@de-otio/trellis 0.4.0

package/dist/lib/encryption-key-service.js

@@ -0,0 +1,272 @@
+"use strict";
+/**
+ * EncryptionKeyService
+ *
+ * Manages UserEncryptionKey records for Border Safety Mode and Encrypted DM.
+ * Provides unified key management using the shared cryptographic library.
+ *
+ * Features:
+ * - Key creation and retrieval
+ * - Key derivation from passwords (using shared crypto library)
+ * - Key rotation support
+ * - Multiple key types (border_safety, e2e_messages)
+ * - Multiple key purposes (data_encryption, backup, export, message_encryption)
+ *
+ * @see packages/crypto for shared cryptographic operations
+ * @see doc/02-technical/architecture/cryptography/ for design documentation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionKeyService = void 0;
+const index_js_1 = require("./crypto/index.js");
+const logger_1 = require("./logger");
+/**
+ * EncryptionKeyService class for managing user encryption keys
+ */
+class EncryptionKeyService {
+    prisma;
+    logger;
+    constructor(prisma, env) {
+        this.prisma = prisma;
+        this.logger = logger_1.Logger.getInstance(env);
+    }
+    /**
+     * Get or create an encryption key for a user
+     *
+     * If a key with the same userId, contextId, keyPurpose, and keyType exists,
+     * it is returned. Otherwise, a new key is created.
+     *
+     * Note: This method does NOT derive the key from a password. The key material
+     * should be derived client-side and passed as encryptedKey (encrypted with
+     * the user's password-derived key).
+     *
+     * @param userId - User ID
+     * @param contextId - Context ID ('primary' or 'decoy')
+     * @param keyPurpose - Key purpose ('data_encryption', 'backup', 'export', 'message_encryption')
+     * @param keyType - Key type ('border_safety' or 'e2e_messages')
+     * @param encryptedKey - Encrypted key material (encrypted with user's password-derived key)
+     * @param kdfParams - Key derivation parameters (JSON string)
+     * @param algorithm - Encryption algorithm (default: 'AES-256-GCM')
+     * @returns UserEncryptionKey record
+     * @throws Error if key creation fails
+     */
+    async getOrCreateKey(userId, contextId, keyPurpose, keyType, encryptedKey, kdfParams, algorithm = "AES-256-GCM") {
+        try {
+            // Try to find existing key
+            const existing = await this.prisma.userEncryptionKey.findUnique({
+                where: {
+                    userId_contextId_keyPurpose_keyType: {
+                        userId,
+                        contextId,
+                        keyPurpose,
+                        keyType,
+                    },
+                },
+            });
+            if (existing) {
+                this.logger.debug("Encryption key found", {
+                    keyId: existing.id,
+                    userId,
+                    contextId,
+                    keyPurpose,
+                    keyType,
+                });
+                return existing;
+            }
+            // Create new key
+            const newKey = await this.prisma.userEncryptionKey.create({
+                data: {
+                    userId,
+                    contextId,
+                    keyPurpose,
+                    keyType,
+                    encryptedKey,
+                    kdfParams,
+                    algorithm,
+                },
+            });
+            this.logger.info("Encryption key created", {
+                keyId: newKey.id,
+                userId,
+                contextId,
+                keyPurpose,
+                keyType,
+            });
+            return newKey;
+        }
+        catch (error) {
+            this.logger.error("Failed to get or create encryption key", {
+                userId,
+                contextId,
+                keyPurpose,
+                keyType,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to get or create encryption key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Derive encryption key from password using shared cryptographic library
+     *
+     * This is a convenience method that uses EncryptionService.deriveKey().
+     * The derived key is a CryptoKey and cannot be exported (for security).
+     *
+     * @param password - Password to derive key from
+     * @param salt - Salt (base64-encoded, minimum 128 bits / 16 bytes)
+     * @param kdfParams - Key derivation parameters
+     * @returns CryptoKey for AES-256-GCM
+     * @throws Error if key derivation fails
+     */
+    async deriveKeyFromPassword(password, salt, kdfParams) {
+        try {
+            return await index_js_1.EncryptionService.deriveKey(password, salt, kdfParams);
+        }
+        catch (error) {
+            this.logger.error("Failed to derive key from password", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to derive key from password: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Rotate an encryption key
+     *
+     * Updates the key record with new encrypted key material and sets rotatedAt timestamp.
+     * The old key material is replaced (not kept for backward compatibility).
+     *
+     * @param keyId - Key ID to rotate
+     * @param newEncryptedKey - New encrypted key material
+     * @param newKdfParams - New KDF parameters (optional, if key derivation changed)
+     * @returns Updated UserEncryptionKey record
+     * @throws Error if key rotation fails
+     */
+    async rotateKey(keyId, newEncryptedKey, newKdfParams) {
+        try {
+            const existing = await this.prisma.userEncryptionKey.findUnique({
+                where: { id: keyId },
+            });
+            if (!existing) {
+                throw new Error(`Encryption key not found: ${keyId}`);
+            }
+            const updated = await this.prisma.userEncryptionKey.update({
+                where: { id: keyId },
+                data: {
+                    encryptedKey: newEncryptedKey,
+                    kdfParams: newKdfParams ?? existing.kdfParams,
+                    rotatedAt: new Date(),
+                },
+            });
+            this.logger.info("Encryption key rotated", {
+                keyId,
+                userId: existing.userId,
+                rotatedAt: updated.rotatedAt,
+            });
+            return updated;
+        }
+        catch (error) {
+            this.logger.error("Failed to rotate encryption key", {
+                keyId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to rotate encryption key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Get encryption key by type for a user
+     *
+     * Returns the first key matching the userId and keyType.
+     * If multiple keys exist (different contexts or purposes), use getKeysByUser().
+     *
+     * @param userId - User ID
+     * @param keyType - Key type ('border_safety' or 'e2e_messages')
+     * @returns UserEncryptionKey or null if not found
+     */
+    async getKeyByType(userId, keyType) {
+        try {
+            const key = await this.prisma.userEncryptionKey.findFirst({
+                where: {
+                    userId,
+                    keyType,
+                },
+            });
+            return key;
+        }
+        catch (error) {
+            this.logger.error("Failed to get key by type", {
+                userId,
+                keyType,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to get key by type: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Get all encryption keys for a user
+     *
+     * @param userId - User ID
+     * @returns Array of UserEncryptionKey records
+     */
+    async getKeysByUser(userId) {
+        try {
+            const keys = await this.prisma.userEncryptionKey.findMany({
+                where: {
+                    userId,
+                },
+                orderBy: {
+                    createdAt: "desc",
+                },
+            });
+            return keys;
+        }
+        catch (error) {
+            this.logger.error("Failed to get keys by user", {
+                userId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to get keys by user: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Get encryption key by ID
+     *
+     * @param keyId - Key ID
+     * @returns UserEncryptionKey or null if not found
+     */
+    async getKeyById(keyId) {
+        try {
+            const key = await this.prisma.userEncryptionKey.findUnique({
+                where: { id: keyId },
+            });
+            return key;
+        }
+        catch (error) {
+            this.logger.error("Failed to get key by ID", {
+                keyId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to get key by ID: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Delete an encryption key
+     *
+     * @param keyId - Key ID
+     * @throws Error if key deletion fails
+     */
+    async deleteKey(keyId) {
+        try {
+            await this.prisma.userEncryptionKey.delete({
+                where: { id: keyId },
+            });
+            this.logger.info("Encryption key deleted", { keyId });
+        }
+        catch (error) {
+            this.logger.error("Failed to delete encryption key", {
+                keyId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error(`Failed to delete encryption key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+exports.EncryptionKeyService = EncryptionKeyService;
+//# sourceMappingURL=encryption-key-service.js.map

package/dist/lib/encryption-key-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-key-service.js","sourceRoot":"","sources":["../../src/lib/encryption-key-service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAGH,gDAAsD;AAEtD,qCAAkD;AAgBlD;;GAEG;AACH,MAAa,oBAAoB;IAIrB;IAHF,MAAM,CAAS;IAEvB,YACU,MAAoB,EAC5B,GAAe;QADP,WAAM,GAAN,MAAM,CAAc;QAG5B,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,cAAc,CAClB,MAAc,EACd,SAAiB,EACjB,UAAsB,EACtB,OAAgB,EAChB,YAAoB,EACpB,SAAiB,EACjB,YAAoB,aAAa;QAEjC,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAC9D,KAAK,EAAE;oBACL,mCAAmC,EAAE;wBACnC,MAAM;wBACN,SAAS;wBACT,UAAU;wBACV,OAAO;qBACR;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBACxC,KAAK,EAAE,QAAQ,CAAC,EAAE;oBAClB,MAAM;oBACN,SAAS;oBACT,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,iBAAiB;YACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACxD,IAAI,EAAE;oBACJ,MAAM;oBACN,SAAS;oBACT,UAAU;oBACV,OAAO;oBACP,YAAY;oBACZ,SAAS;oBACT,SAAS;iBACV;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,KAAK,EAAE,MAAM,CAAC,EAAE;gBAChB,MAAM;gBACN,SAAS;gBACT,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBAC1D,MAAM;gBACN,SAAS;gBACT,UAAU;gBACV,OAAO;gBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,qBAAqB,CACzB,QAAgB,EAChB,IAAY,EACZ,SAAoB;QAEpB,IAAI,CAAC;YACH,OAAO,MAAM,4BAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CACb,KAAa,EACb,eAAuB,EACvB,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAC9D,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACzD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;gBACpB,IAAI,EAAE;oBACJ,YAAY,EAAE,eAAe;oBAC7B,SAAS,EAAE,YAAY,IAAI,QAAQ,CAAC,SAAS;oBAC7C,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,KAAK;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBACnD,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,OAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC;gBACxD,KAAK,EAAE;oBACL,MAAM;oBACN,OAAO;iBACR;aACF,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBAC7C,MAAM;gBACN,OAAO;gBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC;gBACxD,KAAK,EAAE;oBACL,MAAM;iBACP;gBACD,OAAO,EAAE;oBACP,SAAS,EAAE,MAAM;iBAClB;aACF,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBAC9C,MAAM;gBACN,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBACzD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACrB,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBAC3C,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACzC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBACnD,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AApSD,oDAoSC"}

package/dist/lib/entity-handler.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Entity Profile Handlers
+ *
+ * Handlers for creating and retrieving entity profiles.
+ * Replaces DogHandler for white-label support.
+ *
+ * Feature Flag: entity_profiles_enabled
+ *
+ * Why the feature flag exists:
+ * - Part of white-label architecture preparation - allows per-tenant feature customization
+ * - Enables gradual rollout of entity profiles feature
+ * - Allows disabling the feature if issues are discovered
+ * - Supports subscription-tier based feature access (future)
+ * - Provides safety mechanism during development/testing phases
+ */
+import { type LoggerEnv } from "./logger";
+import type { RequestContext } from "./request-context";
+import type { Session } from "./session-manager";
+import type { Env } from "../env";
+/**
+ * Entity Handler class for managing entity profiles
+ */
+export declare class EntityHandler {
+    private idGenerator;
+    private validator;
+    private logger;
+    constructor(env?: LoggerEnv);
+    /**
+     * Calculate and update life stage for an entity
+     * This is a helper function that can be called when creating/updating entities
+     * @param metadata - Entity metadata containing birthdate and breedSize
+     * @param lifeStageManualOverride - Whether manual override is set
+     * @param existingLifeStage - Existing life stage (if updating)
+     * @returns Life stage taxon ID or null
+     */
+    private calculateEntityLifeStage;
+    /**
+     * Create or update an entity profile
+     */
+    createEntityProfile(request: Request, session: Session, env: Env): Promise<Response>;
+    /**
+     * Get an entity profile by ID
+     */
+    getEntityProfile(entityId: string, session: Session, env: Env, request?: Request): Promise<Response>;
+    /**
+     * Update an entity profile
+     */
+    updateEntityProfile(entityId: string, request: Request, session: Session, env: Env): Promise<Response>;
+    /**
+     * List user's entity profiles
+     * Returns entities owned by the user for tagging in posts
+     */
+    listEntityProfiles(session: Session, env: Env, request?: Request, requestContext?: RequestContext): Promise<Response>;
+    /**
+     * Delete an entity profile
+     */
+    deleteEntityProfile(entityId: string, session: Session, env: Env): Promise<Response>;
+}
+//# sourceMappingURL=entity-handler.d.ts.map

package/dist/lib/entity-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-handler.d.ts","sourceRoot":"","sources":["../../src/lib/entity-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAKjD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,CAAC,EAAE,SAAS;IAM3B;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAWhC;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;IA6QpB;;OAEG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,QAAQ,CAAC;IA8JpB;;OAEG;IACG,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;IA6VpB;;;OAGG;IACG,kBAAkB,CACtB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,OAAO,CAAC,EAAE,OAAO,EACjB,cAAc,CAAC,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAgHpB;;OAEG;IACG,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;CA6LrB"}