@atom8n/n8n 2.2.0

package/dist/sso.ee/saml/saml.service.ee.js

@@ -0,0 +1,463 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SamlService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const axios_1 = __importDefault(require("axios"));
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const constants_1 = require("./constants");
+const invalid_saml_metadata_url_error_1 = require("./errors/invalid-saml-metadata-url.error");
+const invalid_saml_metadata_error_1 = require("./errors/invalid-saml-metadata.error");
+const saml_helpers_1 = require("./saml-helpers");
+const saml_validator_1 = require("./saml-validator");
+const service_provider_ee_1 = require("./service-provider.ee");
+const sso_helpers_1 = require("../sso-helpers");
+const auth_error_1 = require("../../errors/response-errors/auth.error");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const provisioning_service_ee_1 = require("../../modules/provisioning.ee/provisioning.service.ee");
+const url_service_1 = require("../../services/url.service");
+let SamlService = class SamlService {
+    get samlPreferences() {
+        return {
+            ...this._samlPreferences,
+            loginEnabled: (0, saml_helpers_1.isSamlLoginEnabled)(),
+            loginLabel: (0, saml_helpers_1.getSamlLoginLabel)(),
+        };
+    }
+    constructor(logger, urlService, validator, userRepository, settingsRepository, instanceSettings, provisioningService) {
+        this.logger = logger;
+        this.urlService = urlService;
+        this.validator = validator;
+        this.userRepository = userRepository;
+        this.settingsRepository = settingsRepository;
+        this.instanceSettings = instanceSettings;
+        this.provisioningService = provisioningService;
+        this._samlPreferences = {
+            mapping: {
+                email: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
+                firstName: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/firstname',
+                lastName: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/lastname',
+                userPrincipalName: 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn',
+            },
+            metadata: '',
+            metadataUrl: '',
+            ignoreSSL: false,
+            loginBinding: 'redirect',
+            acsBinding: 'post',
+            authnRequestsSigned: false,
+            loginEnabled: false,
+            loginLabel: 'SAML',
+            wantAssertionsSigned: true,
+            wantMessageSigned: true,
+            relayState: this.urlService.getInstanceBaseUrl(),
+            signatureConfig: {
+                prefix: 'ds',
+                location: {
+                    reference: '/samlp:Response/saml:Issuer',
+                    action: 'after',
+                },
+            },
+        };
+        this.isReloading = false;
+    }
+    async init() {
+        try {
+            await this.loadFromDbAndApplySamlPreferences(false);
+            await this.validator.init();
+            if ((0, saml_helpers_1.isSamlLicensedAndEnabled)()) {
+                await this.loadSamlify();
+                await this.loadFromDbAndApplySamlPreferences(true);
+            }
+        }
+        catch (error) {
+            if (error instanceof invalid_saml_metadata_url_error_1.InvalidSamlMetadataUrlError ||
+                error instanceof invalid_saml_metadata_error_1.InvalidSamlMetadataError ||
+                error instanceof SyntaxError) {
+                this.logger.warn(`SAML initialization failed because of invalid metadata in database: ${error.message}. IMPORTANT: Disabling SAML and switching to email-based login for all users. Please review your configuration and re-enable SAML.`);
+                await this.reset();
+            }
+            else {
+                throw error;
+            }
+        }
+    }
+    async loadSamlify() {
+        if (this.samlify === undefined) {
+            this.logger.debug('Loading samlify library into memory');
+            this.samlify = await Promise.resolve().then(() => __importStar(require('samlify')));
+        }
+        this.samlify.setSchemaValidator({
+            validate: async (response) => {
+                const valid = await this.validator.validateResponse(response);
+                if (!valid) {
+                    throw new invalid_saml_metadata_error_1.InvalidSamlMetadataError();
+                }
+            },
+        });
+    }
+    getIdentityProviderInstance(forceRecreate = false) {
+        if (this.samlify === undefined) {
+            throw new n8n_workflow_1.UnexpectedError('Samlify is not initialized');
+        }
+        if (this.identityProviderInstance === undefined || forceRecreate) {
+            this.identityProviderInstance = this.samlify.IdentityProvider({
+                metadata: this._samlPreferences.metadata,
+            });
+        }
+        this.validator.validateIdentiyProvider(this.identityProviderInstance);
+        return this.identityProviderInstance;
+    }
+    getServiceProviderInstance() {
+        if (this.samlify === undefined) {
+            throw new n8n_workflow_1.UnexpectedError('Samlify is not initialized');
+        }
+        return (0, service_provider_ee_1.getServiceProviderInstance)(this._samlPreferences, this.samlify);
+    }
+    async getLoginRequestUrl(relayState, binding) {
+        await this.loadSamlify();
+        if (binding === undefined)
+            binding = this._samlPreferences.loginBinding ?? 'redirect';
+        if (binding === 'post') {
+            return {
+                binding,
+                context: this.getPostLoginRequestUrl(relayState),
+            };
+        }
+        else {
+            return {
+                binding,
+                context: this.getRedirectLoginRequestUrl(relayState),
+            };
+        }
+    }
+    getRedirectLoginRequestUrl(relayState) {
+        const sp = this.getServiceProviderInstance();
+        sp.entitySetting.relayState = relayState ?? this.urlService.getInstanceBaseUrl();
+        const loginRequest = sp.createLoginRequest(this.getIdentityProviderInstance(), 'redirect');
+        return loginRequest;
+    }
+    getPostLoginRequestUrl(relayState) {
+        const sp = this.getServiceProviderInstance();
+        sp.entitySetting.relayState = relayState ?? this.urlService.getInstanceBaseUrl();
+        const loginRequest = sp.createLoginRequest(this.getIdentityProviderInstance(), 'post');
+        return loginRequest;
+    }
+    async handleSamlLogin(req, binding) {
+        const attributes = await this.getAttributesFromLoginResponse(req, binding);
+        if (attributes.email) {
+            const lowerCasedEmail = attributes.email.toLowerCase();
+            if (!(0, db_1.isValidEmail)(lowerCasedEmail)) {
+                throw new bad_request_error_1.BadRequestError('Invalid email format');
+            }
+            const user = await this.userRepository.findOne({
+                where: { email: lowerCasedEmail },
+                relations: ['authIdentities', 'role'],
+            });
+            if (user) {
+                if (user.authIdentities.find((e) => e.providerType === 'saml' && e.providerId === attributes.userPrincipalName)) {
+                    await this.applySsoProvisioning(user, attributes);
+                    return {
+                        authenticatedUser: user,
+                        attributes,
+                        onboardingRequired: false,
+                    };
+                }
+                else {
+                    const updatedUser = await (0, saml_helpers_1.updateUserFromSamlAttributes)(user, attributes);
+                    const onboardingRequired = !updatedUser.firstName || !updatedUser.lastName;
+                    await this.applySsoProvisioning(updatedUser, attributes);
+                    return {
+                        authenticatedUser: updatedUser,
+                        attributes,
+                        onboardingRequired,
+                    };
+                }
+            }
+            else {
+                if ((0, sso_helpers_1.isSsoJustInTimeProvisioningEnabled)()) {
+                    const newUser = await (0, saml_helpers_1.createUserFromSamlAttributes)(attributes);
+                    await this.applySsoProvisioning(newUser, attributes);
+                    return {
+                        authenticatedUser: newUser,
+                        attributes,
+                        onboardingRequired: true,
+                    };
+                }
+            }
+        }
+        return {
+            authenticatedUser: undefined,
+            attributes,
+            onboardingRequired: false,
+        };
+    }
+    async applySsoProvisioning(user, attributes) {
+        if (attributes?.n8nInstanceRole) {
+            await this.provisioningService.provisionInstanceRoleForUser(user, attributes.n8nInstanceRole);
+        }
+        if (attributes?.n8nProjectRoles) {
+            await this.provisioningService.provisionProjectRolesForUser(user.id, attributes.n8nProjectRoles);
+        }
+    }
+    async broadcastReloadSAMLConfigurationCommand() {
+        if (this.instanceSettings.isMultiMain) {
+            const { Publisher } = await Promise.resolve().then(() => __importStar(require('../../scaling/pubsub/publisher.service')));
+            await di_1.Container.get(Publisher).publishCommand({ command: 'reload-saml-config' });
+        }
+    }
+    async reload() {
+        if (this.isReloading) {
+            this.logger.warn('SAML configuration reload already in progress');
+            return;
+        }
+        this.isReloading = true;
+        try {
+            this.logger.debug('SAML configuration changed, starting to load it from the database');
+            await this.loadFromDbAndApplySamlPreferences(true, false);
+            await (0, sso_helpers_1.reloadAuthenticationMethod)();
+            const samlLoginEnabled = (0, saml_helpers_1.isSamlLoginEnabled)();
+            this.logger.debug(`SAML login is now ${samlLoginEnabled ? 'enabled' : 'disabled'}.`);
+            di_1.Container.get(config_1.GlobalConfig).sso.saml.loginEnabled = samlLoginEnabled;
+        }
+        catch (error) {
+            this.logger.error('SAML configuration changed, failed to reload SAML configuration', {
+                error,
+            });
+        }
+        finally {
+            this.isReloading = false;
+        }
+    }
+    async setSamlPreferences(prefs, tryFallback = false, broadcastReload = true) {
+        await this.loadSamlify();
+        const previousMetadataUrl = this._samlPreferences.metadataUrl;
+        await this.loadPreferencesWithoutValidation(prefs);
+        if (prefs.metadataUrl) {
+            try {
+                const fetchedMetadata = await this.fetchMetadataFromUrl();
+                if (fetchedMetadata) {
+                    this._samlPreferences.metadata = fetchedMetadata;
+                }
+                else {
+                    throw new invalid_saml_metadata_url_error_1.InvalidSamlMetadataUrlError(prefs.metadataUrl);
+                }
+            }
+            catch (error) {
+                this._samlPreferences.metadataUrl = previousMetadataUrl;
+                if (!tryFallback) {
+                    throw error;
+                }
+                this.logger.error('SAML initialization detected an invalid metadata URL in database. Trying to initialize from metadata in database if available.', { error });
+            }
+        }
+        else if (prefs.metadata) {
+            const validationResult = await this.validator.validateMetadata(prefs.metadata);
+            if (!validationResult) {
+                throw new invalid_saml_metadata_error_1.InvalidSamlMetadataError();
+            }
+        }
+        if ((0, saml_helpers_1.isSamlLoginEnabled)()) {
+            if (this._samlPreferences.metadata) {
+                const validationResult = await this.validator.validateMetadata(this._samlPreferences.metadata);
+                if (!validationResult) {
+                    throw new invalid_saml_metadata_error_1.InvalidSamlMetadataError();
+                }
+            }
+            else {
+                throw new invalid_saml_metadata_error_1.InvalidSamlMetadataError();
+            }
+        }
+        this.getIdentityProviderInstance(true);
+        const result = await this.saveSamlPreferencesToDb();
+        if (broadcastReload) {
+            await this.broadcastReloadSAMLConfigurationCommand();
+        }
+        return result;
+    }
+    async loadPreferencesWithoutValidation(prefs) {
+        this._samlPreferences.loginBinding = prefs.loginBinding ?? this._samlPreferences.loginBinding;
+        this._samlPreferences.metadata = prefs.metadata ?? this._samlPreferences.metadata;
+        this._samlPreferences.mapping = prefs.mapping ?? this._samlPreferences.mapping;
+        this._samlPreferences.ignoreSSL = prefs.ignoreSSL ?? this._samlPreferences.ignoreSSL;
+        this._samlPreferences.acsBinding = prefs.acsBinding ?? this._samlPreferences.acsBinding;
+        this._samlPreferences.signatureConfig =
+            prefs.signatureConfig ?? this._samlPreferences.signatureConfig;
+        this._samlPreferences.authnRequestsSigned =
+            prefs.authnRequestsSigned ?? this._samlPreferences.authnRequestsSigned;
+        this._samlPreferences.wantAssertionsSigned =
+            prefs.wantAssertionsSigned ?? this._samlPreferences.wantAssertionsSigned;
+        this._samlPreferences.wantMessageSigned =
+            prefs.wantMessageSigned ?? this._samlPreferences.wantMessageSigned;
+        if (prefs.metadataUrl) {
+            this._samlPreferences.metadataUrl = prefs.metadataUrl;
+        }
+        else if (prefs.metadata) {
+            this._samlPreferences.metadataUrl = undefined;
+            this._samlPreferences.metadata = prefs.metadata;
+        }
+        await (0, saml_helpers_1.setSamlLoginEnabled)(prefs.loginEnabled ?? (0, saml_helpers_1.isSamlLoginEnabled)());
+        (0, saml_helpers_1.setSamlLoginLabel)(prefs.loginLabel ?? (0, saml_helpers_1.getSamlLoginLabel)());
+    }
+    async loadFromDbAndApplySamlPreferences(apply = true, broadcastReload = true) {
+        const samlPreferences = await this.settingsRepository.findOne({
+            where: { key: constants_1.SAML_PREFERENCES_DB_KEY },
+        });
+        if (samlPreferences) {
+            const prefs = (0, n8n_workflow_1.jsonParse)(samlPreferences.value);
+            if (prefs) {
+                if (apply) {
+                    await this.setSamlPreferences(prefs, true, broadcastReload);
+                }
+                else {
+                    await this.loadPreferencesWithoutValidation(prefs);
+                }
+                return prefs;
+            }
+        }
+        return;
+    }
+    async saveSamlPreferencesToDb() {
+        const samlPreferences = await this.settingsRepository.findOne({
+            where: { key: constants_1.SAML_PREFERENCES_DB_KEY },
+        });
+        const settingsValue = JSON.stringify(this.samlPreferences);
+        let result;
+        if (samlPreferences) {
+            samlPreferences.value = settingsValue;
+            result = await this.settingsRepository.save(samlPreferences, {
+                transaction: false,
+            });
+        }
+        else {
+            result = await this.settingsRepository.save({
+                key: constants_1.SAML_PREFERENCES_DB_KEY,
+                value: settingsValue,
+                loadOnStartup: true,
+            }, { transaction: false });
+        }
+        if (result)
+            return (0, n8n_workflow_1.jsonParse)(result.value);
+        return;
+    }
+    async fetchMetadataFromUrl() {
+        await this.loadSamlify();
+        if (!this._samlPreferences.metadataUrl)
+            throw new bad_request_error_1.BadRequestError('Error fetching SAML Metadata, no Metadata URL set');
+        try {
+            const httpsAgent = (0, n8n_core_1.createHttpsProxyAgent)(null, this._samlPreferences.metadataUrl, {
+                rejectUnauthorized: !this._samlPreferences.ignoreSSL,
+            });
+            const httpAgent = (0, n8n_core_1.createHttpProxyAgent)(null, this._samlPreferences.metadataUrl);
+            const response = await axios_1.default.get(this._samlPreferences.metadataUrl, {
+                httpsAgent,
+                httpAgent,
+            });
+            if (response.status === 200 && response.data) {
+                const xml = (await response.data);
+                const validationResult = await this.validator.validateMetadata(xml);
+                if (!validationResult) {
+                    throw new bad_request_error_1.BadRequestError(`Data received from ${this._samlPreferences.metadataUrl} is not valid SAML metadata.`);
+                }
+                return xml;
+            }
+        }
+        catch (error) {
+            throw new bad_request_error_1.BadRequestError(`Error fetching SAML Metadata from ${this._samlPreferences.metadataUrl}: ${error}`);
+        }
+        return;
+    }
+    async getAttributesFromLoginResponse(req, binding) {
+        let parsedSamlResponse;
+        if (!this._samlPreferences.mapping)
+            throw new bad_request_error_1.BadRequestError('Error fetching SAML Attributes, no Attribute mapping set');
+        try {
+            await this.loadSamlify();
+            parsedSamlResponse = await this.getServiceProviderInstance().parseLoginResponse(this.getIdentityProviderInstance(), binding, req);
+        }
+        catch (error) {
+            throw new auth_error_1.AuthError(`SAML Authentication failed. Could not parse SAML response. ${error instanceof Error ? error.message : error}`);
+        }
+        const { attributes, missingAttributes } = (0, saml_helpers_1.getMappedSamlAttributesFromFlowResult)(parsedSamlResponse, this._samlPreferences.mapping, {
+            instanceRole: await this.provisioningService.getInstanceRoleClaimName(),
+            projectRoles: await this.provisioningService.getProjectsRolesClaimName(),
+        });
+        if (!attributes) {
+            throw new auth_error_1.AuthError('SAML Authentication failed. Invalid SAML response.');
+        }
+        if (missingAttributes.length > 0) {
+            throw new auth_error_1.AuthError(`SAML Authentication failed. Invalid SAML response (missing attributes: ${missingAttributes.join(', ')}).`);
+        }
+        return attributes;
+    }
+    async reset() {
+        await (0, saml_helpers_1.setSamlLoginEnabled)(false);
+        await this.settingsRepository.delete({ key: constants_1.SAML_PREFERENCES_DB_KEY });
+    }
+};
+exports.SamlService = SamlService;
+__decorate([
+    (0, decorators_1.OnPubSubEvent)('reload-saml-config'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], SamlService.prototype, "reload", null);
+exports.SamlService = SamlService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger,
+        url_service_1.UrlService,
+        saml_validator_1.SamlValidator,
+        db_1.UserRepository,
+        db_1.SettingsRepository,
+        n8n_core_1.InstanceSettings,
+        provisioning_service_ee_1.ProvisioningService])
+], SamlService);
+//# sourceMappingURL=saml.service.ee.js.map

package/dist/sso.ee/saml/saml.service.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml.service.ee.js","sourceRoot":"","sources":["../../../src/sso.ee/saml/saml.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2C;AAE3C,gCAA2E;AAC3E,gDAAgD;AAChD,gCAA6C;AAC7C,kDAA0B;AAE1B,uCAAyF;AACzF,+CAA0D;AAI1D,2CAAsD;AACtD,8FAAuF;AACvF,sFAAgF;AAChF,iDASwB;AACxB,qDAAiD;AACjD,+DAAmE;AAEnE,gDAAgG;AAEhG,oEAAgE;AAChE,kFAA6E;AAC7E,+FAAwF;AACxF,wDAAoD;AAG7C,IAAM,WAAW,GAAjB,MAAM,WAAW;IAiCvB,IAAI,eAAe;QAClB,OAAO;YACN,GAAG,IAAI,CAAC,gBAAgB;YACxB,YAAY,EAAE,IAAA,iCAAkB,GAAE;YAClC,UAAU,EAAE,IAAA,gCAAiB,GAAE;SAC/B,CAAC;IACH,CAAC;IAED,YACkB,MAAc,EACd,UAAsB,EACtB,SAAwB,EACxB,cAA8B,EAC9B,kBAAsC,EACtC,gBAAkC,EAClC,mBAAwC;QANxC,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAe;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,wBAAmB,GAAnB,mBAAmB,CAAqB;QA1ClD,qBAAgB,GAAoB;YAC3C,OAAO,EAAE;gBACR,KAAK,EAAE,oEAAoE;gBAC3E,SAAS,EAAE,iEAAiE;gBAC5E,QAAQ,EAAE,gEAAgE;gBAC1E,iBAAiB,EAAE,2DAA2D;aAC9E;YACD,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,KAAK;YAC1B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,MAAM;YAClB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,IAAI;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;YAChD,eAAe,EAAE;gBAChB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE;oBACT,SAAS,EAAE,6BAA6B;oBACxC,MAAM,EAAE,OAAO;iBACf;aACD;SACD,CAAC;QAiNM,gBAAW,GAAG,KAAK,CAAC;IA/LzB,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC;YAEJ,MAAM,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAA,uCAAwB,GAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAGhB,IACC,KAAK,YAAY,6DAA2B;gBAC5C,KAAK,YAAY,sDAAwB;gBACzC,KAAK,YAAY,WAAW,EAC3B,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,uEAAuE,KAAK,CAAC,OAAO,oIAAoI,CACxN,CAAC;gBACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,GAAG,wDAAa,SAAS,GAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/B,QAAQ,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE;gBACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,MAAM,IAAI,sDAAwB,EAAE,CAAC;gBACtC,CAAC;YACF,CAAC;SACD,CAAC,CAAC;IACJ,CAAC;IAED,2BAA2B,CAAC,aAAa,GAAG,KAAK;QAChD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,IAAI,aAAa,EAAE,CAAC;YAClE,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC7D,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;aACxC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAEtE,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACtC,CAAC;IAED,0BAA0B;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAA,gDAA0B,EAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,UAAmB,EACnB,OAA0B;QAK1B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,IAAI,UAAU,CAAC;QACtF,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO;gBACN,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC;aAChD,CAAC;QACH,CAAC;aAAM,CAAC;YACP,OAAO;gBACN,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC;aACpD,CAAC;QACH,CAAC;IACF,CAAC;IAEO,0BAA0B,CAAC,UAAmB;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,UAAU,CAAC,CAAC;QAC3F,OAAO,YAAY,CAAC;IACrB,CAAC;IAEO,sBAAsB,CAAC,UAAmB;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,EAAE,CAAC,kBAAkB,CACzC,IAAI,CAAC,2BAA2B,EAAE,EAClC,MAAM,CACgB,CAAC;QACxB,OAAO,YAAY,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,GAAoB,EACpB,OAAyB;QAMzB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAEvD,IAAI,CAAC,IAAA,iBAAY,EAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC9C,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;gBACjC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YACH,IAAI,IAAI,EAAE,CAAC;gBAEV,IACC,IAAI,CAAC,cAAc,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,iBAAiB,CACjF,EACA,CAAC;oBACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBAClD,OAAO;wBACN,iBAAiB,EAAE,IAAI;wBACvB,UAAU;wBACV,kBAAkB,EAAE,KAAK;qBACzB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBAEP,MAAM,WAAW,GAAG,MAAM,IAAA,2CAA4B,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACzE,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAC3E,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;oBACzD,OAAO;wBACN,iBAAiB,EAAE,WAAW;wBAC9B,UAAU;wBACV,kBAAkB;qBAClB,CAAC;gBACH,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,IAAI,IAAA,gDAAkC,GAAE,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,MAAM,IAAA,2CAA4B,EAAC,UAAU,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACrD,OAAO;wBACN,iBAAiB,EAAE,OAAO;wBAC1B,UAAU;wBACV,kBAAkB,EAAE,IAAI;qBACxB,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,iBAAiB,EAAE,SAAS;YAC5B,UAAU;YACV,kBAAkB,EAAE,KAAK;SACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAU,EAAE,UAA2C;QACzF,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAC1D,IAAI,CAAC,EAAE,EACP,UAAU,CAAC,eAAe,CAC1B,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAE1D,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,gBAAgB,GAAG,IAAA,iCAAkB,GAAE,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAErF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,KAA+B,EAC/B,cAAuB,KAAK,EAC5B,kBAA2B,IAAI;QAE/B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC9D,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC;gBACJ,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1D,IAAI,eAAe,EAAE,CAAC;oBACrB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,eAAe,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBAGP,MAAM,IAAI,6DAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,mBAAmB,CAAC;gBACxD,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,MAAM,KAAK,CAAC;gBACb,CAAC;gBAID,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,gIAAgI,EAEhI,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/E,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;QACF,CAAC;QAMD,IAAI,IAAA,iCAAkB,GAAE,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAC9B,CAAC;gBACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;gBACtC,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;QACF,CAAC;QACD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAEpD,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,gCAAgC,CAAC,KAA+B;QACrE,IAAI,CAAC,gBAAgB,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAC9F,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAClF,IAAI,CAAC,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAC/E,IAAI,CAAC,gBAAgB,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACrF,IAAI,CAAC,gBAAgB,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;QACxF,IAAI,CAAC,gBAAgB,CAAC,eAAe;YACpC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC;QAChE,IAAI,CAAC,gBAAgB,CAAC,mBAAmB;YACxC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACxE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;YACzC,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;QAC1E,IAAI,CAAC,gBAAgB,CAAC,iBAAiB;YACtC,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;QACpE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvD,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAE3B,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,SAAS,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACjD,CAAC;QACD,MAAM,IAAA,kCAAmB,EAAC,KAAK,CAAC,YAAY,IAAI,IAAA,iCAAkB,GAAE,CAAC,CAAC;QACtE,IAAA,gCAAiB,EAAC,KAAK,CAAC,UAAU,IAAI,IAAA,gCAAiB,GAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,iCAAiC,CACtC,KAAK,GAAG,IAAI,EACZ,kBAA2B,IAAI;QAE/B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE,EAAE,GAAG,EAAE,mCAAuB,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAA,wBAAS,EAAkB,eAAe,CAAC,KAAK,CAAC,CAAC;YAEhE,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACP,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC5B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE,EAAE,GAAG,EAAE,mCAAuB,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,MAAgB,CAAC;QACrB,IAAI,eAAe,EAAE,CAAC;YACrB,eAAe,CAAC,KAAK,GAAG,aAAa,CAAC;YACtC,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,eAAe,EAAE;gBAC5D,WAAW,EAAE,KAAK;aAClB,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAC1C;gBACC,GAAG,EAAE,mCAAuB;gBAC5B,KAAK,EAAE,aAAa;gBACpB,aAAa,EAAE,IAAI;aACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,IAAA,wBAAS,EAAkB,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO;IACR,CAAC;IAED,KAAK,CAAC,oBAAoB;QACzB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW;YACrC,MAAM,IAAI,mCAAe,CAAC,mDAAmD,CAAC,CAAC;QAChF,IAAI,CAAC;YAGJ,MAAM,UAAU,GAAG,IAAA,gCAAqB,EACvC,IAAI,EACJ,IAAI,CAAC,gBAAgB,CAAC,WAAW,EACjC;gBACC,kBAAkB,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS;aACpD,CACD,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,+BAAoB,EAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEhF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACnE,UAAU;gBACV,SAAS;aACT,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAW,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,mCAAe,CACxB,sBAAsB,IAAI,CAAC,gBAAgB,CAAC,WAAW,8BAA8B,CACrF,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,CAAC;YACZ,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mCAAe,CACxB,qCAAqC,IAAI,CAAC,gBAAgB,CAAC,WAAW,KAAK,KAAK,EAAE,CAClF,CAAC;QACH,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,CAAC,8BAA8B,CACnC,GAAoB,EACpB,OAAyB;QAEzB,IAAI,kBAAkB,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO;YACjC,MAAM,IAAI,mCAAe,CAAC,0DAA0D,CAAC,CAAC;QACvF,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,kBAAkB,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC,kBAAkB,CAC9E,IAAI,CAAC,2BAA2B,EAAE,EAClC,OAAO,EACP,GAAG,CACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEhB,MAAM,IAAI,sBAAS,CAElB,8DAA8D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAC9G,CAAC;QACH,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,IAAA,oDAAqC,EAC9E,kBAAkB,EAClB,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAC7B;YACC,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,wBAAwB,EAAE;YACvE,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,EAAE;SACxE,CACD,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAS,CAAC,oDAAoD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,sBAAS,CAClB,0EAA0E,iBAAiB,CAAC,IAAI,CAC/F,IAAI,CACJ,IAAI,CACL,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACnB,CAAC;IAMD,KAAK,CAAC,KAAK;QACV,MAAM,IAAA,kCAAmB,EAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,mCAAuB,EAAE,CAAC,CAAC;IACxE,CAAC;CACD,CAAA;AA9eY,kCAAW;AAmPjB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCAyBnC;sBA3QW,WAAW;IADvB,IAAA,YAAO,GAAE;qCA2CiB,uBAAM;QACF,wBAAU;QACX,8BAAa;QACR,mBAAc;QACV,uBAAkB;QACpB,2BAAgB;QACb,6CAAmB;GAhD9C,WAAW,CA8evB"}

package/dist/sso.ee/saml/schema/metadata-exchange.xsd.d.ts

@@ -0,0 +1,2 @@
+import type { XMLFileInfo } from 'xmllint-wasm';
+export declare const xmlFileInfo: XMLFileInfo;

package/dist/sso.ee/saml/schema/metadata-exchange.xsd.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.xmlFileInfo = void 0;
+exports.xmlFileInfo = {
+    fileName: 'MetadataExchange.xsd',
+    contents: `<?xml version='1.0' encoding='UTF-8' ?>
+<!--
+(c) 2004-2006 BEA Systems Inc., Computer Associates International, Inc.,
+International Business Machines Corporation, Microsoft Corporation,
+Inc., SAP AG, Sun Microsystems, and webMethods. All rights reserved. 
+
+Permission to copy and display the WS-MetadataExchange Specification
+(the "Specification"), in any medium without fee or royalty is hereby
+granted, provided that you include the following on ALL copies of the
+Specification that you make:
+
+1.	A link or URL to the Specification at this location.
+2.	The copyright notice as shown in the Specification.
+
+BEA Systems, Computer Associates, IBM, Microsoft, SAP, Sun, and
+webMethods (collectively, the "Authors") each agree to grant you a
+license, under royalty-free and otherwise reasonable,
+non-discriminatory terms and conditions, to their respective essential
+patent claims that they deem necessary to implement the
+WS-MetadataExchange Specification.
+
+THE SPECIFICATION IS PROVIDED "AS IS," AND THE AUTHORS MAKE NO
+REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT
+LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, NON-INFRINGEMENT, OR TITLE; THAT THE CONTENTS OF THE
+SPECIFICATION ARE SUITABLE FOR ANY PURPOSE; NOR THAT THE
+IMPLEMENTATION OF SUCH CONTENTS WILL NOT INFRINGE ANY THIRD PARTY
+PATENTS, COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS.
+
+THE AUTHORS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL,
+INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR RELATING TO ANY
+USE OR DISTRIBUTION OF THE SPECIFICATIONS.
+
+The name and trademarks of the Authors may NOT be used in any manner,
+including advertising or publicity pertaining to the Specifications or
+their contents without specific, written prior permission. Title to
+copyright in the Specifications will at all times remain with the
+Authors.
+
+No other rights are granted by implication, estoppel or otherwise.
+-->
+
+<xs:schema
+    targetNamespace='http://schemas.xmlsoap.org/ws/2004/09/mex'
+    xmlns:tns='http://schemas.xmlsoap.org/ws/2004/09/mex'
+    xmlns:wsa10='http://www.w3.org/2005/08/addressing'
+    xmlns:wsa04='http://schemas.xmlsoap.org/ws/2004/08/addressing'
+    xmlns:xs='http://www.w3.org/2001/XMLSchema'
+    elementFormDefault='qualified'
+    blockDefault='#all' >
+
+  <!-- Get Metadata request -->
+  <xs:element name='GetMetadata' >
+    <xs:complexType>
+      <xs:sequence>
+        <xs:element ref='tns:Dialect' minOccurs='0' />
+        <xs:element ref='tns:Identifier' minOccurs='0' />
+      </xs:sequence>
+      <xs:anyAttribute namespace='##other' processContents='lax' />
+    </xs:complexType>
+  </xs:element>
+
+  <xs:element name='Dialect' type='xs:anyURI' />
+  <xs:element name='Identifier' type='xs:anyURI' />
+
+  <!-- Get Metadata response -->
+  <xs:element name='Metadata' >
+    <xs:complexType>
+      <xs:sequence>
+        <xs:element ref='tns:MetadataSection'
+                    minOccurs='0'
+                    maxOccurs='unbounded' />
+        <xs:any namespace='##other' processContents='lax'
+                minOccurs='0'
+                maxOccurs='unbounded' />
+      </xs:sequence>
+      <xs:anyAttribute namespace='##other' processContents='lax' />
+    </xs:complexType>
+  </xs:element>
+
+  <xs:element name='MetadataSection' >
+    <xs:complexType>
+      <xs:choice>
+        <xs:any namespace='##other' processContents='lax' />
+        <xs:element ref='tns:MetadataReference' />
+        <xs:element ref='tns:Location' />
+      </xs:choice>
+      <xs:attribute name='Dialect' type='xs:anyURI' use='required' />
+      <xs:attribute name='Identifier' type='xs:anyURI' />
+      <xs:anyAttribute namespace='##other' processContents='lax' />
+    </xs:complexType>
+  </xs:element>
+  
+  <!-- 
+       Ideally, the type of the MetadataReference would have been
+       the union of wsa04:EndpointReferenceType and
+       wsa10:EndpointReferenceType but unfortunately xs:union only
+       works for simple types. As a result, we have to define
+       the mex:MetadataReference using xs:any.
+  -->
+
+  <xs:element name='MetadataReference'>
+    <xs:complexType>
+      <xs:sequence>
+        <xs:any minOccurs='1' maxOccurs='unbounded' 
+                processContents='lax' namespace='##other' />
+      </xs:sequence>
+    </xs:complexType>
+  </xs:element>
+  <xs:element name='Location'
+              type='xs:anyURI' />
+</xs:schema>`,
+};
+//# sourceMappingURL=metadata-exchange.xsd.js.map

package/dist/sso.ee/saml/schema/metadata-exchange.xsd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata-exchange.xsd.js","sourceRoot":"","sources":["../../../../src/sso.ee/saml/schema/metadata-exchange.xsd.ts"],"names":[],"mappings":";;;AAEa,QAAA,WAAW,GAAgB;IACvC,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA+GE;CACZ,CAAC"}

package/dist/sso.ee/saml/schema/oasis-200401-wss-wssecurity-secext-1.0.xsd.d.ts

@@ -0,0 +1,2 @@
+import type { XMLFileInfo } from 'xmllint-wasm';
+export declare const xmlFileInfo: XMLFileInfo;