@acorex-platform/framework-server 0.0.32 → 0.0.37

package/security/src/lib/auth/auth.service.js

@@ -1,7 +1,7 @@
 "use strict";
 var AuthService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthService = exports.SESSION_MEMBERSHIP_DENIED_CODE = void 0;
+exports.AuthService = exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE = exports.SESSION_MEMBERSHIP_DENIED_CODE = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@acorex-platform/framework-server/core");
@@ -9,12 +9,16 @@ const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
 const core_2 = require("@acorex-platform/framework-shared/core");
 const lodash_es_1 = require("lodash-es");
 const crypto_1 = require("crypto");
+const ioredis_1 = tslib_1.__importDefault(require("ioredis"));
 const event_emitter_1 = require("@nestjs/event-emitter");
 const auth_config_1 = require("./auth.config");
 const auth_events_1 = require("./auth.events");
 const auth_local_credentials_service_1 = require("./auth-local-credentials.service");
+const auth_max_device_sessions_policy_1 = require("./auth-max-device-sessions-policy");
 const device_session_service_1 = require("./device-session.service");
+const request_meta_util_1 = require("./request-meta.util");
 const token_service_1 = require("./token.service");
+const token_revocation_constants_1 = require("./token-revocation.constants");
 //#region ---- Auth service ----
 const USER_ENTITY = 'SecurityManagement.User';
 const TENANT_ENTITY = 'TenantManagement.Tenant';
@@ -24,6 +28,26 @@ const ALLOWED_ACCESS_STATE = 'allowed';
 const ACTIVE_MEMBERSHIP_STATUS = 'active';
 /** Stable client i18n mapping key — not shown raw in UI. */
 exports.SESSION_MEMBERSHIP_DENIED_CODE = 'SESSION_MEMBERSHIP_DENIED';
+/** Stable client i18n mapping key — tenant max active device sessions exceeded. */
+exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE = 'MAX_ACTIVE_DEVICE_SESSIONS';
+function resolveRefreshReplayRedisConnection() {
+    const url = process.env['REDIS_URL']?.trim();
+    if (url) {
+        return { url };
+    }
+    const host = process.env['REDIS_HOST']?.trim();
+    const portRaw = Number(process.env['REDIS_PORT'] ?? 6379);
+    if (host) {
+        return { host, port: Number.isFinite(portRaw) ? portRaw : 6379 };
+    }
+    return null;
+}
+function createRefreshReplayRedisClient(connection) {
+    if ('url' in connection) {
+        return new ioredis_1.default(connection.url, { maxRetriesPerRequest: 2, lazyConnect: true });
+    }
+    return new ioredis_1.default({ ...connection, maxRetriesPerRequest: 2, lazyConnect: true });
+}
 let AuthService = AuthService_1 = class AuthService {
     constructor(entityStorage, tokenService, localCredentials, deviceSessions, events) {
         this.entityStorage = entityStorage;
@@ -32,9 +56,17 @@ let AuthService = AuthService_1 = class AuthService {
         this.deviceSessions = deviceSessions;
         this.events = events;
         this.logger = new common_1.Logger(AuthService_1.name);
+        const connection = resolveRefreshReplayRedisConnection();
+        this.refreshReplayRedis = connection ? createRefreshReplayRedisClient(connection) : null;
     }
-    async completeSignIn(user, meta) {
-        return this.completeAuthentication(this.toAuthUser(user), meta, {});
+    async onModuleDestroy() {
+        await this.refreshReplayRedis?.quit().catch(() => this.refreshReplayRedis?.disconnect());
+    }
+    async completeSignIn(user, meta, options) {
+        return this.completeAuthentication(this.toAuthUser(user), meta, {
+            audience: options?.audience,
+            ...(options?.persist !== undefined ? { persist: options.persist } : {}),
+        });
     }
     assertSupportedSignInStrategy(strategy) {
         const resolved = strategy ?? auth_config_1.AUTH_STRATEGY_USER_PASS;
@@ -69,13 +101,35 @@ let AuthService = AuthService_1 = class AuthService {
         });
         return this.completeAuthentication({ id, name: username, title: displayName, avatar: null }, meta, {});
     }
-    async refreshSession(refreshToken, meta) {
+    async refreshSession(refreshToken, meta, options) {
         const payload = this.verifyRefreshToken(refreshToken);
+        await this.assertRefreshNotRevoked(payload.jti);
+        // Refresh-token reuse detection:
+        // If the same refresh token `jti` is replayed, it has already been consumed once.
+        // In that case revoke the whole refresh chain (same `sid`) and reject.
+        const reuseKey = `${token_revocation_constants_1.OAUTH_REFRESH_REPLAY_KEY_PREFIX}${payload.jti}`;
+        const ttlMs = this.refreshTokenMaxAgeMs();
+        if (this.refreshReplayRedis) {
+            const firstUse = await this.refreshReplayRedis.set(reuseKey, '1', 'PX', ttlMs, 'NX');
+            if (firstUse === null) {
+                // DB SoT first, then Redis projection (middleware + explicit stamp).
+                await this.deviceSessions.revokeBySessionId(payload.sid);
+                await this.deviceSessions.revokeByAuthorizationId(payload.jti);
+                await this.markSessionRevoked(payload.sid, { required: true });
+                throw new common_1.UnauthorizedException('Refresh token reuse detected.');
+            }
+        }
         const user = await this.localCredentials.findUserById(payload.sub);
         if (!user) {
             throw new common_1.UnauthorizedException('User not found');
         }
-        await this.deviceSessions.revokeByAuthorizationId(payload.jti);
+        await this.assertSessionAllowed(payload.sid);
+        // Do NOT revoke the DeviceSessions row on refresh rotation.
+        // revokeByAuthorizationId → status:revoked projects Redis session-revoked:{sid}
+        // (device-sessions-token-revoke middleware). Tokens keep the same sid, so the next
+        // request would 401 ("logged out after refresh"). Old refresh jti is consumed via
+        // the replay key above; real terminates (logout / Active Sessions / reuse) still
+        // revoke the row + sid. update-binding below only rotates authorizationId (new jti).
         await this.assertActiveMembership(user.id, payload.tid, payload.aid);
         const [tenant, application] = await Promise.all([
             this.resolveTenantDto(payload.tid),
@@ -87,6 +141,9 @@ let AuthService = AuthService_1 = class AuthService {
             tenant,
             application,
             sessionId: payload.sid,
+            audience: options?.audience,
+            // Legacy refresh JWTs omit `persist` → keep persistent cookies (prior default).
+            persist: payload.persist !== false,
         }, 'update-binding');
     }
     async logout(refreshToken) {
@@ -95,12 +152,22 @@ let AuthService = AuthService_1 = class AuthService {
         }
         try {
             const payload = this.verifyRefreshToken(refreshToken);
+            await this.markRefreshRevoked(payload.jti);
+            // DeviceSessions SoT, then Redis sid projection.
             await this.deviceSessions.revokeByAuthorizationId(payload.jti);
+            await this.deviceSessions.revokeBySessionId(payload.sid);
+            await this.markSessionRevoked(payload.sid, { required: true });
             this.emitLogoutEvent({
                 userId: payload.sub,
                 tenantId: payload.tid,
                 at: new Date().toISOString(),
             });
+            this.emitSecurityAlert({
+                kind: 'logout',
+                userId: payload.sub,
+                at: new Date().toISOString(),
+                actorSessionId: payload.sid,
+            });
         }
         catch (error) {
             this.logger.debug(`Logout ignored invalid refresh token: ${String(error)}`);
@@ -108,7 +175,7 @@ let AuthService = AuthService_1 = class AuthService {
         return { success: true };
     }
     async updateSession(currentAccessToken, dto, meta) {
-        const current = this.verifyAccessToken(currentAccessToken);
+        const current = await this.validateAccessToken(currentAccessToken);
         const user = await this.localCredentials.findUserById(current.sub);
         if (!user) {
             throw new common_1.UnauthorizedException('User not found');
@@ -140,14 +207,27 @@ let AuthService = AuthService_1 = class AuthService {
             sessionId: current.sid,
         }, 'update-binding');
     }
-    verifyAccessToken(token) {
+    /**
+     * Cryptographic verify only (signature / exp / type / aud).
+     * Prefer {@link validateAccessToken} for request auth (OD-09 sid/jti checks).
+     */
+    verifyAccessToken(token, expectedAudience) {
         try {
-            return this.tokenService.verifyAccessToken(token);
+            return this.tokenService.verifyAccessToken(token, expectedAudience);
         }
         catch {
             throw new common_1.UnauthorizedException('Invalid or expired access token');
         }
     }
+    /**
+     * OD-09 access-token validation: signature → expiration → `sid` → `jti`.
+     */
+    async validateAccessToken(token, expectedAudience) {
+        const payload = this.verifyAccessToken(token, expectedAudience);
+        await this.assertSessionAllowed(payload.sid);
+        await this.assertAccessJtiNotRevoked(payload.jti);
+        return payload;
+    }
     verifyRefreshToken(token) {
         try {
             return this.tokenService.verifyRefreshToken(token);
@@ -162,7 +242,50 @@ let AuthService = AuthService_1 = class AuthService {
     refreshTokenMaxAgeMs() {
         return this.tokenService.refreshTokenMaxAgeMs();
     }
+    async revokeSessionById(sessionId) {
+        // DB SoT first; entity middleware projects Redis. Explicit stamp covers missing rows.
+        await this.deviceSessions.revokeBySessionId(sessionId);
+        await this.markSessionRevoked(sessionId, { required: true });
+    }
+    /**
+     * Projects DeviceSessions revoke (SoT) onto Redis for the JWT `sid` family.
+     * Request paths check Redis only — this stamp is required for terminate to take effect.
+     */
+    async invalidateLoginSession(sessionId) {
+        await this.markSessionRevoked(sessionId, { required: true });
+    }
+    /**
+     * Realtime kick for a remote DeviceSessions terminate (Active Sessions UI, etc.).
+     * Does not change Redis revoke — call after {@link invalidateLoginSession}.
+     */
+    notifyRemoteSessionTerminated(userId, sessionId) {
+        const uid = userId.trim();
+        const sid = sessionId.trim();
+        if (!uid || !sid) {
+            return;
+        }
+        this.emitSecurityAlert({
+            kind: 'session_terminated',
+            userId: uid,
+            at: new Date().toISOString(),
+            targetSessionId: sid,
+        });
+    }
+    decodeIdTokenHint(token) {
+        return this.tokenService.decodeIdTokenHint(token);
+    }
     async completeAuthentication(user, meta, context, deviceSessionMode = 'create') {
+        if (deviceSessionMode === 'create') {
+            await this.assertMaxActiveDeviceSessionsAllowed(user.id, meta, context.tenantId, {
+                mode: 'create',
+            });
+        }
+        else {
+            await this.assertMaxActiveDeviceSessionsAllowed(user.id, meta, context.tenantId, {
+                mode: 'update-binding',
+                sessionId: context.sessionId,
+            });
+        }
         const tokens = this.tokenService.issueTokenResponse(user, context);
         const refreshPayload = this.tokenService.verifyRefreshToken(tokens.refreshToken);
         const sessionId = tokens.sessionId ?? refreshPayload.sid;
@@ -174,7 +297,7 @@ let AuthService = AuthService_1 = class AuthService {
                 applicationId: context.applicationId,
             });
             if (!updated) {
-                await this.deviceSessions.createSession({
+                const created = await this.deviceSessions.createSession({
                     user,
                     authorizationId: refreshPayload.jti,
                     sessionId,
@@ -182,10 +305,11 @@ let AuthService = AuthService_1 = class AuthService {
                     tenantId: context.tenantId,
                     applicationId: context.applicationId,
                 });
+                await this.revokeReplacedDeviceSessions(created.replacedSessionIds);
             }
         }
         else {
-            await this.deviceSessions.createSession({
+            const created = await this.deviceSessions.createSession({
                 user,
                 authorizationId: refreshPayload.jti,
                 sessionId,
@@ -193,6 +317,14 @@ let AuthService = AuthService_1 = class AuthService {
                 tenantId: context.tenantId,
                 applicationId: context.applicationId,
             });
+            await this.revokeReplacedDeviceSessions(created.replacedSessionIds);
+            this.emitSecurityAlert({
+                kind: 'login_success',
+                userId: user.id,
+                at: new Date().toISOString(),
+                actorSessionId: sessionId,
+                ...this.securityAlertDeviceFields(meta),
+            });
         }
         try {
             await this.entityStorage.updateOneAsEngine(USER_ENTITY, user.id, {
@@ -204,6 +336,87 @@ let AuthService = AuthService_1 = class AuthService {
         }
         return tokens;
     }
+    /**
+     * Tenant setting MaxActiveDeviceSessions — per user + tenant.
+     * Enforced when a real tenant is known (tenant chooser bind / auto-bind, or create with tid).
+     * Same device upsert (create) and re-bind of the current session to the same tenant are allowed.
+     */
+    async assertMaxActiveDeviceSessionsAllowed(userId, meta, tenantId, options) {
+        const tid = tenantId?.trim();
+        if (!tid || (0, device_session_service_1.isUnboundDeviceSessionTenantId)(tid)) {
+            return;
+        }
+        const max = await (0, auth_max_device_sessions_policy_1.resolveAuthMaxDeviceSessions)(tid);
+        if (max <= 0) {
+            return;
+        }
+        if (options.mode === 'update-binding' && options.sessionId) {
+            const boundTenantId = await this.deviceSessions.getActiveTenantIdForSession(options.sessionId);
+            if (boundTenantId === tid) {
+                return;
+            }
+            const activeCount = await this.deviceSessions.countActiveForUserTenant(userId, tid, {
+                excludeSessionIds: [options.sessionId],
+            });
+            if (activeCount >= max) {
+                throw new common_1.ForbiddenException({
+                    code: exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE,
+                    message: exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE,
+                    error: exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE,
+                });
+            }
+            return;
+        }
+        if (await this.deviceSessions.hasActiveDeviceForUser(userId, meta)) {
+            return;
+        }
+        const activeCount = await this.deviceSessions.countActiveForUserTenant(userId, tid);
+        if (activeCount >= max) {
+            throw new common_1.ForbiddenException({
+                code: exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE,
+                message: exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE,
+                error: exports.MAX_ACTIVE_DEVICE_SESSIONS_CODE,
+            });
+        }
+    }
+    /**
+     * Active DeviceSessions for the authenticated user in a tenant (session-limit chooser).
+     */
+    async listOwnActiveDeviceSessions(accessToken, tenantId) {
+        const current = await this.validateAccessToken(accessToken);
+        const tid = tenantId.trim();
+        if (!tid || (0, device_session_service_1.isUnboundDeviceSessionTenantId)(tid)) {
+            return [];
+        }
+        const rows = await this.deviceSessions.listActiveSessionsForUserTenant(current.sub, tid);
+        return rows
+            .filter((row) => row.sessionId !== current.sid)
+            .map((row) => ({
+            id: row.id,
+            sessionId: row.sessionId,
+            tenantId: row.tenantId,
+            deviceName: row.deviceName,
+            browser: row.browser,
+            operatingSystem: row.operatingSystem,
+            ipAddress: row.ipAddress,
+            lastLoginAt: row.lastLoginAt,
+        }));
+    }
+    /**
+     * Terminate one of the caller's DeviceSessions (by entity id) during session-limit recovery.
+     */
+    async terminateOwnDeviceSession(accessToken, deviceSessionId) {
+        const current = await this.validateAccessToken(accessToken);
+        const revokedSid = await this.deviceSessions.revokeOwnedSessionById(current.sub, deviceSessionId);
+        if (revokedSid == null) {
+            throw new common_1.BadRequestException('Device session not found');
+        }
+        // Engine update skips DeviceSessionsTokenRevokeMiddleware — stamp Redis here.
+        if (revokedSid !== '' && revokedSid !== current.sid) {
+            await this.markSessionRevoked(revokedSid, { required: true });
+            this.notifyRemoteSessionTerminated(current.sub, revokedSid);
+        }
+    }
     emitLogoutEvent(payload) {
         try {
             this.events?.emit(auth_events_1.AUTH_LOGOUT_EVENT, payload);
@@ -212,6 +425,24 @@ let AuthService = AuthService_1 = class AuthService {
             this.logger.debug(`Auth logout event emit failed: ${String(error)}`);
         }
     }
+    emitSecurityAlert(payload) {
+        try {
+            this.events?.emit(auth_events_1.AUTH_SECURITY_ALERT_EVENT, payload);
+        }
+        catch (error) {
+            this.logger.debug(`Auth security alert emit failed: ${String(error)}`);
+        }
+    }
+    securityAlertDeviceFields(meta) {
+        const parsed = (0, request_meta_util_1.parseUserAgent)(meta.userAgent);
+        return {
+            deviceSummary: `${parsed.deviceName} · ${parsed.browser}`,
+            ipAddress: meta.ipAddress,
+            browser: parsed.browser,
+            deviceName: parsed.deviceName,
+            operatingSystem: parsed.operatingSystem,
+        };
+    }
     toAuthUser(user) {
         return {
             id: user.id,
@@ -377,6 +608,76 @@ let AuthService = AuthService_1 = class AuthService {
             'default-name';
         return { id: applicationId, name: routeName, title };
     }
+    async assertRefreshNotRevoked(jti) {
+        if (!this.refreshReplayRedis || !jti.trim()) {
+            return;
+        }
+        const revoked = await this.refreshReplayRedis.get(`${token_revocation_constants_1.OAUTH_REFRESH_REVOKED_KEY_PREFIX}${jti}`);
+        if (revoked) {
+            throw new common_1.UnauthorizedException('Refresh token has been revoked.');
+        }
+    }
+    async markRefreshRevoked(jti) {
+        if (!this.refreshReplayRedis || !jti.trim()) {
+            return;
+        }
+        const ttlMs = this.refreshTokenMaxAgeMs();
+        await this.refreshReplayRedis.set(`${token_revocation_constants_1.OAUTH_REFRESH_REVOKED_KEY_PREFIX}${jti}`, '1', 'PX', ttlMs);
+    }
+    async markSessionRevoked(sessionId, options) {
+        const sid = sessionId?.trim();
+        if (!sid) {
+            if (options?.required) {
+                throw new common_1.BadRequestException('sessionId is required to invalidate a login session.');
+            }
+            return;
+        }
+        if (!this.refreshReplayRedis) {
+            const message = 'Session revoke store (Redis) is unavailable; cannot project DeviceSessions revoke.';
+            if (options?.required) {
+                throw new common_1.ServiceUnavailableException(message);
+            }
+            this.logger.warn(message);
+            return;
+        }
+        // Cover remaining access-token TTL after logout (refresh TTL is an upper bound).
+        const ttlMs = Math.max(this.refreshTokenMaxAgeMs(), this.accessTokenMaxAgeMs());
+        await this.refreshReplayRedis.set(`${token_revocation_constants_1.OAUTH_SESSION_REVOKED_KEY_PREFIX}${sid}`, '1', 'PX', ttlMs);
+    }
+    /** Invalidates prior login families when the same device row is reused (per-device upsert). */
+    async revokeReplacedDeviceSessions(sessionIds) {
+        for (const sid of sessionIds) {
+            await this.markSessionRevoked(sid, { required: true });
+        }
+    }
+    /**
+     * OD-09 hot path: Redis projection only. DeviceSessions is SoT on write;
+     * do not query Mongo here (see device-session-revocation.mdc).
+     */
+    async assertSessionAllowed(sessionId) {
+        const sid = sessionId?.trim();
+        if (!sid) {
+            // Legacy access tokens without `sid` — signature/exp only.
+            return;
+        }
+        if (!this.refreshReplayRedis) {
+            throw new common_1.ServiceUnavailableException('Session store (Redis) is unavailable.');
+        }
+        const revoked = await this.refreshReplayRedis.get(`${token_revocation_constants_1.OAUTH_SESSION_REVOKED_KEY_PREFIX}${sid}`);
+        if (revoked) {
+            throw new common_1.UnauthorizedException('Session has been revoked.');
+        }
+    }
+    async assertAccessJtiNotRevoked(jti) {
+        const id = jti?.trim();
+        if (!this.refreshReplayRedis || !id) {
+            return;
+        }
+        const revoked = await this.refreshReplayRedis.get(`${token_revocation_constants_1.OAUTH_ACCESS_REVOKED_KEY_PREFIX}${id}`);
+        if (revoked) {
+            throw new common_1.UnauthorizedException('Access token has been revoked.');
+        }
+    }
 };
 exports.AuthService = AuthService;
 exports.AuthService = AuthService = AuthService_1 = tslib_1.__decorate([

package/security/src/lib/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAOwB;AACxB,iEAAwF;AACxF,6EAIwD;AACxD,iEAKgD;AAChD,yCAAiC;AACjC,mCAAoC;AACpC,yDAAsD;AACtD,+CAAwD;AACxD,+CAA+E;AAC/E,qFAA+E;AAC/E,qEAAgE;AAEhE,mDAA+C;AAW/C,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAC1C,4DAA4D;AAC/C,QAAA,8BAA8B,GAAG,2BAA2B,CAAC;AAGnE,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGtB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC,EACzC,MAAuC;QAJlC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QACxB,WAAM,GAAN,MAAM,CAAgB;QAPpC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAQpD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB;QAErB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAChC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EACxD,IAAI,EACJ,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB,EAAE,IAAqB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAMC,EACD,oBAAiD,QAAQ;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAEzD,IAAI,iBAAiB,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;oBACtC,IAAI;oBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;oBACnC,SAAS;oBACT,IAAI;oBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBACtC,IAAI;gBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,SAAS;gBACT,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC/D,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,OAA+B;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;SAC1C,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,QAA4B,EAC5B,aAAiC;QAEjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,oCAAyB,GAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,IAAI,6BAA6B,CAAC;QACvF,MAAM,eAAe,GACnB,OAAO,CAAC,6BAA6B,IAAI,sCAAsC,CAAC;QAElF,MAAM,YAAY,GAAG;YACnB,CAAC,8BAAmB,CAAC,EAAE,IAAI;YAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;SACjC,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE;YACnE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;oBAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;oBACnE;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAmC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,cAAc;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACvB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBACzE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBAC7E;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,6CAA6C;gBACtD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;gBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC;aAC5D,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,CAAC,KAAK,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACzF,MAAM,SAAS,GACb,OAAO,EAAE,IAAI;YACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAC7E,cAAc,CAAC;QAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAtbY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IASR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;6CAJqB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;QACf,6BAAa;GAR1C,WAAW,CAsbvB;AAED,YAAY"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CASwB;AACxB,iEAAwF;AACxF,6EAIwD;AACxD,iEAKgD;AAChD,yCAAiC;AACjC,mCAAoC;AACpC,8DAA4B;AAC5B,yDAAsD;AACtD,+CAAwD;AACxD,+CAA8I;AAC9I,qFAA+E;AAC/E,uFAAiF;AACjF,qEAAgG;AAEhG,2DAAqD;AACrD,mDAA+C;AAC/C,6EAKsC;AAatC,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAC1C,4DAA4D;AAC/C,QAAA,8BAA8B,GAAG,2BAA2B,CAAC;AAC1E,mFAAmF;AACtE,QAAA,+BAA+B,GAAG,4BAA4B,CAAC;AAI5E,SAAS,mCAAmC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CACrC,UAAuD;IAEvD,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,iBAAK,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,iBAAK,CAAC,EAAE,GAAG,UAAU,EAAE,oBAAoB,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAGM,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAItB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC,EACzC,MAAuC;QAJlC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QACxB,WAAM,GAAN,MAAM,CAAgB;QARpC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;QAUrD,MAAM,UAAU,GAAG,mCAAmC,EAAE,CAAC;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB,EACrB,OAAkD;QAElD,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAChC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EACxD,IAAI,EACJ,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,YAAoB,EACpB,IAAqB,EACrB,OAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAEtD,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEhD,iCAAiC;QACjC,kFAAkF;QAClF,uEAAuE;QACvE,MAAM,QAAQ,GAAG,GAAG,4DAA+B,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,qEAAqE;gBACrE,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/D,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7C,4DAA4D;QAC5D,gFAAgF;QAChF,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,qFAAqF;QAErF,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;YACtB,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,gFAAgF;YAChF,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK;SACnC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,iDAAiD;YACjD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC;gBACrB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,cAAc,EAAE,OAAO,CAAC,GAAG;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,KAAa,EAAE,gBAAyB;QACxD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,KAAa,EACb,gBAAyB;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,sFAAsF;QACtF,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAAC,MAAc,EAAE,SAAiB;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC;YACrB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,eAAe,EAAE,GAAG;SACrB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAQC,EACD,oBAAiD,QAAQ;QAEzD,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC/E,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC/E,IAAI,EAAE,gBAAgB;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAEzD,IAAI,iBAAiB,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;oBACtD,IAAI;oBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;oBACnC,SAAS;oBACT,IAAI;oBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBACtD,IAAI;gBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,SAAS;gBACT,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpE,IAAI,CAAC,iBAAiB,CAAC;gBACrB,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,cAAc,EAAE,SAAS;gBACzB,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC/D,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,oCAAoC,CAChD,MAAc,EACd,IAAqB,EACrB,QAA4B,EAC5B,OAGC;QAED,MAAM,GAAG,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,IAAA,uDAA8B,EAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,8DAA4B,EAAC,GAAG,CAAC,CAAC;QACpD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/F,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,EAAE;gBAClF,iBAAiB,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,uCAA+B;oBACrC,OAAO,EAAE,uCAA+B;oBACxC,KAAK,EAAE,uCAA+B;iBACvC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpF,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,uCAA+B;gBACrC,OAAO,EAAE,uCAA+B;gBACxC,KAAK,EAAE,uCAA+B;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,WAAmB,EACnB,QAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,IAAA,uDAA8B,EAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,+BAA+B,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzF,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC;aAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,WAAmB,EAAE,eAAuB;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CACjE,OAAO,CAAC,GAAG,EACX,eAAe,CAChB,CAAC;QACF,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QAED,8EAA8E;QAC9E,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,OAA+B;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAsC;QAC9D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,uCAAyB,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,IAAqB;QAIrD,MAAM,MAAM,GAAG,IAAA,kCAAc,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO;YACL,aAAa,EAAE,GAAG,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;YACzD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;SAC1C,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,QAA4B,EAC5B,aAAiC;QAEjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,oCAAyB,GAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,IAAI,6BAA6B,CAAC;QACvF,MAAM,eAAe,GACnB,OAAO,CAAC,6BAA6B,IAAI,sCAAsC,CAAC;QAElF,MAAM,YAAY,GAAG;YACnB,CAAC,8BAAmB,CAAC,EAAE,IAAI;YAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;SACjC,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE;YACnE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;oBAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;oBACnE;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAmC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,cAAc;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACvB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBACzE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBAC7E;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,6CAA6C;gBACtD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;gBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC;aAC5D,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,CAAC,KAAK,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACzF,MAAM,SAAS,GACb,OAAO,EAAE,IAAI;YACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAC7E,cAAc,CAAC;QAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,GAAW;QAC/C,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC/F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAC1C,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,SAA6B,EAC7B,OAAgC;QAEhC,MAAM,GAAG,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,4BAAmB,CAAC,sDAAsD,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,oFAAoF,CAAC;YACrG,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,oCAA2B,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,iFAAiF;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IAED,+FAA+F;IACvF,KAAK,CAAC,4BAA4B,CAAC,UAAoB;QAC7D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAAC,SAA6B;QAC9D,MAAM,GAAG,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,2DAA2D;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,oCAA2B,CAAC,uCAAuC,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC/F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,GAAuB;QAC7D,MAAM,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,EAAE,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,4DAA+B,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF,CAAA;AA7wBY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAUR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;6CAJqB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;QACf,6BAAa;GAT1C,WAAW,CA6wBvB;AAED,YAAY"}

package/security/src/lib/auth/auth.types.d.ts

@@ -3,6 +3,8 @@ export interface SignInRequestDto {
     strategy?: string;
     username: string;
     password: string;
+    /** When true, refresh cookie uses maxAge (survive browser restart). When false, session cookie. */
+    rememberMe?: boolean;
 }
 export interface RegisterRequestDto {
     strategy?: string;
@@ -24,6 +26,24 @@ export interface UpdateSessionRequestDto {
         title?: AXPMultiLanguageString;
     };
 }
+/** Device session row for the session-limit chooser (caller’s other devices). */
+export interface AuthOwnDeviceSessionDto {
+    id: string;
+    sessionId: string;
+    tenantId: string;
+    deviceName: string;
+    browser: string;
+    operatingSystem: string;
+    ipAddress: string;
+    lastLoginAt?: string;
+}
+export interface AuthListOwnDeviceSessionsRequestDto {
+    tenantId: string;
+}
+export interface AuthTerminateOwnDeviceSessionRequestDto {
+    /** DeviceSessions entity id (not JWT `sid`). */
+    id: string;
+}
 export interface RefreshTokenRequestDto {
     refreshToken?: string;
 }
@@ -49,6 +69,12 @@ export interface AuthTokenResponseDto {
     refreshToken: string;
     expiresIn: string;
     sessionId?: string;
+    /**
+     * When true, browser should set a persistent refresh cookie (maxAge).
+     * When false, refresh cookie is session-scoped (cleared on browser close).
+     * Omitted / undefined → treat as persistent (backward compatible).
+     */
+    persist?: boolean;
     user: AuthUserDto;
     tenant?: AuthTenantDto | null;
     application?: AuthApplicationDto | null;
@@ -58,8 +84,15 @@ export interface AccessTokenPayload {
     username: string;
     tid?: string;
     aid?: string;
+    /** Session id — OD-09 session-level revoke. */
     sid?: string;
+    /** JWT id — OD-09 token-level revoke (optional on legacy tokens). */
+    jti?: string;
     type: 'access';
+    /** RFC 9068 access token type claim when present in JWT payload. */
+    typ?: string;
+    /** Standard OAuth/JWT audience; Platform OP stamps fixed `platform`. */
+    aud?: string | string[];
 }
 export interface RefreshTokenPayload {
     sub: string;
@@ -68,11 +101,14 @@ export interface RefreshTokenPayload {
     sid: string;
     tid?: string;
     aid?: string;
+    /** Remember-me: re-apply persistent refresh cookie on rotation. */
+    persist?: boolean;
 }
 export interface SecurityManagementUserRecord {
     id: string;
     username?: string;
     displayName?: string;
+    email?: string;
     password?: string;
     avatar?: string | null;
     accountState?: string;

package/security/src/lib/auth/auth.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAErF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IACvE,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CAC7E;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1C"}
+{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAErF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IACvE,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CAC7E;AAED,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uCAAuC;IACtD,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1C"}

package/security/src/lib/auth/auth.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAuF9C,YAAY"}
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AA8H9C,YAAY"}