@decaf-ts/for-fabric 0.5.6 → 0.7.0

package/lib/cjs/client/services/FabricEnrollmentService.cjs

@@ -0,0 +1,363 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FabricEnrollmentService = exports.HFCAIdentityAttributes = exports.HFCAIdentityType = void 0;
+const fabric_ca_client_1 = __importDefault(require("fabric-ca-client"));
+const Identity_1 = require("./../../shared/model/Identity.cjs");
+const core_1 = require("@decaf-ts/core");
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const utils_1 = require("./../utils.cjs");
+const crypto_1 = require("./../crypto.cjs");
+const errors_1 = require("./../../shared/errors.cjs");
+const logging_1 = require("@decaf-ts/logging");
+/**
+ * @description Hyperledger Fabric CA identity types.
+ * @summary Enumerates the supported identity types recognized by Fabric CA for registration and identity management.
+ * @enum {string}
+ * @readonly
+ * @memberOf module:for-fabric.client
+ */
+var HFCAIdentityType;
+(function (HFCAIdentityType) {
+    HFCAIdentityType["PEER"] = "peer";
+    HFCAIdentityType["ORDERER"] = "orderer";
+    HFCAIdentityType["CLIENT"] = "client";
+    HFCAIdentityType["USER"] = "user";
+    HFCAIdentityType["ADMIN"] = "admin";
+})(HFCAIdentityType || (exports.HFCAIdentityType = HFCAIdentityType = {}));
+/**
+ * @description Standard Fabric CA identity attribute keys.
+ * @summary Enumerates well-known Fabric CA attribute keys that can be assigned to identities for delegations and permissions.
+ * @enum {string}
+ * @readonly
+ * @memberOf module:for-fabric.client
+ */
+var HFCAIdentityAttributes;
+(function (HFCAIdentityAttributes) {
+    HFCAIdentityAttributes["HFREGISTRARROLES"] = "hf.Registrar.Roles";
+    HFCAIdentityAttributes["HFREGISTRARDELEGATEROLES"] = "hf.Registrar.DelegateRoles";
+    HFCAIdentityAttributes["HFREGISTRARATTRIBUTES"] = "hf.Registrar.Attributes";
+    HFCAIdentityAttributes["HFINTERMEDIATECA"] = "hf.IntermediateCA";
+    HFCAIdentityAttributes["HFREVOKER"] = "hf.Revoker";
+    HFCAIdentityAttributes["HFAFFILIATIONMGR"] = "hf.AffiliationMgr";
+    HFCAIdentityAttributes["HFGENCRL"] = "hf.GenCRL";
+})(HFCAIdentityAttributes || (exports.HFCAIdentityAttributes = HFCAIdentityAttributes = {}));
+/**
+ * @description Service wrapper for interacting with a Fabric CA.
+ * @summary Provides high-level operations for managing identities against a Hyperledger Fabric Certificate Authority, including registration, enrollment, revocation, and administrative queries. Encapsulates lower-level Fabric CA client calls with consistent logging and error mapping.
+ * @param {CAConfig} caConfig - Connection and TLS configuration for the target CA.
+ * @class FabricEnrollmentService
+ * @example
+ * // Register and enroll a new user
+ * const svc = new FabricEnrollmentService({
+ *   url: 'https://localhost:7054',
+ *   caName: 'Org1CA',
+ *   tls: { trustedRoots: ['/path/to/ca.pem'], verify: false },
+ *   caCert: '/path/to/admin/certDir',
+ *   caKey: '/path/to/admin/keyDir'
+ * });
+ * await svc.register({ userName: 'alice', password: 's3cr3t' }, false, 'org1.department1', CA_ROLE.USER);
+ * const id = await svc.enroll('alice', 's3cr3t');
+ * @mermaid
+ * sequenceDiagram
+ *   autonumber
+ *   participant App
+ *   participant Svc as FabricEnrollmentService
+ *   participant CA as Fabric CA
+ *   App->>Svc: register(credentials, ...)
+ *   Svc->>CA: register(request, adminUser)
+ *   CA-->>Svc: enrollmentSecret
+ *   Svc-->>App: secret
+ *   App->>Svc: enroll(enrollmentId, secret)
+ *   Svc->>CA: enroll({enrollmentID, secret})
+ *   CA-->>Svc: certificates
+ *   Svc-->>App: Identity
+ */
+class FabricEnrollmentService extends logging_1.LoggedClass {
+    constructor(caConfig) {
+        utils_1.CoreUtils.getCryptoSuite(caConfig.hsm
+            ? {
+                software: false,
+                lib: caConfig.hsm.library,
+                slot: caConfig.hsm.slot,
+                label: caConfig.hsm.tokenLabel,
+                pin: String(caConfig.hsm.pin),
+            }
+            : undefined);
+        super();
+        this.caConfig = caConfig;
+    }
+    async User() {
+        if (this.user)
+            return this.user;
+        const { caName, caCert, caKey, url, hsm } = this.caConfig;
+        const log = this.log.for(this.User);
+        log.debug(`Creating CA user for ${caName} at ${url}`);
+        log.debug(`Retrieving CA certificate from ${caCert}`);
+        const certificate = await utils_1.CoreUtils.getFirstDirFileNameContent(caCert);
+        let key;
+        if (!hsm) {
+            if (!caKey) {
+                throw new db_decorators_1.InternalError(`Missing caKey configuration for CA ${caName}. Provide a key directory or configure HSM support.`);
+            }
+            log.debug(`Retrieving CA key from ${caKey}`);
+            key = await utils_1.CoreUtils.getFirstDirFileNameContent(caKey);
+        }
+        else {
+            log.debug(`Using HSM configuration for CA ${caName} with library ${hsm.library}`);
+        }
+        log.debug(`Loading Admin user for ca ${caName}`);
+        this.user = await utils_1.CoreUtils.getCAUser("admin", key, certificate, caName, {
+            hsm,
+        });
+        return this.user;
+    }
+    async CA() {
+        if (this.ca)
+            return this.ca;
+        const log = this.log.for(this.CA);
+        const { url, tls, caName } = this.caConfig;
+        // FOR Some Reason the verification fails need to investigate this works for now
+        // eslint-disable-next-line prefer-const
+        let { trustedRoots, verify } = tls;
+        const root = trustedRoots[0];
+        log.debug(`Retrieving CA certificate from ${root}. cwd: ${process.cwd()}`);
+        const certificate = await utils_1.CoreUtils.getFileContent(root);
+        log.debug(`Creating CA Client for CA ${caName} under ${url}`);
+        this.ca = new fabric_ca_client_1.default(url, {
+            trustedRoots: Buffer.from(certificate),
+            verify,
+        }, caName);
+        return this.ca;
+    }
+    async Client() {
+        if (this.client)
+            return this.client;
+        const ca = await this.CA();
+        this.client = ca["_FabricCAServices"];
+        return this.client;
+    }
+    async Certificate() {
+        if (!this.certificateService)
+            this.certificateService = (await this.Client()).newCertificateService();
+        return this.certificateService;
+    }
+    async Affiliations() {
+        if (!this.affiliationService)
+            this.affiliationService = (await this.CA()).newAffiliationService();
+        return this.affiliationService;
+    }
+    async Identities() {
+        if (!this.identityService)
+            this.identityService = (await this.CA()).newIdentityService();
+        return this.identityService;
+    }
+    /**
+     * @description Retrieve certificates from the CA.
+     * @summary Calls the CA certificate service to list certificates, optionally mapping to PEM strings only.
+     * @param {GetCertificatesRequest} [request] - Optional filter request for certificate lookup.
+     * @param {boolean} [doMap=true] - When true, returns array of PEM strings; otherwise returns full response object.
+     * @return {Promise<string[] | CertificateResponse>} Array of PEM strings or the full certificate response.
+     */
+    async getCertificates(request, doMap = true) {
+        const certificateService = await this.Certificate();
+        const user = await this.User();
+        const log = this.log.for(this.getCertificates);
+        log.debug(`Retrieving certificates${request ? ` for ${request.id}` : ""} for CA ${this.caConfig.caName}`);
+        const response = (await certificateService.getCertificates(request || {}, user)).result;
+        log.debug(`Found ${response.certs.length} certificates: ${JSON.stringify(response)}`);
+        return doMap ? response.certs.map((c) => c.PEM) : response;
+    }
+    /**
+     * @description List identities registered in the CA.
+     * @summary Queries the CA identity service to fetch all identities and returns the list as FabricIdentity objects.
+     * @return {Promise<FabricIdentity[]>} The list of identities registered in the CA.
+     */
+    async getIdentities() {
+        const identitiesService = await this.Identities();
+        const log = this.log.for(this.getIdentities);
+        log.debug(`Retrieving Identities under CA ${this.caConfig.caName}`);
+        const response = (await identitiesService.getAll(await this.User())).result;
+        log.debug(`Found ${response.identities.length} Identities: ${JSON.stringify(response)}`);
+        return response.identities;
+    }
+    parseError(e) {
+        const regexp = /.*code:\s(\d+).*?message:\s["'](.+)["']/gs;
+        const match = regexp.exec(e.message);
+        if (!match)
+            return new errors_1.RegistrationError(e);
+        const [, code, message] = match;
+        switch (code) {
+            case "74":
+            case "71":
+                return new db_decorators_1.ConflictError(message);
+            case "20":
+                return new core_1.AuthorizationError(message);
+            default:
+                return new errors_1.RegistrationError(message);
+        }
+    }
+    /**
+     * @description Retrieve affiliations from the CA.
+     * @summary Queries the CA for the list of affiliations available under the configured CA.
+     * @return {string} The affiliations result payload.
+     */
+    async getAffiliations() {
+        const affiliationService = await this.Affiliations();
+        const log = this.log.for(this.getAffiliations);
+        log.debug(`Retrieving Affiliations under CA ${this.caConfig.caName}`);
+        const response = (await affiliationService.getAll(await this.User()))
+            .result;
+        log.debug(`Found ${response.a.length} Affiliations: ${JSON.stringify(response)}`);
+        return response;
+    }
+    /**
+     * @description Read identity details from the CA by enrollment ID.
+     * @summary Retrieves and validates a single identity, throwing NotFoundError when missing.
+     * @param {string} enrollmentId - Enrollment ID to lookup.
+     * @return {Promise<FabricIdentity>} The identity details stored in the CA.
+     */
+    async read(enrollmentId) {
+        const ca = await this.CA();
+        const user = await this.User();
+        let result;
+        try {
+            result = await ca.newIdentityService().getOne(enrollmentId, user);
+        }
+        catch (e) {
+            throw new db_decorators_1.NotFoundError(`Couldn't find enrollment with id ${enrollmentId}: ${e}`);
+        }
+        if (!result.success)
+            throw new db_decorators_1.NotFoundError(`Couldn't find enrollment with id ${enrollmentId}: ${result.errors.join("\n")}`);
+        return result.result;
+    }
+    /**
+     * @description Register a new identity with the CA.
+     * @summary Submits a registration request for a new enrollment ID, returning the enrollment secret upon success.
+     * @param {Credentials} model - Credentials containing userName and password for the new identity.
+     * @param {boolean} [isSuperUser=false] - Whether to register the identity as a super user.
+     * @param {string} [affiliation=""] - Affiliation string (e.g., org1.department1).
+     * @param {CA_ROLE | string} [userRole] - Role to assign to the identity.
+     * @param {IKeyValueAttribute} [attrs] - Optional attributes to attach to the identity.
+     * @param {number} [maxEnrollments] - Maximum number of enrollments allowed for the identity.
+     * @return {Promise<string>} The enrollment secret for the registered identity.
+     */
+    async register(model, isSuperUser = false, affiliation = "", userRole, attrs, maxEnrollments) {
+        let registration;
+        const log = this.log.for(this.register);
+        try {
+            const { userName, password } = model;
+            const ca = await this.CA();
+            const user = await this.User();
+            const props = {
+                enrollmentID: userName,
+                enrollmentSecret: password,
+                affiliation: affiliation,
+                userRole: userRole,
+                attrs: attrs,
+                maxEnrollments: maxEnrollments,
+            };
+            registration = await ca.register(props, user);
+            log.info(`Registration for ${userName} created with user type ${userRole ?? "Undefined Role"} ${isSuperUser ? "as super user" : ""}`);
+        }
+        catch (e) {
+            throw this.parseError(e);
+        }
+        return registration;
+    }
+    static identityFromEnrollment(enrollment, mspId) {
+        const { certificate, key, rootCertificate } = enrollment;
+        const log = logging_1.Logging.for(FabricEnrollmentService, {}).for(this.identityFromEnrollment);
+        log.debug(`Generating Identity from certificate ${certificate} in msp ${mspId}`);
+        const clientId = crypto_1.CryptoUtils.fabricIdFromCertificate(certificate);
+        const id = crypto_1.CryptoUtils.encode(clientId);
+        log.debug(`Identity ${clientId} and encodedId ${id}`);
+        const now = new Date();
+        return new Identity_1.Identity({
+            id: id,
+            credentials: {
+                id: id,
+                certificate: certificate,
+                privateKey: key.toBytes(),
+                rootCertificate: rootCertificate,
+                createdOn: now,
+                updatedOn: now,
+            },
+            mspId: mspId,
+            createdOn: now,
+            updatedOn: now,
+        });
+    }
+    /**
+     * @description Enroll an identity with the CA using a registration secret.
+     * @summary Exchanges the enrollment ID and secret for certificates, returning a constructed Identity model.
+     * @param {string} enrollmentId - Enrollment ID to enroll.
+     * @param {string} registration - Enrollment secret returned at registration time.
+     * @return {Promise<Identity>} The enrolled identity object with credentials.
+     */
+    async enroll(enrollmentId, registration) {
+        let identity;
+        const log = this.log.for(this.enroll);
+        try {
+            const ca = await this.CA();
+            log.debug(`Enrolling ${enrollmentId}`);
+            const enrollment = await ca.enroll({
+                enrollmentID: enrollmentId,
+                enrollmentSecret: registration,
+            });
+            identity = FabricEnrollmentService.identityFromEnrollment(enrollment, this.caConfig.caName);
+            log.info(`Successfully enrolled ${enrollmentId} under ${this.caConfig.caName} as ${identity.id}`);
+        }
+        catch (e) {
+            throw this.parseError(e);
+        }
+        return identity;
+    }
+    /**
+     * @description Register and enroll a new identity in one step.
+     * @summary Registers a new enrollment ID with the CA and immediately exchanges the secret to enroll, returning the created Identity.
+     * @param {Credentials} model - Credentials for the new identity containing userName and password.
+     * @param {boolean} [isSuperUser=false] - Whether to register the identity as a super user.
+     * @param {string} [affiliation=""] - Affiliation string (e.g., org1.department1).
+     * @param {CA_ROLE | string} [userRole] - Role to assign to the identity.
+     * @param {IKeyValueAttribute} [attrs] - Optional attributes to attach to the identity.
+     * @param {number} [maxEnrollments] - Maximum number of enrollments allowed for the identity.
+     * @return {Promise<Identity>} The enrolled identity.
+     */
+    async registerAndEnroll(model, isSuperUser = false, affiliation = "", userRole, attrs, maxEnrollments) {
+        const registration = await this.register(model, isSuperUser, affiliation, userRole, attrs, maxEnrollments);
+        const { userName } = model;
+        return this.enroll(userName, registration);
+    }
+    /**
+     * Revokes the enrollment of an identity with the specified enrollment ID.
+     *
+     * @param enrollmentId - The enrollment ID of the identity to be revoked.
+     *
+     * @returns A Promise that resolves to the result of the revocation operation.
+     *
+     * @throws {NotFoundError} If the enrollment with the specified ID does not exist.
+     * @throws {InternalError} If there is an error during the revocation process.
+     */
+    async revoke(enrollmentId) {
+        const ca = await this.CA();
+        const user = await this.User();
+        const identity = await this.read(enrollmentId);
+        if (!identity)
+            throw new db_decorators_1.NotFoundError(`Could not find enrollment with id ${enrollmentId}`);
+        let result;
+        try {
+            result = await ca.revoke({ enrollmentID: identity.id, reason: "User Deletation" }, user);
+        }
+        catch (e) {
+            throw new db_decorators_1.InternalError(`Could not revoke enrollment with id ${enrollmentId}: ${e}`);
+        }
+        if (!result.success)
+            throw new db_decorators_1.InternalError(`Could not revoke enrollment with id ${enrollmentId}: ${result.errors.join("\n")}`);
+        return result;
+    }
+}
+exports.FabricEnrollmentService = FabricEnrollmentService;
+//# sourceMappingURL=FabricEnrollmentService.js.map

package/lib/cjs/client/services/FabricEnrollmentService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FabricEnrollmentService.js","sourceRoot":"","sources":["../../../../src/client/services/FabricEnrollmentService.ts"],"names":[],"mappings":";;;;;;AAAA,wEAAgD;AAWhD,gEAAuD;AACvD,yCAAoD;AACpD,2DAIiC;AACjC,0CAAqC;AAErC,4CAAwC;AAOxC,sDAAwD;AACxD,+CAAyD;AAEzD;;;;;;GAMG;AACH,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,iCAAa,CAAA;IACb,uCAAmB,CAAA;IACnB,qCAAiB,CAAA;IACjB,iCAAa,CAAA;IACb,mCAAe,CAAA;AACjB,CAAC,EANW,gBAAgB,gCAAhB,gBAAgB,QAM3B;AAiBD;;;;;;GAMG;AACH,IAAY,sBAQX;AARD,WAAY,sBAAsB;IAChC,iEAAuC,CAAA;IACvC,iFAAuD,CAAA;IACvD,2EAAiD,CAAA;IACjD,gEAAsC,CAAA;IACtC,kDAAwB,CAAA;IACxB,gEAAsC,CAAA;IACtC,gDAAsB,CAAA;AACxB,CAAC,EARW,sBAAsB,sCAAtB,sBAAsB,QAQjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAa,uBAAwB,SAAQ,qBAAW;IAatD,YAAoB,QAAkB;QACpC,iBAAS,CAAC,cAAc,CACtB,QAAQ,CAAC,GAAG;YACV,CAAC,CAAC;gBACE,QAAQ,EAAE,KAAK;gBACf,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO;gBACzB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI;gBACvB,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU;gBAC9B,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;aAC9B;YACH,CAAC,CAAC,SAAS,CACd,CAAC;QACF,KAAK,EAAE,CAAC;QAZU,aAAQ,GAAR,QAAQ,CAAU;IAatC,CAAC;IAES,KAAK,CAAC,IAAI;QAClB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,wBAAwB,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,MAAM,iBAAS,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,GAAuB,CAAC;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,6BAAa,CACrB,sCAAsC,MAAM,qDAAqD,CAClG,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YAC7C,GAAG,GAAG,MAAM,iBAAS,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CACP,kCAAkC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,MAAM,iBAAS,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE;YACvE,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,EAAE;QAChB,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE3C,gFAAgF;QAChF,wCAAwC;QACxC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAiB,CAAC;QAEjD,MAAM,IAAI,GAAI,YAAyB,CAAC,CAAC,CAAW,CAAC;QACrD,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,UAAU,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE3E,MAAM,WAAW,GAAG,MAAM,iBAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,6BAA6B,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,GAAG,IAAI,0BAAgB,CAC5B,GAAG,EACH;YACE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACtC,MAAM;SACO,EACf,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAES,KAAK,CAAC,MAAM;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAI,EAAU,CAAC,mBAAmB,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAES,KAAK,CAAC,WAAW;QACzB,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAC1B,IAAI,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,qBAAqB,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAES,KAAK,CAAC,YAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAC1B,IAAI,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAES,KAAK,CAAC,UAAU;QACxB,IAAI,CAAC,IAAI,CAAC,eAAe;YACvB,IAAI,CAAC,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CACnB,OAAgC,EAChC,KAAK,GAAG,IAAI;QAEZ,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,GAAG,CAAC,KAAK,CACP,0BAA0B,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAC/F,CAAC;QACF,MAAM,QAAQ,GAAwB,CACpC,MAAM,kBAAkB,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,CAAC,CAC9D,CAAC,MAAM,CAAC;QACT,GAAG,CAAC,KAAK,CACP,SAAS,QAAQ,CAAC,KAAK,CAAC,MAAM,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAC3E,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAqB,CACjC,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAClD,CAAC,MAAM,CAAC;QACT,GAAG,CAAC,KAAK,CACP,SAAS,QAAQ,CAAC,UAAU,CAAC,MAAM,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAC9E,CAAC;QACF,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC7B,CAAC;IAES,UAAU,CAAC,CAAQ;QAC3B,MAAM,MAAM,GAAG,2CAA2C,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,0BAAiB,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QAChC,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,IAAI,CAAC;YACV,KAAK,IAAI;gBACP,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;YACpC,KAAK,IAAI;gBACP,OAAO,IAAI,yBAAkB,CAAC,OAAO,CAAC,CAAC;YACzC;gBACE,OAAO,IAAI,0BAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,oCAAoC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;aAClE,MAAM,CAAC;QACV,GAAG,CAAC,KAAK,CACP,SAAS,QAAQ,CAAC,CAAC,CAAC,MAAM,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CACvE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,YAAoB;QAC7B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,6BAAa,CACrB,oCAAoC,YAAY,KAAK,CAAC,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,6BAAa,CACrB,oCAAoC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAwB,CAAC;IACzC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAkB,EAClB,cAAuB,KAAK,EAC5B,cAAsB,EAAE,EACxB,QAA2B,EAC3B,KAA0B,EAC1B,cAAuB;QAEvB,IAAI,YAAoB,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG;gBACZ,YAAY,EAAE,QAAkB;gBAChC,gBAAgB,EAAE,QAAQ;gBAC1B,WAAW,EAAE,WAAW;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,cAAc;aACX,CAAC;YACtB,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,2BAA2B,QAAQ,IAAI,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5H,CAAC;QACJ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAES,MAAM,CAAC,sBAAsB,CACrC,UAA2B,EAC3B,KAAa;QAEb,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;QACzD,MAAM,GAAG,GAAG,iBAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,GAAG,CACtD,IAAI,CAAC,sBAAsB,CAC5B,CAAC;QACF,GAAG,CAAC,KAAK,CACP,wCAAwC,WAAW,WAAW,KAAK,EAAE,CACtE,CAAC;QACF,MAAM,QAAQ,GAAG,oBAAW,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,oBAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,YAAY,QAAQ,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,mBAAQ,CAAC;YAClB,EAAE,EAAE,EAAE;YACN,WAAW,EAAE;gBACX,EAAE,EAAE,EAAE;gBACN,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE;gBACzB,eAAe,EAAE,eAAe;gBAChC,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf;YACD,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,YAAoB,EAAE,YAAoB;QACrD,IAAI,QAAkB,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,aAAa,YAAY,EAAE,CAAC,CAAC;YACvC,MAAM,UAAU,GAAoB,MAAM,EAAE,CAAC,MAAM,CAAC;gBAClD,YAAY,EAAE,YAAY;gBAC1B,gBAAgB,EAAE,YAAY;aAC/B,CAAC,CAAC;YACH,QAAQ,GAAG,uBAAuB,CAAC,sBAAsB,CACvD,UAAU,EACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CACrB,CAAC;YACF,GAAG,CAAC,IAAI,CACN,yBAAyB,YAAY,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,EAAE,EAAE,CACxF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,KAAkB,EAClB,cAAuB,KAAK,EAC5B,cAAsB,EAAE,EACxB,QAA2B,EAC3B,KAA0B,EAC1B,cAAuB;QAEvB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CACtC,KAAK,EACL,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EACL,cAAc,CACf,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAkB,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,6BAAa,CACrB,qCAAqC,YAAY,EAAE,CACpD,CAAC;QACJ,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CACtB,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EACxD,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,IAAI,6BAAa,CACrB,uCAAuC,YAAY,KAAK,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,6BAAa,CACrB,uCAAuC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;QACJ,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA3XD,0DA2XC"}