@betterportal/auth-default 10.6.20 → 10.6.22

package/lib/storage.js

@@ -0,0 +1,427 @@
+import { createHash, randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, openSync, closeSync, fsyncSync } from "node:fs";
+import { hostname } from "node:os";
+import { dirname, resolve } from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { Pool } from "pg";
+const key = (kind, id, scope) => JSON.stringify([scope.tenantId, scope.appId, kind, id]);
+const sameScope = (a, b) => a.tenantId === b.tenantId && a.appId === b.appId;
+/** Atomic replace includes a directory fsync so a completed write survives restart. */
+export function atomicWrite(path, data) {
+    mkdirSync(dirname(path), { recursive: true });
+    const temp = `${path}.${randomUUID()}.tmp`;
+    const fd = openSync(temp, "wx", 0o600);
+    try {
+        writeFileSync(fd, JSON.stringify(data));
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(temp, path);
+    const dir = openSync(dirname(path), "r");
+    try {
+        fsyncSync(dir);
+    }
+    finally {
+        closeSync(dir);
+    }
+}
+function validateRecords(data) {
+    if (!data || typeof data !== "object")
+        throw new Error("Invalid auth store");
+    const file = data;
+    if (file.version !== 2 || !Array.isArray(file.records))
+        throw new Error("Unsupported auth store version");
+    const seen = new Set();
+    for (const row of file.records) {
+        if (!row || typeof row.kind !== "string" || !row.scope || typeof row.scope.tenantId !== "string"
+            || typeof row.scope.appId !== "string" || !row.value || typeof row.value.id !== "string")
+            throw new Error("Malformed auth record");
+        const id = key(row.kind, row.value.id, row.scope);
+        if (seen.has(id))
+            throw new Error("Duplicate auth record");
+        seen.add(id);
+    }
+    return file;
+}
+/** Only a demonstrably dead writer on this host may be recovered automatically. */
+function lockFile(path) {
+    mkdirSync(dirname(path), { recursive: true });
+    const lock = `${path}.lock`;
+    const processStart = (pid) => {
+        try {
+            return readFileSync(`/proc/${pid}/stat`, "utf8").split(") ")[1].split(" ")[19];
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const owner = JSON.stringify({ pid: process.pid, host: hostname(), start: processStart(process.pid), nonce: randomUUID() });
+    const acquire = () => {
+        const fd = openSync(lock, "wx", 0o600);
+        try {
+            writeFileSync(fd, owner);
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+    };
+    try {
+        acquire();
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        const recovery = `${lock}.recover`;
+        let recoveryFd;
+        try {
+            recoveryFd = openSync(recovery, "wx", 0o600);
+        }
+        catch {
+            throw new Error(`Auth lock recovery is already active; verify ownership of ${recovery}`);
+        }
+        try {
+            const previous = readFileSync(lock, "utf8");
+            let dead = false;
+            try {
+                const record = JSON.parse(previous);
+                if (record.host === hostname() && Number.isInteger(record.pid) && record.pid > 0) {
+                    try {
+                        process.kill(record.pid, 0);
+                    }
+                    catch (failure) {
+                        dead = failure.code === "ESRCH";
+                    }
+                    const start = processStart(record.pid);
+                    if (record.start && start && record.start !== start)
+                        dead = true;
+                }
+            }
+            catch { /* Ambiguous ownership requires operator recovery. */ }
+            if (!dead || readFileSync(lock, "utf8") !== previous)
+                throw new Error(`Auth store already has an owner; verify the previous process stopped before removing ${lock}`, { cause: error });
+            unlinkSync(lock);
+            acquire(); // An intervening new owner wins; never steal its lock.
+        }
+        finally {
+            closeSync(recoveryFd);
+            unlinkSync(recovery);
+        }
+    }
+    return () => { if (existsSync(lock) && readFileSync(lock, "utf8") === owner)
+        unlinkSync(lock); };
+}
+export class JsonAuthStorage {
+    path;
+    mode = "simple";
+    data;
+    tail = Promise.resolve();
+    release;
+    closed = false;
+    closing = false;
+    constructor(path) {
+        this.path = path;
+        const marker = `${path}.mode.json`;
+        if (existsSync(marker))
+            throw new Error("This installation requires Advanced mode; Simple downgrade is unsupported");
+        this.release = lockFile(path);
+        try {
+            this.data = existsSync(path) ? validateRecords(JSON.parse(readFileSync(path, "utf8"))) : { version: 2, records: [] };
+            if (new Set(this.data.records.filter(r => r.kind === "user").map(r => r.scope.tenantId)).size > 1)
+                throw new Error("Simple auth supports one tenant; select Advanced mode");
+        }
+        catch (error) {
+            this.release();
+            throw error;
+        }
+    }
+    transaction(_scope, work) {
+        if (this.closing)
+            return Promise.reject(new Error("Auth store is closed"));
+        const run = this.tail.then(async () => {
+            if (this.closed)
+                throw new Error("Auth store is closed");
+            const draft = structuredClone(this.data);
+            let dirty = false;
+            const filteredPage = (kind, scope, predicate, options = {}) => structuredClone(draft.records
+                .filter(row => row.kind === kind && sameScope(row.scope, scope) && predicate(row.value)).map(row => row.value)
+                .filter(row => !options.after || (options.descending ? row.id < options.after : row.id > options.after))
+                .sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0) * (options.descending ? -1 : 1)).slice(0, Math.max(1, Math.min(501, options.limit ?? 100))));
+            const result = await work({
+                pruneSessions: async (scope, now) => {
+                    const retained = draft.records.filter(row => row.kind !== "session" || !sameScope(row.scope, scope) || (row.value.revoked !== true && Number(row.value.expiresAt) > now));
+                    if (retained.length !== draft.records.length) {
+                        draft.records = retained;
+                        dirty = true;
+                    }
+                },
+                activeSessions: async (scope, userId, now, options) => filteredPage("session", scope, value => value.userId === userId && value.revoked === false && Number(value.expiresAt) > now, options),
+                failedMail: async (scope, options) => filteredPage("mail", scope, value => value.state === "failed", options),
+                get: async (kind, id, scope) => structuredClone(draft.records.find(row => key(row.kind, row.value.id, row.scope) === key(kind, id, scope))?.value),
+                list: async (kind, scope) => structuredClone(draft.records.filter(row => row.kind === kind && (!scope || sameScope(row.scope, scope))).map(row => row.value)),
+                dueMail: async (now, limit) => structuredClone(draft.records.filter(row => row.kind === "mail" && ["pending", "sending"].includes(String(row.value.state)) && Number(row.value.nextAttempt) <= now)
+                    .sort((a, b) => Number(a.value.nextAttempt) - Number(b.value.nextAttempt) || a.value.id.localeCompare(b.value.id)).slice(0, Math.max(1, Math.min(100, limit))).map(row => row.value)),
+                page: async (kind, scope, options) => filteredPage(kind, scope, () => true, options),
+                put: async (kind, scope, value) => {
+                    const i = draft.records.findIndex(row => key(row.kind, row.value.id, row.scope) === key(kind, value.id, scope));
+                    const row = structuredClone({ kind, scope, value });
+                    if (i < 0)
+                        draft.records.push(row);
+                    else
+                        draft.records[i] = row;
+                    dirty = true;
+                },
+                remove: async (kind, id, scope) => { draft.records = draft.records.filter(row => key(row.kind, row.value.id, row.scope) !== key(kind, id, scope)); dirty = true; }
+            });
+            if (dirty) {
+                atomicWrite(this.path, draft);
+                this.data = draft;
+            }
+            return result;
+        });
+        this.tail = run.catch(() => undefined);
+        return run;
+    }
+    async close() { this.closing = true; await this.tail; if (!this.closed) {
+        this.closed = true;
+        this.release();
+    } }
+}
+function pgTransaction(client, installationId) {
+    const filteredPage = async (scope, predicate, parameters, options = {}) => {
+        const comparison = options.descending ? "<" : ">";
+        const order = options.descending ? "DESC" : "ASC";
+        const values = [installationId, scope.tenantId, scope.appId, ...parameters];
+        values.push(options.after || null, Math.max(1, Math.min(501, options.limit ?? 100)));
+        const cursor = values.length - 1;
+        const result = await client.query(`SELECT value FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND ${predicate} AND ($${cursor}::text IS NULL OR id ${comparison} $${cursor}) ORDER BY id ${order} LIMIT $${values.length}`, values);
+        return result.rows.map(row => row.value);
+    };
+    return {
+        pruneSessions: async (scope, now) => {
+            await client.query("DELETE FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND kind='session' AND (value->>'expiresAt')::bigint <= $4", [installationId, scope.tenantId, scope.appId, now]);
+            await client.query("DELETE FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND kind='session' AND value->>'revoked'='true'", [installationId, scope.tenantId, scope.appId]);
+        },
+        activeSessions: (scope, userId, now, options) => filteredPage(scope, "kind='session' AND value->>'userId'=$4 AND value->>'revoked'='false' AND (value->>'expiresAt')::bigint > $5", [userId, now], options),
+        failedMail: (scope, options) => filteredPage(scope, "kind='mail' AND value->>'state'='failed'", [], options),
+        get: async (kind, id, scope) => {
+            const r = await client.query("SELECT value FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND kind=$4 AND id=$5", [installationId, scope.tenantId, scope.appId, kind, id]);
+            return r.rows[0]?.value;
+        },
+        list: async (kind, scope) => {
+            const r = scope
+                ? await client.query("SELECT value FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND kind=$4 ORDER BY id", [installationId, scope.tenantId, scope.appId, kind])
+                : await client.query("SELECT value FROM bp_auth_records WHERE installation=$1 AND kind=$2 ORDER BY tenant,app,id", [installationId, kind]);
+            return r.rows.map(row => row.value);
+        },
+        page: async (kind, scope, options = {}) => {
+            const comparison = options.descending ? "<" : ">";
+            const order = options.descending ? "DESC" : "ASC";
+            const result = await client.query(`SELECT value FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND kind=$4 AND ($5::text IS NULL OR id ${comparison} $5) ORDER BY id ${order} LIMIT $6`, [installationId, scope.tenantId, scope.appId, kind, options.after || null, Math.max(1, Math.min(501, options.limit ?? 100))]);
+            return result.rows.map(row => row.value);
+        },
+        dueMail: async (now, limit) => {
+            const result = await client.query("SELECT value FROM bp_auth_records WHERE installation=$1 AND kind='mail' AND value->>'state' IN ('pending','sending') AND (value->>'nextAttempt')::bigint <= $2 ORDER BY (value->>'nextAttempt')::bigint,id LIMIT $3", [installationId, now, Math.max(1, Math.min(100, limit))]);
+            return result.rows.map(row => row.value);
+        },
+        put: async (kind, scope, value) => {
+            await client.query("INSERT INTO bp_auth_records(installation,tenant,app,kind,id,value) VALUES($1,$2,$3,$4,$5,$6) ON CONFLICT(installation,tenant,app,kind,id) DO UPDATE SET value=EXCLUDED.value", [installationId, scope.tenantId, scope.appId, kind, value.id, value]);
+        },
+        remove: async (kind, id, scope) => { await client.query("DELETE FROM bp_auth_records WHERE installation=$1 AND tenant=$2 AND app=$3 AND kind=$4 AND id=$5", [installationId, scope.tenantId, scope.appId, kind, id]); }
+    };
+}
+export class PostgresAuthStorage {
+    installationId;
+    mode = "advanced";
+    pool;
+    constructor(connectionString, installationId) {
+        this.installationId = installationId;
+        if (!connectionString)
+            throw new Error("Advanced auth requires PostgreSQL");
+        this.pool = new Pool({ connectionString, max: 10, connectionTimeoutMillis: 10000, idleTimeoutMillis: 30000 });
+    }
+    async initialize() {
+        const client = await this.pool.connect();
+        try {
+            await client.query("BEGIN");
+            await client.query("SELECT pg_advisory_xact_lock(hashtextextended('betterportal-auth-schema',0))");
+            await client.query(`CREATE TABLE IF NOT EXISTS bp_auth_records (
+        installation text NOT NULL, tenant text NOT NULL, app text NOT NULL, kind text NOT NULL, id text NOT NULL,
+        value jsonb NOT NULL CHECK(jsonb_typeof(value)='object' AND value->>'id'=id),
+        PRIMARY KEY(installation,tenant,app,kind,id))`);
+            await client.query("CREATE INDEX IF NOT EXISTS bp_auth_record_kind ON bp_auth_records(installation,kind,tenant,app)");
+            await client.query("CREATE INDEX IF NOT EXISTS bp_auth_mail_due ON bp_auth_records(installation,((value->>'nextAttempt')::bigint),id) WHERE kind='mail' AND value->>'state' IN ('pending','sending')");
+            await client.query("CREATE INDEX IF NOT EXISTS bp_auth_session_expiry ON bp_auth_records(installation,tenant,app,((value->>'expiresAt')::bigint)) WHERE kind='session'");
+            await client.query("CREATE INDEX IF NOT EXISTS bp_auth_session_revoked ON bp_auth_records(installation,tenant,app,id) WHERE kind='session' AND value->>'revoked'='true'");
+            await client.query("CREATE INDEX IF NOT EXISTS bp_auth_session_user ON bp_auth_records(installation,tenant,app,(value->>'userId'),id) WHERE kind='session' AND value->>'revoked'='false'");
+            await client.query("CREATE INDEX IF NOT EXISTS bp_auth_mail_failed ON bp_auth_records(installation,tenant,app,id) WHERE kind='mail' AND value->>'state'='failed'");
+            await client.query("COMMIT");
+        }
+        catch (error) {
+            await client.query("ROLLBACK");
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async transaction(scope, work) {
+        const client = await this.pool.connect();
+        try {
+            await client.query("BEGIN");
+            // Tenant serialization also fences first-user isolation decisions against app creation.
+            await client.query("SELECT pg_advisory_xact_lock(hashtextextended($1,0))", [JSON.stringify([this.installationId, scope.tenantId])]);
+            const result = await work(pgTransaction(client, this.installationId));
+            await client.query("COMMIT");
+            return result;
+        }
+        catch (error) {
+            await client.query("ROLLBACK");
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async close() { await this.pool.end(); }
+}
+/** Import only known legacy fields. Unknown schema versions never trigger a destructive fallback. */
+export function importLegacy(raw, appIds) {
+    const file = raw;
+    if (file.version === 2)
+        return validateRecords(raw);
+    if (file.version !== 1 || !Array.isArray(file.users))
+        throw new Error("Unsupported legacy auth store");
+    const records = [];
+    const tenants = new Set();
+    const identifiers = new Map();
+    // Legacy usernames were case-sensitive, and email addresses were not unique.
+    // Collect ownership before emitting records so a collision never chooses a winner.
+    for (const user of file.users) {
+        if (typeof user.id !== "string" || typeof user.tenantId !== "string" || typeof user.username !== "string" || typeof user.passwordHash !== "string")
+            throw new Error("Malformed legacy user");
+        const scope = { tenantId: user.tenantId, appId: "" };
+        for (const id of new Set([user.username.trim().toLowerCase(), ...(typeof user.email === "string" && user.email ? [user.email.trim().toLowerCase()] : [])])) {
+            const indexKey = key("identifier", id, scope);
+            const entry = identifiers.get(indexKey) ?? { scope, id, users: new Set() };
+            entry.users.add(user.id);
+            identifiers.set(indexKey, entry);
+        }
+    }
+    for (const user of file.users) {
+        if (typeof user.id !== "string" || typeof user.tenantId !== "string" || typeof user.username !== "string" || typeof user.passwordHash !== "string")
+            throw new Error("Malformed legacy user");
+        tenants.add(user.tenantId);
+        const scope = { tenantId: user.tenantId, appId: "" };
+        const email = typeof user.email === "string" ? user.email.trim().toLowerCase() : "";
+        const ambiguousEmail = !!email && identifiers.get(key("identifier", email, scope)).users.size > 1;
+        // Preserve existing password access without treating a stored email as verified ownership.
+        const value = { ...user, id: user.id, appId: "", legacyUsernameLogin: true, bootstrapAdmin: Object.values(user.appRoles ?? {}).some(roles => roles.includes("*")), emailVerified: false, refreshVersion: Number(user.refreshVersion ?? 0) + 1 };
+        if (ambiguousEmail) {
+            value.legacyEmail = user.email;
+            delete value.email;
+        }
+        else if (email)
+            value.email = email;
+        records.push({ kind: "user", scope, value });
+        if (identifiers.get(key("identifier", user.username.trim().toLowerCase(), scope)).users.size > 1) {
+            records.push({ kind: "legacy-username", scope, value: { id: user.username, userId: user.id } });
+        }
+        const roles = user.appRoles ?? {};
+        for (const appId of new Set([...(appIds[user.tenantId] ?? []), ...Object.keys(roles)])) {
+            records.push({ kind: "roles", scope: { tenantId: user.tenantId, appId }, value: { id: user.id, roles: roles[appId] ?? [], initialized: true } });
+        }
+    }
+    for (const entry of identifiers.values())
+        records.push({ kind: "identifier", scope: entry.scope, value: entry.users.size === 1
+                ? { id: entry.id, userId: [...entry.users][0] }
+                : { id: entry.id, ambiguous: true } });
+    for (const tenantId of tenants)
+        records.push({ kind: "tenant", scope: { tenantId, appId: "" }, value: { id: tenantId, isolation: "tenant", lockedAt: Date.now(), bootstrapComplete: true } });
+    for (const [id, expiresAt] of Object.entries(file.revokedRefreshTokens ?? {}))
+        records.push({ kind: "legacy-revocation", scope: { tenantId: "", appId: "" }, value: { id, expiresAt } });
+    return validateRecords({ version: 2, records });
+}
+export async function openAuthStorage(options) {
+    const path = resolve(options.path);
+    if (options.mode === "simple") {
+        if (existsSync(`${path}.mode.json`))
+            throw new Error("Advanced-to-Simple downgrade is unsupported");
+        if (existsSync(path)) {
+            const raw = JSON.parse(readFileSync(path, "utf8"));
+            if (raw.version === 1) {
+                const release = lockFile(path);
+                try {
+                    const current = JSON.parse(readFileSync(path, "utf8"));
+                    const imported = importLegacy(current, options.appIds);
+                    if (new Set(imported.records.filter(r => r.kind === "tenant").map(r => r.scope.tenantId)).size > 1)
+                        throw new Error("Legacy store contains multiple tenants; select Advanced mode");
+                    if (!existsSync(`${path}.v1.backup`))
+                        atomicWrite(`${path}.v1.backup`, current);
+                    atomicWrite(path, imported);
+                }
+                finally {
+                    release();
+                }
+            }
+        }
+        return new JsonAuthStorage(path);
+    }
+    const storage = new PostgresAuthStorage(options.connectionString ?? "", options.installationId);
+    const markerPath = `${path}.mode.json`;
+    if (existsSync(markerPath)) {
+        const marker = JSON.parse(readFileSync(markerPath, "utf8"));
+        if (marker.installationId !== options.installationId)
+            throw new Error("Auth installation identity mismatch");
+    }
+    atomicWrite(markerPath, { mode: "advanced", installationId: options.installationId, state: "migrating" });
+    try {
+        await storage.initialize();
+        const release = existsSync(path) ? lockFile(path) : () => undefined;
+        try {
+            const source = existsSync(path) ? readFileSync(path, "utf8") : undefined;
+            const checksum = source ? createHash("sha256").update(source).digest("hex") : "empty";
+            const scope = { tenantId: "", appId: "" };
+            await storage.transaction(scope, async (tx) => {
+                const ledger = await tx.get("migration", "simple", scope);
+                if (ledger) {
+                    if (source && ledger.checksum !== checksum)
+                        throw new Error("Leftover Simple store differs from the committed import");
+                    return;
+                }
+                if ((await tx.list("user")).length)
+                    throw new Error("Advanced store contains users without a matching migration ledger");
+                if (source) {
+                    const imported = importLegacy(JSON.parse(source), options.appIds);
+                    if (!existsSync(`${path}.advanced.backup`))
+                        atomicWrite(`${path}.advanced.backup`, JSON.parse(source));
+                    for (const row of imported.records) {
+                        if (row.kind === "session")
+                            row.value.revoked = true;
+                        await tx.put(row.kind, row.scope, row.value);
+                    }
+                    for (const row of imported.records)
+                        if (!isDeepStrictEqual(await tx.get(row.kind, row.value.id, row.scope), row.value))
+                            throw new Error("Auth migration record verification failed");
+                    if ((await tx.list("user")).length !== imported.records.filter(row => row.kind === "user").length)
+                        throw new Error("Auth migration verification failed");
+                }
+                await tx.put("migration", scope, { id: "simple", checksum, completedAt: Date.now(), schemaVersion: 1 });
+            });
+            atomicWrite(markerPath, { mode: "advanced", installationId: options.installationId, state: "complete" });
+            if (source)
+                unlinkSync(path);
+        }
+        finally {
+            release();
+        }
+        return storage;
+    }
+    catch (error) {
+        await storage.close();
+        throw error;
+    }
+}
+//# sourceMappingURL=storage.js.map

package/lib/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACrI,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAmB,MAAM,IAAI,CAAC;AAuB3C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAChH,MAAM,SAAS,GAAG,CAAC,CAAQ,EAAE,CAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC;AAE3F,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAa;IACrD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAC3C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC1F,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;AACrD,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAgB,CAAC;IAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAC3F,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACrI,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CAAC,IAAY;IAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC;IAC5B,MAAM,YAAY,GAAG,CAAC,GAAW,EAAsB,EAAE;QACvD,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5H,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC7E,CAAC,CAAC;IACF,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAClB,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,QAAQ,GAAG,GAAG,IAAI,UAAU,CAAC;QACnC,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QACrD,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,6DAA6D,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,CAAC;YACL,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;oBACjF,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,OAAO,OAAO,EAAE,CAAC;wBAAC,IAAI,GAAI,OAAiC,CAAC,IAAI,KAAK,OAAO,CAAC;oBAAC,CAAC;oBACpH,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvC,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;wBAAE,IAAI,GAAG,IAAI,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,wFAAwF,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACxL,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,EAAE,CAAC,CAAC,uDAAuD;QAClE,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,EAAE,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,OAAO,eAAe;IAQL;IAPZ,IAAI,GAAG,QAAiB,CAAC;IAC1B,IAAI,CAAW;IACf,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,CAAa;IAC7B,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAG,KAAK,CAAC;IAExB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QAC/B,MAAM,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;QACnC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACrH,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC9K,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IAClD,CAAC;IAED,WAAW,CAAI,MAAa,EAAE,IAAyC;QACrE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACpC,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,MAAM,YAAY,GAAG,CAAwB,IAAY,EAAE,KAAY,EAAE,SAA0C,EAAE,UAAuB,EAAE,EAAO,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO;iBAClL,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC;iBAClH,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;iBACvG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;gBACxB,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;oBAC1K,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBAAC,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC;wBAAC,KAAK,GAAG,IAAI,CAAC;oBAAC,CAAC;gBAC3F,CAAC;gBACD,cAAc,EAAE,KAAK,EAAyB,KAAY,EAAE,MAAc,EAAE,GAAW,EAAE,OAAqB,EAAE,EAAE,CAAC,YAAY,CAAI,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,OAAO,CAAC;gBAC3P,UAAU,EAAE,KAAK,EAAyB,KAAY,EAAE,OAAqB,EAAE,EAAE,CAAC,YAAY,CAAI,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,OAAO,CAAC;gBAC5J,GAAG,EAAE,KAAK,EAAyB,IAAY,EAAE,EAAU,EAAE,KAAY,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,KAAsB,CAAC;gBACjN,IAAI,EAAE,KAAK,EAAyB,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC,CAAC;gBACzM,OAAO,EAAE,KAAK,EAAyB,GAAW,EAAE,KAAa,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC;qBACvO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC,CAAC;gBAC5L,IAAI,EAAE,KAAK,EAAyB,IAAY,EAAE,KAAY,EAAE,OAAqB,EAAE,EAAE,CAAC,YAAY,CAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC3I,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBAChC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;oBAChH,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;oBACpD,IAAI,CAAC,GAAG,CAAC;wBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;wBAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;oBAChE,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;aACnK,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAAC,CAAC;YAChE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC;CACjI;AAED,SAAS,aAAa,CAAC,MAAkB,EAAE,cAAsB;IAC/D,MAAM,YAAY,GAAG,KAAK,EAAyB,KAAY,EAAE,SAAiB,EAAE,UAAqB,EAAE,UAAuB,EAAE,EAAgB,EAAE;QACpJ,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACrG,MAAM,MAAM,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,wFAAwF,SAAS,UAAU,MAAM,wBAAwB,UAAU,KAAK,MAAM,iBAAiB,KAAK,WAAW,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1P,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,OAAO;QACL,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClC,MAAM,MAAM,CAAC,KAAK,CAAC,uIAAuI,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAChN,MAAM,MAAM,CAAC,KAAK,CAAC,4HAA4H,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAClM,CAAC;QACD,cAAc,EAAE,CAAwB,KAAY,EAAE,MAAc,EAAE,GAAW,EAAE,OAAqB,EAAE,EAAE,CAAC,YAAY,CAAI,KAAK,EAAE,6GAA6G,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC;QAC1Q,UAAU,EAAE,CAAwB,KAAY,EAAE,OAAqB,EAAE,EAAE,CAAC,YAAY,CAAI,KAAK,EAAE,0CAA0C,EAAE,EAAE,EAAE,OAAO,CAAC;QAC3J,GAAG,EAAE,KAAK,EAAyB,IAAY,EAAE,EAAU,EAAE,KAAY,EAAE,EAAE;YAC3E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,wGAAwG,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAChM,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAsB,CAAC;QAC3C,CAAC;QACD,IAAI,EAAE,KAAK,EAAyB,IAAY,EAAE,KAAa,EAAE,EAAE;YACjE,MAAM,CAAC,GAAG,KAAK;gBACb,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,0GAA0G,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACrL,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,4FAA4F,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;YAC7I,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,EAAE,KAAK,EAAyB,IAAY,EAAE,KAAY,EAAE,UAAuB,EAAE,EAAE,EAAE;YAC3F,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACrG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,4HAA4H,UAAU,oBAAoB,KAAK,WAAW,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5U,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,KAAK,EAAyB,GAAW,EAAE,KAAa,EAAE,EAAE;YACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,qNAAqN,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACnT,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAU,CAAC,CAAC;QAChD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,MAAM,CAAC,KAAK,CAAC,8KAA8K,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3Q,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kGAAkG,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACxN,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAmB;IAGiB;IAFtC,IAAI,GAAG,UAAmB,CAAC;IACnB,IAAI,CAAO;IAC5B,YAAY,gBAAwB,EAAW,cAAsB;QAAtB,mBAAc,GAAd,cAAc,CAAQ;QACnE,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;YACnG,MAAM,MAAM,CAAC,KAAK,CAAC;;;sDAG6B,CAAC,CAAC;YAClD,MAAM,MAAM,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;YACtH,MAAM,MAAM,CAAC,KAAK,CAAC,kLAAkL,CAAC,CAAC;YACvM,MAAM,MAAM,CAAC,KAAK,CAAC,oJAAoJ,CAAC,CAAC;YACzK,MAAM,MAAM,CAAC,KAAK,CAAC,qJAAqJ,CAAC,CAAC;YAC1K,MAAM,MAAM,CAAC,KAAK,CAAC,sKAAsK,CAAC,CAAC;YAC3L,MAAM,MAAM,CAAC,KAAK,CAAC,8IAA8I,CAAC,CAAC;YACnK,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAChG,CAAC;IACD,KAAK,CAAC,WAAW,CAAI,KAAY,EAAE,IAAyC;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,wFAAwF;YACxF,MAAM,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACpI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtE,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAChG,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CACxD;AAED,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,MAAgC;IACzE,MAAM,IAAI,GAAG,GAAiH,CAAC;IAC/H,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvG,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4D,CAAC;IACxF,6EAA6E;IAC7E,mFAAmF;IACnF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7L,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACrD,KAAK,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3J,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;YACnF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7L,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACnG,2FAA2F;QAC3F,MAAM,KAAK,GAAgB,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAoC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACzR,IAAI,cAAc,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;YAAC,OAAO,KAAK,CAAC,KAAK,CAAC;QAAC,CAAC;aACtE,IAAI,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAClG,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAoC,IAAI,EAAE,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;gBAC5H,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC/C,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9L,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACzL,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA2I;IAC/K,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,GAAG,IAAI,YAAY,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACpG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACvD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBACpL,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,YAAY,CAAC;wBAAE,WAAW,CAAC,GAAG,IAAI,YAAY,EAAE,OAAO,CAAC,CAAC;oBAChF,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9B,CAAC;wBAAS,CAAC;oBAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAChG,MAAM,UAAU,GAAG,GAAG,IAAI,YAAY,CAAC;IACvC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC/G,CAAC;IACD,WAAW,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACtF,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC1C,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAC,EAAE,EAAC,EAAE;gBAC1C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC1D,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;oBACvH,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBACzH,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,kBAAkB,CAAC;wBAAE,WAAW,CAAC,GAAG,IAAI,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;oBACvG,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACnC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;4BAAE,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;wBACrD,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC/C,CAAC;oBACD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO;wBAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;oBACrL,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAC3J,CAAC;gBACD,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1G,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACzG,IAAI,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACzD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@betterportal/auth-default",
-  "version": "10.6.20",
+  "version": "10.6.22",
   "description": "BetterPortal v10 default auth service for Node.js",
   "main": "lib/index.js",
   "types": "src/index.ts",
@@ -30,17 +30,24 @@
   "type": "module",
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",
-    "@types/node": "^26.4.0",
+    "@types/node": "^26.5.1",
+    "@types/pg": "^8.23.1",
     "tsx": "^4.23.12",
     "typescript": "^6.0.3"
   },
   "dependencies": {
-    "@betterportal/framework": "10.6.20",
-    "@betterportal/plugin-bsb": "10.6.20",
-    "@bsb/base": "^9.7.0",
-    "anyvali": "^1.1.5",
+    "@betterportal/framework": "10.6.22",
+    "@betterportal/plugin-bsb": "10.6.22",
+    "@bsb/base": "^9.7.3",
+    "@simplewebauthn/browser": "^14.0.0",
+    "@simplewebauthn/server": "^14.0.1",
+    "anyvali": "^1.1.6",
+    "argon2": "^0.45.1",
     "bcrypt": "^6.0.0",
-    "jsx-htmx": "4.0.0"
+    "jsx-htmx": "4.0.100",
+    "openid-client": "^6.8.8",
+    "otplib": "^13.5.0",
+    "pg": "^8.23.0"
   },
   "files": [
     "lib/**/*",