antaeus.keycloak.react 2.0.0 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/index.js +65 -18
  2. package/dist/index.js.map +1 -1
  3. package/dist/index.mjs +65 -18
  4. package/dist/index.mjs.map +1 -1
  5. package/package.json +1 -1
package/dist/index.mjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/config/defaults.ts","../src/config/KeycloakConfig.ts","../src/hooks/useAuth.ts","../src/hooks/useTokenLifecycle.ts","../src/components/TokenLifecycleManager.tsx","../src/components/SessionMonitor.tsx","../src/config/presets.ts","../src/components/KeycloakProvider.tsx","../src/hooks/useRoles.ts","../src/hooks/useScopes.ts","../src/components/ProtectedRoute.tsx","../src/components/LoginButton.tsx","../src/components/LogoutButton.tsx","../src/components/UserProfile.tsx","../src/utils/deviceFlow.ts","../src/components/DeviceLogin.tsx","../src/hooks/useProtectedFetch.ts"],"names":["useOidcAuth","useState","useCallback","useEffect","jsxs","jsx","Fragment","OidcAuthProvider","useMemo","useRef","error"],"mappings":";;;;;;;;;;AAKO,IAAM,aAAA,GAAyC;AAAA,EACpD,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EAC5E,uBAAuB,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EACtF,KAAA,EAAO,qCAAA;AAAA,EAEP,QAAA,EAAU;AAAA,IACR,UAAA,EAAY,KAAA;AAAA,IACZ,cAAA,EAAgB,KAAA;AAAA,IAChB,WAAA,EAAa;AAAA,GACf;AAAA,EAEA,WAAA,EAAa;AAAA,IACX,OAAA,EAAS,IAAA;AAAA,IACT,mBACE,OAAO,MAAA,KAAW,cACd,MAAA,CAAO,QAAA,CAAS,SAAS,oBAAA,GACzB,oBAAA;AAAA,IACN,gBAAA,EAAkB,GAAA;AAAA;AAAA,IAClB,eAAA,EAAiB,MAAA;AAAA;AAAA,IACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,IACzB,oBAAA,EAAsB,KAAA;AAAA,IACtB,cAAA,EAAgB;AAAA,GAClB;AAAA,EAEA,QAAA,EAAU;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,mBAAA,EAAqB,MAAA;AAAA,IACrB,YAAA,EAAc,IAAA;AAAA,IACd,qBAAA,EAAuB;AAAA,GACzB;AAAA,EAEA,QAAQ;AACV;;;AC9BO,IAAM,wBAAN,MAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjC,OAAO,MAAM,UAAA,EAAiD;AAE5D,IAAA,IAAA,CAAK,SAAS,UAAU,CAAA;AAGxB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,iBAAA,CAAkB,UAAU,CAAA;AAGhD,IAAA,MAAM,YAAA,GAAoC;AAAA,MACxC,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,WAAW,MAAA,CAAO,QAAA;AAAA,MAClB,cAAc,MAAA,CAAO,WAAA;AAAA,MACrB,0BAA0B,MAAA,CAAO,qBAAA;AAAA,MACjC,aAAA,EAAe,OAAO,QAAA,CAAU,YAAA;AAAA,MAChC,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,oBAAA,EAAsB,OAAO,WAAA,CAAa,OAAA;AAAA,MAC1C,YAAA,EAAc,OAAO,QAAA,CAAU,YAAA;AAAA,MAC/B,mBAAA,EAAqB,OAAO,WAAA,CAAa;AAAA,KAC3C;AAEA,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,SAAS,MAAA,EAA8B;AACpD,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,IAClD;AAEA,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,MAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,IACjD;AAGA,IAAA,IAAI;AACF,MAAA,IAAI,GAAA,CAAI,OAAO,SAAS,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,IAC1D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,kBAAkB,MAAA,EAAkD;AACjF,IAAA,OAAO;AAAA,MACL,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,aAAA,CAAc,WAAA;AAAA,MACjD,qBAAA,EACE,MAAA,CAAO,qBAAA,IAAyB,aAAA,CAAc,qBAAA;AAAA,MAChD,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,MACrC,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,WAAA,EAAa;AAAA,QACX,GAAG,aAAA,CAAc,WAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,GAAG,aAAA,CAAc,MAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA;AACZ,KACF;AAAA,EACF;AACF;AAOO,SAAS,gBAAA,GAA4C;AAE1D,EAAA,IAAI,OAAO,gBAAgB,WAAA,EAAa;AACtC,IAAA,OAAO,EAAC;AAAA,EACV;AAGA,EAAA,MAAM,MAAO,MAAA,CAAA,IAAA,CAAoB,GAAA;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,GAAA,CAAI,uBAAA;AAAA,IACf,UAAU,GAAA,CAAI,uBAAA;AAAA,IACd,QAAA,EAAU;AAAA,MACR,UAAA,EAAY,IAAI,uBAAA,KAA4B,MAAA;AAAA,MAC5C,cAAA,EAAgB,IAAI,2BAAA,KAAgC;AAAA;AACtD,GACF;AACF;ACxEO,IAAM,OAAA,GAAUA;;;ACWvB,IAAM,kBAAA,GAAqB,uBAAA;AAgCpB,SAAS,kBACd,OAAA,EACyB;AACzB,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,YAAA,EAAc,eAAe,CAAA,GAAI,SAAS,KAAK,CAAA;AACtD,EAAA,MAAM,CAAC,qBAAA,EAAuB,wBAAwB,CAAA,GAAI,SAAS,KAAK,CAAA;AACxE,EAAA,MAAM,mBAAA,GAAsB,OAAO,KAAK,CAAA;AAExC,EAAA,MAAM,GAAA,GAAM,WAAA;AAAA,IACV,CAAC,YAAoB,IAAA,KAAgB;AACnC,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,OAAA,EAAS,GAAG,IAAI,CAAA;AAAA,MAClD;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAKA,EAAA,MAAM,aAAA,GAAgB,YAAY,MAAc;AAC9C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,IAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AACxB,IAAA,OAAO,CAAA,EAAG,kBAAkB,CAAA,EAAG,SAAS,IAAI,QAAQ,CAAA,CAAA;AAAA,EACtD,GAAG,CAAC,MAAA,CAAO,SAAA,EAAW,MAAA,CAAO,QAAQ,CAAC,CAAA;AAKtC,EAAA,MAAM,mBAAA,GAAsB,YAAY,MAAM;AAC5C,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,QAAA,EAAU,CAAA;AACxC,MAAA,GAAA,CAAI,4BAA4B,IAAI,IAAA,CAAK,GAAG,CAAA,CAAE,aAAa,CAAA;AAAA,IAC7D;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,GAAG,CAAC,CAAA;AAKvB,EAAA,MAAM,yBAAA,GAA4B,YAAY,MAAe;AAC3D,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AAGxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE9C,IAAA,IAAI,CAAC,aAAA,EAAe;AAElB,MAAA,mBAAA,EAAoB;AACpB,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,QAAA,CAAS,aAAA,EAAe,EAAE,CAAA;AACjD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,cAAA,GAAA,CAAkB,MAAM,cAAA,IAAkB,GAAA;AAEhD,IAAA,GAAA,CAAI,+BAAA,EAAiC;AAAA,MACnC,UAAA,EAAY,IAAI,IAAA,CAAK,cAAc,EAAE,WAAA,EAAY;AAAA,MACjD,cAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAW,cAAA,IAAkB;AAAA,KAC9B,CAAA;AAED,IAAA,OAAO,cAAA,IAAkB,WAAA;AAAA,EAC3B,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,yBAAyB,aAAA,EAAe,GAAA,EAAK,mBAAmB,CAAC,CAAA;AAKzF,EAAA,MAAM,YAAA,GAAe,YAAY,YAA2B;AAC1D,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,2BAA0B,EAAG;AAC/B,MAAA,GAAA,CAAI,qDAAqD,CAAA;AACzD,MAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,MAAA,qBAAA,IAAwB;AACxB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,eAAA,CAAgB,IAAI,CAAA;AACpB,MAAA,cAAA,IAAiB;AACjB,MAAA,GAAA,CAAI,wBAAwB,CAAA;AAE5B,MAAA,MAAM,KAAK,YAAA,EAAa;AAExB,MAAA,GAAA,CAAI,0BAA0B,CAAA;AAC9B,MAAA,gBAAA,IAAmB;AAAA,IACrB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,GAAA,GAAM,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAA;AACpE,MAAA,GAAA,CAAI,uBAAA,EAAyB,IAAI,OAAO,CAAA;AACxC,MAAA,cAAA,GAAiB,GAAG,CAAA;AACpB,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,eAAA,CAAgB,KAAK,CAAA;AAAA,IACvB;AAAA,EACF,CAAA,EAAG;AAAA,IACD,YAAA;AAAA,IACA,IAAA;AAAA,IACA,yBAAA;AAAA,IACA,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,qBAAA,GAAwB,YAAY,YAA8B;AACtE,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AACd,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,IAAI,2BAA0B,EAAG;AAC/B,MAAA,GAAA,CAAI,qCAAqC,CAAA;AACzC,MAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,MAAA,qBAAA,IAAwB;AAGxB,MAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,MAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAC3B,MAAA,MAAM,KAAK,UAAA,EAAW;AAEtB,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA;AAC5B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,GAAA,CAAI,gDAAgD,CAAA;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,WAAA,EAAa,gBAAA,IAAoB,GAAA;AAC1D,IAAA,MAAM,kBAAkB,SAAA,GAAY,GAAA;AAEpC,IAAA,GAAA,CAAI,yBAAA,EAA2B;AAAA,MAC7B,WAAW,IAAI,IAAA,CAAK,SAAA,GAAY,GAAI,EAAE,WAAA,EAAY;AAAA,MAClD,KAAK,IAAI,IAAA,CAAK,GAAA,GAAM,GAAI,EAAE,WAAA,EAAY;AAAA,MACtC,eAAA;AAAA,MACA,SAAA;AAAA,MACA,cAAc,eAAA,IAAmB;AAAA,KAClC,CAAA;AAGD,IAAA,IAAI,mBAAmB,SAAA,EAAW;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,EAAa;AACnB,QAAA,OAAO,IAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,6BAA6B,KAAK,CAAA;AACtC,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,2CAA2C,CAAA;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,gBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,WAAA,EAAa,eAAA,IAAmB,MAAA;AACxD,IAAA,MAAM,oBAAA,GAAuB,QAAA,KAAa,SAAA,IAAa,QAAA,KAAa,MAAA;AAEpE,IAAA,IAAI,CAAC,oBAAA,IAAwB,mBAAA,CAAoB,OAAA,EAAS;AACxD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,SAAA,EAAW;AAC3C,MAAA;AAAA,IACF;AAEA,IAAA,mBAAA,CAAoB,OAAA,GAAU,IAAA;AAC9B,IAAA,GAAA,CAAI,8CAA8C,QAAQ,CAAA;AAG1D,IAAA,qBAAA,EAAsB,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACvC,MAAA,GAAA,CAAI,+BAA+B,KAAK,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH,CAAA,EAAG;AAAA,IACD,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,OAAO,WAAA,EAAa,eAAA;AAAA,IACpB,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,IAAA,CAAK,IAAA,IAAQ,CAAC,IAAA,CAAK,SAAA,EAAW;AAChC,MAAA,mBAAA,EAAoB;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,EAAW,mBAAmB,CAAC,CAAA;AAKnD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,SAAA,EAAW;AAC3C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AACxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,UAAA,GAAa,YAAY,MAAM;AACnC,MAAA,IAAI,2BAA0B,EAAG;AAC/B,QAAA,GAAA,CAAI,6CAA6C,CAAA;AACjD,QAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,QAAA,qBAAA,IAAwB;AAGxB,QAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,QAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAC3B,QAAA,IAAA,CAAK,UAAA,EAAW;AAAA,MAClB;AAAA,IACF,CAAA,EAAG,CAAA,GAAI,EAAA,GAAK,GAAI,CAAA;AAEhB,IAAA,OAAO,MAAM,cAAc,UAAU,CAAA;AAAA,EACvC,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,uBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,OAAO;AAAA,IACL,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACF;AACF;ACxUO,IAAM,wBAA8D,CAAC;AAAA,EAC1E,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA,GAAQ;AACV,CAAA,KAAM;AACJ,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIC,SAAS,KAAK,CAAA;AAEpD,EAAA,MAAM,kBAAA,GAAqBC,YAAY,MAAM;AAC3C,IAAA,IAAI,MAAA,CAAO,aAAa,oBAAA,EAAsB;AAC5C,MAAA,cAAA,CAAe,IAAI,CAAA;AAAA,IACrB;AAAA,EACF,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAE7C,EAAA,MAAM,oBAAA,GAAuBA,YAAY,MAAM;AAC7C,IAAA,cAAA,CAAe,KAAK,CAAA;AAAA,EACtB,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,kBAAA,GAAqBA,WAAAA,CAAY,CAAC,KAAA,KAAiB;AACvD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AAAA,IACtE;AACA,IAAA,MAAA,CAAO,MAAA,EAAQ,qBAAqB,KAAK,CAAA;AAAA,EAC3C,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,yBAAA,GAA4BA,YAAY,MAAM;AAClD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAK,6DAA6D,CAAA;AAAA,IAC5E;AACA,IAAA,MAAA,CAAO,QAAQ,cAAA,IAAiB;AAAA,EAClC,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,EAAE,YAAA,EAAc,qBAAA,EAAsB,GAAI,iBAAA,CAAkB;AAAA,IAChE,MAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAA,EAAgB,kBAAA;AAAA,IAChB,gBAAA,EAAkB,oBAAA;AAAA,IAClB,cAAA,EAAgB,kBAAA;AAAA,IAChB,qBAAA,EAAuB;AAAA,GACxB,CAAA;AAGD,EAAA,IAAI,qBAAA,EAAuB;AACzB,IAAA,uBACE,GAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB,SAAA;AAAA,UACjB,OAAA,EAAS,MAAA;AAAA,UACT,SAAA,EAAW;AAAA,SACb;AAAA,QAEA,QAAA,kBAAA,IAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,KAAA,EAAO;AAAA,cACL,eAAA,EAAiB,OAAA;AAAA,cACjB,OAAA,EAAS,MAAA;AAAA,cACT,YAAA,EAAc,KAAA;AAAA,cACd,SAAA,EAAW,2BAAA;AAAA,cACX,QAAA,EAAU;AAAA,aACZ;AAAA,YAEA,QAAA,EAAA;AAAA,8BAAA,GAAA,CAAC,IAAA,EAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,cAAc,KAAA,EAAO,MAAA,IAAU,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,8BACnE,GAAA,CAAC,OAAE,KAAA,EAAO,EAAE,QAAQ,YAAA,EAAc,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,gFAAA,EAEnD,CAAA;AAAA,8BACA,GAAA;AAAA,gBAAC,QAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,kBACtC,KAAA,EAAO;AAAA,oBACL,OAAA,EAAS,WAAA;AAAA,oBACT,eAAA,EAAiB,SAAA;AAAA,oBACjB,KAAA,EAAO,OAAA;AAAA,oBACP,MAAA,EAAQ,MAAA;AAAA,oBACR,YAAA,EAAc,KAAA;AAAA,oBACd,QAAA,EAAU,MAAA;AAAA,oBACV,MAAA,EAAQ,SAAA;AAAA,oBACR,UAAA,EAAY;AAAA,mBACd;AAAA,kBACD,QAAA,EAAA;AAAA;AAAA;AAED;AAAA;AAAA;AACF;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,IAAI,eAAe,YAAA,EAAc;AAC/B,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,WAAA,EAAa,cAAA,IAAkB,uBAAA;AAEtD,IAAA,uBACE,IAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB;AAAA,SACnB;AAAA,QAEA,QAAA,EAAA;AAAA,0BAAA,IAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,KAAA,EAAO;AAAA,gBACL,OAAA,EAAS,MAAA;AAAA,gBACT,aAAA,EAAe,QAAA;AAAA,gBACf,UAAA,EAAY,QAAA;AAAA,gBACZ,GAAA,EAAK;AAAA,eACP;AAAA,cAEA,QAAA,EAAA;AAAA,gCAAA,GAAA;AAAA,kBAAC,KAAA;AAAA,kBAAA;AAAA,oBACC,KAAA,EAAO;AAAA,sBACL,KAAA,EAAO,MAAA;AAAA,sBACP,MAAA,EAAQ,MAAA;AAAA,sBACR,MAAA,EAAQ,mBAAA;AAAA,sBACR,SAAA,EAAW,mBAAA;AAAA,sBACX,YAAA,EAAc,KAAA;AAAA,sBACd,SAAA,EAAW;AAAA;AACb;AAAA,iBACF;AAAA,gCACA,GAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,EAAI,QAAA,EAAA,OAAA,EAAQ;AAAA;AAAA;AAAA,WACrE;AAAA,8BACC,OAAA,EAAA,EACE,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,CAAA,EAMH;AAAA;AAAA;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,uCAAU,QAAA,EAAS,CAAA;AACrB;ACvEO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA,GAAW,WAAA;AAAA,EACX,gBAAA,GAAmB,GAAA;AAAA;AAAA,EACnB,iBAAA,GAAoB,EAAA;AAAA;AAAA,EACpB,eAAA,GAAkB,IAAA;AAAA,EAClB,WAAA,GAAc,IAAA;AAAA,EACd,cAAA,GAAiB,KAAA;AAAA,EACjB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAID,SAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,SAAS,cAAc,CAAA;AACzD,EAAA,MAAM,CAAC,gBAAA,EAAkB,mBAAmB,CAAA,GAAIA,SAAS,KAAK,CAAA;AAC9D,EAAA,MAAM,CAAC,iBAAA,EAAmB,oBAAoB,CAAA,GAAIA,SAAS,KAAK,CAAA;AAGhE,EAAAE,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,IAAA,CAAK,MAAM,UAAA,EAAY;AACnD,MAAA,gBAAA,CAAiB,IAAI,CAAA;AACrB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,sBAAsB,MAAM;AAChC,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAM,UAAA;AAC7B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,MAAA,MAAM,YAAY,SAAA,GAAY,GAAA;AAE9B,MAAA,IAAI,aAAa,CAAA,EAAG;AAClB,QAAA,gBAAA,CAAiB,CAAC,CAAA;AAGlB,QAAA,SAAA,IAAY;AAGZ,QAAA,UAAA,CAAW,MAAM;AACf,UAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,QACvB,GAAG,GAAI,CAAA;AAAA,MACT,CAAA,MAAO;AACL,QAAA,gBAAA,CAAiB,SAAS,CAAA;AAG1B,QAAA,IAAI,SAAA,IAAa,iBAAA,IAAqB,CAAC,iBAAA,EAAmB;AACxD,UAAA,oBAAA,CAAqB,IAAI,CAAA;AACzB,UAAA,UAAA,GAAa,SAAS,CAAA;AAAA,QACxB,CAAA,MAAA,IAAW,SAAA,IAAa,gBAAA,IAAoB,CAAC,gBAAA,EAAkB;AAC7D,UAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,UAAA,SAAA,GAAY,SAAS,CAAA;AAAA,QACvB;AAAA,MACF;AAAA,IACF,CAAA;AAEA,IAAA,mBAAA,EAAoB;AACpB,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,mBAAA,EAAqB,GAAI,CAAA;AAEtD,IAAA,OAAO,MAAM,cAAc,QAAQ,CAAA;AAAA,EACrC,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,aAAA,IAAiB,gBAAgB,gBAAA,EAAkB;AACrD,MAAA,mBAAA,CAAoB,KAAK,CAAA;AACzB,MAAA,oBAAA,CAAqB,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAgB,CAAC,CAAA;AAGpC,EAAA,MAAM,UAAA,GAAaD,WAAAA,CAAY,CAAC,OAAA,KAA4B;AAC1D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,cAAA,GAAiBA,YAAY,MAAc;AAC/C,IAAA,IAAI,CAAC,eAAe,OAAO,QAAA;AAC3B,IAAA,IAAI,aAAA,IAAiB,mBAAmB,OAAO,UAAA;AAC/C,IAAA,IAAI,aAAA,IAAiB,kBAAkB,OAAO,SAAA;AAC9C,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAA,EAAkB,iBAAiB,CAAC,CAAA;AAGvD,EAAA,MAAM,WAAA,GAAcA,YAAY,MAAc;AAC5C,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,IAAA,CAAK,IAAA,EAAM,YAAY,OAAO,GAAA;AACrD,IAAA,OAAQ,aAAA,GAAgB,IAAA,CAAK,IAAA,CAAK,UAAA,GAAc,GAAA;AAAA,EAClD,CAAA,EAAG,CAAC,aAAA,EAAe,IAAA,CAAK,IAAI,CAAC,CAAA;AAG7B,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,aAAA,KAAkB,IAAA,EAAM;AACnD,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAA,GAAY,oBAAA;AAClB,EAAA,MAAM,aAAA,GAAgB,uBAAuB,QAAQ,CAAA,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,CAAA,oBAAA,EAAuB,cAAA,EAAgB,CAAA,CAAA;AAC3D,EAAA,MAAM,cAAA,GAAiB,YAAY,+BAAA,GAAkC,EAAA;AACrE,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAEnG,EAAA,MAAM,WAAW,WAAA,EAAY;AAE7B,EAAA,uBACEE,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,SAAS,KAAA,EACtB,QAAA,EAAA;AAAA,IAAA,WAAA,oBACCC,GAAAA;AAAA,MAAC,QAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,4BAAA;AAAA,QACV,OAAA,EAAS,MAAM,YAAA,CAAa,CAAC,SAAS,CAAA;AAAA,QACtC,YAAA,EAAY,YAAY,wBAAA,GAA2B,0BAAA;AAAA,QACnD,KAAA,EAAO,YAAY,QAAA,GAAW,UAAA;AAAA,QAE7B,sBAAY,QAAA,GAAM;AAAA;AAAA,KACrB;AAAA,IAGD,CAAC,SAAA,oBACAD,IAAAA,CAAAE,UAAA,EACE,QAAA,EAAA;AAAA,sBAAAF,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EACb,QAAA,EAAA;AAAA,wBAAAC,IAAC,MAAA,EAAA,EAAK,SAAA,EAAU,6BACb,QAAA,EAAA,aAAA,KAAkB,CAAA,GAAI,oBAAoB,qBAAA,EAC7C,CAAA;AAAA,wBACAA,GAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,0BAAA,EACb,QAAA,EAAA,UAAA,CAAW,aAAa,CAAA,EAC3B;AAAA,OAAA,EACF,CAAA;AAAA,MAEC,mCACCA,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,oCACb,QAAA,kBAAAA,GAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,mCAAA;AAAA,UACV,KAAA,EAAO,EAAE,KAAA,EAAO,CAAA,EAAG,QAAQ,CAAA,CAAA,CAAA,EAAI;AAAA,UAC/B,IAAA,EAAK,aAAA;AAAA,UACL,eAAA,EAAe,QAAA;AAAA,UACf,eAAA,EAAe,CAAA;AAAA,UACf,eAAA,EAAe;AAAA;AAAA,OACjB,EACF;AAAA,KAAA,EAEJ;AAAA,GAAA,EAEJ,CAAA;AAEJ;;;ACrPO,IAAM,cAAA,GAAgE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAa3E,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,SAAA;AAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,eAAA,EAAiB;AAAA,IACf,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,KAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,cAAA,EAAgB;AAAA,IACd,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,WAAA,EAAa;AAAA,IACX,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,CAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB;AAEJ;AAaO,SAAS,gBAAgB,MAAA,EAA+C;AAC7E,EAAA,OAAO,eAAe,MAAM,CAAA;AAC9B;AAqBO,SAAS,eAAA,CACd,QACA,YAAA,EACyB;AACzB,EAAA,MAAM,YAAA,GAAe,gBAAgB,MAAM,CAAA;AAE3C,EAAA,OAAO;AAAA,IACL,GAAG,YAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,YAAA,CAAa,WAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,YAAA,CAAa,MAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AACF;AC7KA,SAAS,aAAa,KAAA,EAAwE;AAC5F,EAAA,OAAO,WAAA,IAAe,SAAS,UAAA,IAAc,KAAA;AAC/C;AAuGO,IAAM,gBAAA,GAAoD,CAAC,KAAA,KAAU;AAC1E,EAAA,MAAM,EAAE,QAAA,EAAU,KAAA,GAAQ,KAAA,EAAM,GAAI,KAAA;AAGpC,EAAA,MAAM,SAAyB,YAAA,CAAa,KAAK,IAC7C,eAAA,CAAgB,KAAK,IACrB,KAAA,CAAM,MAAA;AAGV,EAAA,MAAM,UAAA,GAAa,qBAAA,CAAsB,KAAA,CAAM,MAAM,CAAA;AAGrD,EAAA,MAAM,GAAA,GAAMH,WAAAA;AAAA,IACV,CAAC,KAAA,EAAkC,OAAA,EAAA,GAAoB,IAAA,KAAgB;AACrE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAM,MAAA,GAAS,oBAAA;AACf,QAAA,QAAQ,KAAA;AAAO,UACb,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACpC,YAAA;AAAA,UACF,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACrC,YAAA;AAAA,UACF,KAAK,OAAA;AACH,YAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACtC,YAAA;AAAA;AACJ,MACF;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,gBAAA,GAAmBA,WAAAA;AAAA,IACvB,CAAC,KAAA,KAA6B;AAC5B,MAAA,GAAA,CAAI,QAAQ,oBAAoB,CAAA;AAGhC,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA,CAAO,MAAA,EAAQ,UAAU,KAAa,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG;AAAA,GACrB;AAEA,EAAA,MAAM,iBAAA,GAAoBA,YAAY,MAAY;AAChD,IAAA,GAAA,CAAI,QAAQ,qBAAqB,CAAA;AAGjC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,IAAA,MAAA,CAAO,QAAQ,QAAA,IAAW;AAAA,EAC5B,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG,CAAC,CAAA;AAEvB,EAAA,MAAM,YAAA,GAAeA,YAAY,MAAY;AAC3C,IAAA,GAAA,CAAI,QAAQ,4DAA4D,CAAA;AAAA,EAC1E,CAAA,EAAG,CAAC,GAAG,CAAC,CAAA;AAKR,EAAA,MAAM,kBAAA,GAAqB,MAAA,CAAO,QAAA,EAAU,cAAA,KAAmB,KAAA;AAE/D,EAAA,uBACEG,GAAAA;AAAA,IAACE,YAAA;AAAA,IAAA;AAAA,MACE,GAAG,UAAA;AAAA,MACJ,gBAAA;AAAA,MACA,iBAAA;AAAA,MACA,YAAA;AAAA,MAEA,QAAA,kBAAAH,IAAAA,CAAC,qBAAA,EAAA,EAAsB,MAAA,EAAgB,KAAA,EAEpC,QAAA,EAAA;AAAA,QAAA,kBAAA,oBAAsBC,IAAC,cAAA,EAAA,EAAe,CAAA;AAAA,QAGtC;AAAA,OAAA,EACH;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,gBAAgB,KAAA,EAAwD;AAC/E,EAAA,MAAM,EAAE,WAAW,QAAA,EAAU,MAAA,GAAS,WAAW,MAAA,EAAQ,SAAA,GAAY,EAAC,EAAE,GAAI,KAAA;AAG5E,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,MAAA,EAAQ,SAAS,CAAA;AAGtD,EAAA,MAAM,UAAA,GAA6B;AAAA,IACjC,GAAG,aAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,SAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA,EAAa,aAAa,WAAA,KAAgB,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACzG,qBAAA,EAAuB,aAAa,qBAAA,KAA0B,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA;AAAA,GAC/H;AAEA,EAAA,OAAO,UAAA;AACT;ACtNO,SAAS,QAAA,GAA2B;AACzC,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,MAAM,KAAA,GAAQ,QAAkB,MAAM;AACpC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,MAAA,OAAO,EAAC;AAAA,IACV;AAGA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,YAAA;AACtC,IAAA,OAAO,WAAA,EAAa,SAAS,EAAC;AAAA,EAChC,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,OAAA,GAAU,OAAA;AAAA,IACd,MAAM,CAAC,IAAA,KAA0B;AAC/B,MAAA,OAAO,KAAA,CAAM,SAAS,IAAI,CAAA;AAAA,IAC5B,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,UAAA,GAAa,OAAA;AAAA,IACjB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,IAAA,CAAK,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC1D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,WAAA,GAAc,OAAA;AAAA,IAClB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,KAAA,CAAM,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC3D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,cAAA,GAAiB,OAAA;AAAA,IACrB,MACE,CAAC,QAAA,KAA+B;AAC9B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,QAAA,OAAO,EAAC;AAAA,MACV;AAGA,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,eAAA;AAIzC,MAAA,OAAO,cAAA,GAAiB,QAAQ,CAAA,EAAG,KAAA,IAAS,EAAC;AAAA,IAC/C,CAAA;AAAA,IACF,CAAC,KAAK,IAAI;AAAA,GACZ;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACjEO,SAAS,SAAA,GAA6B;AAC3C,EAAA,MAAM,OAAO,OAAA,EAAQ;AAIrB,EAAA,MAAM,MAAA,GAASG,QAAkB,MAAM;AACrC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,KAAA,SAAc,EAAC;AAG/B,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAAA,EAC5D,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,QAAA,GAAWA,OAAAA;AAAA,IACf,MAAM,CAAC,KAAA,KAA2B;AAChC,MAAA,OAAO,MAAA,CAAO,SAAS,KAAK,CAAA;AAAA,IAC9B,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,WAAA,GAAcA,OAAAA;AAAA,IAClB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,IAAA,CAAK,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC9D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,YAAA,GAAeA,OAAAA;AAAA,IACnB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,KAAA,CAAM,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC/D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACwFO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA;AAAA,EACA,gBAAgB,EAAC;AAAA,EACjB,eAAA,GAAkB,KAAA;AAAA,EAClB,iBAAiB,EAAC;AAAA,EAClB,gBAAA,GAAmB,KAAA;AAAA,EACnB,MAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,UAAA,EAAY,WAAA,EAAY,GAAI,QAAA,EAAS;AAC7C,EAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAa,GAAI,SAAA,EAAU;AAChD,EAAA,MAAM,WAAW,WAAA,EAAY;AAG7B,EAAA,MAAM,eAAA,GAAkB,CAAC,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,eAAA;AAGhD,EAAA,MAAM,YAAA,GAAe,MAAA,IAAU,IAAA,CAAK,IAAA,GAChC,MAAA,CAAO,KAAK,IAAA,EAAM,EAAE,QAAA,EAAU,CAAA,GAC9B,IAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,aAAA,CAAc,MAAA,GAAS,CAAA,GACrC,eAAA,GAAkB,YAAY,aAAa,CAAA,GAAI,UAAA,CAAW,aAAa,CAAA,GACxE,IAAA;AAGJ,EAAA,MAAM,WAAA,GAAc,cAAA,CAAe,MAAA,GAAS,CAAA,GACvC,gBAAA,GAAmB,aAAa,cAAc,CAAA,GAAI,WAAA,CAAY,cAAc,CAAA,GAC7E,IAAA;AAGJ,EAAA,MAAM,kBAAA,GACJ,CAAC,eAAA,GAAkB,mBAAA,GACnB,YAAA,KAAiB,KAAA,GAAQ,eAAA,GACzB,UAAA,KAAe,KAAA,GAAQ,oBAAA,GACvB,WAAA,KAAgB,KAAA,GAAQ,qBAAA,GACxB,IAAA;AAIF,EAAAL,UAAU,MAAM;AACd,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,cAAA,GAAiB,kBAAkB,CAAA;AAAA,IACrC;AAAA,EACF,CAAA,EAAG,CAAC,kBAAA,EAAoB,cAAc,CAAC,CAAA;AAGvC,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,IAAa,CAAC,KAAK,eAAA,EAAiB;AAC5C,MAAA,IAAA,CAAK,cAAA,CAAe;AAAA,QAClB,cAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,QAAA,CAAS,WAAW,QAAA,CAAS;AAAA,OACrE,CAAA;AAAA,IACH;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,eAAA,EAAiB,IAAA,EAAM,QAAA,CAAS,QAAA,EAAU,QAAA,CAAS,MAAM,CAAC,CAAA;AAGnF,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,uBAAOE,IAAAC,QAAAA,EAAA,EAAG,8CAAoBD,GAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,uBAAOA,IAAAC,QAAAA,EAAA,EAAG,8CAAoBD,GAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,uBAAOA,IAAAC,QAAAA,EAAA,EAAG,mDAAyBD,GAAAA,CAAC,gCAA6B,CAAA,EAAG,CAAA;AAAA,EACtE;AAGA,EAAA,uBAAOA,GAAAA,CAAAC,QAAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB;AAKA,IAAM,uBAAA,GAAoC,sBACxCF,IAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK;AAAA,KACP;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAC,GAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,mBAAA;AAAA,YACR,SAAA,EAAW,mBAAA;AAAA,YACX,YAAA,EAAc,KAAA;AAAA,YACd,KAAA,EAAO,MAAA;AAAA,YACP,MAAA,EAAQ,MAAA;AAAA,YACR,SAAA,EAAW;AAAA;AACb;AAAA,OACF;AAAA,sBACAA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,YAAA,EAAU,CAAA;AAAA,sBAClDA,IAAC,OAAA,EAAA,EAAO,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA,EAKN;AAAA;AAAA;AACJ,CAAA;AAMF,IAAM,4BAAA,GAAyC,sBAC7CD,IAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK,MAAA;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACb;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAC,GAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,QAAA,EAAU,MAAA;AAAA,YACV,KAAA,EAAO;AAAA,WACT;AAAA,UACD,QAAA,EAAA;AAAA;AAAA,OAED;AAAA,sBACAA,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,eAAA,EAAa,CAAA;AAAA,sBACtDA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,iDAAA,EAExC;AAAA;AAAA;AACF,CAAA;AClQK,IAAM,cAA0C,CAAC;AAAA,EACtD,QAAA,GAAW,OAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,SAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,YAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,YAAA,IAAe;AACf,IAAA,IAAA,CAAK,cAAA,EAAe;AAAA,EACtB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,2BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACED,IAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYC,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;ACpCO,IAAM,eAA4C,CAAC;AAAA,EACxD,QAAA,GAAW,QAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,WAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,aAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,aAAA,IAAgB;AAChB,IAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,EACvB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACED,IAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYC,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;AC1CO,IAAM,cAA0C,CAAC;AAAA,EACtD,SAAA,GAAY,EAAA;AAAA,EACZ,UAAA,GAAa,IAAA;AAAA,EACb,SAAA,GAAY,IAAA;AAAA,EACZ,SAAA,GAAY,KAAA;AAAA,EACZ,UAAA,GAAa,EAAA;AAAA,EACb,KAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,QAAA,EAAS;AAG3B,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,KAAK,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,CAAK,OAAA;AAC1B,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,IAAQ,OAAA,CAAQ,kBAAA,IAAsB,MAAA;AAC3D,EAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA;AACtB,EAAA,MAAM,QAAA,GAAW,YAAY,IAAI,CAAA;AAEjC,EAAA,MAAM,SAAA,GAAY,iBAAA;AAClB,EAAA,MAAM,cAAA,GAAiB,UAAU,4BAAA,GAA+B,EAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAG,SAAS,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,GAAG,IAAA,EAAK;AAEnE,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAA,EAAQ;AAAA,IACV;AAAA,EACF,CAAA;AAEA,EAAA,uBACED,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,OAAA;AAAA,MACX,KAAA;AAAA,MACA,OAAA,EAAS,WAAA;AAAA,MACT,IAAA,EAAM,UAAU,QAAA,GAAW,MAAA;AAAA,MAC3B,QAAA,EAAU,UAAU,CAAA,GAAI,MAAA;AAAA,MACxB,UAAA,EAAY,UAAU,CAAC,CAAA,KAAM,EAAE,GAAA,KAAQ,OAAA,IAAW,aAAY,GAAI,MAAA;AAAA,MAEjE,QAAA,EAAA;AAAA,QAAA,UAAA,oBACCC,GAAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,yBAAA;AAAA,YACV,KAAA,EAAO;AAAA,cACL,KAAA,EAAO,UAAA;AAAA,cACP,MAAA,EAAQ,UAAA;AAAA,cACR,UAAU,UAAA,GAAa;AAAA,aACzB;AAAA,YAEC,QAAA,EAAA;AAAA;AAAA,SACH;AAAA,wBAGFD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EACb,QAAA,EAAA;AAAA,0BAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EAAyB,QAAA,EAAA,IAAA,EAAK,CAAA;AAAA,UAE5C,aAAa,KAAA,oBACZA,IAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAA0B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,UAGhD,SAAA,IAAa,MAAM,MAAA,GAAS,CAAA,oBAC3BD,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAU,wBAAA,EACZ,QAAA,EAAA;AAAA,YAAA,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAI,CAAC,IAAA,qBACtBC,GAAAA,CAAC,MAAA,EAAA,EAAgB,SAAA,EAAU,6BAAA,EACxB,QAAA,EAAA,IAAA,EAAA,EADQ,IAEX,CACD,CAAA;AAAA,YACA,MAAM,MAAA,GAAS,CAAA,oBACdD,IAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,6BAAA,EAA8B,QAAA,EAAA;AAAA,cAAA,GAAA;AAAA,cAC1C,MAAM,MAAA,GAAS;AAAA,aAAA,EACnB;AAAA,WAAA,EAEJ;AAAA,SAAA,EAEJ;AAAA;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,YAAY,IAAA,EAAsB;AACzC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AAEnC,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,OAAO,MAAM,CAAC,CAAA,CAAE,UAAU,CAAA,EAAG,CAAC,EAAE,WAAA,EAAY;AAAA,EAC9C;AAEA,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,CAAC,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,CAAE,CAAC,CAAA,EAAG,WAAA,EAAY;AAChE;;;ACpGA,eAAsB,kBACpB,UAAA,EACsC;AACtC,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,8BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA;AAClB,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,gCAAgC,QAAA,CAAS,MAAM,IAAI,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,OACtF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAmCA,eAAsB,YAAA,CACpB,YACA,UAAA,EAC+B;AAC/B,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,0BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,EAAa,YAAY;AAAA,KACjD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAGjC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,SAAA,GAAY,IAAA;AAGlB,MAAA,IACE,SAAA,CAAU,KAAA,KAAU,uBAAA,IACpB,SAAA,CAAU,UAAU,WAAA,EACpB;AACA,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,SAAA,CAAU,iBAAA,IAAqB,SAAA,CAAU,KAAA,IAAS;AAAA,OACpD;AAAA,IACF;AAGA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,EACxC;AACF;AAgBA,eAAsB,aAAA,CACpB,YACA,WAAA,EACc;AACd,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,6BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,YAAA,EAAc,aAAa;AAAA,KACnD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AC9IO,IAAM,cAA0C,CAAC;AAAA,EACtD,UAAA;AAAA,EACA,UAAA,GAAa,GAAA;AAAA,EACb,eAAA,GAAkB,CAAA;AAAA,EAClB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIH,SAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,SAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIA,SAAS,IAAI,CAAA;AAC3C,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAIA,SAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,YAAA,GAAeQ,OAAsB,IAAI,CAAA;AAC/C,EAAA,MAAM,cAAA,GAAiBA,OAA2B,IAAI,CAAA;AAGtD,EAAAN,UAAU,MAAM;AACd,IAAA,MAAM,iBAAiB,YAAY;AACjC,MAAA,UAAA,CAAW,IAAI,CAAA;AACf,MAAA,QAAA,CAAS,IAAI,CAAA;AAEb,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,UAAU,CAAA;AACnD,QAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,QAAA,gBAAA,CAAiB,SAAS,UAAU,CAAA;AAAA,MACtC,SAAS,GAAA,EAAK;AACZ,QAAA,MAAMO,MAAAA,GAAQ,GAAA;AACd,QAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,QAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,MACjB,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,KAAK,CAAA;AAAA,MAClB;AAAA,IACF,CAAA;AAEA,IAAA,cAAA,EAAe;AAAA,EACjB,CAAA,EAAG,CAAC,UAAA,EAAY,OAAO,CAAC,CAAA;AAGxB,EAAAP,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,IAAc,aAAA,KAAkB,IAAA,EAAM;AAE3C,IAAA,MAAM,QAAA,GAAW,YAAY,MAAM;AACjC,MAAA,gBAAA,CAAiB,CAAC,IAAA,KAAS;AACzB,QAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,IAAQ,CAAA,EAAG;AAC9B,UAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,UAAA,QAAA,CAAS,mDAAmD,CAAA;AAC5D,UAAA,OAAO,CAAA;AAAA,QACT;AACA,QAAA,OAAO,IAAA,GAAO,CAAA;AAAA,MAChB,CAAC,CAAA;AAAA,IACH,GAAG,GAAI,CAAA;AAEP,IAAA,OAAO,MAAM,cAAc,QAAQ,CAAA;AAAA,EACrC,CAAA,EAAG,CAAC,UAAA,EAAY,aAAa,CAAC,CAAA;AAG9B,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,EAAY;AAGjB,IAAA,cAAA,CAAe,UAAW,IAAA,CAAa,WAAA;AAEvC,IAAA,MAAM,OAAO,YAAY;AACvB,MAAA,IAAI;AACF,QAAA,MAAM,aAAA,GAAgB,MAAM,YAAA,CAAa,UAAA,EAAY,WAAW,WAAW,CAAA;AAE3E,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AAGA,UAAA,MAAM,QAAA,GAAW,MAAM,aAAA,CAAc,UAAA,EAAY,cAAc,YAAY,CAAA;AAG3E,UAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK;AAAA,YACpB,QAAA,EAAU,cAAc,QAAA,IAAY,EAAA;AAAA,YACpC,cAAc,aAAA,CAAc,YAAA;AAAA,YAC5B,YAAY,aAAA,CAAc,UAAA;AAAA,YAC1B,OAAA,EAAS,QAAA;AAAA,YACT,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,KAAI,GAAI,GAAI,IAAI,aAAA,CAAc,UAAA;AAAA,YAC1D,OAAO,aAAA,CAAc,KAAA;AAAA,YACrB,eAAe,aAAA,CAAc;AAAA,WAC9B,CAAA;AAGD,UAAA,IAAI,eAAe,OAAA,EAAS;AAC1B,YAAA,MAAM,cAAA,CAAe,OAAA,CAAQ,SAAA,CAAU,IAAI,CAAA;AAAA,UAC7C;AAGA,UAAA,SAAA,GAAY,IAAI,CAAA;AAAA,QAClB;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAI,CAAE,GAAA,CAAc,OAAA,CAAQ,QAAA,CAAS,uBAAuB,CAAA,EAAG;AAC7D,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AACA,UAAA,MAAMO,MAAAA,GAAQ,GAAA;AACd,UAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,UAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,QACjB;AAAA,MACF;AAAA,IACF,CAAA;AAGA,IAAA,YAAA,CAAa,OAAA,GAAU,WAAA,CAAY,IAAA,EAAM,eAAA,GAAkB,GAAI,CAAA;AAG/D,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,MACpC;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,UAAA,EAAY,UAAA,EAAY,iBAAiB,SAAA,EAAW,OAAA,EAAS,IAAI,CAAC,CAAA;AAEtE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,uBACEN,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,yCAAA,EAA4C,SAAS,IAAI,KAAA,EACvE,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAAA,EAA2B,CAAA;AAAA,sBAC1CA,GAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,6BAAA,EAA2B;AAAA,KAAA,EAChC,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,uBACED,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,uCAAA,EAA0C,SAAS,IAAI,KAAA,EACrE,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EAA8B,QAAA,EAAA,cAAA,EAAE,CAAA;AAAA,sBAC/CA,GAAAA,CAAC,IAAA,EAAA,EAAG,QAAA,EAAA,OAAA,EAAK,CAAA;AAAA,sBACTA,GAAAA,CAAC,GAAA,EAAA,EAAG,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACVA,GAAAA;AAAA,QAAC,QAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,8BAAA;AAAA,UACV,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,UACvC,QAAA,EAAA;AAAA;AAAA;AAED,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAAA,GAAa,CAAC,OAAA,KAA4B;AAC9C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA;AAEA,EAAA,uBACED,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,gBAAA,EAAmB,SAAS,IAAI,KAAA,EAC9C,QAAA,EAAA;AAAA,oBAAAC,GAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,wBAAA,EAAyB,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,oBAEnDA,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,qBAAA,EACb,QAAA,kBAAAA,GAAAA,CAAC,SAAA,EAAA,EAAU,KAAA,EAAO,UAAA,CAAW,yBAAA,EAA2B,IAAA,EAAM,YAAY,CAAA,EAC5E,CAAA;AAAA,oBAEAD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,+BAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,OAAE,QAAA,EAAA,4CAAA,EAA0C,CAAA;AAAA,sBAC7CA,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,sBAAA,EAAwB,qBAAW,gBAAA,EAAiB,CAAA;AAAA,sBACpEA,GAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,sBAClBA,GAAAA,CAAC,QAAA,EAAA,EAAO,SAAA,EAAU,4BAAA,EAA8B,qBAAW,SAAA,EAAU;AAAA,KAAA,EACvE,CAAA;AAAA,IAEC,aAAA,KAAkB,QAAQ,aAAA,GAAgB,CAAA,oBACzCD,IAAAA,CAAC,GAAA,EAAA,EAAE,WAAU,yBAAA,EAA0B,QAAA,EAAA;AAAA,MAAA,kBAAA;AAAA,MACpB,WAAW,aAAa;AAAA,KAAA,EAC3C,CAAA;AAAA,oBAGFA,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,yBAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0DAAA,EAA2D,CAAA;AAAA,sBAC1EA,GAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,8BAAA,EAA4B;AAAA,KAAA,EACjC;AAAA,GAAA,EACF,CAAA;AAEJ;ACpJO,SAAS,iBAAA,CACd,OAAA,GAAoC,EAAC,EACZ;AACzB,EAAA,MAAM,OAAO,OAAA,EAAQ;AAErB,EAAA,MAAM;AAAA,IACJ,OAAA,GAAU,EAAA;AAAA,IACV,cAAA;AAAA,IACA,UAAA,GAAa,IAAA;AAAA,IACb,OAAA,EAAS,gBAAgB;AAAC,GAC5B,GAAI,OAAA;AAKJ,EAAA,MAAM,QAAA,GAAWH,WAAAA;AAAA,IACf,CAAC,GAAA,KAAwB;AAEvB,MAAA,IAAI,IAAI,UAAA,CAAW,SAAS,KAAK,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC3D,QAAA,OAAO,GAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAA,GAAO,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAC5D,MAAA,MAAM,OAAO,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA,GAAM,IAAI,GAAG,CAAA,CAAA;AAEhD,MAAA,OAAO,IAAA,GAAO,IAAA;AAAA,IAChB,CAAA;AAAA,IACA,CAAC,OAAO;AAAA,GACV;AAKA,EAAA,MAAM,aAAA,GAAgBA,YAAY,MAA8B;AAC9D,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,YAAA,EAAc;AAC5B,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA;AAAA,KACjD;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAKd,EAAA,MAAM,YAAA,GAAeA,WAAAA;AAAA,IACnB,CAAC,cAAA,KAA0C;AACzC,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,cAAc,CAAA;AAG1C,MAAA,MAAM,aAAa,aAAA,EAAc;AACjC,MAAA,IAAI,WAAW,aAAA,EAAe;AAC5B,QAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,UAAA,CAAW,aAAa,CAAA;AAAA,MACvD;AAGA,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AACtD,QAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,MACxB,CAAC,CAAA;AAED,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,eAAe,aAAa;AAAA,GAC/B;AAKA,EAAA,MAAM,cAAA,GAAiBA,WAAAA;AAAA,IACrB,OAAO,KAAa,IAAA,KAA0C;AAC5D,MAAA,MAAM,OAAA,GAAU,SAAS,GAAG,CAAA;AAC5B,MAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAE1C,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,QACpC,GAAG,IAAA;AAAA,QACH;AAAA,OACD,CAAA;AAGD,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,QAAA,cAAA,IAAiB;AAEjB,QAAA,IAAI,UAAA,IAAc,KAAK,IAAA,EAAM;AAE3B,UAAA,IAAI;AACF,YAAA,MAAM,KAAK,YAAA,EAAa;AAGxB,YAAA,MAAM,UAAA,GAAa,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAC7C,YAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,cACzC,GAAG,IAAA;AAAA,cACH,OAAA,EAAS;AAAA,aACV,CAAA;AAED,YAAA,OAAO,aAAA;AAAA,UACT,SAAS,KAAA,EAAO;AAEd,YAAA,OAAO,QAAA;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,QAAA,EAAU,YAAA,EAAc,cAAA,EAAgB,YAAY,IAAI;AAAA,GAC3D;AAKA,EAAA,MAAM,SAAA,GAAYA,WAAAA;AAAA,IAChB,OAAgB,KAAa,IAAA,KAAmC;AAC9D,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,GAAA,EAAK,IAAI,CAAA;AAE/C,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,QAAQ,QAAA,CAAS,MAAM,KAAK,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,SAC/D;AAAA,MACF;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,cAAc;AAAA,GACjB;AAEA,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA,EAAO,cAAA;AAAA,IACP,WAAW,IAAA,CAAK;AAAA,GAClB;AACF","file":"index.mjs","sourcesContent":["import type { KeycloakConfig } from './types';\n\n/**\n * Default configuration values for Keycloak integration\n */\nexport const defaultConfig: Partial<KeycloakConfig> = {\n redirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n postLogoutRedirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n scope: 'openid profile email offline_access',\n\n features: {\n deviceFlow: false,\n sessionMonitor: false,\n autoRefresh: true,\n },\n\n silentRenew: {\n enabled: true,\n silentRedirectUri:\n typeof window !== 'undefined'\n ? window.location.origin + '/silent-renew.html'\n : '/silent-renew.html',\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both', // Check on startup AND retry on 401\n maxRefreshTokenLifetime: 2592000, // 30 days in seconds\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n\n events: {},\n};\n","import type { UserManagerSettings } from 'oidc-client-ts';\nimport type { KeycloakConfig } from './types';\nimport { defaultConfig } from './defaults';\n\n/**\n * Configuration builder for Keycloak integration\n */\nexport class KeycloakConfigBuilder {\n /**\n * Builds OIDC client configuration from Keycloak config\n *\n * @param userConfig - User-provided Keycloak configuration\n * @returns OIDC client settings ready for react-oidc-context\n * @throws Error if required fields are missing or invalid\n */\n static build(userConfig: KeycloakConfig): UserManagerSettings {\n // Validate required fields\n this.validate(userConfig);\n\n // Merge with defaults\n const config = this.mergeWithDefaults(userConfig);\n\n // Build OIDC settings\n const oidcSettings: UserManagerSettings = {\n authority: config.authority,\n client_id: config.clientId,\n redirect_uri: config.redirectUri!,\n post_logout_redirect_uri: config.postLogoutRedirectUri!,\n response_type: config.advanced!.responseType!,\n scope: config.scope!,\n automaticSilentRenew: config.silentRenew!.enabled!,\n loadUserInfo: config.advanced!.loadUserInfo!,\n silent_redirect_uri: config.silentRenew!.silentRedirectUri!,\n };\n\n return oidcSettings;\n }\n\n /**\n * Validates required configuration fields\n *\n * @param config - Configuration to validate\n * @throws Error if validation fails\n */\n private static validate(config: KeycloakConfig): void {\n if (!config.authority) {\n throw new Error('Keycloak authority is required');\n }\n\n if (!config.clientId) {\n throw new Error('Keycloak clientId is required');\n }\n\n // Validate URL format\n try {\n new URL(config.authority);\n } catch {\n throw new Error('Keycloak authority must be a valid URL');\n }\n }\n\n /**\n * Merges user configuration with defaults\n *\n * @param config - User configuration\n * @returns Merged configuration with all defaults applied\n */\n private static mergeWithDefaults(config: KeycloakConfig): Required<KeycloakConfig> {\n return {\n authority: config.authority,\n clientId: config.clientId,\n redirectUri: config.redirectUri ?? defaultConfig.redirectUri!,\n postLogoutRedirectUri:\n config.postLogoutRedirectUri ?? defaultConfig.postLogoutRedirectUri!,\n scope: config.scope ?? defaultConfig.scope!,\n features: {\n ...defaultConfig.features,\n ...config.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...config.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...config.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...config.events,\n },\n } as Required<KeycloakConfig>;\n }\n}\n\n/**\n * Helper function to get configuration from environment variables\n *\n * @returns Partial Keycloak configuration from environment\n */\nexport function getConfigFromEnv(): Partial<KeycloakConfig> {\n // Check if running in browser with Vite\n if (typeof import.meta === 'undefined') {\n return {};\n }\n\n // Type-safe access to import.meta.env\n const env = (import.meta as any).env;\n if (!env) {\n return {};\n }\n\n return {\n authority: env.VITE_KEYCLOAK_AUTHORITY as string | undefined,\n clientId: env.VITE_KEYCLOAK_CLIENT_ID as string | undefined,\n features: {\n deviceFlow: env.VITE_ENABLE_DEVICE_FLOW === 'true',\n sessionMonitor: env.VITE_ENABLE_SESSION_MONITOR === 'true',\n },\n };\n}\n","import { useAuth as useOidcAuth } from 'react-oidc-context';\n\n/**\n * Main authentication hook for accessing Keycloak authentication state and methods\n *\n * This hook provides access to the current user, authentication state, and methods\n * for signing in and out. It must be used within a KeycloakProvider component.\n *\n * @returns Authentication state and methods\n *\n * @example\n * ```tsx\n * import { useAuth } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const auth = useAuth();\n *\n * if (auth.isLoading) {\n * return <div>Loading...</div>;\n * }\n *\n * if (!auth.isAuthenticated) {\n * return <button onClick={() => auth.signinRedirect()}>Login</button>;\n * }\n *\n * return (\n * <div>\n * <p>Welcome, {auth.user?.profile?.name}</p>\n * <button onClick={() => auth.signoutRedirect()}>Logout</button>\n * </div>\n * );\n * }\n * ```\n *\n * @example Role checking\n * ```tsx\n * function AdminPanel() {\n * const auth = useAuth();\n * const roles = auth.user?.profile?.realm_access?.roles || [];\n *\n * if (!roles.includes('admin')) {\n * return <div>Access denied</div>;\n * }\n *\n * return <div>Admin panel content</div>;\n * }\n * ```\n */\nexport const useAuth = useOidcAuth;\n\nexport type {\n /**\n * Authentication context returned by useAuth\n */\n AuthContextProps as UseAuthReturn,\n} from 'react-oidc-context';\n","import { useEffect, useState, useCallback, useRef } from 'react';\nimport { useAuth } from './useAuth';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface UseTokenLifecycleOptions {\n /**\n * Keycloak configuration for token lifecycle settings\n */\n config: KeycloakConfig;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n\n /**\n * Callback when token refresh starts\n */\n onRefreshStart?: () => void;\n\n /**\n * Callback when token refresh succeeds\n */\n onRefreshSuccess?: () => void;\n\n /**\n * Callback when token refresh fails\n */\n onRefreshError?: (error: Error) => void;\n\n /**\n * Callback when refresh token lifetime expires\n */\n onRefreshTokenExpired?: () => void;\n}\n\nexport interface UseTokenLifecycleReturn {\n /**\n * Whether token is being refreshed\n */\n isRefreshing: boolean;\n\n /**\n * Whether refresh token has exceeded max lifetime\n */\n isRefreshTokenExpired: boolean;\n\n /**\n * Manually trigger token refresh\n */\n refreshToken: () => Promise<void>;\n\n /**\n * Check if tokens need refresh and do it if needed\n */\n checkAndRefreshTokens: () => Promise<boolean>;\n}\n\nconst STORAGE_KEY_PREFIX = 'keycloak_first_login_';\n\n/**\n * Hook to manage token lifecycle including startup refresh and max lifetime tracking\n *\n * This hook provides proactive token management:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Provides manual refresh capabilities\n *\n * @param options - Configuration options\n * @returns Token lifecycle methods and state\n *\n * @example\n * ```tsx\n * import { useTokenLifecycle } from 'antaeus.keycloak.react';\n *\n * function App() {\n * const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n * config: myConfig,\n * onRefreshStart: () => console.log('Refreshing...'),\n * onRefreshSuccess: () => console.log('Refreshed!'),\n * onRefreshError: (error) => console.error('Failed:', error),\n * });\n *\n * if (isRefreshing) return <div>Loading...</div>;\n * if (isRefreshTokenExpired) return <div>Please sign in again</div>;\n *\n * return <YourApp />;\n * }\n * ```\n */\nexport function useTokenLifecycle(\n options: UseTokenLifecycleOptions\n): UseTokenLifecycleReturn {\n const {\n config,\n debug = false,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n } = options;\n\n const auth = useAuth();\n const [isRefreshing, setIsRefreshing] = useState(false);\n const [isRefreshTokenExpired, setIsRefreshTokenExpired] = useState(false);\n const hasCheckedOnStartup = useRef(false);\n\n const log = useCallback(\n (message: string, ...args: any[]) => {\n if (debug) {\n console.log('[TokenLifecycle]', message, ...args);\n }\n },\n [debug]\n );\n\n /**\n * Get the storage key for tracking first login time\n */\n const getStorageKey = useCallback((): string => {\n const authority = config.authority;\n const clientId = config.clientId;\n return `${STORAGE_KEY_PREFIX}${authority}_${clientId}`;\n }, [config.authority, config.clientId]);\n\n /**\n * Store the first login timestamp\n */\n const storeFirstLoginTime = useCallback(() => {\n const key = getStorageKey();\n const existingTime = localStorage.getItem(key);\n\n if (!existingTime) {\n const now = Date.now();\n localStorage.setItem(key, now.toString());\n log('Stored first login time:', new Date(now).toISOString());\n }\n }, [getStorageKey, log]);\n\n /**\n * Check if refresh token has exceeded max lifetime\n */\n const checkRefreshTokenLifetime = useCallback((): boolean => {\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n\n // If no max lifetime configured, never expire\n if (!maxLifetime || maxLifetime <= 0) {\n return false;\n }\n\n const key = getStorageKey();\n const firstLoginStr = localStorage.getItem(key);\n\n if (!firstLoginStr) {\n // No first login recorded, store current time\n storeFirstLoginTime();\n return false;\n }\n\n const firstLoginTime = parseInt(firstLoginStr, 10);\n const now = Date.now();\n const elapsedSeconds = (now - firstLoginTime) / 1000;\n\n log('Refresh token lifetime check:', {\n firstLogin: new Date(firstLoginTime).toISOString(),\n elapsedSeconds,\n maxLifetime,\n isExpired: elapsedSeconds >= maxLifetime,\n });\n\n return elapsedSeconds >= maxLifetime;\n }, [config.silentRenew?.maxRefreshTokenLifetime, getStorageKey, log, storeFirstLoginTime]);\n\n /**\n * Manually refresh tokens\n */\n const refreshToken = useCallback(async (): Promise<void> => {\n if (isRefreshing) {\n log('Refresh already in progress, skipping');\n return;\n }\n\n // Check if refresh token has exceeded max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime, cannot refresh');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n return;\n }\n\n try {\n setIsRefreshing(true);\n onRefreshStart?.();\n log('Starting token refresh');\n\n await auth.signinSilent();\n\n log('Token refresh successful');\n onRefreshSuccess?.();\n } catch (error) {\n const err = error instanceof Error ? error : new Error(String(error));\n log('Token refresh failed:', err.message);\n onRefreshError?.(err);\n throw err;\n } finally {\n setIsRefreshing(false);\n }\n }, [\n isRefreshing,\n auth,\n checkRefreshTokenLifetime,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n log,\n ]);\n\n /**\n * Check if tokens are expired or about to expire and refresh if needed\n */\n const checkAndRefreshTokens = useCallback(async (): Promise<boolean> => {\n if (!auth.user) {\n log('No user session, skipping token check');\n return false;\n }\n\n // Check refresh token max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n await auth.removeUser();\n\n return false;\n }\n\n const expiresAt = auth.user.expires_at;\n if (!expiresAt) {\n log('No expiration time found, skipping token check');\n return false;\n }\n\n const now = Math.floor(Date.now() / 1000);\n const threshold = config.silentRenew?.thresholdSeconds || 300;\n const timeUntilExpiry = expiresAt - now;\n\n log('Token expiration check:', {\n expiresAt: new Date(expiresAt * 1000).toISOString(),\n now: new Date(now * 1000).toISOString(),\n timeUntilExpiry,\n threshold,\n needsRefresh: timeUntilExpiry <= threshold,\n });\n\n // If token is expired or about to expire, refresh it\n if (timeUntilExpiry <= threshold) {\n try {\n await refreshToken();\n return true;\n } catch (error) {\n log('Failed to refresh tokens:', error);\n return false;\n }\n }\n\n log('Tokens are still valid, no refresh needed');\n return false;\n }, [\n auth,\n config.silentRenew?.thresholdSeconds,\n checkRefreshTokenLifetime,\n refreshToken,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n /**\n * Effect: Check and refresh tokens on startup if strategy includes 'startup'\n */\n useEffect(() => {\n const strategy = config.silentRenew?.refreshStrategy || 'both';\n const shouldCheckOnStartup = strategy === 'startup' || strategy === 'both';\n\n if (!shouldCheckOnStartup || hasCheckedOnStartup.current) {\n return;\n }\n\n if (!auth.isAuthenticated || auth.isLoading) {\n return;\n }\n\n hasCheckedOnStartup.current = true;\n log('Running startup token check with strategy:', strategy);\n\n // Run check asynchronously\n checkAndRefreshTokens().catch((error) => {\n log('Startup token check failed:', error);\n });\n }, [\n auth.isAuthenticated,\n auth.isLoading,\n config.silentRenew?.refreshStrategy,\n checkAndRefreshTokens,\n log,\n ]);\n\n /**\n * Effect: Store first login time when user logs in\n */\n useEffect(() => {\n if (auth.user && !auth.isLoading) {\n storeFirstLoginTime();\n }\n }, [auth.user, auth.isLoading, storeFirstLoginTime]);\n\n /**\n * Effect: Check refresh token lifetime periodically\n */\n useEffect(() => {\n if (!auth.isAuthenticated || auth.isLoading) {\n return;\n }\n\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n if (!maxLifetime || maxLifetime <= 0) {\n return;\n }\n\n // Check every 5 minutes\n const intervalId = setInterval(() => {\n if (checkRefreshTokenLifetime()) {\n log('Refresh token expired during periodic check');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n auth.removeUser();\n }\n }, 5 * 60 * 1000);\n\n return () => clearInterval(intervalId);\n }, [\n auth,\n config.silentRenew?.maxRefreshTokenLifetime,\n checkRefreshTokenLifetime,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n return {\n isRefreshing,\n isRefreshTokenExpired,\n refreshToken,\n checkAndRefreshTokens,\n };\n}\n","import React, { useState, useCallback } from 'react';\nimport { useTokenLifecycle } from '../hooks/useTokenLifecycle';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface TokenLifecycleManagerProps {\n /**\n * Keycloak configuration\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Component that manages token lifecycle including startup refresh and max lifetime tracking\n *\n * This component wraps your app and automatically:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Shows optional loading indicator during refresh\n *\n * @example\n * ```tsx\n * <TokenLifecycleManager config={config} debug={true}>\n * <YourApp />\n * </TokenLifecycleManager>\n * ```\n */\nexport const TokenLifecycleManager: React.FC<TokenLifecycleManagerProps> = ({\n config,\n children,\n debug = false,\n}) => {\n const [showLoading, setShowLoading] = useState(false);\n\n const handleRefreshStart = useCallback(() => {\n if (config.silentRenew?.showLoadingIndicator) {\n setShowLoading(true);\n }\n }, [config.silentRenew?.showLoadingIndicator]);\n\n const handleRefreshSuccess = useCallback(() => {\n setShowLoading(false);\n }, []);\n\n const handleRefreshError = useCallback((error: Error) => {\n setShowLoading(false);\n if (debug) {\n console.error('[TokenLifecycleManager] Token refresh failed:', error);\n }\n config.events?.onSilentRenewError?.(error);\n }, [config.events, debug]);\n\n const handleRefreshTokenExpired = useCallback(() => {\n setShowLoading(false);\n if (debug) {\n console.warn('[TokenLifecycleManager] Refresh token exceeded max lifetime');\n }\n config.events?.onTokenExpired?.();\n }, [config.events, debug]);\n\n const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n config,\n debug,\n onRefreshStart: handleRefreshStart,\n onRefreshSuccess: handleRefreshSuccess,\n onRefreshError: handleRefreshError,\n onRefreshTokenExpired: handleRefreshTokenExpired,\n });\n\n // If refresh token expired, show message and require re-authentication\n if (isRefreshTokenExpired) {\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n padding: '20px',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n backgroundColor: 'white',\n padding: '40px',\n borderRadius: '8px',\n boxShadow: '0 2px 8px rgba(0,0,0,0.1)',\n maxWidth: '400px',\n }}\n >\n <h2 style={{ margin: '0 0 16px 0', color: '#333' }}>Session Expired</h2>\n <p style={{ margin: '0 0 24px 0', color: '#666' }}>\n Your session has been inactive for too long. Please sign in again to continue.\n </p>\n <button\n onClick={() => window.location.reload()}\n style={{\n padding: '12px 24px',\n backgroundColor: '#007bff',\n color: 'white',\n border: 'none',\n borderRadius: '4px',\n fontSize: '16px',\n cursor: 'pointer',\n fontWeight: '500',\n }}\n >\n Sign In Again\n </button>\n </div>\n </div>\n );\n }\n\n // Show loading indicator during refresh if configured\n if (showLoading && isRefreshing) {\n const message = config.silentRenew?.loadingMessage || 'Refreshing session...';\n\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n }}\n >\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n gap: '16px',\n }}\n >\n <div\n style={{\n width: '40px',\n height: '40px',\n border: '4px solid #e0e0e0',\n borderTop: '4px solid #007bff',\n borderRadius: '50%',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ margin: 0, color: '#666', fontSize: '16px' }}>{message}</p>\n </div>\n <style>\n {`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}\n </style>\n </div>\n );\n }\n\n // Normal rendering\n return <>{children}</>;\n};\n","import React, { useEffect, useState, useCallback } from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface SessionMonitorProps {\n /**\n * Position on screen\n * @default 'top-right'\n */\n position?: 'top-left' | 'top-right' | 'bottom-left' | 'bottom-right';\n\n /**\n * Warning threshold in seconds (yellow state)\n * @default 300 (5 minutes)\n */\n warningThreshold?: number;\n\n /**\n * Critical threshold in seconds (red state)\n * @default 60 (1 minute)\n */\n criticalThreshold?: number;\n\n /**\n * Show progress bar\n * @default true\n */\n showProgressBar?: boolean;\n\n /**\n * Allow minimize/expand\n * @default true\n */\n minimizable?: boolean;\n\n /**\n * Start minimized\n * @default false\n */\n startMinimized?: boolean;\n\n /**\n * Custom CSS class names\n */\n className?: string;\n\n /**\n * Callback when warning threshold is reached\n */\n onWarning?: (secondsRemaining: number) => void;\n\n /**\n * Callback when critical threshold is reached\n */\n onCritical?: (secondsRemaining: number) => void;\n\n /**\n * Callback when session expires\n */\n onExpired?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Session monitoring component with countdown timer\n *\n * Displays the time remaining until the user's session expires. Shows visual\n * warnings when the session is about to expire and triggers callbacks for\n * custom handling.\n *\n * @example Basic usage\n * ```tsx\n * import { SessionMonitor } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <>\n * <SessionMonitor />\n * <YourApp />\n * </>\n * );\n * }\n * ```\n *\n * @example With custom thresholds\n * ```tsx\n * <SessionMonitor\n * warningThreshold={600} // 10 minutes\n * criticalThreshold={120} // 2 minutes\n * onWarning={(seconds) => {\n * console.log(`Session expiring in ${seconds} seconds`);\n * }}\n * />\n * ```\n *\n * @example Custom position and style\n * ```tsx\n * <SessionMonitor\n * position=\"bottom-left\"\n * showProgressBar={false}\n * minimizable={false}\n * />\n * ```\n */\nexport const SessionMonitor: React.FC<SessionMonitorProps> = ({\n position = 'top-right',\n warningThreshold = 300, // 5 minutes\n criticalThreshold = 60, // 1 minute\n showProgressBar = true,\n minimizable = true,\n startMinimized = false,\n className = '',\n onWarning,\n onCritical,\n onExpired,\n style,\n}) => {\n const auth = useAuth();\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const [minimized, setMinimized] = useState(startMinimized);\n const [warningTriggered, setWarningTriggered] = useState(false);\n const [criticalTriggered, setCriticalTriggered] = useState(false);\n\n // Update time remaining every second\n useEffect(() => {\n if (!auth.isAuthenticated || !auth.user?.expires_at) {\n setTimeRemaining(null);\n return;\n }\n\n const updateTimeRemaining = () => {\n const expiresAt = auth.user!.expires_at!;\n const now = Math.floor(Date.now() / 1000);\n const remaining = expiresAt - now;\n\n if (remaining <= 0) {\n setTimeRemaining(0);\n\n // Trigger expired callback\n onExpired?.();\n\n // Auto logout after 2 seconds\n setTimeout(() => {\n auth.signoutRedirect();\n }, 2000);\n } else {\n setTimeRemaining(remaining);\n\n // Trigger callbacks once\n if (remaining <= criticalThreshold && !criticalTriggered) {\n setCriticalTriggered(true);\n onCritical?.(remaining);\n } else if (remaining <= warningThreshold && !warningTriggered) {\n setWarningTriggered(true);\n onWarning?.(remaining);\n }\n }\n };\n\n updateTimeRemaining();\n const interval = setInterval(updateTimeRemaining, 1000);\n\n return () => clearInterval(interval);\n }, [\n auth,\n warningThreshold,\n criticalThreshold,\n warningTriggered,\n criticalTriggered,\n onWarning,\n onCritical,\n onExpired,\n ]);\n\n // Reset warning flags when thresholds change\n useEffect(() => {\n if (timeRemaining && timeRemaining > warningThreshold) {\n setWarningTriggered(false);\n setCriticalTriggered(false);\n }\n }, [timeRemaining, warningThreshold]);\n\n // Format time as MM:SS\n const formatTime = useCallback((seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n }, []);\n\n // Get status class based on time remaining\n const getStatusClass = useCallback((): string => {\n if (!timeRemaining) return 'normal';\n if (timeRemaining <= criticalThreshold) return 'critical';\n if (timeRemaining <= warningThreshold) return 'warning';\n return 'normal';\n }, [timeRemaining, warningThreshold, criticalThreshold]);\n\n // Calculate progress percentage\n const getProgress = useCallback((): number => {\n if (!timeRemaining || !auth.user?.expires_in) return 100;\n return (timeRemaining / auth.user.expires_in) * 100;\n }, [timeRemaining, auth.user]);\n\n // Don't render if not authenticated or no time info\n if (!auth.isAuthenticated || timeRemaining === null) {\n return null;\n }\n\n const baseClass = 'kc-session-monitor';\n const positionClass = `kc-session-monitor--${position}`;\n const statusClass = `kc-session-monitor--${getStatusClass()}`;\n const minimizedClass = minimized ? 'kc-session-monitor--minimized' : '';\n const classes = `${baseClass} ${positionClass} ${statusClass} ${minimizedClass} ${className}`.trim();\n\n const progress = getProgress();\n\n return (\n <div className={classes} style={style}>\n {minimizable && (\n <button\n className=\"kc-session-monitor__toggle\"\n onClick={() => setMinimized(!minimized)}\n aria-label={minimized ? 'Expand session monitor' : 'Minimize session monitor'}\n title={minimized ? 'Expand' : 'Minimize'}\n >\n {minimized ? '▲' : '▼'}\n </button>\n )}\n\n {!minimized && (\n <>\n <div className=\"kc-session-monitor__content\">\n <span className=\"kc-session-monitor__label\">\n {timeRemaining === 0 ? 'Session expired' : 'Session expires in:'}\n </span>\n <span className=\"kc-session-monitor__time\">\n {formatTime(timeRemaining)}\n </span>\n </div>\n\n {showProgressBar && (\n <div className=\"kc-session-monitor__progress-bar\">\n <div\n className=\"kc-session-monitor__progress-fill\"\n style={{ width: `${progress}%` }}\n role=\"progressbar\"\n aria-valuenow={progress}\n aria-valuemin={0}\n aria-valuemax={100}\n />\n </div>\n )}\n </>\n )}\n </div>\n );\n};\n","import type { KeycloakConfig } from './types';\n\n/**\n * Configuration preset types\n */\nexport type ConfigPreset = 'default' | 'mobile' | 'high-security' | 'long-running' | 'development';\n\n/**\n * Configuration presets for common use cases\n *\n * These presets provide optimized configurations for different application types\n * and security requirements. All presets can be further customized by overriding\n * specific properties.\n */\nexport const CONFIG_PRESETS: Record<ConfigPreset, Partial<KeycloakConfig>> = {\n /**\n * Default preset - Balanced configuration for most applications\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive token refresh on startup + reactive on 401\n * - Silent background token refresh\n * - Session monitoring enabled\n * - Auto token refresh enabled\n *\n * Best for: Most web applications, dashboards, internal tools\n */\n default: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Mobile/PWA preset - Optimized for mobile and progressive web apps\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive startup refresh (apps close frequently)\n * - Loading indicator during refresh (better UX for app reopening)\n * - Session monitoring enabled\n *\n * Best for: Mobile apps, PWAs, apps that frequently close/reopen\n */\n mobile: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'startup', // Focus on startup refresh\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: true, // Show loading for better UX\n loadingMessage: 'Restoring your session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * High Security preset - Strict security for sensitive applications\n *\n * Features:\n * - 24-hour forced re-authentication\n * - Proactive + reactive token refresh\n * - 10-minute refresh threshold (earlier refresh)\n * - Silent refresh (no UI hints about security measures)\n * - Session monitoring enabled\n *\n * Best for: Banking, healthcare, admin panels, sensitive data applications\n */\n 'high-security': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 600, // 10 minutes (more aggressive)\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 86400, // 24 hours only\n showLoadingIndicator: false, // Silent for security\n loadingMessage: 'Validating session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Long-Running preset - Optimized for desktop apps and long sessions\n *\n * Features:\n * - 7-day refresh token lifetime\n * - Proactive + reactive token refresh\n * - Silent background refresh\n * - Session monitoring enabled\n *\n * Best for: Desktop applications, monitoring dashboards, always-on tools\n */\n 'long-running': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 604800, // 7 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Development preset - Convenient settings for development\n *\n * Features:\n * - No refresh token lifetime limit (never expires)\n * - Proactive + reactive token refresh\n * - Loading indicators visible (easier debugging)\n * - Session monitoring enabled\n * - More verbose feedback\n *\n * Best for: Local development, testing, debugging\n * WARNING: Do not use in production!\n */\n development: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 0, // No limit (for convenience)\n showLoadingIndicator: true, // Show for debugging\n loadingMessage: '[DEV] Refreshing tokens...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n};\n\n/**\n * Get a configuration preset by name\n *\n * @param preset - The preset name\n * @returns Partial Keycloak configuration for the preset\n *\n * @example\n * ```typescript\n * const config = getConfigPreset('mobile');\n * ```\n */\nexport function getConfigPreset(preset: ConfigPreset): Partial<KeycloakConfig> {\n return CONFIG_PRESETS[preset];\n}\n\n/**\n * Merge a preset with custom configuration\n *\n * Custom configuration takes precedence over preset values.\n * Use this to start with a preset and override specific properties.\n *\n * @param preset - The preset name\n * @param customConfig - Custom configuration to merge\n * @returns Merged configuration\n *\n * @example\n * ```typescript\n * const config = mergeWithPreset('mobile', {\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override to 7 days\n * }\n * });\n * ```\n */\nexport function mergeWithPreset(\n preset: ConfigPreset,\n customConfig: Partial<KeycloakConfig>\n): Partial<KeycloakConfig> {\n const presetConfig = getConfigPreset(preset);\n\n return {\n ...presetConfig,\n ...customConfig,\n features: {\n ...presetConfig.features,\n ...customConfig.features,\n },\n silentRenew: {\n ...presetConfig.silentRenew,\n ...customConfig.silentRenew,\n },\n advanced: {\n ...presetConfig.advanced,\n ...customConfig.advanced,\n },\n events: {\n ...presetConfig.events,\n ...customConfig.events,\n },\n };\n}\n","import React, { useCallback } from 'react';\nimport { AuthProvider as OidcAuthProvider } from 'react-oidc-context';\nimport type { User } from 'oidc-client-ts';\nimport type { KeycloakConfig } from '../config/types';\nimport { KeycloakConfigBuilder } from '../config/KeycloakConfig';\nimport { TokenLifecycleManager } from './TokenLifecycleManager';\nimport { SessionMonitor } from './SessionMonitor';\nimport { mergeWithPreset, type ConfigPreset } from '../config/presets';\nimport { defaultConfig } from '../config/defaults';\n\n/**\n * Props for zero-config mode (simplified setup)\n */\nexport interface KeycloakProviderZeroConfigProps {\n /**\n * Keycloak realm authority URL (e.g., https://sso.example.com/realms/myrealm)\n */\n authority: string;\n\n /**\n * Client ID registered in Keycloak\n */\n clientId: string;\n\n /**\n * Configuration preset to use\n * @default 'default'\n */\n preset?: ConfigPreset;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n\n /**\n * Override specific configuration properties\n * Use this to customize preset or zero-config defaults\n */\n config?: Partial<Omit<KeycloakConfig, 'authority' | 'clientId'>>;\n}\n\n/**\n * Props for full-config mode (advanced setup)\n */\nexport interface KeycloakProviderFullConfigProps {\n /**\n * Full Keycloak configuration object\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Combined props type\n */\nexport type KeycloakProviderProps = KeycloakProviderZeroConfigProps | KeycloakProviderFullConfigProps;\n\n/**\n * Type guard to check if using zero-config mode\n */\nfunction isZeroConfig(props: KeycloakProviderProps): props is KeycloakProviderZeroConfigProps {\n return 'authority' in props && 'clientId' in props;\n}\n\n/**\n * Main Keycloak authentication provider component\n *\n * This component wraps your application to provide authentication context using Keycloak.\n * It supports both zero-config mode (for simplicity) and full-config mode (for advanced use cases).\n *\n * ## Zero-Config Mode (Recommended)\n *\n * Minimal setup with sensible defaults and automatic feature enablement.\n *\n * @example Zero-config (simplest)\n * ```tsx\n * import { KeycloakProvider } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * >\n * <YourApp />\n * </KeycloakProvider>\n * );\n * }\n * ```\n *\n * @example Zero-config with preset\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"mobile\" // or 'high-security', 'long-running', 'development'\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * @example Zero-config with overrides\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"default\"\n * config={{\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override: 7 days instead of 30\n * showLoadingIndicator: true,\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Full-Config Mode (Advanced)\n *\n * Complete control over all configuration options.\n *\n * @example Full configuration\n * ```tsx\n * <KeycloakProvider\n * config={{\n * authority: 'https://sso.example.com/realms/myrealm',\n * clientId: 'my-app',\n * redirectUri: window.location.origin,\n * scope: 'openid profile email offline_access',\n * features: {\n * autoRefresh: true,\n * sessionMonitor: true,\n * },\n * silentRenew: {\n * enabled: true,\n * refreshStrategy: 'both',\n * maxRefreshTokenLifetime: 2592000,\n * },\n * events: {\n * onLogin: (user) => console.log('User logged in', user),\n * onError: (error) => sendToSentry(error),\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Features Automatically Enabled\n *\n * When using zero-config or presets, the following features are automatically enabled:\n * - ✅ Automatic token refresh (before expiration)\n * - ✅ Token lifecycle management (refresh on app startup)\n * - ✅ Session monitoring UI (countdown timer)\n * - ✅ Silent renew (background token refresh)\n * - ✅ Error notifications (user-friendly messages)\n * - ✅ 401 retry logic (automatic token refresh on API errors)\n * - ✅ Maximum refresh token lifetime (security control)\n * - ✅ PKCE (for secure public clients)\n *\n * All features can be disabled or customized via configuration overrides.\n */\nexport const KeycloakProvider: React.FC<KeycloakProviderProps> = (props) => {\n const { children, debug = false } = props;\n\n // Build configuration based on mode\n const config: KeycloakConfig = isZeroConfig(props)\n ? buildZeroConfig(props)\n : props.config;\n\n // Build OIDC configuration from Keycloak config\n const oidcConfig = KeycloakConfigBuilder.build(config);\n\n // Logging helper\n const log = useCallback(\n (level: 'info' | 'warn' | 'error', message: string, ...args: any[]) => {\n if (debug) {\n const prefix = '[KeycloakProvider]';\n switch (level) {\n case 'info':\n console.log(prefix, message, ...args);\n break;\n case 'warn':\n console.warn(prefix, message, ...args);\n break;\n case 'error':\n console.error(prefix, message, ...args);\n break;\n }\n }\n },\n [debug]\n );\n\n // Event handlers with built-in functionality\n const onSigninCallback = useCallback(\n (_user: User | void): void => {\n log('info', 'Sign in successful');\n\n // Clean up query parameters from URL after redirect\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n if (_user) {\n config.events?.onLogin?.(_user as User);\n }\n },\n [config.events, log]\n );\n\n const onSignoutCallback = useCallback((): void => {\n log('info', 'Sign out successful');\n\n // Clean up URL\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n config.events?.onLogout?.();\n }, [config.events, log]);\n\n const onRemoveUser = useCallback((): void => {\n log('warn', 'User removed from storage - token validation likely failed');\n }, [log]);\n\n\n\n // Check if SessionMonitor should be shown\n const showSessionMonitor = config.features?.sessionMonitor !== false;\n\n return (\n <OidcAuthProvider\n {...oidcConfig}\n onSigninCallback={onSigninCallback}\n onSignoutCallback={onSignoutCallback}\n onRemoveUser={onRemoveUser}\n >\n <TokenLifecycleManager config={config} debug={debug}>\n {/* Auto-include SessionMonitor if enabled */}\n {showSessionMonitor && <SessionMonitor />}\n\n {/* User's app content */}\n {children}\n </TokenLifecycleManager>\n </OidcAuthProvider>\n );\n};\n\n/**\n * Build configuration for zero-config mode\n */\nfunction buildZeroConfig(props: KeycloakProviderZeroConfigProps): KeycloakConfig {\n const { authority, clientId, preset = 'default', config: overrides = {} } = props;\n\n // Start with preset configuration\n const presetConfig = mergeWithPreset(preset, overrides);\n\n // Merge with defaults and required properties\n const fullConfig: KeycloakConfig = {\n ...defaultConfig,\n ...presetConfig,\n authority,\n clientId,\n redirectUri: presetConfig.redirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n postLogoutRedirectUri: presetConfig.postLogoutRedirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n } as KeycloakConfig;\n\n return fullConfig;\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseRolesReturn {\n /**\n * Array of realm roles assigned to the current user\n */\n roles: string[];\n\n /**\n * Checks if user has a specific realm role\n * @param role - Role name to check\n * @returns True if user has the role\n */\n hasRole: (role: string) => boolean;\n\n /**\n * Checks if user has any of the specified roles (OR logic)\n * @param roles - Array of role names\n * @returns True if user has at least one of the roles\n */\n hasAnyRole: (roles: string[]) => boolean;\n\n /**\n * Checks if user has all of the specified roles (AND logic)\n * @param roles - Array of role names\n * @returns True if user has all the roles\n */\n hasAllRoles: (roles: string[]) => boolean;\n\n /**\n * Gets client-specific roles\n * @param clientId - Client ID to get roles for\n * @returns Array of client roles\n */\n getClientRoles: (clientId: string) => string[];\n}\n\n/**\n * Hook for working with Keycloak roles\n *\n * Provides convenient methods for checking user roles, both realm-level and client-level.\n * Must be used within a KeycloakProvider component.\n *\n * @returns Role utilities and methods\n *\n * @example Basic usage\n * ```tsx\n * import { useRoles } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { roles, hasRole, hasAnyRole } = useRoles();\n *\n * return (\n * <div>\n * <p>Your roles: {roles.join(', ')}</p>\n * {hasRole('admin') && <AdminPanel />}\n * {hasAnyRole(['editor', 'moderator']) && <EditButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Client roles\n * ```tsx\n * function ClientRoleExample() {\n * const { getClientRoles } = useRoles();\n * const apiRoles = getClientRoles('my-api');\n *\n * return <div>API roles: {apiRoles.join(', ')}</div>;\n * }\n * ```\n */\nexport function useRoles(): UseRolesReturn {\n const auth = useAuth();\n\n // Extract realm roles from user profile\n const roles = useMemo<string[]>(() => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores realm roles in realm_access.roles\n const realmAccess = auth.user.profile.realm_access as { roles?: string[] } | undefined;\n return realmAccess?.roles || [];\n }, [auth.user]);\n\n // Check if user has a specific role\n const hasRole = useMemo(\n () => (role: string): boolean => {\n return roles.includes(role);\n },\n [roles]\n );\n\n // Check if user has any of the specified roles\n const hasAnyRole = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.some((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Check if user has all of the specified roles\n const hasAllRoles = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.every((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Get client-specific roles\n const getClientRoles = useMemo(\n () =>\n (clientId: string): string[] => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores client roles in resource_access[clientId].roles\n const resourceAccess = auth.user.profile.resource_access as\n | Record<string, { roles?: string[] }>\n | undefined;\n\n return resourceAccess?.[clientId]?.roles || [];\n },\n [auth.user]\n );\n\n return {\n roles,\n hasRole,\n hasAnyRole,\n hasAllRoles,\n getClientRoles,\n };\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\n/**\n * Return type for useScopes hook\n */\nexport interface UseScopesReturn {\n /**\n * Array of granted scopes\n */\n scopes: string[];\n\n /**\n * Check if user has a specific scope\n */\n hasScope: (scope: string) => boolean;\n\n /**\n * Check if user has any of the specified scopes\n */\n hasAnyScope: (scopes: string[]) => boolean;\n\n /**\n * Check if user has all of the specified scopes\n */\n hasAllScopes: (scopes: string[]) => boolean;\n}\n\n/**\n * Hook for checking OAuth 2.0 scopes\n *\n * Provides utilities for scope-based authorization. Scopes are typically space-separated\n * in the token (e.g., \"openid profile email read:users write:users\").\n *\n * @returns Scope checking utilities\n *\n * @example Basic usage\n * ```tsx\n * import { useScopes } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { scopes, hasScope, hasAnyScope } = useScopes();\n *\n * return (\n * <div>\n * <p>Your scopes: {scopes.join(', ')}</p>\n *\n * {hasScope('read:users') && <UserList />}\n *\n * {hasAnyScope(['write:users', 'admin']) && <CreateUserButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Conditional rendering\n * ```tsx\n * function DataActions() {\n * const { hasScope, hasAllScopes } = useScopes();\n *\n * return (\n * <div>\n * {hasScope('read:data') && <ViewButton />}\n * {hasScope('write:data') && <EditButton />}\n * {hasScope('delete:data') && <DeleteButton />}\n * {hasAllScopes(['read:data', 'write:data']) && <ExportButton />}\n * </div>\n * );\n * }\n * ```\n */\nexport function useScopes(): UseScopesReturn {\n const auth = useAuth();\n\n // Extract scopes from token\n // Scopes can be in 'scope' claim (space-separated string)\n const scopes = useMemo<string[]>(() => {\n if (!auth.user?.scope) return [];\n\n // Scope is typically a space-separated string\n return auth.user.scope.split(' ').filter(s => s.length > 0);\n }, [auth.user]);\n\n // Check if user has a specific scope\n const hasScope = useMemo(\n () => (scope: string): boolean => {\n return scopes.includes(scope);\n },\n [scopes]\n );\n\n // Check if user has any of the specified scopes\n const hasAnyScope = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.some((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n // Check if user has all of the specified scopes\n const hasAllScopes = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.every((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n return {\n scopes,\n hasScope,\n hasAnyScope,\n hasAllScopes,\n };\n}\n","import React, { useEffect } from 'react';\nimport { useLocation } from 'react-router-dom';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\nimport { useScopes } from '../hooks/useScopes';\nimport type { User } from 'oidc-client-ts';\n\n/**\n * Context object passed to custom policy function\n */\nexport interface PolicyContext {\n /**\n * Current location from react-router\n */\n location: ReturnType<typeof useLocation>;\n\n /**\n * Any additional context you want to pass\n */\n [key: string]: any;\n}\n\n/**\n * Custom policy function for fine-grained access control\n */\nexport type PolicyFunction = (user: User, context: PolicyContext) => boolean;\n\nexport interface ProtectedRouteProps {\n /**\n * Child components to render when user is authorized\n */\n children: React.ReactNode;\n\n /**\n * Required realm roles (OR logic - user needs at least one)\n */\n requiredRoles?: string[];\n\n /**\n * Require all roles instead of any (AND logic)\n * @default false\n */\n requireAllRoles?: boolean;\n\n /**\n * Required OAuth 2.0 scopes (OR logic - user needs at least one)\n */\n requiredScopes?: string[];\n\n /**\n * Require all scopes instead of any (AND logic)\n * @default false\n */\n requireAllScopes?: boolean;\n\n /**\n * Custom policy function for advanced authorization logic\n * If provided, this takes precedence over role and scope checks\n */\n policy?: PolicyFunction;\n\n /**\n * Custom loading component to display while checking authentication\n */\n loadingComponent?: React.ReactNode;\n\n /**\n * Custom unauthorized component to display when user lacks required permissions\n */\n unauthorizedComponent?: React.ReactNode;\n\n /**\n * Path to redirect to if not authenticated\n * @default '/login'\n */\n redirectTo?: string;\n\n /**\n * Callback when user is unauthorized\n * @param reason - Reason for unauthorized access\n */\n onUnauthorized?: (\n reason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied'\n ) => void;\n}\n\n/**\n * Component for protecting routes with authentication, role-based, scope-based, or policy-based authorization\n *\n * This component provides comprehensive route protection with multiple authorization strategies:\n * - Authentication check (always required)\n * - Role-based authorization (realm roles)\n * - Scope-based authorization (OAuth 2.0 scopes)\n * - Custom policy functions (advanced logic)\n *\n * @example Basic authentication required\n * ```tsx\n * import { ProtectedRoute } from 'antaeus.keycloak.react';\n *\n * <Route\n * path=\"/dashboard\"\n * element={\n * <ProtectedRoute>\n * <Dashboard />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require specific role\n * ```tsx\n * <Route\n * path=\"/admin\"\n * element={\n * <ProtectedRoute requiredRoles={['admin']}>\n * <AdminPanel />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require any of multiple roles\n * ```tsx\n * <ProtectedRoute requiredRoles={['editor', 'moderator', 'admin']}>\n * <EditPage />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all roles (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['verified', 'premium']}\n * requireAllRoles={true}\n * >\n * <PremiumContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Require specific scopes\n * ```tsx\n * <ProtectedRoute requiredScopes={['read:users', 'write:users']}>\n * <UserManagement />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all scopes (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredScopes={['read:data', 'write:data', 'delete:data']}\n * requireAllScopes={true}\n * >\n * <DataAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Combine roles and scopes\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['admin']}\n * requiredScopes={['manage:users']}\n * >\n * <UserAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Custom policy function\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Custom authorization logic\n * const isEmailVerified = user.profile.email_verified === true;\n * const isAdult = (user.profile.age || 0) >= 18;\n * return isEmailVerified && isAdult;\n * }}\n * onUnauthorized={(reason) => {\n * console.log('Access denied:', reason);\n * }}\n * >\n * <AdultContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Advanced policy with location context\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Check if user is accessing during business hours\n * const hour = new Date().getHours();\n * const isBusinessHours = hour >= 9 && hour < 17;\n *\n * // Or check based on route\n * const isAdminRoute = context.location.pathname.startsWith('/admin');\n * const hasAdminRole = user.profile.realm_access?.roles?.includes('admin');\n *\n * return isBusinessHours && (!isAdminRoute || hasAdminRole);\n * }}\n * >\n * <TimeSensitiveContent />\n * </ProtectedRoute>\n * ```\n */\nexport const ProtectedRoute: React.FC<ProtectedRouteProps> = ({\n children,\n requiredRoles = [],\n requireAllRoles = false,\n requiredScopes = [],\n requireAllScopes = false,\n policy,\n loadingComponent,\n unauthorizedComponent,\n onUnauthorized,\n}) => {\n const auth = useAuth();\n const { hasAnyRole, hasAllRoles } = useRoles();\n const { hasAnyScope, hasAllScopes } = useScopes();\n const location = useLocation();\n\n // Determine authorization state\n const isAuthenticated = !auth.isLoading && auth.isAuthenticated;\n\n // Check policy access\n const policyAccess = policy && auth.user\n ? policy(auth.user, { location })\n : null;\n\n // Check role access\n const roleAccess = requiredRoles.length > 0\n ? (requireAllRoles ? hasAllRoles(requiredRoles) : hasAnyRole(requiredRoles))\n : null;\n\n // Check scope access\n const scopeAccess = requiredScopes.length > 0\n ? (requireAllScopes ? hasAllScopes(requiredScopes) : hasAnyScope(requiredScopes))\n : null;\n\n // Determine unauthorized reason\n const unauthorizedReason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied' | null =\n !isAuthenticated ? 'not-authenticated' :\n policyAccess === false ? 'policy-denied' :\n roleAccess === false ? 'insufficient-roles' :\n scopeAccess === false ? 'insufficient-scopes' :\n null;\n\n // All hooks must be called unconditionally at the top level\n // Handle unauthorized callback\n useEffect(() => {\n if (unauthorizedReason) {\n onUnauthorized?.(unauthorizedReason);\n }\n }, [unauthorizedReason, onUnauthorized]);\n\n // Handle login redirect for unauthenticated users\n useEffect(() => {\n if (!auth.isLoading && !auth.isAuthenticated) {\n auth.signinRedirect({\n redirect_uri: window.location.origin + location.pathname + location.search,\n });\n }\n }, [auth.isLoading, auth.isAuthenticated, auth, location.pathname, location.search]);\n\n // Show loading state while checking authentication\n if (auth.isLoading) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authentication\n if (!isAuthenticated) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authorization (policy takes precedence, then roles, then scopes)\n if (unauthorizedReason) {\n return <>{unauthorizedComponent || <DefaultUnauthorizedComponent />}</>;\n }\n\n // User is authenticated and has required permissions\n return <>{children}</>;\n};\n\n/**\n * Default loading component\n */\nconst DefaultLoadingComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n }}\n >\n <div\n style={{\n border: '3px solid #f3f3f3',\n borderTop: '3px solid #3498db',\n borderRadius: '50%',\n width: '40px',\n height: '40px',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ color: '#666', margin: 0 }}>Loading...</p>\n <style>{`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}</style>\n </div>\n);\n\n/**\n * Default unauthorized component\n */\nconst DefaultUnauthorizedComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n padding: '2rem',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n fontSize: '4rem',\n color: '#e74c3c',\n }}\n >\n 🔒\n </div>\n <h1 style={{ margin: 0, color: '#333' }}>Access Denied</h1>\n <p style={{ color: '#666', margin: 0 }}>\n You do not have permission to access this page.\n </p>\n </div>\n);\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LoginButtonProps {\n /**\n * Button text\n * @default 'Login'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'primary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show login icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before login starts\n */\n onLoginStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built login button component\n *\n * Triggers the Keycloak login flow when clicked. The button automatically\n * hides when the user is already authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LoginButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LoginButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LoginButton\n * variant=\"outline\"\n * size=\"large\"\n * onLoginStart={() => console.log('Starting login...')}\n * >\n * Sign In\n * </LoginButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LoginButton\n * className=\"my-custom-class\"\n * style={{ backgroundColor: '#007bff' }}\n * />\n * ```\n */\nexport const LoginButton: React.FC<LoginButtonProps> = ({\n children = 'Login',\n className = '',\n variant = 'primary',\n size = 'medium',\n showIcon = true,\n onLoginStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if already authenticated\n if (auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLoginStart?.();\n auth.signinRedirect();\n };\n\n const baseClass = 'kc-button kc-login-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🔐</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LogoutButtonProps {\n /**\n * Button text\n * @default 'Logout'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'secondary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show logout icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before logout starts\n */\n onLogoutStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built logout button component\n *\n * Triggers the Keycloak logout flow when clicked. The button automatically\n * hides when the user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LogoutButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LogoutButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LogoutButton\n * variant=\"outline\"\n * size=\"small\"\n * onLogoutStart={() => {\n * // Clean up app state\n * localStorage.clear();\n * }}\n * >\n * Sign Out\n * </LogoutButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LogoutButton\n * className=\"my-logout-btn\"\n * style={{ backgroundColor: '#dc3545' }}\n * />\n * ```\n */\nexport const LogoutButton: React.FC<LogoutButtonProps> = ({\n children = 'Logout',\n className = '',\n variant = 'secondary',\n size = 'medium',\n showIcon = true,\n onLogoutStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLogoutStart?.();\n auth.signoutRedirect();\n };\n\n const baseClass = 'kc-button kc-logout-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🚪</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\n\nexport interface UserProfileProps {\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Show user avatar/icon\n * @default true\n */\n showAvatar?: boolean;\n\n /**\n * Show user email\n * @default true\n */\n showEmail?: boolean;\n\n /**\n * Show user roles\n * @default false\n */\n showRoles?: boolean;\n\n /**\n * Avatar size in pixels\n * @default 40\n */\n avatarSize?: number;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Callback when profile is clicked\n */\n onClick?: () => void;\n}\n\n/**\n * Pre-built user profile display component\n *\n * Displays the current user's information including name, email, and optionally roles.\n * Automatically hides when user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { UserProfile } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <UserProfile />;\n * }\n * ```\n *\n * @example With roles\n * ```tsx\n * <UserProfile showRoles={true} />\n * ```\n *\n * @example Clickable profile\n * ```tsx\n * <UserProfile\n * onClick={() => navigate('/profile')}\n * style={{ cursor: 'pointer' }}\n * />\n * ```\n *\n * @example Customized\n * ```tsx\n * <UserProfile\n * showEmail={false}\n * showRoles={true}\n * avatarSize={50}\n * className=\"my-profile\"\n * />\n * ```\n */\nexport const UserProfile: React.FC<UserProfileProps> = ({\n className = '',\n showAvatar = true,\n showEmail = true,\n showRoles = false,\n avatarSize = 40,\n style,\n onClick,\n}) => {\n const auth = useAuth();\n const { roles } = useRoles();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated || !auth.user) {\n return null;\n }\n\n const profile = auth.user.profile;\n const name = profile.name || profile.preferred_username || 'User';\n const email = profile.email;\n const initials = getInitials(name);\n\n const baseClass = 'kc-user-profile';\n const clickableClass = onClick ? 'kc-user-profile--clickable' : '';\n const classes = `${baseClass} ${clickableClass} ${className}`.trim();\n\n const handleClick = () => {\n if (onClick) {\n onClick();\n }\n };\n\n return (\n <div\n className={classes}\n style={style}\n onClick={handleClick}\n role={onClick ? 'button' : undefined}\n tabIndex={onClick ? 0 : undefined}\n onKeyPress={onClick ? (e) => e.key === 'Enter' && handleClick() : undefined}\n >\n {showAvatar && (\n <div\n className=\"kc-user-profile__avatar\"\n style={{\n width: avatarSize,\n height: avatarSize,\n fontSize: avatarSize * 0.4,\n }}\n >\n {initials}\n </div>\n )}\n\n <div className=\"kc-user-profile__info\">\n <div className=\"kc-user-profile__name\">{name}</div>\n\n {showEmail && email && (\n <div className=\"kc-user-profile__email\">{email}</div>\n )}\n\n {showRoles && roles.length > 0 && (\n <div className=\"kc-user-profile__roles\">\n {roles.slice(0, 3).map((role) => (\n <span key={role} className=\"kc-user-profile__role-badge\">\n {role}\n </span>\n ))}\n {roles.length > 3 && (\n <span className=\"kc-user-profile__role-badge\">\n +{roles.length - 3}\n </span>\n )}\n </div>\n )}\n </div>\n </div>\n );\n};\n\n/**\n * Helper function to get user initials from name\n */\nfunction getInitials(name: string): string {\n const parts = name.trim().split(' ');\n\n if (parts.length === 1) {\n return parts[0].substring(0, 2).toUpperCase();\n }\n\n return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase();\n}\n","/**\n * Device authorization response from Keycloak\n */\nexport interface DeviceAuthorizationResponse {\n /** Device code used for polling */\n device_code: string;\n\n /** User code to display to user */\n user_code: string;\n\n /** Verification URI (plain) */\n verification_uri: string;\n\n /** Complete verification URI with user code (for QR codes) */\n verification_uri_complete: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Recommended polling interval in seconds */\n interval: number;\n}\n\n/**\n * Token response from Keycloak\n */\nexport interface TokenResponse {\n /** Access token */\n access_token: string;\n\n /** Token type (usually 'Bearer') */\n token_type: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Refresh token (if offline_access scope was requested) */\n refresh_token?: string;\n\n /** ID token */\n id_token?: string;\n\n /** Granted scopes */\n scope?: string;\n}\n\n/**\n * Error response from token polling\n */\nexport interface DeviceFlowError {\n /** Error code */\n error: string;\n\n /** Error description */\n error_description?: string;\n}\n\n/**\n * Request device authorization code from the backend API\n *\n * This function calls your backend API which proxies the request to Keycloak.\n * This avoids CORS issues.\n *\n * @param apiBaseUrl - Base URL of your backend API (e.g., 'http://localhost:5000')\n * @returns Device authorization response\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const response = await requestDeviceCode('http://localhost:5000');\n * console.log('User code:', response.user_code);\n * console.log('Verification URL:', response.verification_uri_complete);\n * ```\n */\nexport async function requestDeviceCode(\n apiBaseUrl: string\n): Promise<DeviceAuthorizationResponse> {\n const url = `${apiBaseUrl}/api/keycloak/device/authorize`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `Device authorization failed: ${response.status} ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as DeviceAuthorizationResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to request device code: ${error.message}`);\n }\n throw error;\n }\n}\n\n/**\n * Poll for token using device code\n *\n * This function should be called repeatedly until the user authorizes the device\n * or the device code expires. The backend handles the actual token exchange with Keycloak.\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param deviceCode - Device code from requestDeviceCode()\n * @returns Token response if authorized, null if still pending\n * @throws Error if request fails or authorization is denied\n *\n * @example\n * ```ts\n * const deviceCode = 'ABC123';\n * const interval = setInterval(async () => {\n * try {\n * const token = await pollForToken('http://localhost:5000', deviceCode);\n * if (token) {\n * clearInterval(interval);\n * console.log('Authorized! Token:', token.access_token);\n * }\n * } catch (error) {\n * if (error.message.includes('authorization_pending')) {\n * // Still waiting, continue polling\n * } else {\n * // Real error, stop polling\n * clearInterval(interval);\n * console.error('Authorization failed:', error);\n * }\n * }\n * }, 5000);\n * ```\n */\nexport async function pollForToken(\n apiBaseUrl: string,\n deviceCode: string\n): Promise<TokenResponse | null> {\n const url = `${apiBaseUrl}/api/keycloak/device/token`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ device_code: deviceCode }),\n });\n\n const data = await response.json();\n\n // Check if response contains an error (backend returns 200 OK with error object)\n if ('error' in data) {\n const errorData = data as DeviceFlowError;\n\n // authorization_pending and slow_down are expected during polling\n if (\n errorData.error === 'authorization_pending' ||\n errorData.error === 'slow_down'\n ) {\n return null; // Still waiting\n }\n\n // Other errors are real failures\n throw new Error(\n errorData.error_description || errorData.error || 'Token polling failed'\n );\n }\n\n // Check if we got a non-OK status without error in body\n if (!response.ok) {\n throw new Error(`Token polling failed with status ${response.status}`);\n }\n\n return data as TokenResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw error;\n }\n throw new Error('Token polling failed');\n }\n}\n\n/**\n * Fetch user information using access token\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param accessToken - Access token from token response\n * @returns User information\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const userInfo = await fetchUserInfo('http://localhost:5000', token.access_token);\n * console.log('User:', userInfo.preferred_username);\n * ```\n */\nexport async function fetchUserInfo(\n apiBaseUrl: string,\n accessToken: string\n): Promise<any> {\n const url = `${apiBaseUrl}/api/keycloak/device/userinfo`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ access_token: accessToken }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to fetch user info: ${response.statusText}`);\n }\n\n return await response.json();\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to fetch user info: ${error.message}`);\n }\n throw error;\n }\n}\n","import React, { useState, useEffect, useRef } from 'react';\nimport { QRCodeSVG } from 'qrcode.react';\nimport { User, UserManager } from 'oidc-client-ts';\nimport { useAuth } from '../hooks/useAuth';\nimport {\n requestDeviceCode,\n pollForToken,\n fetchUserInfo,\n type DeviceAuthorizationResponse,\n} from '../utils/deviceFlow';\n\nexport interface DeviceLoginProps {\n /**\n * API base URL for device flow endpoints\n * @example 'http://localhost:5000'\n */\n apiBaseUrl: string;\n\n /**\n * QR code size in pixels\n * @default 256\n */\n qrCodeSize?: number;\n\n /**\n * Polling interval in seconds\n * @default 5\n */\n pollingInterval?: number;\n\n /**\n * Custom CSS class\n */\n className?: string;\n\n /**\n * Callback on successful login\n */\n onSuccess?: (user: User) => void;\n\n /**\n * Callback on error\n */\n onError?: (error: Error) => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Device flow login component\n *\n * Displays QR code and user code for device authentication. Automatically polls\n * for authorization and completes the login flow.\n *\n * @example Basic usage\n * ```tsx\n * import { DeviceLogin } from 'antaeus.keycloak.react';\n *\n * function TVLoginPage() {\n * return (\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * onSuccess={(user) => {\n * console.log('Logged in:', user.profile.name);\n * navigate('/home');\n * }}\n * />\n * );\n * }\n * ```\n *\n * @example With custom settings\n * ```tsx\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * qrCodeSize={300}\n * pollingInterval={3}\n * onError={(error) => console.error('Login failed:', error)}\n * />\n * ```\n */\nexport const DeviceLogin: React.FC<DeviceLoginProps> = ({\n apiBaseUrl,\n qrCodeSize = 256,\n pollingInterval = 5,\n className = '',\n onSuccess,\n onError,\n style,\n}) => {\n const auth = useAuth();\n const [deviceData, setDeviceData] = useState<DeviceAuthorizationResponse | null>(null);\n const [error, setError] = useState<string | null>(null);\n const [loading, setLoading] = useState(true);\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const pollTimerRef = useRef<number | null>(null);\n const userManagerRef = useRef<UserManager | null>(null);\n\n // Initialize device flow\n useEffect(() => {\n const initDeviceFlow = async () => {\n setLoading(true);\n setError(null);\n\n try {\n const response = await requestDeviceCode(apiBaseUrl);\n setDeviceData(response);\n setTimeRemaining(response.expires_in);\n } catch (err) {\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n } finally {\n setLoading(false);\n }\n };\n\n initDeviceFlow();\n }, [apiBaseUrl, onError]);\n\n // Countdown timer\n useEffect(() => {\n if (!deviceData || timeRemaining === null) return;\n\n const interval = setInterval(() => {\n setTimeRemaining((prev) => {\n if (prev === null || prev <= 1) {\n clearInterval(interval);\n setError('Device code expired. Please refresh to try again.');\n return 0;\n }\n return prev - 1;\n });\n }, 1000);\n\n return () => clearInterval(interval);\n }, [deviceData, timeRemaining]);\n\n // Poll for token\n useEffect(() => {\n if (!deviceData) return;\n\n // Get UserManager from auth context\n userManagerRef.current = (auth as any).userManager;\n\n const poll = async () => {\n try {\n const tokenResponse = await pollForToken(apiBaseUrl, deviceData.device_code);\n\n if (tokenResponse) {\n // Success! Store the token\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n\n // Fetch user info\n const userInfo = await fetchUserInfo(apiBaseUrl, tokenResponse.access_token);\n\n // Create User object and store it\n const user = new User({\n id_token: tokenResponse.id_token || '',\n access_token: tokenResponse.access_token,\n token_type: tokenResponse.token_type,\n profile: userInfo,\n expires_at: Math.floor(Date.now() / 1000) + tokenResponse.expires_in,\n scope: tokenResponse.scope,\n refresh_token: tokenResponse.refresh_token,\n });\n\n // Store user in UserManager\n if (userManagerRef.current) {\n await userManagerRef.current.storeUser(user);\n }\n\n // Trigger success callback\n onSuccess?.(user);\n }\n } catch (err) {\n // Ignore authorization_pending errors\n if (!(err as Error).message.includes('authorization_pending')) {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n }\n }\n };\n\n // Start polling\n pollTimerRef.current = setInterval(poll, pollingInterval * 1000);\n\n // Cleanup\n return () => {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n };\n }, [deviceData, apiBaseUrl, pollingInterval, onSuccess, onError, auth]);\n\n if (loading) {\n return (\n <div className={`kc-device-login kc-device-login--loading ${className}`} style={style}>\n <div className=\"kc-device-login__spinner\" />\n <p>Initializing device flow...</p>\n </div>\n );\n }\n\n if (error) {\n return (\n <div className={`kc-device-login kc-device-login--error ${className}`} style={style}>\n <div className=\"kc-device-login__error-icon\">⚠️</div>\n <h2>Error</h2>\n <p>{error}</p>\n <button\n className=\"kc-button kc-button--primary\"\n onClick={() => window.location.reload()}\n >\n Retry\n </button>\n </div>\n );\n }\n\n if (!deviceData) {\n return null;\n }\n\n const formatTime = (seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n };\n\n return (\n <div className={`kc-device-login ${className}`} style={style}>\n <h2 className=\"kc-device-login__title\">Device Login</h2>\n\n <div className=\"kc-device-login__qr\">\n <QRCodeSVG value={deviceData.verification_uri_complete} size={qrCodeSize} />\n </div>\n\n <div className=\"kc-device-login__instructions\">\n <p>Scan the QR code with your phone or visit:</p>\n <code className=\"kc-device-login__url\">{deviceData.verification_uri}</code>\n <p>And enter code:</p>\n <strong className=\"kc-device-login__user-code\">{deviceData.user_code}</strong>\n </div>\n\n {timeRemaining !== null && timeRemaining > 0 && (\n <p className=\"kc-device-login__expiry\">\n Code expires in {formatTime(timeRemaining)}\n </p>\n )}\n\n <div className=\"kc-device-login__status\">\n <div className=\"kc-device-login__spinner kc-device-login__spinner--small\" />\n <p>Waiting for authorization...</p>\n </div>\n </div>\n );\n};\n","import { useCallback } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseProtectedFetchOptions {\n /**\n * Base URL for API requests\n * @example 'http://localhost:5000'\n */\n baseUrl?: string;\n\n /**\n * Callback when request is unauthorized (401)\n */\n onUnauthorized?: () => void;\n\n /**\n * Retry request on 401 error after token refresh\n * @default true\n */\n retryOn401?: boolean;\n\n /**\n * Additional headers to include in all requests\n */\n headers?: Record<string, string>;\n}\n\nexport interface UseProtectedFetchReturn {\n /**\n * Fetch with automatic token injection and JSON parsing\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Parsed JSON response\n */\n fetchJson: <T = any>(url: string, init?: RequestInit) => Promise<T>;\n\n /**\n * Raw fetch with automatic token injection\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Fetch response\n */\n fetch: (url: string, init?: RequestInit) => Promise<Response>;\n\n /**\n * Check if request is in progress\n */\n isLoading: boolean;\n}\n\n/**\n * Hook for making authenticated API requests\n *\n * Automatically injects the current user's access token into all requests.\n * Handles 401 errors and provides convenient methods for JSON APIs.\n *\n * @param options - Configuration options\n * @returns Protected fetch methods\n *\n * @example Basic usage\n * ```tsx\n * import { useProtectedFetch } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const loadData = async () => {\n * // Token is automatically added\n * const data = await fetchJson('/api/data');\n * console.log(data);\n * };\n *\n * return <button onClick={loadData}>Load Data</button>;\n * }\n * ```\n *\n * @example With custom headers\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * headers: {\n * 'X-Custom-Header': 'value'\n * }\n * });\n * ```\n *\n * @example POST request\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const createUser = async (userData: User) => {\n * const result = await fetchJson<User>('/api/users', {\n * method: 'POST',\n * body: JSON.stringify(userData),\n * headers: {\n * 'Content-Type': 'application/json'\n * }\n * });\n * return result;\n * };\n * ```\n *\n * @example Handle unauthorized\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * onUnauthorized: () => {\n * console.log('Unauthorized! Redirecting to login...');\n * }\n * });\n * ```\n */\nexport function useProtectedFetch(\n options: UseProtectedFetchOptions = {}\n): UseProtectedFetchReturn {\n const auth = useAuth();\n\n const {\n baseUrl = '',\n onUnauthorized,\n retryOn401 = true,\n headers: customHeaders = {},\n } = options;\n\n /**\n * Build full URL from path\n */\n const buildUrl = useCallback(\n (url: string): string => {\n // If URL is already absolute, return as-is\n if (url.startsWith('http://') || url.startsWith('https://')) {\n return url;\n }\n\n // Combine with base URL\n const base = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;\n const path = url.startsWith('/') ? url : `/${url}`;\n\n return base + path;\n },\n [baseUrl]\n );\n\n /**\n * Get authorization header with current token\n */\n const getAuthHeader = useCallback((): Record<string, string> => {\n if (!auth.user?.access_token) {\n return {};\n }\n\n return {\n Authorization: `Bearer ${auth.user.access_token}`,\n };\n }, [auth.user]);\n\n /**\n * Merge all headers\n */\n const buildHeaders = useCallback(\n (requestHeaders?: HeadersInit): Headers => {\n const headers = new Headers(requestHeaders);\n\n // Add auth header\n const authHeader = getAuthHeader();\n if (authHeader.Authorization) {\n headers.set('Authorization', authHeader.Authorization);\n }\n\n // Add custom headers\n Object.entries(customHeaders).forEach(([key, value]) => {\n headers.set(key, value);\n });\n\n return headers;\n },\n [getAuthHeader, customHeaders]\n );\n\n /**\n * Raw fetch with token injection\n */\n const protectedFetch = useCallback(\n async (url: string, init?: RequestInit): Promise<Response> => {\n const fullUrl = buildUrl(url);\n const headers = buildHeaders(init?.headers);\n\n const response = await fetch(fullUrl, {\n ...init,\n headers,\n });\n\n // Handle 401 Unauthorized\n if (response.status === 401) {\n onUnauthorized?.();\n\n if (retryOn401 && auth.user) {\n // Try to refresh token silently\n try {\n await auth.signinSilent();\n\n // Retry request with new token\n const newHeaders = buildHeaders(init?.headers);\n const retryResponse = await fetch(fullUrl, {\n ...init,\n headers: newHeaders,\n });\n\n return retryResponse;\n } catch (error) {\n // Silent refresh failed, return original response\n return response;\n }\n }\n }\n\n return response;\n },\n [buildUrl, buildHeaders, onUnauthorized, retryOn401, auth]\n );\n\n /**\n * Fetch and parse JSON\n */\n const fetchJson = useCallback(\n async <T = any>(url: string, init?: RequestInit): Promise<T> => {\n const response = await protectedFetch(url, init);\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `HTTP ${response.status}: ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as T;\n },\n [protectedFetch]\n );\n\n return {\n fetchJson,\n fetch: protectedFetch,\n isLoading: auth.isLoading,\n };\n}\n"]}
1
+ {"version":3,"sources":["../src/config/defaults.ts","../src/config/KeycloakConfig.ts","../src/hooks/useAuth.ts","../src/hooks/useTokenLifecycle.ts","../src/components/TokenLifecycleManager.tsx","../src/components/SessionMonitor.tsx","../src/config/presets.ts","../src/components/KeycloakProvider.tsx","../src/hooks/useRoles.ts","../src/hooks/useScopes.ts","../src/components/ProtectedRoute.tsx","../src/components/LoginButton.tsx","../src/components/LogoutButton.tsx","../src/components/UserProfile.tsx","../src/utils/deviceFlow.ts","../src/components/DeviceLogin.tsx","../src/hooks/useProtectedFetch.ts"],"names":["useOidcAuth","useState","useCallback","useEffect","jsxs","jsx","Fragment","OidcAuthProvider","useMemo","useRef","error"],"mappings":";;;;;;;;;;AAKO,IAAM,aAAA,GAAyC;AAAA,EACpD,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EAC5E,uBAAuB,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EACtF,KAAA,EAAO,qCAAA;AAAA,EAEP,QAAA,EAAU;AAAA,IACR,UAAA,EAAY,KAAA;AAAA,IACZ,cAAA,EAAgB,IAAA;AAAA,IAChB,WAAA,EAAa;AAAA,GACf;AAAA,EAEA,WAAA,EAAa;AAAA,IACX,OAAA,EAAS,IAAA;AAAA,IACT,mBACE,OAAO,MAAA,KAAW,cACd,MAAA,CAAO,QAAA,CAAS,SAAS,oBAAA,GACzB,oBAAA;AAAA,IACN,gBAAA,EAAkB,GAAA;AAAA;AAAA,IAClB,eAAA,EAAiB,MAAA;AAAA;AAAA,IACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,IACzB,oBAAA,EAAsB,KAAA;AAAA,IACtB,cAAA,EAAgB;AAAA,GAClB;AAAA,EAEA,QAAA,EAAU;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,mBAAA,EAAqB,MAAA;AAAA,IACrB,YAAA,EAAc,IAAA;AAAA,IACd,qBAAA,EAAuB;AAAA,GACzB;AAAA,EAEA,QAAQ;AACV;;;AC9BO,IAAM,wBAAN,MAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjC,OAAO,MAAM,UAAA,EAAiD;AAE5D,IAAA,IAAA,CAAK,SAAS,UAAU,CAAA;AAGxB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,iBAAA,CAAkB,UAAU,CAAA;AAGhD,IAAA,MAAM,YAAA,GAAoC;AAAA,MACxC,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,WAAW,MAAA,CAAO,QAAA;AAAA,MAClB,cAAc,MAAA,CAAO,WAAA;AAAA,MACrB,0BAA0B,MAAA,CAAO,qBAAA;AAAA,MACjC,aAAA,EAAe,OAAO,QAAA,CAAU,YAAA;AAAA,MAChC,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,oBAAA,EAAsB,OAAO,WAAA,CAAa,OAAA;AAAA,MAC1C,YAAA,EAAc,OAAO,QAAA,CAAU,YAAA;AAAA,MAC/B,mBAAA,EAAqB,OAAO,WAAA,CAAa,iBAAA;AAAA;AAAA,MAGzC,GAAI,MAAA,CAAO,QAAA,CAAU,mBAAA,IAAuB;AAAA,QAC1C,aAAA,EAAe;AAAA;AACjB,KACF;AAEA,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,SAAS,MAAA,EAA8B;AACpD,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,IAClD;AAEA,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,MAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,IACjD;AAGA,IAAA,IAAI;AACF,MAAA,IAAI,GAAA,CAAI,OAAO,SAAS,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,IAC1D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,kBAAkB,MAAA,EAAkD;AACjF,IAAA,OAAO;AAAA,MACL,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,aAAA,CAAc,WAAA;AAAA,MACjD,qBAAA,EACE,MAAA,CAAO,qBAAA,IAAyB,aAAA,CAAc,qBAAA;AAAA,MAChD,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,MACrC,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,WAAA,EAAa;AAAA,QACX,GAAG,aAAA,CAAc,WAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,GAAG,aAAA,CAAc,MAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA;AACZ,KACF;AAAA,EACF;AACF;AAOO,SAAS,gBAAA,GAA4C;AAE1D,EAAA,IAAI,OAAO,gBAAgB,WAAA,EAAa;AACtC,IAAA,OAAO,EAAC;AAAA,EACV;AAGA,EAAA,MAAM,MAAO,MAAA,CAAA,IAAA,CAAoB,GAAA;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,GAAA,CAAI,uBAAA;AAAA,IACf,UAAU,GAAA,CAAI,uBAAA;AAAA,IACd,QAAA,EAAU;AAAA,MACR,UAAA,EAAY,IAAI,uBAAA,KAA4B,MAAA;AAAA,MAC5C,cAAA,EAAgB,IAAI,2BAAA,KAAgC;AAAA;AACtD,GACF;AACF;AC7EO,IAAM,OAAA,GAAUA;;;ACWvB,IAAM,kBAAA,GAAqB,uBAAA;AAgCpB,SAAS,kBACd,OAAA,EACyB;AACzB,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,YAAA,EAAc,eAAe,CAAA,GAAI,SAAS,KAAK,CAAA;AACtD,EAAA,MAAM,CAAC,qBAAA,EAAuB,wBAAwB,CAAA,GAAI,SAAS,KAAK,CAAA;AACxE,EAAA,MAAM,mBAAA,GAAsB,OAAO,KAAK,CAAA;AAExC,EAAA,MAAM,GAAA,GAAM,WAAA;AAAA,IACV,CAAC,YAAoB,IAAA,KAAgB;AACnC,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,OAAA,EAAS,GAAG,IAAI,CAAA;AAAA,MAClD;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAKA,EAAA,MAAM,aAAA,GAAgB,YAAY,MAAc;AAC9C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,IAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AACxB,IAAA,OAAO,CAAA,EAAG,kBAAkB,CAAA,EAAG,SAAS,IAAI,QAAQ,CAAA,CAAA;AAAA,EACtD,GAAG,CAAC,MAAA,CAAO,SAAA,EAAW,MAAA,CAAO,QAAQ,CAAC,CAAA;AAKtC,EAAA,MAAM,mBAAA,GAAsB,YAAY,MAAM;AAC5C,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,QAAA,EAAU,CAAA;AACxC,MAAA,GAAA,CAAI,4BAA4B,IAAI,IAAA,CAAK,GAAG,CAAA,CAAE,aAAa,CAAA;AAAA,IAC7D;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,GAAG,CAAC,CAAA;AAKvB,EAAA,MAAM,yBAAA,GAA4B,YAAY,MAAe;AAC3D,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AAGxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE9C,IAAA,IAAI,CAAC,aAAA,EAAe;AAElB,MAAA,mBAAA,EAAoB;AACpB,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,QAAA,CAAS,aAAA,EAAe,EAAE,CAAA;AACjD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,cAAA,GAAA,CAAkB,MAAM,cAAA,IAAkB,GAAA;AAEhD,IAAA,GAAA,CAAI,+BAAA,EAAiC;AAAA,MACnC,UAAA,EAAY,IAAI,IAAA,CAAK,cAAc,EAAE,WAAA,EAAY;AAAA,MACjD,cAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAW,cAAA,IAAkB;AAAA,KAC9B,CAAA;AAED,IAAA,OAAO,cAAA,IAAkB,WAAA;AAAA,EAC3B,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,yBAAyB,aAAA,EAAe,GAAA,EAAK,mBAAmB,CAAC,CAAA;AAKzF,EAAA,MAAM,YAAA,GAAe,YAAY,YAA2B;AAC1D,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,2BAA0B,EAAG;AAC/B,MAAA,GAAA,CAAI,qDAAqD,CAAA;AACzD,MAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,MAAA,qBAAA,IAAwB;AACxB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,eAAA,CAAgB,IAAI,CAAA;AACpB,MAAA,cAAA,IAAiB;AACjB,MAAA,GAAA,CAAI,wBAAwB,CAAA;AAE5B,MAAA,MAAM,KAAK,YAAA,EAAa;AAExB,MAAA,GAAA,CAAI,0BAA0B,CAAA;AAC9B,MAAA,gBAAA,IAAmB;AAAA,IACrB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,GAAA,GAAM,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAA;AACpE,MAAA,GAAA,CAAI,uBAAA,EAAyB,IAAI,OAAO,CAAA;AACxC,MAAA,cAAA,GAAiB,GAAG,CAAA;AACpB,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,eAAA,CAAgB,KAAK,CAAA;AAAA,IACvB;AAAA,EACF,CAAA,EAAG;AAAA,IACD,YAAA;AAAA,IACA,IAAA;AAAA,IACA,yBAAA;AAAA,IACA,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,qBAAA,GAAwB,YAAY,YAA8B;AACtE,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AACd,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,IAAI,2BAA0B,EAAG;AAC/B,MAAA,GAAA,CAAI,qCAAqC,CAAA;AACzC,MAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,MAAA,qBAAA,IAAwB;AAGxB,MAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,MAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAE3B,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,2CAA2C,KAAK,CAAA;AAAA,MAEtD;AAEA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA;AAC5B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,GAAA,CAAI,gDAAgD,CAAA;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,WAAA,EAAa,gBAAA,IAAoB,GAAA;AAC1D,IAAA,MAAM,kBAAkB,SAAA,GAAY,GAAA;AAEpC,IAAA,GAAA,CAAI,yBAAA,EAA2B;AAAA,MAC7B,WAAW,IAAI,IAAA,CAAK,SAAA,GAAY,GAAI,EAAE,WAAA,EAAY;AAAA,MAClD,KAAK,IAAI,IAAA,CAAK,GAAA,GAAM,GAAI,EAAE,WAAA,EAAY;AAAA,MACtC,eAAA;AAAA,MACA,SAAA;AAAA,MACA,cAAc,eAAA,IAAmB;AAAA,KAClC,CAAA;AAGD,IAAA,IAAI,mBAAmB,SAAA,EAAW;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,EAAa;AACnB,QAAA,OAAO,IAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,6BAA6B,KAAK,CAAA;AACtC,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,2CAA2C,CAAA;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,gBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,WAAA,EAAa,eAAA,IAAmB,MAAA;AACxD,IAAA,MAAM,oBAAA,GAAuB,QAAA,KAAa,SAAA,IAAa,QAAA,KAAa,MAAA;AAEpE,IAAA,IAAI,CAAC,oBAAA,IAAwB,mBAAA,CAAoB,OAAA,EAAS;AACxD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,SAAA,EAAW;AAC3C,MAAA;AAAA,IACF;AAEA,IAAA,mBAAA,CAAoB,OAAA,GAAU,IAAA;AAC9B,IAAA,GAAA,CAAI,8CAA8C,QAAQ,CAAA;AAG1D,IAAA,qBAAA,EAAsB,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACvC,MAAA,GAAA,CAAI,+BAA+B,KAAK,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH,CAAA,EAAG;AAAA,IACD,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,OAAO,WAAA,EAAa,eAAA;AAAA,IACpB,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,IAAA,CAAK,IAAA,IAAQ,CAAC,IAAA,CAAK,SAAA,EAAW;AAChC,MAAA,mBAAA,EAAoB;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,EAAW,mBAAmB,CAAC,CAAA;AAKnD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,SAAA,EAAW;AAC3C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AACxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,UAAA,GAAa,YAAY,MAAM;AACnC,MAAA,IAAI,2BAA0B,EAAG;AAC/B,QAAA,GAAA,CAAI,6CAA6C,CAAA;AACjD,QAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,QAAA,qBAAA,IAAwB;AAGxB,QAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,QAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAE3B,QAAA,IAAA,CAAK,UAAA,EAAW,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACjC,UAAA,GAAA,CAAI,8CAA8C,KAAK,CAAA;AAAA,QAEzD,CAAC,CAAA;AAAA,MACH;AAAA,IACF,CAAA,EAAG,CAAA,GAAI,EAAA,GAAK,GAAI,CAAA;AAEhB,IAAA,OAAO,MAAM,cAAc,UAAU,CAAA;AAAA,EACvC,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,uBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,OAAO;AAAA,IACL,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACF;AACF;AClVO,IAAM,wBAA8D,CAAC;AAAA,EAC1E,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA,GAAQ;AACV,CAAA,KAAM;AACJ,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIC,SAAS,KAAK,CAAA;AAEpD,EAAA,MAAM,kBAAA,GAAqBC,YAAY,MAAM;AAC3C,IAAA,IAAI,MAAA,CAAO,aAAa,oBAAA,EAAsB;AAC5C,MAAA,cAAA,CAAe,IAAI,CAAA;AAAA,IACrB;AAAA,EACF,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAE7C,EAAA,MAAM,oBAAA,GAAuBA,YAAY,MAAM;AAC7C,IAAA,cAAA,CAAe,KAAK,CAAA;AAAA,EACtB,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,kBAAA,GAAqBA,WAAAA,CAAY,CAAC,KAAA,KAAiB;AACvD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AAAA,IACtE;AACA,IAAA,MAAA,CAAO,MAAA,EAAQ,qBAAqB,KAAK,CAAA;AAAA,EAC3C,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,yBAAA,GAA4BA,YAAY,MAAM;AAClD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAK,6DAA6D,CAAA;AAAA,IAC5E;AACA,IAAA,MAAA,CAAO,QAAQ,cAAA,IAAiB;AAAA,EAClC,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,EAAE,YAAA,EAAc,qBAAA,EAAsB,GAAI,iBAAA,CAAkB;AAAA,IAChE,MAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAA,EAAgB,kBAAA;AAAA,IAChB,gBAAA,EAAkB,oBAAA;AAAA,IAClB,cAAA,EAAgB,kBAAA;AAAA,IAChB,qBAAA,EAAuB;AAAA,GACxB,CAAA;AAGD,EAAA,IAAI,qBAAA,EAAuB;AACzB,IAAA,uBACE,GAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB,SAAA;AAAA,UACjB,OAAA,EAAS,MAAA;AAAA,UACT,SAAA,EAAW;AAAA,SACb;AAAA,QAEA,QAAA,kBAAA,IAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,KAAA,EAAO;AAAA,cACL,eAAA,EAAiB,OAAA;AAAA,cACjB,OAAA,EAAS,MAAA;AAAA,cACT,YAAA,EAAc,KAAA;AAAA,cACd,SAAA,EAAW,2BAAA;AAAA,cACX,QAAA,EAAU;AAAA,aACZ;AAAA,YAEA,QAAA,EAAA;AAAA,8BAAA,GAAA,CAAC,IAAA,EAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,cAAc,KAAA,EAAO,MAAA,IAAU,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,8BACnE,GAAA,CAAC,OAAE,KAAA,EAAO,EAAE,QAAQ,YAAA,EAAc,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,gFAAA,EAEnD,CAAA;AAAA,8BACA,GAAA;AAAA,gBAAC,QAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,kBACtC,KAAA,EAAO;AAAA,oBACL,OAAA,EAAS,WAAA;AAAA,oBACT,eAAA,EAAiB,SAAA;AAAA,oBACjB,KAAA,EAAO,OAAA;AAAA,oBACP,MAAA,EAAQ,MAAA;AAAA,oBACR,YAAA,EAAc,KAAA;AAAA,oBACd,QAAA,EAAU,MAAA;AAAA,oBACV,MAAA,EAAQ,SAAA;AAAA,oBACR,UAAA,EAAY;AAAA,mBACd;AAAA,kBACD,QAAA,EAAA;AAAA;AAAA;AAED;AAAA;AAAA;AACF;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,IAAI,eAAe,YAAA,EAAc;AAC/B,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,WAAA,EAAa,cAAA,IAAkB,uBAAA;AAEtD,IAAA,uBACE,IAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB;AAAA,SACnB;AAAA,QAEA,QAAA,EAAA;AAAA,0BAAA,IAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,KAAA,EAAO;AAAA,gBACL,OAAA,EAAS,MAAA;AAAA,gBACT,aAAA,EAAe,QAAA;AAAA,gBACf,UAAA,EAAY,QAAA;AAAA,gBACZ,GAAA,EAAK;AAAA,eACP;AAAA,cAEA,QAAA,EAAA;AAAA,gCAAA,GAAA;AAAA,kBAAC,KAAA;AAAA,kBAAA;AAAA,oBACC,KAAA,EAAO;AAAA,sBACL,KAAA,EAAO,MAAA;AAAA,sBACP,MAAA,EAAQ,MAAA;AAAA,sBACR,MAAA,EAAQ,mBAAA;AAAA,sBACR,SAAA,EAAW,mBAAA;AAAA,sBACX,YAAA,EAAc,KAAA;AAAA,sBACd,SAAA,EAAW;AAAA;AACb;AAAA,iBACF;AAAA,gCACA,GAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,EAAI,QAAA,EAAA,OAAA,EAAQ;AAAA;AAAA;AAAA,WACrE;AAAA,8BACC,OAAA,EAAA,EACE,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,CAAA,EAMH;AAAA;AAAA;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,uCAAU,QAAA,EAAS,CAAA;AACrB;ACvEO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA,GAAW,WAAA;AAAA,EACX,gBAAA,GAAmB,GAAA;AAAA;AAAA,EACnB,iBAAA,GAAoB,EAAA;AAAA;AAAA,EACpB,eAAA,GAAkB,IAAA;AAAA,EAClB,WAAA,GAAc,IAAA;AAAA,EACd,cAAA,GAAiB,KAAA;AAAA,EACjB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAID,SAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,CAAC,oBAAA,EAAsB,uBAAuB,CAAA,GAAIA,SAAwB,IAAI,CAAA;AACpF,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,SAAS,cAAc,CAAA;AACzD,EAAA,MAAM,CAAC,gBAAA,EAAkB,mBAAmB,CAAA,GAAIA,SAAS,KAAK,CAAA;AAC9D,EAAA,MAAM,CAAC,iBAAA,EAAmB,oBAAoB,CAAA,GAAIA,SAAS,KAAK,CAAA;AAGhE,EAAAE,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,IAAA,CAAK,MAAM,UAAA,EAAY;AACnD,MAAA,gBAAA,CAAiB,IAAI,CAAA;AACrB,MAAA,uBAAA,CAAwB,IAAI,CAAA;AAC5B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,eAAA,GAAwD,IAAA;AAE5D,IAAA,MAAM,sBAAsB,MAAM;AAChC,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAM,UAAA;AAC7B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,MAAA,MAAM,YAAY,SAAA,GAAY,GAAA;AAG9B,MAAA,IAAI,oBAAA,KAAyB,IAAA,IAAQ,SAAA,GAAY,CAAA,EAAG;AAClD,QAAA,uBAAA,CAAwB,SAAS,CAAA;AAAA,MACnC;AAEA,MAAA,IAAI,aAAa,CAAA,EAAG;AAClB,QAAA,gBAAA,CAAiB,CAAC,CAAA;AAGlB,QAAA,SAAA,IAAY;AAGZ,QAAA,eAAA,GAAkB,WAAW,MAAM;AACjC,UAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,QACvB,GAAG,GAAI,CAAA;AAAA,MACT,CAAA,MAAO;AACL,QAAA,gBAAA,CAAiB,SAAS,CAAA;AAG1B,QAAA,IAAI,SAAA,IAAa,iBAAA,IAAqB,CAAC,iBAAA,EAAmB;AACxD,UAAA,oBAAA,CAAqB,IAAI,CAAA;AACzB,UAAA,UAAA,GAAa,SAAS,CAAA;AAAA,QACxB,CAAA,MAAA,IAAW,SAAA,IAAa,gBAAA,IAAoB,CAAC,gBAAA,EAAkB;AAC7D,UAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,UAAA,SAAA,GAAY,SAAS,CAAA;AAAA,QACvB;AAAA,MACF;AAAA,IACF,CAAA;AAEA,IAAA,mBAAA,EAAoB;AACpB,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,mBAAA,EAAqB,GAAI,CAAA;AAEtD,IAAA,OAAO,MAAM;AACX,MAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,YAAA,CAAa,eAAe,CAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,aAAA,IAAiB,gBAAgB,gBAAA,EAAkB;AACrD,MAAA,mBAAA,CAAoB,KAAK,CAAA;AACzB,MAAA,oBAAA,CAAqB,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAgB,CAAC,CAAA;AAGpC,EAAA,MAAM,UAAA,GAAaD,WAAAA,CAAY,CAAC,OAAA,KAA4B;AAC1D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,cAAA,GAAiBA,YAAY,MAAc;AAC/C,IAAA,IAAI,CAAC,eAAe,OAAO,QAAA;AAC3B,IAAA,IAAI,aAAA,IAAiB,mBAAmB,OAAO,UAAA;AAC/C,IAAA,IAAI,aAAA,IAAiB,kBAAkB,OAAO,SAAA;AAC9C,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAA,EAAkB,iBAAiB,CAAC,CAAA;AAGvD,EAAA,MAAM,WAAA,GAAcA,YAAY,MAAc;AAC5C,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,oBAAA,EAAsB,OAAO,GAAA;AACpD,IAAA,OAAO,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,IAAI,GAAA,EAAM,aAAA,GAAgB,oBAAA,GAAwB,GAAG,CAAC,CAAA;AAAA,EAChF,CAAA,EAAG,CAAC,aAAA,EAAe,oBAAoB,CAAC,CAAA;AAGxC,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,aAAA,KAAkB,IAAA,EAAM;AACnD,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAA,GAAY,oBAAA;AAClB,EAAA,MAAM,aAAA,GAAgB,uBAAuB,QAAQ,CAAA,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,CAAA,oBAAA,EAAuB,cAAA,EAAgB,CAAA,CAAA;AAC3D,EAAA,MAAM,cAAA,GAAiB,YAAY,+BAAA,GAAkC,EAAA;AACrE,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAEnG,EAAA,MAAM,WAAW,WAAA,EAAY;AAE7B,EAAA,uBACEE,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,SAAS,KAAA,EACtB,QAAA,EAAA;AAAA,IAAA,WAAA,oBACCC,GAAAA;AAAA,MAAC,QAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,4BAAA;AAAA,QACV,OAAA,EAAS,MAAM,YAAA,CAAa,CAAC,SAAS,CAAA;AAAA,QACtC,YAAA,EAAY,YAAY,wBAAA,GAA2B,0BAAA;AAAA,QACnD,KAAA,EAAO,YAAY,QAAA,GAAW,UAAA;AAAA,QAE7B,sBAAY,QAAA,GAAM;AAAA;AAAA,KACrB;AAAA,IAGD,CAAC,SAAA,oBACAD,IAAAA,CAAAE,UAAA,EACE,QAAA,EAAA;AAAA,sBAAAF,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EACb,QAAA,EAAA;AAAA,wBAAAC,IAAC,MAAA,EAAA,EAAK,SAAA,EAAU,6BACb,QAAA,EAAA,aAAA,KAAkB,CAAA,GAAI,oBAAoB,qBAAA,EAC7C,CAAA;AAAA,wBACAA,GAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,0BAAA,EACb,QAAA,EAAA,UAAA,CAAW,aAAa,CAAA,EAC3B;AAAA,OAAA,EACF,CAAA;AAAA,MAEC,mCACCA,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,oCACb,QAAA,kBAAAA,GAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,mCAAA;AAAA,UACV,KAAA,EAAO,EAAE,KAAA,EAAO,CAAA,EAAG,QAAQ,CAAA,CAAA,CAAA,EAAI;AAAA,UAC/B,IAAA,EAAK,aAAA;AAAA,UACL,eAAA,EAAe,QAAA;AAAA,UACf,eAAA,EAAe,CAAA;AAAA,UACf,eAAA,EAAe;AAAA;AAAA,OACjB,EACF;AAAA,KAAA,EAEJ;AAAA,GAAA,EAEJ,CAAA;AAEJ;;;ACpQO,IAAM,cAAA,GAAgE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAa3E,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,SAAA;AAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,eAAA,EAAiB;AAAA,IACf,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,KAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,cAAA,EAAgB;AAAA,IACd,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,WAAA,EAAa;AAAA,IACX,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,CAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB;AAEJ;AAaO,SAAS,gBAAgB,MAAA,EAA+C;AAC7E,EAAA,OAAO,eAAe,MAAM,CAAA;AAC9B;AAqBO,SAAS,eAAA,CACd,QACA,YAAA,EACyB;AACzB,EAAA,MAAM,YAAA,GAAe,gBAAgB,MAAM,CAAA;AAE3C,EAAA,OAAO;AAAA,IACL,GAAG,YAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,YAAA,CAAa,WAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,YAAA,CAAa,MAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AACF;AC7KA,SAAS,aAAa,KAAA,EAAwE;AAC5F,EAAA,OAAO,WAAA,IAAe,SAAS,UAAA,IAAc,KAAA;AAC/C;AAuGO,IAAM,gBAAA,GAAoD,CAAC,KAAA,KAAU;AAC1E,EAAA,MAAM,EAAE,QAAA,EAAU,KAAA,GAAQ,KAAA,EAAM,GAAI,KAAA;AAGpC,EAAA,MAAM,SAAyB,YAAA,CAAa,KAAK,IAC7C,eAAA,CAAgB,KAAK,IACrB,KAAA,CAAM,MAAA;AAGV,EAAA,MAAM,UAAA,GAAa,qBAAA,CAAsB,KAAA,CAAM,MAAM,CAAA;AAGrD,EAAA,MAAM,GAAA,GAAMH,WAAAA;AAAA,IACV,CAAC,KAAA,EAAkC,OAAA,EAAA,GAAoB,IAAA,KAAgB;AACrE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAM,MAAA,GAAS,oBAAA;AACf,QAAA,QAAQ,KAAA;AAAO,UACb,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACpC,YAAA;AAAA,UACF,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACrC,YAAA;AAAA,UACF,KAAK,OAAA;AACH,YAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACtC,YAAA;AAAA;AACJ,MACF;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,gBAAA,GAAmBA,WAAAA;AAAA,IACvB,CAAC,KAAA,KAA6B;AAC5B,MAAA,GAAA,CAAI,QAAQ,oBAAoB,CAAA;AAGhC,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA,CAAO,MAAA,EAAQ,UAAU,KAAa,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG;AAAA,GACrB;AAEA,EAAA,MAAM,iBAAA,GAAoBA,YAAY,MAAY;AAChD,IAAA,GAAA,CAAI,QAAQ,qBAAqB,CAAA;AAGjC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,IAAA,MAAA,CAAO,QAAQ,QAAA,IAAW;AAAA,EAC5B,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG,CAAC,CAAA;AAEvB,EAAA,MAAM,YAAA,GAAeA,YAAY,MAAY;AAC3C,IAAA,GAAA,CAAI,QAAQ,4DAA4D,CAAA;AAAA,EAC1E,CAAA,EAAG,CAAC,GAAG,CAAC,CAAA;AAKR,EAAA,MAAM,kBAAA,GAAqB,MAAA,CAAO,QAAA,EAAU,cAAA,KAAmB,KAAA;AAE/D,EAAA,uBACEG,GAAAA;AAAA,IAACE,YAAA;AAAA,IAAA;AAAA,MACE,GAAG,UAAA;AAAA,MACJ,gBAAA;AAAA,MACA,iBAAA;AAAA,MACA,YAAA;AAAA,MAEA,QAAA,kBAAAH,IAAAA,CAAC,qBAAA,EAAA,EAAsB,MAAA,EAAgB,KAAA,EAEpC,QAAA,EAAA;AAAA,QAAA,kBAAA,oBAAsBC,IAAC,cAAA,EAAA,EAAe,CAAA;AAAA,QAGtC;AAAA,OAAA,EACH;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,gBAAgB,KAAA,EAAwD;AAC/E,EAAA,MAAM,EAAE,WAAW,QAAA,EAAU,MAAA,GAAS,WAAW,MAAA,EAAQ,SAAA,GAAY,EAAC,EAAE,GAAI,KAAA;AAG5E,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,MAAA,EAAQ,SAAS,CAAA;AAGtD,EAAA,MAAM,UAAA,GAA6B;AAAA,IACjC,SAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA,EAAa,YAAA,CAAa,WAAA,IAAe,aAAA,CAAc,WAAA,KAAgB,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACtI,qBAAA,EAAuB,YAAA,CAAa,qBAAA,IAAyB,aAAA,CAAc,qBAAA,KAA0B,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACpK,KAAA,EAAO,YAAA,CAAa,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,IAC3C,QAAA,EAAU;AAAA,MACR,GAAG,aAAA,CAAc,QAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,aAAA,CAAc,WAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,aAAA,CAAc,QAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,aAAA,CAAc,MAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AAEA,EAAA,OAAO,UAAA;AACT;ACrOO,SAAS,QAAA,GAA2B;AACzC,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,MAAM,KAAA,GAAQ,QAAkB,MAAM;AACpC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,MAAA,OAAO,EAAC;AAAA,IACV;AAGA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,YAAA;AACtC,IAAA,OAAO,WAAA,EAAa,SAAS,EAAC;AAAA,EAChC,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,OAAA,GAAU,OAAA;AAAA,IACd,MAAM,CAAC,IAAA,KAA0B;AAC/B,MAAA,OAAO,KAAA,CAAM,SAAS,IAAI,CAAA;AAAA,IAC5B,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,UAAA,GAAa,OAAA;AAAA,IACjB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,IAAA,CAAK,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC1D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,WAAA,GAAc,OAAA;AAAA,IAClB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,KAAA,CAAM,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC3D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,cAAA,GAAiB,OAAA;AAAA,IACrB,MACE,CAAC,QAAA,KAA+B;AAC9B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,QAAA,OAAO,EAAC;AAAA,MACV;AAGA,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,eAAA;AAIzC,MAAA,OAAO,cAAA,GAAiB,QAAQ,CAAA,EAAG,KAAA,IAAS,EAAC;AAAA,IAC/C,CAAA;AAAA,IACF,CAAC,KAAK,IAAI;AAAA,GACZ;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACjEO,SAAS,SAAA,GAA6B;AAC3C,EAAA,MAAM,OAAO,OAAA,EAAQ;AAIrB,EAAA,MAAM,MAAA,GAASG,QAAkB,MAAM;AACrC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,KAAA,SAAc,EAAC;AAG/B,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAAA,EAC5D,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,QAAA,GAAWA,OAAAA;AAAA,IACf,MAAM,CAAC,KAAA,KAA2B;AAChC,MAAA,OAAO,MAAA,CAAO,SAAS,KAAK,CAAA;AAAA,IAC9B,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,WAAA,GAAcA,OAAAA;AAAA,IAClB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,IAAA,CAAK,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC9D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,YAAA,GAAeA,OAAAA;AAAA,IACnB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,KAAA,CAAM,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC/D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACwFO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA;AAAA,EACA,gBAAgB,EAAC;AAAA,EACjB,eAAA,GAAkB,KAAA;AAAA,EAClB,iBAAiB,EAAC;AAAA,EAClB,gBAAA,GAAmB,KAAA;AAAA,EACnB,MAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,UAAA,EAAY,WAAA,EAAY,GAAI,QAAA,EAAS;AAC7C,EAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAa,GAAI,SAAA,EAAU;AAChD,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,MAAM,aAAA,GAAgBC,OAAO,KAAK,CAAA;AAGlC,EAAA,MAAM,eAAA,GAAkB,CAAC,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,eAAA;AAGhD,EAAA,MAAM,YAAA,GAAe,MAAA,IAAU,IAAA,CAAK,IAAA,GAChC,MAAA,CAAO,KAAK,IAAA,EAAM,EAAE,QAAA,EAAU,CAAA,GAC9B,IAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,aAAA,CAAc,MAAA,GAAS,CAAA,GACrC,eAAA,GAAkB,YAAY,aAAa,CAAA,GAAI,UAAA,CAAW,aAAa,CAAA,GACxE,IAAA;AAGJ,EAAA,MAAM,WAAA,GAAc,cAAA,CAAe,MAAA,GAAS,CAAA,GACvC,gBAAA,GAAmB,aAAa,cAAc,CAAA,GAAI,WAAA,CAAY,cAAc,CAAA,GAC7E,IAAA;AAGJ,EAAA,MAAM,kBAAA,GACJ,CAAC,eAAA,GAAkB,mBAAA,GACnB,YAAA,KAAiB,KAAA,GAAQ,eAAA,GACzB,UAAA,KAAe,KAAA,GAAQ,oBAAA,GACvB,WAAA,KAAgB,KAAA,GAAQ,qBAAA,GACxB,IAAA;AAIF,EAAAN,UAAU,MAAM;AACd,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,cAAA,GAAiB,kBAAkB,CAAA;AAAA,IACrC;AAAA,EACF,CAAA,EAAG,CAAC,kBAAA,EAAoB,cAAc,CAAC,CAAA;AAGvC,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAK,SAAA,IAAa,CAAC,KAAK,eAAA,IAAmB,CAAC,cAAc,OAAA,EAAS;AACtE,MAAA,aAAA,CAAc,OAAA,GAAU,IAAA;AACxB,MAAA,IAAA,CAAK,cAAA,CAAe;AAAA,QAClB,cAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,QAAA,CAAS,WAAW,QAAA,CAAS;AAAA,OACrE,CAAA,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AAElB,QAAA,aAAA,CAAc,OAAA,GAAU,KAAA;AACxB,QAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAAA,MACjE,CAAC,CAAA;AAAA,IACH;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,iBAAiB,QAAA,CAAS,QAAA,EAAU,QAAA,CAAS,MAAM,CAAC,CAAA;AAG7E,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,MAAA,aAAA,CAAc,OAAA,GAAU,KAAA;AAAA,IAC1B;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,eAAe,CAAC,CAAA;AAGzB,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,uBAAOE,IAAAC,QAAAA,EAAA,EAAG,8CAAoBD,GAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,uBAAOA,IAAAC,QAAAA,EAAA,EAAG,8CAAoBD,GAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,uBAAOA,IAAAC,QAAAA,EAAA,EAAG,mDAAyBD,GAAAA,CAAC,gCAA6B,CAAA,EAAG,CAAA;AAAA,EACtE;AAGA,EAAA,uBAAOA,GAAAA,CAAAC,QAAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB;AAKA,IAAM,uBAAA,GAAoC,sBACxCF,IAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK;AAAA,KACP;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAC,GAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,mBAAA;AAAA,YACR,SAAA,EAAW,mBAAA;AAAA,YACX,YAAA,EAAc,KAAA;AAAA,YACd,KAAA,EAAO,MAAA;AAAA,YACP,MAAA,EAAQ,MAAA;AAAA,YACR,SAAA,EAAW;AAAA;AACb;AAAA,OACF;AAAA,sBACAA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,YAAA,EAAU,CAAA;AAAA,sBAClDA,IAAC,OAAA,EAAA,EAAO,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA,EAKN;AAAA;AAAA;AACJ,CAAA;AAMF,IAAM,4BAAA,GAAyC,sBAC7CD,IAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK,MAAA;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACb;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAC,GAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,QAAA,EAAU,MAAA;AAAA,YACV,KAAA,EAAO;AAAA,WACT;AAAA,UACD,QAAA,EAAA;AAAA;AAAA,OAED;AAAA,sBACAA,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,eAAA,EAAa,CAAA;AAAA,sBACtDA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,iDAAA,EAExC;AAAA;AAAA;AACF,CAAA;AC/QK,IAAM,cAA0C,CAAC;AAAA,EACtD,QAAA,GAAW,OAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,SAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,YAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,YAAA,IAAe;AACf,IAAA,IAAA,CAAK,cAAA,EAAe;AAAA,EACtB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,2BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACED,IAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYC,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;ACpCO,IAAM,eAA4C,CAAC;AAAA,EACxD,QAAA,GAAW,QAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,WAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,aAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,aAAA,IAAgB;AAChB,IAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,EACvB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACED,IAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYC,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;AC1CO,IAAM,cAA0C,CAAC;AAAA,EACtD,SAAA,GAAY,EAAA;AAAA,EACZ,UAAA,GAAa,IAAA;AAAA,EACb,SAAA,GAAY,IAAA;AAAA,EACZ,SAAA,GAAY,KAAA;AAAA,EACZ,UAAA,GAAa,EAAA;AAAA,EACb,KAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,QAAA,EAAS;AAG3B,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,KAAK,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,CAAK,OAAA;AAC1B,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,IAAQ,OAAA,CAAQ,kBAAA,IAAsB,MAAA;AAC3D,EAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA;AACtB,EAAA,MAAM,QAAA,GAAW,YAAY,IAAI,CAAA;AAEjC,EAAA,MAAM,SAAA,GAAY,iBAAA;AAClB,EAAA,MAAM,cAAA,GAAiB,UAAU,4BAAA,GAA+B,EAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAG,SAAS,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,GAAG,IAAA,EAAK;AAEnE,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAA,EAAQ;AAAA,IACV;AAAA,EACF,CAAA;AAEA,EAAA,uBACED,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,OAAA;AAAA,MACX,KAAA;AAAA,MACA,OAAA,EAAS,WAAA;AAAA,MACT,IAAA,EAAM,UAAU,QAAA,GAAW,MAAA;AAAA,MAC3B,QAAA,EAAU,UAAU,CAAA,GAAI,MAAA;AAAA,MACxB,UAAA,EAAY,UAAU,CAAC,CAAA,KAAM,EAAE,GAAA,KAAQ,OAAA,IAAW,aAAY,GAAI,MAAA;AAAA,MAEjE,QAAA,EAAA;AAAA,QAAA,UAAA,oBACCC,GAAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,yBAAA;AAAA,YACV,KAAA,EAAO;AAAA,cACL,KAAA,EAAO,UAAA;AAAA,cACP,MAAA,EAAQ,UAAA;AAAA,cACR,UAAU,UAAA,GAAa;AAAA,aACzB;AAAA,YAEC,QAAA,EAAA;AAAA;AAAA,SACH;AAAA,wBAGFD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EACb,QAAA,EAAA;AAAA,0BAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EAAyB,QAAA,EAAA,IAAA,EAAK,CAAA;AAAA,UAE5C,aAAa,KAAA,oBACZA,IAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAA0B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,UAGhD,SAAA,IAAa,MAAM,MAAA,GAAS,CAAA,oBAC3BD,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAU,wBAAA,EACZ,QAAA,EAAA;AAAA,YAAA,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAI,CAAC,IAAA,qBACtBC,GAAAA,CAAC,MAAA,EAAA,EAAgB,SAAA,EAAU,6BAAA,EACxB,QAAA,EAAA,IAAA,EAAA,EADQ,IAEX,CACD,CAAA;AAAA,YACA,MAAM,MAAA,GAAS,CAAA,oBACdD,IAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,6BAAA,EAA8B,QAAA,EAAA;AAAA,cAAA,GAAA;AAAA,cAC1C,MAAM,MAAA,GAAS;AAAA,aAAA,EACnB;AAAA,WAAA,EAEJ;AAAA,SAAA,EAEJ;AAAA;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,YAAY,IAAA,EAAsB;AACzC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AAEnC,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,OAAO,MAAM,CAAC,CAAA,CAAE,UAAU,CAAA,EAAG,CAAC,EAAE,WAAA,EAAY;AAAA,EAC9C;AAEA,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,CAAC,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,CAAE,CAAC,CAAA,EAAG,WAAA,EAAY;AAChE;;;ACpGA,eAAsB,kBACpB,UAAA,EACsC;AACtC,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,8BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA;AAClB,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,gCAAgC,QAAA,CAAS,MAAM,IAAI,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,OACtF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAmCA,eAAsB,YAAA,CACpB,YACA,UAAA,EAC+B;AAC/B,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,0BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,EAAa,YAAY;AAAA,KACjD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAGjC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,SAAA,GAAY,IAAA;AAGlB,MAAA,IACE,SAAA,CAAU,KAAA,KAAU,uBAAA,IACpB,SAAA,CAAU,UAAU,WAAA,EACpB;AACA,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,SAAA,CAAU,iBAAA,IAAqB,SAAA,CAAU,KAAA,IAAS;AAAA,OACpD;AAAA,IACF;AAGA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,EACxC;AACF;AAgBA,eAAsB,aAAA,CACpB,YACA,WAAA,EACc;AACd,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,6BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,YAAA,EAAc,aAAa;AAAA,KACnD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AC9IO,IAAM,cAA0C,CAAC;AAAA,EACtD,UAAA;AAAA,EACA,UAAA,GAAa,GAAA;AAAA,EACb,eAAA,GAAkB,CAAA;AAAA,EAClB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIH,SAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,SAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIA,SAAS,IAAI,CAAA;AAC3C,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAIA,SAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,YAAA,GAAeQ,OAAsB,IAAI,CAAA;AAC/C,EAAA,MAAM,cAAA,GAAiBA,OAA2B,IAAI,CAAA;AAGtD,EAAAN,UAAU,MAAM;AACd,IAAA,MAAM,iBAAiB,YAAY;AACjC,MAAA,UAAA,CAAW,IAAI,CAAA;AACf,MAAA,QAAA,CAAS,IAAI,CAAA;AAEb,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,UAAU,CAAA;AACnD,QAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,QAAA,gBAAA,CAAiB,SAAS,UAAU,CAAA;AAAA,MACtC,SAAS,GAAA,EAAK;AACZ,QAAA,MAAMO,MAAAA,GAAQ,GAAA;AACd,QAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,QAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,MACjB,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,KAAK,CAAA;AAAA,MAClB;AAAA,IACF,CAAA;AAEA,IAAA,cAAA,EAAe;AAAA,EACjB,CAAA,EAAG,CAAC,UAAA,EAAY,OAAO,CAAC,CAAA;AAGxB,EAAAP,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,IAAc,aAAA,KAAkB,IAAA,EAAM;AAE3C,IAAA,MAAM,QAAA,GAAW,YAAY,MAAM;AACjC,MAAA,gBAAA,CAAiB,CAAC,IAAA,KAAS;AACzB,QAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,IAAQ,CAAA,EAAG;AAC9B,UAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,UAAA,QAAA,CAAS,mDAAmD,CAAA;AAC5D,UAAA,OAAO,CAAA;AAAA,QACT;AACA,QAAA,OAAO,IAAA,GAAO,CAAA;AAAA,MAChB,CAAC,CAAA;AAAA,IACH,GAAG,GAAI,CAAA;AAEP,IAAA,OAAO,MAAM,cAAc,QAAQ,CAAA;AAAA,EACrC,CAAA,EAAG,CAAC,UAAA,EAAY,aAAa,CAAC,CAAA;AAG9B,EAAAA,UAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,EAAY;AAGjB,IAAA,cAAA,CAAe,UAAW,IAAA,CAAa,WAAA;AAEvC,IAAA,MAAM,OAAO,YAAY;AACvB,MAAA,IAAI;AACF,QAAA,MAAM,aAAA,GAAgB,MAAM,YAAA,CAAa,UAAA,EAAY,WAAW,WAAW,CAAA;AAE3E,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AAGA,UAAA,MAAM,QAAA,GAAW,MAAM,aAAA,CAAc,UAAA,EAAY,cAAc,YAAY,CAAA;AAG3E,UAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK;AAAA,YACpB,QAAA,EAAU,cAAc,QAAA,IAAY,EAAA;AAAA,YACpC,cAAc,aAAA,CAAc,YAAA;AAAA,YAC5B,YAAY,aAAA,CAAc,UAAA;AAAA,YAC1B,OAAA,EAAS,QAAA;AAAA,YACT,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,KAAI,GAAI,GAAI,IAAI,aAAA,CAAc,UAAA;AAAA,YAC1D,OAAO,aAAA,CAAc,KAAA;AAAA,YACrB,eAAe,aAAA,CAAc;AAAA,WAC9B,CAAA;AAGD,UAAA,IAAI,eAAe,OAAA,EAAS;AAC1B,YAAA,MAAM,cAAA,CAAe,OAAA,CAAQ,SAAA,CAAU,IAAI,CAAA;AAAA,UAC7C;AAGA,UAAA,SAAA,GAAY,IAAI,CAAA;AAAA,QAClB;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAI,CAAE,GAAA,CAAc,OAAA,CAAQ,QAAA,CAAS,uBAAuB,CAAA,EAAG;AAC7D,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AACA,UAAA,MAAMO,MAAAA,GAAQ,GAAA;AACd,UAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,UAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,QACjB;AAAA,MACF;AAAA,IACF,CAAA;AAGA,IAAA,YAAA,CAAa,OAAA,GAAU,WAAA,CAAY,IAAA,EAAM,eAAA,GAAkB,GAAI,CAAA;AAG/D,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,MACpC;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,UAAA,EAAY,UAAA,EAAY,iBAAiB,SAAA,EAAW,OAAA,EAAS,IAAI,CAAC,CAAA;AAEtE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,uBACEN,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,yCAAA,EAA4C,SAAS,IAAI,KAAA,EACvE,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAAA,EAA2B,CAAA;AAAA,sBAC1CA,GAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,6BAAA,EAA2B;AAAA,KAAA,EAChC,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,uBACED,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,uCAAA,EAA0C,SAAS,IAAI,KAAA,EACrE,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EAA8B,QAAA,EAAA,cAAA,EAAE,CAAA;AAAA,sBAC/CA,GAAAA,CAAC,IAAA,EAAA,EAAG,QAAA,EAAA,OAAA,EAAK,CAAA;AAAA,sBACTA,GAAAA,CAAC,GAAA,EAAA,EAAG,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACVA,GAAAA;AAAA,QAAC,QAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,8BAAA;AAAA,UACV,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,UACvC,QAAA,EAAA;AAAA;AAAA;AAED,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAAA,GAAa,CAAC,OAAA,KAA4B;AAC9C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA;AAEA,EAAA,uBACED,IAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,gBAAA,EAAmB,SAAS,IAAI,KAAA,EAC9C,QAAA,EAAA;AAAA,oBAAAC,GAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,wBAAA,EAAyB,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,oBAEnDA,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,qBAAA,EACb,QAAA,kBAAAA,GAAAA,CAAC,SAAA,EAAA,EAAU,KAAA,EAAO,UAAA,CAAW,yBAAA,EAA2B,IAAA,EAAM,YAAY,CAAA,EAC5E,CAAA;AAAA,oBAEAD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,+BAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,OAAE,QAAA,EAAA,4CAAA,EAA0C,CAAA;AAAA,sBAC7CA,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,sBAAA,EAAwB,qBAAW,gBAAA,EAAiB,CAAA;AAAA,sBACpEA,GAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,sBAClBA,GAAAA,CAAC,QAAA,EAAA,EAAO,SAAA,EAAU,4BAAA,EAA8B,qBAAW,SAAA,EAAU;AAAA,KAAA,EACvE,CAAA;AAAA,IAEC,aAAA,KAAkB,QAAQ,aAAA,GAAgB,CAAA,oBACzCD,IAAAA,CAAC,GAAA,EAAA,EAAE,WAAU,yBAAA,EAA0B,QAAA,EAAA;AAAA,MAAA,kBAAA;AAAA,MACpB,WAAW,aAAa;AAAA,KAAA,EAC3C,CAAA;AAAA,oBAGFA,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,yBAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0DAAA,EAA2D,CAAA;AAAA,sBAC1EA,GAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,8BAAA,EAA4B;AAAA,KAAA,EACjC;AAAA,GAAA,EACF,CAAA;AAEJ;ACpJO,SAAS,iBAAA,CACd,OAAA,GAAoC,EAAC,EACZ;AACzB,EAAA,MAAM,OAAO,OAAA,EAAQ;AAErB,EAAA,MAAM;AAAA,IACJ,OAAA,GAAU,EAAA;AAAA,IACV,cAAA;AAAA,IACA,UAAA,GAAa,IAAA;AAAA,IACb,OAAA,EAAS,gBAAgB;AAAC,GAC5B,GAAI,OAAA;AAKJ,EAAA,MAAM,QAAA,GAAWH,WAAAA;AAAA,IACf,CAAC,GAAA,KAAwB;AAEvB,MAAA,IAAI,IAAI,UAAA,CAAW,SAAS,KAAK,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC3D,QAAA,OAAO,GAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAA,GAAO,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAC5D,MAAA,MAAM,OAAO,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA,GAAM,IAAI,GAAG,CAAA,CAAA;AAEhD,MAAA,OAAO,IAAA,GAAO,IAAA;AAAA,IAChB,CAAA;AAAA,IACA,CAAC,OAAO;AAAA,GACV;AAMA,EAAA,MAAM,gBAAgB,MAA8B;AAClD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,YAAA,EAAc;AAC5B,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA;AAAA,KACjD;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,YAAA,GAAeA,WAAAA;AAAA,IACnB,CAAC,cAAA,KAA0C;AACzC,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,cAAc,CAAA;AAG1C,MAAA,MAAM,aAAa,aAAA,EAAc;AACjC,MAAA,IAAI,WAAW,aAAA,EAAe;AAC5B,QAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,UAAA,CAAW,aAAa,CAAA;AAAA,MACvD;AAGA,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AACtD,QAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,MACxB,CAAC,CAAA;AAED,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,aAAa;AAAA,GAChB;AAKA,EAAA,MAAM,cAAA,GAAiBA,WAAAA;AAAA,IACrB,OAAO,KAAa,IAAA,KAA0C;AAC5D,MAAA,MAAM,OAAA,GAAU,SAAS,GAAG,CAAA;AAC5B,MAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAE1C,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,QACpC,GAAG,IAAA;AAAA,QACH;AAAA,OACD,CAAA;AAGD,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,QAAA,cAAA,IAAiB;AAEjB,QAAA,IAAI,UAAA,IAAc,KAAK,IAAA,EAAM;AAE3B,UAAA,IAAI;AACF,YAAA,MAAM,KAAK,YAAA,EAAa;AAGxB,YAAA,MAAM,UAAA,GAAa,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAC7C,YAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,cACzC,GAAG,IAAA;AAAA,cACH,OAAA,EAAS;AAAA,aACV,CAAA;AAED,YAAA,OAAO,aAAA;AAAA,UACT,SAAS,KAAA,EAAO;AAEd,YAAA,OAAO,QAAA;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,QAAA,EAAU,YAAA,EAAc,cAAA,EAAgB,YAAY,IAAI;AAAA,GAC3D;AAKA,EAAA,MAAM,SAAA,GAAYA,WAAAA;AAAA,IAChB,OAAgB,KAAa,IAAA,KAAmC;AAC9D,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,GAAA,EAAK,IAAI,CAAA;AAE/C,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,QAAQ,QAAA,CAAS,MAAM,KAAK,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,SAC/D;AAAA,MACF;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,cAAc;AAAA,GACjB;AAEA,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA,EAAO,cAAA;AAAA,IACP,WAAW,IAAA,CAAK;AAAA,GAClB;AACF","file":"index.mjs","sourcesContent":["import type { KeycloakConfig } from './types';\n\n/**\n * Default configuration values for Keycloak integration\n */\nexport const defaultConfig: Partial<KeycloakConfig> = {\n redirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n postLogoutRedirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n scope: 'openid profile email offline_access',\n\n features: {\n deviceFlow: false,\n sessionMonitor: true,\n autoRefresh: true,\n },\n\n silentRenew: {\n enabled: true,\n silentRedirectUri:\n typeof window !== 'undefined'\n ? window.location.origin + '/silent-renew.html'\n : '/silent-renew.html',\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both', // Check on startup AND retry on 401\n maxRefreshTokenLifetime: 2592000, // 30 days in seconds\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n\n events: {},\n};\n","import type { UserManagerSettings } from 'oidc-client-ts';\nimport type { KeycloakConfig } from './types';\nimport { defaultConfig } from './defaults';\n\n/**\n * Configuration builder for Keycloak integration\n */\nexport class KeycloakConfigBuilder {\n /**\n * Builds OIDC client configuration from Keycloak config\n *\n * @param userConfig - User-provided Keycloak configuration\n * @returns OIDC client settings ready for react-oidc-context\n * @throws Error if required fields are missing or invalid\n */\n static build(userConfig: KeycloakConfig): UserManagerSettings {\n // Validate required fields\n this.validate(userConfig);\n\n // Merge with defaults\n const config = this.mergeWithDefaults(userConfig);\n\n // Build OIDC settings\n const oidcSettings: UserManagerSettings = {\n authority: config.authority,\n client_id: config.clientId,\n redirect_uri: config.redirectUri!,\n post_logout_redirect_uri: config.postLogoutRedirectUri!,\n response_type: config.advanced!.responseType!,\n scope: config.scope!,\n automaticSilentRenew: config.silentRenew!.enabled!,\n loadUserInfo: config.advanced!.loadUserInfo!,\n silent_redirect_uri: config.silentRenew!.silentRedirectUri!,\n\n // Add PKCE support (required for public clients)\n ...(config.advanced!.codeChallengeMethod && {\n response_mode: 'query',\n }),\n };\n\n return oidcSettings;\n }\n\n /**\n * Validates required configuration fields\n *\n * @param config - Configuration to validate\n * @throws Error if validation fails\n */\n private static validate(config: KeycloakConfig): void {\n if (!config.authority) {\n throw new Error('Keycloak authority is required');\n }\n\n if (!config.clientId) {\n throw new Error('Keycloak clientId is required');\n }\n\n // Validate URL format\n try {\n new URL(config.authority);\n } catch {\n throw new Error('Keycloak authority must be a valid URL');\n }\n }\n\n /**\n * Merges user configuration with defaults\n *\n * @param config - User configuration\n * @returns Merged configuration with all defaults applied\n */\n private static mergeWithDefaults(config: KeycloakConfig): Required<KeycloakConfig> {\n return {\n authority: config.authority,\n clientId: config.clientId,\n redirectUri: config.redirectUri ?? defaultConfig.redirectUri!,\n postLogoutRedirectUri:\n config.postLogoutRedirectUri ?? defaultConfig.postLogoutRedirectUri!,\n scope: config.scope ?? defaultConfig.scope!,\n features: {\n ...defaultConfig.features,\n ...config.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...config.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...config.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...config.events,\n },\n } as Required<KeycloakConfig>;\n }\n}\n\n/**\n * Helper function to get configuration from environment variables\n *\n * @returns Partial Keycloak configuration from environment\n */\nexport function getConfigFromEnv(): Partial<KeycloakConfig> {\n // Check if running in browser with Vite\n if (typeof import.meta === 'undefined') {\n return {};\n }\n\n // Type-safe access to import.meta.env\n const env = (import.meta as any).env;\n if (!env) {\n return {};\n }\n\n return {\n authority: env.VITE_KEYCLOAK_AUTHORITY as string | undefined,\n clientId: env.VITE_KEYCLOAK_CLIENT_ID as string | undefined,\n features: {\n deviceFlow: env.VITE_ENABLE_DEVICE_FLOW === 'true',\n sessionMonitor: env.VITE_ENABLE_SESSION_MONITOR === 'true',\n },\n };\n}\n","import { useAuth as useOidcAuth } from 'react-oidc-context';\n\n/**\n * Main authentication hook for accessing Keycloak authentication state and methods\n *\n * This hook provides access to the current user, authentication state, and methods\n * for signing in and out. It must be used within a KeycloakProvider component.\n *\n * @returns Authentication state and methods\n *\n * @example\n * ```tsx\n * import { useAuth } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const auth = useAuth();\n *\n * if (auth.isLoading) {\n * return <div>Loading...</div>;\n * }\n *\n * if (!auth.isAuthenticated) {\n * return <button onClick={() => auth.signinRedirect()}>Login</button>;\n * }\n *\n * return (\n * <div>\n * <p>Welcome, {auth.user?.profile?.name}</p>\n * <button onClick={() => auth.signoutRedirect()}>Logout</button>\n * </div>\n * );\n * }\n * ```\n *\n * @example Role checking\n * ```tsx\n * function AdminPanel() {\n * const auth = useAuth();\n * const roles = auth.user?.profile?.realm_access?.roles || [];\n *\n * if (!roles.includes('admin')) {\n * return <div>Access denied</div>;\n * }\n *\n * return <div>Admin panel content</div>;\n * }\n * ```\n */\nexport const useAuth = useOidcAuth;\n\nexport type {\n /**\n * Authentication context returned by useAuth\n */\n AuthContextProps as UseAuthReturn,\n} from 'react-oidc-context';\n","import { useEffect, useState, useCallback, useRef } from 'react';\nimport { useAuth } from './useAuth';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface UseTokenLifecycleOptions {\n /**\n * Keycloak configuration for token lifecycle settings\n */\n config: KeycloakConfig;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n\n /**\n * Callback when token refresh starts\n */\n onRefreshStart?: () => void;\n\n /**\n * Callback when token refresh succeeds\n */\n onRefreshSuccess?: () => void;\n\n /**\n * Callback when token refresh fails\n */\n onRefreshError?: (error: Error) => void;\n\n /**\n * Callback when refresh token lifetime expires\n */\n onRefreshTokenExpired?: () => void;\n}\n\nexport interface UseTokenLifecycleReturn {\n /**\n * Whether token is being refreshed\n */\n isRefreshing: boolean;\n\n /**\n * Whether refresh token has exceeded max lifetime\n */\n isRefreshTokenExpired: boolean;\n\n /**\n * Manually trigger token refresh\n */\n refreshToken: () => Promise<void>;\n\n /**\n * Check if tokens need refresh and do it if needed\n */\n checkAndRefreshTokens: () => Promise<boolean>;\n}\n\nconst STORAGE_KEY_PREFIX = 'keycloak_first_login_';\n\n/**\n * Hook to manage token lifecycle including startup refresh and max lifetime tracking\n *\n * This hook provides proactive token management:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Provides manual refresh capabilities\n *\n * @param options - Configuration options\n * @returns Token lifecycle methods and state\n *\n * @example\n * ```tsx\n * import { useTokenLifecycle } from 'antaeus.keycloak.react';\n *\n * function App() {\n * const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n * config: myConfig,\n * onRefreshStart: () => console.log('Refreshing...'),\n * onRefreshSuccess: () => console.log('Refreshed!'),\n * onRefreshError: (error) => console.error('Failed:', error),\n * });\n *\n * if (isRefreshing) return <div>Loading...</div>;\n * if (isRefreshTokenExpired) return <div>Please sign in again</div>;\n *\n * return <YourApp />;\n * }\n * ```\n */\nexport function useTokenLifecycle(\n options: UseTokenLifecycleOptions\n): UseTokenLifecycleReturn {\n const {\n config,\n debug = false,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n } = options;\n\n const auth = useAuth();\n const [isRefreshing, setIsRefreshing] = useState(false);\n const [isRefreshTokenExpired, setIsRefreshTokenExpired] = useState(false);\n const hasCheckedOnStartup = useRef(false);\n\n const log = useCallback(\n (message: string, ...args: any[]) => {\n if (debug) {\n console.log('[TokenLifecycle]', message, ...args);\n }\n },\n [debug]\n );\n\n /**\n * Get the storage key for tracking first login time\n */\n const getStorageKey = useCallback((): string => {\n const authority = config.authority;\n const clientId = config.clientId;\n return `${STORAGE_KEY_PREFIX}${authority}_${clientId}`;\n }, [config.authority, config.clientId]);\n\n /**\n * Store the first login timestamp\n */\n const storeFirstLoginTime = useCallback(() => {\n const key = getStorageKey();\n const existingTime = localStorage.getItem(key);\n\n if (!existingTime) {\n const now = Date.now();\n localStorage.setItem(key, now.toString());\n log('Stored first login time:', new Date(now).toISOString());\n }\n }, [getStorageKey, log]);\n\n /**\n * Check if refresh token has exceeded max lifetime\n */\n const checkRefreshTokenLifetime = useCallback((): boolean => {\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n\n // If no max lifetime configured, never expire\n if (!maxLifetime || maxLifetime <= 0) {\n return false;\n }\n\n const key = getStorageKey();\n const firstLoginStr = localStorage.getItem(key);\n\n if (!firstLoginStr) {\n // No first login recorded, store current time\n storeFirstLoginTime();\n return false;\n }\n\n const firstLoginTime = parseInt(firstLoginStr, 10);\n const now = Date.now();\n const elapsedSeconds = (now - firstLoginTime) / 1000;\n\n log('Refresh token lifetime check:', {\n firstLogin: new Date(firstLoginTime).toISOString(),\n elapsedSeconds,\n maxLifetime,\n isExpired: elapsedSeconds >= maxLifetime,\n });\n\n return elapsedSeconds >= maxLifetime;\n }, [config.silentRenew?.maxRefreshTokenLifetime, getStorageKey, log, storeFirstLoginTime]);\n\n /**\n * Manually refresh tokens\n */\n const refreshToken = useCallback(async (): Promise<void> => {\n if (isRefreshing) {\n log('Refresh already in progress, skipping');\n return;\n }\n\n // Check if refresh token has exceeded max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime, cannot refresh');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n return;\n }\n\n try {\n setIsRefreshing(true);\n onRefreshStart?.();\n log('Starting token refresh');\n\n await auth.signinSilent();\n\n log('Token refresh successful');\n onRefreshSuccess?.();\n } catch (error) {\n const err = error instanceof Error ? error : new Error(String(error));\n log('Token refresh failed:', err.message);\n onRefreshError?.(err);\n throw err;\n } finally {\n setIsRefreshing(false);\n }\n }, [\n isRefreshing,\n auth,\n checkRefreshTokenLifetime,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n log,\n ]);\n\n /**\n * Check if tokens are expired or about to expire and refresh if needed\n */\n const checkAndRefreshTokens = useCallback(async (): Promise<boolean> => {\n if (!auth.user) {\n log('No user session, skipping token check');\n return false;\n }\n\n // Check refresh token max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n\n try {\n await auth.removeUser();\n } catch (error) {\n log('Error removing user after max lifetime:', error);\n // Continue even if removeUser fails\n }\n\n return false;\n }\n\n const expiresAt = auth.user.expires_at;\n if (!expiresAt) {\n log('No expiration time found, skipping token check');\n return false;\n }\n\n const now = Math.floor(Date.now() / 1000);\n const threshold = config.silentRenew?.thresholdSeconds || 300;\n const timeUntilExpiry = expiresAt - now;\n\n log('Token expiration check:', {\n expiresAt: new Date(expiresAt * 1000).toISOString(),\n now: new Date(now * 1000).toISOString(),\n timeUntilExpiry,\n threshold,\n needsRefresh: timeUntilExpiry <= threshold,\n });\n\n // If token is expired or about to expire, refresh it\n if (timeUntilExpiry <= threshold) {\n try {\n await refreshToken();\n return true;\n } catch (error) {\n log('Failed to refresh tokens:', error);\n return false;\n }\n }\n\n log('Tokens are still valid, no refresh needed');\n return false;\n }, [\n auth,\n config.silentRenew?.thresholdSeconds,\n checkRefreshTokenLifetime,\n refreshToken,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n /**\n * Effect: Check and refresh tokens on startup if strategy includes 'startup'\n */\n useEffect(() => {\n const strategy = config.silentRenew?.refreshStrategy || 'both';\n const shouldCheckOnStartup = strategy === 'startup' || strategy === 'both';\n\n if (!shouldCheckOnStartup || hasCheckedOnStartup.current) {\n return;\n }\n\n if (!auth.isAuthenticated || auth.isLoading) {\n return;\n }\n\n hasCheckedOnStartup.current = true;\n log('Running startup token check with strategy:', strategy);\n\n // Run check asynchronously\n checkAndRefreshTokens().catch((error) => {\n log('Startup token check failed:', error);\n });\n }, [\n auth.isAuthenticated,\n auth.isLoading,\n config.silentRenew?.refreshStrategy,\n checkAndRefreshTokens,\n log,\n ]);\n\n /**\n * Effect: Store first login time when user logs in\n */\n useEffect(() => {\n if (auth.user && !auth.isLoading) {\n storeFirstLoginTime();\n }\n }, [auth.user, auth.isLoading, storeFirstLoginTime]);\n\n /**\n * Effect: Check refresh token lifetime periodically\n */\n useEffect(() => {\n if (!auth.isAuthenticated || auth.isLoading) {\n return;\n }\n\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n if (!maxLifetime || maxLifetime <= 0) {\n return;\n }\n\n // Check every 5 minutes\n const intervalId = setInterval(() => {\n if (checkRefreshTokenLifetime()) {\n log('Refresh token expired during periodic check');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n\n auth.removeUser().catch((error) => {\n log('Error removing user during periodic check:', error);\n // Continue even if removeUser fails\n });\n }\n }, 5 * 60 * 1000);\n\n return () => clearInterval(intervalId);\n }, [\n auth,\n config.silentRenew?.maxRefreshTokenLifetime,\n checkRefreshTokenLifetime,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n return {\n isRefreshing,\n isRefreshTokenExpired,\n refreshToken,\n checkAndRefreshTokens,\n };\n}\n","import React, { useState, useCallback } from 'react';\nimport { useTokenLifecycle } from '../hooks/useTokenLifecycle';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface TokenLifecycleManagerProps {\n /**\n * Keycloak configuration\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Component that manages token lifecycle including startup refresh and max lifetime tracking\n *\n * This component wraps your app and automatically:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Shows optional loading indicator during refresh\n *\n * @example\n * ```tsx\n * <TokenLifecycleManager config={config} debug={true}>\n * <YourApp />\n * </TokenLifecycleManager>\n * ```\n */\nexport const TokenLifecycleManager: React.FC<TokenLifecycleManagerProps> = ({\n config,\n children,\n debug = false,\n}) => {\n const [showLoading, setShowLoading] = useState(false);\n\n const handleRefreshStart = useCallback(() => {\n if (config.silentRenew?.showLoadingIndicator) {\n setShowLoading(true);\n }\n }, [config.silentRenew?.showLoadingIndicator]);\n\n const handleRefreshSuccess = useCallback(() => {\n setShowLoading(false);\n }, []);\n\n const handleRefreshError = useCallback((error: Error) => {\n setShowLoading(false);\n if (debug) {\n console.error('[TokenLifecycleManager] Token refresh failed:', error);\n }\n config.events?.onSilentRenewError?.(error);\n }, [config.events, debug]);\n\n const handleRefreshTokenExpired = useCallback(() => {\n setShowLoading(false);\n if (debug) {\n console.warn('[TokenLifecycleManager] Refresh token exceeded max lifetime');\n }\n config.events?.onTokenExpired?.();\n }, [config.events, debug]);\n\n const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n config,\n debug,\n onRefreshStart: handleRefreshStart,\n onRefreshSuccess: handleRefreshSuccess,\n onRefreshError: handleRefreshError,\n onRefreshTokenExpired: handleRefreshTokenExpired,\n });\n\n // If refresh token expired, show message and require re-authentication\n if (isRefreshTokenExpired) {\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n padding: '20px',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n backgroundColor: 'white',\n padding: '40px',\n borderRadius: '8px',\n boxShadow: '0 2px 8px rgba(0,0,0,0.1)',\n maxWidth: '400px',\n }}\n >\n <h2 style={{ margin: '0 0 16px 0', color: '#333' }}>Session Expired</h2>\n <p style={{ margin: '0 0 24px 0', color: '#666' }}>\n Your session has been inactive for too long. Please sign in again to continue.\n </p>\n <button\n onClick={() => window.location.reload()}\n style={{\n padding: '12px 24px',\n backgroundColor: '#007bff',\n color: 'white',\n border: 'none',\n borderRadius: '4px',\n fontSize: '16px',\n cursor: 'pointer',\n fontWeight: '500',\n }}\n >\n Sign In Again\n </button>\n </div>\n </div>\n );\n }\n\n // Show loading indicator during refresh if configured\n if (showLoading && isRefreshing) {\n const message = config.silentRenew?.loadingMessage || 'Refreshing session...';\n\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n }}\n >\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n gap: '16px',\n }}\n >\n <div\n style={{\n width: '40px',\n height: '40px',\n border: '4px solid #e0e0e0',\n borderTop: '4px solid #007bff',\n borderRadius: '50%',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ margin: 0, color: '#666', fontSize: '16px' }}>{message}</p>\n </div>\n <style>\n {`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}\n </style>\n </div>\n );\n }\n\n // Normal rendering\n return <>{children}</>;\n};\n","import React, { useEffect, useState, useCallback } from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface SessionMonitorProps {\n /**\n * Position on screen\n * @default 'top-right'\n */\n position?: 'top-left' | 'top-right' | 'bottom-left' | 'bottom-right';\n\n /**\n * Warning threshold in seconds (yellow state)\n * @default 300 (5 minutes)\n */\n warningThreshold?: number;\n\n /**\n * Critical threshold in seconds (red state)\n * @default 60 (1 minute)\n */\n criticalThreshold?: number;\n\n /**\n * Show progress bar\n * @default true\n */\n showProgressBar?: boolean;\n\n /**\n * Allow minimize/expand\n * @default true\n */\n minimizable?: boolean;\n\n /**\n * Start minimized\n * @default false\n */\n startMinimized?: boolean;\n\n /**\n * Custom CSS class names\n */\n className?: string;\n\n /**\n * Callback when warning threshold is reached\n */\n onWarning?: (secondsRemaining: number) => void;\n\n /**\n * Callback when critical threshold is reached\n */\n onCritical?: (secondsRemaining: number) => void;\n\n /**\n * Callback when session expires\n */\n onExpired?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Session monitoring component with countdown timer\n *\n * Displays the time remaining until the user's session expires. Shows visual\n * warnings when the session is about to expire and triggers callbacks for\n * custom handling.\n *\n * @example Basic usage\n * ```tsx\n * import { SessionMonitor } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <>\n * <SessionMonitor />\n * <YourApp />\n * </>\n * );\n * }\n * ```\n *\n * @example With custom thresholds\n * ```tsx\n * <SessionMonitor\n * warningThreshold={600} // 10 minutes\n * criticalThreshold={120} // 2 minutes\n * onWarning={(seconds) => {\n * console.log(`Session expiring in ${seconds} seconds`);\n * }}\n * />\n * ```\n *\n * @example Custom position and style\n * ```tsx\n * <SessionMonitor\n * position=\"bottom-left\"\n * showProgressBar={false}\n * minimizable={false}\n * />\n * ```\n */\nexport const SessionMonitor: React.FC<SessionMonitorProps> = ({\n position = 'top-right',\n warningThreshold = 300, // 5 minutes\n criticalThreshold = 60, // 1 minute\n showProgressBar = true,\n minimizable = true,\n startMinimized = false,\n className = '',\n onWarning,\n onCritical,\n onExpired,\n style,\n}) => {\n const auth = useAuth();\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const [initialTimeRemaining, setInitialTimeRemaining] = useState<number | null>(null);\n const [minimized, setMinimized] = useState(startMinimized);\n const [warningTriggered, setWarningTriggered] = useState(false);\n const [criticalTriggered, setCriticalTriggered] = useState(false);\n\n // Update time remaining every second\n useEffect(() => {\n if (!auth.isAuthenticated || !auth.user?.expires_at) {\n setTimeRemaining(null);\n setInitialTimeRemaining(null);\n return;\n }\n\n let logoutTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n const updateTimeRemaining = () => {\n const expiresAt = auth.user!.expires_at!;\n const now = Math.floor(Date.now() / 1000);\n const remaining = expiresAt - now;\n\n // Store initial time remaining on first calculation\n if (initialTimeRemaining === null && remaining > 0) {\n setInitialTimeRemaining(remaining);\n }\n\n if (remaining <= 0) {\n setTimeRemaining(0);\n\n // Trigger expired callback\n onExpired?.();\n\n // Auto logout after 2 seconds (with cleanup)\n logoutTimeoutId = setTimeout(() => {\n auth.signoutRedirect();\n }, 2000);\n } else {\n setTimeRemaining(remaining);\n\n // Trigger callbacks once\n if (remaining <= criticalThreshold && !criticalTriggered) {\n setCriticalTriggered(true);\n onCritical?.(remaining);\n } else if (remaining <= warningThreshold && !warningTriggered) {\n setWarningTriggered(true);\n onWarning?.(remaining);\n }\n }\n };\n\n updateTimeRemaining();\n const interval = setInterval(updateTimeRemaining, 1000);\n\n return () => {\n clearInterval(interval);\n if (logoutTimeoutId) {\n clearTimeout(logoutTimeoutId);\n }\n };\n }, [\n auth,\n warningThreshold,\n criticalThreshold,\n warningTriggered,\n criticalTriggered,\n initialTimeRemaining,\n onWarning,\n onCritical,\n onExpired,\n ]);\n\n // Reset warning flags when thresholds change\n useEffect(() => {\n if (timeRemaining && timeRemaining > warningThreshold) {\n setWarningTriggered(false);\n setCriticalTriggered(false);\n }\n }, [timeRemaining, warningThreshold]);\n\n // Format time as MM:SS\n const formatTime = useCallback((seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n }, []);\n\n // Get status class based on time remaining\n const getStatusClass = useCallback((): string => {\n if (!timeRemaining) return 'normal';\n if (timeRemaining <= criticalThreshold) return 'critical';\n if (timeRemaining <= warningThreshold) return 'warning';\n return 'normal';\n }, [timeRemaining, warningThreshold, criticalThreshold]);\n\n // Calculate progress percentage\n const getProgress = useCallback((): number => {\n if (!timeRemaining || !initialTimeRemaining) return 100;\n return Math.max(0, Math.min(100, (timeRemaining / initialTimeRemaining) * 100));\n }, [timeRemaining, initialTimeRemaining]);\n\n // Don't render if not authenticated or no time info\n if (!auth.isAuthenticated || timeRemaining === null) {\n return null;\n }\n\n const baseClass = 'kc-session-monitor';\n const positionClass = `kc-session-monitor--${position}`;\n const statusClass = `kc-session-monitor--${getStatusClass()}`;\n const minimizedClass = minimized ? 'kc-session-monitor--minimized' : '';\n const classes = `${baseClass} ${positionClass} ${statusClass} ${minimizedClass} ${className}`.trim();\n\n const progress = getProgress();\n\n return (\n <div className={classes} style={style}>\n {minimizable && (\n <button\n className=\"kc-session-monitor__toggle\"\n onClick={() => setMinimized(!minimized)}\n aria-label={minimized ? 'Expand session monitor' : 'Minimize session monitor'}\n title={minimized ? 'Expand' : 'Minimize'}\n >\n {minimized ? '▲' : '▼'}\n </button>\n )}\n\n {!minimized && (\n <>\n <div className=\"kc-session-monitor__content\">\n <span className=\"kc-session-monitor__label\">\n {timeRemaining === 0 ? 'Session expired' : 'Session expires in:'}\n </span>\n <span className=\"kc-session-monitor__time\">\n {formatTime(timeRemaining)}\n </span>\n </div>\n\n {showProgressBar && (\n <div className=\"kc-session-monitor__progress-bar\">\n <div\n className=\"kc-session-monitor__progress-fill\"\n style={{ width: `${progress}%` }}\n role=\"progressbar\"\n aria-valuenow={progress}\n aria-valuemin={0}\n aria-valuemax={100}\n />\n </div>\n )}\n </>\n )}\n </div>\n );\n};\n","import type { KeycloakConfig } from './types';\n\n/**\n * Configuration preset types\n */\nexport type ConfigPreset = 'default' | 'mobile' | 'high-security' | 'long-running' | 'development';\n\n/**\n * Configuration presets for common use cases\n *\n * These presets provide optimized configurations for different application types\n * and security requirements. All presets can be further customized by overriding\n * specific properties.\n */\nexport const CONFIG_PRESETS: Record<ConfigPreset, Partial<KeycloakConfig>> = {\n /**\n * Default preset - Balanced configuration for most applications\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive token refresh on startup + reactive on 401\n * - Silent background token refresh\n * - Session monitoring enabled\n * - Auto token refresh enabled\n *\n * Best for: Most web applications, dashboards, internal tools\n */\n default: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Mobile/PWA preset - Optimized for mobile and progressive web apps\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive startup refresh (apps close frequently)\n * - Loading indicator during refresh (better UX for app reopening)\n * - Session monitoring enabled\n *\n * Best for: Mobile apps, PWAs, apps that frequently close/reopen\n */\n mobile: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'startup', // Focus on startup refresh\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: true, // Show loading for better UX\n loadingMessage: 'Restoring your session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * High Security preset - Strict security for sensitive applications\n *\n * Features:\n * - 24-hour forced re-authentication\n * - Proactive + reactive token refresh\n * - 10-minute refresh threshold (earlier refresh)\n * - Silent refresh (no UI hints about security measures)\n * - Session monitoring enabled\n *\n * Best for: Banking, healthcare, admin panels, sensitive data applications\n */\n 'high-security': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 600, // 10 minutes (more aggressive)\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 86400, // 24 hours only\n showLoadingIndicator: false, // Silent for security\n loadingMessage: 'Validating session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Long-Running preset - Optimized for desktop apps and long sessions\n *\n * Features:\n * - 7-day refresh token lifetime\n * - Proactive + reactive token refresh\n * - Silent background refresh\n * - Session monitoring enabled\n *\n * Best for: Desktop applications, monitoring dashboards, always-on tools\n */\n 'long-running': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 604800, // 7 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Development preset - Convenient settings for development\n *\n * Features:\n * - No refresh token lifetime limit (never expires)\n * - Proactive + reactive token refresh\n * - Loading indicators visible (easier debugging)\n * - Session monitoring enabled\n * - More verbose feedback\n *\n * Best for: Local development, testing, debugging\n * WARNING: Do not use in production!\n */\n development: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 0, // No limit (for convenience)\n showLoadingIndicator: true, // Show for debugging\n loadingMessage: '[DEV] Refreshing tokens...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n};\n\n/**\n * Get a configuration preset by name\n *\n * @param preset - The preset name\n * @returns Partial Keycloak configuration for the preset\n *\n * @example\n * ```typescript\n * const config = getConfigPreset('mobile');\n * ```\n */\nexport function getConfigPreset(preset: ConfigPreset): Partial<KeycloakConfig> {\n return CONFIG_PRESETS[preset];\n}\n\n/**\n * Merge a preset with custom configuration\n *\n * Custom configuration takes precedence over preset values.\n * Use this to start with a preset and override specific properties.\n *\n * @param preset - The preset name\n * @param customConfig - Custom configuration to merge\n * @returns Merged configuration\n *\n * @example\n * ```typescript\n * const config = mergeWithPreset('mobile', {\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override to 7 days\n * }\n * });\n * ```\n */\nexport function mergeWithPreset(\n preset: ConfigPreset,\n customConfig: Partial<KeycloakConfig>\n): Partial<KeycloakConfig> {\n const presetConfig = getConfigPreset(preset);\n\n return {\n ...presetConfig,\n ...customConfig,\n features: {\n ...presetConfig.features,\n ...customConfig.features,\n },\n silentRenew: {\n ...presetConfig.silentRenew,\n ...customConfig.silentRenew,\n },\n advanced: {\n ...presetConfig.advanced,\n ...customConfig.advanced,\n },\n events: {\n ...presetConfig.events,\n ...customConfig.events,\n },\n };\n}\n","import React, { useCallback } from 'react';\nimport { AuthProvider as OidcAuthProvider } from 'react-oidc-context';\nimport type { User } from 'oidc-client-ts';\nimport type { KeycloakConfig } from '../config/types';\nimport { KeycloakConfigBuilder } from '../config/KeycloakConfig';\nimport { TokenLifecycleManager } from './TokenLifecycleManager';\nimport { SessionMonitor } from './SessionMonitor';\nimport { mergeWithPreset, type ConfigPreset } from '../config/presets';\nimport { defaultConfig } from '../config/defaults';\n\n/**\n * Props for zero-config mode (simplified setup)\n */\nexport interface KeycloakProviderZeroConfigProps {\n /**\n * Keycloak realm authority URL (e.g., https://sso.example.com/realms/myrealm)\n */\n authority: string;\n\n /**\n * Client ID registered in Keycloak\n */\n clientId: string;\n\n /**\n * Configuration preset to use\n * @default 'default'\n */\n preset?: ConfigPreset;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n\n /**\n * Override specific configuration properties\n * Use this to customize preset or zero-config defaults\n */\n config?: Partial<Omit<KeycloakConfig, 'authority' | 'clientId'>>;\n}\n\n/**\n * Props for full-config mode (advanced setup)\n */\nexport interface KeycloakProviderFullConfigProps {\n /**\n * Full Keycloak configuration object\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Combined props type\n */\nexport type KeycloakProviderProps = KeycloakProviderZeroConfigProps | KeycloakProviderFullConfigProps;\n\n/**\n * Type guard to check if using zero-config mode\n */\nfunction isZeroConfig(props: KeycloakProviderProps): props is KeycloakProviderZeroConfigProps {\n return 'authority' in props && 'clientId' in props;\n}\n\n/**\n * Main Keycloak authentication provider component\n *\n * This component wraps your application to provide authentication context using Keycloak.\n * It supports both zero-config mode (for simplicity) and full-config mode (for advanced use cases).\n *\n * ## Zero-Config Mode (Recommended)\n *\n * Minimal setup with sensible defaults and automatic feature enablement.\n *\n * @example Zero-config (simplest)\n * ```tsx\n * import { KeycloakProvider } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * >\n * <YourApp />\n * </KeycloakProvider>\n * );\n * }\n * ```\n *\n * @example Zero-config with preset\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"mobile\" // or 'high-security', 'long-running', 'development'\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * @example Zero-config with overrides\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"default\"\n * config={{\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override: 7 days instead of 30\n * showLoadingIndicator: true,\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Full-Config Mode (Advanced)\n *\n * Complete control over all configuration options.\n *\n * @example Full configuration\n * ```tsx\n * <KeycloakProvider\n * config={{\n * authority: 'https://sso.example.com/realms/myrealm',\n * clientId: 'my-app',\n * redirectUri: window.location.origin,\n * scope: 'openid profile email offline_access',\n * features: {\n * autoRefresh: true,\n * sessionMonitor: true,\n * },\n * silentRenew: {\n * enabled: true,\n * refreshStrategy: 'both',\n * maxRefreshTokenLifetime: 2592000,\n * },\n * events: {\n * onLogin: (user) => console.log('User logged in', user),\n * onError: (error) => sendToSentry(error),\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Features Automatically Enabled\n *\n * When using zero-config or presets, the following features are automatically enabled:\n * - ✅ Automatic token refresh (before expiration)\n * - ✅ Token lifecycle management (refresh on app startup)\n * - ✅ Session monitoring UI (countdown timer)\n * - ✅ Silent renew (background token refresh)\n * - ✅ Error notifications (user-friendly messages)\n * - ✅ 401 retry logic (automatic token refresh on API errors)\n * - ✅ Maximum refresh token lifetime (security control)\n * - ✅ PKCE (for secure public clients)\n *\n * All features can be disabled or customized via configuration overrides.\n */\nexport const KeycloakProvider: React.FC<KeycloakProviderProps> = (props) => {\n const { children, debug = false } = props;\n\n // Build configuration based on mode\n const config: KeycloakConfig = isZeroConfig(props)\n ? buildZeroConfig(props)\n : props.config;\n\n // Build OIDC configuration from Keycloak config\n const oidcConfig = KeycloakConfigBuilder.build(config);\n\n // Logging helper\n const log = useCallback(\n (level: 'info' | 'warn' | 'error', message: string, ...args: any[]) => {\n if (debug) {\n const prefix = '[KeycloakProvider]';\n switch (level) {\n case 'info':\n console.log(prefix, message, ...args);\n break;\n case 'warn':\n console.warn(prefix, message, ...args);\n break;\n case 'error':\n console.error(prefix, message, ...args);\n break;\n }\n }\n },\n [debug]\n );\n\n // Event handlers with built-in functionality\n const onSigninCallback = useCallback(\n (_user: User | void): void => {\n log('info', 'Sign in successful');\n\n // Clean up query parameters from URL after redirect\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n if (_user) {\n config.events?.onLogin?.(_user as User);\n }\n },\n [config.events, log]\n );\n\n const onSignoutCallback = useCallback((): void => {\n log('info', 'Sign out successful');\n\n // Clean up URL\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n config.events?.onLogout?.();\n }, [config.events, log]);\n\n const onRemoveUser = useCallback((): void => {\n log('warn', 'User removed from storage - token validation likely failed');\n }, [log]);\n\n\n\n // Check if SessionMonitor should be shown\n const showSessionMonitor = config.features?.sessionMonitor !== false;\n\n return (\n <OidcAuthProvider\n {...oidcConfig}\n onSigninCallback={onSigninCallback}\n onSignoutCallback={onSignoutCallback}\n onRemoveUser={onRemoveUser}\n >\n <TokenLifecycleManager config={config} debug={debug}>\n {/* Auto-include SessionMonitor if enabled */}\n {showSessionMonitor && <SessionMonitor />}\n\n {/* User's app content */}\n {children}\n </TokenLifecycleManager>\n </OidcAuthProvider>\n );\n};\n\n/**\n * Build configuration for zero-config mode\n */\nfunction buildZeroConfig(props: KeycloakProviderZeroConfigProps): KeycloakConfig {\n const { authority, clientId, preset = 'default', config: overrides = {} } = props;\n\n // Start with preset configuration\n const presetConfig = mergeWithPreset(preset, overrides);\n\n // Deep merge: defaults -> preset -> overrides\n const fullConfig: KeycloakConfig = {\n authority,\n clientId,\n redirectUri: presetConfig.redirectUri || defaultConfig.redirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n postLogoutRedirectUri: presetConfig.postLogoutRedirectUri || defaultConfig.postLogoutRedirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n scope: presetConfig.scope || defaultConfig.scope,\n features: {\n ...defaultConfig.features,\n ...presetConfig.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...presetConfig.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...presetConfig.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...presetConfig.events,\n },\n };\n\n return fullConfig;\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseRolesReturn {\n /**\n * Array of realm roles assigned to the current user\n */\n roles: string[];\n\n /**\n * Checks if user has a specific realm role\n * @param role - Role name to check\n * @returns True if user has the role\n */\n hasRole: (role: string) => boolean;\n\n /**\n * Checks if user has any of the specified roles (OR logic)\n * @param roles - Array of role names\n * @returns True if user has at least one of the roles\n */\n hasAnyRole: (roles: string[]) => boolean;\n\n /**\n * Checks if user has all of the specified roles (AND logic)\n * @param roles - Array of role names\n * @returns True if user has all the roles\n */\n hasAllRoles: (roles: string[]) => boolean;\n\n /**\n * Gets client-specific roles\n * @param clientId - Client ID to get roles for\n * @returns Array of client roles\n */\n getClientRoles: (clientId: string) => string[];\n}\n\n/**\n * Hook for working with Keycloak roles\n *\n * Provides convenient methods for checking user roles, both realm-level and client-level.\n * Must be used within a KeycloakProvider component.\n *\n * @returns Role utilities and methods\n *\n * @example Basic usage\n * ```tsx\n * import { useRoles } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { roles, hasRole, hasAnyRole } = useRoles();\n *\n * return (\n * <div>\n * <p>Your roles: {roles.join(', ')}</p>\n * {hasRole('admin') && <AdminPanel />}\n * {hasAnyRole(['editor', 'moderator']) && <EditButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Client roles\n * ```tsx\n * function ClientRoleExample() {\n * const { getClientRoles } = useRoles();\n * const apiRoles = getClientRoles('my-api');\n *\n * return <div>API roles: {apiRoles.join(', ')}</div>;\n * }\n * ```\n */\nexport function useRoles(): UseRolesReturn {\n const auth = useAuth();\n\n // Extract realm roles from user profile\n const roles = useMemo<string[]>(() => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores realm roles in realm_access.roles\n const realmAccess = auth.user.profile.realm_access as { roles?: string[] } | undefined;\n return realmAccess?.roles || [];\n }, [auth.user]);\n\n // Check if user has a specific role\n const hasRole = useMemo(\n () => (role: string): boolean => {\n return roles.includes(role);\n },\n [roles]\n );\n\n // Check if user has any of the specified roles\n const hasAnyRole = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.some((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Check if user has all of the specified roles\n const hasAllRoles = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.every((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Get client-specific roles\n const getClientRoles = useMemo(\n () =>\n (clientId: string): string[] => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores client roles in resource_access[clientId].roles\n const resourceAccess = auth.user.profile.resource_access as\n | Record<string, { roles?: string[] }>\n | undefined;\n\n return resourceAccess?.[clientId]?.roles || [];\n },\n [auth.user]\n );\n\n return {\n roles,\n hasRole,\n hasAnyRole,\n hasAllRoles,\n getClientRoles,\n };\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\n/**\n * Return type for useScopes hook\n */\nexport interface UseScopesReturn {\n /**\n * Array of granted scopes\n */\n scopes: string[];\n\n /**\n * Check if user has a specific scope\n */\n hasScope: (scope: string) => boolean;\n\n /**\n * Check if user has any of the specified scopes\n */\n hasAnyScope: (scopes: string[]) => boolean;\n\n /**\n * Check if user has all of the specified scopes\n */\n hasAllScopes: (scopes: string[]) => boolean;\n}\n\n/**\n * Hook for checking OAuth 2.0 scopes\n *\n * Provides utilities for scope-based authorization. Scopes are typically space-separated\n * in the token (e.g., \"openid profile email read:users write:users\").\n *\n * @returns Scope checking utilities\n *\n * @example Basic usage\n * ```tsx\n * import { useScopes } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { scopes, hasScope, hasAnyScope } = useScopes();\n *\n * return (\n * <div>\n * <p>Your scopes: {scopes.join(', ')}</p>\n *\n * {hasScope('read:users') && <UserList />}\n *\n * {hasAnyScope(['write:users', 'admin']) && <CreateUserButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Conditional rendering\n * ```tsx\n * function DataActions() {\n * const { hasScope, hasAllScopes } = useScopes();\n *\n * return (\n * <div>\n * {hasScope('read:data') && <ViewButton />}\n * {hasScope('write:data') && <EditButton />}\n * {hasScope('delete:data') && <DeleteButton />}\n * {hasAllScopes(['read:data', 'write:data']) && <ExportButton />}\n * </div>\n * );\n * }\n * ```\n */\nexport function useScopes(): UseScopesReturn {\n const auth = useAuth();\n\n // Extract scopes from token\n // Scopes can be in 'scope' claim (space-separated string)\n const scopes = useMemo<string[]>(() => {\n if (!auth.user?.scope) return [];\n\n // Scope is typically a space-separated string\n return auth.user.scope.split(' ').filter(s => s.length > 0);\n }, [auth.user]);\n\n // Check if user has a specific scope\n const hasScope = useMemo(\n () => (scope: string): boolean => {\n return scopes.includes(scope);\n },\n [scopes]\n );\n\n // Check if user has any of the specified scopes\n const hasAnyScope = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.some((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n // Check if user has all of the specified scopes\n const hasAllScopes = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.every((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n return {\n scopes,\n hasScope,\n hasAnyScope,\n hasAllScopes,\n };\n}\n","import React, { useEffect, useRef } from 'react';\nimport { useLocation } from 'react-router-dom';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\nimport { useScopes } from '../hooks/useScopes';\nimport type { User } from 'oidc-client-ts';\n\n/**\n * Context object passed to custom policy function\n */\nexport interface PolicyContext {\n /**\n * Current location from react-router\n */\n location: ReturnType<typeof useLocation>;\n\n /**\n * Any additional context you want to pass\n */\n [key: string]: any;\n}\n\n/**\n * Custom policy function for fine-grained access control\n */\nexport type PolicyFunction = (user: User, context: PolicyContext) => boolean;\n\nexport interface ProtectedRouteProps {\n /**\n * Child components to render when user is authorized\n */\n children: React.ReactNode;\n\n /**\n * Required realm roles (OR logic - user needs at least one)\n */\n requiredRoles?: string[];\n\n /**\n * Require all roles instead of any (AND logic)\n * @default false\n */\n requireAllRoles?: boolean;\n\n /**\n * Required OAuth 2.0 scopes (OR logic - user needs at least one)\n */\n requiredScopes?: string[];\n\n /**\n * Require all scopes instead of any (AND logic)\n * @default false\n */\n requireAllScopes?: boolean;\n\n /**\n * Custom policy function for advanced authorization logic\n * If provided, this takes precedence over role and scope checks\n */\n policy?: PolicyFunction;\n\n /**\n * Custom loading component to display while checking authentication\n */\n loadingComponent?: React.ReactNode;\n\n /**\n * Custom unauthorized component to display when user lacks required permissions\n */\n unauthorizedComponent?: React.ReactNode;\n\n /**\n * Path to redirect to if not authenticated\n * @default '/login'\n */\n redirectTo?: string;\n\n /**\n * Callback when user is unauthorized\n * @param reason - Reason for unauthorized access\n */\n onUnauthorized?: (\n reason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied'\n ) => void;\n}\n\n/**\n * Component for protecting routes with authentication, role-based, scope-based, or policy-based authorization\n *\n * This component provides comprehensive route protection with multiple authorization strategies:\n * - Authentication check (always required)\n * - Role-based authorization (realm roles)\n * - Scope-based authorization (OAuth 2.0 scopes)\n * - Custom policy functions (advanced logic)\n *\n * @example Basic authentication required\n * ```tsx\n * import { ProtectedRoute } from 'antaeus.keycloak.react';\n *\n * <Route\n * path=\"/dashboard\"\n * element={\n * <ProtectedRoute>\n * <Dashboard />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require specific role\n * ```tsx\n * <Route\n * path=\"/admin\"\n * element={\n * <ProtectedRoute requiredRoles={['admin']}>\n * <AdminPanel />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require any of multiple roles\n * ```tsx\n * <ProtectedRoute requiredRoles={['editor', 'moderator', 'admin']}>\n * <EditPage />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all roles (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['verified', 'premium']}\n * requireAllRoles={true}\n * >\n * <PremiumContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Require specific scopes\n * ```tsx\n * <ProtectedRoute requiredScopes={['read:users', 'write:users']}>\n * <UserManagement />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all scopes (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredScopes={['read:data', 'write:data', 'delete:data']}\n * requireAllScopes={true}\n * >\n * <DataAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Combine roles and scopes\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['admin']}\n * requiredScopes={['manage:users']}\n * >\n * <UserAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Custom policy function\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Custom authorization logic\n * const isEmailVerified = user.profile.email_verified === true;\n * const isAdult = (user.profile.age || 0) >= 18;\n * return isEmailVerified && isAdult;\n * }}\n * onUnauthorized={(reason) => {\n * console.log('Access denied:', reason);\n * }}\n * >\n * <AdultContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Advanced policy with location context\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Check if user is accessing during business hours\n * const hour = new Date().getHours();\n * const isBusinessHours = hour >= 9 && hour < 17;\n *\n * // Or check based on route\n * const isAdminRoute = context.location.pathname.startsWith('/admin');\n * const hasAdminRole = user.profile.realm_access?.roles?.includes('admin');\n *\n * return isBusinessHours && (!isAdminRoute || hasAdminRole);\n * }}\n * >\n * <TimeSensitiveContent />\n * </ProtectedRoute>\n * ```\n */\nexport const ProtectedRoute: React.FC<ProtectedRouteProps> = ({\n children,\n requiredRoles = [],\n requireAllRoles = false,\n requiredScopes = [],\n requireAllScopes = false,\n policy,\n loadingComponent,\n unauthorizedComponent,\n onUnauthorized,\n}) => {\n const auth = useAuth();\n const { hasAnyRole, hasAllRoles } = useRoles();\n const { hasAnyScope, hasAllScopes } = useScopes();\n const location = useLocation();\n const hasRedirected = useRef(false);\n\n // Determine authorization state\n const isAuthenticated = !auth.isLoading && auth.isAuthenticated;\n\n // Check policy access\n const policyAccess = policy && auth.user\n ? policy(auth.user, { location })\n : null;\n\n // Check role access\n const roleAccess = requiredRoles.length > 0\n ? (requireAllRoles ? hasAllRoles(requiredRoles) : hasAnyRole(requiredRoles))\n : null;\n\n // Check scope access\n const scopeAccess = requiredScopes.length > 0\n ? (requireAllScopes ? hasAllScopes(requiredScopes) : hasAnyScope(requiredScopes))\n : null;\n\n // Determine unauthorized reason\n const unauthorizedReason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied' | null =\n !isAuthenticated ? 'not-authenticated' :\n policyAccess === false ? 'policy-denied' :\n roleAccess === false ? 'insufficient-roles' :\n scopeAccess === false ? 'insufficient-scopes' :\n null;\n\n // All hooks must be called unconditionally at the top level\n // Handle unauthorized callback\n useEffect(() => {\n if (unauthorizedReason) {\n onUnauthorized?.(unauthorizedReason);\n }\n }, [unauthorizedReason, onUnauthorized]);\n\n // Handle login redirect for unauthenticated users\n useEffect(() => {\n if (!auth.isLoading && !auth.isAuthenticated && !hasRedirected.current) {\n hasRedirected.current = true;\n auth.signinRedirect({\n redirect_uri: window.location.origin + location.pathname + location.search,\n }).catch((error) => {\n // Reset flag on error to allow retry\n hasRedirected.current = false;\n console.error('[ProtectedRoute] Signin redirect failed:', error);\n });\n }\n }, [auth.isLoading, auth.isAuthenticated, location.pathname, location.search]);\n\n // Reset redirect flag when user becomes authenticated\n useEffect(() => {\n if (auth.isAuthenticated) {\n hasRedirected.current = false;\n }\n }, [auth.isAuthenticated]);\n\n // Show loading state while checking authentication\n if (auth.isLoading) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authentication\n if (!isAuthenticated) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authorization (policy takes precedence, then roles, then scopes)\n if (unauthorizedReason) {\n return <>{unauthorizedComponent || <DefaultUnauthorizedComponent />}</>;\n }\n\n // User is authenticated and has required permissions\n return <>{children}</>;\n};\n\n/**\n * Default loading component\n */\nconst DefaultLoadingComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n }}\n >\n <div\n style={{\n border: '3px solid #f3f3f3',\n borderTop: '3px solid #3498db',\n borderRadius: '50%',\n width: '40px',\n height: '40px',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ color: '#666', margin: 0 }}>Loading...</p>\n <style>{`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}</style>\n </div>\n);\n\n/**\n * Default unauthorized component\n */\nconst DefaultUnauthorizedComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n padding: '2rem',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n fontSize: '4rem',\n color: '#e74c3c',\n }}\n >\n 🔒\n </div>\n <h1 style={{ margin: 0, color: '#333' }}>Access Denied</h1>\n <p style={{ color: '#666', margin: 0 }}>\n You do not have permission to access this page.\n </p>\n </div>\n);\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LoginButtonProps {\n /**\n * Button text\n * @default 'Login'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'primary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show login icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before login starts\n */\n onLoginStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built login button component\n *\n * Triggers the Keycloak login flow when clicked. The button automatically\n * hides when the user is already authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LoginButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LoginButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LoginButton\n * variant=\"outline\"\n * size=\"large\"\n * onLoginStart={() => console.log('Starting login...')}\n * >\n * Sign In\n * </LoginButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LoginButton\n * className=\"my-custom-class\"\n * style={{ backgroundColor: '#007bff' }}\n * />\n * ```\n */\nexport const LoginButton: React.FC<LoginButtonProps> = ({\n children = 'Login',\n className = '',\n variant = 'primary',\n size = 'medium',\n showIcon = true,\n onLoginStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if already authenticated\n if (auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLoginStart?.();\n auth.signinRedirect();\n };\n\n const baseClass = 'kc-button kc-login-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🔐</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LogoutButtonProps {\n /**\n * Button text\n * @default 'Logout'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'secondary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show logout icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before logout starts\n */\n onLogoutStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built logout button component\n *\n * Triggers the Keycloak logout flow when clicked. The button automatically\n * hides when the user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LogoutButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LogoutButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LogoutButton\n * variant=\"outline\"\n * size=\"small\"\n * onLogoutStart={() => {\n * // Clean up app state\n * localStorage.clear();\n * }}\n * >\n * Sign Out\n * </LogoutButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LogoutButton\n * className=\"my-logout-btn\"\n * style={{ backgroundColor: '#dc3545' }}\n * />\n * ```\n */\nexport const LogoutButton: React.FC<LogoutButtonProps> = ({\n children = 'Logout',\n className = '',\n variant = 'secondary',\n size = 'medium',\n showIcon = true,\n onLogoutStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLogoutStart?.();\n auth.signoutRedirect();\n };\n\n const baseClass = 'kc-button kc-logout-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🚪</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\n\nexport interface UserProfileProps {\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Show user avatar/icon\n * @default true\n */\n showAvatar?: boolean;\n\n /**\n * Show user email\n * @default true\n */\n showEmail?: boolean;\n\n /**\n * Show user roles\n * @default false\n */\n showRoles?: boolean;\n\n /**\n * Avatar size in pixels\n * @default 40\n */\n avatarSize?: number;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Callback when profile is clicked\n */\n onClick?: () => void;\n}\n\n/**\n * Pre-built user profile display component\n *\n * Displays the current user's information including name, email, and optionally roles.\n * Automatically hides when user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { UserProfile } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <UserProfile />;\n * }\n * ```\n *\n * @example With roles\n * ```tsx\n * <UserProfile showRoles={true} />\n * ```\n *\n * @example Clickable profile\n * ```tsx\n * <UserProfile\n * onClick={() => navigate('/profile')}\n * style={{ cursor: 'pointer' }}\n * />\n * ```\n *\n * @example Customized\n * ```tsx\n * <UserProfile\n * showEmail={false}\n * showRoles={true}\n * avatarSize={50}\n * className=\"my-profile\"\n * />\n * ```\n */\nexport const UserProfile: React.FC<UserProfileProps> = ({\n className = '',\n showAvatar = true,\n showEmail = true,\n showRoles = false,\n avatarSize = 40,\n style,\n onClick,\n}) => {\n const auth = useAuth();\n const { roles } = useRoles();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated || !auth.user) {\n return null;\n }\n\n const profile = auth.user.profile;\n const name = profile.name || profile.preferred_username || 'User';\n const email = profile.email;\n const initials = getInitials(name);\n\n const baseClass = 'kc-user-profile';\n const clickableClass = onClick ? 'kc-user-profile--clickable' : '';\n const classes = `${baseClass} ${clickableClass} ${className}`.trim();\n\n const handleClick = () => {\n if (onClick) {\n onClick();\n }\n };\n\n return (\n <div\n className={classes}\n style={style}\n onClick={handleClick}\n role={onClick ? 'button' : undefined}\n tabIndex={onClick ? 0 : undefined}\n onKeyPress={onClick ? (e) => e.key === 'Enter' && handleClick() : undefined}\n >\n {showAvatar && (\n <div\n className=\"kc-user-profile__avatar\"\n style={{\n width: avatarSize,\n height: avatarSize,\n fontSize: avatarSize * 0.4,\n }}\n >\n {initials}\n </div>\n )}\n\n <div className=\"kc-user-profile__info\">\n <div className=\"kc-user-profile__name\">{name}</div>\n\n {showEmail && email && (\n <div className=\"kc-user-profile__email\">{email}</div>\n )}\n\n {showRoles && roles.length > 0 && (\n <div className=\"kc-user-profile__roles\">\n {roles.slice(0, 3).map((role) => (\n <span key={role} className=\"kc-user-profile__role-badge\">\n {role}\n </span>\n ))}\n {roles.length > 3 && (\n <span className=\"kc-user-profile__role-badge\">\n +{roles.length - 3}\n </span>\n )}\n </div>\n )}\n </div>\n </div>\n );\n};\n\n/**\n * Helper function to get user initials from name\n */\nfunction getInitials(name: string): string {\n const parts = name.trim().split(' ');\n\n if (parts.length === 1) {\n return parts[0].substring(0, 2).toUpperCase();\n }\n\n return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase();\n}\n","/**\n * Device authorization response from Keycloak\n */\nexport interface DeviceAuthorizationResponse {\n /** Device code used for polling */\n device_code: string;\n\n /** User code to display to user */\n user_code: string;\n\n /** Verification URI (plain) */\n verification_uri: string;\n\n /** Complete verification URI with user code (for QR codes) */\n verification_uri_complete: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Recommended polling interval in seconds */\n interval: number;\n}\n\n/**\n * Token response from Keycloak\n */\nexport interface TokenResponse {\n /** Access token */\n access_token: string;\n\n /** Token type (usually 'Bearer') */\n token_type: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Refresh token (if offline_access scope was requested) */\n refresh_token?: string;\n\n /** ID token */\n id_token?: string;\n\n /** Granted scopes */\n scope?: string;\n}\n\n/**\n * Error response from token polling\n */\nexport interface DeviceFlowError {\n /** Error code */\n error: string;\n\n /** Error description */\n error_description?: string;\n}\n\n/**\n * Request device authorization code from the backend API\n *\n * This function calls your backend API which proxies the request to Keycloak.\n * This avoids CORS issues.\n *\n * @param apiBaseUrl - Base URL of your backend API (e.g., 'http://localhost:5000')\n * @returns Device authorization response\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const response = await requestDeviceCode('http://localhost:5000');\n * console.log('User code:', response.user_code);\n * console.log('Verification URL:', response.verification_uri_complete);\n * ```\n */\nexport async function requestDeviceCode(\n apiBaseUrl: string\n): Promise<DeviceAuthorizationResponse> {\n const url = `${apiBaseUrl}/api/keycloak/device/authorize`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `Device authorization failed: ${response.status} ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as DeviceAuthorizationResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to request device code: ${error.message}`);\n }\n throw error;\n }\n}\n\n/**\n * Poll for token using device code\n *\n * This function should be called repeatedly until the user authorizes the device\n * or the device code expires. The backend handles the actual token exchange with Keycloak.\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param deviceCode - Device code from requestDeviceCode()\n * @returns Token response if authorized, null if still pending\n * @throws Error if request fails or authorization is denied\n *\n * @example\n * ```ts\n * const deviceCode = 'ABC123';\n * const interval = setInterval(async () => {\n * try {\n * const token = await pollForToken('http://localhost:5000', deviceCode);\n * if (token) {\n * clearInterval(interval);\n * console.log('Authorized! Token:', token.access_token);\n * }\n * } catch (error) {\n * if (error.message.includes('authorization_pending')) {\n * // Still waiting, continue polling\n * } else {\n * // Real error, stop polling\n * clearInterval(interval);\n * console.error('Authorization failed:', error);\n * }\n * }\n * }, 5000);\n * ```\n */\nexport async function pollForToken(\n apiBaseUrl: string,\n deviceCode: string\n): Promise<TokenResponse | null> {\n const url = `${apiBaseUrl}/api/keycloak/device/token`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ device_code: deviceCode }),\n });\n\n const data = await response.json();\n\n // Check if response contains an error (backend returns 200 OK with error object)\n if ('error' in data) {\n const errorData = data as DeviceFlowError;\n\n // authorization_pending and slow_down are expected during polling\n if (\n errorData.error === 'authorization_pending' ||\n errorData.error === 'slow_down'\n ) {\n return null; // Still waiting\n }\n\n // Other errors are real failures\n throw new Error(\n errorData.error_description || errorData.error || 'Token polling failed'\n );\n }\n\n // Check if we got a non-OK status without error in body\n if (!response.ok) {\n throw new Error(`Token polling failed with status ${response.status}`);\n }\n\n return data as TokenResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw error;\n }\n throw new Error('Token polling failed');\n }\n}\n\n/**\n * Fetch user information using access token\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param accessToken - Access token from token response\n * @returns User information\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const userInfo = await fetchUserInfo('http://localhost:5000', token.access_token);\n * console.log('User:', userInfo.preferred_username);\n * ```\n */\nexport async function fetchUserInfo(\n apiBaseUrl: string,\n accessToken: string\n): Promise<any> {\n const url = `${apiBaseUrl}/api/keycloak/device/userinfo`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ access_token: accessToken }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to fetch user info: ${response.statusText}`);\n }\n\n return await response.json();\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to fetch user info: ${error.message}`);\n }\n throw error;\n }\n}\n","import React, { useState, useEffect, useRef } from 'react';\nimport { QRCodeSVG } from 'qrcode.react';\nimport { User, UserManager } from 'oidc-client-ts';\nimport { useAuth } from '../hooks/useAuth';\nimport {\n requestDeviceCode,\n pollForToken,\n fetchUserInfo,\n type DeviceAuthorizationResponse,\n} from '../utils/deviceFlow';\n\nexport interface DeviceLoginProps {\n /**\n * API base URL for device flow endpoints\n * @example 'http://localhost:5000'\n */\n apiBaseUrl: string;\n\n /**\n * QR code size in pixels\n * @default 256\n */\n qrCodeSize?: number;\n\n /**\n * Polling interval in seconds\n * @default 5\n */\n pollingInterval?: number;\n\n /**\n * Custom CSS class\n */\n className?: string;\n\n /**\n * Callback on successful login\n */\n onSuccess?: (user: User) => void;\n\n /**\n * Callback on error\n */\n onError?: (error: Error) => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Device flow login component\n *\n * Displays QR code and user code for device authentication. Automatically polls\n * for authorization and completes the login flow.\n *\n * @example Basic usage\n * ```tsx\n * import { DeviceLogin } from 'antaeus.keycloak.react';\n *\n * function TVLoginPage() {\n * return (\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * onSuccess={(user) => {\n * console.log('Logged in:', user.profile.name);\n * navigate('/home');\n * }}\n * />\n * );\n * }\n * ```\n *\n * @example With custom settings\n * ```tsx\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * qrCodeSize={300}\n * pollingInterval={3}\n * onError={(error) => console.error('Login failed:', error)}\n * />\n * ```\n */\nexport const DeviceLogin: React.FC<DeviceLoginProps> = ({\n apiBaseUrl,\n qrCodeSize = 256,\n pollingInterval = 5,\n className = '',\n onSuccess,\n onError,\n style,\n}) => {\n const auth = useAuth();\n const [deviceData, setDeviceData] = useState<DeviceAuthorizationResponse | null>(null);\n const [error, setError] = useState<string | null>(null);\n const [loading, setLoading] = useState(true);\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const pollTimerRef = useRef<number | null>(null);\n const userManagerRef = useRef<UserManager | null>(null);\n\n // Initialize device flow\n useEffect(() => {\n const initDeviceFlow = async () => {\n setLoading(true);\n setError(null);\n\n try {\n const response = await requestDeviceCode(apiBaseUrl);\n setDeviceData(response);\n setTimeRemaining(response.expires_in);\n } catch (err) {\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n } finally {\n setLoading(false);\n }\n };\n\n initDeviceFlow();\n }, [apiBaseUrl, onError]);\n\n // Countdown timer\n useEffect(() => {\n if (!deviceData || timeRemaining === null) return;\n\n const interval = setInterval(() => {\n setTimeRemaining((prev) => {\n if (prev === null || prev <= 1) {\n clearInterval(interval);\n setError('Device code expired. Please refresh to try again.');\n return 0;\n }\n return prev - 1;\n });\n }, 1000);\n\n return () => clearInterval(interval);\n }, [deviceData, timeRemaining]);\n\n // Poll for token\n useEffect(() => {\n if (!deviceData) return;\n\n // Get UserManager from auth context\n userManagerRef.current = (auth as any).userManager;\n\n const poll = async () => {\n try {\n const tokenResponse = await pollForToken(apiBaseUrl, deviceData.device_code);\n\n if (tokenResponse) {\n // Success! Store the token\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n\n // Fetch user info\n const userInfo = await fetchUserInfo(apiBaseUrl, tokenResponse.access_token);\n\n // Create User object and store it\n const user = new User({\n id_token: tokenResponse.id_token || '',\n access_token: tokenResponse.access_token,\n token_type: tokenResponse.token_type,\n profile: userInfo,\n expires_at: Math.floor(Date.now() / 1000) + tokenResponse.expires_in,\n scope: tokenResponse.scope,\n refresh_token: tokenResponse.refresh_token,\n });\n\n // Store user in UserManager\n if (userManagerRef.current) {\n await userManagerRef.current.storeUser(user);\n }\n\n // Trigger success callback\n onSuccess?.(user);\n }\n } catch (err) {\n // Ignore authorization_pending errors\n if (!(err as Error).message.includes('authorization_pending')) {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n }\n }\n };\n\n // Start polling\n pollTimerRef.current = setInterval(poll, pollingInterval * 1000);\n\n // Cleanup\n return () => {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n };\n }, [deviceData, apiBaseUrl, pollingInterval, onSuccess, onError, auth]);\n\n if (loading) {\n return (\n <div className={`kc-device-login kc-device-login--loading ${className}`} style={style}>\n <div className=\"kc-device-login__spinner\" />\n <p>Initializing device flow...</p>\n </div>\n );\n }\n\n if (error) {\n return (\n <div className={`kc-device-login kc-device-login--error ${className}`} style={style}>\n <div className=\"kc-device-login__error-icon\">⚠️</div>\n <h2>Error</h2>\n <p>{error}</p>\n <button\n className=\"kc-button kc-button--primary\"\n onClick={() => window.location.reload()}\n >\n Retry\n </button>\n </div>\n );\n }\n\n if (!deviceData) {\n return null;\n }\n\n const formatTime = (seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n };\n\n return (\n <div className={`kc-device-login ${className}`} style={style}>\n <h2 className=\"kc-device-login__title\">Device Login</h2>\n\n <div className=\"kc-device-login__qr\">\n <QRCodeSVG value={deviceData.verification_uri_complete} size={qrCodeSize} />\n </div>\n\n <div className=\"kc-device-login__instructions\">\n <p>Scan the QR code with your phone or visit:</p>\n <code className=\"kc-device-login__url\">{deviceData.verification_uri}</code>\n <p>And enter code:</p>\n <strong className=\"kc-device-login__user-code\">{deviceData.user_code}</strong>\n </div>\n\n {timeRemaining !== null && timeRemaining > 0 && (\n <p className=\"kc-device-login__expiry\">\n Code expires in {formatTime(timeRemaining)}\n </p>\n )}\n\n <div className=\"kc-device-login__status\">\n <div className=\"kc-device-login__spinner kc-device-login__spinner--small\" />\n <p>Waiting for authorization...</p>\n </div>\n </div>\n );\n};\n","import { useCallback } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseProtectedFetchOptions {\n /**\n * Base URL for API requests\n * @example 'http://localhost:5000'\n */\n baseUrl?: string;\n\n /**\n * Callback when request is unauthorized (401)\n */\n onUnauthorized?: () => void;\n\n /**\n * Retry request on 401 error after token refresh\n * @default true\n */\n retryOn401?: boolean;\n\n /**\n * Additional headers to include in all requests\n */\n headers?: Record<string, string>;\n}\n\nexport interface UseProtectedFetchReturn {\n /**\n * Fetch with automatic token injection and JSON parsing\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Parsed JSON response\n */\n fetchJson: <T = any>(url: string, init?: RequestInit) => Promise<T>;\n\n /**\n * Raw fetch with automatic token injection\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Fetch response\n */\n fetch: (url: string, init?: RequestInit) => Promise<Response>;\n\n /**\n * Check if request is in progress\n */\n isLoading: boolean;\n}\n\n/**\n * Hook for making authenticated API requests\n *\n * Automatically injects the current user's access token into all requests.\n * Handles 401 errors and provides convenient methods for JSON APIs.\n *\n * @param options - Configuration options\n * @returns Protected fetch methods\n *\n * @example Basic usage\n * ```tsx\n * import { useProtectedFetch } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const loadData = async () => {\n * // Token is automatically added\n * const data = await fetchJson('/api/data');\n * console.log(data);\n * };\n *\n * return <button onClick={loadData}>Load Data</button>;\n * }\n * ```\n *\n * @example With custom headers\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * headers: {\n * 'X-Custom-Header': 'value'\n * }\n * });\n * ```\n *\n * @example POST request\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const createUser = async (userData: User) => {\n * const result = await fetchJson<User>('/api/users', {\n * method: 'POST',\n * body: JSON.stringify(userData),\n * headers: {\n * 'Content-Type': 'application/json'\n * }\n * });\n * return result;\n * };\n * ```\n *\n * @example Handle unauthorized\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * onUnauthorized: () => {\n * console.log('Unauthorized! Redirecting to login...');\n * }\n * });\n * ```\n */\nexport function useProtectedFetch(\n options: UseProtectedFetchOptions = {}\n): UseProtectedFetchReturn {\n const auth = useAuth();\n\n const {\n baseUrl = '',\n onUnauthorized,\n retryOn401 = true,\n headers: customHeaders = {},\n } = options;\n\n /**\n * Build full URL from path\n */\n const buildUrl = useCallback(\n (url: string): string => {\n // If URL is already absolute, return as-is\n if (url.startsWith('http://') || url.startsWith('https://')) {\n return url;\n }\n\n // Combine with base URL\n const base = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;\n const path = url.startsWith('/') ? url : `/${url}`;\n\n return base + path;\n },\n [baseUrl]\n );\n\n /**\n * Get authorization header with current token\n * Note: Not memoized to always get fresh token\n */\n const getAuthHeader = (): Record<string, string> => {\n if (!auth.user?.access_token) {\n return {};\n }\n\n return {\n Authorization: `Bearer ${auth.user.access_token}`,\n };\n };\n\n /**\n * Merge all headers\n * Always gets fresh token by calling getAuthHeader() directly\n */\n const buildHeaders = useCallback(\n (requestHeaders?: HeadersInit): Headers => {\n const headers = new Headers(requestHeaders);\n\n // Add auth header (always fresh)\n const authHeader = getAuthHeader();\n if (authHeader.Authorization) {\n headers.set('Authorization', authHeader.Authorization);\n }\n\n // Add custom headers\n Object.entries(customHeaders).forEach(([key, value]) => {\n headers.set(key, value);\n });\n\n return headers;\n },\n [customHeaders]\n );\n\n /**\n * Raw fetch with token injection\n */\n const protectedFetch = useCallback(\n async (url: string, init?: RequestInit): Promise<Response> => {\n const fullUrl = buildUrl(url);\n const headers = buildHeaders(init?.headers);\n\n const response = await fetch(fullUrl, {\n ...init,\n headers,\n });\n\n // Handle 401 Unauthorized\n if (response.status === 401) {\n onUnauthorized?.();\n\n if (retryOn401 && auth.user) {\n // Try to refresh token silently\n try {\n await auth.signinSilent();\n\n // Retry request with new token\n const newHeaders = buildHeaders(init?.headers);\n const retryResponse = await fetch(fullUrl, {\n ...init,\n headers: newHeaders,\n });\n\n return retryResponse;\n } catch (error) {\n // Silent refresh failed, return original response\n return response;\n }\n }\n }\n\n return response;\n },\n [buildUrl, buildHeaders, onUnauthorized, retryOn401, auth]\n );\n\n /**\n * Fetch and parse JSON\n */\n const fetchJson = useCallback(\n async <T = any>(url: string, init?: RequestInit): Promise<T> => {\n const response = await protectedFetch(url, init);\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `HTTP ${response.status}: ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as T;\n },\n [protectedFetch]\n );\n\n return {\n fetchJson,\n fetch: protectedFetch,\n isLoading: auth.isLoading,\n };\n}\n"]}