@electr0zed/auth-gateway-cf 0.1.0

package/dist/auth/index.js

@@ -0,0 +1,609 @@
+import { makePkceState, saveShortState, consumeShortState } from './pkceState';
+import { ProviderRegistry } from '../providers';
+import { generateUsername, normEmail, normUsername, validateEmail, validateUsername } from '../utils/helpers';
+import { safeReturnTo } from '../utils/returnTo';
+import { json } from '../utils/http';
+import { makeCsrfToken, csrfCookie, sameOrigin, requireCsrfJson } from '../utils/csrf';
+import { getPeppers, hashPassword, verifyPasswordWithPepperRotation, needsRehash, verifyPassword, getFakeStoredHash, } from '../utils/passwords';
+import { getPasswordPolicy, validatePassword } from '../utils/passwordPolicy';
+import { getTurnstileTokenField, verifyTurnstile } from '../utils/turnstile';
+export class AuthRouter {
+    cfg;
+    env;
+    store;
+    strat;
+    constructor(cfg, env, store, strat) {
+        this.cfg = cfg;
+        this.env = env;
+        this.store = store;
+        this.strat = strat;
+    }
+    /**
+     * Handles incoming authentication requests.
+     *
+     * @async
+     * @param {Request} request
+     * @returns {Promise<Response>}
+     */
+    async handle(request) {
+        if (!this.authFeatureEnabled()) {
+            return new Response('Not Found', { status: 404 });
+        }
+        const url = new URL(request.url);
+        if (!/^\/auth(\/|$)/.test(url.pathname)) {
+            return new Response('Not Found', { status: 404 });
+        }
+        // Preliminary checks
+        switch (url.pathname) {
+            case '/auth/login':
+            case '/auth/signin':
+            case '/auth/link':
+            case '/auth/callback':
+                if (!this.oauthEnabled())
+                    return new Response('Not Found', { status: 404 });
+                break;
+            case '/auth/csrf':
+                if (!this.passwordEnabled())
+                    return new Response('Not Found', { status: 404 });
+                break;
+            case '/auth/password/signup':
+            case '/auth/password/register':
+            case '/auth/password/login':
+            case '/auth/password/signin':
+            case '/auth/password/change':
+                if (!this.passwordEnabled())
+                    return new Response('Not Found', { status: 404 });
+                if (request.method !== 'POST')
+                    return new Response('Method Not Allowed', { status: 405, headers: { Allow: 'POST' } });
+                break;
+        }
+        switch (url.pathname) {
+            case '/auth/login':
+            case '/auth/signin':
+            case '/auth/link':
+                return this.loginOrLink(request, url);
+            case '/auth/callback':
+                return this.callback(request, url);
+            case '/auth/logout':
+                return this.logout(request);
+            case '/auth/csrf':
+                return this.csrf();
+            case '/auth/password/signup':
+            case '/auth/password/register':
+                return this.passwordRegister(request, url);
+            case '/auth/password/login':
+            case '/auth/password/signin':
+                return this.passwordLogin(request, url);
+            case '/auth/password/change':
+                return this.passwordChange(request);
+            default:
+                return new Response('Not Found', { status: 404 });
+        }
+    }
+    /**
+     * Handles login or linking of new oauth providers.
+     *
+     * @private
+     * @async
+     * @param {Request} request
+     * @param {URL} url
+     * @returns {Promise<Response>}
+     */
+    async loginOrLink(request, url) {
+        const mode = url.pathname.endsWith('/link') ? 'link' : 'login';
+        let picked;
+        try {
+            picked = this.pickProvider(url.searchParams.get('provider') ?? undefined);
+        }
+        catch {
+            return this.redirectError('provider_unavailable', url.searchParams.get('returnTo') ?? undefined);
+        }
+        const { impl, cfg } = picked;
+        const rawReturnTo = url.searchParams.get('returnTo') ?? undefined;
+        const returnTo = safeReturnTo(rawReturnTo, this.cfg.publicBaseUrl);
+        const { session } = await this.strat.resolve(request, this.env);
+        if (mode === 'link' && !session) {
+            return this.redirectError('link_requires_login', returnTo);
+        }
+        const { state, codeChallenge, verifier } = await makePkceState();
+        await saveShortState(this.cfg.userStore.shortStateKV, state, verifier, 300, {
+            mode,
+            returnTo,
+            provider: cfg.id,
+        });
+        const loginUrl = impl.loginURL(cfg, this.cfg.publicBaseUrl, state, codeChallenge);
+        return Response.redirect(loginUrl, 302);
+    }
+    /**
+     * Handles the OAuth callback.
+     *
+     * @private
+     * @async
+     * @param {Request} request
+     * @param {URL} url
+     * @returns {Promise<Response>}
+     */
+    async callback(request, url) {
+        const providerParam = url.searchParams.get('provider') ?? undefined;
+        const returnTo = safeReturnTo(url.searchParams.get('returnTo') ?? undefined, this.cfg.publicBaseUrl);
+        let picked;
+        try {
+            picked = this.pickProvider(providerParam);
+        }
+        catch {
+            return this.redirectError('provider_unavailable', returnTo);
+        }
+        const { impl, cfg } = picked;
+        const oauthError = url.searchParams.get('error');
+        if (oauthError) {
+            return this.redirectError('oauth_denied', returnTo);
+        }
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state');
+        if (!code || !state) {
+            return this.redirectError('invalid_callback', returnTo);
+        }
+        let consumedState;
+        try {
+            consumedState = await consumeShortState(this.cfg.userStore.shortStateKV, state);
+        }
+        catch {
+            return this.redirectError('state_invalid_or_expired', returnTo);
+        }
+        if (consumedState.info.provider && consumedState.info.provider !== cfg.id) {
+            return this.redirectError('provider_mismatch', safeReturnTo(consumedState.info.returnTo, this.cfg.publicBaseUrl));
+        }
+        const shortStateReturnTo = safeReturnTo(consumedState.info.returnTo, this.cfg.publicBaseUrl);
+        const successRedirectUrl = this.cfg.oAuth.enabled ? this.cfg.oAuth.successRedirectUrl : undefined;
+        const redirectUri = `${this.cfg.publicBaseUrl}/auth/callback`;
+        const identity = await impl.exchangeCode(cfg, this.env, code, consumedState.verifier, redirectUri);
+        const resolved = await this.strat.resolve(request, this.env);
+        const activeSession = resolved.session;
+        const email = normEmail(identity.email);
+        if (!email) {
+            return this.redirectError('email_required', shortStateReturnTo);
+        }
+        // Link flow
+        if (consumedState.info.mode === 'link') {
+            if (!activeSession) {
+                return this.redirectError('link_requires_login', shortStateReturnTo);
+            }
+            try {
+                await this.store.addIdentityToUser(activeSession.userId, {
+                    provider: identity.provider,
+                    issuer: identity.issuer,
+                    subject: identity.subject,
+                });
+            }
+            catch (e) {
+                const code = e?.message === 'identity_taken' ? 'identity_taken' : 'link_failed';
+                return this.redirectError(code, shortStateReturnTo);
+            }
+            return new Response(null, {
+                status: 302,
+                headers: { Location: shortStateReturnTo || successRedirectUrl || '/' },
+            });
+        }
+        const byIdentity = await this.store.findUserIdByIdentity(identity.issuer, identity.subject);
+        // Sign-up flow
+        if (!byIdentity) {
+            const byEmail = await this.store.findUserIdByEmail(email);
+            if (byEmail) {
+                return this.redirectError('account_exists', shortStateReturnTo);
+            }
+            let generateUsernameFunc = undefined;
+            if (this.cfg.overrides?.captureUsername?.enabled) {
+                if (this.cfg.overrides.captureUsername.required) {
+                    generateUsernameFunc = this.cfg.overrides?.captureUsername.generateFunction || generateUsername;
+                }
+            }
+            let userId;
+            try {
+                userId = await this.store.createUserWithIdentity(email, {
+                    provider: identity.provider,
+                    issuer: identity.issuer,
+                    subject: identity.subject,
+                }, generateUsernameFunc);
+            }
+            catch (e) {
+                const code = e?.message;
+                if (['email_in_use', 'username_in_use', 'account_exists', 'username_generation_failed'].includes(code)) {
+                    return this.redirectError(code, shortStateReturnTo);
+                }
+                return this.redirectError('signup_failed', shortStateReturnTo);
+            }
+            // Auto-login after signup if enabled and no further steps required (like email verification or account approval)
+            const canAutoLogin = this.canAutoLoginAfterSignup();
+            if (!canAutoLogin) {
+                const requiresEmailVerification = this.cfg.overrides?.emailVerification?.enabled && this.cfg.overrides?.emailVerification?.requiredForLogin;
+                const requiresAccountApproval = this.cfg.overrides?.accountApproval?.enabled;
+                const redirectUrl = successRedirectUrl || '/';
+                const sep = redirectUrl.includes('?') ? '&' : '?';
+                return new Response(null, {
+                    status: 302,
+                    headers: {
+                        Location: redirectUrl +
+                            (requiresEmailVerification
+                                ? `${sep}next=verify_email`
+                                : requiresAccountApproval
+                                    ? `${sep}next=awaiting_approval`
+                                    : ''),
+                    },
+                });
+            }
+            const response = new Response(null, {
+                status: 302,
+                headers: { Location: shortStateReturnTo || successRedirectUrl || '/' },
+            });
+            await this.applyIssuedCookies(response, { userId, email, systemRoles: [] });
+            return response;
+        }
+        const checkStates = await this.checkUserStates(byIdentity);
+        if (!checkStates.success) {
+            return this.redirectError(checkStates.reason, shortStateReturnTo);
+        }
+        // Login flow
+        const response = new Response(null, {
+            status: 302,
+            headers: { Location: shortStateReturnTo || successRedirectUrl || '/' },
+        });
+        const systemRoles = await this.store.getUserRoles(byIdentity);
+        const issued = await this.strat.issue?.({ userId: byIdentity, email: email, systemRoles }, this.env);
+        if (issued?.cookie)
+            response.headers.append('Set-Cookie', issued.cookie);
+        if (issued?.accessJwt)
+            response.headers.append('Set-Cookie', `__Host-access=${issued.accessJwt}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=900`);
+        return response;
+    }
+    /**
+     * Handles user logout.
+     *
+     * @private
+     * @returns {Response}
+     */
+    async logout(request) {
+        const r = new Response(null, {
+            status: 302,
+            headers: { Location: '/' },
+        });
+        const cleared = await this.strat.clear?.(request, this.env);
+        if (cleared?.cookie)
+            r.headers.append('Set-Cookie', cleared.cookie);
+        return r;
+    }
+    /**
+     * Selects the OAuth provider implementation and configuration.
+     *
+     * @private
+     * @param {?string} [explicit]
+     * @returns {{ impl: any; cfg: any; }}
+     */
+    pickProvider(explicit) {
+        if (!this.cfg.oAuth.enabled)
+            throw new Error('OAuth is disabled');
+        const providers = this.cfg.oAuth.providers ?? [];
+        const id = explicit || this.cfg.oAuth.defaultProvider || providers.find((p) => p.enabled)?.id;
+        const cfg = providers.find((p) => p.id === id && p.enabled);
+        if (!cfg)
+            throw new Error('No provider available');
+        const impl = ProviderRegistry[cfg.id];
+        if (!impl)
+            throw new Error(`No adapter for provider ${cfg.id}`);
+        return { impl, cfg };
+    }
+    /**
+     * Handles error redirection during auth flow.
+     *
+     * @private
+     * @param {string} code
+     * @param {?string} [returnTo]
+     * @returns {*}
+     */
+    redirectError(code, returnTo) {
+        const failureRedirectUrl = this.cfg.oAuth.enabled ? this.cfg.oAuth.failureRedirectUrl : undefined;
+        if (failureRedirectUrl) {
+            const sep = failureRedirectUrl.includes('?') ? '&' : '?';
+            return Response.redirect(`${failureRedirectUrl}${sep}auth_error=${code}`, 302);
+        }
+        if (returnTo) {
+            const sep = returnTo.includes('?') ? '&' : '?';
+            return Response.redirect(`${returnTo}${sep}auth_error=${code}`, 302);
+        }
+        return new Response(null, {
+            status: 302,
+            headers: { Location: `/?auth_error=${code}` },
+        });
+    }
+    csrf() {
+        const token = makeCsrfToken();
+        const res = json({ csrf: token });
+        res.headers.append('Set-Cookie', csrfCookie(token));
+        return res;
+    }
+    async passwordRegister(request, url) {
+        // Reject if signup is disabled
+        if (!this.cfg.passwordAuth.enabled || !this.cfg.passwordAuth.allowSignup) {
+            return new Response('Not Found', { status: 404 });
+        }
+        // Enforce same-origin policy for signup - currently required to read cookies (such as CSRF)
+        if (!sameOrigin(request, this.cfg.publicBaseUrl)) {
+            return new Response('Forbidden', { status: 403 });
+        }
+        // Parse and validate request body
+        const parsed = await requireCsrfJson(request);
+        if (!parsed.ok)
+            return json({ error: parsed.code }, { status: 400 });
+        // Verify turnstile if enabled, will pass if disabled
+        const ts = await this.requireTurnstile(request, parsed.body);
+        if (!ts.ok)
+            return json({ error: ts.code }, { status: 401 });
+        // Extract fields
+        const usernameRaw = parsed.body.username;
+        const emailRaw = parsed.body.email;
+        const password = parsed.body.password;
+        // Basic validation
+        if (typeof emailRaw !== 'string' || typeof password !== 'string' || password.length === 0) {
+            return json({ error: 'invalid_request' }, { status: 400 });
+        }
+        const username = typeof usernameRaw === 'string' ? normUsername(usernameRaw) : null;
+        // Conditional username validation
+        if (this.cfg.overrides?.captureUsername?.enabled) {
+            if (this.cfg.overrides.captureUsername.required && (!username || username.length === 0)) {
+                return json({ error: 'username_required' }, { status: 400 });
+            }
+            if (username && username.length < (this.cfg.overrides.captureUsername.minLength || 0)) {
+                return json({ error: 'username_too_short' }, { status: 400 });
+            }
+            if (username) {
+                const isUsernameValid = validateUsername(username);
+                if (!isUsernameValid) {
+                    return json({ error: 'invalid_username' }, { status: 400 });
+                }
+            }
+        }
+        // Normalize and validate email
+        const email = normEmail(emailRaw);
+        const isEmailValid = validateEmail(email);
+        if (!isEmailValid) {
+            return json({ error: 'invalid_email' }, { status: 400 });
+        }
+        // Validate password against policy
+        const policy = getPasswordPolicy(this.cfg.passwordAuth?.policy);
+        const check = validatePassword(password, policy);
+        if (!check.ok) {
+            // Keep generic unless you explicitly want to expose reasons
+            return json({ error: 'password_policy_violation' }, { status: 400 });
+        }
+        // Hash password with pepper
+        const peppers = getPeppers(this.env, this.pepperEnvName());
+        const primaryPepper = peppers[0];
+        const passwordHash = await hashPassword(password, primaryPepper ? { pepper: primaryPepper } : undefined);
+        // Create user account
+        let userId;
+        try {
+            userId = await this.store.createUserWithPassword(email, passwordHash, username);
+        }
+        catch (err) {
+            const errorMessage = err.message;
+            if (['email_in_use', 'username_in_use', 'account_exists'].includes(errorMessage)) {
+                return json({ error: errorMessage }, { status: 400 });
+            }
+            return json({ error: 'signup_failed' }, { status: 500 });
+        }
+        // Auto-login after signup if enabled and no further steps required (like email verification or account approval)
+        const canAutoLogin = this.canAutoLoginAfterSignup();
+        if (!canAutoLogin) {
+            return json({
+                success: true,
+                requiresEmailVerification: this.cfg.overrides?.emailVerification?.enabled && this.cfg.overrides?.emailVerification?.requiredForLogin,
+                requiresAccountApproval: this.cfg.overrides?.accountApproval?.enabled,
+            }, { status: 200 });
+        }
+        // Issue session and redirect to returnTo
+        const returnTo = safeReturnTo(url.searchParams.get('returnTo') || '/', this.cfg.publicBaseUrl);
+        const res = new Response(null, {
+            status: 302,
+            headers: { Location: returnTo || '/' },
+        });
+        await this.applyIssuedCookies(res, { userId, email, systemRoles: [] });
+        return res;
+    }
+    async passwordLogin(request, url) {
+        if (!sameOrigin(request, this.cfg.publicBaseUrl)) {
+            return new Response('Forbidden', { status: 403 });
+        }
+        const parsed = await requireCsrfJson(request);
+        if (!parsed.ok)
+            return json({ error: parsed.code }, { status: 400 });
+        const ts = await this.requireTurnstile(request, parsed.body);
+        if (!ts.ok)
+            return json({ error: ts.code }, { status: 401 });
+        const emailRaw = parsed.body.email;
+        const password = parsed.body.password;
+        if (typeof emailRaw !== 'string' || typeof password !== 'string' || password.length === 0) {
+            return json({ error: 'invalid_request' }, { status: 400 });
+        }
+        const email = normEmail(emailRaw);
+        const returnTo = safeReturnTo(url.searchParams.get('returnTo') || '/', this.cfg.publicBaseUrl);
+        const row = await this.store.getUserIdByEmailForPassword(email);
+        const peppers = getPeppers(this.env, this.pepperEnvName());
+        const primaryPepper = peppers[0];
+        // Reduce timing differences: always verify against some hash
+        if (!row) {
+            await verifyPassword(password, getFakeStoredHash(), primaryPepper);
+            return json({ error: 'invalid_credentials' }, { status: 401 });
+        }
+        const storedHash = row.passwordHash;
+        const verify = await verifyPasswordWithPepperRotation(password, storedHash, peppers);
+        if (!verify.ok) {
+            return json({ error: 'invalid_credentials' }, { status: 401 });
+        }
+        // Rotate pepper/params on successful login
+        if (verify.usedPepperIndex > 0 || needsRehash(row.passwordHash)) {
+            try {
+                const newHash = await hashPassword(password, primaryPepper ? { pepper: primaryPepper } : undefined);
+                await this.store.setPasswordHash(row.userId, newHash);
+            }
+            catch (err) {
+                console.error('Failed to update password hash during login for user', row.userId, err);
+            }
+        }
+        const checkStates = await this.checkUserStates(row.userId);
+        if (!checkStates.success) {
+            return json({ error: checkStates.reason }, { status: 403 });
+        }
+        const res = new Response(null, {
+            status: 302,
+            headers: { Location: returnTo || '/' },
+        });
+        const systemRoles = await this.store.getUserRoles(row.userId);
+        await this.applyIssuedCookies(res, { userId: row.userId, email, systemRoles });
+        return res;
+    }
+    async passwordChange(request) {
+        if (!sameOrigin(request, this.cfg.publicBaseUrl)) {
+            return new Response('Forbidden', { status: 403 });
+        }
+        const resolved = await this.strat.resolve(request, this.env);
+        const session = resolved.session;
+        if (!session)
+            return json({ error: 'unauthorized' }, { status: 401 });
+        const parsed = await requireCsrfJson(request);
+        if (!parsed.ok)
+            return json({ error: parsed.code }, { status: 400 });
+        const ts = await this.requireTurnstile(request, parsed.body);
+        if (!ts.ok)
+            return json({ error: ts.code }, { status: 401 });
+        const currentPassword = parsed.body.currentPassword;
+        const newPassword = parsed.body.newPassword;
+        if (typeof currentPassword !== 'string' || typeof newPassword !== 'string') {
+            return json({ error: 'invalid_request' }, { status: 400 });
+        }
+        const policy = this.passwordPolicy();
+        const check = validatePassword(newPassword, policy);
+        if (!check.ok) {
+            return json({ error: 'password_policy_violation' }, { status: 400 });
+        }
+        const existingHash = await this.store.getPasswordHashByUserId(session.userId);
+        if (!existingHash)
+            return json({ error: 'password_not_set' }, { status: 400 });
+        const peppers = getPeppers(this.env, this.pepperEnvName());
+        const verify = await verifyPasswordWithPepperRotation(currentPassword, existingHash, peppers);
+        if (!verify.ok)
+            return json({ error: 'invalid_credentials' }, { status: 401 });
+        const newHash = await hashPassword(newPassword, { pepper: peppers[0] });
+        await this.store.setPasswordHash(session.userId, newHash);
+        // Rotate session after password change (recommended)
+        const res = json({ ok: true }, { status: 200 });
+        await this.applyIssuedCookies(res, { userId: session.userId, email: session.email, systemRoles: session.systemRoles });
+        return res;
+    }
+    async checkUserStates(userId) {
+        const userStates = await this.store.getUserStates(userId);
+        // Reject disabled accounts always
+        if (userStates?.is_disabled) {
+            return { success: false, reason: 'account_disabled' };
+        }
+        // Check if approval is enabled and user is unapproved then reject login
+        if (this.cfg.overrides?.accountApproval?.enabled) {
+            if (userStates?.is_approved === false) {
+                return { success: false, reason: 'account_unapproved' };
+            }
+        }
+        // Reject login when email verification is enabled, required for login, and the user's email is unverified
+        if (this.cfg.overrides?.emailVerification?.enabled) {
+            if (userStates?.is_email_verified === false && this.cfg.overrides?.emailVerification?.requiredForLogin) {
+                return { success: false, reason: 'email_unverified' };
+            }
+        }
+        return { success: true };
+    }
+    async applyIssuedCookies(res, session) {
+        const issued = await this.strat.issue?.(session, this.env);
+        if (issued?.cookie)
+            res.headers.append('Set-Cookie', issued.cookie);
+        if (issued?.accessJwt) {
+            res.headers.append('Set-Cookie', `__Host-access=${issued.accessJwt}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=900`);
+        }
+    }
+    oauthEnabled() {
+        return this.cfg.oAuth?.enabled === true;
+    }
+    passwordEnabled() {
+        return this.cfg.passwordAuth?.enabled === true;
+    }
+    authFeatureEnabled() {
+        return this.oauthEnabled() || this.passwordEnabled();
+    }
+    pepperEnvName() {
+        if (!this.cfg.passwordAuth?.enabled)
+            return 'PASSWORD_PEPPERS';
+        return this.cfg.passwordAuth?.pepperEnv ?? 'PASSWORD_PEPPERS';
+    }
+    passwordPolicy() {
+        if (!this.cfg.passwordAuth?.enabled)
+            return getPasswordPolicy();
+        return getPasswordPolicy(this.cfg.passwordAuth?.policy);
+    }
+    turnstileEnabled() {
+        if (!this.cfg.passwordAuth?.enabled)
+            return false;
+        return this.cfg.passwordAuth?.turnstile?.enabled === true;
+    }
+    turnstileSecret() {
+        if (!this.cfg.passwordAuth?.enabled)
+            return null;
+        if (!this.cfg.passwordAuth?.turnstile?.enabled)
+            return null;
+        const key = this.cfg.passwordAuth?.turnstile?.secretEnv;
+        if (!key)
+            return null;
+        const v = this.env[key];
+        return typeof v === 'string' && v.length > 0 ? v : null;
+    }
+    turnstileTokenField() {
+        if (!this.cfg.passwordAuth?.enabled)
+            return 'turnstileToken';
+        if (!this.cfg.passwordAuth?.turnstile?.enabled)
+            return 'turnstileToken';
+        return getTurnstileTokenField(this.cfg.passwordAuth?.turnstile);
+    }
+    async requireTurnstile(request, body) {
+        if (!this.turnstileEnabled())
+            return { ok: true };
+        const secret = this.turnstileSecret();
+        if (!secret)
+            return { ok: false, code: 'turnstile_misconfigured' };
+        const field = this.turnstileTokenField();
+        const token = body[field];
+        if (typeof token !== 'string' || token.trim().length === 0) {
+            return { ok: false, code: 'turnstile_missing' };
+        }
+        const ip = request.headers.get('CF-Connecting-IP') ?? undefined; // optional
+        const result = await verifyTurnstile(token, secret, ip);
+        if (!result.ok)
+            return { ok: false, code: result.code };
+        return { ok: true };
+    }
+    canAutoLoginAfterSignup() {
+        const overrides = this.cfg.overrides;
+        if (overrides?.autoLoginAfterSignup === false)
+            return false;
+        if (overrides?.accountApproval?.enabled)
+            return false;
+        const ev = overrides?.emailVerification;
+        if (ev?.enabled && ev.requiredForLogin)
+            return false;
+        return true;
+    }
+    getGlobalUnauthenticatedRedirectUrl() {
+        return this.cfg.overrides?.globalUnauthenticatedRedirectUrl || '/auth/login';
+    }
+    createUnauthenticatedRedirect(base, returnTo, redirectTo) {
+        const target = new URL(redirectTo || this.getGlobalUnauthenticatedRedirectUrl(), base);
+        if (returnTo)
+            target.searchParams.set('returnTo', returnTo);
+        return Response.redirect(target.toString(), 302);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EACN,UAAU,EACV,YAAY,EACZ,gCAAgC,EAChC,WAAW,EACX,cAAc,EACd,iBAAiB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE7E,MAAM,OAAO,UAAU;IAEb;IACA;IACA;IACA;IAJT,YACS,GAAkB,EAClB,GAAQ,EACR,KAAgB,EAChB,KAAsB;QAHtB,QAAG,GAAH,GAAG,CAAe;QAClB,QAAG,GAAH,GAAG,CAAK;QACR,UAAK,GAAL,KAAK,CAAW;QAChB,UAAK,GAAL,KAAK,CAAiB;IAC5B,CAAC;IAEJ;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChC,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,qBAAqB;QACrB,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,aAAa,CAAC;YACnB,KAAK,cAAc,CAAC;YACpB,KAAK,YAAY,CAAC;YAClB,KAAK,gBAAgB;gBACpB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;oBAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC5E,MAAM;YACP,KAAK,YAAY;gBAChB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;oBAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC/E,MAAM;YACP,KAAK,uBAAuB,CAAC;YAC7B,KAAK,yBAAyB,CAAC;YAC/B,KAAK,sBAAsB,CAAC;YAC5B,KAAK,uBAAuB,CAAC;YAC7B,KAAK,uBAAuB;gBAC3B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;oBAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBACtH,MAAM;QACR,CAAC;QAED,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,aAAa,CAAC;YACnB,KAAK,cAAc,CAAC;YACpB,KAAK,YAAY;gBAChB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,KAAK,gBAAgB;gBACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACpC,KAAK,cAAc;gBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,KAAK,YAAY;gBAChB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,uBAAuB,CAAC;YAC7B,KAAK,yBAAyB;gBAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5C,KAAK,sBAAsB,CAAC;YAC5B,KAAK,uBAAuB;gBAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACzC,KAAK,uBAAuB;gBAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC;gBACC,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACF,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAQ;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAE/D,IAAI,MAAmD,CAAC;QACxD,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC,aAAa,CAAC,sBAAsB,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAE7B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAEnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhE,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;QACjE,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE;YAC3E,IAAI;YACJ,QAAQ;YACR,QAAQ,EAAE,GAAG,CAAC,EAAE;SAChB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClF,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,GAAQ;QAChD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACpE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAErG,IAAI,MAAmD,CAAC;QACxD,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC,aAAa,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAE7B,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,aAAa,CAAC;QAClB,IAAI,CAAC;YACJ,aAAa,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC,aAAa,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7F,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QAElG,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,gBAAgB,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEnG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC;QAEvC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACjE,CAAC;QAED,YAAY;QACZ,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,MAAM,EAAE;oBACxD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;iBACzB,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAI,CAAW,EAAE,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC3F,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACzB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,IAAI,kBAAkB,IAAI,GAAG,EAAE;aACtE,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5F,eAAe;QACf,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,oBAAoB,GAA4C,SAAS,CAAC;YAC9E,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;oBACjD,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;gBACjG,CAAC;YACF,CAAC;YAED,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAC/C,KAAK,EACL;oBACC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;iBACzB,EACD,oBAAoB,CACpB,CAAC;YACH,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAI,CAAW,EAAE,OAAO,CAAC;gBACnC,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxG,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAChE,CAAC;YAED,iHAAiH;YACjH,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACpD,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,MAAM,yBAAyB,GAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;gBAC3G,MAAM,uBAAuB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC;gBAC7E,MAAM,WAAW,GAAG,kBAAkB,IAAI,GAAG,CAAC;gBAC9C,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACzB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACR,QAAQ,EACP,WAAW;4BACX,CAAC,yBAAyB;gCACzB,CAAC,CAAC,GAAG,GAAG,mBAAmB;gCAC3B,CAAC,CAAC,uBAAuB;oCACxB,CAAC,CAAC,GAAG,GAAG,wBAAwB;oCAChC,CAAC,CAAC,EAAE,CAAC;qBACR;iBACD,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACnC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,IAAI,kBAAkB,IAAI,GAAG,EAAE;aACtE,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5E,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACnE,CAAC;QAED,aAAa;QACb,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;YACnC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,IAAI,kBAAkB,IAAI,GAAG,EAAE;SACtE,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrG,IAAI,MAAM,EAAE,MAAM;YAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,MAAM,EAAE,SAAS;YACpB,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,MAAM,CAAC,SAAS,uDAAuD,CAAC,CAAC;QACjI,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,MAAM,CAAC,OAAgB;QACpC,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;YAC5B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,OAAO,EAAE,MAAM;YAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACV,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAAC,QAAiB;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAE9F,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,IAAY,EAAE,QAAiB;QACpD,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,IAAI,kBAAkB,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACzD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,kBAAkB,GAAG,GAAG,cAAc,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/C,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,GAAG,cAAc,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACzB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,IAAI,EAAE,EAAE;SAC7C,CAAC,CAAC;IACJ,CAAC;IAEO,IAAI;QACX,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,GAAQ;QACxD,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAC1E,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,4FAA4F;QAC5F,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,kCAAkC;QAClC,MAAM,MAAM,GAAG,MAAM,eAAe,CAA0B,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAErE,qDAAqD;QACrD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAE7D,iBAAiB;QACjB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAEtC,mBAAmB;QACnB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3F,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpF,kCAAkC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACzF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;gBACvF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACd,MAAM,eAAe,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACnD,IAAI,CAAC,eAAe,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACF,CAAC;QACF,CAAC;QAED,+BAA+B;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,mCAAmC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACf,4DAA4D;YAC5D,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEzG,sBAAsB;QACtB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,MAAM,YAAY,GAAI,GAAa,CAAC,OAAO,CAAC;YAC5C,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,iHAAiH;QACjH,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACpD,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV;gBACC,OAAO,EAAE,IAAI;gBACb,yBAAyB,EACxB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB;gBAC1G,uBAAuB,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO;aACrE,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CACf,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE/F,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;YAC9B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,GAAG,EAAE;SACtC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,GAAQ;QACrD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAuD,OAAO,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAErE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAEtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3F,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE/F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAEjC,6DAA6D;QAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,aAAa,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAErF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,2CAA2C;QAC3C,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACpG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;QACF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;YAC9B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,GAAG,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/E,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAgB;QAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAoE,OAAO,CAAC,CAAC;QACjH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAErE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAE7D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QAE5C,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC5E,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9E,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,eAAe,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/E,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE1D,qDAAqD;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACvH,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,MAAc;QAEd,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAE1D,kCAAkC;QAClC,IAAI,UAAU,EAAE,WAAW,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvD,CAAC;QAED,wEAAwE;QACxE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,UAAU,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;gBACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;YACzD,CAAC;QACF,CAAC;QAED,0GAA0G;QAC1G,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;YACpD,IAAI,UAAU,EAAE,iBAAiB,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;gBACxG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YACvD,CAAC;QACF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAa,EAAE,OAAgB;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,MAAM;YAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,MAAM,CAAC,SAAS,uDAAuD,CAAC,CAAC;QAC5H,CAAC;IACF,CAAC;IAEO,YAAY;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,CAAC;IAEO,eAAe;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,CAAC;IAChD,CAAC;IAED,kBAAkB;QACjB,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;IACtD,CAAC;IAEO,aAAa;QACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO;YAAE,OAAO,kBAAkB,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,kBAAkB,CAAC;IAC/D,CAAC;IAEO,cAAc;QACrB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO;YAAE,OAAO,iBAAiB,EAAE,CAAC;QAChE,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3D,CAAC;IAEO,eAAe;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAEO,mBAAmB;QAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO;YAAE,OAAO,gBAAgB,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO;YAAE,OAAO,gBAAgB,CAAC;QACxE,OAAO,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,IAA6B;QAC7E,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;QAEnE,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC,CAAC,WAAW;QAC5E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrB,CAAC;IAEO,uBAAuB;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAErC,IAAI,SAAS,EAAE,oBAAoB,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,SAAS,EAAE,eAAe,EAAE,OAAO;YAAE,OAAO,KAAK,CAAC;QAEtD,MAAM,EAAE,GAAG,SAAS,EAAE,iBAAiB,CAAC;QACxC,IAAI,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,gBAAgB;YAAE,OAAO,KAAK,CAAC;QAErD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,mCAAmC;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,gCAAgC,IAAI,aAAa,CAAC;IAC9E,CAAC;IAED,6BAA6B,CAAC,IAAY,EAAE,QAAiB,EAAE,UAAmB;QACjF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,mCAAmC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,QAAQ;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;CACD"}