@boopkit/cap-users 0.1.0

package/dist/auth-service.js

@@ -0,0 +1,575 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthError = exports.AuthValidationError = void 0;
+exports.generateToken = generateToken;
+exports.hashToken = hashToken;
+exports.createAuthService = createAuthService;
+const node_crypto_1 = require("node:crypto");
+const bcryptjs_1 = __importDefault(require("bcryptjs"));
+const cap_services_1 = require("@boopkit/cap-services");
+// ---------- Errors ----------
+/** Thrown when signup/login input validation fails. */
+class AuthValidationError extends Error {
+    constructor(field, message) {
+        super(message);
+        this.name = 'AuthValidationError';
+        this.field = field;
+    }
+}
+exports.AuthValidationError = AuthValidationError;
+/** Thrown on login failure — generic message to prevent user enumeration. */
+class AuthError extends Error {
+    constructor(message = 'Invalid email or password') {
+        super(message);
+        this.name = 'AuthError';
+    }
+}
+exports.AuthError = AuthError;
+// ---------- Token generation ----------
+/**
+ * Generate a partitioned token with 128 bits of cryptographic randomness.
+ * Format: `XXXXXXXX-PP-YYYYYYYYYYYYYYYYY` (base36 uppercase).
+ * The partition segment is a data-routing hint (default '01').
+ */
+function generateToken(partition = '01') {
+    const n = BigInt('0x' + (0, node_crypto_1.randomBytes)(16).toString('hex'));
+    const b36 = n.toString(36).toUpperCase().padStart(25, '0');
+    return `${b36.slice(0, 8)}-${partition}-${b36.slice(8)}`;
+}
+/**
+ * SHA-256 hash a token for storage. Input already has high entropy
+ * so a fast hash is sufficient (no need for bcrypt).
+ */
+function hashToken(token) {
+    return (0, node_crypto_1.createHash)('sha256').update(token).digest('hex');
+}
+// ---------- Trust tier helpers ----------
+const TRUST_ORDER = ['recognized', 'authenticated', 'verified'];
+function trustLevel(tier) {
+    return TRUST_ORDER.indexOf(tier);
+}
+// ---------- Validation helpers ----------
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const MIN_PASSWORD_LENGTH = 8;
+function validateEmail(email) {
+    if (!email || !EMAIL_RE.test(email)) {
+        throw new AuthValidationError('email', 'Invalid email address');
+    }
+}
+function validatePassword(password) {
+    if (!password || password.length < MIN_PASSWORD_LENGTH) {
+        throw new AuthValidationError('password', `Password must be at least ${MIN_PASSWORD_LENGTH} characters`);
+    }
+}
+function validatePasswordConfirmation(password, confirmation) {
+    if (password !== confirmation) {
+        throw new AuthValidationError('passwordConfirmation', 'Passwords do not match');
+    }
+}
+// ---------- Retry helper ----------
+const MAX_RETRIES = 3;
+/**
+ * Retry a read-modify-write operation on StaleEntityError (optimistic locking).
+ * The operation function is called repeatedly until it succeeds or retries are
+ * exhausted. Each retry re-reads the current state, so the modification is
+ * applied to the latest revision.
+ */
+async function withRetry(op) {
+    for (let attempt = 0;; attempt++) {
+        try {
+            return await op();
+        }
+        catch (err) {
+            if (err instanceof cap_services_1.StaleEntityError && attempt < MAX_RETRIES)
+                continue;
+            throw err;
+        }
+    }
+}
+// ---------- Factory ----------
+/**
+ * Create an auth business service orchestrating signup, login, and
+ * session management on top of user data services.
+ */
+function createAuthService(deps, options) {
+    const { userService, identityService, userPropertyService } = deps;
+    const hashRounds = options?.hashRounds ?? 10;
+    const defaultSessionDuration = options?.defaultSessionDuration ?? 604800; // 7 days
+    // ---- Validation ----
+    function validateSignupInput(input) {
+        validateEmail(input.email);
+        validatePassword(input.password);
+        validatePasswordConfirmation(input.password, input.passwordConfirmation);
+    }
+    // ---- Decomposed steps ----
+    async function createUser(input) {
+        const info = {
+            type: 'user',
+            name: input.name,
+            email: input.email,
+        };
+        return userService.create(info);
+    }
+    async function createIdentity(userId, domain, key) {
+        return identityService.create(userId, domain, key);
+    }
+    async function setProfile(userId, profileData) {
+        return userPropertyService.put(userId, 'profile', profileData);
+    }
+    async function setCredentials(userId, strategy, secret) {
+        const hash = await bcryptjs_1.default.hash(secret, hashRounds);
+        return withRetry(async () => {
+            const existing = await userPropertyService.get(userId, 'credentials', { allowSensitive: true });
+            const entries = existing ? [...existing.info] : [];
+            const idx = entries.findIndex((e) => e.strategy === strategy);
+            if (idx >= 0) {
+                entries[idx] = { strategy, secret: hash };
+            }
+            else {
+                entries.push({ strategy, secret: hash });
+            }
+            return userPropertyService.put(userId, 'credentials', entries, {
+                expectedRevision: existing?.revision,
+            });
+        });
+    }
+    async function addAuthenticationMethod(userId, strategy, methodOpts) {
+        return withRetry(async () => {
+            const existing = await userPropertyService.get(userId, 'authentication');
+            const methods = existing ? [...existing.info] : [];
+            const idx = methods.findIndex((m) => m.strategy === strategy);
+            const entry = {
+                strategy,
+                accepted: true,
+                ...(methodOpts?.refresh_token !== undefined && { refresh_token: methodOpts.refresh_token }),
+                ...(methodOpts?.access_token !== undefined && { access_token: methodOpts.access_token }),
+                ...(methodOpts?.access_token_expires_at !== undefined && { access_token_expires_at: methodOpts.access_token_expires_at }),
+                ...(methodOpts?.oauth_profile !== undefined && { oauth_profile: methodOpts.oauth_profile }),
+            };
+            if (idx >= 0) {
+                methods[idx] = entry;
+            }
+            else {
+                methods.push(entry);
+            }
+            return userPropertyService.put(userId, 'authentication', methods, {
+                expectedRevision: existing?.revision,
+            });
+        });
+    }
+    async function disableAuthenticationMethod(userId, strategy) {
+        return withRetry(async () => {
+            const existing = await userPropertyService.get(userId, 'authentication');
+            const methods = existing ? [...existing.info] : [];
+            const idx = methods.findIndex((m) => m.strategy === strategy);
+            if (idx >= 0) {
+                methods[idx] = { ...methods[idx], accepted: false };
+            }
+            return userPropertyService.put(userId, 'authentication', methods, {
+                expectedRevision: existing?.revision,
+            });
+        });
+    }
+    async function setAuthorization(userId, identityKey, strategy, trust, expiresIn) {
+        const duration = expiresIn ?? defaultSessionDuration;
+        const grant = {
+            identity_key: identityKey,
+            strategy,
+            trust,
+            granted_at: Date.now(),
+            // expiresIn=0 means standing grant (no expiry) — e.g. API keys
+            expires_at: duration === 0 ? 0 : Date.now() + duration * 1000,
+            granted_duration: duration,
+        };
+        return withRetry(async () => {
+            const existing = await userPropertyService.get(userId, 'authorization');
+            const grants = existing ? [...existing.info] : [];
+            const idx = grants.findIndex((g) => g.identity_key === identityKey);
+            if (idx >= 0) {
+                grants[idx] = grant;
+            }
+            else {
+                grants.push(grant);
+            }
+            return userPropertyService.put(userId, 'authorization', grants, {
+                expectedRevision: existing?.revision,
+            });
+        });
+    }
+    async function generateSessionToken(userId) {
+        const token = generateToken();
+        await identityService.create(userId, 'cookie', hashToken(token));
+        return token;
+    }
+    // ---- Login ----
+    async function validateCredentialsFn(email, password) {
+        const identity = await identityService.findByDomainAndKey('email', email);
+        if (!identity)
+            throw new AuthError();
+        // Check authentication policy — is local auth accepted for this user?
+        const methodAccepted = await isMethodAccepted(identity.userId, 'local');
+        if (!methodAccepted)
+            throw new AuthError();
+        const credRecord = await userPropertyService.get(identity.userId, 'credentials', { allowSensitive: true });
+        if (!credRecord)
+            throw new AuthError();
+        const localEntry = credRecord.info.find((e) => e.strategy === 'local');
+        if (!localEntry)
+            throw new AuthError();
+        const match = await bcryptjs_1.default.compare(password, localEntry.secret);
+        if (!match)
+            throw new AuthError();
+        const user = await userService.findById(identity.userId);
+        if (!user)
+            throw new AuthError();
+        return user;
+    }
+    // Session fixation protection (OWASP): on any privilege-level change (login,
+    // re-auth, role escalation) the pre-authentication session token MUST be replaced
+    // with a fresh one. If `currentSessionToken` is provided, the old token is expired
+    // so an attacker who knew or set the old token can't hijack the authenticated session.
+    // See: https://owasp.org/www-community/attacks/Session_fixation
+    async function login(email, password, currentSessionToken) {
+        const user = await validateCredentialsFn(email, password);
+        const sessionToken = await rotateSession(user.id, currentSessionToken);
+        await setAuthorization(user.id, sessionToken, 'session', 'authenticated');
+        const result = { user, sessionToken };
+        await options?.onLogin?.(result);
+        return result;
+    }
+    // ---- Session management ----
+    // Session fixation protection (OWASP): when rotating a session, the old token
+    // is expired (not reused) so that an attacker who obtained the pre-auth token
+    // cannot hijack the session. This MUST happen on any privilege-level change
+    // (login, re-auth, role escalation).
+    // If no currentSessionToken is provided, a new identity is created without
+    // removing existing ones (supports multi-device sessions).
+    // If the token doesn't match any identity, a new one is created (graceful fallback).
+    // See: https://owasp.org/www-community/attacks/Session_fixation
+    async function rotateSession(userId, currentSessionToken) {
+        if (currentSessionToken) {
+            const hashedCurrent = hashToken(currentSessionToken);
+            const existing = await identityService.findByDomainAndKey('cookie', hashedCurrent);
+            if (existing && existing.userId === userId) {
+                await identityService.endDate('cookie', existing.key);
+            }
+        }
+        return generateSessionToken(userId);
+    }
+    // ---- Query methods ----
+    async function getAuthenticationMethods(userId) {
+        const record = await userPropertyService.get(userId, 'authentication');
+        return record ? record.info : null;
+    }
+    async function getAuthorizationStatus(userId, identityKey) {
+        const record = await userPropertyService.get(userId, 'authorization');
+        if (!record)
+            return null;
+        return record.info.find((g) => g.identity_key === identityKey) ?? null;
+    }
+    async function getTrustTier(userId, identityKey) {
+        const grant = await getAuthorizationStatus(userId, identityKey);
+        if (!grant)
+            return null;
+        // Expired grants downgrade to recognized. Null/0 = standing grant (no expiry).
+        if (grant.expires_at && grant.expires_at < Date.now())
+            return 'recognized';
+        return grant.trust;
+    }
+    async function isMethodAccepted(userId, strategy) {
+        const methods = await getAuthenticationMethods(userId);
+        if (!methods)
+            return false;
+        const entry = methods.find((m) => m.strategy === strategy);
+        return entry?.accepted === true;
+    }
+    async function isAuthorized(userId, identityKey, requiredTrust = 'authenticated') {
+        const grant = await getAuthorizationStatus(userId, identityKey);
+        if (!grant)
+            return false;
+        // Use effective trust tier: expired grants downgrade to 'recognized' (not unauthorized).
+        // This matches the spec's request lifecycle: expired grant → trust = 'recognized'.
+        // Standing grants (expires_at=0 or null) keep their stored trust tier.
+        const effectiveTrust = (grant.expires_at && grant.expires_at < Date.now())
+            ? 'recognized'
+            : grant.trust;
+        return trustLevel(effectiveTrust) >= trustLevel(requiredTrust);
+    }
+    // ---- Logout and device management ----
+    async function logout(userId, sessionToken) {
+        // Downgrade this device's authorization grant to 'recognized' — cookie survives
+        await withRetry(async () => {
+            const record = await userPropertyService.get(userId, 'authorization');
+            if (!record)
+                return;
+            const grants = [...record.info];
+            const idx = grants.findIndex((g) => g.identity_key === sessionToken);
+            if (idx >= 0) {
+                grants[idx] = { ...grants[idx], trust: 'recognized', granted_at: Date.now() };
+                await userPropertyService.put(userId, 'authorization', grants, {
+                    expectedRevision: record.revision,
+                });
+            }
+        });
+    }
+    async function logoutAll(userId) {
+        // Downgrade all session grants to 'recognized'; API key grants unaffected
+        await withRetry(async () => {
+            const record = await userPropertyService.get(userId, 'authorization');
+            if (!record)
+                return;
+            const grants = record.info.map((g) => g.strategy === 'session'
+                ? { ...g, trust: 'recognized', granted_at: Date.now() }
+                : g);
+            await userPropertyService.put(userId, 'authorization', grants, {
+                expectedRevision: record.revision,
+            });
+        });
+    }
+    async function forgetDevice(userId, sessionToken) {
+        // End-date cookie identity (stored as hash)
+        const hashedToken = hashToken(sessionToken);
+        const existing = await identityService.findByDomainAndKey('cookie', hashedToken);
+        if (existing && existing.userId === userId) {
+            await identityService.endDate('cookie', existing.key);
+        }
+        // Remove the matching grant from authorization array
+        await withRetry(async () => {
+            const record = await userPropertyService.get(userId, 'authorization');
+            if (!record)
+                return;
+            const grants = record.info.filter((g) => g.identity_key !== sessionToken);
+            if (grants.length !== record.info.length) {
+                await userPropertyService.put(userId, 'authorization', grants, {
+                    expectedRevision: record.revision,
+                });
+            }
+        });
+    }
+    async function forgetAllDevices(userId) {
+        // End-date all cookie identities
+        const allIdentities = await identityService.findAllByUser(userId);
+        const cookieIdentities = allIdentities.filter((i) => i.domain === 'cookie');
+        for (const identity of cookieIdentities) {
+            await identityService.endDate('cookie', identity.key);
+        }
+        // Remove all session grants; preserve API key grants
+        await withRetry(async () => {
+            const record = await userPropertyService.get(userId, 'authorization');
+            if (!record)
+                return;
+            const grants = record.info.filter((g) => g.strategy !== 'session');
+            await userPropertyService.put(userId, 'authorization', grants, {
+                expectedRevision: record.revision,
+            });
+        });
+    }
+    // ---- Trust management ----
+    // setTrust sets trust to any tier — callers are responsible for checking
+    // current tier before calling if downgrade prevention is desired.
+    async function setTrust(userId, identityKey, tier) {
+        return withRetry(async () => {
+            const record = await userPropertyService.get(userId, 'authorization');
+            if (!record) {
+                // T10: No authorization exists — bootstrap a new grant. This is intentional:
+                // enables TOTP verification flows where setTrust may be called before
+                // any login/signup has created a grant for this identity key.
+                return setAuthorization(userId, identityKey, 'session', tier);
+            }
+            const grants = [...record.info];
+            const idx = grants.findIndex((g) => g.identity_key === identityKey);
+            if (idx >= 0) {
+                grants[idx] = { ...grants[idx], trust: tier, granted_at: Date.now() };
+            }
+            else {
+                // No grant for this identity_key — create one
+                grants.push({
+                    identity_key: identityKey,
+                    strategy: 'session',
+                    trust: tier,
+                    granted_at: Date.now(),
+                    expires_at: Date.now() + defaultSessionDuration * 1000,
+                    granted_duration: defaultSessionDuration,
+                });
+            }
+            return userPropertyService.put(userId, 'authorization', grants, {
+                expectedRevision: record.revision,
+            });
+        });
+    }
+    // ---- API key lifecycle ----
+    async function createApiKey(userId) {
+        const apiKey = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        await setCredentials(userId, 'api-key', apiKey);
+        await addAuthenticationMethod(userId, 'api-key');
+        await identityService.create(userId, 'api-key', apiKey);
+        await setAuthorization(userId, apiKey, 'api-key', 'authenticated', 0);
+        return { apiKey };
+    }
+    async function validateApiKeyFn(apiKey) {
+        // 1. Identity lookup — does this key resolve to a user?
+        const identity = await identityService.findByDomainAndKey('api-key', apiKey);
+        if (!identity)
+            throw new AuthError();
+        // 2. Policy gate — is api-key auth accepted for this user?
+        const methodAccepted = await isMethodAccepted(identity.userId, 'api-key');
+        if (!methodAccepted)
+            throw new AuthError();
+        // 3. Credential verification — does the key match the stored hash?
+        const credRecord = await userPropertyService.get(identity.userId, 'credentials', { allowSensitive: true });
+        if (!credRecord)
+            throw new AuthError();
+        const apiKeyEntry = credRecord.info.find((e) => e.strategy === 'api-key');
+        if (!apiKeyEntry)
+            throw new AuthError();
+        const match = await bcryptjs_1.default.compare(apiKey, apiKeyEntry.secret);
+        if (!match)
+            throw new AuthError();
+        // 4. Resolve the user
+        const user = await userService.findById(identity.userId);
+        if (!user)
+            throw new AuthError();
+        return user;
+    }
+    async function revokeApiKey(userId, apiKey) {
+        const existing = await identityService.findByDomainAndKey('api-key', apiKey);
+        if (existing && existing.userId === userId) {
+            await identityService.endDate('api-key', existing.key);
+        }
+    }
+    async function rotateApiKey(userId, currentApiKey) {
+        await revokeApiKey(userId, currentApiKey);
+        return createApiKey(userId);
+    }
+    // ---- Email verification ----
+    const verificationTokenTtl = options?.verificationTokenTtl ?? 86400; // 24h default
+    async function generateVerificationTokenFn(userId) {
+        const token = generateToken('EV');
+        const hashedToken = hashToken(token);
+        const expiresAt = new Date(Date.now() + verificationTokenTtl * 1000).toISOString();
+        // Store hashed token as identity for lookup by token
+        await identityService.create(userId, 'email-verification', hashedToken);
+        // Store expiry metadata as user property
+        await withRetry(async () => {
+            const existing = await userPropertyService.get(userId, 'email-verification');
+            const tokens = existing ? [...existing.info.tokens] : [];
+            tokens.push({ hash: hashedToken, expiresAt });
+            return userPropertyService.put(userId, 'email-verification', { tokens }, {
+                expectedRevision: existing?.revision,
+            });
+        });
+        return token;
+    }
+    async function verifyEmailFn(token) {
+        const hashedToken = hashToken(token);
+        // 1. Look up token → user via identity
+        const identity = await identityService.findByDomainAndKey('email-verification', hashedToken);
+        if (!identity)
+            throw new AuthError('Invalid or expired verification token');
+        const userId = identity.userId;
+        // 2. Check expiry from stored property
+        const record = await userPropertyService.get(userId, 'email-verification');
+        if (!record)
+            throw new AuthError('Invalid or expired verification token');
+        const tokenEntry = record.info.tokens.find((t) => t.hash === hashedToken);
+        if (!tokenEntry)
+            throw new AuthError('Invalid or expired verification token');
+        if (new Date(tokenEntry.expiresAt).getTime() < Date.now()) {
+            // Expired — clean up and reject
+            await identityService.endDate('email-verification', hashedToken);
+            throw new AuthError('Invalid or expired verification token');
+        }
+        // 3. Consume: end-date identity and remove from property (single-use)
+        await identityService.endDate('email-verification', hashedToken);
+        await withRetry(async () => {
+            const current = await userPropertyService.get(userId, 'email-verification');
+            if (!current)
+                return;
+            const remaining = current.info.tokens.filter((t) => t.hash !== hashedToken);
+            return userPropertyService.put(userId, 'email-verification', { tokens: remaining }, {
+                expectedRevision: current.revision,
+            });
+        });
+        // 4. Mark email as verified in profile
+        await withRetry(async () => {
+            const profileRecord = await userPropertyService.get(userId, 'profile');
+            if (!profileRecord)
+                return;
+            const profile = { ...profileRecord.info };
+            if (profile.email && typeof profile.email === 'object') {
+                profile.email = { ...profile.email, verified: true };
+            }
+            return userPropertyService.put(userId, 'profile', profile, {
+                expectedRevision: profileRecord.revision,
+            });
+        });
+        // 5. Upgrade trust to 'verified' for all active session grants
+        await withRetry(async () => {
+            const authRecord = await userPropertyService.get(userId, 'authorization');
+            if (!authRecord)
+                return;
+            const grants = authRecord.info.map((g) => g.strategy === 'session' && trustLevel(g.trust) < trustLevel('verified')
+                ? { ...g, trust: 'verified' }
+                : g);
+            return userPropertyService.put(userId, 'authorization', grants, {
+                expectedRevision: authRecord.revision,
+            });
+        });
+        // 6. Resolve user email for the result
+        const user = await userService.findById(userId);
+        const email = user?.info?.email ?? '';
+        return { userId, email };
+    }
+    // ---- Convenience ----
+    async function signup(input) {
+        validateSignupInput(input);
+        const user = await createUser({ name: input.name, email: input.email });
+        await createIdentity(user.id, 'email', input.email);
+        await setProfile(user.id, {
+            name: input.name,
+            email: { address: input.email, verified: false },
+        });
+        await setCredentials(user.id, 'local', input.password);
+        await addAuthenticationMethod(user.id, 'local');
+        const sessionToken = await generateSessionToken(user.id);
+        await setAuthorization(user.id, sessionToken, 'session', 'authenticated');
+        const result = { user, sessionToken };
+        await options?.onSignup?.(result);
+        return result;
+    }
+    return {
+        validateSignup: validateSignupInput,
+        createUser,
+        createIdentity,
+        setProfile,
+        setCredentials,
+        addAuthenticationMethod,
+        disableAuthenticationMethod,
+        setAuthorization,
+        generateSessionToken,
+        validateCredentials: validateCredentialsFn,
+        login,
+        rotateSession,
+        getAuthenticationMethods,
+        getAuthorizationStatus,
+        getTrustTier,
+        isMethodAccepted,
+        isAuthorized,
+        logout,
+        logoutAll,
+        forgetDevice,
+        forgetAllDevices,
+        setTrust,
+        createApiKey,
+        validateApiKey: validateApiKeyFn,
+        revokeApiKey,
+        rotateApiKey,
+        generateVerificationToken: generateVerificationTokenFn,
+        verifyEmail: verifyEmailFn,
+        signup,
+    };
+}
+//# sourceMappingURL=auth-service.js.map

package/dist/auth-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-service.js","sourceRoot":"","sources":["../src/auth-service.ts"],"names":[],"mappings":";;;;;;AAyJA,sCAIC;AAMD,8BAEC;AA+DD,8CAoiBC;AAxwBD,6CAAsD;AACtD,wDAA8B;AAC9B,wDAAyD;AAmBzD,+BAA+B;AAE/B,uDAAuD;AACvD,MAAa,mBAAoB,SAAQ,KAAK;IAG5C,YAAY,KAAa,EAAE,OAAe;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AARD,kDAQC;AAED,6EAA6E;AAC7E,MAAa,SAAU,SAAQ,KAAK;IAClC,YAAY,UAAkB,2BAA2B;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AALD,8BAKC;AA0GD,yCAAyC;AAEzC;;;;GAIG;AACH,SAAgB,aAAa,CAAC,SAAS,GAAG,IAAI;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,2CAA2C;AAE3C,MAAM,WAAW,GAAgB,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;AAE7E,SAAS,UAAU,CAAC,IAAe;IACjC,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,2CAA2C;AAE3C,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAC9C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACvD,MAAM,IAAI,mBAAmB,CAC3B,UAAU,EACV,6BAA6B,mBAAmB,aAAa,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB,EAAE,YAAoB;IAC1E,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,qCAAqC;AAErC,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAI,EAAoB;IAC9C,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,+BAAgB,IAAI,OAAO,GAAG,WAAW;gBAAE,SAAS;YACvE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,gCAAgC;AAEhC;;;GAGG;AACH,SAAgB,iBAAiB,CAC/B,IAAqB,EACrB,OAA4B;IAE5B,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACnE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;IAC7C,MAAM,sBAAsB,GAAG,OAAO,EAAE,sBAAsB,IAAI,MAAM,CAAC,CAAC,SAAS;IAEnF,uBAAuB;IAEvB,SAAS,mBAAmB,CAAC,KAAkB;QAC7C,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,4BAA4B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3E,CAAC;IAED,6BAA6B;IAE7B,KAAK,UAAU,UAAU,CAAC,KAAgD;QACxE,MAAM,IAAI,GAAiB;YACzB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,MAAc,EAAE,GAAW;QACvE,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,WAAoB;QAC5D,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAc;QAC5E,MAAM,IAAI,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAC5C,MAAM,EAAE,aAAa,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAChD,CAAC;YACF,MAAM,OAAO,GAAsB,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC9D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE;gBAC7D,gBAAgB,EAAE,QAAQ,EAAE,QAAQ;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,uBAAuB,CACpC,MAAc,EACd,QAAgB,EAChB,UAAiC;QAEjC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAqB,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC7F,MAAM,OAAO,GAA2B,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAyB;gBAClC,QAAQ;gBACR,QAAQ,EAAE,IAAI;gBACd,GAAG,CAAC,UAAU,EAAE,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC3F,GAAG,CAAC,UAAU,EAAE,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC;gBACxF,GAAG,CAAC,UAAU,EAAE,uBAAuB,KAAK,SAAS,IAAI,EAAE,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,EAAE,CAAC;gBACzH,GAAG,CAAC,UAAU,EAAE,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC;aAC5F,CAAC;YACF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE;gBAChE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,2BAA2B,CAAC,MAAc,EAAE,QAAgB;QACzE,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAqB,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC7F,MAAM,OAAO,GAA2B,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC9D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACtD,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE;gBAChE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,WAAmB,EACnB,QAAgB,EAChB,KAAgB,EAChB,SAAkB;QAElB,MAAM,QAAQ,GAAG,SAAS,IAAI,sBAAsB,CAAC;QACrD,MAAM,KAAK,GAAuB;YAChC,YAAY,EAAE,WAAW;YACzB,QAAQ;YACR,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,+DAA+D;YAC/D,UAAU,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI;YAC7D,gBAAgB,EAAE,QAAQ;SAC3B,CAAC;QACF,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YAC3F,MAAM,MAAM,GAAyB,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;YACpE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;gBAC9D,gBAAgB,EAAE,QAAQ,EAAE,QAAQ;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,oBAAoB,CAAC,MAAc;QAChD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kBAAkB;IAElB,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,QAAgB;QAClE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAErC,sEAAsE;QACtE,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAE3C,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAC9C,QAAQ,CAAC,MAAM,EACf,aAAa,EACb,EAAE,cAAc,EAAE,IAAI,EAAE,CACzB,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAEvC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAEvC,MAAM,KAAK,GAAG,MAAM,kBAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAElC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,kFAAkF;IAClF,mFAAmF;IACnF,uFAAuF;IACvF,gEAAgE;IAChE,KAAK,UAAU,KAAK,CAAC,KAAa,EAAE,QAAgB,EAAE,mBAA4B;QAChF,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACvE,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACnD,MAAM,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+BAA+B;IAE/B,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,qCAAqC;IACrC,2EAA2E;IAC3E,2DAA2D;IAC3D,qFAAqF;IACrF,gEAAgE;IAChE,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,mBAA4B;QACvE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3C,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,0BAA0B;IAE1B,KAAK,UAAU,wBAAwB,CAAC,MAAc;QACpD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAqB,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,WAAmB;QACvE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,WAAmB;QAC7D,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,+EAA+E;QAC/E,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,YAAY,CAAC;QAC3E,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,QAAgB;QAC9D,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC3D,OAAO,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAClC,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,WAAmB,EAAE,gBAA2B,eAAe;QACzG,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,yFAAyF;QACzF,mFAAmF;QACnF,uEAAuE;QACvE,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxE,CAAC,CAAC,YAAyB;YAC3B,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QAChB,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,yCAAyC;IAEzC,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,YAAoB;QACxD,gFAAgF;QAChF,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;YACrE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,YAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC3F,MAAM,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;oBAC7D,gBAAgB,EAAE,MAAM,CAAC,QAAQ;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,MAAc;QACrC,0EAA0E;QAC1E,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,CAAC,CAAC,QAAQ,KAAK,SAAS;gBACtB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;gBACpE,CAAC,CAAC,CAAC,CACN,CAAC;YACF,MAAM,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;gBAC7D,gBAAgB,EAAE,MAAM,CAAC,QAAQ;aAClC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,YAAoB;QAC9D,4CAA4C;QAC5C,MAAM,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,qDAAqD;QACrD,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;YAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzC,MAAM,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;oBAC7D,gBAAgB,EAAE,MAAM,CAAC,QAAQ;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,MAAc;QAC5C,iCAAiC;QACjC,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC5E,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,qDAAqD;QACrD,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;YACnE,MAAM,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;gBAC7D,gBAAgB,EAAE,MAAM,CAAC,QAAQ;aAClC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B;IAE7B,yEAAyE;IACzE,kEAAkE;IAClE,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,WAAmB,EAAE,IAAe;QAC1E,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,6EAA6E;gBAC7E,sEAAsE;gBACtE,8DAA8D;gBAC9D,OAAO,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;YACpE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,MAAM,CAAC,IAAI,CAAC;oBACV,YAAY,EAAE,WAAW;oBACzB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;oBACtB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,GAAG,IAAI;oBACtD,gBAAgB,EAAE,sBAAsB;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;gBAC9D,gBAAgB,EAAE,MAAM,CAAC,QAAQ;aAClC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAE9B,KAAK,UAAU,YAAY,CAAC,MAAc;QACxC,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjD,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,MAAc;QAC5C,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAErC,2DAA2D;QAC3D,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAE3C,mEAAmE;QACnE,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAC9C,QAAQ,CAAC,MAAM,EACf,aAAa,EACb,EAAE,cAAc,EAAE,IAAI,EAAE,CACzB,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAEvC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAExC,MAAM,KAAK,GAAG,MAAM,kBAAM,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAElC,sBAAsB;QACtB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc;QACxD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,aAAqB;QAC/D,MAAM,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,+BAA+B;IAE/B,MAAM,oBAAoB,GAAG,OAAO,EAAE,oBAAoB,IAAI,KAAK,CAAC,CAAC,cAAc;IAEnF,KAAK,UAAU,2BAA2B,CAAC,MAAc;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnF,qDAAqD;QACrD,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAExE,yCAAyC;QACzC,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAC5C,MAAM,EAAE,oBAAoB,CAC7B,CAAC;YACF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9C,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,EAAE;gBACvE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,KAAa;QACxC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAErC,uCAAuC;QACvC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE/B,uCAAuC;QACvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAC1C,MAAM,EAAE,oBAAoB,CAC7B,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAE1E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAE9E,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC1D,gCAAgC;YAChC,MAAM,eAAe,CAAC,OAAO,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QAED,sEAAsE;QACtE,MAAM,eAAe,CAAC,OAAO,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAC3C,MAAM,EAAE,oBAAoB,CAC7B,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;YAC5E,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBAClF,gBAAgB,EAAE,OAAO,CAAC,QAAQ;aACnC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,uCAAuC;QACvC,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAc,MAAM,EAAE,SAAS,CAAC,CAAC;YACpF,IAAI,CAAC,aAAa;gBAAE,OAAO;YAC3B,MAAM,OAAO,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;gBACzD,gBAAgB,EAAE,aAAa,CAAC,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,+DAA+D;QAC/D,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAoB,MAAM,EAAE,eAAe,CAAC,CAAC;YAC7F,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC;gBACtE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,UAAuB,EAAE;gBAC1C,CAAC,CAAC,CAAC,CACN,CAAC;YACF,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;gBAC9D,gBAAgB,EAAE,UAAU,CAAC,QAAQ;aACtC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,uCAAuC;QACvC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAEtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,wBAAwB;IAExB,KAAK,UAAU,MAAM,CAAC,KAAkB;QACtC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE3B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACpD,MAAM,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,cAAc,EAAE,mBAAmB;QACnC,UAAU;QACV,cAAc;QACd,UAAU;QACV,cAAc;QACd,uBAAuB;QACvB,2BAA2B;QAC3B,gBAAgB;QAChB,oBAAoB;QACpB,mBAAmB,EAAE,qBAAqB;QAC1C,KAAK;QACL,aAAa;QACb,wBAAwB;QACxB,sBAAsB;QACtB,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,MAAM;QACN,SAAS;QACT,YAAY;QACZ,gBAAgB;QAChB,QAAQ;QACR,YAAY;QACZ,cAAc,EAAE,gBAAgB;QAChC,YAAY;QACZ,YAAY;QACZ,yBAAyB,EAAE,2BAA2B;QACtD,WAAW,EAAE,aAAa;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/identity-service.d.ts

@@ -0,0 +1,48 @@
+import type { UserIdentity } from './types.js';
+/** Lifecycle callbacks for identity mutations. */
+export interface IdentityServiceOptions {
+    onCreated?(identity: UserIdentity): void;
+    onUpdated?(identity: UserIdentity): void;
+    onEnded?(identity: UserIdentity): void;
+}
+/** Options for queries that can include ended identities. */
+export interface IdentityQueryOptions {
+    includeEnded?: boolean;
+}
+/** The service object returned by createIdentityService. */
+export interface IdentityService {
+    create(userId: number, domain: string, key: string): Promise<UserIdentity>;
+    findByDomainAndKey(domain: string, key: string): Promise<UserIdentity | null>;
+    findByUserAndDomain(userId: number, domain: string): Promise<UserIdentity | null>;
+    findAllByUser(userId: number, opts?: IdentityQueryOptions): Promise<UserIdentity[]>;
+    update(domain: string, key: string, newUserId: number): Promise<UserIdentity>;
+    endDate(domain: string, key: string): Promise<UserIdentity>;
+}
+/** Minimal Prisma-like delegate for the user_identities table. */
+interface IdentityDelegate {
+    create(args: {
+        data: Record<string, unknown>;
+    }): Promise<Record<string, unknown>>;
+    findUnique(args: {
+        where: Record<string, unknown>;
+    }): Promise<Record<string, unknown> | null>;
+    findFirst(args: {
+        where: Record<string, unknown>;
+    }): Promise<Record<string, unknown> | null>;
+    findMany(args: {
+        where: Record<string, unknown>;
+    }): Promise<Record<string, unknown>[]>;
+    update(args: {
+        where: Record<string, unknown>;
+        data: Record<string, unknown>;
+    }): Promise<Record<string, unknown>>;
+}
+/**
+ * Create an identity service for user identity management.
+ *
+ * Not entity-shaped — identities use (domain, key) compound unique
+ * instead of the standard entity pattern.
+ */
+export declare function createIdentityService(model: IdentityDelegate, options?: IdentityServiceOptions): IdentityService;
+export {};
+//# sourceMappingURL=identity-service.d.ts.map

package/dist/identity-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-service.d.ts","sourceRoot":"","sources":["../src/identity-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,kDAAkD;AAClD,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;CACxC;AAED,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3E,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAClF,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACpF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7D;AAED,kEAAkE;AAClE,UAAU,gBAAgB;IACxB,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,UAAU,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9F,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7F,QAAQ,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnH;AAkCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,gBAAgB,EACvB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,eAAe,CA8DjB"}