@kaapi/oauth2-auth-design 0.0.14 → 0.0.15

package/lib/flows/authorization-code.js

@@ -0,0 +1,570 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OIDCAuthorizationCodeBuilder = exports.OAuth2AuthorizationCodeBuilder = exports.OIDCAuthorizationCode = exports.OAuth2AuthorizationCode = void 0;
+const tslib_1 = require("tslib");
+const api_doc_generator_1 = require("@novice1/api-doc-generator");
+const common_1 = require("./common");
+const jwt_utils_1 = require("../utils/jwt-utils");
+const authorization_route_1 = require("./auth-code/authorization-route");
+const token_route_1 = require("./auth-code/token-route");
+const client_auth_methods_1 = require("../utils/client-auth-methods");
+const verify_code_verifier_1 = require("../utils/verify-code-verifier");
+class OAuth2AuthorizationCode extends common_1.OAuth2AuthDesign {
+    get grantType() {
+        return api_doc_generator_1.GrantType.authorizationCode;
+    }
+    constructor(_a) {
+        var { authorizationRoute, tokenRoute, refreshTokenRoute } = _a, props = tslib_1.__rest(_a, ["authorizationRoute", "tokenRoute", "refreshTokenRoute"]);
+        super(Object.assign(Object.assign({}, props), { strategyName: props.strategyName || 'oauth2-authorization-code' }));
+        this.pkce = false;
+        this.authorizationRoute = authorizationRoute;
+        this.tokenRoute = tokenRoute;
+        this.refreshTokenRoute = refreshTokenRoute;
+    }
+    withPkce() {
+        this.pkce = true;
+        return super.noneAuthenticationMethod();
+    }
+    withoutPkce() {
+        this.pkce = false;
+        this._clientAuthMethods.none = undefined;
+        return this;
+    }
+    isWithPkce() {
+        return this.pkce;
+    }
+    noneAuthenticationMethod() {
+        return this.withPkce();
+    }
+    handleAuthorization(_t, request, h) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const sr = {
+                handle: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                    // validating query
+                    if (req.query.client_id && typeof req.query.client_id === 'string' &&
+                        req.query.response_type === 'code' &&
+                        req.query.redirect_uri && typeof req.query.redirect_uri === 'string') {
+                        const params = {
+                            clientId: req.query.client_id,
+                            redirectUri: req.query.redirect_uri,
+                            responseType: req.query.response_type
+                        };
+                        if (req.query.scope && typeof req.query.scope === 'string') {
+                            params.scope = req.query.scope;
+                        }
+                        if (req.query.state && typeof req.query.state === 'string') {
+                            params.state = req.query.state;
+                        }
+                        if (req.query.code_challenge && typeof req.query.code_challenge === 'string') {
+                            params.codeChallenge = req.query.code_challenge;
+                        }
+                        if (req.query.nonce && typeof req.query.nonce === 'string') {
+                            params.nonce = req.query.nonce;
+                        }
+                        if (req.method.toLowerCase() === 'get') {
+                            return this.authorizationRoute.handler(params, req, h);
+                        }
+                        else {
+                            return this.authorizationRoute.postHandler(params, req, h);
+                        }
+                    }
+                    else {
+                        let errorDescription = '';
+                        if (!(req.query.client_id && typeof req.query.client_id === 'string')) {
+                            errorDescription = 'Request was missing the \'client_id\' parameter.';
+                        }
+                        else if (!(req.query.response_type === 'code')) {
+                            errorDescription = `Request does not support the 'response_type' '${req.query.response_type}'.`;
+                        }
+                        else if (!(req.query.redirect_uri && typeof req.query.redirect_uri === 'string')) {
+                            errorDescription = 'Request was missing the \'redirect_uri\' parameter.';
+                        }
+                        return h.response({ error: common_1.OAuth2ErrorCode.INVALID_REQUEST, error_description: errorDescription }).code(400);
+                    }
+                })
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return sr.handle(request, h);
+        });
+    }
+    registerAuthorizationEndpoint(t) {
+        t
+            .route({
+            options: {
+                plugins: {
+                    kaapi: {
+                        docs: false
+                    }
+                }
+            },
+            path: this.authorizationRoute.path,
+            method: ['GET', 'POST'],
+            handler: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                return yield this.handleAuthorization(t, req, h);
+            })
+        });
+    }
+    handleToken(t, request, h) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const hasOpenIDScope = () => { var _a; return typeof ((_a = this.getScopes()) === null || _a === void 0 ? void 0 : _a['openid']) != 'undefined'; };
+            const tokenTypeInstance = this._tokenType;
+            const supported = this.getTokenEndpointAuthMethods();
+            const authMethodsInstances = this.clientAuthMethods;
+            const jwtAuthority = this.getJwtAuthority();
+            const sr = {
+                handle: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                    var _a;
+                    // Grant validation
+                    const supportedGrants = ['authorization_code'];
+                    if (this.tokenRoute.path == ((_a = this.refreshTokenRoute) === null || _a === void 0 ? void 0 : _a.path)) {
+                        supportedGrants.push('refresh_token');
+                    }
+                    if (!(typeof req.payload.grant_type === 'string' && supportedGrants.includes(req.payload.grant_type))) {
+                        return h.response({ error: common_1.OAuth2ErrorCode.UNSUPPORTED_GRANT_TYPE, error_description: `Request does not support the 'grant_type' '${req.payload.grant_type}'.` }).code(400);
+                    }
+                    // Client authentication is present?
+                    const { clientId, clientSecret, error, errorDescription } = yield this._extractClientParams(req, authMethodsInstances, supported);
+                    if (error) {
+                        return h.response({ error: error, error_description: errorDescription || undefined }).code(400);
+                    }
+                    if (!clientId) {
+                        return h
+                            .response({
+                            error: common_1.OAuth2ErrorCode.INVALID_REQUEST,
+                            error_description: `Supported token endpoint authentication methods: ${supported.join(', ')}`
+                        }).code(400);
+                    }
+                    if (clientId &&
+                        req.payload.code && typeof req.payload.code === 'string' &&
+                        req.payload.grant_type === 'authorization_code') {
+                        const params = {
+                            clientId,
+                            grantType: req.payload.grant_type,
+                            tokenType: tokenTypeInstance.prefix,
+                            code: req.payload.code,
+                            verifyCodeVerifier: verify_code_verifier_1.verifyCodeVerifier,
+                            ttl: this.tokenTTL,
+                            createJwtAccessToken: jwtAuthority ? ((payload) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                                var _a, _b;
+                                return yield (0, jwt_utils_1.createJwtAccessToken)(jwtAuthority, Object.assign({ aud: ((_a = t.postman) === null || _a === void 0 ? void 0 : _a.getHost()[0]) || '', iss: ((_b = t.postman) === null || _b === void 0 ? void 0 : _b.getHost()[0]) || '', sub: clientId }, payload), this.tokenTTL);
+                            })) : undefined,
+                            createIdToken: jwtAuthority && hasOpenIDScope() ? ((payload) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                                var _a;
+                                return yield (0, jwt_utils_1.createIdToken)(jwtAuthority, Object.assign({ aud: clientId, iss: ((_a = t.postman) === null || _a === void 0 ? void 0 : _a.getHost()[0]) || '' }, payload), this.tokenTTL);
+                            })) : undefined
+                        };
+                        if (clientSecret) {
+                            params.clientSecret = clientSecret;
+                        }
+                        if (req.payload.code_verifier && typeof req.payload.code_verifier === 'string') {
+                            params.codeVerifier = req.payload.code_verifier;
+                        }
+                        if (req.payload.redirect_uri && typeof req.payload.redirect_uri === 'string') {
+                            params.redirectUri = req.payload.redirect_uri;
+                        }
+                        const ttR = tokenTypeInstance.isValidTokenRequest ? (yield tokenTypeInstance.isValidTokenRequest(req)) : { isValid: true };
+                        if (!ttR.isValid) {
+                            return h.response({ error: common_1.OAuth2ErrorCode.INVALID_REQUEST, error_description: ttR.message || '' }).code(400);
+                        }
+                        return this.tokenRoute.handler(params, req, h);
+                    }
+                    else {
+                        let error = common_1.OAuth2ErrorCode.UNAUTHORIZED_CLIENT;
+                        let errorDescription = '';
+                        if (!clientId) {
+                            error = common_1.OAuth2ErrorCode.INVALID_REQUEST;
+                            errorDescription = 'Request was missing the \'client_id\' parameter.';
+                        }
+                        else if (!(req.payload.code && typeof req.payload.code === 'string')) {
+                            error = common_1.OAuth2ErrorCode.INVALID_REQUEST;
+                            errorDescription = 'Request was missing the \'code\' parameter.';
+                        }
+                        return h.response({ error, error_description: errorDescription }).code(400);
+                    }
+                })
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return sr.handle(request, h);
+        });
+    }
+    handleRefreshToken(t, request, h) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const supported = this.getTokenEndpointAuthMethods();
+            const authMethodsInstances = this.clientAuthMethods;
+            const jwtAuthority = this.getJwtAuthority();
+            const tokenTypePrefix = this.tokenType;
+            const hasOpenIDScope = () => { var _a; return typeof ((_a = this.getScopes()) === null || _a === void 0 ? void 0 : _a['openid']) != 'undefined'; };
+            const sr = {
+                handle: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                    var _a;
+                    // Grant validation
+                    const supportedGrants = ['refresh_token'];
+                    if (!(typeof req.payload.grant_type === 'string' && supportedGrants.includes(req.payload.grant_type))) {
+                        return h.response({ error: common_1.OAuth2ErrorCode.UNSUPPORTED_GRANT_TYPE, error_description: `Request does not support the 'grant_type' '${req.payload.grant_type}'.` }).code(400);
+                    }
+                    // Client authentication is present?
+                    const { clientId, clientSecret, error, errorDescription } = yield this._extractClientParams(req, authMethodsInstances, supported);
+                    if (error) {
+                        return h.response({ error: error, error_description: errorDescription || undefined }).code(400);
+                    }
+                    if (!clientId) {
+                        return h
+                            .response({
+                            error: common_1.OAuth2ErrorCode.INVALID_REQUEST,
+                            error_description: `Supported token endpoint authentication methods: ${supported.join(', ')}`
+                        }).code(400);
+                    }
+                    const hasRefreshToken = req.payload.refresh_token && typeof req.payload.refresh_token === 'string';
+                    const isRefreshTokenGrantType = req.payload.grant_type === 'refresh_token';
+                    if (clientId &&
+                        hasRefreshToken &&
+                        isRefreshTokenGrantType) {
+                        const scope = req.payload.scope && typeof req.payload.scope === 'string' ? req.payload.scope : undefined;
+                        const params = {
+                            clientId,
+                            clientSecret,
+                            grantType: `${req.payload.grant_type}`,
+                            tokenType: tokenTypePrefix,
+                            refreshToken: `${req.payload.refresh_token}`,
+                            ttl: this.tokenTTL,
+                            createJwtAccessToken: jwtAuthority ? ((payload) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                                var _a, _b;
+                                return yield (0, jwt_utils_1.createJwtAccessToken)(jwtAuthority, Object.assign({ aud: ((_a = t.postman) === null || _a === void 0 ? void 0 : _a.getHost()[0]) || '', iss: ((_b = t.postman) === null || _b === void 0 ? void 0 : _b.getHost()[0]) || '', sub: clientId, scope }, payload), this.tokenTTL);
+                            })) : undefined,
+                            createIdToken: jwtAuthority && hasOpenIDScope() ? ((payload) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                                var _a;
+                                return yield (0, jwt_utils_1.createIdToken)(jwtAuthority, Object.assign({ aud: clientId, iss: ((_a = t.postman) === null || _a === void 0 ? void 0 : _a.getHost()[0]) || '' }, payload), this.tokenTTL);
+                            })) : undefined,
+                            verifyJwt: jwtAuthority ? ((token) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                                return yield (0, jwt_utils_1.verifyJwt)(jwtAuthority, token);
+                            })) : undefined
+                        };
+                        if (scope) {
+                            params.scope = scope;
+                        }
+                        return (_a = this.refreshTokenRoute) === null || _a === void 0 ? void 0 : _a.handler(params, req, h);
+                    }
+                    else {
+                        let error = common_1.OAuth2ErrorCode.UNAUTHORIZED_CLIENT;
+                        let errorDescription = '';
+                        if (!clientId) {
+                            error = common_1.OAuth2ErrorCode.INVALID_REQUEST;
+                            errorDescription = 'Request was missing the \'client_id\' parameter.';
+                        }
+                        else if (!(req.payload.refresh_token && typeof req.payload.refresh_token === 'string')) {
+                            error = common_1.OAuth2ErrorCode.INVALID_REQUEST;
+                            errorDescription = 'Request was missing the \'refresh_token\' parameter.';
+                        }
+                        return h.response({ error, error_description: errorDescription }).code(400);
+                    }
+                })
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return sr.handle(request, h);
+        });
+    }
+    docs() {
+        var _a;
+        const docs = new api_doc_generator_1.OAuth2Util(this.strategyName)
+            .setGrantType(this.isWithPkce() ? api_doc_generator_1.GrantType.authorizationCodeWithPkce : api_doc_generator_1.GrantType.authorizationCode)
+            .setScopes(this.getScopes() || {})
+            .setAuthUrl(this.authorizationRoute.path)
+            .setAccessTokenUrl(this.tokenRoute.path || '');
+        const supported = this.getTokenEndpointAuthMethods();
+        if (supported.includes('client_secret_post')) {
+            docs.setClientAuthentication(api_doc_generator_1.ClientAuthentication.body);
+        }
+        else if (supported.includes('client_secret_basic')) {
+            docs.setClientAuthentication(api_doc_generator_1.ClientAuthentication.header);
+        }
+        if ((_a = this.refreshTokenRoute) === null || _a === void 0 ? void 0 : _a.path) {
+            docs.setRefreshUrl(this.refreshTokenRoute.path);
+        }
+        if (this.description) {
+            docs.setDescription(this.description);
+        }
+        return docs;
+    }
+    integrateHook(t) {
+        var _a;
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const routesOptions = {
+            plugins: {
+                kaapi: {
+                    docs: false
+                }
+            }
+        };
+        // authorization
+        this.registerAuthorizationEndpoint(t);
+        // token
+        t
+            .route({
+            options: routesOptions,
+            path: this.tokenRoute.path,
+            method: 'POST',
+            handler: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a;
+                if (req.payload.grant_type === this.grantType) {
+                    return yield this.handleToken(t, req, h);
+                }
+                else if (req.payload.grant_type === 'refresh_token' &&
+                    ((_a = this.refreshTokenRoute) === null || _a === void 0 ? void 0 : _a.path) == this.tokenRoute.path) {
+                    const result = yield this.handleRefreshToken(t, req, h);
+                    if (result === h.continue) {
+                        return h.response({ error: common_1.OAuth2ErrorCode.INVALID_GRANT, error_description: 'Token was not validated by any handler.' }).code(400);
+                    }
+                    return result;
+                }
+                return h.response({ error: common_1.OAuth2ErrorCode.UNSUPPORTED_GRANT_TYPE, error_description: `Request does not support the 'grant_type' '${req.payload.grant_type}'.` }).code(400);
+            })
+        });
+        // refreshToken
+        if (((_a = this.refreshTokenRoute) === null || _a === void 0 ? void 0 : _a.path) && this.refreshTokenRoute.path != this.tokenRoute.path) {
+            t.route({
+                options: routesOptions,
+                path: this.refreshTokenRoute.path,
+                method: 'POST',
+                handler: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                    const result = yield this.handleRefreshToken(t, req, h);
+                    if (result === h.continue) {
+                        return h.response({ error: common_1.OAuth2ErrorCode.INVALID_GRANT, error_description: 'Token was not validated by any handler.' }).code(400);
+                    }
+                    return result;
+                })
+            });
+        }
+        // jwks
+        this.createJwksEndpoint(t);
+    }
+}
+exports.OAuth2AuthorizationCode = OAuth2AuthorizationCode;
+class OIDCAuthorizationCode extends OAuth2AuthorizationCode {
+    constructor(params) {
+        super(params);
+        this.openidConfiguration = {};
+        if (params.openidConfiguration)
+            this.openidConfiguration = params.openidConfiguration;
+    }
+    getDiscoveryConfiguration(t) {
+        var _a, _b, _c, _d, _e, _f;
+        const supported = this.getTokenEndpointAuthMethods();
+        const host = ((_a = t.postman) === null || _a === void 0 ? void 0 : _a.getHost()[0]) || '';
+        const scopes = this.getScopes() || {};
+        const wellKnownOpenIDConfig = {
+            issuer: host,
+            authorization_endpoint: `${host}${this.authorizationRoute.path}`,
+            token_endpoint: `${host}${this.tokenRoute.path}`,
+            jwks_uri: ((_b = this.jwksRoute) === null || _b === void 0 ? void 0 : _b.path) ? `${host}${this.jwksRoute.path}` : undefined,
+            claims_supported: [
+                'aud',
+                'exp',
+                'iat',
+                'iss',
+                'sub'
+            ],
+            grant_types_supported: [
+                api_doc_generator_1.GrantType.authorizationCode
+            ],
+            response_types_supported: ['code'],
+            scopes_supported: Object.keys(scopes),
+            subject_types_supported: [
+                'public'
+            ],
+            id_token_signing_alg_values_supported: [
+                'RS256'
+            ],
+            token_endpoint_auth_methods_supported: supported
+        };
+        if ((_d = (_c = this.clientAuthMethods.client_secret_jwt) === null || _c === void 0 ? void 0 : _c.algorithms) === null || _d === void 0 ? void 0 : _d.length) {
+            wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported = wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported || [];
+            wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported = [
+                ...wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported,
+                ...this.clientAuthMethods.client_secret_jwt.algorithms
+            ];
+        }
+        if ((_f = (_e = this.clientAuthMethods.private_key_jwt) === null || _e === void 0 ? void 0 : _e.algorithms) === null || _f === void 0 ? void 0 : _f.length) {
+            wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported = wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported || [];
+            wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported = [
+                ...wellKnownOpenIDConfig.token_endpoint_auth_signing_alg_values_supported,
+                ...this.clientAuthMethods.private_key_jwt.algorithms
+            ];
+        }
+        return Object.assign(Object.assign({}, wellKnownOpenIDConfig), this.openidConfiguration);
+    }
+    integrateHook(t) {
+        super.integrateHook(t);
+        const discoveryConfiguration = this.getDiscoveryConfiguration(t);
+        t.route({
+            path: '/.well-known/openid-configuration',
+            method: 'GET',
+            options: {
+                plugins: {
+                    kaapi: {
+                        docs: false
+                    }
+                }
+            },
+            handler: () => {
+                return discoveryConfiguration;
+            }
+        });
+    }
+}
+exports.OIDCAuthorizationCode = OIDCAuthorizationCode;
+class OAuth2AuthorizationCodeBuilder {
+    constructor(params) {
+        this.clientAuthMethods = {
+            client_secret_basic: undefined,
+            client_secret_post: undefined,
+            client_secret_jwt: undefined,
+            private_key_jwt: undefined,
+            none: undefined
+        };
+        this.params = params;
+    }
+    static create(params) {
+        const paramsComplete = Object.assign({ authorizationRoute: params && params.authorizationRoute || authorization_route_1.OAuth2ACAuthorizationRoute.buildDefault(), tokenRoute: params && params.tokenRoute || token_route_1.OAuth2ACTokenRoute.buildDefault() }, (params || {}));
+        return new OAuth2AuthorizationCodeBuilder(paramsComplete);
+    }
+    build() {
+        const result = new OAuth2AuthorizationCode(this.params);
+        result.setTokenTTL(this.tokenTTL);
+        if (typeof this.description !== 'undefined') {
+            result.setDescription(this.description);
+        }
+        if (typeof this.scopes !== 'undefined') {
+            result.setScopes(this.scopes);
+        }
+        if (typeof this.tokenType !== 'undefined') {
+            result.setTokenType(this.tokenType);
+        }
+        for (const method of Object.values(this.clientAuthMethods)) {
+            if (method) {
+                result.addClientAuthenticationMethod(method);
+            }
+        }
+        return result;
+    }
+    setTokenTTL(ttlSeconds) {
+        this.tokenTTL = ttlSeconds;
+        return this;
+    }
+    setDescription(description) {
+        this.description = description;
+        return this;
+    }
+    setScopes(scopes) {
+        this.scopes = scopes;
+        return this;
+    }
+    setTokenType(value) {
+        this.tokenType = value;
+        return this;
+    }
+    addClientAuthenticationMethod(value) {
+        if (value == 'client_secret_basic') {
+            this.clientAuthMethods.client_secret_basic = new client_auth_methods_1.ClientSecretBasic();
+        }
+        else if (value == 'client_secret_post') {
+            this.clientAuthMethods.client_secret_post = new client_auth_methods_1.ClientSecretPost();
+        }
+        else if (value == 'none') {
+            this.clientAuthMethods.none = new client_auth_methods_1.NoneAuthMethod();
+        }
+        else {
+            this.clientAuthMethods[value.method] = value;
+        }
+        return this;
+    }
+    strategyName(name) {
+        this.params.strategyName = name;
+        return this;
+    }
+    setJwksKeyStore(keyStore) {
+        this.params.jwksOptions = this.params.jwksOptions || {};
+        this.params.jwksOptions.keyStore = keyStore;
+        return this;
+    }
+    /**
+     *
+     * @param ttl seconds
+     */
+    setPublicKeyExpiry(ttl) {
+        this.params.jwksOptions = this.params.jwksOptions || {};
+        this.params.jwksOptions.ttl = ttl;
+        return this;
+    }
+    setJwksRotatorOptions(jwksRotatorOptions) {
+        this.params.jwksOptions = this.params.jwksOptions || {};
+        this.params.jwksOptions.rotation = jwksRotatorOptions;
+        return this;
+    }
+    validate(handler) {
+        this.params.options = Object.assign(Object.assign({}, (this.params.options || {})), { validate: handler });
+        return this;
+    }
+    /**
+     * Auto-verifies the access token JWT using the configured JWKS before running user validation.
+     */
+    useAccessTokenJwks(active) {
+        this.params.options = Object.assign(Object.assign({}, (this.params.options || {})), { useAccessTokenJwks: active });
+        return this;
+    }
+    jwksRoute(handler) {
+        this.params.jwksRoute = this.params.jwksRoute || common_1.JWKSRoute.buildDefault();
+        handler(this.params.jwksRoute);
+        return this;
+    }
+    authorizationRoute(handler) {
+        handler(this.params.authorizationRoute);
+        return this;
+    }
+    tokenRoute(handler) {
+        handler(this.params.tokenRoute);
+        return this;
+    }
+    refreshTokenRoute(handler) {
+        this.params.refreshTokenRoute = this.params.refreshTokenRoute || common_1.OAuth2RefreshTokenRoute.buildDefault();
+        handler(this.params.refreshTokenRoute);
+        return this;
+    }
+}
+exports.OAuth2AuthorizationCodeBuilder = OAuth2AuthorizationCodeBuilder;
+class OIDCAuthorizationCodeBuilder extends OAuth2AuthorizationCodeBuilder {
+    constructor(params) {
+        super(params);
+        this.openidConfiguration = {};
+    }
+    static create(params) {
+        const paramsComplete = Object.assign({ authorizationRoute: params && params.authorizationRoute || authorization_route_1.OAuth2ACAuthorizationRoute.buildDefault(), tokenRoute: params && params.tokenRoute || token_route_1.OAuth2ACTokenRoute.buildDefault() }, (params || {}));
+        return new OIDCAuthorizationCodeBuilder(paramsComplete);
+    }
+    additionalConfiguration(openidConfiguration) {
+        this.openidConfiguration = openidConfiguration;
+        return this;
+    }
+    build() {
+        if (!this.params.jwksRoute) {
+            this.params.jwksRoute = common_1.JWKSRoute.buildDefault();
+        }
+        const result = new OIDCAuthorizationCode(Object.assign(Object.assign({}, this.params), { openidConfiguration: this.openidConfiguration }));
+        result.setTokenTTL(this.tokenTTL);
+        if (typeof this.description !== 'undefined') {
+            result.setDescription(this.description);
+        }
+        result.setScopes(Object.assign({ openid: 'enable OpenID Connect' }, (this.scopes || {})));
+        if (typeof this.tokenType !== 'undefined') {
+            result.setTokenType(this.tokenType);
+        }
+        for (const method of Object.values(this.clientAuthMethods)) {
+            if (method) {
+                result.addClientAuthenticationMethod(method);
+            }
+        }
+        return result;
+    }
+}
+exports.OIDCAuthorizationCodeBuilder = OIDCAuthorizationCodeBuilder;
+//#endregion OIDC builder
+//# sourceMappingURL=authorization-code.js.map

package/lib/flows/authorization-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.js","sourceRoot":"","sources":["../../src/flows/authorization-code.ts"],"names":[],"mappings":";;;;AASA,kEAAwF;AACxF,qCAeiB;AACjB,kDAAmF;AACnF,yEAKwC;AACxC,yDAAiI;AAGjI,sEAA6I;AAC7I,wEAAkE;AAclE,MAAa,uBAAwB,SAAQ,yBAAgB;IAEzD,IAAI,SAAS;QACT,OAAO,6BAAS,CAAC,iBAAiB,CAAA;IACtC,CAAC;IAWD,YACI,EAK6B;YAL7B,EACI,kBAAkB,EAClB,UAAU,EACV,iBAAiB,OAEQ,EADtB,KAAK,sBAJZ,yDAKC,CADW;QAGZ,KAAK,iCAAM,KAAK,KAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,2BAA2B,IAAG,CAAC;QAjB/E,SAAI,GAAY,KAAK,CAAA;QAmB3B,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAA;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC9C,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,OAAO,KAAK,CAAC,wBAAwB,EAAE,CAAA;IAC3C,CAAC;IAED,WAAW;QACP,IAAI,CAAC,IAAI,GAAG,KAAK,CAAA;QACjB,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,SAAS,CAAA;QACxC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,IAAI,CAAA;IACpB,CAAC;IAED,wBAAwB;QACpB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IAC1B,CAAC;IAEe,mBAAmB,CAC/B,EAAc,EACd,OAAsB,EACtB,CAAwB;;YAExB,MAAM,EAAE,GAEJ;gBACA,MAAM,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;oBACrB,mBAAmB;oBACnB,IACI,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;wBAC9D,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM;wBAClC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,EACtE,CAAC;wBACC,MAAM,MAAM,GAAgC;4BACxC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS;4BAC7B,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY;4BACnC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa;yBACxC,CAAA;wBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;4BACzD,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAA;wBAClC,CAAC;wBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;4BACzD,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAA;wBAClC,CAAC;wBACD,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;4BAC3E,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAA;wBACnD,CAAC;wBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;4BACzD,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAA;wBAClC,CAAC;wBAED,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;4BACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;wBAC1D,CAAC;6BAAM,CAAC;4BACJ,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;wBAC9D,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACJ,IAAI,gBAAgB,GAAG,EAAE,CAAA;wBACzB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,EAAE,CAAC;4BACpE,gBAAgB,GAAG,kDAAkD,CAAA;wBACzE,CAAC;6BAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,EAAE,CAAC;4BAC/C,gBAAgB,GAAG,iDAAiD,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,CAAA;wBACnG,CAAC;6BAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,EAAE,CAAC;4BACjF,gBAAgB,GAAG,qDAAqD,CAAA;wBAC5E,CAAC;wBAED,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAG,wBAAe,CAAC,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACjH,CAAC;gBACL,CAAC,CAAA;aACJ,CAAC;YAEF,8DAA8D;YAC9D,OAAO,EAAE,CAAC,MAAM,CAAC,OAAuB,EAAE,CAAyB,CAAC,CAAA;QACxE,CAAC;KAAA;IAED,6BAA6B,CAAC,CAAa;QACvC,CAAC;aACI,KAAK,CAAC;YACH,OAAO,EAAE;gBACL,OAAO,EAAE;oBACL,KAAK,EAAE;wBACH,IAAI,EAAE,KAAK;qBACd;iBACJ;aACJ;YACD,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI;YAClC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,OAAO,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;gBACtB,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;YACpD,CAAC,CAAA;SACJ,CAAC,CAAC;IACX,CAAC;IAEK,WAAW,CACb,CAAa,EACb,OAAsB,EACtB,CAAwB;;YAExB,MAAM,cAAc,GAAG,GAAG,EAAE,WAAC,OAAA,OAAO,CAAA,MAAA,IAAI,CAAC,SAAS,EAAE,0CAAG,QAAQ,CAAC,CAAA,IAAI,WAAW,CAAA,EAAA,CAAA;YAE/E,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAA;YAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACpD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAE5C,MAAM,EAAE,GAIJ;gBACA,MAAM,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;;oBACrB,mBAAmB;oBACnB,MAAM,eAAe,GAAG,CAAC,oBAAoB,CAAC,CAAA;oBAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAI,MAAA,IAAI,CAAC,iBAAiB,0CAAE,IAAI,CAAA,EAAE,CAAC;wBACvD,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;oBACzC,CAAC;oBACD,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;wBACpG,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,wBAAe,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,8CAA8C,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBAC/K,CAAC;oBAED,oCAAoC;oBACpC,MAAM,EACF,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,gBAAgB,EACnB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAyC,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;oBAEhH,IAAI,KAAK,EAAE,CAAC;wBACR,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACnG,CAAC;oBAED,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACZ,OAAO,CAAC;6BACH,QAAQ,CAAC;4BACN,KAAK,EAAG,wBAAe,CAAC,eAAe;4BACvC,iBAAiB,EAAE,oDAAoD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAChG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACpB,CAAC;oBAED,IACI,QAAQ;wBACR,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;wBACxD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,oBAAoB,EACjD,CAAC;wBAEC,MAAM,MAAM,GAAwB;4BAChC,QAAQ;4BACR,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;4BACjC,SAAS,EAAE,iBAAiB,CAAC,MAAM;4BACnC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;4BACtB,kBAAkB,EAAlB,yCAAkB;4BAElB,GAAG,EAAE,IAAI,CAAC,QAAQ;4BAClB,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAO,OAAO,EAAE,EAAE;;gCACpD,OAAO,MAAM,IAAA,gCAAoB,EAAC,YAAY,kBAC1C,GAAG,EAAE,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,EAClC,GAAG,EAAE,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,EAClC,GAAG,EAAE,QAAQ,IACV,OAAO,GACX,IAAI,CAAC,QAAQ,CAAC,CAAA;4BACrB,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,SAAS;4BACd,aAAa,EAAE,YAAY,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAO,OAAO,EAAE,EAAE;;gCACjE,OAAO,MAAM,IAAA,yBAAa,EAAC,YAAY,kBACnC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,IAC/B,OAAO,GACX,IAAI,CAAC,QAAQ,CAAC,CAAA;4BACrB,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,SAAS;yBACjB,CAAA;wBACD,IAAI,YAAY,EAAE,CAAC;4BACf,MAAM,CAAC,YAAY,GAAG,YAAY,CAAA;wBACtC,CAAC;wBACD,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;4BAC7E,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;wBACnD,CAAC;wBACD,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;4BAC3E,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAA;wBACjD,CAAC;wBAED,MAAM,GAAG,GAAgC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;wBACvJ,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;4BACf,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,wBAAe,CAAC,eAAe,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;wBACjH,CAAC;wBAED,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;oBAClD,CAAC;yBAAM,CAAC;wBACJ,IAAI,KAAK,GAA2B,wBAAe,CAAC,mBAAmB,CAAC;wBACxE,IAAI,gBAAgB,GAAG,EAAE,CAAA;wBACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACZ,KAAK,GAAG,wBAAe,CAAC,eAAe,CAAA;4BACvC,gBAAgB,GAAG,kDAAkD,CAAA;wBACzE,CAAC;6BAAM,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;4BACrE,KAAK,GAAG,wBAAe,CAAC,eAAe,CAAA;4BACvC,gBAAgB,GAAG,6CAA6C,CAAA;wBACpE,CAAC;wBACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBAC/E,CAAC;gBACL,CAAC,CAAA;aACJ,CAAC;YAEF,8DAA8D;YAC9D,OAAO,EAAE,CAAC,MAAM,CAAC,OAAuB,EAAE,CAAyB,CAAC,CAAA;QACxE,CAAC;KAAA;IAEK,kBAAkB,CACpB,CAAa,EACb,OAAsB,EACtB,CAAwB;;YAExB,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACpD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;YAEvC,MAAM,cAAc,GAAG,GAAG,EAAE,WAAC,OAAA,OAAO,CAAA,MAAA,IAAI,CAAC,SAAS,EAAE,0CAAG,QAAQ,CAAC,CAAA,IAAI,WAAW,CAAA,EAAA,CAAC;YAEhF,MAAM,EAAE,GAIJ;gBACA,MAAM,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;;oBACrB,mBAAmB;oBACnB,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,CAAA;oBACzC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;wBACpG,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,wBAAe,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,8CAA8C,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBAC/K,CAAC;oBAED,oCAAoC;oBACpC,MAAM,EACF,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,gBAAgB,EACnB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAyC,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;oBAEhH,IAAI,KAAK,EAAE,CAAC;wBACR,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACnG,CAAC;oBAED,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACZ,OAAO,CAAC;6BACH,QAAQ,CAAC;4BACN,KAAK,EAAG,wBAAe,CAAC,eAAe;4BACvC,iBAAiB,EAAE,oDAAoD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAChG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACpB,CAAC;oBAED,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAA;oBAClG,MAAM,uBAAuB,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,eAAe,CAAA;oBAC1E,IACI,QAAQ;wBACR,eAAe;wBACf,uBAAuB,EACzB,CAAC;wBACC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;wBACxG,MAAM,MAAM,GAA6B;4BACrC,QAAQ;4BACR,YAAY;4BACZ,SAAS,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE;4BACtC,SAAS,EAAE,eAAe;4BAC1B,YAAY,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;4BAC5C,GAAG,EAAE,IAAI,CAAC,QAAQ;4BAClB,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAO,OAAO,EAAE,EAAE;;gCACpD,OAAO,MAAM,IAAA,gCAAoB,EAAC,YAAY,kBAC1C,GAAG,EAAE,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,EAClC,GAAG,EAAE,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,EAClC,GAAG,EAAE,QAAQ,EACb,KAAK,IACF,OAAO,GACX,IAAI,CAAC,QAAQ,CAAC,CAAA;4BACrB,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,SAAS;4BACd,aAAa,EAAE,YAAY,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAO,OAAO,EAAE,EAAE;;gCACjE,OAAO,MAAM,IAAA,yBAAa,EAAC,YAAY,kBACnC,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,IAC/B,OAAO,GACX,IAAI,CAAC,QAAQ,CAAC,CAAA;4BACrB,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,SAAS;4BACd,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAO,KAAK,EAAE,EAAE;gCACvC,OAAO,MAAM,IAAA,qBAAS,EAAC,YAAY,EAAE,KAAK,CAAC,CAAA;4BAC/C,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,SAAS;yBACjB,CAAA;wBAED,IAAI,KAAK,EAAE,CAAC;4BACR,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;wBACxB,CAAC;wBAED,OAAO,MAAA,IAAI,CAAC,iBAAiB,0CAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;oBAC1D,CAAC;yBAAM,CAAC;wBACJ,IAAI,KAAK,GAA4B,wBAAe,CAAC,mBAAmB,CAAC;wBACzE,IAAI,gBAAgB,GAAG,EAAE,CAAA;wBACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACZ,KAAK,GAAI,wBAAe,CAAC,eAAe,CAAA;4BACxC,gBAAgB,GAAG,kDAAkD,CAAA;wBACzE,CAAC;6BAAM,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,EAAE,CAAC;4BACvF,KAAK,GAAI,wBAAe,CAAC,eAAe,CAAA;4BACxC,gBAAgB,GAAG,sDAAsD,CAAA;wBAC7E,CAAC;wBACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBAC/E,CAAC;gBACL,CAAC,CAAA;aACJ,CAAA;YAED,8DAA8D;YAC9D,OAAO,EAAE,CAAC,MAAM,CAAC,OAAuB,EAAE,CAAyB,CAAC,CAAA;QACxE,CAAC;KAAA;IAED,IAAI;;QACA,MAAM,IAAI,GAAG,IAAI,8BAAU,CAAC,IAAI,CAAC,YAAY,CAAC;aACzC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,6BAAS,CAAC,yBAAyB,CAAC,CAAC,CAAC,6BAAS,CAAC,iBAAiB,CAAC;aACnG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;aACjC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;aACxC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAA;QAEpD,IAAI,SAAS,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,uBAAuB,CAAC,wCAAoB,CAAC,IAAI,CAAC,CAAA;QAC3D,CAAC;aAAM,IACH,SAAS,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAC3C,CAAC;YACC,IAAI,CAAC,uBAAuB,CAAC,wCAAoB,CAAC,MAAM,CAAC,CAAA;QAC7D,CAAC;QAED,IAAI,MAAA,IAAI,CAAC,iBAAiB,0CAAE,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACzC,CAAC;QAED,OAAO,IAAI,CAAA;IACf,CAAC;IAED,aAAa,CAAC,CAAa;;QACvB,8DAA8D;QAC9D,MAAM,aAAa,GAAsB;YACrC,OAAO,EAAE;gBACL,KAAK,EAAE;oBACH,IAAI,EAAE,KAAK;iBACd;aACJ;SACJ,CAAC;QAEF,gBAAgB;QAChB,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAA;QAErC,QAAQ;QACR,CAAC;aACI,KAAK,CAAC;YACH,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;;gBACtB,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC5C,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;gBAC5C,CAAC;qBAAM,IACH,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,eAAe;oBAC1C,CAAA,MAAA,IAAI,CAAC,iBAAiB,0CAAE,IAAI,KAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EACtD,CAAC;oBACC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;oBAEvD,IAAI,MAAM,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;wBACxB,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,wBAAe,CAAC,aAAa,EAAE,iBAAiB,EAAE,yCAAyC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACvI,CAAC;oBAED,OAAO,MAAM,CAAA;gBACjB,CAAC;gBACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,wBAAe,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,8CAA8C,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC/K,CAAC,CAAA;SACJ,CAAC,CAAA;QAEN,eAAe;QACf,IAAI,CAAA,MAAA,IAAI,CAAC,iBAAiB,0CAAE,IAAI,KAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACtF,CAAC,CAAC,KAAK,CAEJ;gBACC,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;oBACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;oBAEvD,IAAI,MAAM,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;wBACxB,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,wBAAe,CAAC,aAAa,EAAE,iBAAiB,EAAE,yCAAyC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACvI,CAAC;oBAED,OAAO,MAAM,CAAA;gBACjB,CAAC,CAAA;aACJ,CAAC,CAAA;QACN,CAAC;QAED,OAAO;QACP,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC;CAEJ;AA/aD,0DA+aC;AASD,MAAa,qBAAsB,SAAQ,uBAAuB;IAG9D,YAAY,MAAgC;QACxC,KAAK,CAAC,MAAM,CAAC,CAAC;QAHR,wBAAmB,GAA4B,EAAE,CAAA;QAKvD,IAAI,MAAM,CAAC,mBAAmB;YAC1B,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAA;IAC7D,CAAC;IAED,yBAAyB,CAAC,CAAa;;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,CAAA,MAAA,CAAC,CAAC,OAAO,0CAAE,OAAO,GAAG,CAAC,CAAC,KAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QAEtC,MAAM,qBAAqB,GAAkD;YACzE,MAAM,EAAE,IAAI;YACZ,sBAAsB,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE;YAChE,cAAc,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAChD,QAAQ,EAAE,CAAA,MAAA,IAAI,CAAC,SAAS,0CAAE,IAAI,EAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5E,gBAAgB,EAAE;gBACd,KAAK;gBACL,KAAK;gBACL,KAAK;gBACL,KAAK;gBACL,KAAK;aACR;YACD,qBAAqB,EAAE;gBACnB,6BAAS,CAAC,iBAAiB;aAC9B;YACD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,uBAAuB,EAAE;gBACrB,QAAQ;aACX;YACD,qCAAqC,EAAE;gBACnC,OAAO;aACV;YACD,qCAAqC,EAAE,SAAS;SACnD,CAAA;QAED,IAAI,MAAA,MAAA,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,0CAAE,UAAU,0CAAE,MAAM,EAAE,CAAC;YAC/D,qBAAqB,CAAC,gDAAgD,GAAG,qBAAqB,CAAC,gDAAgD,IAAI,EAAE,CAAA;YACrJ,qBAAqB,CAAC,gDAAgD,GAAG;gBACrE,GAAG,qBAAqB,CAAC,gDAAgD;gBACzE,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,UAAU;aACzD,CAAA;QACL,CAAC;QACD,IAAI,MAAA,MAAA,IAAI,CAAC,iBAAiB,CAAC,eAAe,0CAAE,UAAU,0CAAE,MAAM,EAAE,CAAC;YAC7D,qBAAqB,CAAC,gDAAgD,GAAG,qBAAqB,CAAC,gDAAgD,IAAI,EAAE,CAAA;YACrJ,qBAAqB,CAAC,gDAAgD,GAAG;gBACrE,GAAG,qBAAqB,CAAC,gDAAgD;gBACzE,GAAG,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,UAAU;aACvD,CAAA;QACL,CAAC;QAED,uCAAY,qBAAqB,GAAK,IAAI,CAAC,mBAAmB,EAAE;IACpE,CAAC;IAGD,aAAa,CAAC,CAAa;QACvB,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAEvB,MAAM,sBAAsB,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAEjE,CAAC,CAAC,KAAK,CAAC;YACJ,IAAI,EAAE,mCAAmC;YACzC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACL,OAAO,EAAE;oBACL,KAAK,EAAE;wBACH,IAAI,EAAE,KAAK;qBACd;iBACJ;aACJ;YACD,OAAO,EAAE,GAAG,EAAE;gBACV,OAAO,sBAAsB,CAAA;YACjC,CAAC;SACJ,CAAC,CAAA;IACN,CAAC;CAEJ;AAjFD,sDAiFC;AAmBD,MAAa,8BAA8B;IAgBvC,YAAY,MAAyC;QAR3C,sBAAiB,GAAkE;YACzF,mBAAmB,EAAE,SAAS;YAC9B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,IAAI,EAAE,SAAS;SAClB,CAAA;QAGG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAmD;QAC7D,MAAM,cAAc,mBAChB,kBAAkB,EAAE,MAAM,IAAI,MAAM,CAAC,kBAAkB,IAAI,gDAA0B,CAAC,YAAY,EAAE,EACpG,UAAU,EAAE,MAAM,IAAI,MAAM,CAAC,UAAU,IAAI,gCAAkB,CAAC,YAAY,EAAE,IACzE,CAAC,MAAM,IAAI,EAAE,CAAC,CACpB,CAAC;QACF,OAAO,IAAI,8BAA8B,CAAC,cAAc,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK;QACD,MAAM,MAAM,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEvD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEjC,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC3C,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACxC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzD,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;YAChD,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAA;IACjB,CAAC;IAED,WAAW,CAAC,UAAmB;QAC3B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAA;QAC1B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,cAAc,CAAC,WAAmB;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,MAA8B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,YAAY,CAAuC,KAAsB;QACrE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;QACtB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,6BAA6B,CAAC,KAA+E;QACzG,IAAI,KAAK,IAAI,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,GAAG,IAAI,uCAAiB,EAAE,CAAA;QACxE,CAAC;aAAM,IAAI,KAAK,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,GAAG,IAAI,sCAAgB,EAAE,CAAA;QACtE,CAAC;aAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,IAAI,oCAAc,EAAE,CAAA;QACtD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAA;IACf,CAAC;IAED,YAAY,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAA;QAC/B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,eAAe,CAAC,QAAsB;QAClC,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAC3C,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,GAAW;QAC1B,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,GAAG,CAAA;QACjC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,qBAAqB,CAAC,kBAAiD;QACnE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,GAAG,kBAAkB,CAAA;QACrD,OAAO,IAAI,CAAA;IACf,CAAC;IAED,QAAQ,CAAuC,OAA4C;QACvF,IAAI,CAAC,MAAM,CAAC,OAAO,mCAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,KAAE,QAAQ,EAAE,OAAO,GAAE,CAAA;QAC3E,OAAO,IAAI,CAAA;IACf,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAe;QAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,mCAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,KAAE,kBAAkB,EAAE,MAAM,GAAE,CAAA;QACpF,OAAO,IAAI,CAAA;IACf,CAAC;IAED,SAAS,CAAuC,OAAgD;QAC5F,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAS,CAAC,YAAY,EAAE,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,kBAAkB,CAGhB,OAA8E;QAC5E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACvC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,UAAU,CAAuC,OAAyD;QACtG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC/B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,iBAAiB,CAAuC,OAA8D;QAClH,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,gCAAuB,CAAC,YAAY,EAAE,CAAC;QACxG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACtC,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AApJD,wEAoJC;AAaD,MAAa,4BAA6B,SAAQ,8BAA8B;IAI5E,YAAY,MAAuC;QAC/C,KAAK,CAAC,MAAM,CAAC,CAAC;QAHR,wBAAmB,GAA4B,EAAE,CAAA;IAI3D,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAiD;QAC3D,MAAM,cAAc,mBAChB,kBAAkB,EAAE,MAAM,IAAI,MAAM,CAAC,kBAAkB,IAAI,gDAA0B,CAAC,YAAY,EAAE,EACpG,UAAU,EAAE,MAAM,IAAI,MAAM,CAAC,UAAU,IAAI,gCAAkB,CAAC,YAAY,EAAE,IACzE,CAAC,MAAM,IAAI,EAAE,CAAC,CACpB,CAAC;QACF,OAAO,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAA;IAC3D,CAAC;IAED,uBAAuB,CAAC,mBAA4C;QAChE,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAA;QAC9C,OAAO,IAAI,CAAA;IACf,CAAC;IAED,KAAK;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,kBAAS,CAAC,YAAY,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,qBAAqB,iCAAM,IAAI,CAAC,MAAM,KAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAG,CAAA;QAE3G,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEjC,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC3C,CAAC;QACD,MAAM,CAAC,SAAS,iBACZ,MAAM,EAAE,uBAAuB,IAC5B,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EACxB,CAAC;QACH,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACxC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzD,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;YAChD,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AAjDD,oEAiDC;AAED,yBAAyB"}