@hawcx/oauth-client 0.2.0 → 4.0.1

package/dist/exceptions.d.ts

@@ -1,52 +0,0 @@
-/**
- * Custom exceptions for the Hawcx OAuth Client SDK
- */
-/**
- * Base exception for all hawcx_oauth_client errors
- */
-export declare class HawcxOAuthError extends Error {
-    constructor(message: string);
-}
-/**
- * Raised when the OAuth code exchange fails.
- *
- * This can happen due to:
- * - Invalid or expired authorization code
- * - Network connectivity issues
- * - OAuth server errors
- * - Malformed responses
- */
-export declare class OAuthExchangeError extends HawcxOAuthError {
-    statusCode?: number;
-    responseBody?: any;
-    constructor(message: string, statusCode?: number, responseBody?: any);
-    toString(): string;
-}
-/**
- * Raised when JWT signature or claims verification fails.
- *
- * This can happen due to:
- * - Invalid JWT signature (tampering detected)
- * - Expired token
- * - Wrong audience or issuer
- * - Token not yet valid (nbf claim)
- * - Malformed JWT structure
- */
-export declare class JWTVerificationError extends HawcxOAuthError {
-    originalError?: Error;
-    constructor(message: string, originalError?: Error);
-}
-/**
- * Raised when the provided public key is invalid or unreadable.
- *
- * This can happen due to:
- * - File not found
- * - Invalid PEM format
- * - Wrong key algorithm
- * - Permission denied
- * - Empty key
- */
-export declare class InvalidPublicKeyError extends HawcxOAuthError {
-    constructor(message: string);
-}
-//# sourceMappingURL=exceptions.d.ts.map

package/dist/exceptions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"exceptions.d.ts","sourceRoot":"","sources":["../src/exceptions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,GAAG,CAAC;gBAEP,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,GAAG;IAQpE,QAAQ,IAAI,MAAM;CAOnB;AAED;;;;;;;;;GASG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IACvD,aAAa,CAAC,EAAE,KAAK,CAAC;gBAEV,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK;CAMnD;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAsB,SAAQ,eAAe;gBAC5C,OAAO,EAAE,MAAM;CAK5B"}

package/dist/exceptions.js

@@ -1,81 +0,0 @@
-"use strict";
-/**
- * Custom exceptions for the Hawcx OAuth Client SDK
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvalidPublicKeyError = exports.JWTVerificationError = exports.OAuthExchangeError = exports.HawcxOAuthError = void 0;
-/**
- * Base exception for all hawcx_oauth_client errors
- */
-class HawcxOAuthError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'HawcxOAuthError';
-        Object.setPrototypeOf(this, HawcxOAuthError.prototype);
-    }
-}
-exports.HawcxOAuthError = HawcxOAuthError;
-/**
- * Raised when the OAuth code exchange fails.
- *
- * This can happen due to:
- * - Invalid or expired authorization code
- * - Network connectivity issues
- * - OAuth server errors
- * - Malformed responses
- */
-class OAuthExchangeError extends HawcxOAuthError {
-    constructor(message, statusCode, responseBody) {
-        super(message);
-        this.name = 'OAuthExchangeError';
-        this.statusCode = statusCode;
-        this.responseBody = responseBody;
-        Object.setPrototypeOf(this, OAuthExchangeError.prototype);
-    }
-    toString() {
-        let base = this.message;
-        if (this.statusCode) {
-            base = `${base} (HTTP ${this.statusCode})`;
-        }
-        return base;
-    }
-}
-exports.OAuthExchangeError = OAuthExchangeError;
-/**
- * Raised when JWT signature or claims verification fails.
- *
- * This can happen due to:
- * - Invalid JWT signature (tampering detected)
- * - Expired token
- * - Wrong audience or issuer
- * - Token not yet valid (nbf claim)
- * - Malformed JWT structure
- */
-class JWTVerificationError extends HawcxOAuthError {
-    constructor(message, originalError) {
-        super(message);
-        this.name = 'JWTVerificationError';
-        this.originalError = originalError;
-        Object.setPrototypeOf(this, JWTVerificationError.prototype);
-    }
-}
-exports.JWTVerificationError = JWTVerificationError;
-/**
- * Raised when the provided public key is invalid or unreadable.
- *
- * This can happen due to:
- * - File not found
- * - Invalid PEM format
- * - Wrong key algorithm
- * - Permission denied
- * - Empty key
- */
-class InvalidPublicKeyError extends HawcxOAuthError {
-    constructor(message) {
-        super(message);
-        this.name = 'InvalidPublicKeyError';
-        Object.setPrototypeOf(this, InvalidPublicKeyError.prototype);
-    }
-}
-exports.InvalidPublicKeyError = InvalidPublicKeyError;
-//# sourceMappingURL=exceptions.js.map

package/dist/exceptions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exceptions.js","sourceRoot":"","sources":["../src/exceptions.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH;;GAEG;AACH,MAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAND,0CAMC;AAED;;;;;;;;GAQG;AACH,MAAa,kBAAmB,SAAQ,eAAe;IAIrD,YAAY,OAAe,EAAE,UAAmB,EAAE,YAAkB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,IAAI,UAAU,IAAI,CAAC,UAAU,GAAG,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAnBD,gDAmBC;AAED;;;;;;;;;GASG;AACH,MAAa,oBAAqB,SAAQ,eAAe;IAGvD,YAAY,OAAe,EAAE,aAAqB;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AATD,oDASC;AAED;;;;;;;;;GASG;AACH,MAAa,qBAAsB,SAAQ,eAAe;IACxD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACF;AAND,sDAMC"}

package/dist/utils.d.ts

@@ -1,61 +0,0 @@
-/**
- * Internal utilities for the Hawcx OAuth Client SDK
- */
-/**
- * Load public key from string or file.
- *
- * @param keyInput - Either a PEM-formatted public key string or a path to a key file
- * @returns PEM-formatted public key string
- * @throws InvalidPublicKeyError if the key cannot be loaded or is invalid
- *
- * @example
- * ```typescript
- * // From file
- * const key = loadPublicKey('keys/public.pem');
- *
- * // From string
- * const key = loadPublicKey(process.env.PUBLIC_KEY!);
- * ```
- */
-export declare function loadPublicKey(keyInput: string): string;
-/**
- * Fetch JWKS (JSON Web Key Set) from a URL with caching.
- *
- * @param jwksUrl - URL to fetch JWKS from (e.g., https://example.com/.well-known/jwks.json)
- * @param timeout - Request timeout in milliseconds (default: 10000)
- * @param ttl - Cache TTL in milliseconds (default: 3600000)
- * @returns JWKS object containing 'keys' array
- * @throws InvalidPublicKeyError if JWKS cannot be fetched or is invalid
- *
- * @example
- * ```typescript
- * const jwks = await fetchJwks('https://example.com/.well-known/jwks.json');
- * console.log(jwks.keys[0].kid);
- * ```
- */
-export declare function fetchJwks(jwksUrl: string, timeout?: number, ttl?: number): Promise<any>;
-/**
- * Extract a public key from JWKS and convert to PEM format.
- *
- * @param jwks - JWKS object (must contain 'keys' array)
- * @param kid - Key ID to search for (optional). If not provided, uses first key.
- * @returns PEM-formatted public key string
- * @throws InvalidPublicKeyError if key cannot be found or converted
- *
- * @example
- * ```typescript
- * const jwks = await fetchJwks('https://example.com/.well-known/jwks.json');
- * const pemKey = getKeyFromJwks(jwks, 'key-123');
- * ```
- */
-export declare function getKeyFromJwks(jwks: any, kid?: string): string;
-/**
- * Convert a JWK (JSON Web Key) to PEM format.
- * Supports RSA and EC (Elliptic Curve) keys.
- *
- * @param jwk - JWK object
- * @returns PEM-formatted public key string
- * @throws InvalidPublicKeyError if JWK cannot be converted
- */
-export declare function jwkToPem(jwk: any): string;
-//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgCtD;AAuCD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,MAAc,EACvB,GAAG,GAAE,MAAuB,GAC3B,OAAO,CAAC,GAAG,CAAC,CA2Cd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAyB9D;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CA+BzC"}

package/dist/utils.js

@@ -1,263 +0,0 @@
-"use strict";
-/**
- * Internal utilities for the Hawcx OAuth Client SDK
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadPublicKey = loadPublicKey;
-exports.fetchJwks = fetchJwks;
-exports.getKeyFromJwks = getKeyFromJwks;
-exports.jwkToPem = jwkToPem;
-const fs = __importStar(require("fs"));
-const axios_1 = __importDefault(require("axios"));
-const exceptions_1 = require("./exceptions");
-// JWKS cache: {url: {jwks: {...}, timestamp: number}}
-const jwksCache = {};
-const JWKS_CACHE_TTL = 3600000; // 1 hour in milliseconds
-/**
- * Load public key from string or file.
- *
- * @param keyInput - Either a PEM-formatted public key string or a path to a key file
- * @returns PEM-formatted public key string
- * @throws InvalidPublicKeyError if the key cannot be loaded or is invalid
- *
- * @example
- * ```typescript
- * // From file
- * const key = loadPublicKey('keys/public.pem');
- *
- * // From string
- * const key = loadPublicKey(process.env.PUBLIC_KEY!);
- * ```
- */
-function loadPublicKey(keyInput) {
-    // Check for empty input first
-    if (!keyInput || (typeof keyInput === 'string' && !keyInput.trim())) {
-        throw new exceptions_1.InvalidPublicKeyError('Public key is empty');
-    }
-    // Check if it looks like a file path (not starting with -----)
-    if (!keyInput.includes('-----BEGIN')) {
-        try {
-            if (!fs.existsSync(keyInput)) {
-                throw new exceptions_1.InvalidPublicKeyError(`Public key file not found: ${keyInput}`);
-            }
-            const stat = fs.statSync(keyInput);
-            if (!stat.isFile()) {
-                throw new exceptions_1.InvalidPublicKeyError(`Public key path is not a file: ${keyInput}`);
-            }
-            const keyContent = fs.readFileSync(keyInput, 'utf-8');
-            return validatePemFormat(keyContent);
-        }
-        catch (error) {
-            if (error instanceof exceptions_1.InvalidPublicKeyError) {
-                throw error;
-            }
-            throw new exceptions_1.InvalidPublicKeyError(`Error reading public key file ${keyInput}: ${error}`);
-        }
-    }
-    // Otherwise, treat as PEM string directly
-    if (typeof keyInput !== 'string') {
-        throw new exceptions_1.InvalidPublicKeyError(`Public key must be a string, got ${typeof keyInput}`);
-    }
-    return validatePemFormat(keyInput);
-}
-/**
- * Validate that the key content looks like a valid PEM public key.
- *
- * @param keyContent - The key content to validate
- * @returns The validated key content
- * @throws InvalidPublicKeyError if the key format is invalid
- */
-function validatePemFormat(keyContent) {
-    if (!keyContent || !keyContent.trim()) {
-        throw new exceptions_1.InvalidPublicKeyError('Public key is empty');
-    }
-    const keyStripped = keyContent.trim();
-    // Check for PEM markers
-    if (!keyStripped.includes('-----BEGIN') || !keyStripped.includes('-----END')) {
-        throw new exceptions_1.InvalidPublicKeyError('Public key does not appear to be in PEM format (missing BEGIN/END markers)');
-    }
-    // Check for common public key markers
-    const validMarkers = [
-        'BEGIN PUBLIC KEY',
-        'BEGIN RSA PUBLIC KEY',
-        'BEGIN CERTIFICATE',
-    ];
-    if (!validMarkers.some(marker => keyStripped.includes(marker))) {
-        throw new exceptions_1.InvalidPublicKeyError(`Public key does not contain recognized PEM markers. Expected one of: ${validMarkers.join(', ')}`);
-    }
-    return keyStripped;
-}
-/**
- * Fetch JWKS (JSON Web Key Set) from a URL with caching.
- *
- * @param jwksUrl - URL to fetch JWKS from (e.g., https://example.com/.well-known/jwks.json)
- * @param timeout - Request timeout in milliseconds (default: 10000)
- * @param ttl - Cache TTL in milliseconds (default: 3600000)
- * @returns JWKS object containing 'keys' array
- * @throws InvalidPublicKeyError if JWKS cannot be fetched or is invalid
- *
- * @example
- * ```typescript
- * const jwks = await fetchJwks('https://example.com/.well-known/jwks.json');
- * console.log(jwks.keys[0].kid);
- * ```
- */
-async function fetchJwks(jwksUrl, timeout = 10000, ttl = JWKS_CACHE_TTL) {
-    if (!jwksUrl || typeof jwksUrl !== 'string') {
-        throw new exceptions_1.InvalidPublicKeyError('JWKS URL must be a non-empty string');
-    }
-    // Check cache
-    const now = Date.now();
-    const cached = jwksCache[jwksUrl];
-    if (cached && now - cached.timestamp < ttl) {
-        return cached.jwks;
-    }
-    // Fetch from URL
-    try {
-        const response = await axios_1.default.get(jwksUrl, { timeout });
-        const jwks = response.data;
-        // Validate JWKS format
-        if (!jwks || typeof jwks !== 'object' || !Array.isArray(jwks.keys)) {
-            throw new exceptions_1.InvalidPublicKeyError(`Invalid JWKS format: missing 'keys' field in response from ${jwksUrl}`);
-        }
-        if (jwks.keys.length === 0) {
-            throw new exceptions_1.InvalidPublicKeyError(`Invalid JWKS format: 'keys' must be a non-empty array in response from ${jwksUrl}`);
-        }
-        // Cache the result
-        jwksCache[jwksUrl] = {
-            jwks,
-            timestamp: now,
-        };
-        return jwks;
-    }
-    catch (error) {
-        if (axios_1.default.isAxiosError(error)) {
-            throw new exceptions_1.InvalidPublicKeyError(`Failed to fetch JWKS from ${jwksUrl}: ${error.message}`);
-        }
-        throw new exceptions_1.InvalidPublicKeyError(`Failed to fetch JWKS from ${jwksUrl}: ${error}`);
-    }
-}
-/**
- * Extract a public key from JWKS and convert to PEM format.
- *
- * @param jwks - JWKS object (must contain 'keys' array)
- * @param kid - Key ID to search for (optional). If not provided, uses first key.
- * @returns PEM-formatted public key string
- * @throws InvalidPublicKeyError if key cannot be found or converted
- *
- * @example
- * ```typescript
- * const jwks = await fetchJwks('https://example.com/.well-known/jwks.json');
- * const pemKey = getKeyFromJwks(jwks, 'key-123');
- * ```
- */
-function getKeyFromJwks(jwks, kid) {
-    if (!jwks || typeof jwks !== 'object' || !Array.isArray(jwks.keys)) {
-        throw new exceptions_1.InvalidPublicKeyError("Invalid JWKS: missing 'keys' field");
-    }
-    const keys = jwks.keys;
-    if (keys.length === 0) {
-        throw new exceptions_1.InvalidPublicKeyError("Invalid JWKS: 'keys' must be a non-empty array");
-    }
-    // Find the key
-    let jwk;
-    if (kid) {
-        // Search for specific key ID
-        jwk = keys.find((k) => k.kid === kid);
-        if (!jwk) {
-            throw new exceptions_1.InvalidPublicKeyError(`Key with kid='${kid}' not found in JWKS`);
-        }
-    }
-    else {
-        // Use first key
-        jwk = keys[0];
-    }
-    // Convert JWK to PEM
-    return jwkToPem(jwk);
-}
-/**
- * Convert a JWK (JSON Web Key) to PEM format.
- * Supports RSA and EC (Elliptic Curve) keys.
- *
- * @param jwk - JWK object
- * @returns PEM-formatted public key string
- * @throws InvalidPublicKeyError if JWK cannot be converted
- */
-function jwkToPem(jwk) {
-    if (!jwk || typeof jwk !== 'object') {
-        throw new exceptions_1.InvalidPublicKeyError('Invalid JWK: must be an object');
-    }
-    const { kty } = jwk;
-    if (!kty) {
-        throw new exceptions_1.InvalidPublicKeyError('Invalid JWK: missing kty field');
-    }
-    try {
-        // Use Node.js crypto module to convert JWK to PEM
-        const crypto = require('crypto');
-        // Create a KeyObject from the JWK
-        const keyObject = crypto.createPublicKey({
-            key: jwk,
-            format: 'jwk'
-        });
-        // Export as PEM
-        const pem = keyObject.export({
-            type: 'spki',
-            format: 'pem'
-        });
-        return pem.toString();
-    }
-    catch (error) {
-        throw new exceptions_1.InvalidPublicKeyError(`Failed to convert JWK to PEM: ${error}`);
-    }
-}
-/**
- * Decode base64url-encoded data (RFC 4648)
- */
-function base64urlDecode(data) {
-    // Add padding if needed
-    let padded = data;
-    const padding = 4 - (data.length % 4);
-    if (padding !== 4) {
-        padded += '='.repeat(padding);
-    }
-    // Replace URL-safe characters
-    const base64 = padded.replace(/-/g, '+').replace(/_/g, '/');
-    return Buffer.from(base64, 'base64');
-}
-//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BH,sCAgCC;AAsDD,8BA+CC;AAgBD,wCAyBC;AAUD,4BA+BC;AA/OD,uCAAyB;AACzB,kDAA0B;AAC1B,6CAAqD;AAErD,sDAAsD;AACtD,MAAM,SAAS,GAAqD,EAAE,CAAC;AACvE,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,yBAAyB;AAEzD;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,aAAa,CAAC,QAAgB;IAC5C,8BAA8B;IAC9B,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,kCAAqB,CAAC,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,kCAAqB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,kCAAqB,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,iCAAiC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,kCAAqB,CAAC,oCAAoC,OAAO,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,kCAAqB,CAAC,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAEtC,wBAAwB;IACxB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,kCAAqB,CAC7B,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,YAAY,GAAG;QACnB,kBAAkB;QAClB,sBAAsB;QACtB,mBAAmB;KACpB,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,kCAAqB,CAC7B,wEAAwE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,UAAkB,KAAK,EACvB,MAAc,cAAc;IAE5B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,kCAAqB,CAAC,qCAAqC,CAAC,CAAC;IACzE,CAAC;IAED,cAAc;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAE3B,uBAAuB;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,kCAAqB,CAC7B,8DAA8D,OAAO,EAAE,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,kCAAqB,CAC7B,0EAA0E,OAAO,EAAE,CACpF,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,SAAS,CAAC,OAAO,CAAC,GAAG;YACnB,IAAI;YACJ,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAqB,CAAC,6BAA6B,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,kCAAqB,CAAC,6BAA6B,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,cAAc,CAAC,IAAS,EAAE,GAAY;IACpD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,kCAAqB,CAAC,oCAAoC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,kCAAqB,CAAC,gDAAgD,CAAC,CAAC;IACpF,CAAC;IAED,eAAe;IACf,IAAI,GAAQ,CAAC;IACb,IAAI,GAAG,EAAE,CAAC;QACR,6BAA6B;QAC7B,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,kCAAqB,CAAC,iBAAiB,GAAG,qBAAqB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gBAAgB;QAChB,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,qBAAqB;IACrB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,QAAQ,CAAC,GAAQ;IAC/B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,kCAAqB,CAAC,gCAAgC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,kCAAqB,CAAC,gCAAgC,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,kDAAkD;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEjC,kCAAkC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;YACvC,GAAG,EAAE,GAAG;YACR,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,gBAAgB;QAChB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;YAC3B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAqB,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,wBAAwB;IACxB,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE5D,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC"}