@codefox-inc/oauth-provider 0.2.0

package/dist/component/handlers.js

@@ -0,0 +1,624 @@
+import { SignJWT, importPKCS8 } from "jose";
+import { getJWKS, sign, verifyAccessToken, getIssuerUrl, handleCorsOptions, createCorsHeaders, OAuthError, normalizePrefix, getSigningKeyId } from "../lib/oauth.js";
+import { matchRedirectUri } from "./mutations.js";
+function buildAuthorizeErrorRedirect(redirectUri, error, description, state) {
+    const url = new URL(redirectUri);
+    url.searchParams.set("error", error);
+    if (description) {
+        url.searchParams.set("error_description", description);
+    }
+    if (state) {
+        url.searchParams.set("state", state);
+    }
+    return Response.redirect(url.toString());
+}
+function isValidRedirectUri(uri) {
+    let parsed;
+    try {
+        parsed = new URL(uri);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.hash)
+        return false;
+    const host = parsed.hostname.toLowerCase();
+    const isLoopback = host === "localhost" ||
+        host === "127.0.0.1" ||
+        host === "::1";
+    if (parsed.protocol === "https:")
+        return true;
+    if (parsed.protocol === "http:" && isLoopback)
+        return true;
+    return false;
+}
+function isConsentFromProvider(request, config) {
+    const allowedOrigins = [config.siteUrl, config.convexSiteUrl]
+        .filter(Boolean)
+        .map((url) => {
+        try {
+            return new URL(url).origin;
+        }
+        catch {
+            return null;
+        }
+    })
+        .filter((origin) => origin !== null);
+    if (allowedOrigins.length === 0)
+        return false;
+    const origin = request.headers.get("Origin");
+    if (origin) {
+        return allowedOrigins.includes(origin);
+    }
+    const referer = request.headers.get("Referer");
+    if (referer) {
+        try {
+            const refererOrigin = new URL(referer).origin;
+            return allowedOrigins.includes(refererOrigin);
+        }
+        catch {
+            return false;
+        }
+    }
+    return false;
+}
+// --------------------------------------------------------------------------
+// Handler Functions
+// --------------------------------------------------------------------------
+/**
+ * Authorization Endpoint
+ */
+export async function authorizeHandler(ctx, request, config, api) {
+    const corsResponse = handleCorsOptions(request, config, "GET, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "GET, OPTIONS");
+    if (request.method !== "GET") {
+        return new Response("Method Not Allowed", { status: 405, headers });
+    }
+    const url = new URL(request.url);
+    const params = url.searchParams;
+    const responseType = params.get("response_type");
+    const clientId = params.get("client_id");
+    const redirectUri = params.get("redirect_uri");
+    const scope = params.get("scope") ?? "";
+    const state = params.get("state");
+    const consent = params.get("consent");
+    const codeChallenge = params.get("code_challenge");
+    const codeChallengeMethod = params.get("code_challenge_method");
+    const nonce = params.get("nonce") ?? undefined;
+    if (!clientId) {
+        return new OAuthError("invalid_request", "client_id required").toResponse(headers);
+    }
+    if (!redirectUri) {
+        return new OAuthError("invalid_request", "redirect_uri required").toResponse(headers);
+    }
+    const client = await api.queries.getClient(ctx, { clientId });
+    if (!client) {
+        return new OAuthError("invalid_client", "Unknown client").toResponse(headers);
+    }
+    if (!matchRedirectUri(redirectUri, client.redirectUris)) {
+        return new OAuthError("invalid_request", "redirect_uri mismatch").toResponse(headers);
+    }
+    if (consent === "approve" && !isConsentFromProvider(request, config)) {
+        return buildAuthorizeErrorRedirect(redirectUri, "access_denied", "User consent required", state);
+    }
+    if (responseType !== "code") {
+        return buildAuthorizeErrorRedirect(redirectUri, "unsupported_response_type", "response_type must be code", state);
+    }
+    const requestedScopes = scope
+        ? scope.split(" ").filter(Boolean)
+        : [];
+    if (requestedScopes.length === 0) {
+        return buildAuthorizeErrorRedirect(redirectUri, "invalid_request", "scope required", state);
+    }
+    const invalidScopes = requestedScopes.filter((s) => !client.allowedScopes.includes(s));
+    if (invalidScopes.length > 0) {
+        return buildAuthorizeErrorRedirect(redirectUri, "invalid_scope", "Scope not allowed", state);
+    }
+    if (!codeChallenge) {
+        return buildAuthorizeErrorRedirect(redirectUri, "invalid_request", "code_challenge required", state);
+    }
+    if (codeChallengeMethod !== "S256") {
+        return buildAuthorizeErrorRedirect(redirectUri, "invalid_request", "code_challenge_method must be S256", state);
+    }
+    if (consent !== "approve") {
+        return buildAuthorizeErrorRedirect(redirectUri, "access_denied", "User consent required", state);
+    }
+    if (!config.getUserId) {
+        return new OAuthError("server_error", "getUserId is not configured", 500).toResponse(headers);
+    }
+    const userId = await config.getUserId(ctx, request);
+    if (!userId) {
+        return buildAuthorizeErrorRedirect(redirectUri, "access_denied", "User not authenticated", state);
+    }
+    const code = await api.mutations.issueAuthorizationCode(ctx, {
+        clientId,
+        userId,
+        scopes: requestedScopes,
+        redirectUri,
+        codeChallenge,
+        codeChallengeMethod,
+        nonce,
+    });
+    const redirect = new URL(redirectUri);
+    redirect.searchParams.set("code", code);
+    if (state) {
+        redirect.searchParams.set("state", state);
+    }
+    return Response.redirect(redirect.toString());
+}
+/**
+ * OpenID Configuration (Discovery Endpoint)
+ */
+export async function openIdConfigurationHandler(_ctx, request, config) {
+    const corsResponse = handleCorsOptions(request, config, "GET, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "GET, OPTIONS");
+    const backendUrl = config.convexSiteUrl ?? config.siteUrl;
+    const prefix = normalizePrefix(config.prefix);
+    const issuerUrl = getIssuerUrl(config);
+    const supportedScopes = config.allowedScopes ?? ["openid", "profile", "email", "offline_access"];
+    const responseBody = {
+        issuer: issuerUrl,
+        authorization_endpoint: `${backendUrl}${prefix}/authorize`,
+        token_endpoint: `${backendUrl}${prefix}/token`,
+        userinfo_endpoint: `${backendUrl}${prefix}/userinfo`,
+        jwks_uri: `${backendUrl}${prefix}/.well-known/jwks.json`,
+        response_types_supported: ["code"],
+        subject_types_supported: ["public"],
+        id_token_signing_alg_values_supported: ["RS256"],
+        scopes_supported: supportedScopes,
+        token_endpoint_auth_methods_supported: ["client_secret_post", "none"],
+        grant_types_supported: ["authorization_code", "refresh_token"],
+        code_challenge_methods_supported: ["S256"],
+    };
+    if (config.allowDynamicClientRegistration) {
+        responseBody.registration_endpoint = `${backendUrl}${prefix}/register`;
+    }
+    return new Response(JSON.stringify(responseBody), { headers });
+}
+/**
+ * JWKS Endpoint
+ */
+export async function jwksHandler(_ctx, request, config) {
+    const corsResponse = handleCorsOptions(request, config, "GET, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "GET, OPTIONS");
+    try {
+        const jwks = await getJWKS(config);
+        return new Response(JSON.stringify(jwks), { headers });
+    }
+    catch (e) {
+        console.error(e);
+        return new OAuthError("server_error", "Failed to get JWKS", 500).toResponse(headers);
+    }
+}
+/**
+ * Token Endpoint
+ */
+export async function tokenHandler(ctx, request, config, api) {
+    const corsResponse = handleCorsOptions(request, config, "POST, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "POST, OPTIONS");
+    const tokenHeaders = {
+        ...headers,
+        "Cache-Control": "no-store",
+        "Pragma": "no-cache",
+    };
+    if (request.method !== "POST") {
+        return new Response("Method Not Allowed", { status: 405, headers: tokenHeaders });
+    }
+    try {
+        const formData = await request.formData();
+        const grantType = formData.get("grant_type");
+        const code = formData.get("code");
+        const redirectUri = formData.get("redirect_uri");
+        const clientId = formData.get("client_id");
+        const codeVerifier = formData.get("code_verifier");
+        const clientSecret = formData.get("client_secret");
+        if (!clientId)
+            throw new OAuthError("invalid_request", "client_id required");
+        // Client existence + confidential client check
+        const client = await api.queries.getClient(ctx, { clientId: clientId });
+        if (!client) {
+            throw new OAuthError("invalid_client", "Unknown client", 401);
+        }
+        if (client.type === "confidential") {
+            if (!clientSecret)
+                throw new OAuthError("invalid_client", "client_secret required", 401);
+            const isValid = await api.clientManagement.verifyClientSecret(ctx, {
+                clientId: clientId,
+                clientSecret: clientSecret,
+            });
+            if (!isValid)
+                throw new OAuthError("invalid_client", "Invalid client secret", 401);
+        }
+        if (grantType === "authorization_code") {
+            if (!code || !codeVerifier) {
+                throw new OAuthError("invalid_request", "Missing code parameters");
+            }
+            // A. Consume Code
+            const codeData = await api.mutations.consumeAuthCode(ctx, {
+                code: code,
+                clientId: clientId,
+                redirectUri: redirectUri,
+                codeVerifier: codeVerifier,
+            });
+            // Check for authorization code reuse (RFC Line 1136)
+            if ("error" in codeData && codeData.error === "authorization_code_reuse_detected") {
+                throw new OAuthError("invalid_grant", "Authorization code has already been used");
+            }
+            // D. Issue Tokens
+            const userId = codeData.userId;
+            const now = Math.floor(Date.now() / 1000);
+            const accessTokenExpiresIn = 3600;
+            const issuerUrl = getIssuerUrl(config);
+            const keyId = getSigningKeyId(config);
+            // Access Token
+            const accessToken = await sign({
+                uid: userId,
+                scp: codeData.scopes,
+                cid: clientId,
+            }, userId, "convex", "1h", config.privateKey, issuerUrl, keyId);
+            // ID Token (OIDC)
+            let idToken;
+            if (codeData.scopes.includes("openid")) {
+                const privateKey = await importPKCS8(config.privateKey, "RS256");
+                const idTokenClaims = {
+                    sub: userId,
+                    iss: issuerUrl,
+                    aud: clientId,
+                    nonce: codeData.nonce,
+                };
+                idToken = await new SignJWT(idTokenClaims)
+                    .setProtectedHeader({ alg: "RS256", typ: "JWT", kid: keyId })
+                    .setIssuedAt()
+                    .setExpirationTime("1h")
+                    .sign(privateKey);
+            }
+            // Refresh Token (only if offline_access scope is present)
+            let refreshToken;
+            if (codeData.scopes.includes("offline_access")) {
+                refreshToken = crypto.randomUUID();
+            }
+            // E. Save Tokens (RFC Line 1136: link tokens to authorization code for replay detection)
+            await api.mutations.saveTokens(ctx, {
+                accessToken,
+                refreshToken,
+                clientId: clientId,
+                userId: userId,
+                scopes: codeData.scopes,
+                expiresAt: (now + accessTokenExpiresIn) * 1000,
+                refreshTokenExpiresAt: refreshToken ? (now + 3600 * 24 * 30) * 1000 : undefined,
+                authorizationCode: codeData.codeHash, // Link to authorization code
+            });
+            // F. Create/Update Authorization Record
+            await api.mutations.upsertAuthorization(ctx, {
+                userId,
+                clientId: clientId,
+                scopes: codeData.scopes,
+            });
+            // Build response
+            // RFC Line 509: Always include 'scope' for clarity (MUST include if different from requested)
+            const tokenResponse = {
+                access_token: accessToken,
+                token_type: "Bearer",
+                expires_in: accessTokenExpiresIn,
+                scope: codeData.scopes.join(" "),
+            };
+            if (refreshToken) {
+                tokenResponse.refresh_token = refreshToken;
+            }
+            if (idToken) {
+                tokenResponse.id_token = idToken;
+            }
+            return new Response(JSON.stringify(tokenResponse), { status: 200, headers: tokenHeaders });
+        }
+        if (grantType === "refresh_token") {
+            const refreshToken = formData.get("refresh_token");
+            const requestedScope = formData.get("scope"); // RFC 6749 Section 6
+            if (!refreshToken)
+                throw new OAuthError("invalid_request", "refresh_token required");
+            const oldToken = await api.queries.getRefreshToken(ctx, { refreshToken });
+            if (!oldToken)
+                throw new OAuthError("invalid_grant", "Invalid refresh token");
+            if (!oldToken.refreshTokenExpiresAt || oldToken.refreshTokenExpiresAt < Date.now()) {
+                throw new OAuthError("invalid_grant", "Refresh token expired");
+            }
+            if (oldToken.clientId !== clientId)
+                throw new OAuthError("invalid_grant", "Client mismatch");
+            const userId = oldToken.userId;
+            // RFC 6749 Section 6: スコープパラメータ処理（アクセストークン用）
+            let accessTokenScopes;
+            if (requestedScope) {
+                // アクセストークンのスコープは元のスコープのサブセット可能
+                const requestedScopes = requestedScope.split(" ").filter(Boolean);
+                const invalidScopes = requestedScopes.filter((scope) => !oldToken.scopes.includes(scope));
+                if (invalidScopes.length > 0) {
+                    throw new OAuthError("invalid_scope", "Requested scope exceeds original authorization");
+                }
+                accessTokenScopes = requestedScopes;
+            }
+            else {
+                accessTokenScopes = oldToken.scopes;
+            }
+            // クライアントの許可スコープ検証
+            const invalidClientScopes = accessTokenScopes.filter((scope) => !client.allowedScopes.includes(scope));
+            if (invalidClientScopes.length > 0) {
+                throw new OAuthError("invalid_scope", "Scope not allowed for this client");
+            }
+            // RFC 4.3.3: 新RTのスコープは元RTと同一
+            const refreshTokenScopes = oldToken.scopes; // 常に元のスコープ
+            const now = Math.floor(Date.now() / 1000);
+            const accessTokenExpiresIn = 3600;
+            const issuerUrl = getIssuerUrl(config);
+            const keyId = getSigningKeyId(config);
+            // Access Token (JWT) - 縮小されたスコープ使用
+            const accessToken = await sign({
+                uid: userId,
+                scp: accessTokenScopes, // 縮小可能
+                cid: clientId,
+            }, userId, "convex", "1h", config.privateKey, issuerUrl, keyId);
+            // New Refresh Token (Rotation)
+            const newRefreshToken = crypto.randomUUID();
+            // ID Token
+            let idToken;
+            if (accessTokenScopes.includes("openid")) {
+                const privateKey = await importPKCS8(config.privateKey, "RS256");
+                idToken = await new SignJWT({
+                    sub: userId,
+                    iss: issuerUrl,
+                    aud: clientId,
+                })
+                    .setProtectedHeader({ alg: "RS256", typ: "JWT", kid: keyId })
+                    .setIssuedAt()
+                    .setExpirationTime("1h")
+                    .sign(privateKey);
+            }
+            // Rotate - 元のスコープ維持
+            try {
+                await api.mutations.rotateRefreshToken(ctx, {
+                    oldRefreshToken: refreshToken,
+                    accessToken,
+                    refreshToken: newRefreshToken,
+                    clientId: clientId,
+                    userId,
+                    scopes: refreshTokenScopes, // 元のスコープと同一
+                    expiresAt: (now + accessTokenExpiresIn) * 1000,
+                    refreshTokenExpiresAt: (now + 3600 * 24 * 30) * 1000,
+                });
+                // Update authorization lastUsedAt
+                await api.mutations.updateAuthorizationLastUsed(ctx, {
+                    userId,
+                    clientId: clientId,
+                });
+            }
+            catch (e) {
+                if (e instanceof Error && e.message.includes("invalid_grant")) {
+                    throw new OAuthError("invalid_grant", "Invalid refresh token (rotated?)");
+                }
+                throw e;
+            }
+            // Build response - アクセストークンのスコープを返す
+            // RFC Line 509: Always include 'scope' (MUST include if different from requested)
+            // Note: scope may be reduced if client requested a subset
+            const refreshResponse = {
+                access_token: accessToken,
+                token_type: "Bearer",
+                expires_in: accessTokenExpiresIn,
+                scope: accessTokenScopes.join(" "),
+            };
+            refreshResponse.refresh_token = newRefreshToken;
+            if (idToken) {
+                refreshResponse.id_token = idToken;
+            }
+            return new Response(JSON.stringify(refreshResponse), { status: 200, headers: tokenHeaders });
+        }
+        throw new OAuthError("unsupported_grant_type", "Grant type not supported");
+    }
+    catch (e) {
+        console.error(e);
+        if (e instanceof OAuthError) {
+            return e.toResponse(tokenHeaders);
+        }
+        if (e instanceof Error) {
+            // シンプルなエラーメッセージを先にチェック（完全一致）
+            if (e.message === "invalid_grant") {
+                return new OAuthError("invalid_grant", "Invalid grant").toResponse(tokenHeaders);
+            }
+            if (e.message === "invalid_client") {
+                return new OAuthError("invalid_client", "Invalid client", 401).toResponse(tokenHeaders);
+            }
+            // 特定エラーメッセージをOAuthエラーコードにマッピング（部分一致）
+            const errorMap = {
+                "redirect_uri_mismatch": ["invalid_grant", "Redirect URI mismatch", undefined],
+                "invalid_code_verifier": ["invalid_grant", "Code verifier validation failed", undefined],
+                "unsupported_code_challenge_method": ["invalid_request", "Unsupported code challenge method", undefined],
+                "scope_change_not_allowed": ["invalid_scope", "Refresh token scope must remain identical", undefined],
+                "authorization_code_reuse_detected": ["invalid_grant", "Authorization code has already been used", undefined],
+            };
+            for (const [pattern, [code, message, status]] of Object.entries(errorMap)) {
+                if (e.message.includes(pattern)) {
+                    return new OAuthError(code, message, status).toResponse(tokenHeaders);
+                }
+            }
+            if (e.message.startsWith("invalid_scope")) {
+                return new OAuthError("invalid_scope", e.message).toResponse(tokenHeaders);
+            }
+        }
+        const message = e instanceof Error ? e.message : String(e);
+        return new OAuthError("invalid_request", message).toResponse(tokenHeaders);
+    }
+}
+/**
+ * UserInfo Endpoint
+ */
+export async function userInfoHandler(ctx, request, config, getUserProfile) {
+    const corsResponse = handleCorsOptions(request, config, "GET, POST, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "GET, POST, OPTIONS");
+    const authHeader = request.headers.get("Authorization");
+    if (!authHeader || !authHeader.startsWith("Bearer ")) {
+        return new Response(null, {
+            status: 401,
+            headers: {
+                ...headers,
+                "WWW-Authenticate": 'Bearer error="invalid_token", error_description="Missing bearer token"',
+            },
+        });
+    }
+    const token = authHeader.split(" ")[1];
+    try {
+        const issuerUrl = getIssuerUrl(config);
+        const payload = await verifyAccessToken(token, config, issuerUrl);
+        const userId = payload.sub;
+        const clientId = payload.cid;
+        const scopeClaim = payload.scp;
+        const scopes = Array.isArray(scopeClaim)
+            ? scopeClaim
+            : typeof scopeClaim === "string"
+                ? scopeClaim.split(" ").filter(Boolean)
+                : [];
+        if (config.checkAuthorization) {
+            const isAuthorized = await config.checkAuthorization(ctx, userId, clientId);
+            if (!isAuthorized) {
+                return new Response(null, {
+                    status: 401,
+                    headers: {
+                        ...headers,
+                        "WWW-Authenticate": 'Bearer error="invalid_token", error_description="Authorization revoked"',
+                    },
+                });
+            }
+        }
+        if (!scopes.includes("openid")) {
+            return new Response(null, {
+                status: 403,
+                headers: {
+                    ...headers,
+                    "WWW-Authenticate": 'Bearer error="insufficient_scope", scope="openid"',
+                },
+            });
+        }
+        const user = await getUserProfile(userId);
+        if (!user) {
+            return new Response(null, { status: 401, headers });
+        }
+        const responseBody = { sub: userId };
+        if (scopes.includes("profile")) {
+            responseBody.name = user.name;
+            responseBody.picture = user.picture;
+        }
+        if (scopes.includes("email")) {
+            responseBody.email = user.email;
+            responseBody.email_verified = user.email_verified;
+        }
+        return new Response(JSON.stringify(responseBody), { headers });
+    }
+    catch {
+        return new Response(null, {
+            status: 401,
+            headers: {
+                ...headers,
+                "WWW-Authenticate": 'Bearer error="invalid_token", error_description="Token verification failed"',
+            },
+        });
+    }
+}
+/**
+ * Register Endpoint (Dynamic Client Registration)
+ */
+export async function registerHandler(ctx, request, config, api) {
+    const corsResponse = handleCorsOptions(request, config, "POST, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "POST, OPTIONS");
+    if (request.method !== "POST") {
+        return new Response("Method Not Allowed", { status: 405, headers });
+    }
+    if (!config.allowDynamicClientRegistration) {
+        return new OAuthError("access_denied", "Dynamic client registration disabled", 403).toResponse(headers);
+    }
+    try {
+        const body = (await request.json());
+        const redirectUris = body.redirect_uris || [];
+        const clientName = body.client_name || "Unknown Client";
+        const requestedScopes = body.scope
+            ? body.scope.split(" ").filter(Boolean)
+            : ["openid", "profile", "email"];
+        const allowedScopes = config.allowedScopes ?? ["openid", "profile", "email", "offline_access"];
+        const invalidScopes = requestedScopes.filter((scope) => !allowedScopes.includes(scope));
+        if (invalidScopes.length > 0) {
+            throw new OAuthError("invalid_scope", `Unsupported scopes: ${invalidScopes.join(", ")}`);
+        }
+        const scopes = requestedScopes;
+        const authMethod = body.token_endpoint_auth_method;
+        if (authMethod && authMethod !== "client_secret_post" && authMethod !== "none") {
+            throw new OAuthError("invalid_client_metadata", "Unsupported token_endpoint_auth_method");
+        }
+        const type = (authMethod === "none") ? "public" : "confidential";
+        if (redirectUris.length === 0) {
+            throw new OAuthError("invalid_request", "redirect_uris required");
+        }
+        const invalidRedirect = redirectUris.find((uri) => !isValidRedirectUri(uri));
+        if (invalidRedirect) {
+            throw new OAuthError("invalid_request", `Invalid redirect_uri: ${invalidRedirect}`);
+        }
+        const result = await api.clientManagement.registerClient(ctx, {
+            name: clientName,
+            redirectUris: redirectUris,
+            scopes: scopes,
+            type: type,
+            logoUrl: body.logo_uri,
+            website: body.client_uri,
+            tosUrl: body.tos_uri,
+            policyUrl: body.policy_uri,
+        });
+        const responseBody = {
+            client_id: result.clientId,
+            client_id_issued_at: result.clientIdIssuedAt,
+            redirect_uris: redirectUris,
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            scope: scopes.join(" "),
+            token_endpoint_auth_method: authMethod || "client_secret_post",
+            application_type: "web",
+            client_name: clientName,
+        };
+        if (result.clientSecret) {
+            responseBody.client_secret = result.clientSecret;
+            responseBody.client_secret_expires_at = 0;
+        }
+        return new Response(JSON.stringify(responseBody), { status: 201, headers });
+    }
+    catch (e) {
+        console.error("DCR Failed:", e);
+        if (e instanceof OAuthError) {
+            return e.toResponse(headers);
+        }
+        const message = e instanceof Error ? e.message : String(e);
+        return new OAuthError("invalid_request", message).toResponse(headers);
+    }
+}
+/**
+ * Protected Resource Metadata (RFC 9728)
+ */
+export async function oauthProtectedResourceHandler(_ctx, request, config) {
+    const corsResponse = handleCorsOptions(request, config, "GET, POST, OPTIONS");
+    if (corsResponse)
+        return corsResponse;
+    const headers = createCorsHeaders(request.headers.get("Origin"), config, "GET, POST, OPTIONS");
+    const issuerUrl = getIssuerUrl(config);
+    const supportedScopes = config.allowedScopes ?? ["openid", "profile", "email", "offline_access"];
+    return new Response(JSON.stringify({
+        resource: config.siteUrl,
+        authorization_servers: [issuerUrl],
+        scopes_supported: supportedScopes,
+    }), { headers });
+}
+//# sourceMappingURL=handlers.js.map

package/dist/component/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/component/handlers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,EACH,OAAO,EACP,IAAI,EACJ,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,eAAe,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAoBlD,SAAS,2BAA2B,CAChC,WAAmB,EACnB,KAAa,EACb,WAAoB,EACpB,KAAqB;IAErB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,WAAW,EAAE,CAAC;QACd,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACR,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACnC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAE9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,UAAU,GACZ,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,KAAK,CAAC;IAEnB,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAE3D,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB,EAAE,MAAmB;IAChE,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC;SACxD,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACT,IAAI,CAAC;YACD,OAAO,IAAI,GAAG,CAAC,GAAa,CAAC,CAAC,MAAM,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAE3D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACT,OAAO,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACV,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC9C,OAAO,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AA4GD,6EAA6E;AAC7E,oBAAoB;AACpB,6EAA6E;AAE7E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,GAAc,EACd,OAAgB,EAChB,MAAmB,EACnB,GAAsB;IAEtB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAEzF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;IAEhC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnD,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,IAAI,UAAU,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAI,UAAU,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,2BAA2B,CAC9B,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,KAAK,CACR,CAAC;IACN,CAAC;IAED,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,2BAA2B,CAC9B,WAAW,EACX,2BAA2B,EAC3B,4BAA4B,EAC5B,KAAK,CACR,CAAC;IACN,CAAC;IAED,MAAM,eAAe,GAAG,KAAK;QACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,2BAA2B,CAC9B,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,CACR,CAAC;IACN,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,2BAA2B,CAC9B,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,KAAK,CACR,CAAC;IACN,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,OAAO,2BAA2B,CAC9B,WAAW,EACX,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,CACR,CAAC;IACN,CAAC;IACD,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,2BAA2B,CAC9B,WAAW,EACX,iBAAiB,EACjB,oCAAoC,EACpC,KAAK,CACR,CAAC;IACN,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,2BAA2B,CAC9B,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,KAAK,CACR,CAAC;IACN,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,IAAI,UAAU,CAAC,cAAc,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAoC,EAAE,OAAO,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,2BAA2B,CAC9B,WAAW,EACX,eAAe,EACf,wBAAwB,EACxB,KAAK,CACR,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAAG,EAAE;QACzD,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,eAAe;QACvB,WAAW;QACX,aAAa;QACb,mBAAmB;QACnB,KAAK;KACR,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,CAAC;QACR,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,IAAe,EACf,OAAgB,EAChB,MAAmB;IAEnB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAEzF,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,eAAe,GACjB,MAAM,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAE7E,MAAM,YAAY,GAA4B;QAC1C,MAAM,EAAE,SAAS;QACjB,sBAAsB,EAAE,GAAG,UAAU,GAAG,MAAM,YAAY;QAC1D,cAAc,EAAE,GAAG,UAAU,GAAG,MAAM,QAAQ;QAC9C,iBAAiB,EAAE,GAAG,UAAU,GAAG,MAAM,WAAW;QACpD,QAAQ,EAAE,GAAG,UAAU,GAAG,MAAM,wBAAwB;QACxD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,uBAAuB,EAAE,CAAC,QAAQ,CAAC;QACnC,qCAAqC,EAAE,CAAC,OAAO,CAAC;QAChD,gBAAgB,EAAE,eAAe;QACjC,qCAAqC,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACrE,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QAC9D,gCAAgC,EAAE,CAAC,MAAM,CAAC;KAC7C,CAAC;IAEF,IAAI,MAAM,CAAC,8BAA8B,EAAE,CAAC;QACxC,YAAY,CAAC,qBAAqB,GAAG,GAAG,UAAU,GAAG,MAAM,WAAW,CAAC;IAC3E,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,IAAe,EACf,OAAgB,EAChB,MAAmB;IAEnB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAEzF,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,IAAI,UAAU,CAAC,cAAc,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,GAAc,EACd,OAAgB,EAChB,MAAmB,EACnB,GAAsB;IAEtB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACzE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAG;QACjB,GAAG,OAAO;QACV,eAAe,EAAE,UAAU;QAC3B,QAAQ,EAAE,UAAU;KACvB,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAEnD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;QAE7E,+CAA+C;QAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAkB,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAEzF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,GAAG,EAAE;gBAC/D,QAAQ,EAAE,QAAkB;gBAC5B,YAAY,EAAE,YAAsB;aACvC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;YACvE,CAAC;YAED,kBAAkB;YAClB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE;gBACtD,IAAI,EAAE,IAAc;gBACpB,QAAQ,EAAE,QAAkB;gBAC5B,WAAW,EAAE,WAAiC;gBAC9C,YAAY,EAAE,YAAsB;aACvC,CAAC,CAAC;YAEH,qDAAqD;YACrD,IAAI,OAAO,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,mCAAmC,EAAE,CAAC;gBAChF,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;YACtF,CAAC;YAED,kBAAkB;YAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,MAAM,oBAAoB,GAAG,IAAI,CAAC;YAClC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAEtC,eAAe;YACf,MAAM,WAAW,GAAG,MAAM,IAAI,CAC1B;gBACI,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,QAAQ,CAAC,MAAM;gBACpB,GAAG,EAAE,QAAQ;aAChB,EACD,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,MAAM,CAAC,UAAU,EACjB,SAAS,EACT,KAAK,CACR,CAAC;YAEF,kBAAkB;YAClB,IAAI,OAA2B,CAAC;YAChC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAEjE,MAAM,aAAa,GAAG;oBAClB,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,QAAkB;oBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACxB,CAAC;gBAEF,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC;qBACrC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;qBAC5D,WAAW,EAAE;qBACb,iBAAiB,CAAC,IAAI,CAAC;qBACvB,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;YAED,0DAA0D;YAC1D,IAAI,YAAgC,CAAC;YACrC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7C,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACvC,CAAC;YAED,yFAAyF;YACzF,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE;gBAChC,WAAW;gBACX,YAAY;gBACZ,QAAQ,EAAE,QAAkB;gBAC5B,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,CAAC,GAAG,GAAG,oBAAoB,CAAC,GAAG,IAAI;gBAC9C,qBAAqB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;gBAC/E,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,EAAE,6BAA6B;aACtE,CAAC,CAAC;YAEH,wCAAwC;YACxC,MAAM,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBACzC,MAAM;gBACN,QAAQ,EAAE,QAAkB;gBAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,iBAAiB;YACjB,8FAA8F;YAC9F,MAAM,aAAa,GAAQ;gBACvB,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,oBAAoB;gBAChC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACnC,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACf,aAAa,CAAC,aAAa,GAAG,YAAY,CAAC;YAC/C,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACV,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC;YACrC,CAAC;YAED,OAAO,IAAI,QAAQ,CACf,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAC7B,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CACzC,CAAC;QACN,CAAC;QAED,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAW,CAAC;YAC7D,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAkB,CAAC,CAAC,qBAAqB;YAEpF,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;YAErF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAE1E,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;YAE9E,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,QAAQ,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjF,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAE7F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,6CAA6C;YAC7C,IAAI,iBAA2B,CAAC;YAChC,IAAI,cAAc,EAAE,CAAC;gBACjB,+BAA+B;gBAC/B,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClE,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC9C,CAAC;gBACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,UAAU,CAChB,eAAe,EACf,gDAAgD,CACnD,CAAC;gBACN,CAAC;gBACD,iBAAiB,GAAG,eAAe,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACJ,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC;YACxC,CAAC;YAED,kBAAkB;YAClB,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAChD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CACnD,CAAC;YACF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,UAAU,CAChB,eAAe,EACf,mCAAmC,CACtC,CAAC;YACN,CAAC;YAED,6BAA6B;YAC7B,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW;YAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,MAAM,oBAAoB,GAAG,IAAI,CAAC;YAClC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAEtC,mCAAmC;YACnC,MAAM,WAAW,GAAG,MAAM,IAAI,CAC1B;gBACI,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,iBAAiB,EAAE,OAAO;gBAC/B,GAAG,EAAE,QAAkB;aAC1B,EACD,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,MAAM,CAAC,UAAU,EACjB,SAAS,EACT,KAAK,CACR,CAAC;YAEF,+BAA+B;YAC/B,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAE5C,WAAW;YACX,IAAI,OAA2B,CAAC;YAChC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACjE,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC;oBACxB,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,QAAkB;iBAC1B,CAAC;qBACG,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;qBAC5D,WAAW,EAAE;qBACb,iBAAiB,CAAC,IAAI,CAAC;qBACvB,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC;gBACD,MAAM,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBACxC,eAAe,EAAE,YAAY;oBAC7B,WAAW;oBACX,YAAY,EAAE,eAAe;oBAC7B,QAAQ,EAAE,QAAkB;oBAC5B,MAAM;oBACN,MAAM,EAAE,kBAAkB,EAAE,YAAY;oBACxC,SAAS,EAAE,CAAC,GAAG,GAAG,oBAAoB,CAAC,GAAG,IAAI;oBAC9C,qBAAqB,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI;iBACvD,CAAC,CAAC;gBAEH,kCAAkC;gBAClC,MAAM,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,GAAG,EAAE;oBACjD,MAAM;oBACN,QAAQ,EAAE,QAAkB;iBAC/B,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,CAAC,CAAC;YACZ,CAAC;YAED,oCAAoC;YACpC,kFAAkF;YAClF,0DAA0D;YAC1D,MAAM,eAAe,GAAQ;gBACzB,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,oBAAoB;gBAChC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;aACrC,CAAC;YAEF,eAAe,CAAC,aAAa,GAAG,eAAe,CAAC;YAEhD,IAAI,OAAO,EAAE,CAAC;gBACV,eAAe,CAAC,QAAQ,GAAG,OAAO,CAAC;YACvC,CAAC;YAED,OAAO,IAAI,QAAQ,CACf,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAC/B,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CACzC,CAAC;QACN,CAAC;QAED,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;IAE/E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,6BAA6B;YAC7B,IAAI,CAAC,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAChC,OAAO,IAAI,UAAU,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACjC,OAAO,IAAI,UAAU,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC5F,CAAC;YAED,qCAAqC;YACrC,MAAM,QAAQ,GAA8C;gBACxD,uBAAuB,EAAE,CAAC,eAAe,EAAE,uBAAuB,EAAE,SAAS,CAAC;gBAC9E,uBAAuB,EAAE,CAAC,eAAe,EAAE,iCAAiC,EAAE,SAAS,CAAC;gBACxF,mCAAmC,EAAE,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,SAAS,CAAC;gBACxG,0BAA0B,EAAE,CAAC,eAAe,EAAE,2CAA2C,EAAE,SAAS,CAAC;gBACrG,mCAAmC,EAAE,CAAC,eAAe,EAAE,0CAA0C,EAAE,SAAS,CAAC;aAChH,CAAC;YAEF,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9B,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAC1E,CAAC;YACL,CAAC;YAED,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC/E,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC/E,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,GAAc,EACd,OAAgB,EAChB,MAAmB,EACnB,cAA+D;IAE/D,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC9E,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAE/F,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,kBAAkB,EAAE,wEAAwE;aAC/F;SACJ,CAAC,CAAC;IACP,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAa,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAyB,CAAC;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACpC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ;gBAC5B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBACvC,CAAC,CAAC,EAAE,CAAC;QAEb,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAoC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC7G,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACtB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACL,GAAG,OAAO;wBACV,kBAAkB,EAAE,yEAAyE;qBAChG;iBACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACtB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACL,GAAG,OAAO;oBACV,kBAAkB,EAAE,mDAAmD;iBAC1E;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,YAAY,GAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YAC9B,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAChC,YAAY,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,kBAAkB,EAAE,6EAA6E;aACpG;SACJ,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,GAAc,EACd,OAAgB,EAChB,MAAmB,EACnB,GAAsB;IAEtB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACzE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAE1F,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,8BAA8B,EAAE,CAAC;QACzC,OAAO,IAAI,UAAU,CACjB,eAAe,EACf,sCAAsC,EACtC,GAAG,CACN,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA0B,CAAC;QAE7D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK;YAC9B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,aAAa,GACf,MAAM,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACxF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,0BAA0B,CAAC;QACnD,IAAI,UAAU,IAAI,UAAU,KAAK,oBAAoB,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC7E,MAAM,IAAI,UAAU,CAChB,yBAAyB,EACzB,wCAAwC,CAC3C,CAAC;QACN,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;QAEjE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,eAAe,EAAE,CAAC;YAClB,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,eAAe,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,cAAc,CAAC,GAAG,EAAE;YAC1D,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,YAAY;YAC1B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,OAAO,EAAE,IAAI,CAAC,UAAU;YACxB,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC7B,CAAC,CAAC;QAEH,MAAM,YAAY,GAA4B;YAC1C,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,mBAAmB,EAAE,MAAM,CAAC,gBAAgB;YAC5C,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,0BAA0B,EAAE,UAAU,IAAI,oBAAoB;YAC9D,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,UAAU;SAC1B,CAAC;QAEF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,YAAY,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;YACjD,YAAY,CAAC,wBAAwB,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAEhF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1E,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAC/C,IAAe,EACf,OAAgB,EAChB,MAAmB;IAEnB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC9E,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAE/F,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,eAAe,GACjB,MAAM,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAE7E,OAAO,IAAI,QAAQ,CACf,IAAI,CAAC,SAAS,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,qBAAqB,EAAE,CAAC,SAAS,CAAC;QAClC,gBAAgB,EAAE,eAAe;KACpC,CAAC,EACF,EAAE,OAAO,EAAE,CACd,CAAC;AACN,CAAC"}