@bitblit/ratchet-warden-server 4.0.419-alpha → 4.0.421-alpha

package/lib/server/provider/warden-twilio-verify-single-use-code-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-twilio-verify-single-use-code-provider.js","sourceRoot":"","sources":["../../../src/server/provider/warden-twilio-verify-single-use-code-provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iEAAiE,CAAC;AAGpG,MAAM,OAAO,uCAAuC;IAG9B;IAFZ,yBAAyB,CAAsB;IAEvD,YAAoB,WAAoE;QAApE,gBAAW,GAAX,WAAW,CAAyD;IAAG,CAAC;IAEpF,KAAK,CAAC,mBAAmB;QAC/B,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAmD,MAAM,IAAI,CAAC,WAAW,CAAC;YACpF,IAAI,CAAC,yBAAyB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,IAAI,CAAC,yBAAyB,CAAC;IACxC,CAAC;IAEM,kBAAkB,CAAC,IAAuB;QAC/C,OAAO,IAAI,KAAK,iBAAiB,CAAC,sBAAsB,CAAC;IAC3D,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAAC,OAAsB,EAAE,uBAA+B;QAEvF,MAAM,OAAO,GAAwB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtE,MAAM,IAAI,GAAQ,MAAM,OAAO,CAAC,sCAAsC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IACM,KAAK,CAAC,SAAS,CAAC,YAAoB,EAAE,IAAY;QACvD,MAAM,OAAO,GAAwB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtE,MAAM,IAAI,GAAY,MAAM,OAAO,CAAC,6CAA6C,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/lib/server/provider/warden-user-decoration-provider.d.ts

@@ -0,0 +1,5 @@
+import { WardenEntry } from '@bitblit/ratchet-warden-common/common/model/warden-entry';
+import { WardenUserDecoration } from '@bitblit/ratchet-warden-common/common/model/warden-user-decoration';
+export interface WardenUserDecorationProvider<T> {
+    fetchDecoration(wardenUser: WardenEntry): Promise<WardenUserDecoration<T>>;
+}

package/lib/server/provider/warden-user-decoration-provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=warden-user-decoration-provider.js.map

package/lib/server/provider/warden-user-decoration-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-user-decoration-provider.js","sourceRoot":"","sources":["../../../src/server/provider/warden-user-decoration-provider.ts"],"names":[],"mappings":""}

package/lib/server/warden-service-options.d.ts

@@ -0,0 +1,16 @@
+import { WardenStorageProvider } from './provider/warden-storage-provider.js';
+import { JwtRatchetLike } from '@bitblit/ratchet-common/jwt/jwt-ratchet-like';
+import { WardenUserDecorationProvider } from './provider/warden-user-decoration-provider.js';
+import { WardenEventProcessingProvider } from './provider/warden-event-processing-provider.js';
+import { WardenSingleUseCodeProvider } from './provider/warden-single-use-code-provider.js';
+import { WardenSendMagicLinkCommandValidator } from './provider/warden-send-magic-link-command-validator.js';
+export interface WardenServiceOptions {
+    relyingPartyName: string;
+    allowedOrigins: string[];
+    singleUseCodeProviders: WardenSingleUseCodeProvider[];
+    storageProvider: WardenStorageProvider;
+    jwtRatchet: JwtRatchetLike;
+    userDecorationProvider?: WardenUserDecorationProvider<any>;
+    eventProcessor?: WardenEventProcessingProvider;
+    sendMagicLinkCommandValidator?: WardenSendMagicLinkCommandValidator;
+}

package/lib/server/warden-service-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=warden-service-options.js.map

package/lib/server/warden-service-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-service-options.js","sourceRoot":"","sources":["../../src/server/warden-service-options.ts"],"names":[],"mappings":""}

package/lib/server/warden-service.d.ts

@@ -0,0 +1,35 @@
+import { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/types';
+import { WardenServiceOptions } from './warden-service-options.js';
+import { WardenContact } from '@bitblit/ratchet-warden-common/common/model/warden-contact';
+import { WardenCustomTemplateDescriptor } from '@bitblit/ratchet-warden-common/common/command/warden-custom-template-descriptor';
+import { WardenEntry } from '@bitblit/ratchet-warden-common/common/model/warden-entry';
+import { WardenLoginRequest } from '@bitblit/ratchet-warden-common/common/model/warden-login-request';
+import { WardenCommand } from '@bitblit/ratchet-warden-common/common/command/warden-command';
+import { WardenCommandResponse } from '@bitblit/ratchet-warden-common/common/command/warden-command-response';
+import { WardenStoreRegistrationResponse } from '@bitblit/ratchet-warden-common/common/model/warden-store-registration-response';
+import { WardenSingleUseCodeProvider } from './provider/warden-single-use-code-provider.js';
+export declare class WardenService {
+    private inOptions;
+    private opts;
+    constructor(inOptions: WardenServiceOptions);
+    get options(): WardenServiceOptions;
+    findEntryByContact(contact: WardenContact): Promise<WardenEntry>;
+    findEntryById(userId: string): Promise<WardenEntry>;
+    processCommandStringToString(cmdString: string, origin: string, loggedInUserId: string): Promise<string>;
+    processCommandToResponse(cmd: WardenCommand, origin: string, loggedInUserId: string): Promise<WardenCommandResponse>;
+    urlIsOnAllowedOrigin(url: string): boolean;
+    singleUseCodeProvider(contact: WardenContact, requireMagicLinkSupport: boolean, returnNullIfNoProviders?: boolean): WardenSingleUseCodeProvider;
+    sendMagicLink(contact: WardenContact, overrideDestinationContact: WardenContact, relyingPartyName: string, landingUrl: string, metaIn?: Record<string, string>, ttlSeconds?: number, customTemplate?: WardenCustomTemplateDescriptor): Promise<boolean>;
+    createAccount(contact: WardenContact, sendCode?: boolean, label?: string, tags?: string[]): Promise<string>;
+    addContactMethodToUser(userId: string, contact: WardenContact): Promise<boolean>;
+    removeContactMethodFromUser(userId: string, contact: WardenContact): Promise<WardenEntry>;
+    generateWebAuthnRegistrationChallengeForLoggedInUser(userId: string, origin: string): Promise<PublicKeyCredentialCreationOptionsJSON>;
+    storeAuthnRegistration(userId: string, origin: string, applicationName: string, deviceLabel: string, data: RegistrationResponseJSON): Promise<WardenStoreRegistrationResponse>;
+    generateWebAuthnAuthenticationChallengeForUserId(userId: string, origin: string): Promise<PublicKeyCredentialRequestOptionsJSON>;
+    generateWebAuthnAuthenticationChallenge(user: WardenEntry, origin: string): Promise<PublicKeyCredentialRequestOptionsJSON>;
+    sendExpiringValidationToken(request: WardenContact): Promise<boolean>;
+    processLogin(request: WardenLoginRequest, origin: string): Promise<boolean>;
+    loginWithWebAuthnRequest(user: WardenEntry, origin: string, data: AuthenticationResponseJSON): Promise<boolean>;
+    removeSingleWebAuthnRegistration(userId: string, key: string): Promise<WardenEntry>;
+    removeUser(userId: string): Promise<boolean>;
+}

package/lib/server/warden-service.js

@@ -0,0 +1,518 @@
+import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse, } from '@simplewebauthn/server';
+import { WardenUtils } from '@bitblit/ratchet-warden-common/common/util/warden-utils';
+import { WardenStoreRegistrationResponseType } from '@bitblit/ratchet-warden-common/common/model/warden-store-registration-response-type';
+import { RequireRatchet } from '@bitblit/ratchet-common/lang/require-ratchet';
+import { Logger } from '@bitblit/ratchet-common/logger/logger';
+import { ErrorRatchet } from '@bitblit/ratchet-common/lang/error-ratchet';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { Base64Ratchet } from '@bitblit/ratchet-common/lang/base64-ratchet';
+import { WardenDefaultUserDecorationProvider } from './provider/warden-default-user-decoration-provider.js';
+import { WardenNoOpEventProcessingProvider } from './provider/warden-no-op-event-processing-provider.js';
+import { WardenDefaultSendMagicLinkCommandValidator } from './provider/warden-default-send-magic-link-command-validator.js';
+export class WardenService {
+    inOptions;
+    opts;
+    constructor(inOptions) {
+        this.inOptions = inOptions;
+        RequireRatchet.notNullOrUndefined(inOptions, 'options');
+        RequireRatchet.notNullOrUndefined(inOptions.relyingPartyName, 'options.relyingPartyName');
+        RequireRatchet.notNullUndefinedOrEmptyArray(inOptions.allowedOrigins, 'options.allowedOrigins');
+        RequireRatchet.notNullOrUndefined(inOptions.storageProvider, 'options.storageProvider');
+        RequireRatchet.notNullOrUndefined(inOptions.jwtRatchet, 'options.jwtRatchet');
+        RequireRatchet.notNullUndefinedOrEmptyArray(inOptions.singleUseCodeProviders, 'options.singleUseCodeProviders');
+        this.opts = Object.assign({
+            userTokenDataProvider: new WardenDefaultUserDecorationProvider(),
+            eventProcessor: new WardenNoOpEventProcessingProvider(),
+            sendMagicLinkCommandValidator: new WardenDefaultSendMagicLinkCommandValidator(),
+        }, inOptions);
+    }
+    get options() {
+        return Object.assign({}, this.opts);
+    }
+    findEntryByContact(contact) {
+        return this.opts.storageProvider.findEntryByContact(contact);
+    }
+    findEntryById(userId) {
+        return this.opts.storageProvider.findEntryById(userId);
+    }
+    async processCommandStringToString(cmdString, origin, loggedInUserId) {
+        let rval = null;
+        try {
+            const cmd = JSON.parse(cmdString);
+            const resp = await this.processCommandToResponse(cmd, origin, loggedInUserId);
+            if (resp === null) {
+                Logger.warn('Response was null for %s %s %s', cmdString, origin, loggedInUserId);
+            }
+            else {
+                rval = JSON.stringify(resp);
+            }
+        }
+        catch (err) {
+            const errString = ErrorRatchet.safeStringifyErr(err);
+            Logger.error('Failed %s : %j', errString, cmdString, err);
+            rval = JSON.stringify({ error: errString });
+        }
+        return rval;
+    }
+    async processCommandToResponse(cmd, origin, loggedInUserId) {
+        let rval = null;
+        if (cmd) {
+            Logger.info('Processing command : UserID: %s  Origin: %s Command: %j', loggedInUserId, origin, cmd);
+            if (cmd.sendExpiringValidationToken) {
+                rval = { sendExpiringValidationToken: await this.sendExpiringValidationToken(cmd.sendExpiringValidationToken) };
+            }
+            else if (cmd.generateWebAuthnAuthenticationChallengeForUserId) {
+                const tmp = await this.generateWebAuthnAuthenticationChallengeForUserId(cmd.generateWebAuthnAuthenticationChallengeForUserId, origin);
+                rval = { generateWebAuthnAuthenticationChallengeForUserId: { dataAsJson: JSON.stringify(tmp) } };
+            }
+            else if (cmd.createAccount) {
+                rval = {
+                    createAccount: await this.createAccount(cmd.createAccount.contact, cmd.createAccount.sendCode, cmd.createAccount.label, cmd.createAccount.tags),
+                };
+            }
+            else if (cmd.sendMagicLink) {
+                if (cmd?.sendMagicLink?.contactLookup && cmd?.sendMagicLink?.contact) {
+                    throw ErrorRatchet.fErr('You may not specify both contact and contactLookup');
+                }
+                if (!cmd?.sendMagicLink?.contactLookup && !cmd?.sendMagicLink?.contact) {
+                    throw ErrorRatchet.fErr('You must not specify either contact and contactLookup');
+                }
+                if (cmd.sendMagicLink.contactLookup) {
+                    const entry = await this.findEntryById(cmd.sendMagicLink.contactLookup.userId);
+                    if (entry) {
+                        if (cmd.sendMagicLink.contactLookup.contactType) {
+                            cmd.sendMagicLink.contact = (entry.contactMethods || []).find((cm) => cm.type === cmd.sendMagicLink.contactLookup.contactType);
+                        }
+                        else {
+                            cmd.sendMagicLink.contact = (entry.contactMethods || []).length > 0 ? entry.contactMethods[0] : null;
+                        }
+                    }
+                    cmd.sendMagicLink.contactLookup = null;
+                }
+                if (!cmd.sendMagicLink.contact) {
+                    throw ErrorRatchet.fErr('Could not find contract entry either directly or by lookup');
+                }
+                const loggedInUser = StringRatchet.trimToNull(loggedInUserId)
+                    ? await this.opts.storageProvider.findEntryById(loggedInUserId)
+                    : null;
+                await this.opts.sendMagicLinkCommandValidator.allowMagicLinkCommand(cmd.sendMagicLink, origin, loggedInUser);
+                const ttlSeconds = cmd?.sendMagicLink?.ttlSeconds || 300;
+                rval = {
+                    sendMagicLink: await this.sendMagicLink(cmd.sendMagicLink.contact, cmd.sendMagicLink.overrideDestinationContact, this.opts.relyingPartyName, cmd.sendMagicLink.landingUrl, cmd.sendMagicLink.meta, ttlSeconds, cmd.sendMagicLink.customTemplate),
+                };
+            }
+            else if (cmd.generateWebAuthnRegistrationChallengeForLoggedInUser) {
+                if (!StringRatchet.trimToNull(loggedInUserId)) {
+                    ErrorRatchet.throwFormattedErr('This requires a logged in user');
+                }
+                const tmp = await this.generateWebAuthnRegistrationChallengeForLoggedInUser(loggedInUserId, origin);
+                rval = { generateWebAuthnRegistrationChallengeForLoggedInUser: { dataAsJson: JSON.stringify(tmp) } };
+            }
+            else if (cmd.addContactToLoggedInUser) {
+                if (!WardenUtils.validContact(cmd.addContactToLoggedInUser)) {
+                    ErrorRatchet.throwFormattedErr('Cannot add, invalid contact %j', cmd.addContactToLoggedInUser);
+                }
+                else {
+                    const out = await this.addContactMethodToUser(loggedInUserId, cmd.addContactToLoggedInUser);
+                    rval = { addContactToLoggedInUser: out };
+                }
+            }
+            else if (cmd.addWebAuthnRegistrationToLoggedInUser) {
+                if (!StringRatchet.trimToNull(loggedInUserId)) {
+                    ErrorRatchet.throwFormattedErr('This requires a logged in user');
+                }
+                const data = JSON.parse(cmd.addWebAuthnRegistrationToLoggedInUser.webAuthn.dataAsJson);
+                const out = await this.storeAuthnRegistration(loggedInUserId, origin, cmd.addWebAuthnRegistrationToLoggedInUser.applicationName, cmd.addWebAuthnRegistrationToLoggedInUser.deviceLabel, data);
+                if (out.updatedEntry) {
+                    rval = { addWebAuthnRegistrationToLoggedInUser: WardenUtils.stripWardenEntryToSummary(out.updatedEntry) };
+                }
+                else if (out.error) {
+                    rval = { error: out.error };
+                }
+                else {
+                    rval = { error: 'Cannot happen - neither user nor error set' };
+                }
+            }
+            else if (cmd.removeWebAuthnRegistration) {
+                const modified = await this.removeSingleWebAuthnRegistration(cmd.removeWebAuthnRegistration.userId, cmd.removeWebAuthnRegistration.credentialId);
+                rval = {
+                    removeWebAuthnRegistration: WardenUtils.stripWardenEntryToSummary(modified),
+                };
+            }
+            else if (cmd.removeWebAuthnRegistrationFromLoggedInUser) {
+                const modified = await this.removeSingleWebAuthnRegistration(loggedInUserId, cmd.removeWebAuthnRegistrationFromLoggedInUser);
+                rval = {
+                    removeWebAuthnRegistrationFromLoggedInUser: WardenUtils.stripWardenEntryToSummary(modified),
+                };
+            }
+            else if (cmd.removeContactFromLoggedInUser) {
+                const output = await this.removeContactMethodFromUser(loggedInUserId, cmd.removeContactFromLoggedInUser);
+                rval = {
+                    removeContactFromLoggedInUser: WardenUtils.stripWardenEntryToSummary(output),
+                };
+            }
+            else if (cmd.performLogin) {
+                const loginData = cmd.performLogin;
+                const loginOk = await this.processLogin(loginData, origin);
+                Logger.info('Performing login - login auth check was : %s', loginOk);
+                if (loginOk) {
+                    const user = StringRatchet.trimToNull(loginData.userId)
+                        ? await this.opts.storageProvider.findEntryById(loginData.userId)
+                        : await this.opts.storageProvider.findEntryByContact(loginData.contact);
+                    const decoration = await this.opts.userDecorationProvider.fetchDecoration(user);
+                    const wardenToken = {
+                        loginData: WardenUtils.stripWardenEntryToSummary(user),
+                        user: decoration.userTokenData,
+                        roles: WardenUtils.teamRolesToRoles(decoration.userTeamRoles),
+                        proxy: null,
+                    };
+                    const jwtToken = await this.opts.jwtRatchet.createTokenString(wardenToken, decoration.userTokenExpirationSeconds);
+                    const output = {
+                        request: loginData,
+                        userId: user.userId,
+                        jwtToken: jwtToken,
+                    };
+                    rval = { performLogin: output };
+                }
+                else {
+                    rval = { error: 'Login failed' };
+                }
+            }
+            else if (cmd.refreshJwtToken) {
+                const parsed = await this.opts.jwtRatchet.decodeToken(cmd.refreshJwtToken, 1);
+                const user = await this.opts.storageProvider.findEntryById(parsed.loginData.userId);
+                const decoration = await this.opts.userDecorationProvider.fetchDecoration(user);
+                const wardenToken = {
+                    loginData: WardenUtils.stripWardenEntryToSummary(user),
+                    user: decoration.userTokenData,
+                    roles: WardenUtils.teamRolesToRoles(decoration.userTeamRoles),
+                    proxy: null,
+                };
+                const newToken = await this.opts.jwtRatchet.createTokenString(wardenToken, decoration.userTokenExpirationSeconds);
+                rval = {
+                    refreshJwtToken: newToken,
+                };
+            }
+        }
+        else {
+            rval = { error: 'No command sent' };
+        }
+        return rval;
+    }
+    urlIsOnAllowedOrigin(url) {
+        let rval = false;
+        if (url) {
+            const u = new URL(url);
+            for (let i = 0; i < this.opts.allowedOrigins.length && !rval; i++) {
+                const test = new URL(this.opts.allowedOrigins[i]);
+                rval = test.origin === u.origin && test.protocol === u.protocol && test.port === u.port;
+            }
+        }
+        return rval;
+    }
+    singleUseCodeProvider(contact, requireMagicLinkSupport, returnNullIfNoProviders) {
+        const rval = this.opts.singleUseCodeProviders.find((s) => s.handlesContactType(contact.type) && (!requireMagicLinkSupport || s.createCodeAndSendMagicLink));
+        if (!rval && !returnNullIfNoProviders) {
+            throw ErrorRatchet.fErr('Cannot find a single use code provider for contact type : %s', contact.type);
+        }
+        return rval;
+    }
+    async sendMagicLink(contact, overrideDestinationContact, relyingPartyName, landingUrl, metaIn, ttlSeconds, customTemplate) {
+        let rval = false;
+        RequireRatchet.notNullOrUndefined(contact, 'contact');
+        RequireRatchet.notNullUndefinedOrOnlyWhitespaceString(landingUrl, 'landingUrl');
+        RequireRatchet.true(this.urlIsOnAllowedOrigin(landingUrl), 'landingUrl is not on an allowed origin for redirect');
+        if (contact?.type && StringRatchet.trimToNull(contact?.value)) {
+            const prov = this.singleUseCodeProvider(contact, true);
+            rval = await prov.createCodeAndSendMagicLink(contact, relyingPartyName, landingUrl, metaIn, ttlSeconds, overrideDestinationContact, customTemplate);
+        }
+        else {
+            ErrorRatchet.throwFormattedErr('Cannot send - invalid contact %j', contact);
+        }
+        return rval;
+    }
+    async createAccount(contact, sendCode, label, tags) {
+        let rval = null;
+        if (WardenUtils.validContact(contact)) {
+            const old = await this.opts.storageProvider.findEntryByContact(contact);
+            if (old) {
+                ErrorRatchet.throwFormattedErr('Cannot create - account already exists for %j', contact);
+            }
+            const guid = StringRatchet.createType4Guid();
+            const now = Date.now();
+            const newUser = {
+                userId: guid,
+                userLabel: label || 'User ' + guid,
+                contactMethods: [contact],
+                tags: tags || [],
+                webAuthnAuthenticators: [],
+                createdEpochMS: now,
+                updatedEpochMS: now,
+            };
+            const next = await this.opts.storageProvider.saveEntry(newUser);
+            rval = next.userId;
+            if (this?.opts?.eventProcessor) {
+                await this.opts.eventProcessor.userCreated(next);
+            }
+            if (sendCode) {
+                Logger.info('New user %j created and send requested - sending', next);
+                await this.sendExpiringValidationToken(contact);
+            }
+        }
+        else {
+            ErrorRatchet.throwFormattedErr('Cannot create - invalid contact (missing or invalid fields)');
+        }
+        return rval;
+    }
+    async addContactMethodToUser(userId, contact) {
+        let rval = false;
+        if (StringRatchet.trimToNull(userId) && WardenUtils.validContact(contact)) {
+            const otherUser = await this.opts.storageProvider.findEntryByContact(contact);
+            if (otherUser && otherUser.userId !== userId) {
+                ErrorRatchet.throwFormattedErr('Cannot add contact to this user, another user already has that contact');
+            }
+            const curUser = await this.opts.storageProvider.findEntryById(userId);
+            if (!curUser) {
+                ErrorRatchet.throwFormattedErr('Cannot add contact to this user, user does not exist');
+            }
+            curUser.contactMethods.push(contact);
+            await this.opts.storageProvider.saveEntry(curUser);
+            rval = true;
+        }
+        else {
+            ErrorRatchet.throwFormattedErr('Cannot add - invalid config : %s %j', userId, contact);
+        }
+        return rval;
+    }
+    async removeContactMethodFromUser(userId, contact) {
+        let rval = null;
+        if (StringRatchet.trimToNull(userId) && WardenUtils.validContact(contact)) {
+            const curUser = await this.opts.storageProvider.findEntryById(userId);
+            if (!curUser) {
+                ErrorRatchet.throwFormattedErr('Cannot remove contact from this user, user does not exist');
+            }
+            curUser.contactMethods = (curUser.contactMethods || []).filter((s) => s.type !== contact.type || s.value !== contact.value);
+            if (curUser.contactMethods.length === 0) {
+                ErrorRatchet.throwFormattedErr('Cannot remove the last contact method from a user');
+            }
+            await this.opts.storageProvider.saveEntry(curUser);
+            rval = await this.opts.storageProvider.findEntryById(userId);
+        }
+        else {
+            ErrorRatchet.throwFormattedErr('Cannot add - invalid config : %s %j', userId, contact);
+        }
+        return rval;
+    }
+    async generateWebAuthnRegistrationChallengeForLoggedInUser(userId, origin) {
+        if (!origin || !this.opts.allowedOrigins.includes(origin)) {
+            throw new Error('Invalid origin : ' + origin);
+        }
+        const asUrl = new URL(origin);
+        const rpID = asUrl.hostname;
+        const entry = await this.opts.storageProvider.findEntryById(userId);
+        if (!entry) {
+            throw ErrorRatchet.fErr('Cannot generateWebAuthnRegistrationChallengeForLoggedInUser - no user %s / %s', userId, origin);
+        }
+        const options = await generateRegistrationOptions({
+            rpName: this.opts.relyingPartyName,
+            rpID: rpID,
+            userID: StringRatchet.stringToUint8Array(entry.userId),
+            userName: entry.userLabel,
+            attestationType: 'none',
+            excludeCredentials: entry.webAuthnAuthenticators.map((authenticator) => ({
+                id: authenticator.credentialPublicKeyBase64,
+                transports: authenticator.transports,
+            })),
+        });
+        await this.opts.storageProvider.updateUserChallenge(entry.userId, rpID, options.challenge);
+        return options;
+    }
+    async storeAuthnRegistration(userId, origin, applicationName, deviceLabel, data) {
+        Logger.info('Store authn data : %j', data);
+        let rval = null;
+        try {
+            if (!origin || !this.opts.allowedOrigins.includes(origin)) {
+                throw new Error('Invalid origin : ' + origin);
+            }
+            const asUrl = new URL(origin);
+            const rpID = asUrl.hostname;
+            const user = await this.opts.storageProvider.findEntryById(userId);
+            if (!user) {
+                throw ErrorRatchet.fErr('Cannot storeAuthnRegistration - no user %s / %s', userId, origin);
+            }
+            const expectedChallenge = await this.opts.storageProvider.fetchCurrentUserChallenge(user.userId, rpID);
+            const vrOpts = {
+                response: data,
+                expectedChallenge: expectedChallenge,
+                expectedOrigin: origin,
+                expectedRPID: rpID,
+            };
+            Logger.info('Calling verifyRegistrationResponse: %j', vrOpts);
+            const verification = await verifyRegistrationResponse(vrOpts);
+            Logger.info('verifyRegistrationResponse Result : %j', verification);
+            rval = {
+                updatedEntry: null,
+                registrationResponseId: data.id,
+                result: verification.verified ? WardenStoreRegistrationResponseType.Verified : WardenStoreRegistrationResponseType.Failed,
+            };
+            if (rval.result === WardenStoreRegistrationResponseType.Verified) {
+                Logger.info('Storing registration');
+                const newAuth = {
+                    origin: origin,
+                    applicationName: applicationName || 'Unknown Application',
+                    deviceLabel: deviceLabel || 'Unknown Device',
+                    counter: verification.registrationInfo.counter,
+                    credentialBackedUp: verification.registrationInfo.credentialBackedUp,
+                    credentialDeviceType: verification.registrationInfo.credentialDeviceType,
+                    credentialIdBase64: verification.registrationInfo.credentialID,
+                    credentialPublicKeyBase64: Base64Ratchet.uint8ArrayToBase64UrlString(verification.registrationInfo.credentialPublicKey),
+                };
+                user.webAuthnAuthenticators = (user.webAuthnAuthenticators || []).filter((wa) => wa.credentialIdBase64 !== newAuth.credentialIdBase64);
+                user.webAuthnAuthenticators.push(newAuth);
+                const storedUser = await this.opts.storageProvider.saveEntry(user);
+                rval.updatedEntry = storedUser;
+                Logger.info('Stored auth : %j', storedUser);
+            }
+        }
+        catch (err) {
+            rval = {
+                registrationResponseId: data.id,
+                result: WardenStoreRegistrationResponseType.Error,
+                error: ErrorRatchet.safeStringifyErr(err),
+            };
+        }
+        return rval;
+    }
+    async generateWebAuthnAuthenticationChallengeForUserId(userId, origin) {
+        const user = await this.opts.storageProvider.findEntryById(userId);
+        const rval = await this.generateWebAuthnAuthenticationChallenge(user, origin);
+        return rval;
+    }
+    async generateWebAuthnAuthenticationChallenge(user, origin) {
+        const userAuthenticators = user.webAuthnAuthenticators;
+        if (!origin || !this.opts.allowedOrigins.includes(origin)) {
+            throw new Error('Invalid origin : ' + origin);
+        }
+        const asUrl = new URL(origin);
+        const rpID = asUrl.hostname;
+        const out = userAuthenticators.map((authenticator) => {
+            const next = {
+                id: authenticator.credentialIdBase64,
+                transports: authenticator.transports,
+            };
+            return next;
+        });
+        const opts = {
+            rpID: rpID,
+            allowCredentials: out,
+            userVerification: 'preferred',
+        };
+        const options = await generateAuthenticationOptions(opts);
+        await this.opts.storageProvider.updateUserChallenge(user.userId, rpID, options.challenge);
+        return options;
+    }
+    async sendExpiringValidationToken(request) {
+        let rval = false;
+        if (request?.type && StringRatchet.trimToNull(request?.value)) {
+            const prov = this.singleUseCodeProvider(request, false);
+            rval = await prov.createAndSendNewCode(request, this.opts.relyingPartyName);
+        }
+        else {
+            ErrorRatchet.throwFormattedErr('Cannot send - invalid request %j', request);
+        }
+        return rval;
+    }
+    async processLogin(request, origin) {
+        Logger.info('Processing login : %s : %j', origin, request);
+        let rval = false;
+        RequireRatchet.notNullOrUndefined(request, 'request');
+        RequireRatchet.true(!!StringRatchet.trimToNull(request?.userId) || WardenUtils.validContact(request?.contact), 'Invalid contact and no userId');
+        RequireRatchet.true(!!request?.webAuthn || !!StringRatchet.trimToNull(request?.expiringToken), 'You must provide one of webAuthn or expiringToken');
+        RequireRatchet.true(!request?.webAuthn || !StringRatchet.trimToNull(request?.expiringToken), 'WebAuthn and ExpiringToken may not BOTH be set');
+        let user = StringRatchet.trimToNull(request?.userId)
+            ? await this.opts.storageProvider.findEntryById(request?.userId)
+            : await this.opts.storageProvider.findEntryByContact(request.contact);
+        if (!user) {
+            Logger.info('User not found, and createUserIfMissing=%s / %j', request.createUserIfMissing, request.contact);
+            if (request.createUserIfMissing && request.contact) {
+                const newVal = await this.createAccount(request.contact);
+                Logger.info('Finished create, new id is %s', newVal);
+                user = await this.opts.storageProvider.findEntryById(newVal);
+            }
+            if (!user) {
+                ErrorRatchet.throwFormattedErr('No user found for %j / %s', request?.contact, request?.userId);
+            }
+        }
+        if (request.webAuthn) {
+            rval = await this.loginWithWebAuthnRequest(user, origin, request.webAuthn);
+        }
+        else if (StringRatchet.trimToNull(request.expiringToken)) {
+            const prov = this.singleUseCodeProvider(request.contact, false);
+            const lookup = await prov.checkCode(request.contact.value, request.expiringToken);
+            if (lookup) {
+                rval = true;
+            }
+            else {
+                ErrorRatchet.throwFormattedErr('Cannot login - token is invalid for this user');
+            }
+        }
+        return rval;
+    }
+    async loginWithWebAuthnRequest(user, origin, data) {
+        let rval = false;
+        const asUrl = new URL(origin);
+        const rpID = asUrl.hostname;
+        const expectedChallenge = await this.opts.storageProvider.fetchCurrentUserChallenge(user.userId, rpID);
+        const auth = (user.webAuthnAuthenticators || []).find((s) => s.credentialIdBase64 === data.id);
+        if (!auth) {
+            const allIds = (user.webAuthnAuthenticators || []).map((s) => s.credentialIdBase64);
+            throw ErrorRatchet.fErr('Could not find authenticator %s (%s) for user %s (avail were : %j)', data.id, data.id, user.userId, allIds);
+        }
+        const authenticator = {
+            counter: auth.counter,
+            credentialID: auth.credentialIdBase64,
+            credentialPublicKey: Base64Ratchet.base64UrlStringToBytes(auth.credentialPublicKeyBase64),
+        };
+        const vrOpts = {
+            response: data,
+            expectedChallenge,
+            expectedOrigin: origin,
+            expectedRPID: rpID,
+            authenticator,
+        };
+        const verification = await verifyAuthenticationResponse(vrOpts);
+        if (verification.verified) {
+            rval = true;
+        }
+        return rval;
+    }
+    async removeSingleWebAuthnRegistration(userId, key) {
+        let ent = await this.opts.storageProvider.findEntryById(userId);
+        if (ent) {
+            ent.webAuthnAuthenticators = (ent.webAuthnAuthenticators || []).filter((s) => s.credentialIdBase64 !== key);
+            ent = await this.opts.storageProvider.saveEntry(ent);
+        }
+        else {
+            Logger.info('Not removing - no such user as %s', userId);
+        }
+        return ent;
+    }
+    async removeUser(userId) {
+        let rval = false;
+        if (StringRatchet.trimToNull(userId)) {
+            const oldUser = await this.opts.storageProvider.findEntryById(userId);
+            if (oldUser) {
+                await this.opts.storageProvider.removeEntry(userId);
+                if (this?.opts?.eventProcessor) {
+                    await this.opts.eventProcessor.userRemoved(oldUser);
+                }
+                rval = true;
+            }
+            else {
+                Logger.warn('Cannot remove non-existent user : %s', userId);
+            }
+        }
+        return rval;
+    }
+}
+//# sourceMappingURL=warden-service.js.map

package/lib/server/warden-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-service.js","sourceRoot":"","sources":["../../src/server/warden-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAE7B,2BAA2B,EAG3B,4BAA4B,EAE5B,0BAA0B,GAE3B,MAAM,wBAAwB,CAAC;AAahC,OAAO,EAAE,WAAW,EAAE,MAAM,yDAAyD,CAAC;AAQtF,OAAO,EAAE,mCAAmC,EAAE,MAAM,qFAAqF,CAAC;AAG1I,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAG5E,OAAO,EAAE,mCAAmC,EAAE,MAAM,uDAAuD,CAAC;AAC5G,OAAO,EAAE,iCAAiC,EAAE,MAAM,sDAAsD,CAAC;AAEzG,OAAO,EAAE,0CAA0C,EAAE,MAAM,gEAAgE,CAAC;AAE5H,MAAM,OAAO,aAAa;IAGJ;IAFZ,IAAI,CAAuB;IAEnC,YAAoB,SAA+B;QAA/B,cAAS,GAAT,SAAS,CAAsB;QACjD,cAAc,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACxD,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;QAC1F,cAAc,CAAC,4BAA4B,CAAC,SAAS,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;QAChG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;QACxF,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC9E,cAAc,CAAC,4BAA4B,CAAC,SAAS,CAAC,sBAAsB,EAAE,gCAAgC,CAAC,CAAC;QAEhH,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CACvB;YACE,qBAAqB,EAAE,IAAI,mCAAmC,EAAE;YAChE,cAAc,EAAE,IAAI,iCAAiC,EAAE;YACvD,6BAA6B,EAAE,IAAI,0CAA0C,EAAE;SAChF,EACD,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAW,OAAO;QAChB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAGM,kBAAkB,CAAC,OAAsB;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAGM,aAAa,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAGM,KAAK,CAAC,4BAA4B,CAAC,SAAiB,EAAE,MAAc,EAAE,cAAsB;QACjG,IAAI,IAAI,GAAW,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAkB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,IAAI,GAA0B,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACrG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAEb,MAAM,SAAS,GAAW,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAC1D,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAA2B,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,wBAAwB,CAAC,GAAkB,EAAE,MAAc,EAAE,cAAsB;QAC9F,IAAI,IAAI,GAA0B,IAAI,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAEpG,IAAI,GAAG,CAAC,2BAA2B,EAAE,CAAC;gBACpC,IAAI,GAAG,EAAE,2BAA2B,EAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;YAClH,CAAC;iBAAM,IAAI,GAAG,CAAC,gDAAgD,EAAE,CAAC;gBAChE,MAAM,GAAG,GAA0C,MAAM,IAAI,CAAC,gDAAgD,CAC5G,GAAG,CAAC,gDAAgD,EACpD,MAAM,CACP,CAAC;gBACF,IAAI,GAAG,EAAE,gDAAgD,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACnG,CAAC;iBAAM,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC7B,IAAI,GAAG;oBACL,aAAa,EAAE,MAAM,IAAI,CAAC,aAAa,CACrC,GAAG,CAAC,aAAa,CAAC,OAAO,EACzB,GAAG,CAAC,aAAa,CAAC,QAAQ,EAC1B,GAAG,CAAC,aAAa,CAAC,KAAK,EACvB,GAAG,CAAC,aAAa,CAAC,IAAI,CACvB;iBACF,CAAC;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC7B,IAAI,GAAG,EAAE,aAAa,EAAE,aAAa,IAAI,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;oBACrE,MAAM,YAAY,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;oBACvE,MAAM,YAAY,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBACnF,CAAC;gBACD,IAAI,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;oBACpC,MAAM,KAAK,GAAgB,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC5F,IAAI,KAAK,EAAE,CAAC;wBACV,IAAI,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;4BAEhD,GAAG,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAC3D,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,CAChE,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,GAAG,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;wBACvG,CAAC;oBACH,CAAC;oBACD,GAAG,CAAC,aAAa,CAAC,aAAa,GAAG,IAAI,CAAC;gBACzC,CAAC;gBAED,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;oBAC/B,MAAM,YAAY,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;gBACxF,CAAC;gBAED,MAAM,YAAY,GAAgB,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC;oBACxE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,cAAc,CAAC;oBAC/D,CAAC,CAAC,IAAI,CAAC;gBAET,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,qBAAqB,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;gBAE7G,MAAM,UAAU,GAAW,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,GAAG,CAAC;gBAEjE,IAAI,GAAG;oBACL,aAAa,EAAE,MAAM,IAAI,CAAC,aAAa,CACrC,GAAG,CAAC,aAAa,CAAC,OAAO,EACzB,GAAG,CAAC,aAAa,CAAC,0BAA0B,EAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAC1B,GAAG,CAAC,aAAa,CAAC,UAAU,EAC5B,GAAG,CAAC,aAAa,CAAC,IAAI,EACtB,UAAU,EACV,GAAG,CAAC,aAAa,CAAC,cAAc,CACjC;iBACF,CAAC;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,oDAAoD,EAAE,CAAC;gBACpE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC9C,YAAY,CAAC,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,GAAG,GAA2C,MAAM,IAAI,CAAC,oDAAoD,CACjH,cAAc,EACd,MAAM,CACP,CAAC;gBACF,IAAI,GAAG,EAAE,oDAAoD,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACvG,CAAC;iBAAM,IAAI,GAAG,CAAC,wBAAwB,EAAE,CAAC;gBACxC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;oBAC5D,YAAY,CAAC,iBAAiB,CAAC,gCAAgC,EAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACjG,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAY,MAAM,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;oBACrG,IAAI,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC;gBAC3C,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,CAAC,qCAAqC,EAAE,CAAC;gBACrD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC9C,YAAY,CAAC,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,IAAI,GAA6B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACjH,MAAM,GAAG,GAAoC,MAAM,IAAI,CAAC,sBAAsB,CAC5E,cAAc,EACd,MAAM,EACN,GAAG,CAAC,qCAAqC,CAAC,eAAe,EACzD,GAAG,CAAC,qCAAqC,CAAC,WAAW,EACrD,IAAI,CACL,CAAC;gBACF,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;oBACrB,IAAI,GAAG,EAAE,qCAAqC,EAAE,WAAW,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5G,CAAC;qBAAM,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBACrB,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;gBACjE,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,CAAC,0BAA0B,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAgB,MAAM,IAAI,CAAC,gCAAgC,CACvE,GAAG,CAAC,0BAA0B,CAAC,MAAM,EACrC,GAAG,CAAC,0BAA0B,CAAC,YAAY,CAC5C,CAAC;gBACF,IAAI,GAAG;oBACL,0BAA0B,EAAE,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC;iBAC5E,CAAC;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,0CAA0C,EAAE,CAAC;gBAC1D,MAAM,QAAQ,GAAgB,MAAM,IAAI,CAAC,gCAAgC,CACvE,cAAc,EACd,GAAG,CAAC,0CAA0C,CAC/C,CAAC;gBACF,IAAI,GAAG;oBACL,0CAA0C,EAAE,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC;iBAC5F,CAAC;YACJ,CAAC;iBAAM,IAAI,GAAG,CAAC,6BAA6B,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAgB,MAAM,IAAI,CAAC,2BAA2B,CAAC,cAAc,EAAE,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAEtH,IAAI,GAAG;oBACL,6BAA6B,EAAE,WAAW,CAAC,yBAAyB,CAAC,MAAM,CAAC;iBAC7E,CAAC;YAEJ,CAAC;iBAAM,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAuB,GAAG,CAAC,YAAY,CAAC;gBACvD,MAAM,OAAO,GAAY,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,OAAO,CAAC,CAAC;gBACrE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAgB,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;wBAClE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC;wBACjE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC1E,MAAM,UAAU,GAA8B,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAC3G,MAAM,WAAW,GAAwB;wBACvC,SAAS,EAAE,WAAW,CAAC,yBAAyB,CAAC,IAAI,CAAC;wBACtD,IAAI,EAAE,UAAU,CAAC,aAAa;wBAC9B,KAAK,EAAE,WAAW,CAAC,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC;wBAC7D,KAAK,EAAE,IAAI;qBACZ,CAAC;oBACF,MAAM,QAAQ,GAAW,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,0BAA0B,CAAC,CAAC;oBAC1H,MAAM,MAAM,GAAuB;wBACjC,OAAO,EAAE,SAAS;wBAClB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,QAAQ,EAAE,QAAQ;qBACnB,CAAC;oBACF,IAAI,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBACnC,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAwB,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,IAAqC,CAAC;gBACpI,MAAM,IAAI,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjG,MAAM,UAAU,GAA8B,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC3G,MAAM,WAAW,GAAwB;oBACvC,SAAS,EAAE,WAAW,CAAC,yBAAyB,CAAC,IAAI,CAAC;oBACtD,IAAI,EAAE,UAAU,CAAC,aAAa;oBAC9B,KAAK,EAAE,WAAW,CAAC,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC;oBAC7D,KAAK,EAAE,IAAI;iBACZ,CAAC;gBAEF,MAAM,QAAQ,GAAW,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,0BAA0B,CAAC,CAAC;gBAG1H,IAAI,GAAG;oBACL,eAAe,EAAE,QAAQ;iBAC1B,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,oBAAoB,CAAC,GAAW;QACrC,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,GAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,qBAAqB,CAC1B,OAAsB,EACtB,uBAAgC,EAChC,uBAAiC;QAEjC,MAAM,IAAI,GAAgC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAC7E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC,0BAA0B,CAAC,CACxG,CAAC;QACF,IAAI,CAAC,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtC,MAAM,YAAY,CAAC,IAAI,CAAC,8DAA8D,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,OAAsB,EACtB,0BAAyC,EACzC,gBAAwB,EACxB,UAAkB,EAClB,MAA+B,EAC/B,UAAmB,EACnB,cAA+C;QAE/C,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,cAAc,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,cAAc,CAAC,sCAAsC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAChF,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,qDAAqD,CAAC,CAAC;QAElH,IAAI,OAAO,EAAE,IAAI,IAAI,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAgC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACpF,IAAI,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC1C,OAAO,EACP,gBAAgB,EAChB,UAAU,EACV,MAAM,EACN,UAAU,EACV,0BAA0B,EAC1B,cAAc,CACf,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,iBAAiB,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,aAAa,CAAC,OAAsB,EAAE,QAAkB,EAAE,KAAc,EAAE,IAAe;QACpG,IAAI,IAAI,GAAW,IAAI,CAAC;QACxB,IAAI,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACrF,IAAI,GAAG,EAAE,CAAC;gBACR,YAAY,CAAC,iBAAiB,CAAC,+CAA+C,EAAE,OAAO,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,IAAI,GAAW,aAAa,CAAC,eAAe,EAAE,CAAC;YACrD,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAgB;gBAC3B,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,KAAK,IAAI,OAAO,GAAG,IAAI;gBAClC,cAAc,EAAE,CAAC,OAAO,CAAC;gBACzB,IAAI,EAAE,IAAI,IAAI,EAAE;gBAChB,sBAAsB,EAAE,EAAE;gBAC1B,cAAc,EAAE,GAAG;gBACnB,cAAc,EAAE,GAAG;aACpB,CAAC;YACF,MAAM,IAAI,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;YACnB,IAAI,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,IAAI,CAAC,CAAC;gBACtE,MAAM,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,iBAAiB,CAAC,6DAA6D,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAKM,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,OAAsB;QACxE,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,SAAS,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,YAAY,CAAC,iBAAiB,CAAC,wEAAwE,CAAC,CAAC;YAC3G,CAAC;YACD,MAAM,OAAO,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,YAAY,CAAC,iBAAiB,CAAC,sDAAsD,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,iBAAiB,CAAC,qCAAqC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,2BAA2B,CAAC,MAAc,EAAE,OAAsB;QAC7E,IAAI,IAAI,GAAgB,IAAI,CAAC;QAC7B,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,OAAO,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,YAAY,CAAC,iBAAiB,CAAC,2DAA2D,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,CAAC,cAAc,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5H,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,YAAY,CAAC,iBAAiB,CAAC,mDAAmD,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,iBAAiB,CAAC,qCAAqC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAIM,KAAK,CAAC,oDAAoD,CAC/D,MAAc,EACd,MAAc;QAEd,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,KAAK,GAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAW,KAAK,CAAC,QAAQ,CAAC;QAEpC,MAAM,KAAK,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,CAAC,IAAI,CAAC,+EAA+E,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC;YAChD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAClC,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC;YACtD,QAAQ,EAAE,KAAK,CAAC,SAAS;YAGzB,eAAe,EAAE,MAAM;YAEvB,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACvE,EAAE,EAAE,aAAa,CAAC,yBAAyB;gBAG3C,UAAU,EAAE,aAAa,CAAC,UAAuD;aAClF,CAAC,CAAC;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAE3F,OAAO,OAAO,CAAC;IACjB,CAAC;IAGM,KAAK,CAAC,sBAAsB,CACjC,MAAc,EACd,MAAc,EACd,eAAuB,EACvB,WAAmB,EACnB,IAA8B;QAE9B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAoC,IAAI,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,KAAK,GAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,GAAW,KAAK,CAAC,QAAQ,CAAC;YAEpC,MAAM,IAAI,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,YAAY,CAAC,IAAI,CAAC,iDAAiD,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7F,CAAC;YAGD,MAAM,iBAAiB,GAAW,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE/G,MAAM,MAAM,GAAmC;gBAC7C,QAAQ,EAAE,IAAI;gBACd,iBAAiB,EAAE,iBAAiB;gBACpC,cAAc,EAAE,MAAM;gBACtB,YAAY,EAAE,IAAI;aACnB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,MAAM,CAAC,CAAC;YAE9D,MAAM,YAAY,GAAiC,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;YAC5F,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,YAAY,CAAC,CAAC;YAEpE,IAAI,GAAG;gBACL,YAAY,EAAE,IAAI;gBAClB,sBAAsB,EAAE,IAAI,CAAC,EAAE;gBAC/B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,mCAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC,mCAAmC,CAAC,MAAM;aAC1H,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,KAAK,mCAAmC,CAAC,QAAQ,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACpC,MAAM,OAAO,GAAwB;oBACnC,MAAM,EAAE,MAAM;oBACd,eAAe,EAAE,eAAe,IAAI,qBAAqB;oBACzD,WAAW,EAAE,WAAW,IAAI,gBAAgB;oBAC5C,OAAO,EAAE,YAAY,CAAC,gBAAgB,CAAC,OAAO;oBAC9C,kBAAkB,EAAE,YAAY,CAAC,gBAAgB,CAAC,kBAAkB;oBACpE,oBAAoB,EAAE,YAAY,CAAC,gBAAgB,CAAC,oBAAoB;oBACxE,kBAAkB,EAAE,YAAY,CAAC,gBAAgB,CAAC,YAAY;oBAC9D,yBAAyB,EAAE,aAAa,CAAC,2BAA2B,CAAC,YAAY,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;iBAExH,CAAC;gBAIF,IAAI,CAAC,sBAAsB,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,CACtE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB,CAC7D,CAAC;gBACF,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1C,MAAM,UAAU,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG;gBACL,sBAAsB,EAAE,IAAI,CAAC,EAAE;gBAC/B,MAAM,EAAE,mCAAmC,CAAC,KAAK;gBACjD,KAAK,EAAE,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,gDAAgD,CAC3D,MAAc,EACd,MAAc;QAEd,MAAM,IAAI,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAChF,MAAM,IAAI,GAA0C,MAAM,IAAI,CAAC,uCAAuC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrH,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,uCAAuC,CAAC,IAAiB,EAAE,MAAc;QAEpF,MAAM,kBAAkB,GAA0B,IAAI,CAAC,sBAAsB,CAAC;QAC9E,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,KAAK,GAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAW,KAAK,CAAC,QAAQ,CAAC;QAEpC,MAAM,GAAG,GAAU,kBAAkB,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;YAC1D,MAAM,IAAI,GAAQ;gBAChB,EAAE,EAAE,aAAa,CAAC,kBAAkB;gBAGpC,UAAU,EAAE,aAAa,CAAC,UAAU;aACrC,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAsC;YAE9C,IAAI,EAAE,IAAI;YACV,gBAAgB,EAAE,GAAG;YACrB,gBAAgB,EAAE,WAAW;SAC9B,CAAC;QAEF,MAAM,OAAO,GAA0C,MAAM,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAGjG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAE1F,OAAO,OAAO,CAAC;IACjB,CAAC;IAGM,KAAK,CAAC,2BAA2B,CAAC,OAAsB;QAC7D,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,IAAI,OAAO,EAAE,IAAI,IAAI,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAgC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrF,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,iBAAiB,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAIM,KAAK,CAAC,YAAY,CAAC,OAA2B,EAAE,MAAc;QACnE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,cAAc,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,cAAc,CAAC,IAAI,CACjB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EACzF,+BAA+B,CAChC,CAAC;QACF,cAAc,CAAC,IAAI,CACjB,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EACzE,mDAAmD,CACpD,CAAC;QACF,cAAc,CAAC,IAAI,CACjB,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EACvE,gDAAgD,CACjD,CAAC;QAEF,IAAI,IAAI,GAAgB,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;YAC/D,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC;YAChE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7G,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAW,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;gBACrD,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,YAAY,CAAC,iBAAiB,CAAC,2BAA2B,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7E,CAAC;aAAM,IAAI,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAgC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAY,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAC3F,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,iBAAiB,CAAC,+CAA+C,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,wBAAwB,CAAC,IAAiB,EAAE,MAAc,EAAE,IAAgC;QACvG,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,MAAM,KAAK,GAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAW,KAAK,CAAC,QAAQ,CAAC;QACpC,MAAM,iBAAiB,GAAW,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAK/G,MAAM,IAAI,GAAwB,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,MAAM,GAAa,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC9F,MAAM,YAAY,CAAC,IAAI,CAAC,oEAAoE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvI,CAAC;QAED,MAAM,aAAa,GAAwB;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,kBAAkB;YACrC,mBAAmB,EAAE,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,yBAAyB,CAAC;SAC1F,CAAC;QAEF,MAAM,MAAM,GAAqC;YAC/C,QAAQ,EAAE,IAAI;YACd,iBAAiB;YACjB,cAAc,EAAE,MAAM;YACtB,YAAY,EAAE,IAAI;YAClB,aAAa;SACd,CAAC;QAEF,MAAM,YAAY,GAAmC,MAAM,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAEhG,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,gCAAgC,CAAC,MAAc,EAAE,GAAW;QACvE,IAAI,GAAG,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,sBAAsB,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,GAAG,CAAC,CAAC;YAC5G,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAGM,KAAK,CAAC,UAAU,CAAC,MAAc;QACpC,IAAI,IAAI,GAAY,KAAK,CAAC;QAC1B,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAgB,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;oBAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}