@fiduswriter/editor 0.1.0

package/dist/e2ee/passphrase-manager.js

@@ -0,0 +1,350 @@
+/**
+ * PassphraseManager - Manages the personal passphrase system for E2EE.
+ *
+ * This module ties together PassphraseCrypto with the server API to provide:
+ * - Setup flow: generate keys, derive KWK, encrypt, send to server
+ * - Unlock flow: fetch from server, derive KWK, decrypt, store in sessionStorage
+ * - Recovery flow: use recovery key to decrypt backup, re-encrypt with new passphrase
+ * - Key checking: determine if user has encryption keys set up
+ * - DEK retrieval: get the document encryption key for a document
+ * - DEK sharing: encrypt DEK with recipient's public key
+ */
+import { getJson, post, postJson } from "fwtoolkit";
+import { E2EEKeyManager } from "./key-manager";
+import { PassphraseCrypto } from "./passphrase-crypto";
+export class PassphraseManager {
+    /**
+     * Check if the user has set up encryption keys on the server.
+     */
+    static async hasEncryptionKeys() {
+        try {
+            const data = await getJson("/api/user/encryption_key/");
+            return data.has_key === true;
+        }
+        catch (_e) {
+            return false;
+        }
+    }
+    /**
+     * Check if the master key and private key are in sessionStorage.
+     */
+    static hasKeysInSession() {
+        return PassphraseCrypto.hasKeysInSession();
+    }
+    /**
+     * Get keys from sessionStorage.
+     * Returns {masterKey, privateKey} or {masterKey: null, privateKey: null}
+     */
+    static getKeysFromSession() {
+        return PassphraseCrypto.getKeysFromSession();
+    }
+    /**
+     * Clear keys from sessionStorage (e.g., on sign-out).
+     */
+    static clearKeysFromSession() {
+        PassphraseCrypto.clearKeysFromSession();
+    }
+    /**
+     * Set up encryption keys for the first time.
+     *
+     * @param {string} passphrase - The user's chosen passphrase
+     * @returns {Promise<Object>} {recoveryKey: string} - The recovery key to display
+     */
+    static async setupEncryption(passphrase) {
+        // 1. Generate keys
+        const masterKey = await PassphraseCrypto.generateMasterKey();
+        const keyPair = await PassphraseCrypto.generateKeyPair();
+        const recoveryKey = PassphraseCrypto.generateRecoveryKey();
+        const salt = PassphraseCrypto.generateSalt();
+        // 2. Derive KWK from passphrase
+        const kwk = await PassphraseCrypto.deriveKWK(passphrase, salt);
+        // 3. Encrypt master key and private key with KWK
+        const encryptedMasterKey = await PassphraseCrypto.encryptKey(masterKey, kwk);
+        const encryptedPrivateKey = await PassphraseCrypto.encryptPrivateKey(keyPair.privateKey, kwk);
+        // 4. Encrypt backup of master key with recovery key
+        const recoveryKeyRaw = PassphraseCrypto._hexToBytes(recoveryKey);
+        const recoveryKeyCryptoKey = await crypto.subtle.importKey("raw", recoveryKeyRaw, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+        const encryptedMasterKeyBackup = await PassphraseCrypto.encryptKey(masterKey, recoveryKeyCryptoKey);
+        // 5. Export public key as JWK
+        const publicKeyJwk = await PassphraseCrypto.exportPublicKey(keyPair.publicKey);
+        // 6. Send to server
+        const saveData = {
+            data: JSON.stringify({
+                public_key: publicKeyJwk,
+                encrypted_master_key: encryptedMasterKey,
+                encrypted_private_key: encryptedPrivateKey,
+                user_salt: PassphraseCrypto._bytesToBase64(salt),
+                user_iterations: 600000,
+                encrypted_master_key_backup: encryptedMasterKeyBackup
+            })
+        };
+        const { status } = await postJson("/api/user/encryption_key/save/", saveData);
+        if (status >= 400) {
+            throw new Error("Failed to save encryption keys");
+        }
+        // 7. Store in sessionStorage
+        await PassphraseCrypto.storeKeysInSession(masterKey, keyPair.privateKey);
+        return { recoveryKey };
+    }
+    /**
+     * Unlock encryption keys using the passphrase.
+     *
+     * @param {string} passphrase - The user's passphrase
+     * @returns {Promise<boolean>} true if successful
+     */
+    static async unlockWithPassphrase(passphrase) {
+        // 1. Fetch encrypted keys from server
+        const data = await getJson("/api/user/encryption_key/");
+        if (!data.has_key) {
+            throw new Error("No encryption keys found");
+        }
+        // 2. Derive KWK
+        const salt = PassphraseCrypto._base64ToBytes(data.user_salt);
+        const kwk = await PassphraseCrypto.deriveKWK(passphrase, salt, data.user_iterations);
+        // 3. Decrypt master key and private key
+        const masterKey = await PassphraseCrypto.decryptKey(data.encrypted_master_key, kwk);
+        const privateKey = await PassphraseCrypto.decryptPrivateKey(data.encrypted_private_key, kwk);
+        // 4. Store in sessionStorage
+        await PassphraseCrypto.storeKeysInSession(masterKey, privateKey);
+        return true;
+    }
+    /**
+     * Change the passphrase without rotating keys.
+     *
+     * @param {string} oldPassphrase - Current passphrase
+     * @param {string} newPassphrase - New passphrase
+     * @returns {Promise<boolean>} true if successful
+     */
+    static async changePassphrase(oldPassphrase, newPassphrase) {
+        // 1. Fetch encrypted keys from server
+        const data = await getJson("/api/user/encryption_key/");
+        if (!data.has_key) {
+            throw new Error("No encryption keys found");
+        }
+        // 2. Derive old KWK and decrypt keys
+        const oldSalt = PassphraseCrypto._base64ToBytes(data.user_salt);
+        const oldKwk = await PassphraseCrypto.deriveKWK(oldPassphrase, oldSalt, data.user_iterations);
+        const masterKey = await PassphraseCrypto.decryptKey(data.encrypted_master_key, oldKwk);
+        const privateKey = await PassphraseCrypto.decryptPrivateKey(data.encrypted_private_key, oldKwk);
+        // 3. Generate new salt and derive new KWK
+        const newSalt = PassphraseCrypto.generateSalt();
+        const newKwk = await PassphraseCrypto.deriveKWK(newPassphrase, newSalt);
+        // 4. Re-encrypt master key and private key with new KWK
+        const encryptedMasterKey = await PassphraseCrypto.encryptKey(masterKey, newKwk);
+        const encryptedPrivateKey = await PassphraseCrypto.encryptPrivateKey(privateKey, newKwk);
+        // 5. Re-encrypt master key backup with existing recovery key
+        // (We keep the same recovery key so the user doesn't need to update
+        // their stored backup. The backup is encrypted with the recovery key,
+        // not the passphrase, so it remains valid.)
+        const encryptedMasterKeyBackup = data.encrypted_master_key_backup;
+        // 6. Send updated keys to server
+        const saveData = {
+            data: JSON.stringify({
+                public_key: data.public_key,
+                encrypted_master_key: encryptedMasterKey,
+                encrypted_private_key: encryptedPrivateKey,
+                user_salt: PassphraseCrypto._bytesToBase64(newSalt),
+                user_iterations: 600000,
+                encrypted_master_key_backup: encryptedMasterKeyBackup
+            })
+        };
+        const { status } = await postJson("/api/user/encryption_key/save/", saveData);
+        if (status >= 400) {
+            throw new Error("Failed to save updated encryption keys");
+        }
+        // 7. Update sessionStorage
+        await PassphraseCrypto.storeKeysInSession(masterKey, privateKey);
+        return true;
+    }
+    /**
+     * Recover encryption keys using the recovery key.
+     *
+     * @param {string} recoveryKey - The recovery key (hex string)
+     * @param {string} newPassphrase - The new passphrase to set
+     * @returns {Promise<Object>} {newRecoveryKey: string}
+     */
+    static async recoverWithRecoveryKey(recoveryKey, newPassphrase) {
+        // 1. Fetch encrypted keys from server
+        const data = await getJson("/api/user/encryption_key/");
+        if (!data.has_key) {
+            throw new Error("No encryption keys found");
+        }
+        // 2. Decrypt master key backup with recovery key
+        const recoveryKeyRaw = PassphraseCrypto._hexToBytes(recoveryKey);
+        const recoveryKeyCryptoKey = await crypto.subtle.importKey("raw", recoveryKeyRaw, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+        const masterKey = await PassphraseCrypto.decryptKey(data.encrypted_master_key_backup, recoveryKeyCryptoKey);
+        // 3. Generate new key pair
+        const newKeyPair = await PassphraseCrypto.generateKeyPair();
+        const newRecoveryKey = PassphraseCrypto.generateRecoveryKey();
+        const newSalt = PassphraseCrypto.generateSalt();
+        // 4. Derive new KWK from new passphrase
+        const newKwk = await PassphraseCrypto.deriveKWK(newPassphrase, newSalt);
+        // 5. Re-encrypt master key and new private key
+        const encryptedMasterKey = await PassphraseCrypto.encryptKey(masterKey, newKwk);
+        const encryptedPrivateKey = await PassphraseCrypto.encryptPrivateKey(newKeyPair.privateKey, newKwk);
+        // 6. Create new backup
+        const newRecoveryKeyRaw = PassphraseCrypto._hexToBytes(newRecoveryKey);
+        const newRecoveryKeyCryptoKey = await crypto.subtle.importKey("raw", newRecoveryKeyRaw, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+        const encryptedMasterKeyBackup = await PassphraseCrypto.encryptKey(masterKey, newRecoveryKeyCryptoKey);
+        // 7. Export new public key
+        const publicKeyJwk = await PassphraseCrypto.exportPublicKey(newKeyPair.publicKey);
+        // 8. Send updated keys to server
+        const saveData = {
+            data: JSON.stringify({
+                public_key: publicKeyJwk,
+                encrypted_master_key: encryptedMasterKey,
+                encrypted_private_key: encryptedPrivateKey,
+                user_salt: PassphraseCrypto._bytesToBase64(newSalt),
+                user_iterations: 600000,
+                encrypted_master_key_backup: encryptedMasterKeyBackup
+            })
+        };
+        const { status } = await postJson("/api/user/encryption_key/save/", saveData);
+        if (status >= 400) {
+            throw new Error("Failed to save updated encryption keys");
+        }
+        // 9. Store in sessionStorage
+        await PassphraseCrypto.storeKeysInSession(masterKey, newKeyPair.privateKey);
+        return { newRecoveryKey };
+    }
+    /**
+     * Get the document password for a document.
+     *
+     * If encrypted with the user's master key, decrypts it directly.
+     * If encrypted with the user's public key, decrypts with private key and
+     * upgrades to master-key encryption.
+     *
+     * @param {number} documentId - The document ID
+     * @returns {Promise<string|null>} The document password, or null if not available
+     */
+    static async getDocumentPassword(documentId) {
+        const { masterKey, privateKey } = await PassphraseCrypto.getKeysFromSession();
+        if (!masterKey || !privateKey) {
+            return null;
+        }
+        const { json } = await postJson("/api/document/encryption_key/get/", {
+            document_id: documentId
+        });
+        if (!json.has_key) {
+            return null;
+        }
+        let password;
+        if (json.encrypted_with_master_key) {
+            password = await PassphraseCrypto.decryptString(json.encrypted_key, masterKey);
+        }
+        else {
+            const parts = json.encrypted_key.split(":");
+            if (parts.length !== 2) {
+                return null;
+            }
+            password = await PassphraseCrypto.decryptStringWithPrivateKey(parts[1], parts[0], privateKey);
+            // Upgrade to master-key encryption for next time
+            const upgradedEncryptedPassword = await PassphraseCrypto.encryptString(password, masterKey);
+            await postJson("/api/document/encryption_key/update/", {
+                id: json.id,
+                encrypted_key: upgradedEncryptedPassword,
+                encrypted_with_master_key: true
+            });
+        }
+        return password;
+    }
+    /**
+     * Create or store a document password for a document.
+     *
+     * Used when:
+     * - Creating a new encrypted document (owner's password encrypted with MK)
+     * - Sharing with another passphrase user (password encrypted with their public key)
+     *
+     * @param {number} documentId - The document ID
+     * @param {string} password - The document password
+     * @param {number} holderId - The user ID to store the password for (default: current user)
+     * @param {string} holderType - "user" or "userinvite"
+     * @param {boolean} encryptedWithMasterKey - Whether to encrypt with MK or public key
+     * @returns {Promise<Object>} Server response
+     */
+    static async saveDocumentPassword(documentId, password, holderId = null, _holderType = "user", encryptedWithMasterKey = true) {
+        let encryptedKey;
+        if (encryptedWithMasterKey) {
+            const { masterKey } = await PassphraseCrypto.getKeysFromSession();
+            if (!masterKey) {
+                throw new Error("Master key not available in session");
+            }
+            encryptedKey = await PassphraseCrypto.encryptString(password, masterKey);
+        }
+        else {
+            const pkJson = await getJson(`/api/user/encryption_public_key/${holderId}/`);
+            if (!pkJson.has_key) {
+                throw new Error("Recipient has not set up encryption");
+            }
+            const recipientPublicKey = await PassphraseCrypto.importPublicKey(pkJson.public_key);
+            const encryptedData = await PassphraseCrypto.encryptStringWithPublicKey(password, recipientPublicKey);
+            encryptedKey = `${encryptedData.ephemeralPublicKeyJwk}:${encryptedData.encryptedData}`;
+        }
+        const saveData = {
+            document_id: documentId,
+            encrypted_key: encryptedKey,
+            encrypted_with_master_key: encryptedWithMasterKey
+        };
+        if (holderId) {
+            saveData.holder_id = holderId;
+        }
+        const { json, status } = await postJson("/api/document/encryption_key/save/", saveData);
+        if (status >= 400) {
+            throw new Error("Failed to save document password");
+        }
+        return json;
+    }
+    /**
+     * Generate a new random document password that is itself a valid raw DEK.
+     * Returns a 44-character base64-encoded 32-byte AES key.
+     */
+    static generateDocumentPassword() {
+        return PassphraseCrypto.generateDocumentPassword();
+    }
+    /**
+     * Resolve a document password to an AES-GCM key.
+     * If the password is a raw DEK (43/44 char base64), use it directly.
+     * Otherwise, derive the key via PBKDF2.
+     */
+    static resolvePasswordToKey(password, salt, iterations) {
+        return E2EEKeyManager.resolvePasswordToKey(password, salt, iterations);
+    }
+    /**
+     * Check if a user has set up encryption keys (for sharing).
+     */
+    static async userHasEncryptionKeys(userId) {
+        try {
+            const data = await getJson(`/api/user/encryption_public_key/${userId}/`);
+            return data.has_key === true;
+        }
+        catch (_e) {
+            return false;
+        }
+    }
+    /**
+     * Check if user has dismissed the passphrase setup offer.
+     */
+    static async hasUserDismissedPassphraseOffer() {
+        try {
+            const data = await getJson("/api/user/preferences/get/");
+            return data.preferences?.has_dismissed_passphrase_offer === true;
+        }
+        catch (_e) {
+            return false;
+        }
+    }
+    /**
+     * Mark that user has dismissed the passphrase setup offer.
+     */
+    static async markPassphraseDismissed() {
+        try {
+            await post("/api/user/preferences/update/", {
+                has_dismissed_passphrase_offer: true
+            });
+        }
+        catch (_e) {
+            // Silently fail - preference saving is best-effort
+        }
+    }
+}
+//# sourceMappingURL=passphrase-manager.js.map

package/dist/e2ee/passphrase-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase-manager.js","sourceRoot":"","sources":["../../src/e2ee/passphrase-manager.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAC,MAAM,WAAW,CAAA;AACjD,OAAO,EAAC,cAAc,EAAC,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAA;AAEpD,MAAM,OAAO,iBAAiB;IAC1B;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAC1B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;YACvD,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAA;QAChC,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACV,OAAO,KAAK,CAAA;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB;QACnB,OAAO,gBAAgB,CAAC,gBAAgB,EAAE,CAAA;IAC9C,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,kBAAkB;QACrB,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,CAAA;IAChD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,oBAAoB;QACvB,gBAAgB,CAAC,oBAAoB,EAAE,CAAA;IAC3C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,UAAU;QACnC,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,CAAA;QACxD,MAAM,WAAW,GAAG,gBAAgB,CAAC,mBAAmB,EAAE,CAAA;QAC1D,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAA;QAE5C,gCAAgC;QAChC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAE9D,iDAAiD;QACjD,MAAM,kBAAkB,GAAG,MAAM,gBAAgB,CAAC,UAAU,CACxD,SAAS,EACT,GAAG,CACN,CAAA;QACD,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAChE,OAAO,CAAC,UAAU,EAClB,GAAG,CACN,CAAA;QAED,oDAAoD;QACpD,MAAM,cAAc,GAAG,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QAChE,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACtD,KAAK,EACL,cAAc,EACd,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAC,EAC9B,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,CAAA;QACD,MAAM,wBAAwB,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAC9D,SAAS,EACT,oBAAoB,CACvB,CAAA;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,eAAe,CACvD,OAAO,CAAC,SAAS,CACpB,CAAA;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,UAAU,EAAE,YAAY;gBACxB,oBAAoB,EAAE,kBAAkB;gBACxC,qBAAqB,EAAE,mBAAmB;gBAC1C,SAAS,EAAE,gBAAgB,CAAC,cAAc,CAAC,IAAI,CAAC;gBAChD,eAAe,EAAE,MAAM;gBACvB,2BAA2B,EAAE,wBAAwB;aACxD,CAAC;SACL,CAAA;QACD,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,QAAQ,CAC3B,gCAAgC,EAChC,QAAQ,CACX,CAAA;QACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACrD,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QAExE,OAAO,EAAC,WAAW,EAAC,CAAA;IACxB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU;QACxC,sCAAsC;QACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC/C,CAAC;QAED,gBAAgB;QAChB,MAAM,IAAI,GAAG,gBAAgB,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,SAAS,CACxC,UAAU,EACV,IAAI,EACJ,IAAI,CAAC,eAAe,CACvB,CAAA;QAED,wCAAwC;QACxC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAC/C,IAAI,CAAC,oBAAoB,EACzB,GAAG,CACN,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CACvD,IAAI,CAAC,qBAAqB,EAC1B,GAAG,CACN,CAAA;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAEhE,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,aAAa,EAAE,aAAa;QACtD,sCAAsC;QACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC/C,CAAC;QAED,qCAAqC;QACrC,MAAM,OAAO,GAAG,gBAAgB,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAC3C,aAAa,EACb,OAAO,EACP,IAAI,CAAC,eAAe,CACvB,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAC/C,IAAI,CAAC,oBAAoB,EACzB,MAAM,CACT,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CACvD,IAAI,CAAC,qBAAqB,EAC1B,MAAM,CACT,CAAA;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QAEvE,wDAAwD;QACxD,MAAM,kBAAkB,GAAG,MAAM,gBAAgB,CAAC,UAAU,CACxD,SAAS,EACT,MAAM,CACT,CAAA;QACD,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAChE,UAAU,EACV,MAAM,CACT,CAAA;QAED,6DAA6D;QAC7D,oEAAoE;QACpE,sEAAsE;QACtE,4CAA4C;QAC5C,MAAM,wBAAwB,GAAG,IAAI,CAAC,2BAA2B,CAAA;QAEjE,iCAAiC;QACjC,MAAM,QAAQ,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,oBAAoB,EAAE,kBAAkB;gBACxC,qBAAqB,EAAE,mBAAmB;gBAC1C,SAAS,EAAE,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC;gBACnD,eAAe,EAAE,MAAM;gBACvB,2BAA2B,EAAE,wBAAwB;aACxD,CAAC;SACL,CAAA;QACD,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,QAAQ,CAC3B,gCAAgC,EAChC,QAAQ,CACX,CAAA;QACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC7D,CAAC;QAED,2BAA2B;QAC3B,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAEhE,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,WAAW,EAAE,aAAa;QAC1D,sCAAsC;QACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC/C,CAAC;QAED,iDAAiD;QACjD,MAAM,cAAc,GAAG,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QAChE,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACtD,KAAK,EACL,cAAc,EACd,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAC,EAC9B,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAC/C,IAAI,CAAC,2BAA2B,EAChC,oBAAoB,CACvB,CAAA;QAED,2BAA2B;QAC3B,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,CAAA;QAC3D,MAAM,cAAc,GAAG,gBAAgB,CAAC,mBAAmB,EAAE,CAAA;QAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAA;QAE/C,wCAAwC;QACxC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QAEvE,+CAA+C;QAC/C,MAAM,kBAAkB,GAAG,MAAM,gBAAgB,CAAC,UAAU,CACxD,SAAS,EACT,MAAM,CACT,CAAA;QACD,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAChE,UAAU,CAAC,UAAU,EACrB,MAAM,CACT,CAAA;QAED,uBAAuB;QACvB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACtE,MAAM,uBAAuB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzD,KAAK,EACL,iBAAiB,EACjB,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAC,EAC9B,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,CAAA;QACD,MAAM,wBAAwB,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAC9D,SAAS,EACT,uBAAuB,CAC1B,CAAA;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,eAAe,CACvD,UAAU,CAAC,SAAS,CACvB,CAAA;QAED,iCAAiC;QACjC,MAAM,QAAQ,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,UAAU,EAAE,YAAY;gBACxB,oBAAoB,EAAE,kBAAkB;gBACxC,qBAAqB,EAAE,mBAAmB;gBAC1C,SAAS,EAAE,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC;gBACnD,eAAe,EAAE,MAAM;gBACvB,2BAA2B,EAAE,wBAAwB;aACxD,CAAC;SACL,CAAA;QACD,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,QAAQ,CAC3B,gCAAgC,EAChC,QAAQ,CACX,CAAA;QACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC7D,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,CAAC,kBAAkB,CACrC,SAAS,EACT,UAAU,CAAC,UAAU,CACxB,CAAA;QAED,OAAO,EAAC,cAAc,EAAC,CAAA;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU;QACvC,MAAM,EAAC,SAAS,EAAE,UAAU,EAAC,GACzB,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,CAAA;QAC/C,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAA;QACf,CAAC;QAED,MAAM,EAAC,IAAI,EAAC,GAAG,MAAM,QAAQ,CAAC,mCAAmC,EAAE;YAC/D,WAAW,EAAE,UAAU;SAC1B,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,IAAI,CAAA;QACf,CAAC;QAED,IAAI,QAAQ,CAAA;QACZ,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACjC,QAAQ,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAC3C,IAAI,CAAC,aAAa,EAClB,SAAS,CACZ,CAAA;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAA;YACf,CAAC;YACD,QAAQ,GAAG,MAAM,gBAAgB,CAAC,2BAA2B,CACzD,KAAK,CAAC,CAAC,CAAC,EACR,KAAK,CAAC,CAAC,CAAC,EACR,UAAU,CACb,CAAA;YACD,iDAAiD;YACjD,MAAM,yBAAyB,GAC3B,MAAM,gBAAgB,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC7D,MAAM,QAAQ,CAAC,sCAAsC,EAAE;gBACnD,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,aAAa,EAAE,yBAAyB;gBACxC,yBAAyB,EAAE,IAAI;aAClC,CAAC,CAAA;QACN,CAAC;QAED,OAAO,QAAQ,CAAA;IACnB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAC7B,UAAU,EACV,QAAQ,EACR,QAAQ,GAAG,IAAI,EACf,WAAW,GAAG,MAAM,EACpB,sBAAsB,GAAG,IAAI;QAE7B,IAAI,YAAY,CAAA;QAChB,IAAI,sBAAsB,EAAE,CAAC;YACzB,MAAM,EAAC,SAAS,EAAC,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,CAAA;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YAC1D,CAAC;YACD,YAAY,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAC/C,QAAQ,EACR,SAAS,CACZ,CAAA;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CACxB,mCAAmC,QAAQ,GAAG,CACjD,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YAC1D,CAAC;YACD,MAAM,kBAAkB,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAC7D,MAAM,CAAC,UAAU,CACpB,CAAA;YACD,MAAM,aAAa,GACf,MAAM,gBAAgB,CAAC,0BAA0B,CAC7C,QAAQ,EACR,kBAAkB,CACrB,CAAA;YACL,YAAY,GAAG,GAAG,aAAa,CAAC,qBAAqB,IAAI,aAAa,CAAC,aAAa,EAAE,CAAA;QAC1F,CAAC;QAED,MAAM,QAAQ,GAAG;YACb,WAAW,EAAE,UAAU;YACvB,aAAa,EAAE,YAAY;YAC3B,yBAAyB,EAAE,sBAAsB;SACpD,CAAA;QACD,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAA;QACjC,CAAC;QACD,MAAM,EAAC,IAAI,EAAE,MAAM,EAAC,GAAG,MAAM,QAAQ,CACjC,oCAAoC,EACpC,QAAQ,CACX,CAAA;QACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,wBAAwB;QAC3B,OAAO,gBAAgB,CAAC,wBAAwB,EAAE,CAAA;IACtD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU;QAClD,OAAO,cAAc,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IAC1E,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM;QACrC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,CACtB,mCAAmC,MAAM,GAAG,CAC/C,CAAA;YACD,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAA;QAChC,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACV,OAAO,KAAK,CAAA;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,+BAA+B;QACxC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAA;YACxD,OAAO,IAAI,CAAC,WAAW,EAAE,8BAA8B,KAAK,IAAI,CAAA;QACpE,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACV,OAAO,KAAK,CAAA;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,uBAAuB;QAChC,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,+BAA+B,EAAE;gBACxC,8BAA8B,EAAE,IAAI;aACvC,CAAC,CAAA;QACN,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACV,mDAAmD;QACvD,CAAC;IACL,CAAC;CACJ"}