@ibgib/web-gib 0.0.56 → 0.0.57

package/dist/identity/sso/sso-custodian-service.respec.mjs

@@ -1,254 +0,0 @@
-import { generateKeyPairSync, createSign } from 'node:crypto';
-import { respecfully, ifWeMight, iReckon, firstOfAll, lastOfAll } from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
-import { SsoCustodianService } from './sso-custodian-service.mjs';
-import { POOL_ID_MANAGE } from '@ibgib/core-gib/dist/keystone/keystone-constants.mjs';
-import { createStandardPoolConfig } from '@ibgib/core-gib/dist/keystone/keystone-config-builder.mjs';
-const maam = `[${import.meta.url}]`, sir = maam;
-await respecfully(sir, 'SsoCustodianService', async () => {
-    let mockPrivateKey;
-    let mockPublicKeyJwk;
-    let originalFetch;
-    firstOfAll(sir, async () => {
-        // Generate mock RSA key pair
-        const { privateKey, publicKey } = generateKeyPairSync('rsa', {
-            modulusLength: 2048
-        });
-        mockPrivateKey = privateKey;
-        // Export public key as JWK
-        mockPublicKeyJwk = publicKey.export({ format: 'jwk' });
-        mockPublicKeyJwk.kid = 'mock-kid-123';
-        mockPublicKeyJwk.alg = 'RS256';
-        mockPublicKeyJwk.use = 'sig';
-        // Mock global fetch to return JWKS containing the mock public key
-        originalFetch = globalThis.fetch;
-        globalThis.fetch = async (url, options) => {
-            if (url === 'https://www.googleapis.com/oauth2/v3/certs') {
-                return {
-                    ok: true,
-                    status: 200,
-                    json: async () => ({
-                        keys: [mockPublicKeyJwk]
-                    })
-                };
-            }
-            return {
-                ok: false,
-                status: 404,
-                text: async () => 'Not Found'
-            };
-        };
-    });
-    lastOfAll(sir, async () => {
-        // Restore global fetch
-        if (originalFetch) {
-            globalThis.fetch = originalFetch;
-        }
-    });
-    await ifWeMight(sir, 'verify dynamic RSA RS256 JWT signature successfully', async () => {
-        const config = {
-            ssoServerKdfSecret: 'mock-kdf-secret',
-            sessionSecret: 'mock-session-secret',
-            providers: {
-                google: {
-                    providerId: 'google',
-                    clientId: 'google-client-id-123',
-                    clientSecret: 'google-client-secret-123',
-                    tokenUrl: 'https://oauth2.googleapis.com/token',
-                    userInfoUrl: 'https://openidconnect.googleapis.com/v1/userinfo',
-                    jwksUrl: 'https://www.googleapis.com/oauth2/v3/certs'
-                }
-            }
-        };
-        const service = new SsoCustodianService(config);
-        // 1. Build JWT Header & Payload
-        const header = { alg: 'RS256', kid: 'mock-kid-123', typ: 'JWT' };
-        const payload = {
-            sub: 'user-sub-999',
-            email: 'user@example.com',
-            name: 'John Doe',
-            aud: 'google-client-id-123',
-            iss: 'https://accounts.google.com',
-            exp: Math.floor(Date.now() / 1000) + 3600 // expires in 1 hour
-        };
-        const headerB64 = Buffer.from(JSON.stringify(header)).toString('base64url');
-        const payloadB64 = Buffer.from(JSON.stringify(payload)).toString('base64url');
-        const data = `${headerB64}.${payloadB64}`;
-        // 2. Sign JWT using private key
-        const sign = createSign('RSA-SHA256');
-        sign.update(data);
-        const signatureB64 = sign.sign(mockPrivateKey, 'base64url');
-        const mockJwtToken = `${data}.${signatureB64}`;
-        // 3. Verify signature via service
-        const decodedPayload = await service.verifyJwt(mockJwtToken, config.providers.google);
-        iReckon(sir, decodedPayload.sub).isGonnaBe('user-sub-999');
-        iReckon(sir, decodedPayload.email).isGonnaBe('user@example.com');
-        iReckon(sir, decodedPayload.name).isGonnaBe('John Doe');
-    });
-    await ifWeMight(sir, 'fail validation if JWT has invalid signature', async () => {
-        const config = {
-            ssoServerKdfSecret: 'mock-kdf-secret',
-            sessionSecret: 'mock-session-secret',
-            providers: {
-                google: {
-                    providerId: 'google',
-                    clientId: 'google-client-id-123',
-                    clientSecret: 'google-client-secret-123',
-                    tokenUrl: 'https://oauth2.googleapis.com/token',
-                    userInfoUrl: 'https://openidconnect.googleapis.com/v1/userinfo',
-                    jwksUrl: 'https://www.googleapis.com/oauth2/v3/certs'
-                }
-            }
-        };
-        const service = new SsoCustodianService(config);
-        const header = { alg: 'RS256', kid: 'mock-kid-123', typ: 'JWT' };
-        const payload = {
-            sub: 'user-sub-999',
-            aud: 'google-client-id-123',
-            exp: Math.floor(Date.now() / 1000) + 3600
-        };
-        const headerB64 = Buffer.from(JSON.stringify(header)).toString('base64url');
-        const payloadB64 = Buffer.from(JSON.stringify(payload)).toString('base64url');
-        const data = `${headerB64}.${payloadB64}`;
-        // Create signature using a different/unregistered RSA key
-        const { privateKey: badPrivateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
-        const sign = createSign('RSA-SHA256');
-        sign.update(data);
-        const badSignatureB64 = sign.sign(badPrivateKey, 'base64url');
-        const badJwtToken = `${data}.${badSignatureB64}`;
-        let verifyError;
-        try {
-            await service.verifyJwt(badJwtToken, config.providers.google);
-        }
-        catch (error) {
-            verifyError = error;
-        }
-        iReckon(sir, verifyError).not.isGonnaBeUndefined();
-        iReckon(sir, verifyError.message).includes('Cryptographic signature verification failed');
-    });
-    await ifWeMight(sir, 'derive server-delegate secret deterministically', async () => {
-        const config = {
-            ssoServerKdfSecret: 'high-entropy-server-kdf-secret',
-            sessionSecret: 'session-secret-123',
-            providers: {}
-        };
-        const service = new SsoCustodianService(config);
-        const key = 'google:123456789';
-        const nonce1 = 'nonce-abc-123';
-        const nonce2 = 'nonce-def-456';
-        const secret1_a = await service.deriveServerDelegateSecret(key, nonce1);
-        const secret1_b = await service.deriveServerDelegateSecret(key, nonce1);
-        const secret2 = await service.deriveServerDelegateSecret(key, nonce2);
-        // Identical inputs must yield identical outputs
-        iReckon(sir, secret1_a).isGonnaBe(secret1_b);
-        // Different nonces must yield different outputs
-        iReckon(sir, secret1_a).not.isGonnaBe(secret2);
-        // Derived secrets must be string type with high entropy
-        iReckon(sir, typeof secret1_a).isGonnaBe('string');
-        iReckon(sir, secret1_a.length).isGonnaBe(128); // sha512 output in hex/base64 wrap
-    });
-    await ifWeMight(sir, 'create custodian challenge pool successfully', async () => {
-        const config = {
-            ssoServerKdfSecret: 'high-entropy-server-kdf-secret',
-            sessionSecret: 'session-secret-123',
-            providers: {}
-        };
-        const service = new SsoCustodianService(config);
-        const key = 'google:123456789';
-        const nonce = 'nonce-abc-123';
-        // 1. Create a mock target keystone containing a 'manage' pool
-        const userManageConfig = createStandardPoolConfig({
-            id: POOL_ID_MANAGE,
-            salt: 'user-manage-salt'
-        });
-        userManageConfig.behavior.size = 12; // custom size for verification
-        const mockTargetKeystone = {
-            ib: 'keystone^some-tjp-addr',
-            gib: 'some-gib-value',
-            data: {
-                challengePools: [
-                    {
-                        id: 'manage',
-                        config: userManageConfig,
-                        challenges: { 'chal1': 'val1' }
-                    }
-                ],
-                n: 0
-            }
-        };
-        // 2. Mock metaspace and space calls
-        const mockSpace = {};
-        const mockMetaspace = {
-            getLatestAddr: async () => 'latest-keystone-addr',
-            get: async () => ({
-                success: true,
-                ibGibs: [mockTargetKeystone]
-            })
-        };
-        const custodianPool = await service.createCustodianChallengePool({
-            providerId: 'google',
-            providerKey: key,
-            userNonce: nonce,
-            keystoneAddr: 'some-tjp-addr',
-            metaspace: mockMetaspace,
-            space: mockSpace
-        });
-        iReckon(sir, custodianPool).not.isGonnaBeUndefined();
-        iReckon(sir, custodianPool.id).willEqual('custodian-manage-google');
-        iReckon(sir, custodianPool.isForeign).isGonnaBeTrue();
-        iReckon(sir, custodianPool.metadata?.providerKey).willEqual(key);
-        // Replicated behavior size from parent manage pool config
-        iReckon(sir, custodianPool.config.behavior.size).willEqual(userManageConfig.behavior.size);
-        // Structural validation of challenges
-        const challengesCount = Object.keys(custodianPool.challenges).length;
-        iReckon(sir, challengesCount).willEqual(custodianPool.config.behavior.size);
-    });
-    await ifWeMight(sir, 'revoke tokens successfully, making the correct http fetch calls', async () => {
-        const config = {
-            ssoServerKdfSecret: 'high-entropy-server-kdf-secret',
-            sessionSecret: 'session-secret-123',
-            providers: {
-                google: {
-                    providerId: 'google',
-                    clientId: 'google-client-id-abc',
-                    clientSecret: 'google-client-secret-abc',
-                    tokenUrl: 'https://oauth2.googleapis.com/token',
-                    userInfoUrl: 'https://openidconnect.googleapis.com/v1/userinfo'
-                },
-                github: {
-                    providerId: 'github',
-                    clientId: 'github-client-id-xyz',
-                    clientSecret: 'github-client-secret-xyz',
-                    tokenUrl: 'https://github.com/login/oauth/access_token',
-                    userInfoUrl: 'https://api.github.com/user'
-                }
-            }
-        };
-        const service = new SsoCustodianService(config);
-        const originalFetch = globalThis.fetch;
-        let fetchCalls = [];
-        globalThis.fetch = (async (url, options) => {
-            fetchCalls.push({ url, options });
-            return {
-                ok: true,
-                status: 200,
-                text: async () => 'ok'
-            };
-        });
-        try {
-            // Revoke Google token
-            await service.revokeToken('google', 'google-test-token-123');
-            iReckon(sir, fetchCalls.length).willEqual(1);
-            iReckon(sir, fetchCalls[0].url).includes('google-test-token-123');
-            // Revoke GitHub token
-            await service.revokeToken('github', 'github-test-token-456');
-            iReckon(sir, fetchCalls.length).willEqual(2);
-            iReckon(sir, fetchCalls[1].url).includes('/applications/github-client-id-xyz/grant');
-            iReckon(sir, fetchCalls[1].options.method).willEqual('DELETE');
-            iReckon(sir, fetchCalls[1].options.headers['Authorization']).includes('Basic');
-        }
-        finally {
-            globalThis.fetch = originalFetch;
-        }
-    });
-});
-//# sourceMappingURL=sso-custodian-service.respec.mjs.map

package/dist/identity/sso/sso-custodian-service.respec.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"sso-custodian-service.respec.mjs","sourceRoot":"","sources":["../../../src/identity/sso/sso-custodian-service.respec.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACH,WAAW,EACX,SAAS,EACT,OAAO,EACP,UAAU,EACV,SAAS,EACZ,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAA4B,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAChH,OAAO,EAAE,wBAAwB,EAAE,MAAM,2DAA2D,CAAC;AAErG,MAAM,IAAI,GAAG,IAAI,OAAO,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;AAEhD,MAAM,WAAW,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,IAAI,EAAE;IACrD,IAAI,cAAmB,CAAC;IACxB,IAAI,gBAAqB,CAAC;IAC1B,IAAI,aAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACvB,6BAA6B;QAC7B,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE;YACzD,aAAa,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,cAAc,GAAG,UAAU,CAAC;QAE5B,2BAA2B;QAC3B,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,gBAAgB,CAAC,GAAG,GAAG,cAAc,CAAC;QACtC,gBAAgB,CAAC,GAAG,GAAG,OAAO,CAAC;QAC/B,gBAAgB,CAAC,GAAG,GAAG,KAAK,CAAC;QAE7B,kEAAkE;QAClE,aAAa,GAAI,UAAkB,CAAC,KAAK,CAAC;QACzC,UAAkB,CAAC,KAAK,GAAG,KAAK,EAAE,GAAW,EAAE,OAAa,EAAE,EAAE;YAC7D,IAAI,GAAG,KAAK,4CAA4C,EAAE,CAAC;gBACvD,OAAO;oBACH,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;wBACf,IAAI,EAAE,CAAC,gBAAgB,CAAC;qBAC3B,CAAC;iBACE,CAAC;YACb,CAAC;YACD,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW;aACzB,CAAC;QACb,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACtB,uBAAuB;QACvB,IAAI,aAAa,EAAE,CAAC;YACf,UAAkB,CAAC,KAAK,GAAG,aAAa,CAAC;QAC9C,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,GAAG,EAAE,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAoB;YAC5B,kBAAkB,EAAE,iBAAiB;YACrC,aAAa,EAAE,qBAAqB;YACpC,SAAS,EAAE;gBACP,MAAM,EAAE;oBACJ,UAAU,EAAE,QAAQ;oBACpB,QAAQ,EAAE,sBAAsB;oBAChC,YAAY,EAAE,0BAA0B;oBACxC,QAAQ,EAAE,qCAAqC;oBAC/C,WAAW,EAAE,kDAAkD;oBAC/D,OAAO,EAAE,4CAA4C;iBACxD;aACJ;SACJ,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEhD,gCAAgC;QAChC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACZ,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,sBAAsB;YAC3B,GAAG,EAAE,6BAA6B;YAClC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,oBAAoB;SACjE,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAE1C,gCAAgC;QAChC,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,YAAY,EAAE,CAAC;QAE/C,kCAAkC;QAClC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,MAAO,CAAC,CAAC;QAEvF,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,GAAG,EAAE,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAoB;YAC5B,kBAAkB,EAAE,iBAAiB;YACrC,aAAa,EAAE,qBAAqB;YACpC,SAAS,EAAE;gBACP,MAAM,EAAE;oBACJ,UAAU,EAAE,QAAQ;oBACpB,QAAQ,EAAE,sBAAsB;oBAChC,YAAY,EAAE,0BAA0B;oBACxC,QAAQ,EAAE,qCAAqC;oBAC/C,WAAW,EAAE,kDAAkD;oBAC/D,OAAO,EAAE,4CAA4C;iBACxD;aACJ;SACJ,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACZ,GAAG,EAAE,cAAc;YACnB,GAAG,EAAE,sBAAsB;YAC3B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;SAC5C,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAE1C,0DAA0D;QAC1D,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,eAAe,EAAE,CAAC;QAEjD,IAAI,WAAgB,CAAC;QACrB,IAAI,CAAC;YACD,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,MAAO,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,WAAW,GAAG,KAAK,CAAC;QACxB,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,GAAG,EAAE,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAoB;YAC5B,kBAAkB,EAAE,gCAAgC;YACpD,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,EAAE;SAChB,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC/B,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,MAAM,MAAM,GAAG,eAAe,CAAC;QAE/B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEtE,gDAAgD;QAChD,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7C,gDAAgD;QAChD,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/C,wDAAwD;QACxD,OAAO,CAAC,GAAG,EAAE,OAAO,SAAS,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,mCAAmC;IACtF,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,GAAG,EAAE,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAoB;YAC5B,kBAAkB,EAAE,gCAAgC;YACpD,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE,EAAE;SAChB,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC/B,MAAM,KAAK,GAAG,eAAe,CAAC;QAE9B,8DAA8D;QAC9D,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;YAC9C,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,gBAAgB,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,+BAA+B;QACpE,MAAM,kBAAkB,GAAG;YACvB,EAAE,EAAE,wBAAwB;YAC5B,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE;gBACF,cAAc,EAAE;oBACZ;wBACI,EAAE,EAAE,QAAQ;wBACZ,MAAM,EAAE,gBAAgB;wBACxB,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;qBAClC;iBACJ;gBACD,CAAC,EAAE,CAAC;aACP;SACJ,CAAC;QAEF,oCAAoC;QACpC,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG;YAClB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,sBAAsB;YACjD,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,CAAC,kBAAkB,CAAC;aAC/B,CAAC;SACL,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,4BAA4B,CAAC;YAC7D,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,eAAe;YAC7B,SAAS,EAAE,aAAoB;YAC/B,KAAK,EAAE,SAAgB;SAC1B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEjE,0DAA0D;QAC1D,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE3F,sCAAsC;QACtC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACrE,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,GAAG,EAAE,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAoB;YAC5B,kBAAkB,EAAE,gCAAgC;YACpD,aAAa,EAAE,oBAAoB;YACnC,SAAS,EAAE;gBACP,MAAM,EAAE;oBACJ,UAAU,EAAE,QAAQ;oBACpB,QAAQ,EAAE,sBAAsB;oBAChC,YAAY,EAAE,0BAA0B;oBACxC,QAAQ,EAAE,qCAAqC;oBAC/C,WAAW,EAAE,kDAAkD;iBAClE;gBACD,MAAM,EAAE;oBACJ,UAAU,EAAE,QAAQ;oBACpB,QAAQ,EAAE,sBAAsB;oBAChC,YAAY,EAAE,0BAA0B;oBACxC,QAAQ,EAAE,6CAA6C;oBACvD,WAAW,EAAE,6BAA6B;iBAC7C;aACJ;SACJ,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;QACvC,IAAI,UAAU,GAAoC,EAAE,CAAC;QACrD,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,GAAQ,EAAE,OAAY,EAAE,EAAE;YACjD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,OAAO;gBACH,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;aAClB,CAAC;QACb,CAAC,CAAQ,CAAC;QAEV,IAAI,CAAC;YACD,sBAAsB;YACtB,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAElE,sBAAsB;YACtB,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnF,CAAC;gBAAS,CAAC;YACP,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;QACrC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}