@astram/frontend-core 0.1.0

package/dist/auth/authService.js

@@ -0,0 +1,121 @@
+export function createAuthService(http) {
+    return {
+        /**
+         * Log in. Resolves to:
+         *   { ok: true, session, tokens }   — authenticated
+         *   { ok: 'mfa', challengeToken }   — second factor required
+         *   { ok: false, error }            — bad credentials / unavailable / unreachable
+         */
+        async login(identityHint, password) {
+            const r = await http.post('/auth/login', { identityHint, password });
+            const data = r.data;
+            if (r.status === 0)
+                return { ok: false, error: 'Cannot reach the server. Is it running?' };
+            if (r.status === 200 && data?.mfaRequired) {
+                return { ok: 'mfa', challengeToken: data.challengeToken };
+            }
+            if (r.ok && data?.session && data?.tokens) {
+                return { ok: true, session: data.session, tokens: data.tokens };
+            }
+            if (r.status === 401)
+                return { ok: false, error: 'Invalid username or password.' };
+            if (r.status === 503) {
+                return { ok: false, error: 'Authentication is temporarily unavailable. Please try again.' };
+            }
+            return { ok: false, error: 'Login failed. Please try again.' };
+        },
+        /**
+         * Complete an MFA challenge (second factor).
+         * @param factor defaults to 'totp'
+         */
+        async completeMfa(challengeToken, code, factor = 'totp') {
+            const r = await http.post('/auth/mfa', { challengeToken, factor, code });
+            const data = r.data;
+            if (r.ok && data?.session && data?.tokens) {
+                // `mfaRecoveryUsed` is set only when the login was completed with a recovery
+                // code (the server's recovery branch) — the consumer uses it to force the
+                // account into the re-enroll flow. Absent/false for a normal TOTP login.
+                return {
+                    ok: true,
+                    session: data.session,
+                    tokens: data.tokens,
+                    mfaRecoveryUsed: data.mfaRecoveryUsed === true,
+                };
+            }
+            return { ok: false, error: 'Incorrect or expired code.' };
+        },
+        /** Rotate the session's tokens with a refresh token. */
+        async refresh(refreshToken) {
+            const r = await http.post('/auth/refresh', { refreshToken });
+            const data = r.data;
+            if (r.ok && data?.session && data?.tokens) {
+                return { ok: true, session: data.session, tokens: data.tokens };
+            }
+            return { ok: false, error: 'Session expired. Please sign in again.' };
+        },
+        /** Log out (revoke the session). Always resolves — logout must never block a UI. */
+        async logout(sessionId) {
+            if (sessionId)
+                await http.post('/auth/logout', { sessionId });
+            return { ok: true };
+        },
+        /**
+         * Fetch the signed-in user's DISPLAY profile (framework `GET /auth/me`). The
+         * framework resolves the bearer token → principal → the app's profile resolver,
+         * returning display NAMES (never raw UUIDs). Resolves to:
+         *   { ok: true, profile: { id, name, email?, company:{id,name}, roles:[{id,name}] } }
+         *   { ok: false, status, error }   — 401 (re-auth), 404 (no profile),
+         *                                     501 (server has no profile resolver), etc.
+         * Never throws — the UI falls back to its interim hint on any non-ok.
+         */
+        async me(accessToken) {
+            const r = await http.get('/auth/me', { bearerToken: accessToken });
+            const data = r.data;
+            if (r.ok && data && typeof data.name === 'string') {
+                return { ok: true, profile: data };
+            }
+            if (r.status === 401)
+                return { ok: false, status: 401, error: 'Not authenticated.' };
+            if (r.status === 404)
+                return { ok: false, status: 404, error: 'No profile found.' };
+            if (r.status === 501)
+                return { ok: false, status: 501, error: 'Profile not available.' };
+            return { ok: false, status: r.status, error: 'Could not load profile.' };
+        },
+        /**
+         * Request a password-reset link (framework `POST /auth/forgot-password`). The
+         * server ALWAYS returns 204 with an identical body whether or not the hint
+         * matches an account (anti-enumeration), so this ALWAYS resolves to
+         * `{ ok: true }` — the UI shows the SAME neutral confirmation regardless. Never
+         * reveals whether the account exists.
+         * @param identityHint username or email
+         */
+        async requestReset(identityHint) {
+            await http.post('/auth/forgot-password', { identityHint });
+            // Mirror the server's anti-enumeration: report nothing about existence.
+            return { ok: true };
+        },
+        /**
+         * Complete a password reset with the emailed token (framework
+         * `POST /auth/reset-password`). Resolves to:
+         *   { ok: true }                       — 204, password changed
+         *   { ok: false, status, error }       — 400 (invalid/expired link),
+         *                                         422 (requirements), 501 (not available)
+         * Never throws — the UI renders the message.
+         * @param token the raw reset token from the emailed link
+         */
+        async resetPassword(token, newPassword) {
+            const r = await http.post('/auth/reset-password', { token, newPassword });
+            if (r.status === 204)
+                return { ok: true };
+            if (r.status === 400)
+                return { ok: false, status: 400, error: 'This reset link is invalid or has expired.' };
+            if (r.status === 422)
+                return { ok: false, status: 422, error: 'New password does not meet the requirements.' };
+            if (r.status === 501)
+                return { ok: false, status: 501, error: 'Password reset is not available.' };
+            return { ok: false, status: r.status, error: 'Could not reset password.' };
+        },
+    };
+}
+//# sourceMappingURL=authService.js.map

package/dist/auth/authService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authService.js","sourceRoot":"","sources":["../../src/auth/authService.ts"],"names":[],"mappings":"AAwEA,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,OAAO;QACL;;;;;WAKG;QACH,KAAK,CAAC,KAAK,CAAC,YAAoB,EAAE,QAAgB;YAChD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAgC,CAAC;YAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;YAC3F,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,cAAwB,EAAE,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAClE,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;YACnF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC;YAC9F,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;QACjE,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,IAAY,EAAE,MAAM,GAAG,MAAM;YACrE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAgC,CAAC;YAChD,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1C,6EAA6E;gBAC7E,0EAA0E;gBAC1E,yEAAyE;gBACzE,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;iBAC/C,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAC5D,CAAC;QAED,wDAAwD;QACxD,KAAK,CAAC,OAAO,CAAC,YAAoB;YAChC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAgC,CAAC;YAChD,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAClE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;QACxE,CAAC;QAED,oFAAoF;QACpF,KAAK,CAAC,MAAM,CAAC,SAA6B;YACxC,IAAI,SAAS;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,EAAE,CAAC,WAAmB;YAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,CAAC,CAAC,IAA0B,CAAC;YAC1C,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACrC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACrF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACpF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;YACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC3E,CAAC;QAED;;;;;;;WAOG;QACH,KAAK,CAAC,YAAY,CAAC,YAAoB;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3D,wEAAwE;YACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,WAAmB;YACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;YAC7G,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;YAC/G,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;YACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC7E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/identityService.d.ts

@@ -0,0 +1,199 @@
+/**
+ * createIdentityService — platform-agnostic calls to the identity feature's protected
+ * API. Like the auth service, it takes an injected HTTP client and carries no platform
+ * code, so web + mobile share it. The bearer token is passed per call (the UI holds
+ * the session; the shared logic stays stateless).
+ *
+ * Every method resolves to a plain result object (never throws), mirroring the
+ * `listCompanies` shape: `{ ok:true, ... }` on success, `{ ok:false, status, error }`
+ * on any non-2xx (401 = not authenticated, 403 = denied by policy — e.g. the interim
+ * root gate — anything else = a generic failure). Views stay dumb: they
+ * branch on `ok`/`status` and render the message.
+ *
+ * The server routes these hit (all `@Classified`, root-gated in Phase 2):
+ *   GET/POST/PUT/DELETE  /identity/companies[/:uuid]
+ *   GET/POST/PUT/DELETE  /identity/roles[/:uuid]
+ *   GET/POST/PUT/DELETE  /identity/users[/:uuid]
+ *   GET/POST             /identity/users/:userUuid/memberships
+ *   PUT/DELETE           /identity/memberships/:membershipUuid
+ *   PUT                  /identity/memberships/:membershipUuid/postings
+ *   GET                  /identity/companies/:companyUuid/{departments,branches}  (Phase 5 seam)
+ *
+ * NO raw UUID is ever a display value — list rows carry `{ id, fields }` (the id is a
+ * key/param), membership cards carry `*Name` fields resolved server-side.
+ *
+ * Verbatim TS port of astram3/shared/src/auth/identityService.js — logic, routes, and
+ * every result branch are unchanged; only types were added. Includes the ACCESS surface
+ * (role permissions + access bundles) — that lives in THIS service, not a separate one.
+ */
+import type { HttpClient } from '../http/types.js';
+/** Server-side DataTable options: page/limit/search/sort — all optional. */
+export interface ListOpts {
+    page?: number;
+    limit?: number;
+    search?: string;
+    sortBy?: string;
+    sortOrder?: 'asc' | 'desc';
+}
+/** A generic list record. Concrete shape is server-defined; never render `id` raw. */
+export interface IdentityRecord {
+    id?: string;
+    [key: string]: unknown;
+}
+/** `{ key, module, label, description?, permissionKeys[] }` — identified by key, never a uuid. */
+export interface AccessBundle {
+    key: string;
+    module: string;
+    label: string;
+    description?: string;
+    permissionKeys: string[];
+    [key: string]: unknown;
+}
+/** A membership card with every uuid resolved to a display NAME server-side. */
+export interface Membership {
+    id?: string;
+    companyName?: string;
+    roleName?: string;
+    departmentName?: string;
+    branchName?: string;
+    [key: string]: unknown;
+}
+/** One posting row submitted to `replacePostings`. */
+export interface Posting {
+    roleUuid: string;
+    departmentUuid?: string;
+    branchUuid?: string;
+    effectiveFrom?: string;
+    effectiveUntil?: string;
+}
+export type PagedListResult = {
+    ok: true;
+    total: number;
+    rows: IdentityRecord[];
+    page: number;
+    limit: number;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type GetRecordResult = {
+    ok: true;
+    record: IdentityRecord | null;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type CreateRecordResult = {
+    ok: true;
+    id: string | undefined;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type OkResult = {
+    ok: true;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type ListPermissionCatalogResult = {
+    ok: true;
+    catalog: string[];
+    wildcards: string[];
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type ListGrantsSummaryResult = {
+    ok: true;
+    rows: IdentityRecord[];
+    total: number;
+    page: number;
+    limit: number;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type ListRolePermissionsResult = {
+    ok: true;
+    grants: string[];
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type ListAccessBundlesResult = {
+    ok: true;
+    bundles: AccessBundle[];
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type GetUserMembershipsResult = {
+    ok: true;
+    memberships: Membership[];
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type AddMembershipResult = {
+    ok: true;
+    id: string | undefined;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export type ListCatalogRowsResult = {
+    ok: true;
+    rows: IdentityRecord[];
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export interface IdentityService {
+    listCompanies(accessToken: string, opts?: ListOpts): Promise<PagedListResult>;
+    getCompany(accessToken: string, uuid: string): Promise<GetRecordResult>;
+    createCompany(accessToken: string, name: string): Promise<CreateRecordResult>;
+    updateCompany(accessToken: string, uuid: string, patch?: Record<string, unknown>): Promise<OkResult>;
+    deleteCompany(accessToken: string, uuid: string): Promise<OkResult>;
+    listRoles(accessToken: string, opts?: ListOpts): Promise<PagedListResult>;
+    getRole(accessToken: string, uuid: string): Promise<GetRecordResult>;
+    createRole(accessToken: string, name: string): Promise<CreateRecordResult>;
+    updateRole(accessToken: string, uuid: string, patch?: Record<string, unknown>): Promise<OkResult>;
+    deleteRole(accessToken: string, uuid: string): Promise<OkResult>;
+    listPermissionCatalog(accessToken: string): Promise<ListPermissionCatalogResult>;
+    listGrantsSummary(accessToken: string, opts?: ListOpts): Promise<ListGrantsSummaryResult>;
+    listRolePermissions(accessToken: string, uuid: string): Promise<ListRolePermissionsResult>;
+    grantPermission(accessToken: string, uuid: string, key: string): Promise<OkResult>;
+    revokePermission(accessToken: string, uuid: string, key: string): Promise<OkResult>;
+    listAccessBundles(accessToken: string): Promise<ListAccessBundlesResult>;
+    grantAccessBundle(accessToken: string, uuid: string, key: string): Promise<OkResult>;
+    revokeAccessBundle(accessToken: string, uuid: string, key: string): Promise<OkResult>;
+    listUsers(accessToken: string, opts?: ListOpts): Promise<PagedListResult>;
+    getUser(accessToken: string, uuid: string): Promise<GetRecordResult>;
+    createUser(accessToken: string, input?: {
+        username?: string;
+        email?: string;
+    }): Promise<CreateRecordResult>;
+    updateUser(accessToken: string, uuid: string, patch?: Record<string, unknown>): Promise<OkResult>;
+    deleteUser(accessToken: string, uuid: string): Promise<OkResult>;
+    getUserMemberships(accessToken: string, userUuid: string): Promise<GetUserMembershipsResult>;
+    addMembership(accessToken: string, userUuid: string, companyUuid: string): Promise<AddMembershipResult>;
+    setMembershipActive(accessToken: string, membershipUuid: string, userUuid: string): Promise<OkResult>;
+    removeMembership(accessToken: string, membershipUuid: string): Promise<OkResult>;
+    replacePostings(accessToken: string, membershipUuid: string, postings: Posting[]): Promise<OkResult>;
+    listDepartments(accessToken: string, companyUuid: string): Promise<ListCatalogRowsResult>;
+    listBranches(accessToken: string, companyUuid: string): Promise<ListCatalogRowsResult>;
+}
+export declare function createIdentityService(http: HttpClient): IdentityService;
+//# sourceMappingURL=identityService.d.ts.map

package/dist/auth/identityService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityService.d.ts","sourceRoot":"","sources":["../../src/auth/identityService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B;AAED,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAwBD,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,gFAAgF;AAChF,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,sDAAsD;AACtD,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErH,MAAM,MAAM,QAAQ,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,2BAA2B,GACnC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GACpD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,cAAc,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,cAAc,EAAE,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,WAAW,eAAe;IAE9B,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9E,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9E,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGpE,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1E,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3E,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGjE,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACjF,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1F,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3F,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnF,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGpF,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzE,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrF,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGtF,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1E,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5G,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGjE,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC7F,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxG,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtG,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjF,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGrG,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC1F,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACxF;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CA8cvE"}