@credibledata/cred-cli 0.0.103 → 0.0.105

package/dist/commands/misc/login.js

@@ -43,7 +43,10 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isLoginInvocation = isLoginInvocation;
+exports.resolveLoginTarget = resolveLoginTarget;
+exports.bareCellWarning = bareCellWarning;
 exports.login = login;
+exports.resolveOrganization = resolveOrganization;
 const axios_1 = __importStar(require("axios"));
 const jwt_decode_1 = require("jwt-decode");
 const url_1 = require("url");
@@ -51,9 +54,15 @@ const api_1 = require("../../client/api");
 const configuration_1 = require("../../client/configuration");
 const clientconfiguration_1 = require("../../clientconfiguration");
 const constants_1 = require("../../constants");
+// Imported from setup-core directly rather than through `constants`'s
+// re-export: `export { x } from` compiles to a non-writable getter, which
+// sinon cannot replace, so stubbing these in a test silently binds nothing.
+const environments_1 = require("../../setup-core/environments");
 const logger_1 = require("../../logger");
+const refresh_1 = require("../../setup-core/refresh");
 const utils_1 = require("../../utils");
 const loopbackOAuth = __importStar(require("./loopbackOAuth"));
+const browser = __importStar(require("../../browser"));
 const organizationsApi = new api_1.OrganizationsApi(new configuration_1.Configuration());
 /**
  * True when argv is a `cred login ...` invocation (argv = [node, script,
@@ -66,65 +75,305 @@ const organizationsApi = new api_1.OrganizationsApi(new configuration_1.Configur
  * silently resets a user's tokens.
  */
 function isLoginInvocation(argv) {
-    return argv[2] === "login";
+    return (0, utils_1.invokedCommand)(argv) === "login";
 }
-function login(organizationName, controlPlaneBaseURL, configPath, cluster) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const config = new clientconfiguration_1.ClientConfiguration(configPath);
+/**
+ * Work out which cluster a login should target, and which deployment env that
+ * implies.
+ *
+ * Extracted from index.ts because it is a decision, not CLI wiring, and because
+ * the org-less path has to make the same decision without knowing the org.
+ *
+ * Precedence: explicit `--cluster`, then the cluster of the `--cell` or the
+ * deployment the directory is pinned to, then the org's declared default (only knowable when
+ * an org was named), then the cluster the user is already on — so
+ * `ms2ad set-env staging && cred login demo` stays on staging.
+ *
+ * `pinned` (a directory pin or `--cell`) is there because an org's default can
+ * be another deployment's: videoamp and demo default to gcp, so a bare `cred
+ * login videoamp` in a directory pinned to videoamp resolved to production.
+ */
+function resolveLoginTarget(currentEnv, organizationName, requestedCluster, options = {}) {
+    var _a;
+    const orgConfig = organizationName
+        ? (0, environments_1.getCliOrgConfig)(organizationName)
+        : undefined;
+    let cluster;
+    if (requestedCluster !== undefined) {
+        const requested = requestedCluster.toLowerCase();
+        if (requested !== "gcp" && requested !== "aws") {
+            throw new Error(`Invalid --cluster value '${requestedCluster}'. Must be 'gcp' or 'aws'.`);
+        }
+        cluster = requested;
+    }
+    else if (options.pinned) {
+        cluster = environments_1.CLUSTER_BY_ENVIRONMENT[currentEnv];
+    }
+    else if (orgConfig) {
+        cluster = orgConfig.defaultCluster;
+    }
+    else {
+        cluster = environments_1.CLUSTER_BY_ENVIRONMENT[currentEnv];
+    }
+    // Unregistered orgs implicitly support only gcp; registered orgs declare
+    // their cluster list.
+    if (organizationName) {
+        const supportedClusters = (_a = orgConfig === null || orgConfig === void 0 ? void 0 : orgConfig.supportedClusters) !== null && _a !== void 0 ? _a : [
+            "gcp",
+        ];
+        if (!supportedClusters.includes(cluster)) {
+            throw new Error(`Organization '${organizationName}' is not available on the ${cluster} cluster.`);
+        }
+    }
+    else if (cluster === "aws") {
+        // An Auth0-Organizations cluster cannot authenticate without knowing the
+        // organization first — `organization` is a required `/authorize`
+        // parameter there, and the device-code endpoint does not accept it at
+        // all. So there is no org-less path to discover orgs on such a cluster;
+        // say so instead of failing inside Auth0.
+        //
+        // Refused here rather than in `login()` because the caller acts on the
+        // returned target before calling it: `index.ts` writes
+        // `activeEnvironment` as soon as the target names a different deployment.
+        // Rejecting after that had already flipped the user's global deployment
+        // to videoamp, leaving every later command pointed at another cluster
+        // after a login that failed and told them to try again.
+        throw new Error("Logging in to the aws cluster needs an organization up front, because its Auth0 tenant requires it to authenticate. Run `cred login <organization> -c aws`.");
+    }
+    // Respect a previously-set activeEnvironment if it's already on the chosen
+    // cluster. Only flip envs when the current one is on a different cluster.
+    const targetEnv = environments_1.CLUSTER_BY_ENVIRONMENT[currentEnv] === cluster
+        ? currentEnv
+        : environments_1.DEFAULT_ENVIRONMENT_BY_CLUSTER[cluster];
+    return { cluster, targetEnv };
+}
+/**
+ * What to say after `--cell <cell>` signed in to a cell other than the one the
+ * next bare command resolves to (`without` is that resolution, flag ignored).
+ * Undefined when there is nothing to warn about.
+ */
+function bareCellWarning(cell, without) {
+    if (cell === without.deployment)
+        return undefined;
+    return without.from === "folder"
+        ? `This directory is pinned to ${without.deployment}; pass --cell ${cell} on every command here, or re-pin with \`cred --cell ${cell} init\`.`
+        : `Your global cell is still ${without.deployment}; pass --cell ${cell} on every command or run \`cred set cell ${cell}\`.`;
+}
+function login(organizationName_1, controlPlaneBaseURL_1, configPath_1, cluster_1, deployment_1) {
+    return __awaiter(this, arguments, void 0, function* (organizationName, controlPlaneBaseURL, configPath, cluster, 
+    // Which deployment's slot in `~/.cred` this login writes to, when the caller
+    // has already resolved one. Without it the tokens and organization land
+    // under the file's *global* `activeEnvironment`, so `cred init` in a
+    // directory pinned elsewhere logged in successfully and then failed its own
+    // `credStore.getOrganization()` check with "Setup needs an organization",
+    // because it was reading the slot login had not written.
+    deployment, options = {}) {
+        const config = new clientconfiguration_1.ClientConfiguration(configPath, deployment);
         const environment = config.getEnvironment();
         if (environment === "e2e-test") {
+            if (!organizationName) {
+                logger_1.logger.error("`cred login` needs an organization on the e2e-test deployment: the machine-to-machine flow has no user to look organizations up for. Pass the organization name.");
+                process.exit(1);
+            }
             return loginM2M(organizationName, config);
         }
-        const auth0OrganizationId = (0, constants_1.getAuth0OrganizationIdForCliLogin)(organizationName, cluster);
+        const auth0OrganizationId = organizationName
+            ? (0, environments_1.getAuth0OrganizationIdForCliLogin)(organizationName, cluster)
+            : undefined;
         if (auth0OrganizationId) {
             return loginWithAuthCodePkceOrganization(environment, organizationName, controlPlaneBaseURL, config, auth0OrganizationId);
         }
+        // Already signed in to this deployment as a user: the token is not tied to
+        // an organization (only the Auth0-organization flow above is), so naming
+        // one is a switch, not a new sign-in. Signing in again asked for a second
+        // device code seconds after the first.
+        //
+        // The switch renews the token only when it needs renewing, as every other
+        // command does: a valid token is kept, and an expired one is renewed rather
+        // than signed in from scratch. When Auth0 refuses the refresh token, the
+        // renewal clears the tokens (and only the tokens, so the organization and
+        // environment survive) and this falls through to a real sign-in.
+        //
+        // When Auth0 cannot be reached (or another `cred` process holds the refresh
+        // lock), the switch goes ahead on the token on disk while it is still valid.
+        // A device-code sign-in needs the same Auth0 and would fail the same way.
+        // Once that token has expired, a held lock or an unwritable `~/.cred` stops
+        // here with what to do instead of signing in.
+        if (!options.force &&
+            organizationName &&
+            controlPlaneBaseURL &&
+            !config.isServiceAccountToken() &&
+            config.getRefreshToken()) {
+            const renewal = yield (0, refresh_1.ensureFreshTokens)(config);
+            const fresh = renewal.status === "fresh";
+            const keptToken = renewal.status === "offline" && config.isTokenValid().valid;
+            if (keptToken) {
+                logger_1.logger.warn(`${renewal.reason} Continuing with the token on disk, which is still valid.`);
+            }
+            if (fresh || keptToken) {
+                try {
+                    const switched = yield selectOrganization(organizationName, controlPlaneBaseURL, config, {
+                        announce: false,
+                    });
+                    const cell = config.getEnvironment();
+                    console.log(`${switched
+                        ? `Already signed in to ${cell}, so this switched to ${organizationName} without signing in again.`
+                        : `Already signed in to ${cell} with ${organizationName} selected; nothing changed.`} To sign in as someone else, pass --force.`);
+                    return;
+                }
+                catch (error) {
+                    // The token was refused (a revoked session, a key rotation,
+                    // a 5xx). A 403 or 404 on the organization has already exited.
+                    // Anything else falls through to a real sign-in, or `cred login
+                    // <org>` would fail the same way forever.
+                    logger_1.logger.warn(`Could not use your saved sign-in (${error instanceof Error ? error.message : String(error)}), so signing in again.`);
+                }
+            }
+            else if (renewal.status === "offline" && renewal.retry) {
+                // `retry` names a cause a sign-in cannot fix: another `cred` process
+                // holds the refresh lock, or `~/.cred` cannot be written. A device-code
+                // sign-in would race that process for the same file, or fail to save.
+                // `keptToken` above already re-read the file, so a renewal the other
+                // process finished in the meantime has been used.
+                logger_1.logger.error(`${renewal.reason} ${renewal.retry}`);
+                process.exit(1);
+            }
+            else if (renewal.status === "logged-out") {
+                // Its `reason` ends in "Run `cred login`", which is what the user is
+                // already doing.
+                logger_1.logger.warn("Your saved session can no longer be renewed, so signing in again.");
+            }
+            else if ("reason" in renewal) {
+                logger_1.logger.warn(`${renewal.reason} Signing in again.`);
+            }
+        }
+        // No org-less-on-aws check here: it lives in `resolveLoginTarget`, which
+        // every caller runs to obtain `cluster`, and which has to reject before the
+        // caller acts on the target it hands back.
         return loginWithDeviceCode(environment, organizationName, controlPlaneBaseURL, config);
     });
 }
-function persistTokensAndVerifyOrganization(tokenPayload, organizationName, controlPlaneBaseURL, config) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b;
-        if (tokenPayload.id_token) {
-            const decoded = (0, jwt_decode_1.jwtDecode)(tokenPayload.id_token);
-            if (typeof decoded === "object" &&
-                decoded !== null &&
-                "email" in decoded &&
-                "name" in decoded) {
-                const user = decoded;
-                config.setVSCodeUser(user.name, user.email);
+/**
+ * Persist the tokens Auth0 issued.
+ *
+ * Both fields the extension reads keep their meaning, and the id token gets its
+ * own field so nothing has to guess which is which later. See
+ * `setup-core/credstore.ts` for why guessing was ever necessary.
+ */
+function persistTokens(tokenPayload, config) {
+    if (tokenPayload.id_token) {
+        const decoded = (0, jwt_decode_1.jwtDecode)(tokenPayload.id_token);
+        if (typeof decoded === "object" &&
+            decoded !== null &&
+            "email" in decoded &&
+            "name" in decoded) {
+            const user = decoded;
+            config.setVSCodeUser(user.name, user.email);
+        }
+    }
+    config.setTokenPair({
+        accessToken: tokenPayload.access_token,
+        idToken: tokenPayload.id_token,
+        refreshToken: tokenPayload.refresh_token,
+    });
+}
+/**
+ * Pick the organization to work in, once we have a token.
+ *
+ * This is the flow the VS Code extension already proves: authenticate first,
+ * then ask the control plane which organizations this user can see. Exactly one
+ * auto-selects; several raise a picker. Naming an org up front stays supported
+ * and is what scripts should do.
+ */
+function resolveOrganization(organizationName_1, controlPlaneBaseURL_1, config_1) {
+    return __awaiter(this, arguments, void 0, function* (organizationName, controlPlaneBaseURL, config, 
+    /** What answers the picker at this front door. Defaults to `cred login`'s. */
+    // Said after the sign-in has succeeded, so the re-run must not look like a
+    // second sign-in: with a session in place it no longer is one.
+    flag = "the organization as an argument: `cred login <organization>` (you are signed in; it will not ask you to sign in again)") {
+        var _a;
+        if (organizationName) {
+            return organizationName;
+        }
+        const response = yield organizationsApi.listOrganizations(undefined, undefined, undefined, {
+            baseURL: controlPlaneBaseURL,
+            headers: config.getHeaders(),
+        });
+        // `name` is optional in the generated model but is the organization's
+        // identity everywhere it is used, so an entry without one is not selectable.
+        const named = [];
+        for (const org of (_a = response.data) !== null && _a !== void 0 ? _a : []) {
+            if (org.name) {
+                named.push({ name: org.name, displayName: org.displayName });
             }
         }
-        config.setAccessToken(true, tokenPayload.access_token);
-        config.setJwtAccessToken(tokenPayload.access_token);
-        if (tokenPayload.refresh_token) {
-            config.setRefreshToken(tokenPayload.refresh_token);
+        if (named.length === 0) {
+            logger_1.logger.error("Your account is not a member of any Credible organization yet. Ask an administrator to invite you, then run `cred login` again.");
+            process.exit(1);
         }
+        return (0, utils_1.selectFromList)("Which organization?", named.map((org) => ({
+            name: org.displayName ? `${org.name} (${org.displayName})` : org.name,
+            value: org.name,
+        })), 
+        // The hint is not decoration: without it this picker refuses a piped
+        // stdin with the generic "pass the flag that names your choice", and the
+        // organization is a positional argument rather than a flag, so there is
+        // nothing for the caller to guess at. This is the one prompt site in the
+        // CLI that an agent reaches before `cred init` has wired anything.
+        {
+            flag,
+            options: named.map((org) => org.name),
+        });
+    });
+}
+function persistTokensAndVerifyOrganization(tokenPayload, organizationName, controlPlaneBaseURL, config) {
+    return __awaiter(this, void 0, void 0, function* () {
+        persistTokens(tokenPayload, config);
+        const resolvedOrganization = yield resolveOrganization(organizationName, controlPlaneBaseURL, config);
+        yield selectOrganization(resolvedOrganization, controlPlaneBaseURL, config);
+    });
+}
+/**
+ * Check the user can see `resolvedOrganization`, then make it current.
+ * Resolves to whether that changed the organization.
+ */
+function selectOrganization(resolvedOrganization_1, controlPlaneBaseURL_1, config_1) {
+    return __awaiter(this, arguments, void 0, function* (resolvedOrganization, controlPlaneBaseURL, config, 
+    /** `false` when the caller prints its own success line. */
+    options = {}) {
+        var _a, _b;
+        const previous = config.getOrganization();
         try {
-            const response = yield organizationsApi.getOrganization(organizationName, {
+            const response = yield organizationsApi.getOrganization(resolvedOrganization, {
                 baseURL: controlPlaneBaseURL,
                 headers: config.getHeaders(),
             });
             if (response.status === 200) {
-                if (organizationName !== config.getOrganization()) {
-                    config.setOrganization(organizationName);
+                if (resolvedOrganization !== previous) {
+                    config.setOrganization(resolvedOrganization);
                     config.setProject(undefined);
                 }
-                logger_1.logger.info("Login successful");
+                if (options.announce !== false) {
+                    console.log(`Login successful. Signed in to ${resolvedOrganization} on ${config.getEnvironment()}.`);
+                }
             }
+            return resolvedOrganization !== previous;
         }
         catch (error) {
             if (!controlPlaneBaseURL.startsWith("https://")) {
                 const errorMsg = error instanceof Error ? error.message : String(error);
                 logger_1.logger.warn("Error with organziation check- might be bootstrapping. Ignoring: " +
                     errorMsg);
-                config.setOrganization(organizationName);
-                config.setProject(undefined);
-                return;
+                const changed = resolvedOrganization !== previous;
+                if (changed) {
+                    config.setOrganization(resolvedOrganization);
+                    config.setProject(undefined);
+                }
+                return changed;
             }
             if ((0, axios_1.isAxiosError)(error)) {
                 if (((_a = error.response) === null || _a === void 0 ? void 0 : _a.status) === 403 || ((_b = error.response) === null || _b === void 0 ? void 0 : _b.status) === 404) {
-                    logger_1.logger.error(`The organization "${organizationName}" does not exist, or you do not have permission to access it.`);
+                    logger_1.logger.error(`The organization "${resolvedOrganization}" does not exist, or you do not have permission to access it.`);
                     process.exit(1);
                 }
             }
@@ -135,9 +384,9 @@ function persistTokensAndVerifyOrganization(tokenPayload, organizationName, cont
 function loginWithAuthCodePkceOrganization(environment, organizationName, controlPlaneBaseURL, config, auth0OrganizationId) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
-        const auth0Domain = constants_1.auth0ConfigsByEnv[environment].domain;
-        const auth0ClientId = constants_1.auth0ConfigsByEnv[environment].clientId;
-        const audience = constants_1.auth0ConfigsByEnv[environment].audience;
+        const auth0Domain = environments_1.auth0ConfigsByEnv[environment].domain;
+        const auth0ClientId = environments_1.auth0ConfigsByEnv[environment].clientId;
+        const audience = environments_1.auth0ConfigsByEnv[environment].audience;
         const { codeVerifier, codeChallenge } = loopbackOAuth.generatePkcePair();
         const state = loopbackOAuth.generateOAuthState();
         const authorizeParams = new url_1.URLSearchParams({
@@ -160,6 +409,7 @@ function loginWithAuthCodePkceOrganization(environment, organizationName, contro
                 timeoutMs: constants_1.LOGIN_TIMEOUT_MS,
                 onListening: () => {
                     logger_1.logger.info(`Please visit the following URL to login ${authorizeUrl}`);
+                    void offerBrowser(authorizeUrl);
                     logger_1.logger.info("Waiting for login...");
                 },
             });
@@ -196,11 +446,38 @@ function loginWithAuthCodePkceOrganization(environment, organizationName, contro
         }
     });
 }
+/**
+ * Open the sign-in page for a person at a terminal, after the URL is printed.
+ * The printed line stays either way: it is how someone signs in when the
+ * browser opens on the wrong profile, or not at all.
+ */
+function offerBrowser(url) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!browser.shouldOpenBrowser())
+            return;
+        if (yield browser.openInBrowser(url)) {
+            logger_1.logger.info("Opened your browser to sign in.");
+        }
+    });
+}
+/**
+ * OAuth error codes after which a device code can never be redeemed (RFC 8628
+ * §3.5 plus the token endpoint's own, RFC 6749 §5.2).
+ */
+const FINAL_DEVICE_CODE_ERRORS = new Set([
+    "expired_token",
+    "access_denied",
+    "invalid_grant",
+    "invalid_request",
+    "invalid_client",
+    "unauthorized_client",
+    "unsupported_grant_type",
+]);
 function loginWithDeviceCode(environment, organizationName, controlPlaneBaseURL, config) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b, _c;
-        const auth0Domain = constants_1.auth0ConfigsByEnv[environment].domain;
-        const auth0ClientId = constants_1.auth0ConfigsByEnv[environment].clientId;
+        const auth0Domain = environments_1.auth0ConfigsByEnv[environment].domain;
+        const auth0ClientId = environments_1.auth0ConfigsByEnv[environment].clientId;
         let deviceCodeData = null;
         try {
             const deviceCode = yield axios_1.default.request({
@@ -209,12 +486,13 @@ function loginWithDeviceCode(environment, organizationName, controlPlaneBaseURL,
                 headers: { "content-type": "application/x-www-form-urlencoded" },
                 data: {
                     client_id: auth0ClientId,
-                    audience: constants_1.auth0ConfigsByEnv[environment].audience,
+                    audience: environments_1.auth0ConfigsByEnv[environment].audience,
                     scope: "openid profile email offline_access",
                 },
             });
             deviceCodeData = deviceCode.data;
             logger_1.logger.info(`Please visit the following URL to login ${deviceCode.data.verification_uri_complete} and verify user code ${deviceCode.data.user_code}.`);
+            yield offerBrowser(deviceCode.data.verification_uri_complete);
             logger_1.logger.info("Waiting for login...");
         }
         catch (e) {
@@ -222,6 +500,15 @@ function loginWithDeviceCode(environment, organizationName, controlPlaneBaseURL,
             process.exit(1);
         }
         const startTime = Date.now();
+        // Only the poll is retried. A device code is single-use, so once one
+        // redemption has succeeded, re-POSTing it can never do anything but fail —
+        // and everything after that point (persisting, listing organizations,
+        // verifying the chosen one) is a one-shot. Retrying those was how a
+        // transient failure in the org-less path's `listOrganizations` call ended in
+        // "Login timed out after 5 minutes" and exit 1, five minutes after the
+        // tokens had already been written to disk and the user was, in fact,
+        // logged in.
+        let tokenPayload;
         while (true) {
             try {
                 const accessToken = yield axios_1.default.request({
@@ -234,31 +521,33 @@ function loginWithDeviceCode(environment, organizationName, controlPlaneBaseURL,
                         client_id: auth0ClientId,
                     }),
                 });
-                yield persistTokensAndVerifyOrganization(accessToken.data, organizationName, controlPlaneBaseURL, config);
+                tokenPayload = accessToken.data;
                 break;
             }
             catch (error) {
-                if ((0, axios_1.isAxiosError)(error) &&
-                    ((_b = (_a = error.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.error) !== "authorization_pending") {
-                    const errorData = (_c = error.response) === null || _c === void 0 ? void 0 : _c.data;
-                    if (errorData) {
-                        if (typeof errorData === "string") {
-                            logger_1.logger.error(errorData);
-                        }
-                        else if (errorData.error_description) {
-                            logger_1.logger.error(errorData.error_description);
-                        }
-                        else if (errorData.error) {
-                            logger_1.logger.error(errorData.error);
-                        }
-                        else {
-                            logger_1.logger.error(JSON.stringify(errorData));
-                        }
-                    }
-                    else {
-                        const errorMsg = error instanceof Error ? error.message : String(error);
-                        logger_1.logger.error(errorMsg || "Unknown error occurred");
-                    }
+                // Only Auth0's final answers for this device code stop the loop:
+                // re-POSTing after one of those can only fail again. Anything else —
+                // `authorization_pending`, `slow_down`, a network blip, or a 5xx/429
+                // page from a proxy in front of Auth0 that carries no OAuth error
+                // code — says nothing about the device code, so it retries until the
+                // five-minute clock runs out.
+                const code = (0, axios_1.isAxiosError)(error)
+                    ? (_b = (_a = error.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.error
+                    : undefined;
+                if (code === "authorization_pending" || code === "slow_down") {
+                    // keep polling
+                }
+                else if ((0, axios_1.isAxiosError)(error) &&
+                    error.response &&
+                    FINAL_DEVICE_CODE_ERRORS.has(code)) {
+                    const errorData = error.response.data;
+                    logger_1.logger.error((_c = errorData.error_description) !== null && _c !== void 0 ? _c : errorData.error);
+                    logger_1.logger.error("Login failed. Run `cred login` again.");
+                    process.exit(1);
+                }
+                else {
+                    const errorMsg = error instanceof Error ? error.message : String(error);
+                    logger_1.logger.error(errorMsg || "Unknown error occurred");
                 }
                 if (Date.now() - startTime > constants_1.LOGIN_TIMEOUT_MS) {
                     logger_1.logger.info("Login timed out after 5 minutes");
@@ -267,11 +556,12 @@ function loginWithDeviceCode(environment, organizationName, controlPlaneBaseURL,
                 yield (0, utils_1.sleep)(deviceCodeData.interval * 1000);
             }
         }
+        yield persistTokensAndVerifyOrganization(tokenPayload, organizationName, controlPlaneBaseURL, config);
     });
 }
 function loginM2M(organizationName, config) {
     return __awaiter(this, void 0, void 0, function* () {
-        const auth0Config = constants_1.auth0ConfigsByEnv["e2e-test"];
+        const auth0Config = environments_1.auth0ConfigsByEnv["e2e-test"];
         if (!auth0Config) {
             throw new Error("No environment variables present for e2e");
         }
@@ -283,7 +573,7 @@ function loginM2M(organizationName, config) {
                 data: {
                     grant_type: "client_credentials",
                     client_id: auth0Config.clientId,
-                    client_secret: auth0Config.clientSecret,
+                    client_secret: constants_1.E2E_M2M_CLIENT_SECRET,
                     audience: auth0Config.audience,
                 },
             });

package/dist/commands/misc/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/misc/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,8CAEC;AAED,sBAiCC;AAnED,+CAA4C;AAC5C,2CAAuC;AACvC,6BAAsC;AACtC,0CAAoD;AACpD,8DAA2D;AAC3D,mEAAgE;AAChE,+CAOyB;AACzB,yCAAsC;AACtC,uCAAmD;AACnD,+DAAiD;AAEjD,MAAM,gBAAgB,GAAG,IAAI,sBAAgB,CAAC,IAAI,6BAAa,EAAE,CAAC,CAAC;AAEnE;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,IAAc;IAC7C,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,SAAsB,KAAK,CACxB,gBAAwB,EACxB,mBAA4B,EAC5B,UAAmB,EACnB,OAAiB;;QAEjB,MAAM,MAAM,GAAG,IAAI,yCAAmB,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAE5C,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAA,6CAAiC,EAC1D,gBAAgB,EAChB,OAAO,CACT,CAAC;QACF,IAAI,mBAAmB,EAAE,CAAC;YACvB,OAAO,iCAAiC,CACrC,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,EACN,mBAAmB,CACrB,CAAC;QACL,CAAC;QAED,OAAO,mBAAmB,CACvB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;IACL,CAAC;CAAA;AAED,SAAe,kCAAkC,CAC9C,YAIC,EACD,gBAAwB,EACxB,mBAA2B,EAC3B,MAA2B;;;QAE3B,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAA,sBAAS,EAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACjD,IACG,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,KAAK,IAAI;gBAChB,OAAO,IAAI,OAAO;gBAClB,MAAM,IAAI,OAAO,EAClB,CAAC;gBACA,MAAM,IAAI,GAAG,OAA4C,CAAC;gBAC1D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,eAAe,CACpD,gBAAgB,EAChB;gBACG,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;aAC9B,CACH,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3B,IAAI,gBAAgB,KAAK,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC;oBACjD,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;oBACzC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAChC,CAAC;gBACD,eAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACnC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1D,eAAM,CAAC,IAAI,CACR,mEAAmE;oBAChE,QAAQ,CACb,CAAC;gBACF,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBACzC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC7B,OAAO;YACV,CAAC;YAED,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAA,MAAA,KAAK,CAAC,QAAQ,0CAAE,MAAM,MAAK,GAAG,IAAI,CAAA,MAAA,KAAK,CAAC,QAAQ,0CAAE,MAAM,MAAK,GAAG,EAAE,CAAC;oBACpE,eAAM,CAAC,KAAK,CACT,qBAAqB,gBAAgB,+DAA+D,CACtG,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACf,CAAC;IACJ,CAAC;CAAA;AAED,SAAe,iCAAiC,CAC7C,WAAwB,EACxB,gBAAwB,EACxB,mBAA2B,EAC3B,MAA2B,EAC3B,mBAA2B;;;QAE3B,MAAM,WAAW,GAAG,6BAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,aAAa,GAAG,6BAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAC9D,MAAM,QAAQ,GAAG,6BAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAEzD,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,eAAe,GAAG,IAAI,qBAAe,CAAC;YACzC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,0CAA8B;YAC5C,KAAK,EAAE,qCAAqC;YAC5C,QAAQ;YACR,YAAY,EAAE,mBAAmB;YACjC,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;YAC7B,KAAK;SACP,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG,WAAW,cAAc,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC;QAE9E,IAAI,CAAC;YACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,4BAA4B,CAAC;gBAC/D,WAAW,EAAE,0CAA8B;gBAC3C,aAAa,EAAE,KAAK;gBACpB,YAAY;gBACZ,SAAS,EAAE,4BAAgB;gBAC3B,WAAW,EAAE,GAAG,EAAE;oBACf,eAAM,CAAC,IAAI,CACR,2CAA2C,YAAY,EAAE,CAC3D,CAAC;oBACF,eAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACvC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;gBACvC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,WAAW,cAAc;gBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,qBAAe,CAAC;oBACvB,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,aAAa;oBACxB,IAAI;oBACJ,YAAY,EAAE,0CAA8B;oBAC5C,aAAa,EAAE,YAAY;iBAC7B,CAAC;aACJ,CAAC,CAAC;YAEH,MAAM,kCAAkC,CACrC,aAAa,CAAC,IAAI,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACV,IAAI,IAAA,oBAAY,EAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,MAAA,CAAC,CAAC,QAAQ,0CAAE,IAAI,CAAC;gBAC3B,IACG,OAAO,CAAC,KAAK,QAAQ;oBACrB,CAAC,KAAK,IAAI;oBACV,OAAO,IAAI,CAAC;oBACZ,CAAC,CAAC,KAAK,KAAK,uBAAuB,EACpC,CAAC;oBACA,eAAM,CAAC,KAAK,CACT,4CAA4C,0CAA8B,wDAAwD,CACpI,CAAC;gBACL,CAAC;gBACD,IAAA,qBAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACL,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvD,eAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACJ,CAAC;CAAA;AAED,SAAe,mBAAmB,CAC/B,WAAwB,EACxB,gBAAwB,EACxB,mBAA2B,EAC3B,MAA2B;;;QAE3B,MAAM,WAAW,GAAG,6BAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,aAAa,GAAG,6BAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAC9D,IAAI,cAAc,GAAG,IAAI,CAAC;QAE1B,IAAI,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;gBACpC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,WAAW,oBAAoB;gBACvC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE;oBACH,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE,6BAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ;oBACjD,KAAK,EAAE,qCAAqC;iBAC9C;aACH,CAAC,CAAC;YACH,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;YAEjC,eAAM,CAAC,IAAI,CACR,2CAA2C,UAAU,CAAC,IAAI,CAAC,yBAAyB,yBAAyB,UAAU,CAAC,IAAI,CAAC,SAAS,GAAG,CAC3I,CAAC;YACF,eAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACV,IAAA,qBAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,EAAE,CAAC;YACX,IAAI,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;oBACrC,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,GAAG,WAAW,cAAc;oBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,IAAI,qBAAe,CAAC;wBACvB,UAAU,EAAE,8CAA8C;wBAC1D,WAAW,EAAE,cAAc,CAAC,WAAW;wBACvC,SAAS,EAAE,aAAa;qBAC1B,CAAC;iBACJ,CAAC,CAAC;gBACH,MAAM,kCAAkC,CACrC,WAAW,CAAC,IAAI,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;gBACF,MAAM;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACd,IACG,IAAA,oBAAY,EAAC,KAAK,CAAC;oBACnB,CAAA,MAAA,MAAA,KAAK,CAAC,QAAQ,0CAAE,IAAI,0CAAE,KAAK,MAAK,uBAAuB,EACxD,CAAC;oBACA,MAAM,SAAS,GAAG,MAAA,KAAK,CAAC,QAAQ,0CAAE,IAAI,CAAC;oBACvC,IAAI,SAAS,EAAE,CAAC;wBACb,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;4BACjC,eAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBAC3B,CAAC;6BAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;4BACtC,eAAM,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;wBAC7C,CAAC;6BAAM,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;4BAC1B,eAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBACjC,CAAC;6BAAM,CAAC;4BACL,eAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;wBAC3C,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACL,MAAM,QAAQ,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAC1D,eAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,wBAAwB,CAAC,CAAC;oBACtD,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,4BAAgB,EAAE,CAAC;oBAC7C,eAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;gBAED,MAAM,IAAA,aAAK,EAAC,cAAc,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YAC/C,CAAC;QACJ,CAAC;IACJ,CAAC;CAAA;AAED,SAAe,QAAQ,CACpB,gBAAwB,EACxB,MAA2B;;QAE3B,MAAM,WAAW,GAAG,6BAAiB,CAAC,UAAU,CAAC,CAAC;QAElD,IAAI,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,cAAc;gBACxC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE;oBACH,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,WAAW,CAAC,QAAQ;oBAC/B,aAAa,EAAE,WAAW,CAAC,YAAY;oBACvC,QAAQ,EAAE,WAAW,CAAC,QAAQ;iBAChC;aACH,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;YAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACV,IAAA,qBAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACJ,CAAC;CAAA"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/misc/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,8CAEC;AAkBD,gDAgEC;AAOD,0CAQC;AAED,sBAoIC;AAyCD,kDAuDC;AA9XD,+CAA4C;AAC5C,2CAAuC;AACvC,6BAAsC;AACtC,0CAAoD;AACpD,8DAA2D;AAC3D,mEAAgE;AAChE,+CAIyB;AACzB,sEAAsE;AACtE,0EAA0E;AAC1E,4EAA4E;AAC5E,gEAQuC;AACvC,yCAAsC;AACtC,sDAA6D;AAC7D,uCAKqB;AACrB,+DAAiD;AACjD,uDAAyC;AAEzC,MAAM,gBAAgB,GAAG,IAAI,sBAAgB,CAAC,IAAI,6BAAa,EAAE,CAAC,CAAC;AASnE;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,IAAc;IAC7C,OAAO,IAAA,sBAAc,EAAC,IAAI,CAAC,KAAK,OAAO,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,kBAAkB,CAC/B,UAAuB,EACvB,gBAAyB,EACzB,gBAAyB,EACzB,UAAgC,EAAE;;IAElC,MAAM,SAAS,GAAG,gBAAgB;QAC/B,CAAC,CAAC,IAAA,8BAAe,EAAC,gBAAgB,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC;IAEf,IAAI,OAAgB,CAAC;IACrB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACZ,4BAA4B,gBAAgB,4BAA4B,CAC1E,CAAC;QACL,CAAC;QACD,OAAO,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,GAAG,qCAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACpB,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC;IACtC,CAAC;SAAM,CAAC;QACL,OAAO,GAAG,qCAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,yEAAyE;IACzE,sBAAsB;IACtB,IAAI,gBAAgB,EAAE,CAAC;QACpB,MAAM,iBAAiB,GAAc,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,iBAAiB,mCAAI;YAClE,KAAK;SACP,CAAC;QACF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACZ,iBAAiB,gBAAgB,6BAA6B,OAAO,WAAW,CAClF,CAAC;QACL,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC5B,yEAAyE;QACzE,iEAAiE;QACjE,sEAAsE;QACtE,wEAAwE;QACxE,0CAA0C;QAC1C,EAAE;QACF,uEAAuE;QACvE,uDAAuD;QACvD,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,wDAAwD;QACxD,MAAM,IAAI,KAAK,CACZ,6JAA6J,CAC/J,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,SAAS,GACZ,qCAAsB,CAAC,UAAU,CAAC,KAAK,OAAO;QAC3C,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,6CAA8B,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAC5B,IAAiB,EACjB,OAAwE;IAExE,IAAI,IAAI,KAAK,OAAO,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,CAAC,+BAA+B,OAAO,CAAC,UAAU,iBAAiB,IAAI,wDAAwD,IAAI,UAAU;QAC9I,CAAC,CAAC,6BAA6B,OAAO,CAAC,UAAU,iBAAiB,IAAI,4CAA4C,IAAI,KAAK,CAAC;AAClI,CAAC;AAED,SAAsB,KAAK;yDACxB,gBAAoC,EACpC,mBAA4B,EAC5B,UAAmB,EACnB,OAAiB;IACjB,6EAA6E;IAC7E,wEAAwE;IACxE,qEAAqE;IACrE,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,UAAwB,EACxB,UAGI,EAAE;QAEN,MAAM,MAAM,GAAG,IAAI,yCAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAE5C,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACrB,eAAM,CAAC,KAAK,CACT,kKAAkK,CACpK,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,mBAAmB,GAAG,gBAAgB;YACzC,CAAC,CAAC,IAAA,gDAAiC,EAAC,gBAAgB,EAAE,OAAO,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QAEf,IAAI,mBAAmB,EAAE,CAAC;YACvB,OAAO,iCAAiC,CACrC,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,EACN,mBAAmB,CACrB,CAAC;QACL,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,uCAAuC;QACvC,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,iEAAiE;QACjE,EAAE;QACF,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,8CAA8C;QAC9C,IACG,CAAC,OAAO,CAAC,KAAK;YACd,gBAAgB;YAChB,mBAAmB;YACnB,CAAC,MAAM,CAAC,qBAAqB,EAAE;YAC/B,MAAM,CAAC,eAAe,EAAE,EACzB,CAAC;YACA,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAiB,EAAC,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC;YACzC,MAAM,SAAS,GACZ,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC;YAC/D,IAAI,SAAS,EAAE,CAAC;gBACb,eAAM,CAAC,IAAI,CACR,GAAG,OAAO,CAAC,MAAM,2DAA2D,CAC9E,CAAC;YACL,CAAC;YACD,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACtC,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,EACN;wBACG,QAAQ,EAAE,KAAK;qBACjB,CACH,CAAC;oBACF,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;oBACrC,OAAO,CAAC,GAAG,CACR,GACG,QAAQ;wBACL,CAAC,CAAC,wBAAwB,IAAI,yBAAyB,gBAAgB,4BAA4B;wBACnG,CAAC,CAAC,wBAAwB,IAAI,SAAS,gBAAgB,6BAC7D,4CAA4C,CAC9C,CAAC;oBACF,OAAO;gBACV,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACd,4DAA4D;oBAC5D,+DAA+D;oBAC/D,gEAAgE;oBAChE,0CAA0C;oBAC1C,eAAM,CAAC,IAAI,CACR,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CACtH,CAAC;gBACL,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACxD,qEAAqE;gBACrE,wEAAwE;gBACxE,sEAAsE;gBACtE,qEAAqE;gBACrE,kDAAkD;gBAClD,eAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC1C,qEAAqE;gBACrE,iBAAiB;gBACjB,eAAM,CAAC,IAAI,CACR,mEAAmE,CACrE,CAAC;YACL,CAAC;iBAAM,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC9B,eAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,oBAAoB,CAAC,CAAC;YACtD,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,2CAA2C;QAC3C,OAAO,mBAAmB,CACvB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;IACL,CAAC;CAAA;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACnB,YAA+B,EAC/B,MAA2B;IAE3B,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAA,sBAAS,EAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjD,IACG,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,OAAO,IAAI,OAAO;YAClB,MAAM,IAAI,OAAO,EAClB,CAAC;YACA,MAAM,IAAI,GAAG,OAA4C,CAAC;YAC1D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC;QACjB,WAAW,EAAE,YAAY,CAAC,YAAY;QACtC,OAAO,EAAE,YAAY,CAAC,QAAQ;QAC9B,YAAY,EAAE,YAAY,CAAC,aAAa;KAC1C,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,SAAsB,mBAAmB;yDACtC,gBAAoC,EACpC,mBAA2B,EAC3B,MAA2B;IAC3B,8EAA8E;IAC9E,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,GAAG,wHAAwH;;QAE/H,IAAI,gBAAgB,EAAE,CAAC;YACpB,OAAO,gBAAgB,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CACtD,SAAS,EACT,SAAS,EACT,SAAS,EACT;YACG,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;SAC9B,CACH,CAAC;QAEF,sEAAsE;QACtE,6EAA6E;QAC7E,MAAM,KAAK,GAA6C,EAAE,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,MAAA,QAAQ,CAAC,IAAI,mCAAI,EAAE,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAChE,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,eAAM,CAAC,KAAK,CACT,iIAAiI,CACnI,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,IAAA,sBAAc,EAClB,qBAAqB,EACrB,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjB,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;YACrE,KAAK,EAAE,GAAG,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,qEAAqE;QACrE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,mEAAmE;QACnE;YACG,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;SACvC,CACH,CAAC;IACL,CAAC;CAAA;AAED,SAAe,kCAAkC,CAC9C,YAA+B,EAC/B,gBAAoC,EACpC,mBAA2B,EAC3B,MAA2B;;QAE3B,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAEpC,MAAM,oBAAoB,GAAG,MAAM,mBAAmB,CACnD,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;QACF,MAAM,kBAAkB,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;CAAA;AAED;;;GAGG;AACH,SAAe,kBAAkB;yDAC9B,oBAA4B,EAC5B,mBAA2B,EAC3B,MAA2B;IAC3B,2DAA2D;IAC3D,UAAkC,EAAE;;QAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,eAAe,CACpD,oBAAoB,EACpB;gBACG,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;aAC9B,CACH,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3B,IAAI,oBAAoB,KAAK,QAAQ,EAAE,CAAC;oBACrC,MAAM,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;oBAC7C,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAChC,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBAC9B,OAAO,CAAC,GAAG,CACR,kCAAkC,oBAAoB,OAAO,MAAM,CAAC,cAAc,EAAE,GAAG,CACzF,CAAC;gBACL,CAAC;YACJ,CAAC;YACD,OAAO,oBAAoB,KAAK,QAAQ,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1D,eAAM,CAAC,IAAI,CACR,mEAAmE;oBAChE,QAAQ,CACb,CAAC;gBACF,MAAM,OAAO,GAAG,oBAAoB,KAAK,QAAQ,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACX,MAAM,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;oBAC7C,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAChC,CAAC;gBACD,OAAO,OAAO,CAAC;YAClB,CAAC;YAED,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAA,MAAA,KAAK,CAAC,QAAQ,0CAAE,MAAM,MAAK,GAAG,IAAI,CAAA,MAAA,KAAK,CAAC,QAAQ,0CAAE,MAAM,MAAK,GAAG,EAAE,CAAC;oBACpE,eAAM,CAAC,KAAK,CACT,qBAAqB,oBAAoB,+DAA+D,CAC1G,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACf,CAAC;IACJ,CAAC;CAAA;AAED,SAAe,iCAAiC,CAC7C,WAAwB,EACxB,gBAAwB,EACxB,mBAA2B,EAC3B,MAA2B,EAC3B,mBAA2B;;;QAE3B,MAAM,WAAW,GAAG,gCAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,aAAa,GAAG,gCAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAC9D,MAAM,QAAQ,GAAG,gCAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAEzD,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;QAEjD,MAAM,eAAe,GAAG,IAAI,qBAAe,CAAC;YACzC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,0CAA8B;YAC5C,KAAK,EAAE,qCAAqC;YAC5C,QAAQ;YACR,YAAY,EAAE,mBAAmB;YACjC,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;YAC7B,KAAK;SACP,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG,WAAW,cAAc,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC;QAE9E,IAAI,CAAC;YACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,4BAA4B,CAAC;gBAC/D,WAAW,EAAE,0CAA8B;gBAC3C,aAAa,EAAE,KAAK;gBACpB,YAAY;gBACZ,SAAS,EAAE,4BAAgB;gBAC3B,WAAW,EAAE,GAAG,EAAE;oBACf,eAAM,CAAC,IAAI,CACR,2CAA2C,YAAY,EAAE,CAC3D,CAAC;oBACF,KAAK,YAAY,CAAC,YAAY,CAAC,CAAC;oBAChC,eAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACvC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;gBACvC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,WAAW,cAAc;gBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,qBAAe,CAAC;oBACvB,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,aAAa;oBACxB,IAAI;oBACJ,YAAY,EAAE,0CAA8B;oBAC5C,aAAa,EAAE,YAAY;iBAC7B,CAAC;aACJ,CAAC,CAAC;YAEH,MAAM,kCAAkC,CACrC,aAAa,CAAC,IAAI,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACV,IAAI,IAAA,oBAAY,EAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,MAAA,CAAC,CAAC,QAAQ,0CAAE,IAAI,CAAC;gBAC3B,IACG,OAAO,CAAC,KAAK,QAAQ;oBACrB,CAAC,KAAK,IAAI;oBACV,OAAO,IAAI,CAAC;oBACZ,CAAC,CAAC,KAAK,KAAK,uBAAuB,EACpC,CAAC;oBACA,eAAM,CAAC,KAAK,CACT,4CAA4C,0CAA8B,wDAAwD,CACpI,CAAC;gBACL,CAAC;gBACD,IAAA,qBAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACL,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvD,eAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACJ,CAAC;CAAA;AAED;;;;GAIG;AACH,SAAe,YAAY,CAAC,GAAW;;QACpC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE;YAAE,OAAO;QACzC,IAAI,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,eAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAClD,CAAC;IACJ,CAAC;CAAA;AAED;;;GAGG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAU;IAC/C,eAAe;IACf,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,wBAAwB;CAC1B,CAAC,CAAC;AAEH,SAAe,mBAAmB,CAC/B,WAAwB,EACxB,gBAAoC,EACpC,mBAA2B,EAC3B,MAA2B;;;QAE3B,MAAM,WAAW,GAAG,gCAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,aAAa,GAAG,gCAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAC9D,IAAI,cAAc,GAAG,IAAI,CAAC;QAE1B,IAAI,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;gBACpC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,WAAW,oBAAoB;gBACvC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE;oBACH,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE,gCAAiB,CAAC,WAAW,CAAC,CAAC,QAAQ;oBACjD,KAAK,EAAE,qCAAqC;iBAC9C;aACH,CAAC,CAAC;YACH,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;YAEjC,eAAM,CAAC,IAAI,CACR,2CAA2C,UAAU,CAAC,IAAI,CAAC,yBAAyB,yBAAyB,UAAU,CAAC,IAAI,CAAC,SAAS,GAAG,CAC3I,CAAC;YACF,MAAM,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC9D,eAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACV,IAAA,qBAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,qEAAqE;QACrE,2EAA2E;QAC3E,sEAAsE;QACtE,oEAAoE;QACpE,6EAA6E;QAC7E,uEAAuE;QACvE,qEAAqE;QACrE,aAAa;QACb,IAAI,YAA+B,CAAC;QACpC,OAAO,IAAI,EAAE,CAAC;YACX,IAAI,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;oBACrC,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,GAAG,WAAW,cAAc;oBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,IAAI,qBAAe,CAAC;wBACvB,UAAU,EAAE,8CAA8C;wBAC1D,WAAW,EAAE,cAAc,CAAC,WAAW;wBACvC,SAAS,EAAE,aAAa;qBAC1B,CAAC;iBACJ,CAAC,CAAC;gBACH,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC;gBAChC,MAAM;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACd,iEAAiE;gBACjE,qEAAqE;gBACrE,qEAAqE;gBACrE,kEAAkE;gBAClE,qEAAqE;gBACrE,8BAA8B;gBAC9B,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,KAAK,CAAC;oBAC7B,CAAC,CAAC,MAAA,MAAA,KAAK,CAAC,QAAQ,0CAAE,IAAI,0CAAE,KAAK;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACf,IAAI,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC5D,eAAe;gBAClB,CAAC;qBAAM,IACJ,IAAA,oBAAY,EAAC,KAAK,CAAC;oBACnB,KAAK,CAAC,QAAQ;oBACd,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EACnC,CAAC;oBACA,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACtC,eAAM,CAAC,KAAK,CAAC,MAAA,SAAS,CAAC,iBAAiB,mCAAI,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC7D,eAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;oBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACL,MAAM,QAAQ,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC1D,eAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,wBAAwB,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,4BAAgB,EAAE,CAAC;oBAC7C,eAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;gBAED,MAAM,IAAA,aAAK,EAAC,cAAc,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YAC/C,CAAC;QACJ,CAAC;QAED,MAAM,kCAAkC,CACrC,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,CACR,CAAC;IACL,CAAC;CAAA;AAED,SAAe,QAAQ,CACpB,gBAAwB,EACxB,MAA2B;;QAE3B,MAAM,WAAW,GAAG,gCAAiB,CAAC,UAAU,CAAC,CAAC;QAElD,IAAI,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,cAAc;gBACxC,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE;oBACH,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,WAAW,CAAC,QAAQ;oBAC/B,aAAa,EAAE,iCAAqB;oBACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ;iBAChC;aACH,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;YAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACV,IAAA,qBAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACJ,CAAC;CAAA"}