@ackplus/nest-auth 1.1.27 → 1.1.29

package/dist/lib/auth/interceptors/refresh-token.interceptor.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshTokenInterceptor = void 0;
+const common_1 = require("@nestjs/common");
+const auth_service_1 = require("../services/auth.service");
+const cookie_service_1 = require("../services/cookie.service");
+const jwt_service_1 = require("../../core/services/jwt.service");
+const auth_config_service_1 = require("../../core/services/auth-config.service");
+const auth_constants_1 = require("../../auth.constants");
+let RefreshTokenInterceptor = class RefreshTokenInterceptor {
+    authService;
+    cookieService;
+    jwtService;
+    authConfig;
+    constructor(authService, cookieService, jwtService, authConfig) {
+        this.authService = authService;
+        this.cookieService = cookieService;
+        this.jwtService = jwtService;
+        this.authConfig = authConfig;
+    }
+    async intercept(context, next) {
+        const request = context.switchToHttp().getRequest();
+        const response = context.switchToHttp().getResponse();
+        const authHeader = request.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Bearer ')) {
+            return next.handle();
+        }
+        const accessToken = authHeader.split(' ')[1];
+        if (!accessToken) {
+            return next.handle();
+        }
+        try {
+            await this.jwtService.verifyToken(accessToken);
+            return next.handle();
+        }
+        catch (error) {
+            const refreshToken = this.extractRefreshToken(request);
+            if (!refreshToken) {
+                return next.handle();
+            }
+            try {
+                const newSession = await this.authService.refreshToken(refreshToken);
+                const config = this.authConfig.getConfig();
+                const useCookies = config.accessTokenType === 'cookie';
+                if (useCookies) {
+                    this.cookieService.setTokens(response, newSession.accessToken, newSession.refreshToken);
+                }
+                else {
+                    request.headers.authorization = `Bearer ${newSession.accessToken}`;
+                }
+                return next.handle();
+            }
+            catch (refreshError) {
+                return next.handle();
+            }
+        }
+    }
+    extractRefreshToken(request) {
+        const tokenFromCookie = request.cookies?.[auth_constants_1.REFRESH_TOKEN_COOKIE_NAME];
+        if (tokenFromCookie) {
+            return tokenFromCookie;
+        }
+        const authHeader = request.headers['x-refresh-token'];
+        if (authHeader) {
+            return authHeader;
+        }
+        return null;
+    }
+};
+exports.RefreshTokenInterceptor = RefreshTokenInterceptor;
+exports.RefreshTokenInterceptor = RefreshTokenInterceptor = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        cookie_service_1.CookieService,
+        jwt_service_1.JwtService,
+        auth_config_service_1.AuthConfigService])
+], RefreshTokenInterceptor);
+//# sourceMappingURL=refresh-token.interceptor.js.map

package/dist/lib/auth/interceptors/refresh-token.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.interceptor.js","sourceRoot":"","sources":["../../../../src/lib/auth/interceptors/refresh-token.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4F;AAI5F,2DAAuD;AACvD,+DAA2D;AAC3D,iEAA6D;AAC7D,iFAA4E;AAC5E,yDAA8F;AA2BvF,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAEX;IACA;IACA;IACA;IAJrB,YACqB,WAAwB,EACxB,aAA4B,EAC5B,UAAsB,EACtB,UAA6B;QAH7B,gBAAW,GAAX,WAAW,CAAa;QACxB,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;QACtB,eAAU,GAAV,UAAU,CAAmB;IAC9C,CAAC;IAEL,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,WAAW,EAAY,CAAC;QAGhE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAEnD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAGD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAE/C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEb,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAEvD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAEhB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,CAAC;gBAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAGrE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC;gBAEvD,IAAI,UAAU,EAAE,CAAC;oBAEb,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;gBAC5F,CAAC;qBAAM,CAAC;oBAEJ,OAAO,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,UAAU,CAAC,WAAW,EAAE,CAAC;gBACvE,CAAC;gBAGD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBAEpB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC;QACL,CAAC;IACL,CAAC;IAKO,mBAAmB,CAAC,OAAgB;QAExC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,0CAAyB,CAAC,CAAC;QACrE,IAAI,eAAe,EAAE,CAAC;YAClB,OAAO,eAAe,CAAC;QAC3B,CAAC;QAGD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACtD,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,UAAoB,CAAC;QAChC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAjFY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAGyB,0BAAW;QACT,8BAAa;QAChB,wBAAU;QACV,uCAAiB;GALzC,uBAAuB,CAiFnC"}

package/dist/lib/auth/services/auth-session-event-listener.service.d.ts

@@ -0,0 +1,12 @@
+import { UserUpdatedEvent } from '../../user/events/user-updated.event';
+import { UserDeletedEvent } from '../../user/events/user-deleted.event';
+import { SessionManagerService } from '../../session/services/session-manager.service';
+import { DebugLoggerService } from '../../core/services/debug-logger.service';
+export declare class AuthSessionEventListener {
+    private readonly sessionManager;
+    private readonly debugLogger;
+    constructor(sessionManager: SessionManagerService, debugLogger: DebugLoggerService);
+    handleUserUpdated(event: UserUpdatedEvent): Promise<void>;
+    handleUserDeleted(event: UserDeletedEvent): Promise<void>;
+}
+//# sourceMappingURL=auth-session-event-listener.service.d.ts.map

package/dist/lib/auth/services/auth-session-event-listener.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session-event-listener.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/services/auth-session-event-listener.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAM9E,qBACa,wBAAwB;IAE7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,cAAc,EAAE,qBAAqB,EACrC,WAAW,EAAE,kBAAkB;IAI9C,iBAAiB,CAAC,KAAK,EAAE,gBAAgB;IAWzC,iBAAiB,CAAC,KAAK,EAAE,gBAAgB;CAKlD"}

package/dist/lib/auth/services/auth-session-event-listener.service.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthSessionEventListener = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const auth_constants_1 = require("../../auth.constants");
+const user_updated_event_1 = require("../../user/events/user-updated.event");
+const user_deleted_event_1 = require("../../user/events/user-deleted.event");
+const session_manager_service_1 = require("../../session/services/session-manager.service");
+const debug_logger_service_1 = require("../../core/services/debug-logger.service");
+let AuthSessionEventListener = class AuthSessionEventListener {
+    sessionManager;
+    debugLogger;
+    constructor(sessionManager, debugLogger) {
+        this.sessionManager = sessionManager;
+        this.debugLogger = debugLogger;
+    }
+    async handleUserUpdated(event) {
+        const { user, updatedFields } = event.payload;
+        if (updatedFields.includes('isActive') && user.isActive === false) {
+            this.debugLogger.info('User deactivated. Revoking all sessions.', 'AuthSessionEventListener', { userId: user.id });
+            await this.sessionManager.revokeAllUserSessions(user.id);
+        }
+    }
+    async handleUserDeleted(event) {
+        const { user } = event.payload;
+        this.debugLogger.info('User deleted. Revoking all sessions.', 'AuthSessionEventListener', { userId: user.id });
+        await this.sessionManager.revokeAllUserSessions(user.id);
+    }
+};
+exports.AuthSessionEventListener = AuthSessionEventListener;
+__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.USER_UPDATED),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [user_updated_event_1.UserUpdatedEvent]),
+    __metadata("design:returntype", Promise)
+], AuthSessionEventListener.prototype, "handleUserUpdated", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)(auth_constants_1.NestAuthEvents.USER_DELETED),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [user_deleted_event_1.UserDeletedEvent]),
+    __metadata("design:returntype", Promise)
+], AuthSessionEventListener.prototype, "handleUserDeleted", null);
+exports.AuthSessionEventListener = AuthSessionEventListener = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [session_manager_service_1.SessionManagerService,
+        debug_logger_service_1.DebugLoggerService])
+], AuthSessionEventListener);
+//# sourceMappingURL=auth-session-event-listener.service.js.map

package/dist/lib/auth/services/auth-session-event-listener.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session-event-listener.service.js","sourceRoot":"","sources":["../../../../src/lib/auth/services/auth-session-event-listener.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,2CAA4C;AAC5C,yDAAgD;AAChD,yDAAsD;AACtD,6EAAwE;AACxE,6EAAwE;AACxE,4FAAuF;AACvF,mFAA8E;AAOvE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEZ;IACA;IAFrB,YACqB,cAAqC,EACrC,WAA+B;QAD/B,mBAAc,GAAd,cAAc,CAAuB;QACrC,gBAAW,GAAX,WAAW,CAAoB;IAChD,CAAC;IAGC,AAAN,KAAK,CAAC,iBAAiB,CAAC,KAAuB;QAC3C,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QAG9C,IAAI,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAChE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,0CAA0C,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACnH,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CAAC,KAAuB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,sCAAsC,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;CACJ,CAAA;AAvBY,4DAAwB;AAO3B;IADL,IAAA,uBAAO,EAAC,+BAAc,CAAC,YAAY,CAAC;;qCACN,qCAAgB;;iEAQ9C;AAGK;IADL,IAAA,uBAAO,EAAC,+BAAc,CAAC,YAAY,CAAC;;qCACN,qCAAgB;;iEAI9C;mCAtBQ,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAG4B,+CAAqB;QACxB,yCAAkB;GAH3C,wBAAwB,CAuBpC"}

package/dist/lib/auth/services/auth.service.d.ts

@@ -0,0 +1,72 @@
+import { Repository } from 'typeorm';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { NestAuthOTP } from '../../auth/entities/otp.entity';
+import { MfaService } from './mfa.service';
+import { JwtService } from '../../core/services/jwt.service';
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import { SessionManagerService } from '../../session/services/session-manager.service';
+import { SignupRequestDto } from '../dto/requests/signup.request.dto';
+import { AuthResponseDto } from '../dto/responses/auth.response.dto';
+import { LoginRequestDto } from '../dto/requests/login.request.dto';
+import { Verify2faRequestDto } from '../dto/requests/verify-2fa.request.dto';
+import { MFAMethodEnum, MFAOptions } from '../../core/interfaces/mfa-options.interface';
+import { ForgotPasswordRequestDto } from '../dto/requests/forgot-password.request.dto';
+import { ResetPasswordRequestDto } from '../dto/requests/reset-password.request.dto';
+import { AuthProviderRegistryService } from '../../core/services/auth-provider-registry.service';
+import { TenantService } from '../../tenant/services/tenant.service';
+import { DebugLoggerService } from '../../core/services/debug-logger.service';
+import { VerifyForgotPasswordOtpRequestDto } from '../dto/requests/verify-forgot-password-otp-request-dto';
+import { ResetPasswordWithTokenRequestDto } from '../dto/requests/reset-password-with-token.request.dto';
+import { ChangePasswordRequestDto } from '../dto/requests/change-password.request.dto';
+import { VerifyOtpResponseDto } from '../dto/responses/verify-otp.response.dto';
+import { SendEmailVerificationRequestDto } from '../dto/requests/send-email-verification.request.dto';
+import { VerifyEmailRequestDto } from '../dto/requests/verify-email.request.dto';
+import { AuthConfigService } from '../../core/services/auth-config.service';
+import { AuthTokensResponseDto } from '../dto/responses/auth.response.dto';
+import { UserService } from '../../user/services/user.service';
+export declare class AuthService {
+    private readonly userRepository;
+    private otpRepository;
+    private readonly authProviderRegistry;
+    private readonly mfaService;
+    private readonly sessionManager;
+    private readonly jwtService;
+    private readonly eventEmitter;
+    private readonly tenantService;
+    private readonly debugLogger;
+    private readonly authConfigService;
+    private readonly userService;
+    constructor(userRepository: Repository<NestAuthUser>, otpRepository: Repository<NestAuthOTP>, authProviderRegistry: AuthProviderRegistryService, mfaService: MfaService, sessionManager: SessionManagerService, jwtService: JwtService, eventEmitter: EventEmitter2, tenantService: TenantService, debugLogger: DebugLoggerService, authConfigService: AuthConfigService, userService: UserService);
+    get mfaConfig(): MFAOptions;
+    getUserWithRolesAndPermissions(userId: string, relations?: string[]): Promise<NestAuthUser>;
+    getUser(): Promise<Partial<NestAuthUser>>;
+    signup(input: SignupRequestDto): Promise<AuthResponseDto>;
+    login(input: LoginRequestDto): Promise<AuthResponseDto>;
+    verify2fa(input: Verify2faRequestDto): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        trustToken: string;
+    }>;
+    send2faCode(userId: string, method: MFAMethodEnum): Promise<boolean>;
+    private handleSocialLogin;
+    refreshToken(refreshToken: string): Promise<AuthTokensResponseDto>;
+    changePassword(input: ChangePasswordRequestDto): Promise<AuthResponseDto>;
+    forgotPassword(input: ForgotPasswordRequestDto): Promise<true | {
+        message: string;
+    }>;
+    verifyForgotPasswordOtp(input: VerifyForgotPasswordOtpRequestDto): Promise<VerifyOtpResponseDto>;
+    resetPassword(input: ResetPasswordRequestDto): Promise<boolean>;
+    resetPasswordWithToken(input: ResetPasswordWithTokenRequestDto): Promise<boolean>;
+    logout(logoutType?: 'user' | 'admin' | 'system', reason?: string): Promise<boolean>;
+    logoutAll(userId: string, logoutType?: 'user' | 'admin' | 'system', reason?: string): Promise<boolean>;
+    sendEmailVerification(input: SendEmailVerificationRequestDto): Promise<{
+        message: string;
+    }>;
+    verifyEmail(input: VerifyEmailRequestDto): Promise<{
+        message: string;
+    }>;
+    private generateTokensPayload;
+    private handleError;
+    private generateTokensFromSession;
+}
+//# sourceMappingURL=auth.service.d.ts.map

package/dist/lib/auth/services/auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/services/auth.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAU7D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACH,aAAa,EACb,UAAU,EACb,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAEvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAUrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAE9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,wDAAwD,CAAC;AAC3G,OAAO,EAAE,gCAAgC,EAAE,MAAM,uDAAuD,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,qDAAqD,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAI5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAI/D,qBACa,WAAW;IAIhB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAG/B,OAAO,CAAC,aAAa;IAErB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAE3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAE3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,WAAW;gBArBX,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,EAGjD,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC,EAE7B,oBAAoB,EAAE,2BAA2B,EAEjD,UAAU,EAAE,UAAU,EAEtB,cAAc,EAAE,qBAAqB,EAErC,UAAU,EAAE,UAAU,EAEtB,YAAY,EAAE,aAAa,EAE3B,aAAa,EAAE,aAAa,EAE5B,WAAW,EAAE,kBAAkB,EAE/B,iBAAiB,EAAE,iBAAiB,EAEpC,WAAW,EAAE,WAAW;IAM7C,IAAI,SAAS,IAAI,UAAU,CAE1B;IAED,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAUzF,OAAO;IAgBP,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IA6IzD,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAgIvD,SAAS,CAAC,KAAK,EAAE,mBAAmB;;;;;IAsEpC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa;YAezC,iBAAiB;IAqDzB,YAAY,CAAC,YAAY,EAAE,MAAM;IA8DjC,cAAc,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC;IAsEzE,cAAc,CAAC,KAAK,EAAE,wBAAwB;;;IAgH9C,uBAAuB,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyFhG,aAAa,CAAC,KAAK,EAAE,uBAAuB;IA+E5C,sBAAsB,CAAC,KAAK,EAAE,gCAAgC;IAsE9D,MAAM,CAAC,UAAU,GAAE,MAAM,GAAG,OAAO,GAAG,QAAiB,EAAE,MAAM,CAAC,EAAE,MAAM;IAwBxE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,GAAG,OAAO,GAAG,QAAiB,EAAE,MAAM,CAAC,EAAE,MAAM;IAiC3F,qBAAqB,CAAC,KAAK,EAAE,+BAA+B;;;IA6D5D,WAAW,CAAC,KAAK,EAAE,qBAAqB;;;YAkFhC,qBAAqB;IA4BnC,OAAO,CAAC,WAAW;YAYL,yBAAyB;CAK1C"}