synapse-react-client 4.0.26 → 4.0.28

package/dist/utils/hooks/useDetectSSOCode.js

@@ -1,32 +1,32 @@
 import { CSRF_TOKEN_STORAGE_KEY as e, OAUTH2_PROVIDERS as t } from "../SynapseConstants.js";
 import { BackendDestinationEnum as n } from "../functions/getEndpoint.js";
-import { bindOAuthProviderToAccount as r, getRootURL as i, oAuthRegisterAccountStep2 as a, oAuthSessionRequest as o, setAccessTokenCookie as s } from "../../synapse-client/SynapseClient.js";
+import { bindOAuthProviderToAccount as r, getRootURL as i, oAuthIdentityRequest as a, oAuthRegisterAccountStep2 as o, oAuthSessionRequest as s, setAccessTokenCookie as c } from "../../synapse-client/SynapseClient.js";
 import "../../synapse-client/index.js";
 import "../functions/index.js";
-import { useOneSageURL as c } from "./useOneSageURL.js";
-import { useEffect as l, useMemo as u, useState as d } from "react";
+import { useOneSageURL as l } from "./useOneSageURL.js";
+import { useEffect as u, useMemo as d, useState as f } from "react";
 //#region src/utils/hooks/useDetectSSOCode.ts
-function f(e) {
+function p(e) {
 	try {
 		return localStorage.getItem(e);
 	} catch (t) {
 		return console.warn(`Unable to read from localStorage: ${e}`, t), null;
 	}
 }
-function p(e) {
+function m(e) {
 	try {
 		localStorage.removeItem(e);
 	} catch (t) {
 		console.warn(`Unable to remove from localStorage: ${e}`, t);
 	}
 }
-function m(m = {
+function h(h = {
 	isInitializingSession: !0,
 	isAuthenticated: !1
 }) {
-	let h = c("/register1"), { onSignInComplete: g, registerAccountUrl: _ = h.toString(), onError: v, onTwoFactorAuthRequired: y, onTwoFactorAuthResetTokenPresent: b, isInitializingSession: x, isAuthenticated: S } = m, C = i(), { searchParams: w } = new URL(typeof window < "u" ? window.location.href : "http://localhost/"), T = w?.get("code"), E = w?.get("provider"), D = !!(w?.get("client_id") && w?.get("redirect_uri")), O = u(() => {
-		if (!D) {
-			let e = w?.get("state");
+	let g = l("/register1"), { onSignInComplete: _, registerAccountUrl: v = g.toString(), onError: y, onTwoFactorAuthRequired: b, onTwoFactorAuthResetTokenPresent: x, isInitializingSession: S, isAuthenticated: C } = h, w = i(), { searchParams: T } = new URL(typeof window < "u" ? window.location.href : "http://localhost/"), E = T?.get("code"), D = T?.get("provider"), O = !!(T?.get("client_id") && T?.get("redirect_uri")), k = d(() => {
+		if (!O) {
+			let e = T?.get("state");
 			try {
 				return e ? JSON.parse(decodeURIComponent(e)) : null;
 			} catch (t) {
@@ -34,33 +34,43 @@ function m(m = {
 			}
 		}
 		return null;
-	}, [D, w]), [k, A] = d(!!(T && E));
-	return l(() => {
-		if (!x && T && E) {
-			if (!D) {
-				let t = f(e), n = O?.csrfToken ?? null;
+	}, [O, T]), [A, j] = f(!!(E && D));
+	return u(() => {
+		if (!S && E && D) {
+			if (!O) {
+				let t = p(e), n = k?.csrfToken ?? null;
 				if (!(typeof n == "string" && typeof t == "string" && n === t)) {
-					p(e), console.error("Invalid or missing OAuth CSRF token detected. Aborting OAuth flow."), v && v("Invalid OAuth state. Please try signing in again."), A(!1);
+					m(e), console.error("Invalid or missing OAuth CSRF token detected. Aborting OAuth flow."), y && y("Invalid OAuth state. Please try signing in again."), j(!1);
 					return;
 				}
-				p(e);
+				m(e);
 			}
-			let i = `${C}?provider=${E}`;
-			if (t.ORCID == E && S) r(E, T, i, n.REPO_ENDPOINT).then(g).catch((e) => {
-				console.error("Error binding ORCiD to account: ", e), v && v(e.reason);
-			}).finally(() => A(!1));
-			else if (t.GOOGLE == E || t.ORCID == E || t.ARCUS == E || t.SAGE_BIONETWORKS == E) {
+			let i = `${w}?provider=${D}`;
+			if (t.ORCID == D && C) r(D, E, i, n.REPO_ENDPOINT).then(_).catch((e) => {
+				console.error("Error binding ORCiD to account: ", e), y && y(e.reason);
+			}).finally(() => j(!1));
+			else if (t.NIH_RESEARCHER_AUTH_SERVICE == D && C) a(D, String(E), i).then(_).catch((e) => {
+				console.error("Error binding NIH RAS identity to account: ", e), y && y(e.reason);
+			}).finally(() => j(!1));
+			else if (t.GOOGLE == D || t.ORCID == D || t.ARCUS == D || t.SAGE_BIONETWORKS == D || t.NIH_RESEARCHER_AUTH_SERVICE == D) {
 				let e = (e) => {
-					e && ("accessToken" in e ? s(e.accessToken).then(g) : (y && y(e), O && O.twoFaResetToken && b && b(e, O.twoFaResetToken)));
+					e && ("accessToken" in e ? c(e.accessToken).then(_) : (b && b(e), k && k.twoFaResetToken && x && x(e, k.twoFaResetToken)));
 				}, r = (e) => {
-					e.status === 404 && window.location.replace(_), console.error("Error with account login: ", e), v && v(e.reason);
+					if (e.status === 404) {
+						if (t.NIH_RESEARCHER_AUTH_SERVICE == D) {
+							console.error("No Synapse account is linked to this NIH RAS identity: ", e), y && y("No Synapse account is linked to this NIH RAS identity. Sign in to Synapse and link your NIH RAS identity from your account settings.");
+							return;
+						}
+						window.location.replace(v);
+					}
+					console.error("Error with account login: ", e), y && y(e.reason);
 				};
-				(t.GOOGLE == E || t.ARCUS == E || t.SAGE_BIONETWORKS == E) && O?.registrationUsername ? a(O.registrationUsername, E, T, i, n.REPO_ENDPOINT).then(e).catch(r).finally(() => A(!1)) : o(E, T, i, n.REPO_ENDPOINT).then(e).catch(r).finally(() => A(!1));
-			} else console.warn("Unknown SSO Provider: ", E), A(!1);
+				(t.GOOGLE == D || t.ARCUS == D || t.SAGE_BIONETWORKS == D) && k?.registrationUsername ? o(k.registrationUsername, D, E, i, n.REPO_ENDPOINT).then(e).catch(r).finally(() => j(!1)) : s(D, E, i, n.REPO_ENDPOINT).then(e).catch(r).finally(() => j(!1));
+			} else console.warn("Unknown SSO Provider: ", D), j(!1);
 		}
-	}, [x]), { isLoading: k };
+	}, [S]), { isLoading: A };
 }
 //#endregion
-export { m as default };
+export { h as default };
 
 //# sourceMappingURL=useDetectSSOCode.js.map

package/dist/utils/hooks/useDetectSSOCode.js.map

@@ -1 +1 @@
-{"version":3,"file":"useDetectSSOCode.js","names":[],"sources":["../../../src/utils/hooks/useDetectSSOCode.ts"],"sourcesContent":["import {\n  bindOAuthProviderToAccount,\n  getRootURL,\n  oAuthRegisterAccountStep2,\n  oAuthSessionRequest,\n  setAccessTokenCookie,\n} from '@/synapse-client'\nimport { OAuth2State } from '@/utils/types'\nimport { TwoFactorAuthErrorResponse } from '@sage-bionetworks/synapse-client/generated/models/TwoFactorAuthErrorResponse'\nimport { SynapseClientError } from '@sage-bionetworks/synapse-client/util/SynapseClientError'\nimport { LoginResponse } from '@sage-bionetworks/synapse-types'\nimport { useEffect, useMemo, useState } from 'react'\nimport { BackendDestinationEnum } from '../functions'\nimport { CSRF_TOKEN_STORAGE_KEY, OAUTH2_PROVIDERS } from '../SynapseConstants'\nimport { useOneSageURL } from './useOneSageURL'\n\nfunction safeLocalStorageGetItem(key: string): string | null {\n  try {\n    return localStorage.getItem(key)\n  } catch (err) {\n    console.warn(`Unable to read from localStorage: ${key}`, err)\n    return null\n  }\n}\n\nfunction safeLocalStorageRemoveItem(key: string): void {\n  try {\n    localStorage.removeItem(key)\n  } catch (err) {\n    console.warn(`Unable to remove from localStorage: ${key}`, err)\n  }\n}\n\nexport type UseDetectSSOCodeReturnType = {\n  /* true iff SSO login has occurred and the completion of the OAuth flow in Synapse is pending */\n  isLoading: boolean\n}\n\nexport type UseDetectSSOCodeOptions = {\n  onSignInComplete?: () => void\n  registerAccountUrl?: string\n  onError?: (err: unknown) => void\n  onTwoFactorAuthRequired?: (resp: TwoFactorAuthErrorResponse) => void\n  onTwoFactorAuthResetTokenPresent?: (\n    resp: TwoFactorAuthErrorResponse,\n    encodedTwoFaResetToken: string,\n  ) => void\n  isInitializingSession: boolean\n  isAuthenticated: boolean\n}\n\n/*\n * During SSO login, the authorization provider (Google, ORCiD, ArcusBio Okta, ...) will send the user back to the portal with an authorization code,\n * which can be exchanged for a Synapse user session. This function should be called whenever the root App is initialized\n * (to look for this code parameter and complete the round-trip). If state is included, then we assume that this is being\n * used for account creation, where we pass the username through the process.\n */\nexport default function useDetectSSOCode(\n  opts: UseDetectSSOCodeOptions = {\n    isInitializingSession: true,\n    isAuthenticated: false,\n  },\n): UseDetectSSOCodeReturnType {\n  const defaultRegisterAccountURL = useOneSageURL('/register1')\n\n  const {\n    onSignInComplete,\n    registerAccountUrl = defaultRegisterAccountURL.toString(),\n    onError,\n    onTwoFactorAuthRequired,\n    onTwoFactorAuthResetTokenPresent,\n    isInitializingSession,\n    isAuthenticated,\n  } = opts\n  const redirectURL = getRootURL()\n  // 'code' handling (from SSO) should be preformed on the root page, and then redirect to original route.\n  // Use 'http://localhost/' as a placeholder during SSR (no browser URL available).\n  // Since there is no 'code' or 'provider' in this placeholder URL, the rest of the hook is a no-op.\n  const fullUrl: URL = new URL(\n    typeof window !== 'undefined' ? window.location.href : 'http://localhost/',\n  )\n  // in test environment the searchParams isn't defined\n  const { searchParams } = fullUrl\n  const code = searchParams?.get('code')\n  const provider = searchParams?.get('provider')\n\n  // If the URL contains a client_id and redirect_uri, then we are acting as an identity provider for an external OAuth client\n  const isHandlingSynapseOAuthSignIn = Boolean(\n    searchParams?.get('client_id') && searchParams?.get('redirect_uri'),\n  )\n\n  // If the Synapse user signed in with an external IdP, we may have passed data in the 'state' param\n  // Parse it (if appropriate)\n  const state: OAuth2State | null = useMemo(() => {\n    // If we are acting as an OIDC identity provider, then we should not parse the state param -- it was sent to us, and we should return it untouched\n    if (!isHandlingSynapseOAuthSignIn) {\n      const encodedState = searchParams?.get('state')\n      try {\n        return encodedState\n          ? (JSON.parse(decodeURIComponent(encodedState)) as OAuth2State)\n          : null\n      } catch (e) {\n        console.error(\n          'Error parsing state param:\\n',\n          e,\n          '\\nEncoded value:\\n',\n          encodedState,\n        )\n      }\n    }\n    return null\n  }, [isHandlingSynapseOAuthSignIn, searchParams])\n\n  const [isLoading, setIsLoading] = useState(!!(code && provider))\n\n  useEffect(() => {\n    if (!isInitializingSession) {\n      if (code && provider) {\n        if (!isHandlingSynapseOAuthSignIn) {\n          const storedCsrfToken = safeLocalStorageGetItem(\n            CSRF_TOKEN_STORAGE_KEY,\n          )\n\n          const expectedCsrfToken = state?.csrfToken ?? null\n          const tokensMatch =\n            typeof expectedCsrfToken === 'string' &&\n            typeof storedCsrfToken === 'string' &&\n            expectedCsrfToken === storedCsrfToken\n\n          if (!tokensMatch) {\n            safeLocalStorageRemoveItem(CSRF_TOKEN_STORAGE_KEY)\n            console.error(\n              'Invalid or missing OAuth CSRF token detected. Aborting OAuth flow.',\n            )\n            if (onError) {\n              onError('Invalid OAuth state. Please try signing in again.')\n            }\n            setIsLoading(false)\n            return\n          }\n\n          safeLocalStorageRemoveItem(CSRF_TOKEN_STORAGE_KEY)\n        }\n\n        const redirectUrl = `${redirectURL}?provider=${provider}`\n\n        //If user is already logged in, and the provider is ORCID, then try to bind this OAuth provider to the account.\n        if (OAUTH2_PROVIDERS.ORCID == provider && isAuthenticated) {\n          // now bind this to the user account\n          const onFailure = (err: SynapseClientError) => {\n            console.error('Error binding ORCiD to account: ', err)\n            if (onError) {\n              onError(err.reason)\n            }\n          }\n          bindOAuthProviderToAccount(\n            provider,\n            code,\n            redirectUrl,\n            BackendDestinationEnum.REPO_ENDPOINT,\n          )\n            .then(onSignInComplete)\n            .catch(onFailure)\n            .finally(() => setIsLoading(false))\n        } else if (\n          OAUTH2_PROVIDERS.GOOGLE == provider ||\n          OAUTH2_PROVIDERS.ORCID == provider ||\n          OAUTH2_PROVIDERS.ARCUS == provider ||\n          OAUTH2_PROVIDERS.SAGE_BIONETWORKS == provider\n        ) {\n          const onSuccess = (\n            response: LoginResponse | TwoFactorAuthErrorResponse | null,\n          ) => {\n            if (response) {\n              if ('accessToken' in response) {\n                setAccessTokenCookie(response.accessToken).then(\n                  onSignInComplete,\n                )\n              } else {\n                // The app will redirect or open a modal to handle a standard 2FA sign in\n                if (onTwoFactorAuthRequired) {\n                  onTwoFactorAuthRequired(response)\n                }\n                if (\n                  // The user logged in with OAuth while attempting to disable 2FA using an emailed signed token\n                  state &&\n                  state.twoFaResetToken &&\n                  onTwoFactorAuthResetTokenPresent\n                ) {\n                  // Let the app handle redirecting to the 2FA reset page\n                  onTwoFactorAuthResetTokenPresent(\n                    response,\n                    state.twoFaResetToken,\n                  )\n                }\n              }\n            }\n          }\n          const onFailure = (err: SynapseClientError) => {\n            if (err.status === 404) {\n              // Synapse account not found, send to registration page\n              window.location.replace(registerAccountUrl)\n            }\n            console.error('Error with account login: ', err)\n            if (onError) {\n              onError(err.reason)\n            }\n          }\n\n          if (\n            (OAUTH2_PROVIDERS.GOOGLE == provider ||\n              OAUTH2_PROVIDERS.ARCUS == provider ||\n              OAUTH2_PROVIDERS.SAGE_BIONETWORKS == provider) &&\n            state?.registrationUsername\n          ) {\n            oAuthRegisterAccountStep2(\n              state.registrationUsername,\n              provider,\n              code,\n              redirectUrl,\n              BackendDestinationEnum.REPO_ENDPOINT,\n            )\n              .then(onSuccess)\n              .catch(onFailure)\n              .finally(() => setIsLoading(false))\n          } else {\n            oAuthSessionRequest(\n              provider,\n              code,\n              redirectUrl,\n              BackendDestinationEnum.REPO_ENDPOINT,\n            )\n              .then(onSuccess)\n              .catch(onFailure)\n              .finally(() => setIsLoading(false))\n          }\n        } else {\n          console.warn('Unknown SSO Provider: ', provider)\n          setIsLoading(false)\n        }\n      }\n    }\n    // Intentionally only monitoring initialization of the session -- only running on mount after the session detection has completed since this uses URL params that come from a redirect\n    // oxlint-disable-next-line react-hooks/exhaustive-deps\n  }, [isInitializingSession])\n\n  return { isLoading }\n}\n"],"mappings":";;;;;;;;AAgBA,SAAS,EAAwB,GAA4B;CAC3D,IAAI;EACF,OAAO,aAAa,QAAQ,CAAG;CACjC,SAAS,GAAK;EAEZ,OADA,QAAQ,KAAK,qCAAqC,KAAO,CAAG,GACrD;CACT;AACF;AAEA,SAAS,EAA2B,GAAmB;CACrD,IAAI;EACF,aAAa,WAAW,CAAG;CAC7B,SAAS,GAAK;EACZ,QAAQ,KAAK,uCAAuC,KAAO,CAAG;CAChE;AACF;AA0BA,SAAwB,EACtB,IAAgC;CAC9B,uBAAuB;CACvB,iBAAiB;AACnB,GAC4B;CAC5B,IAAM,IAA4B,EAAc,YAAY,GAEtD,EACJ,qBACA,wBAAqB,EAA0B,SAAS,GACxD,YACA,4BACA,qCACA,0BACA,uBACE,GACE,IAAc,EAAW,GAQzB,EAAE,oBAAiB,IAJA,IACvB,OAAO,SAAW,MAAc,OAAO,SAAS,OAAO,mBAGhC,GACnB,IAAO,GAAc,IAAI,MAAM,GAC/B,IAAW,GAAc,IAAI,UAAU,GAGvC,IAA+B,GACnC,GAAc,IAAI,WAAW,KAAK,GAAc,IAAI,cAAc,IAK9D,IAA4B,QAAc;EAE9C,IAAI,CAAC,GAA8B;GACjC,IAAM,IAAe,GAAc,IAAI,OAAO;GAC9C,IAAI;IACF,OAAO,IACF,KAAK,MAAM,mBAAmB,CAAY,CAAC,IAC5C;GACN,SAAS,GAAG;IACV,QAAQ,MACN,gCACA,GACA,sBACA,CACF;GACF;EACF;EACA,OAAO;CACT,GAAG,CAAC,GAA8B,CAAY,CAAC,GAEzC,CAAC,GAAW,KAAgB,EAAS,CAAC,EAAE,KAAQ,EAAS;CAqI/D,OAnIA,QAAgB;EACd,IAAI,CAAC,KACC,KAAQ,GAAU;GACpB,IAAI,CAAC,GAA8B;IACjC,IAAM,IAAkB,EACtB,CACF,GAEM,IAAoB,GAAO,aAAa;IAM9C,IAAI,EAJF,OAAO,KAAsB,YAC7B,OAAO,KAAoB,YAC3B,MAAsB,IAEN;KAQhB,AAPA,EAA2B,CAAsB,GACjD,QAAQ,MACN,oEACF,GACI,KACF,EAAQ,mDAAmD,GAE7D,EAAa,EAAK;KAClB;IACF;IAEA,EAA2B,CAAsB;GACnD;GAEA,IAAM,IAAc,GAAG,EAAY,YAAY;GAG/C,IAAI,EAAiB,SAAS,KAAY,GAQxC,EACE,GACA,GACA,GACA,EAAuB,aACzB,EACG,KAAK,CAAgB,EACrB,OAbgB,MAA4B;IAE7C,AADA,QAAQ,MAAM,oCAAoC,CAAG,GACjD,KACF,EAAQ,EAAI,MAAM;GAEtB,CAQkB,EACf,cAAc,EAAa,EAAK,CAAC;QAC/B,IACL,EAAiB,UAAU,KAC3B,EAAiB,SAAS,KAC1B,EAAiB,SAAS,KAC1B,EAAiB,oBAAoB,GACrC;IACA,IAAM,KACJ,MACG;KACH,AAAI,MACE,iBAAiB,IACnB,EAAqB,EAAS,WAAW,EAAE,KACzC,CACF,KAGI,KACF,EAAwB,CAAQ,GAIhC,KACA,EAAM,mBACN,KAGA,EACE,GACA,EAAM,eACR;IAIR,GACM,KAAa,MAA4B;KAM7C,AALI,EAAI,WAAW,OAEjB,OAAO,SAAS,QAAQ,CAAkB,GAE5C,QAAQ,MAAM,8BAA8B,CAAG,GAC3C,KACF,EAAQ,EAAI,MAAM;IAEtB;IAEA,CACG,EAAiB,UAAU,KAC1B,EAAiB,SAAS,KAC1B,EAAiB,oBAAoB,MACvC,GAAO,uBAEP,EACE,EAAM,sBACN,GACA,GACA,GACA,EAAuB,aACzB,EACG,KAAK,CAAS,EACd,MAAM,CAAS,EACf,cAAc,EAAa,EAAK,CAAC,IAEpC,EACE,GACA,GACA,GACA,EAAuB,aACzB,EACG,KAAK,CAAS,EACd,MAAM,CAAS,EACf,cAAc,EAAa,EAAK,CAAC;GAExC,OAEE,AADA,QAAQ,KAAK,0BAA0B,CAAQ,GAC/C,EAAa,EAAK;EAEtB;CAIJ,GAAG,CAAC,CAAqB,CAAC,GAEnB,EAAE,aAAU;AACrB"}
+{"version":3,"file":"useDetectSSOCode.js","names":[],"sources":["../../../src/utils/hooks/useDetectSSOCode.ts"],"sourcesContent":["import {\n  bindOAuthProviderToAccount,\n  getRootURL,\n  oAuthIdentityRequest,\n  oAuthRegisterAccountStep2,\n  oAuthSessionRequest,\n  setAccessTokenCookie,\n} from '@/synapse-client'\nimport { OAuth2State } from '@/utils/types'\nimport { OAuthValidationRequestProviderEnum } from '@sage-bionetworks/synapse-client'\nimport { TwoFactorAuthErrorResponse } from '@sage-bionetworks/synapse-client/generated/models/TwoFactorAuthErrorResponse'\nimport { SynapseClientError } from '@sage-bionetworks/synapse-client/util/SynapseClientError'\nimport { LoginResponse } from '@sage-bionetworks/synapse-types'\nimport { useEffect, useMemo, useState } from 'react'\nimport { BackendDestinationEnum } from '../functions'\nimport { CSRF_TOKEN_STORAGE_KEY, OAUTH2_PROVIDERS } from '../SynapseConstants'\nimport { useOneSageURL } from './useOneSageURL'\n\nfunction safeLocalStorageGetItem(key: string): string | null {\n  try {\n    return localStorage.getItem(key)\n  } catch (err) {\n    console.warn(`Unable to read from localStorage: ${key}`, err)\n    return null\n  }\n}\n\nfunction safeLocalStorageRemoveItem(key: string): void {\n  try {\n    localStorage.removeItem(key)\n  } catch (err) {\n    console.warn(`Unable to remove from localStorage: ${key}`, err)\n  }\n}\n\nexport type UseDetectSSOCodeReturnType = {\n  /* true iff SSO login has occurred and the completion of the OAuth flow in Synapse is pending */\n  isLoading: boolean\n}\n\nexport type UseDetectSSOCodeOptions = {\n  onSignInComplete?: () => void\n  registerAccountUrl?: string\n  onError?: (err: unknown) => void\n  onTwoFactorAuthRequired?: (resp: TwoFactorAuthErrorResponse) => void\n  onTwoFactorAuthResetTokenPresent?: (\n    resp: TwoFactorAuthErrorResponse,\n    encodedTwoFaResetToken: string,\n  ) => void\n  isInitializingSession: boolean\n  isAuthenticated: boolean\n}\n\n/*\n * During SSO login, the authorization provider (Google, ORCiD, ArcusBio Okta, ...) will send the user back to the portal with an authorization code,\n * which can be exchanged for a Synapse user session. This function should be called whenever the root App is initialized\n * (to look for this code parameter and complete the round-trip). If state is included, then we assume that this is being\n * used for account creation, where we pass the username through the process.\n */\nexport default function useDetectSSOCode(\n  opts: UseDetectSSOCodeOptions = {\n    isInitializingSession: true,\n    isAuthenticated: false,\n  },\n): UseDetectSSOCodeReturnType {\n  const defaultRegisterAccountURL = useOneSageURL('/register1')\n\n  const {\n    onSignInComplete,\n    registerAccountUrl = defaultRegisterAccountURL.toString(),\n    onError,\n    onTwoFactorAuthRequired,\n    onTwoFactorAuthResetTokenPresent,\n    isInitializingSession,\n    isAuthenticated,\n  } = opts\n  const redirectURL = getRootURL()\n  // 'code' handling (from SSO) should be preformed on the root page, and then redirect to original route.\n  // Use 'http://localhost/' as a placeholder during SSR (no browser URL available).\n  // Since there is no 'code' or 'provider' in this placeholder URL, the rest of the hook is a no-op.\n  const fullUrl: URL = new URL(\n    typeof window !== 'undefined' ? window.location.href : 'http://localhost/',\n  )\n  // in test environment the searchParams isn't defined\n  const { searchParams } = fullUrl\n  const code = searchParams?.get('code')\n  const provider = searchParams?.get('provider')\n\n  // If the URL contains a client_id and redirect_uri, then we are acting as an identity provider for an external OAuth client\n  const isHandlingSynapseOAuthSignIn = Boolean(\n    searchParams?.get('client_id') && searchParams?.get('redirect_uri'),\n  )\n\n  // If the Synapse user signed in with an external IdP, we may have passed data in the 'state' param\n  // Parse it (if appropriate)\n  const state: OAuth2State | null = useMemo(() => {\n    // If we are acting as an OIDC identity provider, then we should not parse the state param -- it was sent to us, and we should return it untouched\n    if (!isHandlingSynapseOAuthSignIn) {\n      const encodedState = searchParams?.get('state')\n      try {\n        return encodedState\n          ? (JSON.parse(decodeURIComponent(encodedState)) as OAuth2State)\n          : null\n      } catch (e) {\n        console.error(\n          'Error parsing state param:\\n',\n          e,\n          '\\nEncoded value:\\n',\n          encodedState,\n        )\n      }\n    }\n    return null\n  }, [isHandlingSynapseOAuthSignIn, searchParams])\n\n  const [isLoading, setIsLoading] = useState(!!(code && provider))\n\n  useEffect(() => {\n    if (!isInitializingSession) {\n      if (code && provider) {\n        if (!isHandlingSynapseOAuthSignIn) {\n          const storedCsrfToken = safeLocalStorageGetItem(\n            CSRF_TOKEN_STORAGE_KEY,\n          )\n\n          const expectedCsrfToken = state?.csrfToken ?? null\n          const tokensMatch =\n            typeof expectedCsrfToken === 'string' &&\n            typeof storedCsrfToken === 'string' &&\n            expectedCsrfToken === storedCsrfToken\n\n          if (!tokensMatch) {\n            safeLocalStorageRemoveItem(CSRF_TOKEN_STORAGE_KEY)\n            console.error(\n              'Invalid or missing OAuth CSRF token detected. Aborting OAuth flow.',\n            )\n            if (onError) {\n              onError('Invalid OAuth state. Please try signing in again.')\n            }\n            setIsLoading(false)\n            return\n          }\n\n          safeLocalStorageRemoveItem(CSRF_TOKEN_STORAGE_KEY)\n        }\n\n        const redirectUrl = `${redirectURL}?provider=${provider}`\n\n        //If user is already logged in, and the provider is ORCID, then try to bind this OAuth provider to the account.\n        if (OAUTH2_PROVIDERS.ORCID == provider && isAuthenticated) {\n          // now bind this to the user account\n          const onFailure = (err: SynapseClientError) => {\n            console.error('Error binding ORCiD to account: ', err)\n            if (onError) {\n              onError(err.reason)\n            }\n          }\n          bindOAuthProviderToAccount(\n            provider,\n            code,\n            redirectUrl,\n            BackendDestinationEnum.REPO_ENDPOINT,\n          )\n            .then(onSignInComplete)\n            .catch(onFailure)\n            .finally(() => setIsLoading(false))\n        } else if (\n          OAUTH2_PROVIDERS.NIH_RESEARCHER_AUTH_SERVICE == provider &&\n          isAuthenticated\n        ) {\n          // RAS does not provide an alias, so bind via the identity endpoint\n          const onFailure = (err: SynapseClientError) => {\n            console.error('Error binding NIH RAS identity to account: ', err)\n            if (onError) {\n              onError(err.reason)\n            }\n          }\n          oAuthIdentityRequest(\n            provider as OAuthValidationRequestProviderEnum,\n            String(code),\n            redirectUrl,\n          )\n            .then(onSignInComplete)\n            .catch(onFailure)\n            .finally(() => setIsLoading(false))\n        } else if (\n          OAUTH2_PROVIDERS.GOOGLE == provider ||\n          OAUTH2_PROVIDERS.ORCID == provider ||\n          OAUTH2_PROVIDERS.ARCUS == provider ||\n          OAUTH2_PROVIDERS.SAGE_BIONETWORKS == provider ||\n          OAUTH2_PROVIDERS.NIH_RESEARCHER_AUTH_SERVICE == provider\n        ) {\n          const onSuccess = (\n            response: LoginResponse | TwoFactorAuthErrorResponse | null,\n          ) => {\n            if (response) {\n              if ('accessToken' in response) {\n                setAccessTokenCookie(response.accessToken).then(\n                  onSignInComplete,\n                )\n              } else {\n                // The app will redirect or open a modal to handle a standard 2FA sign in\n                if (onTwoFactorAuthRequired) {\n                  onTwoFactorAuthRequired(response)\n                }\n                if (\n                  // The user logged in with OAuth while attempting to disable 2FA using an emailed signed token\n                  state &&\n                  state.twoFaResetToken &&\n                  onTwoFactorAuthResetTokenPresent\n                ) {\n                  // Let the app handle redirecting to the 2FA reset page\n                  onTwoFactorAuthResetTokenPresent(\n                    response,\n                    state.twoFaResetToken,\n                  )\n                }\n              }\n            }\n          }\n          const onFailure = (err: SynapseClientError) => {\n            if (err.status === 404) {\n              if (OAUTH2_PROVIDERS.NIH_RESEARCHER_AUTH_SERVICE == provider) {\n                // RAS cannot create a Synapse account (no alias). Surface an\n                // explicit error instead of redirecting to registration.\n                console.error(\n                  'No Synapse account is linked to this NIH RAS identity: ',\n                  err,\n                )\n                if (onError) {\n                  onError(\n                    'No Synapse account is linked to this NIH RAS identity. Sign in to Synapse and link your NIH RAS identity from your account settings.',\n                  )\n                }\n                return\n              }\n              // Synapse account not found, send to registration page\n              window.location.replace(registerAccountUrl)\n            }\n            console.error('Error with account login: ', err)\n            if (onError) {\n              onError(err.reason)\n            }\n          }\n\n          if (\n            (OAUTH2_PROVIDERS.GOOGLE == provider ||\n              OAUTH2_PROVIDERS.ARCUS == provider ||\n              OAUTH2_PROVIDERS.SAGE_BIONETWORKS == provider) &&\n            state?.registrationUsername\n          ) {\n            oAuthRegisterAccountStep2(\n              state.registrationUsername,\n              provider,\n              code,\n              redirectUrl,\n              BackendDestinationEnum.REPO_ENDPOINT,\n            )\n              .then(onSuccess)\n              .catch(onFailure)\n              .finally(() => setIsLoading(false))\n          } else {\n            oAuthSessionRequest(\n              provider,\n              code,\n              redirectUrl,\n              BackendDestinationEnum.REPO_ENDPOINT,\n            )\n              .then(onSuccess)\n              .catch(onFailure)\n              .finally(() => setIsLoading(false))\n          }\n        } else {\n          console.warn('Unknown SSO Provider: ', provider)\n          setIsLoading(false)\n        }\n      }\n    }\n    // Intentionally only monitoring initialization of the session -- only running on mount after the session detection has completed since this uses URL params that come from a redirect\n    // oxlint-disable-next-line react-hooks/exhaustive-deps\n  }, [isInitializingSession])\n\n  return { isLoading }\n}\n"],"mappings":";;;;;;;;AAkBA,SAAS,EAAwB,GAA4B;CAC3D,IAAI;EACF,OAAO,aAAa,QAAQ,CAAG;CACjC,SAAS,GAAK;EAEZ,OADA,QAAQ,KAAK,qCAAqC,KAAO,CAAG,GACrD;CACT;AACF;AAEA,SAAS,EAA2B,GAAmB;CACrD,IAAI;EACF,aAAa,WAAW,CAAG;CAC7B,SAAS,GAAK;EACZ,QAAQ,KAAK,uCAAuC,KAAO,CAAG;CAChE;AACF;AA0BA,SAAwB,EACtB,IAAgC;CAC9B,uBAAuB;CACvB,iBAAiB;AACnB,GAC4B;CAC5B,IAAM,IAA4B,EAAc,YAAY,GAEtD,EACJ,qBACA,wBAAqB,EAA0B,SAAS,GACxD,YACA,4BACA,qCACA,0BACA,uBACE,GACE,IAAc,EAAW,GAQzB,EAAE,oBAAiB,IAJA,IACvB,OAAO,SAAW,MAAc,OAAO,SAAS,OAAO,mBAGhC,GACnB,IAAO,GAAc,IAAI,MAAM,GAC/B,IAAW,GAAc,IAAI,UAAU,GAGvC,IAA+B,GACnC,GAAc,IAAI,WAAW,KAAK,GAAc,IAAI,cAAc,IAK9D,IAA4B,QAAc;EAE9C,IAAI,CAAC,GAA8B;GACjC,IAAM,IAAe,GAAc,IAAI,OAAO;GAC9C,IAAI;IACF,OAAO,IACF,KAAK,MAAM,mBAAmB,CAAY,CAAC,IAC5C;GACN,SAAS,GAAG;IACV,QAAQ,MACN,gCACA,GACA,sBACA,CACF;GACF;EACF;EACA,OAAO;CACT,GAAG,CAAC,GAA8B,CAAY,CAAC,GAEzC,CAAC,GAAW,KAAgB,EAAS,CAAC,EAAE,KAAQ,EAAS;CAuK/D,OArKA,QAAgB;EACd,IAAI,CAAC,KACC,KAAQ,GAAU;GACpB,IAAI,CAAC,GAA8B;IACjC,IAAM,IAAkB,EACtB,CACF,GAEM,IAAoB,GAAO,aAAa;IAM9C,IAAI,EAJF,OAAO,KAAsB,YAC7B,OAAO,KAAoB,YAC3B,MAAsB,IAEN;KAQhB,AAPA,EAA2B,CAAsB,GACjD,QAAQ,MACN,oEACF,GACI,KACF,EAAQ,mDAAmD,GAE7D,EAAa,EAAK;KAClB;IACF;IAEA,EAA2B,CAAsB;GACnD;GAEA,IAAM,IAAc,GAAG,EAAY,YAAY;GAG/C,IAAI,EAAiB,SAAS,KAAY,GAQxC,EACE,GACA,GACA,GACA,EAAuB,aACzB,EACG,KAAK,CAAgB,EACrB,OAbgB,MAA4B;IAE7C,AADA,QAAQ,MAAM,oCAAoC,CAAG,GACjD,KACF,EAAQ,EAAI,MAAM;GAEtB,CAQkB,EACf,cAAc,EAAa,EAAK,CAAC;QAC/B,IACL,EAAiB,+BAA+B,KAChD,GASA,EACE,GACA,OAAO,CAAI,GACX,CACF,EACG,KAAK,CAAgB,EACrB,OAZgB,MAA4B;IAE7C,AADA,QAAQ,MAAM,+CAA+C,CAAG,GAC5D,KACF,EAAQ,EAAI,MAAM;GAEtB,CAOkB,EACf,cAAc,EAAa,EAAK,CAAC;QAC/B,IACL,EAAiB,UAAU,KAC3B,EAAiB,SAAS,KAC1B,EAAiB,SAAS,KAC1B,EAAiB,oBAAoB,KACrC,EAAiB,+BAA+B,GAChD;IACA,IAAM,KACJ,MACG;KACH,AAAI,MACE,iBAAiB,IACnB,EAAqB,EAAS,WAAW,EAAE,KACzC,CACF,KAGI,KACF,EAAwB,CAAQ,GAIhC,KACA,EAAM,mBACN,KAGA,EACE,GACA,EAAM,eACR;IAIR,GACM,KAAa,MAA4B;KAC7C,IAAI,EAAI,WAAW,KAAK;MACtB,IAAI,EAAiB,+BAA+B,GAAU;OAO5D,AAJA,QAAQ,MACN,2DACA,CACF,GACI,KACF,EACE,sIACF;OAEF;MACF;MAEA,OAAO,SAAS,QAAQ,CAAkB;KAC5C;KAEA,AADA,QAAQ,MAAM,8BAA8B,CAAG,GAC3C,KACF,EAAQ,EAAI,MAAM;IAEtB;IAEA,CACG,EAAiB,UAAU,KAC1B,EAAiB,SAAS,KAC1B,EAAiB,oBAAoB,MACvC,GAAO,uBAEP,EACE,EAAM,sBACN,GACA,GACA,GACA,EAAuB,aACzB,EACG,KAAK,CAAS,EACd,MAAM,CAAS,EACf,cAAc,EAAa,EAAK,CAAC,IAEpC,EACE,GACA,GACA,GACA,EAAuB,aACzB,EACG,KAAK,CAAS,EACd,MAAM,CAAS,EACf,cAAc,EAAa,EAAK,CAAC;GAExC,OAEE,AADA,QAAQ,KAAK,0BAA0B,CAAQ,GAC/C,EAAa,EAAK;EAEtB;CAIJ,GAAG,CAAC,CAAqB,CAAC,GAEnB,EAAE,aAAU;AACrB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "synapse-react-client",
-  "version": "4.0.26",
+  "version": "4.0.28",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",
@@ -64,7 +64,7 @@
     "dagre": "^0.8.5",
     "dayjs": "^1.11.21",
     "html-react-parser": "^6.1.3",
-    "immutable": "4.3.8",
+    "immutable": "4.3.9",
     "isomorphic-dompurify": "^3.16.0",
     "jotai": "^2.20.0",
     "js-cookie": "^3.0.8",
@@ -119,11 +119,11 @@
     "use-deep-compare-effect": "^1.8.1",
     "xss": "^1.0.15",
     "zod": "^4.4.3",
-    "@sage-bionetworks/markdown-it-container": "4.0.1",
-    "@sage-bionetworks/synapse-client": "0.0.18",
+    "markdown-it-synapse": "2.0.0",
     "@sage-bionetworks/synapse-types": "0.0.7",
     "markdown-it-synapse-table": "1.0.8",
-    "markdown-it-synapse": "2.0.0"
+    "@sage-bionetworks/synapse-client": "0.0.20",
+    "@sage-bionetworks/markdown-it-container": "4.0.1"
   },
   "peerDependencies": {
     "@sage-bionetworks/aridhia-client": "*",

package/dist/components/DataGrid/MergeGridWithSourceTableButton.d.ts

@@ -1,8 +0,0 @@
-import { EntityType } from '@sage-bionetworks/synapse-client';
-export type MergeGridWithSourceTableButtonProps = {
-    sourceEntityId: string;
-    gridSessionId: string;
-    sourceEntityType?: EntityType;
-};
-export default function MergeGridWithSourceTableButton(props: MergeGridWithSourceTableButtonProps): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=MergeGridWithSourceTableButton.d.ts.map

package/dist/components/DataGrid/MergeGridWithSourceTableButton.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MergeGridWithSourceTableButton.d.ts","sourceRoot":"","sources":["../../../src/components/DataGrid/MergeGridWithSourceTableButton.tsx"],"names":[],"mappings":"AAKA,OAAO,EACL,UAAU,EAMX,MAAM,kCAAkC,CAAA;AAEzC,MAAM,MAAM,mCAAmC,GAAG;IAChD,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,UAAU,CAAA;CAC9B,CAAA;AAED,MAAM,CAAC,OAAO,UAAU,8BAA8B,CACpD,KAAK,EAAE,mCAAmC,2CAuC3C"}

package/dist/components/DataGrid/MergeGridWithSourceTableButton.js

@@ -1,64 +0,0 @@
-import { displayToast as e } from "../ToastMessage/ToastMessage.js";
-import { convertToEntityType as t } from "../../utils/functions/EntityTypeUtils.js";
-import { useGetEntity as n } from "../../synapse-queries/entity/useEntity.js";
-import "../../synapse-queries/index.js";
-import "../index.js";
-import r from "./components/GridMenuButton/GridMenuButton.js";
-import i from "./useMergeGridWithSource.js";
-import { jsx as a } from "react/jsx-runtime";
-import { instanceOfEntityUpdateResults as o, instanceOfUploadToTableResult as s } from "@sage-bionetworks/synapse-client";
-import { c } from "react/compiler-runtime";
-//#region src/components/DataGrid/MergeGridWithSourceTableButton.tsx
-function l(e) {
-	let o = c(13), { sourceEntityId: s, gridSessionId: l } = e, { data: f, isLoading: p } = n(s), m;
-	o[0] === f ? m = o[1] : (m = f?.concreteType ? t(f.concreteType) : void 0, o[0] = f, o[1] = m);
-	let h = m, g;
-	o[2] === Symbol.for("react.memo_cache_sentinel") ? (g = {
-		onSuccess: d,
-		onError: u
-	}, o[2] = g) : g = o[2];
-	let { mutate: _, isPending: v } = i(g), y = h === "entityview" ? "Sync changes" : "Apply changes", b;
-	o[3] !== l || o[4] !== _ || o[5] !== s || o[6] !== h ? (b = () => {
-		_({
-			gridSessionId: l,
-			sourceEntityId: s,
-			sourceEntityType: h
-		});
-	}, o[3] = l, o[4] = _, o[5] = s, o[6] = h, o[7] = b) : b = o[7];
-	let x;
-	return o[8] !== y || o[9] !== p || o[10] !== v || o[11] !== b ? (x = /* @__PURE__ */ a(r, {
-		loading: v,
-		disabled: p,
-		onClick: b,
-		variant: "contained",
-		children: y
-	}), o[8] = y, o[9] = p, o[10] = v, o[11] = b, o[12] = x) : x = o[12], x;
-}
-function u(t) {
-	return e(t.message, "danger");
-}
-function d(t) {
-	t.type === "entityview" ? f(t.data) : t.type === "table" ? p(t.data) : e("Successfully updated RecordSet.", "success");
-}
-function f(t) {
-	t.errorMessages == null || t.errorMessages.length === 0 ? e("Successfully synchronized metadata.", "success") : e(/* @__PURE__ */ a("ul", { children: t.errorMessages.map((e, t) => /* @__PURE__ */ a("li", { children: e }, t)) }), "warning", { title: "Some changes could not be applied" });
-}
-function p(t) {
-	if (t.results?.length) {
-		let n = t.results[0];
-		if (o(n)) {
-			let t = m(n).join("\n");
-			t ? e(`Some changes could not be applied:\n${t}`, "danger") : e("Changes applied successfully", "success");
-		} else if (s(n)) {
-			let t = n.rowsProcessed?.toLocaleString();
-			e(`Successfully updated ${t} rows.`, "success");
-		}
-	}
-}
-function m(e) {
-	return e.updateResults?.filter((e) => !!e.failureCode).map((e) => `${e.entityId}: ${e.failureMessage} (code: ${e.failureCode})`) ?? [];
-}
-//#endregion
-export { l as default };
-
-//# sourceMappingURL=MergeGridWithSourceTableButton.js.map

package/dist/components/DataGrid/MergeGridWithSourceTableButton.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MergeGridWithSourceTableButton.js","names":["GridMenuButton","useMergeGridWithSource","displayToast","useGetEntity","convertToEntityType","EntityType","EntityUpdateResults","instanceOfEntityUpdateResults","instanceOfUploadToTableResult","SynchronizeGridResponse","TableUpdateTransactionResponse","MergeGridWithSourceTableButtonProps","sourceEntityId","gridSessionId","sourceEntityType","MergeGridWithSourceTableButton","props","$","_c","data","entity","isLoading","entityLoading","t0","concreteType","undefined","t1","Symbol","for","onSuccess","_temp","onError","_temp2","mutate","mergeGrid","isPending","buttonText","t2","t3","e","message","result","type","onSynchronizeSuccess","onMergeTableSuccess","errorMessages","length","map","msg","index","title","results","updateResult","failureMessages","getEntityUpdateResultsErrorMessages","join","rowsUpdatedStr","rowsProcessed","toLocaleString","updateResults","filter","failureCode","r","entityId","failureMessage"],"sources":["../../../src/components/DataGrid/MergeGridWithSourceTableButton.tsx"],"sourcesContent":["import GridMenuButton from '@/components/DataGrid/components/GridMenuButton/GridMenuButton'\nimport useMergeGridWithSource from '@/components/DataGrid/useMergeGridWithSource'\nimport { displayToast } from '@/components/index'\nimport { useGetEntity } from '@/synapse-queries'\nimport { convertToEntityType } from '@/utils/functions/EntityTypeUtils'\nimport {\n  EntityType,\n  EntityUpdateResults,\n  instanceOfEntityUpdateResults,\n  instanceOfUploadToTableResult,\n  SynchronizeGridResponse,\n  TableUpdateTransactionResponse,\n} from '@sage-bionetworks/synapse-client'\n\nexport type MergeGridWithSourceTableButtonProps = {\n  sourceEntityId: string\n  gridSessionId: string\n  sourceEntityType?: EntityType\n}\n\nexport default function MergeGridWithSourceTableButton(\n  props: MergeGridWithSourceTableButtonProps,\n) {\n  const { sourceEntityId, gridSessionId } = props\n\n  const { data: entity, isLoading: entityLoading } =\n    useGetEntity(sourceEntityId)\n\n  const sourceEntityType = entity?.concreteType\n    ? convertToEntityType(entity.concreteType)\n    : undefined\n\n  const { mutate: mergeGrid, isPending } = useMergeGridWithSource({\n    onSuccess: result => {\n      if (result.type === 'entityview') {\n        onSynchronizeSuccess(result.data)\n      } else if (result.type === 'table') {\n        onMergeTableSuccess(result.data)\n      } else {\n        displayToast('Successfully updated RecordSet.', 'success')\n      }\n    },\n    onError: e => displayToast(e.message, 'danger'),\n  })\n\n  const buttonText =\n    sourceEntityType === 'entityview' ? 'Sync changes' : 'Apply changes'\n\n  return (\n    <GridMenuButton\n      loading={isPending}\n      disabled={entityLoading}\n      onClick={() => {\n        mergeGrid({ gridSessionId, sourceEntityId, sourceEntityType })\n      }}\n      variant=\"contained\"\n    >\n      {buttonText}\n    </GridMenuButton>\n  )\n}\n\nfunction onSynchronizeSuccess(result: SynchronizeGridResponse) {\n  if (result.errorMessages == null || result.errorMessages.length === 0) {\n    displayToast('Successfully synchronized metadata.', 'success')\n  } else {\n    displayToast(\n      <ul>\n        {result.errorMessages.map((msg, index) => (\n          <li key={index}>{msg}</li>\n        ))}\n      </ul>,\n      'warning',\n      { title: 'Some changes could not be applied' },\n    )\n  }\n}\n\nfunction onMergeTableSuccess(result: TableUpdateTransactionResponse) {\n  if (result.results?.length) {\n    // There should only be one result since the CSV upload is done in one step\n    const updateResult = result.results[0]\n    if (instanceOfEntityUpdateResults(updateResult)) {\n      // This is an update to the contents of a View\n      const failureMessages =\n        getEntityUpdateResultsErrorMessages(updateResult).join('\\n')\n\n      if (failureMessages) {\n        displayToast(\n          `Some changes could not be applied:\\n${failureMessages}`,\n          'danger',\n        )\n      } else {\n        displayToast('Changes applied successfully', 'success')\n      }\n    } else if (instanceOfUploadToTableResult(updateResult)) {\n      // This is an update to a TableEntity\n      const rowsUpdatedStr = updateResult.rowsProcessed?.toLocaleString()\n      displayToast(`Successfully updated ${rowsUpdatedStr} rows.`, 'success')\n    }\n  }\n}\n\nfunction getEntityUpdateResultsErrorMessages(\n  results: EntityUpdateResults,\n): string[] {\n  return (\n    results.updateResults\n      ?.filter(e => !!e.failureCode)\n      .map(\n        r => `${r.entityId}: ${r.failureMessage} (code: ${r.failureCode})`,\n      ) ?? []\n  )\n}\n"],"mappings":";;;;;;;;;;;AAoBA,SAAee,EAAAC,GAAA;CAAA,IAAAC,IAAAC,EAAA,EAAA,GAGb,EAAAN,mBAAAC,qBAA0CG,GAE1C,EAAAG,MAAAC,GAAAC,WAAAC,MACEnB,EAAaS,CAAc,GAACW;CAAA,AAAAN,EAAA,OAAAG,IAIjBG,IAAAN,EAAA,MAFYM,IAAAH,GAAMI,eAC3BpB,EAAoBgB,EAAMI,YAClB,IAFaC,KAAAA,GAEZR,EAAA,KAAAG,GAAAH,EAAA,KAAAM;CAFb,IAAAT,IAAyBS,GAEZG;CAAA,AAAAT,EAAA,OAAAU,OAAAC,IAAA,2BAAA,KAEmDF,IAAA;EAAAG,WACnDC;EAQVC,SACQC;CACX,GAACf,EAAA,KAAAS,KAAAA,IAAAT,EAAA;CAXD,IAAA,EAAAgB,QAAAC,GAAAC,iBAAyClC,EAAuByB,CAW/D,GAEDU,IACEtB,MAAqB,eAArB,iBAAA,iBAAoEuB;CAAA,AAAApB,EAAA,OAAAJ,KAAAI,EAAA,OAAAiB,KAAAjB,EAAA,OAAAL,KAAAK,EAAA,OAAAH,KAMzDuB,UAAA;EACPH,EAAU;GAAArB;GAAAD;GAAAE;EAAkD,CAAC;CAAC,GAC/DG,EAAA,KAAAJ,GAAAI,EAAA,KAAAiB,GAAAjB,EAAA,KAAAL,GAAAK,EAAA,KAAAH,GAAAG,EAAA,KAAAoB,KAAAA,IAAApB,EAAA;CAAA,IAAAqB;CAIc,OAJdrB,EAAA,OAAAmB,KAAAnB,EAAA,OAAAK,KAAAL,EAAA,QAAAkB,KAAAlB,EAAA,QAAAoB,KALHC,IAAA,kBAAC,GAAD;EACWH,SAAAA;EACCb,UAAAA;EACD,SAAAe;EAGD,SAAA;YAEPD;CARY,CAAA,GASEnB,EAAA,KAAAmB,GAAAnB,EAAA,KAAAK,GAAAL,EAAA,MAAAkB,GAAAlB,EAAA,MAAAoB,GAAApB,EAAA,MAAAqB,KAAAA,IAAArB,EAAA,KATjBqB;AASiB;AAtCN,SAAAN,EAAAO,GAAA;CAAA,OAsBGrC,EAAaqC,EAACC,SAAU,QAAQ;AAAC;AAtBpC,SAAAV,EAAAW,GAAA;CAcT,AAAIA,EAAMC,SAAU,eAClBC,EAAqBF,EAAMtB,IAAK,IACvBsB,EAAMC,SAAU,UACzBE,EAAoBH,EAAMtB,IAAK,IAE/BjB,EAAa,mCAAmC,SAAS;AAC1D;AAsBP,SAASyC,EAAqBF,GAAiC;CAC7D,AAAIA,EAAOI,iBAAiB,QAAQJ,EAAOI,cAAcC,WAAW,IAClE5C,EAAa,uCAAuC,SAAS,IAE7DA,EACE,kBAAC,MAAD,EAAA,UACGuC,EAAOI,cAAcE,KAAKC,GAAKC,MAC9B,kBAAC,MAAD,EAAA,UAAiBD,EAAQ,GAAhBC,CAAgB,CAC1B,EACC,CAAA,GACJ,WACA,EAAEC,OAAO,oCAAoC,CAC/C;AAEJ;AAEA,SAASN,EAAoBH,GAAwC;CACnE,IAAIA,EAAOU,SAASL,QAAQ;EAE1B,IAAMM,IAAeX,EAAOU,QAAQ;EACpC,IAAI5C,EAA8B6C,CAAY,GAAG;GAE/C,IAAMC,IACJC,EAAoCF,CAAY,EAAEG,KAAK,IAAI;GAE7D,AAAIF,IACFnD,EACE,uCAAuCmD,KACvC,QACF,IAEAnD,EAAa,gCAAgC,SAAS;EAE1D,OAAO,IAAIM,EAA8B4C,CAAY,GAAG;GAEtD,IAAMI,IAAiBJ,EAAaK,eAAeC,eAAe;GAClExD,EAAa,wBAAwBsD,EAAc,SAAU,SAAS;EACxE;CACF;AACF;AAEA,SAASF,EACPH,GACU;CACV,OACEA,EAAQQ,eACJC,QAAOrB,MAAK,CAAC,CAACA,EAAEsB,WAAW,EAC5Bd,KACCe,MAAK,GAAGA,EAAEC,SAAQ,IAAKD,EAAEE,eAAc,UAAWF,EAAED,YAAW,EACjE,KAAK,CAAA;AAEX"}