@astram/frontend-core 0.5.1 → 0.5.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -6,15 +6,22 @@
|
|
|
6
6
|
* unchanged on web today and React Native next.
|
|
7
7
|
*
|
|
8
8
|
* Framework account routes (server-side, framework-owned, bearer-authenticated):
|
|
9
|
-
* POST /account/change-password { currentPassword, newPassword } → 204 | 401 | 422 | 501
|
|
9
|
+
* POST /account/change-password { currentPassword, newPassword } → 204 | 400 | 401 | 422 | 429 | 501 | 503
|
|
10
10
|
* GET /account/mfa/devices → 200 { devices, mfaEnabled } | 401 | 501
|
|
11
11
|
* POST /account/mfa/devices/begin { name? } → 200 { deviceId, otpauthUri, secret } | 401 | 501
|
|
12
12
|
* POST /account/mfa/devices/confirm { deviceId, code } → 200 { recoveryCodes? } | 400 | 401 | 404 | 501
|
|
13
13
|
* PATCH /account/mfa/devices/:id/rename { name } → 200 { device } | 401 | 404 | 422 | 501
|
|
14
|
-
* DELETE /account/mfa/devices/:id { code } → 204 | 400 | 401 | 404 | 501
|
|
15
|
-
* POST /account/mfa/recovery-codes/regenerate { code } → 200 { recoveryCodes } | 400 | 401 | 501
|
|
14
|
+
* DELETE /account/mfa/devices/:id { code } → 204 | 400 | 401 | 404 | 429 | 501 | 503
|
|
15
|
+
* POST /account/mfa/recovery-codes/regenerate { code } → 200 { recoveryCodes } | 400 | 401 | 429 | 501 | 503
|
|
16
16
|
* PATCH /account/profile { name?, email? } → 200 { …profile } | 401 | 422 | 501
|
|
17
17
|
*
|
|
18
|
+
* Every method maps 429 (too many attempts — change-password spends the account's login
|
|
19
|
+
* budget, the code-gated MFA routes its MFA budget) to "Too many attempts…" and 503 (a
|
|
20
|
+
* server dependency could not answer; retrying later is safe) to "temporarily
|
|
21
|
+
* unavailable" (Phase 9 #12). 401 always means the session is missing or expired: the
|
|
22
|
+
* refresh wrapper retries it once after a refresh, so no route uses 401 for a wrong
|
|
23
|
+
* password or code.
|
|
24
|
+
*
|
|
18
25
|
* Every method resolves to a plain result object (never throws), so views stay dumb.
|
|
19
26
|
* A device `secret` is only ever returned by `beginMfaDevice` (the caller's own, for a
|
|
20
27
|
* QR); the display list/rename shapes never carry a secret.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"accountService.d.ts","sourceRoot":"","sources":["../../src/auth/accountService.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"accountService.d.ts","sourceRoot":"","sources":["../../src/auth/accountService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAsBD,MAAM,MAAM,oBAAoB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/F,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,oBAAoB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,MAAM,sBAAsB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,qBAAqB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG,MAAM,MAAM,6BAA6B,GACvC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,cAAc;IAC7B,cAAc,CACZ,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnE,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClF,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,uBAAuB,CACrB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC1C,aAAa,CACX,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACzC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC;AAqBD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CA0TrE"}
|
|
@@ -1,3 +1,20 @@
|
|
|
1
|
+
/** Shown on a 429: the account's attempt budget is spent (Phase 9 #12). */
|
|
2
|
+
const ACCOUNT_TOO_MANY_ATTEMPTS_MESSAGE = 'Too many attempts. Please wait a few minutes and try again.';
|
|
3
|
+
/** Shown on a 503: the server's limiter / replay guard could not answer (Phase 9 #12). */
|
|
4
|
+
const ACCOUNT_SERVICE_UNAVAILABLE_MESSAGE = 'The service is temporarily unavailable. Please try again shortly.';
|
|
5
|
+
/**
|
|
6
|
+
* The statuses every account route can answer regardless of method (Phase 9 #12):
|
|
7
|
+
* 429 — too many attempts (change-password shares the login budget; the code-gated MFA
|
|
8
|
+
* routes share the MFA budget); 503 — a transient server dependency (Redis) could not
|
|
9
|
+
* answer, retrying later is safe. `null` for any other status.
|
|
10
|
+
*/
|
|
11
|
+
function busyOrUnavailable(status) {
|
|
12
|
+
if (status === 429)
|
|
13
|
+
return { ok: false, status, error: ACCOUNT_TOO_MANY_ATTEMPTS_MESSAGE };
|
|
14
|
+
if (status === 503)
|
|
15
|
+
return { ok: false, status, error: ACCOUNT_SERVICE_UNAVAILABLE_MESSAGE };
|
|
16
|
+
return null;
|
|
17
|
+
}
|
|
1
18
|
export function createAccountService(http) {
|
|
2
19
|
return {
|
|
3
20
|
/**
|
|
@@ -5,22 +22,32 @@ export function createAccountService(http) {
|
|
|
5
22
|
* password, writes the new one, and revokes the user's OTHER sessions (the
|
|
6
23
|
* current session stays alive). Resolves to:
|
|
7
24
|
* { ok: true } — changed (204)
|
|
8
|
-
* { ok: false, status, error } —
|
|
9
|
-
*
|
|
25
|
+
* { ok: false, status, error } — 400 (current incorrect; 401 from older
|
|
26
|
+
* servers), 422 (weak new password),
|
|
27
|
+
* 429 (too many attempts — the account's
|
|
28
|
+
* login budget, shared with sign-in),
|
|
29
|
+
* 501 (not available), 503 (try again
|
|
30
|
+
* shortly), or other.
|
|
10
31
|
* @param accessToken the caller's bearer access token
|
|
11
32
|
*/
|
|
12
33
|
async changePassword(accessToken, currentPassword, newPassword) {
|
|
13
34
|
const r = await http.post('/account/change-password', { currentPassword, newPassword }, { bearerToken: accessToken });
|
|
14
35
|
if (r.status === 204)
|
|
15
36
|
return { ok: true };
|
|
16
|
-
|
|
17
|
-
|
|
37
|
+
// Phase 9 #3: guard ≥ the Phase 9 release answers a wrong current password with 400.
|
|
38
|
+
// An older server still uses 401 (which the refresh wrapper also retries once).
|
|
39
|
+
if (r.status === 400 || r.status === 401)
|
|
40
|
+
return { ok: false, status: r.status, error: 'Current password is incorrect.' };
|
|
18
41
|
if (r.status === 422) {
|
|
19
42
|
return { ok: false, status: 422, error: 'New password does not meet the requirements.' };
|
|
20
43
|
}
|
|
21
44
|
if (r.status === 501)
|
|
22
45
|
return { ok: false, status: 501, error: 'Password change is not available.' };
|
|
23
|
-
return
|
|
46
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
47
|
+
ok: false,
|
|
48
|
+
status: r.status,
|
|
49
|
+
error: 'Could not change password.',
|
|
50
|
+
});
|
|
24
51
|
},
|
|
25
52
|
/**
|
|
26
53
|
* List the signed-in user's CONFIRMED authenticator devices (multi-device
|
|
@@ -46,7 +73,11 @@ export function createAccountService(http) {
|
|
|
46
73
|
if (r.status === 501) {
|
|
47
74
|
return { ok: false, status: 501, error: 'Two-factor authentication is not available.' };
|
|
48
75
|
}
|
|
49
|
-
return
|
|
76
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
77
|
+
ok: false,
|
|
78
|
+
status: r.status,
|
|
79
|
+
error: 'Could not load your two-factor devices.',
|
|
80
|
+
});
|
|
50
81
|
},
|
|
51
82
|
/**
|
|
52
83
|
* Begin enrolling a NEW authenticator device. The server mints a fresh secret and
|
|
@@ -75,7 +106,11 @@ export function createAccountService(http) {
|
|
|
75
106
|
if (r.status === 501) {
|
|
76
107
|
return { ok: false, status: 501, error: 'Two-factor authentication is not available.' };
|
|
77
108
|
}
|
|
78
|
-
return
|
|
109
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
110
|
+
ok: false,
|
|
111
|
+
status: r.status,
|
|
112
|
+
error: 'Could not start two-factor setup.',
|
|
113
|
+
});
|
|
79
114
|
},
|
|
80
115
|
/**
|
|
81
116
|
* Confirm a pending device by presenting a live code from it. On success the server
|
|
@@ -109,7 +144,11 @@ export function createAccountService(http) {
|
|
|
109
144
|
if (r.status === 501) {
|
|
110
145
|
return { ok: false, status: 501, error: 'Two-factor authentication is not available.' };
|
|
111
146
|
}
|
|
112
|
-
return
|
|
147
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
148
|
+
ok: false,
|
|
149
|
+
status: r.status,
|
|
150
|
+
error: 'Could not confirm two-factor setup.',
|
|
151
|
+
});
|
|
113
152
|
},
|
|
114
153
|
/**
|
|
115
154
|
* Rename one of the signed-in user's devices (cosmetic — no code required). On
|
|
@@ -134,7 +173,11 @@ export function createAccountService(http) {
|
|
|
134
173
|
if (r.status === 501) {
|
|
135
174
|
return { ok: false, status: 501, error: 'Two-factor authentication is not available.' };
|
|
136
175
|
}
|
|
137
|
-
return
|
|
176
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
177
|
+
ok: false,
|
|
178
|
+
status: r.status,
|
|
179
|
+
error: 'Could not rename the device.',
|
|
180
|
+
});
|
|
138
181
|
},
|
|
139
182
|
/**
|
|
140
183
|
* Remove one of the signed-in user's devices. Requires proof — a current TOTP code
|
|
@@ -142,7 +185,7 @@ export function createAccountService(http) {
|
|
|
142
185
|
* device turns MFA off (and wipes recovery codes). Resolves to:
|
|
143
186
|
* { ok: true } — removed (204)
|
|
144
187
|
* { ok: false, status, error } — 400 (wrong code), 404 (unknown/not owned), 401,
|
|
145
|
-
* 501, other
|
|
188
|
+
* 429 (too many attempts), 501, 503, other
|
|
146
189
|
* @param code a TOTP or recovery code (proof)
|
|
147
190
|
*/
|
|
148
191
|
async removeMfaDevice(accessToken, deviceId, code) {
|
|
@@ -163,14 +206,19 @@ export function createAccountService(http) {
|
|
|
163
206
|
if (r.status === 501) {
|
|
164
207
|
return { ok: false, status: 501, error: 'Two-factor authentication is not available.' };
|
|
165
208
|
}
|
|
166
|
-
return
|
|
209
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
210
|
+
ok: false,
|
|
211
|
+
status: r.status,
|
|
212
|
+
error: 'Could not remove the device.',
|
|
213
|
+
});
|
|
167
214
|
},
|
|
168
215
|
/**
|
|
169
216
|
* Regenerate the account's recovery codes (replacing the old set). Requires MFA to be
|
|
170
217
|
* enabled and proof — a current TOTP from any device OR an existing recovery code. The
|
|
171
218
|
* fresh codes are returned ONCE. Resolves to:
|
|
172
219
|
* { ok: true, recoveryCodes } — regenerated (200)
|
|
173
|
-
* { ok: false, status, error } — 400 (MFA off / wrong code), 401,
|
|
220
|
+
* { ok: false, status, error } — 400 (MFA off / wrong code), 401,
|
|
221
|
+
* 429 (too many attempts), 501, 503, other
|
|
174
222
|
* @param code a TOTP or recovery code (proof)
|
|
175
223
|
*/
|
|
176
224
|
async regenerateRecoveryCodes(accessToken, code) {
|
|
@@ -191,7 +239,11 @@ export function createAccountService(http) {
|
|
|
191
239
|
if (r.status === 501) {
|
|
192
240
|
return { ok: false, status: 501, error: 'Two-factor authentication is not available.' };
|
|
193
241
|
}
|
|
194
|
-
return
|
|
242
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
243
|
+
ok: false,
|
|
244
|
+
status: r.status,
|
|
245
|
+
error: 'Could not regenerate recovery codes.',
|
|
246
|
+
});
|
|
195
247
|
},
|
|
196
248
|
/**
|
|
197
249
|
* Edit the signed-in user's own display profile (name and/or email). Only the
|
|
@@ -215,7 +267,11 @@ export function createAccountService(http) {
|
|
|
215
267
|
if (r.status === 501) {
|
|
216
268
|
return { ok: false, status: 501, error: 'Profile editing is not available.' };
|
|
217
269
|
}
|
|
218
|
-
return
|
|
270
|
+
return (busyOrUnavailable(r.status) ?? {
|
|
271
|
+
ok: false,
|
|
272
|
+
status: r.status,
|
|
273
|
+
error: 'Could not update your profile.',
|
|
274
|
+
});
|
|
219
275
|
},
|
|
220
276
|
};
|
|
221
277
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"accountService.js","sourceRoot":"","sources":["../../src/auth/accountService.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"accountService.js","sourceRoot":"","sources":["../../src/auth/accountService.ts"],"names":[],"mappings":"AA2HA,2EAA2E;AAC3E,MAAM,iCAAiC,GACrC,6DAA6D,CAAC;AAChE,0FAA0F;AAC1F,MAAM,mCAAmC,GACvC,mEAAmE,CAAC;AAEtE;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IAC3F,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAgB;IACnD,OAAO;QACL;;;;;;;;;;;;WAYG;QACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,eAAuB,EACvB,WAAmB;YAEnB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,0BAA0B,EAC1B,EAAE,eAAe,EAAE,WAAW,EAAE,EAChC,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC1C,qFAAqF;YACrF,gFAAgF;YAChF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;YAClF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;YAChF,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,4BAA4B;aACpC,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,cAAc,CAAC,WAAmB;YACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAA6B,CAAC;gBAC7C,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE;oBAC5B,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,KAAK;iBACtC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,yCAAyC;aACjD,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;;;WAUG;QACH,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,IAAa;YACrD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,4BAA4B,EAC5B,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EACxC,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAiC,CAAC;gBACjD,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI,EAAE,QAAQ;oBACxB,UAAU,EAAE,IAAI,EAAE,UAAU;oBAC5B,MAAM,EAAE,IAAI,EAAE,MAAM;iBACrB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,mCAAmC;aAC3C,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;;;;WAWG;QACH,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,QAAgB,EAChB,IAAY;YAEZ,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,8BAA8B,EAC9B,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAgC,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,mDAAmD;iBAC3D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC7F,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,qCAAqC;aAC7C,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;WAOG;QACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,QAAgB,EAChB,IAAY;YAEZ,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACxB,wBAAwB,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAC7D,EAAE,IAAI,EAAE,EACR,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAkC,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;YAC9F,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC7F,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,8BAA8B;aACtC,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,QAAgB,EAChB,IAAY;YAEZ,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CACzB,wBAAwB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACtD,EAAE,IAAI,EAAE,EACR,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,2DAA2D;iBACnE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC7F,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,8BAA8B;aACtC,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,uBAAuB,CAC3B,WAAmB,EACnB,IAAY;YAEZ,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,wCAAwC,EACxC,EAAE,IAAI,EAAE,EACR,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAgC,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,uDAAuD;iBAC/D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,sCAAsC;aAC9C,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;;WASG;QACH,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,OAA0C;YAE1C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;YACnF,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;YAChF,CAAC;YACD,OAAO,CACL,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC7B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,gCAAgC;aACxC,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
|