@atlasauth/cli 0.25.0 → 0.25.1

package/dist/migrate/export/ldap.js

@@ -0,0 +1,277 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseLdif = parseLdif;
+exports.normalizeDn = normalizeDn;
+exports.guidFromBase64 = guidFromBase64;
+exports.generalizedTime = generalizedTime;
+exports.mapLdif = mapLdif;
+const password_detect_1 = require("./password-detect");
+const record_set_1 = require("./record-set");
+const translate_kit_1 = require("./translate-kit");
+/** Text vs. binary: an `attr::` value that is not valid UTF-8 (objectGUID) stays base64. */
+function decodeBase64Value(b64) {
+    const bytes = Buffer.from(b64, 'base64');
+    const text = bytes.toString('utf8');
+    // eslint-disable-next-line no-control-regex -- intentionally detects control characters (binary input)
+    const binary = text.includes('�') || /[\x00-\x08\x0E-\x1F]/.test(text);
+    return binary ? { text: bytes.toString('base64'), binary: true } : { text, binary: false };
+}
+/**
+ * Parse LDIF content records. Change records other than `add` are skipped;
+ * comments and folded lines are handled; a malformed line is reported, not fatal.
+ */
+function parseLdif(text) {
+    const entries = [];
+    const problems = [];
+    const raw = text.replace(/^\ufeff/, '').split(/\r?\n/);
+    // Unfold: a line starting with exactly one space continues the previous one.
+    const lines = [];
+    for (let i = 0; i < raw.length; i++) {
+        const l = raw[i];
+        if (l.startsWith(' ') && lines.length && lines[lines.length - 1].text !== '') {
+            lines[lines.length - 1].text += l.slice(1);
+        }
+        else
+            lines.push({ text: l, no: i + 1 });
+    }
+    let current = null;
+    let skip = false;
+    const flush = () => {
+        if (current && !skip)
+            entries.push(current);
+        current = null;
+        skip = false;
+    };
+    for (const { text: l, no } of lines) {
+        if (l === '') {
+            flush();
+            continue;
+        }
+        if (l.startsWith('#'))
+            continue;
+        const m = /^([A-Za-z0-9][A-Za-z0-9;.-]*)(::?|:<)\s?(.*)$/.exec(l);
+        if (!m) {
+            problems.push(`line ${no}: not an LDIF attribute line`);
+            continue;
+        }
+        const name = m[1].toLowerCase();
+        const sep = m[2];
+        let value = m[3];
+        if (sep === ':<')
+            continue; // a URL reference: never fetched
+        if (sep === '::')
+            value = decodeBase64Value(value.trim()).text;
+        if (name === 'version' && !current)
+            continue;
+        if (name === 'dn') {
+            flush();
+            current = { dn: value.trim(), attrs: new Map(), line: no };
+            continue;
+        }
+        if (!current) {
+            problems.push(`line ${no}: attribute before any dn`);
+            continue;
+        }
+        if (name === 'changetype') {
+            if (value.trim().toLowerCase() !== 'add')
+                skip = true;
+            continue;
+        }
+        const base = name.split(';')[0];
+        const list = current.attrs.get(base) ?? [];
+        list.push(value);
+        current.attrs.set(base, list);
+    }
+    flush();
+    return { entries, problems };
+}
+const PERSON = new Set(['inetorgperson', 'person', 'organizationalperson', 'posixaccount', 'user', 'account', 'shadowaccount', 'residentialperson', 'ds-cfg-root-dn-user']);
+const GROUP = new Set(['groupofnames', 'groupofuniquenames', 'posixgroup', 'group', 'groupofurls', 'groupofentries']);
+const ID_ATTRIBUTES = ['entryuuid', 'nsuniqueid', 'objectguid', 'ibm-entryuuid', 'orclguid', 'guid'];
+const METADATA_ATTRIBUTES = ['title', 'departmentnumber', 'department', 'employeenumber', 'employeeid', 'employeetype', 'o', 'ou', 'l', 'manager', 'company', 'preferredlanguage', 'uidnumber', 'gidnumber', 'homedirectory', 'loginshell', 'userprincipalname'];
+const one = (e, name) => {
+    const v = e.attrs.get(name)?.[0]?.trim();
+    return v ? v : undefined;
+};
+const all = (e, name) => (e.attrs.get(name) ?? []).map((v) => v.trim()).filter(Boolean);
+const classes = (e) => new Set(all(e, 'objectclass').map((c) => c.toLowerCase()));
+/** Canonical DN for matching member values (case and spacing around `,`/`=` vary). */
+function normalizeDn(dn) {
+    return dn
+        .split(/(?<!\\),/)
+        .map((rdn) => rdn.split('=').map((p) => p.trim()).join('=').toLowerCase())
+        .join(',');
+}
+/** AD objectGUID (base64 of the little-endian GUID) → the textual GUID. */
+function guidFromBase64(b64) {
+    const b = Buffer.from(b64, 'base64');
+    if (b.length !== 16)
+        return undefined;
+    const hex = (i, n, le) => {
+        const part = Buffer.from(b.subarray(i, i + n));
+        if (le)
+            part.reverse();
+        return part.toString('hex');
+    };
+    return `${hex(0, 4, true)}-${hex(4, 2, true)}-${hex(6, 2, true)}-${hex(8, 2, false)}-${hex(10, 6, false)}`;
+}
+/** LDAP GeneralizedTime (`20240102030405Z`, `20240102030405.0Z`, `…+0100`) → ISO-8601. */
+function generalizedTime(v) {
+    if (!v)
+        return undefined;
+    const m = /^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})?(\d{2})?(?:[.,]\d+)?(Z|[+-]\d{4})?$/.exec(v.trim());
+    if (!m)
+        return undefined;
+    const tz = !m[7] || m[7] === 'Z' ? 'Z' : `${m[7].slice(0, 3)}:${m[7].slice(3)}`;
+    const d = new Date(`${m[1]}-${m[2]}-${m[3]}T${m[4]}:${m[5] ?? '00'}:${m[6] ?? '00'}${tz}`);
+    return Number.isNaN(d.getTime()) ? undefined : d.toISOString();
+}
+/** AD FILETIME (100 ns since 1601) → ISO, or undefined for 0 / never. */
+function fileTime(v) {
+    if (!v || !/^\d+$/.test(v) || v === '0' || v === '9223372036854775807')
+        return undefined;
+    const ms = Number(BigInt(v) / 10000n) - 11644473600000;
+    return ms > 0 ? new Date(ms).toISOString() : undefined;
+}
+function userId(e, idAttribute) {
+    const attrs = idAttribute ? [idAttribute.toLowerCase()] : ID_ATTRIBUTES;
+    for (const a of attrs) {
+        const v = one(e, a);
+        if (!v)
+            continue;
+        if (a === 'objectguid')
+            return guidFromBase64(v) ?? v;
+        return v;
+    }
+    return e.dn;
+}
+/** Map a parsed LDIF onto canonical records. */
+function mapLdif(entries, options = {}) {
+    const set = new record_set_1.RecordSet();
+    set.manifest = { origin: options.origin ?? 'LDIF export', settings: { groups: options.groups ?? 'roles' } };
+    const users = [];
+    const byDn = new Map();
+    const byUid = new Map();
+    const groups = [];
+    let ad = false;
+    let noPassword = 0;
+    const unusable = new Map();
+    for (const e of entries) {
+        const cls = classes(e);
+        if (cls.has('computer'))
+            continue;
+        if ([...cls].some((c) => GROUP.has(c))) {
+            groups.push(e);
+            continue;
+        }
+        if (![...cls].some((c) => PERSON.has(c)))
+            continue;
+        if (cls.has('user') || e.attrs.has('samaccountname'))
+            ad = true;
+        const mails = all(e, 'mail');
+        const emails = mails.filter((m) => m.includes('@')).map((m, i) => ({ email: m.toLowerCase(), verified: options.trustEmails === true, primary: i === 0 }));
+        const phones = [];
+        for (const raw of [...all(e, 'mobile'), ...all(e, 'telephonenumber')]) {
+            const p = (0, record_set_1.e164)(raw);
+            if (p && !phones.some((x) => x.phone === p))
+                phones.push({ phone: p, verified: false, primary: phones.length === 0 });
+        }
+        const username = one(e, 'uid') ?? one(e, 'samaccountname');
+        const record = (0, record_set_1.compact)({
+            id: userId(e, options.idAttribute),
+            emails,
+            phones,
+            username,
+            first_name: one(e, 'givenname'),
+            last_name: one(e, 'sn'),
+            name: one(e, 'displayname') ?? one(e, 'cn'),
+            created_at: generalizedTime(one(e, 'createtimestamp') ?? one(e, 'whencreated')),
+            last_sign_in_at: fileTime(one(e, 'lastlogontimestamp')) ?? generalizedTime(one(e, 'authtimestamp') ?? one(e, 'ds-pwp-last-login-time')),
+            private_metadata: { ldap: (0, record_set_1.compact)({ dn: e.dn, ...Object.fromEntries(METADATA_ATTRIBUTES.map((a) => [a, one(e, a)])) }) },
+        });
+        // Account state: AD userAccountControl ACCOUNTDISABLE (0x2), 389 DS / OpenLDAP nsAccountLock,
+        // OpenLDAP ppolicy pwdAccountLockedTime (000001010000Z = locked by an administrator), AD lockoutTime.
+        const uac = Number(one(e, 'useraccountcontrol') ?? 0);
+        const lockedTime = one(e, 'pwdaccountlockedtime');
+        if ((uac & 0x2) !== 0 || one(e, 'nsaccountlock')?.toLowerCase() === 'true' || lockedTime === '000001010000Z' || one(e, 'ds-pwp-account-disabled')?.toLowerCase() === 'true') {
+            record.banned = true;
+            record.ban_reason = 'Disabled in the directory';
+        }
+        else if (lockedTime || (one(e, 'lockouttime') && one(e, 'lockouttime') !== '0'))
+            record.locked = true;
+        const pw = one(e, 'userpassword');
+        if (pw) {
+            const d = (0, password_detect_1.detectPasswordHash)(pw);
+            if (d.ok)
+                record.password = d.password;
+            else
+                unusable.set(d.reason, (unusable.get(d.reason) ?? 0) + 1);
+        }
+        else
+            noPassword++;
+        if (!record.emails?.length && !record.phones?.length && !record.username) {
+            set.omit('user', 'no mail, phone or uid', 1);
+            continue;
+        }
+        users.push({ entry: e, record });
+        byDn.set(normalizeDn(e.dn), record);
+        if (username)
+            byUid.set(username.toLowerCase(), record);
+    }
+    // Groups: members by DN (member / uniqueMember) or by uid (posixGroup memberUid);
+    // AD users also list their groups in memberOf when the groups were not exported.
+    const mode = options.groups ?? 'roles';
+    const seenGroups = new Map();
+    const groupFor = (dn, name, id) => {
+        const k = normalizeDn(dn);
+        let g = seenGroups.get(k);
+        if (!g)
+            seenGroups.set(k, (g = { id, name, members: new Set() }));
+        return g;
+    };
+    for (const g of groups) {
+        const name = one(g, 'cn') ?? g.dn.split(',')[0].replace(/^[^=]+=/, '');
+        const group = groupFor(g.dn, name, one(g, 'entryuuid') ?? one(g, 'nsuniqueid') ?? (one(g, 'objectguid') ? guidFromBase64(one(g, 'objectguid')) : undefined) ?? g.dn);
+        for (const m of [...all(g, 'member'), ...all(g, 'uniquemember')]) {
+            const u = byDn.get(normalizeDn(m.replace(/#'?[0-9A-Fa-f]*'?B?$/, '')));
+            if (u)
+                group.members.add(u);
+        }
+        for (const uid of all(g, 'memberuid')) {
+            const u = byUid.get(uid.toLowerCase());
+            if (u)
+                group.members.add(u);
+        }
+    }
+    for (const { entry, record } of users) {
+        for (const dn of all(entry, 'memberof')) {
+            const name = dn.split(/(?<!\\),/)[0].replace(/^[^=]+=/, '');
+            groupFor(dn, name, dn).members.add(record);
+        }
+    }
+    if (mode === 'roles') {
+        for (const g of seenGroups.values()) {
+            const key = (0, translate_kit_1.keyOf)(g.name);
+            set.add('role', { key, name: g.name, scope: 'app', description: `Directory group ${g.name}` }, key);
+            for (const u of g.members)
+                u.roles = [...new Set([...(u.roles ?? []), key])];
+        }
+    }
+    else if (mode === 'organizations') {
+        for (const g of seenGroups.values()) {
+            set.add('organization', { id: g.id, name: g.name, slug: (0, translate_kit_1.keyOf)(g.name).replace(/_/g, '-') }, g.id);
+            for (const u of g.members)
+                set.add('membership', { organization_id: g.id, user_id: u.id, role: 'member' }, `${g.id}|${u.id}`);
+        }
+    }
+    for (const { record } of users)
+        set.add('user', record, record.id);
+    if (ad)
+        set.warn('Active Directory never exports password hashes (unicodePwd is write-only): set up lazy migration with the ldap preset so each user moves on their first sign-in.');
+    if (noPassword && !ad)
+        set.warn(`${noPassword} user(s) have no userPassword in the export (export with operational attributes as the directory manager, or use lazy migration).`);
+    for (const [reason, n] of unusable)
+        set.warn(`${n} password(s) left out: ${reason}. Lazy migration (the ldap preset) moves those users on first sign-in.`);
+    return set;
+}
+//# sourceMappingURL=ldap.js.map

package/dist/migrate/export/ldap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.js","sourceRoot":"","sources":["../../../src/migrate/export/ldap.ts"],"names":[],"mappings":";;AAgDA,8BAwDC;AA4BD,kCAKC;AAGD,wCASC;AAGD,0CAOC;AAqBD,0BAmHC;AAtSD,uDAAuD;AACvD,6CAAwD;AACxD,mDAAwC;AAgCxC,4FAA4F;AAC5F,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,uGAAuG;IACvG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC7F,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,IAAY;IACpC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvD,6EAA6E;IAC7E,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAClB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YAC9E,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;;YAAM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,GAAqB,IAAI,CAAC;IACrC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,OAAO,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,GAAG,KAAK,CAAC;IACf,CAAC,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACb,KAAK,EAAE,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,MAAM,CAAC,GAAG,+CAA+C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAClB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAClB,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,CAAC,iCAAiC;QAC7D,IAAI,GAAG,KAAK,IAAI;YAAE,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO;YAAE,SAAS;QAC7C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,EAAE,CAAC;YACR,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK;gBAAE,IAAI,GAAG,IAAI,CAAC;YACtD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAeD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,QAAQ,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC5K,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACtH,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AACrG,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;AAEjQ,MAAM,GAAG,GAAG,CAAC,CAAY,EAAE,IAAY,EAAsB,EAAE;IAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3B,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,CAAY,EAAE,IAAY,EAAY,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrH,MAAM,OAAO,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAE7F,sFAAsF;AACtF,SAAgB,WAAW,CAAC,EAAU;IACpC,OAAO,EAAE;SACN,KAAK,CAAC,UAAU,CAAC;SACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;SACzE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAW,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,EAAE;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,0FAA0F;AAC1F,SAAgB,eAAe,CAAC,CAAqB;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,0EAA0E,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,yEAAyE;AACzE,SAAS,QAAQ,CAAC,CAAqB;IACrC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,qBAAqB;QAAE,OAAO,SAAS,CAAC;IACzF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,cAAc,CAAC;IACvD,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAS,MAAM,CAAC,CAAY,EAAE,WAAoB;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC,EAAE,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,SAAgB,OAAO,CAAC,OAAoB,EAAE,UAA6B,EAAE;IAC3E,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,GAAG,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,EAAE,EAAE,CAAC;IAC5G,MAAM,KAAK,GAAoD,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACnD,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAAE,EAAE,GAAG,IAAI,CAAC;QAEhE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAmB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1K,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAe,IAAA,oBAAO,EAAC;YACjC,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;YAClC,MAAM;YACN,MAAM;YACN,QAAQ;YACR,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;YAC/B,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;YACvB,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;YAC3C,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAC/E,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YACvI,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC3G,CAAC,CAAC;QAEjB,8FAA8F;QAC9F,sGAAsG;QACtG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,IAAI,UAAU,KAAK,eAAe,IAAI,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC5K,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,2BAA2B,CAAC;QAClD,CAAC;aAAM,IAAI,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QAExG,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAClC,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,CAAC,GAAG,IAAA,oCAAkB,EAAC,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,EAAE;gBAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;;gBAClC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,CAAC;;YAAM,UAAU,EAAE,CAAC;QAEpB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,QAAQ;YAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,kFAAkF;IAClF,iFAAiF;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkE,CAAC;IAC7F,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,IAAY,EAAE,EAAU,EAAE,EAAE;QACxD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACtK,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC7D,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAA,qBAAK,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACpG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAA,qBAAK,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAClG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAEnE,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,kKAAkK,CAAC,CAAC;IACrL,IAAI,UAAU,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,mIAAmI,CAAC,CAAC;IAClL,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,MAAM,wEAAwE,CAAC,CAAC;IAC3J,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/export/logto-config.d.ts

@@ -0,0 +1,27 @@
+import type { TranslationResult } from '../framework/plugin';
+import { type Obj } from './record-set';
+import { type VendorHttp } from './vendor-http';
+/**
+ * `atlas migrate logto config` — a Logto tenant's sign-in experience, social
+ * and email / SMS connectors, applications, API resources, roles and webhooks →
+ * Atlas config, read with a machine-to-machine app on this machine (the same
+ * one the data export uses). Custom JWT claims, webhooks and the hosted sign-in
+ * page's CSS are reported as manual.
+ */
+export interface LogtoConfigSnapshot {
+    endpoint: string;
+    tenantId: string;
+    signInExp: Obj;
+    connectors: Obj[];
+    applications: Obj[];
+    /** API resources with their `scopes` filled in. */
+    resources: Array<Obj & {
+        scopes?: Obj[];
+    }>;
+    roles: Obj[];
+    hooks: Obj[];
+    /** The custom token claim scripts (`/api/configs/jwt-customizer`). */
+    jwtCustomizers: Obj[];
+}
+export declare function fetchLogtoConfig(http: VendorHttp, endpoint: string, tenantId: string): Promise<LogtoConfigSnapshot>;
+export declare function translateLogtoConfig(snap: LogtoConfigSnapshot): TranslationResult;

package/dist/migrate/export/logto-config.js

@@ -0,0 +1,264 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchLogtoConfig = fetchLogtoConfig;
+exports.translateLogtoConfig = translateLogtoConfig;
+const record_set_1 = require("./record-set");
+const translate_kit_1 = require("./translate-kit");
+const vendor_http_1 = require("./vendor-http");
+const PAGE = 100;
+async function fetchLogtoConfig(http, endpoint, tenantId) {
+    const optional = async (fn, empty) => {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            if (err instanceof vendor_http_1.VendorApiError && [401, 403, 404, 501].includes(err.status))
+                return empty;
+            throw err;
+        }
+    };
+    const list = (path) => optional(async () => {
+        const out = [];
+        const sep = path.includes('?') ? '&' : '?';
+        for (let page = 1; page <= 10_000; page++) {
+            const rows = (0, record_set_1.objs)((await http.get(`${path}${sep}page=${page}&page_size=${PAGE}`)).body);
+            out.push(...rows);
+            if (rows.length < PAGE)
+                break;
+        }
+        return out;
+    }, []);
+    const resources = (await list('/api/resources'));
+    for (const r of resources) {
+        const id = (0, record_set_1.str)(r.id);
+        if (id)
+            r.scopes = await optional(async () => (0, record_set_1.objs)((await http.get(`/api/resources/${encodeURIComponent(id)}/scopes?page=1&page_size=${PAGE}`)).body), []);
+    }
+    return {
+        endpoint,
+        tenantId,
+        signInExp: await optional(async () => {
+            const { body } = await http.get('/api/sign-in-exp');
+            return (0, record_set_1.isObj)(body) ? body : {};
+        }, {}),
+        connectors: await optional(async () => (0, record_set_1.objs)((await http.get('/api/connectors')).body), []),
+        applications: await list('/api/applications'),
+        resources,
+        roles: (await list('/api/roles')).filter((r) => (0, record_set_1.str)(r.type) !== 'MachineToMachine'),
+        hooks: await optional(async () => (0, record_set_1.objs)((await http.get('/api/hooks')).body), []),
+        jwtCustomizers: await optional(async () => (0, record_set_1.objs)((await http.get('/api/configs/jwt-customizer')).body), []),
+    };
+}
+const num = (v) => (typeof v === 'number' && Number.isFinite(v) ? v : undefined);
+function translateLogtoConfig(snap) {
+    const b = new translate_kit_1.ConfigBuilder();
+    const exp = snap.signInExp;
+    const area = 'sign-in experience';
+    // ── identifiers and sign-in methods ──
+    const methods = (0, record_set_1.objs)((0, record_set_1.isObj)(exp.signIn) ? exp.signIn.methods : undefined);
+    const signUp = (0, record_set_1.isObj)(exp.signUp) ? exp.signUp : {};
+    const identifiers = new Set([...methods.map((m) => (0, record_set_1.str)(m.identifier)), ...(0, record_set_1.strs)(signUp.identifiers)].filter((x) => !!x));
+    const anyPassword = methods.some((m) => m.password === true) || signUp.password === true;
+    if (anyPassword) {
+        b.set('strategies.password', true);
+        b.add('differs', area, 'signIn.methods[].password', 'Password sign-in. Logto password hashes move with a database export (Argon2, bcrypt, SHA-family); a Management API export carries them from Logto 2026.3, and lazy migration (logto preset) covers the rest.', 'auth_config.strategies.password');
+    }
+    if (identifiers.has('username')) {
+        b.set('strategies.username', true);
+        b.add('mapped', area, 'signIn.methods[identifier=username]', 'Sign in with a username.', 'auth_config.strategies.username');
+    }
+    if (methods.some((m) => (0, record_set_1.str)(m.identifier) === 'email' && m.verificationCode === true)) {
+        b.set('strategies.emailCode', true);
+        b.add('mapped', area, 'signIn.methods[identifier=email].verificationCode', 'Email verification code sign-in.', 'auth_config.strategies.emailCode');
+    }
+    if (methods.some((m) => (0, record_set_1.str)(m.identifier) === 'phone' && m.verificationCode === true)) {
+        b.set('strategies.phoneCode', true);
+        b.add('mapped', area, 'signIn.methods[identifier=phone].verificationCode', 'SMS code sign-in (bring your own SMS provider).', 'auth_config.strategies.phoneCode');
+    }
+    const passkey = (0, record_set_1.isObj)(exp.passkeySignIn) ? exp.passkeySignIn : {};
+    if (passkey.enabled === true) {
+        b.set('strategies.passkey', true);
+        b.add('differs', area, 'passkeySignIn', 'Passkey sign-in. Passkeys move with a database export (public credentials); users keep them when your Atlas domain matches the relying-party id.', 'auth_config.strategies.passkey');
+    }
+    if (signUp.verify === true && identifiers.has('email')) {
+        b.set('requireEmailVerification', true);
+        b.add('mapped', area, 'signUp.verify', 'Emails are verified at sign-up.', 'auth_config.requireEmailVerification');
+    }
+    const mode = (0, record_set_1.str)(exp.signInMode);
+    if (mode === 'SignIn') {
+        b.set('signUpMode', 'restricted');
+        b.add('mapped', area, 'signInMode', 'Self sign-up is closed (invitations and the allowlist still work).', 'auth_config.signUpMode');
+    }
+    else if (mode === 'Register') {
+        b.add('differs', area, 'signInMode', 'Register-only mode has no Atlas counterpart; the sign-in page also signs existing users in.');
+    }
+    if ((0, record_set_1.isObj)(exp.forgotPasswordMethods) || Array.isArray(exp.forgotPasswordMethods)) {
+        b.add('mapped', area, 'forgotPasswordMethods', 'Password reset by email or SMS code follows the enabled strategies.', 'auth_config.accountUx.passwordReset');
+    }
+    if ((0, record_set_1.str)(exp.agreeToTermsPolicy) && (0, record_set_1.str)(exp.agreeToTermsPolicy) !== 'Automatic') {
+        b.add('manual', area, 'agreeToTermsPolicy', 'Terms acceptance at sign-up: configure a policy acceptance requirement in Atlas.', 'policy_acceptance');
+    }
+    // ── password policy ──
+    const pw = (0, record_set_1.isObj)(exp.passwordPolicy) ? exp.passwordPolicy : {};
+    const length = (0, record_set_1.isObj)(pw.length) ? pw.length : {};
+    const min = num(length.min);
+    if (min !== undefined) {
+        b.set('passwordPolicy.minLength', Math.max(8, min));
+        b.add(min < 8 ? 'differs' : 'mapped', `${area} passwordPolicy`, 'length.min', `${min}${min < 8 ? ' (Atlas requires at least 8; existing passwords still sign in)' : ''}.`, 'auth_config.passwordPolicy.minLength');
+    }
+    const max = num(length.max);
+    if (max !== undefined && max >= 8) {
+        b.set('passwordPolicy.maxLength', Math.min(max, 4096));
+        b.add('mapped', `${area} passwordPolicy`, 'length.max', `${max}.`, 'auth_config.passwordPolicy.maxLength');
+    }
+    const rejects = (0, record_set_1.isObj)(pw.rejects) ? pw.rejects : {};
+    if (rejects.pwned === true) {
+        b.set('passwordPolicy.checkBreaches', true);
+        b.add('mapped', `${area} passwordPolicy`, 'rejects.pwned', 'Breached passwords are refused.', 'auth_config.passwordPolicy.checkBreaches');
+    }
+    if (rejects.userInfo === true) {
+        b.set('passwordPolicy.rejectIdentifierSubstring', true);
+        b.add('mapped', `${area} passwordPolicy`, 'rejects.userInfo', 'Passwords containing the user\'s own identifiers are refused.', 'auth_config.passwordPolicy.rejectIdentifierSubstring');
+    }
+    if (rejects.repeatedIdentical === true || rejects.sequential === true || (0, record_set_1.strs)(rejects.words).length) {
+        b.add('differs', `${area} passwordPolicy`, 'rejects.repeatedIdentical / sequential / words', 'Atlas follows NIST 800-63B: length and breached-password checks, no pattern or custom-word rules.', 'auth_config.passwordPolicy');
+    }
+    const types = (0, record_set_1.isObj)(pw.characterTypes) ? num(pw.characterTypes.min) : undefined;
+    if (types && types > 1) {
+        b.add('differs', `${area} passwordPolicy`, 'characterTypes.min', 'Atlas has no character-class rules (NIST 800-63B); length and the breach check apply.', 'auth_config.passwordPolicy');
+    }
+    // ── multi-factor ──
+    const mfa = (0, record_set_1.isObj)(exp.mfa) ? exp.mfa : {};
+    const factors = (0, record_set_1.strs)(mfa.factors);
+    if (factors.includes('Totp')) {
+        b.set('mfa.factors.totp', true);
+        b.add('mapped', `${area} mfa`, 'factors Totp', 'Authenticator apps; TOTP secrets move with a database export.', 'auth_config.mfa.factors.totp');
+    }
+    if (factors.includes('WebAuthn')) {
+        b.set('mfa.factors.passkey', true);
+        b.add('differs', `${area} mfa`, 'factors WebAuthn', 'Security keys and passkeys as a second factor; credentials move with a database export.', 'auth_config.mfa.factors.passkey');
+    }
+    if (factors.includes('BackupCode'))
+        b.add('mapped', `${area} mfa`, 'factors BackupCode', 'Backup codes (unused ones move with a database export).', 'auth_config.mfa');
+    const policy = (0, record_set_1.str)(mfa.policy);
+    if (policy === 'Mandatory') {
+        b.set('mfaPolicy', 'required');
+        b.add('mapped', `${area} mfa`, 'policy Mandatory', 'A second factor on every sign-in.', 'auth_config.mfaPolicy');
+    }
+    else if (factors.length) {
+        b.set('mfaPolicy', 'optional');
+        b.add('differs', `${area} mfa`, `policy ${policy ?? 'UserControlled'}`, 'Users may enrol a second factor; Atlas does not prompt for enrolment at sign-in (use a step-up rule or require MFA).', 'auth_config.mfaPolicy');
+    }
+    if ((0, record_set_1.isObj)(exp.adaptiveMfa) && exp.adaptiveMfa.enabled === true)
+        b.add('differs', `${area} mfa`, 'adaptiveMfa', 'Adaptive MFA: Atlas uses step-up and risk policies instead; review auth_config.stepUp.', 'auth_config.stepUp');
+    // ── social and message connectors ──
+    for (const c of snap.connectors) {
+        const target = (0, record_set_1.str)(c.target) ?? (0, record_set_1.str)(c.connectorId) ?? '';
+        const type = (0, record_set_1.str)(c.type);
+        const name = (0, record_set_1.str)((0, record_set_1.isObj)(c.metadata) && (0, record_set_1.isObj)(c.metadata.name) ? c.metadata.name.en : undefined) ?? (0, record_set_1.str)(c.connectorId) ?? target;
+        if (type === 'Email' || type === 'Sms' || /-(mail|sms)$/.test(target)) {
+            b.add('manual', 'connectors', `${name} (${type ?? target})`, 'Message delivery: Atlas sends through your own email / SMS provider (bring-your-own keys): configure it in the dashboard.', 'email_provider');
+            continue;
+        }
+        const key = (0, translate_kit_1.socialKey)(target);
+        if (!key) {
+            b.add('manual', 'connectors', `${name} (${target})`, 'No built-in Atlas provider: add it as a custom OAuth provider.', 'custom_oauth_providers');
+            continue;
+        }
+        const config = (0, record_set_1.isObj)(c.config) ? c.config : {};
+        b.socialProvider({ atlasKey: key, vendorName: name, area: 'connectors', setting: `${name} (${target})`, clientId: (0, record_set_1.str)(config.clientId), scopes: (0, record_set_1.str)(config.scope)?.split(/[ ,]+/).filter(Boolean) });
+    }
+    const targets = (0, record_set_1.strs)(exp.socialSignInConnectorTargets);
+    if (targets.length)
+        b.add('mapped', area, 'socialSignInConnectorTargets', `${targets.join(', ')} shown on the sign-in page: each enabled provider appears on Atlas's.`, 'oauth_providers');
+    if (exp.singleSignOnEnabled === true)
+        b.add('mapped', area, 'singleSignOnEnabled', 'Enterprise SSO connectors move with the data export as Atlas SSO connections (update each IdP with Atlas\'s ACS URL / redirect URI).', 'sso_connections');
+    // ── applications → redirect URLs and origins ──
+    const origins = new Set();
+    const redirects = new Set();
+    for (const app of snap.applications) {
+        const type = (0, record_set_1.str)(app.type);
+        const appName = (0, record_set_1.str)(app.name) ?? (0, record_set_1.str)(app.id) ?? '?';
+        if (type === 'MachineToMachine') {
+            b.add('manual', `applications ${appName}`, 'type MachineToMachine', 'A service app: create an Atlas M2M client for it.', 'oauth_clients');
+            continue;
+        }
+        if (type === 'SAML') {
+            b.add('manual', `applications ${appName}`, 'type SAML', 'Logto acting as a SAML identity provider for this app: register it as an Atlas SAML application.', 'oauth_clients');
+            continue;
+        }
+        if (type === 'Protected') {
+            b.add('manual', `applications ${appName}`, 'type Protected', 'A Logto protected app (the hosted reverse proxy) has no Atlas counterpart: protect the origin with the Atlas middleware.');
+            continue;
+        }
+        const oidc = (0, record_set_1.isObj)(app.oidcClientMetadata) ? app.oidcClientMetadata : {};
+        for (const u of [...(0, record_set_1.strs)(oidc.redirectUris), ...(0, record_set_1.strs)(oidc.postLogoutRedirectUris)])
+            redirects.add(u);
+        const custom = (0, record_set_1.isObj)(app.customClientMetadata) ? app.customClientMetadata : {};
+        for (const o of (0, record_set_1.strs)(custom.corsAllowedOrigins))
+            origins.add(o);
+        if (num(custom.idTokenTtl) || num(custom.refreshTokenTtl)) {
+            b.add('differs', `applications ${appName}`, 'customClientMetadata idTokenTtl / refreshTokenTtl', 'Atlas sets token lifetimes per instance (auth_config.session), not per application.', 'auth_config.session');
+        }
+    }
+    let exact = 0;
+    for (const url of redirects) {
+        if (url.includes('*')) {
+            b.add('differs', 'applications', `redirectUris ${url}`, 'Atlas redirect URLs are exact (no wildcards).', 'redirect_urls');
+            continue;
+        }
+        if (!/^https?:\/\//.test(url)) {
+            b.add('differs', 'applications', `redirectUris ${url}`, 'A native-app scheme: register it with the Atlas native app, not as a web redirect URL.', 'native_apps');
+            continue;
+        }
+        b.push('redirect_urls', { url });
+        exact++;
+    }
+    if (exact)
+        b.add('mapped', 'applications', 'oidcClientMetadata.redirectUris / postLogoutRedirectUris', `${exact} redirect URL(s).`, 'redirect_urls');
+    if (origins.size) {
+        b.instance.allowed_origins = [...origins].filter((o) => !o.includes('*'));
+        b.add('mapped', 'applications', 'customClientMetadata.corsAllowedOrigins', 'Allowed origins for the browser SDK.', 'instance.allowed_origins');
+    }
+    // ── API resources ──
+    for (const r of snap.resources) {
+        const indicator = (0, record_set_1.str)(r.indicator);
+        if (!indicator)
+            continue;
+        const scopes = (r.scopes ?? []).map((s) => (0, record_set_1.str)(s.name)).filter((s) => !!s);
+        b.push('resource_servers', { identifier: indicator, name: (0, record_set_1.str)(r.name) ?? indicator, scopes });
+        b.add('mapped', `api resources ${(0, record_set_1.str)(r.name) ?? indicator}`, `indicator ${indicator}`, `An API with ${scopes.length} scope(s); Atlas access tokens for it keep "aud": "${indicator}".`, `resource_servers ${indicator}`);
+        if (num(r.accessTokenTtl) && num(r.accessTokenTtl) !== 3600)
+            b.add('differs', `api resources ${(0, record_set_1.str)(r.name) ?? indicator}`, 'accessTokenTtl', 'Atlas access-token lifetime is an instance setting (auth_config.session.jwtTtlSeconds).', 'auth_config.session.jwtTtlSeconds');
+    }
+    // ── roles ──
+    for (const r of snap.roles) {
+        const name = (0, record_set_1.str)(r.name);
+        if (!name)
+            continue;
+        const key = (0, translate_kit_1.keyOf)(name);
+        b.roles[name] = key;
+        b.push('roles', { key, name, description: (0, record_set_1.str)(r.description) ?? '', permissions: [] });
+    }
+    if (snap.roles.length)
+        b.add('differs', 'roles', 'roles', `${snap.roles.length} role(s) become Atlas app roles; their API permissions and the user assignments move with the data export.`, 'roles');
+    // ── things with no 1:1 ──
+    for (const h of snap.hooks) {
+        if (h.enabled === false)
+            continue;
+        const events = [...(0, record_set_1.strs)(h.events), ...((0, record_set_1.str)(h.event) ? [(0, record_set_1.str)(h.event)] : [])];
+        b.add('manual', 'webhooks', `${(0, record_set_1.str)(h.name) ?? (0, record_set_1.str)(h.id) ?? '?'} (${events.join(', ') || 'events unknown'})`, 'A Logto webhook: create an Atlas webhook endpoint for the matching events and re-verify the signature in your receiver.', 'webhooks');
+    }
+    for (const j of snap.jwtCustomizers) {
+        const kind = (0, record_set_1.str)(j.key) ?? 'custom JWT';
+        b.add('manual', 'custom token claims', kind, 'A custom claims script: recreate its claims as an Atlas JWT template / session claims.', 'jwt_templates');
+    }
+    if ((0, record_set_1.str)(exp.customCss) || (0, record_set_1.str)(exp.customContent))
+        b.add('manual', area, 'customCss / customContent', 'Custom CSS and page content: restyle the Atlas components with the appearance settings.', 'branding');
+    b.add('differs', 'sessions', 'session lifetime', 'Logto sessions are not configurable per tenant; set the idle and absolute session windows you want in Atlas (auth_config.session).', 'auth_config.session');
+    return b.result(`Logto tenant ${snap.tenantId} (${snap.endpoint})`, {
+        bridge: { preset: 'logto', vars: { base_url: snap.endpoint } },
+        lazy: { preset: 'logto', config: { base_url: snap.endpoint } },
+    });
+}
+//# sourceMappingURL=logto-config.js.map

package/dist/migrate/export/logto-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logto-config.js","sourceRoot":"","sources":["../../../src/migrate/export/logto-config.ts"],"names":[],"mappings":";;AA6BA,4CAuCC;AAID,oDA4MC;AAlRD,6CAAgE;AAChE,mDAAkE;AAClE,+CAAgE;AAuBhE,MAAM,IAAI,GAAG,GAAG,CAAC;AAEV,KAAK,UAAU,gBAAgB,CAAC,IAAgB,EAAE,QAAgB,EAAE,QAAgB;IACzF,MAAM,QAAQ,GAAG,KAAK,EAAK,EAAoB,EAAE,KAAQ,EAAc,EAAE;QACvE,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7F,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5B,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,GAAG,GAAU,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,GAAG,IAAI,GAAG,GAAG,QAAQ,IAAI,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM;QAChC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAW,CAAC,CAAC;IAClB,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAqC,CAAC;IACrF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE;YAAE,CAAC,CAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,IAAA,iBAAI,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAW,CAAC,CAAC;IAC/K,CAAC;IACD,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,SAAS,EAAE,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAU,kBAAkB,CAAC,CAAC;YAC7D,OAAO,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,CAAC,EAAE,EAAS,CAAC;QACb,UAAU,EAAE,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,IAAA,iBAAI,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAW,CAAC;QAC5G,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC;QAC7C,SAAS;QACT,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC;QACnF,KAAK,EAAE,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,IAAA,iBAAI,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAW,CAAC;QAClG,cAAc,EAAE,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,IAAA,iBAAI,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAW,CAAC;KAC7H,CAAC;AACJ,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE9G,SAAgB,oBAAoB,CAAC,IAAyB;IAC5D,MAAM,CAAC,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,oBAAoB,CAAC;IAElC,wCAAwC;IACxC,MAAM,OAAO,GAAG,IAAA,iBAAI,EAAC,IAAA,kBAAK,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,IAAA,iBAAI,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;IACzF,IAAI,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,2BAA2B,EAAE,8MAA8M,EAAE,iCAAiC,CAAC,CAAC;IACzS,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,qCAAqC,EAAE,0BAA0B,EAAE,iCAAiC,CAAC,CAAC;IAC9H,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,EAAE,CAAC;QACtF,CAAC,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE,kCAAkC,EAAE,kCAAkC,CAAC,CAAC;IACrJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,EAAE,CAAC;QACtF,CAAC,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE,iDAAiD,EAAE,kCAAkC,CAAC,CAAC;IACpK,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,kJAAkJ,EAAE,gCAAgC,CAAC,CAAC;IAChO,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,iCAAiC,EAAE,sCAAsC,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,oEAAoE,EAAE,wBAAwB,CAAC,CAAC;IACtI,CAAC;SAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,6FAA6F,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,IAAA,kBAAK,EAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,qEAAqE,EAAE,qCAAqC,CAAC,CAAC;IAC/J,CAAC;IACD,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,WAAW,EAAE,CAAC;QAC/E,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE,kFAAkF,EAAE,mBAAmB,CAAC,CAAC;IACvJ,CAAC;IAED,wBAAwB;IACxB,MAAM,EAAE,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAA,kBAAK,EAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,EAAE,YAAY,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACrN,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,EAAE,YAAY,EAAE,GAAG,GAAG,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,kBAAK,EAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3B,CAAC,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,EAAE,eAAe,EAAE,iCAAiC,EAAE,0CAA0C,CAAC,CAAC;IAC5I,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC,GAAG,CAAC,0CAA0C,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,EAAE,kBAAkB,EAAE,+DAA+D,EAAE,sDAAsD,CAAC,CAAC;IACzL,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,IAAA,iBAAI,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACpG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,iBAAiB,EAAE,gDAAgD,EAAE,mGAAmG,EAAE,4BAA4B,CAAC,CAAC;IAClO,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,kBAAK,EAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,iBAAiB,EAAE,oBAAoB,EAAE,uFAAuF,EAAE,4BAA4B,CAAC,CAAC;IAC1L,CAAC;IAED,qBAAqB;IACrB,MAAM,GAAG,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,EAAE,cAAc,EAAE,+DAA+D,EAAE,8BAA8B,CAAC,CAAC;IAClJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,MAAM,EAAE,kBAAkB,EAAE,yFAAyF,EAAE,iCAAiC,CAAC,CAAC;IACpL,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,EAAE,oBAAoB,EAAE,yDAAyD,EAAE,iBAAiB,CAAC,CAAC;IACvK,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,EAAE,kBAAkB,EAAE,mCAAmC,EAAE,uBAAuB,CAAC,CAAC;IACnH,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,MAAM,EAAE,UAAU,MAAM,IAAI,gBAAgB,EAAE,EAAE,sHAAsH,EAAE,uBAAuB,CAAC,CAAC;IAC3N,CAAC;IACD,IAAI,IAAA,kBAAK,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI;QAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,MAAM,EAAE,aAAa,EAAE,wFAAwF,EAAE,oBAAoB,CAAC,CAAC;IAE/N,sCAAsC;IACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC;QAC/H,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,EAAE,2HAA2H,EAAE,gBAAgB,CAAC,CAAC;YAC5M,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,yBAAS,EAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,gEAAgE,EAAE,wBAAwB,CAAC,CAAC;YACjJ,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,QAAQ,EAAE,IAAA,gBAAG,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAA,gBAAG,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvM,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,8BAA8B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,EAAE,iBAAiB,CAAC,CAAC;IAC3L,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,sIAAsI,EAAE,iBAAiB,CAAC,CAAC;IAE9O,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC;QACpD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,OAAO,EAAE,EAAE,uBAAuB,EAAE,mDAAmD,EAAE,eAAe,CAAC,CAAC;YAC1I,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,OAAO,EAAE,EAAE,WAAW,EAAE,kGAAkG,EAAE,eAAe,CAAC,CAAC;YAC7K,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,OAAO,EAAE,EAAE,gBAAgB,EAAE,0HAA0H,CAAC,CAAC;YACzL,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,iBAAI,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,IAAA,iBAAI,EAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,MAAM,CAAC,kBAAkB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,OAAO,EAAE,EAAE,mDAAmD,EAAE,qFAAqF,EAAE,qBAAqB,CAAC,CAAC;QACjN,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,gBAAgB,GAAG,EAAE,EAAE,+CAA+C,EAAE,eAAe,CAAC,CAAC;YAC1H,SAAS;QACX,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,gBAAgB,GAAG,EAAE,EAAE,wFAAwF,EAAE,aAAa,CAAC,CAAC;YACjK,SAAS;QACX,CAAC;QACD,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACjC,KAAK,EAAE,CAAC;IACV,CAAC;IACD,IAAI,KAAK;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,0DAA0D,EAAE,GAAG,KAAK,mBAAmB,EAAE,eAAe,CAAC,CAAC;IACrJ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC;IACjJ,CAAC;IAED,sBAAsB;IACtB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,MAAM,EAAU,CAAC,CAAC;QACtG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,EAAE,aAAa,SAAS,EAAE,EAAE,eAAe,MAAM,CAAC,MAAM,sDAAsD,SAAS,IAAI,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;QACzN,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,IAAI;YAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,EAAE,gBAAgB,EAAE,yFAAyF,EAAE,mCAAmC,CAAC,CAAC;IAC/Q,CAAC;IAED,cAAc;IACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,GAAG,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAU,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,4GAA4G,EAAE,OAAO,CAAC,CAAC;IAErM,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,GAAG,EAAE,yHAAyH,EAAE,UAAU,CAAC,CAAC;IACtP,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC;QACxC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,IAAI,EAAE,wFAAwF,EAAE,eAAe,CAAC,CAAC;IAC1J,CAAC;IACD,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,aAAa,CAAC;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE,yFAAyF,EAAE,UAAU,CAAC,CAAC;IAC5M,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,oIAAoI,EAAE,qBAAqB,CAAC,CAAC;IAE9M,OAAO,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,GAAG,EAAE;QAClE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;QAC9D,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;KAC/D,CAAC,CAAC;AACL,CAAC"}