IN_SECONDS, userId) => {
+            try {
+                const readWriteSessionResult = await this.createReadWriteSession({
+                    targetPublicKey: targetEmbeddedKey,
+                    expirationSeconds,
+                    userId: userId,
+                });
+                // Ensure session and sessionExpiry are included in the object
+                const readWriteSessionResultWithSession = {
+                    ...readWriteSessionResult,
+                    credentialBundle: readWriteSessionResult.credentialBundle,
+                    sessionExpiry: Date.now() + Number(expirationSeconds) * 1000,
+                };
+                // store auth bundle in local storage
+                await storage.saveSession(readWriteSessionResultWithSession, this.authClient);
+                return readWriteSessionResultWithSession;
+            }
+            catch (error) {
+                throw new Error("Unable to log in with the provided read-write session.");
+            }
+        };
+        /**
+         * Logs in with an existing auth bundle. this bundle enables both read and write requests.
+         *
+         * @param credentialBundle
+         * @param expirationSeconds
+         * @returns {Promise<boolean>}
+         */
+        this.loginWithAuthBundle = async (credentialBundle, expirationSeconds = constants.DEFAULT_SESSION_EXPIRATION_IN_SECONDS) => {
+            try {
+                const whoAmIResult = await this.getWhoami();
+                const readWriteSessionResultWithSession = {
+                    ...whoAmIResult,
+                    credentialBundle: credentialBundle,
+                    sessionExpiry: Date.now() + Number(expirationSeconds) * 1000,
+                };
+                await storage.saveSession(readWriteSessionResultWithSession, this.authClient);
+                return true;
+            }
+            catch {
+                throw new Error("Unable to log in with the provided auth bundle.");
+            }
+        };
+        /**
+         * Removes authentication factors from an end user.
+         *
+         * This function allows selectively removing:
+         * - Phone number
+         * - Email
+         * - Authenticators (by ID)
+         * - OAuth providers (by ID)
+         * - API keys (by ID)
+         *
+         * All removal operations are executed in parallel if multiple
+         * parameters are provided.
+         *
+         * @param params - A structured object containing all the removal parameters
+         *   @param params.userId - Unique identifier of the user
+         *   @param params.phoneNumber - true to remove the phone number
+         *   @param params.email - true to remove the email
+         *   @param params.authenticatorIds - Array of authenticator IDs to remove
+         *   @param params.oauthProviderIds - Array of OAuth provider IDs to remove
+         *   @param params.apiKeyIds - Array of API key IDs to remove
+         * @returns A promise that resolves to an array of results from each removal operation
+         */
+        this.deleteUserAuth = async (params) => {
+            try {
+                const { userId, phoneNumber, email, authenticatorIds, oauthProviderIds, apiKeyIds, } = params;
+                const promises = [];
+                if (phoneNumber) {
+                    promises.push(this.updateUser({ userId, userPhoneNumber: "", userTagIds: [] }));
+                }
+                if (email) {
+                    promises.push(this.updateUser({ userId, userEmail: "", userTagIds: [] }));
+                }
+                if (authenticatorIds && authenticatorIds.length > 0) {
+                    promises.push(this.deleteAuthenticators({ userId, authenticatorIds }));
+                }
+                if (oauthProviderIds && oauthProviderIds.length > 0) {
+                    promises.push(this.deleteOauthProviders({ userId, providerIds: oauthProviderIds }));
+                }
+                if (apiKeyIds && apiKeyIds.length > 0) {
+                    promises.push(this.deleteApiKeys({ userId, apiKeyIds }));
+                }
+                // Execute all removal operations in parallel
+                return await Promise.all(promises);
+            }
+            catch (error) {
+                // Surface error
+                throw error;
+            }
+        };
+        /**
+         * Adds or updates authentication factors for an end user.
+         *
+         * This function allows selectively adding:
+         * - Phone number
+         * - Email
+         * - Authenticators
+         * - OAuth providers
+         * - API keys
+         *
+         * All additions/updates are executed in parallel if multiple
+         * parameters are provided.
+         *
+         * @param params - A structured object containing all the addition/update parameters
+         *   @param params.userId - Unique identifier of the user
+         *   @param params.phoneNumber - New phone number for the user
+         *   @param params.email - New email address for the user
+         *   @param params.authenticators - Array of authenticator objects to create
+         *   @param params.oauthProviders - Array of OAuth provider objects to create
+         *   @param params.apiKeys - Array of API key objects to create
+         * @returns A promise that resolves to an array of results from each addition or update
+         */
+        this.addUserAuth = async (params) => {
+            try {
+                const { userId, phoneNumber, email, authenticators, oauthProviders, apiKeys, } = params;
+                const promises = [];
+                if (phoneNumber) {
+                    promises.push(this.updateUser({
+                        userId,
+                        userPhoneNumber: phoneNumber,
+                        userTagIds: [],
+                    }));
+                }
+                if (email) {
+                    promises.push(this.updateUser({ userId, userEmail: email, userTagIds: [] }));
+                }
+                if (authenticators && authenticators.length > 0) {
+                    promises.push(this.createAuthenticators({ userId, authenticators }));
+                }
+                if (oauthProviders && oauthProviders.length > 0) {
+                    promises.push(this.createOauthProviders({ userId, oauthProviders }));
+                }
+                if (apiKeys && apiKeys.length > 0) {
+                    promises.push(this.createApiKeys({ userId, apiKeys }));
+                }
+                // Execute all additions/updates operations in parallel
+                return await Promise.all(promises);
+            }
+            catch (error) {
+                // Surface error
+                throw error;
+            }
+        };
+    }
+    /**
+     * Comprehensive authentication update for an end user.
+     * Combines add/update and delete operations into a single call.
+     *
+     * The behavior is driven by whether values are set to:
+     * - A string/array (to create or update)
+     * - `null` or an array of IDs (to remove)
+     *
+     * All operations are executed in parallel where applicable.
+     *
+     * @param params - A structured object containing all the update parameters
+     *   @param params.userId - Unique identifier of the user
+     *   @param params.phoneNumber - String to set (new phone) or `null` to remove
+     *   @param params.email - String to set (new email) or `null` to remove
+     *   @param params.authenticators - Object describing authenticators to add or remove
+     *   @param params.oauthProviders - Object describing OAuth providers to add or remove
+     *   @param params.apiKeys - Object describing API keys to add or remove
+     *
+     * @returns A promise that resolves to a boolean indicating overall success
+     */
+    async updateUserAuth(params) {
+        try {
+            const { userId, phoneNumber, email, authenticators, oauthProviders, apiKeys, } = params;
+            const promises = [];
+            // Handle phone/email in a single updateUser call if both are changing,
+            // or separate calls if only one is changing.
+            const userUpdates = {};
+            if (phoneNumber !== undefined) {
+                userUpdates.userPhoneNumber = phoneNumber === null ? "" : phoneNumber;
+            }
+            if (email !== undefined) {
+                userUpdates.userEmail = email === null ? "" : email;
+            }
+            if (Object.keys(userUpdates).length > 0) {
+                promises.push(this.updateUser({ userId, ...userUpdates, userTagIds: [] }));
+            }
+            // Handle authenticators
+            if (authenticators) {
+                if (authenticators.add?.length) {
+                    promises.push(this.createAuthenticators({
+                        userId,
+                        authenticators: authenticators.add,
+                    }));
+                }
+                if (authenticators.deleteIds?.length) {
+                    promises.push(this.deleteAuthenticators({
+                        userId,
+                        authenticatorIds: authenticators.deleteIds,
+                    }));
+                }
+            }
+            // Handle OAuth providers
+            if (oauthProviders) {
+                if (oauthProviders.add?.length) {
+                    promises.push(this.createOauthProviders({
+                        userId,
+                        oauthProviders: oauthProviders.add,
+                    }));
+                }
+                if (oauthProviders.deleteIds?.length) {
+                    promises.push(this.deleteOauthProviders({
+                        userId,
+                        providerIds: oauthProviders.deleteIds,
+                    }));
+                }
+            }
+            // Handle API keys
+            if (apiKeys) {
+                if (apiKeys.add?.length) {
+                    promises.push(this.createApiKeys({
+                        userId,
+                        apiKeys: apiKeys.add,
+                    }));
+                }
+                if (apiKeys.deleteIds?.length) {
+                    promises.push(this.deleteApiKeys({
+                        userId,
+                        apiKeyIds: apiKeys.deleteIds,
+                    }));
+                }
+            }
+            // Execute all requested operations in parallel
+            await Promise.all(promises);
+            return true;
+        }
+        catch (error) {
+            // Surface error
+            throw error;
+        }
+    }
+}
+class TurnkeyPasskeyClient extends TurnkeyBrowserClient {
+    constructor(config) {
+        super(config, base.AuthClient.Passkey);
+        /**
+         * Create a passkey for an end-user, taking care of various lower-level details.
+         *
+         * @returns {Promise<Passkey>}
+         */
+        this.createUserPasskey = async (config = {}) => {
+            const challenge = utils.generateRandomBuffer();
+            const encodedChallenge = utils.base64UrlEncode(challenge);
+            const authenticatorUserId = utils.generateRandomBuffer();
+            // WebAuthn credential options options can be found here:
+            // https://www.w3.org/TR/webauthn-2/#sctn-sample-registration
+            //
+            // All pubkey algorithms can be found here: https://www.iana.org/assignments/cose/cose.xhtml#algorithms
+            // Turnkey only supports ES256 (-7) and RS256 (-257)
+            //
+            // The pubkey type only supports one value, "public-key"
+            // See https://www.w3.org/TR/webauthn-2/#enumdef-publickeycredentialtype for more details
+            // TODO: consider un-nesting these config params
+            const webauthnConfig = {
+                publicKey: {
+                    rp: {
+                        id: config.publicKey?.rp?.id ?? this.rpId,
+                        name: config.publicKey?.rp?.name ?? "",
+                    },
+                    challenge: config.publicKey?.challenge ?? challenge,
+                    pubKeyCredParams: config.publicKey?.pubKeyCredParams ?? [
+                        {
+                            type: "public-key",
+                            alg: -7,
+                        },
+                        {
+                            type: "public-key",
+                            alg: -257,
+                        },
+                    ],
+                    user: {
+                        id: config.publicKey?.user?.id ?? authenticatorUserId,
+                        name: config.publicKey?.user?.name ?? "Default User",
+                        displayName: config.publicKey?.user?.displayName ?? "Default User",
+                    },
+                    authenticatorSelection: {
+                        authenticatorAttachment: config.publicKey?.authenticatorSelection?.authenticatorAttachment ??
+                            undefined,
+                        requireResidentKey: config.publicKey?.authenticatorSelection?.requireResidentKey ??
+                            true,
+                        residentKey: config.publicKey?.authenticatorSelection?.residentKey ?? "required",
+                        userVerification: config.publicKey?.authenticatorSelection?.userVerification ??
+                            "preferred",
+                    },
+                },
+            };
+            const attestation = await http.getWebAuthnAttestation(webauthnConfig);
+            return {
+                encodedChallenge: config.publicKey?.challenge
+                    ? utils.base64UrlEncode(config.publicKey?.challenge)
+                    : encodedChallenge,
+                attestation,
+            };
+        };
+        /**
+         * Uses passkey authentication to create a read-write session, via an embedded API key,
+         * and stores + returns the resulting auth bundle that contains the encrypted API key.
+         * This auth bundle (also referred to as a credential bundle) can be injected into an `iframeStamper`,
+         * resulting in a touch-free authenticator. Unlike `loginWithReadWriteSession`, this method
+         * assumes the end-user's organization ID (i.e. the sub-organization ID) is already known.
+         *
+         * @param userId
+         * @param targetEmbeddedKey
+         * @param expirationSeconds
+         * @param curveType
+         * @returns {Promise<ReadWriteSession>}
+         */
+        this.createPasskeySession = async (userId, targetEmbeddedKey, expirationSeconds = constants.DEFAULT_SESSION_EXPIRATION_IN_SECONDS, organizationId) => {
+            try {
+                const session = await storage.getStorageValue(storage.StorageKeys.Session);
+                organizationId = organizationId ?? session?.organizationId;
+                userId = userId ?? session?.userId;
+                if (!organizationId) {
+                    throw new Error("Error creating passkey session: Organization ID is required");
+                }
+                if (!userId) {
+                    throw new Error("Error creating passkey session: User ID is required");
+                }
+                const { authBundle: credentialBundle, publicKey } = await utils.createEmbeddedAPIKey(targetEmbeddedKey);
+                // add API key to Turnkey User
+                await this.createApiKeys({
+                    organizationId,
+                    userId,
+                    apiKeys: [
+                        {
+                            apiKeyName: `Session Key ${String(Date.now())}`,
+                            publicKey,
+                            expirationSeconds,
+                            curveType: "API_KEY_CURVE_P256",
+                        },
+                    ],
+                });
+                const whoAmI = await this.getWhoami();
+                const expiry = Date.now() + Number(expirationSeconds) * 1000;
+                await storage.saveSession({
+                    organizationId,
+                    organizationName: whoAmI?.organizationName ?? "",
+                    userId,
+                    username: whoAmI?.username ?? "",
+                    credentialBundle,
+                    sessionExpiry: expiry,
+                }, this.authClient);
+                return {
+                    credentialBundle,
+                    expiry,
+                };
+            }
+            catch (error) {
+                throw new Error("Unable to create passkey session.");
+            }
+        };
+        this.rpId = this.stamper.rpId;
+    }
+}
+/**
+ * TurnkeyIframeClient is a client that uses an iframe to interact with the Turnkey API.
+ * It is used to create read-write sessions, and to inject credential bundles into the iframe.
+ * It is also used to extract encrypted credential bundles from the iframe.
+ * @extends TurnkeyBrowserClient
+ */
+class TurnkeyIframeClient extends TurnkeyBrowserClient {
+    constructor(config) {
+        super(config, base.AuthClient.Iframe);
+        this.injectCredentialBundle = async (credentialBundle) => {
+            return await this.stamper.injectCredentialBundle(credentialBundle);
+        };
+        this.injectWalletExportBundle = async (credentialBundle, organizationId) => {
+            return await this.stamper.injectWalletExportBundle(credentialBundle, organizationId);
+        };
+        this.injectKeyExportBundle = async (credentialBundle, organizationId, keyFormat) => {
+            return await this.stamper.injectKeyExportBundle(credentialBundle, organizationId, keyFormat);
+        };
+        this.injectImportBundle = async (bundle, organizationId, userId) => {
+            return await this.stamper.injectImportBundle(bundle, organizationId, userId);
+        };
+        this.extractWalletEncryptedBundle = async () => {
+            return await this.stamper.extractWalletEncryptedBundle();
+        };
+        this.extractKeyEncryptedBundle = async () => {
+            return await this.stamper.extractKeyEncryptedBundle();
+        };
+        this.iframePublicKey = this.stamper.iframePublicKey;
+    }
+}
+class TurnkeyWalletClient extends TurnkeyBrowserClient {
+    constructor(config) {
+        super(config, base.AuthClient.Wallet);
+        this.wallet = config.wallet;
+    }
+    async getPublicKey() {
+        return this.wallet.getPublicKey();
+    }
+    getWalletInterface() {
+        return this.wallet;
+    }
+}
+
+exports.TurnkeyBrowserClient = TurnkeyBrowserClient;
+exports.TurnkeyIframeClient = TurnkeyIframeClient;
+exports.TurnkeyPasskeyClient = TurnkeyPasskeyClient;
+exports.TurnkeyWalletClient = TurnkeyWalletClient;
+//# sourceMappingURL=browser-clients.js.map

package/dist/__clients__/browser-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-clients.js","sources":["../../src/__clients__/browser-clients.ts"],"sourcesContent":[null],"names":["TurnkeyBaseClient","saveSession","SessionType","DEFAULT_SESSION_EXPIRATION_IN_SECONDS","storeSession","AuthClient","generateRandomBuffer","base64UrlEncode","getWebAuthnAttestation","getStorageValue","StorageKeys","createEmbeddedAPIKey"],"mappings":";;;;;;;;;AAmGM,MAAO,oBAAqB,SAAQA,4BAAiB,CAAA;IACzD,WAAY,CAAA,MAA8B,EAAE,UAAuB,EAAA;AACjE,QAAA,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAG5B,QAAA,IAAA,CAAA,KAAK,GAAG,OAAO,MAEd,KAAyD;YACxD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAC5D,MAAM,IAAI,EAAE,CACb,CAAC;YACF,MAAMC,mBAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAE1D,YAAA,OAAO,qBAAsB,CAAC;AAChC,SAAC,CAAC;AAEF;;;;;;;;;AASG;QACH,IAAe,CAAA,eAAA,GAAG,OAChB,WAA2B,GAAAC,gBAAW,CAAC,UAAU,EACjD,eAAwB;QACxB,iBAA4B,GAAAC,+CAAqC,KAChD;YACjB,IAAI;AACF,gBAAA,IAAI,WAAW,KAAKD,gBAAW,CAAC,SAAS,EAAE;oBACzC,IAAI,IAAK,YAAY,oBAAoB,EAAE;AACzC,wBAAA,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;AACH,qBAAA;oBACD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AACnE,oBAAA,MAAM,OAAO,GAAY;wBACvB,WAAW,EAAEA,gBAAW,CAAC,SAAS;wBAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;wBACpC,cAAc,EAAE,qBAAqB,CAAC,cAAc;AACpD,wBAAA,MAAM,EAAE,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC;wBACnD,KAAK,EAAE,qBAAqB,CAAC,OAAO;qBACrC,CAAC;oBAEF,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,OAAO,CAAC,CAAC;AACjD,iBAAA;AACD,gBAAA,IAAI,WAAW,KAAKH,gBAAW,CAAC,UAAU,EAAE;oBAC1C,IAAI,CAAC,eAAe,EAAE;AACpB,wBAAA,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;AACH,qBAAA;AACD,oBAAA,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;wBAC/D,eAAe;wBACf,iBAAiB;AACjB,wBAAA,kBAAkB,EAAE,IAAI;AACzB,qBAAA,CAAC,CAAC;AACH,oBAAA,MAAM,OAAO,GAAY;wBACvB,WAAW,EAAEA,gBAAW,CAAC,UAAU;wBACnC,MAAM,EAAE,sBAAsB,CAAC,MAAM;wBACrC,cAAc,EAAE,sBAAsB,CAAC,cAAc;wBACrD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI;wBACrD,KAAK,EAAE,sBAAsB,CAAC,gBAAgB;qBAC/C,CAAC;oBACF,IAAI,IAAI,YAAY,mBAAmB,EAAE;wBACvC,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAM,CAAC,CAAC;AACnD,qBAAA;AAAM,yBAAA;;AAEL,wBAAA,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;AACH,qBAAA;oBACD,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,MAAM,CAAC,CAAC;AAChD,iBAAA;AACF,aAAA;AAAC,YAAA,OAAO,KAAK,EAAE;AACd,gBAAA,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAC/C,aAAA;AACH,SAAC,CAAC;AAEF;;;;;;;AAOG;AACH,QAAA,IAAA,CAAA,eAAe,GAAG,OAChB,MAAc;AACd,QAAA,iBAAyB,KACR;YACjB,IAAI,IAAK,YAAY,mBAAmB,EAAE;AACxC,gBAAA,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC3C,aAAA;AAAM,iBAAA;;AAEL,gBAAA,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;AACH,aAAA;AACD,YAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;AAEtC,YAAA,MAAM,OAAO,GAAY;gBACvB,WAAW,EAAEH,gBAAW,CAAC,UAAU;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI;AACrD,gBAAA,KAAK,EAAE,MAAM;aACd,CAAC;YAEF,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,MAAM,CAAC,CAAC;AACjD,SAAC,CAAC;AAEF;;;;;;AAMG;AACH,QAAA,IAAA,CAAA,gBAAgB,GAAG,OAAO,OAAgB,KAAmB;YAC3D,IAAI,IAAI,YAAY,mBAAmB,EAAE;gBACvC,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAM,CAAC,CAAC;AACnD,aAAA;AAAM,iBAAA;;AAEL,gBAAA,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;AACH,aAAA;YACD,MAAMD,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,MAAM,CAAC,CAAC;AACjD,SAAC,CAAC;AAEF;;;;;;AAMG;AACH,QAAA,IAAA,CAAA,gBAAgB,GAAG,OACjB,WAAA,GAA2BH,gBAAW,CAAC,UAAU,EACjD,YAAiC,EACjC,eAAwB;QACxB,iBAA4B,GAAAC,+CAAqC,KAChD;YACjB,IAAI;;AAEF,gBAAA,IAAI,WAAW,KAAKD,gBAAW,CAAC,SAAS,EAAE;oBACzC,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAEnE,oBAAA,MAAM,OAAO,GAAY;wBACvB,WAAW,EAAEA,gBAAW,CAAC,SAAS;wBAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;wBACpC,cAAc,EAAE,qBAAqB,CAAC,cAAc;AACpD,wBAAA,MAAM,EAAE,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC;wBACnD,KAAK,EAAE,qBAAqB,CAAC,OAAO;qBACrC,CAAC;oBACF,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,OAAO,CAAC,CAAC;AACjD,iBAAA;;AAGD,gBAAA,IAAI,WAAW,KAAKH,gBAAW,CAAC,UAAU,EAAE;oBAC1C,IAAI,CAAC,eAAe,EAAE;AACpB,wBAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;AACH,qBAAA;AAED,oBAAA,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;wBAC/D,eAAe;wBACf,iBAAiB;AAClB,qBAAA,CAAC,CAAC;AAEH,oBAAA,MAAM,OAAO,GAAY;wBACvB,WAAW,EAAEA,gBAAW,CAAC,UAAU;wBACnC,MAAM,EAAE,sBAAsB,CAAC,MAAM;wBACrC,cAAc,EAAE,sBAAsB,CAAC,cAAc;wBACrD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI;wBACrD,KAAK,EAAE,sBAAsB,CAAC,gBAAgB;qBAC/C,CAAC;oBAEF,IAAI,CAAC,YAAY,EAAE;AACjB,wBAAA,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;AACH,qBAAA;oBACD,MAAM,YAAY,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAM,CAAC,CAAC;oBAE1D,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,MAAM,CAAC,CAAC;AAChD,iBAAA;AAAM,qBAAA;AACL,oBAAA,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACjD,iBAAA;AACF,aAAA;AAAC,YAAA,OAAO,KAAK,EAAE;AACd,gBAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAChE,aAAA;AACH,SAAC,CAAC;AAEF;;;;;AAKG;AACH,QAAA,IAAA,CAAA,eAAe,GAAG,OAChB,WAAA,GAA2BH,gBAAW,CAAC,UAAU,EACjD,YAAiC,EACjC,eAAwB;QACxB,iBAA4B,GAAAC,+CAAqC,KAChD;;AAEjB,YAAA,IAAI,WAAW,KAAKD,gBAAW,CAAC,SAAS,EAAE;gBACzC,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAEnE,gBAAA,MAAM,OAAO,GAAY;oBACvB,WAAW,EAAEA,gBAAW,CAAC,SAAS;oBAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;oBACpC,cAAc,EAAE,qBAAqB,CAAC,cAAc;AACpD,oBAAA,MAAM,EAAE,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC;oBACnD,KAAK,EAAE,qBAAqB,CAAC,OAAO;iBACrC,CAAC;gBACF,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,MAAM,CAAC,CAAC;AAChD,aAAA;;AAGD,YAAA,IAAI,WAAW,KAAKH,gBAAW,CAAC,UAAU,EAAE;gBAC1C,IAAI,CAAC,eAAe,EAAE;AACpB,oBAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;AACH,iBAAA;AAED,gBAAA,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;oBAC/D,eAAe;oBACf,iBAAiB;AAClB,iBAAA,CAAC,CAAC;AAEH,gBAAA,MAAM,OAAO,GAAY;oBACvB,WAAW,EAAEA,gBAAW,CAAC,UAAU;oBACnC,MAAM,EAAE,sBAAsB,CAAC,MAAM;oBACrC,cAAc,EAAE,sBAAsB,CAAC,cAAc;oBACrD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI;oBACrD,KAAK,EAAE,sBAAsB,CAAC,gBAAgB;iBAC/C,CAAC;gBAEF,IAAI,CAAC,YAAY,EAAE;AACjB,oBAAA,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;AACH,iBAAA;gBACD,MAAM,YAAY,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAM,CAAC,CAAC;gBAE1D,MAAME,oBAAY,CAAC,OAAO,EAAEC,eAAU,CAAC,MAAM,CAAC,CAAC;AAChD,aAAA;AAAM,iBAAA;AACL,gBAAA,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACjD,aAAA;AACH,SAAC,CAAC;AAEF;;;;;;;;;AASG;QACH,IAAyB,CAAA,yBAAA,GAAG,OAC1B,iBAAyB,EACzB,oBAA4BF,+CAAqC,EACjE,MAAe,KACyC;YACxD,IAAI;AACF,gBAAA,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;AAC/D,oBAAA,eAAe,EAAE,iBAAiB;oBAClC,iBAAiB;AACjB,oBAAA,MAAM,EAAE,MAAO;AAChB,iBAAA,CAAC,CAAC;;AAGH,gBAAA,MAAM,iCAAiC,GAAG;AACxC,oBAAA,GAAG,sBAAsB;oBACzB,gBAAgB,EAAE,sBAAsB,CAAC,gBAAgB;oBACzD,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI;iBAC7D,CAAC;;gBAGF,MAAMF,mBAAW,CAAC,iCAAiC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAEtE,gBAAA,OAAO,iCAAiC,CAAC;AAC1C,aAAA;AAAC,YAAA,OAAO,KAAK,EAAE;AACd,gBAAA,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC3E,aAAA;AACH,SAAC,CAAC;AAEF;;;;;;AAMG;QACH,IAAmB,CAAA,mBAAA,GAAG,OACpB,gBAAwB,EACxB,iBAA4B,GAAAE,+CAAqC,KAC7C;YACpB,IAAI;AACF,gBAAA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;AAE5C,gBAAA,MAAM,iCAAiC,GAAG;AACxC,oBAAA,GAAG,YAAY;AACf,oBAAA,gBAAgB,EAAE,gBAAgB;oBAClC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI;iBAC7D,CAAC;gBAEF,MAAMF,mBAAW,CAAC,iCAAiC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AACtE,gBAAA,OAAO,IAAI,CAAC;AACb,aAAA;YAAC,MAAM;AACN,gBAAA,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACpE,aAAA;AACH,SAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;AAqBG;AACH,QAAA,IAAA,CAAA,cAAc,GAAG,OAAO,MAA4B,KAAoB;YACtE,IAAI;AACF,gBAAA,MAAM,EACJ,MAAM,EACN,WAAW,EACX,KAAK,EACL,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,GACV,GAAG,MAAM,CAAC;gBACX,MAAM,QAAQ,GAAmB,EAAE,CAAC;AAEpC,gBAAA,IAAI,WAAW,EAAE;oBACf,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CACjE,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,KAAK,EAAE;oBACT,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC3D,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;AACnD,oBAAA,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AACxE,iBAAA;AACD,gBAAA,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;AACnD,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CACrE,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE;AACrC,oBAAA,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAC1D,iBAAA;;AAGD,gBAAA,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACpC,aAAA;AAAC,YAAA,OAAO,KAAK,EAAE;;AAEd,gBAAA,MAAM,KAAK,CAAC;AACb,aAAA;AACH,SAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;AAqBG;AACH,QAAA,IAAA,CAAA,WAAW,GAAG,OAAO,MAAyB,KAAoB;YAChE,IAAI;AACF,gBAAA,MAAM,EACJ,MAAM,EACN,WAAW,EACX,KAAK,EACL,cAAc,EACd,cAAc,EACd,OAAO,GACR,GAAG,MAAM,CAAC;gBACX,MAAM,QAAQ,GAAmB,EAAE,CAAC;AAEpC,gBAAA,IAAI,WAAW,EAAE;AACf,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,UAAU,CAAC;wBACd,MAAM;AACN,wBAAA,eAAe,EAAE,WAAW;AAC5B,wBAAA,UAAU,EAAE,EAAE;AACf,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,KAAK,EAAE;oBACT,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC9D,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/C,oBAAA,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;AACtE,iBAAA;AACD,gBAAA,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/C,oBAAA,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;AACtE,iBAAA;AACD,gBAAA,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AACjC,oBAAA,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACxD,iBAAA;;AAGD,gBAAA,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACpC,aAAA;AAAC,YAAA,OAAO,KAAK,EAAE;;AAEd,gBAAA,MAAM,KAAK,CAAC;AACb,aAAA;AACH,SAAC,CAAC;KAjcD;AAmcD;;;;;;;;;;;;;;;;;;;AAmBG;IACH,MAAM,cAAc,CAAC,MAA4B,EAAA;QAC/C,IAAI;AACF,YAAA,MAAM,EACJ,MAAM,EACN,WAAW,EACX,KAAK,EACL,cAAc,EACd,cAAc,EACd,OAAO,GACR,GAAG,MAAM,CAAC;YACX,MAAM,QAAQ,GAAmB,EAAE,CAAC;;;YAIpC,MAAM,WAAW,GAAqD,EAAE,CAAC;YAEzE,IAAI,WAAW,KAAK,SAAS,EAAE;AAC7B,gBAAA,WAAW,CAAC,eAAe,GAAG,WAAW,KAAK,IAAI,GAAG,EAAE,GAAG,WAAW,CAAC;AACvE,aAAA;YACD,IAAI,KAAK,KAAK,SAAS,EAAE;AACvB,gBAAA,WAAW,CAAC,SAAS,GAAG,KAAK,KAAK,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC;AACrD,aAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;AACvC,gBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAC5D,CAAC;AACH,aAAA;;AAGD,YAAA,IAAI,cAAc,EAAE;AAClB,gBAAA,IAAI,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE;AAC9B,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,oBAAoB,CAAC;wBACxB,MAAM;wBACN,cAAc,EAAE,cAAc,CAAC,GAAG;AACnC,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE;AACpC,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,oBAAoB,CAAC;wBACxB,MAAM;wBACN,gBAAgB,EAAE,cAAc,CAAC,SAAS;AAC3C,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACF,aAAA;;AAGD,YAAA,IAAI,cAAc,EAAE;AAClB,gBAAA,IAAI,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE;AAC9B,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,oBAAoB,CAAC;wBACxB,MAAM;wBACN,cAAc,EAAE,cAAc,CAAC,GAAG;AACnC,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE;AACpC,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,oBAAoB,CAAC;wBACxB,MAAM;wBACN,WAAW,EAAE,cAAc,CAAC,SAAS;AACtC,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACF,aAAA;;AAGD,YAAA,IAAI,OAAO,EAAE;AACX,gBAAA,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE;AACvB,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,aAAa,CAAC;wBACjB,MAAM;wBACN,OAAO,EAAE,OAAO,CAAC,GAAG;AACrB,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACD,gBAAA,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE;AAC7B,oBAAA,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,aAAa,CAAC;wBACjB,MAAM;wBACN,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,qBAAA,CAAC,CACH,CAAC;AACH,iBAAA;AACF,aAAA;;AAGD,YAAA,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5B,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;AAAC,QAAA,OAAO,KAAK,EAAE;;AAEd,YAAA,MAAM,KAAK,CAAC;AACb,SAAA;KACF;AACF,CAAA;AAEK,MAAO,oBAAqB,SAAQ,oBAAoB,CAAA;AAG5D,IAAA,WAAA,CAAY,MAA8B,EAAA;AACxC,QAAA,KAAK,CAAC,MAAM,EAAEI,eAAU,CAAC,OAAO,CAAC,CAAC;AAIpC;;;;AAIG;AACH,QAAA,IAAA,CAAA,iBAAiB,GAAG,OAClB,MAA2B,GAAA,EAAE,KACT;AACpB,YAAA,MAAM,SAAS,GAAGC,0BAAoB,EAAE,CAAC;AACzC,YAAA,MAAM,gBAAgB,GAAGC,qBAAe,CAAC,SAAS,CAAC,CAAC;AACpD,YAAA,MAAM,mBAAmB,GAAGD,0BAAoB,EAAE,CAAC;;;;;;;;;;AAWnD,YAAA,MAAM,cAAc,GAA8B;AAChD,gBAAA,SAAS,EAAE;AACT,oBAAA,EAAE,EAAE;wBACF,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI;wBACzC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE;AACvC,qBAAA;AACD,oBAAA,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,SAAS;AACnD,oBAAA,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,gBAAgB,IAAI;AACtD,wBAAA;AACE,4BAAA,IAAI,EAAE,YAAY;4BAClB,GAAG,EAAE,CAAC,CAAC;AACR,yBAAA;AACD,wBAAA;AACE,4BAAA,IAAI,EAAE,YAAY;4BAClB,GAAG,EAAE,CAAC,GAAG;AACV,yBAAA;AACF,qBAAA;AACD,oBAAA,IAAI,EAAE;wBACJ,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,mBAAmB;wBACrD,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,cAAc;wBACpD,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,IAAI,cAAc;AACnE,qBAAA;AACD,oBAAA,sBAAsB,EAAE;AACtB,wBAAA,uBAAuB,EACrB,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,uBAAuB;4BACjE,SAAS;AACX,wBAAA,kBAAkB,EAChB,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,kBAAkB;4BAC5D,IAAI;wBACN,WAAW,EACT,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,WAAW,IAAI,UAAU;AACrE,wBAAA,gBAAgB,EACd,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,gBAAgB;4BAC1D,WAAW;AACd,qBAAA;AACF,iBAAA;aACF,CAAC;AAEF,YAAA,MAAM,WAAW,GAAG,MAAME,2BAAsB,CAAC,cAAc,CAAC,CAAC;YAEjE,OAAO;AACL,gBAAA,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;sBACzCD,qBAAe,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;AAC9C,sBAAE,gBAAgB;gBACpB,WAAW;aACZ,CAAC;AACJ,SAAC,CAAC;AAEF;;;;;;;;;;;;AAYG;AACH,QAAA,IAAA,CAAA,oBAAoB,GAAG,OACrB,MAAc,EACd,iBAAyB,EACzB,iBAAA,GAA4BJ,+CAAqC,EACjE,cAAuB,KACM;YAC7B,IAAI;gBACF,MAAM,OAAO,GAAG,MAAMM,uBAAe,CAACC,mBAAW,CAAC,OAAO,CAAC,CAAC;AAC3D,gBAAA,cAAc,GAAG,cAAc,IAAI,OAAO,EAAE,cAAc,CAAC;AAC3D,gBAAA,MAAM,GAAG,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC;gBAEnC,IAAI,CAAC,cAAc,EAAE;AACnB,oBAAA,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;AACH,iBAAA;gBAED,IAAI,CAAC,MAAM,EAAE;AACX,oBAAA,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACxE,iBAAA;AAED,gBAAA,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAC/C,MAAMC,0BAAoB,CAAC,iBAAiB,CAAC,CAAC;;gBAGhD,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,cAAc;oBACd,MAAM;AACN,oBAAA,OAAO,EAAE;AACP,wBAAA;4BACE,UAAU,EAAE,eAAe,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAE,CAAA;4BAC/C,SAAS;4BACT,iBAAiB;AACjB,4BAAA,SAAS,EAAE,oBAAoB;AAChC,yBAAA;AACF,qBAAA;AACF,iBAAA,CAAC,CAAC;AAEH,gBAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;AACtC,gBAAA,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;AAE7D,gBAAA,MAAMV,mBAAW,CACf;oBACE,cAAc;AACd,oBAAA,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;oBAChD,MAAM;AACN,oBAAA,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE;oBAChC,gBAAgB;AAChB,oBAAA,aAAa,EAAE,MAAM;AACtB,iBAAA,EACD,IAAI,CAAC,UAAU,CAChB,CAAC;gBAEF,OAAO;oBACL,gBAAgB;oBAChB,MAAM;iBACP,CAAC;AACH,aAAA;AAAC,YAAA,OAAO,KAAK,EAAE;AACd,gBAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACtD,aAAA;AACH,SAAC,CAAC;QAjJA,IAAI,CAAC,IAAI,GAAI,IAAI,CAAC,OAA4B,CAAC,IAAI,CAAC;KACrD;AAiJF,CAAA;AAED;;;;;AAKG;AACG,MAAO,mBAAoB,SAAQ,oBAAoB,CAAA;AAG3D,IAAA,WAAA,CAAY,MAA8B,EAAA;AACxC,QAAA,KAAK,CAAC,MAAM,EAAEI,eAAU,CAAC,MAAM,CAAC,CAAC;AAInC,QAAA,IAAA,CAAA,sBAAsB,GAAG,OACvB,gBAAwB,KACJ;YACpB,OAAO,MAAO,IAAI,CAAC,OAAyB,CAAC,sBAAsB,CACjE,gBAAgB,CACjB,CAAC;AACJ,SAAC,CAAC;AAEF,QAAA,IAAA,CAAA,wBAAwB,GAAG,OACzB,gBAAwB,EACxB,cAAsB,KACF;YACpB,OAAO,MAAO,IAAI,CAAC,OAAyB,CAAC,wBAAwB,CACnE,gBAAgB,EAChB,cAAc,CACf,CAAC;AACJ,SAAC,CAAC;QAEF,IAAqB,CAAA,qBAAA,GAAG,OACtB,gBAAwB,EACxB,cAAsB,EACtB,SAAiC,KACb;AACpB,YAAA,OAAO,MAAO,IAAI,CAAC,OAAyB,CAAC,qBAAqB,CAChE,gBAAgB,EAChB,cAAc,EACd,SAAS,CACV,CAAC;AACJ,SAAC,CAAC;QAEF,IAAkB,CAAA,kBAAA,GAAG,OACnB,MAAc,EACd,cAAsB,EACtB,MAAc,KACM;AACpB,YAAA,OAAO,MAAO,IAAI,CAAC,OAAyB,CAAC,kBAAkB,CAC7D,MAAM,EACN,cAAc,EACd,MAAM,CACP,CAAC;AACJ,SAAC,CAAC;QAEF,IAA4B,CAAA,4BAAA,GAAG,YAA4B;AACzD,YAAA,OAAO,MAAO,IAAI,CAAC,OAAyB,CAAC,4BAA4B,EAAE,CAAC;AAC9E,SAAC,CAAC;QAEF,IAAyB,CAAA,yBAAA,GAAG,YAA4B;AACtD,YAAA,OAAO,MAAO,IAAI,CAAC,OAAyB,CAAC,yBAAyB,EAAE,CAAC;AAC3E,SAAC,CAAC;QAnDA,IAAI,CAAC,eAAe,GAAI,IAAI,CAAC,OAAyB,CAAC,eAAe,CAAC;KACxE;AAmDF,CAAA;AAEK,MAAO,mBAAoB,SAAQ,oBAAoB,CAAA;AAG3D,IAAA,WAAA,CAAY,MAAiC,EAAA;AAC3C,QAAA,KAAK,CAAC,MAAM,EAAEA,eAAU,CAAC,MAAM,CAAC,CAAC;AACjC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;KAC7B;AAED,IAAA,MAAM,YAAY,GAAA;AAChB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;KACnC;IAED,kBAAkB,GAAA;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC;KACpB;AACF;;;;;;;"}