antaeus.keycloak.react 2.3.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/README.md +77 -0
  2. package/dist/index.d.mts +108 -23
  3. package/dist/index.d.ts +108 -23
  4. package/dist/index.js +160 -2
  5. package/dist/index.js.map +1 -1
  6. package/dist/index.mjs +157 -5
  7. package/dist/index.mjs.map +1 -1
  8. package/package.json +1 -1
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/config/defaults.ts","../src/config/KeycloakConfig.ts","../src/hooks/useAuth.ts","../src/hooks/useTokenLifecycle.ts","../src/components/TokenLifecycleManager.tsx","../src/components/SessionMonitor.tsx","../src/config/presets.ts","../src/contexts/StorageConfigContext.tsx","../src/components/KeycloakProvider.tsx","../src/hooks/useRoles.ts","../src/hooks/useScopes.ts","../src/components/ProtectedRoute.tsx","../src/components/LoginButton.tsx","../src/components/LogoutButton.tsx","../src/components/UserProfile.tsx","../src/utils/deviceFlow.ts","../src/components/DeviceLogin.tsx","../src/hooks/useProtectedFetch.ts"],"names":["WebStorageStateStore","useOidcAuth","useState","useRef","useCallback","useEffect","jsx","jsxs","Fragment","createContext","useContext","OidcAuthProvider","useMemo","useLocation","error","User","QRCodeSVG"],"mappings":";;;;;;;;;;;;;AAKO,IAAM,aAAA,GAAyC;AAAA,EACpD,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EAC5E,uBAAuB,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EACtF,KAAA,EAAO,qCAAA;AAAA,EAEP,QAAA,EAAU;AAAA,IACR,UAAA,EAAY,KAAA;AAAA,IACZ,cAAA,EAAgB,IAAA;AAAA,IAChB,WAAA,EAAa;AAAA,GACf;AAAA,EAEA,WAAA,EAAa;AAAA,IACX,OAAA,EAAS,IAAA;AAAA,IACT,mBACE,OAAO,MAAA,KAAW,cACd,MAAA,CAAO,QAAA,CAAS,SAAS,oBAAA,GACzB,oBAAA;AAAA,IACN,gBAAA,EAAkB,GAAA;AAAA;AAAA,IAClB,eAAA,EAAiB,MAAA;AAAA;AAAA,IACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,IACzB,oBAAA,EAAsB,KAAA;AAAA,IACtB,cAAA,EAAgB,uBAAA;AAAA,IAChB,eAAA,EAAiB;AAAA,GACnB;AAAA,EAEA,QAAA,EAAU;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,mBAAA,EAAqB,MAAA;AAAA,IACrB,YAAA,EAAc,IAAA;AAAA,IACd,qBAAA,EAAuB,KAAA;AAAA,IACvB,WAAA,EAAa;AAAA,GACf;AAAA,EAEA,QAAQ;AACV;;;AC/BO,IAAM,wBAAN,MAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjC,OAAO,MAAM,UAAA,EAAiD;AAE5D,IAAA,IAAA,CAAK,SAAS,UAAU,CAAA;AAGxB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,iBAAA,CAAkB,UAAU,CAAA;AAGhD,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,QAAA,CAAU,WAAA,IAAe,SAAA;AACpD,IAAA,MAAM,OAAA,GAAU,WAAA,KAAgB,OAAA,GAC5B,MAAA,CAAO,eACP,MAAA,CAAO,cAAA;AAEX,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAA,CAAO,WAAA;AAGnC,IAAA,MAAM,YAAA,GAAoE;AAAA,MACxE,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,WAAW,MAAA,CAAO,QAAA;AAAA,MAClB,cAAc,MAAA,CAAO,WAAA;AAAA,MACrB,0BAA0B,MAAA,CAAO,qBAAA;AAAA,MACjC,aAAA,EAAe,OAAO,QAAA,CAAU,YAAA;AAAA,MAChC,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,oBAAA,EAAsB,OAAO,WAAA,CAAa,OAAA;AAAA,MAC1C,YAAA,EAAc,OAAO,QAAA,CAAU,YAAA;AAAA,MAC/B,mBAAA,EAAqB,OAAO,WAAA,CAAa,iBAAA;AAAA;AAAA,MAGzC,WAAW,IAAIA,iCAAA,CAAqB,EAAE,KAAA,EAAO,SAAS,CAAA;AAAA;AAAA,MAGtD,GAAI,MAAA,CAAO,QAAA,CAAU,mBAAA,IAAuB;AAAA,QAC1C,aAAA,EAAe;AAAA;AACjB,KACF;AAEA,IAAA,IAAI,oBAAoB,MAAA,EAAW;AACjC,MAAA,YAAA,CAAa,eAAA,GAAkB,eAAA;AAAA,IACjC;AAEA,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,SAAS,MAAA,EAA8B;AACpD,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,IAClD;AAEA,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,MAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,IACjD;AAGA,IAAA,IAAI;AACF,MAAA,IAAI,GAAA,CAAI,OAAO,SAAS,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,IAC1D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,kBAAkB,MAAA,EAAkD;AACjF,IAAA,OAAO;AAAA,MACL,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,aAAA,CAAc,WAAA;AAAA,MACjD,qBAAA,EACE,MAAA,CAAO,qBAAA,IAAyB,aAAA,CAAc,qBAAA;AAAA,MAChD,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,MACrC,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,WAAA,EAAa;AAAA,QACX,GAAG,aAAA,CAAc,WAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,GAAG,aAAA,CAAc,MAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA;AACZ,KACF;AAAA,EACF;AACF;AAOO,SAAS,gBAAA,GAA4C;AAE1D,EAAA,IAAI,OAAO,0QAAgB,WAAA,EAAa;AACtC,IAAA,OAAO,EAAC;AAAA,EACV;AAGA,EAAA,MAAM,MAAO,SAAoB;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,GAAA,CAAI,uBAAA;AAAA,IACf,UAAU,GAAA,CAAI,uBAAA;AAAA,IACd,QAAA,EAAU;AAAA,MACR,UAAA,EAAY,IAAI,uBAAA,KAA4B,MAAA;AAAA,MAC5C,cAAA,EAAgB,IAAI,2BAAA,KAAgC;AAAA;AACtD,GACF;AACF;AC7FO,IAAM,OAAA,GAAUC;;;ACWvB,IAAM,kBAAA,GAAqB,uBAAA;AAgCpB,SAAS,kBACd,OAAA,EACyB;AACzB,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,YAAA,EAAc,eAAe,CAAA,GAAIC,eAAS,KAAK,CAAA;AACtD,EAAA,MAAM,CAAC,qBAAA,EAAuB,wBAAwB,CAAA,GAAIA,eAAS,KAAK,CAAA;AACxE,EAAA,MAAM,mBAAA,GAAsBC,aAAO,KAAK,CAAA;AACxC,EAAA,MAAM,qBAAA,GAAwB,MAAA,CAAO,WAAA,EAAa,eAAA,KAAoB,KAAA;AAEtE,EAAA,MAAM,GAAA,GAAMC,iBAAA;AAAA,IACV,CAAC,YAAoB,IAAA,KAAgB;AACnC,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,OAAA,EAAS,GAAG,IAAI,CAAA;AAAA,MAClD;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAKA,EAAA,MAAM,aAAA,GAAgBA,kBAAY,MAAc;AAC9C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,IAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AACxB,IAAA,OAAO,CAAA,EAAG,kBAAkB,CAAA,EAAG,SAAS,IAAI,QAAQ,CAAA,CAAA;AAAA,EACtD,GAAG,CAAC,MAAA,CAAO,SAAA,EAAW,MAAA,CAAO,QAAQ,CAAC,CAAA;AAKtC,EAAA,MAAM,mBAAA,GAAsBA,kBAAY,MAAM;AAC5C,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,QAAA,EAAU,CAAA;AACxC,MAAA,GAAA,CAAI,4BAA4B,IAAI,IAAA,CAAK,GAAG,CAAA,CAAE,aAAa,CAAA;AAAA,IAC7D;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,GAAG,CAAC,CAAA;AAKvB,EAAA,MAAM,yBAAA,GAA4BA,kBAAY,MAAe;AAC3D,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AAGxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE9C,IAAA,IAAI,CAAC,aAAA,EAAe;AAElB,MAAA,mBAAA,EAAoB;AACpB,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,QAAA,CAAS,aAAA,EAAe,EAAE,CAAA;AACjD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,cAAA,GAAA,CAAkB,MAAM,cAAA,IAAkB,GAAA;AAEhD,IAAA,GAAA,CAAI,+BAAA,EAAiC;AAAA,MACnC,UAAA,EAAY,IAAI,IAAA,CAAK,cAAc,EAAE,WAAA,EAAY;AAAA,MACjD,cAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAW,cAAA,IAAkB;AAAA,KAC9B,CAAA;AAED,IAAA,OAAO,cAAA,IAAkB,WAAA;AAAA,EAC3B,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,yBAAyB,aAAA,EAAe,GAAA,EAAK,mBAAmB,CAAC,CAAA;AAKzF,EAAA,MAAM,YAAA,GAAeA,kBAAY,YAA2B;AAE1D,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA;AAAA,IACF;AAGA,IAAA,eAAA,CAAgB,IAAI,CAAA;AAEpB,IAAA,IAAI;AAEF,MAAA,IAAI,2BAA0B,EAAG;AAC/B,QAAA,GAAA,CAAI,qDAAqD,CAAA;AACzD,QAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,QAAA,qBAAA,IAAwB;AACxB,QAAA;AAAA,MACF;AAEA,MAAA,cAAA,IAAiB;AACjB,MAAA,GAAA,CAAI,wBAAwB,CAAA;AAE5B,MAAA,MAAM,KAAK,YAAA,EAAa;AAExB,MAAA,GAAA,CAAI,0BAA0B,CAAA;AAC9B,MAAA,gBAAA,IAAmB;AAAA,IACrB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,GAAA,GAAM,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAA;AACpE,MAAA,GAAA,CAAI,uBAAA,EAAyB,IAAI,OAAO,CAAA;AACxC,MAAA,cAAA,GAAiB,GAAG,CAAA;AACpB,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,eAAA,CAAgB,KAAK,CAAA;AAAA,IACvB;AAAA,EACF,CAAA,EAAG;AAAA,IACD,YAAA;AAAA,IACA,IAAA;AAAA,IACA,yBAAA;AAAA,IACA,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,qBAAA,GAAwBA,kBAAY,YAA8B;AACtE,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AACd,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,IAAI,2BAA0B,EAAG;AAC/B,MAAA,GAAA,CAAI,qCAAqC,CAAA;AACzC,MAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,MAAA,qBAAA,IAAwB;AAGxB,MAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,MAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAE3B,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,2CAA2C,KAAK,CAAA;AAAA,MAEtD;AAEA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA;AAC5B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,GAAA,CAAI,gDAAgD,CAAA;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,WAAA,EAAa,gBAAA,IAAoB,GAAA;AAC1D,IAAA,MAAM,kBAAkB,SAAA,GAAY,GAAA;AAEpC,IAAA,GAAA,CAAI,yBAAA,EAA2B;AAAA,MAC7B,WAAW,IAAI,IAAA,CAAK,SAAA,GAAY,GAAI,EAAE,WAAA,EAAY;AAAA,MAClD,KAAK,IAAI,IAAA,CAAK,GAAA,GAAM,GAAI,EAAE,WAAA,EAAY;AAAA,MACtC,eAAA;AAAA,MACA,SAAA;AAAA,MACA,cAAc,eAAA,IAAmB;AAAA,KAClC,CAAA;AAGD,IAAA,IAAI,mBAAmB,SAAA,EAAW;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,EAAa;AACnB,QAAA,OAAO,IAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,6BAA6B,KAAK,CAAA;AACtC,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,2CAA2C,CAAA;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,gBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,WAAA,EAAa,eAAA,IAAmB,MAAA;AACxD,IAAA,MAAM,oBAAA,GAAuB,QAAA,KAAa,SAAA,IAAa,QAAA,KAAa,MAAA;AACpE,IAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AAExD,IAAA,IAAI,CAAC,oBAAA,IAAwB,mBAAA,CAAoB,OAAA,EAAS;AACxD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,SAAA,EAAW;AAClB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,MAAA,IAAI,CAAC,qBAAA,EAAuB;AAC1B,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,IAAQ,CAAC,eAAA,EAAiB;AAClC,QAAA;AAAA,MACF;AAAA,IACF;AAEA,IAAA,mBAAA,CAAoB,OAAA,GAAU,IAAA;AAC9B,IAAA,GAAA;AAAA,MACE,4CAAA;AAAA,MACA,QAAA;AAAA,MACA,sBAAA;AAAA,MACA,CAAC,KAAK,eAAA,IAAmB;AAAA,KAC3B;AAEA,IAAA,qBAAA,EAAsB,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACvC,MAAA,GAAA,CAAI,+BAA+B,KAAK,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH,CAAA,EAAG;AAAA,IACD,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,IAAA,CAAK,IAAA;AAAA,IACL,OAAO,WAAA,EAAa,eAAA;AAAA,IACpB,qBAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,oBAAoB,OAAA,EAAS;AAC/B,MAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AACjC,MAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AACxD,MAAA,IAAI,IAAA,CAAK,SAAA,IAAc,CAAC,IAAA,CAAK,eAAA,KAAoB,CAAC,qBAAA,IAAyB,CAAC,OAAA,IAAW,CAAC,eAAA,CAAA,EAAmB;AACzG,QAAA,mBAAA,CAAoB,OAAA,GAAU,KAAA;AAAA,MAChC;AAAA,IACF;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,eAAA,EAAiB,KAAK,SAAA,EAAW,IAAA,CAAK,IAAA,EAAM,qBAAqB,CAAC,CAAA;AAK3E,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,IAAA,CAAK,IAAA,IAAQ,CAAC,IAAA,CAAK,SAAA,EAAW;AAChC,MAAA,mBAAA,EAAoB;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,EAAW,mBAAmB,CAAC,CAAA;AAKnD,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,SAAA,EAAW;AAC3C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AACxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,UAAA,GAAa,YAAY,MAAM;AACnC,MAAA,IAAI,2BAA0B,EAAG;AAC/B,QAAA,GAAA,CAAI,6CAA6C,CAAA;AACjD,QAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,QAAA,qBAAA,IAAwB;AAGxB,QAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,QAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAE3B,QAAA,IAAA,CAAK,UAAA,EAAW,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACjC,UAAA,GAAA,CAAI,8CAA8C,KAAK,CAAA;AAAA,QAEzD,CAAC,CAAA;AAAA,MACH;AAAA,IACF,CAAA,EAAG,CAAA,GAAI,EAAA,GAAK,GAAI,CAAA;AAEhB,IAAA,OAAO,MAAM,cAAc,UAAU,CAAA;AAAA,EACvC,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,uBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,OAAO;AAAA,IACL,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACF;AACF;ACpXO,IAAM,wBAA8D,CAAC;AAAA,EAC1E,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA,GAAQ;AACV,CAAA,KAAM;AACJ,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIH,eAAS,KAAK,CAAA;AAEpD,EAAA,MAAM,kBAAA,GAAqBE,kBAAY,MAAM;AAC3C,IAAA,IAAI,MAAA,CAAO,aAAa,oBAAA,EAAsB;AAC5C,MAAA,cAAA,CAAe,IAAI,CAAA;AAAA,IACrB;AAAA,EACF,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAE7C,EAAA,MAAM,oBAAA,GAAuBA,kBAAY,MAAM;AAC7C,IAAA,cAAA,CAAe,KAAK,CAAA;AAAA,EACtB,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,kBAAA,GAAqBA,iBAAAA,CAAY,CAAC,KAAA,KAAiB;AACvD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AAAA,IACtE;AACA,IAAA,MAAA,CAAO,MAAA,EAAQ,qBAAqB,KAAK,CAAA;AAAA,EAC3C,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,yBAAA,GAA4BA,kBAAY,MAAM;AAClD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAK,6DAA6D,CAAA;AAAA,IAC5E;AACA,IAAA,MAAA,CAAO,QAAQ,cAAA,IAAiB;AAAA,EAClC,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,EAAE,YAAA,EAAc,qBAAA,EAAsB,GAAI,iBAAA,CAAkB;AAAA,IAChE,MAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAA,EAAgB,kBAAA;AAAA,IAChB,gBAAA,EAAkB,oBAAA;AAAA,IAClB,cAAA,EAAgB,kBAAA;AAAA,IAChB,qBAAA,EAAuB;AAAA,GACxB,CAAA;AAGD,EAAA,IAAI,qBAAA,EAAuB;AACzB,IAAA,uBACEE,cAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB,SAAA;AAAA,UACjB,OAAA,EAAS,MAAA;AAAA,UACT,SAAA,EAAW;AAAA,SACb;AAAA,QAEA,QAAA,kBAAAC,eAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,KAAA,EAAO;AAAA,cACL,eAAA,EAAiB,OAAA;AAAA,cACjB,OAAA,EAAS,MAAA;AAAA,cACT,YAAA,EAAc,KAAA;AAAA,cACd,SAAA,EAAW,2BAAA;AAAA,cACX,QAAA,EAAU;AAAA,aACZ;AAAA,YAEA,QAAA,EAAA;AAAA,8BAAAD,cAAA,CAAC,IAAA,EAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,cAAc,KAAA,EAAO,MAAA,IAAU,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,8BACnEA,cAAA,CAAC,OAAE,KAAA,EAAO,EAAE,QAAQ,YAAA,EAAc,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,gFAAA,EAEnD,CAAA;AAAA,8BACAA,cAAA;AAAA,gBAAC,QAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,kBACtC,KAAA,EAAO;AAAA,oBACL,OAAA,EAAS,WAAA;AAAA,oBACT,eAAA,EAAiB,SAAA;AAAA,oBACjB,KAAA,EAAO,OAAA;AAAA,oBACP,MAAA,EAAQ,MAAA;AAAA,oBACR,YAAA,EAAc,KAAA;AAAA,oBACd,QAAA,EAAU,MAAA;AAAA,oBACV,MAAA,EAAQ,SAAA;AAAA,oBACR,UAAA,EAAY;AAAA,mBACd;AAAA,kBACD,QAAA,EAAA;AAAA;AAAA;AAED;AAAA;AAAA;AACF;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,IAAI,eAAe,YAAA,EAAc;AAC/B,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,WAAA,EAAa,cAAA,IAAkB,uBAAA;AAEtD,IAAA,uBACEC,eAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB;AAAA,SACnB;AAAA,QAEA,QAAA,EAAA;AAAA,0BAAAA,eAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,KAAA,EAAO;AAAA,gBACL,OAAA,EAAS,MAAA;AAAA,gBACT,aAAA,EAAe,QAAA;AAAA,gBACf,UAAA,EAAY,QAAA;AAAA,gBACZ,GAAA,EAAK;AAAA,eACP;AAAA,cAEA,QAAA,EAAA;AAAA,gCAAAD,cAAA;AAAA,kBAAC,KAAA;AAAA,kBAAA;AAAA,oBACC,KAAA,EAAO;AAAA,sBACL,KAAA,EAAO,MAAA;AAAA,sBACP,MAAA,EAAQ,MAAA;AAAA,sBACR,MAAA,EAAQ,mBAAA;AAAA,sBACR,SAAA,EAAW,mBAAA;AAAA,sBACX,YAAA,EAAc,KAAA;AAAA,sBACd,SAAA,EAAW;AAAA;AACb;AAAA,iBACF;AAAA,gCACAA,cAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,EAAI,QAAA,EAAA,OAAA,EAAQ;AAAA;AAAA;AAAA,WACrE;AAAA,yCACC,OAAA,EAAA,EACE,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,CAAA,EAMH;AAAA;AAAA;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,6DAAU,QAAA,EAAS,CAAA;AACrB;ACvEO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA,GAAW,WAAA;AAAA,EACX,gBAAA,GAAmB,GAAA;AAAA;AAAA,EACnB,iBAAA,GAAoB,EAAA;AAAA;AAAA,EACpB,eAAA,GAAkB,IAAA;AAAA,EAClB,WAAA,GAAc,IAAA;AAAA,EACd,cAAA,GAAiB,KAAA;AAAA,EACjB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAIJ,eAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,CAAC,oBAAA,EAAsB,uBAAuB,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACpF,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,eAAS,cAAc,CAAA;AACzD,EAAA,MAAM,CAAC,gBAAA,EAAkB,mBAAmB,CAAA,GAAIA,eAAS,KAAK,CAAA;AAC9D,EAAA,MAAM,CAAC,iBAAA,EAAmB,oBAAoB,CAAA,GAAIA,eAAS,KAAK,CAAA;AAGhE,EAAAG,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,IAAA,CAAK,MAAM,UAAA,EAAY;AACnD,MAAA,gBAAA,CAAiB,IAAI,CAAA;AACrB,MAAA,uBAAA,CAAwB,IAAI,CAAA;AAC5B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,eAAA,GAAwD,IAAA;AAE5D,IAAA,MAAM,sBAAsB,MAAM;AAChC,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAM,UAAA;AAC7B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,MAAA,MAAM,YAAY,SAAA,GAAY,GAAA;AAG9B,MAAA,IAAI,oBAAA,KAAyB,IAAA,IAAQ,SAAA,GAAY,CAAA,EAAG;AAClD,QAAA,uBAAA,CAAwB,SAAS,CAAA;AAAA,MACnC;AAEA,MAAA,IAAI,aAAa,CAAA,EAAG;AAClB,QAAA,gBAAA,CAAiB,CAAC,CAAA;AAGlB,QAAA,SAAA,IAAY;AAGZ,QAAA,eAAA,GAAkB,WAAW,MAAM;AACjC,UAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,QACvB,GAAG,GAAI,CAAA;AAAA,MACT,CAAA,MAAO;AACL,QAAA,gBAAA,CAAiB,SAAS,CAAA;AAG1B,QAAA,IAAI,SAAA,IAAa,iBAAA,IAAqB,CAAC,iBAAA,EAAmB;AACxD,UAAA,oBAAA,CAAqB,IAAI,CAAA;AACzB,UAAA,UAAA,GAAa,SAAS,CAAA;AAAA,QACxB,CAAA,MAAA,IAAW,SAAA,IAAa,gBAAA,IAAoB,CAAC,gBAAA,EAAkB;AAC7D,UAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,UAAA,SAAA,GAAY,SAAS,CAAA;AAAA,QACvB;AAAA,MACF;AAAA,IACF,CAAA;AAEA,IAAA,mBAAA,EAAoB;AACpB,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,mBAAA,EAAqB,GAAI,CAAA;AAEtD,IAAA,OAAO,MAAM;AACX,MAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,YAAA,CAAa,eAAe,CAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,aAAA,IAAiB,gBAAgB,gBAAA,EAAkB;AACrD,MAAA,mBAAA,CAAoB,KAAK,CAAA;AACzB,MAAA,oBAAA,CAAqB,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAgB,CAAC,CAAA;AAGpC,EAAA,MAAM,UAAA,GAAaD,iBAAAA,CAAY,CAAC,OAAA,KAA4B;AAC1D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,cAAA,GAAiBA,kBAAY,MAAc;AAC/C,IAAA,IAAI,CAAC,eAAe,OAAO,QAAA;AAC3B,IAAA,IAAI,aAAA,IAAiB,mBAAmB,OAAO,UAAA;AAC/C,IAAA,IAAI,aAAA,IAAiB,kBAAkB,OAAO,SAAA;AAC9C,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAA,EAAkB,iBAAiB,CAAC,CAAA;AAGvD,EAAA,MAAM,WAAA,GAAcA,kBAAY,MAAc;AAC5C,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,oBAAA,EAAsB,OAAO,GAAA;AACpD,IAAA,OAAO,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,IAAI,GAAA,EAAM,aAAA,GAAgB,oBAAA,GAAwB,GAAG,CAAC,CAAA;AAAA,EAChF,CAAA,EAAG,CAAC,aAAA,EAAe,oBAAoB,CAAC,CAAA;AAGxC,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,aAAA,KAAkB,IAAA,EAAM;AACnD,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAA,GAAY,oBAAA;AAClB,EAAA,MAAM,aAAA,GAAgB,uBAAuB,QAAQ,CAAA,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,CAAA,oBAAA,EAAuB,cAAA,EAAgB,CAAA,CAAA;AAC3D,EAAA,MAAM,cAAA,GAAiB,YAAY,+BAAA,GAAkC,EAAA;AACrE,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAEnG,EAAA,MAAM,WAAW,WAAA,EAAY;AAE7B,EAAA,uBACEG,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,SAAS,KAAA,EACtB,QAAA,EAAA;AAAA,IAAA,WAAA,oBACCD,cAAAA;AAAA,MAAC,QAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,4BAAA;AAAA,QACV,OAAA,EAAS,MAAM,YAAA,CAAa,CAAC,SAAS,CAAA;AAAA,QACtC,YAAA,EAAY,YAAY,wBAAA,GAA2B,0BAAA;AAAA,QACnD,KAAA,EAAO,YAAY,QAAA,GAAW,UAAA;AAAA,QAE7B,sBAAY,QAAA,GAAM;AAAA;AAAA,KACrB;AAAA,IAGD,CAAC,SAAA,oBACAC,eAAAA,CAAAC,qBAAA,EACE,QAAA,EAAA;AAAA,sBAAAD,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EACb,QAAA,EAAA;AAAA,wBAAAD,eAAC,MAAA,EAAA,EAAK,SAAA,EAAU,6BACb,QAAA,EAAA,aAAA,KAAkB,CAAA,GAAI,oBAAoB,qBAAA,EAC7C,CAAA;AAAA,wBACAA,cAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,0BAAA,EACb,QAAA,EAAA,UAAA,CAAW,aAAa,CAAA,EAC3B;AAAA,OAAA,EACF,CAAA;AAAA,MAEC,mCACCA,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,oCACb,QAAA,kBAAAA,cAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,mCAAA;AAAA,UACV,KAAA,EAAO,EAAE,KAAA,EAAO,CAAA,EAAG,QAAQ,CAAA,CAAA,CAAA,EAAI;AAAA,UAC/B,IAAA,EAAK,aAAA;AAAA,UACL,eAAA,EAAe,QAAA;AAAA,UACf,eAAA,EAAe,CAAA;AAAA,UACf,eAAA,EAAe;AAAA;AAAA,OACjB,EACF;AAAA,KAAA,EAEJ;AAAA,GAAA,EAEJ,CAAA;AAEJ;;;ACpQO,IAAM,cAAA,GAAgE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAa3E,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,SAAA;AAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,eAAA,EAAiB;AAAA,IACf,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,KAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,cAAA,EAAgB;AAAA,IACd,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,WAAA,EAAa;AAAA,IACX,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,CAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB;AAEJ;AAaO,SAAS,gBAAgB,MAAA,EAA+C;AAC7E,EAAA,OAAO,eAAe,MAAM,CAAA;AAC9B;AAqBO,SAAS,eAAA,CACd,QACA,YAAA,EACyB;AACzB,EAAA,MAAM,YAAA,GAAe,gBAAgB,MAAM,CAAA;AAE3C,EAAA,OAAO;AAAA,IACL,GAAG,YAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,YAAA,CAAa,WAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,YAAA,CAAa,MAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AACF;AC/OA,IAAM,uBAAuBG,mBAAA,CAAwC;AAAA,EACnE,WAAA,EAAa,SAAA;AAAA,EACb,SAAS,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,iBAAkB;AACpE,CAAC,CAAA;AAEM,IAAM,qBAAA,GAGR,CAAC,EAAE,WAAA,EAAa,UAAS,KAAM;AAClC,EAAA,MAAM,OAAA,GAAU,WAAA,KAAgB,OAAA,GAAU,MAAA,CAAO,eAAe,MAAA,CAAO,cAAA;AAEvE,EAAA,uBACEH,cAAAA,CAAC,oBAAA,CAAqB,QAAA,EAArB,EAA8B,OAAO,EAAE,WAAA,EAAa,OAAA,EAAQ,EAC1D,QAAA,EACH,CAAA;AAEJ,CAAA;AAKO,IAAM,gBAAA,GAAmB,MAAMI,gBAAA,CAAW,oBAAoB,CAAA;AC8CrE,SAAS,aAAa,KAAA,EAAwE;AAC5F,EAAA,OAAO,WAAA,IAAe,SAAS,UAAA,IAAc,KAAA;AAC/C;AAyHO,IAAM,gBAAA,GAAoD,CAAC,KAAA,KAAU;AAC1E,EAAA,MAAM,EAAE,QAAA,EAAU,KAAA,GAAQ,KAAA,EAAM,GAAI,KAAA;AAGpC,EAAA,MAAM,SAAyB,YAAA,CAAa,KAAK,IAC7C,eAAA,CAAgB,KAAK,IACrB,KAAA,CAAM,MAAA;AAGV,EAAA,MAAM,UAAA,GAAa,qBAAA,CAAsB,KAAA,CAAM,MAAM,CAAA;AAGrD,EAAA,MAAM,GAAA,GAAMN,iBAAAA;AAAA,IACV,CAAC,KAAA,EAAkC,OAAA,EAAA,GAAoB,IAAA,KAAgB;AACrE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAM,MAAA,GAAS,oBAAA;AACf,QAAA,QAAQ,KAAA;AAAO,UACb,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACpC,YAAA;AAAA,UACF,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACrC,YAAA;AAAA,UACF,KAAK,OAAA;AACH,YAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACtC,YAAA;AAAA;AACJ,MACF;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,gBAAA,GAAmBA,iBAAAA;AAAA,IACvB,CAAC,KAAA,KAA6B;AAC5B,MAAA,GAAA,CAAI,QAAQ,oBAAoB,CAAA;AAGhC,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA,CAAO,MAAA,EAAQ,UAAU,KAAa,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG;AAAA,GACrB;AAEA,EAAA,MAAM,iBAAA,GAAoBA,kBAAY,MAAY;AAChD,IAAA,GAAA,CAAI,QAAQ,qBAAqB,CAAA;AAGjC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,IAAA,MAAA,CAAO,QAAQ,QAAA,IAAW;AAAA,EAC5B,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG,CAAC,CAAA;AAEvB,EAAA,MAAM,YAAA,GAAeA,kBAAY,MAAY;AAC3C,IAAA,GAAA,CAAI,QAAQ,4DAA4D,CAAA;AAAA,EAC1E,CAAA,EAAG,CAAC,GAAG,CAAC,CAAA;AAKR,EAAA,MAAM,kBAAA,GAAqB,MAAA,CAAO,QAAA,EAAU,cAAA,KAAmB,KAAA;AAG/D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,QAAA,EAAU,WAAA,IAAe,SAAA;AAEpD,EAAA,uBACEE,cAAAA;AAAA,IAACK,6BAAA;AAAA,IAAA;AAAA,MACE,GAAG,UAAA;AAAA,MACJ,gBAAA;AAAA,MACA,iBAAA;AAAA,MACA,YAAA;AAAA,MAEA,QAAA,kBAAAL,eAAC,qBAAA,EAAA,EAAsB,WAAA,EACrB,0BAAAC,eAAAA,CAAC,qBAAA,EAAA,EAAsB,QAAgB,KAAA,EAEpC,QAAA,EAAA;AAAA,QAAA,kBAAA,oBAAsBD,eAAC,cAAA,EAAA,EAAe,CAAA;AAAA,QAGtC;AAAA,OAAA,EACH,CAAA,EACF;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,gBAAgB,KAAA,EAAwD;AAC/E,EAAA,MAAM,EAAE,WAAW,QAAA,EAAU,MAAA,GAAS,WAAW,MAAA,EAAQ,SAAA,GAAY,EAAC,EAAE,GAAI,KAAA;AAG5E,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,MAAA,EAAQ,SAAS,CAAA;AAGtD,EAAA,MAAM,UAAA,GAA6B;AAAA,IACjC,SAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA,EAAa,YAAA,CAAa,WAAA,IAAe,aAAA,CAAc,WAAA,KAAgB,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACtI,qBAAA,EAAuB,YAAA,CAAa,qBAAA,IAAyB,aAAA,CAAc,qBAAA,KAA0B,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACpK,KAAA,EAAO,YAAA,CAAa,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,IAC3C,QAAA,EAAU;AAAA,MACR,GAAG,aAAA,CAAc,QAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,aAAA,CAAc,WAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,aAAA,CAAc,QAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,aAAA,CAAc,MAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AAEA,EAAA,OAAO,UAAA;AACT;AC7PO,SAAS,QAAA,GAA2B;AACzC,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,MAAM,KAAA,GAAQM,cAAkB,MAAM;AACpC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,MAAA,OAAO,EAAC;AAAA,IACV;AAGA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,YAAA;AACtC,IAAA,OAAO,WAAA,EAAa,SAAS,EAAC;AAAA,EAChC,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,OAAA,GAAUA,aAAA;AAAA,IACd,MAAM,CAAC,IAAA,KAA0B;AAC/B,MAAA,OAAO,KAAA,CAAM,SAAS,IAAI,CAAA;AAAA,IAC5B,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,UAAA,GAAaA,aAAA;AAAA,IACjB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,IAAA,CAAK,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC1D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,WAAA,GAAcA,aAAA;AAAA,IAClB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,KAAA,CAAM,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC3D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,cAAA,GAAiBA,aAAA;AAAA,IACrB,MACE,CAAC,QAAA,KAA+B;AAC9B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,QAAA,OAAO,EAAC;AAAA,MACV;AAGA,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,eAAA;AAIzC,MAAA,OAAO,cAAA,GAAiB,QAAQ,CAAA,EAAG,KAAA,IAAS,EAAC;AAAA,IAC/C,CAAA;AAAA,IACF,CAAC,KAAK,IAAI;AAAA,GACZ;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACjEO,SAAS,SAAA,GAA6B;AAC3C,EAAA,MAAM,OAAO,OAAA,EAAQ;AAIrB,EAAA,MAAM,MAAA,GAASA,cAAkB,MAAM;AACrC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,KAAA,SAAc,EAAC;AAG/B,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAAA,EAC5D,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,QAAA,GAAWA,aAAAA;AAAA,IACf,MAAM,CAAC,KAAA,KAA2B;AAChC,MAAA,OAAO,MAAA,CAAO,SAAS,KAAK,CAAA;AAAA,IAC9B,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,WAAA,GAAcA,aAAAA;AAAA,IAClB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,IAAA,CAAK,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC9D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,YAAA,GAAeA,aAAAA;AAAA,IACnB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,KAAA,CAAM,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC/D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACwFO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA;AAAA,EACA,gBAAgB,EAAC;AAAA,EACjB,eAAA,GAAkB,KAAA;AAAA,EAClB,iBAAiB,EAAC;AAAA,EAClB,gBAAA,GAAmB,KAAA;AAAA,EACnB,MAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,UAAA,EAAY,WAAA,EAAY,GAAI,QAAA,EAAS;AAC7C,EAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAa,GAAI,SAAA,EAAU;AAChD,EAAA,MAAM,WAAWC,0BAAA,EAAY;AAC7B,EAAA,MAAM,aAAA,GAAgBV,aAAO,KAAK,CAAA;AAGlC,EAAA,MAAM,eAAA,GAAkB,CAAC,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,eAAA;AAGhD,EAAA,MAAM,YAAA,GAAe,MAAA,IAAU,IAAA,CAAK,IAAA,GAChC,MAAA,CAAO,KAAK,IAAA,EAAM,EAAE,QAAA,EAAU,CAAA,GAC9B,IAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,aAAA,CAAc,MAAA,GAAS,CAAA,GACrC,eAAA,GAAkB,YAAY,aAAa,CAAA,GAAI,UAAA,CAAW,aAAa,CAAA,GACxE,IAAA;AAGJ,EAAA,MAAM,WAAA,GAAc,cAAA,CAAe,MAAA,GAAS,CAAA,GACvC,gBAAA,GAAmB,aAAa,cAAc,CAAA,GAAI,WAAA,CAAY,cAAc,CAAA,GAC7E,IAAA;AAGJ,EAAA,MAAM,kBAAA,GACJ,CAAC,eAAA,GAAkB,mBAAA,GACnB,YAAA,KAAiB,KAAA,GAAQ,eAAA,GACzB,UAAA,KAAe,KAAA,GAAQ,oBAAA,GACvB,WAAA,KAAgB,KAAA,GAAQ,qBAAA,GACxB,IAAA;AAIF,EAAAE,gBAAU,MAAM;AACd,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,cAAA,GAAiB,kBAAkB,CAAA;AAAA,IACrC;AAAA,EACF,CAAA,EAAG,CAAC,kBAAA,EAAoB,cAAc,CAAC,CAAA;AAGvC,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAK,SAAA,IAAa,CAAC,KAAK,eAAA,IAAmB,CAAC,cAAc,OAAA,EAAS;AACtE,MAAA,aAAA,CAAc,OAAA,GAAU,IAAA;AACxB,MAAA,IAAA,CAAK,cAAA,CAAe;AAAA,QAClB,cAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,QAAA,CAAS,WAAW,QAAA,CAAS;AAAA,OACrE,CAAA,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AAElB,QAAA,aAAA,CAAc,OAAA,GAAU,KAAA;AACxB,QAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAAA,MACjE,CAAC,CAAA;AAAA,IACH;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,iBAAiB,QAAA,CAAS,QAAA,EAAU,QAAA,CAAS,MAAM,CAAC,CAAA;AAG7E,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,MAAA,aAAA,CAAc,OAAA,GAAU,KAAA;AAAA,IAC1B;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,eAAe,CAAC,CAAA;AAGzB,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,uBAAOC,eAAAE,mBAAAA,EAAA,EAAG,8CAAoBF,cAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,uBAAOA,eAAAE,mBAAAA,EAAA,EAAG,8CAAoBF,cAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,uBAAOA,eAAAE,mBAAAA,EAAA,EAAG,mDAAyBF,cAAAA,CAAC,gCAA6B,CAAA,EAAG,CAAA;AAAA,EACtE;AAGA,EAAA,uBAAOA,cAAAA,CAAAE,mBAAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB;AAKA,IAAM,uBAAA,GAAoC,sBACxCD,eAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK;AAAA,KACP;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAD,cAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,mBAAA;AAAA,YACR,SAAA,EAAW,mBAAA;AAAA,YACX,YAAA,EAAc,KAAA;AAAA,YACd,KAAA,EAAO,MAAA;AAAA,YACP,MAAA,EAAQ,MAAA;AAAA,YACR,SAAA,EAAW;AAAA;AACb;AAAA,OACF;AAAA,sBACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,YAAA,EAAU,CAAA;AAAA,sBAClDA,eAAC,OAAA,EAAA,EAAO,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA,EAKN;AAAA;AAAA;AACJ,CAAA;AAMF,IAAM,4BAAA,GAAyC,sBAC7CC,eAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK,MAAA;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACb;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAD,cAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,QAAA,EAAU,MAAA;AAAA,YACV,KAAA,EAAO;AAAA,WACT;AAAA,UACD,QAAA,EAAA;AAAA;AAAA,OAED;AAAA,sBACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,eAAA,EAAa,CAAA;AAAA,sBACtDA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,iDAAA,EAExC;AAAA;AAAA;AACF,CAAA;AC/QK,IAAM,cAA0C,CAAC;AAAA,EACtD,QAAA,GAAW,OAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,SAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,YAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,YAAA,IAAe;AACf,IAAA,IAAA,CAAK,cAAA,EAAe;AAAA,EACtB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,2BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACEC,eAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYD,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;ACpCO,IAAM,eAA4C,CAAC;AAAA,EACxD,QAAA,GAAW,QAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,WAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,aAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,aAAA,IAAgB;AAChB,IAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,EACvB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACEC,eAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYD,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;AC1CO,IAAM,cAA0C,CAAC;AAAA,EACtD,SAAA,GAAY,EAAA;AAAA,EACZ,UAAA,GAAa,IAAA;AAAA,EACb,SAAA,GAAY,IAAA;AAAA,EACZ,SAAA,GAAY,KAAA;AAAA,EACZ,UAAA,GAAa,EAAA;AAAA,EACb,KAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,QAAA,EAAS;AAG3B,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,KAAK,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,CAAK,OAAA;AAC1B,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,IAAQ,OAAA,CAAQ,kBAAA,IAAsB,MAAA;AAC3D,EAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA;AACtB,EAAA,MAAM,QAAA,GAAW,YAAY,IAAI,CAAA;AAEjC,EAAA,MAAM,SAAA,GAAY,iBAAA;AAClB,EAAA,MAAM,cAAA,GAAiB,UAAU,4BAAA,GAA+B,EAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAG,SAAS,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,GAAG,IAAA,EAAK;AAEnE,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAA,EAAQ;AAAA,IACV;AAAA,EACF,CAAA;AAEA,EAAA,uBACEC,eAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,OAAA;AAAA,MACX,KAAA;AAAA,MACA,OAAA,EAAS,WAAA;AAAA,MACT,IAAA,EAAM,UAAU,QAAA,GAAW,MAAA;AAAA,MAC3B,QAAA,EAAU,UAAU,CAAA,GAAI,MAAA;AAAA,MACxB,UAAA,EAAY,UAAU,CAAC,CAAA,KAAM,EAAE,GAAA,KAAQ,OAAA,IAAW,aAAY,GAAI,MAAA;AAAA,MAEjE,QAAA,EAAA;AAAA,QAAA,UAAA,oBACCD,cAAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,yBAAA;AAAA,YACV,KAAA,EAAO;AAAA,cACL,KAAA,EAAO,UAAA;AAAA,cACP,MAAA,EAAQ,UAAA;AAAA,cACR,UAAU,UAAA,GAAa;AAAA,aACzB;AAAA,YAEC,QAAA,EAAA;AAAA;AAAA,SACH;AAAA,wBAGFC,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EACb,QAAA,EAAA;AAAA,0BAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EAAyB,QAAA,EAAA,IAAA,EAAK,CAAA;AAAA,UAE5C,aAAa,KAAA,oBACZA,eAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAA0B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,UAGhD,SAAA,IAAa,MAAM,MAAA,GAAS,CAAA,oBAC3BC,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAU,wBAAA,EACZ,QAAA,EAAA;AAAA,YAAA,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAI,CAAC,IAAA,qBACtBD,cAAAA,CAAC,MAAA,EAAA,EAAgB,SAAA,EAAU,6BAAA,EACxB,QAAA,EAAA,IAAA,EAAA,EADQ,IAEX,CACD,CAAA;AAAA,YACA,MAAM,MAAA,GAAS,CAAA,oBACdC,eAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,6BAAA,EAA8B,QAAA,EAAA;AAAA,cAAA,GAAA;AAAA,cAC1C,MAAM,MAAA,GAAS;AAAA,aAAA,EACnB;AAAA,WAAA,EAEJ;AAAA,SAAA,EAEJ;AAAA;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,YAAY,IAAA,EAAsB;AACzC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AAEnC,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,OAAO,MAAM,CAAC,CAAA,CAAE,UAAU,CAAA,EAAG,CAAC,EAAE,WAAA,EAAY;AAAA,EAC9C;AAEA,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,CAAC,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,CAAE,CAAC,CAAA,EAAG,WAAA,EAAY;AAChE;;;ACpGA,eAAsB,kBACpB,UAAA,EACsC;AACtC,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,8BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA;AAClB,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,gCAAgC,QAAA,CAAS,MAAM,IAAI,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,OACtF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAmCA,eAAsB,YAAA,CACpB,YACA,UAAA,EAC+B;AAC/B,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,0BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,EAAa,YAAY;AAAA,KACjD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAGjC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,SAAA,GAAY,IAAA;AAGlB,MAAA,IACE,SAAA,CAAU,KAAA,KAAU,uBAAA,IACpB,SAAA,CAAU,UAAU,WAAA,EACpB;AACA,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,SAAA,CAAU,iBAAA,IAAqB,SAAA,CAAU,KAAA,IAAS;AAAA,OACpD;AAAA,IACF;AAGA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,EACxC;AACF;AAgBA,eAAsB,aAAA,CACpB,YACA,WAAA,EACc;AACd,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,6BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,YAAA,EAAc,aAAa;AAAA,KACnD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AC7IO,IAAM,cAA0C,CAAC;AAAA,EACtD,UAAA;AAAA,EACA,UAAA,GAAa,GAAA;AAAA,EACb,eAAA,GAAkB,CAAA;AAAA,EAClB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,gBAAA,EAAiB;AAClD,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIL,eAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIA,eAAS,IAAI,CAAA;AAC3C,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,YAAA,GAAeC,aAAsB,IAAI,CAAA;AAG/C,EAAAE,gBAAU,MAAM;AACd,IAAA,MAAM,iBAAiB,YAAY;AACjC,MAAA,UAAA,CAAW,IAAI,CAAA;AACf,MAAA,QAAA,CAAS,IAAI,CAAA;AAEb,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,UAAU,CAAA;AACnD,QAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,QAAA,gBAAA,CAAiB,SAAS,UAAU,CAAA;AAAA,MACtC,SAAS,GAAA,EAAK;AACZ,QAAA,MAAMS,MAAAA,GAAQ,GAAA;AACd,QAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,QAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,MACjB,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,KAAK,CAAA;AAAA,MAClB;AAAA,IACF,CAAA;AAEA,IAAA,cAAA,EAAe;AAAA,EACjB,CAAA,EAAG,CAAC,UAAA,EAAY,OAAO,CAAC,CAAA;AAGxB,EAAAT,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,IAAc,aAAA,KAAkB,IAAA,EAAM;AAE3C,IAAA,MAAM,QAAA,GAAW,YAAY,MAAM;AACjC,MAAA,gBAAA,CAAiB,CAAC,IAAA,KAAS;AACzB,QAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,IAAQ,CAAA,EAAG;AAC9B,UAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,UAAA,QAAA,CAAS,mDAAmD,CAAA;AAC5D,UAAA,OAAO,CAAA;AAAA,QACT;AACA,QAAA,OAAO,IAAA,GAAO,CAAA;AAAA,MAChB,CAAC,CAAA;AAAA,IACH,GAAG,GAAI,CAAA;AAEP,IAAA,OAAO,MAAM,cAAc,QAAQ,CAAA;AAAA,EACrC,CAAA,EAAG,CAAC,UAAA,EAAY,aAAa,CAAC,CAAA;AAG9B,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,EAAY;AAEjB,IAAA,MAAM,OAAO,YAAY;AACvB,MAAA,IAAI;AACF,QAAA,MAAM,aAAA,GAAgB,MAAM,YAAA,CAAa,UAAA,EAAY,WAAW,WAAW,CAAA;AAE3E,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AAGA,UAAA,MAAM,QAAA,GAAW,MAAM,aAAA,CAAc,UAAA,EAAY,cAAc,YAAY,CAAA;AAG3E,UAAA,MAAM,IAAA,GAAO,IAAIU,iBAAA,CAAK;AAAA,YACpB,QAAA,EAAU,cAAc,QAAA,IAAY,EAAA;AAAA,YACpC,cAAc,aAAA,CAAc,YAAA;AAAA,YAC5B,UAAA,EAAY,cAAc,UAAA,IAAc,QAAA;AAAA,YACxC,OAAA,EAAS,QAAA;AAAA,YACT,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,KAAI,GAAI,GAAI,IAAI,aAAA,CAAc,UAAA;AAAA,YAC1D,OAAO,aAAA,CAAc,KAAA;AAAA,YACrB,eAAe,aAAA,CAAc,aAAA;AAAA,YAC7B,aAAA,EAAe;AAAA;AAAA,WAChB,CAAA;AAED,UAAA,OAAA,CAAQ,IAAI,qDAAA,EAAuD;AAAA,YACjE,cAAA,EAAgB,CAAC,CAAC,IAAA,CAAK,YAAA;AAAA,YACvB,eAAA,EAAiB,CAAC,CAAC,IAAA,CAAK,aAAA;AAAA,YACxB,WAAW,IAAA,CAAK,UAAA;AAAA,YAChB,SAAS,QAAA,CAAS;AAAA,WACnB,CAAA;AAID,UAAA,MAAM,UAAA,GAAa,aAAa,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,IAAA,CAAK,SAAS,SAAS,CAAA,CAAA;AAClF,UAAA,MAAM,QAAA,GAAW,KAAK,eAAA,EAAgB;AAEtC,UAAA,OAAA,CAAQ,IAAI,0CAAA,EAA4C;AAAA,YACtD,UAAA;AAAA,YACA,WAAA;AAAA,YACA,OAAA,EAAS,WAAA,KAAgB,OAAA,GAAU,cAAA,GAAiB;AAAA,WACrD,CAAA;AAGD,UAAA,OAAA,CAAQ,OAAA,CAAQ,YAAY,QAAQ,CAAA;AAGpC,UAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AACzC,UAAA,IAAI,CAAC,MAAA,EAAQ;AACX,YAAA,OAAA,CAAQ,MAAM,gDAAgD,CAAA;AAC9D,YAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,UACnE;AACA,UAAA,OAAA,CAAQ,GAAA,CAAI,2CAAA,EAA6C,WAAA,KAAgB,OAAA,GAAU,iBAAiB,gBAAgB,CAAA;AAGpH,UAAA,IAAI,SAAA,EAAW;AAEb,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAA,OAAA,KAAW,UAAA,CAAW,OAAA,EAAS,GAAG,CAAC,CAAA;AACrD,YAAA,SAAA,CAAU,IAAI,CAAA;AAAA,UAChB,CAAA,MAAO;AAGL,YAAA,MAAA,CAAO,SAAS,MAAA,EAAO;AAAA,UACzB;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAI,CAAE,GAAA,CAAc,OAAA,CAAQ,QAAA,CAAS,uBAAuB,CAAA,EAAG;AAC7D,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AACA,UAAA,MAAMD,MAAAA,GAAQ,GAAA;AACd,UAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,UAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,QACjB;AAAA,MACF;AAAA,IACF,CAAA;AAGA,IAAA,YAAA,CAAa,OAAA,GAAU,WAAA,CAAY,IAAA,EAAM,eAAA,GAAkB,GAAI,CAAA;AAG/D,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,MACpC;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,UAAA,EAAY,UAAA,EAAY,iBAAiB,SAAA,EAAW,OAAA,EAAS,IAAI,CAAC,CAAA;AAEtE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,uBACEP,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,yCAAA,EAA4C,SAAS,IAAI,KAAA,EACvE,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAAA,EAA2B,CAAA;AAAA,sBAC1CA,cAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,6BAAA,EAA2B;AAAA,KAAA,EAChC,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,uBACEC,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,uCAAA,EAA0C,SAAS,IAAI,KAAA,EACrE,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EAA8B,QAAA,EAAA,cAAA,EAAE,CAAA;AAAA,sBAC/CA,cAAAA,CAAC,IAAA,EAAA,EAAG,QAAA,EAAA,OAAA,EAAK,CAAA;AAAA,sBACTA,cAAAA,CAAC,GAAA,EAAA,EAAG,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACVA,cAAAA;AAAA,QAAC,QAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,8BAAA;AAAA,UACV,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,UACvC,QAAA,EAAA;AAAA;AAAA;AAED,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAAA,GAAa,CAAC,OAAA,KAA4B;AAC9C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA;AAEA,EAAA,uBACEC,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,gBAAA,EAAmB,SAAS,IAAI,KAAA,EAC9C,QAAA,EAAA;AAAA,oBAAAD,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,wBAAA,EAAyB,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,oBAEnDA,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,qBAAA,EACb,QAAA,kBAAAA,cAAAA,CAACU,sBAAA,EAAA,EAAU,KAAA,EAAO,UAAA,CAAW,yBAAA,EAA2B,IAAA,EAAM,YAAY,CAAA,EAC5E,CAAA;AAAA,oBAEAT,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,+BAAA,EACb,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,OAAE,QAAA,EAAA,4CAAA,EAA0C,CAAA;AAAA,sBAC7CA,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,sBAAA,EAAwB,qBAAW,gBAAA,EAAiB,CAAA;AAAA,sBACpEA,cAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,sBAClBA,cAAAA,CAAC,QAAA,EAAA,EAAO,SAAA,EAAU,4BAAA,EAA8B,qBAAW,SAAA,EAAU;AAAA,KAAA,EACvE,CAAA;AAAA,IAEC,aAAA,KAAkB,QAAQ,aAAA,GAAgB,CAAA,oBACzCC,eAAAA,CAAC,GAAA,EAAA,EAAE,WAAU,yBAAA,EAA0B,QAAA,EAAA;AAAA,MAAA,kBAAA;AAAA,MACpB,WAAW,aAAa;AAAA,KAAA,EAC3C,CAAA;AAAA,oBAGFA,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,yBAAA,EACb,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0DAAA,EAA2D,CAAA;AAAA,sBAC1EA,cAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,8BAAA,EAA4B;AAAA,KAAA,EACjC;AAAA,GAAA,EACF,CAAA;AAEJ;ACnLO,SAAS,iBAAA,CACd,OAAA,GAAoC,EAAC,EACZ;AACzB,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,oBAAA,GAAuBH,aAAO,KAAK,CAAA;AAGzC,EAAA,MAAM,EAAE,IAAA,EAAM,SAAA,EAAW,YAAA,EAAa,GAAI,IAAA;AAE1C,EAAA,MAAM;AAAA,IACJ,OAAA,GAAU,EAAA;AAAA,IACV,cAAA;AAAA,IACA,UAAA,GAAa,IAAA;AAAA,IACb,OAAA,EAAS,gBAAgB;AAAC,GAC5B,GAAI,OAAA;AAKJ,EAAA,MAAM,QAAA,GAAWC,iBAAAA;AAAA,IACf,CAAC,GAAA,KAAwB;AAEvB,MAAA,IAAI,IAAI,UAAA,CAAW,SAAS,KAAK,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC3D,QAAA,OAAO,GAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAA,GAAO,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAC5D,MAAA,MAAM,OAAO,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA,GAAM,IAAI,GAAG,CAAA,CAAA;AAEhD,MAAA,OAAO,IAAA,GAAO,IAAA;AAAA,IAChB,CAAA;AAAA,IACA,CAAC,OAAO;AAAA,GACV;AAMA,EAAA,MAAM,gBAAgB,MAA8B;AAClD,IAAA,IAAI,CAAC,MAAM,YAAA,EAAc;AACvB,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,YAAY,CAAA;AAAA,KAC5C;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,YAAA,GAAeA,iBAAAA;AAAA,IACnB,CAAC,cAAA,KAA0C;AACzC,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,cAAc,CAAA;AAG1C,MAAA,MAAM,aAAa,aAAA,EAAc;AACjC,MAAA,IAAI,WAAW,aAAA,EAAe;AAC5B,QAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,UAAA,CAAW,aAAa,CAAA;AAAA,MACvD;AAGA,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AACtD,QAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,MACxB,CAAC,CAAA;AAED,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,aAAa;AAAA,GAChB;AAKA,EAAA,MAAM,cAAA,GAAiBA,iBAAAA;AAAA,IACrB,OAAO,KAAa,IAAA,KAA0C;AAC5D,MAAA,MAAM,OAAA,GAAU,SAAS,GAAG,CAAA;AAC5B,MAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAE1C,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,QACpC,GAAG,IAAA;AAAA,QACH;AAAA,OACD,CAAA;AAGD,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,QAAA,cAAA,IAAiB;AAGjB,QAAA,IAAI,UAAA,IAAc,IAAA,IAAQ,CAAC,oBAAA,CAAqB,OAAA,EAAS;AAEvD,UAAA,oBAAA,CAAqB,OAAA,GAAU,IAAA;AAE/B,UAAA,IAAI;AAEF,YAAA,MAAM,YAAA,EAAa;AAGnB,YAAA,MAAM,UAAA,GAAa,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAC7C,YAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,cACzC,GAAG,IAAA;AAAA,cACH,OAAA,EAAS;AAAA,aACV,CAAA;AAED,YAAA,OAAO,aAAA;AAAA,UACT,SAAS,KAAA,EAAO;AAEd,YAAA,OAAO,QAAA;AAAA,UACT,CAAA,SAAE;AAEA,YAAA,UAAA,CAAW,MAAM;AACf,cAAA,oBAAA,CAAqB,OAAA,GAAU,KAAA;AAAA,YACjC,GAAG,GAAI,CAAA;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,QAAA,EAAU,YAAA,EAAc,cAAA,EAAgB,UAAA,EAAY,MAAM,YAAY;AAAA,GACzE;AAKA,EAAA,MAAM,SAAA,GAAYA,iBAAAA;AAAA,IAChB,OAAgB,KAAa,IAAA,KAAmC;AAC9D,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,GAAA,EAAK,IAAI,CAAA;AAE/C,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,QAAQ,QAAA,CAAS,MAAM,KAAK,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,SAC/D;AAAA,MACF;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,cAAc;AAAA,GACjB;AAEA,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA,EAAO,cAAA;AAAA,IACP;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { KeycloakConfig } from './types';\n\n/**\n * Default configuration values for Keycloak integration\n */\nexport const defaultConfig: Partial<KeycloakConfig> = {\n redirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n postLogoutRedirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n scope: 'openid profile email offline_access',\n\n features: {\n deviceFlow: false,\n sessionMonitor: true,\n autoRefresh: true,\n },\n\n silentRenew: {\n enabled: true,\n silentRedirectUri:\n typeof window !== 'undefined'\n ? window.location.origin + '/silent-renew.html'\n : '/silent-renew.html',\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both', // Check on startup AND retry on 401\n maxRefreshTokenLifetime: 2592000, // 30 days in seconds\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n useRefreshToken: true,\n },\n\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n storageType: 'session',\n },\n\n events: {},\n};\n","import type { UserManagerSettings } from 'oidc-client-ts';\nimport { WebStorageStateStore } from 'oidc-client-ts';\nimport type { KeycloakConfig } from './types';\nimport { defaultConfig } from './defaults';\n\n/**\n * Configuration builder for Keycloak integration\n */\nexport class KeycloakConfigBuilder {\n /**\n * Builds OIDC client configuration from Keycloak config\n *\n * @param userConfig - User-provided Keycloak configuration\n * @returns OIDC client settings ready for react-oidc-context\n * @throws Error if required fields are missing or invalid\n */\n static build(userConfig: KeycloakConfig): UserManagerSettings {\n // Validate required fields\n this.validate(userConfig);\n\n // Merge with defaults\n const config = this.mergeWithDefaults(userConfig);\n\n // Determine storage type\n const storageType = config.advanced!.storageType || 'session';\n const storage = storageType === 'local'\n ? window.localStorage\n : window.sessionStorage;\n\n const { useRefreshToken } = config.silentRenew!;\n\n // Build OIDC settings\n const oidcSettings: UserManagerSettings & { useRefreshToken?: boolean } = {\n authority: config.authority,\n client_id: config.clientId,\n redirect_uri: config.redirectUri!,\n post_logout_redirect_uri: config.postLogoutRedirectUri!,\n response_type: config.advanced!.responseType!,\n scope: config.scope!,\n automaticSilentRenew: config.silentRenew!.enabled!,\n loadUserInfo: config.advanced!.loadUserInfo!,\n silent_redirect_uri: config.silentRenew!.silentRedirectUri!,\n\n // Configure storage for user data and tokens\n userStore: new WebStorageStateStore({ store: storage }),\n\n // Add PKCE support (required for public clients)\n ...(config.advanced!.codeChallengeMethod && {\n response_mode: 'query',\n }),\n };\n\n if (useRefreshToken !== undefined) {\n oidcSettings.useRefreshToken = useRefreshToken;\n }\n\n return oidcSettings;\n }\n\n /**\n * Validates required configuration fields\n *\n * @param config - Configuration to validate\n * @throws Error if validation fails\n */\n private static validate(config: KeycloakConfig): void {\n if (!config.authority) {\n throw new Error('Keycloak authority is required');\n }\n\n if (!config.clientId) {\n throw new Error('Keycloak clientId is required');\n }\n\n // Validate URL format\n try {\n new URL(config.authority);\n } catch {\n throw new Error('Keycloak authority must be a valid URL');\n }\n }\n\n /**\n * Merges user configuration with defaults\n *\n * @param config - User configuration\n * @returns Merged configuration with all defaults applied\n */\n private static mergeWithDefaults(config: KeycloakConfig): Required<KeycloakConfig> {\n return {\n authority: config.authority,\n clientId: config.clientId,\n redirectUri: config.redirectUri ?? defaultConfig.redirectUri!,\n postLogoutRedirectUri:\n config.postLogoutRedirectUri ?? defaultConfig.postLogoutRedirectUri!,\n scope: config.scope ?? defaultConfig.scope!,\n features: {\n ...defaultConfig.features,\n ...config.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...config.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...config.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...config.events,\n },\n } as Required<KeycloakConfig>;\n }\n}\n\n/**\n * Helper function to get configuration from environment variables\n *\n * @returns Partial Keycloak configuration from environment\n */\nexport function getConfigFromEnv(): Partial<KeycloakConfig> {\n // Check if running in browser with Vite\n if (typeof import.meta === 'undefined') {\n return {};\n }\n\n // Type-safe access to import.meta.env\n const env = (import.meta as any).env;\n if (!env) {\n return {};\n }\n\n return {\n authority: env.VITE_KEYCLOAK_AUTHORITY as string | undefined,\n clientId: env.VITE_KEYCLOAK_CLIENT_ID as string | undefined,\n features: {\n deviceFlow: env.VITE_ENABLE_DEVICE_FLOW === 'true',\n sessionMonitor: env.VITE_ENABLE_SESSION_MONITOR === 'true',\n },\n };\n}\n","import { useAuth as useOidcAuth } from 'react-oidc-context';\n\n/**\n * Main authentication hook for accessing Keycloak authentication state and methods\n *\n * This hook provides access to the current user, authentication state, and methods\n * for signing in and out. It must be used within a KeycloakProvider component.\n *\n * @returns Authentication state and methods\n *\n * @example\n * ```tsx\n * import { useAuth } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const auth = useAuth();\n *\n * if (auth.isLoading) {\n * return <div>Loading...</div>;\n * }\n *\n * if (!auth.isAuthenticated) {\n * return <button onClick={() => auth.signinRedirect()}>Login</button>;\n * }\n *\n * return (\n * <div>\n * <p>Welcome, {auth.user?.profile?.name}</p>\n * <button onClick={() => auth.signoutRedirect()}>Logout</button>\n * </div>\n * );\n * }\n * ```\n *\n * @example Role checking\n * ```tsx\n * function AdminPanel() {\n * const auth = useAuth();\n * const roles = auth.user?.profile?.realm_access?.roles || [];\n *\n * if (!roles.includes('admin')) {\n * return <div>Access denied</div>;\n * }\n *\n * return <div>Admin panel content</div>;\n * }\n * ```\n */\nexport const useAuth = useOidcAuth;\n\nexport type {\n /**\n * Authentication context returned by useAuth\n */\n AuthContextProps as UseAuthReturn,\n} from 'react-oidc-context';\n","import { useEffect, useState, useCallback, useRef } from 'react';\nimport { useAuth } from './useAuth';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface UseTokenLifecycleOptions {\n /**\n * Keycloak configuration for token lifecycle settings\n */\n config: KeycloakConfig;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n\n /**\n * Callback when token refresh starts\n */\n onRefreshStart?: () => void;\n\n /**\n * Callback when token refresh succeeds\n */\n onRefreshSuccess?: () => void;\n\n /**\n * Callback when token refresh fails\n */\n onRefreshError?: (error: Error) => void;\n\n /**\n * Callback when refresh token lifetime expires\n */\n onRefreshTokenExpired?: () => void;\n}\n\nexport interface UseTokenLifecycleReturn {\n /**\n * Whether token is being refreshed\n */\n isRefreshing: boolean;\n\n /**\n * Whether refresh token has exceeded max lifetime\n */\n isRefreshTokenExpired: boolean;\n\n /**\n * Manually trigger token refresh\n */\n refreshToken: () => Promise<void>;\n\n /**\n * Check if tokens need refresh and do it if needed\n */\n checkAndRefreshTokens: () => Promise<boolean>;\n}\n\nconst STORAGE_KEY_PREFIX = 'keycloak_first_login_';\n\n/**\n * Hook to manage token lifecycle including startup refresh and max lifetime tracking\n *\n * This hook provides proactive token management:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Provides manual refresh capabilities\n *\n * @param options - Configuration options\n * @returns Token lifecycle methods and state\n *\n * @example\n * ```tsx\n * import { useTokenLifecycle } from 'antaeus.keycloak.react';\n *\n * function App() {\n * const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n * config: myConfig,\n * onRefreshStart: () => console.log('Refreshing...'),\n * onRefreshSuccess: () => console.log('Refreshed!'),\n * onRefreshError: (error) => console.error('Failed:', error),\n * });\n *\n * if (isRefreshing) return <div>Loading...</div>;\n * if (isRefreshTokenExpired) return <div>Please sign in again</div>;\n *\n * return <YourApp />;\n * }\n * ```\n */\nexport function useTokenLifecycle(\n options: UseTokenLifecycleOptions\n): UseTokenLifecycleReturn {\n const {\n config,\n debug = false,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n } = options;\n\n const auth = useAuth();\n const [isRefreshing, setIsRefreshing] = useState(false);\n const [isRefreshTokenExpired, setIsRefreshTokenExpired] = useState(false);\n const hasCheckedOnStartup = useRef(false);\n const supportsRefreshTokens = config.silentRenew?.useRefreshToken !== false;\n\n const log = useCallback(\n (message: string, ...args: any[]) => {\n if (debug) {\n console.log('[TokenLifecycle]', message, ...args);\n }\n },\n [debug]\n );\n\n /**\n * Get the storage key for tracking first login time\n */\n const getStorageKey = useCallback((): string => {\n const authority = config.authority;\n const clientId = config.clientId;\n return `${STORAGE_KEY_PREFIX}${authority}_${clientId}`;\n }, [config.authority, config.clientId]);\n\n /**\n * Store the first login timestamp\n */\n const storeFirstLoginTime = useCallback(() => {\n const key = getStorageKey();\n const existingTime = localStorage.getItem(key);\n\n if (!existingTime) {\n const now = Date.now();\n localStorage.setItem(key, now.toString());\n log('Stored first login time:', new Date(now).toISOString());\n }\n }, [getStorageKey, log]);\n\n /**\n * Check if refresh token has exceeded max lifetime\n */\n const checkRefreshTokenLifetime = useCallback((): boolean => {\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n\n // If no max lifetime configured, never expire\n if (!maxLifetime || maxLifetime <= 0) {\n return false;\n }\n\n const key = getStorageKey();\n const firstLoginStr = localStorage.getItem(key);\n\n if (!firstLoginStr) {\n // No first login recorded, store current time\n storeFirstLoginTime();\n return false;\n }\n\n const firstLoginTime = parseInt(firstLoginStr, 10);\n const now = Date.now();\n const elapsedSeconds = (now - firstLoginTime) / 1000;\n\n log('Refresh token lifetime check:', {\n firstLogin: new Date(firstLoginTime).toISOString(),\n elapsedSeconds,\n maxLifetime,\n isExpired: elapsedSeconds >= maxLifetime,\n });\n\n return elapsedSeconds >= maxLifetime;\n }, [config.silentRenew?.maxRefreshTokenLifetime, getStorageKey, log, storeFirstLoginTime]);\n\n /**\n * Manually refresh tokens\n */\n const refreshToken = useCallback(async (): Promise<void> => {\n // Atomic check-and-set to prevent race condition\n if (isRefreshing) {\n log('Refresh already in progress, skipping');\n return;\n }\n\n // Set refreshing flag immediately (before any async operations)\n setIsRefreshing(true);\n\n try {\n // Check if refresh token has exceeded max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime, cannot refresh');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n return;\n }\n\n onRefreshStart?.();\n log('Starting token refresh');\n\n await auth.signinSilent();\n\n log('Token refresh successful');\n onRefreshSuccess?.();\n } catch (error) {\n const err = error instanceof Error ? error : new Error(String(error));\n log('Token refresh failed:', err.message);\n onRefreshError?.(err);\n throw err;\n } finally {\n setIsRefreshing(false);\n }\n }, [\n isRefreshing,\n auth,\n checkRefreshTokenLifetime,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n log,\n ]);\n\n /**\n * Check if tokens are expired or about to expire and refresh if needed\n */\n const checkAndRefreshTokens = useCallback(async (): Promise<boolean> => {\n if (!auth.user) {\n log('No user session, skipping token check');\n return false;\n }\n\n // Check refresh token max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n\n try {\n await auth.removeUser();\n } catch (error) {\n log('Error removing user after max lifetime:', error);\n // Continue even if removeUser fails\n }\n\n return false;\n }\n\n const expiresAt = auth.user.expires_at;\n if (!expiresAt) {\n log('No expiration time found, skipping token check');\n return false;\n }\n\n const now = Math.floor(Date.now() / 1000);\n const threshold = config.silentRenew?.thresholdSeconds || 300;\n const timeUntilExpiry = expiresAt - now;\n\n log('Token expiration check:', {\n expiresAt: new Date(expiresAt * 1000).toISOString(),\n now: new Date(now * 1000).toISOString(),\n timeUntilExpiry,\n threshold,\n needsRefresh: timeUntilExpiry <= threshold,\n });\n\n // If token is expired or about to expire, refresh it\n if (timeUntilExpiry <= threshold) {\n try {\n await refreshToken();\n return true;\n } catch (error) {\n log('Failed to refresh tokens:', error);\n return false;\n }\n }\n\n log('Tokens are still valid, no refresh needed');\n return false;\n }, [\n auth,\n config.silentRenew?.thresholdSeconds,\n checkRefreshTokenLifetime,\n refreshToken,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n /**\n * Effect: Check and refresh tokens on startup if strategy includes 'startup'\n */\n useEffect(() => {\n const strategy = config.silentRenew?.refreshStrategy || 'both';\n const shouldCheckOnStartup = strategy === 'startup' || strategy === 'both';\n const hasRefreshToken = Boolean(auth.user?.refresh_token);\n\n if (!shouldCheckOnStartup || hasCheckedOnStartup.current) {\n return;\n }\n\n if (auth.isLoading) {\n return;\n }\n\n if (!auth.isAuthenticated) {\n if (!supportsRefreshTokens) {\n return;\n }\n\n if (!auth.user || !hasRefreshToken) {\n return;\n }\n }\n\n hasCheckedOnStartup.current = true;\n log(\n 'Running startup token check with strategy:',\n strategy,\n 'using refresh token:',\n !auth.isAuthenticated && supportsRefreshTokens\n );\n\n checkAndRefreshTokens().catch((error) => {\n log('Startup token check failed:', error);\n });\n }, [\n auth.isAuthenticated,\n auth.isLoading,\n auth.user,\n config.silentRenew?.refreshStrategy,\n supportsRefreshTokens,\n checkAndRefreshTokens,\n log,\n ]);\n\n /**\n * Effect: prevent re-running startup logic until prerequisites change\n */\n useEffect(() => {\n if (hasCheckedOnStartup.current) {\n const hasUser = Boolean(auth.user);\n const hasRefreshToken = Boolean(auth.user?.refresh_token);\n if (auth.isLoading || (!auth.isAuthenticated && (!supportsRefreshTokens || !hasUser || !hasRefreshToken))) {\n hasCheckedOnStartup.current = false;\n }\n }\n }, [auth.isAuthenticated, auth.isLoading, auth.user, supportsRefreshTokens]);\n\n /**\n * Effect: Store first login time when user logs in\n */\n useEffect(() => {\n if (auth.user && !auth.isLoading) {\n storeFirstLoginTime();\n }\n }, [auth.user, auth.isLoading, storeFirstLoginTime]);\n\n /**\n * Effect: Check refresh token lifetime periodically\n */\n useEffect(() => {\n if (!auth.isAuthenticated || auth.isLoading) {\n return;\n }\n\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n if (!maxLifetime || maxLifetime <= 0) {\n return;\n }\n\n // Check every 5 minutes\n const intervalId = setInterval(() => {\n if (checkRefreshTokenLifetime()) {\n log('Refresh token expired during periodic check');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n\n auth.removeUser().catch((error) => {\n log('Error removing user during periodic check:', error);\n // Continue even if removeUser fails\n });\n }\n }, 5 * 60 * 1000);\n\n return () => clearInterval(intervalId);\n }, [\n auth,\n config.silentRenew?.maxRefreshTokenLifetime,\n checkRefreshTokenLifetime,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n return {\n isRefreshing,\n isRefreshTokenExpired,\n refreshToken,\n checkAndRefreshTokens,\n };\n}\n","import React, { useState, useCallback } from 'react';\nimport { useTokenLifecycle } from '../hooks/useTokenLifecycle';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface TokenLifecycleManagerProps {\n /**\n * Keycloak configuration\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Component that manages token lifecycle including startup refresh and max lifetime tracking\n *\n * This component wraps your app and automatically:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Shows optional loading indicator during refresh\n *\n * @example\n * ```tsx\n * <TokenLifecycleManager config={config} debug={true}>\n * <YourApp />\n * </TokenLifecycleManager>\n * ```\n */\nexport const TokenLifecycleManager: React.FC<TokenLifecycleManagerProps> = ({\n config,\n children,\n debug = false,\n}) => {\n const [showLoading, setShowLoading] = useState(false);\n\n const handleRefreshStart = useCallback(() => {\n if (config.silentRenew?.showLoadingIndicator) {\n setShowLoading(true);\n }\n }, [config.silentRenew?.showLoadingIndicator]);\n\n const handleRefreshSuccess = useCallback(() => {\n setShowLoading(false);\n }, []);\n\n const handleRefreshError = useCallback((error: Error) => {\n setShowLoading(false);\n if (debug) {\n console.error('[TokenLifecycleManager] Token refresh failed:', error);\n }\n config.events?.onSilentRenewError?.(error);\n }, [config.events, debug]);\n\n const handleRefreshTokenExpired = useCallback(() => {\n setShowLoading(false);\n if (debug) {\n console.warn('[TokenLifecycleManager] Refresh token exceeded max lifetime');\n }\n config.events?.onTokenExpired?.();\n }, [config.events, debug]);\n\n const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n config,\n debug,\n onRefreshStart: handleRefreshStart,\n onRefreshSuccess: handleRefreshSuccess,\n onRefreshError: handleRefreshError,\n onRefreshTokenExpired: handleRefreshTokenExpired,\n });\n\n // If refresh token expired, show message and require re-authentication\n if (isRefreshTokenExpired) {\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n padding: '20px',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n backgroundColor: 'white',\n padding: '40px',\n borderRadius: '8px',\n boxShadow: '0 2px 8px rgba(0,0,0,0.1)',\n maxWidth: '400px',\n }}\n >\n <h2 style={{ margin: '0 0 16px 0', color: '#333' }}>Session Expired</h2>\n <p style={{ margin: '0 0 24px 0', color: '#666' }}>\n Your session has been inactive for too long. Please sign in again to continue.\n </p>\n <button\n onClick={() => window.location.reload()}\n style={{\n padding: '12px 24px',\n backgroundColor: '#007bff',\n color: 'white',\n border: 'none',\n borderRadius: '4px',\n fontSize: '16px',\n cursor: 'pointer',\n fontWeight: '500',\n }}\n >\n Sign In Again\n </button>\n </div>\n </div>\n );\n }\n\n // Show loading indicator during refresh if configured\n if (showLoading && isRefreshing) {\n const message = config.silentRenew?.loadingMessage || 'Refreshing session...';\n\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n }}\n >\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n gap: '16px',\n }}\n >\n <div\n style={{\n width: '40px',\n height: '40px',\n border: '4px solid #e0e0e0',\n borderTop: '4px solid #007bff',\n borderRadius: '50%',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ margin: 0, color: '#666', fontSize: '16px' }}>{message}</p>\n </div>\n <style>\n {`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}\n </style>\n </div>\n );\n }\n\n // Normal rendering\n return <>{children}</>;\n};\n","import React, { useEffect, useState, useCallback } from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface SessionMonitorProps {\n /**\n * Position on screen\n * @default 'top-right'\n */\n position?: 'top-left' | 'top-right' | 'bottom-left' | 'bottom-right';\n\n /**\n * Warning threshold in seconds (yellow state)\n * @default 300 (5 minutes)\n */\n warningThreshold?: number;\n\n /**\n * Critical threshold in seconds (red state)\n * @default 60 (1 minute)\n */\n criticalThreshold?: number;\n\n /**\n * Show progress bar\n * @default true\n */\n showProgressBar?: boolean;\n\n /**\n * Allow minimize/expand\n * @default true\n */\n minimizable?: boolean;\n\n /**\n * Start minimized\n * @default false\n */\n startMinimized?: boolean;\n\n /**\n * Custom CSS class names\n */\n className?: string;\n\n /**\n * Callback when warning threshold is reached\n */\n onWarning?: (secondsRemaining: number) => void;\n\n /**\n * Callback when critical threshold is reached\n */\n onCritical?: (secondsRemaining: number) => void;\n\n /**\n * Callback when session expires\n */\n onExpired?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Session monitoring component with countdown timer\n *\n * Displays the time remaining until the user's session expires. Shows visual\n * warnings when the session is about to expire and triggers callbacks for\n * custom handling.\n *\n * @example Basic usage\n * ```tsx\n * import { SessionMonitor } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <>\n * <SessionMonitor />\n * <YourApp />\n * </>\n * );\n * }\n * ```\n *\n * @example With custom thresholds\n * ```tsx\n * <SessionMonitor\n * warningThreshold={600} // 10 minutes\n * criticalThreshold={120} // 2 minutes\n * onWarning={(seconds) => {\n * console.log(`Session expiring in ${seconds} seconds`);\n * }}\n * />\n * ```\n *\n * @example Custom position and style\n * ```tsx\n * <SessionMonitor\n * position=\"bottom-left\"\n * showProgressBar={false}\n * minimizable={false}\n * />\n * ```\n */\nexport const SessionMonitor: React.FC<SessionMonitorProps> = ({\n position = 'top-right',\n warningThreshold = 300, // 5 minutes\n criticalThreshold = 60, // 1 minute\n showProgressBar = true,\n minimizable = true,\n startMinimized = false,\n className = '',\n onWarning,\n onCritical,\n onExpired,\n style,\n}) => {\n const auth = useAuth();\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const [initialTimeRemaining, setInitialTimeRemaining] = useState<number | null>(null);\n const [minimized, setMinimized] = useState(startMinimized);\n const [warningTriggered, setWarningTriggered] = useState(false);\n const [criticalTriggered, setCriticalTriggered] = useState(false);\n\n // Update time remaining every second\n useEffect(() => {\n if (!auth.isAuthenticated || !auth.user?.expires_at) {\n setTimeRemaining(null);\n setInitialTimeRemaining(null);\n return;\n }\n\n let logoutTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n const updateTimeRemaining = () => {\n const expiresAt = auth.user!.expires_at!;\n const now = Math.floor(Date.now() / 1000);\n const remaining = expiresAt - now;\n\n // Store initial time remaining on first calculation\n if (initialTimeRemaining === null && remaining > 0) {\n setInitialTimeRemaining(remaining);\n }\n\n if (remaining <= 0) {\n setTimeRemaining(0);\n\n // Trigger expired callback\n onExpired?.();\n\n // Auto logout after 2 seconds (with cleanup)\n logoutTimeoutId = setTimeout(() => {\n auth.signoutRedirect();\n }, 2000);\n } else {\n setTimeRemaining(remaining);\n\n // Trigger callbacks once\n if (remaining <= criticalThreshold && !criticalTriggered) {\n setCriticalTriggered(true);\n onCritical?.(remaining);\n } else if (remaining <= warningThreshold && !warningTriggered) {\n setWarningTriggered(true);\n onWarning?.(remaining);\n }\n }\n };\n\n updateTimeRemaining();\n const interval = setInterval(updateTimeRemaining, 1000);\n\n return () => {\n clearInterval(interval);\n if (logoutTimeoutId) {\n clearTimeout(logoutTimeoutId);\n }\n };\n }, [\n auth,\n warningThreshold,\n criticalThreshold,\n warningTriggered,\n criticalTriggered,\n initialTimeRemaining,\n onWarning,\n onCritical,\n onExpired,\n ]);\n\n // Reset warning flags when thresholds change\n useEffect(() => {\n if (timeRemaining && timeRemaining > warningThreshold) {\n setWarningTriggered(false);\n setCriticalTriggered(false);\n }\n }, [timeRemaining, warningThreshold]);\n\n // Format time as MM:SS\n const formatTime = useCallback((seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n }, []);\n\n // Get status class based on time remaining\n const getStatusClass = useCallback((): string => {\n if (!timeRemaining) return 'normal';\n if (timeRemaining <= criticalThreshold) return 'critical';\n if (timeRemaining <= warningThreshold) return 'warning';\n return 'normal';\n }, [timeRemaining, warningThreshold, criticalThreshold]);\n\n // Calculate progress percentage\n const getProgress = useCallback((): number => {\n if (!timeRemaining || !initialTimeRemaining) return 100;\n return Math.max(0, Math.min(100, (timeRemaining / initialTimeRemaining) * 100));\n }, [timeRemaining, initialTimeRemaining]);\n\n // Don't render if not authenticated or no time info\n if (!auth.isAuthenticated || timeRemaining === null) {\n return null;\n }\n\n const baseClass = 'kc-session-monitor';\n const positionClass = `kc-session-monitor--${position}`;\n const statusClass = `kc-session-monitor--${getStatusClass()}`;\n const minimizedClass = minimized ? 'kc-session-monitor--minimized' : '';\n const classes = `${baseClass} ${positionClass} ${statusClass} ${minimizedClass} ${className}`.trim();\n\n const progress = getProgress();\n\n return (\n <div className={classes} style={style}>\n {minimizable && (\n <button\n className=\"kc-session-monitor__toggle\"\n onClick={() => setMinimized(!minimized)}\n aria-label={minimized ? 'Expand session monitor' : 'Minimize session monitor'}\n title={minimized ? 'Expand' : 'Minimize'}\n >\n {minimized ? '▲' : '▼'}\n </button>\n )}\n\n {!minimized && (\n <>\n <div className=\"kc-session-monitor__content\">\n <span className=\"kc-session-monitor__label\">\n {timeRemaining === 0 ? 'Session expired' : 'Session expires in:'}\n </span>\n <span className=\"kc-session-monitor__time\">\n {formatTime(timeRemaining)}\n </span>\n </div>\n\n {showProgressBar && (\n <div className=\"kc-session-monitor__progress-bar\">\n <div\n className=\"kc-session-monitor__progress-fill\"\n style={{ width: `${progress}%` }}\n role=\"progressbar\"\n aria-valuenow={progress}\n aria-valuemin={0}\n aria-valuemax={100}\n />\n </div>\n )}\n </>\n )}\n </div>\n );\n};\n","import type { KeycloakConfig } from './types';\n\n/**\n * Configuration preset types\n */\nexport type ConfigPreset = 'default' | 'mobile' | 'high-security' | 'long-running' | 'development';\n\n/**\n * Configuration presets for common use cases\n *\n * These presets provide optimized configurations for different application types\n * and security requirements. All presets can be further customized by overriding\n * specific properties.\n */\nexport const CONFIG_PRESETS: Record<ConfigPreset, Partial<KeycloakConfig>> = {\n /**\n * Default preset - Balanced configuration for most applications\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive token refresh on startup + reactive on 401\n * - Silent background token refresh\n * - Session monitoring enabled\n * - Auto token refresh enabled\n *\n * Best for: Most web applications, dashboards, internal tools\n */\n default: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Mobile/PWA preset - Optimized for mobile and progressive web apps\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive startup refresh (apps close frequently)\n * - Loading indicator during refresh (better UX for app reopening)\n * - Session monitoring enabled\n *\n * Best for: Mobile apps, PWAs, apps that frequently close/reopen\n */\n mobile: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'startup', // Focus on startup refresh\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: true, // Show loading for better UX\n loadingMessage: 'Restoring your session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * High Security preset - Strict security for sensitive applications\n *\n * Features:\n * - 24-hour forced re-authentication\n * - Proactive + reactive token refresh\n * - 10-minute refresh threshold (earlier refresh)\n * - Silent refresh (no UI hints about security measures)\n * - Session monitoring enabled\n *\n * Best for: Banking, healthcare, admin panels, sensitive data applications\n */\n 'high-security': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 600, // 10 minutes (more aggressive)\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 86400, // 24 hours only\n showLoadingIndicator: false, // Silent for security\n loadingMessage: 'Validating session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Long-Running preset - Optimized for desktop apps and long sessions\n *\n * Features:\n * - 7-day refresh token lifetime\n * - Proactive + reactive token refresh\n * - Silent background refresh\n * - Session monitoring enabled\n *\n * Best for: Desktop applications, monitoring dashboards, always-on tools\n */\n 'long-running': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 604800, // 7 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Development preset - Convenient settings for development\n *\n * Features:\n * - No refresh token lifetime limit (never expires)\n * - Proactive + reactive token refresh\n * - Loading indicators visible (easier debugging)\n * - Session monitoring enabled\n * - More verbose feedback\n *\n * Best for: Local development, testing, debugging\n * WARNING: Do not use in production!\n */\n development: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 0, // No limit (for convenience)\n showLoadingIndicator: true, // Show for debugging\n loadingMessage: '[DEV] Refreshing tokens...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n};\n\n/**\n * Get a configuration preset by name\n *\n * @param preset - The preset name\n * @returns Partial Keycloak configuration for the preset\n *\n * @example\n * ```typescript\n * const config = getConfigPreset('mobile');\n * ```\n */\nexport function getConfigPreset(preset: ConfigPreset): Partial<KeycloakConfig> {\n return CONFIG_PRESETS[preset];\n}\n\n/**\n * Merge a preset with custom configuration\n *\n * Custom configuration takes precedence over preset values.\n * Use this to start with a preset and override specific properties.\n *\n * @param preset - The preset name\n * @param customConfig - Custom configuration to merge\n * @returns Merged configuration\n *\n * @example\n * ```typescript\n * const config = mergeWithPreset('mobile', {\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override to 7 days\n * }\n * });\n * ```\n */\nexport function mergeWithPreset(\n preset: ConfigPreset,\n customConfig: Partial<KeycloakConfig>\n): Partial<KeycloakConfig> {\n const presetConfig = getConfigPreset(preset);\n\n return {\n ...presetConfig,\n ...customConfig,\n features: {\n ...presetConfig.features,\n ...customConfig.features,\n },\n silentRenew: {\n ...presetConfig.silentRenew,\n ...customConfig.silentRenew,\n },\n advanced: {\n ...presetConfig.advanced,\n ...customConfig.advanced,\n },\n events: {\n ...presetConfig.events,\n ...customConfig.events,\n },\n };\n}\n","import React, { createContext, useContext } from 'react';\n\n/**\n * Storage configuration context\n * Provides information about which storage mechanism is being used\n */\ninterface StorageConfigContextType {\n storageType: 'session' | 'local';\n storage: Storage;\n}\n\nconst StorageConfigContext = createContext<StorageConfigContextType>({\n storageType: 'session',\n storage: typeof window !== 'undefined' ? window.sessionStorage : ({} as Storage),\n});\n\nexport const StorageConfigProvider: React.FC<{\n storageType: 'session' | 'local';\n children: React.ReactNode;\n}> = ({ storageType, children }) => {\n const storage = storageType === 'local' ? window.localStorage : window.sessionStorage;\n\n return (\n <StorageConfigContext.Provider value={{ storageType, storage }}>\n {children}\n </StorageConfigContext.Provider>\n );\n};\n\n/**\n * Hook to access the configured storage\n */\nexport const useStorageConfig = () => useContext(StorageConfigContext);\n","import React, { useCallback } from 'react';\nimport { AuthProvider as OidcAuthProvider } from 'react-oidc-context';\nimport type { User } from 'oidc-client-ts';\nimport type { KeycloakConfig } from '../config/types';\nimport { KeycloakConfigBuilder } from '../config/KeycloakConfig';\nimport { TokenLifecycleManager } from './TokenLifecycleManager';\nimport { SessionMonitor } from './SessionMonitor';\nimport { mergeWithPreset, type ConfigPreset } from '../config/presets';\nimport { defaultConfig } from '../config/defaults';\nimport { StorageConfigProvider } from '../contexts/StorageConfigContext';\n\n/**\n * Props for zero-config mode (simplified setup)\n */\nexport interface KeycloakProviderZeroConfigProps {\n /**\n * Keycloak realm authority URL (e.g., https://sso.example.com/realms/myrealm)\n */\n authority: string;\n\n /**\n * Client ID registered in Keycloak\n */\n clientId: string;\n\n /**\n * Configuration preset to use\n * @default 'default'\n */\n preset?: ConfigPreset;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n\n /**\n * Override specific configuration properties\n * Use this to customize preset or zero-config defaults\n */\n config?: Partial<Omit<KeycloakConfig, 'authority' | 'clientId'>>;\n}\n\n/**\n * Props for full-config mode (advanced setup)\n */\nexport interface KeycloakProviderFullConfigProps {\n /**\n * Full Keycloak configuration object\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Combined props type\n */\nexport type KeycloakProviderProps = KeycloakProviderZeroConfigProps | KeycloakProviderFullConfigProps;\n\n/**\n * Type guard to check if using zero-config mode\n */\nfunction isZeroConfig(props: KeycloakProviderProps): props is KeycloakProviderZeroConfigProps {\n return 'authority' in props && 'clientId' in props;\n}\n\n/**\n * Main Keycloak authentication provider component\n *\n * This component wraps your application to provide authentication context using Keycloak.\n * It supports both zero-config mode (for simplicity) and full-config mode (for advanced use cases).\n *\n * ## Zero-Config Mode (Recommended)\n *\n * Minimal setup with sensible defaults and automatic feature enablement.\n *\n * @example Zero-config (simplest)\n * ```tsx\n * import { KeycloakProvider } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * >\n * <YourApp />\n * </KeycloakProvider>\n * );\n * }\n * ```\n *\n * @example Zero-config with preset\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"mobile\" // or 'high-security', 'long-running', 'development'\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * @example Zero-config with overrides\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"default\"\n * config={{\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override: 7 days instead of 30\n * showLoadingIndicator: true,\n * useRefreshToken: true, // Explicitly ensure refresh tokens are used when available\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * @example Using localStorage to persist sessions across tabs/windows\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * config={{\n * advanced: {\n * storageType: 'local', // Use localStorage instead of sessionStorage\n * }\n * }}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Full-Config Mode (Advanced)\n *\n * Complete control over all configuration options.\n *\n * @example Full configuration\n * ```tsx\n * <KeycloakProvider\n * config={{\n * authority: 'https://sso.example.com/realms/myrealm',\n * clientId: 'my-app',\n * redirectUri: window.location.origin,\n * scope: 'openid profile email offline_access',\n * features: {\n * autoRefresh: true,\n * sessionMonitor: true,\n * },\n * silentRenew: {\n * enabled: true,\n * refreshStrategy: 'both',\n * maxRefreshTokenLifetime: 2592000,\n * useRefreshToken: true,\n * },\n * events: {\n * onLogin: (user) => console.log('User logged in', user),\n * onError: (error) => sendToSentry(error),\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Features Automatically Enabled\n *\n * When using zero-config or presets, the following features are automatically enabled:\n * - ✅ Automatic token refresh (before expiration)\n * - ✅ Token lifecycle management (refresh on app startup)\n * - ✅ Session monitoring UI (countdown timer)\n * - ✅ Silent renew (background token refresh)\n * - ✅ Refresh token grant fallback on app restart\n * - ✅ Error notifications (user-friendly messages)\n * - ✅ 401 retry logic (automatic token refresh on API errors)\n * - ✅ Maximum refresh token lifetime (security control)\n * - ✅ PKCE (for secure public clients)\n *\n * All features can be disabled or customized via configuration overrides.\n */\nexport const KeycloakProvider: React.FC<KeycloakProviderProps> = (props) => {\n const { children, debug = false } = props;\n\n // Build configuration based on mode\n const config: KeycloakConfig = isZeroConfig(props)\n ? buildZeroConfig(props)\n : props.config;\n\n // Build OIDC configuration from Keycloak config\n const oidcConfig = KeycloakConfigBuilder.build(config);\n\n // Logging helper\n const log = useCallback(\n (level: 'info' | 'warn' | 'error', message: string, ...args: any[]) => {\n if (debug) {\n const prefix = '[KeycloakProvider]';\n switch (level) {\n case 'info':\n console.log(prefix, message, ...args);\n break;\n case 'warn':\n console.warn(prefix, message, ...args);\n break;\n case 'error':\n console.error(prefix, message, ...args);\n break;\n }\n }\n },\n [debug]\n );\n\n // Event handlers with built-in functionality\n const onSigninCallback = useCallback(\n (_user: User | void): void => {\n log('info', 'Sign in successful');\n\n // Clean up query parameters from URL after redirect\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n if (_user) {\n config.events?.onLogin?.(_user as User);\n }\n },\n [config.events, log]\n );\n\n const onSignoutCallback = useCallback((): void => {\n log('info', 'Sign out successful');\n\n // Clean up URL\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n config.events?.onLogout?.();\n }, [config.events, log]);\n\n const onRemoveUser = useCallback((): void => {\n log('warn', 'User removed from storage - token validation likely failed');\n }, [log]);\n\n\n\n // Check if SessionMonitor should be shown\n const showSessionMonitor = config.features?.sessionMonitor !== false;\n\n // Get storage type from config\n const storageType = config.advanced?.storageType || 'session';\n\n return (\n <OidcAuthProvider\n {...oidcConfig}\n onSigninCallback={onSigninCallback}\n onSignoutCallback={onSignoutCallback}\n onRemoveUser={onRemoveUser}\n >\n <StorageConfigProvider storageType={storageType}>\n <TokenLifecycleManager config={config} debug={debug}>\n {/* Auto-include SessionMonitor if enabled */}\n {showSessionMonitor && <SessionMonitor />}\n\n {/* User's app content */}\n {children}\n </TokenLifecycleManager>\n </StorageConfigProvider>\n </OidcAuthProvider>\n );\n};\n\n/**\n * Build configuration for zero-config mode\n */\nfunction buildZeroConfig(props: KeycloakProviderZeroConfigProps): KeycloakConfig {\n const { authority, clientId, preset = 'default', config: overrides = {} } = props;\n\n // Start with preset configuration\n const presetConfig = mergeWithPreset(preset, overrides);\n\n // Deep merge: defaults -> preset -> overrides\n const fullConfig: KeycloakConfig = {\n authority,\n clientId,\n redirectUri: presetConfig.redirectUri || defaultConfig.redirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n postLogoutRedirectUri: presetConfig.postLogoutRedirectUri || defaultConfig.postLogoutRedirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n scope: presetConfig.scope || defaultConfig.scope,\n features: {\n ...defaultConfig.features,\n ...presetConfig.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...presetConfig.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...presetConfig.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...presetConfig.events,\n },\n };\n\n return fullConfig;\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseRolesReturn {\n /**\n * Array of realm roles assigned to the current user\n */\n roles: string[];\n\n /**\n * Checks if user has a specific realm role\n * @param role - Role name to check\n * @returns True if user has the role\n */\n hasRole: (role: string) => boolean;\n\n /**\n * Checks if user has any of the specified roles (OR logic)\n * @param roles - Array of role names\n * @returns True if user has at least one of the roles\n */\n hasAnyRole: (roles: string[]) => boolean;\n\n /**\n * Checks if user has all of the specified roles (AND logic)\n * @param roles - Array of role names\n * @returns True if user has all the roles\n */\n hasAllRoles: (roles: string[]) => boolean;\n\n /**\n * Gets client-specific roles\n * @param clientId - Client ID to get roles for\n * @returns Array of client roles\n */\n getClientRoles: (clientId: string) => string[];\n}\n\n/**\n * Hook for working with Keycloak roles\n *\n * Provides convenient methods for checking user roles, both realm-level and client-level.\n * Must be used within a KeycloakProvider component.\n *\n * @returns Role utilities and methods\n *\n * @example Basic usage\n * ```tsx\n * import { useRoles } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { roles, hasRole, hasAnyRole } = useRoles();\n *\n * return (\n * <div>\n * <p>Your roles: {roles.join(', ')}</p>\n * {hasRole('admin') && <AdminPanel />}\n * {hasAnyRole(['editor', 'moderator']) && <EditButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Client roles\n * ```tsx\n * function ClientRoleExample() {\n * const { getClientRoles } = useRoles();\n * const apiRoles = getClientRoles('my-api');\n *\n * return <div>API roles: {apiRoles.join(', ')}</div>;\n * }\n * ```\n */\nexport function useRoles(): UseRolesReturn {\n const auth = useAuth();\n\n // Extract realm roles from user profile\n const roles = useMemo<string[]>(() => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores realm roles in realm_access.roles\n const realmAccess = auth.user.profile.realm_access as { roles?: string[] } | undefined;\n return realmAccess?.roles || [];\n }, [auth.user]);\n\n // Check if user has a specific role\n const hasRole = useMemo(\n () => (role: string): boolean => {\n return roles.includes(role);\n },\n [roles]\n );\n\n // Check if user has any of the specified roles\n const hasAnyRole = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.some((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Check if user has all of the specified roles\n const hasAllRoles = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.every((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Get client-specific roles\n const getClientRoles = useMemo(\n () =>\n (clientId: string): string[] => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores client roles in resource_access[clientId].roles\n const resourceAccess = auth.user.profile.resource_access as\n | Record<string, { roles?: string[] }>\n | undefined;\n\n return resourceAccess?.[clientId]?.roles || [];\n },\n [auth.user]\n );\n\n return {\n roles,\n hasRole,\n hasAnyRole,\n hasAllRoles,\n getClientRoles,\n };\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\n/**\n * Return type for useScopes hook\n */\nexport interface UseScopesReturn {\n /**\n * Array of granted scopes\n */\n scopes: string[];\n\n /**\n * Check if user has a specific scope\n */\n hasScope: (scope: string) => boolean;\n\n /**\n * Check if user has any of the specified scopes\n */\n hasAnyScope: (scopes: string[]) => boolean;\n\n /**\n * Check if user has all of the specified scopes\n */\n hasAllScopes: (scopes: string[]) => boolean;\n}\n\n/**\n * Hook for checking OAuth 2.0 scopes\n *\n * Provides utilities for scope-based authorization. Scopes are typically space-separated\n * in the token (e.g., \"openid profile email read:users write:users\").\n *\n * @returns Scope checking utilities\n *\n * @example Basic usage\n * ```tsx\n * import { useScopes } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { scopes, hasScope, hasAnyScope } = useScopes();\n *\n * return (\n * <div>\n * <p>Your scopes: {scopes.join(', ')}</p>\n *\n * {hasScope('read:users') && <UserList />}\n *\n * {hasAnyScope(['write:users', 'admin']) && <CreateUserButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Conditional rendering\n * ```tsx\n * function DataActions() {\n * const { hasScope, hasAllScopes } = useScopes();\n *\n * return (\n * <div>\n * {hasScope('read:data') && <ViewButton />}\n * {hasScope('write:data') && <EditButton />}\n * {hasScope('delete:data') && <DeleteButton />}\n * {hasAllScopes(['read:data', 'write:data']) && <ExportButton />}\n * </div>\n * );\n * }\n * ```\n */\nexport function useScopes(): UseScopesReturn {\n const auth = useAuth();\n\n // Extract scopes from token\n // Scopes can be in 'scope' claim (space-separated string)\n const scopes = useMemo<string[]>(() => {\n if (!auth.user?.scope) return [];\n\n // Scope is typically a space-separated string\n return auth.user.scope.split(' ').filter(s => s.length > 0);\n }, [auth.user]);\n\n // Check if user has a specific scope\n const hasScope = useMemo(\n () => (scope: string): boolean => {\n return scopes.includes(scope);\n },\n [scopes]\n );\n\n // Check if user has any of the specified scopes\n const hasAnyScope = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.some((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n // Check if user has all of the specified scopes\n const hasAllScopes = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.every((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n return {\n scopes,\n hasScope,\n hasAnyScope,\n hasAllScopes,\n };\n}\n","import React, { useEffect, useRef } from 'react';\nimport { useLocation } from 'react-router-dom';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\nimport { useScopes } from '../hooks/useScopes';\nimport type { User } from 'oidc-client-ts';\n\n/**\n * Context object passed to custom policy function\n */\nexport interface PolicyContext {\n /**\n * Current location from react-router\n */\n location: ReturnType<typeof useLocation>;\n\n /**\n * Any additional context you want to pass\n */\n [key: string]: any;\n}\n\n/**\n * Custom policy function for fine-grained access control\n */\nexport type PolicyFunction = (user: User, context: PolicyContext) => boolean;\n\nexport interface ProtectedRouteProps {\n /**\n * Child components to render when user is authorized\n */\n children: React.ReactNode;\n\n /**\n * Required realm roles (OR logic - user needs at least one)\n */\n requiredRoles?: string[];\n\n /**\n * Require all roles instead of any (AND logic)\n * @default false\n */\n requireAllRoles?: boolean;\n\n /**\n * Required OAuth 2.0 scopes (OR logic - user needs at least one)\n */\n requiredScopes?: string[];\n\n /**\n * Require all scopes instead of any (AND logic)\n * @default false\n */\n requireAllScopes?: boolean;\n\n /**\n * Custom policy function for advanced authorization logic\n * If provided, this takes precedence over role and scope checks\n */\n policy?: PolicyFunction;\n\n /**\n * Custom loading component to display while checking authentication\n */\n loadingComponent?: React.ReactNode;\n\n /**\n * Custom unauthorized component to display when user lacks required permissions\n */\n unauthorizedComponent?: React.ReactNode;\n\n /**\n * Path to redirect to if not authenticated\n * @default '/login'\n */\n redirectTo?: string;\n\n /**\n * Callback when user is unauthorized\n * @param reason - Reason for unauthorized access\n */\n onUnauthorized?: (\n reason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied'\n ) => void;\n}\n\n/**\n * Component for protecting routes with authentication, role-based, scope-based, or policy-based authorization\n *\n * This component provides comprehensive route protection with multiple authorization strategies:\n * - Authentication check (always required)\n * - Role-based authorization (realm roles)\n * - Scope-based authorization (OAuth 2.0 scopes)\n * - Custom policy functions (advanced logic)\n *\n * @example Basic authentication required\n * ```tsx\n * import { ProtectedRoute } from 'antaeus.keycloak.react';\n *\n * <Route\n * path=\"/dashboard\"\n * element={\n * <ProtectedRoute>\n * <Dashboard />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require specific role\n * ```tsx\n * <Route\n * path=\"/admin\"\n * element={\n * <ProtectedRoute requiredRoles={['admin']}>\n * <AdminPanel />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require any of multiple roles\n * ```tsx\n * <ProtectedRoute requiredRoles={['editor', 'moderator', 'admin']}>\n * <EditPage />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all roles (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['verified', 'premium']}\n * requireAllRoles={true}\n * >\n * <PremiumContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Require specific scopes\n * ```tsx\n * <ProtectedRoute requiredScopes={['read:users', 'write:users']}>\n * <UserManagement />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all scopes (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredScopes={['read:data', 'write:data', 'delete:data']}\n * requireAllScopes={true}\n * >\n * <DataAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Combine roles and scopes\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['admin']}\n * requiredScopes={['manage:users']}\n * >\n * <UserAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Custom policy function\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Custom authorization logic\n * const isEmailVerified = user.profile.email_verified === true;\n * const isAdult = (user.profile.age || 0) >= 18;\n * return isEmailVerified && isAdult;\n * }}\n * onUnauthorized={(reason) => {\n * console.log('Access denied:', reason);\n * }}\n * >\n * <AdultContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Advanced policy with location context\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Check if user is accessing during business hours\n * const hour = new Date().getHours();\n * const isBusinessHours = hour >= 9 && hour < 17;\n *\n * // Or check based on route\n * const isAdminRoute = context.location.pathname.startsWith('/admin');\n * const hasAdminRole = user.profile.realm_access?.roles?.includes('admin');\n *\n * return isBusinessHours && (!isAdminRoute || hasAdminRole);\n * }}\n * >\n * <TimeSensitiveContent />\n * </ProtectedRoute>\n * ```\n */\nexport const ProtectedRoute: React.FC<ProtectedRouteProps> = ({\n children,\n requiredRoles = [],\n requireAllRoles = false,\n requiredScopes = [],\n requireAllScopes = false,\n policy,\n loadingComponent,\n unauthorizedComponent,\n onUnauthorized,\n}) => {\n const auth = useAuth();\n const { hasAnyRole, hasAllRoles } = useRoles();\n const { hasAnyScope, hasAllScopes } = useScopes();\n const location = useLocation();\n const hasRedirected = useRef(false);\n\n // Determine authorization state\n const isAuthenticated = !auth.isLoading && auth.isAuthenticated;\n\n // Check policy access\n const policyAccess = policy && auth.user\n ? policy(auth.user, { location })\n : null;\n\n // Check role access\n const roleAccess = requiredRoles.length > 0\n ? (requireAllRoles ? hasAllRoles(requiredRoles) : hasAnyRole(requiredRoles))\n : null;\n\n // Check scope access\n const scopeAccess = requiredScopes.length > 0\n ? (requireAllScopes ? hasAllScopes(requiredScopes) : hasAnyScope(requiredScopes))\n : null;\n\n // Determine unauthorized reason\n const unauthorizedReason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied' | null =\n !isAuthenticated ? 'not-authenticated' :\n policyAccess === false ? 'policy-denied' :\n roleAccess === false ? 'insufficient-roles' :\n scopeAccess === false ? 'insufficient-scopes' :\n null;\n\n // All hooks must be called unconditionally at the top level\n // Handle unauthorized callback\n useEffect(() => {\n if (unauthorizedReason) {\n onUnauthorized?.(unauthorizedReason);\n }\n }, [unauthorizedReason, onUnauthorized]);\n\n // Handle login redirect for unauthenticated users\n useEffect(() => {\n if (!auth.isLoading && !auth.isAuthenticated && !hasRedirected.current) {\n hasRedirected.current = true;\n auth.signinRedirect({\n redirect_uri: window.location.origin + location.pathname + location.search,\n }).catch((error) => {\n // Reset flag on error to allow retry\n hasRedirected.current = false;\n console.error('[ProtectedRoute] Signin redirect failed:', error);\n });\n }\n }, [auth.isLoading, auth.isAuthenticated, location.pathname, location.search]);\n\n // Reset redirect flag when user becomes authenticated\n useEffect(() => {\n if (auth.isAuthenticated) {\n hasRedirected.current = false;\n }\n }, [auth.isAuthenticated]);\n\n // Show loading state while checking authentication\n if (auth.isLoading) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authentication\n if (!isAuthenticated) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authorization (policy takes precedence, then roles, then scopes)\n if (unauthorizedReason) {\n return <>{unauthorizedComponent || <DefaultUnauthorizedComponent />}</>;\n }\n\n // User is authenticated and has required permissions\n return <>{children}</>;\n};\n\n/**\n * Default loading component\n */\nconst DefaultLoadingComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n }}\n >\n <div\n style={{\n border: '3px solid #f3f3f3',\n borderTop: '3px solid #3498db',\n borderRadius: '50%',\n width: '40px',\n height: '40px',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ color: '#666', margin: 0 }}>Loading...</p>\n <style>{`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}</style>\n </div>\n);\n\n/**\n * Default unauthorized component\n */\nconst DefaultUnauthorizedComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n padding: '2rem',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n fontSize: '4rem',\n color: '#e74c3c',\n }}\n >\n 🔒\n </div>\n <h1 style={{ margin: 0, color: '#333' }}>Access Denied</h1>\n <p style={{ color: '#666', margin: 0 }}>\n You do not have permission to access this page.\n </p>\n </div>\n);\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LoginButtonProps {\n /**\n * Button text\n * @default 'Login'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'primary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show login icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before login starts\n */\n onLoginStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built login button component\n *\n * Triggers the Keycloak login flow when clicked. The button automatically\n * hides when the user is already authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LoginButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LoginButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LoginButton\n * variant=\"outline\"\n * size=\"large\"\n * onLoginStart={() => console.log('Starting login...')}\n * >\n * Sign In\n * </LoginButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LoginButton\n * className=\"my-custom-class\"\n * style={{ backgroundColor: '#007bff' }}\n * />\n * ```\n */\nexport const LoginButton: React.FC<LoginButtonProps> = ({\n children = 'Login',\n className = '',\n variant = 'primary',\n size = 'medium',\n showIcon = true,\n onLoginStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if already authenticated\n if (auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLoginStart?.();\n auth.signinRedirect();\n };\n\n const baseClass = 'kc-button kc-login-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🔐</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LogoutButtonProps {\n /**\n * Button text\n * @default 'Logout'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'secondary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show logout icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before logout starts\n */\n onLogoutStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built logout button component\n *\n * Triggers the Keycloak logout flow when clicked. The button automatically\n * hides when the user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LogoutButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LogoutButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LogoutButton\n * variant=\"outline\"\n * size=\"small\"\n * onLogoutStart={() => {\n * // Clean up app state\n * localStorage.clear();\n * }}\n * >\n * Sign Out\n * </LogoutButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LogoutButton\n * className=\"my-logout-btn\"\n * style={{ backgroundColor: '#dc3545' }}\n * />\n * ```\n */\nexport const LogoutButton: React.FC<LogoutButtonProps> = ({\n children = 'Logout',\n className = '',\n variant = 'secondary',\n size = 'medium',\n showIcon = true,\n onLogoutStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLogoutStart?.();\n auth.signoutRedirect();\n };\n\n const baseClass = 'kc-button kc-logout-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🚪</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\n\nexport interface UserProfileProps {\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Show user avatar/icon\n * @default true\n */\n showAvatar?: boolean;\n\n /**\n * Show user email\n * @default true\n */\n showEmail?: boolean;\n\n /**\n * Show user roles\n * @default false\n */\n showRoles?: boolean;\n\n /**\n * Avatar size in pixels\n * @default 40\n */\n avatarSize?: number;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Callback when profile is clicked\n */\n onClick?: () => void;\n}\n\n/**\n * Pre-built user profile display component\n *\n * Displays the current user's information including name, email, and optionally roles.\n * Automatically hides when user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { UserProfile } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <UserProfile />;\n * }\n * ```\n *\n * @example With roles\n * ```tsx\n * <UserProfile showRoles={true} />\n * ```\n *\n * @example Clickable profile\n * ```tsx\n * <UserProfile\n * onClick={() => navigate('/profile')}\n * style={{ cursor: 'pointer' }}\n * />\n * ```\n *\n * @example Customized\n * ```tsx\n * <UserProfile\n * showEmail={false}\n * showRoles={true}\n * avatarSize={50}\n * className=\"my-profile\"\n * />\n * ```\n */\nexport const UserProfile: React.FC<UserProfileProps> = ({\n className = '',\n showAvatar = true,\n showEmail = true,\n showRoles = false,\n avatarSize = 40,\n style,\n onClick,\n}) => {\n const auth = useAuth();\n const { roles } = useRoles();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated || !auth.user) {\n return null;\n }\n\n const profile = auth.user.profile;\n const name = profile.name || profile.preferred_username || 'User';\n const email = profile.email;\n const initials = getInitials(name);\n\n const baseClass = 'kc-user-profile';\n const clickableClass = onClick ? 'kc-user-profile--clickable' : '';\n const classes = `${baseClass} ${clickableClass} ${className}`.trim();\n\n const handleClick = () => {\n if (onClick) {\n onClick();\n }\n };\n\n return (\n <div\n className={classes}\n style={style}\n onClick={handleClick}\n role={onClick ? 'button' : undefined}\n tabIndex={onClick ? 0 : undefined}\n onKeyPress={onClick ? (e) => e.key === 'Enter' && handleClick() : undefined}\n >\n {showAvatar && (\n <div\n className=\"kc-user-profile__avatar\"\n style={{\n width: avatarSize,\n height: avatarSize,\n fontSize: avatarSize * 0.4,\n }}\n >\n {initials}\n </div>\n )}\n\n <div className=\"kc-user-profile__info\">\n <div className=\"kc-user-profile__name\">{name}</div>\n\n {showEmail && email && (\n <div className=\"kc-user-profile__email\">{email}</div>\n )}\n\n {showRoles && roles.length > 0 && (\n <div className=\"kc-user-profile__roles\">\n {roles.slice(0, 3).map((role) => (\n <span key={role} className=\"kc-user-profile__role-badge\">\n {role}\n </span>\n ))}\n {roles.length > 3 && (\n <span className=\"kc-user-profile__role-badge\">\n +{roles.length - 3}\n </span>\n )}\n </div>\n )}\n </div>\n </div>\n );\n};\n\n/**\n * Helper function to get user initials from name\n */\nfunction getInitials(name: string): string {\n const parts = name.trim().split(' ');\n\n if (parts.length === 1) {\n return parts[0].substring(0, 2).toUpperCase();\n }\n\n return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase();\n}\n","/**\n * Device authorization response from Keycloak\n */\nexport interface DeviceAuthorizationResponse {\n /** Device code used for polling */\n device_code: string;\n\n /** User code to display to user */\n user_code: string;\n\n /** Verification URI (plain) */\n verification_uri: string;\n\n /** Complete verification URI with user code (for QR codes) */\n verification_uri_complete: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Recommended polling interval in seconds */\n interval: number;\n}\n\n/**\n * Token response from Keycloak\n */\nexport interface TokenResponse {\n /** Access token */\n access_token: string;\n\n /** Token type (usually 'Bearer') */\n token_type: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Refresh token (if offline_access scope was requested) */\n refresh_token?: string;\n\n /** ID token */\n id_token?: string;\n\n /** Granted scopes */\n scope?: string;\n}\n\n/**\n * Error response from token polling\n */\nexport interface DeviceFlowError {\n /** Error code */\n error: string;\n\n /** Error description */\n error_description?: string;\n}\n\n/**\n * Request device authorization code from the backend API\n *\n * This function calls your backend API which proxies the request to Keycloak.\n * This avoids CORS issues.\n *\n * @param apiBaseUrl - Base URL of your backend API (e.g., 'http://localhost:5000')\n * @returns Device authorization response\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const response = await requestDeviceCode('http://localhost:5000');\n * console.log('User code:', response.user_code);\n * console.log('Verification URL:', response.verification_uri_complete);\n * ```\n */\nexport async function requestDeviceCode(\n apiBaseUrl: string\n): Promise<DeviceAuthorizationResponse> {\n const url = `${apiBaseUrl}/api/keycloak/device/authorize`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `Device authorization failed: ${response.status} ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as DeviceAuthorizationResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to request device code: ${error.message}`);\n }\n throw error;\n }\n}\n\n/**\n * Poll for token using device code\n *\n * This function should be called repeatedly until the user authorizes the device\n * or the device code expires. The backend handles the actual token exchange with Keycloak.\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param deviceCode - Device code from requestDeviceCode()\n * @returns Token response if authorized, null if still pending\n * @throws Error if request fails or authorization is denied\n *\n * @example\n * ```ts\n * const deviceCode = 'ABC123';\n * const interval = setInterval(async () => {\n * try {\n * const token = await pollForToken('http://localhost:5000', deviceCode);\n * if (token) {\n * clearInterval(interval);\n * console.log('Authorized! Token:', token.access_token);\n * }\n * } catch (error) {\n * if (error.message.includes('authorization_pending')) {\n * // Still waiting, continue polling\n * } else {\n * // Real error, stop polling\n * clearInterval(interval);\n * console.error('Authorization failed:', error);\n * }\n * }\n * }, 5000);\n * ```\n */\nexport async function pollForToken(\n apiBaseUrl: string,\n deviceCode: string\n): Promise<TokenResponse | null> {\n const url = `${apiBaseUrl}/api/keycloak/device/token`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ device_code: deviceCode }),\n });\n\n const data = await response.json();\n\n // Check if response contains an error (backend returns 200 OK with error object)\n if ('error' in data) {\n const errorData = data as DeviceFlowError;\n\n // authorization_pending and slow_down are expected during polling\n if (\n errorData.error === 'authorization_pending' ||\n errorData.error === 'slow_down'\n ) {\n return null; // Still waiting\n }\n\n // Other errors are real failures\n throw new Error(\n errorData.error_description || errorData.error || 'Token polling failed'\n );\n }\n\n // Check if we got a non-OK status without error in body\n if (!response.ok) {\n throw new Error(`Token polling failed with status ${response.status}`);\n }\n\n return data as TokenResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw error;\n }\n throw new Error('Token polling failed');\n }\n}\n\n/**\n * Fetch user information using access token\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param accessToken - Access token from token response\n * @returns User information\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const userInfo = await fetchUserInfo('http://localhost:5000', token.access_token);\n * console.log('User:', userInfo.preferred_username);\n * ```\n */\nexport async function fetchUserInfo(\n apiBaseUrl: string,\n accessToken: string\n): Promise<any> {\n const url = `${apiBaseUrl}/api/keycloak/device/userinfo`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ access_token: accessToken }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to fetch user info: ${response.statusText}`);\n }\n\n return await response.json();\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to fetch user info: ${error.message}`);\n }\n throw error;\n }\n}\n","import React, { useState, useEffect, useRef } from 'react';\nimport { QRCodeSVG } from 'qrcode.react';\nimport { User } from 'oidc-client-ts';\nimport { useAuth } from '../hooks/useAuth';\nimport { useStorageConfig } from '../contexts/StorageConfigContext';\nimport {\n requestDeviceCode,\n pollForToken,\n fetchUserInfo,\n type DeviceAuthorizationResponse,\n} from '../utils/deviceFlow';\n\nexport interface DeviceLoginProps {\n /**\n * API base URL for device flow endpoints\n * @example 'http://localhost:5000'\n */\n apiBaseUrl: string;\n\n /**\n * QR code size in pixels\n * @default 256\n */\n qrCodeSize?: number;\n\n /**\n * Polling interval in seconds\n * @default 5\n */\n pollingInterval?: number;\n\n /**\n * Custom CSS class\n */\n className?: string;\n\n /**\n * Callback on successful login\n */\n onSuccess?: (user: User) => void;\n\n /**\n * Callback on error\n */\n onError?: (error: Error) => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Device flow login component\n *\n * Displays QR code and user code for device authentication. Automatically polls\n * for authorization and completes the login flow.\n *\n * @example Basic usage\n * ```tsx\n * import { DeviceLogin } from 'antaeus.keycloak.react';\n *\n * function TVLoginPage() {\n * return (\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * onSuccess={(user) => {\n * console.log('Logged in:', user.profile.name);\n * navigate('/home');\n * }}\n * />\n * );\n * }\n * ```\n *\n * @example With custom settings\n * ```tsx\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * qrCodeSize={300}\n * pollingInterval={3}\n * onError={(error) => console.error('Login failed:', error)}\n * />\n * ```\n */\nexport const DeviceLogin: React.FC<DeviceLoginProps> = ({\n apiBaseUrl,\n qrCodeSize = 256,\n pollingInterval = 5,\n className = '',\n onSuccess,\n onError,\n style,\n}) => {\n const auth = useAuth();\n const { storage, storageType } = useStorageConfig();\n const [deviceData, setDeviceData] = useState<DeviceAuthorizationResponse | null>(null);\n const [error, setError] = useState<string | null>(null);\n const [loading, setLoading] = useState(true);\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const pollTimerRef = useRef<number | null>(null);\n\n // Initialize device flow\n useEffect(() => {\n const initDeviceFlow = async () => {\n setLoading(true);\n setError(null);\n\n try {\n const response = await requestDeviceCode(apiBaseUrl);\n setDeviceData(response);\n setTimeRemaining(response.expires_in);\n } catch (err) {\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n } finally {\n setLoading(false);\n }\n };\n\n initDeviceFlow();\n }, [apiBaseUrl, onError]);\n\n // Countdown timer\n useEffect(() => {\n if (!deviceData || timeRemaining === null) return;\n\n const interval = setInterval(() => {\n setTimeRemaining((prev) => {\n if (prev === null || prev <= 1) {\n clearInterval(interval);\n setError('Device code expired. Please refresh to try again.');\n return 0;\n }\n return prev - 1;\n });\n }, 1000);\n\n return () => clearInterval(interval);\n }, [deviceData, timeRemaining]);\n\n // Poll for token\n useEffect(() => {\n if (!deviceData) return;\n\n const poll = async () => {\n try {\n const tokenResponse = await pollForToken(apiBaseUrl, deviceData.device_code);\n\n if (tokenResponse) {\n // Success! Store the token\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n\n // Fetch user info\n const userInfo = await fetchUserInfo(apiBaseUrl, tokenResponse.access_token);\n\n // Create User object with all required fields for proper storage\n const user = new User({\n id_token: tokenResponse.id_token || '',\n access_token: tokenResponse.access_token,\n token_type: tokenResponse.token_type || 'Bearer',\n profile: userInfo,\n expires_at: Math.floor(Date.now() / 1000) + tokenResponse.expires_in,\n scope: tokenResponse.scope,\n refresh_token: tokenResponse.refresh_token,\n session_state: null, // Device flow doesn't have session_state\n });\n\n console.log('[DeviceLogin] Device flow authentication successful', {\n hasAccessToken: !!user.access_token,\n hasRefreshToken: !!user.refresh_token,\n expiresAt: user.expires_at,\n profile: userInfo.preferred_username,\n });\n\n // Store the user manually in browser storage\n // We need to determine the storage key format used by oidc-client-ts\n const storageKey = `oidc.user:${auth.settings.authority}:${auth.settings.client_id}`;\n const userJson = user.toStorageString();\n\n console.log('[DeviceLogin] Storing user in storage...', {\n storageKey,\n storageType,\n storage: storageType === 'local' ? 'localStorage' : 'sessionStorage',\n });\n\n // Store the user using the configured storage\n storage.setItem(storageKey, userJson);\n\n // Verify storage worked\n const stored = storage.getItem(storageKey);\n if (!stored) {\n console.error('[DeviceLogin] Failed to store user in storage!');\n throw new Error('Failed to store user session. Please try again.');\n }\n console.log('[DeviceLogin] User stored successfully in', storageType === 'local' ? 'localStorage' : 'sessionStorage');\n\n // Trigger success callback if provided, otherwise reload the page\n if (onSuccess) {\n // Small delay to ensure storage write completes before navigation\n await new Promise(resolve => setTimeout(resolve, 100));\n onSuccess(user);\n } else {\n // No callback provided - reload the page to pick up the stored user\n // This ensures the auth context initializes with the user from storage\n window.location.reload();\n }\n }\n } catch (err) {\n // Ignore authorization_pending errors\n if (!(err as Error).message.includes('authorization_pending')) {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n }\n }\n };\n\n // Start polling\n pollTimerRef.current = setInterval(poll, pollingInterval * 1000);\n\n // Cleanup\n return () => {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n };\n }, [deviceData, apiBaseUrl, pollingInterval, onSuccess, onError, auth]);\n\n if (loading) {\n return (\n <div className={`kc-device-login kc-device-login--loading ${className}`} style={style}>\n <div className=\"kc-device-login__spinner\" />\n <p>Initializing device flow...</p>\n </div>\n );\n }\n\n if (error) {\n return (\n <div className={`kc-device-login kc-device-login--error ${className}`} style={style}>\n <div className=\"kc-device-login__error-icon\">⚠️</div>\n <h2>Error</h2>\n <p>{error}</p>\n <button\n className=\"kc-button kc-button--primary\"\n onClick={() => window.location.reload()}\n >\n Retry\n </button>\n </div>\n );\n }\n\n if (!deviceData) {\n return null;\n }\n\n const formatTime = (seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n };\n\n return (\n <div className={`kc-device-login ${className}`} style={style}>\n <h2 className=\"kc-device-login__title\">Device Login</h2>\n\n <div className=\"kc-device-login__qr\">\n <QRCodeSVG value={deviceData.verification_uri_complete} size={qrCodeSize} />\n </div>\n\n <div className=\"kc-device-login__instructions\">\n <p>Scan the QR code with your phone or visit:</p>\n <code className=\"kc-device-login__url\">{deviceData.verification_uri}</code>\n <p>And enter code:</p>\n <strong className=\"kc-device-login__user-code\">{deviceData.user_code}</strong>\n </div>\n\n {timeRemaining !== null && timeRemaining > 0 && (\n <p className=\"kc-device-login__expiry\">\n Code expires in {formatTime(timeRemaining)}\n </p>\n )}\n\n <div className=\"kc-device-login__status\">\n <div className=\"kc-device-login__spinner kc-device-login__spinner--small\" />\n <p>Waiting for authorization...</p>\n </div>\n </div>\n );\n};\n","import { useCallback, useRef } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseProtectedFetchOptions {\n /**\n * Base URL for API requests\n * @example 'http://localhost:5000'\n */\n baseUrl?: string;\n\n /**\n * Callback when request is unauthorized (401)\n */\n onUnauthorized?: () => void;\n\n /**\n * Retry request on 401 error after token refresh\n * @default true\n */\n retryOn401?: boolean;\n\n /**\n * Additional headers to include in all requests\n */\n headers?: Record<string, string>;\n}\n\nexport interface UseProtectedFetchReturn {\n /**\n * Fetch with automatic token injection and JSON parsing\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Parsed JSON response\n */\n fetchJson: <T = any>(url: string, init?: RequestInit) => Promise<T>;\n\n /**\n * Raw fetch with automatic token injection\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Fetch response\n */\n fetch: (url: string, init?: RequestInit) => Promise<Response>;\n\n /**\n * Check if request is in progress\n */\n isLoading: boolean;\n}\n\n/**\n * Hook for making authenticated API requests\n *\n * Automatically injects the current user's access token into all requests.\n * Handles 401 errors and provides convenient methods for JSON APIs.\n *\n * @param options - Configuration options\n * @returns Protected fetch methods\n *\n * @example Basic usage\n * ```tsx\n * import { useProtectedFetch } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const loadData = async () => {\n * // Token is automatically added\n * const data = await fetchJson('/api/data');\n * console.log(data);\n * };\n *\n * return <button onClick={loadData}>Load Data</button>;\n * }\n * ```\n *\n * @example With custom headers\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * headers: {\n * 'X-Custom-Header': 'value'\n * }\n * });\n * ```\n *\n * @example POST request\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const createUser = async (userData: User) => {\n * const result = await fetchJson<User>('/api/users', {\n * method: 'POST',\n * body: JSON.stringify(userData),\n * headers: {\n * 'Content-Type': 'application/json'\n * }\n * });\n * return result;\n * };\n * ```\n *\n * @example Handle unauthorized\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * onUnauthorized: () => {\n * console.log('Unauthorized! Redirecting to login...');\n * }\n * });\n * ```\n */\nexport function useProtectedFetch(\n options: UseProtectedFetchOptions = {}\n): UseProtectedFetchReturn {\n const auth = useAuth();\n const refreshInProgressRef = useRef(false);\n\n // Extract only what we need to avoid unnecessary re-renders\n const { user, isLoading, signinSilent } = auth;\n\n const {\n baseUrl = '',\n onUnauthorized,\n retryOn401 = true,\n headers: customHeaders = {},\n } = options;\n\n /**\n * Build full URL from path\n */\n const buildUrl = useCallback(\n (url: string): string => {\n // If URL is already absolute, return as-is\n if (url.startsWith('http://') || url.startsWith('https://')) {\n return url;\n }\n\n // Combine with base URL\n const base = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;\n const path = url.startsWith('/') ? url : `/${url}`;\n\n return base + path;\n },\n [baseUrl]\n );\n\n /**\n * Get authorization header with current token\n * Note: Not memoized to always get fresh token\n */\n const getAuthHeader = (): Record<string, string> => {\n if (!user?.access_token) {\n return {};\n }\n\n return {\n Authorization: `Bearer ${user.access_token}`,\n };\n };\n\n /**\n * Merge all headers\n * Always gets fresh token by calling getAuthHeader() directly\n */\n const buildHeaders = useCallback(\n (requestHeaders?: HeadersInit): Headers => {\n const headers = new Headers(requestHeaders);\n\n // Add auth header (always fresh)\n const authHeader = getAuthHeader();\n if (authHeader.Authorization) {\n headers.set('Authorization', authHeader.Authorization);\n }\n\n // Add custom headers\n Object.entries(customHeaders).forEach(([key, value]) => {\n headers.set(key, value);\n });\n\n return headers;\n },\n [customHeaders]\n );\n\n /**\n * Raw fetch with token injection\n */\n const protectedFetch = useCallback(\n async (url: string, init?: RequestInit): Promise<Response> => {\n const fullUrl = buildUrl(url);\n const headers = buildHeaders(init?.headers);\n\n const response = await fetch(fullUrl, {\n ...init,\n headers,\n });\n\n // Handle 401 Unauthorized\n if (response.status === 401) {\n onUnauthorized?.();\n\n // Only retry if enabled, user exists, and refresh not already in progress\n if (retryOn401 && user && !refreshInProgressRef.current) {\n // Set flag to prevent concurrent refresh attempts\n refreshInProgressRef.current = true;\n\n try {\n // Try to refresh token silently\n await signinSilent();\n\n // Retry request with new token\n const newHeaders = buildHeaders(init?.headers);\n const retryResponse = await fetch(fullUrl, {\n ...init,\n headers: newHeaders,\n });\n\n return retryResponse;\n } catch (error) {\n // Silent refresh failed, return original response\n return response;\n } finally {\n // Reset flag after delay to allow future refreshes\n setTimeout(() => {\n refreshInProgressRef.current = false;\n }, 1000);\n }\n }\n }\n\n return response;\n },\n [buildUrl, buildHeaders, onUnauthorized, retryOn401, user, signinSilent]\n );\n\n /**\n * Fetch and parse JSON\n */\n const fetchJson = useCallback(\n async <T = any>(url: string, init?: RequestInit): Promise<T> => {\n const response = await protectedFetch(url, init);\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `HTTP ${response.status}: ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as T;\n },\n [protectedFetch]\n );\n\n return {\n fetchJson,\n fetch: protectedFetch,\n isLoading,\n };\n}\n"]}
1
+ {"version":3,"sources":["../src/config/defaults.ts","../src/config/KeycloakConfig.ts","../src/hooks/useAuth.ts","../src/hooks/useTokenLifecycle.ts","../src/components/TokenLifecycleManager.tsx","../src/components/SessionMonitor.tsx","../src/utils/tokenBridge.ts","../src/components/TokenBridge.tsx","../src/config/presets.ts","../src/contexts/StorageConfigContext.tsx","../src/contexts/KeycloakStatusContext.tsx","../src/components/KeycloakProvider.tsx","../src/hooks/useRoles.ts","../src/hooks/useScopes.ts","../src/components/ProtectedRoute.tsx","../src/components/LoginButton.tsx","../src/components/LogoutButton.tsx","../src/components/UserProfile.tsx","../src/utils/deviceFlow.ts","../src/components/DeviceLogin.tsx","../src/hooks/useProtectedFetch.ts"],"names":["WebStorageStateStore","useOidcAuth","useState","useRef","useCallback","useEffect","jsx","jsxs","Fragment","createContext","useContext","useMemo","AuthContext","OidcAuthProvider","useLocation","error","User","QRCodeSVG"],"mappings":";;;;;;;;;;;;;AAKO,IAAM,aAAA,GAAyC;AAAA,EACpD,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EAC5E,uBAAuB,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,QAAA,CAAS,SAAS,GAAA,GAAM,GAAA;AAAA,EACtF,KAAA,EAAO,qCAAA;AAAA,EAEP,QAAA,EAAU;AAAA,IACR,UAAA,EAAY,KAAA;AAAA,IACZ,cAAA,EAAgB,IAAA;AAAA,IAChB,WAAA,EAAa;AAAA,GACf;AAAA,EAEA,WAAA,EAAa;AAAA,IACX,OAAA,EAAS,IAAA;AAAA,IACT,mBACE,OAAO,MAAA,KAAW,cACd,MAAA,CAAO,QAAA,CAAS,SAAS,oBAAA,GACzB,oBAAA;AAAA,IACN,gBAAA,EAAkB,GAAA;AAAA;AAAA,IAClB,eAAA,EAAiB,MAAA;AAAA;AAAA,IACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,IACzB,oBAAA,EAAsB,KAAA;AAAA,IACtB,cAAA,EAAgB,uBAAA;AAAA,IAChB,eAAA,EAAiB;AAAA,GACnB;AAAA,EAEA,QAAA,EAAU;AAAA,IACR,YAAA,EAAc,MAAA;AAAA,IACd,mBAAA,EAAqB,MAAA;AAAA,IACrB,YAAA,EAAc,IAAA;AAAA,IACd,qBAAA,EAAuB,KAAA;AAAA,IACvB,WAAA,EAAa;AAAA,GACf;AAAA,EAEA,QAAQ;AACV;;;AC/BO,IAAM,wBAAN,MAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjC,OAAO,MAAM,UAAA,EAAiD;AAE5D,IAAA,IAAA,CAAK,SAAS,UAAU,CAAA;AAGxB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,iBAAA,CAAkB,UAAU,CAAA;AAGhD,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,QAAA,CAAU,WAAA,IAAe,SAAA;AACpD,IAAA,MAAM,OAAA,GAAU,WAAA,KAAgB,OAAA,GAC5B,MAAA,CAAO,eACP,MAAA,CAAO,cAAA;AAEX,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAA,CAAO,WAAA;AAGnC,IAAA,MAAM,YAAA,GAAoE;AAAA,MACxE,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,WAAW,MAAA,CAAO,QAAA;AAAA,MAClB,cAAc,MAAA,CAAO,WAAA;AAAA,MACrB,0BAA0B,MAAA,CAAO,qBAAA;AAAA,MACjC,aAAA,EAAe,OAAO,QAAA,CAAU,YAAA;AAAA,MAChC,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,oBAAA,EAAsB,OAAO,WAAA,CAAa,OAAA;AAAA,MAC1C,YAAA,EAAc,OAAO,QAAA,CAAU,YAAA;AAAA,MAC/B,mBAAA,EAAqB,OAAO,WAAA,CAAa,iBAAA;AAAA;AAAA,MAGzC,WAAW,IAAIA,iCAAA,CAAqB,EAAE,KAAA,EAAO,SAAS,CAAA;AAAA;AAAA,MAGtD,GAAI,MAAA,CAAO,QAAA,CAAU,mBAAA,IAAuB;AAAA,QAC1C,aAAA,EAAe;AAAA;AACjB,KACF;AAEA,IAAA,IAAI,oBAAoB,MAAA,EAAW;AACjC,MAAA,YAAA,CAAa,eAAA,GAAkB,eAAA;AAAA,IACjC;AAEA,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,SAAS,MAAA,EAA8B;AACpD,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,IAClD;AAEA,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,MAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,IACjD;AAGA,IAAA,IAAI;AACF,MAAA,IAAI,GAAA,CAAI,OAAO,SAAS,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,IAC1D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAe,kBAAkB,MAAA,EAAkD;AACjF,IAAA,OAAO;AAAA,MACL,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,aAAA,CAAc,WAAA;AAAA,MACjD,qBAAA,EACE,MAAA,CAAO,qBAAA,IAAyB,aAAA,CAAc,qBAAA;AAAA,MAChD,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,MACrC,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,WAAA,EAAa;AAAA,QACX,GAAG,aAAA,CAAc,WAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,QAAA,EAAU;AAAA,QACR,GAAG,aAAA,CAAc,QAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA,OACZ;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,GAAG,aAAA,CAAc,MAAA;AAAA,QACjB,GAAG,MAAA,CAAO;AAAA;AACZ,KACF;AAAA,EACF;AACF;AAOO,SAAS,gBAAA,GAA4C;AAE1D,EAAA,IAAI,OAAO,0QAAgB,WAAA,EAAa;AACtC,IAAA,OAAO,EAAC;AAAA,EACV;AAGA,EAAA,MAAM,MAAO,SAAoB;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,GAAA,CAAI,uBAAA;AAAA,IACf,UAAU,GAAA,CAAI,uBAAA;AAAA,IACd,QAAA,EAAU;AAAA,MACR,UAAA,EAAY,IAAI,uBAAA,KAA4B,MAAA;AAAA,MAC5C,cAAA,EAAgB,IAAI,2BAAA,KAAgC;AAAA;AACtD,GACF;AACF;AC7FO,IAAM,OAAA,GAAUC;;;ACWvB,IAAM,kBAAA,GAAqB,uBAAA;AAgCpB,SAAS,kBACd,OAAA,EACyB;AACzB,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,YAAA,EAAc,eAAe,CAAA,GAAIC,eAAS,KAAK,CAAA;AACtD,EAAA,MAAM,CAAC,qBAAA,EAAuB,wBAAwB,CAAA,GAAIA,eAAS,KAAK,CAAA;AACxE,EAAA,MAAM,mBAAA,GAAsBC,aAAO,KAAK,CAAA;AACxC,EAAA,MAAM,qBAAA,GAAwB,MAAA,CAAO,WAAA,EAAa,eAAA,KAAoB,KAAA;AAEtE,EAAA,MAAM,GAAA,GAAMC,iBAAA;AAAA,IACV,CAAC,YAAoB,IAAA,KAAgB;AACnC,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAoB,OAAA,EAAS,GAAG,IAAI,CAAA;AAAA,MAClD;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAKA,EAAA,MAAM,aAAA,GAAgBA,kBAAY,MAAc;AAC9C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,IAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AACxB,IAAA,OAAO,CAAA,EAAG,kBAAkB,CAAA,EAAG,SAAS,IAAI,QAAQ,CAAA,CAAA;AAAA,EACtD,GAAG,CAAC,MAAA,CAAO,SAAA,EAAW,MAAA,CAAO,QAAQ,CAAC,CAAA;AAKtC,EAAA,MAAM,mBAAA,GAAsBA,kBAAY,MAAM;AAC5C,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,QAAA,EAAU,CAAA;AACxC,MAAA,GAAA,CAAI,4BAA4B,IAAI,IAAA,CAAK,GAAG,CAAA,CAAE,aAAa,CAAA;AAAA,IAC7D;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,GAAG,CAAC,CAAA;AAKvB,EAAA,MAAM,yBAAA,GAA4BA,kBAAY,MAAe;AAC3D,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AAGxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,IAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAE9C,IAAA,IAAI,CAAC,aAAA,EAAe;AAElB,MAAA,mBAAA,EAAoB;AACpB,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,QAAA,CAAS,aAAA,EAAe,EAAE,CAAA;AACjD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,cAAA,GAAA,CAAkB,MAAM,cAAA,IAAkB,GAAA;AAEhD,IAAA,GAAA,CAAI,+BAAA,EAAiC;AAAA,MACnC,UAAA,EAAY,IAAI,IAAA,CAAK,cAAc,EAAE,WAAA,EAAY;AAAA,MACjD,cAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAW,cAAA,IAAkB;AAAA,KAC9B,CAAA;AAED,IAAA,OAAO,cAAA,IAAkB,WAAA;AAAA,EAC3B,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,yBAAyB,aAAA,EAAe,GAAA,EAAK,mBAAmB,CAAC,CAAA;AAKzF,EAAA,MAAM,YAAA,GAAeA,kBAAY,YAA2B;AAE1D,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA;AAAA,IACF;AAGA,IAAA,eAAA,CAAgB,IAAI,CAAA;AAEpB,IAAA,IAAI;AAEF,MAAA,IAAI,2BAA0B,EAAG;AAC/B,QAAA,GAAA,CAAI,qDAAqD,CAAA;AACzD,QAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,QAAA,qBAAA,IAAwB;AACxB,QAAA;AAAA,MACF;AAEA,MAAA,cAAA,IAAiB;AACjB,MAAA,GAAA,CAAI,wBAAwB,CAAA;AAE5B,MAAA,MAAM,KAAK,YAAA,EAAa;AAExB,MAAA,GAAA,CAAI,0BAA0B,CAAA;AAC9B,MAAA,gBAAA,IAAmB;AAAA,IACrB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,GAAA,GAAM,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAA;AACpE,MAAA,GAAA,CAAI,uBAAA,EAAyB,IAAI,OAAO,CAAA;AACxC,MAAA,cAAA,GAAiB,GAAG,CAAA;AACpB,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,eAAA,CAAgB,KAAK,CAAA;AAAA,IACvB;AAAA,EACF,CAAA,EAAG;AAAA,IACD,YAAA;AAAA,IACA,IAAA;AAAA,IACA,yBAAA;AAAA,IACA,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,qBAAA,GAAwBA,kBAAY,YAA8B;AACtE,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AACd,MAAA,GAAA,CAAI,uCAAuC,CAAA;AAC3C,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,IAAI,2BAA0B,EAAG;AAC/B,MAAA,GAAA,CAAI,qCAAqC,CAAA;AACzC,MAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,MAAA,qBAAA,IAAwB;AAGxB,MAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,MAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAE3B,MAAA,IAAI;AACF,QAAA,MAAM,KAAK,UAAA,EAAW;AAAA,MACxB,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,2CAA2C,KAAK,CAAA;AAAA,MAEtD;AAEA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA;AAC5B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,GAAA,CAAI,gDAAgD,CAAA;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,WAAA,EAAa,gBAAA,IAAoB,GAAA;AAC1D,IAAA,MAAM,kBAAkB,SAAA,GAAY,GAAA;AAEpC,IAAA,GAAA,CAAI,yBAAA,EAA2B;AAAA,MAC7B,WAAW,IAAI,IAAA,CAAK,SAAA,GAAY,GAAI,EAAE,WAAA,EAAY;AAAA,MAClD,KAAK,IAAI,IAAA,CAAK,GAAA,GAAM,GAAI,EAAE,WAAA,EAAY;AAAA,MACtC,eAAA;AAAA,MACA,SAAA;AAAA,MACA,cAAc,eAAA,IAAmB;AAAA,KAClC,CAAA;AAGD,IAAA,IAAI,mBAAmB,SAAA,EAAW;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,EAAa;AACnB,QAAA,OAAO,IAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,6BAA6B,KAAK,CAAA;AACtC,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,2CAA2C,CAAA;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,gBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,WAAA,EAAa,eAAA,IAAmB,MAAA;AACxD,IAAA,MAAM,oBAAA,GAAuB,QAAA,KAAa,SAAA,IAAa,QAAA,KAAa,MAAA;AACpE,IAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AAExD,IAAA,IAAI,CAAC,oBAAA,IAAwB,mBAAA,CAAoB,OAAA,EAAS;AACxD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,SAAA,EAAW;AAClB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,MAAA,IAAI,CAAC,qBAAA,EAAuB;AAC1B,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,IAAQ,CAAC,eAAA,EAAiB;AAClC,QAAA;AAAA,MACF;AAAA,IACF;AAEA,IAAA,mBAAA,CAAoB,OAAA,GAAU,IAAA;AAC9B,IAAA,GAAA;AAAA,MACE,4CAAA;AAAA,MACA,QAAA;AAAA,MACA,sBAAA;AAAA,MACA,CAAC,KAAK,eAAA,IAAmB;AAAA,KAC3B;AAEA,IAAA,qBAAA,EAAsB,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACvC,MAAA,GAAA,CAAI,+BAA+B,KAAK,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH,CAAA,EAAG;AAAA,IACD,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,IAAA,CAAK,IAAA;AAAA,IACL,OAAO,WAAA,EAAa,eAAA;AAAA,IACpB,qBAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,oBAAoB,OAAA,EAAS;AAC/B,MAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AACjC,MAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AACxD,MAAA,IAAI,IAAA,CAAK,SAAA,IAAc,CAAC,IAAA,CAAK,eAAA,KAAoB,CAAC,qBAAA,IAAyB,CAAC,OAAA,IAAW,CAAC,eAAA,CAAA,EAAmB;AACzG,QAAA,mBAAA,CAAoB,OAAA,GAAU,KAAA;AAAA,MAChC;AAAA,IACF;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,eAAA,EAAiB,KAAK,SAAA,EAAW,IAAA,CAAK,IAAA,EAAM,qBAAqB,CAAC,CAAA;AAK3E,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,IAAA,CAAK,IAAA,IAAQ,CAAC,IAAA,CAAK,SAAA,EAAW;AAChC,MAAA,mBAAA,EAAoB;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,EAAW,mBAAmB,CAAC,CAAA;AAKnD,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,SAAA,EAAW;AAC3C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,OAAO,WAAA,EAAa,uBAAA;AACxC,IAAA,IAAI,CAAC,WAAA,IAAe,WAAA,IAAe,CAAA,EAAG;AACpC,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,UAAA,GAAa,YAAY,MAAM;AACnC,MAAA,IAAI,2BAA0B,EAAG;AAC/B,QAAA,GAAA,CAAI,6CAA6C,CAAA;AACjD,QAAA,wBAAA,CAAyB,IAAI,CAAA;AAC7B,QAAA,qBAAA,IAAwB;AAGxB,QAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,QAAA,YAAA,CAAa,WAAW,GAAG,CAAA;AAE3B,QAAA,IAAA,CAAK,UAAA,EAAW,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AACjC,UAAA,GAAA,CAAI,8CAA8C,KAAK,CAAA;AAAA,QAEzD,CAAC,CAAA;AAAA,MACH;AAAA,IACF,CAAA,EAAG,CAAA,GAAI,EAAA,GAAK,GAAI,CAAA;AAEhB,IAAA,OAAO,MAAM,cAAc,UAAU,CAAA;AAAA,EACvC,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,OAAO,WAAA,EAAa,uBAAA;AAAA,IACpB,yBAAA;AAAA,IACA,qBAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,OAAO;AAAA,IACL,YAAA;AAAA,IACA,qBAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACF;AACF;ACpXO,IAAM,wBAA8D,CAAC;AAAA,EAC1E,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA,GAAQ;AACV,CAAA,KAAM;AACJ,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIH,eAAS,KAAK,CAAA;AAEpD,EAAA,MAAM,kBAAA,GAAqBE,kBAAY,MAAM;AAC3C,IAAA,IAAI,MAAA,CAAO,aAAa,oBAAA,EAAsB;AAC5C,MAAA,cAAA,CAAe,IAAI,CAAA;AAAA,IACrB;AAAA,EACF,CAAA,EAAG,CAAC,MAAA,CAAO,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAE7C,EAAA,MAAM,oBAAA,GAAuBA,kBAAY,MAAM;AAC7C,IAAA,cAAA,CAAe,KAAK,CAAA;AAAA,EACtB,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,kBAAA,GAAqBA,iBAAAA,CAAY,CAAC,KAAA,KAAiB;AACvD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AAAA,IACtE;AACA,IAAA,MAAA,CAAO,MAAA,EAAQ,qBAAqB,KAAK,CAAA;AAAA,EAC3C,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,yBAAA,GAA4BA,kBAAY,MAAM;AAClD,IAAA,cAAA,CAAe,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,KAAK,6DAA6D,CAAA;AAAA,IAC5E;AACA,IAAA,MAAA,CAAO,QAAQ,cAAA,IAAiB;AAAA,EAClC,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzB,EAAA,MAAM,EAAE,YAAA,EAAc,qBAAA,EAAsB,GAAI,iBAAA,CAAkB;AAAA,IAChE,MAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAA,EAAgB,kBAAA;AAAA,IAChB,gBAAA,EAAkB,oBAAA;AAAA,IAClB,cAAA,EAAgB,kBAAA;AAAA,IAChB,qBAAA,EAAuB;AAAA,GACxB,CAAA;AAGD,EAAA,IAAI,qBAAA,EAAuB;AACzB,IAAA,uBACEE,cAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB,SAAA;AAAA,UACjB,OAAA,EAAS,MAAA;AAAA,UACT,SAAA,EAAW;AAAA,SACb;AAAA,QAEA,QAAA,kBAAAC,eAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,KAAA,EAAO;AAAA,cACL,eAAA,EAAiB,OAAA;AAAA,cACjB,OAAA,EAAS,MAAA;AAAA,cACT,YAAA,EAAc,KAAA;AAAA,cACd,SAAA,EAAW,2BAAA;AAAA,cACX,QAAA,EAAU;AAAA,aACZ;AAAA,YAEA,QAAA,EAAA;AAAA,8BAAAD,cAAA,CAAC,IAAA,EAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,cAAc,KAAA,EAAO,MAAA,IAAU,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,8BACnEA,cAAA,CAAC,OAAE,KAAA,EAAO,EAAE,QAAQ,YAAA,EAAc,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,gFAAA,EAEnD,CAAA;AAAA,8BACAA,cAAA;AAAA,gBAAC,QAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,kBACtC,KAAA,EAAO;AAAA,oBACL,OAAA,EAAS,WAAA;AAAA,oBACT,eAAA,EAAiB,SAAA;AAAA,oBACjB,KAAA,EAAO,OAAA;AAAA,oBACP,MAAA,EAAQ,MAAA;AAAA,oBACR,YAAA,EAAc,KAAA;AAAA,oBACd,QAAA,EAAU,MAAA;AAAA,oBACV,MAAA,EAAQ,SAAA;AAAA,oBACR,UAAA,EAAY;AAAA,mBACd;AAAA,kBACD,QAAA,EAAA;AAAA;AAAA;AAED;AAAA;AAAA;AACF;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,IAAI,eAAe,YAAA,EAAc;AAC/B,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,WAAA,EAAa,cAAA,IAAkB,uBAAA;AAEtD,IAAA,uBACEC,eAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO;AAAA,UACL,OAAA,EAAS,MAAA;AAAA,UACT,aAAA,EAAe,QAAA;AAAA,UACf,UAAA,EAAY,QAAA;AAAA,UACZ,cAAA,EAAgB,QAAA;AAAA,UAChB,MAAA,EAAQ,OAAA;AAAA,UACR,UAAA,EAAY,sCAAA;AAAA,UACZ,eAAA,EAAiB;AAAA,SACnB;AAAA,QAEA,QAAA,EAAA;AAAA,0BAAAA,eAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,KAAA,EAAO;AAAA,gBACL,OAAA,EAAS,MAAA;AAAA,gBACT,aAAA,EAAe,QAAA;AAAA,gBACf,UAAA,EAAY,QAAA;AAAA,gBACZ,GAAA,EAAK;AAAA,eACP;AAAA,cAEA,QAAA,EAAA;AAAA,gCAAAD,cAAA;AAAA,kBAAC,KAAA;AAAA,kBAAA;AAAA,oBACC,KAAA,EAAO;AAAA,sBACL,KAAA,EAAO,MAAA;AAAA,sBACP,MAAA,EAAQ,MAAA;AAAA,sBACR,MAAA,EAAQ,mBAAA;AAAA,sBACR,SAAA,EAAW,mBAAA;AAAA,sBACX,YAAA,EAAc,KAAA;AAAA,sBACd,SAAA,EAAW;AAAA;AACb;AAAA,iBACF;AAAA,gCACAA,cAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,EAAI,QAAA,EAAA,OAAA,EAAQ;AAAA;AAAA;AAAA,WACrE;AAAA,yCACC,OAAA,EAAA,EACE,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,CAAA,EAMH;AAAA;AAAA;AAAA,KACF;AAAA,EAEJ;AAGA,EAAA,6DAAU,QAAA,EAAS,CAAA;AACrB;ACvEO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA,GAAW,WAAA;AAAA,EACX,gBAAA,GAAmB,GAAA;AAAA;AAAA,EACnB,iBAAA,GAAoB,EAAA;AAAA;AAAA,EACpB,eAAA,GAAkB,IAAA;AAAA,EAClB,WAAA,GAAc,IAAA;AAAA,EACd,cAAA,GAAiB,KAAA;AAAA,EACjB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAIJ,eAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,CAAC,oBAAA,EAAsB,uBAAuB,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACpF,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,eAAS,cAAc,CAAA;AACzD,EAAA,MAAM,CAAC,gBAAA,EAAkB,mBAAmB,CAAA,GAAIA,eAAS,KAAK,CAAA;AAC9D,EAAA,MAAM,CAAC,iBAAA,EAAmB,oBAAoB,CAAA,GAAIA,eAAS,KAAK,CAAA;AAGhE,EAAAG,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,IAAA,CAAK,MAAM,UAAA,EAAY;AACnD,MAAA,gBAAA,CAAiB,IAAI,CAAA;AACrB,MAAA,uBAAA,CAAwB,IAAI,CAAA;AAC5B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,eAAA,GAAwD,IAAA;AAE5D,IAAA,MAAM,sBAAsB,MAAM;AAChC,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAM,UAAA;AAC7B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,MAAA,MAAM,YAAY,SAAA,GAAY,GAAA;AAG9B,MAAA,IAAI,oBAAA,KAAyB,IAAA,IAAQ,SAAA,GAAY,CAAA,EAAG;AAClD,QAAA,uBAAA,CAAwB,SAAS,CAAA;AAAA,MACnC;AAEA,MAAA,IAAI,aAAa,CAAA,EAAG;AAClB,QAAA,gBAAA,CAAiB,CAAC,CAAA;AAGlB,QAAA,SAAA,IAAY;AAGZ,QAAA,eAAA,GAAkB,WAAW,MAAM;AACjC,UAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,QACvB,GAAG,GAAI,CAAA;AAAA,MACT,CAAA,MAAO;AACL,QAAA,gBAAA,CAAiB,SAAS,CAAA;AAG1B,QAAA,IAAI,SAAA,IAAa,iBAAA,IAAqB,CAAC,iBAAA,EAAmB;AACxD,UAAA,oBAAA,CAAqB,IAAI,CAAA;AACzB,UAAA,UAAA,GAAa,SAAS,CAAA;AAAA,QACxB,CAAA,MAAA,IAAW,SAAA,IAAa,gBAAA,IAAoB,CAAC,gBAAA,EAAkB;AAC7D,UAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,UAAA,SAAA,GAAY,SAAS,CAAA;AAAA,QACvB;AAAA,MACF;AAAA,IACF,CAAA;AAEA,IAAA,mBAAA,EAAoB;AACpB,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,mBAAA,EAAqB,GAAI,CAAA;AAEtD,IAAA,OAAO,MAAM;AACX,MAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,YAAA,CAAa,eAAe,CAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG;AAAA,IACD,IAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,gBAAA;AAAA,IACA,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,aAAA,IAAiB,gBAAgB,gBAAA,EAAkB;AACrD,MAAA,mBAAA,CAAoB,KAAK,CAAA;AACzB,MAAA,oBAAA,CAAqB,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAgB,CAAC,CAAA;AAGpC,EAAA,MAAM,UAAA,GAAaD,iBAAAA,CAAY,CAAC,OAAA,KAA4B;AAC1D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,cAAA,GAAiBA,kBAAY,MAAc;AAC/C,IAAA,IAAI,CAAC,eAAe,OAAO,QAAA;AAC3B,IAAA,IAAI,aAAA,IAAiB,mBAAmB,OAAO,UAAA;AAC/C,IAAA,IAAI,aAAA,IAAiB,kBAAkB,OAAO,SAAA;AAC9C,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,EAAG,CAAC,aAAA,EAAe,gBAAA,EAAkB,iBAAiB,CAAC,CAAA;AAGvD,EAAA,MAAM,WAAA,GAAcA,kBAAY,MAAc;AAC5C,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,oBAAA,EAAsB,OAAO,GAAA;AACpD,IAAA,OAAO,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,IAAI,GAAA,EAAM,aAAA,GAAgB,oBAAA,GAAwB,GAAG,CAAC,CAAA;AAAA,EAChF,CAAA,EAAG,CAAC,aAAA,EAAe,oBAAoB,CAAC,CAAA;AAGxC,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,aAAA,KAAkB,IAAA,EAAM;AACnD,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAA,GAAY,oBAAA;AAClB,EAAA,MAAM,aAAA,GAAgB,uBAAuB,QAAQ,CAAA,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,CAAA,oBAAA,EAAuB,cAAA,EAAgB,CAAA,CAAA;AAC3D,EAAA,MAAM,cAAA,GAAiB,YAAY,+BAAA,GAAkC,EAAA;AACrE,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAEnG,EAAA,MAAM,WAAW,WAAA,EAAY;AAE7B,EAAA,uBACEG,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,SAAS,KAAA,EACtB,QAAA,EAAA;AAAA,IAAA,WAAA,oBACCD,cAAAA;AAAA,MAAC,QAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,4BAAA;AAAA,QACV,OAAA,EAAS,MAAM,YAAA,CAAa,CAAC,SAAS,CAAA;AAAA,QACtC,YAAA,EAAY,YAAY,wBAAA,GAA2B,0BAAA;AAAA,QACnD,KAAA,EAAO,YAAY,QAAA,GAAW,UAAA;AAAA,QAE7B,sBAAY,QAAA,GAAM;AAAA;AAAA,KACrB;AAAA,IAGD,CAAC,SAAA,oBACAC,eAAAA,CAAAC,qBAAA,EACE,QAAA,EAAA;AAAA,sBAAAD,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EACb,QAAA,EAAA;AAAA,wBAAAD,eAAC,MAAA,EAAA,EAAK,SAAA,EAAU,6BACb,QAAA,EAAA,aAAA,KAAkB,CAAA,GAAI,oBAAoB,qBAAA,EAC7C,CAAA;AAAA,wBACAA,cAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,0BAAA,EACb,QAAA,EAAA,UAAA,CAAW,aAAa,CAAA,EAC3B;AAAA,OAAA,EACF,CAAA;AAAA,MAEC,mCACCA,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,oCACb,QAAA,kBAAAA,cAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,mCAAA;AAAA,UACV,KAAA,EAAO,EAAE,KAAA,EAAO,CAAA,EAAG,QAAQ,CAAA,CAAA,CAAA,EAAI;AAAA,UAC/B,IAAA,EAAK,aAAA;AAAA,UACL,eAAA,EAAe,QAAA;AAAA,UACf,eAAA,EAAe,CAAA;AAAA,UACf,eAAA,EAAe;AAAA;AAAA,OACjB,EACF;AAAA,KAAA,EAEJ;AAAA,GAAA,EAEJ,CAAA;AAEJ;;;AC5QO,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,YAAA,GAA8B,IAAA;AACtC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmB;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAK3C,SAAS,KAAA,EAA4B;AACnC,IAAA,IAAI,IAAA,CAAK,iBAAiB,KAAA,EAAO;AAC/B,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,YAAA,GAAe,KAAA;AACpB,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,SAAA,EAAW;AACrC,MAAA,IAAI;AACF,QAAA,QAAA,CAAS,KAAK,CAAA;AAAA,MAChB,SAAS,KAAA,EAAO;AAEd,QAAA,OAAA,CAAQ,KAAA,CAAM,uCAAuC,KAAK,CAAA;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,GAA0B;AACxB,IAAA,OAAO,IAAA,CAAK,YAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAA,GAAwC;AAC5C,IAAA,OAAO,IAAA,CAAK,YAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,QAAA,EAAqC;AAC7C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAE3B,IAAA,QAAA,CAAS,KAAK,YAAY,CAAA;AAC1B,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,SAAA,CAAU,OAAO,QAAQ,CAAA;AAAA,IAChC,CAAA;AAAA,EACF;AACF;AAKO,IAAM,iBAAA,GAAoB,MAAmB,IAAI,WAAA;AAKjD,IAAM,qBAAqB,iBAAA;;;AC7C3B,IAAM,kBAA8C,CAAC;AAAA,EAC1D,MAAA,GAAS;AACX,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAErB,EAAAD,gBAAU,MAAM;AACd,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAM,YAAA,IAAgB,IAAA;AACzC,IAAA,MAAA,CAAO,SAAS,KAAK,CAAA;AAAA,EACvB,CAAA,EAAG,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,CAAC,CAAA;AAGtB,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,MAAA,MAAA,CAAO,SAAS,IAAI,CAAA;AAAA,IACtB;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,eAAA,EAAiB,MAAM,CAAC,CAAA;AAEjC,EAAA,OAAO,IAAA;AACT;;;ACtBO,IAAM,cAAA,GAAgE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAa3E,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,SAAA;AAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,eAAA,EAAiB;AAAA,IACf,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,KAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,cAAA,EAAgB;AAAA,IACd,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,MAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,KAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,WAAA,EAAa;AAAA,IACX,KAAA,EAAO,qCAAA;AAAA,IACP,QAAA,EAAU;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,cAAA,EAAgB,IAAA;AAAA,MAChB,UAAA,EAAY;AAAA,KACd;AAAA,IACA,WAAA,EAAa;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,gBAAA,EAAkB,GAAA;AAAA,MAClB,eAAA,EAAiB,MAAA;AAAA,MACjB,uBAAA,EAAyB,CAAA;AAAA;AAAA,MACzB,oBAAA,EAAsB,IAAA;AAAA;AAAA,MACtB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,YAAA,EAAc,MAAA;AAAA,MACd,mBAAA,EAAqB,MAAA;AAAA,MACrB,YAAA,EAAc,IAAA;AAAA,MACd,qBAAA,EAAuB;AAAA;AACzB;AAEJ;AAaO,SAAS,gBAAgB,MAAA,EAA+C;AAC7E,EAAA,OAAO,eAAe,MAAM,CAAA;AAC9B;AAqBO,SAAS,eAAA,CACd,QACA,YAAA,EACyB;AACzB,EAAA,MAAM,YAAA,GAAe,gBAAgB,MAAM,CAAA;AAE3C,EAAA,OAAO;AAAA,IACL,GAAG,YAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,YAAA,CAAa,WAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,YAAA,CAAa,QAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,YAAA,CAAa,MAAA;AAAA,MAChB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AACF;AC/OA,IAAM,uBAAuBI,mBAAA,CAAwC;AAAA,EACnE,WAAA,EAAa,SAAA;AAAA,EACb,SAAS,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,iBAAkB;AACpE,CAAC,CAAA;AAEM,IAAM,qBAAA,GAGR,CAAC,EAAE,WAAA,EAAa,UAAS,KAAM;AAClC,EAAA,MAAM,OAAA,GAAU,WAAA,KAAgB,OAAA,GAAU,MAAA,CAAO,eAAe,MAAA,CAAO,cAAA;AAEvE,EAAA,uBACEH,cAAAA,CAAC,oBAAA,CAAqB,QAAA,EAArB,EAA8B,OAAO,EAAE,WAAA,EAAa,OAAA,EAAQ,EAC1D,QAAA,EACH,CAAA;AAEJ,CAAA;AAKO,IAAM,gBAAA,GAAmB,MAAMI,gBAAA,CAAW,oBAAoB,CAAA;ACbrE,IAAM,aAAA,GAAgC;AAAA,EACpC,SAAA,EAAW,IAAA;AAAA,EACX,YAAA,EAAc;AAChB,CAAA;AAEA,IAAM,qBAAA,GAAwBD,oBAA8B,aAAa,CAAA;AAElE,IAAM,yBAAyB,qBAAA,CAAsB;AAErD,IAAM,iBAAA,GAAoB,MAC/BC,gBAAAA,CAAW,qBAAqB;ACMlC,IAAM,uBAAuB,MAAyB;AACpD,EAAA,MAAM,OAAO,MAAM,MAAA;AACnB,EAAA,MAAM,gBAAA,GAAmB,MAAM,MAAM,MAAA;AACrC,EAAA,MAAM,YAAY,YAAY,MAAA;AAE9B,EAAA,MAAM,MAAA,GAAqC;AAAA,IACzC,sBAAA,EAAwB,gBAAA;AAAA,IACxB,yBAAA,EAA2B,IAAA;AAAA,IAC3B,qBAAA,EAAuB,gBAAA;AAAA,IACvB,wBAAA,EAA0B,IAAA;AAAA,IAC1B,mBAAA,EAAqB,gBAAA;AAAA,IACrB,sBAAA,EAAwB,IAAA;AAAA,IACxB,aAAA,EAAe,gBAAA;AAAA,IACf,gBAAA,EAAkB,IAAA;AAAA,IAClB,eAAA,EAAiB,gBAAA;AAAA,IACjB,kBAAA,EAAoB,IAAA;AAAA,IACpB,eAAA,EAAiB,gBAAA;AAAA,IACjB,kBAAA,EAAoB,IAAA;AAAA,IACpB,gBAAA,EAAkB,gBAAA;AAAA,IAClB,mBAAA,EAAqB,IAAA;AAAA,IACrB,qBAAA,EAAuB,gBAAA;AAAA,IACvB,wBAAA,EAA0B,IAAA;AAAA,IAC1B,IAAA,EAAM,SAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACV;AAEA,EAAA,OAAO,MAAA;AACT,CAAA;AAEA,IAAM,iBAAiB,oBAAA,EAAqB;AAE5C,IAAM,gBAAA,GAAwC;AAAA,EAC5C,SAAA,EAAW,EAAA;AAAA,EACX,SAAA,EAAW,EAAA;AAAA,EACX,YAAA,EAAc,2BAAA;AAAA,EACd,aAAA,EAAe,MAAA;AAAA,EACf,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,aAAA,GAAgB,MACpB,IAAI,KAAA,CAAM,wDAAwD,CAAA;AAEpE,IAAM,gBAAgB,YAA4B;AAChD,EAAA,MAAM,aAAA,EAAc;AACtB,CAAA;AAEA,IAAM,mBAAA,GAAwC;AAAA,EAC5C,QAAA,EAAU,gBAAA;AAAA,EACV,MAAA,EAAQ,cAAA;AAAA,EACR,iBAAiB,YAA2B,MAAA;AAAA,EAC5C,YAAY,YAA2B,MAAA;AAAA,EACvC,WAAA,EAAa,CAAC,KAAA,KAA4B,aAAA,EAAoB;AAAA,EAC9D,YAAA,EAAc,OAAO,KAAA,KAAmD,IAAA;AAAA,EACxE,cAAA,EAAgB,CAAC,KAAA,KAA+B,aAAA,EAAoB;AAAA,EACpE,8BAAA,EAAgC,CAC9B,KAAA,KACG,aAAA,EAAoB;AAAA,EACzB,eAAA,EAAiB,OAAO,KAAA,KACtB,MAAA;AAAA,EACF,YAAA,EAAc,OAAO,KAAA,KAA4C,MAAA;AAAA,EACjE,aAAA,EAAe,OAAO,KAAA,KAA6C,MAAA;AAAA,EACnE,kBAAA,EAAoB,OAClB,KAAA,KACkC,IAAA;AAAA,EACpC,YAAA,EAAc,OAAO,MAAA,KAA8C,MAAA;AAAA,EACnE,kBAAkB,MAAY,MAAA;AAAA,EAC9B,iBAAiB,MAAY,MAAA;AAAA,EAC7B,IAAA,EAAM,IAAA;AAAA,EACN,SAAA,EAAW,KAAA;AAAA,EACX,eAAA,EAAiB,KAAA;AAAA,EACjB,eAAA,EAAiB,MAAA;AAAA,EACjB,KAAA,EAAO;AACT,CAAA;AA6FA,SAAS,aAAa,KAAA,EAAwE;AAC5F,EAAA,OAAO,WAAA,IAAe,SAAS,UAAA,IAAc,KAAA;AAC/C;AAyHO,IAAM,gBAAA,GAAoD,CAAC,KAAA,KAAU;AAC1E,EAAA,MAAM,EAAE,QAAA,EAAU,KAAA,GAAQ,KAAA,EAAM,GAAI,KAAA;AAEpC,EAAA,MAAM,MAAA,GAAyBC,cAAQ,MAAM;AAC3C,IAAA,MAAM,WAAA,GAAc,MAAM,OAAA,IAAW,IAAA;AACrC,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,KAAK,CAAA,GACnC,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,GACvB,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA;AAClC,IAAA,MAAM,WAAA,GAAc,YAAA,CAAa,KAAK,CAAA,GAClC,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,GACtB,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA;AAEjC,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,WAAA;AAAA,MACX,cAAc,YAAA,IAAgB,WAAA;AAAA,MAC9B,MAAA,EAAQ,CAAC,WAAA,GACL,UAAA,GACA,CAAC,YAAA,IAAgB,CAAC,cAChB,gBAAA,GACA;AAAA,KACR;AAAA,EACF,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAEV,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,YAAA;AAEpD,EAAAN,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,gBAAA,IAAoB,KAAA,CAAM,WAAA,EAAa;AAC1C,MAAA,KAAA,CAAM,WAAA,CAAY,SAAS,IAAI,CAAA;AAAA,IACjC;AAAA,EACF,CAAA,EAAG,CAAC,gBAAA,EAAkB,KAAA,CAAM,WAAW,CAAC,CAAA;AAExC,EAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,IAAA,uBACEC,cAAAA,CAAC,sBAAA,EAAA,EAAuB,OAAO,MAAA,EAC7B,QAAA,kBAAAA,eAACM,4BAAA,CAAY,QAAA,EAAZ,EAAqB,KAAA,EAAO,mBAAA,EAC3B,0BAAAN,cAAAA,CAAC,qBAAA,EAAA,EAAsB,aAAY,SAAA,EAChC,QAAA,EACH,GACF,CAAA,EACF,CAAA;AAAA,EAEJ;AAGA,EAAA,MAAM,SAAyB,YAAA,CAAa,KAAK,IAC7C,eAAA,CAAgB,KAAK,IACrB,KAAA,CAAM,MAAA;AAGV,EAAA,MAAM,UAAA,GAAa,qBAAA,CAAsB,KAAA,CAAM,MAAM,CAAA;AAGrD,EAAA,MAAM,GAAA,GAAMF,iBAAAA;AAAA,IACV,CAAC,KAAA,EAAkC,OAAA,EAAA,GAAoB,IAAA,KAAgB;AACrE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAM,MAAA,GAAS,oBAAA;AACf,QAAA,QAAQ,KAAA;AAAO,UACb,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACpC,YAAA;AAAA,UACF,KAAK,MAAA;AACH,YAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACrC,YAAA;AAAA,UACF,KAAK,OAAA;AACH,YAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AACtC,YAAA;AAAA;AACJ,MACF;AAAA,IACF,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,gBAAA,GAAmBA,iBAAAA;AAAA,IACvB,CAAC,KAAA,KAA6B;AAC5B,MAAA,GAAA,CAAI,QAAQ,oBAAoB,CAAA;AAGhC,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA,CAAO,MAAA,EAAQ,UAAU,KAAa,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG;AAAA,GACrB;AAEA,EAAA,MAAM,iBAAA,GAAoBA,kBAAY,MAAY;AAChD,IAAA,GAAA,CAAI,QAAQ,qBAAqB,CAAA;AAGjC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,EAAC,EAAG,SAAS,KAAA,EAAO,MAAA,CAAO,SAAS,QAAQ,CAAA;AAGxE,IAAA,MAAA,CAAO,QAAQ,QAAA,IAAW;AAAA,EAC5B,CAAA,EAAG,CAAC,MAAA,CAAO,MAAA,EAAQ,GAAG,CAAC,CAAA;AAEvB,EAAA,MAAM,YAAA,GAAeA,kBAAY,MAAY;AAC3C,IAAA,GAAA,CAAI,QAAQ,4DAA4D,CAAA;AAAA,EAC1E,CAAA,EAAG,CAAC,GAAG,CAAC,CAAA;AAKR,EAAA,MAAM,kBAAA,GAAqB,MAAA,CAAO,QAAA,EAAU,cAAA,KAAmB,KAAA;AAG/D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,QAAA,EAAU,WAAA,IAAe,SAAA;AAEpD,EAAA,uBACEE,cAAAA,CAAC,sBAAA,EAAA,EAAuB,KAAA,EAAO,QAC7B,QAAA,kBAAAA,cAAAA;AAAA,IAACO,6BAAA;AAAA,IAAA;AAAA,MACE,GAAG,UAAA;AAAA,MACJ,gBAAA;AAAA,MACA,iBAAA;AAAA,MACA,YAAA;AAAA,MAEA,QAAA,kBAAAP,eAAC,qBAAA,EAAA,EAAsB,WAAA,EACrB,0BAAAC,eAAAA,CAAC,qBAAA,EAAA,EAAsB,QAAgB,KAAA,EACpC,QAAA,EAAA;AAAA,QAAA,KAAA,CAAM,+BACLD,cAAAA,CAAC,eAAA,EAAA,EAAgB,MAAA,EAAQ,MAAM,WAAA,EAAa,CAAA;AAAA,QAG7C,kBAAA,oBAAsBA,cAAAA,CAAC,cAAA,EAAA,EAAe,CAAA;AAAA,QAGtC;AAAA,OAAA,EACH,CAAA,EACF;AAAA;AAAA,GACF,EACF,CAAA;AAEJ;AAKA,SAAS,gBAAgB,KAAA,EAAwD;AAC/E,EAAA,MAAM,EAAE,WAAW,QAAA,EAAU,MAAA,GAAS,WAAW,MAAA,EAAQ,SAAA,GAAY,EAAC,EAAE,GAAI,KAAA;AAG5E,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,MAAA,EAAQ,SAAS,CAAA;AAGtD,EAAA,MAAM,UAAA,GAA6B;AAAA,IACjC,SAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA,EAAa,YAAA,CAAa,WAAA,IAAe,aAAA,CAAc,WAAA,KAAgB,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACtI,qBAAA,EAAuB,YAAA,CAAa,qBAAA,IAAyB,aAAA,CAAc,qBAAA,KAA0B,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,GAAA,GAAM,GAAA,CAAA;AAAA,IACpK,KAAA,EAAO,YAAA,CAAa,KAAA,IAAS,aAAA,CAAc,KAAA;AAAA,IAC3C,QAAA,EAAU;AAAA,MACR,GAAG,aAAA,CAAc,QAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,WAAA,EAAa;AAAA,MACX,GAAG,aAAA,CAAc,WAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,QAAA,EAAU;AAAA,MACR,GAAG,aAAA,CAAc,QAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,GAAG,aAAA,CAAc,MAAA;AAAA,MACjB,GAAG,YAAA,CAAa;AAAA;AAClB,GACF;AAEA,EAAA,OAAO,UAAA;AACT;ACpaO,SAAS,QAAA,GAA2B;AACzC,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,MAAM,KAAA,GAAQK,cAAkB,MAAM;AACpC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,MAAA,OAAO,EAAC;AAAA,IACV;AAGA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,YAAA;AACtC,IAAA,OAAO,WAAA,EAAa,SAAS,EAAC;AAAA,EAChC,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,OAAA,GAAUA,aAAAA;AAAA,IACd,MAAM,CAAC,IAAA,KAA0B;AAC/B,MAAA,OAAO,KAAA,CAAM,SAAS,IAAI,CAAA;AAAA,IAC5B,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,UAAA,GAAaA,aAAAA;AAAA,IACjB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,IAAA,CAAK,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC1D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,WAAA,GAAcA,aAAAA;AAAA,IAClB,MAAM,CAAC,aAAA,KAAqC;AAC1C,MAAA,OAAO,cAAc,KAAA,CAAM,CAAC,SAAS,KAAA,CAAM,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IAC3D,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAGA,EAAA,MAAM,cAAA,GAAiBA,aAAAA;AAAA,IACrB,MACE,CAAC,QAAA,KAA+B;AAC9B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS;AACvB,QAAA,OAAO,EAAC;AAAA,MACV;AAGA,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,eAAA;AAIzC,MAAA,OAAO,cAAA,GAAiB,QAAQ,CAAA,EAAG,KAAA,IAAS,EAAC;AAAA,IAC/C,CAAA;AAAA,IACF,CAAC,KAAK,IAAI;AAAA,GACZ;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACjEO,SAAS,SAAA,GAA6B;AAC3C,EAAA,MAAM,OAAO,OAAA,EAAQ;AAIrB,EAAA,MAAM,MAAA,GAASA,cAAkB,MAAM;AACrC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,KAAA,SAAc,EAAC;AAG/B,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAAA,EAC5D,CAAA,EAAG,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA;AAGd,EAAA,MAAM,QAAA,GAAWA,aAAAA;AAAA,IACf,MAAM,CAAC,KAAA,KAA2B;AAChC,MAAA,OAAO,MAAA,CAAO,SAAS,KAAK,CAAA;AAAA,IAC9B,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,WAAA,GAAcA,aAAAA;AAAA,IAClB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,IAAA,CAAK,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC9D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAGA,EAAA,MAAM,YAAA,GAAeA,aAAAA;AAAA,IACnB,MAAM,CAAC,cAAA,KAAsC;AAC3C,MAAA,OAAO,eAAe,KAAA,CAAM,CAAC,UAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IAC/D,CAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,QAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;ACwFO,IAAM,iBAAgD,CAAC;AAAA,EAC5D,QAAA;AAAA,EACA,gBAAgB,EAAC;AAAA,EACjB,eAAA,GAAkB,KAAA;AAAA,EAClB,iBAAiB,EAAC;AAAA,EAClB,gBAAA,GAAmB,KAAA;AAAA,EACnB,MAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,UAAA,EAAY,WAAA,EAAY,GAAI,QAAA,EAAS;AAC7C,EAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAa,GAAI,SAAA,EAAU;AAChD,EAAA,MAAM,WAAWG,0BAAA,EAAY;AAC7B,EAAA,MAAM,aAAA,GAAgBX,aAAO,KAAK,CAAA;AAGlC,EAAA,MAAM,eAAA,GAAkB,CAAC,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,eAAA;AAGhD,EAAA,MAAM,YAAA,GAAe,MAAA,IAAU,IAAA,CAAK,IAAA,GAChC,MAAA,CAAO,KAAK,IAAA,EAAM,EAAE,QAAA,EAAU,CAAA,GAC9B,IAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,aAAA,CAAc,MAAA,GAAS,CAAA,GACrC,eAAA,GAAkB,YAAY,aAAa,CAAA,GAAI,UAAA,CAAW,aAAa,CAAA,GACxE,IAAA;AAGJ,EAAA,MAAM,WAAA,GAAc,cAAA,CAAe,MAAA,GAAS,CAAA,GACvC,gBAAA,GAAmB,aAAa,cAAc,CAAA,GAAI,WAAA,CAAY,cAAc,CAAA,GAC7E,IAAA;AAGJ,EAAA,MAAM,kBAAA,GACJ,CAAC,eAAA,GAAkB,mBAAA,GACnB,YAAA,KAAiB,KAAA,GAAQ,eAAA,GACzB,UAAA,KAAe,KAAA,GAAQ,oBAAA,GACvB,WAAA,KAAgB,KAAA,GAAQ,qBAAA,GACxB,IAAA;AAIF,EAAAE,gBAAU,MAAM;AACd,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,cAAA,GAAiB,kBAAkB,CAAA;AAAA,IACrC;AAAA,EACF,CAAA,EAAG,CAAC,kBAAA,EAAoB,cAAc,CAAC,CAAA;AAGvC,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAK,SAAA,IAAa,CAAC,KAAK,eAAA,IAAmB,CAAC,cAAc,OAAA,EAAS;AACtE,MAAA,aAAA,CAAc,OAAA,GAAU,IAAA;AACxB,MAAA,IAAA,CAAK,cAAA,CAAe;AAAA,QAClB,cAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,QAAA,CAAS,WAAW,QAAA,CAAS;AAAA,OACrE,CAAA,CAAE,KAAA,CAAM,CAAC,KAAA,KAAU;AAElB,QAAA,aAAA,CAAc,OAAA,GAAU,KAAA;AACxB,QAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAAA,MACjE,CAAC,CAAA;AAAA,IACH;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,iBAAiB,QAAA,CAAS,QAAA,EAAU,QAAA,CAAS,MAAM,CAAC,CAAA;AAG7E,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,MAAA,aAAA,CAAc,OAAA,GAAU,KAAA;AAAA,IAC1B;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,CAAK,eAAe,CAAC,CAAA;AAGzB,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,uBAAOC,eAAAE,mBAAAA,EAAA,EAAG,8CAAoBF,cAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,uBAAOA,eAAAE,mBAAAA,EAAA,EAAG,8CAAoBF,cAAAA,CAAC,2BAAwB,CAAA,EAAG,CAAA;AAAA,EAC5D;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,uBAAOA,eAAAE,mBAAAA,EAAA,EAAG,mDAAyBF,cAAAA,CAAC,gCAA6B,CAAA,EAAG,CAAA;AAAA,EACtE;AAGA,EAAA,uBAAOA,cAAAA,CAAAE,mBAAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB;AAKA,IAAM,uBAAA,GAAoC,sBACxCD,eAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK;AAAA,KACP;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAD,cAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,MAAA,EAAQ,mBAAA;AAAA,YACR,SAAA,EAAW,mBAAA;AAAA,YACX,YAAA,EAAc,KAAA;AAAA,YACd,KAAA,EAAO,MAAA;AAAA,YACP,MAAA,EAAQ,MAAA;AAAA,YACR,SAAA,EAAW;AAAA;AACb;AAAA,OACF;AAAA,sBACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,YAAA,EAAU,CAAA;AAAA,sBAClDA,eAAC,OAAA,EAAA,EAAO,QAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA,EAKN;AAAA;AAAA;AACJ,CAAA;AAMF,IAAM,4BAAA,GAAyC,sBAC7CC,eAAAA;AAAA,EAAC,KAAA;AAAA,EAAA;AAAA,IACC,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,cAAA,EAAgB,QAAA;AAAA,MAChB,UAAA,EAAY,QAAA;AAAA,MACZ,SAAA,EAAW,OAAA;AAAA,MACX,aAAA,EAAe,QAAA;AAAA,MACf,GAAA,EAAK,MAAA;AAAA,MACL,OAAA,EAAS,MAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACb;AAAA,IAEA,QAAA,EAAA;AAAA,sBAAAD,cAAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO;AAAA,YACL,QAAA,EAAU,MAAA;AAAA,YACV,KAAA,EAAO;AAAA,WACT;AAAA,UACD,QAAA,EAAA;AAAA;AAAA,OAED;AAAA,sBACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,MAAA,EAAO,EAAG,QAAA,EAAA,eAAA,EAAa,CAAA;AAAA,sBACtDA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,OAAO,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAA,EAAA,iDAAA,EAExC;AAAA;AAAA;AACF,CAAA;AC/QK,IAAM,cAA0C,CAAC;AAAA,EACtD,QAAA,GAAW,OAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,SAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,YAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,YAAA,IAAe;AACf,IAAA,IAAA,CAAK,cAAA,EAAe;AAAA,EACtB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,2BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACEC,eAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYD,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;ACpCO,IAAM,eAA4C,CAAC;AAAA,EACxD,QAAA,GAAW,QAAA;AAAA,EACX,SAAA,GAAY,EAAA;AAAA,EACZ,OAAA,GAAU,WAAA;AAAA,EACV,IAAA,GAAO,QAAA;AAAA,EACP,QAAA,GAAW,IAAA;AAAA,EACX,aAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA,GAAW;AACb,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AAGrB,EAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,aAAA,IAAgB;AAChB,IAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,EACvB,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,EAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA,CAAA;AAC1C,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA,CAAA;AACpC,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,YAAY,IAAI,SAAS,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,IAAA,EAAK;AAE9E,EAAA,uBACEC,eAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,SAAA,EAAW,OAAA;AAAA,MACX,OAAA,EAAS,WAAA;AAAA,MACT,QAAA,EAAU,YAAY,IAAA,CAAK,SAAA;AAAA,MAC3B,KAAA;AAAA,MAEC,QAAA,EAAA;AAAA,QAAA,QAAA,oBAAYD,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAkB,QAAA,EAAA,WAAA,EAAE,CAAA;AAAA,wBACjDA,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,mBAAmB,QAAA,EAAS;AAAA;AAAA;AAAA,GAC9C;AAEJ;AC1CO,IAAM,cAA0C,CAAC;AAAA,EACtD,SAAA,GAAY,EAAA;AAAA,EACZ,UAAA,GAAa,IAAA;AAAA,EACb,SAAA,GAAY,IAAA;AAAA,EACZ,SAAA,GAAY,KAAA;AAAA,EACZ,UAAA,GAAa,EAAA;AAAA,EACb,KAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,QAAA,EAAS;AAG3B,EAAA,IAAI,CAAC,IAAA,CAAK,eAAA,IAAmB,CAAC,KAAK,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,CAAK,OAAA;AAC1B,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,IAAQ,OAAA,CAAQ,kBAAA,IAAsB,MAAA;AAC3D,EAAA,MAAM,QAAQ,OAAA,CAAQ,KAAA;AACtB,EAAA,MAAM,QAAA,GAAW,YAAY,IAAI,CAAA;AAEjC,EAAA,MAAM,SAAA,GAAY,iBAAA;AAClB,EAAA,MAAM,cAAA,GAAiB,UAAU,4BAAA,GAA+B,EAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAG,SAAS,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA,EAAI,SAAS,GAAG,IAAA,EAAK;AAEnE,EAAA,MAAM,cAAc,MAAM;AACxB,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAA,EAAQ;AAAA,IACV;AAAA,EACF,CAAA;AAEA,EAAA,uBACEC,eAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,OAAA;AAAA,MACX,KAAA;AAAA,MACA,OAAA,EAAS,WAAA;AAAA,MACT,IAAA,EAAM,UAAU,QAAA,GAAW,MAAA;AAAA,MAC3B,QAAA,EAAU,UAAU,CAAA,GAAI,MAAA;AAAA,MACxB,UAAA,EAAY,UAAU,CAAC,CAAA,KAAM,EAAE,GAAA,KAAQ,OAAA,IAAW,aAAY,GAAI,MAAA;AAAA,MAEjE,QAAA,EAAA;AAAA,QAAA,UAAA,oBACCD,cAAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,yBAAA;AAAA,YACV,KAAA,EAAO;AAAA,cACL,KAAA,EAAO,UAAA;AAAA,cACP,MAAA,EAAQ,UAAA;AAAA,cACR,UAAU,UAAA,GAAa;AAAA,aACzB;AAAA,YAEC,QAAA,EAAA;AAAA;AAAA,SACH;AAAA,wBAGFC,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EACb,QAAA,EAAA;AAAA,0BAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,uBAAA,EAAyB,QAAA,EAAA,IAAA,EAAK,CAAA;AAAA,UAE5C,aAAa,KAAA,oBACZA,eAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAA0B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,UAGhD,SAAA,IAAa,MAAM,MAAA,GAAS,CAAA,oBAC3BC,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAU,wBAAA,EACZ,QAAA,EAAA;AAAA,YAAA,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAI,CAAC,IAAA,qBACtBD,cAAAA,CAAC,MAAA,EAAA,EAAgB,SAAA,EAAU,6BAAA,EACxB,QAAA,EAAA,IAAA,EAAA,EADQ,IAEX,CACD,CAAA;AAAA,YACA,MAAM,MAAA,GAAS,CAAA,oBACdC,eAAAA,CAAC,MAAA,EAAA,EAAK,WAAU,6BAAA,EAA8B,QAAA,EAAA;AAAA,cAAA,GAAA;AAAA,cAC1C,MAAM,MAAA,GAAS;AAAA,aAAA,EACnB;AAAA,WAAA,EAEJ;AAAA,SAAA,EAEJ;AAAA;AAAA;AAAA,GACF;AAEJ;AAKA,SAAS,YAAY,IAAA,EAAsB;AACzC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AAEnC,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,OAAO,MAAM,CAAC,CAAA,CAAE,UAAU,CAAA,EAAG,CAAC,EAAE,WAAA,EAAY;AAAA,EAC9C;AAEA,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,CAAC,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,CAAE,CAAC,CAAA,EAAG,WAAA,EAAY;AAChE;;;ACpGA,eAAsB,kBACpB,UAAA,EACsC;AACtC,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,8BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA;AAClB,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,gCAAgC,QAAA,CAAS,MAAM,IAAI,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,OACtF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAmCA,eAAsB,YAAA,CACpB,YACA,UAAA,EAC+B;AAC/B,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,0BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,EAAa,YAAY;AAAA,KACjD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAGjC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,SAAA,GAAY,IAAA;AAGlB,MAAA,IACE,SAAA,CAAU,KAAA,KAAU,uBAAA,IACpB,SAAA,CAAU,UAAU,WAAA,EACpB;AACA,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,SAAA,CAAU,iBAAA,IAAqB,SAAA,CAAU,KAAA,IAAS;AAAA,OACpD;AAAA,IACF;AAGA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,EACxC;AACF;AAgBA,eAAsB,aAAA,CACpB,YACA,WAAA,EACc;AACd,EAAA,MAAM,GAAA,GAAM,GAAG,UAAU,CAAA,6BAAA,CAAA;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,YAAA,EAAc,aAAa;AAAA,KACnD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AC7IO,IAAM,cAA0C,CAAC;AAAA,EACtD,UAAA;AAAA,EACA,UAAA,GAAa,GAAA;AAAA,EACb,eAAA,GAAkB,CAAA;AAAA,EAClB,SAAA,GAAY,EAAA;AAAA,EACZ,SAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,gBAAA,EAAiB;AAClD,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAIL,eAA6C,IAAI,CAAA;AACrF,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIA,eAAS,IAAI,CAAA;AAC3C,EAAA,MAAM,CAAC,aAAA,EAAe,gBAAgB,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,YAAA,GAAeC,aAAsB,IAAI,CAAA;AAG/C,EAAAE,gBAAU,MAAM;AACd,IAAA,MAAM,iBAAiB,YAAY;AACjC,MAAA,UAAA,CAAW,IAAI,CAAA;AACf,MAAA,QAAA,CAAS,IAAI,CAAA;AAEb,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,UAAU,CAAA;AACnD,QAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,QAAA,gBAAA,CAAiB,SAAS,UAAU,CAAA;AAAA,MACtC,SAAS,GAAA,EAAK;AACZ,QAAA,MAAMU,MAAAA,GAAQ,GAAA;AACd,QAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,QAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,MACjB,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,KAAK,CAAA;AAAA,MAClB;AAAA,IACF,CAAA;AAEA,IAAA,cAAA,EAAe;AAAA,EACjB,CAAA,EAAG,CAAC,UAAA,EAAY,OAAO,CAAC,CAAA;AAGxB,EAAAV,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,IAAc,aAAA,KAAkB,IAAA,EAAM;AAE3C,IAAA,MAAM,QAAA,GAAW,YAAY,MAAM;AACjC,MAAA,gBAAA,CAAiB,CAAC,IAAA,KAAS;AACzB,QAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,IAAQ,CAAA,EAAG;AAC9B,UAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,UAAA,QAAA,CAAS,mDAAmD,CAAA;AAC5D,UAAA,OAAO,CAAA;AAAA,QACT;AACA,QAAA,OAAO,IAAA,GAAO,CAAA;AAAA,MAChB,CAAC,CAAA;AAAA,IACH,GAAG,GAAI,CAAA;AAEP,IAAA,OAAO,MAAM,cAAc,QAAQ,CAAA;AAAA,EACrC,CAAA,EAAG,CAAC,UAAA,EAAY,aAAa,CAAC,CAAA;AAG9B,EAAAA,gBAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAA,EAAY;AAEjB,IAAA,MAAM,OAAO,YAAY;AACvB,MAAA,IAAI;AACF,QAAA,MAAM,aAAA,GAAgB,MAAM,YAAA,CAAa,UAAA,EAAY,WAAW,WAAW,CAAA;AAE3E,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AAGA,UAAA,MAAM,QAAA,GAAW,MAAM,aAAA,CAAc,UAAA,EAAY,cAAc,YAAY,CAAA;AAG3E,UAAA,MAAM,IAAA,GAAO,IAAIW,iBAAA,CAAK;AAAA,YACpB,QAAA,EAAU,cAAc,QAAA,IAAY,EAAA;AAAA,YACpC,cAAc,aAAA,CAAc,YAAA;AAAA,YAC5B,UAAA,EAAY,cAAc,UAAA,IAAc,QAAA;AAAA,YACxC,OAAA,EAAS,QAAA;AAAA,YACT,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,KAAI,GAAI,GAAI,IAAI,aAAA,CAAc,UAAA;AAAA,YAC1D,OAAO,aAAA,CAAc,KAAA;AAAA,YACrB,eAAe,aAAA,CAAc,aAAA;AAAA,YAC7B,aAAA,EAAe;AAAA;AAAA,WAChB,CAAA;AAED,UAAA,OAAA,CAAQ,IAAI,qDAAA,EAAuD;AAAA,YACjE,cAAA,EAAgB,CAAC,CAAC,IAAA,CAAK,YAAA;AAAA,YACvB,eAAA,EAAiB,CAAC,CAAC,IAAA,CAAK,aAAA;AAAA,YACxB,WAAW,IAAA,CAAK,UAAA;AAAA,YAChB,SAAS,QAAA,CAAS;AAAA,WACnB,CAAA;AAID,UAAA,MAAM,UAAA,GAAa,aAAa,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,IAAA,CAAK,SAAS,SAAS,CAAA,CAAA;AAClF,UAAA,MAAM,QAAA,GAAW,KAAK,eAAA,EAAgB;AAEtC,UAAA,OAAA,CAAQ,IAAI,0CAAA,EAA4C;AAAA,YACtD,UAAA;AAAA,YACA,WAAA;AAAA,YACA,OAAA,EAAS,WAAA,KAAgB,OAAA,GAAU,cAAA,GAAiB;AAAA,WACrD,CAAA;AAGD,UAAA,OAAA,CAAQ,OAAA,CAAQ,YAAY,QAAQ,CAAA;AAGpC,UAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AACzC,UAAA,IAAI,CAAC,MAAA,EAAQ;AACX,YAAA,OAAA,CAAQ,MAAM,gDAAgD,CAAA;AAC9D,YAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,UACnE;AACA,UAAA,OAAA,CAAQ,GAAA,CAAI,2CAAA,EAA6C,WAAA,KAAgB,OAAA,GAAU,iBAAiB,gBAAgB,CAAA;AAGpH,UAAA,IAAI,SAAA,EAAW;AAEb,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAA,OAAA,KAAW,UAAA,CAAW,OAAA,EAAS,GAAG,CAAC,CAAA;AACrD,YAAA,SAAA,CAAU,IAAI,CAAA;AAAA,UAChB,CAAA,MAAO;AAGL,YAAA,MAAA,CAAO,SAAS,MAAA,EAAO;AAAA,UACzB;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,IAAI,CAAE,GAAA,CAAc,OAAA,CAAQ,QAAA,CAAS,uBAAuB,CAAA,EAAG;AAC7D,UAAA,IAAI,aAAa,OAAA,EAAS;AACxB,YAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,UACpC;AACA,UAAA,MAAMD,MAAAA,GAAQ,GAAA;AACd,UAAA,QAAA,CAASA,OAAM,OAAO,CAAA;AACtB,UAAA,OAAA,GAAUA,MAAK,CAAA;AAAA,QACjB;AAAA,MACF;AAAA,IACF,CAAA;AAGA,IAAA,YAAA,CAAa,OAAA,GAAU,WAAA,CAAY,IAAA,EAAM,eAAA,GAAkB,GAAI,CAAA;AAG/D,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,aAAA,CAAc,aAAa,OAAO,CAAA;AAAA,MACpC;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,UAAA,EAAY,UAAA,EAAY,iBAAiB,SAAA,EAAW,OAAA,EAAS,IAAI,CAAC,CAAA;AAEtE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,uBACER,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,yCAAA,EAA4C,SAAS,IAAI,KAAA,EACvE,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0BAAA,EAA2B,CAAA;AAAA,sBAC1CA,cAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,6BAAA,EAA2B;AAAA,KAAA,EAChC,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,uBACEC,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,uCAAA,EAA0C,SAAS,IAAI,KAAA,EACrE,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EAA8B,QAAA,EAAA,cAAA,EAAE,CAAA;AAAA,sBAC/CA,cAAAA,CAAC,IAAA,EAAA,EAAG,QAAA,EAAA,OAAA,EAAK,CAAA;AAAA,sBACTA,cAAAA,CAAC,GAAA,EAAA,EAAG,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACVA,cAAAA;AAAA,QAAC,QAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,8BAAA;AAAA,UACV,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,CAAS,MAAA,EAAO;AAAA,UACvC,QAAA,EAAA;AAAA;AAAA;AAED,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAAA,GAAa,CAAC,OAAA,KAA4B;AAC9C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACpC,IAAA,MAAM,OAAO,OAAA,GAAU,EAAA;AACvB,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,UAAS,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAAA,EACpD,CAAA;AAEA,EAAA,uBACEC,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAW,CAAA,gBAAA,EAAmB,SAAS,IAAI,KAAA,EAC9C,QAAA,EAAA;AAAA,oBAAAD,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,wBAAA,EAAyB,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,oBAEnDA,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,qBAAA,EACb,QAAA,kBAAAA,cAAAA,CAACW,sBAAA,EAAA,EAAU,KAAA,EAAO,UAAA,CAAW,yBAAA,EAA2B,IAAA,EAAM,YAAY,CAAA,EAC5E,CAAA;AAAA,oBAEAV,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,+BAAA,EACb,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,OAAE,QAAA,EAAA,4CAAA,EAA0C,CAAA;AAAA,sBAC7CA,cAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,sBAAA,EAAwB,qBAAW,gBAAA,EAAiB,CAAA;AAAA,sBACpEA,cAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,iBAAA,EAAe,CAAA;AAAA,sBAClBA,cAAAA,CAAC,QAAA,EAAA,EAAO,SAAA,EAAU,4BAAA,EAA8B,qBAAW,SAAA,EAAU;AAAA,KAAA,EACvE,CAAA;AAAA,IAEC,aAAA,KAAkB,QAAQ,aAAA,GAAgB,CAAA,oBACzCC,eAAAA,CAAC,GAAA,EAAA,EAAE,WAAU,yBAAA,EAA0B,QAAA,EAAA;AAAA,MAAA,kBAAA;AAAA,MACpB,WAAW,aAAa;AAAA,KAAA,EAC3C,CAAA;AAAA,oBAGFA,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,yBAAA,EACb,QAAA,EAAA;AAAA,sBAAAD,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,0DAAA,EAA2D,CAAA;AAAA,sBAC1EA,cAAAA,CAAC,GAAA,EAAA,EAAE,QAAA,EAAA,8BAAA,EAA4B;AAAA,KAAA,EACjC;AAAA,GAAA,EACF,CAAA;AAEJ;ACnLO,SAAS,iBAAA,CACd,OAAA,GAAoC,EAAC,EACZ;AACzB,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,oBAAA,GAAuBH,aAAO,KAAK,CAAA;AAGzC,EAAA,MAAM,EAAE,IAAA,EAAM,SAAA,EAAW,YAAA,EAAa,GAAI,IAAA;AAE1C,EAAA,MAAM;AAAA,IACJ,OAAA,GAAU,EAAA;AAAA,IACV,cAAA;AAAA,IACA,UAAA,GAAa,IAAA;AAAA,IACb,OAAA,EAAS,gBAAgB;AAAC,GAC5B,GAAI,OAAA;AAKJ,EAAA,MAAM,QAAA,GAAWC,iBAAAA;AAAA,IACf,CAAC,GAAA,KAAwB;AAEvB,MAAA,IAAI,IAAI,UAAA,CAAW,SAAS,KAAK,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC3D,QAAA,OAAO,GAAA;AAAA,MACT;AAGA,MAAA,MAAM,IAAA,GAAO,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAC5D,MAAA,MAAM,OAAO,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA,GAAM,IAAI,GAAG,CAAA,CAAA;AAEhD,MAAA,OAAO,IAAA,GAAO,IAAA;AAAA,IAChB,CAAA;AAAA,IACA,CAAC,OAAO;AAAA,GACV;AAMA,EAAA,MAAM,gBAAgB,MAA8B;AAClD,IAAA,IAAI,CAAC,MAAM,YAAA,EAAc;AACvB,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,YAAY,CAAA;AAAA,KAC5C;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,YAAA,GAAeA,iBAAAA;AAAA,IACnB,CAAC,cAAA,KAA0C;AACzC,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,cAAc,CAAA;AAG1C,MAAA,MAAM,aAAa,aAAA,EAAc;AACjC,MAAA,IAAI,WAAW,aAAA,EAAe;AAC5B,QAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,UAAA,CAAW,aAAa,CAAA;AAAA,MACvD;AAGA,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AACtD,QAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,MACxB,CAAC,CAAA;AAED,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,aAAa;AAAA,GAChB;AAKA,EAAA,MAAM,cAAA,GAAiBA,iBAAAA;AAAA,IACrB,OAAO,KAAa,IAAA,KAA0C;AAC5D,MAAA,MAAM,OAAA,GAAU,SAAS,GAAG,CAAA;AAC5B,MAAA,MAAM,OAAA,GAAU,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAE1C,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,QACpC,GAAG,IAAA;AAAA,QACH;AAAA,OACD,CAAA;AAGD,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,QAAA,cAAA,IAAiB;AAGjB,QAAA,IAAI,UAAA,IAAc,IAAA,IAAQ,CAAC,oBAAA,CAAqB,OAAA,EAAS;AAEvD,UAAA,oBAAA,CAAqB,OAAA,GAAU,IAAA;AAE/B,UAAA,IAAI;AAEF,YAAA,MAAM,YAAA,EAAa;AAGnB,YAAA,MAAM,UAAA,GAAa,YAAA,CAAa,IAAA,EAAM,OAAO,CAAA;AAC7C,YAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,OAAA,EAAS;AAAA,cACzC,GAAG,IAAA;AAAA,cACH,OAAA,EAAS;AAAA,aACV,CAAA;AAED,YAAA,OAAO,aAAA;AAAA,UACT,SAAS,KAAA,EAAO;AAEd,YAAA,OAAO,QAAA;AAAA,UACT,CAAA,SAAE;AAEA,YAAA,UAAA,CAAW,MAAM;AACf,cAAA,oBAAA,CAAqB,OAAA,GAAU,KAAA;AAAA,YACjC,GAAG,GAAI,CAAA;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,QAAA,EAAU,YAAA,EAAc,cAAA,EAAgB,UAAA,EAAY,MAAM,YAAY;AAAA,GACzE;AAKA,EAAA,MAAM,SAAA,GAAYA,iBAAAA;AAAA,IAChB,OAAgB,KAAa,IAAA,KAAmC;AAC9D,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,GAAA,EAAK,IAAI,CAAA;AAE/C,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,QAAQ,QAAA,CAAS,MAAM,KAAK,QAAA,CAAS,UAAU,KAAK,SAAS,CAAA;AAAA,SAC/D;AAAA,MACF;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,cAAc;AAAA,GACjB;AAEA,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA,EAAO,cAAA;AAAA,IACP;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { KeycloakConfig } from './types';\n\n/**\n * Default configuration values for Keycloak integration\n */\nexport const defaultConfig: Partial<KeycloakConfig> = {\n redirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n postLogoutRedirectUri: typeof window !== 'undefined' ? window.location.origin + '/' : '/',\n scope: 'openid profile email offline_access',\n\n features: {\n deviceFlow: false,\n sessionMonitor: true,\n autoRefresh: true,\n },\n\n silentRenew: {\n enabled: true,\n silentRedirectUri:\n typeof window !== 'undefined'\n ? window.location.origin + '/silent-renew.html'\n : '/silent-renew.html',\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both', // Check on startup AND retry on 401\n maxRefreshTokenLifetime: 2592000, // 30 days in seconds\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n useRefreshToken: true,\n },\n\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n storageType: 'session',\n },\n\n events: {},\n};\n","import type { UserManagerSettings } from 'oidc-client-ts';\nimport { WebStorageStateStore } from 'oidc-client-ts';\nimport type { KeycloakConfig } from './types';\nimport { defaultConfig } from './defaults';\n\n/**\n * Configuration builder for Keycloak integration\n */\nexport class KeycloakConfigBuilder {\n /**\n * Builds OIDC client configuration from Keycloak config\n *\n * @param userConfig - User-provided Keycloak configuration\n * @returns OIDC client settings ready for react-oidc-context\n * @throws Error if required fields are missing or invalid\n */\n static build(userConfig: KeycloakConfig): UserManagerSettings {\n // Validate required fields\n this.validate(userConfig);\n\n // Merge with defaults\n const config = this.mergeWithDefaults(userConfig);\n\n // Determine storage type\n const storageType = config.advanced!.storageType || 'session';\n const storage = storageType === 'local'\n ? window.localStorage\n : window.sessionStorage;\n\n const { useRefreshToken } = config.silentRenew!;\n\n // Build OIDC settings\n const oidcSettings: UserManagerSettings & { useRefreshToken?: boolean } = {\n authority: config.authority,\n client_id: config.clientId,\n redirect_uri: config.redirectUri!,\n post_logout_redirect_uri: config.postLogoutRedirectUri!,\n response_type: config.advanced!.responseType!,\n scope: config.scope!,\n automaticSilentRenew: config.silentRenew!.enabled!,\n loadUserInfo: config.advanced!.loadUserInfo!,\n silent_redirect_uri: config.silentRenew!.silentRedirectUri!,\n\n // Configure storage for user data and tokens\n userStore: new WebStorageStateStore({ store: storage }),\n\n // Add PKCE support (required for public clients)\n ...(config.advanced!.codeChallengeMethod && {\n response_mode: 'query',\n }),\n };\n\n if (useRefreshToken !== undefined) {\n oidcSettings.useRefreshToken = useRefreshToken;\n }\n\n return oidcSettings;\n }\n\n /**\n * Validates required configuration fields\n *\n * @param config - Configuration to validate\n * @throws Error if validation fails\n */\n private static validate(config: KeycloakConfig): void {\n if (!config.authority) {\n throw new Error('Keycloak authority is required');\n }\n\n if (!config.clientId) {\n throw new Error('Keycloak clientId is required');\n }\n\n // Validate URL format\n try {\n new URL(config.authority);\n } catch {\n throw new Error('Keycloak authority must be a valid URL');\n }\n }\n\n /**\n * Merges user configuration with defaults\n *\n * @param config - User configuration\n * @returns Merged configuration with all defaults applied\n */\n private static mergeWithDefaults(config: KeycloakConfig): Required<KeycloakConfig> {\n return {\n authority: config.authority,\n clientId: config.clientId,\n redirectUri: config.redirectUri ?? defaultConfig.redirectUri!,\n postLogoutRedirectUri:\n config.postLogoutRedirectUri ?? defaultConfig.postLogoutRedirectUri!,\n scope: config.scope ?? defaultConfig.scope!,\n features: {\n ...defaultConfig.features,\n ...config.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...config.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...config.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...config.events,\n },\n } as Required<KeycloakConfig>;\n }\n}\n\n/**\n * Helper function to get configuration from environment variables\n *\n * @returns Partial Keycloak configuration from environment\n */\nexport function getConfigFromEnv(): Partial<KeycloakConfig> {\n // Check if running in browser with Vite\n if (typeof import.meta === 'undefined') {\n return {};\n }\n\n // Type-safe access to import.meta.env\n const env = (import.meta as any).env;\n if (!env) {\n return {};\n }\n\n return {\n authority: env.VITE_KEYCLOAK_AUTHORITY as string | undefined,\n clientId: env.VITE_KEYCLOAK_CLIENT_ID as string | undefined,\n features: {\n deviceFlow: env.VITE_ENABLE_DEVICE_FLOW === 'true',\n sessionMonitor: env.VITE_ENABLE_SESSION_MONITOR === 'true',\n },\n };\n}\n","import { useAuth as useOidcAuth } from 'react-oidc-context';\n\n/**\n * Main authentication hook for accessing Keycloak authentication state and methods\n *\n * This hook provides access to the current user, authentication state, and methods\n * for signing in and out. It must be used within a KeycloakProvider component.\n *\n * @returns Authentication state and methods\n *\n * @example\n * ```tsx\n * import { useAuth } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const auth = useAuth();\n *\n * if (auth.isLoading) {\n * return <div>Loading...</div>;\n * }\n *\n * if (!auth.isAuthenticated) {\n * return <button onClick={() => auth.signinRedirect()}>Login</button>;\n * }\n *\n * return (\n * <div>\n * <p>Welcome, {auth.user?.profile?.name}</p>\n * <button onClick={() => auth.signoutRedirect()}>Logout</button>\n * </div>\n * );\n * }\n * ```\n *\n * @example Role checking\n * ```tsx\n * function AdminPanel() {\n * const auth = useAuth();\n * const roles = auth.user?.profile?.realm_access?.roles || [];\n *\n * if (!roles.includes('admin')) {\n * return <div>Access denied</div>;\n * }\n *\n * return <div>Admin panel content</div>;\n * }\n * ```\n */\nexport const useAuth = useOidcAuth;\n\nexport type {\n /**\n * Authentication context returned by useAuth\n */\n AuthContextProps as UseAuthReturn,\n} from 'react-oidc-context';\n","import { useEffect, useState, useCallback, useRef } from 'react';\nimport { useAuth } from './useAuth';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface UseTokenLifecycleOptions {\n /**\n * Keycloak configuration for token lifecycle settings\n */\n config: KeycloakConfig;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n\n /**\n * Callback when token refresh starts\n */\n onRefreshStart?: () => void;\n\n /**\n * Callback when token refresh succeeds\n */\n onRefreshSuccess?: () => void;\n\n /**\n * Callback when token refresh fails\n */\n onRefreshError?: (error: Error) => void;\n\n /**\n * Callback when refresh token lifetime expires\n */\n onRefreshTokenExpired?: () => void;\n}\n\nexport interface UseTokenLifecycleReturn {\n /**\n * Whether token is being refreshed\n */\n isRefreshing: boolean;\n\n /**\n * Whether refresh token has exceeded max lifetime\n */\n isRefreshTokenExpired: boolean;\n\n /**\n * Manually trigger token refresh\n */\n refreshToken: () => Promise<void>;\n\n /**\n * Check if tokens need refresh and do it if needed\n */\n checkAndRefreshTokens: () => Promise<boolean>;\n}\n\nconst STORAGE_KEY_PREFIX = 'keycloak_first_login_';\n\n/**\n * Hook to manage token lifecycle including startup refresh and max lifetime tracking\n *\n * This hook provides proactive token management:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Provides manual refresh capabilities\n *\n * @param options - Configuration options\n * @returns Token lifecycle methods and state\n *\n * @example\n * ```tsx\n * import { useTokenLifecycle } from 'antaeus.keycloak.react';\n *\n * function App() {\n * const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n * config: myConfig,\n * onRefreshStart: () => console.log('Refreshing...'),\n * onRefreshSuccess: () => console.log('Refreshed!'),\n * onRefreshError: (error) => console.error('Failed:', error),\n * });\n *\n * if (isRefreshing) return <div>Loading...</div>;\n * if (isRefreshTokenExpired) return <div>Please sign in again</div>;\n *\n * return <YourApp />;\n * }\n * ```\n */\nexport function useTokenLifecycle(\n options: UseTokenLifecycleOptions\n): UseTokenLifecycleReturn {\n const {\n config,\n debug = false,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n } = options;\n\n const auth = useAuth();\n const [isRefreshing, setIsRefreshing] = useState(false);\n const [isRefreshTokenExpired, setIsRefreshTokenExpired] = useState(false);\n const hasCheckedOnStartup = useRef(false);\n const supportsRefreshTokens = config.silentRenew?.useRefreshToken !== false;\n\n const log = useCallback(\n (message: string, ...args: any[]) => {\n if (debug) {\n console.log('[TokenLifecycle]', message, ...args);\n }\n },\n [debug]\n );\n\n /**\n * Get the storage key for tracking first login time\n */\n const getStorageKey = useCallback((): string => {\n const authority = config.authority;\n const clientId = config.clientId;\n return `${STORAGE_KEY_PREFIX}${authority}_${clientId}`;\n }, [config.authority, config.clientId]);\n\n /**\n * Store the first login timestamp\n */\n const storeFirstLoginTime = useCallback(() => {\n const key = getStorageKey();\n const existingTime = localStorage.getItem(key);\n\n if (!existingTime) {\n const now = Date.now();\n localStorage.setItem(key, now.toString());\n log('Stored first login time:', new Date(now).toISOString());\n }\n }, [getStorageKey, log]);\n\n /**\n * Check if refresh token has exceeded max lifetime\n */\n const checkRefreshTokenLifetime = useCallback((): boolean => {\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n\n // If no max lifetime configured, never expire\n if (!maxLifetime || maxLifetime <= 0) {\n return false;\n }\n\n const key = getStorageKey();\n const firstLoginStr = localStorage.getItem(key);\n\n if (!firstLoginStr) {\n // No first login recorded, store current time\n storeFirstLoginTime();\n return false;\n }\n\n const firstLoginTime = parseInt(firstLoginStr, 10);\n const now = Date.now();\n const elapsedSeconds = (now - firstLoginTime) / 1000;\n\n log('Refresh token lifetime check:', {\n firstLogin: new Date(firstLoginTime).toISOString(),\n elapsedSeconds,\n maxLifetime,\n isExpired: elapsedSeconds >= maxLifetime,\n });\n\n return elapsedSeconds >= maxLifetime;\n }, [config.silentRenew?.maxRefreshTokenLifetime, getStorageKey, log, storeFirstLoginTime]);\n\n /**\n * Manually refresh tokens\n */\n const refreshToken = useCallback(async (): Promise<void> => {\n // Atomic check-and-set to prevent race condition\n if (isRefreshing) {\n log('Refresh already in progress, skipping');\n return;\n }\n\n // Set refreshing flag immediately (before any async operations)\n setIsRefreshing(true);\n\n try {\n // Check if refresh token has exceeded max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime, cannot refresh');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n return;\n }\n\n onRefreshStart?.();\n log('Starting token refresh');\n\n await auth.signinSilent();\n\n log('Token refresh successful');\n onRefreshSuccess?.();\n } catch (error) {\n const err = error instanceof Error ? error : new Error(String(error));\n log('Token refresh failed:', err.message);\n onRefreshError?.(err);\n throw err;\n } finally {\n setIsRefreshing(false);\n }\n }, [\n isRefreshing,\n auth,\n checkRefreshTokenLifetime,\n onRefreshStart,\n onRefreshSuccess,\n onRefreshError,\n onRefreshTokenExpired,\n log,\n ]);\n\n /**\n * Check if tokens are expired or about to expire and refresh if needed\n */\n const checkAndRefreshTokens = useCallback(async (): Promise<boolean> => {\n if (!auth.user) {\n log('No user session, skipping token check');\n return false;\n }\n\n // Check refresh token max lifetime\n if (checkRefreshTokenLifetime()) {\n log('Refresh token exceeded max lifetime');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n\n try {\n await auth.removeUser();\n } catch (error) {\n log('Error removing user after max lifetime:', error);\n // Continue even if removeUser fails\n }\n\n return false;\n }\n\n const expiresAt = auth.user.expires_at;\n if (!expiresAt) {\n log('No expiration time found, skipping token check');\n return false;\n }\n\n const now = Math.floor(Date.now() / 1000);\n const threshold = config.silentRenew?.thresholdSeconds || 300;\n const timeUntilExpiry = expiresAt - now;\n\n log('Token expiration check:', {\n expiresAt: new Date(expiresAt * 1000).toISOString(),\n now: new Date(now * 1000).toISOString(),\n timeUntilExpiry,\n threshold,\n needsRefresh: timeUntilExpiry <= threshold,\n });\n\n // If token is expired or about to expire, refresh it\n if (timeUntilExpiry <= threshold) {\n try {\n await refreshToken();\n return true;\n } catch (error) {\n log('Failed to refresh tokens:', error);\n return false;\n }\n }\n\n log('Tokens are still valid, no refresh needed');\n return false;\n }, [\n auth,\n config.silentRenew?.thresholdSeconds,\n checkRefreshTokenLifetime,\n refreshToken,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n /**\n * Effect: Check and refresh tokens on startup if strategy includes 'startup'\n */\n useEffect(() => {\n const strategy = config.silentRenew?.refreshStrategy || 'both';\n const shouldCheckOnStartup = strategy === 'startup' || strategy === 'both';\n const hasRefreshToken = Boolean(auth.user?.refresh_token);\n\n if (!shouldCheckOnStartup || hasCheckedOnStartup.current) {\n return;\n }\n\n if (auth.isLoading) {\n return;\n }\n\n if (!auth.isAuthenticated) {\n if (!supportsRefreshTokens) {\n return;\n }\n\n if (!auth.user || !hasRefreshToken) {\n return;\n }\n }\n\n hasCheckedOnStartup.current = true;\n log(\n 'Running startup token check with strategy:',\n strategy,\n 'using refresh token:',\n !auth.isAuthenticated && supportsRefreshTokens\n );\n\n checkAndRefreshTokens().catch((error) => {\n log('Startup token check failed:', error);\n });\n }, [\n auth.isAuthenticated,\n auth.isLoading,\n auth.user,\n config.silentRenew?.refreshStrategy,\n supportsRefreshTokens,\n checkAndRefreshTokens,\n log,\n ]);\n\n /**\n * Effect: prevent re-running startup logic until prerequisites change\n */\n useEffect(() => {\n if (hasCheckedOnStartup.current) {\n const hasUser = Boolean(auth.user);\n const hasRefreshToken = Boolean(auth.user?.refresh_token);\n if (auth.isLoading || (!auth.isAuthenticated && (!supportsRefreshTokens || !hasUser || !hasRefreshToken))) {\n hasCheckedOnStartup.current = false;\n }\n }\n }, [auth.isAuthenticated, auth.isLoading, auth.user, supportsRefreshTokens]);\n\n /**\n * Effect: Store first login time when user logs in\n */\n useEffect(() => {\n if (auth.user && !auth.isLoading) {\n storeFirstLoginTime();\n }\n }, [auth.user, auth.isLoading, storeFirstLoginTime]);\n\n /**\n * Effect: Check refresh token lifetime periodically\n */\n useEffect(() => {\n if (!auth.isAuthenticated || auth.isLoading) {\n return;\n }\n\n const maxLifetime = config.silentRenew?.maxRefreshTokenLifetime;\n if (!maxLifetime || maxLifetime <= 0) {\n return;\n }\n\n // Check every 5 minutes\n const intervalId = setInterval(() => {\n if (checkRefreshTokenLifetime()) {\n log('Refresh token expired during periodic check');\n setIsRefreshTokenExpired(true);\n onRefreshTokenExpired?.();\n\n // Clear the first login timestamp and sign out\n const key = getStorageKey();\n localStorage.removeItem(key);\n\n auth.removeUser().catch((error) => {\n log('Error removing user during periodic check:', error);\n // Continue even if removeUser fails\n });\n }\n }, 5 * 60 * 1000);\n\n return () => clearInterval(intervalId);\n }, [\n auth,\n config.silentRenew?.maxRefreshTokenLifetime,\n checkRefreshTokenLifetime,\n onRefreshTokenExpired,\n getStorageKey,\n log,\n ]);\n\n return {\n isRefreshing,\n isRefreshTokenExpired,\n refreshToken,\n checkAndRefreshTokens,\n };\n}\n","import React, { useState, useCallback } from 'react';\nimport { useTokenLifecycle } from '../hooks/useTokenLifecycle';\nimport type { KeycloakConfig } from '../config/types';\n\nexport interface TokenLifecycleManagerProps {\n /**\n * Keycloak configuration\n */\n config: KeycloakConfig;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging\n * @default false\n */\n debug?: boolean;\n}\n\n/**\n * Component that manages token lifecycle including startup refresh and max lifetime tracking\n *\n * This component wraps your app and automatically:\n * - Checks tokens on app startup and refreshes if needed\n * - Tracks refresh token max lifetime\n * - Shows optional loading indicator during refresh\n *\n * @example\n * ```tsx\n * <TokenLifecycleManager config={config} debug={true}>\n * <YourApp />\n * </TokenLifecycleManager>\n * ```\n */\nexport const TokenLifecycleManager: React.FC<TokenLifecycleManagerProps> = ({\n config,\n children,\n debug = false,\n}) => {\n const [showLoading, setShowLoading] = useState(false);\n\n const handleRefreshStart = useCallback(() => {\n if (config.silentRenew?.showLoadingIndicator) {\n setShowLoading(true);\n }\n }, [config.silentRenew?.showLoadingIndicator]);\n\n const handleRefreshSuccess = useCallback(() => {\n setShowLoading(false);\n }, []);\n\n const handleRefreshError = useCallback((error: Error) => {\n setShowLoading(false);\n if (debug) {\n console.error('[TokenLifecycleManager] Token refresh failed:', error);\n }\n config.events?.onSilentRenewError?.(error);\n }, [config.events, debug]);\n\n const handleRefreshTokenExpired = useCallback(() => {\n setShowLoading(false);\n if (debug) {\n console.warn('[TokenLifecycleManager] Refresh token exceeded max lifetime');\n }\n config.events?.onTokenExpired?.();\n }, [config.events, debug]);\n\n const { isRefreshing, isRefreshTokenExpired } = useTokenLifecycle({\n config,\n debug,\n onRefreshStart: handleRefreshStart,\n onRefreshSuccess: handleRefreshSuccess,\n onRefreshError: handleRefreshError,\n onRefreshTokenExpired: handleRefreshTokenExpired,\n });\n\n // If refresh token expired, show message and require re-authentication\n if (isRefreshTokenExpired) {\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n padding: '20px',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n backgroundColor: 'white',\n padding: '40px',\n borderRadius: '8px',\n boxShadow: '0 2px 8px rgba(0,0,0,0.1)',\n maxWidth: '400px',\n }}\n >\n <h2 style={{ margin: '0 0 16px 0', color: '#333' }}>Session Expired</h2>\n <p style={{ margin: '0 0 24px 0', color: '#666' }}>\n Your session has been inactive for too long. Please sign in again to continue.\n </p>\n <button\n onClick={() => window.location.reload()}\n style={{\n padding: '12px 24px',\n backgroundColor: '#007bff',\n color: 'white',\n border: 'none',\n borderRadius: '4px',\n fontSize: '16px',\n cursor: 'pointer',\n fontWeight: '500',\n }}\n >\n Sign In Again\n </button>\n </div>\n </div>\n );\n }\n\n // Show loading indicator during refresh if configured\n if (showLoading && isRefreshing) {\n const message = config.silentRenew?.loadingMessage || 'Refreshing session...';\n\n return (\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n justifyContent: 'center',\n height: '100vh',\n fontFamily: 'system-ui, -apple-system, sans-serif',\n backgroundColor: '#f5f5f5',\n }}\n >\n <div\n style={{\n display: 'flex',\n flexDirection: 'column',\n alignItems: 'center',\n gap: '16px',\n }}\n >\n <div\n style={{\n width: '40px',\n height: '40px',\n border: '4px solid #e0e0e0',\n borderTop: '4px solid #007bff',\n borderRadius: '50%',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ margin: 0, color: '#666', fontSize: '16px' }}>{message}</p>\n </div>\n <style>\n {`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}\n </style>\n </div>\n );\n }\n\n // Normal rendering\n return <>{children}</>;\n};\n","import React, { useEffect, useState, useCallback } from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface SessionMonitorProps {\n /**\n * Position on screen\n * @default 'top-right'\n */\n position?: 'top-left' | 'top-right' | 'bottom-left' | 'bottom-right';\n\n /**\n * Warning threshold in seconds (yellow state)\n * @default 300 (5 minutes)\n */\n warningThreshold?: number;\n\n /**\n * Critical threshold in seconds (red state)\n * @default 60 (1 minute)\n */\n criticalThreshold?: number;\n\n /**\n * Show progress bar\n * @default true\n */\n showProgressBar?: boolean;\n\n /**\n * Allow minimize/expand\n * @default true\n */\n minimizable?: boolean;\n\n /**\n * Start minimized\n * @default false\n */\n startMinimized?: boolean;\n\n /**\n * Custom CSS class names\n */\n className?: string;\n\n /**\n * Callback when warning threshold is reached\n */\n onWarning?: (secondsRemaining: number) => void;\n\n /**\n * Callback when critical threshold is reached\n */\n onCritical?: (secondsRemaining: number) => void;\n\n /**\n * Callback when session expires\n */\n onExpired?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Session monitoring component with countdown timer\n *\n * Displays the time remaining until the user's session expires. Shows visual\n * warnings when the session is about to expire and triggers callbacks for\n * custom handling.\n *\n * @example Basic usage\n * ```tsx\n * import { SessionMonitor } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <>\n * <SessionMonitor />\n * <YourApp />\n * </>\n * );\n * }\n * ```\n *\n * @example With custom thresholds\n * ```tsx\n * <SessionMonitor\n * warningThreshold={600} // 10 minutes\n * criticalThreshold={120} // 2 minutes\n * onWarning={(seconds) => {\n * console.log(`Session expiring in ${seconds} seconds`);\n * }}\n * />\n * ```\n *\n * @example Custom position and style\n * ```tsx\n * <SessionMonitor\n * position=\"bottom-left\"\n * showProgressBar={false}\n * minimizable={false}\n * />\n * ```\n */\nexport const SessionMonitor: React.FC<SessionMonitorProps> = ({\n position = 'top-right',\n warningThreshold = 300, // 5 minutes\n criticalThreshold = 60, // 1 minute\n showProgressBar = true,\n minimizable = true,\n startMinimized = false,\n className = '',\n onWarning,\n onCritical,\n onExpired,\n style,\n}) => {\n const auth = useAuth();\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const [initialTimeRemaining, setInitialTimeRemaining] = useState<number | null>(null);\n const [minimized, setMinimized] = useState(startMinimized);\n const [warningTriggered, setWarningTriggered] = useState(false);\n const [criticalTriggered, setCriticalTriggered] = useState(false);\n\n // Update time remaining every second\n useEffect(() => {\n if (!auth.isAuthenticated || !auth.user?.expires_at) {\n setTimeRemaining(null);\n setInitialTimeRemaining(null);\n return;\n }\n\n let logoutTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n const updateTimeRemaining = () => {\n const expiresAt = auth.user!.expires_at!;\n const now = Math.floor(Date.now() / 1000);\n const remaining = expiresAt - now;\n\n // Store initial time remaining on first calculation\n if (initialTimeRemaining === null && remaining > 0) {\n setInitialTimeRemaining(remaining);\n }\n\n if (remaining <= 0) {\n setTimeRemaining(0);\n\n // Trigger expired callback\n onExpired?.();\n\n // Auto logout after 2 seconds (with cleanup)\n logoutTimeoutId = setTimeout(() => {\n auth.signoutRedirect();\n }, 2000);\n } else {\n setTimeRemaining(remaining);\n\n // Trigger callbacks once\n if (remaining <= criticalThreshold && !criticalTriggered) {\n setCriticalTriggered(true);\n onCritical?.(remaining);\n } else if (remaining <= warningThreshold && !warningTriggered) {\n setWarningTriggered(true);\n onWarning?.(remaining);\n }\n }\n };\n\n updateTimeRemaining();\n const interval = setInterval(updateTimeRemaining, 1000);\n\n return () => {\n clearInterval(interval);\n if (logoutTimeoutId) {\n clearTimeout(logoutTimeoutId);\n }\n };\n }, [\n auth,\n warningThreshold,\n criticalThreshold,\n warningTriggered,\n criticalTriggered,\n initialTimeRemaining,\n onWarning,\n onCritical,\n onExpired,\n ]);\n\n // Reset warning flags when thresholds change\n useEffect(() => {\n if (timeRemaining && timeRemaining > warningThreshold) {\n setWarningTriggered(false);\n setCriticalTriggered(false);\n }\n }, [timeRemaining, warningThreshold]);\n\n // Format time as MM:SS\n const formatTime = useCallback((seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n }, []);\n\n // Get status class based on time remaining\n const getStatusClass = useCallback((): string => {\n if (!timeRemaining) return 'normal';\n if (timeRemaining <= criticalThreshold) return 'critical';\n if (timeRemaining <= warningThreshold) return 'warning';\n return 'normal';\n }, [timeRemaining, warningThreshold, criticalThreshold]);\n\n // Calculate progress percentage\n const getProgress = useCallback((): number => {\n if (!timeRemaining || !initialTimeRemaining) return 100;\n return Math.max(0, Math.min(100, (timeRemaining / initialTimeRemaining) * 100));\n }, [timeRemaining, initialTimeRemaining]);\n\n // Don't render if not authenticated or no time info\n if (!auth.isAuthenticated || timeRemaining === null) {\n return null;\n }\n\n const baseClass = 'kc-session-monitor';\n const positionClass = `kc-session-monitor--${position}`;\n const statusClass = `kc-session-monitor--${getStatusClass()}`;\n const minimizedClass = minimized ? 'kc-session-monitor--minimized' : '';\n const classes = `${baseClass} ${positionClass} ${statusClass} ${minimizedClass} ${className}`.trim();\n\n const progress = getProgress();\n\n return (\n <div className={classes} style={style}>\n {minimizable && (\n <button\n className=\"kc-session-monitor__toggle\"\n onClick={() => setMinimized(!minimized)}\n aria-label={minimized ? 'Expand session monitor' : 'Minimize session monitor'}\n title={minimized ? 'Expand' : 'Minimize'}\n >\n {minimized ? '▲' : '▼'}\n </button>\n )}\n\n {!minimized && (\n <>\n <div className=\"kc-session-monitor__content\">\n <span className=\"kc-session-monitor__label\">\n {timeRemaining === 0 ? 'Session expired' : 'Session expires in:'}\n </span>\n <span className=\"kc-session-monitor__time\">\n {formatTime(timeRemaining)}\n </span>\n </div>\n\n {showProgressBar && (\n <div className=\"kc-session-monitor__progress-bar\">\n <div\n className=\"kc-session-monitor__progress-fill\"\n style={{ width: `${progress}%` }}\n role=\"progressbar\"\n aria-valuenow={progress}\n aria-valuemin={0}\n aria-valuemax={100}\n />\n </div>\n )}\n </>\n )}\n </div>\n );\n};\n","export type TokenListener = (token: string | null) => void;\n\n/**\n * Minimal bridge to expose the current Keycloak access token outside React.\n * Consumers can subscribe to token changes or fetch the latest value on demand.\n */\nexport class TokenBridge {\n private currentToken: string | null = null;\n private listeners = new Set<TokenListener>();\n\n /**\n * Update the tracked token and notify subscribers when it changes.\n */\n setToken(token: string | null): void {\n if (this.currentToken === token) {\n return;\n }\n this.currentToken = token;\n for (const listener of this.listeners) {\n try {\n listener(token);\n } catch (error) {\n // Swallow listener errors so a single consumer cannot break updates.\n console.error('[TokenBridge] Listener threw error:', error);\n }\n }\n }\n\n /**\n * Read the most recent token value.\n */\n getToken(): string | null {\n return this.currentToken;\n }\n\n /**\n * Convenience helper for async callers.\n */\n async getTokenAsync(): Promise<string | null> {\n return this.currentToken;\n }\n\n /**\n * Subscribe to token changes. Returns an unsubscribe callback.\n */\n subscribe(listener: TokenListener): () => void {\n this.listeners.add(listener);\n // Provide the current value immediately\n listener(this.currentToken);\n return () => {\n this.listeners.delete(listener);\n };\n }\n}\n\n/**\n * Factory helper to create an isolated token bridge.\n */\nexport const createTokenBridge = (): TokenBridge => new TokenBridge();\n\n/**\n * Default shared bridge for simple scenarios.\n */\nexport const defaultTokenBridge = createTokenBridge();\n","import { useEffect } from 'react';\nimport { useAuth } from '../hooks/useAuth';\nimport {\n defaultTokenBridge,\n type TokenBridge,\n} from '../utils/tokenBridge';\n\nexport interface TokenBridgeProps {\n /**\n * Optional custom bridge instance. Defaults to the shared global bridge.\n */\n bridge?: TokenBridge;\n}\n\n/**\n * Synchronises the current Keycloak access token into an imperative TokenBridge.\n * Place this component inside your application tree (after KeycloakProvider).\n */\nexport const TokenBridgeSync: React.FC<TokenBridgeProps> = ({\n bridge = defaultTokenBridge,\n}) => {\n const auth = useAuth();\n\n useEffect(() => {\n const token = auth.user?.access_token ?? null;\n bridge.setToken(token);\n }, [auth.user, bridge]);\n\n // Also ensure loading/error changes clear token when auth is disabled\n useEffect(() => {\n if (!auth.isAuthenticated) {\n bridge.setToken(null);\n }\n }, [auth.isAuthenticated, bridge]);\n\n return null;\n};\n","import type { KeycloakConfig } from './types';\n\n/**\n * Configuration preset types\n */\nexport type ConfigPreset = 'default' | 'mobile' | 'high-security' | 'long-running' | 'development';\n\n/**\n * Configuration presets for common use cases\n *\n * These presets provide optimized configurations for different application types\n * and security requirements. All presets can be further customized by overriding\n * specific properties.\n */\nexport const CONFIG_PRESETS: Record<ConfigPreset, Partial<KeycloakConfig>> = {\n /**\n * Default preset - Balanced configuration for most applications\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive token refresh on startup + reactive on 401\n * - Silent background token refresh\n * - Session monitoring enabled\n * - Auto token refresh enabled\n *\n * Best for: Most web applications, dashboards, internal tools\n */\n default: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300, // 5 minutes\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Mobile/PWA preset - Optimized for mobile and progressive web apps\n *\n * Features:\n * - 30-day refresh token lifetime\n * - Proactive startup refresh (apps close frequently)\n * - Loading indicator during refresh (better UX for app reopening)\n * - Session monitoring enabled\n *\n * Best for: Mobile apps, PWAs, apps that frequently close/reopen\n */\n mobile: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'startup', // Focus on startup refresh\n maxRefreshTokenLifetime: 2592000, // 30 days\n showLoadingIndicator: true, // Show loading for better UX\n loadingMessage: 'Restoring your session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * High Security preset - Strict security for sensitive applications\n *\n * Features:\n * - 24-hour forced re-authentication\n * - Proactive + reactive token refresh\n * - 10-minute refresh threshold (earlier refresh)\n * - Silent refresh (no UI hints about security measures)\n * - Session monitoring enabled\n *\n * Best for: Banking, healthcare, admin panels, sensitive data applications\n */\n 'high-security': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 600, // 10 minutes (more aggressive)\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 86400, // 24 hours only\n showLoadingIndicator: false, // Silent for security\n loadingMessage: 'Validating session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Long-Running preset - Optimized for desktop apps and long sessions\n *\n * Features:\n * - 7-day refresh token lifetime\n * - Proactive + reactive token refresh\n * - Silent background refresh\n * - Session monitoring enabled\n *\n * Best for: Desktop applications, monitoring dashboards, always-on tools\n */\n 'long-running': {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 604800, // 7 days\n showLoadingIndicator: false,\n loadingMessage: 'Refreshing session...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n\n /**\n * Development preset - Convenient settings for development\n *\n * Features:\n * - No refresh token lifetime limit (never expires)\n * - Proactive + reactive token refresh\n * - Loading indicators visible (easier debugging)\n * - Session monitoring enabled\n * - More verbose feedback\n *\n * Best for: Local development, testing, debugging\n * WARNING: Do not use in production!\n */\n development: {\n scope: 'openid profile email offline_access',\n features: {\n autoRefresh: true,\n sessionMonitor: true,\n deviceFlow: false,\n },\n silentRenew: {\n enabled: true,\n thresholdSeconds: 300,\n refreshStrategy: 'both',\n maxRefreshTokenLifetime: 0, // No limit (for convenience)\n showLoadingIndicator: true, // Show for debugging\n loadingMessage: '[DEV] Refreshing tokens...',\n },\n advanced: {\n responseType: 'code',\n codeChallengeMethod: 'S256',\n loadUserInfo: true,\n automaticSilentSignIn: false,\n },\n },\n};\n\n/**\n * Get a configuration preset by name\n *\n * @param preset - The preset name\n * @returns Partial Keycloak configuration for the preset\n *\n * @example\n * ```typescript\n * const config = getConfigPreset('mobile');\n * ```\n */\nexport function getConfigPreset(preset: ConfigPreset): Partial<KeycloakConfig> {\n return CONFIG_PRESETS[preset];\n}\n\n/**\n * Merge a preset with custom configuration\n *\n * Custom configuration takes precedence over preset values.\n * Use this to start with a preset and override specific properties.\n *\n * @param preset - The preset name\n * @param customConfig - Custom configuration to merge\n * @returns Merged configuration\n *\n * @example\n * ```typescript\n * const config = mergeWithPreset('mobile', {\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override to 7 days\n * }\n * });\n * ```\n */\nexport function mergeWithPreset(\n preset: ConfigPreset,\n customConfig: Partial<KeycloakConfig>\n): Partial<KeycloakConfig> {\n const presetConfig = getConfigPreset(preset);\n\n return {\n ...presetConfig,\n ...customConfig,\n features: {\n ...presetConfig.features,\n ...customConfig.features,\n },\n silentRenew: {\n ...presetConfig.silentRenew,\n ...customConfig.silentRenew,\n },\n advanced: {\n ...presetConfig.advanced,\n ...customConfig.advanced,\n },\n events: {\n ...presetConfig.events,\n ...customConfig.events,\n },\n };\n}\n","import React, { createContext, useContext } from 'react';\n\n/**\n * Storage configuration context\n * Provides information about which storage mechanism is being used\n */\ninterface StorageConfigContextType {\n storageType: 'session' | 'local';\n storage: Storage;\n}\n\nconst StorageConfigContext = createContext<StorageConfigContextType>({\n storageType: 'session',\n storage: typeof window !== 'undefined' ? window.sessionStorage : ({} as Storage),\n});\n\nexport const StorageConfigProvider: React.FC<{\n storageType: 'session' | 'local';\n children: React.ReactNode;\n}> = ({ storageType, children }) => {\n const storage = storageType === 'local' ? window.localStorage : window.sessionStorage;\n\n return (\n <StorageConfigContext.Provider value={{ storageType, storage }}>\n {children}\n </StorageConfigContext.Provider>\n );\n};\n\n/**\n * Hook to access the configured storage\n */\nexport const useStorageConfig = () => useContext(StorageConfigContext);\n","import { createContext, useContext } from 'react';\n\nexport type KeycloakDisabledReason = 'disabled' | 'missing-config';\n\nexport interface KeycloakStatus {\n /**\n * Whether the Keycloak integration is enabled by configuration.\n */\n isEnabled: boolean;\n /**\n * Whether the minimum configuration (authority + clientId) is present.\n */\n isConfigured: boolean;\n /**\n * Provides additional context when integration is disabled.\n */\n reason?: KeycloakDisabledReason;\n}\n\nconst defaultStatus: KeycloakStatus = {\n isEnabled: true,\n isConfigured: true,\n};\n\nconst KeycloakStatusContext = createContext<KeycloakStatus>(defaultStatus);\n\nexport const KeycloakStatusProvider = KeycloakStatusContext.Provider;\n\nexport const useKeycloakStatus = (): KeycloakStatus =>\n useContext(KeycloakStatusContext);\n","import React, { useCallback, useEffect, useMemo } from 'react';\nimport {\n AuthProvider as OidcAuthProvider,\n AuthContext,\n type AuthContextProps,\n} from 'react-oidc-context';\nimport type {\n QuerySessionStatusArgs,\n RevokeTokensTypes,\n SessionStatus,\n SigninPopupArgs,\n SigninRedirectArgs,\n SigninResourceOwnerCredentialsArgs,\n SigninSilentArgs,\n SignoutPopupArgs,\n SignoutRedirectArgs,\n SignoutSilentArgs,\n User,\n UserManagerEvents,\n UserManagerSettings,\n} from 'oidc-client-ts';\nimport type { KeycloakConfig } from '../config/types';\nimport { KeycloakConfigBuilder } from '../config/KeycloakConfig';\nimport { TokenLifecycleManager } from './TokenLifecycleManager';\nimport { SessionMonitor } from './SessionMonitor';\nimport { TokenBridgeSync } from './TokenBridge';\nimport { mergeWithPreset, type ConfigPreset } from '../config/presets';\nimport { defaultConfig } from '../config/defaults';\nimport { StorageConfigProvider } from '../contexts/StorageConfigContext';\nimport {\n KeycloakStatusProvider,\n type KeycloakStatus,\n} from '../contexts/KeycloakStatusContext';\nimport type { TokenBridge } from '../utils/tokenBridge';\n\nconst createDisabledEvents = (): UserManagerEvents => {\n const noop = () => undefined;\n const noopSubscription = () => () => undefined;\n const noopAsync = async () => undefined;\n\n const events: Partial<UserManagerEvents> = {\n addAccessTokenExpiring: noopSubscription,\n removeAccessTokenExpiring: noop,\n addAccessTokenExpired: noopSubscription,\n removeAccessTokenExpired: noop,\n addSilentRenewError: noopSubscription,\n removeSilentRenewError: noop,\n addUserLoaded: noopSubscription,\n removeUserLoaded: noop,\n addUserUnloaded: noopSubscription,\n removeUserUnloaded: noop,\n addUserSignedIn: noopSubscription,\n removeUserSignedIn: noop,\n addUserSignedOut: noopSubscription,\n removeUserSignedOut: noop,\n addUserSessionChanged: noopSubscription,\n removeUserSessionChanged: noop,\n load: noopAsync,\n unload: noopAsync,\n };\n\n return events as UserManagerEvents;\n};\n\nconst disabledEvents = createDisabledEvents();\n\nconst disabledSettings: UserManagerSettings = {\n authority: '',\n client_id: '',\n redirect_uri: 'http://localhost/disabled',\n response_type: 'code',\n scope: '',\n};\n\nconst disabledError = () =>\n new Error('Keycloak integration is disabled for this environment.');\n\nconst disabledAsync = async <T,>(): Promise<T> => {\n throw disabledError();\n};\n\nconst disabledAuthContext: AuthContextProps = {\n settings: disabledSettings,\n events: disabledEvents,\n clearStaleState: async (): Promise<void> => undefined,\n removeUser: async (): Promise<void> => undefined,\n signinPopup: (_args?: SigninPopupArgs) => disabledAsync<User>(),\n signinSilent: async (_args?: SigninSilentArgs): Promise<User | null> => null,\n signinRedirect: (_args?: SigninRedirectArgs) => disabledAsync<void>(),\n signinResourceOwnerCredentials: (\n _args: SigninResourceOwnerCredentialsArgs\n ) => disabledAsync<User>(),\n signoutRedirect: async (_args?: SignoutRedirectArgs): Promise<void> =>\n undefined,\n signoutPopup: async (_args?: SignoutPopupArgs): Promise<void> => undefined,\n signoutSilent: async (_args?: SignoutSilentArgs): Promise<void> => undefined,\n querySessionStatus: async (\n _args?: QuerySessionStatusArgs\n ): Promise<SessionStatus | null> => null,\n revokeTokens: async (_types?: RevokeTokensTypes): Promise<void> => undefined,\n startSilentRenew: (): void => undefined,\n stopSilentRenew: (): void => undefined,\n user: null,\n isLoading: false,\n isAuthenticated: false,\n activeNavigator: undefined,\n error: undefined,\n};\n\n/**\n * Props for zero-config mode (simplified setup)\n */\nexport interface KeycloakProviderZeroConfigProps {\n /**\n * Keycloak realm authority URL (e.g., https://sso.example.com/realms/myrealm)\n */\n authority: string;\n\n /**\n * Client ID registered in Keycloak\n */\n clientId: string;\n\n /**\n * Configuration preset to use\n * @default 'default'\n */\n preset?: ConfigPreset;\n\n /**\n * Toggle to disable Keycloak integration entirely.\n * When false, children render with a stub auth context.\n * @default true\n */\n enabled?: boolean;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n\n /**\n * Override specific configuration properties\n * Use this to customize preset or zero-config defaults\n */\n config?: Partial<Omit<KeycloakConfig, 'authority' | 'clientId'>>;\n\n /**\n * Optional token bridge instance for exposing tokens outside React.\n */\n tokenBridge?: TokenBridge;\n}\n\n/**\n * Props for full-config mode (advanced setup)\n */\nexport interface KeycloakProviderFullConfigProps {\n /**\n * Full Keycloak configuration object\n */\n config: KeycloakConfig;\n\n /**\n * Toggle to disable Keycloak integration entirely.\n * When false, children render with a stub auth context.\n * @default true\n */\n enabled?: boolean;\n\n /**\n * Child components to render\n */\n children: React.ReactNode;\n\n /**\n * Enable debug logging to console\n * @default false\n */\n debug?: boolean;\n\n /**\n * Optional token bridge instance for exposing tokens outside React.\n */\n tokenBridge?: TokenBridge;\n}\n\n/**\n * Combined props type\n */\nexport type KeycloakProviderProps = KeycloakProviderZeroConfigProps | KeycloakProviderFullConfigProps;\n\n/**\n * Type guard to check if using zero-config mode\n */\nfunction isZeroConfig(props: KeycloakProviderProps): props is KeycloakProviderZeroConfigProps {\n return 'authority' in props && 'clientId' in props;\n}\n\n/**\n * Main Keycloak authentication provider component\n *\n * This component wraps your application to provide authentication context using Keycloak.\n * It supports both zero-config mode (for simplicity) and full-config mode (for advanced use cases).\n *\n * ## Zero-Config Mode (Recommended)\n *\n * Minimal setup with sensible defaults and automatic feature enablement.\n *\n * @example Zero-config (simplest)\n * ```tsx\n * import { KeycloakProvider } from 'antaeus.keycloak.react';\n *\n * function App() {\n * return (\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * >\n * <YourApp />\n * </KeycloakProvider>\n * );\n * }\n * ```\n *\n * @example Zero-config with preset\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"mobile\" // or 'high-security', 'long-running', 'development'\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * @example Zero-config with overrides\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * preset=\"default\"\n * config={{\n * silentRenew: {\n * maxRefreshTokenLifetime: 604800, // Override: 7 days instead of 30\n * showLoadingIndicator: true,\n * useRefreshToken: true, // Explicitly ensure refresh tokens are used when available\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * @example Using localStorage to persist sessions across tabs/windows\n * ```tsx\n * <KeycloakProvider\n * authority=\"https://sso.example.com/realms/myrealm\"\n * clientId=\"my-app\"\n * config={{\n * advanced: {\n * storageType: 'local', // Use localStorage instead of sessionStorage\n * }\n * }}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Full-Config Mode (Advanced)\n *\n * Complete control over all configuration options.\n *\n * @example Full configuration\n * ```tsx\n * <KeycloakProvider\n * config={{\n * authority: 'https://sso.example.com/realms/myrealm',\n * clientId: 'my-app',\n * redirectUri: window.location.origin,\n * scope: 'openid profile email offline_access',\n * features: {\n * autoRefresh: true,\n * sessionMonitor: true,\n * },\n * silentRenew: {\n * enabled: true,\n * refreshStrategy: 'both',\n * maxRefreshTokenLifetime: 2592000,\n * useRefreshToken: true,\n * },\n * events: {\n * onLogin: (user) => console.log('User logged in', user),\n * onError: (error) => sendToSentry(error),\n * }\n * }}\n * debug={true}\n * >\n * <YourApp />\n * </KeycloakProvider>\n * ```\n *\n * ## Features Automatically Enabled\n *\n * When using zero-config or presets, the following features are automatically enabled:\n * - ✅ Automatic token refresh (before expiration)\n * - ✅ Token lifecycle management (refresh on app startup)\n * - ✅ Session monitoring UI (countdown timer)\n * - ✅ Silent renew (background token refresh)\n * - ✅ Refresh token grant fallback on app restart\n * - ✅ Error notifications (user-friendly messages)\n * - ✅ 401 retry logic (automatic token refresh on API errors)\n * - ✅ Maximum refresh token lifetime (security control)\n * - ✅ PKCE (for secure public clients)\n *\n * All features can be disabled or customized via configuration overrides.\n */\nexport const KeycloakProvider: React.FC<KeycloakProviderProps> = (props) => {\n const { children, debug = false } = props;\n\n const status: KeycloakStatus = useMemo(() => {\n const enabledFlag = props.enabled ?? true;\n const hasAuthority = isZeroConfig(props)\n ? Boolean(props.authority)\n : Boolean(props.config.authority);\n const hasClientId = isZeroConfig(props)\n ? Boolean(props.clientId)\n : Boolean(props.config.clientId);\n\n return {\n isEnabled: enabledFlag,\n isConfigured: hasAuthority && hasClientId,\n reason: !enabledFlag\n ? 'disabled'\n : !hasAuthority || !hasClientId\n ? 'missing-config'\n : undefined,\n };\n }, [props]);\n\n const effectiveEnabled = status.isEnabled && status.isConfigured;\n\n useEffect(() => {\n if (!effectiveEnabled && props.tokenBridge) {\n props.tokenBridge.setToken(null);\n }\n }, [effectiveEnabled, props.tokenBridge]);\n\n if (!effectiveEnabled) {\n return (\n <KeycloakStatusProvider value={status}>\n <AuthContext.Provider value={disabledAuthContext}>\n <StorageConfigProvider storageType=\"session\">\n {children}\n </StorageConfigProvider>\n </AuthContext.Provider>\n </KeycloakStatusProvider>\n );\n }\n\n // Build configuration based on mode\n const config: KeycloakConfig = isZeroConfig(props)\n ? buildZeroConfig(props)\n : props.config;\n\n // Build OIDC configuration from Keycloak config\n const oidcConfig = KeycloakConfigBuilder.build(config);\n\n // Logging helper\n const log = useCallback(\n (level: 'info' | 'warn' | 'error', message: string, ...args: any[]) => {\n if (debug) {\n const prefix = '[KeycloakProvider]';\n switch (level) {\n case 'info':\n console.log(prefix, message, ...args);\n break;\n case 'warn':\n console.warn(prefix, message, ...args);\n break;\n case 'error':\n console.error(prefix, message, ...args);\n break;\n }\n }\n },\n [debug]\n );\n\n // Event handlers with built-in functionality\n const onSigninCallback = useCallback(\n (_user: User | void): void => {\n log('info', 'Sign in successful');\n\n // Clean up query parameters from URL after redirect\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n if (_user) {\n config.events?.onLogin?.(_user as User);\n }\n },\n [config.events, log]\n );\n\n const onSignoutCallback = useCallback((): void => {\n log('info', 'Sign out successful');\n\n // Clean up URL\n window.history.replaceState({}, document.title, window.location.pathname);\n\n // Call user-provided callback\n config.events?.onLogout?.();\n }, [config.events, log]);\n\n const onRemoveUser = useCallback((): void => {\n log('warn', 'User removed from storage - token validation likely failed');\n }, [log]);\n\n\n\n // Check if SessionMonitor should be shown\n const showSessionMonitor = config.features?.sessionMonitor !== false;\n\n // Get storage type from config\n const storageType = config.advanced?.storageType || 'session';\n\n return (\n <KeycloakStatusProvider value={status}>\n <OidcAuthProvider\n {...oidcConfig}\n onSigninCallback={onSigninCallback}\n onSignoutCallback={onSignoutCallback}\n onRemoveUser={onRemoveUser}\n >\n <StorageConfigProvider storageType={storageType}>\n <TokenLifecycleManager config={config} debug={debug}>\n {props.tokenBridge && (\n <TokenBridgeSync bridge={props.tokenBridge} />\n )}\n {/* Auto-include SessionMonitor if enabled */}\n {showSessionMonitor && <SessionMonitor />}\n\n {/* User's app content */}\n {children}\n </TokenLifecycleManager>\n </StorageConfigProvider>\n </OidcAuthProvider>\n </KeycloakStatusProvider>\n );\n};\n\n/**\n * Build configuration for zero-config mode\n */\nfunction buildZeroConfig(props: KeycloakProviderZeroConfigProps): KeycloakConfig {\n const { authority, clientId, preset = 'default', config: overrides = {} } = props;\n\n // Start with preset configuration\n const presetConfig = mergeWithPreset(preset, overrides);\n\n // Deep merge: defaults -> preset -> overrides\n const fullConfig: KeycloakConfig = {\n authority,\n clientId,\n redirectUri: presetConfig.redirectUri || defaultConfig.redirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n postLogoutRedirectUri: presetConfig.postLogoutRedirectUri || defaultConfig.postLogoutRedirectUri || (typeof window !== 'undefined' ? window.location.origin + '/' : '/'),\n scope: presetConfig.scope || defaultConfig.scope,\n features: {\n ...defaultConfig.features,\n ...presetConfig.features,\n },\n silentRenew: {\n ...defaultConfig.silentRenew,\n ...presetConfig.silentRenew,\n },\n advanced: {\n ...defaultConfig.advanced,\n ...presetConfig.advanced,\n },\n events: {\n ...defaultConfig.events,\n ...presetConfig.events,\n },\n };\n\n return fullConfig;\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseRolesReturn {\n /**\n * Array of realm roles assigned to the current user\n */\n roles: string[];\n\n /**\n * Checks if user has a specific realm role\n * @param role - Role name to check\n * @returns True if user has the role\n */\n hasRole: (role: string) => boolean;\n\n /**\n * Checks if user has any of the specified roles (OR logic)\n * @param roles - Array of role names\n * @returns True if user has at least one of the roles\n */\n hasAnyRole: (roles: string[]) => boolean;\n\n /**\n * Checks if user has all of the specified roles (AND logic)\n * @param roles - Array of role names\n * @returns True if user has all the roles\n */\n hasAllRoles: (roles: string[]) => boolean;\n\n /**\n * Gets client-specific roles\n * @param clientId - Client ID to get roles for\n * @returns Array of client roles\n */\n getClientRoles: (clientId: string) => string[];\n}\n\n/**\n * Hook for working with Keycloak roles\n *\n * Provides convenient methods for checking user roles, both realm-level and client-level.\n * Must be used within a KeycloakProvider component.\n *\n * @returns Role utilities and methods\n *\n * @example Basic usage\n * ```tsx\n * import { useRoles } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { roles, hasRole, hasAnyRole } = useRoles();\n *\n * return (\n * <div>\n * <p>Your roles: {roles.join(', ')}</p>\n * {hasRole('admin') && <AdminPanel />}\n * {hasAnyRole(['editor', 'moderator']) && <EditButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Client roles\n * ```tsx\n * function ClientRoleExample() {\n * const { getClientRoles } = useRoles();\n * const apiRoles = getClientRoles('my-api');\n *\n * return <div>API roles: {apiRoles.join(', ')}</div>;\n * }\n * ```\n */\nexport function useRoles(): UseRolesReturn {\n const auth = useAuth();\n\n // Extract realm roles from user profile\n const roles = useMemo<string[]>(() => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores realm roles in realm_access.roles\n const realmAccess = auth.user.profile.realm_access as { roles?: string[] } | undefined;\n return realmAccess?.roles || [];\n }, [auth.user]);\n\n // Check if user has a specific role\n const hasRole = useMemo(\n () => (role: string): boolean => {\n return roles.includes(role);\n },\n [roles]\n );\n\n // Check if user has any of the specified roles\n const hasAnyRole = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.some((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Check if user has all of the specified roles\n const hasAllRoles = useMemo(\n () => (requiredRoles: string[]): boolean => {\n return requiredRoles.every((role) => roles.includes(role));\n },\n [roles]\n );\n\n // Get client-specific roles\n const getClientRoles = useMemo(\n () =>\n (clientId: string): string[] => {\n if (!auth.user?.profile) {\n return [];\n }\n\n // Keycloak stores client roles in resource_access[clientId].roles\n const resourceAccess = auth.user.profile.resource_access as\n | Record<string, { roles?: string[] }>\n | undefined;\n\n return resourceAccess?.[clientId]?.roles || [];\n },\n [auth.user]\n );\n\n return {\n roles,\n hasRole,\n hasAnyRole,\n hasAllRoles,\n getClientRoles,\n };\n}\n","import { useMemo } from 'react';\nimport { useAuth } from './useAuth';\n\n/**\n * Return type for useScopes hook\n */\nexport interface UseScopesReturn {\n /**\n * Array of granted scopes\n */\n scopes: string[];\n\n /**\n * Check if user has a specific scope\n */\n hasScope: (scope: string) => boolean;\n\n /**\n * Check if user has any of the specified scopes\n */\n hasAnyScope: (scopes: string[]) => boolean;\n\n /**\n * Check if user has all of the specified scopes\n */\n hasAllScopes: (scopes: string[]) => boolean;\n}\n\n/**\n * Hook for checking OAuth 2.0 scopes\n *\n * Provides utilities for scope-based authorization. Scopes are typically space-separated\n * in the token (e.g., \"openid profile email read:users write:users\").\n *\n * @returns Scope checking utilities\n *\n * @example Basic usage\n * ```tsx\n * import { useScopes } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { scopes, hasScope, hasAnyScope } = useScopes();\n *\n * return (\n * <div>\n * <p>Your scopes: {scopes.join(', ')}</p>\n *\n * {hasScope('read:users') && <UserList />}\n *\n * {hasAnyScope(['write:users', 'admin']) && <CreateUserButton />}\n * </div>\n * );\n * }\n * ```\n *\n * @example Conditional rendering\n * ```tsx\n * function DataActions() {\n * const { hasScope, hasAllScopes } = useScopes();\n *\n * return (\n * <div>\n * {hasScope('read:data') && <ViewButton />}\n * {hasScope('write:data') && <EditButton />}\n * {hasScope('delete:data') && <DeleteButton />}\n * {hasAllScopes(['read:data', 'write:data']) && <ExportButton />}\n * </div>\n * );\n * }\n * ```\n */\nexport function useScopes(): UseScopesReturn {\n const auth = useAuth();\n\n // Extract scopes from token\n // Scopes can be in 'scope' claim (space-separated string)\n const scopes = useMemo<string[]>(() => {\n if (!auth.user?.scope) return [];\n\n // Scope is typically a space-separated string\n return auth.user.scope.split(' ').filter(s => s.length > 0);\n }, [auth.user]);\n\n // Check if user has a specific scope\n const hasScope = useMemo(\n () => (scope: string): boolean => {\n return scopes.includes(scope);\n },\n [scopes]\n );\n\n // Check if user has any of the specified scopes\n const hasAnyScope = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.some((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n // Check if user has all of the specified scopes\n const hasAllScopes = useMemo(\n () => (requiredScopes: string[]): boolean => {\n return requiredScopes.every((scope) => scopes.includes(scope));\n },\n [scopes]\n );\n\n return {\n scopes,\n hasScope,\n hasAnyScope,\n hasAllScopes,\n };\n}\n","import React, { useEffect, useRef } from 'react';\nimport { useLocation } from 'react-router-dom';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\nimport { useScopes } from '../hooks/useScopes';\nimport type { User } from 'oidc-client-ts';\n\n/**\n * Context object passed to custom policy function\n */\nexport interface PolicyContext {\n /**\n * Current location from react-router\n */\n location: ReturnType<typeof useLocation>;\n\n /**\n * Any additional context you want to pass\n */\n [key: string]: any;\n}\n\n/**\n * Custom policy function for fine-grained access control\n */\nexport type PolicyFunction = (user: User, context: PolicyContext) => boolean;\n\nexport interface ProtectedRouteProps {\n /**\n * Child components to render when user is authorized\n */\n children: React.ReactNode;\n\n /**\n * Required realm roles (OR logic - user needs at least one)\n */\n requiredRoles?: string[];\n\n /**\n * Require all roles instead of any (AND logic)\n * @default false\n */\n requireAllRoles?: boolean;\n\n /**\n * Required OAuth 2.0 scopes (OR logic - user needs at least one)\n */\n requiredScopes?: string[];\n\n /**\n * Require all scopes instead of any (AND logic)\n * @default false\n */\n requireAllScopes?: boolean;\n\n /**\n * Custom policy function for advanced authorization logic\n * If provided, this takes precedence over role and scope checks\n */\n policy?: PolicyFunction;\n\n /**\n * Custom loading component to display while checking authentication\n */\n loadingComponent?: React.ReactNode;\n\n /**\n * Custom unauthorized component to display when user lacks required permissions\n */\n unauthorizedComponent?: React.ReactNode;\n\n /**\n * Path to redirect to if not authenticated\n * @default '/login'\n */\n redirectTo?: string;\n\n /**\n * Callback when user is unauthorized\n * @param reason - Reason for unauthorized access\n */\n onUnauthorized?: (\n reason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied'\n ) => void;\n}\n\n/**\n * Component for protecting routes with authentication, role-based, scope-based, or policy-based authorization\n *\n * This component provides comprehensive route protection with multiple authorization strategies:\n * - Authentication check (always required)\n * - Role-based authorization (realm roles)\n * - Scope-based authorization (OAuth 2.0 scopes)\n * - Custom policy functions (advanced logic)\n *\n * @example Basic authentication required\n * ```tsx\n * import { ProtectedRoute } from 'antaeus.keycloak.react';\n *\n * <Route\n * path=\"/dashboard\"\n * element={\n * <ProtectedRoute>\n * <Dashboard />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require specific role\n * ```tsx\n * <Route\n * path=\"/admin\"\n * element={\n * <ProtectedRoute requiredRoles={['admin']}>\n * <AdminPanel />\n * </ProtectedRoute>\n * }\n * />\n * ```\n *\n * @example Require any of multiple roles\n * ```tsx\n * <ProtectedRoute requiredRoles={['editor', 'moderator', 'admin']}>\n * <EditPage />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all roles (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['verified', 'premium']}\n * requireAllRoles={true}\n * >\n * <PremiumContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Require specific scopes\n * ```tsx\n * <ProtectedRoute requiredScopes={['read:users', 'write:users']}>\n * <UserManagement />\n * </ProtectedRoute>\n * ```\n *\n * @example Require all scopes (AND logic)\n * ```tsx\n * <ProtectedRoute\n * requiredScopes={['read:data', 'write:data', 'delete:data']}\n * requireAllScopes={true}\n * >\n * <DataAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Combine roles and scopes\n * ```tsx\n * <ProtectedRoute\n * requiredRoles={['admin']}\n * requiredScopes={['manage:users']}\n * >\n * <UserAdmin />\n * </ProtectedRoute>\n * ```\n *\n * @example Custom policy function\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Custom authorization logic\n * const isEmailVerified = user.profile.email_verified === true;\n * const isAdult = (user.profile.age || 0) >= 18;\n * return isEmailVerified && isAdult;\n * }}\n * onUnauthorized={(reason) => {\n * console.log('Access denied:', reason);\n * }}\n * >\n * <AdultContent />\n * </ProtectedRoute>\n * ```\n *\n * @example Advanced policy with location context\n * ```tsx\n * <ProtectedRoute\n * policy={(user, context) => {\n * // Check if user is accessing during business hours\n * const hour = new Date().getHours();\n * const isBusinessHours = hour >= 9 && hour < 17;\n *\n * // Or check based on route\n * const isAdminRoute = context.location.pathname.startsWith('/admin');\n * const hasAdminRole = user.profile.realm_access?.roles?.includes('admin');\n *\n * return isBusinessHours && (!isAdminRoute || hasAdminRole);\n * }}\n * >\n * <TimeSensitiveContent />\n * </ProtectedRoute>\n * ```\n */\nexport const ProtectedRoute: React.FC<ProtectedRouteProps> = ({\n children,\n requiredRoles = [],\n requireAllRoles = false,\n requiredScopes = [],\n requireAllScopes = false,\n policy,\n loadingComponent,\n unauthorizedComponent,\n onUnauthorized,\n}) => {\n const auth = useAuth();\n const { hasAnyRole, hasAllRoles } = useRoles();\n const { hasAnyScope, hasAllScopes } = useScopes();\n const location = useLocation();\n const hasRedirected = useRef(false);\n\n // Determine authorization state\n const isAuthenticated = !auth.isLoading && auth.isAuthenticated;\n\n // Check policy access\n const policyAccess = policy && auth.user\n ? policy(auth.user, { location })\n : null;\n\n // Check role access\n const roleAccess = requiredRoles.length > 0\n ? (requireAllRoles ? hasAllRoles(requiredRoles) : hasAnyRole(requiredRoles))\n : null;\n\n // Check scope access\n const scopeAccess = requiredScopes.length > 0\n ? (requireAllScopes ? hasAllScopes(requiredScopes) : hasAnyScope(requiredScopes))\n : null;\n\n // Determine unauthorized reason\n const unauthorizedReason: 'not-authenticated' | 'insufficient-roles' | 'insufficient-scopes' | 'policy-denied' | null =\n !isAuthenticated ? 'not-authenticated' :\n policyAccess === false ? 'policy-denied' :\n roleAccess === false ? 'insufficient-roles' :\n scopeAccess === false ? 'insufficient-scopes' :\n null;\n\n // All hooks must be called unconditionally at the top level\n // Handle unauthorized callback\n useEffect(() => {\n if (unauthorizedReason) {\n onUnauthorized?.(unauthorizedReason);\n }\n }, [unauthorizedReason, onUnauthorized]);\n\n // Handle login redirect for unauthenticated users\n useEffect(() => {\n if (!auth.isLoading && !auth.isAuthenticated && !hasRedirected.current) {\n hasRedirected.current = true;\n auth.signinRedirect({\n redirect_uri: window.location.origin + location.pathname + location.search,\n }).catch((error) => {\n // Reset flag on error to allow retry\n hasRedirected.current = false;\n console.error('[ProtectedRoute] Signin redirect failed:', error);\n });\n }\n }, [auth.isLoading, auth.isAuthenticated, location.pathname, location.search]);\n\n // Reset redirect flag when user becomes authenticated\n useEffect(() => {\n if (auth.isAuthenticated) {\n hasRedirected.current = false;\n }\n }, [auth.isAuthenticated]);\n\n // Show loading state while checking authentication\n if (auth.isLoading) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authentication\n if (!isAuthenticated) {\n return <>{loadingComponent || <DefaultLoadingComponent />}</>;\n }\n\n // Check authorization (policy takes precedence, then roles, then scopes)\n if (unauthorizedReason) {\n return <>{unauthorizedComponent || <DefaultUnauthorizedComponent />}</>;\n }\n\n // User is authenticated and has required permissions\n return <>{children}</>;\n};\n\n/**\n * Default loading component\n */\nconst DefaultLoadingComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n }}\n >\n <div\n style={{\n border: '3px solid #f3f3f3',\n borderTop: '3px solid #3498db',\n borderRadius: '50%',\n width: '40px',\n height: '40px',\n animation: 'spin 1s linear infinite',\n }}\n />\n <p style={{ color: '#666', margin: 0 }}>Loading...</p>\n <style>{`\n @keyframes spin {\n 0% { transform: rotate(0deg); }\n 100% { transform: rotate(360deg); }\n }\n `}</style>\n </div>\n);\n\n/**\n * Default unauthorized component\n */\nconst DefaultUnauthorizedComponent: React.FC = () => (\n <div\n style={{\n display: 'flex',\n justifyContent: 'center',\n alignItems: 'center',\n minHeight: '200px',\n flexDirection: 'column',\n gap: '1rem',\n padding: '2rem',\n textAlign: 'center',\n }}\n >\n <div\n style={{\n fontSize: '4rem',\n color: '#e74c3c',\n }}\n >\n 🔒\n </div>\n <h1 style={{ margin: 0, color: '#333' }}>Access Denied</h1>\n <p style={{ color: '#666', margin: 0 }}>\n You do not have permission to access this page.\n </p>\n </div>\n);\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LoginButtonProps {\n /**\n * Button text\n * @default 'Login'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'primary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show login icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before login starts\n */\n onLoginStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built login button component\n *\n * Triggers the Keycloak login flow when clicked. The button automatically\n * hides when the user is already authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LoginButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LoginButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LoginButton\n * variant=\"outline\"\n * size=\"large\"\n * onLoginStart={() => console.log('Starting login...')}\n * >\n * Sign In\n * </LoginButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LoginButton\n * className=\"my-custom-class\"\n * style={{ backgroundColor: '#007bff' }}\n * />\n * ```\n */\nexport const LoginButton: React.FC<LoginButtonProps> = ({\n children = 'Login',\n className = '',\n variant = 'primary',\n size = 'medium',\n showIcon = true,\n onLoginStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if already authenticated\n if (auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLoginStart?.();\n auth.signinRedirect();\n };\n\n const baseClass = 'kc-button kc-login-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🔐</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\n\nexport interface LogoutButtonProps {\n /**\n * Button text\n * @default 'Logout'\n */\n children?: React.ReactNode;\n\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Button variant\n * @default 'secondary'\n */\n variant?: 'primary' | 'secondary' | 'outline';\n\n /**\n * Button size\n * @default 'medium'\n */\n size?: 'small' | 'medium' | 'large';\n\n /**\n * Show logout icon\n * @default true\n */\n showIcon?: boolean;\n\n /**\n * Callback before logout starts\n */\n onLogoutStart?: () => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Disable the button\n */\n disabled?: boolean;\n}\n\n/**\n * Pre-built logout button component\n *\n * Triggers the Keycloak logout flow when clicked. The button automatically\n * hides when the user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { LogoutButton } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <LogoutButton />;\n * }\n * ```\n *\n * @example Customized\n * ```tsx\n * <LogoutButton\n * variant=\"outline\"\n * size=\"small\"\n * onLogoutStart={() => {\n * // Clean up app state\n * localStorage.clear();\n * }}\n * >\n * Sign Out\n * </LogoutButton>\n * ```\n *\n * @example With custom styling\n * ```tsx\n * <LogoutButton\n * className=\"my-logout-btn\"\n * style={{ backgroundColor: '#dc3545' }}\n * />\n * ```\n */\nexport const LogoutButton: React.FC<LogoutButtonProps> = ({\n children = 'Logout',\n className = '',\n variant = 'secondary',\n size = 'medium',\n showIcon = true,\n onLogoutStart,\n style,\n disabled = false,\n}) => {\n const auth = useAuth();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated) {\n return null;\n }\n\n const handleClick = () => {\n onLogoutStart?.();\n auth.signoutRedirect();\n };\n\n const baseClass = 'kc-button kc-logout-button';\n const variantClass = `kc-button--${variant}`;\n const sizeClass = `kc-button--${size}`;\n const classes = `${baseClass} ${variantClass} ${sizeClass} ${className}`.trim();\n\n return (\n <button\n type=\"button\"\n className={classes}\n onClick={handleClick}\n disabled={disabled || auth.isLoading}\n style={style}\n >\n {showIcon && <span className=\"kc-button__icon\">🚪</span>}\n <span className=\"kc-button__text\">{children}</span>\n </button>\n );\n};\n","import React from 'react';\nimport { useAuth } from '../hooks/useAuth';\nimport { useRoles } from '../hooks/useRoles';\n\nexport interface UserProfileProps {\n /**\n * Additional CSS class names\n */\n className?: string;\n\n /**\n * Show user avatar/icon\n * @default true\n */\n showAvatar?: boolean;\n\n /**\n * Show user email\n * @default true\n */\n showEmail?: boolean;\n\n /**\n * Show user roles\n * @default false\n */\n showRoles?: boolean;\n\n /**\n * Avatar size in pixels\n * @default 40\n */\n avatarSize?: number;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n\n /**\n * Callback when profile is clicked\n */\n onClick?: () => void;\n}\n\n/**\n * Pre-built user profile display component\n *\n * Displays the current user's information including name, email, and optionally roles.\n * Automatically hides when user is not authenticated.\n *\n * @example Basic usage\n * ```tsx\n * import { UserProfile } from 'antaeus.keycloak.react';\n *\n * function Header() {\n * return <UserProfile />;\n * }\n * ```\n *\n * @example With roles\n * ```tsx\n * <UserProfile showRoles={true} />\n * ```\n *\n * @example Clickable profile\n * ```tsx\n * <UserProfile\n * onClick={() => navigate('/profile')}\n * style={{ cursor: 'pointer' }}\n * />\n * ```\n *\n * @example Customized\n * ```tsx\n * <UserProfile\n * showEmail={false}\n * showRoles={true}\n * avatarSize={50}\n * className=\"my-profile\"\n * />\n * ```\n */\nexport const UserProfile: React.FC<UserProfileProps> = ({\n className = '',\n showAvatar = true,\n showEmail = true,\n showRoles = false,\n avatarSize = 40,\n style,\n onClick,\n}) => {\n const auth = useAuth();\n const { roles } = useRoles();\n\n // Don't render if not authenticated\n if (!auth.isAuthenticated || !auth.user) {\n return null;\n }\n\n const profile = auth.user.profile;\n const name = profile.name || profile.preferred_username || 'User';\n const email = profile.email;\n const initials = getInitials(name);\n\n const baseClass = 'kc-user-profile';\n const clickableClass = onClick ? 'kc-user-profile--clickable' : '';\n const classes = `${baseClass} ${clickableClass} ${className}`.trim();\n\n const handleClick = () => {\n if (onClick) {\n onClick();\n }\n };\n\n return (\n <div\n className={classes}\n style={style}\n onClick={handleClick}\n role={onClick ? 'button' : undefined}\n tabIndex={onClick ? 0 : undefined}\n onKeyPress={onClick ? (e) => e.key === 'Enter' && handleClick() : undefined}\n >\n {showAvatar && (\n <div\n className=\"kc-user-profile__avatar\"\n style={{\n width: avatarSize,\n height: avatarSize,\n fontSize: avatarSize * 0.4,\n }}\n >\n {initials}\n </div>\n )}\n\n <div className=\"kc-user-profile__info\">\n <div className=\"kc-user-profile__name\">{name}</div>\n\n {showEmail && email && (\n <div className=\"kc-user-profile__email\">{email}</div>\n )}\n\n {showRoles && roles.length > 0 && (\n <div className=\"kc-user-profile__roles\">\n {roles.slice(0, 3).map((role) => (\n <span key={role} className=\"kc-user-profile__role-badge\">\n {role}\n </span>\n ))}\n {roles.length > 3 && (\n <span className=\"kc-user-profile__role-badge\">\n +{roles.length - 3}\n </span>\n )}\n </div>\n )}\n </div>\n </div>\n );\n};\n\n/**\n * Helper function to get user initials from name\n */\nfunction getInitials(name: string): string {\n const parts = name.trim().split(' ');\n\n if (parts.length === 1) {\n return parts[0].substring(0, 2).toUpperCase();\n }\n\n return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase();\n}\n","/**\n * Device authorization response from Keycloak\n */\nexport interface DeviceAuthorizationResponse {\n /** Device code used for polling */\n device_code: string;\n\n /** User code to display to user */\n user_code: string;\n\n /** Verification URI (plain) */\n verification_uri: string;\n\n /** Complete verification URI with user code (for QR codes) */\n verification_uri_complete: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Recommended polling interval in seconds */\n interval: number;\n}\n\n/**\n * Token response from Keycloak\n */\nexport interface TokenResponse {\n /** Access token */\n access_token: string;\n\n /** Token type (usually 'Bearer') */\n token_type: string;\n\n /** Expiration time in seconds */\n expires_in: number;\n\n /** Refresh token (if offline_access scope was requested) */\n refresh_token?: string;\n\n /** ID token */\n id_token?: string;\n\n /** Granted scopes */\n scope?: string;\n}\n\n/**\n * Error response from token polling\n */\nexport interface DeviceFlowError {\n /** Error code */\n error: string;\n\n /** Error description */\n error_description?: string;\n}\n\n/**\n * Request device authorization code from the backend API\n *\n * This function calls your backend API which proxies the request to Keycloak.\n * This avoids CORS issues.\n *\n * @param apiBaseUrl - Base URL of your backend API (e.g., 'http://localhost:5000')\n * @returns Device authorization response\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const response = await requestDeviceCode('http://localhost:5000');\n * console.log('User code:', response.user_code);\n * console.log('Verification URL:', response.verification_uri_complete);\n * ```\n */\nexport async function requestDeviceCode(\n apiBaseUrl: string\n): Promise<DeviceAuthorizationResponse> {\n const url = `${apiBaseUrl}/api/keycloak/device/authorize`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n });\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `Device authorization failed: ${response.status} ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as DeviceAuthorizationResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to request device code: ${error.message}`);\n }\n throw error;\n }\n}\n\n/**\n * Poll for token using device code\n *\n * This function should be called repeatedly until the user authorizes the device\n * or the device code expires. The backend handles the actual token exchange with Keycloak.\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param deviceCode - Device code from requestDeviceCode()\n * @returns Token response if authorized, null if still pending\n * @throws Error if request fails or authorization is denied\n *\n * @example\n * ```ts\n * const deviceCode = 'ABC123';\n * const interval = setInterval(async () => {\n * try {\n * const token = await pollForToken('http://localhost:5000', deviceCode);\n * if (token) {\n * clearInterval(interval);\n * console.log('Authorized! Token:', token.access_token);\n * }\n * } catch (error) {\n * if (error.message.includes('authorization_pending')) {\n * // Still waiting, continue polling\n * } else {\n * // Real error, stop polling\n * clearInterval(interval);\n * console.error('Authorization failed:', error);\n * }\n * }\n * }, 5000);\n * ```\n */\nexport async function pollForToken(\n apiBaseUrl: string,\n deviceCode: string\n): Promise<TokenResponse | null> {\n const url = `${apiBaseUrl}/api/keycloak/device/token`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ device_code: deviceCode }),\n });\n\n const data = await response.json();\n\n // Check if response contains an error (backend returns 200 OK with error object)\n if ('error' in data) {\n const errorData = data as DeviceFlowError;\n\n // authorization_pending and slow_down are expected during polling\n if (\n errorData.error === 'authorization_pending' ||\n errorData.error === 'slow_down'\n ) {\n return null; // Still waiting\n }\n\n // Other errors are real failures\n throw new Error(\n errorData.error_description || errorData.error || 'Token polling failed'\n );\n }\n\n // Check if we got a non-OK status without error in body\n if (!response.ok) {\n throw new Error(`Token polling failed with status ${response.status}`);\n }\n\n return data as TokenResponse;\n } catch (error) {\n if (error instanceof Error) {\n throw error;\n }\n throw new Error('Token polling failed');\n }\n}\n\n/**\n * Fetch user information using access token\n *\n * @param apiBaseUrl - Base URL of your backend API\n * @param accessToken - Access token from token response\n * @returns User information\n * @throws Error if request fails\n *\n * @example\n * ```ts\n * const userInfo = await fetchUserInfo('http://localhost:5000', token.access_token);\n * console.log('User:', userInfo.preferred_username);\n * ```\n */\nexport async function fetchUserInfo(\n apiBaseUrl: string,\n accessToken: string\n): Promise<any> {\n const url = `${apiBaseUrl}/api/keycloak/device/userinfo`;\n\n try {\n const response = await fetch(url, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({ access_token: accessToken }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to fetch user info: ${response.statusText}`);\n }\n\n return await response.json();\n } catch (error) {\n if (error instanceof Error) {\n throw new Error(`Failed to fetch user info: ${error.message}`);\n }\n throw error;\n }\n}\n","import React, { useState, useEffect, useRef } from 'react';\nimport { QRCodeSVG } from 'qrcode.react';\nimport { User } from 'oidc-client-ts';\nimport { useAuth } from '../hooks/useAuth';\nimport { useStorageConfig } from '../contexts/StorageConfigContext';\nimport {\n requestDeviceCode,\n pollForToken,\n fetchUserInfo,\n type DeviceAuthorizationResponse,\n} from '../utils/deviceFlow';\n\nexport interface DeviceLoginProps {\n /**\n * API base URL for device flow endpoints\n * @example 'http://localhost:5000'\n */\n apiBaseUrl: string;\n\n /**\n * QR code size in pixels\n * @default 256\n */\n qrCodeSize?: number;\n\n /**\n * Polling interval in seconds\n * @default 5\n */\n pollingInterval?: number;\n\n /**\n * Custom CSS class\n */\n className?: string;\n\n /**\n * Callback on successful login\n */\n onSuccess?: (user: User) => void;\n\n /**\n * Callback on error\n */\n onError?: (error: Error) => void;\n\n /**\n * Custom inline styles\n */\n style?: React.CSSProperties;\n}\n\n/**\n * Device flow login component\n *\n * Displays QR code and user code for device authentication. Automatically polls\n * for authorization and completes the login flow.\n *\n * @example Basic usage\n * ```tsx\n * import { DeviceLogin } from 'antaeus.keycloak.react';\n *\n * function TVLoginPage() {\n * return (\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * onSuccess={(user) => {\n * console.log('Logged in:', user.profile.name);\n * navigate('/home');\n * }}\n * />\n * );\n * }\n * ```\n *\n * @example With custom settings\n * ```tsx\n * <DeviceLogin\n * apiBaseUrl=\"http://localhost:5000\"\n * qrCodeSize={300}\n * pollingInterval={3}\n * onError={(error) => console.error('Login failed:', error)}\n * />\n * ```\n */\nexport const DeviceLogin: React.FC<DeviceLoginProps> = ({\n apiBaseUrl,\n qrCodeSize = 256,\n pollingInterval = 5,\n className = '',\n onSuccess,\n onError,\n style,\n}) => {\n const auth = useAuth();\n const { storage, storageType } = useStorageConfig();\n const [deviceData, setDeviceData] = useState<DeviceAuthorizationResponse | null>(null);\n const [error, setError] = useState<string | null>(null);\n const [loading, setLoading] = useState(true);\n const [timeRemaining, setTimeRemaining] = useState<number | null>(null);\n const pollTimerRef = useRef<number | null>(null);\n\n // Initialize device flow\n useEffect(() => {\n const initDeviceFlow = async () => {\n setLoading(true);\n setError(null);\n\n try {\n const response = await requestDeviceCode(apiBaseUrl);\n setDeviceData(response);\n setTimeRemaining(response.expires_in);\n } catch (err) {\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n } finally {\n setLoading(false);\n }\n };\n\n initDeviceFlow();\n }, [apiBaseUrl, onError]);\n\n // Countdown timer\n useEffect(() => {\n if (!deviceData || timeRemaining === null) return;\n\n const interval = setInterval(() => {\n setTimeRemaining((prev) => {\n if (prev === null || prev <= 1) {\n clearInterval(interval);\n setError('Device code expired. Please refresh to try again.');\n return 0;\n }\n return prev - 1;\n });\n }, 1000);\n\n return () => clearInterval(interval);\n }, [deviceData, timeRemaining]);\n\n // Poll for token\n useEffect(() => {\n if (!deviceData) return;\n\n const poll = async () => {\n try {\n const tokenResponse = await pollForToken(apiBaseUrl, deviceData.device_code);\n\n if (tokenResponse) {\n // Success! Store the token\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n\n // Fetch user info\n const userInfo = await fetchUserInfo(apiBaseUrl, tokenResponse.access_token);\n\n // Create User object with all required fields for proper storage\n const user = new User({\n id_token: tokenResponse.id_token || '',\n access_token: tokenResponse.access_token,\n token_type: tokenResponse.token_type || 'Bearer',\n profile: userInfo,\n expires_at: Math.floor(Date.now() / 1000) + tokenResponse.expires_in,\n scope: tokenResponse.scope,\n refresh_token: tokenResponse.refresh_token,\n session_state: null, // Device flow doesn't have session_state\n });\n\n console.log('[DeviceLogin] Device flow authentication successful', {\n hasAccessToken: !!user.access_token,\n hasRefreshToken: !!user.refresh_token,\n expiresAt: user.expires_at,\n profile: userInfo.preferred_username,\n });\n\n // Store the user manually in browser storage\n // We need to determine the storage key format used by oidc-client-ts\n const storageKey = `oidc.user:${auth.settings.authority}:${auth.settings.client_id}`;\n const userJson = user.toStorageString();\n\n console.log('[DeviceLogin] Storing user in storage...', {\n storageKey,\n storageType,\n storage: storageType === 'local' ? 'localStorage' : 'sessionStorage',\n });\n\n // Store the user using the configured storage\n storage.setItem(storageKey, userJson);\n\n // Verify storage worked\n const stored = storage.getItem(storageKey);\n if (!stored) {\n console.error('[DeviceLogin] Failed to store user in storage!');\n throw new Error('Failed to store user session. Please try again.');\n }\n console.log('[DeviceLogin] User stored successfully in', storageType === 'local' ? 'localStorage' : 'sessionStorage');\n\n // Trigger success callback if provided, otherwise reload the page\n if (onSuccess) {\n // Small delay to ensure storage write completes before navigation\n await new Promise(resolve => setTimeout(resolve, 100));\n onSuccess(user);\n } else {\n // No callback provided - reload the page to pick up the stored user\n // This ensures the auth context initializes with the user from storage\n window.location.reload();\n }\n }\n } catch (err) {\n // Ignore authorization_pending errors\n if (!(err as Error).message.includes('authorization_pending')) {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n const error = err as Error;\n setError(error.message);\n onError?.(error);\n }\n }\n };\n\n // Start polling\n pollTimerRef.current = setInterval(poll, pollingInterval * 1000);\n\n // Cleanup\n return () => {\n if (pollTimerRef.current) {\n clearInterval(pollTimerRef.current);\n }\n };\n }, [deviceData, apiBaseUrl, pollingInterval, onSuccess, onError, auth]);\n\n if (loading) {\n return (\n <div className={`kc-device-login kc-device-login--loading ${className}`} style={style}>\n <div className=\"kc-device-login__spinner\" />\n <p>Initializing device flow...</p>\n </div>\n );\n }\n\n if (error) {\n return (\n <div className={`kc-device-login kc-device-login--error ${className}`} style={style}>\n <div className=\"kc-device-login__error-icon\">⚠️</div>\n <h2>Error</h2>\n <p>{error}</p>\n <button\n className=\"kc-button kc-button--primary\"\n onClick={() => window.location.reload()}\n >\n Retry\n </button>\n </div>\n );\n }\n\n if (!deviceData) {\n return null;\n }\n\n const formatTime = (seconds: number): string => {\n const mins = Math.floor(seconds / 60);\n const secs = seconds % 60;\n return `${mins}:${secs.toString().padStart(2, '0')}`;\n };\n\n return (\n <div className={`kc-device-login ${className}`} style={style}>\n <h2 className=\"kc-device-login__title\">Device Login</h2>\n\n <div className=\"kc-device-login__qr\">\n <QRCodeSVG value={deviceData.verification_uri_complete} size={qrCodeSize} />\n </div>\n\n <div className=\"kc-device-login__instructions\">\n <p>Scan the QR code with your phone or visit:</p>\n <code className=\"kc-device-login__url\">{deviceData.verification_uri}</code>\n <p>And enter code:</p>\n <strong className=\"kc-device-login__user-code\">{deviceData.user_code}</strong>\n </div>\n\n {timeRemaining !== null && timeRemaining > 0 && (\n <p className=\"kc-device-login__expiry\">\n Code expires in {formatTime(timeRemaining)}\n </p>\n )}\n\n <div className=\"kc-device-login__status\">\n <div className=\"kc-device-login__spinner kc-device-login__spinner--small\" />\n <p>Waiting for authorization...</p>\n </div>\n </div>\n );\n};\n","import { useCallback, useRef } from 'react';\nimport { useAuth } from './useAuth';\n\nexport interface UseProtectedFetchOptions {\n /**\n * Base URL for API requests\n * @example 'http://localhost:5000'\n */\n baseUrl?: string;\n\n /**\n * Callback when request is unauthorized (401)\n */\n onUnauthorized?: () => void;\n\n /**\n * Retry request on 401 error after token refresh\n * @default true\n */\n retryOn401?: boolean;\n\n /**\n * Additional headers to include in all requests\n */\n headers?: Record<string, string>;\n}\n\nexport interface UseProtectedFetchReturn {\n /**\n * Fetch with automatic token injection and JSON parsing\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Parsed JSON response\n */\n fetchJson: <T = any>(url: string, init?: RequestInit) => Promise<T>;\n\n /**\n * Raw fetch with automatic token injection\n *\n * @param url - URL or path to fetch\n * @param init - Fetch init options\n * @returns Fetch response\n */\n fetch: (url: string, init?: RequestInit) => Promise<Response>;\n\n /**\n * Check if request is in progress\n */\n isLoading: boolean;\n}\n\n/**\n * Hook for making authenticated API requests\n *\n * Automatically injects the current user's access token into all requests.\n * Handles 401 errors and provides convenient methods for JSON APIs.\n *\n * @param options - Configuration options\n * @returns Protected fetch methods\n *\n * @example Basic usage\n * ```tsx\n * import { useProtectedFetch } from 'antaeus.keycloak.react';\n *\n * function MyComponent() {\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const loadData = async () => {\n * // Token is automatically added\n * const data = await fetchJson('/api/data');\n * console.log(data);\n * };\n *\n * return <button onClick={loadData}>Load Data</button>;\n * }\n * ```\n *\n * @example With custom headers\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * headers: {\n * 'X-Custom-Header': 'value'\n * }\n * });\n * ```\n *\n * @example POST request\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000'\n * });\n *\n * const createUser = async (userData: User) => {\n * const result = await fetchJson<User>('/api/users', {\n * method: 'POST',\n * body: JSON.stringify(userData),\n * headers: {\n * 'Content-Type': 'application/json'\n * }\n * });\n * return result;\n * };\n * ```\n *\n * @example Handle unauthorized\n * ```tsx\n * const { fetchJson } = useProtectedFetch({\n * baseUrl: 'http://localhost:5000',\n * onUnauthorized: () => {\n * console.log('Unauthorized! Redirecting to login...');\n * }\n * });\n * ```\n */\nexport function useProtectedFetch(\n options: UseProtectedFetchOptions = {}\n): UseProtectedFetchReturn {\n const auth = useAuth();\n const refreshInProgressRef = useRef(false);\n\n // Extract only what we need to avoid unnecessary re-renders\n const { user, isLoading, signinSilent } = auth;\n\n const {\n baseUrl = '',\n onUnauthorized,\n retryOn401 = true,\n headers: customHeaders = {},\n } = options;\n\n /**\n * Build full URL from path\n */\n const buildUrl = useCallback(\n (url: string): string => {\n // If URL is already absolute, return as-is\n if (url.startsWith('http://') || url.startsWith('https://')) {\n return url;\n }\n\n // Combine with base URL\n const base = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;\n const path = url.startsWith('/') ? url : `/${url}`;\n\n return base + path;\n },\n [baseUrl]\n );\n\n /**\n * Get authorization header with current token\n * Note: Not memoized to always get fresh token\n */\n const getAuthHeader = (): Record<string, string> => {\n if (!user?.access_token) {\n return {};\n }\n\n return {\n Authorization: `Bearer ${user.access_token}`,\n };\n };\n\n /**\n * Merge all headers\n * Always gets fresh token by calling getAuthHeader() directly\n */\n const buildHeaders = useCallback(\n (requestHeaders?: HeadersInit): Headers => {\n const headers = new Headers(requestHeaders);\n\n // Add auth header (always fresh)\n const authHeader = getAuthHeader();\n if (authHeader.Authorization) {\n headers.set('Authorization', authHeader.Authorization);\n }\n\n // Add custom headers\n Object.entries(customHeaders).forEach(([key, value]) => {\n headers.set(key, value);\n });\n\n return headers;\n },\n [customHeaders]\n );\n\n /**\n * Raw fetch with token injection\n */\n const protectedFetch = useCallback(\n async (url: string, init?: RequestInit): Promise<Response> => {\n const fullUrl = buildUrl(url);\n const headers = buildHeaders(init?.headers);\n\n const response = await fetch(fullUrl, {\n ...init,\n headers,\n });\n\n // Handle 401 Unauthorized\n if (response.status === 401) {\n onUnauthorized?.();\n\n // Only retry if enabled, user exists, and refresh not already in progress\n if (retryOn401 && user && !refreshInProgressRef.current) {\n // Set flag to prevent concurrent refresh attempts\n refreshInProgressRef.current = true;\n\n try {\n // Try to refresh token silently\n await signinSilent();\n\n // Retry request with new token\n const newHeaders = buildHeaders(init?.headers);\n const retryResponse = await fetch(fullUrl, {\n ...init,\n headers: newHeaders,\n });\n\n return retryResponse;\n } catch (error) {\n // Silent refresh failed, return original response\n return response;\n } finally {\n // Reset flag after delay to allow future refreshes\n setTimeout(() => {\n refreshInProgressRef.current = false;\n }, 1000);\n }\n }\n }\n\n return response;\n },\n [buildUrl, buildHeaders, onUnauthorized, retryOn401, user, signinSilent]\n );\n\n /**\n * Fetch and parse JSON\n */\n const fetchJson = useCallback(\n async <T = any>(url: string, init?: RequestInit): Promise<T> => {\n const response = await protectedFetch(url, init);\n\n if (!response.ok) {\n const errorText = await response.text();\n throw new Error(\n `HTTP ${response.status}: ${response.statusText}. ${errorText}`\n );\n }\n\n const data = await response.json();\n return data as T;\n },\n [protectedFetch]\n );\n\n return {\n fetchJson,\n fetch: protectedFetch,\n isLoading,\n };\n}\n"]}