@effect-auth/core 0.1.0-alpha.3 → 0.1.0-alpha.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +148 -13
- package/dist/ApiKey.d.ts +207 -0
- package/dist/ApiKey.d.ts.map +1 -0
- package/dist/ApiKey.js +275 -0
- package/dist/ApiKey.js.map +1 -0
- package/dist/AuditLog.d.ts +204 -1
- package/dist/AuditLog.d.ts.map +1 -1
- package/dist/AuditLog.js +170 -0
- package/dist/AuditLog.js.map +1 -1
- package/dist/AuthConfig.d.ts +0 -9
- package/dist/AuthConfig.d.ts.map +1 -1
- package/dist/AuthConfig.js +1 -14
- package/dist/AuthConfig.js.map +1 -1
- package/dist/AuthFlow.d.ts +220 -51
- package/dist/AuthFlow.d.ts.map +1 -1
- package/dist/AuthFlow.js +550 -22
- package/dist/AuthFlow.js.map +1 -1
- package/dist/AuthKernel.d.ts +1 -1
- package/dist/Challenge.d.ts +5 -1
- package/dist/Challenge.d.ts.map +1 -1
- package/dist/Challenge.js +58 -48
- package/dist/Challenge.js.map +1 -1
- package/dist/Client.d.ts +242 -1
- package/dist/Client.d.ts.map +1 -1
- package/dist/Client.js +489 -1
- package/dist/Client.js.map +1 -1
- package/dist/D1Kysely.d.ts +1 -1
- package/dist/D1Kysely.d.ts.map +1 -1
- package/dist/EffectQbSqliteStorage.d.ts +115 -3
- package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
- package/dist/EffectQbSqliteStorage.js +314 -4
- package/dist/EffectQbSqliteStorage.js.map +1 -1
- package/dist/EmailOtp.d.ts +5 -2
- package/dist/EmailOtp.d.ts.map +1 -1
- package/dist/EmailOtp.js +11 -4
- package/dist/EmailOtp.js.map +1 -1
- package/dist/EmailVerification.d.ts +2 -2
- package/dist/EmailVerification.d.ts.map +1 -1
- package/dist/EmailVerification.js +2 -3
- package/dist/EmailVerification.js.map +1 -1
- package/dist/HttpApi/Api.d.ts +1161 -19
- package/dist/HttpApi/Api.d.ts.map +1 -1
- package/dist/HttpApi/Api.js +1433 -20
- package/dist/HttpApi/Api.js.map +1 -1
- package/dist/HttpApi/Endpoints.d.ts +611 -0
- package/dist/HttpApi/Endpoints.d.ts.map +1 -1
- package/dist/HttpApi/Endpoints.js +242 -1
- package/dist/HttpApi/Endpoints.js.map +1 -1
- package/dist/HttpApi/Schemas.d.ts +704 -0
- package/dist/HttpApi/Schemas.d.ts.map +1 -1
- package/dist/HttpApi/Schemas.js +435 -1
- package/dist/HttpApi/Schemas.js.map +1 -1
- package/dist/HttpApi/Security.d.ts +13 -1
- package/dist/HttpApi/Security.d.ts.map +1 -1
- package/dist/HttpApi/Security.js +107 -16
- package/dist/HttpApi/Security.js.map +1 -1
- package/dist/HttpApi/Transport.d.ts +36 -2
- package/dist/HttpApi/Transport.d.ts.map +1 -1
- package/dist/HttpApi/Transport.js +151 -9
- package/dist/HttpApi/Transport.js.map +1 -1
- package/dist/Jwt.d.ts +271 -0
- package/dist/Jwt.d.ts.map +1 -0
- package/dist/Jwt.js +512 -0
- package/dist/Jwt.js.map +1 -0
- package/dist/KyselyStorage.d.ts +134 -1
- package/dist/KyselyStorage.d.ts.map +1 -1
- package/dist/KyselyStorage.js +918 -4
- package/dist/KyselyStorage.js.map +1 -1
- package/dist/LoginApproval.d.ts +314 -0
- package/dist/LoginApproval.d.ts.map +1 -0
- package/dist/LoginApproval.js +551 -0
- package/dist/LoginApproval.js.map +1 -0
- package/dist/LoginNotification.d.ts +183 -0
- package/dist/LoginNotification.d.ts.map +1 -0
- package/dist/LoginNotification.js +329 -0
- package/dist/LoginNotification.js.map +1 -0
- package/dist/LoginRisk.d.ts +73 -0
- package/dist/LoginRisk.d.ts.map +1 -0
- package/dist/LoginRisk.js +57 -0
- package/dist/LoginRisk.js.map +1 -0
- package/dist/MagicLink.d.ts +85 -0
- package/dist/MagicLink.d.ts.map +1 -0
- package/dist/MagicLink.js +206 -0
- package/dist/MagicLink.js.map +1 -0
- package/dist/Mailer.d.ts +33 -2
- package/dist/Mailer.d.ts.map +1 -1
- package/dist/Mailer.js +107 -0
- package/dist/Mailer.js.map +1 -1
- package/dist/Passkey.d.ts +334 -0
- package/dist/Passkey.d.ts.map +1 -0
- package/dist/Passkey.js +422 -0
- package/dist/Passkey.js.map +1 -0
- package/dist/Password.d.ts +138 -8
- package/dist/Password.d.ts.map +1 -1
- package/dist/Password.js +397 -8
- package/dist/Password.js.map +1 -1
- package/dist/RecoveryCode.d.ts +169 -0
- package/dist/RecoveryCode.d.ts.map +1 -0
- package/dist/RecoveryCode.js +299 -0
- package/dist/RecoveryCode.js.map +1 -0
- package/dist/RefreshToken.d.ts +222 -0
- package/dist/RefreshToken.d.ts.map +1 -0
- package/dist/RefreshToken.js +342 -0
- package/dist/RefreshToken.js.map +1 -0
- package/dist/Sessions.d.ts +52 -2
- package/dist/Sessions.d.ts.map +1 -1
- package/dist/Sessions.js +123 -1
- package/dist/Sessions.js.map +1 -1
- package/dist/StepUp.d.ts +44 -0
- package/dist/StepUp.d.ts.map +1 -0
- package/dist/StepUp.js +82 -0
- package/dist/StepUp.js.map +1 -0
- package/dist/Storage.d.ts +14 -1
- package/dist/Storage.d.ts.map +1 -1
- package/dist/Storage.js.map +1 -1
- package/dist/StorageMigrations.d.ts +9 -1
- package/dist/StorageMigrations.d.ts.map +1 -1
- package/dist/StorageMigrations.js +159 -0
- package/dist/StorageMigrations.js.map +1 -1
- package/dist/Testing.d.ts +1 -1
- package/dist/Totp.d.ts +220 -0
- package/dist/Totp.d.ts.map +1 -0
- package/dist/Totp.js +477 -0
- package/dist/Totp.js.map +1 -0
- package/dist/TrustedDevice.d.ts +115 -0
- package/dist/TrustedDevice.d.ts.map +1 -0
- package/dist/TrustedDevice.js +222 -0
- package/dist/TrustedDevice.js.map +1 -0
- package/dist/alchemy/cloudflare/Email.d.ts +25 -0
- package/dist/alchemy/cloudflare/Email.d.ts.map +1 -0
- package/dist/alchemy/cloudflare/Email.js +117 -0
- package/dist/alchemy/cloudflare/Email.js.map +1 -0
- package/dist/cloudflare/Email.d.ts +25 -0
- package/dist/cloudflare/Email.d.ts.map +1 -0
- package/dist/cloudflare/Email.js +153 -0
- package/dist/cloudflare/Email.js.map +1 -0
- package/dist/index.d.ts +12 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +12 -0
- package/dist/index.js.map +1 -1
- package/migrations/0003_auth_login_approval_review.sql +22 -0
- package/migrations/0004_auth_trusted_device.sql +12 -0
- package/migrations/0005_auth_passkey.sql +17 -0
- package/migrations/0006_auth_totp_factor.sql +17 -0
- package/migrations/0007_auth_recovery_code.sql +13 -0
- package/migrations/0008_auth_api_key.sql +17 -0
- package/migrations/0009_auth_refresh_token.sql +21 -0
- package/migrations/0010_auth_jwt_revocation.sql +8 -0
- package/package.json +57 -1
package/dist/Jwt.js
ADDED
|
@@ -0,0 +1,512 @@
|
|
|
1
|
+
import { Brand, Context, Data, Duration, Effect, Encoding, Layer, Option, Redacted, Result, } from "effect";
|
|
2
|
+
import { Crypto } from "./Crypto.js";
|
|
3
|
+
import { UnixMillis } from "./Identifiers.js";
|
|
4
|
+
import { currentUnixMillis, timingSafeEqualString } from "./Internal.js";
|
|
5
|
+
export const JwtKeyId = Brand.nominal();
|
|
6
|
+
export const JwtToken = Brand.nominal();
|
|
7
|
+
export const JwtAlgorithms = ["HS256", "RS256", "ES256", "EdDSA"];
|
|
8
|
+
export class JwtError extends Data.TaggedError("JwtError") {
|
|
9
|
+
}
|
|
10
|
+
export class JwtKeys extends Context.Service()("auth/JwtKeys") {
|
|
11
|
+
}
|
|
12
|
+
(function (JwtKeys) {
|
|
13
|
+
JwtKeys.make = (service) => JwtKeys.of(service);
|
|
14
|
+
})(JwtKeys || (JwtKeys = {}));
|
|
15
|
+
export class JwtIssuer extends Context.Service()("auth/JwtIssuer") {
|
|
16
|
+
}
|
|
17
|
+
(function (JwtIssuer) {
|
|
18
|
+
JwtIssuer.make = (service) => JwtIssuer.of(service);
|
|
19
|
+
})(JwtIssuer || (JwtIssuer = {}));
|
|
20
|
+
export class JwtVerifier extends Context.Service()("auth/JwtVerifier") {
|
|
21
|
+
}
|
|
22
|
+
(function (JwtVerifier) {
|
|
23
|
+
JwtVerifier.make = (service) => JwtVerifier.of(service);
|
|
24
|
+
})(JwtVerifier || (JwtVerifier = {}));
|
|
25
|
+
export class JwtSignature extends Context.Service()("auth/JwtSignature") {
|
|
26
|
+
}
|
|
27
|
+
(function (JwtSignature) {
|
|
28
|
+
JwtSignature.make = (service) => JwtSignature.of(service);
|
|
29
|
+
})(JwtSignature || (JwtSignature = {}));
|
|
30
|
+
export class Jwks extends Context.Service()("auth/Jwks") {
|
|
31
|
+
}
|
|
32
|
+
(function (Jwks) {
|
|
33
|
+
Jwks.make = (service) => Jwks.of(service);
|
|
34
|
+
})(Jwks || (Jwks = {}));
|
|
35
|
+
export class JwtRevocationStore extends Context.Service()("auth/JwtRevocationStore") {
|
|
36
|
+
}
|
|
37
|
+
(function (JwtRevocationStore) {
|
|
38
|
+
JwtRevocationStore.make = (service) => JwtRevocationStore.of(service);
|
|
39
|
+
})(JwtRevocationStore || (JwtRevocationStore = {}));
|
|
40
|
+
export class JwtRevocation extends Context.Service()("auth/JwtRevocation") {
|
|
41
|
+
}
|
|
42
|
+
(function (JwtRevocation) {
|
|
43
|
+
JwtRevocation.make = (service) => JwtRevocation.of(service);
|
|
44
|
+
})(JwtRevocation || (JwtRevocation = {}));
|
|
45
|
+
const textEncoder = new TextEncoder();
|
|
46
|
+
const textDecoder = new TextDecoder();
|
|
47
|
+
const jwtError = (operation, message, cause) => new JwtError({
|
|
48
|
+
operation,
|
|
49
|
+
message,
|
|
50
|
+
...(cause === undefined ? {} : { cause }),
|
|
51
|
+
});
|
|
52
|
+
const isJwtAlgorithm = (value) => typeof value === "string" && JwtAlgorithms.includes(value);
|
|
53
|
+
const signatureService = (dependencies) => {
|
|
54
|
+
if (dependencies.signature !== undefined) {
|
|
55
|
+
return dependencies.signature;
|
|
56
|
+
}
|
|
57
|
+
if (dependencies.crypto !== undefined) {
|
|
58
|
+
return makeJwtSignature({ crypto: dependencies.crypto });
|
|
59
|
+
}
|
|
60
|
+
throw jwtError("signature", "JWT signature service is not available");
|
|
61
|
+
};
|
|
62
|
+
const keyInfo = (key) => ({
|
|
63
|
+
id: key.id,
|
|
64
|
+
alg: key.alg,
|
|
65
|
+
status: key.status,
|
|
66
|
+
...(key.createdAt === undefined ? {} : { createdAt: key.createdAt }),
|
|
67
|
+
...(key.expiresAt === undefined ? {} : { expiresAt: key.expiresAt }),
|
|
68
|
+
...(key.metadata === undefined ? {} : { metadata: key.metadata }),
|
|
69
|
+
});
|
|
70
|
+
const numericDate = (millis) => Math.floor(Number(millis) / 1000);
|
|
71
|
+
const addDuration = (millis, duration) => UnixMillis(Number(millis) + Duration.toMillis(duration));
|
|
72
|
+
const isUsableAt = (key, now) => now === undefined || key.expiresAt === undefined || Number(now) < Number(key.expiresAt);
|
|
73
|
+
const isSigningKey = (key, alg, now) => key.alg === alg &&
|
|
74
|
+
key.status === "active" &&
|
|
75
|
+
(key.alg !== "HS256" || key.secret !== undefined) &&
|
|
76
|
+
isUsableAt(key, now);
|
|
77
|
+
const isVerificationKey = (key, input) => key.id === input.kid &&
|
|
78
|
+
key.status !== "disabled" &&
|
|
79
|
+
(key.alg !== "HS256" || key.secret !== undefined) &&
|
|
80
|
+
(input.alg === undefined || key.alg === input.alg) &&
|
|
81
|
+
isUsableAt(key, input.now);
|
|
82
|
+
const privateJwkMembers = new Set([
|
|
83
|
+
"d",
|
|
84
|
+
"p",
|
|
85
|
+
"q",
|
|
86
|
+
"dp",
|
|
87
|
+
"dq",
|
|
88
|
+
"qi",
|
|
89
|
+
"oth",
|
|
90
|
+
"k",
|
|
91
|
+
]);
|
|
92
|
+
const publicJwkFromKey = (key) => {
|
|
93
|
+
if (key.status === "disabled" || key.publicJwk === undefined) {
|
|
94
|
+
return undefined;
|
|
95
|
+
}
|
|
96
|
+
const jwk = {};
|
|
97
|
+
for (const [name, value] of Object.entries(key.publicJwk)) {
|
|
98
|
+
if (!privateJwkMembers.has(name) && value !== undefined) {
|
|
99
|
+
jwk[name] = value;
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
return {
|
|
103
|
+
...jwk,
|
|
104
|
+
kty: String(jwk.kty ?? key.publicJwk.kty),
|
|
105
|
+
kid: String(jwk.kid ?? key.id),
|
|
106
|
+
alg: String(jwk.alg ?? key.alg),
|
|
107
|
+
use: String(jwk.use ?? "sig"),
|
|
108
|
+
};
|
|
109
|
+
};
|
|
110
|
+
export const makeJwtKeysMemory = (records) => {
|
|
111
|
+
const keys = records.map((record) => ({ ...record }));
|
|
112
|
+
return JwtKeys.make({
|
|
113
|
+
selectSigningKey: (input) => {
|
|
114
|
+
const alg = input?.alg ?? "HS256";
|
|
115
|
+
const key = keys.find((record) => isSigningKey(record, alg, input?.now));
|
|
116
|
+
return Effect.succeed(key === undefined ? Option.none() : Option.some(key));
|
|
117
|
+
},
|
|
118
|
+
findVerificationKey: (input) => {
|
|
119
|
+
const key = keys.find((record) => isVerificationKey(record, input));
|
|
120
|
+
return Effect.succeed(key === undefined ? Option.none() : Option.some(key));
|
|
121
|
+
},
|
|
122
|
+
listPublicJwks: (input) => Effect.succeed(keys
|
|
123
|
+
.filter((key) => isUsableAt(key, input?.now))
|
|
124
|
+
.flatMap((key) => {
|
|
125
|
+
const publicJwk = publicJwkFromKey(key);
|
|
126
|
+
return publicJwk === undefined ? [] : [publicJwk];
|
|
127
|
+
})),
|
|
128
|
+
});
|
|
129
|
+
};
|
|
130
|
+
export const JwtKeysMemoryLive = (records) => Layer.succeed(JwtKeys)(makeJwtKeysMemory(records));
|
|
131
|
+
const cloneRevocationRecord = (record) => ({ ...record });
|
|
132
|
+
export const makeJwtRevocationStoreMemory = () => {
|
|
133
|
+
const records = new Map();
|
|
134
|
+
return JwtRevocationStore.make({
|
|
135
|
+
revoke: (record) => Effect.sync(() => {
|
|
136
|
+
records.set(record.jwtId, cloneRevocationRecord(record));
|
|
137
|
+
}),
|
|
138
|
+
find: (jwtId) => Effect.sync(() => {
|
|
139
|
+
const record = records.get(jwtId);
|
|
140
|
+
return record === undefined
|
|
141
|
+
? Option.none()
|
|
142
|
+
: Option.some(cloneRevocationRecord(record));
|
|
143
|
+
}),
|
|
144
|
+
});
|
|
145
|
+
};
|
|
146
|
+
export const JwtRevocationStoreMemoryLive = Layer.sync(JwtRevocationStore)(makeJwtRevocationStoreMemory);
|
|
147
|
+
const normalizedJwtId = (jwtId) => {
|
|
148
|
+
const value = jwtId.trim();
|
|
149
|
+
return value.length === 0
|
|
150
|
+
? Effect.fail(jwtError("revocation", "JWT ID must not be empty"))
|
|
151
|
+
: Effect.succeed(value);
|
|
152
|
+
};
|
|
153
|
+
const revocationRecordActiveAt = (record, now) => record.expiresAt === undefined || Number(now) < Number(record.expiresAt);
|
|
154
|
+
const jwtIdFromClaims = (claims) => {
|
|
155
|
+
const jwtId = typeof claims.jti === "string" ? claims.jti.trim() : "";
|
|
156
|
+
return jwtId.length === 0 ? undefined : jwtId;
|
|
157
|
+
};
|
|
158
|
+
const expiresAtFromClaims = (claims) => typeof claims.exp === "number" ? UnixMillis(claims.exp * 1000) : undefined;
|
|
159
|
+
export const makeJwtRevocation = (dependencies) => JwtRevocation.make({
|
|
160
|
+
revokeJwtId: Effect.fn("auth.jwt.revocation.revoke_jwt_id")(function* (input) {
|
|
161
|
+
const jwtId = yield* normalizedJwtId(input.jwtId);
|
|
162
|
+
const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
|
|
163
|
+
const record = {
|
|
164
|
+
jwtId,
|
|
165
|
+
revokedAt,
|
|
166
|
+
...(input.expiresAt === undefined ? {} : { expiresAt: input.expiresAt }),
|
|
167
|
+
...(input.reason === undefined ? {} : { reason: input.reason }),
|
|
168
|
+
};
|
|
169
|
+
yield* dependencies.store.revoke(record);
|
|
170
|
+
return record;
|
|
171
|
+
}),
|
|
172
|
+
isRevoked: Effect.fn("auth.jwt.revocation.is_revoked")(function* (input) {
|
|
173
|
+
const jwtId = yield* normalizedJwtId(input.jwtId);
|
|
174
|
+
const now = input.now ?? (yield* currentUnixMillis);
|
|
175
|
+
const record = yield* dependencies.store.find(jwtId);
|
|
176
|
+
return Option.isSome(record) && revocationRecordActiveAt(record.value, now);
|
|
177
|
+
}),
|
|
178
|
+
introspect: Effect.fn("auth.jwt.revocation.introspect")(function* (input) {
|
|
179
|
+
const verified = yield* dependencies.verifier.verify(input);
|
|
180
|
+
if (!verified.valid) {
|
|
181
|
+
return {
|
|
182
|
+
active: false,
|
|
183
|
+
reason: verified.reason,
|
|
184
|
+
};
|
|
185
|
+
}
|
|
186
|
+
const jwtId = jwtIdFromClaims(verified.claims);
|
|
187
|
+
const expiresAt = expiresAtFromClaims(verified.claims);
|
|
188
|
+
if (jwtId !== undefined) {
|
|
189
|
+
const now = input.now ?? (yield* currentUnixMillis);
|
|
190
|
+
const record = yield* dependencies.store.find(jwtId);
|
|
191
|
+
if (Option.isSome(record) && revocationRecordActiveAt(record.value, now)) {
|
|
192
|
+
return {
|
|
193
|
+
active: false,
|
|
194
|
+
reason: "revoked",
|
|
195
|
+
jwtId,
|
|
196
|
+
...(expiresAt === undefined ? {} : { expiresAt }),
|
|
197
|
+
revokedAt: record.value.revokedAt,
|
|
198
|
+
...(record.value.reason === undefined
|
|
199
|
+
? {}
|
|
200
|
+
: { revokedReason: record.value.reason }),
|
|
201
|
+
};
|
|
202
|
+
}
|
|
203
|
+
}
|
|
204
|
+
return {
|
|
205
|
+
active: true,
|
|
206
|
+
header: verified.header,
|
|
207
|
+
claims: verified.claims,
|
|
208
|
+
key: verified.key,
|
|
209
|
+
...(jwtId === undefined ? {} : { jwtId }),
|
|
210
|
+
...(expiresAt === undefined ? {} : { expiresAt }),
|
|
211
|
+
revoked: false,
|
|
212
|
+
};
|
|
213
|
+
}),
|
|
214
|
+
});
|
|
215
|
+
const encodeJson = (value) => Encoding.encodeBase64Url(textEncoder.encode(JSON.stringify(value)));
|
|
216
|
+
const decodeJsonObject = (value) => {
|
|
217
|
+
const bytes = Result.match(Encoding.decodeBase64Url(value), {
|
|
218
|
+
onSuccess: (decoded) => decoded,
|
|
219
|
+
onFailure: () => undefined,
|
|
220
|
+
});
|
|
221
|
+
if (bytes === undefined) {
|
|
222
|
+
return undefined;
|
|
223
|
+
}
|
|
224
|
+
try {
|
|
225
|
+
const parsed = JSON.parse(textDecoder.decode(bytes));
|
|
226
|
+
return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
|
|
227
|
+
? parsed
|
|
228
|
+
: undefined;
|
|
229
|
+
}
|
|
230
|
+
catch {
|
|
231
|
+
return undefined;
|
|
232
|
+
}
|
|
233
|
+
};
|
|
234
|
+
const decodeHeader = (part) => {
|
|
235
|
+
const value = decodeJsonObject(part);
|
|
236
|
+
if (value === undefined || typeof value.kid !== "string") {
|
|
237
|
+
return "malformed";
|
|
238
|
+
}
|
|
239
|
+
if (!isJwtAlgorithm(value.alg)) {
|
|
240
|
+
return "unsupported_alg";
|
|
241
|
+
}
|
|
242
|
+
return {
|
|
243
|
+
typ: "JWT",
|
|
244
|
+
alg: value.alg,
|
|
245
|
+
kid: JwtKeyId(value.kid),
|
|
246
|
+
};
|
|
247
|
+
};
|
|
248
|
+
const decodeClaims = (part) => {
|
|
249
|
+
const value = decodeJsonObject(part);
|
|
250
|
+
return value === undefined ? undefined : value;
|
|
251
|
+
};
|
|
252
|
+
const signHs256 = (crypto, key, data, operation) => crypto.hmacSha256({ key, data }).pipe(Effect.mapError((cause) => jwtError(operation, "Failed to calculate JWT signature", cause)));
|
|
253
|
+
const getJwtWebCrypto = (options) => {
|
|
254
|
+
const crypto = options?.crypto ?? globalThis.crypto;
|
|
255
|
+
if (crypto === undefined) {
|
|
256
|
+
throw jwtError("signature", "Web Crypto is not available");
|
|
257
|
+
}
|
|
258
|
+
return crypto;
|
|
259
|
+
};
|
|
260
|
+
const rs256ImportAlgorithm = {
|
|
261
|
+
name: "RSASSA-PKCS1-v1_5",
|
|
262
|
+
hash: "SHA-256",
|
|
263
|
+
};
|
|
264
|
+
const jwkForImport = (jwk) => ({ ...jwk });
|
|
265
|
+
const decodeBase64UrlBytes = (value) => Result.match(Encoding.decodeBase64Url(value), {
|
|
266
|
+
onSuccess: (bytes) => bytes,
|
|
267
|
+
onFailure: () => undefined,
|
|
268
|
+
});
|
|
269
|
+
export const makeJwtSignature = (dependencies) => JwtSignature.make({
|
|
270
|
+
supports: (alg) => alg === "HS256",
|
|
271
|
+
canSign: (input) => input.alg === "HS256" && input.key.secret !== undefined,
|
|
272
|
+
canVerify: (input) => input.alg === "HS256" && input.key.secret !== undefined,
|
|
273
|
+
sign: Effect.fn("auth.jwt.signature.sign")(function* (input) {
|
|
274
|
+
if (input.alg !== "HS256" || input.key.secret === undefined) {
|
|
275
|
+
return yield* jwtError("signature", "JWT signature algorithm is not supported");
|
|
276
|
+
}
|
|
277
|
+
return yield* signHs256(dependencies.crypto, input.key.secret, input.signingInput, "signature");
|
|
278
|
+
}),
|
|
279
|
+
verify: Effect.fn("auth.jwt.signature.verify")(function* (input) {
|
|
280
|
+
if (input.alg !== "HS256" || input.key.secret === undefined) {
|
|
281
|
+
return false;
|
|
282
|
+
}
|
|
283
|
+
const expectedSignature = yield* signHs256(dependencies.crypto, input.key.secret, input.signingInput, "signature");
|
|
284
|
+
return yield* timingSafeEqualString(dependencies.crypto, expectedSignature, input.signature).pipe(Effect.mapError((cause) => jwtError("signature", "Failed to compare JWT signature", cause)));
|
|
285
|
+
}),
|
|
286
|
+
});
|
|
287
|
+
export const makeJwtWebCryptoRs256Signature = (options) => JwtSignature.make({
|
|
288
|
+
supports: (alg) => alg === "RS256",
|
|
289
|
+
canSign: (input) => input.alg === "RS256" && input.key.privateJwk !== undefined,
|
|
290
|
+
canVerify: (input) => input.alg === "RS256" && input.key.publicJwk !== undefined,
|
|
291
|
+
sign: Effect.fn("auth.jwt.signature.webcrypto_rs256.sign")(function* (input) {
|
|
292
|
+
const { privateJwk } = input.key;
|
|
293
|
+
if (input.alg !== "RS256" || privateJwk === undefined) {
|
|
294
|
+
return yield* jwtError("signature", "JWT RS256 private key is not available");
|
|
295
|
+
}
|
|
296
|
+
return yield* Effect.tryPromise({
|
|
297
|
+
try: async () => {
|
|
298
|
+
const crypto = getJwtWebCrypto(options);
|
|
299
|
+
const key = await crypto.subtle.importKey("jwk", jwkForImport(privateJwk), rs256ImportAlgorithm, false, ["sign"]);
|
|
300
|
+
const signature = await crypto.subtle.sign(rs256ImportAlgorithm, key, textEncoder.encode(input.signingInput));
|
|
301
|
+
return Encoding.encodeBase64Url(new Uint8Array(signature));
|
|
302
|
+
},
|
|
303
|
+
catch: (cause) => jwtError("signature", "Failed to sign RS256 JWT", cause),
|
|
304
|
+
});
|
|
305
|
+
}),
|
|
306
|
+
verify: Effect.fn("auth.jwt.signature.webcrypto_rs256.verify")(function* (input) {
|
|
307
|
+
const { publicJwk } = input.key;
|
|
308
|
+
if (input.alg !== "RS256" || publicJwk === undefined) {
|
|
309
|
+
return false;
|
|
310
|
+
}
|
|
311
|
+
const signature = decodeBase64UrlBytes(input.signature);
|
|
312
|
+
if (signature === undefined) {
|
|
313
|
+
return false;
|
|
314
|
+
}
|
|
315
|
+
return yield* Effect.tryPromise({
|
|
316
|
+
try: async () => {
|
|
317
|
+
const crypto = getJwtWebCrypto(options);
|
|
318
|
+
const key = await crypto.subtle.importKey("jwk", jwkForImport(publicJwk), rs256ImportAlgorithm, false, ["verify"]);
|
|
319
|
+
return await crypto.subtle.verify(rs256ImportAlgorithm, key, signature, textEncoder.encode(input.signingInput));
|
|
320
|
+
},
|
|
321
|
+
catch: (cause) => jwtError("signature", "Failed to verify RS256 JWT", cause),
|
|
322
|
+
});
|
|
323
|
+
}),
|
|
324
|
+
});
|
|
325
|
+
const audienceValues = (value) => {
|
|
326
|
+
if (typeof value === "string") {
|
|
327
|
+
return [value];
|
|
328
|
+
}
|
|
329
|
+
if (Array.isArray(value) && value.every((item) => typeof item === "string")) {
|
|
330
|
+
return value;
|
|
331
|
+
}
|
|
332
|
+
return [];
|
|
333
|
+
};
|
|
334
|
+
const clockToleranceSeconds = (input) => input.clockTolerance === undefined
|
|
335
|
+
? 0
|
|
336
|
+
: Math.ceil(Duration.toMillis(input.clockTolerance) / 1000);
|
|
337
|
+
const validateClaims = (claims, input, now) => {
|
|
338
|
+
const nowSeconds = numericDate(now);
|
|
339
|
+
const toleranceSeconds = clockToleranceSeconds(input);
|
|
340
|
+
if (claims.exp !== undefined &&
|
|
341
|
+
(typeof claims.exp !== "number" || nowSeconds - toleranceSeconds >= claims.exp)) {
|
|
342
|
+
return "expired";
|
|
343
|
+
}
|
|
344
|
+
if (claims.nbf !== undefined &&
|
|
345
|
+
(typeof claims.nbf !== "number" || nowSeconds + toleranceSeconds < claims.nbf)) {
|
|
346
|
+
return "not_yet_valid";
|
|
347
|
+
}
|
|
348
|
+
if (input.issuer !== undefined && claims.iss !== input.issuer) {
|
|
349
|
+
return "issuer_mismatch";
|
|
350
|
+
}
|
|
351
|
+
if (input.audience !== undefined) {
|
|
352
|
+
const expected = audienceValues(input.audience);
|
|
353
|
+
const actual = audienceValues(claims.aud);
|
|
354
|
+
if (expected.length === 0 ||
|
|
355
|
+
actual.length === 0 ||
|
|
356
|
+
!expected.some((audience) => actual.includes(audience))) {
|
|
357
|
+
return "audience_mismatch";
|
|
358
|
+
}
|
|
359
|
+
}
|
|
360
|
+
return undefined;
|
|
361
|
+
};
|
|
362
|
+
const issuedClaims = (input, issuedAt) => {
|
|
363
|
+
const expiresAt = input.expiresAt ??
|
|
364
|
+
(input.expiresIn === undefined ? undefined : addDuration(issuedAt, input.expiresIn));
|
|
365
|
+
return {
|
|
366
|
+
...input.claims,
|
|
367
|
+
...(input.issuer === undefined ? {} : { iss: input.issuer }),
|
|
368
|
+
...(input.subject === undefined ? {} : { sub: input.subject }),
|
|
369
|
+
...(input.audience === undefined ? {} : { aud: input.audience }),
|
|
370
|
+
...(expiresAt === undefined ? {} : { exp: numericDate(expiresAt) }),
|
|
371
|
+
...(input.notBefore === undefined ? {} : { nbf: numericDate(input.notBefore) }),
|
|
372
|
+
iat: numericDate(issuedAt),
|
|
373
|
+
...(input.jwtId === undefined ? {} : { jti: input.jwtId }),
|
|
374
|
+
};
|
|
375
|
+
};
|
|
376
|
+
export const makeJwtIssuer = (dependencies) => {
|
|
377
|
+
const signature = signatureService(dependencies);
|
|
378
|
+
return JwtIssuer.make({
|
|
379
|
+
issue: Effect.fn("auth.jwt.issue")(function* (input) {
|
|
380
|
+
const issuedAt = input.issuedAt ?? (yield* currentUnixMillis);
|
|
381
|
+
const alg = input.alg ?? "HS256";
|
|
382
|
+
if (!signature.supports(alg)) {
|
|
383
|
+
return yield* jwtError("issue", "JWT algorithm is not supported");
|
|
384
|
+
}
|
|
385
|
+
const key = yield* dependencies.keys.selectSigningKey({
|
|
386
|
+
alg,
|
|
387
|
+
now: issuedAt,
|
|
388
|
+
});
|
|
389
|
+
if (Option.isNone(key)) {
|
|
390
|
+
return yield* jwtError("issue", "No active JWT signing key is available");
|
|
391
|
+
}
|
|
392
|
+
if (!signature.canSign({ alg: key.value.alg, key: key.value })) {
|
|
393
|
+
return yield* jwtError("issue", "Selected JWT signing key is not supported by the signature service");
|
|
394
|
+
}
|
|
395
|
+
const header = {
|
|
396
|
+
typ: "JWT",
|
|
397
|
+
alg: key.value.alg,
|
|
398
|
+
kid: key.value.id,
|
|
399
|
+
};
|
|
400
|
+
const claims = issuedClaims(input, issuedAt);
|
|
401
|
+
const signingInput = `${encodeJson(header)}.${encodeJson(claims)}`;
|
|
402
|
+
const tokenSignature = yield* signature.sign({
|
|
403
|
+
alg: key.value.alg,
|
|
404
|
+
key: key.value,
|
|
405
|
+
signingInput,
|
|
406
|
+
});
|
|
407
|
+
return {
|
|
408
|
+
token: Redacted.make(JwtToken(`${signingInput}.${tokenSignature}`)),
|
|
409
|
+
header,
|
|
410
|
+
claims,
|
|
411
|
+
key: keyInfo(key.value),
|
|
412
|
+
};
|
|
413
|
+
}),
|
|
414
|
+
});
|
|
415
|
+
};
|
|
416
|
+
export const makeJwtVerifier = (dependencies) => {
|
|
417
|
+
const signature = signatureService(dependencies);
|
|
418
|
+
return JwtVerifier.make({
|
|
419
|
+
verify: Effect.fn("auth.jwt.verify")(function* (input) {
|
|
420
|
+
const token = Redacted.value(input.token).trim();
|
|
421
|
+
const parts = token.split(".");
|
|
422
|
+
if (parts.length !== 3) {
|
|
423
|
+
return { valid: false, reason: "malformed" };
|
|
424
|
+
}
|
|
425
|
+
const [headerPart, payloadPart, signaturePart] = parts;
|
|
426
|
+
const header = decodeHeader(headerPart);
|
|
427
|
+
if (typeof header === "string") {
|
|
428
|
+
return { valid: false, reason: header };
|
|
429
|
+
}
|
|
430
|
+
if (!signature.supports(header.alg)) {
|
|
431
|
+
return {
|
|
432
|
+
valid: false,
|
|
433
|
+
reason: "unsupported_alg",
|
|
434
|
+
};
|
|
435
|
+
}
|
|
436
|
+
const now = input.now ?? (yield* currentUnixMillis);
|
|
437
|
+
const key = yield* dependencies.keys.findVerificationKey({
|
|
438
|
+
kid: header.kid,
|
|
439
|
+
alg: header.alg,
|
|
440
|
+
now,
|
|
441
|
+
});
|
|
442
|
+
if (Option.isNone(key)) {
|
|
443
|
+
return { valid: false, reason: "unknown_key" };
|
|
444
|
+
}
|
|
445
|
+
if (!signature.canVerify({ alg: header.alg, key: key.value })) {
|
|
446
|
+
return { valid: false, reason: "unknown_key" };
|
|
447
|
+
}
|
|
448
|
+
const signatureMatches = yield* signature.verify({
|
|
449
|
+
alg: header.alg,
|
|
450
|
+
key: key.value,
|
|
451
|
+
signingInput: `${headerPart}.${payloadPart}`,
|
|
452
|
+
signature: signaturePart,
|
|
453
|
+
});
|
|
454
|
+
if (!signatureMatches) {
|
|
455
|
+
return {
|
|
456
|
+
valid: false,
|
|
457
|
+
reason: "invalid_signature",
|
|
458
|
+
};
|
|
459
|
+
}
|
|
460
|
+
const claims = decodeClaims(payloadPart);
|
|
461
|
+
if (claims === undefined) {
|
|
462
|
+
return { valid: false, reason: "malformed" };
|
|
463
|
+
}
|
|
464
|
+
const invalidReason = validateClaims(claims, input, now);
|
|
465
|
+
if (invalidReason !== undefined) {
|
|
466
|
+
return { valid: false, reason: invalidReason };
|
|
467
|
+
}
|
|
468
|
+
return {
|
|
469
|
+
valid: true,
|
|
470
|
+
header,
|
|
471
|
+
claims,
|
|
472
|
+
key: keyInfo(key.value),
|
|
473
|
+
};
|
|
474
|
+
}),
|
|
475
|
+
});
|
|
476
|
+
};
|
|
477
|
+
export const makeJwks = (dependencies) => Jwks.make({
|
|
478
|
+
document: Effect.fn("auth.jwks.document")(function* (input) {
|
|
479
|
+
const now = input?.now ?? (yield* currentUnixMillis);
|
|
480
|
+
const keys = yield* dependencies.keys.listPublicJwks({ now });
|
|
481
|
+
return { keys };
|
|
482
|
+
}),
|
|
483
|
+
});
|
|
484
|
+
export const JwtSignatureLive = Layer.effect(JwtSignature)(Effect.gen(function* () {
|
|
485
|
+
const crypto = yield* Crypto;
|
|
486
|
+
return makeJwtSignature({ crypto });
|
|
487
|
+
}));
|
|
488
|
+
export const JwtWebCryptoRs256SignatureLive = (options) => Layer.succeed(JwtSignature)(makeJwtWebCryptoRs256Signature(options));
|
|
489
|
+
export const JwtIssuerWithSignatureLive = Layer.effect(JwtIssuer)(Effect.gen(function* () {
|
|
490
|
+
const keys = yield* JwtKeys;
|
|
491
|
+
const signature = yield* JwtSignature;
|
|
492
|
+
return makeJwtIssuer({ keys, signature });
|
|
493
|
+
}));
|
|
494
|
+
export const JwtVerifierWithSignatureLive = Layer.effect(JwtVerifier)(Effect.gen(function* () {
|
|
495
|
+
const keys = yield* JwtKeys;
|
|
496
|
+
const signature = yield* JwtSignature;
|
|
497
|
+
return makeJwtVerifier({ keys, signature });
|
|
498
|
+
}));
|
|
499
|
+
export const JwtIssuerLive = JwtIssuerWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
|
|
500
|
+
export const JwtVerifierLive = JwtVerifierWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
|
|
501
|
+
export const JwksLive = Layer.effect(Jwks)(Effect.gen(function* () {
|
|
502
|
+
const keys = yield* JwtKeys;
|
|
503
|
+
return makeJwks({ keys });
|
|
504
|
+
}));
|
|
505
|
+
export const JwtRevocationLive = Layer.effect(JwtRevocation)(Effect.gen(function* () {
|
|
506
|
+
const verifier = yield* JwtVerifier;
|
|
507
|
+
const store = yield* JwtRevocationStore;
|
|
508
|
+
return makeJwtRevocation({ verifier, store });
|
|
509
|
+
}));
|
|
510
|
+
export const JwtWithSignatureLive = Layer.mergeAll(JwtIssuerWithSignatureLive, JwtVerifierWithSignatureLive, JwksLive);
|
|
511
|
+
export const JwtLive = JwtWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
|
|
512
|
+
//# sourceMappingURL=Jwt.js.map
|
package/dist/Jwt.js.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"Jwt.js","sourceRoot":"","sources":["../src/Jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,GACP,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGzE,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAY,CAAC;AAGlD,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAY,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AA8E3E,MAAM,OAAO,QAAS,SAAQ,IAAI,CAAC,WAAW,CAAC,UAAU,CAIvD;CAAG;AAcL,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,OAAO,EAA2B,CACrE,cAAc,CACf;CAAG;AAEJ,WAAiB,OAAO;IACT,YAAI,GAAG,CAAC,OAAuB,EAAkB,EAAE,CAC9D,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC,EAHgB,OAAO,KAAP,OAAO,QAGvB;AA0BD,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAA+B,CAC3E,gBAAgB,CACjB;CAAG;AAEJ,WAAiB,SAAS;IACX,cAAI,GAAG,CAAC,OAAyB,EAAoB,EAAE,CAClE,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC,EAHgB,SAAS,KAAT,SAAS,QAGzB;AAsCD,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAAmC,CACjF,kBAAkB,CACnB;CAAG;AAEJ,WAAiB,WAAW;IACb,gBAAI,GAAG,CAAC,OAA2B,EAAsB,EAAE,CACtE,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC,EAHgB,WAAW,KAAX,WAAW,QAG3B;AAyBD,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,OAAO,EAG9C,CAAC,mBAAmB,CAAC;CAAG;AAE3B,WAAiB,YAAY;IACd,iBAAI,GAAG,CAAC,OAA4B,EAAuB,EAAE,CACxE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,EAHgB,YAAY,KAAZ,YAAY,QAG5B;AAQD,MAAM,OAAO,IAAK,SAAQ,OAAO,CAAC,OAAO,EAAqB,CAAC,WAAW,CAAC;CAAG;AAE9E,WAAiB,IAAI;IACN,SAAI,GAAG,CAAC,OAAoB,EAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC,EAFgB,IAAI,KAAJ,IAAI,QAEpB;AAgBD,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAEjC,WAAiB,kBAAkB;IACpB,uBAAI,GAAG,CAClB,OAAkC,EACP,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC,EAJgB,kBAAkB,KAAlB,kBAAkB,QAIlC;AAiDD,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AA4BD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,QAAQ,GAAG,CACf,SAAuB,EACvB,OAAe,EACf,KAAe,EACL,EAAE,CACZ,IAAI,QAAQ,CAAC;IACX,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE,CAC/D,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAqB,CAAC,CAAC;AAE7E,MAAM,gBAAgB,GAAG,CACvB,YAAoC,EACf,EAAE;IACvB,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,YAAY,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,CAAC,WAAW,EAAE,wCAAwC,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,GAAiB,EAAc,EAAE,CAAC,CAAC;IAClD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AAEtF,MAAM,WAAW,GAAG,CAAC,MAAkB,EAAE,QAA2B,EAAc,EAAE,CAClF,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE3D,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAE,GAA2B,EAAW,EAAE,CAC7E,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAE1F,MAAM,YAAY,GAAG,CACnB,GAAiB,EACjB,GAAiB,EACjB,GAA2B,EAClB,EAAE,CACX,GAAG,CAAC,GAAG,KAAK,GAAG;IACf,GAAG,CAAC,MAAM,KAAK,QAAQ;IACvB,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IACjD,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAEvB,MAAM,iBAAiB,GAAG,CACxB,GAAiB,EACjB,KAAkC,EACzB,EAAE,CACX,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,GAAG;IACpB,GAAG,CAAC,MAAM,KAAK,UAAU;IACzB,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IACjD,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;IAClD,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,GAAG;IACH,GAAG;IACH,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,GAAG;CACJ,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,GAAiB,EAA4B,EAAE;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,GAAG;QACN,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;QAC/B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,CAAC;KACP,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAgC,EAChB,EAAE;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAEtD,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC;YAElC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAEzE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAEpE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,IAAI;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;aAC5C,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAExC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CACL;KACJ,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAgC,EAAE,EAAE,CACpE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAErD,MAAM,qBAAqB,GAAG,CAC5B,MAA2B,EACN,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAA8B,EAAE;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,OAAO,kBAAkB,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC;QACJ,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAElC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACxE,4BAA4B,CAC7B,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAa,EAAmC,EAAE;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE3B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,MAA2B,EAC3B,GAAe,EACN,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAEvF,MAAM,eAAe,GAAG,CAAC,MAAiB,EAAsB,EAAE;IAChE,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAiB,EAA0B,EAAE,CACxE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EACnE,KAAK;QAEL,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG;YACb,KAAK;YACL,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAClC,CAAC;QAEhC,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEzC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;aACS,CAAC;QACrC,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzE,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,SAAS;oBACjB,KAAK;oBACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;oBACjD,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;oBACjC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;iBACX,CAAC;YACrC,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,OAAO,EAAE,KAAK;SACkB,CAAC;IACrC,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAC5C,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtE,MAAM,gBAAgB,GAAG,CACvB,KAAa,EACkC,EAAE;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;QAC1D,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO;QAC/B,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;KAC3B,CAAC,CAAC;IAEH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAE9D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAA4C;YAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAA4C,EAAE;IAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;KACL,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAyB,EAAE;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAErC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,KAAmB,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,MAAqB,EACrB,GAAc,EACd,IAAY,EACZ,SAAuB,EACU,EAAE,CACnC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,QAAQ,CAAC,SAAS,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAChE,CACF,CAAC;AAEJ,MAAM,eAAe,GAAG,CACtB,OAAsD,EAC5B,EAAE;IAC5B,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;IAEpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,SAAS;CACP,CAAC;AAEX,MAAM,YAAY,GAAG,CAAC,GAAiC,EAAc,EAAE,CACrE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAe,CAAC;AAE7B,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAA0B,EAAE,CACrE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;IAC5C,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;CAC3B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,YAAsC,EACjB,EAAE,CACvB,YAAY,CAAC,IAAI,CAAC;IAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;IAC3E,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;IAC7E,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzD,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,CAAC,QAAQ,CACpB,WAAW,EACX,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAChB,KAAK,CAAC,YAAY,EAClB,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7D,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,SAAS,CACxC,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAChB,KAAK,CAAC,YAAY,EAClB,WAAW,CACZ,CAAC;QAEF,OAAO,KAAK,CAAC,CAAC,qBAAqB,CACjC,YAAY,CAAC,MAAM,EACnB,iBAAiB,EACjB,KAAK,CAAC,SAAS,CAChB,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,QAAQ,CAAC,WAAW,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAChE,CACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,OAA2C,EACtB,EAAE,CACvB,YAAY,CAAC,IAAI,CAAC;IAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS;IAC/E,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;IAChF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yCAAyC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC;QAEjC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC,CAAC,QAAQ,CACpB,WAAW,EACX,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9B,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,YAAY,CAAC,UAAU,CAAC,EACxB,oBAAoB,EACpB,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,oBAAoB,EACpB,GAAG,EACH,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CACvC,CAAC;gBAEF,OAAO,QAAQ,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,0BAA0B,EAAE,KAAK,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7E,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC;QAEhC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAExD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9B,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,YAAY,CAAC,SAAS,CAAC,EACvB,oBAAoB,EACpB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;gBAEF,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,oBAAoB,EACpB,GAAG,EACH,SAAS,EACT,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CACvC,CAAC;YACJ,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,EAAE,KAAK,CAAC;SAC7E,CAAC,CAAC;IACL,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,KAAc,EAAqB,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,KAAqB,EAAU,EAAE,CAC9D,KAAK,CAAC,cAAc,KAAK,SAAS;IAChC,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;AAEhE,MAAM,cAAc,GAAG,CACrB,MAAiB,EACjB,KAAqB,EACrB,GAAe,EAC2B,EAAE;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEtD,IACE,MAAM,CAAC,GAAG,KAAK,SAAS;QACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,UAAU,GAAG,gBAAgB,IAAI,MAAM,CAAC,GAAG,CAAC,EAC/E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IACE,MAAM,CAAC,GAAG,KAAK,SAAS;QACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,UAAU,GAAG,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,EAC9E,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1C,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EACvD,CAAC;YACD,OAAO,mBAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAE,QAAoB,EAAa,EAAE;IAC7E,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;QACf,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAEvF,OAAO;QACL,GAAG,KAAK,CAAC,MAAM;QACf,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/E,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KACvC,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,YAAoC,EAClB,EAAE;IACpB,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAEjD,OAAO,SAAS,CAAC,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC;YAEjC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACpD,GAAG;gBACH,GAAG,EAAE,QAAQ;aACd,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC/D,OAAO,KAAK,CAAC,CAAC,QAAQ,CACpB,OAAO,EACP,oEAAoE,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG;gBACb,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;gBAClB,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;aACE,CAAC;YACtB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3C,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;gBAClB,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,YAAY;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC,CAAC;gBACnE,MAAM;gBACN,MAAM;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;aACJ,CAAC;QACxB,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,YAAoC,EAChB,EAAE;IACtB,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAEjD,OAAO,WAAW,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAkC,CAAC;YAC/E,CAAC;YAED,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,KAAiC,CAAC;YACnF,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAExC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAkC,CAAC;YAC1E,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,iBAAiB;iBACM,CAAC;YACpC,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACvD,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG;aACJ,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAkC,CAAC;YACjF,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAkC,CAAC;YACjF,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC/C,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,YAAY,EAAE,GAAG,UAAU,IAAI,WAAW,EAAE;gBAC5C,SAAS,EAAE,aAAa;aACzB,CAAC,CAAC;YAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,mBAAmB;iBACI,CAAC;YACpC,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAEzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAkC,CAAC;YAC/E,CAAC;YAED,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAEzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAkC,CAAC;YACjF,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM;gBACN,MAAM;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;aACQ,CAAC;QACpC,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,YAA+C,EAAe,EAAE,CACvF,IAAI,CAAC,IAAI,CAAC;IACR,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACxD,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9D,OAAO,EAAE,IAAI,EAAyB,CAAC;IACzC,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,OAA2C,EAC3C,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IAEtC,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CACnE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IAEtC,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,CAC1D,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,4BAA4B,CAAC,IAAI,CAC9D,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAE5B,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAExC,OAAO,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAChD,0BAA0B,EAC1B,4BAA4B,EAC5B,QAAQ,CACT,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC"}
|