@muze-nl/metro-oidc 0.8.0 → 0.9.0

package/dist/browser.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../metro-core/src/index.mjs", "../../metro-core/src/metro.mjs", "../../../node_modules/@muze-nl/assert/src/assert.mjs", "../../metro-oauth2/src/tokenstore.mjs", "../../metro-oauth2/src/oauth2.mjs", "../../../node_modules/dpop/src/index.ts", "../../metro-oauth2/src/keysstore.mjs", "../../metro-oauth2/src/oauth2.dpop.mjs", "../../metro-middleware/src/json.mjs", "../../metro-middleware/src/thrower.mjs", "../src/oidc.util.mjs", "../src/oidc.discovery.mjs", "../src/oidc.register.mjs", "../src/oidc.store.mjs", "../../../node_modules/jose/dist/webapi/lib/buffer_utils.js", "../../../node_modules/jose/dist/webapi/lib/base64.js", "../../../node_modules/jose/dist/webapi/util/base64url.js", "../../../node_modules/jose/dist/webapi/lib/crypto_key.js", "../../../node_modules/jose/dist/webapi/lib/invalid_key_input.js", "../../../node_modules/jose/dist/webapi/util/errors.js", "../../../node_modules/jose/dist/webapi/lib/is_key_like.js", "../../../node_modules/jose/dist/webapi/lib/helpers.js", "../../../node_modules/jose/dist/webapi/lib/type_checks.js", "../../../node_modules/jose/dist/webapi/lib/signing.js", "../../../node_modules/jose/dist/webapi/lib/jwk_to_key.js", "../../../node_modules/jose/dist/webapi/lib/normalize_key.js", "../../../node_modules/jose/dist/webapi/key/import.js", "../../../node_modules/jose/dist/webapi/lib/validate_crit.js", "../../../node_modules/jose/dist/webapi/lib/validate_algorithms.js", "../../../node_modules/jose/dist/webapi/lib/check_key_type.js", "../../../node_modules/jose/dist/webapi/jws/flattened/verify.js", "../../../node_modules/jose/dist/webapi/jws/compact/verify.js", "../../../node_modules/jose/dist/webapi/lib/jwt_claims_set.js", "../../../node_modules/jose/dist/webapi/jwt/verify.js", "../../../node_modules/jose/dist/webapi/jwks/local.js", "../src/oidc.jwt.mjs", "../src/oidcmw.mjs", "../src/index.mjs", "../src/browser.mjs"],
-  "sourcesContent": ["export * from './metro.mjs'\n", "/**\n * Metro core: fetch-compatible client, request, response and URL helpers.\n * Higher-level API helpers, middleware, tracing and formdata helpers live in\n * separate packages and are re-exported by @muze-nl/metro.\n */\n/**\n * base URL used to link to more information about an error message\n */\nconst metroURL = 'https://metro.muze.nl/details/'\n\n/**\n * Symbols:\n * - isProxy: used to test if an object is a metro Proxy to another object\n * - source: used to return the actual source (target) of a metro Proxy\n */\nif (!Symbol.metroProxy) {\n\tSymbol.metroProxy = Symbol('isProxy')\n}\nif (!Symbol.metroSource) {\n\tSymbol.metroSource = Symbol('source')\n}\n\n/**\n * Metro HTTP Client with middleware support\n * @method get\n * @method post\n * @method put\n * @method delete\n * @method patch\n * @method head\n * @method options\n * @method query\n * @method fetch\n */\nexport class Client\n{\n\tclientOptions = {\n\t\turl: typeof window != 'undefined' ? url(window.location) : url('https://localhost'),\n\t\tverbs: ['get','post','put','delete','patch','head','options','query']\n\t}\n\n\tstatic tracers = {}\n\n\t/**\n\t * @typedef {Object} ClientOptions\n\t * @property {Array} middlewares - list of middleware functions\n\t * @property {string|URL} url - default url of the client\n\t * @property {[string]} verbs - a list of verb methods to expose, e.g. ['get','post']\n\t * \n\t * Constructs a new metro client. Can have any number of params.\n\t * @params {ClientOptions|URL|Function|Client}\n\t * @returns {Client} - A metro client object with given or default verb methods\n\t */\n\tconstructor(...options)\n\t{\n\t\tfor (let option of options) {\n\t\t\tif (typeof option == 'string' || option instanceof String) {\n\t\t\t\tthis.clientOptions.url = url(this.clientOptions.url.href, option)\n\t\t\t} else if (option instanceof Client) {\n\t\t\t\tObject.assign(this.clientOptions, option.clientOptions)\n\t\t\t} else if (option instanceof Function) {\n\t\t\t\tthis.#addMiddlewares([option])\n\t\t\t} else if (option && typeof option == 'object') {\n\t\t\t\tfor (let param in option) {\n\t\t\t\t\tif (param == 'middlewares') {\n\t\t\t\t\t\tthis.#addMiddlewares(option[param])\n\t\t\t\t\t} else if (param == 'url') {\n\t\t\t\t\t\tthis.clientOptions.url = url(this.clientOptions.url.href, option[param])\n\t\t\t\t\t} else if (typeof option[param] == 'function') {\n\t\t\t\t\t\tthis.clientOptions[param] = option[param](this.clientOptions[param], this.clientOptions)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.clientOptions[param] = option[param]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tfor (const verb of this.clientOptions.verbs) {\n\t\t\tthis[verb] = async function(...options) {\n\t\t\t\treturn this.fetch(\n\t\t\t\t\trequest(\n\t\t\t\t\t\tthis.clientOptions,\n\t\t\t\t\t\t...options,\n\t\t\t\t\t\t{method: verb.toUpperCase()}\n\t\t\t\t\t),\n\t\t\t\t\tfetchOptionsFrom(...options)\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t\t//NOTE: intentionally not Object.freeze()-ing this, so that metro.api can extend this class\n\t}\n\n\t#addMiddlewares(middlewares)\n\t{\n\t\tif (typeof middlewares == 'function') {\n\t\t\tmiddlewares = [ middlewares ]\n\t\t}\n\t\tlet index = middlewares.findIndex(m => typeof m != 'function')\n\t\tif (index>=0) {\n\t\t\tthrow metroError('metro.client: middlewares must be a function or an array of functions '\n\t\t\t\t+metroURL+'client/invalid-middlewares/', middlewares[index])\n\t\t}\n\t\tif (!Array.isArray(this.clientOptions.middlewares)) {\n\t\t\tthis.clientOptions.middlewares = []\n\t\t}\n\t\tthis.clientOptions.middlewares = this.clientOptions.middlewares.concat(middlewares)\n\t}\n\n\t/**\n\t * Mimics the standard browser fetch method, but uses any middleware installed through\n\t * the constructor.\n\t * @param {Request|string|Object} - Required. The URL or Request object, accepts all types that are accepted by metro.request\n\t * @param {Object} - Optional. Any object that is accepted by metro.request\n\t * @return {Promise<Response|*>} - The metro.response to this request, or any other result as changed by any included middleware.\n\t */\n\tfetch(req, options)\n\t{\n\t\treq = request(req, options)\n\t\tif (!req.url) {\n\t\t\tthrow metroError('metro.client.'+req.method.toLowerCase()+': Missing url parameter '+metroURL+'client/fetch-missing-url/', req)\n\t\t}\n\t\tif (!options) {\n\t\t\toptions = {}\n\t\t}\n\t\tif (!(typeof options === 'object') \n\t\t\t|| options instanceof String) \n\t\t{\n\t\t\tthrow metroError('metro.client.fetch: Invalid options parameter '+metroURL+'client/fetch-invalid-options/', options)\n\t\t}\n\n\t\tconst metrofetch = async function browserFetch(req)\n\t\t{\n\t\t\tif (req[Symbol.metroProxy]) {\n\t\t\t\treq = req[Symbol.metroSource]\n\t\t\t}\n\t\t\tconst res = await fetch(req)\n\t\t\treturn response(res)\n\t\t}\n\t\t\n\t\tlet middlewares = [metrofetch].concat(this.clientOptions?.middlewares?.slice() || [])\n\t\toptions = Object.assign({}, this.clientOptions, options)\n\t\tconst traceContext = createTraceContext(req, options)\n\t\tconst middlewareContext = createMiddlewareContext(this, options, traceContext)\n\t\t//@TODO: do this once in constructor?\n\t\tlet next\n\t\tfor (let middleware of middlewares) {\n\t\t\tnext = (function(next, middleware) {\n\t\t\t\treturn async function(req) {\n\t\t\t\t\tlet res\n\t\t\t\t\tlet tracers = traceContext.tracers\n\t\t\t\t\tcallTracers(tracers, 'request', req, middleware, traceContext)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tres = await middleware(req, next, middlewareContext)\n\t\t\t\t\t} catch(error) {\n\t\t\t\t\t\tcallTracers(tracers, 'error', error, req, middleware, traceContext)\n\t\t\t\t\t\tthrow error\n\t\t\t\t\t}\n\t\t\t\t\tcallTracers(tracers, 'response', res, middleware, traceContext)\n\t\t\t\t\treturn res\n\t\t\t\t}\t\t\t\t\t\t\t\t\n\t\t\t})(next, middleware)\n\t\t}\n\t\treturn next(req)\n\t}\n\n\twith(...options) {\n\t\treturn new Client(deepClone(this.clientOptions), ...options)\n\t}\n\n\tget location() {\n\t\treturn this.clientOptions.url\n\t}\n\n}\n\n\nlet traceContextId = 0\nconst TRACE_OPTION_KEYS = ['trace', 'tracer', 'tracers']\n\nfunction fetchOptionsFrom(...options)\n{\n\tconst result = {}\n\tfor (const option of options) {\n\t\tif (!isPlainObject(option)) {\n\t\t\tcontinue\n\t\t}\n\t\tfor (const key of TRACE_OPTION_KEYS) {\n\t\t\tif (key in option) {\n\t\t\t\tresult[key] = option[key]\n\t\t\t}\n\t\t}\n\t}\n\treturn result\n}\n\nfunction createTraceContext(req, options={})\n{\n\tconst parent = traceParentFrom(options.trace || options.tracer || options.tracers)\n\tlet localTracers = []\n\tif (parent) {\n\t\tlocalTracers = parent.localTracers || []\n\t} else {\n\t\tlocalTracers = normalizeTracers(options.trace)\n\t\t\t.concat(normalizeTracers(options.tracer))\n\t\t\t.concat(normalizeTracers(options.tracers))\n\t}\n\tconst globalTracers = Object.values(Client.tracers || {})\n\tconst context = {\n\t\t__metroTraceContext: true,\n\t\tid: 'metro-trace-context-'+(++traceContextId),\n\t\tparent,\n\t\trequest: req,\n\t\toptions,\n\t\tglobalTracers,\n\t\tlocalTracers,\n\t\ttracers: globalTracers.concat(localTracers)\n\t}\n\treturn context\n}\n\nfunction traceParentFrom(value)\n{\n\tif (!value) {\n\t\treturn null\n\t}\n\tif (value.context?.__metroTraceContext) {\n\t\treturn value.context\n\t}\n\tif (value.__metroTraceContext) {\n\t\treturn value\n\t}\n\treturn null\n}\n\nfunction normalizeTracers(value)\n{\n\tif (!value || value.__metroTraceContext || value.context?.__metroTraceContext) {\n\t\treturn []\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn value.flatMap(normalizeTracers)\n\t}\n\tif (isTracer(value)) {\n\t\treturn [value]\n\t}\n\tif (isPlainObject(value)) {\n\t\treturn Object.values(value).flatMap(normalizeTracers)\n\t}\n\treturn []\n}\n\nfunction isTracer(value)\n{\n\treturn value && typeof value == 'object' && [\n\t\t'request', 'response', 'error', 'event', 'diagnostic', 'span', 'link', 'current'\n\t].some(name => typeof value[name] == 'function')\n}\n\nfunction createMiddlewareContext(client, options, traceContext)\n{\n\tconst trace = createTraceAPI(traceContext)\n\treturn Object.freeze({\n\t\tclient,\n\t\toptions,\n\t\ttrace,\n\t\tfetch(req, fetchOptions={}) {\n\t\t\treturn client.fetch(req, Object.assign({}, fetchOptions, { trace }))\n\t\t}\n\t})\n}\n\nfunction createTraceAPI(context)\n{\n\tconst api = {\n\t\t__metroTraceContext: true,\n\t\tcontext,\n\t\tevent(name, data={}) {\n\t\t\tcallTracers(context.tracers, 'event', name, data, context)\n\t\t},\n\t\tdiagnostic(diagnostic={}) {\n\t\t\tcallTracers(context.tracers, 'diagnostic', diagnostic, context)\n\t\t},\n\t\tcurrent() {\n\t\t\tfor (const tracer of context.tracers) {\n\t\t\t\tif (typeof tracer.current == 'function') {\n\t\t\t\t\tconst current = tracer.current(context)\n\t\t\t\t\tif (current) {\n\t\t\t\t\t\treturn current\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn { traceId: null, spanId: null }\n\t\t},\n\t\tasync span(name, fn, data={}) {\n\t\t\tconst tracer = context.tracers.find(tracer => typeof tracer.span == 'function')\n\t\t\tif (!tracer) {\n\t\t\t\treturn fn()\n\t\t\t}\n\t\t\treturn tracer.span(name, fn, data, context)\n\t\t},\n\t\tlink(key) {\n\t\t\tlet traceId = null\n\t\t\tfor (const tracer of context.tracers) {\n\t\t\t\tif (typeof tracer.link == 'function') {\n\t\t\t\t\ttraceId = tracer.link(key, undefined, context) || traceId\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn traceId\n\t\t},\n\t\toptions(extra={}) {\n\t\t\treturn Object.assign({}, extra, { trace: api })\n\t\t}\n\t}\n\treturn api\n}\n\nfunction callTracers(tracers, method, ...args)\n{\n\tfor (const tracer of tracers) {\n\t\tif (tracer && typeof tracer[method] == 'function') {\n\t\t\ttracer[method].call(tracer, ...args)\n\t\t}\n\t}\n}\n\nfunction isPlainObject(value)\n{\n\treturn value && typeof value == 'object'\n\t\t&& (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null)\n}\n\n/**\n * Returns a new metro Client object.\n * @param {...ClientOptions|string|URL}\n * @return Client\n */\nexport function client(...options)\n{\n\treturn new Client(...deepClone(options))\n}\n\n/*\n//FIXME: is this needed?\nfunction appendHeaders(r, headers)\n{\n\tif (!Array.isArray(headers)) {\n\t\theaders = [headers]\n\t}\n\theaders.forEach((header) => {\n\t\tif (typeof header == 'function') {\n\t\t\tlet result = header(r.headers, r)\n\t\t\tif (result) {\n\t\t\t\tif (!Array.isArray(result)) {\n\t\t\t\t\tresult = [result]\n\t\t\t\t}\n\t\t\t\theaders = headers.concat(result)\n\t\t\t}\n\t\t}\n\t})\n\theaders.forEach((header) => {\n\t\tObject.entries(header).forEach(([name,value]) => {\t\t\t\n\t\t\tr.headers.append(name, value)\n\t\t})\n\t})\n}\n*/\n\nfunction getRequestParams(req, current)\n{\n\tlet params = current || {}\n\tif (!params.url && current.url) {\n\t\tparams.url = current.url\n\t}\n\t// function to fetch all relevant properties of a Request\n\tfor(let prop of ['method','headers','body','mode','credentials','cache','redirect',\n\t\t'referrer','referrerPolicy','integrity','keepalive','signal',\n\t\t'priority','url']) {\n\t\tlet value = req[prop]\n\t\tif (typeof value=='undefined' || value == null) {\n\t\t\tcontinue\n\t\t}\n\t\tif (value?.[Symbol.metroProxy]) {\n\t\t\tvalue = value[Symbol.metroSource]\n\t\t}\n\t\tif (typeof value == 'function') {\n\t\t\tparams[prop] = value(params[prop], params)\n\t\t} else {\n\t\t\tif (prop == 'url') {\n\t\t\t\tparams.url = url(params.url, value)\n\t\t\t} else if (prop == 'headers') {\n\t\t\t\t//FIXME: test and see if appendHeaders is needed\n\t\t\t\tparams.headers = new Headers(current.headers)\n\t\t\t\tif (!(value instanceof Headers)) {\n\t\t\t\t\tvalue = new Headers(req.headers)\n\t\t\t\t}\n\t\t\t\tfor (let [key, val] of value.entries()) {\n\t\t\t\t\tparams.headers.set(key, val)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tparams[prop] = value\n\t\t\t}\n\t\t}\n\t}\n\tif (req instanceof Request && req.data) {\n\t\t// Request.body is always transformed into ReadableStreem\n\t\t// metro.request.data is the original body passed to Request()\n\t\tparams.body = req.data\n\t}\n\treturn params\n}\n\n/**\n * @typedef {Request} MetroRequest\n * @property {Symbol(source)} - returns the target Request of this Proxy\n * @property {Symbol(isProxy)} - returns true\n * @method with - returns a new MetroRequest, with the given options added\n * @param {<RequestOptions|Request|string|URL|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - request options, handled in order\n * \n * Returns a new metro Request object\n * @param {<RequestOptions|Request|string|URL|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - request options, handled in order\n * @return {MetroRequest} - a new metro Request object\n */\nexport function request(...options)\n{\n\t// the standard Request constructor is a minefield\n\t// so first gather all the options together into a single\n\t// javascript object, then set it in one go\n\tlet requestParams = {\n\t\turl: typeof window != 'undefined' ? url(window.location) : url('https://localhost/'),\n\t\tduplex: 'half' // required when setting body to ReadableStream, just set it here by default already\n\t}\n\tfor (let option of options) {\n\t\tif (typeof option == 'string'\n\t\t\t|| option instanceof URL\n\t\t\t|| option instanceof URLSearchParams\n\t\t) {\n\t\t\trequestParams.url = url(requestParams.url, option)\n\t\t} else if (option && (\n\t\t\toption instanceof FormData\n\t\t\t|| option instanceof ReadableStream\n\t\t\t|| option instanceof Blob\n\t\t\t|| option instanceof ArrayBuffer\n\t\t\t|| option instanceof DataView\n\t\t)) {\n\t\t\trequestParams.body = option\n\t\t} else if (option && typeof option == 'object') {\n\t\t\tObject.assign(requestParams, getRequestParams(option, requestParams))\n\t\t}\n\t}\n\tlet r = new Request(requestParams.url, requestParams)\n\tlet data = requestParams.body\n\tif (data) {\n\t\tif (typeof data == 'object'\n\t\t\t&& !(data instanceof String)\n\t\t\t&& !(data instanceof ReadableStream)\n\t\t\t&& !(data instanceof Blob)\n\t\t\t&& !(data instanceof ArrayBuffer)\n\t\t\t&& !(data instanceof DataView)\n\t\t\t&& !(data instanceof FormData)\n\t\t\t&& !(data instanceof URLSearchParams)\n\t\t\t&& (globalThis.ArrayBuffer && ArrayBuffer.isView(data)) //TypedArray\n\t\t) {\n\t\t\t// if we are here, body is set with an object of a type\n\t\t\t// not natively understood by Request, coerce it to a string\n\t\t\t// using toString({headers}) instead of just toString()\n\t\t\tif (typeof data.toString == 'function') {\n\t\t\t\trequestParams.body = data.toString({headers:r.headers})\n\t\t\t\tr = new Request(requestParams.url, requestParams)\n\t\t\t}\n\t\t}\n\t}\n\tObject.freeze(r)\n\treturn new Proxy(r, {\n\t\tget(target, prop) {\n\t\t\tlet result\n\t\t\tswitch(prop) {\n\t\t\t\tcase Symbol.metroSource:\n\t\t\t\t\tresult = target\n\t\t\t\tbreak\n\t\t\t\tcase Symbol.metroProxy:\n\t\t\t\t\tresult = true\n\t\t\t\tbreak\n\t\t\t\tcase 'with':\n\t\t\t\t\tresult = function(...options) {\n\t\t\t\t\t\tif (typeof data !== 'undefined') { // data is kept in a seperate value, if it set earlier\n\t\t\t\t\t\t\toptions.unshift({ body: data }) // unshifted so it can be overridden by options\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn request(target, ...options)\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tcase 'data':\n\t\t\t\t\tresult = data\n\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\tif (target[prop] instanceof Function) {\n\t\t\t\t\t\tif (prop === 'clone') {\n\t\t\t\t\t\t\tresult = function() {\n\t\t\t\t\t\t\t\tconst cloned = target.clone()\n\n\t\t\t\t\t\t\t\tif (typeof data != 'undefined' \n\t\t\t\t\t\t\t\t\t&& !(typeof ReadableStream != 'undefined'\n\t\t\t\t\t\t\t\t\t\t&& data instanceof ReadableStream)) {\n\t\t\t\t\t\t\t\t\treturn request(cloned, { body: data })\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\treturn request(cloned)\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tresult = target[prop].bind(target)\n\t\t\t\t\t\t}\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = target[prop]\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t\treturn result\n\t\t}\n\t})\n}\n\nfunction getResponseParams(res, current)\n{\n\t// function to fetch all relevant properties of a Response\n\tlet params = current || {}\n\tif (!params.url && current.url) {\n\t\tparams.url = current.url\n\t}\n\tfor(let prop of ['status','statusText','headers','body','url','type','redirected']) {\n\t\tlet value = res[prop]\n\t\tif (typeof value == 'undefined' || value == null) {\n\t\t\tcontinue\n\t\t}\n\t\tif (value?.[Symbol.metroProxy]) {\n\t\t\tvalue = value[Symbol.metroSource]\n\t\t}\n\t\tif (typeof value == 'function') {\n\t\t\tparams[prop] = value(params[prop], params)\n\t\t} else {\n\t\t\tif (prop == 'url') {\n\t\t\t\t//TODO: check if this should use metro.url\n\t\t\t\tparams.url = new URL(value, params.url || 'https://localhost/')\n\t\t\t} else {\n\t\t\t\tparams[prop] = value\n\t\t\t}\n\t\t}\n\t}\n\tif (res instanceof Response && res.data) {\n\t\t// Response.body is always transformed into ReadableStreem FIXME: check this\n\t\t// metro.response.data is the original body passed to Response()\n\t\tparams.body = res.data\n\t}\n\treturn params\n}\n\n/**\n * @typedef {Response} MetroResponse\n * @property {Symbol(source)} - returns the target Response of this Proxy\n * @property {Symbol(isProxy)} - returns true\n * @method with - returns a new MetroResponse, with the given options added\n * @param {<ResponseOptions|Response|string|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - respomse options, handled in order\n * \n * Returns a new metro Response object\n * @param {<ResponseOptions|Response|string|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - request options, handled in order\n * @return {MetroResponse} - a new metro Response object\n */\nexport function response(...options)\n{\n\tlet responseParams = {}\n\tfor (let option of options) {\n\t\tif (typeof option == 'string') {\n\t\t\tresponseParams.body = option\n\t\t} else if (option instanceof Response) {\n\t\t\tObject.assign(responseParams, getResponseParams(option, responseParams))\n\t\t} else if (option && typeof option == 'object') {\n\t\t\tif (option instanceof FormData\n\t\t\t\t|| option instanceof Blob\n\t\t\t\t|| option instanceof ArrayBuffer\n\t\t\t\t|| option instanceof DataView\n\t\t\t\t|| option instanceof ReadableStream\n\t\t\t\t|| option instanceof URLSearchParams\n\t\t\t\t|| option instanceof String\n\t\t\t\t|| (typeof globalThis.TypedArray != 'undefined' && option instanceof globalThis.TypedArray)\n\t\t\t) {\n\t\t\t\tresponseParams.body = option\n\t\t\t} else {\n\t\t\t\tObject.assign(responseParams, getResponseParams(option, responseParams))\n\t\t\t}\n\t\t}\n\t}\n\tlet data = undefined\n\tif (responseParams.body) {\n\t\tdata = responseParams.body\n\t}\n\t// if response status is 'null body status', don't set a body\n\t// that is response.status in [101, 204, 205, 304 ] \n\t// see: https://fetch.spec.whatwg.org/#statuses\n\tif ([101, 204, 205, 304 ].includes(responseParams.status)) {\n\t\tresponseParams.body = null\n\t}\n\tlet r = new Response(responseParams.body, responseParams)\t\n\tObject.freeze(r)\n\treturn new Proxy(r, {\n\t\tget(target, prop) {\n\t\t\tlet result\n\t\t\tswitch(prop) {\n\t\t\t\tcase Symbol.metroProxy:\n\t\t\t\t\tresult = true\n\t\t\t\tbreak\n\t\t\t\tcase Symbol.metroSource:\n\t\t\t\t\tresult = target\n\t\t\t\tbreak\n\t\t\t\tcase 'with':\n\t\t\t\t\tresult = function(...options) {\n\t\t\t\t\t\treturn response(target, ...options)\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tcase 'data':\n\t\t\t\t\t// body is turned into ReadableStream\n\t\t\t\t\t// data is the original body param\n\t\t\t\t\tresult = data\n\t\t\t\tbreak\n\t\t\t\tcase 'ok':\n\t\t\t\t\tresult = (target.status>=200) && (target.status<300)\n\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\tif (typeof target[prop] == 'function') {\n\t\t\t\t\t\tresult = target[prop].bind(target)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = target[prop]\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t\treturn result\n\t\t}\n\t})\n}\n\nfunction appendSearchParams(url, params)\n{\n\tif (typeof params == 'function') {\n\t\tparams(url.searchParams, url)\n\t} else {\n\t\tparams = new URLSearchParams(params)\n\t\tparams.forEach((value,key) => {\n\t\t\turl.searchParams.append(key, value)\n\t\t})\n\t}\n}\n\nfunction appendHashParams(value, params)\n{\n\tconst target = value[Symbol.metroSource] || value\n\tif (!(params instanceof URLSearchParams)) {\n\t\tparams = new URLSearchParams(params)\n\t}\n\tlet hash = target.hash || '#'\n\thash += '?' + params\n\treturn url(target, { hash })\n}\n\n/**\n * @typedef {URL} MetroURL\n * @property {Symbol(source)} - returns the target Request of this Proxy\n * @property {Symbol(isProxy)} - returns true\n * @method with - returns a new MetroRequest, with the given options added\n * @param {<URL|URLSearchParams|string|Object|Function>} ...options - url options, handled in order\n * \n * Returns a new metro URL object\n * @param {<URL|URLSearchParams|string|Object|Function>} ...options - url options, handled in order\n * @return {MetroURL} - a new metro URL object\n */\nexport function url(...options)\n{\n\tlet validParams = ['hash','fragment','host','hostname','href',\n\t\t'password','pathname','port','protocol','username','search','searchParams','hashParams']\n\tlet u = new URL('https://localhost/')\n\tlet hParams = null\n\tfor (let option of options) {\n\t\tif (typeof option == 'string' || option instanceof String) {\n\t\t\t// option is a relative or absolute url\n\t\t\tu = new URL(option, u)\n\t\t} else if (option instanceof URL \n\t\t\t|| (typeof Location != 'undefined' \n\t\t\t\t&& option instanceof Location)\n\t\t) {\n\t\t\tu = new URL(option)\n\t\t} else if (option instanceof URLSearchParams) {\n\t\t\tappendSearchParams(u, option)\n\t\t} else if (option && typeof option == 'object') {\n\t\t\tfor (let param in option) {\n\t\t\t\tswitch(param) {\n\t\t\t\t\tcase 'search':\n\t\t\t\t\t\tif (typeof option.search == 'function') {\n\t\t\t\t\t\t\toption.search(u.search, u)\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tu.search = new URLSearchParams(option.search)\n\t\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t\tcase 'searchParams':\n\t\t\t\t\t\tappendSearchParams(u, option.searchParams)\n\t\t\t\t\tbreak\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tif (!validParams.includes(param)) {\n\t\t\t\t\t\t\tthrow metroError('metro.url: unknown url parameter '+metroURL+'url/unknown-param-name/', param)\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (param=='fragment') {\n\t\t\t\t\t\t\tlet fragment = option.fragment\n\t\t\t\t\t\t\tif (fragment && typeof fragment == 'string' && fragment[0]!='#') {\n\t\t\t\t\t\t\t\tfragment = '#'+fragment\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\toption.hash = fragment\n\t\t\t\t\t\t\tparam = 'hash'\n\t\t\t\t\t\t} else if (param=='hashParams') {\n\t\t\t\t\t\t\thParams = option.hashParams; // add at the end\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (typeof option[param] == 'function') {\n\t\t\t\t\t\t\toption[param](u[param], u)\n\t\t\t\t\t\t} else if (\n\t\t\t\t\t\t\ttypeof option[param] == 'string' || option[param] instanceof String \n\t\t\t\t\t\t\t|| typeof option[param] == 'number' || option[param] instanceof Number\n\t\t\t\t\t\t\t|| typeof option[param] == 'boolean' || option[param] instanceof Boolean\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tu[param] = ''+option[param]\n\t\t\t\t\t\t} else if (typeof option[param] == 'object' && option[param].toString) {\n\t\t\t\t\t\t\tu[param] = option[param].toString()\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tthrow metroError('metro.url: unsupported value for '+param+' '+metroURL+'url/unsupported-param-value/', options[param])\n\t\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t}\n\t\t} else {\n\t\t\tthrow metroError('metro.url: unsupported option value '+metroURL+'url/unsupported-option-value/', option)\n\t\t}\n\t}\n\tif (hParams) {\n\t\tif (!u.hash) {\n\t\t\tu.hash = '#'\n\t\t}\n\t\tif (typeof hParams=='string') {\n\t\t\tu.hash += hParams\n\t\t} else {\n\t\t\tu = appendHashParams(u, hParams)\n\t\t}\n\t}\n\tObject.freeze(u)\n\treturn new Proxy(u, {\n\t\tget(target, prop) {\n\t\t\tlet result\n\t\t\tswitch(prop) {\n\t\t\t\tcase Symbol.metroProxy:\n\t\t\t\t\tresult = true\n\t\t\t\tbreak\n\t\t\t\tcase Symbol.metroSource:\n\t\t\t\t\tresult = target\n\t\t\t\tbreak\n\t\t\t\tcase 'with':\n\t\t\t\t\tresult = function(...options) {\n\t\t\t\t\t\treturn url(target, ...options)\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tcase 'filename':\n\t\t\t\t\tresult = target.pathname.split('/').pop()\n\t\t\t\tbreak\n\t\t\t\tcase 'folderpath':\n\t\t\t\t\tresult = target.pathname.substring(0,target.pathname.lastIndexOf('/')+1)\n\t\t\t\tbreak\n\t\t\t\tcase 'authority':\n\t\t\t\t\tresult = target.username ?? ''\n\t\t\t\t\tresult += target.password ? ':'+target.password : ''\n\t\t\t\t\tresult += result ? '@' : ''\n\t\t\t\t\tresult += target.hostname\n\t\t\t\t\tresult += target.port ? ':'+target.port : ''\n\t\t\t\t\tresult += '/'\n\t\t\t\t\tresult = target.protocol + '//' + result\n\t\t\t\tbreak\n\t\t\t\tcase 'fragment':\n\t\t\t\t\tresult = target.hash.substring(1)\n\t\t\t\tbreak\n\t\t\t\tcase 'scheme':\n\t\t\t\t\tif (target.protocol) {\n\t\t\t\t\t\tresult = target.protocol.substring(0, target.protocol.length-1)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = ''\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\tif (target[prop] instanceof Function) {\n\t\t\t\t\t\tresult = target[prop].bind(target)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = target[prop]\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t\treturn result\n\t\t}\n\t})\n}\n\nconst metroConsole = {\n\terror: (message, ...details) => {\n\t\tconsole.error('\u24C2\uFE0F  ',message, ...details)\n\t},\n\tinfo: (message, ...details) => {\n\t\tconsole.info('\u24C2\uFE0F  ',message, ...details)\n\t},\n\tgroup: (name) => {\n\t\tconsole.group('\u24C2\uFE0F  '+name)\n\t},\n\tgroupEnd: (name) => {\n\t\tconsole.groupEnd('\u24C2\uFE0F  '+name)\n\t}\n}\n\n\n/**\n * Custom Metro Error function that outputs to the console then throws an error\n */\nexport function metroError(message, ...details) {\n\tmetroConsole.error(message, ...details)\n\treturn new Error(message, ...details)\n}\n\nexport function deepClone(object) {\n\tif (Array.isArray(object)) {\n\t\treturn object.slice().map(deepClone)\n\t}\n\tif (object && typeof object==='object') {\n\t\tif (object.__proto__?.constructor==Object || !object.__proto__) { // plain objects\n\t\t\tlet result = Object.assign({}, object)\n\t\t\tObject.keys(result).forEach(key => {\n\t\t\t\tresult[key] = deepClone(object[key])\n\t\t\t})\n\t\t\treturn result\n\t\t} else {\n\t\t\treturn object // don't clone custom classes or functions\n\t\t}\n\t}\n\treturn object\n}", "/*\nTODO: add assertExplain global flag, so that if assert() fails, you can call explain() with\n  the same pattern and it will return text explanation of why it failed, each assertion function must \n  then check assertExplain, and return a text explanation of what fails or succeeds\n  top level can then filter to show only the failures\n  (so that not(x) can show the succeeds message of x)\n*/\n\n/**\n * assertEnabled (Boolean) used to toggle whether the assert()\n * method should test assertions or not.\n */\nglobalThis.assertEnabled = false\n\n/**\n * Enables assertion testing with assert()\n */\nexport function enable() {\n\tglobalThis.assertEnabled = true\n}\n\n/**\n * Disables assertion testing with assert()\n */\nexport function disable() {\n\tglobalThis.assertEnabled = false\n}\n\n/**\n * This function will check the source for the assertions in test, if\n * assertion checking is enabled globally.\n * If it is, and any assertion fails, it will throw an assertError\n * with a list of problems and other details.\n */\nexport function assert(source, test) {\n\tif (globalThis.assertEnabled) {\n\t\tlet problems = fails(source,test)\n\t\tif (problems) {\n\t\t\tconsole.error('\uD83C\uDD70\uFE0F  Assertions failed because of:', problems, 'in this source:', source)\n\t\t\tthrow new Error('Assertions failed', {\n\t\t\t\tcause: { problems, source } \n\t\t\t})\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a pattern, only if the value is not null or undefined\n */\nexport function Optional(pattern) {\n\treturn function _Optional(data, root, path) {\n\t\tif (typeof data != 'undefined' && data!=null && typeof pattern != 'undefined' ) {\n\t\t\treturn fails(data, pattern, root, path)\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a pattern, always.\n */\nexport function Required(pattern) {\n\treturn function _Required(data, root, path) {\n\t\tif (data==null || typeof data == 'undefined') {\n\t\t\treturn error('data is required', data, pattern || 'any value', path)\n\t\t} else if (typeof pattern != 'undefined') {\n\t\t\treturn fails(data, pattern, root, path)\n\t\t} else {\n\t\t\treturn false\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a pattern, only if the value is not null or undefined\n * If null or undefined, it does print a warning to the console.\n */\nexport function Recommended(pattern) {\n\treturn function _Recommended(data, root, path) {\n\t\tif (data==null || typeof data == 'undefined') {\n\t\t\twarn('data does not contain recommended value', data, pattern, path)\n\t\t\treturn false\n\t\t} else {\n\t\t\treturn fails(data, pattern, root, path)\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a set of patterns, untill one succeeds\n * Returns an error if none succeed\n */\nexport function oneOf(...patterns) { \n\treturn function _oneOf(data, root, path) {\n\t\tfor(let pattern of patterns) {\n\t\t\tif (!fails(data, pattern, root, path)) {\n\t\t\t\treturn false\n\t\t\t}\n\t\t}\n\t\treturn error('data does not match oneOf patterns', data, patterns, path)\n\t}\n}\n\n/**\n * Tests a given array of values against a set of patterns\n * If any value does not match one of the patterns, it will return an error\n * If not given an array to test, it will return an error\n */\nexport function anyOf(...patterns) {\n\treturn function _anyOf(data, root, path) {\n\t\tif (!Array.isArray(data)) {\n\t\t\treturn error('data is not an array',data,'anyOf',path)\n\t\t}\n\t\tfor (let value of data) {\n\t\t\tif (oneOf(...patterns)(value)) {\n\t\t\t\treturn error('data does not match anyOf patterns',value,patterns,path)\n\t\t\t}\n\t\t}\n\t\treturn false\n\t}\n}\n\nexport function allOf(...patterns) {\n\treturn function _allOf(data, root, path) {\n\t\tlet problems = []\n\t\tfor (let pattern of patterns) {\n\t\t\tproblems = problems.concat(fails(data, pattern, root, path))\n\t\t}\n\t\tproblems = problems.filter(Boolean)\n\t\tif (problems.length) {\n\t\t\treturn error('data does not match all given patterns', data, patterns, path, problems)\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value to see if it is a valid (and absolute) URL, by\n * parsing it with the URL() constructor, and then testing the href\n * value to be equal to the initial value.\n */\nexport function validURL(data, root, path) {\n\ttry {\n\t\tif (data instanceof URL) {\n\t\t\tdata = data.href\n\t\t}\n\t\tlet url = new URL(data)\n\t\tif (url.href!=data) {\n\t\t\tif (!(url.href+'/'==data || url.href==data+'/')) {\n\t\t\t\t// new URL() always adds a / as path\n\t\t\t\treturn error('data is not a valid url',data,'validURL',path)\n\t\t\t}\n\t\t}\n\t} catch(e) {\n\t\treturn error('data is not a valid url',data,'validURL',path)\n\t}\n}\n\n/**\n * Tests a given value to see if it looks like a valid email address, by\n * testing it against a regular expression. So there are no guarantees that\n * it is an actual working email address, just that it looks like one.\n */\nexport function validEmail(data, root, path) {\n\tif (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(data)) {\n\t\treturn error('data is not a valid email',data,'validEmail',path)\n\t}\n}\n\n/**\n * Tests a given value to see if it is an object which is an instance of the given\n * constructor\n */\nexport function instanceOf(constructor) {\n\treturn function _instanceOf(data, root, path) {\n\t\tif (!(data instanceof constructor)) {\n\t\t\treturn error('data is not an instanceof pattern',data,constructor,path)\n\t\t}\n\t}\n}\n\n/**\n * Runs the given test pattern on a value, if the test succeeds, it fails\n * the not() test.\n */\nexport function not(pattern) {\n\treturn function _not(data, root, path) {\n\t\tif (!fails(data, pattern, root, path)) {\n\t\t\treturn error('data matches pattern, when required not to', data, pattern, path)\n\t\t}\n\t}\n}\n\n/**\n * returns an array of problems if the data fails to satisfy \n * the assertions in the given pattern, false otherwise\n * @param {any} data    The data to match\n * @param {any} pattern The pattern to match\n * @param {any} root    Root object for assertions, set to data by default\n * @return {Array|false} Array with problems if the pattern fails, false otherwise\n */\nexport function fails(data, pattern, root, path='') {\n\tif (!root) {\n\t\troot = data\n\t}\n\tlet problems = []\n\tif (pattern === Boolean) {\n\t\tif (typeof data != 'boolean' && !(data instanceof Boolean)) {\n\t\t\tproblems.push(error('data is not a boolean', data, pattern, path))\n\t\t}\t\t\n\t} else if (pattern === Number) {\n\t\tif (typeof data != 'number' && !(data instanceof Number)) {\n\t\t\tproblems.push(error('data is not a number', data, pattern, path))\n\t\t}\n\t} else if (pattern === String) {\n\t\tif (typeof data != 'string' && !(data instanceof String)) {\n\t\t\tproblems.push(error('data is not a string', data, pattern, path))\n\t\t}\n\t\tif (data == \"\") {\n\t\t\tproblems.push(error('data is an empty string, which is not allowed', data, pattern, path))\n\t\t}\n\t} else if (pattern instanceof RegExp) {\n    \tif (Array.isArray(data)) {\n\t\t\tlet index = data.findIndex((element,index) => fails(element,pattern,root,path+'['+index+']'))\n            if (index>-1) {\n            \tproblems.push(error('data['+index+'] does not match pattern', data[index], pattern, path+'['+index+']'))\n            }\n        } else if (typeof data == 'undefined') {\n        \tproblems.push(error('data is undefined, should match pattern', data, pattern, path))\n    \t} else if (!pattern.test(data)) {\n        \tproblems.push(error('data does not match pattern', data, pattern, path))\n        }\n    } else if (pattern instanceof Function) {\n        let problem = pattern(data, root, path)\n        if (problem) {\n        \tif (Array.isArray(problem)) {\n        \t\tproblems = problems.concat(problem)\n        \t} else {\n\t        \tproblems.push(problem)\n\t        }\n        }\n    } else if (Array.isArray(pattern)) {\n\t\tif (!Array.isArray(data)) {\n\t\t\tproblems.push(error('data is not an array',data,[],path))\n\t\t}\n\t\tfor (let p of pattern) {\n\t\t\tfor (let index of data.keys()) {\n\t\t\t\tlet problem = fails(data[index], p, root, path+'['+index+']')\n\t\t\t\tif (Array.isArray(problem)) {\n\t\t\t\t\tproblems = problems.concat(problem)\n\t\t\t\t} else if (problem) {\n\t\t\t\t\tproblems.push(problem)\n\t\t\t\t}\n\t\t\t}\n    \t}\n    } else if (pattern && typeof pattern == 'object') {\n        if (Array.isArray(data)) {\n            let index = data.findIndex((element,index) => fails(element,pattern,root,path+'['+index+']'))\n            if (index>-1) {\n            \tproblems.push(error('data['+index+'] does not match pattern', data[index], pattern, path+'['+index+']'))\n            }\n        } else if (!data || typeof data != 'object') {\n        \tproblems.push(error('data is not an object, pattern is', data, pattern, path))\n        } else {\n        \tif (data instanceof URLSearchParams) {\n        \t\tdata = Object.fromEntries(data)\n        \t}\n        \tif (pattern instanceof Function) {\n        \t\tlet result = fails(data, pattern, root, path)\n\t            if (result) {\n\t            \tproblems = problems.concat(result)\n\t            }\n        \t} else {\n\t\t        for (const [patternKey, subpattern] of Object.entries(pattern)) {\n\t\t            let result = fails(data[patternKey], subpattern, root, path+'.'+patternKey)\n\t\t            if (result) {\n\t\t            \tproblems = problems.concat(result)\n\t\t            }\n\t\t        }\n\t\t    }\n\t    }\n    } else {\n    \tif (pattern!=data) {\n    \t\tproblems.push(error('data and pattern are not equal', data, pattern, path))\n    \t}\n    }\n    if (problems.length) {\n    \treturn problems\n    }\n    return false\n}\n\n/**\n * Returns an object with message, found and expected properties\n */ \nexport function error(message, found, expected, path, problems) {\n\tlet result = {\n\t\tpath,\n\t\tmessage,\n\t\tfound,\n\t\texpected\n\t}\n\tif (problems) {\n\t\tresult.problems = problems\n\t}\n\treturn result\n}\n\nexport function warn(message, data, pattern, path) {\n\tconsole.warn('\uD83C\uDD70\uFE0F  Assert: '+path, message, pattern, data)\n}\n\nglobalThis.assert = {\n\twarn,\n\terror,\n\tassert,\n\tenable,\n\tdisable,\n\tRequired,\n\tRecommended,\n\tOptional,\n\toneOf,\n\tanyOf,\n\tallOf,\n\tvalidURL,\n\tvalidEmail,\n\tinstanceOf,\n\tnot,\n\tfails\n}", "export function tokenStore(site) {\n\tlet localState, localTokens\n\tif (typeof localStorage !== 'undefined') {\n\t\tlocalState = {\n\t\t\tget: ()      => localStorage.getItem('metro/state:'+site),\n\t\t\tset: (value) => localStorage.setItem('metro/state:'+site, value),\n\t\t\thas: ()      => localStorage.getItem('metro/state:'+site)!==null,\n\t\t\tdelete: ()   => localStorage.removeItem('metro/state:'+site)\n\t\t}\n\t\tlocalTokens = {\n\t\t\tget: (name)        => JSON.parse(localStorage.getItem(site+':'+name)),\n\t\t\tset: (name, value) => localStorage.setItem(site+':'+name, JSON.stringify(value)),\n\t\t\thas: (name)        => localStorage.getItem(site+':'+name)!==null,\n\t\t\tdelete: (name)     => localStorage.removeItem(site+':'+name)\n\t\t}\n\t} else {\n\t\tlet stateMap = new Map()\n\t\tlocalState = {\n\t\t\tget: ()      => stateMap.get('metro/state:'+site),\n\t\t\tset: (value) => stateMap.set('metro/state:'+site, value),\n\t\t\thas: ()      => stateMap.has('metro/state:'+site),\n\t\t\tdelete: ()   => stateMap.delete('metro/state:'+site)\n\t\t}\n\t\tlocalTokens = new Map()\n\t}\n\treturn {\n\t\tstate: localState,\n\t\ttokens: localTokens\n\t}\n}", "import * as metro from '@muze-nl/metro-core'\nimport { assert, Required, validURL } from '@muze-nl/assert'\nimport {tokenStore} from './tokenstore.mjs'\n\nconst SUPPORTED_TOKEN_TYPES = new Map([\n\t['bearer', 'Bearer'],\n\t['dpop', 'DPoP']\n])\n\nconst SUPPORTED_TOKEN_ENDPOINT_AUTH_METHODS = new Set([\n\t'none',\n\t'client_secret_post',\n\t'client_secret_basic'\n])\n\n/**\n * oauth2mw returns a middleware for @muze-nl/metro that\n * implements oauth2 authentication in the metro client.\n * it supports the authorization_code, refresh_token and\n * client_credentials grant_type.\n * Since implicit flow is deemed insecure, it is not supported.\n * by default it will use PKCE and generate a random code_verifier,\n * to skip this, set options.oauth2_configuration.code_verifier to false\n */\nexport default function oauth2mw(options)\n{\n\tconst defaultOptions = {\n\t\tclient: metro.client(),\n\t\tforce_authorization: false,\n\t\tsite: 'default',\n\t\toauth2_configuration: {\n\t\t\tauthorization_endpoint: '/authorize',\n\t\t\ttoken_endpoint: '/token',\n\t\t\tredirect_uri: globalThis.document?.location.href,\n\t\t\tgrant_type: 'authorization_code',\n\t\t\tcode_verifier: generateCodeVerifier(64)\n\t\t},\n\t\tauthorize_callback: async url => {\n\t\t\tif (window.location.href != url.href) {\n\t\t\t\twindow.location.replace(url.href)\n\t\t\t}\n\t\t\treturn false\n\t\t}\n\t}\n\n\tassert(options, {})\n\n\tconst oauth2 = Object.assign({}, defaultOptions.oauth2_configuration, options?.oauth2_configuration)\n\toptions = Object.assign({}, defaultOptions, options)\n\toptions.oauth2_configuration = oauth2\n\n\tconst store = tokenStore(options.site)\n\tif (!options.tokens) {\n\t\toptions.tokens = store.tokens\n\t}\n\tif (!options.state) {\n\t\toptions.state = store.state\n\t}\n\n\tassert(options, {\n\t\toauth2_configuration: {\n\t\t\tclient_id: Required(/.+/),\n\t\t\tgrant_type: 'authorization_code',\n\t\t\tauthorization_endpoint: Required(validURL),\n\t\t\ttoken_endpoint: Required(validURL),\n\t\t\tredirect_uri: Required(validURL)\n\t\t}\n\t})\n\n\tfor (let option in oauth2) {\n\t\tswitch(option) {\n\t\t\tcase 'access_token':\n\t\t\tcase 'authorization_code':\n\t\t\tcase 'refresh_token':\n\t\t\t\toptions.tokens.set(option, normalizeInitialToken(option, oauth2[option]))\n\t\t\tbreak\n\t\t}\n\t}\n\n\t/**\n\t * This is the Metro middleware function. It lets public requests pass through\n\t * unchanged, but retries through the OAuth2 flow when the resource responds\n\t * as if authorization is required. Exceptions from downstream middleware are\n\t * intentionally not caught here; network/programming errors should remain\n\t * visible to the caller instead of being mistaken for an auth challenge.\n\t */\n\treturn async function(req, next) {\n\t\tif (options.force_authorization) {\n\t\t\treturn oauth2authorized(req, next)\n\t\t}\n\t\tconst res = await next(req)\n\t\tif (res.ok || !shouldAuthorizeResponse(res)) {\n\t\t\treturn res\n\t\t}\n\t\treturn oauth2authorized(req, next)\n\t}\n\n\t/**\n\t * Implements the OAuth2 authorization flow for a single request. It retrieves\n\t * an authorization code from the current location when returning from a\n\t * redirect, fetches or refreshes an access token when needed, and finally\n\t * sends the request with the correct Authorization header.\n\t */\n\tasync function oauth2authorized(req, next)\n\t{\n\t\tgetTokensFromLocation()\n\t\tconst accessToken = options.tokens.get('access_token')\n\t\tconst refreshToken = options.tokens.get('refresh_token')\n\t\tconst tokenIsExpired = isExpired(accessToken)\n\t\tif (!accessToken || (tokenIsExpired && !refreshToken)) {\n\t\t\tconst token = await fetchAccessToken()\n\t\t\tif (!token) {\n\t\t\t\treturn metro.response('false')\n\t\t\t}\n\t\t\treturn oauth2authorized(req, next)\n\t\t} else if (tokenIsExpired && refreshToken) {\n\t\t\tconst token = await refreshAccessToken()\n\t\t\tif (!token) {\n\t\t\t\treturn metro.response('false')\n\t\t\t}\n\t\t\treturn oauth2authorized(req, next)\n\t\t} else {\n\t\t\treq = metro.request(req, {\n\t\t\t\theaders: {\n\t\t\t\t\tAuthorization: accessToken.type+' '+accessToken.value\n\t\t\t\t}\n\t\t\t})\n\t\t\treturn next(req)\n\t\t}\n\t}\n\n\t/**\n\t * Fetches the authorization_code from a redirected URI or hash fragment,\n\t * validates the stored state, and removes OAuth2 callback parameters from the\n\t * browser URL. Authorization endpoint errors are surfaced immediately.\n\t */\n\tfunction getTokensFromLocation()\n\t{\n\t\tif (typeof window !== 'undefined' && window?.location) {\n\t\t\tlet url = metro.url(window.location)\n\t\t\tlet code, state, params\n\t\t\tif (url.searchParams.has('code') || url.searchParams.has('error')) {\n\t\t\t\tparams = url.searchParams\n\t\t\t\turl = url.with({ search:'' })\n\t\t\t\thistory.pushState({},'',url.href)\n\t\t\t} else if (url.hash) {\n\t\t\t\tlet query = url.hash.substr(1)\n\t\t\t\tparams = new URLSearchParams('?'+query)\n\t\t\t\turl = url.with({ hash:'' })\n\t\t\t\thistory.pushState({},'',url.href)\n\t\t\t}\n\t\t\tif (params) {\n\t\t\t\tif (params.has('error')) {\n\t\t\t\t\tthrow metro.metroError('oauth2mw: authorization failed: '+params.get('error')+(params.get('error_description') ? ' ('+params.get('error_description')+')' : ''))\n\t\t\t\t}\n\t\t\t\tcode = params.get('code')\n\t\t\t\tstate = params.get('state')\n\t\t\t\tvalidateState(state)\n\t\t\t\tif (code) {\n\t\t\t\t\toptions.tokens.set('authorization_code', code)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Fetches an access token. For authorization_code flow, this first asks the\n\t * configured authorize_callback to obtain an authorization code. Token\n\t * responses are validated and normalized before they are stored.\n\t */\n\tasync function fetchAccessToken()\n\t{\n\t\tif (oauth2.grant_type === 'authorization_code' && !options.tokens.has('authorization_code')) {\n\t\t\tlet authReqURL = await getAuthorizationCodeURL()\n\t\t\tif (!options.authorize_callback || typeof options.authorize_callback !== 'function') {\n\t\t\t\tthrow metro.metroError('oauth2mw: oauth2 with grant_type:authorization_code requires a callback function in client options.authorize_callback')\n\t\t\t}\n\t\t\tlet authorization = await options.authorize_callback(authReqURL)\n\t\t\tif (authorization) {\n\t\t\t\tstoreAuthorizationResult(authorization)\n\t\t\t} else {\n\t\t\t\treturn false\n\t\t\t}\n\t\t}\n\t\tlet tokenReq = getAccessTokenRequest()\n\t\tlet response = await options.client.post(tokenReq)\n\t\tif (!response.ok) {\n\t\t\tlet msg = await response.text()\n\t\t\tthrow metro.metroError('OAuth2mw: fetch access_token: '+response.status+': '+response.statusText+' ('+msg+')', {cause: tokenReq} )\n\t\t}\n\t\tlet data = await response.json()\n\t\tstoreTokenResponse(data)\n\t\toptions.tokens.delete('authorization_code')\n\t\treturn data\n\t}\n\n\t/**\n\t * Fetches a new access token using the stored refresh token. If the server\n\t * returns a replacement refresh token, it replaces the stored token; if not,\n\t * the existing refresh token remains valid until the provider rejects it.\n\t */\n\tasync function refreshAccessToken()\n\t{\n\t\tlet refreshTokenReq = getAccessTokenRequest('refresh_token')\n\t\tlet response = await options.client.post(refreshTokenReq)\n\t\tif (!response.ok) {\n\t\t\tlet msg = await response.text()\n\t\t\tthrow metro.metroError('OAuth2mw: refresh access_token: '+response.status+': '+response.statusText+' ('+msg+')', {cause: refreshTokenReq} )\n\t\t}\n\t\tlet data = await response.json()\n\t\tstoreTokenResponse(data)\n\t\treturn data\n\t}\n\n\t/**\n\t * Returns the front-channel authorization URL used to obtain an authorization\n\t * code. Client secrets are deliberately never included here; confidential\n\t * client authentication belongs at the token endpoint only.\n\t */\n\tasync function getAuthorizationCodeURL()\n\t{\n\t\tif (!oauth2.authorization_endpoint) {\n\t\t\tthrow metro.metroError('oauth2mw: Missing options.oauth2_configuration.authorization_endpoint')\n\t\t}\n\t\tlet url = metro.url(oauth2.authorization_endpoint, {hash: ''})\n\t\tassert(oauth2, {\n\t\t\tclient_id: /.+/,\n\t\t\tredirect_uri: /.+/,\n\t\t\tscope: /.*/\n\t\t})\n\t\tlet search = {\n\t\t\tresponse_type: 'code',\n\t\t\tclient_id:     oauth2.client_id,\n\t\t\tredirect_uri:  oauth2.redirect_uri,\n\t\t\tstate:         oauth2.state || createState(40)\n\t\t}\n\t\tif (oauth2.response_type) {\n\t\t\tsearch.response_type = oauth2.response_type\n\t\t}\n\t\tif (oauth2.response_mode) {\n\t\t\tsearch.response_mode = oauth2.response_mode\n\t\t}\n\t\toptions.state.set(search.state)\n\t\tif (oauth2.code_verifier) {\n\t\t\toptions.tokens.set('code_verifier', oauth2.code_verifier)\n\t\t\tsearch.code_challenge = await generateCodeChallenge(oauth2.code_verifier)\n\t\t\tsearch.code_challenge_method = 'S256'\n\t\t}\n\t\tif (oauth2.scope) {\n\t\t\tsearch.scope = oauth2.scope\n\t\t}\n\t\tif (oauth2.prompt) {\n\t\t\tsearch.prompt = oauth2.prompt\n\t\t}\n\t\tif (oauth2.nonce) {\n\t\t\tsearch.nonce = oauth2.nonce\n\t\t}\n\t\treturn metro.url(url, { search })\n\t}\n\n\t/**\n\t * Returns a token endpoint request for the configured grant_type. The returned\n\t * request contains the form-encoded body and, when needed, the token endpoint\n\t * client authentication headers.\n\t */\n\tfunction getAccessTokenRequest(grant_type=null)\n\t{\n\t\tassert(oauth2, {\n\t\t\tclient_id: /.+/,\n\t\t\tredirect_uri: /.+/\n\t\t})\n\t\tif (!oauth2.token_endpoint) {\n\t\t\tthrow metro.metroError('oauth2mw: Missing options.endpoints.token url')\n\t\t}\n\t\tlet url = metro.url(oauth2.token_endpoint, {hash: ''})\n\t\tlet params = {\n\t\t\tgrant_type: grant_type || oauth2.grant_type\n\t\t}\n\t\tlet headers = {}\n\t\tapplyTokenEndpointAuthentication(params, headers)\n\t\tif (oauth2.scope) {\n\t\t\tparams.scope = oauth2.scope\n\t\t}\n\t\tswitch(params.grant_type) {\n\t\t\tcase 'authorization_code':\n\t\t\t\tparams.redirect_uri = oauth2.redirect_uri\n\t\t\t\tparams.code = options.tokens.get('authorization_code')\n\t\t\t\tconst code_verifier = options.tokens.get('code_verifier')\n\t\t\t\tif (code_verifier) {\n\t\t\t\t\tparams.code_verifier = code_verifier\n\t\t\t\t}\n\t\t\tbreak\n\t\t\tcase 'client_credentials':\n\t\t\tbreak\n\t\t\tcase 'refresh_token':\n\t\t\t\tparams.refresh_token = tokenValue(options.tokens.get('refresh_token'))\n\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tthrow new Error('Unknown grant_type: '+params.grant_type)\n\t\t\tbreak\n\t\t}\n\t\treturn metro.request(url, {method: 'POST', headers, body: new URLSearchParams(params) })\n\t}\n\n\t/**\n\t * Adds client authentication to the token endpoint request. Public clients use\n\t * token_endpoint_auth_method 'none'; confidential clients can use\n\t * client_secret_post or client_secret_basic.\n\t */\n\tfunction applyTokenEndpointAuthentication(params, headers)\n\t{\n\t\tconst method = tokenEndpointAuthMethod(oauth2)\n\t\tif (method === 'none') {\n\t\t\tparams.client_id = oauth2.client_id\n\t\t\treturn\n\t\t}\n\t\tif (!oauth2.client_secret) {\n\t\t\tthrow metro.metroError('oauth2mw: token_endpoint_auth_method '+method+' requires oauth2_configuration.client_secret')\n\t\t}\n\t\tif (method === 'client_secret_post') {\n\t\t\tparams.client_id = oauth2.client_id\n\t\t\tparams.client_secret = oauth2.client_secret\n\t\t\treturn\n\t\t}\n\t\tif (method === 'client_secret_basic') {\n\t\t\theaders.Authorization = basicAuth(oauth2.client_id, oauth2.client_secret)\n\t\t\treturn\n\t\t}\n\t}\n\n\t/**\n\t * Stores the authorization code returned by the authorize_callback. Callbacks\n\t * may return either a plain code string or an object containing code/state.\n\t */\n\tfunction storeAuthorizationResult(authorization)\n\t{\n\t\tlet code = authorization\n\t\tif (authorization && typeof authorization === 'object') {\n\t\t\tif (authorization.error) {\n\t\t\t\tthrow metro.metroError('oauth2mw: authorization failed: '+authorization.error)\n\t\t\t}\n\t\t\tvalidateState(authorization.state)\n\t\t\tcode = authorization.authorization_code || authorization.code\n\t\t}\n\t\tif (!code) {\n\t\t\tthrow metro.metroError('oauth2mw: authorization callback did not return an authorization code')\n\t\t}\n\t\toptions.tokens.set('authorization_code', code)\n\t}\n\n\t/**\n\t * Validates the OAuth2 state value to protect the authorization response from\n\t * being accepted in the wrong client flow.\n\t */\n\tfunction validateState(state)\n\t{\n\t\tlet storedState = options.state.get()\n\t\tif (!state || state!==storedState) {\n\t\t\tthrow metro.metroError('oauth2mw: authorization state mismatch')\n\t\t}\n\t}\n\n\t/**\n\t * Validates and stores a token endpoint response. Unknown extra fields are\n\t * ignored, as required by OAuth2, while access_token/token_type are required.\n\t */\n\tfunction storeTokenResponse(data)\n\t{\n\t\tconst token = validateTokenResponse(data)\n\t\toptions.tokens.set('access_token', token)\n\t\tif (data.refresh_token) {\n\t\t\toptions.tokens.set('refresh_token', { value: data.refresh_token })\n\t\t}\n\t}\n}\n\n/**\n * Returns true when a resource response should trigger OAuth2 authorization.\n * A 401 usually means missing/invalid credentials. A Bearer/DPoP\n * insufficient_scope challenge is not recoverable by simply retrying login, so\n * it is passed back to the caller.\n */\nfunction shouldAuthorizeResponse(res)\n{\n\tif (!res) {\n\t\treturn false\n\t}\n\tif (res.status === 400) {\n\t\treturn true\n\t}\n\tconst challenge = parseBearerChallenge(res.headers?.get('WWW-Authenticate'))\n\tif (challenge?.error === 'insufficient_scope') {\n\t\treturn false\n\t}\n\treturn res.status === 401\n}\n\n/**\n * Normalizes tokens supplied directly in oauth2_configuration so older calling\n * code can still pass plain token strings while the middleware internally uses\n * token objects for access tokens.\n */\nfunction normalizeInitialToken(name, token)\n{\n\tif (name === 'access_token' && token && typeof token === 'object') {\n\t\treturn token\n\t}\n\tif (name === 'access_token') {\n\t\treturn { value: token, type: 'Bearer', expires: null }\n\t}\n\tif (name === 'refresh_token' && token && typeof token === 'object') {\n\t\treturn token\n\t}\n\treturn token\n}\n\n/**\n * Validates the client-relevant fields of a token endpoint response and returns\n * the internal access-token shape used by the middleware.\n */\nfunction validateTokenResponse(data)\n{\n\tif (!data || typeof data !== 'object') {\n\t\tthrow metro.metroError('OAuth2mw: token endpoint did not return a JSON object')\n\t}\n\tif (!data.access_token) {\n\t\tthrow metro.metroError('OAuth2mw: token response did not include access_token')\n\t}\n\tif (!data.token_type) {\n\t\tthrow metro.metroError('OAuth2mw: token response did not include token_type')\n\t}\n\tconst tokenType = normalizeTokenType(data.token_type)\n\treturn {\n\t\tvalue: data.access_token,\n\t\texpires: data.expires_in === undefined ? null : getExpires(data.expires_in),\n\t\ttype: tokenType,\n\t\tscope: data.scope\n\t}\n}\n\n/**\n * Normalizes supported token types to the spelling used in Authorization\n * headers. Unsupported token types are rejected because the client would not\n * know how to use them safely.\n */\nfunction normalizeTokenType(type)\n{\n\tconst normalized = SUPPORTED_TOKEN_TYPES.get(String(type).toLowerCase())\n\tif (!normalized) {\n\t\tthrow metro.metroError('OAuth2mw: unsupported token_type '+type)\n\t}\n\treturn normalized\n}\n\n/**\n * Determines the token endpoint authentication method. The legacy default is\n * kept for compatibility: clients with a secret use client_secret_post, public\n * clients use none.\n */\nfunction tokenEndpointAuthMethod(oauth2)\n{\n\tconst method = oauth2.token_endpoint_auth_method || (oauth2.client_secret ? 'client_secret_post' : 'none')\n\tif (!SUPPORTED_TOKEN_ENDPOINT_AUTH_METHODS.has(method)) {\n\t\tthrow metro.metroError('oauth2mw: unsupported token_endpoint_auth_method '+method)\n\t}\n\treturn method\n}\n\n/**\n * Builds a client_secret_basic Authorization header value for the token\n * endpoint. The credentials are form-encoded before base64 encoding.\n */\nfunction basicAuth(clientId, clientSecret)\n{\n\tconst value = formEncode(clientId)+':'+formEncode(clientSecret)\n\treturn 'Basic '+base64_encode(value)\n}\n\nfunction formEncode(value)\n{\n\treturn encodeURIComponent(value).replace(/%20/g, '+')\n}\n\nfunction base64_encode(value)\n{\n\tif (typeof btoa === 'function') {\n\t\treturn btoa(value)\n\t}\n\treturn Buffer.from(value, 'binary').toString('base64')\n}\n\n/**\n * Returns the raw token value from either the current object form or the older\n * plain-string form.\n */\nfunction tokenValue(token)\n{\n\treturn token && typeof token === 'object' ? token.value : token\n}\n\n/**\n * Returns true if the access token is expired. Tokens without an expires value\n * are treated as having unknown/non-expiring lifetime.\n */\nexport function isExpired(token)\n{\n\tif (!token) {\n\t\treturn true\n\t}\n\tif (!token.expires) {\n\t\treturn false\n\t}\n\tlet expires = new Date(token.expires)\n\tlet now = new Date();\n\treturn now.getTime() > expires.getTime();\n}\n\n/**\n * Returns a Date based on a duration, which can either be a Date instance or a\n * number of seconds from now.\n */\nexport function getExpires(duration)\n{\n\tif (duration instanceof Date) {\n\t\treturn new Date(duration.getTime());\n\t}\n\tif (typeof duration === 'number') {\n\t\tlet date = new Date();\n\t\tdate.setSeconds(date.getSeconds() + duration);\n\t\treturn date;\n\t}\n\tthrow new TypeError('Unknown expires type '+duration);\n}\n\n/**\n * Returns a PKCE code_verifier. The result is already base64url encoded and can\n * be stored until the matching authorization code is exchanged.\n */\nexport function\tgenerateCodeVerifier(size=64)\n{\n\tconst code_verifier = new Uint8Array(size)\n\tglobalThis.crypto.getRandomValues(code_verifier)\n\treturn base64url_encode(code_verifier)\n}\n\n/**\n * Returns the PKCE S256 code_challenge derived from a code_verifier. This is\n * async because it uses WebCrypto's SHA-256 digest API.\n */\nexport async function generateCodeChallenge(code_verifier)\n{\n\tconst encoder = new TextEncoder()\n\tconst data = encoder.encode(code_verifier)\n\tconst challenge = await globalThis.crypto.subtle.digest('SHA-256', data)\n\treturn base64url_encode(challenge)\n}\n\n/**\n * Base64url encoding for byte buffers. Used for PKCE verifier/challenge and\n * generated state values.\n */\nexport function base64url_encode(buffer)\n{\n\tconst byteString = Array.from(new Uint8Array(buffer), b => String.fromCharCode(b)).join('')\n    return btoa(byteString)\n        .replace(/\\+/g, '-')\n        .replace(/\\//g, '_')\n        .replace(/=+$/, '');\n}\n\n/**\n * Creates a random OAuth2 state value. Uses cryptographic randomness when\n * available, with the previous Math.random fallback kept only for older/test\n * environments where WebCrypto is absent.\n */\nexport function createState(length)\n{\n\tconst bytes = new Uint8Array(Math.ceil(length * 3 / 4) + 1)\n\tif (globalThis.crypto?.getRandomValues) {\n\t\tglobalThis.crypto.getRandomValues(bytes)\n\t\treturn base64url_encode(bytes).slice(0, length)\n\t}\n\tconst validChars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'\n\tlet randomState = ''\n\tlet counter = 0\n    while (counter < length) {\n        randomState += validChars.charAt(Math.floor(Math.random() * validChars.length))\n        counter++\n    }\n\treturn randomState\n}\n\n/**\n * Returns true if the current document.location contains an OAuth2 code\n * parameter in either the query string or hash fragment.\n */\nexport function isRedirected() {\n\tlet url = new URL(document.location.href)\n\tif (!url.searchParams.has('code')) {\n\t\tif (url.hash) {\n\t\t\tlet query = url.hash.substr(1)\n\t\t\tconst params = new URLSearchParams('?'+query)\n\t\t\tif (params.has('code')) {\n\t\t\t\treturn true\n\t\t\t}\n\t\t}\n\t\treturn false\n\t}\n\treturn true\n}\n\n/**\n * Returns true if there is a valid access token or any refresh token in the\n * provided token store. If a string is passed, it is treated as a tokenStore\n * site/issuer name for backwards compatibility.\n */\nexport function isAuthorized(tokens) {\n\tif (typeof tokens == 'string') {\n\t\ttokens = tokenStore(tokens).tokens\n\t}\n\tlet accessToken = tokens.get('access_token')\n\tif (accessToken && !isExpired(accessToken)) {\n\t\treturn true\n\t}\n\tlet refreshToken = tokens.get('refresh_token')\n\tif (refreshToken) {\n\t\treturn true\n\t}\n\treturn false\n}\n\n/**\n * Parses Bearer and DPoP WWW-Authenticate challenge headers into a small object\n * so the middleware can distinguish invalid_token from insufficient_scope and\n * similar OAuth2 resource-server errors.\n */\nexport function parseBearerChallenge(value)\n{\n\tif (!value || typeof value !== 'string') {\n\t\treturn null\n\t}\n\tconst trimmed = value.trim()\n\tconst index = trimmed.search(/\\s/)\n\tconst scheme = index < 0 ? trimmed : trimmed.slice(0, index)\n\tconst rest = index < 0 ? '' : trimmed.slice(index + 1)\n\tif (!['bearer', 'dpop'].includes(scheme.toLowerCase())) {\n\t\treturn null\n\t}\n\tconst result = { scheme }\n\tconst pattern = /([A-Za-z][A-Za-z0-9_-]*)=(\"(?:[^\"\\\\]|\\\\.)*\"|[^,\\s]*)/g\n\tlet match\n\twhile ((match = pattern.exec(rest))) {\n\t\tlet value = match[2]\n\t\tif (value.startsWith('\"') && value.endsWith('\"')) {\n\t\t\tvalue = value.slice(1, -1).replace(/\\\\\"/g, '\"')\n\t\t}\n\t\tresult[match[1]] = value\n\t}\n\treturn result\n}\n", null, "export default function keysStore() {\n\treturn new Promise((resolve, reject) => {\n\t\tconst request = globalThis.indexedDB.open('metro', 1)\n\n\t\trequest.onupgradeneeded = () => request.result.createObjectStore('keyPairs', { keyPath: 'domain'})\n\n\t\trequest.onerror = (event) => {\n\t\t\treject(event)\n\t\t}\n\n\t\trequest.onsuccess = (event) => {\n\t\t\tconst db = event.target.result\n\t\t\tresolve({\n\t\t\t\tset: function(value, key) {\n\t\t\t\t\treturn new Promise((resolve, reject) => {\n\t\t\t\t\t\tconst tx = db.transaction('keyPairs', 'readwrite', {durability: 'strict'})\n\t\t\t\t\t\tconst objectStore = tx.objectStore('keyPairs')\n\t\t\t\t\t\ttx.oncomplete = () => {\n\t\t\t\t\t\t\tresolve()\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttx.onerror = reject\n\t\t\t\t\t\tobjectStore.put(value, key)\n\t\t\t\t\t})\n\t\t\t\t},\n\t\t\t\tget: function(key) {\n\t\t\t\t\treturn new Promise((resolve, reject) => {\n\t\t\t\t\t\tconst tx = db.transaction('keyPairs', 'readonly')\n\t\t\t\t\t\tconst objectStore = tx.objectStore('keyPairs')\n\t\t\t\t\t\tconst request = objectStore.get(key)\n\t\t\t\t\t\trequest.onsuccess = () => {\n\t\t\t\t\t\t\tresolve(request.result)\n\t\t\t\t\t\t}\n\t\t\t\t\t\trequest.onerror = reject\n\t\t\t\t\t\ttx.onerror = reject\n\t\t\t\t\t})\n\t\t\t\t},\n\t\t\t\tclear: function() {\n\t\t\t\t\treturn new Promise((resolve,reject) => {\n\t\t\t\t\t\tconst tx = db.transaction('keyPairs', 'readwrite')\n\t\t\t\t\t\tconst objectStore = tx.objectStore('keyPairs')\n\t\t\t\t\t\tconst request = objectStore.clear()\n\t\t\t\t\t\trequest.onsuccess = () => {\n\t\t\t\t\t\t\tresolve()\n\t\t\t\t\t\t}\n\t\t\t\t\t\trequest.onerror = reject\n\t\t\t\t\t\ttx.onerror = reject\t\t\t\t\t\t\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t})\n}", "import * as metro from '@muze-nl/metro-core'\nimport * as DPoP from 'dpop'\nimport { assert, Required, Optional, validURL } from '@muze-nl/assert'\nimport keysStore from './keysstore.mjs'\n\nexport default function dpopmw(options) {\n\n\tassert(options, {\n\t\tsite: Required(validURL),\n\t\tauthorization_endpoint: Required(validURL),\n\t\ttoken_endpoint: Required(validURL),\n\t\tdpop_signing_alg_values_supported: Optional([]) // this property is unfortunately rarely supported\n\t})\n\n\treturn async (req, next) => {\n\t\tconst keys = await keysStore()\n\t\tlet keyInfo = await keys.get(options.site)\n\t\tif (!keyInfo) {\n \t\t\t// FIXME fetch from dpop_signing_alg_values_supported\n \t\t\t// which is unfortunately not available usually\n \t\t\tlet keyPair = await DPoP.generateKeyPair('ES256') // note: don't make them extractable! That potentially allows hackers to steal the privateKey\n\t\t\tkeyInfo = { domain: options.site, keyPair }\n\t\t\tawait keys.set(keyInfo)\n\t\t}\n\t\tconst url = metro.url(req.url)\n\n\t\tif (req.url.startsWith(options.authorization_endpoint)) {\n\t\t\tlet params = req.body\n\t\t\tif (params instanceof URLSearchParams || params instanceof FormData) {\n\t\t\t\tparams.set('dpop_jkt', keyInfo.keyPair.publicKey)\n\t\t\t} else {\n\t\t\t\tparams.dpop_jkt = keyInfo.keyPair.publicKey\n\t\t\t}\n\n\t\t} else if (req.url.startsWith(options.token_endpoint)) {\n\t\t\tconst dpopHeader = await DPoP.generateProof(keyInfo.keyPair, req.url, req.method)\n\t\t\treq = req.with({\n\t\t\t\theaders: {\n\t\t\t\t\t'DPoP': dpopHeader\n\t\t\t\t}\n\t\t\t})\n\n\t\t} else if (req.headers.has('Authorization')) { //FIXME: not all requests use the dpop bound access token, so check which key to use, or if to add dpop at all\n\t\t\t// note: don't use options.site here, nonce can differ\n\t\t\tconst nonce       = localStorage.getItem(url.host+':nonce') || undefined // null is not acceptible for DpOp()\n\t\t\tconst accessToken = req.headers.get('Authorization').split(' ')[1]\n\t\t\tconst dpopHeader  = await DPoP.generateProof(keyInfo.keyPair, req.url, req.method, nonce, accessToken)\n\t\t\treq = req.with({\n\t\t\t\theaders: {\n\t\t\t\t\t'Authorization': 'DPoP '+accessToken,\n\t\t\t\t\t'DPoP': dpopHeader\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\n\t\tlet response = await next(req)\n\t\tif (response.headers.get('DPoP-Nonce')) {\n\t\t\t// note: don't use options.site here, nonce can differ\n\t\t\tlocalStorage.setItem(url.host+':nonce', response.headers.get('DPoP-Nonce'))\n\t\t}\n\t\treturn response\n\t}\n\t\n}", "export default function jsonmw(options)\n{\n    options = Object.assign({\n        contentType: 'application/json',\n        reviver: null,\n        replacer: null,\n        space: ''\n    }, options)\n\n    return async function json(req, next) {\n        if (!req.headers.get('Accept')) {\n            req = req.with({\n                headers: {\n                    'Accept': options.accept ?? options.contentType\n                }\n            })\n        }\n        if (req.method!=='GET' && req.method!=='HEAD') {\n            //https://developer.mozilla.org/en-US/docs/Web/API/Request/body\n            if (req.data && typeof req.data=='object' && !(req.data instanceof ReadableStream)) {\n                const contentType = req.headers.get('Content-Type')\n                if (!contentType || isPlainText(contentType)) {\n                    req = req.with({\n                        headers: {\n                            'Content-Type':options.contentType,\n                        }\n                    })\n                }\n                if (isJSON(req.headers.get('Content-Type'))) {\n                    req = req.with({\n                        body: JSON.stringify(req.data, options.replacer, options.space)\n                    })\n                }\n            }\n        }\n        let res = await next(req)\n        if (res && isJSON(res.headers?.get('Content-Type'))) {\n            let tempRes = res.clone()\n            let body = await tempRes.text()\n            try {\n                let json = JSON.parse(body, options.reviver)\n                return res.with({\n                    body: json\n                })\n            } catch(e) {\n                // ignore parse errors\n            }\n        }\n        return res\n    }\n}\n\n/*\n  this matches:\n  - application/json\n  - application/ld+json\n  - application/json; charset=utf-8\n  - application/ld+json; charset=utf-8\n*/\nconst jsonRE = /^application\\/([a-zA-Z0-9\\-_]+\\+)?json\\b/\nfunction isJSON(contentType)\n{\n    return jsonRE.exec(contentType)\n}\n\nfunction isPlainText(contentType)\n{\n    return /^text\\/plain\\b/.exec(contentType)\n}", "export default function throwermw(options) {\n\n\treturn async function thrower(req, next) {\n\t\tlet res = await next(req)\n\t\tif (!res.ok) {\n\t\t\tif (options && typeof options[res.status] == 'function') {\n\t\t\t\tres = options[res.status].apply(res, req)\n\t\t\t} else {\n\t\t\t\tthrow new Error(res.status+': '+res.statusText, {\n\t\t\t\t\tcause: res\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\treturn res\n\t}\n\n}", "import { error } from '@muze-nl/assert'\n\nexport const MustHave = (...options) => \n\t(value, root) => {\n\t\tif (options.filter(o => root.hasOwnKey(o)).length > 0) {\n\t\t\treturn false\n\t\t}\n\t\treturn error('root data must have all of', root, options)\n\t}\n\nexport const MustInclude = (...options) =>\n\t(value) => {\n\t\tif (Array.isArray(value) && options.filter(o => !value.includes(o)).length == 0) {\n\t\t\treturn false\n\t\t} else {\n\t\t\treturn error('data must be an array which includes',value,options)\n\t\t}\n\t}\n\n//TODO: add link to spec\nexport const validJWK = [\n\t'HS256','HS384','HS512','RS256','RS384','RS512','ES256','ES384','ES512'\n]\n\n//TODO: add link to spec\n// FIXME: enter correct values\nexport const validJWA = [\n\t'HS256','HS384','HS512','RS256','RS384','RS512','ES256','ES384','ES512'\n]\n\n//TODO: add link to spec\nexport const validAuthMethods = [\n\t'none', 'client_secret_post', 'client_secret_basic','client_secret_jwt','private_key_jwt'\n]\n", "/**\n * This module adheres to OpenID Connect Discovery 1.0 incorporating errata set 2 - december 15, 2023\n * https://openid.net/specs/openid-connect-discovery-1_0.html\n */\nimport * as metro from '@muze-nl/metro-core'\nimport jsonmw from '@muze-nl/metro-middleware/json'\nimport throwermw from '@muze-nl/metro-middleware/thrower'\nimport { validJWA, MustInclude, validAuthMethods } from './oidc.util.mjs'\nimport { assert, fails, Required, Recommended, Optional, oneOf, anyOf, allOf, validURL, instanceOf, not, error } from '@muze-nl/assert'\n\n/**\n * Given options.issuer will get the .well-known/openid-configuration information\n * parse it, assert if follows the specification and return it as a javascript object\n * @param options.issuer Required: URL with the root of the oidc issuer\n * @param options.client Optional: metro client to use in the request\n * @returns object with openid-configuration\n * @throws Error when a network error occurs while fetching openid-configuration\n * @throws assertError when either the options or the openid-configuration fail assertions (and assertion testing is enabled)\n */\nexport default async function oidcDiscovery(options={}) {\n\tassert(options, {\n\t\tclient: Optional(instanceOf(metro.client().constructor)),\n\t\tissuer: Required(validURL)\n\t})\n\n\tconst defaultOptions = {\n\t\tclient: metro.client().with(throwermw()).with(jsonmw()),\n\t\trequireDynamicRegistration: false\n\t}\n\n\toptions = Object.assign({},defaultOptions,options)\n\toptions.client = options.client.with(throwermw()).with(jsonmw())\n\n\tconst TestSucceeded = false\n\tfunction MustUseHTTPS(url) {\n\t\treturn TestSucceeded // FIXME todo\n\t}\n\n\t// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata\n\t// @TODO: this is a first approximation of the specced requirements, needs to implement\n\t// all MUST/MUST NOT etc. notes in the specification.\n\tconst openid_provider_metadata = {\n\t\tissuer: Required(allOf(options.issuer, MustUseHTTPS)),\n\t\tauthorization_endpoint: Required(validURL),\n\t\ttoken_endpoint: Required(validURL),\n\t\tuserinfo_endpoint: Recommended(validURL), // todo: test for https protocol\n\t\tjwks_uri: Required(validURL),\n\t\tregistration_endpoint: options.requireDynamicRegistration \n\t\t\t? Required(validURL) \n\t\t\t: Recommended(validURL),\n\t\tscopes_supported: Recommended(MustInclude('openid')),\n\t\tresponse_types_supported: options.requireDynamicRegistration\n\t\t\t? Required(MustInclude('code','id_token','id_token token')) \n\t\t\t: Required([]),\n\t\tresponse_modes_supported: Optional([]),\n\t\tgrant_types_supported: options.requireDynamicRegistration\n\t\t\t? Optional(MustInclude('authorization_code')) // implicit is required according to the spec, but not used in web apps\n\t\t\t: Optional([]),\n\t\tacr_values_supported: Optional([]),\n\t\tsubject_types_supported: Required([]),\n\t\tid_token_signing_alg_values_supported: Required(MustInclude('RS256')),\n\t\tid_token_encryption_alg_values_supported: Optional([]),\n\t\tid_token_encryption_enc_values_supported: Optional([]),\n\t\tuserinfo_signing_alg_values_supported: Optional([]),\n\t\tuserinfo_encryption_alg_values_supported: Optional([]),\n\t\tuserinfo_encryption_enc_values_supported: Optional([]),\n\t\trequest_object_signing_alg_values_supported: Optional(MustInclude('RS256')), // not testing for 'none'\n\t\trequest_object_encryption_alg_values_supported: Optional([]),\n\t\trequest_object_encryption_enc_values_supported: Optional([]),\n\t\ttoken_endpoint_auth_methods_supported: Optional(anyOf(...validAuthMethods)),\n\t\ttoken_endpoint_auth_signing_alg_values_supported: Optional(MustInclude('RS256'), not(MustInclude('none'))),\n\t\tdisplay_values_supported: Optional(anyOf('page','popup','touch','wap')),\n\t\tclaim_types_supported: Optional(anyOf('normal','aggregated','distributed')),\n\t\tclaims_supported: Recommended([]),\n\t\tservice_documentation: Optional(validURL),\n\t\tclaims_locales_supported: Optional([]),\n\t\tui_locales_supported: Optional([]),\n\t\tclaims_parameter_supported: Optional(Boolean),\n\t\trequest_parameter_supported: Optional(Boolean),\n\t\trequest_uri_parameter_supported: Optional(Boolean),\n\t\top_policy_uri: Optional(validURL),\n\t\top_tos_uri: Optional(validURL)\t\n\t}\n\n\t// fetch openid configuration from wellknown and return the json\n\tconst configURL = metro.url(options.issuer, '.well-known/openid-configuration')\n\n\tconst response = await options.client.get(\n\t\t// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationRequest\n\t\t// note: this allows path components in the options.issuer url\n\t\tconfigURL\n\t)\n\tconst openid_config = response.data\n\tassert(openid_config, openid_provider_metadata)\n\n\t// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationValidation\n\tassert(openid_config.issuer, options.issuer)\n\treturn openid_config\n}", "/**\n * This module adheres to OpenID Connect Dynamic Client Registration 1.0 \n * incorporating errata set 2 - december 15, 2023\n * https://openid.net/specs/openid-connect-registration-1_0.html\n */\nimport * as metro from '@muze-nl/metro-core'\nimport jsonmw from '@muze-nl/metro-middleware/json'\nimport throwermw from '@muze-nl/metro-middleware/thrower'\nimport { validJWA, validAuthMethods, MustHave } from './oidc.util.mjs'\nimport { assert, Required, Optional, oneOf, anyOf, validURL, validEmail, not, instanceOf } from '@muze-nl/assert'\n\nexport default async function register(options)\n{\n\n    // https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata\n\tconst openid_client_metadata = {\n\t\tredirect_uris: Required([validURL]),\n\t\tresponse_types: Optional([]),\n\t\tgrant_types: Optional(anyOf('authorization_code','refresh_token')), //TODO: match response_types with grant_types\n\t\tapplication_type: Optional(oneOf('native','web')),\n\t\tcontacts: Optional([validEmail]),\n\t\tclient_name: Optional(String),\n\t\tlogo_uri: Optional(validURL),\n\t\tclient_uri: Optional(validURL),\n\t\tpolicy_uri: Optional(validURL),\n\t\ttos_uri: Optional(validURL),\n\t\tjwks_uri: Optional(validURL, not(MustHave('jwks'))),\n\t\tjwks: Optional(validURL, not(MustHave('jwks_uri'))),\n\t\tsector_identifier_uri: Optional(validURL),\n\t\tsubject_type: Optional(String),\n\t\tid_token_signed_response_alg: Optional(oneOf(...validJWA)),\n\t\tid_token_encrypted_response_alg: Optional(oneOf(...validJWA)),\n\t\tid_token_encrypted_response_enc: Optional(oneOf(...validJWA), MustHave('id_token_encrypted_response_alg')),\n\t\tuserinfo_signed_response_alg: Optional(oneOf(...validJWA)),\n\t\tuserinfo_encrypted_response_alg: Optional(oneOf(...validJWA)),\n\t\tuserinfo_encrypted_response_enc: Optional(oneOf(...validJWA), MustHave('userinfo_encrypted_response_alg')),\n\t\trequest_object_signing_alg: Optional(oneOf(...validJWA)),\n\t\trequest_object_encryption_alg: Optional(oneOf(...validJWA)),\n\t\trequest_object_encryption_enc: Optional(oneOf(...validJWA)),\n\t\ttoken_endpoint_auth_method: Optional(oneOf(...validAuthMethods)),\n\t\ttoken_endpoint_auth_signing_alg: Optional(oneOf(...validJWA)),\n\t\tdefault_max_age: Optional(Number),\n\t\trequire_auth_time: Optional(Boolean),\n\t\tdefault_acr_values: Optional([String]),\n\t\tinitiate_login_uri: Optional([validURL]),\n\t\trequest_uris: Optional([validURL])\n\t}\n\n\tassert(options, {\n\t\tclient: Optional(instanceOf(metro.client().constructor)),\n\t\tregistration_endpoint: validURL, \n\t\tclient_info: openid_client_metadata\n\t})\n\n\tconst defaultOptions = {\n\t\tclient: metro.client().with(throwermw()).with(jsonmw()),\n\t\tclient_info: {\n\t\t\tredirect_uris: [ globalThis.document?.location.href ]\n\t\t}\n\t}\n\n\toptions = Object.assign({}, defaultOptions, options)\n\toptions.client = options.client.with(throwermw()).with(jsonmw())\n\tif (!options.client_info) {\n\t\toptions.client_info = {}\n\t} \n\tif (!options.client_info.redirect_uris) {\n\t\toptions.client_info.redirect_uris = [ globalThis.document?.location.href ]\n\t}\n\tlet response = await options.client\n\t\t.post(options.registration_endpoint, {\n\t\t\tbody: options.client_info\n\t\t})\n\tlet info = response.data\n\tif (!info.client_id) {\n\t\tthrow metro.metroError('metro.oidc: Error: dynamic registration of client failed, no client_id returned', response)\n\t}\n\toptions.client_info = Object.assign(options.client_info, info)\n\treturn options.client_info\n}", "export default function oidcStore(site) {\n\tlet store\n\tif (typeof localStorage !== 'undefined') {\n\t\tstore = {\n\t\t\tget: (name)        => JSON.parse(localStorage.getItem('metro/oidc:'+site+':'+name)),\n\t\t\tset: (name, value) => localStorage.setItem('metro/oidc:'+site+':'+name, JSON.stringify(value)),\n\t\t\thas: (name)        => localStorage.getItem('metro/oidc:'+site+':'+name)!==null\n\t\t}\n\t} else {\n\t\tlet storeMap = new Map()\n\t\tstore = {\n\t\t\tget: (name)        => JSON.parse(storeMap.get('metro/oidc:'+site+':'+name)||null),\n\t\t\tset: (name, value) => storeMap.set('metro/oidc:'+site+':'+name, JSON.stringify(value)),\n\t\t\thas: (name)        => storeMap.has('metro/oidc:'+site+':'+name)\n\t\t}\n\t}\n\treturn store\n}", "export const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) {\n        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    }\n    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nexport function uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\nexport function encode(string) {\n    const bytes = new Uint8Array(string.length);\n    for (let i = 0; i < string.length; i++) {\n        const code = string.charCodeAt(i);\n        if (code > 127) {\n            throw new TypeError('non-ASCII string encountered in encode()');\n        }\n        bytes[i] = code;\n    }\n    return bytes;\n}\n", "export function encodeBase64(input) {\n    if (Uint8Array.prototype.toBase64) {\n        return input.toBase64();\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < input.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n}\nexport function decodeBase64(encoded) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(encoded);\n    }\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n}\n", "import { encoder, decoder } from '../lib/buffer_utils.js';\nimport { encodeBase64, decodeBase64 } from '../lib/base64.js';\nexport function decode(input) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {\n            alphabet: 'base64url',\n        });\n    }\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n}\nexport function encode(input) {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    if (Uint8Array.prototype.toBase64) {\n        return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });\n    }\n    return encodeBase64(unencoded).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n", "const unusable = (name, prop = 'algorithm.name') => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\nconst isAlgorithm = (algorithm, name) => algorithm.name === name;\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction checkHashLength(algorithm, expected) {\n    const actual = getHashLength(algorithm.hash);\n    if (actual !== expected)\n        throw unusable(`SHA-${expected}`, 'algorithm.hash');\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usage) {\n    if (usage && !key.usages.includes(usage)) {\n        throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);\n    }\n}\nexport function checkSigCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));\n            break;\n        }\n        case 'Ed25519':\n        case 'EdDSA': {\n            if (!isAlgorithm(key.algorithm, 'Ed25519'))\n                throw unusable('Ed25519');\n            break;\n        }\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87': {\n            if (!isAlgorithm(key.algorithm, alg))\n                throw unusable(alg);\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\nexport function checkEncCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM': {\n            if (!isAlgorithm(key.algorithm, 'AES-GCM'))\n                throw unusable('AES-GCM');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (!isAlgorithm(key.algorithm, 'AES-KW'))\n                throw unusable('AES-KW');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'ECDH': {\n            switch (key.algorithm.name) {\n                case 'ECDH':\n                case 'X25519':\n                    break;\n                default:\n                    throw unusable('ECDH or X25519');\n            }\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW':\n            if (!isAlgorithm(key.algorithm, 'PBKDF2'))\n                throw unusable('PBKDF2');\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-OAEP'))\n                throw unusable('RSA-OAEP');\n            checkHashLength(key.algorithm, parseInt(alg.slice(9), 10) || 1);\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\n", "function message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nexport const invalidKeyInput = (actual, ...types) => message('Key must be ', actual, ...types);\nexport const withAlg = (alg, actual, ...types) => message(`Key for the ${alg} algorithm must be `, actual, ...types);\n", "export class JOSEError extends Error {\n    static code = 'ERR_JOSE_GENERIC';\n    code = 'ERR_JOSE_GENERIC';\n    constructor(message, options) {\n        super(message, options);\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nexport class JWTClaimValidationFailed extends JOSEError {\n    static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JWTExpired extends JOSEError {\n    static code = 'ERR_JWT_EXPIRED';\n    code = 'ERR_JWT_EXPIRED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JOSEAlgNotAllowed extends JOSEError {\n    static code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n}\nexport class JOSENotSupported extends JOSEError {\n    static code = 'ERR_JOSE_NOT_SUPPORTED';\n    code = 'ERR_JOSE_NOT_SUPPORTED';\n}\nexport class JWEDecryptionFailed extends JOSEError {\n    static code = 'ERR_JWE_DECRYPTION_FAILED';\n    code = 'ERR_JWE_DECRYPTION_FAILED';\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n    }\n}\nexport class JWEInvalid extends JOSEError {\n    static code = 'ERR_JWE_INVALID';\n    code = 'ERR_JWE_INVALID';\n}\nexport class JWSInvalid extends JOSEError {\n    static code = 'ERR_JWS_INVALID';\n    code = 'ERR_JWS_INVALID';\n}\nexport class JWTInvalid extends JOSEError {\n    static code = 'ERR_JWT_INVALID';\n    code = 'ERR_JWT_INVALID';\n}\nexport class JWKInvalid extends JOSEError {\n    static code = 'ERR_JWK_INVALID';\n    code = 'ERR_JWK_INVALID';\n}\nexport class JWKSInvalid extends JOSEError {\n    static code = 'ERR_JWKS_INVALID';\n    code = 'ERR_JWKS_INVALID';\n}\nexport class JWKSNoMatchingKey extends JOSEError {\n    static code = 'ERR_JWKS_NO_MATCHING_KEY';\n    code = 'ERR_JWKS_NO_MATCHING_KEY';\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n    [Symbol.asyncIterator];\n    static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSTimeout extends JOSEError {\n    static code = 'ERR_JWKS_TIMEOUT';\n    code = 'ERR_JWKS_TIMEOUT';\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n    }\n}\nexport class JWSSignatureVerificationFailed extends JOSEError {\n    static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n    }\n}\n", "export function assertCryptoKey(key) {\n    if (!isCryptoKey(key)) {\n        throw new Error('CryptoKey instance expected');\n    }\n}\nexport const isCryptoKey = (key) => {\n    if (key?.[Symbol.toStringTag] === 'CryptoKey')\n        return true;\n    try {\n        return key instanceof CryptoKey;\n    }\n    catch {\n        return false;\n    }\n};\nexport const isKeyObject = (key) => key?.[Symbol.toStringTag] === 'KeyObject';\nexport const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);\n", "import { decode } from '../util/base64url.js';\nexport const unprotected = Symbol();\nexport function assertNotSet(value, name) {\n    if (value) {\n        throw new TypeError(`${name} can only be called once`);\n    }\n}\nexport function decodeBase64url(value, label, ErrorClass) {\n    try {\n        return decode(value);\n    }\n    catch {\n        throw new ErrorClass(`Failed to base64url decode the ${label}`);\n    }\n}\nexport async function digest(algorithm, data) {\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));\n}\n", "const isObjectLike = (value) => typeof value === 'object' && value !== null;\nexport function isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n}\nexport function isDisjoint(...headers) {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n}\nexport const isJWK = (key) => isObject(key) && typeof key.kty === 'string';\nexport const isPrivateJWK = (key) => key.kty !== 'oct' &&\n    ((key.kty === 'AKP' && typeof key.priv === 'string') || typeof key.d === 'string');\nexport const isPublicJWK = (key) => key.kty !== 'oct' && key.d === undefined && key.priv === undefined;\nexport const isSecretJWK = (key) => key.kty === 'oct' && typeof key.k === 'string';\n", "import { JOSENotSupported } from '../util/errors.js';\nimport { checkSigCryptoKey } from './crypto_key.js';\nimport { invalidKeyInput } from './invalid_key_input.js';\nexport function checkKeyLength(alg, key) {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n}\nfunction subtleAlgorithm(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: parseInt(alg.slice(-3), 10) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'Ed25519':\n        case 'EdDSA':\n            return { name: 'Ed25519' };\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87':\n            return { name: alg };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\nasync function getSigKey(alg, key, usage) {\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n        }\n        return crypto.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    checkSigCryptoKey(key, alg, usage);\n    return key;\n}\nexport async function sign(alg, key, data) {\n    const cryptoKey = await getSigKey(alg, key, 'sign');\n    checkKeyLength(alg, cryptoKey);\n    const signature = await crypto.subtle.sign(subtleAlgorithm(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n}\nexport async function verify(alg, key, signature, data) {\n    const cryptoKey = await getSigKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleAlgorithm(alg, cryptoKey.algorithm);\n    try {\n        return await crypto.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n}\n", "import { JOSENotSupported } from '../util/errors.js';\nconst unsupportedAlg = 'Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value';\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'AKP': {\n            switch (jwk.alg) {\n                case 'ML-DSA-44':\n                case 'ML-DSA-65':\n                case 'ML-DSA-87':\n                    algorithm = { name: jwk.alg };\n                    keyUsages = jwk.priv ? ['sign'] : ['verify'];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                case 'ES384':\n                case 'ES512':\n                    algorithm = {\n                        name: 'ECDSA',\n                        namedCurve: { ES256: 'P-256', ES384: 'P-384', ES512: 'P-521' }[jwk.alg],\n                    };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'Ed25519':\n                case 'EdDSA':\n                    algorithm = { name: 'Ed25519' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nexport async function jwkToKey(jwk) {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const keyData = { ...jwk };\n    if (keyData.kty !== 'AKP') {\n        delete keyData.alg;\n    }\n    delete keyData.use;\n    return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);\n}\n", "import { isJWK } from './type_checks.js';\nimport { decode } from '../util/base64url.js';\nimport { jwkToKey } from './jwk_to_key.js';\nimport { isCryptoKey, isKeyObject } from './is_key_like.js';\nconst unusableForAlg = 'given KeyObject instance cannot be used for this algorithm';\nlet cache;\nconst handleJWK = async (key, jwk, alg, freeze = false) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await jwkToKey({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst handleKeyObject = (keyObject, alg) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(keyObject);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const isPublic = keyObject.type === 'public';\n    const extractable = isPublic ? true : false;\n    let cryptoKey;\n    if (keyObject.asymmetricKeyType === 'x25519') {\n        switch (alg) {\n            case 'ECDH-ES':\n            case 'ECDH-ES+A128KW':\n            case 'ECDH-ES+A192KW':\n            case 'ECDH-ES+A256KW':\n                break;\n            default:\n                throw new TypeError(unusableForAlg);\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, isPublic ? [] : ['deriveBits']);\n    }\n    if (keyObject.asymmetricKeyType === 'ed25519') {\n        if (alg !== 'EdDSA' && alg !== 'Ed25519') {\n            throw new TypeError(unusableForAlg);\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n            isPublic ? 'verify' : 'sign',\n        ]);\n    }\n    switch (keyObject.asymmetricKeyType) {\n        case 'ml-dsa-44':\n        case 'ml-dsa-65':\n        case 'ml-dsa-87': {\n            if (alg !== keyObject.asymmetricKeyType.toUpperCase()) {\n                throw new TypeError(unusableForAlg);\n            }\n            cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n                isPublic ? 'verify' : 'sign',\n            ]);\n        }\n    }\n    if (keyObject.asymmetricKeyType === 'rsa') {\n        let hash;\n        switch (alg) {\n            case 'RSA-OAEP':\n                hash = 'SHA-1';\n                break;\n            case 'RS256':\n            case 'PS256':\n            case 'RSA-OAEP-256':\n                hash = 'SHA-256';\n                break;\n            case 'RS384':\n            case 'PS384':\n            case 'RSA-OAEP-384':\n                hash = 'SHA-384';\n                break;\n            case 'RS512':\n            case 'PS512':\n            case 'RSA-OAEP-512':\n                hash = 'SHA-512';\n                break;\n            default:\n                throw new TypeError(unusableForAlg);\n        }\n        if (alg.startsWith('RSA-OAEP')) {\n            return keyObject.toCryptoKey({\n                name: 'RSA-OAEP',\n                hash,\n            }, extractable, isPublic ? ['encrypt'] : ['decrypt']);\n        }\n        cryptoKey = keyObject.toCryptoKey({\n            name: alg.startsWith('PS') ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5',\n            hash,\n        }, extractable, [isPublic ? 'verify' : 'sign']);\n    }\n    if (keyObject.asymmetricKeyType === 'ec') {\n        const nist = new Map([\n            ['prime256v1', 'P-256'],\n            ['secp384r1', 'P-384'],\n            ['secp521r1', 'P-521'],\n        ]);\n        const namedCurve = nist.get(keyObject.asymmetricKeyDetails?.namedCurve);\n        if (!namedCurve) {\n            throw new TypeError(unusableForAlg);\n        }\n        const expectedCurve = { ES256: 'P-256', ES384: 'P-384', ES512: 'P-521' };\n        if (expectedCurve[alg] && namedCurve === expectedCurve[alg]) {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg.startsWith('ECDH-ES')) {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDH',\n                namedCurve,\n            }, extractable, isPublic ? [] : ['deriveBits']);\n        }\n    }\n    if (!cryptoKey) {\n        throw new TypeError(unusableForAlg);\n    }\n    if (!cached) {\n        cache.set(keyObject, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nexport async function normalizeKey(key, alg) {\n    if (key instanceof Uint8Array) {\n        return key;\n    }\n    if (isCryptoKey(key)) {\n        return key;\n    }\n    if (isKeyObject(key)) {\n        if (key.type === 'secret') {\n            return key.export();\n        }\n        if ('toCryptoKey' in key && typeof key.toCryptoKey === 'function') {\n            try {\n                return handleKeyObject(key, alg);\n            }\n            catch (err) {\n                if (err instanceof TypeError) {\n                    throw err;\n                }\n            }\n        }\n        let jwk = key.export({ format: 'jwk' });\n        return handleJWK(key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k) {\n            return decode(key.k);\n        }\n        return handleJWK(key, key, alg, true);\n    }\n    throw new Error('unreachable');\n}\n", "import { decode as decodeBase64URL } from '../util/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../lib/asn1.js';\nimport { jwkToKey } from '../lib/jwk_to_key.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { isObject } from '../lib/type_checks.js';\nexport async function importSPKI(spki, alg, options) {\n    if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n        throw new TypeError('\"spki\" must be SPKI formatted string');\n    }\n    return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n    if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n        throw new TypeError('\"x509\" must be X.509 formatted string');\n    }\n    return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n        throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    }\n    return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg, options) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    let ext;\n    alg ??= jwk.alg;\n    ext ??= options?.extractable ?? jwk.ext;\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decodeBase64URL(jwk.k);\n        case 'RSA':\n            if ('oth' in jwk && jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n            return jwkToKey({ ...jwk, alg, ext });\n        case 'AKP': {\n            if (typeof jwk.alg !== 'string' || !jwk.alg) {\n                throw new TypeError('missing \"alg\" (Algorithm) Parameter value');\n            }\n            if (alg !== undefined && alg !== jwk.alg) {\n                throw new TypeError('JWK alg and alg option value mismatch');\n            }\n            return jwkToKey({ ...jwk, ext });\n        }\n        case 'EC':\n        case 'OKP':\n            return jwkToKey({ ...jwk, alg, ext });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n", "import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';\nexport function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n}\n", "export function validateAlgorithms(option, algorithms) {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n}\n", "import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport { isKeyLike } from './is_key_like.js';\nimport * as jwk from './type_checks.js';\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined) {\n        let expected;\n        switch (usage) {\n            case 'sign':\n            case 'verify':\n                expected = 'sig';\n                break;\n            case 'encrypt':\n            case 'decrypt':\n                expected = 'enc';\n                break;\n        }\n        if (key.use !== expected) {\n            throw new TypeError(`Invalid key for this operation, its \"use\" must be \"${expected}\" when present`);\n        }\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, its \"alg\" must be \"${alg}\" when present`);\n    }\n    if (Array.isArray(key.key_ops)) {\n        let expectedKeyOp;\n        switch (true) {\n            case usage === 'sign' || usage === 'verify':\n            case alg === 'dir':\n            case alg.includes('CBC-HS'):\n                expectedKeyOp = usage;\n                break;\n            case alg.startsWith('PBES2'):\n                expectedKeyOp = 'deriveBits';\n                break;\n            case /^A\\d{3}(?:GCM)?(?:KW)?$/.test(alg):\n                if (!alg.includes('GCM') && alg.endsWith('KW')) {\n                    expectedKeyOp = usage === 'encrypt' ? 'wrapKey' : 'unwrapKey';\n                }\n                else {\n                    expectedKeyOp = usage;\n                }\n                break;\n            case usage === 'encrypt' && alg.startsWith('RSA'):\n                expectedKeyOp = 'wrapKey';\n                break;\n            case usage === 'decrypt':\n                expectedKeyOp = alg.startsWith('RSA') ? 'unwrapKey' : 'deriveBits';\n                break;\n        }\n        if (expectedKeyOp && key.key_ops?.includes?.(expectedKeyOp) === false) {\n            throw new TypeError(`Invalid key for this operation, its \"key_ops\" must include \"${expectedKeyOp}\" when present`);\n        }\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (jwk.isJWK(key)) {\n        if (jwk.isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key', 'Uint8Array'));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage) => {\n    if (jwk.isJWK(key)) {\n        switch (usage) {\n            case 'decrypt':\n            case 'sign':\n                if (jwk.isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation must be a private JWK`);\n            case 'encrypt':\n            case 'verify':\n                if (jwk.isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation must be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (key.type === 'public') {\n        switch (usage) {\n            case 'sign':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n            case 'decrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n        }\n    }\n    if (key.type === 'private') {\n        switch (usage) {\n            case 'verify':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n            case 'encrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n        }\n    }\n};\nexport function checkKeyType(alg, key, usage) {\n    switch (alg.substring(0, 2)) {\n        case 'A1':\n        case 'A2':\n        case 'di':\n        case 'HS':\n        case 'PB':\n            symmetricTypeCheck(alg, key, usage);\n            break;\n        default:\n            asymmetricTypeCheck(alg, key, usage);\n    }\n}\n", "import { decode as b64u } from '../../util/base64url.js';\nimport { verify } from '../../lib/signing.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { concat, encoder, decoder, encode } from '../../lib/buffer_utils.js';\nimport { decodeBase64url } from '../../lib/helpers.js';\nimport { isDisjoint } from '../../lib/type_checks.js';\nimport { isObject } from '../../lib/type_checks.js';\nimport { checkKeyType } from '../../lib/check_key_type.js';\nimport { validateCrit } from '../../lib/validate_crit.js';\nimport { validateAlgorithms } from '../../lib/validate_algorithms.js';\nimport { normalizeKey } from '../../lib/normalize_key.js';\nexport async function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = b64u(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n    }\n    checkKeyType(alg, key, 'verify');\n    const data = concat(jws.protected !== undefined ? encode(jws.protected) : new Uint8Array(), encode('.'), typeof jws.payload === 'string'\n        ? b64\n            ? encode(jws.payload)\n            : encoder.encode(jws.payload)\n        : jws.payload);\n    const signature = decodeBase64url(jws.signature, 'signature', JWSInvalid);\n    const k = await normalizeKey(key, alg);\n    const verified = await verify(alg, k, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        payload = decodeBase64url(jws.payload, 'payload', JWSInvalid);\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key: k };\n    }\n    return result;\n}\n", "import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n", "import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { encoder, decoder } from './buffer_utils.js';\nimport { isObject } from './type_checks.js';\nconst epoch = (date) => Math.floor(date.getTime() / 1000);\nconst minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nexport function secs(str) {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n}\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nconst normalizeTyp = (value) => {\n    if (value.includes('/')) {\n        return value.toLowerCase();\n    }\n    return `application/${value.toLowerCase()}`;\n};\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nexport function validateClaimsSet(protectedHeader, encodedPayload, options = {}) {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n}\nexport class JWTClaimsBuilder {\n    #payload;\n    constructor(payload) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this.#payload = structuredClone(payload);\n    }\n    data() {\n        return encoder.encode(JSON.stringify(this.#payload));\n    }\n    get iss() {\n        return this.#payload.iss;\n    }\n    set iss(value) {\n        this.#payload.iss = value;\n    }\n    get sub() {\n        return this.#payload.sub;\n    }\n    set sub(value) {\n        this.#payload.sub = value;\n    }\n    get aud() {\n        return this.#payload.aud;\n    }\n    set aud(value) {\n        this.#payload.aud = value;\n    }\n    set jti(value) {\n        this.#payload.jti = value;\n    }\n    set nbf(value) {\n        if (typeof value === 'number') {\n            this.#payload.nbf = validateInput('setNotBefore', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.nbf = validateInput('setNotBefore', epoch(value));\n        }\n        else {\n            this.#payload.nbf = epoch(new Date()) + secs(value);\n        }\n    }\n    set exp(value) {\n        if (typeof value === 'number') {\n            this.#payload.exp = validateInput('setExpirationTime', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.exp = validateInput('setExpirationTime', epoch(value));\n        }\n        else {\n            this.#payload.exp = epoch(new Date()) + secs(value);\n        }\n    }\n    set iat(value) {\n        if (value === undefined) {\n            this.#payload.iat = epoch(new Date());\n        }\n        else if (value instanceof Date) {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(value));\n        }\n        else if (typeof value === 'string') {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(new Date()) + secs(value));\n        }\n        else {\n            this.#payload.iat = validateInput('setIssuedAt', value);\n        }\n    }\n}\n", "import { compactVerify } from '../jws/compact/verify.js';\nimport { validateClaimsSet } from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = validateClaimsSet(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n", "import { importJWK } from '../key/import.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport { isObject } from '../lib/type_checks.js';\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        case 'ML':\n            return 'AKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nclass LocalJWKSet {\n    #jwks;\n    #cached = new WeakMap();\n    constructor(jwks) {\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this.#jwks = structuredClone(jwks);\n    }\n    jwks() {\n        return this.#jwks;\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this.#jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && (typeof jwk.alg === 'string' || kty === 'AKP')) {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                    case 'Ed25519':\n                    case 'EdDSA':\n                        candidate = jwk.crv === 'Ed25519';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const _cached = this.#cached;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this.#cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nexport function createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => structuredClone(set.jwks()),\n            enumerable: false,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n", "import { createLocalJWKSet, jwtVerify } from 'jose'\nimport * as metro from '@muze-nl/metro-core'\n\nconst jwksCache = new WeakMap()\n\nfunction keySetFor(jwks) {\n\tif (!jwks || !Array.isArray(jwks.keys)) {\n\t\tthrow metro.metroError('metro.oidc: Error: jwks must be an object with a keys array')\n\t}\n\tif (!jwksCache.has(jwks)) {\n\t\tjwksCache.set(jwks, createLocalJWKSet(jwks))\n\t}\n\treturn jwksCache.get(jwks)\n}\n\nfunction supportedAlgorithms(openidConfiguration = {}) {\n\tconst algorithms = openidConfiguration.id_token_signing_alg_values_supported\n\tif (Array.isArray(algorithms) && algorithms.length) {\n\t\treturn algorithms.filter(algorithm => algorithm !== 'none')\n\t}\n\treturn ['RS256']\n}\n\n/**\n * Validate an OpenID Connect ID Token.\n *\n * This intentionally keeps jose behind a tiny Metro/OIDC helper so the public\n * OIDC middleware API can stay small while still delegating JWT/JWS/JWKS\n * validation to a mature library.\n */\nexport async function validateIdToken(idToken, options = {}) {\n\tif (!idToken) {\n\t\tthrow metro.metroError('metro.oidc: Error: token response did not include an id_token')\n\t}\n\tif (!options.jwks) {\n\t\tthrow metro.metroError('metro.oidc: Error: cannot validate id_token without jwks')\n\t}\n\tif (!options.issuer) {\n\t\tthrow metro.metroError('metro.oidc: Error: cannot validate id_token without issuer')\n\t}\n\tif (!options.client_id) {\n\t\tthrow metro.metroError('metro.oidc: Error: cannot validate id_token without client_id')\n\t}\n\n\tconst { payload, protectedHeader } = await jwtVerify(\n\t\tidToken,\n\t\tkeySetFor(options.jwks),\n\t\t{\n\t\t\tissuer: options.issuer,\n\t\t\taudience: options.client_id,\n\t\t\talgorithms: options.algorithms || supportedAlgorithms(options.openid_configuration),\n\t\t\tclockTolerance: options.clockTolerance ?? 60,\n\t\t\trequiredClaims: ['iss', 'sub', 'aud', 'exp', 'iat']\n\t\t}\n\t)\n\n\tif (options.nonce !== undefined && payload.nonce !== options.nonce) {\n\t\tthrow metro.metroError('metro.oidc: Error: id_token nonce mismatch')\n\t}\n\n\treturn {\n\t\theader: protectedHeader,\n\t\tclaims: payload\n\t}\n}\n", "import * as metro from '@muze-nl/metro-core'\nimport oauth2mw, * as oauth2 from '@muze-nl/metro-oauth2/oauth2'\nimport dpopmw from '@muze-nl/metro-oauth2/dpop'\nimport { assert, Required, Optional, validURL, instanceOf } from '@muze-nl/assert'\nimport discover from './oidc.discovery.mjs'\nimport register from './oidc.register.mjs'\nimport oidcStore from './oidc.store.mjs'\nimport jsonmw from '@muze-nl/metro-middleware/json'\nimport throwermw from '@muze-nl/metro-middleware/thrower'\nimport { validateIdToken } from './oidc.jwt.mjs'\n\nexport default function oidcmw(options={}) {\n\n\tconst defaultOptions = {\n\t\tclient: metro.client(),\n\t\tforce_authorization: false,\n\t\tuse_dpop: true,\n\t\tauthorize_callback: async url => {\n\t\t\tif (window.location.href != url.href) {\n\t\t\t\twindow.location.replace(url.href)\n\t\t\t}\n\t\t\treturn false\n\t\t}\n\t}\n\n\toptions = Object.assign({}, defaultOptions, options)\n\n\tassert(options, {\n\t\tclient: Required(instanceOf(metro.client().constructor)), // required because it is set in defaultOptions\n\t\tclient_info: Required(),\n\t\tissuer: Required(validURL),\n\t\toauth2: Optional({}),\n\t\topenid_configuration: Optional()\n\t})\n\n\tif (!options.store) {\n\t\toptions.store = oidcStore(options.issuer)\n\t}\n\tif (!options.openid_configuration && options.store.has('openid_configuration')) {\n\t\toptions.openid_configuration = options.store.get('openid_configuration')\n\t}\n\tif (!options.client_info?.client_id && options.store.has('client_info')) {\n\t\toptions.client_info = options.store.get('client_info')\n\t}\n\n\treturn async (req, next) => {\n\t\tlet res\n\t\tif (!options.force_authorization) {\n\t\t\ttry {\n\t\t\t\tres = await next(req)\n\t\t\t} catch(err) {\n\t\t\t\tres = err?.cause\n\t\t\t\tif (!res || (res.status!=401 && res.status!=403)) {\n\t\t\t\t\tthrow err\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (res.ok || (res.status!=401 && res.status!=403)) {\n\t\t\t\treturn res\n\t\t\t}\n\t\t}\n\t\tif (!options.openid_configuration) {\n\t\t\toptions.openid_configuration = await discover({\n\t\t\t\tissuer: options.issuer,\n\t\t\t\tclient: options.client.with(options.issuer)\n\t\t\t})\n\t\t\toptions.store.set('openid_configuration', options.openid_configuration)\n\t\t}\n\n\t\tif (!options.client_info?.client_id) {\n\t\t\tif (!options.openid_configuration.registration_endpoint) {\n\t\t\t\tthrow metro.metroError('metro.oidcmw: Error: issuer '+options.issuer+' does not support dynamic client registration, but you haven\\'t specified a client_id')\n\t\t\t}\n\t\t\toptions.client_info = await register({\n\t\t\t\tregistration_endpoint: options.openid_configuration.registration_endpoint,\n\t\t\t\tclient: options.client,\n\t\t\t\tclient_info: options.client_info\n\t\t\t})\n\t\t\toptions.store.set('client_info', options.client_info)\n\t\t}\n\n\t\t// now initialize an oauth2 client stack, using options.client as default\n\t\t// with forceAuthentication: true\n\t\tconst scope = options.scope || 'openid'\n\t\tconst nonce = options.nonce || oauth2.generateCodeVerifier(32)\n\t\toptions.store.set('pending_nonce', nonce)\n\n\t\tconst oauth2Options = Object.assign(\n\t\t\t{\n\t\t\t\tsite: options.issuer,\n\t\t\t\tclient: options.client,\n\t\t\t\tforce_authorization: true,\n\t\t\t\tauthorize_callback: options.authorize_callback,\n\t\t\t\toauth2_configuration: {\n\t\t\t\t\tclient_id: options.client_info?.client_id,\n\t\t\t\t\tclient_secret: options.client_info?.client_secret,\n\t\t\t\t\tgrant_type: 'authorization_code',\n\t\t\t\t\tresponse_type: 'code',\n\t\t\t\t\tresponse_mode: 'query',\n\t\t\t\t\tauthorization_endpoint: options.openid_configuration.authorization_endpoint,\n\t\t\t\t\ttoken_endpoint: options.openid_configuration.token_endpoint,\n\t\t\t\t\tscope, //FIXME: should only use scopes supported by server\n\t\t\t\t\tredirect_uri: options.client_info.redirect_uris[0],\n\t\t\t\t\tnonce\n\t\t\t\t}\n\t\t\t}\n\t\t\t//...\n\t\t)\n\t\t\n\t\tconst storeIdToken = async (req, next) => {\n\t\t\tconst res = await next(req)\n\t\t\tconst tokenEndpoint = metro.url(options.openid_configuration.token_endpoint, { hash: '' }).href\n\t\t\tconst requestUrl = metro.url(req.url, { hash: '' }).href\n\t\t\tif (requestUrl !== tokenEndpoint) {\n\t\t\t\treturn res\n\t\t\t}\n\t\t\tconst contentType = res.headers.get('content-type')\n\t\t\tif (!contentType?.startsWith('application/json')) {\n\t\t\t\treturn res\n\t\t\t}\n\n\t\t\tlet data = res.data && typeof res.data === 'object' ? res.data : null\n\t\t\tif (!data) {\n\t\t\t\tconst res2 = res.clone() // otherwise res.body can't be read again\n\t\t\t\tdata = await res2.json()\n\t\t\t}\n\n\t\t\tconst id_token = data?.id_token\n\t\t\tconst jwks = await getJwks()\n\t\t\tconst validation = await validateIdToken(id_token, {\n\t\t\t\tissuer: options.openid_configuration.issuer,\n\t\t\t\tclient_id: options.client_info.client_id,\n\t\t\t\tjwks,\n\t\t\t\topenid_configuration: options.openid_configuration,\n\t\t\t\tnonce: options.store.get('pending_nonce')\n\t\t\t})\n\t\t\toptions.store.set('id_token', id_token)\n\t\t\toptions.store.set('id_token_claims', validation.claims)\n\t\t\treturn res\n\t\t}\n\n\t\tconst getJwks = async () => {\n\t\t\tif (!options.jwks) {\n\t\t\t\tconst jwksClient = options.client.with(throwermw()).with(jsonmw())\n\t\t\t\tconst response = await jwksClient.get(options.openid_configuration.jwks_uri)\n\t\t\t\toptions.jwks = response.data\n\t\t\t}\n\t\t\treturn options.jwks\n\t\t}\n\n\t\tlet oauth2client = options.client.with(options.issuer).with(storeIdToken)\n\n\t\tif (options.use_dpop) {\n\t\t\tconst dpopOptions = {\n\t\t\t\tsite: options.issuer,\n\t\t\t\tauthorization_endpoint: options.openid_configuration.authorization_endpoint,\n\t\t\t\ttoken_endpoint: options.openid_configuration.token_endpoint,\n\t\t\t\tdpop_signing_alg_values_supported: options.openid_configuration.dpop_signing_alg_values_supported\n\t\t\t}\n\t\t\toauth2client = oauth2client.with(dpopmw(dpopOptions)) // add DPoP headers in requests with Authorization headers\n\t\t}\n\t\toauth2Options.client = oauth2client // make sure token requests use the OIDC token-observing stack\n\n\t\toauth2client = oauth2client.with(oauth2mw(oauth2Options))\n\n\t\tres = await oauth2client.fetch(req)\n\n\t\treturn res\n\t}\n\n}\n\nexport function isRedirected() {\n\treturn oauth2.isRedirected()\n}\n\nexport function idToken(options) {\n\tif (!options.store) {\n\t\tif (!options.issuer) {\n\t\t\tthrow metro.metroError('Must supply options.issuer or options.store to get the id_token')\n\t\t}\n\t\toptions.store = oidcStore(options.issuer)\n\t}\n\treturn options.store.get('id_token')\n}\n\nexport function idTokenClaims(options) {\n\tif (!options.store) {\n\t\tif (!options.issuer) {\n\t\t\tthrow metro.metroError('Must supply options.issuer or options.store to get the id_token claims')\n\t\t}\n\t\toptions.store = oidcStore(options.issuer)\n\t}\n\treturn options.store.get('id_token_claims')\n}\n", "import oidcmw, { isRedirected, idToken, idTokenClaims } from './oidcmw.mjs'\nimport discover from './oidc.discovery.mjs'\nimport register from './oidc.register.mjs'\n\nconst oidc = {\n\toidcmw,\n\tdiscover,\n\tregister,\n\tisRedirected,\n\tidToken,\n\tidTokenClaims\n}\n\nexport default oidc\nexport { default as oidcmw } from './oidcmw.mjs'\nexport { isRedirected, idToken, idTokenClaims } from './oidcmw.mjs'\nexport { default as discover } from './oidc.discovery.mjs'\nexport { default as register } from './oidc.register.mjs'\nexport { default as oidcStore } from './oidc.store.mjs'\nexport { validateIdToken } from './oidc.jwt.mjs'\n", "import * as core from '@muze-nl/metro-core'\nimport oidc from './index.mjs'\n\nconst metro = Object.assign({}, core, globalThis.metro || {})\n\nif (!metro.oidc) {\n\tmetro.oidc = oidc\n}\n\nglobalThis.metro = metro\n\nexport * from './index.mjs'\nexport default oidc\n"],
-  "mappings": ";;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACQA,MAAM,WAAW;AAOjB,MAAI,CAAC,OAAO,YAAY;AACvB,WAAO,aAAa,uBAAO,SAAS;AAAA,EACrC;AACA,MAAI,CAAC,OAAO,aAAa;AACxB,WAAO,cAAc,uBAAO,QAAQ;AAAA,EACrC;AAcO,MAAM,SAAN,MAAM,QACb;AAAA,IACC,gBAAgB;AAAA,MACf,KAAK,OAAO,UAAU,cAAc,IAAI,OAAO,QAAQ,IAAI,IAAI,mBAAmB;AAAA,MAClF,OAAO,CAAC,OAAM,QAAO,OAAM,UAAS,SAAQ,QAAO,WAAU,OAAO;AAAA,IACrE;AAAA,IAEA,OAAO,UAAU,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAYlB,eAAe,SACf;AACC,eAAS,UAAU,SAAS;AAC3B,YAAI,OAAO,UAAU,YAAY,kBAAkB,QAAQ;AAC1D,eAAK,cAAc,MAAM,IAAI,KAAK,cAAc,IAAI,MAAM,MAAM;AAAA,QACjE,WAAW,kBAAkB,SAAQ;AACpC,iBAAO,OAAO,KAAK,eAAe,OAAO,aAAa;AAAA,QACvD,WAAW,kBAAkB,UAAU;AACtC,eAAK,gBAAgB,CAAC,MAAM,CAAC;AAAA,QAC9B,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,mBAAS,SAAS,QAAQ;AACzB,gBAAI,SAAS,eAAe;AAC3B,mBAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,YACnC,WAAW,SAAS,OAAO;AAC1B,mBAAK,cAAc,MAAM,IAAI,KAAK,cAAc,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,YACxE,WAAW,OAAO,OAAO,KAAK,KAAK,YAAY;AAC9C,mBAAK,cAAc,KAAK,IAAI,OAAO,KAAK,EAAE,KAAK,cAAc,KAAK,GAAG,KAAK,aAAa;AAAA,YACxF,OAAO;AACN,mBAAK,cAAc,KAAK,IAAI,OAAO,KAAK;AAAA,YACzC;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAEA,iBAAW,QAAQ,KAAK,cAAc,OAAO;AAC5C,aAAK,IAAI,IAAI,kBAAkBA,UAAS;AACvC,iBAAO,KAAK;AAAA,YACX;AAAA,cACC,KAAK;AAAA,cACL,GAAGA;AAAA,cACH,EAAC,QAAQ,KAAK,YAAY,EAAC;AAAA,YAC5B;AAAA,YACA,iBAAiB,GAAGA,QAAO;AAAA,UAC5B;AAAA,QACD;AAAA,MACD;AAAA,IAED;AAAA,IAEA,gBAAgB,aAChB;AACC,UAAI,OAAO,eAAe,YAAY;AACrC,sBAAc,CAAE,WAAY;AAAA,MAC7B;AACA,UAAI,QAAQ,YAAY,UAAU,OAAK,OAAO,KAAK,UAAU;AAC7D,UAAI,SAAO,GAAG;AACb,cAAM,WAAW,2EACf,WAAS,+BAA+B,YAAY,KAAK,CAAC;AAAA,MAC7D;AACA,UAAI,CAAC,MAAM,QAAQ,KAAK,cAAc,WAAW,GAAG;AACnD,aAAK,cAAc,cAAc,CAAC;AAAA,MACnC;AACA,WAAK,cAAc,cAAc,KAAK,cAAc,YAAY,OAAO,WAAW;AAAA,IACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAM,KAAK,SACX;AACC,YAAM,QAAQ,KAAK,OAAO;AAC1B,UAAI,CAAC,IAAI,KAAK;AACb,cAAM,WAAW,kBAAgB,IAAI,OAAO,YAAY,IAAE,6BAA2B,WAAS,6BAA6B,GAAG;AAAA,MAC/H;AACA,UAAI,CAAC,SAAS;AACb,kBAAU,CAAC;AAAA,MACZ;AACA,UAAI,EAAE,OAAO,YAAY,aACrB,mBAAmB,QACvB;AACC,cAAM,WAAW,mDAAiD,WAAS,iCAAiC,OAAO;AAAA,MACpH;AAEA,YAAM,aAAa,eAAe,aAAaC,MAC/C;AACC,YAAIA,KAAI,OAAO,UAAU,GAAG;AAC3B,UAAAA,OAAMA,KAAI,OAAO,WAAW;AAAA,QAC7B;AACA,cAAM,MAAM,MAAM,MAAMA,IAAG;AAC3B,eAAO,SAAS,GAAG;AAAA,MACpB;AAEA,UAAI,cAAc,CAAC,UAAU,EAAE,OAAO,KAAK,eAAe,aAAa,MAAM,KAAK,CAAC,CAAC;AACpF,gBAAU,OAAO,OAAO,CAAC,GAAG,KAAK,eAAe,OAAO;AACvD,YAAM,eAAe,mBAAmB,KAAK,OAAO;AACpD,YAAM,oBAAoB,wBAAwB,MAAM,SAAS,YAAY;AAE7E,UAAI;AACJ,eAAS,cAAc,aAAa;AACnC,eAAQ,0BAASC,OAAMC,aAAY;AAClC,iBAAO,eAAeF,MAAK;AAC1B,gBAAI;AACJ,gBAAI,UAAU,aAAa;AAC3B,wBAAY,SAAS,WAAWA,MAAKE,aAAY,YAAY;AAC7D,gBAAI;AACH,oBAAM,MAAMA,YAAWF,MAAKC,OAAM,iBAAiB;AAAA,YACpD,SAAQE,QAAO;AACd,0BAAY,SAAS,SAASA,QAAOH,MAAKE,aAAY,YAAY;AAClE,oBAAMC;AAAA,YACP;AACA,wBAAY,SAAS,YAAY,KAAKD,aAAY,YAAY;AAC9D,mBAAO;AAAA,UACR;AAAA,QACD,GAAG,MAAM,UAAU;AAAA,MACpB;AACA,aAAO,KAAK,GAAG;AAAA,IAChB;AAAA,IAEA,QAAQ,SAAS;AAChB,aAAO,IAAI,QAAO,UAAU,KAAK,aAAa,GAAG,GAAG,OAAO;AAAA,IAC5D;AAAA,IAEA,IAAI,WAAW;AACd,aAAO,KAAK,cAAc;AAAA,IAC3B;AAAA,EAED;AAGA,MAAI,iBAAiB;AACrB,MAAM,oBAAoB,CAAC,SAAS,UAAU,SAAS;AAEvD,WAAS,oBAAoB,SAC7B;AACC,UAAM,SAAS,CAAC;AAChB,eAAW,UAAU,SAAS;AAC7B,UAAI,CAAC,cAAc,MAAM,GAAG;AAC3B;AAAA,MACD;AACA,iBAAW,OAAO,mBAAmB;AACpC,YAAI,OAAO,QAAQ;AAClB,iBAAO,GAAG,IAAI,OAAO,GAAG;AAAA,QACzB;AAAA,MACD;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAEA,WAAS,mBAAmB,KAAK,UAAQ,CAAC,GAC1C;AACC,UAAM,SAAS,gBAAgB,QAAQ,SAAS,QAAQ,UAAU,QAAQ,OAAO;AACjF,QAAI,eAAe,CAAC;AACpB,QAAI,QAAQ;AACX,qBAAe,OAAO,gBAAgB,CAAC;AAAA,IACxC,OAAO;AACN,qBAAe,iBAAiB,QAAQ,KAAK,EAC3C,OAAO,iBAAiB,QAAQ,MAAM,CAAC,EACvC,OAAO,iBAAiB,QAAQ,OAAO,CAAC;AAAA,IAC3C;AACA,UAAM,gBAAgB,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC;AACxD,UAAM,UAAU;AAAA,MACf,qBAAqB;AAAA,MACrB,IAAI,yBAAwB,EAAE;AAAA,MAC9B;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,cAAc,OAAO,YAAY;AAAA,IAC3C;AACA,WAAO;AAAA,EACR;AAEA,WAAS,gBAAgB,OACzB;AACC,QAAI,CAAC,OAAO;AACX,aAAO;AAAA,IACR;AACA,QAAI,MAAM,SAAS,qBAAqB;AACvC,aAAO,MAAM;AAAA,IACd;AACA,QAAI,MAAM,qBAAqB;AAC9B,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAEA,WAAS,iBAAiB,OAC1B;AACC,QAAI,CAAC,SAAS,MAAM,uBAAuB,MAAM,SAAS,qBAAqB;AAC9E,aAAO,CAAC;AAAA,IACT;AACA,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,aAAO,MAAM,QAAQ,gBAAgB;AAAA,IACtC;AACA,QAAI,SAAS,KAAK,GAAG;AACpB,aAAO,CAAC,KAAK;AAAA,IACd;AACA,QAAI,cAAc,KAAK,GAAG;AACzB,aAAO,OAAO,OAAO,KAAK,EAAE,QAAQ,gBAAgB;AAAA,IACrD;AACA,WAAO,CAAC;AAAA,EACT;AAEA,WAAS,SAAS,OAClB;AACC,WAAO,SAAS,OAAO,SAAS,YAAY;AAAA,MAC3C;AAAA,MAAW;AAAA,MAAY;AAAA,MAAS;AAAA,MAAS;AAAA,MAAc;AAAA,MAAQ;AAAA,MAAQ;AAAA,IACxE,EAAE,KAAK,UAAQ,OAAO,MAAM,IAAI,KAAK,UAAU;AAAA,EAChD;AAEA,WAAS,wBAAwBE,SAAQ,SAAS,cAClD;AACC,UAAM,QAAQ,eAAe,YAAY;AACzC,WAAO,OAAO,OAAO;AAAA,MACpB,QAAAA;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,KAAK,eAAa,CAAC,GAAG;AAC3B,eAAOA,QAAO,MAAM,KAAK,OAAO,OAAO,CAAC,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC;AAAA,MACpE;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,eAAe,SACxB;AACC,UAAM,MAAM;AAAA,MACX,qBAAqB;AAAA,MACrB;AAAA,MACA,MAAM,MAAM,OAAK,CAAC,GAAG;AACpB,oBAAY,QAAQ,SAAS,SAAS,MAAM,MAAM,OAAO;AAAA,MAC1D;AAAA,MACA,WAAW,aAAW,CAAC,GAAG;AACzB,oBAAY,QAAQ,SAAS,cAAc,YAAY,OAAO;AAAA,MAC/D;AAAA,MACA,UAAU;AACT,mBAAW,UAAU,QAAQ,SAAS;AACrC,cAAI,OAAO,OAAO,WAAW,YAAY;AACxC,kBAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,gBAAI,SAAS;AACZ,qBAAO;AAAA,YACR;AAAA,UACD;AAAA,QACD;AACA,eAAO,EAAE,SAAS,MAAM,QAAQ,KAAK;AAAA,MACtC;AAAA,MACA,MAAM,KAAK,MAAM,IAAI,OAAK,CAAC,GAAG;AAC7B,cAAM,SAAS,QAAQ,QAAQ,KAAK,CAAAC,YAAU,OAAOA,QAAO,QAAQ,UAAU;AAC9E,YAAI,CAAC,QAAQ;AACZ,iBAAO,GAAG;AAAA,QACX;AACA,eAAO,OAAO,KAAK,MAAM,IAAI,MAAM,OAAO;AAAA,MAC3C;AAAA,MACA,KAAK,KAAK;AACT,YAAI,UAAU;AACd,mBAAW,UAAU,QAAQ,SAAS;AACrC,cAAI,OAAO,OAAO,QAAQ,YAAY;AACrC,sBAAU,OAAO,KAAK,KAAK,QAAW,OAAO,KAAK;AAAA,UACnD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,MACA,QAAQ,QAAM,CAAC,GAAG;AACjB,eAAO,OAAO,OAAO,CAAC,GAAG,OAAO,EAAE,OAAO,IAAI,CAAC;AAAA,MAC/C;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAEA,WAAS,YAAY,SAAS,WAAW,MACzC;AACC,eAAW,UAAU,SAAS;AAC7B,UAAI,UAAU,OAAO,OAAO,MAAM,KAAK,YAAY;AAClD,eAAO,MAAM,EAAE,KAAK,QAAQ,GAAG,IAAI;AAAA,MACpC;AAAA,IACD;AAAA,EACD;AAEA,WAAS,cAAc,OACvB;AACC,WAAO,SAAS,OAAO,SAAS,aAC3B,OAAO,eAAe,KAAK,MAAM,OAAO,aAAa,OAAO,eAAe,KAAK,MAAM;AAAA,EAC5F;AAOO,WAAS,UAAU,SAC1B;AACC,WAAO,IAAI,OAAO,GAAG,UAAU,OAAO,CAAC;AAAA,EACxC;AA4BA,WAAS,iBAAiB,KAAK,SAC/B;AACC,QAAI,SAAS,WAAW,CAAC;AACzB,QAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAC/B,aAAO,MAAM,QAAQ;AAAA,IACtB;AAEA,aAAQ,QAAQ;AAAA,MAAC;AAAA,MAAS;AAAA,MAAU;AAAA,MAAO;AAAA,MAAO;AAAA,MAAc;AAAA,MAAQ;AAAA,MACvE;AAAA,MAAW;AAAA,MAAiB;AAAA,MAAY;AAAA,MAAY;AAAA,MACpD;AAAA,MAAW;AAAA,IAAK,GAAG;AACnB,UAAI,QAAQ,IAAI,IAAI;AACpB,UAAI,OAAO,SAAO,eAAe,SAAS,MAAM;AAC/C;AAAA,MACD;AACA,UAAI,QAAQ,OAAO,UAAU,GAAG;AAC/B,gBAAQ,MAAM,OAAO,WAAW;AAAA,MACjC;AACA,UAAI,OAAO,SAAS,YAAY;AAC/B,eAAO,IAAI,IAAI,MAAM,OAAO,IAAI,GAAG,MAAM;AAAA,MAC1C,OAAO;AACN,YAAI,QAAQ,OAAO;AAClB,iBAAO,MAAM,IAAI,OAAO,KAAK,KAAK;AAAA,QACnC,WAAW,QAAQ,WAAW;AAE7B,iBAAO,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC5C,cAAI,EAAE,iBAAiB,UAAU;AAChC,oBAAQ,IAAI,QAAQ,IAAI,OAAO;AAAA,UAChC;AACA,mBAAS,CAAC,KAAK,GAAG,KAAK,MAAM,QAAQ,GAAG;AACvC,mBAAO,QAAQ,IAAI,KAAK,GAAG;AAAA,UAC5B;AAAA,QACD,OAAO;AACN,iBAAO,IAAI,IAAI;AAAA,QAChB;AAAA,MACD;AAAA,IACD;AACA,QAAI,eAAe,WAAW,IAAI,MAAM;AAGvC,aAAO,OAAO,IAAI;AAAA,IACnB;AACA,WAAO;AAAA,EACR;AAeO,WAAS,WAAW,SAC3B;AAIC,QAAI,gBAAgB;AAAA,MACnB,KAAK,OAAO,UAAU,cAAc,IAAI,OAAO,QAAQ,IAAI,IAAI,oBAAoB;AAAA,MACnF,QAAQ;AAAA;AAAA,IACT;AACA,aAAS,UAAU,SAAS;AAC3B,UAAI,OAAO,UAAU,YACjB,kBAAkB,OAClB,kBAAkB,iBACpB;AACD,sBAAc,MAAM,IAAI,cAAc,KAAK,MAAM;AAAA,MAClD,WAAW,WACV,kBAAkB,YACf,kBAAkB,kBAClB,kBAAkB,QAClB,kBAAkB,eAClB,kBAAkB,WACnB;AACF,sBAAc,OAAO;AAAA,MACtB,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,eAAO,OAAO,eAAe,iBAAiB,QAAQ,aAAa,CAAC;AAAA,MACrE;AAAA,IACD;AACA,QAAI,IAAI,IAAI,QAAQ,cAAc,KAAK,aAAa;AACpD,QAAI,OAAO,cAAc;AACzB,QAAI,MAAM;AACT,UAAI,OAAO,QAAQ,YACf,EAAE,gBAAgB,WAClB,EAAE,gBAAgB,mBAClB,EAAE,gBAAgB,SAClB,EAAE,gBAAgB,gBAClB,EAAE,gBAAgB,aAClB,EAAE,gBAAgB,aAClB,EAAE,gBAAgB,qBACjB,WAAW,eAAe,YAAY,OAAO,IAAI,IACpD;AAID,YAAI,OAAO,KAAK,YAAY,YAAY;AACvC,wBAAc,OAAO,KAAK,SAAS,EAAC,SAAQ,EAAE,QAAO,CAAC;AACtD,cAAI,IAAI,QAAQ,cAAc,KAAK,aAAa;AAAA,QACjD;AAAA,MACD;AAAA,IACD;AACA,WAAO,OAAO,CAAC;AACf,WAAO,IAAI,MAAM,GAAG;AAAA,MACnB,IAAI,QAAQ,MAAM;AACjB,YAAI;AACJ,gBAAO,MAAM;AAAA,UACZ,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAS,YAAYN,UAAS;AAC7B,kBAAI,OAAO,SAAS,aAAa;AAChC,gBAAAA,SAAQ,QAAQ,EAAE,MAAM,KAAK,CAAC;AAAA,cAC/B;AACA,qBAAO,QAAQ,QAAQ,GAAGA,QAAO;AAAA,YAClC;AACD;AAAA,UACA,KAAK;AACJ,qBAAS;AACV;AAAA,UACA;AACC,gBAAI,OAAO,IAAI,aAAa,UAAU;AACrC,kBAAI,SAAS,SAAS;AACrB,yBAAS,WAAW;AACnB,wBAAM,SAAS,OAAO,MAAM;AAE5B,sBAAI,OAAO,QAAQ,eACf,EAAE,OAAO,kBAAkB,eAC1B,gBAAgB,iBAAiB;AACrC,2BAAO,QAAQ,QAAQ,EAAE,MAAM,KAAK,CAAC;AAAA,kBACtC;AAEA,yBAAO,QAAQ,MAAM;AAAA,gBACtB;AAAA,cACD,OAAO;AACN,yBAAS,OAAO,IAAI,EAAE,KAAK,MAAM;AAAA,cAClC;AAAA,YACD,OAAO;AACN,uBAAS,OAAO,IAAI;AAAA,YACrB;AACD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,kBAAkB,KAAK,SAChC;AAEC,QAAI,SAAS,WAAW,CAAC;AACzB,QAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAC/B,aAAO,MAAM,QAAQ;AAAA,IACtB;AACA,aAAQ,QAAQ,CAAC,UAAS,cAAa,WAAU,QAAO,OAAM,QAAO,YAAY,GAAG;AACnF,UAAI,QAAQ,IAAI,IAAI;AACpB,UAAI,OAAO,SAAS,eAAe,SAAS,MAAM;AACjD;AAAA,MACD;AACA,UAAI,QAAQ,OAAO,UAAU,GAAG;AAC/B,gBAAQ,MAAM,OAAO,WAAW;AAAA,MACjC;AACA,UAAI,OAAO,SAAS,YAAY;AAC/B,eAAO,IAAI,IAAI,MAAM,OAAO,IAAI,GAAG,MAAM;AAAA,MAC1C,OAAO;AACN,YAAI,QAAQ,OAAO;AAElB,iBAAO,MAAM,IAAI,IAAI,OAAO,OAAO,OAAO,oBAAoB;AAAA,QAC/D,OAAO;AACN,iBAAO,IAAI,IAAI;AAAA,QAChB;AAAA,MACD;AAAA,IACD;AACA,QAAI,eAAe,YAAY,IAAI,MAAM;AAGxC,aAAO,OAAO,IAAI;AAAA,IACnB;AACA,WAAO;AAAA,EACR;AAeO,WAAS,YAAY,SAC5B;AACC,QAAI,iBAAiB,CAAC;AACtB,aAAS,UAAU,SAAS;AAC3B,UAAI,OAAO,UAAU,UAAU;AAC9B,uBAAe,OAAO;AAAA,MACvB,WAAW,kBAAkB,UAAU;AACtC,eAAO,OAAO,gBAAgB,kBAAkB,QAAQ,cAAc,CAAC;AAAA,MACxE,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,YAAI,kBAAkB,YAClB,kBAAkB,QAClB,kBAAkB,eAClB,kBAAkB,YAClB,kBAAkB,kBAClB,kBAAkB,mBAClB,kBAAkB,UACjB,OAAO,WAAW,cAAc,eAAe,kBAAkB,WAAW,YAC/E;AACD,yBAAe,OAAO;AAAA,QACvB,OAAO;AACN,iBAAO,OAAO,gBAAgB,kBAAkB,QAAQ,cAAc,CAAC;AAAA,QACxE;AAAA,MACD;AAAA,IACD;AACA,QAAI,OAAO;AACX,QAAI,eAAe,MAAM;AACxB,aAAO,eAAe;AAAA,IACvB;AAIA,QAAI,CAAC,KAAK,KAAK,KAAK,GAAI,EAAE,SAAS,eAAe,MAAM,GAAG;AAC1D,qBAAe,OAAO;AAAA,IACvB;AACA,QAAI,IAAI,IAAI,SAAS,eAAe,MAAM,cAAc;AACxD,WAAO,OAAO,CAAC;AACf,WAAO,IAAI,MAAM,GAAG;AAAA,MACnB,IAAI,QAAQ,MAAM;AACjB,YAAI;AACJ,gBAAO,MAAM;AAAA,UACZ,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAS,YAAYA,UAAS;AAC7B,qBAAO,SAAS,QAAQ,GAAGA,QAAO;AAAA,YACnC;AACD;AAAA,UACA,KAAK;AAGJ,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAU,OAAO,UAAQ,OAAS,OAAO,SAAO;AACjD;AAAA,UACA;AACC,gBAAI,OAAO,OAAO,IAAI,KAAK,YAAY;AACtC,uBAAS,OAAO,IAAI,EAAE,KAAK,MAAM;AAAA,YAClC,OAAO;AACN,uBAAS,OAAO,IAAI;AAAA,YACrB;AACD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,mBAAmBO,MAAK,QACjC;AACC,QAAI,OAAO,UAAU,YAAY;AAChC,aAAOA,KAAI,cAAcA,IAAG;AAAA,IAC7B,OAAO;AACN,eAAS,IAAI,gBAAgB,MAAM;AACnC,aAAO,QAAQ,CAAC,OAAM,QAAQ;AAC7B,QAAAA,KAAI,aAAa,OAAO,KAAK,KAAK;AAAA,MACnC,CAAC;AAAA,IACF;AAAA,EACD;AAEA,WAAS,iBAAiB,OAAO,QACjC;AACC,UAAM,SAAS,MAAM,OAAO,WAAW,KAAK;AAC5C,QAAI,EAAE,kBAAkB,kBAAkB;AACzC,eAAS,IAAI,gBAAgB,MAAM;AAAA,IACpC;AACA,QAAI,OAAO,OAAO,QAAQ;AAC1B,YAAQ,MAAM;AACd,WAAO,IAAI,QAAQ,EAAE,KAAK,CAAC;AAAA,EAC5B;AAaO,WAAS,OAAO,SACvB;AACC,QAAI,cAAc;AAAA,MAAC;AAAA,MAAO;AAAA,MAAW;AAAA,MAAO;AAAA,MAAW;AAAA,MACtD;AAAA,MAAW;AAAA,MAAW;AAAA,MAAO;AAAA,MAAW;AAAA,MAAW;AAAA,MAAS;AAAA,MAAe;AAAA,IAAY;AACxF,QAAI,IAAI,IAAI,IAAI,oBAAoB;AACpC,QAAI,UAAU;AACd,aAAS,UAAU,SAAS;AAC3B,UAAI,OAAO,UAAU,YAAY,kBAAkB,QAAQ;AAE1D,YAAI,IAAI,IAAI,QAAQ,CAAC;AAAA,MACtB,WAAW,kBAAkB,OACxB,OAAO,YAAY,eACnB,kBAAkB,UACrB;AACD,YAAI,IAAI,IAAI,MAAM;AAAA,MACnB,WAAW,kBAAkB,iBAAiB;AAC7C,2BAAmB,GAAG,MAAM;AAAA,MAC7B,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,iBAAS,SAAS,QAAQ;AACzB,kBAAO,OAAO;AAAA,YACb,KAAK;AACJ,kBAAI,OAAO,OAAO,UAAU,YAAY;AACvC,uBAAO,OAAO,EAAE,QAAQ,CAAC;AAAA,cAC1B,OAAO;AACN,kBAAE,SAAS,IAAI,gBAAgB,OAAO,MAAM;AAAA,cAC7C;AACD;AAAA,YACA,KAAK;AACJ,iCAAmB,GAAG,OAAO,YAAY;AAC1C;AAAA,YACA;AACC,kBAAI,CAAC,YAAY,SAAS,KAAK,GAAG;AACjC,sBAAM,WAAW,sCAAoC,WAAS,2BAA2B,KAAK;AAAA,cAC/F;AACA,kBAAI,SAAO,YAAY;AACtB,oBAAI,WAAW,OAAO;AACtB,oBAAI,YAAY,OAAO,YAAY,YAAY,SAAS,CAAC,KAAG,KAAK;AAChE,6BAAW,MAAI;AAAA,gBAChB;AACA,uBAAO,OAAO;AACd,wBAAQ;AAAA,cACT,WAAW,SAAO,cAAc;AAC/B,0BAAU,OAAO;AAAA,cAClB;AACA,kBAAI,OAAO,OAAO,KAAK,KAAK,YAAY;AACvC,uBAAO,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,cAC1B,WACC,OAAO,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,aAAa,UAC1D,OAAO,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,aAAa,UAC7D,OAAO,OAAO,KAAK,KAAK,aAAa,OAAO,KAAK,aAAa,SAChE;AACD,kBAAE,KAAK,IAAI,KAAG,OAAO,KAAK;AAAA,cAC3B,WAAW,OAAO,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,EAAE,UAAU;AACtE,kBAAE,KAAK,IAAI,OAAO,KAAK,EAAE,SAAS;AAAA,cACnC,OAAO;AACN,sBAAM,WAAW,sCAAoC,QAAM,MAAI,WAAS,gCAAgC,QAAQ,KAAK,CAAC;AAAA,cACvH;AACD;AAAA,UACD;AAAA,QACD;AAAA,MACD,OAAO;AACN,cAAM,WAAW,yCAAuC,WAAS,iCAAiC,MAAM;AAAA,MACzG;AAAA,IACD;AACA,QAAI,SAAS;AACZ,UAAI,CAAC,EAAE,MAAM;AACZ,UAAE,OAAO;AAAA,MACV;AACA,UAAI,OAAO,WAAS,UAAU;AAC7B,UAAE,QAAQ;AAAA,MACX,OAAO;AACN,YAAI,iBAAiB,GAAG,OAAO;AAAA,MAChC;AAAA,IACD;AACA,WAAO,OAAO,CAAC;AACf,WAAO,IAAI,MAAM,GAAG;AAAA,MACnB,IAAI,QAAQ,MAAM;AACjB,YAAI;AACJ,gBAAO,MAAM;AAAA,UACZ,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAS,YAAYP,UAAS;AAC7B,qBAAO,IAAI,QAAQ,GAAGA,QAAO;AAAA,YAC9B;AACD;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,SAAS,MAAM,GAAG,EAAE,IAAI;AACzC;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,SAAS,UAAU,GAAE,OAAO,SAAS,YAAY,GAAG,IAAE,CAAC;AACxE;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,YAAY;AAC5B,sBAAU,OAAO,WAAW,MAAI,OAAO,WAAW;AAClD,sBAAU,SAAS,MAAM;AACzB,sBAAU,OAAO;AACjB,sBAAU,OAAO,OAAO,MAAI,OAAO,OAAO;AAC1C,sBAAU;AACV,qBAAS,OAAO,WAAW,OAAO;AACnC;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,KAAK,UAAU,CAAC;AACjC;AAAA,UACA,KAAK;AACJ,gBAAI,OAAO,UAAU;AACpB,uBAAS,OAAO,SAAS,UAAU,GAAG,OAAO,SAAS,SAAO,CAAC;AAAA,YAC/D,OAAO;AACN,uBAAS;AAAA,YACV;AACD;AAAA,UACA;AACC,gBAAI,OAAO,IAAI,aAAa,UAAU;AACrC,uBAAS,OAAO,IAAI,EAAE,KAAK,MAAM;AAAA,YAClC,OAAO;AACN,uBAAS,OAAO,IAAI;AAAA,YACrB;AACD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,IACD,CAAC;AAAA,EACF;AAEA,MAAM,eAAe;AAAA,IACpB,OAAO,CAACQ,aAAY,YAAY;AAC/B,cAAQ,MAAM,kBAAOA,UAAS,GAAG,OAAO;AAAA,IACzC;AAAA,IACA,MAAM,CAACA,aAAY,YAAY;AAC9B,cAAQ,KAAK,kBAAOA,UAAS,GAAG,OAAO;AAAA,IACxC;AAAA,IACA,OAAO,CAAC,SAAS;AAChB,cAAQ,MAAM,mBAAO,IAAI;AAAA,IAC1B;AAAA,IACA,UAAU,CAAC,SAAS;AACnB,cAAQ,SAAS,mBAAO,IAAI;AAAA,IAC7B;AAAA,EACD;AAMO,WAAS,WAAWA,aAAY,SAAS;AAC/C,iBAAa,MAAMA,UAAS,GAAG,OAAO;AACtC,WAAO,IAAI,MAAMA,UAAS,GAAG,OAAO;AAAA,EACrC;AAEO,WAAS,UAAU,QAAQ;AACjC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAC1B,aAAO,OAAO,MAAM,EAAE,IAAI,SAAS;AAAA,IACpC;AACA,QAAI,UAAU,OAAO,WAAS,UAAU;AACvC,UAAI,OAAO,WAAW,eAAa,UAAU,CAAC,OAAO,WAAW;AAC/D,YAAI,SAAS,OAAO,OAAO,CAAC,GAAG,MAAM;AACrC,eAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AAClC,iBAAO,GAAG,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACpC,CAAC;AACD,eAAO;AAAA,MACR,OAAO;AACN,eAAO;AAAA,MACR;AAAA,IACD;AACA,WAAO;AAAA,EACR;;;AC/zBA,aAAW,gBAAgB;AAKpB,WAAS,SAAS;AACxB,eAAW,gBAAgB;AAAA,EAC5B;AAKO,WAAS,UAAU;AACzB,eAAW,gBAAgB;AAAA,EAC5B;AAQO,WAAS,OAAO,QAAQ,MAAM;AACpC,QAAI,WAAW,eAAe;AAC7B,UAAI,WAAW,MAAM,QAAO,IAAI;AAChC,UAAI,UAAU;AACb,gBAAQ,MAAM,kDAAsC,UAAU,mBAAmB,MAAM;AACvF,cAAM,IAAI,MAAM,qBAAqB;AAAA,UACpC,OAAO,EAAE,UAAU,OAAO;AAAA,QAC3B,CAAC;AAAA,MACF;AAAA,IACD;AAAA,EACD;AAKO,WAAS,SAAS,SAAS;AACjC,WAAO,SAAS,UAAU,MAAM,MAAM,MAAM;AAC3C,UAAI,OAAO,QAAQ,eAAe,QAAM,QAAQ,OAAO,WAAW,aAAc;AAC/E,eAAO,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,MACvC;AAAA,IACD;AAAA,EACD;AAKO,WAAS,SAAS,SAAS;AACjC,WAAO,SAAS,UAAU,MAAM,MAAM,MAAM;AAC3C,UAAI,QAAM,QAAQ,OAAO,QAAQ,aAAa;AAC7C,eAAO,MAAM,oBAAoB,MAAM,WAAW,aAAa,IAAI;AAAA,MACpE,WAAW,OAAO,WAAW,aAAa;AACzC,eAAO,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,MACvC,OAAO;AACN,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AAMO,WAAS,YAAY,SAAS;AACpC,WAAO,SAAS,aAAa,MAAM,MAAM,MAAM;AAC9C,UAAI,QAAM,QAAQ,OAAO,QAAQ,aAAa;AAC7C,aAAK,2CAA2C,MAAM,SAAS,IAAI;AACnE,eAAO;AAAA,MACR,OAAO;AACN,eAAO,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,MACvC;AAAA,IACD;AAAA,EACD;AAMO,WAAS,SAAS,UAAU;AAClC,WAAO,SAAS,OAAO,MAAM,MAAM,MAAM;AACxC,eAAQ,WAAW,UAAU;AAC5B,YAAI,CAAC,MAAM,MAAM,SAAS,MAAM,IAAI,GAAG;AACtC,iBAAO;AAAA,QACR;AAAA,MACD;AACA,aAAO,MAAM,sCAAsC,MAAM,UAAU,IAAI;AAAA,IACxE;AAAA,EACD;AAOO,WAAS,SAAS,UAAU;AAClC,WAAO,SAAS,OAAO,MAAM,MAAM,MAAM;AACxC,UAAI,CAAC,MAAM,QAAQ,IAAI,GAAG;AACzB,eAAO,MAAM,wBAAuB,MAAK,SAAQ,IAAI;AAAA,MACtD;AACA,eAAS,SAAS,MAAM;AACvB,YAAI,MAAM,GAAG,QAAQ,EAAE,KAAK,GAAG;AAC9B,iBAAO,MAAM,sCAAqC,OAAM,UAAS,IAAI;AAAA,QACtE;AAAA,MACD;AACA,aAAO;AAAA,IACR;AAAA,EACD;AAEO,WAAS,SAAS,UAAU;AAClC,WAAO,SAAS,OAAO,MAAM,MAAM,MAAM;AACxC,UAAI,WAAW,CAAC;AAChB,eAAS,WAAW,UAAU;AAC7B,mBAAW,SAAS,OAAO,MAAM,MAAM,SAAS,MAAM,IAAI,CAAC;AAAA,MAC5D;AACA,iBAAW,SAAS,OAAO,OAAO;AAClC,UAAI,SAAS,QAAQ;AACpB,eAAO,MAAM,0CAA0C,MAAM,UAAU,MAAM,QAAQ;AAAA,MACtF;AAAA,IACD;AAAA,EACD;AAOO,WAAS,SAAS,MAAM,MAAM,MAAM;AAC1C,QAAI;AACH,UAAI,gBAAgB,KAAK;AACxB,eAAO,KAAK;AAAA,MACb;AACA,UAAIC,OAAM,IAAI,IAAI,IAAI;AACtB,UAAIA,KAAI,QAAM,MAAM;AACnB,YAAI,EAAEA,KAAI,OAAK,OAAK,QAAQA,KAAI,QAAM,OAAK,MAAM;AAEhD,iBAAO,MAAM,2BAA0B,MAAK,YAAW,IAAI;AAAA,QAC5D;AAAA,MACD;AAAA,IACD,SAAQ,GAAG;AACV,aAAO,MAAM,2BAA0B,MAAK,YAAW,IAAI;AAAA,IAC5D;AAAA,EACD;AAOO,WAAS,WAAW,MAAM,MAAM,MAAM;AAC5C,QAAI,CAAC,6BAA6B,KAAK,IAAI,GAAG;AAC7C,aAAO,MAAM,6BAA4B,MAAK,cAAa,IAAI;AAAA,IAChE;AAAA,EACD;AAMO,WAAS,WAAW,aAAa;AACvC,WAAO,SAAS,YAAY,MAAM,MAAM,MAAM;AAC7C,UAAI,EAAE,gBAAgB,cAAc;AACnC,eAAO,MAAM,qCAAoC,MAAK,aAAY,IAAI;AAAA,MACvE;AAAA,IACD;AAAA,EACD;AAMO,WAAS,IAAI,SAAS;AAC5B,WAAO,SAAS,KAAK,MAAM,MAAM,MAAM;AACtC,UAAI,CAAC,MAAM,MAAM,SAAS,MAAM,IAAI,GAAG;AACtC,eAAO,MAAM,8CAA8C,MAAM,SAAS,IAAI;AAAA,MAC/E;AAAA,IACD;AAAA,EACD;AAUO,WAAS,MAAM,MAAM,SAAS,MAAM,OAAK,IAAI;AACnD,QAAI,CAAC,MAAM;AACV,aAAO;AAAA,IACR;AACA,QAAI,WAAW,CAAC;AAChB,QAAI,YAAY,SAAS;AACxB,UAAI,OAAO,QAAQ,aAAa,EAAE,gBAAgB,UAAU;AAC3D,iBAAS,KAAK,MAAM,yBAAyB,MAAM,SAAS,IAAI,CAAC;AAAA,MAClE;AAAA,IACD,WAAW,YAAY,QAAQ;AAC9B,UAAI,OAAO,QAAQ,YAAY,EAAE,gBAAgB,SAAS;AACzD,iBAAS,KAAK,MAAM,wBAAwB,MAAM,SAAS,IAAI,CAAC;AAAA,MACjE;AAAA,IACD,WAAW,YAAY,QAAQ;AAC9B,UAAI,OAAO,QAAQ,YAAY,EAAE,gBAAgB,SAAS;AACzD,iBAAS,KAAK,MAAM,wBAAwB,MAAM,SAAS,IAAI,CAAC;AAAA,MACjE;AACA,UAAI,QAAQ,IAAI;AACf,iBAAS,KAAK,MAAM,iDAAiD,MAAM,SAAS,IAAI,CAAC;AAAA,MAC1F;AAAA,IACD,WAAW,mBAAmB,QAAQ;AAClC,UAAI,MAAM,QAAQ,IAAI,GAAG;AAC3B,YAAI,QAAQ,KAAK,UAAU,CAAC,SAAQC,WAAU,MAAM,SAAQ,SAAQ,MAAK,OAAK,MAAIA,SAAM,GAAG,CAAC;AACnF,YAAI,QAAM,IAAI;AACb,mBAAS,KAAK,MAAM,UAAQ,QAAM,4BAA4B,KAAK,KAAK,GAAG,SAAS,OAAK,MAAI,QAAM,GAAG,CAAC;AAAA,QACxG;AAAA,MACJ,WAAW,OAAO,QAAQ,aAAa;AACtC,iBAAS,KAAK,MAAM,2CAA2C,MAAM,SAAS,IAAI,CAAC;AAAA,MACvF,WAAW,CAAC,QAAQ,KAAK,IAAI,GAAG;AAC5B,iBAAS,KAAK,MAAM,+BAA+B,MAAM,SAAS,IAAI,CAAC;AAAA,MACxE;AAAA,IACJ,WAAW,mBAAmB,UAAU;AACpC,UAAI,UAAU,QAAQ,MAAM,MAAM,IAAI;AACtC,UAAI,SAAS;AACZ,YAAI,MAAM,QAAQ,OAAO,GAAG;AAC3B,qBAAW,SAAS,OAAO,OAAO;AAAA,QACnC,OAAO;AACN,mBAAS,KAAK,OAAO;AAAA,QACtB;AAAA,MACD;AAAA,IACJ,WAAW,MAAM,QAAQ,OAAO,GAAG;AACrC,UAAI,CAAC,MAAM,QAAQ,IAAI,GAAG;AACzB,iBAAS,KAAK,MAAM,wBAAuB,MAAK,CAAC,GAAE,IAAI,CAAC;AAAA,MACzD;AACA,eAAS,KAAK,SAAS;AACtB,iBAAS,SAAS,KAAK,KAAK,GAAG;AAC9B,cAAI,UAAU,MAAM,KAAK,KAAK,GAAG,GAAG,MAAM,OAAK,MAAI,QAAM,GAAG;AAC5D,cAAI,MAAM,QAAQ,OAAO,GAAG;AAC3B,uBAAW,SAAS,OAAO,OAAO;AAAA,UACnC,WAAW,SAAS;AACnB,qBAAS,KAAK,OAAO;AAAA,UACtB;AAAA,QACD;AAAA,MACE;AAAA,IACD,WAAW,WAAW,OAAO,WAAW,UAAU;AAC9C,UAAI,MAAM,QAAQ,IAAI,GAAG;AACrB,YAAI,QAAQ,KAAK,UAAU,CAAC,SAAQA,WAAU,MAAM,SAAQ,SAAQ,MAAK,OAAK,MAAIA,SAAM,GAAG,CAAC;AAC5F,YAAI,QAAM,IAAI;AACb,mBAAS,KAAK,MAAM,UAAQ,QAAM,4BAA4B,KAAK,KAAK,GAAG,SAAS,OAAK,MAAI,QAAM,GAAG,CAAC;AAAA,QACxG;AAAA,MACJ,WAAW,CAAC,QAAQ,OAAO,QAAQ,UAAU;AAC5C,iBAAS,KAAK,MAAM,qCAAqC,MAAM,SAAS,IAAI,CAAC;AAAA,MAC9E,OAAO;AACN,YAAI,gBAAgB,iBAAiB;AACpC,iBAAO,OAAO,YAAY,IAAI;AAAA,QAC/B;AACA,YAAI,mBAAmB,UAAU;AAChC,cAAI,SAAS,MAAM,MAAM,SAAS,MAAM,IAAI;AACzC,cAAI,QAAQ;AACX,uBAAW,SAAS,OAAO,MAAM;AAAA,UAClC;AAAA,QACJ,OAAO;AACN,qBAAW,CAAC,YAAY,UAAU,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5D,gBAAI,SAAS,MAAM,KAAK,UAAU,GAAG,YAAY,MAAM,OAAK,MAAI,UAAU;AAC1E,gBAAI,QAAQ;AACX,yBAAW,SAAS,OAAO,MAAM;AAAA,YAClC;AAAA,UACJ;AAAA,QACJ;AAAA,MACD;AAAA,IACD,OAAO;AACN,UAAI,WAAS,MAAM;AAClB,iBAAS,KAAK,MAAM,kCAAkC,MAAM,SAAS,IAAI,CAAC;AAAA,MAC3E;AAAA,IACD;AACA,QAAI,SAAS,QAAQ;AACpB,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACX;AAKO,WAAS,MAAMC,UAAS,OAAO,UAAU,MAAM,UAAU;AAC/D,QAAI,SAAS;AAAA,MACZ;AAAA,MACA,SAAAA;AAAA,MACA;AAAA,MACA;AAAA,IACD;AACA,QAAI,UAAU;AACb,aAAO,WAAW;AAAA,IACnB;AACA,WAAO;AAAA,EACR;AAEO,WAAS,KAAKA,UAAS,MAAM,SAAS,MAAM;AAClD,YAAQ,KAAK,8BAAgB,MAAMA,UAAS,SAAS,IAAI;AAAA,EAC1D;AAEA,aAAW,SAAS;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;;;ACvUO,WAAS,WAAW,MAAM;AAChC,QAAI,YAAY;AAChB,QAAI,OAAO,iBAAiB,aAAa;AACxC,mBAAa;AAAA,QACZ,KAAK,MAAW,aAAa,QAAQ,iBAAe,IAAI;AAAA,QACxD,KAAK,CAAC,UAAU,aAAa,QAAQ,iBAAe,MAAM,KAAK;AAAA,QAC/D,KAAK,MAAW,aAAa,QAAQ,iBAAe,IAAI,MAAI;AAAA,QAC5D,QAAQ,MAAQ,aAAa,WAAW,iBAAe,IAAI;AAAA,MAC5D;AACA,oBAAc;AAAA,QACb,KAAK,CAAC,SAAgB,KAAK,MAAM,aAAa,QAAQ,OAAK,MAAI,IAAI,CAAC;AAAA,QACpE,KAAK,CAAC,MAAM,UAAU,aAAa,QAAQ,OAAK,MAAI,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QAC/E,KAAK,CAAC,SAAgB,aAAa,QAAQ,OAAK,MAAI,IAAI,MAAI;AAAA,QAC5D,QAAQ,CAAC,SAAa,aAAa,WAAW,OAAK,MAAI,IAAI;AAAA,MAC5D;AAAA,IACD,OAAO;AACN,UAAI,WAAW,oBAAI,IAAI;AACvB,mBAAa;AAAA,QACZ,KAAK,MAAW,SAAS,IAAI,iBAAe,IAAI;AAAA,QAChD,KAAK,CAAC,UAAU,SAAS,IAAI,iBAAe,MAAM,KAAK;AAAA,QACvD,KAAK,MAAW,SAAS,IAAI,iBAAe,IAAI;AAAA,QAChD,QAAQ,MAAQ,SAAS,OAAO,iBAAe,IAAI;AAAA,MACpD;AACA,oBAAc,oBAAI,IAAI;AAAA,IACvB;AACA,WAAO;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,IACT;AAAA,EACD;;;ACzBA,MAAM,wBAAwB,oBAAI,IAAI;AAAA,IACrC,CAAC,UAAU,QAAQ;AAAA,IACnB,CAAC,QAAQ,MAAM;AAAA,EAChB,CAAC;AAED,MAAM,wCAAwC,oBAAI,IAAI;AAAA,IACrD;AAAA,IACA;AAAA,IACA;AAAA,EACD,CAAC;AAWc,WAAR,SAA0B,SACjC;AACC,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO;AAAA,MACrB,qBAAqB;AAAA,MACrB,MAAM;AAAA,MACN,sBAAsB;AAAA,QACrB,wBAAwB;AAAA,QACxB,gBAAgB;AAAA,QAChB,cAAc,WAAW,UAAU,SAAS;AAAA,QAC5C,YAAY;AAAA,QACZ,eAAe,qBAAqB,EAAE;AAAA,MACvC;AAAA,MACA,oBAAoB,OAAMC,SAAO;AAChC,YAAI,OAAO,SAAS,QAAQA,KAAI,MAAM;AACrC,iBAAO,SAAS,QAAQA,KAAI,IAAI;AAAA,QACjC;AACA,eAAO;AAAA,MACR;AAAA,IACD;AAEA,WAAO,SAAS,CAAC,CAAC;AAElB,UAAM,SAAS,OAAO,OAAO,CAAC,GAAG,eAAe,sBAAsB,SAAS,oBAAoB;AACnG,cAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,OAAO;AACnD,YAAQ,uBAAuB;AAE/B,UAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,QAAI,CAAC,QAAQ,QAAQ;AACpB,cAAQ,SAAS,MAAM;AAAA,IACxB;AACA,QAAI,CAAC,QAAQ,OAAO;AACnB,cAAQ,QAAQ,MAAM;AAAA,IACvB;AAEA,WAAO,SAAS;AAAA,MACf,sBAAsB;AAAA,QACrB,WAAW,SAAS,IAAI;AAAA,QACxB,YAAY;AAAA,QACZ,wBAAwB,SAAS,QAAQ;AAAA,QACzC,gBAAgB,SAAS,QAAQ;AAAA,QACjC,cAAc,SAAS,QAAQ;AAAA,MAChC;AAAA,IACD,CAAC;AAED,aAAS,UAAU,QAAQ;AAC1B,cAAO,QAAQ;AAAA,QACd,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACJ,kBAAQ,OAAO,IAAI,QAAQ,sBAAsB,QAAQ,OAAO,MAAM,CAAC,CAAC;AACzE;AAAA,MACD;AAAA,IACD;AASA,WAAO,eAAe,KAAK,MAAM;AAChC,UAAI,QAAQ,qBAAqB;AAChC,eAAO,iBAAiB,KAAK,IAAI;AAAA,MAClC;AACA,YAAM,MAAM,MAAM,KAAK,GAAG;AAC1B,UAAI,IAAI,MAAM,CAAC,wBAAwB,GAAG,GAAG;AAC5C,eAAO;AAAA,MACR;AACA,aAAO,iBAAiB,KAAK,IAAI;AAAA,IAClC;AAQA,mBAAe,iBAAiB,KAAK,MACrC;AACC,4BAAsB;AACtB,YAAM,cAAc,QAAQ,OAAO,IAAI,cAAc;AACrD,YAAM,eAAe,QAAQ,OAAO,IAAI,eAAe;AACvD,YAAM,iBAAiB,UAAU,WAAW;AAC5C,UAAI,CAAC,eAAgB,kBAAkB,CAAC,cAAe;AACtD,cAAM,QAAQ,MAAM,iBAAiB;AACrC,YAAI,CAAC,OAAO;AACX,iBAAa,SAAS,OAAO;AAAA,QAC9B;AACA,eAAO,iBAAiB,KAAK,IAAI;AAAA,MAClC,WAAW,kBAAkB,cAAc;AAC1C,cAAM,QAAQ,MAAM,mBAAmB;AACvC,YAAI,CAAC,OAAO;AACX,iBAAa,SAAS,OAAO;AAAA,QAC9B;AACA,eAAO,iBAAiB,KAAK,IAAI;AAAA,MAClC,OAAO;AACN,cAAY,QAAQ,KAAK;AAAA,UACxB,SAAS;AAAA,YACR,eAAe,YAAY,OAAK,MAAI,YAAY;AAAA,UACjD;AAAA,QACD,CAAC;AACD,eAAO,KAAK,GAAG;AAAA,MAChB;AAAA,IACD;AAOA,aAAS,wBACT;AACC,UAAI,OAAO,WAAW,eAAe,QAAQ,UAAU;AACtD,YAAIA,OAAY,IAAI,OAAO,QAAQ;AACnC,YAAI,MAAM,OAAO;AACjB,YAAIA,KAAI,aAAa,IAAI,MAAM,KAAKA,KAAI,aAAa,IAAI,OAAO,GAAG;AAClE,mBAASA,KAAI;AACb,UAAAA,OAAMA,KAAI,KAAK,EAAE,QAAO,GAAG,CAAC;AAC5B,kBAAQ,UAAU,CAAC,GAAE,IAAGA,KAAI,IAAI;AAAA,QACjC,WAAWA,KAAI,MAAM;AACpB,cAAI,QAAQA,KAAI,KAAK,OAAO,CAAC;AAC7B,mBAAS,IAAI,gBAAgB,MAAI,KAAK;AACtC,UAAAA,OAAMA,KAAI,KAAK,EAAE,MAAK,GAAG,CAAC;AAC1B,kBAAQ,UAAU,CAAC,GAAE,IAAGA,KAAI,IAAI;AAAA,QACjC;AACA,YAAI,QAAQ;AACX,cAAI,OAAO,IAAI,OAAO,GAAG;AACxB,kBAAY,WAAW,qCAAmC,OAAO,IAAI,OAAO,KAAG,OAAO,IAAI,mBAAmB,IAAI,OAAK,OAAO,IAAI,mBAAmB,IAAE,MAAM,GAAG;AAAA,UAChK;AACA,iBAAO,OAAO,IAAI,MAAM;AACxB,kBAAQ,OAAO,IAAI,OAAO;AAC1B,wBAAc,KAAK;AACnB,cAAI,MAAM;AACT,oBAAQ,OAAO,IAAI,sBAAsB,IAAI;AAAA,UAC9C;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAOA,mBAAe,mBACf;AACC,UAAI,OAAO,eAAe,wBAAwB,CAAC,QAAQ,OAAO,IAAI,oBAAoB,GAAG;AAC5F,YAAI,aAAa,MAAM,wBAAwB;AAC/C,YAAI,CAAC,QAAQ,sBAAsB,OAAO,QAAQ,uBAAuB,YAAY;AACpF,gBAAY,WAAW,uHAAuH;AAAA,QAC/I;AACA,YAAI,gBAAgB,MAAM,QAAQ,mBAAmB,UAAU;AAC/D,YAAI,eAAe;AAClB,mCAAyB,aAAa;AAAA,QACvC,OAAO;AACN,iBAAO;AAAA,QACR;AAAA,MACD;AACA,UAAI,WAAW,sBAAsB;AACrC,UAAIC,YAAW,MAAM,QAAQ,OAAO,KAAK,QAAQ;AACjD,UAAI,CAACA,UAAS,IAAI;AACjB,YAAI,MAAM,MAAMA,UAAS,KAAK;AAC9B,cAAY,WAAW,mCAAiCA,UAAS,SAAO,OAAKA,UAAS,aAAW,OAAK,MAAI,KAAK,EAAC,OAAO,SAAQ,CAAE;AAAA,MAClI;AACA,UAAI,OAAO,MAAMA,UAAS,KAAK;AAC/B,yBAAmB,IAAI;AACvB,cAAQ,OAAO,OAAO,oBAAoB;AAC1C,aAAO;AAAA,IACR;AAOA,mBAAe,qBACf;AACC,UAAI,kBAAkB,sBAAsB,eAAe;AAC3D,UAAIA,YAAW,MAAM,QAAQ,OAAO,KAAK,eAAe;AACxD,UAAI,CAACA,UAAS,IAAI;AACjB,YAAI,MAAM,MAAMA,UAAS,KAAK;AAC9B,cAAY,WAAW,qCAAmCA,UAAS,SAAO,OAAKA,UAAS,aAAW,OAAK,MAAI,KAAK,EAAC,OAAO,gBAAe,CAAE;AAAA,MAC3I;AACA,UAAI,OAAO,MAAMA,UAAS,KAAK;AAC/B,yBAAmB,IAAI;AACvB,aAAO;AAAA,IACR;AAOA,mBAAe,0BACf;AACC,UAAI,CAAC,OAAO,wBAAwB;AACnC,cAAY,WAAW,uEAAuE;AAAA,MAC/F;AACA,UAAID,OAAY,IAAI,OAAO,wBAAwB,EAAC,MAAM,GAAE,CAAC;AAC7D,aAAO,QAAQ;AAAA,QACd,WAAW;AAAA,QACX,cAAc;AAAA,QACd,OAAO;AAAA,MACR,CAAC;AACD,UAAI,SAAS;AAAA,QACZ,eAAe;AAAA,QACf,WAAe,OAAO;AAAA,QACtB,cAAe,OAAO;AAAA,QACtB,OAAe,OAAO,SAAS,YAAY,EAAE;AAAA,MAC9C;AACA,UAAI,OAAO,eAAe;AACzB,eAAO,gBAAgB,OAAO;AAAA,MAC/B;AACA,UAAI,OAAO,eAAe;AACzB,eAAO,gBAAgB,OAAO;AAAA,MAC/B;AACA,cAAQ,MAAM,IAAI,OAAO,KAAK;AAC9B,UAAI,OAAO,eAAe;AACzB,gBAAQ,OAAO,IAAI,iBAAiB,OAAO,aAAa;AACxD,eAAO,iBAAiB,MAAM,sBAAsB,OAAO,aAAa;AACxE,eAAO,wBAAwB;AAAA,MAChC;AACA,UAAI,OAAO,OAAO;AACjB,eAAO,QAAQ,OAAO;AAAA,MACvB;AACA,UAAI,OAAO,QAAQ;AAClB,eAAO,SAAS,OAAO;AAAA,MACxB;AACA,UAAI,OAAO,OAAO;AACjB,eAAO,QAAQ,OAAO;AAAA,MACvB;AACA,aAAa,IAAIA,MAAK,EAAE,OAAO,CAAC;AAAA,IACjC;AAOA,aAAS,sBAAsB,aAAW,MAC1C;AACC,aAAO,QAAQ;AAAA,QACd,WAAW;AAAA,QACX,cAAc;AAAA,MACf,CAAC;AACD,UAAI,CAAC,OAAO,gBAAgB;AAC3B,cAAY,WAAW,+CAA+C;AAAA,MACvE;AACA,UAAIA,OAAY,IAAI,OAAO,gBAAgB,EAAC,MAAM,GAAE,CAAC;AACrD,UAAI,SAAS;AAAA,QACZ,YAAY,cAAc,OAAO;AAAA,MAClC;AACA,UAAI,UAAU,CAAC;AACf,uCAAiC,QAAQ,OAAO;AAChD,UAAI,OAAO,OAAO;AACjB,eAAO,QAAQ,OAAO;AAAA,MACvB;AACA,cAAO,OAAO,YAAY;AAAA,QACzB,KAAK;AACJ,iBAAO,eAAe,OAAO;AAC7B,iBAAO,OAAO,QAAQ,OAAO,IAAI,oBAAoB;AACrD,gBAAM,gBAAgB,QAAQ,OAAO,IAAI,eAAe;AACxD,cAAI,eAAe;AAClB,mBAAO,gBAAgB;AAAA,UACxB;AACD;AAAA,QACA,KAAK;AACL;AAAA,QACA,KAAK;AACJ,iBAAO,gBAAgB,WAAW,QAAQ,OAAO,IAAI,eAAe,CAAC;AACtE;AAAA,QACA;AACC,gBAAM,IAAI,MAAM,yBAAuB,OAAO,UAAU;AACzD;AAAA,MACD;AACA,aAAa,QAAQA,MAAK,EAAC,QAAQ,QAAQ,SAAS,MAAM,IAAI,gBAAgB,MAAM,EAAE,CAAC;AAAA,IACxF;AAOA,aAAS,iCAAiC,QAAQ,SAClD;AACC,YAAM,SAAS,wBAAwB,MAAM;AAC7C,UAAI,WAAW,QAAQ;AACtB,eAAO,YAAY,OAAO;AAC1B;AAAA,MACD;AACA,UAAI,CAAC,OAAO,eAAe;AAC1B,cAAY,WAAW,0CAAwC,SAAO,8CAA8C;AAAA,MACrH;AACA,UAAI,WAAW,sBAAsB;AACpC,eAAO,YAAY,OAAO;AAC1B,eAAO,gBAAgB,OAAO;AAC9B;AAAA,MACD;AACA,UAAI,WAAW,uBAAuB;AACrC,gBAAQ,gBAAgB,UAAU,OAAO,WAAW,OAAO,aAAa;AACxE;AAAA,MACD;AAAA,IACD;AAMA,aAAS,yBAAyB,eAClC;AACC,UAAI,OAAO;AACX,UAAI,iBAAiB,OAAO,kBAAkB,UAAU;AACvD,YAAI,cAAc,OAAO;AACxB,gBAAY,WAAW,qCAAmC,cAAc,KAAK;AAAA,QAC9E;AACA,sBAAc,cAAc,KAAK;AACjC,eAAO,cAAc,sBAAsB,cAAc;AAAA,MAC1D;AACA,UAAI,CAAC,MAAM;AACV,cAAY,WAAW,uEAAuE;AAAA,MAC/F;AACA,cAAQ,OAAO,IAAI,sBAAsB,IAAI;AAAA,IAC9C;AAMA,aAAS,cAAc,OACvB;AACC,UAAI,cAAc,QAAQ,MAAM,IAAI;AACpC,UAAI,CAAC,SAAS,UAAQ,aAAa;AAClC,cAAY,WAAW,wCAAwC;AAAA,MAChE;AAAA,IACD;AAMA,aAAS,mBAAmB,MAC5B;AACC,YAAM,QAAQ,sBAAsB,IAAI;AACxC,cAAQ,OAAO,IAAI,gBAAgB,KAAK;AACxC,UAAI,KAAK,eAAe;AACvB,gBAAQ,OAAO,IAAI,iBAAiB,EAAE,OAAO,KAAK,cAAc,CAAC;AAAA,MAClE;AAAA,IACD;AAAA,EACD;AAQA,WAAS,wBAAwB,KACjC;AACC,QAAI,CAAC,KAAK;AACT,aAAO;AAAA,IACR;AACA,QAAI,IAAI,WAAW,KAAK;AACvB,aAAO;AAAA,IACR;AACA,UAAM,YAAY,qBAAqB,IAAI,SAAS,IAAI,kBAAkB,CAAC;AAC3E,QAAI,WAAW,UAAU,sBAAsB;AAC9C,aAAO;AAAA,IACR;AACA,WAAO,IAAI,WAAW;AAAA,EACvB;AAOA,WAAS,sBAAsB,MAAM,OACrC;AACC,QAAI,SAAS,kBAAkB,SAAS,OAAO,UAAU,UAAU;AAClE,aAAO;AAAA,IACR;AACA,QAAI,SAAS,gBAAgB;AAC5B,aAAO,EAAE,OAAO,OAAO,MAAM,UAAU,SAAS,KAAK;AAAA,IACtD;AACA,QAAI,SAAS,mBAAmB,SAAS,OAAO,UAAU,UAAU;AACnE,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAMA,WAAS,sBAAsB,MAC/B;AACC,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACtC,YAAY,WAAW,uDAAuD;AAAA,IAC/E;AACA,QAAI,CAAC,KAAK,cAAc;AACvB,YAAY,WAAW,uDAAuD;AAAA,IAC/E;AACA,QAAI,CAAC,KAAK,YAAY;AACrB,YAAY,WAAW,qDAAqD;AAAA,IAC7E;AACA,UAAM,YAAY,mBAAmB,KAAK,UAAU;AACpD,WAAO;AAAA,MACN,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK,eAAe,SAAY,OAAO,WAAW,KAAK,UAAU;AAAA,MAC1E,MAAM;AAAA,MACN,OAAO,KAAK;AAAA,IACb;AAAA,EACD;AAOA,WAAS,mBAAmB,MAC5B;AACC,UAAM,aAAa,sBAAsB,IAAI,OAAO,IAAI,EAAE,YAAY,CAAC;AACvE,QAAI,CAAC,YAAY;AAChB,YAAY,WAAW,sCAAoC,IAAI;AAAA,IAChE;AACA,WAAO;AAAA,EACR;AAOA,WAAS,wBAAwB,QACjC;AACC,UAAM,SAAS,OAAO,+BAA+B,OAAO,gBAAgB,uBAAuB;AACnG,QAAI,CAAC,sCAAsC,IAAI,MAAM,GAAG;AACvD,YAAY,WAAW,sDAAoD,MAAM;AAAA,IAClF;AACA,WAAO;AAAA,EACR;AAMA,WAAS,UAAU,UAAU,cAC7B;AACC,UAAM,QAAQ,WAAW,QAAQ,IAAE,MAAI,WAAW,YAAY;AAC9D,WAAO,WAAS,cAAc,KAAK;AAAA,EACpC;AAEA,WAAS,WAAW,OACpB;AACC,WAAO,mBAAmB,KAAK,EAAE,QAAQ,QAAQ,GAAG;AAAA,EACrD;AAEA,WAAS,cAAc,OACvB;AACC,QAAI,OAAO,SAAS,YAAY;AAC/B,aAAO,KAAK,KAAK;AAAA,IAClB;AACA,WAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,SAAS,QAAQ;AAAA,EACtD;AAMA,WAAS,WAAW,OACpB;AACC,WAAO,SAAS,OAAO,UAAU,WAAW,MAAM,QAAQ;AAAA,EAC3D;AAMO,WAAS,UAAU,OAC1B;AACC,QAAI,CAAC,OAAO;AACX,aAAO;AAAA,IACR;AACA,QAAI,CAAC,MAAM,SAAS;AACnB,aAAO;AAAA,IACR;AACA,QAAI,UAAU,IAAI,KAAK,MAAM,OAAO;AACpC,QAAI,MAAM,oBAAI,KAAK;AACnB,WAAO,IAAI,QAAQ,IAAI,QAAQ,QAAQ;AAAA,EACxC;AAMO,WAAS,WAAW,UAC3B;AACC,QAAI,oBAAoB,MAAM;AAC7B,aAAO,IAAI,KAAK,SAAS,QAAQ,CAAC;AAAA,IACnC;AACA,QAAI,OAAO,aAAa,UAAU;AACjC,UAAI,OAAO,oBAAI,KAAK;AACpB,WAAK,WAAW,KAAK,WAAW,IAAI,QAAQ;AAC5C,aAAO;AAAA,IACR;AACA,UAAM,IAAI,UAAU,0BAAwB,QAAQ;AAAA,EACrD;AAMO,WAAS,qBAAqB,OAAK,IAC1C;AACC,UAAM,gBAAgB,IAAI,WAAW,IAAI;AACzC,eAAW,OAAO,gBAAgB,aAAa;AAC/C,WAAO,iBAAiB,aAAa;AAAA,EACtC;AAMA,iBAAsB,sBAAsB,eAC5C;AACC,UAAME,WAAU,IAAI,YAAY;AAChC,UAAM,OAAOA,SAAQ,OAAO,aAAa;AACzC,UAAM,YAAY,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,IAAI;AACvE,WAAO,iBAAiB,SAAS;AAAA,EAClC;AAMO,WAAS,iBAAiB,QACjC;AACC,UAAM,aAAa,MAAM,KAAK,IAAI,WAAW,MAAM,GAAG,OAAK,OAAO,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE;AACvF,WAAO,KAAK,UAAU,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AAAA,EAC1B;AAOO,WAAS,YAAY,QAC5B;AACC,UAAM,QAAQ,IAAI,WAAW,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC;AAC1D,QAAI,WAAW,QAAQ,iBAAiB;AACvC,iBAAW,OAAO,gBAAgB,KAAK;AACvC,aAAO,iBAAiB,KAAK,EAAE,MAAM,GAAG,MAAM;AAAA,IAC/C;AACA,UAAM,aAAa;AACnB,QAAI,cAAc;AAClB,QAAI,UAAU;AACX,WAAO,UAAU,QAAQ;AACrB,qBAAe,WAAW,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,WAAW,MAAM,CAAC;AAC9E;AAAA,IACJ;AACH,WAAO;AAAA,EACR;AAMO,WAAS,eAAe;AAC9B,QAAIF,OAAM,IAAI,IAAI,SAAS,SAAS,IAAI;AACxC,QAAI,CAACA,KAAI,aAAa,IAAI,MAAM,GAAG;AAClC,UAAIA,KAAI,MAAM;AACb,YAAI,QAAQA,KAAI,KAAK,OAAO,CAAC;AAC7B,cAAM,SAAS,IAAI,gBAAgB,MAAI,KAAK;AAC5C,YAAI,OAAO,IAAI,MAAM,GAAG;AACvB,iBAAO;AAAA,QACR;AAAA,MACD;AACA,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AA2BO,WAAS,qBAAqB,OACrC;AACC,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACxC,aAAO;AAAA,IACR;AACA,UAAM,UAAU,MAAM,KAAK;AAC3B,UAAM,QAAQ,QAAQ,OAAO,IAAI;AACjC,UAAM,SAAS,QAAQ,IAAI,UAAU,QAAQ,MAAM,GAAG,KAAK;AAC3D,UAAM,OAAO,QAAQ,IAAI,KAAK,QAAQ,MAAM,QAAQ,CAAC;AACrD,QAAI,CAAC,CAAC,UAAU,MAAM,EAAE,SAAS,OAAO,YAAY,CAAC,GAAG;AACvD,aAAO;AAAA,IACR;AACA,UAAM,SAAS,EAAE,OAAO;AACxB,UAAM,UAAU;AAChB,QAAI;AACJ,WAAQ,QAAQ,QAAQ,KAAK,IAAI,GAAI;AACpC,UAAIG,SAAQ,MAAM,CAAC;AACnB,UAAIA,OAAM,WAAW,GAAG,KAAKA,OAAM,SAAS,GAAG,GAAG;AACjD,QAAAA,SAAQA,OAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,QAAQ,GAAG;AAAA,MAC/C;AACA,aAAO,MAAM,CAAC,CAAC,IAAIA;AAAA,IACpB;AACA,WAAO;AAAA,EACR;;;ACtoBA,MAAM,UAAU,IAAI,YAAW;AAC/B,MAAM,UAAU,IAAI,YAAW;AAI/B,WAAS,IAAI,OAA0B;AACrC,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,QAAQ,OAAO,KAAK;IAC7B;AAEA,WAAO,QAAQ,OAAO,KAAK;EAC7B;AAQA,WAAS,qBAAqB,WAA0B;AACtD,QAAI,OAAO,UAAU,kBAAkB,YAAY,UAAU,gBAAgB,MAAM;AACjF,YAAM,IAAI,yBAAyB,GAAG,UAAU,IAAI,2CAA2C;IACjG;EACF;AAEA,WAAS,gBAAgB,KAAc;AACrC,YAAQ,IAAI,UAAU,MAAM;MAC1B,KAAK;AACH,eAAoB,EAAE,MAAM,IAAI,UAAU,MAAM,MAAM,UAAS;MACjE,KAAK;AACH,6BAAsC,IAAI,SAAS;AACnD,eAAqB;UACnB,MAAM,IAAI,UAAU;UACpB,YAAY,OAAO;;MAEvB,KAAK;AACH,6BAAsC,IAAI,SAAS;AACnD,eAAO,EAAE,MAAM,IAAI,UAAU,KAAI;MACnC,KAAK;AACH,eAAO,EAAE,MAAM,IAAI,UAAU,KAAI;IACrC;AACA,UAAM,IAAI,0BAAyB;EACrC;AAKA,iBAAe,IACb,QACA,WACA,KAAc;AAEd,QAAI,IAAI,OAAO,SAAS,MAAM,MAAM,OAAO;AACzC,YAAM,IAAI,UACR,+FAA+F;IAEnG;AACA,UAAM,QAAQ,GAAG,KAAK,IAAI,KAAK,UAAU,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC,CAAC;AAC1F,UAAM,YAAY,KAAK,MAAM,OAAO,OAAO,KAAK,gBAAgB,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,CAAC;AACtF,WAAO,GAAG,KAAK,IAAI,SAAS;EAC9B;AAEA,MAAI;AAEJ,MAAI,WAAW,UAAU,UAAU;AACjC,sBAAkB,CAAC,UAAS;AAC1B,UAAI,iBAAiB,aAAa;AAChC,gBAAQ,IAAI,WAAW,KAAK;MAC9B;AAGA,aAAO,MAAM,SAAS,EAAE,UAAU,aAAa,aAAa,KAAI,CAAE;IACpE;EACF,OAAO;AACL,UAAM,aAAa;AACnB,sBAAkB,CAAC,UAAS;AAC1B,UAAI,iBAAiB,aAAa;AAChC,gBAAQ,IAAI,WAAW,KAAK;MAC9B;AAEA,YAAM,MAAM,CAAA;AACZ,eAAS,IAAI,GAAG,IAAI,MAAM,YAAY,KAAK,YAAY;AAErD,YAAI,KAAK,OAAO,aAAa,MAAM,MAAM,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC;MAC7E;AACA,aAAO,KAAK,IAAI,KAAK,EAAE,CAAC,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;IACpF;EACF;AAEA,WAAS,KAAK,OAA+B;AAC3C,WAAO,gBAAgB,KAAK;EAC9B;AA0CA,MAAM,4BAAN,cAAwC,MAAK;IAC3C,YAAYC,UAAgB;;AAC1B,YAAMA,aAAO,QAAPA,aAAO,SAAPA,WAAW,yBAAyB;AAC1C,WAAK,OAAO,KAAK,YAAY;AAE7B,OAAA,KAAA,MAAM,uBAAiB,QAAA,OAAA,SAAA,SAAA,GAAA,KAAA,OAAG,MAAM,KAAK,WAAW;IAClD;;AAGF,MAAM,2BAAN,cAAuC,MAAK;IAC1C,YAAYA,UAAe;;AACzB,YAAMA,QAAO;AACb,WAAK,OAAO,KAAK,YAAY;AAE7B,OAAA,KAAA,MAAM,uBAAiB,QAAA,OAAA,SAAA,SAAA,GAAA,KAAA,OAAG,MAAM,KAAK,WAAW;IAClD;;AAMF,WAAS,MAAM,KAAc;AAC3B,YAAgC,IAAI,UAAW,KAAK,MAAM;MACxD,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,6CAA6C;IACrF;EACF;AAKA,WAAS,MAAM,KAAc;AAC3B,YAAgC,IAAI,UAAW,KAAK,MAAM;MACxD,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,6CAA6C;IACrF;EACF;AAKA,WAAS,MAAM,KAAc;AAC3B,YAAyB,IAAI,UAAW,YAAY;MAClD,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,uCAAuC;IAC/E;EACF;AAKA,WAAS,sBAAsB,KAAc;AAC3C,YAAQ,IAAI,UAAU,MAAM;MAC1B,KAAK;AACH,eAAO,MAAM,GAAG;MAClB,KAAK;AACH,eAAO,MAAM,GAAG;MAClB,KAAK;AACH,eAAO,MAAM,GAAG;MAClB,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,sCAAsC;IAC9E;EACF;AAEA,WAAS,YAAY,KAAY;AAC/B,WAAO,eAAe;EACxB;AAEA,WAAS,aAAa,KAAY;AAChC,WAAO,YAAY,GAAG,KAAK,IAAI,SAAS;EAC1C;AAEA,WAAS,YAAY,KAAY;AAC/B,WAAO,YAAY,GAAG,KAAK,IAAI,SAAS;EAC1C;AAKA,WAAS,YAAS;AAChB,WAAO,KAAK,MAAM,KAAK,IAAG,IAAK,GAAI;EACrC;AAkCA,iBAAsB,cACpB,SACA,KACA,KACA,OACA,aACA,YAAsC;AAEtC,UAAM,aAAa,YAAO,QAAP,YAAO,SAAA,SAAP,QAAS;AAC5B,UAAM,YAAY,YAAO,QAAP,YAAO,SAAA,SAAP,QAAS;AAE3B,QAAI,CAAC,aAAa,UAAU,GAAG;AAC7B,YAAM,IAAI,UAAU,kDAAkD;IACxE;AAEA,QAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,YAAM,IAAI,UAAU,gDAAgD;IACtE;AAEA,QAAI,UAAU,gBAAgB,MAAM;AAClC,YAAM,IAAI,UAAU,8CAA8C;IACpE;AAEA,QAAI,OAAO,QAAQ,UAAU;AAC3B,YAAM,IAAI,UAAU,wBAAwB;IAC9C;AAEA,QAAI,OAAO,QAAQ,UAAU;AAC3B,YAAM,IAAI,UAAU,wBAAwB;IAC9C;AAEA,QAAI,UAAU,UAAa,OAAO,UAAU,UAAU;AACpD,YAAM,IAAI,UAAU,uCAAuC;IAC7D;AAEA,QAAI,gBAAgB,UAAa,OAAO,gBAAgB,UAAU;AAChE,YAAM,IAAI,UAAU,6CAA6C;IACnE;AAEA,QACE,eAAe,WACd,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,IAClF;AACA,YAAM,IAAI,UAAU,gCAAgC;IACtD;AAEA,WAAO,IACL;MACE,KAAK,sBAAsB,UAAU;MACrC,KAAK;MACL,KAAK,MAAM,UAAU,SAAS;OAC/B,OAAA,OAAA,OAAA,OAAA,CAAA,GAEI,UAAU,GAAA;MACb,KAAK,UAAS;MACd,KAAK,OAAO,WAAU;MACtB;MACA;MACA;MACA,KAAK,cAAc,KAAK,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,WAAW,CAAC,CAAC,IAAI;IAAS,CAAA,GAE9F,UAAU;EAEd;AAKA,iBAAe,UAAU,KAAc;AACrC,UAAM,EAAE,KAAK,GAAG,GAAG,GAAG,GAAG,IAAG,IAAK,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AACzE,WAAO,EAAE,KAAK,KAAK,GAAG,GAAG,GAAG,EAAC;EAC/B;AAcA,iBAAsB,gBACpB,KACA,SAAgC;;AAEhC,QAAI;AAEJ,QAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,GAAG;AAC/C,YAAM,IAAI,UAAU,kCAAkC;IACxD;AAEA,YAAQ,KAAK;MACX,KAAK;AACH,oBAAY;UACV,MAAM;UACN,MAAM;UACN,eAAe;UACf,gBAAgB,IAAI,WAAW,CAAC,GAAM,GAAM,CAAI,CAAC;;AAEnD;MACF,KAAK;AACH,oBAAY;UACV,MAAM;UACN,MAAM;UACN,eAAe;UACf,gBAAgB,IAAI,WAAW,CAAC,GAAM,GAAM,CAAI,CAAC;;AAEnD;MACF,KAAK;AACH,oBAAY,EAAE,MAAM,SAAS,YAAY,QAAO;AAChD;MACF,KAAK;AACH,oBAAY,EAAE,MAAM,UAAS;AAC7B;MACF;AACE,cAAM,IAAI,0BAAyB;IACvC;AAEA,WACE,OAAO,OAAO,YAAY,YAAW,KAAA,YAAO,QAAP,YAAO,SAAA,SAAP,QAAS,iBAAW,QAAA,OAAA,SAAA,KAAI,OAAO,CAAC,QAAQ,QAAQ,CAAC;EAE1F;;;AC1Ye,WAAR,YAA6B;AACnC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACvC,YAAMC,WAAU,WAAW,UAAU,KAAK,SAAS,CAAC;AAEpD,MAAAA,SAAQ,kBAAkB,MAAMA,SAAQ,OAAO,kBAAkB,YAAY,EAAE,SAAS,SAAQ,CAAC;AAEjG,MAAAA,SAAQ,UAAU,CAAC,UAAU;AAC5B,eAAO,KAAK;AAAA,MACb;AAEA,MAAAA,SAAQ,YAAY,CAAC,UAAU;AAC9B,cAAM,KAAK,MAAM,OAAO;AACxB,gBAAQ;AAAA,UACP,KAAK,SAAS,OAAO,KAAK;AACzB,mBAAO,IAAI,QAAQ,CAACC,UAASC,YAAW;AACvC,oBAAM,KAAK,GAAG,YAAY,YAAY,aAAa,EAAC,YAAY,SAAQ,CAAC;AACzE,oBAAM,cAAc,GAAG,YAAY,UAAU;AAC7C,iBAAG,aAAa,MAAM;AACrB,gBAAAD,SAAQ;AAAA,cACT;AACA,iBAAG,UAAUC;AACb,0BAAY,IAAI,OAAO,GAAG;AAAA,YAC3B,CAAC;AAAA,UACF;AAAA,UACA,KAAK,SAAS,KAAK;AAClB,mBAAO,IAAI,QAAQ,CAACD,UAASC,YAAW;AACvC,oBAAM,KAAK,GAAG,YAAY,YAAY,UAAU;AAChD,oBAAM,cAAc,GAAG,YAAY,UAAU;AAC7C,oBAAMF,WAAU,YAAY,IAAI,GAAG;AACnC,cAAAA,SAAQ,YAAY,MAAM;AACzB,gBAAAC,SAAQD,SAAQ,MAAM;AAAA,cACvB;AACA,cAAAA,SAAQ,UAAUE;AAClB,iBAAG,UAAUA;AAAA,YACd,CAAC;AAAA,UACF;AAAA,UACA,OAAO,WAAW;AACjB,mBAAO,IAAI,QAAQ,CAACD,UAAQC,YAAW;AACtC,oBAAM,KAAK,GAAG,YAAY,YAAY,WAAW;AACjD,oBAAM,cAAc,GAAG,YAAY,UAAU;AAC7C,oBAAMF,WAAU,YAAY,MAAM;AAClC,cAAAA,SAAQ,YAAY,MAAM;AACzB,gBAAAC,SAAQ;AAAA,cACT;AACA,cAAAD,SAAQ,UAAUE;AAClB,iBAAG,UAAUA;AAAA,YACd,CAAC;AAAA,UACF;AAAA,QACD,CAAC;AAAA,MACF;AAAA,IACD,CAAC;AAAA,EACF;;;AC9Ce,WAAR,OAAwB,SAAS;AAEvC,WAAO,SAAS;AAAA,MACf,MAAM,SAAS,QAAQ;AAAA,MACvB,wBAAwB,SAAS,QAAQ;AAAA,MACzC,gBAAgB,SAAS,QAAQ;AAAA,MACjC,mCAAmC,SAAS,CAAC,CAAC;AAAA;AAAA,IAC/C,CAAC;AAED,WAAO,OAAO,KAAK,SAAS;AAC3B,YAAM,OAAO,MAAM,UAAU;AAC7B,UAAI,UAAU,MAAM,KAAK,IAAI,QAAQ,IAAI;AACzC,UAAI,CAAC,SAAS;AAGZ,YAAI,UAAU,MAAW,gBAAgB,OAAO;AACjD,kBAAU,EAAE,QAAQ,QAAQ,MAAM,QAAQ;AAC1C,cAAM,KAAK,IAAI,OAAO;AAAA,MACvB;AACA,YAAMC,OAAY,IAAI,IAAI,GAAG;AAE7B,UAAI,IAAI,IAAI,WAAW,QAAQ,sBAAsB,GAAG;AACvD,YAAI,SAAS,IAAI;AACjB,YAAI,kBAAkB,mBAAmB,kBAAkB,UAAU;AACpE,iBAAO,IAAI,YAAY,QAAQ,QAAQ,SAAS;AAAA,QACjD,OAAO;AACN,iBAAO,WAAW,QAAQ,QAAQ;AAAA,QACnC;AAAA,MAED,WAAW,IAAI,IAAI,WAAW,QAAQ,cAAc,GAAG;AACtD,cAAM,aAAa,MAAW,cAAc,QAAQ,SAAS,IAAI,KAAK,IAAI,MAAM;AAChF,cAAM,IAAI,KAAK;AAAA,UACd,SAAS;AAAA,YACR,QAAQ;AAAA,UACT;AAAA,QACD,CAAC;AAAA,MAEF,WAAW,IAAI,QAAQ,IAAI,eAAe,GAAG;AAE5C,cAAM,QAAc,aAAa,QAAQA,KAAI,OAAK,QAAQ,KAAK;AAC/D,cAAM,cAAc,IAAI,QAAQ,IAAI,eAAe,EAAE,MAAM,GAAG,EAAE,CAAC;AACjE,cAAM,aAAc,MAAW,cAAc,QAAQ,SAAS,IAAI,KAAK,IAAI,QAAQ,OAAO,WAAW;AACrG,cAAM,IAAI,KAAK;AAAA,UACd,SAAS;AAAA,YACR,iBAAiB,UAAQ;AAAA,YACzB,QAAQ;AAAA,UACT;AAAA,QACD,CAAC;AAAA,MACF;AAEA,UAAIC,YAAW,MAAM,KAAK,GAAG;AAC7B,UAAIA,UAAS,QAAQ,IAAI,YAAY,GAAG;AAEvC,qBAAa,QAAQD,KAAI,OAAK,UAAUC,UAAS,QAAQ,IAAI,YAAY,CAAC;AAAA,MAC3E;AACA,aAAOA;AAAA,IACR;AAAA,EAED;;;AC/De,WAAR,OAAwB,SAC/B;AACI,cAAU,OAAO,OAAO;AAAA,MACpB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,UAAU;AAAA,MACV,OAAO;AAAA,IACX,GAAG,OAAO;AAEV,WAAO,eAAe,KAAK,KAAK,MAAM;AAClC,UAAI,CAAC,IAAI,QAAQ,IAAI,QAAQ,GAAG;AAC5B,cAAM,IAAI,KAAK;AAAA,UACX,SAAS;AAAA,YACL,UAAU,QAAQ,UAAU,QAAQ;AAAA,UACxC;AAAA,QACJ,CAAC;AAAA,MACL;AACA,UAAI,IAAI,WAAS,SAAS,IAAI,WAAS,QAAQ;AAE3C,YAAI,IAAI,QAAQ,OAAO,IAAI,QAAM,YAAY,EAAE,IAAI,gBAAgB,iBAAiB;AAChF,gBAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,cAAI,CAAC,eAAe,YAAY,WAAW,GAAG;AAC1C,kBAAM,IAAI,KAAK;AAAA,cACX,SAAS;AAAA,gBACL,gBAAe,QAAQ;AAAA,cAC3B;AAAA,YACJ,CAAC;AAAA,UACL;AACA,cAAI,OAAO,IAAI,QAAQ,IAAI,cAAc,CAAC,GAAG;AACzC,kBAAM,IAAI,KAAK;AAAA,cACX,MAAM,KAAK,UAAU,IAAI,MAAM,QAAQ,UAAU,QAAQ,KAAK;AAAA,YAClE,CAAC;AAAA,UACL;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,MAAM,MAAM,KAAK,GAAG;AACxB,UAAI,OAAO,OAAO,IAAI,SAAS,IAAI,cAAc,CAAC,GAAG;AACjD,YAAI,UAAU,IAAI,MAAM;AACxB,YAAI,OAAO,MAAM,QAAQ,KAAK;AAC9B,YAAI;AACA,cAAIC,QAAO,KAAK,MAAM,MAAM,QAAQ,OAAO;AAC3C,iBAAO,IAAI,KAAK;AAAA,YACZ,MAAMA;AAAA,UACV,CAAC;AAAA,QACL,SAAQ,GAAG;AAAA,QAEX;AAAA,MACJ;AACA,aAAO;AAAA,IACX;AAAA,EACJ;AASA,MAAM,SAAS;AACf,WAAS,OAAO,aAChB;AACI,WAAO,OAAO,KAAK,WAAW;AAAA,EAClC;AAEA,WAAS,YAAY,aACrB;AACI,WAAO,iBAAiB,KAAK,WAAW;AAAA,EAC5C;;;ACpEe,WAAR,UAA2B,SAAS;AAE1C,WAAO,eAAe,QAAQ,KAAK,MAAM;AACxC,UAAI,MAAM,MAAM,KAAK,GAAG;AACxB,UAAI,CAAC,IAAI,IAAI;AACZ,YAAI,WAAW,OAAO,QAAQ,IAAI,MAAM,KAAK,YAAY;AACxD,gBAAM,QAAQ,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG;AAAA,QACzC,OAAO;AACN,gBAAM,IAAI,MAAM,IAAI,SAAO,OAAK,IAAI,YAAY;AAAA,YAC/C,OAAO;AAAA,UACR,CAAC;AAAA,QACF;AAAA,MACD;AACA,aAAO;AAAA,IACR;AAAA,EAED;;;ACdO,MAAM,WAAW,IAAI,YAC3B,CAAC,OAAO,SAAS;AAChB,QAAI,QAAQ,OAAO,OAAK,KAAK,UAAU,CAAC,CAAC,EAAE,SAAS,GAAG;AACtD,aAAO;AAAA,IACR;AACA,WAAO,MAAM,8BAA8B,MAAM,OAAO;AAAA,EACzD;AAEM,MAAM,cAAc,IAAI,YAC9B,CAAC,UAAU;AACV,QAAI,MAAM,QAAQ,KAAK,KAAK,QAAQ,OAAO,OAAK,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG;AAChF,aAAO;AAAA,IACR,OAAO;AACN,aAAO,MAAM,wCAAuC,OAAM,OAAO;AAAA,IAClE;AAAA,EACD;AASM,MAAM,WAAW;AAAA,IACvB;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,EACjE;AAGO,MAAM,mBAAmB;AAAA,IAC/B;AAAA,IAAQ;AAAA,IAAsB;AAAA,IAAsB;AAAA,IAAoB;AAAA,EACzE;;;ACdA,iBAAO,cAAqC,UAAQ,CAAC,GAAG;AACvD,WAAO,SAAS;AAAA,MACf,QAAQ,SAAS,WAAiB,OAAO,EAAE,WAAW,CAAC;AAAA,MACvD,QAAQ,SAAS,QAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO,EAAE,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAAA,MACtD,4BAA4B;AAAA,IAC7B;AAEA,cAAU,OAAO,OAAO,CAAC,GAAE,gBAAe,OAAO;AACjD,YAAQ,SAAS,QAAQ,OAAO,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAE/D,UAAM,gBAAgB;AACtB,aAAS,aAAaC,MAAK;AAC1B,aAAO;AAAA,IACR;AAKA,UAAM,2BAA2B;AAAA,MAChC,QAAQ,SAAS,MAAM,QAAQ,QAAQ,YAAY,CAAC;AAAA,MACpD,wBAAwB,SAAS,QAAQ;AAAA,MACzC,gBAAgB,SAAS,QAAQ;AAAA,MACjC,mBAAmB,YAAY,QAAQ;AAAA;AAAA,MACvC,UAAU,SAAS,QAAQ;AAAA,MAC3B,uBAAuB,QAAQ,6BAC5B,SAAS,QAAQ,IACjB,YAAY,QAAQ;AAAA,MACvB,kBAAkB,YAAY,YAAY,QAAQ,CAAC;AAAA,MACnD,0BAA0B,QAAQ,6BAC/B,SAAS,YAAY,QAAO,YAAW,gBAAgB,CAAC,IACxD,SAAS,CAAC,CAAC;AAAA,MACd,0BAA0B,SAAS,CAAC,CAAC;AAAA,MACrC,uBAAuB,QAAQ,6BAC5B,SAAS,YAAY,oBAAoB,CAAC,IAC1C,SAAS,CAAC,CAAC;AAAA,MACd,sBAAsB,SAAS,CAAC,CAAC;AAAA,MACjC,yBAAyB,SAAS,CAAC,CAAC;AAAA,MACpC,uCAAuC,SAAS,YAAY,OAAO,CAAC;AAAA,MACpE,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,uCAAuC,SAAS,CAAC,CAAC;AAAA,MAClD,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,6CAA6C,SAAS,YAAY,OAAO,CAAC;AAAA;AAAA,MAC1E,gDAAgD,SAAS,CAAC,CAAC;AAAA,MAC3D,gDAAgD,SAAS,CAAC,CAAC;AAAA,MAC3D,uCAAuC,SAAS,MAAM,GAAG,gBAAgB,CAAC;AAAA,MAC1E,kDAAkD,SAAS,YAAY,OAAO,GAAG,IAAI,YAAY,MAAM,CAAC,CAAC;AAAA,MACzG,0BAA0B,SAAS,MAAM,QAAO,SAAQ,SAAQ,KAAK,CAAC;AAAA,MACtE,uBAAuB,SAAS,MAAM,UAAS,cAAa,aAAa,CAAC;AAAA,MAC1E,kBAAkB,YAAY,CAAC,CAAC;AAAA,MAChC,uBAAuB,SAAS,QAAQ;AAAA,MACxC,0BAA0B,SAAS,CAAC,CAAC;AAAA,MACrC,sBAAsB,SAAS,CAAC,CAAC;AAAA,MACjC,4BAA4B,SAAS,OAAO;AAAA,MAC5C,6BAA6B,SAAS,OAAO;AAAA,MAC7C,iCAAiC,SAAS,OAAO;AAAA,MACjD,eAAe,SAAS,QAAQ;AAAA,MAChC,YAAY,SAAS,QAAQ;AAAA,IAC9B;AAGA,UAAM,YAAkB,IAAI,QAAQ,QAAQ,kCAAkC;AAE9E,UAAMC,YAAW,MAAM,QAAQ,OAAO;AAAA;AAAA;AAAA,MAGrC;AAAA,IACD;AACA,UAAM,gBAAgBA,UAAS;AAC/B,WAAO,eAAe,wBAAwB;AAG9C,WAAO,cAAc,QAAQ,QAAQ,MAAM;AAC3C,WAAO;AAAA,EACR;;;ACvFA,iBAAO,SAAgC,SACvC;AAGC,UAAM,yBAAyB;AAAA,MAC9B,eAAe,SAAS,CAAC,QAAQ,CAAC;AAAA,MAClC,gBAAgB,SAAS,CAAC,CAAC;AAAA,MAC3B,aAAa,SAAS,MAAM,sBAAqB,eAAe,CAAC;AAAA;AAAA,MACjE,kBAAkB,SAAS,MAAM,UAAS,KAAK,CAAC;AAAA,MAChD,UAAU,SAAS,CAAC,UAAU,CAAC;AAAA,MAC/B,aAAa,SAAS,MAAM;AAAA,MAC5B,UAAU,SAAS,QAAQ;AAAA,MAC3B,YAAY,SAAS,QAAQ;AAAA,MAC7B,YAAY,SAAS,QAAQ;AAAA,MAC7B,SAAS,SAAS,QAAQ;AAAA,MAC1B,UAAU,SAAS,UAAU,IAAI,SAAS,MAAM,CAAC,CAAC;AAAA,MAClD,MAAM,SAAS,UAAU,IAAI,SAAS,UAAU,CAAC,CAAC;AAAA,MAClD,uBAAuB,SAAS,QAAQ;AAAA,MACxC,cAAc,SAAS,MAAM;AAAA,MAC7B,8BAA8B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MACzD,iCAAiC,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC5D,iCAAiC,SAAS,MAAM,GAAG,QAAQ,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACzG,8BAA8B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MACzD,iCAAiC,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC5D,iCAAiC,SAAS,MAAM,GAAG,QAAQ,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACzG,4BAA4B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MACvD,+BAA+B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC1D,+BAA+B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC1D,4BAA4B,SAAS,MAAM,GAAG,gBAAgB,CAAC;AAAA,MAC/D,iCAAiC,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC5D,iBAAiB,SAAS,MAAM;AAAA,MAChC,mBAAmB,SAAS,OAAO;AAAA,MACnC,oBAAoB,SAAS,CAAC,MAAM,CAAC;AAAA,MACrC,oBAAoB,SAAS,CAAC,QAAQ,CAAC;AAAA,MACvC,cAAc,SAAS,CAAC,QAAQ,CAAC;AAAA,IAClC;AAEA,WAAO,SAAS;AAAA,MACf,QAAQ,SAAS,WAAiB,OAAO,EAAE,WAAW,CAAC;AAAA,MACvD,uBAAuB;AAAA,MACvB,aAAa;AAAA,IACd,CAAC;AAED,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO,EAAE,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAAA,MACtD,aAAa;AAAA,QACZ,eAAe,CAAE,WAAW,UAAU,SAAS,IAAK;AAAA,MACrD;AAAA,IACD;AAEA,cAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,OAAO;AACnD,YAAQ,SAAS,QAAQ,OAAO,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAC/D,QAAI,CAAC,QAAQ,aAAa;AACzB,cAAQ,cAAc,CAAC;AAAA,IACxB;AACA,QAAI,CAAC,QAAQ,YAAY,eAAe;AACvC,cAAQ,YAAY,gBAAgB,CAAE,WAAW,UAAU,SAAS,IAAK;AAAA,IAC1E;AACA,QAAIC,YAAW,MAAM,QAAQ,OAC3B,KAAK,QAAQ,uBAAuB;AAAA,MACpC,MAAM,QAAQ;AAAA,IACf,CAAC;AACF,QAAI,OAAOA,UAAS;AACpB,QAAI,CAAC,KAAK,WAAW;AACpB,YAAY,WAAW,mFAAmFA,SAAQ;AAAA,IACnH;AACA,YAAQ,cAAc,OAAO,OAAO,QAAQ,aAAa,IAAI;AAC7D,WAAO,QAAQ;AAAA,EAChB;;;AC/Ee,WAAR,UAA2B,MAAM;AACvC,QAAI;AACJ,QAAI,OAAO,iBAAiB,aAAa;AACxC,cAAQ;AAAA,QACP,KAAK,CAAC,SAAgB,KAAK,MAAM,aAAa,QAAQ,gBAAc,OAAK,MAAI,IAAI,CAAC;AAAA,QAClF,KAAK,CAAC,MAAM,UAAU,aAAa,QAAQ,gBAAc,OAAK,MAAI,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QAC7F,KAAK,CAAC,SAAgB,aAAa,QAAQ,gBAAc,OAAK,MAAI,IAAI,MAAI;AAAA,MAC3E;AAAA,IACD,OAAO;AACN,UAAI,WAAW,oBAAI,IAAI;AACvB,cAAQ;AAAA,QACP,KAAK,CAAC,SAAgB,KAAK,MAAM,SAAS,IAAI,gBAAc,OAAK,MAAI,IAAI,KAAG,IAAI;AAAA,QAChF,KAAK,CAAC,MAAM,UAAU,SAAS,IAAI,gBAAc,OAAK,MAAI,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QACrF,KAAK,CAAC,SAAgB,SAAS,IAAI,gBAAc,OAAK,MAAI,IAAI;AAAA,MAC/D;AAAA,IACD;AACA,WAAO;AAAA,EACR;;;ACjBO,MAAMC,WAAU,IAAI,YAAY;AAChC,MAAMC,WAAU,IAAI,YAAY;AACvC,MAAM,YAAY,KAAK;AAChB,WAAS,UAAU,SAAS;AAC/B,UAAM,OAAO,QAAQ,OAAO,CAAC,KAAK,EAAE,OAAO,MAAM,MAAM,QAAQ,CAAC;AAChE,UAAMC,OAAM,IAAI,WAAW,IAAI;AAC/B,QAAI,IAAI;AACR,eAAW,UAAU,SAAS;AAC1B,MAAAA,KAAI,IAAI,QAAQ,CAAC;AACjB,WAAK,OAAO;AAAA,IAChB;AACA,WAAOA;AAAA,EACX;AAoBO,WAAS,OAAO,QAAQ;AAC3B,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,YAAM,OAAO,OAAO,WAAW,CAAC;AAChC,UAAI,OAAO,KAAK;AACZ,cAAM,IAAI,UAAU,0CAA0C;AAAA,MAClE;AACA,YAAM,CAAC,IAAI;AAAA,IACf;AACA,WAAO;AAAA,EACX;;;AC/BO,WAAS,aAAa,SAAS;AAClC,QAAI,WAAW,YAAY;AACvB,aAAO,WAAW,WAAW,OAAO;AAAA,IACxC;AACA,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,YAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,IAClC;AACA,WAAO;AAAA,EACX;;;ACnBO,WAAS,OAAO,OAAO;AAC1B,QAAI,WAAW,YAAY;AACvB,aAAO,WAAW,WAAW,OAAO,UAAU,WAAW,QAAQC,SAAQ,OAAO,KAAK,GAAG;AAAA,QACpF,UAAU;AAAA,MACd,CAAC;AAAA,IACL;AACA,QAAI,UAAU;AACd,QAAI,mBAAmB,YAAY;AAC/B,gBAAUA,SAAQ,OAAO,OAAO;AAAA,IACpC;AACA,cAAU,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACtD,QAAI;AACA,aAAO,aAAa,OAAO;AAAA,IAC/B,QACM;AACF,YAAM,IAAI,UAAU,mDAAmD;AAAA,IAC3E;AAAA,EACJ;;;ACnBA,MAAM,WAAW,CAAC,MAAM,OAAO,qBAAqB,IAAI,UAAU,kDAAkD,IAAI,YAAY,IAAI,EAAE;AAC1I,MAAM,cAAc,CAAC,WAAW,SAAS,UAAU,SAAS;AAC5D,WAAS,cAAc,MAAM;AACzB,WAAO,SAAS,KAAK,KAAK,MAAM,CAAC,GAAG,EAAE;AAAA,EAC1C;AACA,WAAS,gBAAgB,WAAW,UAAU;AAC1C,UAAM,SAAS,cAAc,UAAU,IAAI;AAC3C,QAAI,WAAW;AACX,YAAM,SAAS,OAAO,QAAQ,IAAI,gBAAgB;AAAA,EAC1D;AACA,WAAS,cAAc,KAAK;AACxB,YAAQ,KAAK;AAAA,MACT,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX;AACI,cAAM,IAAI,MAAM,aAAa;AAAA,IACrC;AAAA,EACJ;AACA,WAAS,WAAW,KAAK,OAAO;AAC5B,QAAI,SAAS,CAAC,IAAI,OAAO,SAAS,KAAK,GAAG;AACtC,YAAM,IAAI,UAAU,sEAAsE,KAAK,GAAG;AAAA,IACtG;AAAA,EACJ;AACO,WAAS,kBAAkB,KAAK,KAAK,OAAO;AAC/C,YAAQ,KAAK;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,MAAM;AAClC,gBAAM,SAAS,MAAM;AACzB,wBAAgB,IAAI,WAAW,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACzD;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,mBAAmB;AAC/C,gBAAM,SAAS,mBAAmB;AACtC,wBAAgB,IAAI,WAAW,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACzD;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,SAAS;AACrC,gBAAM,SAAS,SAAS;AAC5B,wBAAgB,IAAI,WAAW,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACzD;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,SAAS;AACrC,gBAAM,SAAS,SAAS;AAC5B;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,aAAa;AACd,YAAI,CAAC,YAAY,IAAI,WAAW,GAAG;AAC/B,gBAAM,SAAS,GAAG;AACtB;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,OAAO;AACnC,gBAAM,SAAS,OAAO;AAC1B,cAAM,WAAW,cAAc,GAAG;AAClC,cAAM,SAAS,IAAI,UAAU;AAC7B,YAAI,WAAW;AACX,gBAAM,SAAS,UAAU,sBAAsB;AACnD;AAAA,MACJ;AAAA,MACA;AACI,cAAM,IAAI,UAAU,2CAA2C;AAAA,IACvE;AACA,eAAW,KAAK,KAAK;AAAA,EACzB;;;ACjFA,WAAS,QAAQ,KAAK,WAAW,OAAO;AACpC,YAAQ,MAAM,OAAO,OAAO;AAC5B,QAAI,MAAM,SAAS,GAAG;AAClB,YAAM,OAAO,MAAM,IAAI;AACvB,aAAO,eAAe,MAAM,KAAK,IAAI,CAAC,QAAQ,IAAI;AAAA,IACtD,WACS,MAAM,WAAW,GAAG;AACzB,aAAO,eAAe,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC;AAAA,IACjD,OACK;AACD,aAAO,WAAW,MAAM,CAAC,CAAC;AAAA,IAC9B;AACA,QAAI,UAAU,MAAM;AAChB,aAAO,aAAa,MAAM;AAAA,IAC9B,WACS,OAAO,WAAW,cAAc,OAAO,MAAM;AAClD,aAAO,sBAAsB,OAAO,IAAI;AAAA,IAC5C,WACS,OAAO,WAAW,YAAY,UAAU,MAAM;AACnD,UAAI,OAAO,aAAa,MAAM;AAC1B,eAAO,4BAA4B,OAAO,YAAY,IAAI;AAAA,MAC9D;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACO,MAAM,kBAAkB,CAAC,WAAW,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,KAAK;AACtF,MAAM,UAAU,CAAC,KAAK,WAAW,UAAU,QAAQ,eAAe,GAAG,uBAAuB,QAAQ,GAAG,KAAK;;;AC1B5G,MAAM,YAAN,cAAwB,MAAM;AAAA,IACjC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYC,UAAS,SAAS;AAC1B,YAAMA,UAAS,OAAO;AACtB,WAAK,OAAO,KAAK,YAAY;AAC7B,YAAM,oBAAoB,MAAM,KAAK,WAAW;AAAA,IACpD;AAAA,EACJ;AACO,MAAM,2BAAN,cAAuC,UAAU;AAAA,IACpD,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAYA,UAAS,SAAS,QAAQ,eAAe,SAAS,eAAe;AACzE,YAAMA,UAAS,EAAE,OAAO,EAAE,OAAO,QAAQ,QAAQ,EAAE,CAAC;AACpD,WAAK,QAAQ;AACb,WAAK,SAAS;AACd,WAAK,UAAU;AAAA,IACnB;AAAA,EACJ;AACO,MAAM,aAAN,cAAyB,UAAU;AAAA,IACtC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAYA,UAAS,SAAS,QAAQ,eAAe,SAAS,eAAe;AACzE,YAAMA,UAAS,EAAE,OAAO,EAAE,OAAO,QAAQ,QAAQ,EAAE,CAAC;AACpD,WAAK,QAAQ;AACb,WAAK,SAAS;AACd,WAAK,UAAU;AAAA,IACnB;AAAA,EACJ;AACO,MAAM,oBAAN,cAAgC,UAAU;AAAA,IAC7C,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AACO,MAAM,mBAAN,cAA+B,UAAU;AAAA,IAC5C,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AAYO,MAAM,aAAN,cAAyB,UAAU;AAAA,IACtC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AACO,MAAM,aAAN,cAAyB,UAAU;AAAA,IACtC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AAKO,MAAM,cAAN,cAA0B,UAAU;AAAA,IACvC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AACO,MAAM,oBAAN,cAAgC,UAAU;AAAA,IAC7C,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYC,WAAU,mDAAmD,SAAS;AAC9E,YAAMA,UAAS,OAAO;AAAA,IAC1B;AAAA,EACJ;AACO,MAAM,2BAAN,cAAuC,UAAU;AAAA,IACpD,CAAC,OAAO,aAAa;AAAA,IACrB,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYA,WAAU,wDAAwD,SAAS;AACnF,YAAMA,UAAS,OAAO;AAAA,IAC1B;AAAA,EACJ;AAQO,MAAM,iCAAN,cAA6C,UAAU;AAAA,IAC1D,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYC,WAAU,iCAAiC,SAAS;AAC5D,YAAMA,UAAS,OAAO;AAAA,IAC1B;AAAA,EACJ;;;AC7FO,MAAMC,eAAc,CAAC,QAAQ;AAChC,QAAI,MAAM,OAAO,WAAW,MAAM;AAC9B,aAAO;AACX,QAAI;AACA,aAAO,eAAe;AAAA,IAC1B,QACM;AACF,aAAO;AAAA,IACX;AAAA,EACJ;AACO,MAAM,cAAc,CAAC,QAAQ,MAAM,OAAO,WAAW,MAAM;AAC3D,MAAM,YAAY,CAAC,QAAQA,aAAY,GAAG,KAAK,YAAY,GAAG;;;ACT9D,WAAS,gBAAgB,OAAO,OAAO,YAAY;AACtD,QAAI;AACA,aAAO,OAAO,KAAK;AAAA,IACvB,QACM;AACF,YAAM,IAAI,WAAW,kCAAkC,KAAK,EAAE;AAAA,IAClE;AAAA,EACJ;;;ACdA,MAAM,eAAe,CAAC,UAAU,OAAO,UAAU,YAAY,UAAU;AAChE,WAAS,SAAS,OAAO;AAC5B,QAAI,CAAC,aAAa,KAAK,KAAK,OAAO,UAAU,SAAS,KAAK,KAAK,MAAM,mBAAmB;AACrF,aAAO;AAAA,IACX;AACA,QAAI,OAAO,eAAe,KAAK,MAAM,MAAM;AACvC,aAAO;AAAA,IACX;AACA,QAAI,QAAQ;AACZ,WAAO,OAAO,eAAe,KAAK,MAAM,MAAM;AAC1C,cAAQ,OAAO,eAAe,KAAK;AAAA,IACvC;AACA,WAAO,OAAO,eAAe,KAAK,MAAM;AAAA,EAC5C;AACO,WAAS,cAAc,SAAS;AACnC,UAAM,UAAU,QAAQ,OAAO,OAAO;AACtC,QAAI,QAAQ,WAAW,KAAK,QAAQ,WAAW,GAAG;AAC9C,aAAO;AAAA,IACX;AACA,QAAI;AACJ,eAAW,UAAU,SAAS;AAC1B,YAAM,aAAa,OAAO,KAAK,MAAM;AACrC,UAAI,CAAC,OAAO,IAAI,SAAS,GAAG;AACxB,cAAM,IAAI,IAAI,UAAU;AACxB;AAAA,MACJ;AACA,iBAAW,aAAa,YAAY;AAChC,YAAI,IAAI,IAAI,SAAS,GAAG;AACpB,iBAAO;AAAA,QACX;AACA,YAAI,IAAI,SAAS;AAAA,MACrB;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACO,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,KAAK,OAAO,IAAI,QAAQ;AAC3D,MAAM,eAAe,CAAC,QAAQ,IAAI,QAAQ,UAC3C,IAAI,QAAQ,SAAS,OAAO,IAAI,SAAS,YAAa,OAAO,IAAI,MAAM;AACtE,MAAM,cAAc,CAAC,QAAQ,IAAI,QAAQ,SAAS,IAAI,MAAM,UAAa,IAAI,SAAS;AACtF,MAAM,cAAc,CAAC,QAAQ,IAAI,QAAQ,SAAS,OAAO,IAAI,MAAM;;;ACpCnE,WAAS,eAAe,KAAK,KAAK;AACrC,QAAI,IAAI,WAAW,IAAI,KAAK,IAAI,WAAW,IAAI,GAAG;AAC9C,YAAM,EAAE,cAAc,IAAI,IAAI;AAC9B,UAAI,OAAO,kBAAkB,YAAY,gBAAgB,MAAM;AAC3D,cAAM,IAAI,UAAU,GAAG,GAAG,uDAAuD;AAAA,MACrF;AAAA,IACJ;AAAA,EACJ;AACA,WAASC,iBAAgB,KAAK,WAAW;AACrC,UAAM,OAAO,OAAO,IAAI,MAAM,EAAE,CAAC;AACjC,YAAQ,KAAK;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,OAAO;AAAA,MAChC,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,WAAW,YAAY,SAAS,IAAI,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE;AAAA,MACjF,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,oBAAoB;AAAA,MAC7C,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,SAAS,YAAY,UAAU,WAAW;AAAA,MACnE,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,UAAU;AAAA,MAC7B,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,IAAI;AAAA,MACvB;AACI,cAAM,IAAI,iBAAiB,OAAO,GAAG,6DAA6D;AAAA,IAC1G;AAAA,EACJ;AACA,iBAAe,UAAU,KAAK,KAAK,OAAO;AACtC,QAAI,eAAe,YAAY;AAC3B,UAAI,CAAC,IAAI,WAAW,IAAI,GAAG;AACvB,cAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,aAAa,cAAc,CAAC;AAAA,MACtF;AACA,aAAO,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC,IAAI,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;AAAA,IAC7G;AACA,sBAAkB,KAAK,KAAK,KAAK;AACjC,WAAO;AAAA,EACX;AAOA,iBAAsB,OAAO,KAAK,KAAK,WAAW,MAAM;AACpD,UAAM,YAAY,MAAM,UAAU,KAAK,KAAK,QAAQ;AACpD,mBAAe,KAAK,SAAS;AAC7B,UAAM,YAAYC,iBAAgB,KAAK,UAAU,SAAS;AAC1D,QAAI;AACA,aAAO,MAAM,OAAO,OAAO,OAAO,WAAW,WAAW,WAAW,IAAI;AAAA,IAC3E,QACM;AACF,aAAO;AAAA,IACX;AAAA,EACJ;;;AClEA,MAAM,iBAAiB;AACvB,WAAS,cAAc,KAAK;AACxB,QAAI;AACJ,QAAI;AACJ,YAAQ,IAAI,KAAK;AAAA,MACb,KAAK,OAAO;AACR,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,IAAI,IAAI;AAC5B,wBAAY,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ;AAC3C;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA,KAAK,OAAO;AACR,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,WAAW,MAAM,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,GAAG;AAChE,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,qBAAqB,MAAM,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,GAAG;AAC1E,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY;AAAA,cACR,MAAM;AAAA,cACN,MAAM,OAAO,SAAS,IAAI,IAAI,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;AAAA,YACrD;AACA,wBAAY,IAAI,IAAI,CAAC,WAAW,WAAW,IAAI,CAAC,WAAW,SAAS;AACpE;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA,KAAK,MAAM;AACP,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY;AAAA,cACR,MAAM;AAAA,cACN,YAAY,EAAE,OAAO,SAAS,OAAO,SAAS,OAAO,QAAQ,EAAE,IAAI,GAAG;AAAA,YAC1E;AACA,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,QAAQ,YAAY,IAAI,IAAI;AAChD,wBAAY,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC;AACtC;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA,KAAK,OAAO;AACR,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,UAAU;AAC9B,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,IAAI,IAAI;AAC5B,wBAAY,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC;AACtC;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA;AACI,cAAM,IAAI,iBAAiB,6DAA6D;AAAA,IAChG;AACA,WAAO,EAAE,WAAW,UAAU;AAAA,EAClC;AACA,iBAAsB,SAAS,KAAK;AAChC,QAAI,CAAC,IAAI,KAAK;AACV,YAAM,IAAI,UAAU,0DAA0D;AAAA,IAClF;AACA,UAAM,EAAE,WAAW,UAAU,IAAI,cAAc,GAAG;AAClD,UAAM,UAAU,EAAE,GAAG,IAAI;AACzB,QAAI,QAAQ,QAAQ,OAAO;AACvB,aAAO,QAAQ;AAAA,IACnB;AACA,WAAO,QAAQ;AACf,WAAO,OAAO,OAAO,UAAU,OAAO,SAAS,WAAW,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,QAAQ,OAAO,IAAI,WAAW,SAAS;AAAA,EACrI;;;ACtGA,MAAM,iBAAiB;AACvB,MAAI;AACJ,MAAM,YAAY,OAAO,KAAK,KAAK,KAAK,SAAS,UAAU;AACvD,cAAU,oBAAI,QAAQ;AACtB,QAAI,SAAS,MAAM,IAAI,GAAG;AAC1B,QAAI,SAAS,GAAG,GAAG;AACf,aAAO,OAAO,GAAG;AAAA,IACrB;AACA,UAAM,YAAY,MAAM,SAAS,EAAE,GAAG,KAAK,IAAI,CAAC;AAChD,QAAI;AACA,aAAO,OAAO,GAAG;AACrB,QAAI,CAAC,QAAQ;AACT,YAAM,IAAI,KAAK,EAAE,CAAC,GAAG,GAAG,UAAU,CAAC;AAAA,IACvC,OACK;AACD,aAAO,GAAG,IAAI;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AACA,MAAM,kBAAkB,CAAC,WAAW,QAAQ;AACxC,cAAU,oBAAI,QAAQ;AACtB,QAAI,SAAS,MAAM,IAAI,SAAS;AAChC,QAAI,SAAS,GAAG,GAAG;AACf,aAAO,OAAO,GAAG;AAAA,IACrB;AACA,UAAM,WAAW,UAAU,SAAS;AACpC,UAAM,cAAc,WAAW,OAAO;AACtC,QAAI;AACJ,QAAI,UAAU,sBAAsB,UAAU;AAC1C,cAAQ,KAAK;AAAA,QACT,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD;AAAA,QACJ;AACI,gBAAM,IAAI,UAAU,cAAc;AAAA,MAC1C;AACA,kBAAY,UAAU,YAAY,UAAU,mBAAmB,aAAa,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AAAA,IAC9G;AACA,QAAI,UAAU,sBAAsB,WAAW;AAC3C,UAAI,QAAQ,WAAW,QAAQ,WAAW;AACtC,cAAM,IAAI,UAAU,cAAc;AAAA,MACtC;AACA,kBAAY,UAAU,YAAY,UAAU,mBAAmB,aAAa;AAAA,QACxE,WAAW,WAAW;AAAA,MAC1B,CAAC;AAAA,IACL;AACA,YAAQ,UAAU,mBAAmB;AAAA,MACjC,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,aAAa;AACd,YAAI,QAAQ,UAAU,kBAAkB,YAAY,GAAG;AACnD,gBAAM,IAAI,UAAU,cAAc;AAAA,QACtC;AACA,oBAAY,UAAU,YAAY,UAAU,mBAAmB,aAAa;AAAA,UACxE,WAAW,WAAW;AAAA,QAC1B,CAAC;AAAA,MACL;AAAA,IACJ;AACA,QAAI,UAAU,sBAAsB,OAAO;AACvC,UAAI;AACJ,cAAQ,KAAK;AAAA,QACT,KAAK;AACD,iBAAO;AACP;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD,iBAAO;AACP;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD,iBAAO;AACP;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD,iBAAO;AACP;AAAA,QACJ;AACI,gBAAM,IAAI,UAAU,cAAc;AAAA,MAC1C;AACA,UAAI,IAAI,WAAW,UAAU,GAAG;AAC5B,eAAO,UAAU,YAAY;AAAA,UACzB,MAAM;AAAA,UACN;AAAA,QACJ,GAAG,aAAa,WAAW,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC;AAAA,MACxD;AACA,kBAAY,UAAU,YAAY;AAAA,QAC9B,MAAM,IAAI,WAAW,IAAI,IAAI,YAAY;AAAA,QACzC;AAAA,MACJ,GAAG,aAAa,CAAC,WAAW,WAAW,MAAM,CAAC;AAAA,IAClD;AACA,QAAI,UAAU,sBAAsB,MAAM;AACtC,YAAM,OAAO,oBAAI,IAAI;AAAA,QACjB,CAAC,cAAc,OAAO;AAAA,QACtB,CAAC,aAAa,OAAO;AAAA,QACrB,CAAC,aAAa,OAAO;AAAA,MACzB,CAAC;AACD,YAAM,aAAa,KAAK,IAAI,UAAU,sBAAsB,UAAU;AACtE,UAAI,CAAC,YAAY;AACb,cAAM,IAAI,UAAU,cAAc;AAAA,MACtC;AACA,YAAM,gBAAgB,EAAE,OAAO,SAAS,OAAO,SAAS,OAAO,QAAQ;AACvE,UAAI,cAAc,GAAG,KAAK,eAAe,cAAc,GAAG,GAAG;AACzD,oBAAY,UAAU,YAAY;AAAA,UAC9B,MAAM;AAAA,UACN;AAAA,QACJ,GAAG,aAAa,CAAC,WAAW,WAAW,MAAM,CAAC;AAAA,MAClD;AACA,UAAI,IAAI,WAAW,SAAS,GAAG;AAC3B,oBAAY,UAAU,YAAY;AAAA,UAC9B,MAAM;AAAA,UACN;AAAA,QACJ,GAAG,aAAa,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AAAA,MAClD;AAAA,IACJ;AACA,QAAI,CAAC,WAAW;AACZ,YAAM,IAAI,UAAU,cAAc;AAAA,IACtC;AACA,QAAI,CAAC,QAAQ;AACT,YAAM,IAAI,WAAW,EAAE,CAAC,GAAG,GAAG,UAAU,CAAC;AAAA,IAC7C,OACK;AACD,aAAO,GAAG,IAAI;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AACA,iBAAsB,aAAa,KAAK,KAAK;AACzC,QAAI,eAAe,YAAY;AAC3B,aAAO;AAAA,IACX;AACA,QAAIC,aAAY,GAAG,GAAG;AAClB,aAAO;AAAA,IACX;AACA,QAAI,YAAY,GAAG,GAAG;AAClB,UAAI,IAAI,SAAS,UAAU;AACvB,eAAO,IAAI,OAAO;AAAA,MACtB;AACA,UAAI,iBAAiB,OAAO,OAAO,IAAI,gBAAgB,YAAY;AAC/D,YAAI;AACA,iBAAO,gBAAgB,KAAK,GAAG;AAAA,QACnC,SACO,KAAK;AACR,cAAI,eAAe,WAAW;AAC1B,kBAAM;AAAA,UACV;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,MAAM,IAAI,OAAO,EAAE,QAAQ,MAAM,CAAC;AACtC,aAAO,UAAU,KAAK,KAAK,GAAG;AAAA,IAClC;AACA,QAAI,MAAM,GAAG,GAAG;AACZ,UAAI,IAAI,GAAG;AACP,eAAO,OAAO,IAAI,CAAC;AAAA,MACvB;AACA,aAAO,UAAU,KAAK,KAAK,KAAK,IAAI;AAAA,IACxC;AACA,UAAM,IAAI,MAAM,aAAa;AAAA,EACjC;;;AC9IA,iBAAsB,UAAU,KAAK,KAAK,SAAS;AAC/C,QAAI,CAAC,SAAS,GAAG,GAAG;AAChB,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC/C;AACA,QAAI;AACJ,YAAQ,IAAI;AACZ,YAAQ,SAAS,eAAe,IAAI;AACpC,YAAQ,IAAI,KAAK;AAAA,MACb,KAAK;AACD,YAAI,OAAO,IAAI,MAAM,YAAY,CAAC,IAAI,GAAG;AACrC,gBAAM,IAAI,UAAU,yCAAyC;AAAA,QACjE;AACA,eAAO,OAAgB,IAAI,CAAC;AAAA,MAChC,KAAK;AACD,YAAI,SAAS,OAAO,IAAI,QAAQ,QAAW;AACvC,gBAAM,IAAI,iBAAiB,oEAAoE;AAAA,QACnG;AACA,eAAO,SAAS,EAAE,GAAG,KAAK,KAAK,IAAI,CAAC;AAAA,MACxC,KAAK,OAAO;AACR,YAAI,OAAO,IAAI,QAAQ,YAAY,CAAC,IAAI,KAAK;AACzC,gBAAM,IAAI,UAAU,2CAA2C;AAAA,QACnE;AACA,YAAI,QAAQ,UAAa,QAAQ,IAAI,KAAK;AACtC,gBAAM,IAAI,UAAU,uCAAuC;AAAA,QAC/D;AACA,eAAO,SAAS,EAAE,GAAG,KAAK,IAAI,CAAC;AAAA,MACnC;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AACD,eAAO,SAAS,EAAE,GAAG,KAAK,KAAK,IAAI,CAAC;AAAA,MACxC;AACI,cAAM,IAAI,iBAAiB,8CAA8C;AAAA,IACjF;AAAA,EACJ;;;ACvDO,WAAS,aAAa,KAAK,mBAAmB,kBAAkB,iBAAiB,YAAY;AAChG,QAAI,WAAW,SAAS,UAAa,iBAAiB,SAAS,QAAW;AACtE,YAAM,IAAI,IAAI,gEAAgE;AAAA,IAClF;AACA,QAAI,CAAC,mBAAmB,gBAAgB,SAAS,QAAW;AACxD,aAAO,oBAAI,IAAI;AAAA,IACnB;AACA,QAAI,CAAC,MAAM,QAAQ,gBAAgB,IAAI,KACnC,gBAAgB,KAAK,WAAW,KAChC,gBAAgB,KAAK,KAAK,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,CAAC,GAAG;AACvF,YAAM,IAAI,IAAI,uFAAuF;AAAA,IACzG;AACA,QAAI;AACJ,QAAI,qBAAqB,QAAW;AAChC,mBAAa,IAAI,IAAI,CAAC,GAAG,OAAO,QAAQ,gBAAgB,GAAG,GAAG,kBAAkB,QAAQ,CAAC,CAAC;AAAA,IAC9F,OACK;AACD,mBAAa;AAAA,IACjB;AACA,eAAW,aAAa,gBAAgB,MAAM;AAC1C,UAAI,CAAC,WAAW,IAAI,SAAS,GAAG;AAC5B,cAAM,IAAI,iBAAiB,+BAA+B,SAAS,qBAAqB;AAAA,MAC5F;AACA,UAAI,WAAW,SAAS,MAAM,QAAW;AACrC,cAAM,IAAI,IAAI,+BAA+B,SAAS,cAAc;AAAA,MACxE;AACA,UAAI,WAAW,IAAI,SAAS,KAAK,gBAAgB,SAAS,MAAM,QAAW;AACvE,cAAM,IAAI,IAAI,+BAA+B,SAAS,+BAA+B;AAAA,MACzF;AAAA,IACJ;AACA,WAAO,IAAI,IAAI,gBAAgB,IAAI;AAAA,EACvC;;;AChCO,WAAS,mBAAmB,QAAQ,YAAY;AACnD,QAAI,eAAe,WACd,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,KAAK,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AAC/E,YAAM,IAAI,UAAU,IAAI,MAAM,sCAAsC;AAAA,IACxE;AACA,QAAI,CAAC,YAAY;AACb,aAAO;AAAA,IACX;AACA,WAAO,IAAI,IAAI,UAAU;AAAA,EAC7B;;;ACNA,MAAM,MAAM,CAAC,QAAQ,MAAM,OAAO,WAAW;AAC7C,MAAM,eAAe,CAAC,KAAK,KAAK,UAAU;AACtC,QAAI,IAAI,QAAQ,QAAW;AACvB,UAAI;AACJ,cAAQ,OAAO;AAAA,QACX,KAAK;AAAA,QACL,KAAK;AACD,qBAAW;AACX;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AACD,qBAAW;AACX;AAAA,MACR;AACA,UAAI,IAAI,QAAQ,UAAU;AACtB,cAAM,IAAI,UAAU,sDAAsD,QAAQ,gBAAgB;AAAA,MACtG;AAAA,IACJ;AACA,QAAI,IAAI,QAAQ,UAAa,IAAI,QAAQ,KAAK;AAC1C,YAAM,IAAI,UAAU,sDAAsD,GAAG,gBAAgB;AAAA,IACjG;AACA,QAAI,MAAM,QAAQ,IAAI,OAAO,GAAG;AAC5B,UAAI;AACJ,cAAQ,MAAM;AAAA,QACV,MAAK,UAAU,UAAU,UAAU;AAAA,QACnC,KAAK,QAAQ;AAAA,QACb,KAAK,IAAI,SAAS,QAAQ;AACtB,0BAAgB;AAChB;AAAA,QACJ,KAAK,IAAI,WAAW,OAAO;AACvB,0BAAgB;AAChB;AAAA,QACJ,KAAK,0BAA0B,KAAK,GAAG;AACnC,cAAI,CAAC,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,IAAI,GAAG;AAC5C,4BAAgB,UAAU,YAAY,YAAY;AAAA,UACtD,OACK;AACD,4BAAgB;AAAA,UACpB;AACA;AAAA,QACJ,MAAK,UAAU,aAAa,IAAI,WAAW,KAAK;AAC5C,0BAAgB;AAChB;AAAA,QACJ,KAAK,UAAU;AACX,0BAAgB,IAAI,WAAW,KAAK,IAAI,cAAc;AACtD;AAAA,MACR;AACA,UAAI,iBAAiB,IAAI,SAAS,WAAW,aAAa,MAAM,OAAO;AACnE,cAAM,IAAI,UAAU,+DAA+D,aAAa,gBAAgB;AAAA,MACpH;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACA,MAAM,qBAAqB,CAAC,KAAK,KAAK,UAAU;AAC5C,QAAI,eAAe;AACf;AACJ,QAAQ,MAAM,GAAG,GAAG;AAChB,UAAQ,YAAY,GAAG,KAAK,aAAa,KAAK,KAAK,KAAK;AACpD;AACJ,YAAM,IAAI,UAAU,yHAAyH;AAAA,IACjJ;AACA,QAAI,CAAC,UAAU,GAAG,GAAG;AACjB,YAAM,IAAI,UAAU,QAAgB,KAAK,KAAK,aAAa,aAAa,gBAAgB,YAAY,CAAC;AAAA,IACzG;AACA,QAAI,IAAI,SAAS,UAAU;AACvB,YAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,8DAA8D;AAAA,IACjG;AAAA,EACJ;AACA,MAAM,sBAAsB,CAAC,KAAK,KAAK,UAAU;AAC7C,QAAQ,MAAM,GAAG,GAAG;AAChB,cAAQ,OAAO;AAAA,QACX,KAAK;AAAA,QACL,KAAK;AACD,cAAQ,aAAa,GAAG,KAAK,aAAa,KAAK,KAAK,KAAK;AACrD;AACJ,gBAAM,IAAI,UAAU,uDAAuD;AAAA,QAC/E,KAAK;AAAA,QACL,KAAK;AACD,cAAQ,YAAY,GAAG,KAAK,aAAa,KAAK,KAAK,KAAK;AACpD;AACJ,gBAAM,IAAI,UAAU,sDAAsD;AAAA,MAClF;AAAA,IACJ;AACA,QAAI,CAAC,UAAU,GAAG,GAAG;AACjB,YAAM,IAAI,UAAU,QAAgB,KAAK,KAAK,aAAa,aAAa,cAAc,CAAC;AAAA,IAC3F;AACA,QAAI,IAAI,SAAS,UAAU;AACvB,YAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,mEAAmE;AAAA,IACtG;AACA,QAAI,IAAI,SAAS,UAAU;AACvB,cAAQ,OAAO;AAAA,QACX,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,uEAAuE;AAAA,QAC1G,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,0EAA0E;AAAA,MACjH;AAAA,IACJ;AACA,QAAI,IAAI,SAAS,WAAW;AACxB,cAAQ,OAAO;AAAA,QACX,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,wEAAwE;AAAA,QAC3G,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,yEAAyE;AAAA,MAChH;AAAA,IACJ;AAAA,EACJ;AACO,WAAS,aAAa,KAAK,KAAK,OAAO;AAC1C,YAAQ,IAAI,UAAU,GAAG,CAAC,GAAG;AAAA,MACzB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,2BAAmB,KAAK,KAAK,KAAK;AAClC;AAAA,MACJ;AACI,4BAAoB,KAAK,KAAK,KAAK;AAAA,IAC3C;AAAA,EACJ;;;AC9GA,iBAAsB,gBAAgB,KAAK,KAAK,SAAS;AACrD,QAAI,CAAC,SAAS,GAAG,GAAG;AAChB,YAAM,IAAI,WAAW,iCAAiC;AAAA,IAC1D;AACA,QAAI,IAAI,cAAc,UAAa,IAAI,WAAW,QAAW;AACzD,YAAM,IAAI,WAAW,uEAAuE;AAAA,IAChG;AACA,QAAI,IAAI,cAAc,UAAa,OAAO,IAAI,cAAc,UAAU;AAClE,YAAM,IAAI,WAAW,qCAAqC;AAAA,IAC9D;AACA,QAAI,IAAI,YAAY,QAAW;AAC3B,YAAM,IAAI,WAAW,qBAAqB;AAAA,IAC9C;AACA,QAAI,OAAO,IAAI,cAAc,UAAU;AACnC,YAAM,IAAI,WAAW,yCAAyC;AAAA,IAClE;AACA,QAAI,IAAI,WAAW,UAAa,CAAC,SAAS,IAAI,MAAM,GAAG;AACnD,YAAM,IAAI,WAAW,uCAAuC;AAAA,IAChE;AACA,QAAI,aAAa,CAAC;AAClB,QAAI,IAAI,WAAW;AACf,UAAI;AACA,cAAM,kBAAkB,OAAK,IAAI,SAAS;AAC1C,qBAAa,KAAK,MAAMC,SAAQ,OAAO,eAAe,CAAC;AAAA,MAC3D,QACM;AACF,cAAM,IAAI,WAAW,iCAAiC;AAAA,MAC1D;AAAA,IACJ;AACA,QAAI,CAAC,WAAW,YAAY,IAAI,MAAM,GAAG;AACrC,YAAM,IAAI,WAAW,2EAA2E;AAAA,IACpG;AACA,UAAM,aAAa;AAAA,MACf,GAAG;AAAA,MACH,GAAG,IAAI;AAAA,IACX;AACA,UAAM,aAAa,aAAa,YAAY,oBAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,SAAS,MAAM,YAAY,UAAU;AAC3G,QAAI,MAAM;AACV,QAAI,WAAW,IAAI,KAAK,GAAG;AACvB,YAAM,WAAW;AACjB,UAAI,OAAO,QAAQ,WAAW;AAC1B,cAAM,IAAI,WAAW,yEAAyE;AAAA,MAClG;AAAA,IACJ;AACA,UAAM,EAAE,IAAI,IAAI;AAChB,QAAI,OAAO,QAAQ,YAAY,CAAC,KAAK;AACjC,YAAM,IAAI,WAAW,2DAA2D;AAAA,IACpF;AACA,UAAM,aAAa,WAAW,mBAAmB,cAAc,QAAQ,UAAU;AACjF,QAAI,cAAc,CAAC,WAAW,IAAI,GAAG,GAAG;AACpC,YAAM,IAAI,kBAAkB,sDAAsD;AAAA,IACtF;AACA,QAAI,KAAK;AACL,UAAI,OAAO,IAAI,YAAY,UAAU;AACjC,cAAM,IAAI,WAAW,8BAA8B;AAAA,MACvD;AAAA,IACJ,WACS,OAAO,IAAI,YAAY,YAAY,EAAE,IAAI,mBAAmB,aAAa;AAC9E,YAAM,IAAI,WAAW,wDAAwD;AAAA,IACjF;AACA,QAAI,cAAc;AAClB,QAAI,OAAO,QAAQ,YAAY;AAC3B,YAAM,MAAM,IAAI,YAAY,GAAG;AAC/B,oBAAc;AAAA,IAClB;AACA,iBAAa,KAAK,KAAK,QAAQ;AAC/B,UAAM,OAAO,OAAO,IAAI,cAAc,SAAY,OAAO,IAAI,SAAS,IAAI,IAAI,WAAW,GAAG,OAAO,GAAG,GAAG,OAAO,IAAI,YAAY,WAC1H,MACI,OAAO,IAAI,OAAO,IAClBC,SAAQ,OAAO,IAAI,OAAO,IAC9B,IAAI,OAAO;AACjB,UAAM,YAAY,gBAAgB,IAAI,WAAW,aAAa,UAAU;AACxE,UAAM,IAAI,MAAM,aAAa,KAAK,GAAG;AACrC,UAAM,WAAW,MAAM,OAAO,KAAK,GAAG,WAAW,IAAI;AACrD,QAAI,CAAC,UAAU;AACX,YAAM,IAAI,+BAA+B;AAAA,IAC7C;AACA,QAAI;AACJ,QAAI,KAAK;AACL,gBAAU,gBAAgB,IAAI,SAAS,WAAW,UAAU;AAAA,IAChE,WACS,OAAO,IAAI,YAAY,UAAU;AACtC,gBAAUA,SAAQ,OAAO,IAAI,OAAO;AAAA,IACxC,OACK;AACD,gBAAU,IAAI;AAAA,IAClB;AACA,UAAM,SAAS,EAAE,QAAQ;AACzB,QAAI,IAAI,cAAc,QAAW;AAC7B,aAAO,kBAAkB;AAAA,IAC7B;AACA,QAAI,IAAI,WAAW,QAAW;AAC1B,aAAO,oBAAoB,IAAI;AAAA,IACnC;AACA,QAAI,aAAa;AACb,aAAO,EAAE,GAAG,QAAQ,KAAK,EAAE;AAAA,IAC/B;AACA,WAAO;AAAA,EACX;;;AC1GA,iBAAsB,cAAc,KAAK,KAAK,SAAS;AACnD,QAAI,eAAe,YAAY;AAC3B,YAAMC,SAAQ,OAAO,GAAG;AAAA,IAC5B;AACA,QAAI,OAAO,QAAQ,UAAU;AACzB,YAAM,IAAI,WAAW,4CAA4C;AAAA,IACrE;AACA,UAAM,EAAE,GAAG,iBAAiB,GAAG,SAAS,GAAG,WAAW,OAAO,IAAI,IAAI,MAAM,GAAG;AAC9E,QAAI,WAAW,GAAG;AACd,YAAM,IAAI,WAAW,qBAAqB;AAAA,IAC9C;AACA,UAAM,WAAW,MAAM,gBAAgB,EAAE,SAAS,WAAW,iBAAiB,UAAU,GAAG,KAAK,OAAO;AACvG,UAAM,SAAS,EAAE,SAAS,SAAS,SAAS,iBAAiB,SAAS,gBAAgB;AACtF,QAAI,OAAO,QAAQ,YAAY;AAC3B,aAAO,EAAE,GAAG,QAAQ,KAAK,SAAS,IAAI;AAAA,IAC1C;AACA,WAAO;AAAA,EACX;;;ACjBA,MAAM,QAAQ,CAAC,SAAS,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAI;AACxD,MAAM,SAAS;AACf,MAAM,OAAO,SAAS;AACtB,MAAM,MAAM,OAAO;AACnB,MAAM,OAAO,MAAM;AACnB,MAAM,OAAO,MAAM;AACnB,MAAM,QAAQ;AACP,WAAS,KAAK,KAAK;AACtB,UAAM,UAAU,MAAM,KAAK,GAAG;AAC9B,QAAI,CAAC,WAAY,QAAQ,CAAC,KAAK,QAAQ,CAAC,GAAI;AACxC,YAAM,IAAI,UAAU,4BAA4B;AAAA,IACpD;AACA,UAAM,QAAQ,WAAW,QAAQ,CAAC,CAAC;AACnC,UAAM,OAAO,QAAQ,CAAC,EAAE,YAAY;AACpC,QAAI;AACJ,YAAQ,MAAM;AAAA,MACV,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,KAAK;AAC9B;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,MAAM;AACvC;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,IAAI;AACrC;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,GAAG;AACpC;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,IAAI;AACrC;AAAA,MACJ;AACI,sBAAc,KAAK,MAAM,QAAQ,IAAI;AACrC;AAAA,IACR;AACA,QAAI,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,MAAM,OAAO;AAC5C,aAAO,CAAC;AAAA,IACZ;AACA,WAAO;AAAA,EACX;AAOA,MAAM,eAAe,CAAC,UAAU;AAC5B,QAAI,MAAM,SAAS,GAAG,GAAG;AACrB,aAAO,MAAM,YAAY;AAAA,IAC7B;AACA,WAAO,eAAe,MAAM,YAAY,CAAC;AAAA,EAC7C;AACA,MAAM,wBAAwB,CAAC,YAAY,cAAc;AACrD,QAAI,OAAO,eAAe,UAAU;AAChC,aAAO,UAAU,SAAS,UAAU;AAAA,IACxC;AACA,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC3B,aAAO,UAAU,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC;AAAA,IACrE;AACA,WAAO;AAAA,EACX;AACO,WAAS,kBAAkB,iBAAiB,gBAAgB,UAAU,CAAC,GAAG;AAC7E,QAAI;AACJ,QAAI;AACA,gBAAU,KAAK,MAAMC,SAAQ,OAAO,cAAc,CAAC;AAAA,IACvD,QACM;AAAA,IACN;AACA,QAAI,CAAC,SAAS,OAAO,GAAG;AACpB,YAAM,IAAI,WAAW,gDAAgD;AAAA,IACzE;AACA,UAAM,EAAE,IAAI,IAAI;AAChB,QAAI,QACC,OAAO,gBAAgB,QAAQ,YAC5B,aAAa,gBAAgB,GAAG,MAAM,aAAa,GAAG,IAAI;AAC9D,YAAM,IAAI,yBAAyB,qCAAqC,SAAS,OAAO,cAAc;AAAA,IAC1G;AACA,UAAM,EAAE,iBAAiB,CAAC,GAAG,QAAQ,SAAS,UAAU,YAAY,IAAI;AACxE,UAAM,gBAAgB,CAAC,GAAG,cAAc;AACxC,QAAI,gBAAgB;AAChB,oBAAc,KAAK,KAAK;AAC5B,QAAI,aAAa;AACb,oBAAc,KAAK,KAAK;AAC5B,QAAI,YAAY;AACZ,oBAAc,KAAK,KAAK;AAC5B,QAAI,WAAW;AACX,oBAAc,KAAK,KAAK;AAC5B,eAAW,SAAS,IAAI,IAAI,cAAc,QAAQ,CAAC,GAAG;AAClD,UAAI,EAAE,SAAS,UAAU;AACrB,cAAM,IAAI,yBAAyB,qBAAqB,KAAK,WAAW,SAAS,OAAO,SAAS;AAAA,MACrG;AAAA,IACJ;AACA,QAAI,UACA,EAAE,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,QAAQ,GAAG,GAAG;AACpE,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,cAAc;AAAA,IACrG;AACA,QAAI,WAAW,QAAQ,QAAQ,SAAS;AACpC,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,cAAc;AAAA,IACrG;AACA,QAAI,YACA,CAAC,sBAAsB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI,QAAQ,GAAG;AAC3F,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,cAAc;AAAA,IACrG;AACA,QAAI;AACJ,YAAQ,OAAO,QAAQ,gBAAgB;AAAA,MACnC,KAAK;AACD,oBAAY,KAAK,QAAQ,cAAc;AACvC;AAAA,MACJ,KAAK;AACD,oBAAY,QAAQ;AACpB;AAAA,MACJ,KAAK;AACD,oBAAY;AACZ;AAAA,MACJ;AACI,cAAM,IAAI,UAAU,oCAAoC;AAAA,IAChE;AACA,UAAM,EAAE,YAAY,IAAI;AACxB,UAAM,MAAM,MAAM,eAAe,oBAAI,KAAK,CAAC;AAC3C,SAAK,QAAQ,QAAQ,UAAa,gBAAgB,OAAO,QAAQ,QAAQ,UAAU;AAC/E,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,SAAS;AAAA,IAChG;AACA,QAAI,QAAQ,QAAQ,QAAW;AAC3B,UAAI,OAAO,QAAQ,QAAQ,UAAU;AACjC,cAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,SAAS;AAAA,MAChG;AACA,UAAI,QAAQ,MAAM,MAAM,WAAW;AAC/B,cAAM,IAAI,yBAAyB,sCAAsC,SAAS,OAAO,cAAc;AAAA,MAC3G;AAAA,IACJ;AACA,QAAI,QAAQ,QAAQ,QAAW;AAC3B,UAAI,OAAO,QAAQ,QAAQ,UAAU;AACjC,cAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,SAAS;AAAA,MAChG;AACA,UAAI,QAAQ,OAAO,MAAM,WAAW;AAChC,cAAM,IAAI,WAAW,sCAAsC,SAAS,OAAO,cAAc;AAAA,MAC7F;AAAA,IACJ;AACA,QAAI,aAAa;AACb,YAAM,MAAM,MAAM,QAAQ;AAC1B,YAAM,MAAM,OAAO,gBAAgB,WAAW,cAAc,KAAK,WAAW;AAC5E,UAAI,MAAM,YAAY,KAAK;AACvB,cAAM,IAAI,WAAW,4DAA4D,SAAS,OAAO,cAAc;AAAA,MACnH;AACA,UAAI,MAAM,IAAI,WAAW;AACrB,cAAM,IAAI,yBAAyB,iEAAiE,SAAS,OAAO,cAAc;AAAA,MACtI;AAAA,IACJ;AACA,WAAO;AAAA,EACX;;;ACrKA,iBAAsB,UAAUC,MAAK,KAAK,SAAS;AAC/C,UAAM,WAAW,MAAM,cAAcA,MAAK,KAAK,OAAO;AACtD,QAAI,SAAS,gBAAgB,MAAM,SAAS,KAAK,KAAK,SAAS,gBAAgB,QAAQ,OAAO;AAC1F,YAAM,IAAI,WAAW,qCAAqC;AAAA,IAC9D;AACA,UAAM,UAAU,kBAAkB,SAAS,iBAAiB,SAAS,SAAS,OAAO;AACrF,UAAM,SAAS,EAAE,SAAS,iBAAiB,SAAS,gBAAgB;AACpE,QAAI,OAAO,QAAQ,YAAY;AAC3B,aAAO,EAAE,GAAG,QAAQ,KAAK,SAAS,IAAI;AAAA,IAC1C;AACA,WAAO;AAAA,EACX;;;ACXA,WAAS,cAAc,KAAK;AACxB,YAAQ,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,CAAC,GAAG;AAAA,MAChD,KAAK;AAAA,MACL,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX;AACI,cAAM,IAAI,iBAAiB,gDAAgD;AAAA,IACnF;AAAA,EACJ;AACA,WAAS,WAAW,MAAM;AACtB,WAAQ,QACJ,OAAO,SAAS,YAChB,MAAM,QAAQ,KAAK,IAAI,KACvB,KAAK,KAAK,MAAM,SAAS;AAAA,EACjC;AACA,WAAS,UAAU,KAAK;AACpB,WAAO,SAAS,GAAG;AAAA,EACvB;AACA,MAAM,cAAN,MAAkB;AAAA,IACd;AAAA,IACA,UAAU,oBAAI,QAAQ;AAAA,IACtB,YAAY,MAAM;AACd,UAAI,CAAC,WAAW,IAAI,GAAG;AACnB,cAAM,IAAI,YAAY,4BAA4B;AAAA,MACtD;AACA,WAAK,QAAQ,gBAAgB,IAAI;AAAA,IACrC;AAAA,IACA,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,IACA,MAAM,OAAO,iBAAiB,OAAO;AACjC,YAAM,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,iBAAiB,GAAG,OAAO,OAAO;AAC5D,YAAM,MAAM,cAAc,GAAG;AAC7B,YAAM,aAAa,KAAK,MAAM,KAAK,OAAO,CAACC,SAAQ;AAC/C,YAAI,YAAY,QAAQA,KAAI;AAC5B,YAAI,aAAa,OAAO,QAAQ,UAAU;AACtC,sBAAY,QAAQA,KAAI;AAAA,QAC5B;AACA,YAAI,cAAc,OAAOA,KAAI,QAAQ,YAAY,QAAQ,QAAQ;AAC7D,sBAAY,QAAQA,KAAI;AAAA,QAC5B;AACA,YAAI,aAAa,OAAOA,KAAI,QAAQ,UAAU;AAC1C,sBAAYA,KAAI,QAAQ;AAAA,QAC5B;AACA,YAAI,aAAa,MAAM,QAAQA,KAAI,OAAO,GAAG;AACzC,sBAAYA,KAAI,QAAQ,SAAS,QAAQ;AAAA,QAC7C;AACA,YAAI,WAAW;AACX,kBAAQ,KAAK;AAAA,YACT,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,YACJ,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,YACJ,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,YACJ,KAAK;AAAA,YACL,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,UACR;AAAA,QACJ;AACA,eAAO;AAAA,MACX,CAAC;AACD,YAAM,EAAE,GAAG,KAAK,OAAO,IAAI;AAC3B,UAAI,WAAW,GAAG;AACd,cAAM,IAAI,kBAAkB;AAAA,MAChC;AACA,UAAI,WAAW,GAAG;AACd,cAAMC,SAAQ,IAAI,yBAAyB;AAC3C,cAAM,UAAU,KAAK;AACrB,QAAAA,OAAM,OAAO,aAAa,IAAI,mBAAmB;AAC7C,qBAAWD,QAAO,YAAY;AAC1B,gBAAI;AACA,oBAAM,MAAM,mBAAmB,SAASA,MAAK,GAAG;AAAA,YACpD,QACM;AAAA,YAAE;AAAA,UACZ;AAAA,QACJ;AACA,cAAMC;AAAA,MACV;AACA,aAAO,mBAAmB,KAAK,SAAS,KAAK,GAAG;AAAA,IACpD;AAAA,EACJ;AACA,iBAAe,mBAAmBC,QAAO,KAAK,KAAK;AAC/C,UAAM,SAASA,OAAM,IAAI,GAAG,KAAKA,OAAM,IAAI,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG;AAC3D,QAAI,OAAO,GAAG,MAAM,QAAW;AAC3B,YAAM,MAAM,MAAM,UAAU,EAAE,GAAG,KAAK,KAAK,KAAK,GAAG,GAAG;AACtD,UAAI,eAAe,cAAc,IAAI,SAAS,UAAU;AACpD,cAAM,IAAI,YAAY,8CAA8C;AAAA,MACxE;AACA,aAAO,GAAG,IAAI;AAAA,IAClB;AACA,WAAO,OAAO,GAAG;AAAA,EACrB;AACO,WAAS,kBAAkB,MAAM;AACpC,UAAM,MAAM,IAAI,YAAY,IAAI;AAChC,UAAM,cAAc,OAAO,iBAAiB,UAAU,IAAI,OAAO,iBAAiB,KAAK;AACvF,WAAO,iBAAiB,aAAa;AAAA,MACjC,MAAM;AAAA,QACF,OAAO,MAAM,gBAAgB,IAAI,KAAK,CAAC;AAAA,QACvC,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AACD,WAAO;AAAA,EACX;;;ACnHA,MAAM,YAAY,oBAAI,QAAQ;AAE9B,WAAS,UAAU,MAAM;AACxB,QAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,GAAG;AACvC,YAAY,WAAW,6DAA6D;AAAA,IACrF;AACA,QAAI,CAAC,UAAU,IAAI,IAAI,GAAG;AACzB,gBAAU,IAAI,MAAM,kBAAkB,IAAI,CAAC;AAAA,IAC5C;AACA,WAAO,UAAU,IAAI,IAAI;AAAA,EAC1B;AAEA,WAAS,oBAAoB,sBAAsB,CAAC,GAAG;AACtD,UAAM,aAAa,oBAAoB;AACvC,QAAI,MAAM,QAAQ,UAAU,KAAK,WAAW,QAAQ;AACnD,aAAO,WAAW,OAAO,eAAa,cAAc,MAAM;AAAA,IAC3D;AACA,WAAO,CAAC,OAAO;AAAA,EAChB;AASA,iBAAsB,gBAAgBC,UAAS,UAAU,CAAC,GAAG;AAC5D,QAAI,CAACA,UAAS;AACb,YAAY,WAAW,+DAA+D;AAAA,IACvF;AACA,QAAI,CAAC,QAAQ,MAAM;AAClB,YAAY,WAAW,0DAA0D;AAAA,IAClF;AACA,QAAI,CAAC,QAAQ,QAAQ;AACpB,YAAY,WAAW,4DAA4D;AAAA,IACpF;AACA,QAAI,CAAC,QAAQ,WAAW;AACvB,YAAY,WAAW,+DAA+D;AAAA,IACvF;AAEA,UAAM,EAAE,SAAS,gBAAgB,IAAI,MAAM;AAAA,MAC1CA;AAAA,MACA,UAAU,QAAQ,IAAI;AAAA,MACtB;AAAA,QACC,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,YAAY,QAAQ,cAAc,oBAAoB,QAAQ,oBAAoB;AAAA,QAClF,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,gBAAgB,CAAC,OAAO,OAAO,OAAO,OAAO,KAAK;AAAA,MACnD;AAAA,IACD;AAEA,QAAI,QAAQ,UAAU,UAAa,QAAQ,UAAU,QAAQ,OAAO;AACnE,YAAY,WAAW,4CAA4C;AAAA,IACpE;AAEA,WAAO;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACT;AAAA,EACD;;;ACrDe,WAAR,OAAwB,UAAQ,CAAC,GAAG;AAE1C,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO;AAAA,MACrB,qBAAqB;AAAA,MACrB,UAAU;AAAA,MACV,oBAAoB,OAAMC,SAAO;AAChC,YAAI,OAAO,SAAS,QAAQA,KAAI,MAAM;AACrC,iBAAO,SAAS,QAAQA,KAAI,IAAI;AAAA,QACjC;AACA,eAAO;AAAA,MACR;AAAA,IACD;AAEA,cAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,OAAO;AAEnD,WAAO,SAAS;AAAA,MACf,QAAQ,SAAS,WAAiB,OAAO,EAAE,WAAW,CAAC;AAAA;AAAA,MACvD,aAAa,SAAS;AAAA,MACtB,QAAQ,SAAS,QAAQ;AAAA,MACzB,QAAQ,SAAS,CAAC,CAAC;AAAA,MACnB,sBAAsB,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,QAAQ,OAAO;AACnB,cAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,wBAAwB,QAAQ,MAAM,IAAI,sBAAsB,GAAG;AAC/E,cAAQ,uBAAuB,QAAQ,MAAM,IAAI,sBAAsB;AAAA,IACxE;AACA,QAAI,CAAC,QAAQ,aAAa,aAAa,QAAQ,MAAM,IAAI,aAAa,GAAG;AACxE,cAAQ,cAAc,QAAQ,MAAM,IAAI,aAAa;AAAA,IACtD;AAEA,WAAO,OAAO,KAAK,SAAS;AAC3B,UAAI;AACJ,UAAI,CAAC,QAAQ,qBAAqB;AACjC,YAAI;AACH,gBAAM,MAAM,KAAK,GAAG;AAAA,QACrB,SAAQ,KAAK;AACZ,gBAAM,KAAK;AACX,cAAI,CAAC,OAAQ,IAAI,UAAQ,OAAO,IAAI,UAAQ,KAAM;AACjD,kBAAM;AAAA,UACP;AAAA,QACD;AACA,YAAI,IAAI,MAAO,IAAI,UAAQ,OAAO,IAAI,UAAQ,KAAM;AACnD,iBAAO;AAAA,QACR;AAAA,MACD;AACA,UAAI,CAAC,QAAQ,sBAAsB;AAClC,gBAAQ,uBAAuB,MAAM,cAAS;AAAA,UAC7C,QAAQ,QAAQ;AAAA,UAChB,QAAQ,QAAQ,OAAO,KAAK,QAAQ,MAAM;AAAA,QAC3C,CAAC;AACD,gBAAQ,MAAM,IAAI,wBAAwB,QAAQ,oBAAoB;AAAA,MACvE;AAEA,UAAI,CAAC,QAAQ,aAAa,WAAW;AACpC,YAAI,CAAC,QAAQ,qBAAqB,uBAAuB;AACxD,gBAAY,WAAW,iCAA+B,QAAQ,SAAO,sFAAuF;AAAA,QAC7J;AACA,gBAAQ,cAAc,MAAM,SAAS;AAAA,UACpC,uBAAuB,QAAQ,qBAAqB;AAAA,UACpD,QAAQ,QAAQ;AAAA,UAChB,aAAa,QAAQ;AAAA,QACtB,CAAC;AACD,gBAAQ,MAAM,IAAI,eAAe,QAAQ,WAAW;AAAA,MACrD;AAIA,YAAM,QAAQ,QAAQ,SAAS;AAC/B,YAAM,QAAQ,QAAQ,SAAgB,qBAAqB,EAAE;AAC7D,cAAQ,MAAM,IAAI,iBAAiB,KAAK;AAExC,YAAM,gBAAgB,OAAO;AAAA,QAC5B;AAAA,UACC,MAAM,QAAQ;AAAA,UACd,QAAQ,QAAQ;AAAA,UAChB,qBAAqB;AAAA,UACrB,oBAAoB,QAAQ;AAAA,UAC5B,sBAAsB;AAAA,YACrB,WAAW,QAAQ,aAAa;AAAA,YAChC,eAAe,QAAQ,aAAa;AAAA,YACpC,YAAY;AAAA,YACZ,eAAe;AAAA,YACf,eAAe;AAAA,YACf,wBAAwB,QAAQ,qBAAqB;AAAA,YACrD,gBAAgB,QAAQ,qBAAqB;AAAA,YAC7C;AAAA;AAAA,YACA,cAAc,QAAQ,YAAY,cAAc,CAAC;AAAA,YACjD;AAAA,UACD;AAAA,QACD;AAAA;AAAA,MAED;AAEA,YAAM,eAAe,OAAOC,MAAKC,UAAS;AACzC,cAAMC,OAAM,MAAMD,MAAKD,IAAG;AAC1B,cAAM,gBAAsB,IAAI,QAAQ,qBAAqB,gBAAgB,EAAE,MAAM,GAAG,CAAC,EAAE;AAC3F,cAAM,aAAmB,IAAIA,KAAI,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE;AACpD,YAAI,eAAe,eAAe;AACjC,iBAAOE;AAAA,QACR;AACA,cAAM,cAAcA,KAAI,QAAQ,IAAI,cAAc;AAClD,YAAI,CAAC,aAAa,WAAW,kBAAkB,GAAG;AACjD,iBAAOA;AAAA,QACR;AAEA,YAAI,OAAOA,KAAI,QAAQ,OAAOA,KAAI,SAAS,WAAWA,KAAI,OAAO;AACjE,YAAI,CAAC,MAAM;AACV,gBAAMC,QAAOD,KAAI,MAAM;AACvB,iBAAO,MAAMC,MAAK,KAAK;AAAA,QACxB;AAEA,cAAM,WAAW,MAAM;AACvB,cAAM,OAAO,MAAM,QAAQ;AAC3B,cAAM,aAAa,MAAM,gBAAgB,UAAU;AAAA,UAClD,QAAQ,QAAQ,qBAAqB;AAAA,UACrC,WAAW,QAAQ,YAAY;AAAA,UAC/B;AAAA,UACA,sBAAsB,QAAQ;AAAA,UAC9B,OAAO,QAAQ,MAAM,IAAI,eAAe;AAAA,QACzC,CAAC;AACD,gBAAQ,MAAM,IAAI,YAAY,QAAQ;AACtC,gBAAQ,MAAM,IAAI,mBAAmB,WAAW,MAAM;AACtD,eAAOD;AAAA,MACR;AAEA,YAAM,UAAU,YAAY;AAC3B,YAAI,CAAC,QAAQ,MAAM;AAClB,gBAAM,aAAa,QAAQ,OAAO,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AACjE,gBAAME,YAAW,MAAM,WAAW,IAAI,QAAQ,qBAAqB,QAAQ;AAC3E,kBAAQ,OAAOA,UAAS;AAAA,QACzB;AACA,eAAO,QAAQ;AAAA,MAChB;AAEA,UAAI,eAAe,QAAQ,OAAO,KAAK,QAAQ,MAAM,EAAE,KAAK,YAAY;AAExE,UAAI,QAAQ,UAAU;AACrB,cAAM,cAAc;AAAA,UACnB,MAAM,QAAQ;AAAA,UACd,wBAAwB,QAAQ,qBAAqB;AAAA,UACrD,gBAAgB,QAAQ,qBAAqB;AAAA,UAC7C,mCAAmC,QAAQ,qBAAqB;AAAA,QACjE;AACA,uBAAe,aAAa,KAAK,OAAO,WAAW,CAAC;AAAA,MACrD;AACA,oBAAc,SAAS;AAEvB,qBAAe,aAAa,KAAK,SAAS,aAAa,CAAC;AAExD,YAAM,MAAM,aAAa,MAAM,GAAG;AAElC,aAAO;AAAA,IACR;AAAA,EAED;AAEO,WAASC,gBAAe;AAC9B,WAAc,aAAa;AAAA,EAC5B;AAEO,WAAS,QAAQ,SAAS;AAChC,QAAI,CAAC,QAAQ,OAAO;AACnB,UAAI,CAAC,QAAQ,QAAQ;AACpB,cAAY,WAAW,iEAAiE;AAAA,MACzF;AACA,cAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACzC;AACA,WAAO,QAAQ,MAAM,IAAI,UAAU;AAAA,EACpC;AAEO,WAAS,cAAc,SAAS;AACtC,QAAI,CAAC,QAAQ,OAAO;AACnB,UAAI,CAAC,QAAQ,QAAQ;AACpB,cAAY,WAAW,wEAAwE;AAAA,MAChG;AACA,cAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACzC;AACA,WAAO,QAAQ,MAAM,IAAI,iBAAiB;AAAA,EAC3C;;;AC7LA,MAAM,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAAC;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAEA,MAAO,gBAAQ;;;ACVf,MAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,aAAM,WAAW,SAAS,CAAC,CAAC;AAE5D,MAAI,CAAC,MAAM,MAAM;AAChB,UAAM,OAAO;AAAA,EACd;AAEA,aAAW,QAAQ;AAGnB,MAAO,kBAAQ;",
-  "names": ["options", "req", "next", "middleware", "error", "client", "tracer", "url", "message", "url", "index", "message", "url", "response", "encoder", "value", "message", "request", "resolve", "reject", "url", "response", "json", "url", "response", "response", "encoder", "decoder", "buf", "decoder", "message", "message", "message", "isCryptoKey", "subtleAlgorithm", "subtleAlgorithm", "isCryptoKey", "decoder", "encoder", "decoder", "decoder", "jwt", "jwk", "error", "cache", "idToken", "url", "req", "next", "res", "res2", "response", "isRedirected", "isRedirected"]
+  "sources": ["../../metro-core/src/index.mjs", "../../metro-core/src/metro.mjs", "../../../node_modules/@muze-nl/assert/src/assert-core.mjs", "../../../node_modules/@muze-nl/assert/src/assert.mjs", "../../metro-oauth2/src/tokenstore.mjs", "../../metro-oauth2/src/oauth2.mjs", "../../../node_modules/dpop/src/index.ts", "../../metro-oauth2/src/keysstore.mjs", "../../metro-oauth2/src/oauth2.dpop.mjs", "../../metro-middleware/src/json.mjs", "../../metro-middleware/src/thrower.mjs", "../src/oidc.util.mjs", "../src/oidc.discovery.mjs", "../src/oidc.register.mjs", "../src/oidc.store.mjs", "../../../node_modules/jose/dist/webapi/lib/buffer_utils.js", "../../../node_modules/jose/dist/webapi/lib/base64.js", "../../../node_modules/jose/dist/webapi/util/base64url.js", "../../../node_modules/jose/dist/webapi/lib/crypto_key.js", "../../../node_modules/jose/dist/webapi/lib/invalid_key_input.js", "../../../node_modules/jose/dist/webapi/util/errors.js", "../../../node_modules/jose/dist/webapi/lib/is_key_like.js", "../../../node_modules/jose/dist/webapi/lib/helpers.js", "../../../node_modules/jose/dist/webapi/lib/type_checks.js", "../../../node_modules/jose/dist/webapi/lib/signing.js", "../../../node_modules/jose/dist/webapi/lib/jwk_to_key.js", "../../../node_modules/jose/dist/webapi/lib/normalize_key.js", "../../../node_modules/jose/dist/webapi/key/import.js", "../../../node_modules/jose/dist/webapi/lib/validate_crit.js", "../../../node_modules/jose/dist/webapi/lib/validate_algorithms.js", "../../../node_modules/jose/dist/webapi/lib/check_key_type.js", "../../../node_modules/jose/dist/webapi/jws/flattened/verify.js", "../../../node_modules/jose/dist/webapi/jws/compact/verify.js", "../../../node_modules/jose/dist/webapi/lib/jwt_claims_set.js", "../../../node_modules/jose/dist/webapi/jwt/verify.js", "../../../node_modules/jose/dist/webapi/jwks/local.js", "../src/oidc.jwt.mjs", "../src/oidcmw.mjs", "../src/index.mjs", "../src/browser.mjs"],
+  "sourcesContent": ["export * from './metro.mjs'\n", "/**\n * Metro core: fetch-compatible client, request, response and URL helpers.\n * Higher-level API helpers, middleware, tracing and formdata helpers live in\n * separate packages and are re-exported by @muze-nl/metro.\n */\n/**\n * base URL used to link to more information about an error message\n */\nconst metroURL = 'https://metro.muze.nl/details/'\n\n/**\n * Symbols:\n * - isProxy: used to test if an object is a metro Proxy to another object\n * - source: used to return the actual source (target) of a metro Proxy\n */\nif (!Symbol.metroProxy) {\n\tSymbol.metroProxy = Symbol('isProxy')\n}\nif (!Symbol.metroSource) {\n\tSymbol.metroSource = Symbol('source')\n}\n\n/**\n * Metro HTTP Client with middleware support\n * @method get\n * @method post\n * @method put\n * @method delete\n * @method patch\n * @method head\n * @method options\n * @method query\n * @method fetch\n */\nexport class Client\n{\n\tclientOptions = {\n\t\turl: typeof window != 'undefined' ? url(window.location) : url('https://localhost'),\n\t\tverbs: ['get','post','put','delete','patch','head','options','query']\n\t}\n\n\tstatic tracers = {}\n\n\t/**\n\t * @typedef {Object} ClientOptions\n\t * @property {Array} middlewares - list of middleware functions\n\t * @property {string|URL} url - default url of the client\n\t * @property {[string]} verbs - a list of verb methods to expose, e.g. ['get','post']\n\t * \n\t * Constructs a new metro client. Can have any number of params.\n\t * @params {ClientOptions|URL|Function|Client}\n\t * @returns {Client} - A metro client object with given or default verb methods\n\t */\n\tconstructor(...options)\n\t{\n\t\tfor (let option of options) {\n\t\t\tif (typeof option == 'string' || option instanceof String) {\n\t\t\t\tthis.clientOptions.url = url(this.clientOptions.url.href, option)\n\t\t\t} else if (option instanceof Client) {\n\t\t\t\tObject.assign(this.clientOptions, option.clientOptions)\n\t\t\t} else if (option instanceof Function) {\n\t\t\t\tthis.#addMiddlewares([option])\n\t\t\t} else if (option && typeof option == 'object') {\n\t\t\t\tfor (let param in option) {\n\t\t\t\t\tif (param == 'middlewares') {\n\t\t\t\t\t\tthis.#addMiddlewares(option[param])\n\t\t\t\t\t} else if (param == 'url') {\n\t\t\t\t\t\tthis.clientOptions.url = url(this.clientOptions.url.href, option[param])\n\t\t\t\t\t} else if (typeof option[param] == 'function') {\n\t\t\t\t\t\tthis.clientOptions[param] = option[param](this.clientOptions[param], this.clientOptions)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.clientOptions[param] = option[param]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tfor (const verb of this.clientOptions.verbs) {\n\t\t\tthis[verb] = async function(...options) {\n\t\t\t\treturn this.fetch(\n\t\t\t\t\trequest(\n\t\t\t\t\t\tthis.clientOptions,\n\t\t\t\t\t\t...options,\n\t\t\t\t\t\t{method: verb.toUpperCase()}\n\t\t\t\t\t),\n\t\t\t\t\tfetchOptionsFrom(...options)\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t\t//NOTE: intentionally not Object.freeze()-ing this, so that metro.api can extend this class\n\t}\n\n\t#addMiddlewares(middlewares)\n\t{\n\t\tif (typeof middlewares == 'function') {\n\t\t\tmiddlewares = [ middlewares ]\n\t\t}\n\t\tlet index = middlewares.findIndex(m => typeof m != 'function')\n\t\tif (index>=0) {\n\t\t\tthrow metroError('metro.client: middlewares must be a function or an array of functions '\n\t\t\t\t+metroURL+'client/invalid-middlewares/', middlewares[index])\n\t\t}\n\t\tif (!Array.isArray(this.clientOptions.middlewares)) {\n\t\t\tthis.clientOptions.middlewares = []\n\t\t}\n\t\tthis.clientOptions.middlewares = this.clientOptions.middlewares.concat(middlewares)\n\t}\n\n\t/**\n\t * Mimics the standard browser fetch method, but uses any middleware installed through\n\t * the constructor.\n\t * @param {Request|string|Object} - Required. The URL or Request object, accepts all types that are accepted by metro.request\n\t * @param {Object} - Optional. Any object that is accepted by metro.request\n\t * @return {Promise<Response|*>} - The metro.response to this request, or any other result as changed by any included middleware.\n\t */\n\tfetch(req, options)\n\t{\n\t\treq = request(req, options)\n\t\tif (!req.url) {\n\t\t\tthrow metroError('metro.client.'+req.method.toLowerCase()+': Missing url parameter '+metroURL+'client/fetch-missing-url/', req)\n\t\t}\n\t\tif (!options) {\n\t\t\toptions = {}\n\t\t}\n\t\tif (!(typeof options === 'object') \n\t\t\t|| options instanceof String) \n\t\t{\n\t\t\tthrow metroError('metro.client.fetch: Invalid options parameter '+metroURL+'client/fetch-invalid-options/', options)\n\t\t}\n\n\t\tconst metrofetch = async function browserFetch(req)\n\t\t{\n\t\t\tif (req[Symbol.metroProxy]) {\n\t\t\t\treq = req[Symbol.metroSource]\n\t\t\t}\n\t\t\tconst res = await fetch(req)\n\t\t\treturn response(res)\n\t\t}\n\t\t\n\t\tlet middlewares = [metrofetch].concat(this.clientOptions?.middlewares?.slice() || [])\n\t\toptions = Object.assign({}, this.clientOptions, options)\n\t\tconst traceContext = createTraceContext(req, options)\n\t\tconst middlewareContext = createMiddlewareContext(this, options, traceContext)\n\t\t//@TODO: do this once in constructor?\n\t\tlet next\n\t\tfor (let middleware of middlewares) {\n\t\t\tnext = (function(next, middleware) {\n\t\t\t\treturn async function(req) {\n\t\t\t\t\tlet res\n\t\t\t\t\tlet tracers = traceContext.tracers\n\t\t\t\t\tcallTracers(tracers, 'request', req, middleware, traceContext)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tres = await middleware(req, next, middlewareContext)\n\t\t\t\t\t} catch(error) {\n\t\t\t\t\t\tcallTracers(tracers, 'error', error, req, middleware, traceContext)\n\t\t\t\t\t\tthrow error\n\t\t\t\t\t}\n\t\t\t\t\tcallTracers(tracers, 'response', res, middleware, traceContext)\n\t\t\t\t\treturn res\n\t\t\t\t}\t\t\t\t\t\t\t\t\n\t\t\t})(next, middleware)\n\t\t}\n\t\treturn next(req)\n\t}\n\n\twith(...options) {\n\t\treturn new Client(deepClone(this.clientOptions), ...options)\n\t}\n\n\tget location() {\n\t\treturn this.clientOptions.url\n\t}\n\n}\n\n\nlet traceContextId = 0\nconst TRACE_OPTION_KEYS = ['trace', 'tracer', 'tracers']\n\nfunction fetchOptionsFrom(...options)\n{\n\tconst result = {}\n\tfor (const option of options) {\n\t\tif (!isPlainObject(option)) {\n\t\t\tcontinue\n\t\t}\n\t\tfor (const key of TRACE_OPTION_KEYS) {\n\t\t\tif (key in option) {\n\t\t\t\tresult[key] = option[key]\n\t\t\t}\n\t\t}\n\t}\n\treturn result\n}\n\nfunction createTraceContext(req, options={})\n{\n\tconst parent = traceParentFrom(options.trace || options.tracer || options.tracers)\n\tlet localTracers = []\n\tif (parent) {\n\t\tlocalTracers = parent.localTracers || []\n\t} else {\n\t\tlocalTracers = normalizeTracers(options.trace)\n\t\t\t.concat(normalizeTracers(options.tracer))\n\t\t\t.concat(normalizeTracers(options.tracers))\n\t}\n\tconst globalTracers = Object.values(Client.tracers || {})\n\tconst context = {\n\t\t__metroTraceContext: true,\n\t\tid: 'metro-trace-context-'+(++traceContextId),\n\t\tparent,\n\t\trequest: req,\n\t\toptions,\n\t\tglobalTracers,\n\t\tlocalTracers,\n\t\ttracers: globalTracers.concat(localTracers)\n\t}\n\treturn context\n}\n\nfunction traceParentFrom(value)\n{\n\tif (!value) {\n\t\treturn null\n\t}\n\tif (value.context?.__metroTraceContext) {\n\t\treturn value.context\n\t}\n\tif (value.__metroTraceContext) {\n\t\treturn value\n\t}\n\treturn null\n}\n\nfunction normalizeTracers(value)\n{\n\tif (!value || value.__metroTraceContext || value.context?.__metroTraceContext) {\n\t\treturn []\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn value.flatMap(normalizeTracers)\n\t}\n\tif (isTracer(value)) {\n\t\treturn [value]\n\t}\n\tif (isPlainObject(value)) {\n\t\treturn Object.values(value).flatMap(normalizeTracers)\n\t}\n\treturn []\n}\n\nfunction isTracer(value)\n{\n\treturn value && typeof value == 'object' && [\n\t\t'request', 'response', 'error', 'event', 'diagnostic', 'span', 'link', 'current'\n\t].some(name => typeof value[name] == 'function')\n}\n\nfunction createMiddlewareContext(client, options, traceContext)\n{\n\tconst trace = createTraceAPI(traceContext)\n\treturn Object.freeze({\n\t\tclient,\n\t\toptions,\n\t\ttrace,\n\t\tfetch(req, fetchOptions={}) {\n\t\t\treturn client.fetch(req, Object.assign({}, fetchOptions, { trace }))\n\t\t}\n\t})\n}\n\nfunction createTraceAPI(context)\n{\n\tconst api = {\n\t\t__metroTraceContext: true,\n\t\tcontext,\n\t\tevent(name, data={}) {\n\t\t\tcallTracers(context.tracers, 'event', name, data, context)\n\t\t},\n\t\tdiagnostic(diagnostic={}) {\n\t\t\tcallTracers(context.tracers, 'diagnostic', diagnostic, context)\n\t\t},\n\t\tcurrent() {\n\t\t\tfor (const tracer of context.tracers) {\n\t\t\t\tif (typeof tracer.current == 'function') {\n\t\t\t\t\tconst current = tracer.current(context)\n\t\t\t\t\tif (current) {\n\t\t\t\t\t\treturn current\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn { traceId: null, spanId: null }\n\t\t},\n\t\tasync span(name, fn, data={}) {\n\t\t\tconst tracer = context.tracers.find(tracer => typeof tracer.span == 'function')\n\t\t\tif (!tracer) {\n\t\t\t\treturn fn()\n\t\t\t}\n\t\t\treturn tracer.span(name, fn, data, context)\n\t\t},\n\t\tlink(key) {\n\t\t\tlet traceId = null\n\t\t\tfor (const tracer of context.tracers) {\n\t\t\t\tif (typeof tracer.link == 'function') {\n\t\t\t\t\ttraceId = tracer.link(key, undefined, context) || traceId\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn traceId\n\t\t},\n\t\toptions(extra={}) {\n\t\t\treturn Object.assign({}, extra, { trace: api })\n\t\t}\n\t}\n\treturn api\n}\n\nfunction callTracers(tracers, method, ...args)\n{\n\tfor (const tracer of tracers) {\n\t\tif (tracer && typeof tracer[method] == 'function') {\n\t\t\ttracer[method].call(tracer, ...args)\n\t\t}\n\t}\n}\n\nfunction isPlainObject(value)\n{\n\treturn value && typeof value == 'object'\n\t\t&& (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null)\n}\n\n/**\n * Returns a new metro Client object.\n * @param {...ClientOptions|string|URL}\n * @return Client\n */\nexport function client(...options)\n{\n\treturn new Client(...deepClone(options))\n}\n\n/*\n//FIXME: is this needed?\nfunction appendHeaders(r, headers)\n{\n\tif (!Array.isArray(headers)) {\n\t\theaders = [headers]\n\t}\n\theaders.forEach((header) => {\n\t\tif (typeof header == 'function') {\n\t\t\tlet result = header(r.headers, r)\n\t\t\tif (result) {\n\t\t\t\tif (!Array.isArray(result)) {\n\t\t\t\t\tresult = [result]\n\t\t\t\t}\n\t\t\t\theaders = headers.concat(result)\n\t\t\t}\n\t\t}\n\t})\n\theaders.forEach((header) => {\n\t\tObject.entries(header).forEach(([name,value]) => {\t\t\t\n\t\t\tr.headers.append(name, value)\n\t\t})\n\t})\n}\n*/\n\nfunction getRequestParams(req, current)\n{\n\tlet params = current || {}\n\tif (!params.url && current.url) {\n\t\tparams.url = current.url\n\t}\n\t// function to fetch all relevant properties of a Request\n\tfor(let prop of ['method','headers','body','mode','credentials','cache','redirect',\n\t\t'referrer','referrerPolicy','integrity','keepalive','signal',\n\t\t'priority','url']) {\n\t\tlet value = req[prop]\n\t\tif (typeof value=='undefined' || value == null) {\n\t\t\tcontinue\n\t\t}\n\t\tif (value?.[Symbol.metroProxy]) {\n\t\t\tvalue = value[Symbol.metroSource]\n\t\t}\n\t\tif (typeof value == 'function') {\n\t\t\tparams[prop] = value(params[prop], params)\n\t\t} else {\n\t\t\tif (prop == 'url') {\n\t\t\t\tparams.url = url(params.url, value)\n\t\t\t} else if (prop == 'headers') {\n\t\t\t\t//FIXME: test and see if appendHeaders is needed\n\t\t\t\tparams.headers = new Headers(current.headers)\n\t\t\t\tif (!(value instanceof Headers)) {\n\t\t\t\t\tvalue = new Headers(req.headers)\n\t\t\t\t}\n\t\t\t\tfor (let [key, val] of value.entries()) {\n\t\t\t\t\tparams.headers.set(key, val)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tparams[prop] = value\n\t\t\t}\n\t\t}\n\t}\n\tif (req instanceof Request && req.data) {\n\t\t// Request.body is always transformed into ReadableStreem\n\t\t// metro.request.data is the original body passed to Request()\n\t\tparams.body = req.data\n\t}\n\treturn params\n}\n\n/**\n * @typedef {Request} MetroRequest\n * @property {Symbol(source)} - returns the target Request of this Proxy\n * @property {Symbol(isProxy)} - returns true\n * @method with - returns a new MetroRequest, with the given options added\n * @param {<RequestOptions|Request|string|URL|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - request options, handled in order\n * \n * Returns a new metro Request object\n * @param {<RequestOptions|Request|string|URL|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - request options, handled in order\n * @return {MetroRequest} - a new metro Request object\n */\nexport function request(...options)\n{\n\t// the standard Request constructor is a minefield\n\t// so first gather all the options together into a single\n\t// javascript object, then set it in one go\n\tlet requestParams = {\n\t\turl: typeof window != 'undefined' ? url(window.location) : url('https://localhost/'),\n\t\tduplex: 'half' // required when setting body to ReadableStream, just set it here by default already\n\t}\n\tfor (let option of options) {\n\t\tif (typeof option == 'string'\n\t\t\t|| option instanceof URL\n\t\t\t|| option instanceof URLSearchParams\n\t\t) {\n\t\t\trequestParams.url = url(requestParams.url, option)\n\t\t} else if (option && (\n\t\t\toption instanceof FormData\n\t\t\t|| option instanceof ReadableStream\n\t\t\t|| option instanceof Blob\n\t\t\t|| option instanceof ArrayBuffer\n\t\t\t|| option instanceof DataView\n\t\t)) {\n\t\t\trequestParams.body = option\n\t\t} else if (option && typeof option == 'object') {\n\t\t\tObject.assign(requestParams, getRequestParams(option, requestParams))\n\t\t}\n\t}\n\tlet r = new Request(requestParams.url, requestParams)\n\tlet data = requestParams.body\n\tif (data) {\n\t\tif (typeof data == 'object'\n\t\t\t&& !(data instanceof String)\n\t\t\t&& !(data instanceof ReadableStream)\n\t\t\t&& !(data instanceof Blob)\n\t\t\t&& !(data instanceof ArrayBuffer)\n\t\t\t&& !(data instanceof DataView)\n\t\t\t&& !(data instanceof FormData)\n\t\t\t&& !(data instanceof URLSearchParams)\n\t\t\t&& (globalThis.ArrayBuffer && ArrayBuffer.isView(data)) //TypedArray\n\t\t) {\n\t\t\t// if we are here, body is set with an object of a type\n\t\t\t// not natively understood by Request, coerce it to a string\n\t\t\t// using toString({headers}) instead of just toString()\n\t\t\tif (typeof data.toString == 'function') {\n\t\t\t\trequestParams.body = data.toString({headers:r.headers})\n\t\t\t\tr = new Request(requestParams.url, requestParams)\n\t\t\t}\n\t\t}\n\t}\n\tObject.freeze(r)\n\treturn new Proxy(r, {\n\t\tget(target, prop) {\n\t\t\tlet result\n\t\t\tswitch(prop) {\n\t\t\t\tcase Symbol.metroSource:\n\t\t\t\t\tresult = target\n\t\t\t\tbreak\n\t\t\t\tcase Symbol.metroProxy:\n\t\t\t\t\tresult = true\n\t\t\t\tbreak\n\t\t\t\tcase 'with':\n\t\t\t\t\tresult = function(...options) {\n\t\t\t\t\t\tif (typeof data !== 'undefined') { // data is kept in a seperate value, if it set earlier\n\t\t\t\t\t\t\toptions.unshift({ body: data }) // unshifted so it can be overridden by options\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn request(target, ...options)\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tcase 'data':\n\t\t\t\t\tresult = data\n\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\tif (target[prop] instanceof Function) {\n\t\t\t\t\t\tif (prop === 'clone') {\n\t\t\t\t\t\t\tresult = function() {\n\t\t\t\t\t\t\t\tconst cloned = target.clone()\n\n\t\t\t\t\t\t\t\tif (typeof data != 'undefined' \n\t\t\t\t\t\t\t\t\t&& !(typeof ReadableStream != 'undefined'\n\t\t\t\t\t\t\t\t\t\t&& data instanceof ReadableStream)) {\n\t\t\t\t\t\t\t\t\treturn request(cloned, { body: data })\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\treturn request(cloned)\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tresult = target[prop].bind(target)\n\t\t\t\t\t\t}\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = target[prop]\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t\treturn result\n\t\t}\n\t})\n}\n\nfunction getResponseParams(res, current)\n{\n\t// function to fetch all relevant properties of a Response\n\tlet params = current || {}\n\tif (!params.url && current.url) {\n\t\tparams.url = current.url\n\t}\n\tfor(let prop of ['status','statusText','headers','body','url','type','redirected']) {\n\t\tlet value = res[prop]\n\t\tif (typeof value == 'undefined' || value == null) {\n\t\t\tcontinue\n\t\t}\n\t\tif (value?.[Symbol.metroProxy]) {\n\t\t\tvalue = value[Symbol.metroSource]\n\t\t}\n\t\tif (typeof value == 'function') {\n\t\t\tparams[prop] = value(params[prop], params)\n\t\t} else {\n\t\t\tif (prop == 'url') {\n\t\t\t\t//TODO: check if this should use metro.url\n\t\t\t\tparams.url = new URL(value, params.url || 'https://localhost/')\n\t\t\t} else {\n\t\t\t\tparams[prop] = value\n\t\t\t}\n\t\t}\n\t}\n\tif (res instanceof Response && res.data) {\n\t\t// Response.body is always transformed into ReadableStreem FIXME: check this\n\t\t// metro.response.data is the original body passed to Response()\n\t\tparams.body = res.data\n\t}\n\treturn params\n}\n\n/**\n * @typedef {Response} MetroResponse\n * @property {Symbol(source)} - returns the target Response of this Proxy\n * @property {Symbol(isProxy)} - returns true\n * @method with - returns a new MetroResponse, with the given options added\n * @param {<ResponseOptions|Response|string|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - respomse options, handled in order\n * \n * Returns a new metro Response object\n * @param {<ResponseOptions|Response|string|URLSearchParams|FormData|ReadableStream|\n *   Blob|ArrayBuffer|DataView|TypedArray>} ...options - request options, handled in order\n * @return {MetroResponse} - a new metro Response object\n */\nexport function response(...options)\n{\n\tlet responseParams = {}\n\tfor (let option of options) {\n\t\tif (typeof option == 'string') {\n\t\t\tresponseParams.body = option\n\t\t} else if (option instanceof Response) {\n\t\t\tObject.assign(responseParams, getResponseParams(option, responseParams))\n\t\t} else if (option && typeof option == 'object') {\n\t\t\tif (option instanceof FormData\n\t\t\t\t|| option instanceof Blob\n\t\t\t\t|| option instanceof ArrayBuffer\n\t\t\t\t|| option instanceof DataView\n\t\t\t\t|| option instanceof ReadableStream\n\t\t\t\t|| option instanceof URLSearchParams\n\t\t\t\t|| option instanceof String\n\t\t\t\t|| (typeof globalThis.TypedArray != 'undefined' && option instanceof globalThis.TypedArray)\n\t\t\t) {\n\t\t\t\tresponseParams.body = option\n\t\t\t} else {\n\t\t\t\tObject.assign(responseParams, getResponseParams(option, responseParams))\n\t\t\t}\n\t\t}\n\t}\n\tlet data = undefined\n\tif (responseParams.body) {\n\t\tdata = responseParams.body\n\t}\n\t// if response status is 'null body status', don't set a body\n\t// that is response.status in [101, 204, 205, 304 ] \n\t// see: https://fetch.spec.whatwg.org/#statuses\n\tif ([101, 204, 205, 304 ].includes(responseParams.status)) {\n\t\tresponseParams.body = null\n\t}\n\tlet r = new Response(responseParams.body, responseParams)\t\n\tObject.freeze(r)\n\treturn new Proxy(r, {\n\t\tget(target, prop) {\n\t\t\tlet result\n\t\t\tswitch(prop) {\n\t\t\t\tcase Symbol.metroProxy:\n\t\t\t\t\tresult = true\n\t\t\t\tbreak\n\t\t\t\tcase Symbol.metroSource:\n\t\t\t\t\tresult = target\n\t\t\t\tbreak\n\t\t\t\tcase 'with':\n\t\t\t\t\tresult = function(...options) {\n\t\t\t\t\t\treturn response(target, ...options)\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tcase 'data':\n\t\t\t\t\t// body is turned into ReadableStream\n\t\t\t\t\t// data is the original body param\n\t\t\t\t\tresult = data\n\t\t\t\tbreak\n\t\t\t\tcase 'ok':\n\t\t\t\t\tresult = (target.status>=200) && (target.status<300)\n\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\tif (typeof target[prop] == 'function') {\n\t\t\t\t\t\tresult = target[prop].bind(target)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = target[prop]\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t\treturn result\n\t\t}\n\t})\n}\n\nfunction appendSearchParams(url, params)\n{\n\tif (typeof params == 'function') {\n\t\tparams(url.searchParams, url)\n\t} else {\n\t\tparams = new URLSearchParams(params)\n\t\tparams.forEach((value,key) => {\n\t\t\turl.searchParams.append(key, value)\n\t\t})\n\t}\n}\n\nfunction appendHashParams(value, params)\n{\n\tconst target = value[Symbol.metroSource] || value\n\tif (!(params instanceof URLSearchParams)) {\n\t\tparams = new URLSearchParams(params)\n\t}\n\tlet hash = target.hash || '#'\n\thash += '?' + params\n\treturn url(target, { hash })\n}\n\n/**\n * @typedef {URL} MetroURL\n * @property {Symbol(source)} - returns the target Request of this Proxy\n * @property {Symbol(isProxy)} - returns true\n * @method with - returns a new MetroRequest, with the given options added\n * @param {<URL|URLSearchParams|string|Object|Function>} ...options - url options, handled in order\n * \n * Returns a new metro URL object\n * @param {<URL|URLSearchParams|string|Object|Function>} ...options - url options, handled in order\n * @return {MetroURL} - a new metro URL object\n */\nexport function url(...options)\n{\n\tlet validParams = ['hash','fragment','host','hostname','href',\n\t\t'password','pathname','port','protocol','username','search','searchParams','hashParams']\n\tlet u = new URL('https://localhost/')\n\tlet hParams = null\n\tfor (let option of options) {\n\t\tif (typeof option == 'string' || option instanceof String) {\n\t\t\t// option is a relative or absolute url\n\t\t\tu = new URL(option, u)\n\t\t} else if (option instanceof URL \n\t\t\t|| (typeof Location != 'undefined' \n\t\t\t\t&& option instanceof Location)\n\t\t) {\n\t\t\tu = new URL(option)\n\t\t} else if (option instanceof URLSearchParams) {\n\t\t\tappendSearchParams(u, option)\n\t\t} else if (option && typeof option == 'object') {\n\t\t\tfor (let param in option) {\n\t\t\t\tswitch(param) {\n\t\t\t\t\tcase 'search':\n\t\t\t\t\t\tif (typeof option.search == 'function') {\n\t\t\t\t\t\t\toption.search(u.search, u)\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tu.search = new URLSearchParams(option.search)\n\t\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t\tcase 'searchParams':\n\t\t\t\t\t\tappendSearchParams(u, option.searchParams)\n\t\t\t\t\tbreak\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tif (!validParams.includes(param)) {\n\t\t\t\t\t\t\tthrow metroError('metro.url: unknown url parameter '+metroURL+'url/unknown-param-name/', param)\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (param=='fragment') {\n\t\t\t\t\t\t\tlet fragment = option.fragment\n\t\t\t\t\t\t\tif (fragment && typeof fragment == 'string' && fragment[0]!='#') {\n\t\t\t\t\t\t\t\tfragment = '#'+fragment\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\toption.hash = fragment\n\t\t\t\t\t\t\tparam = 'hash'\n\t\t\t\t\t\t} else if (param=='hashParams') {\n\t\t\t\t\t\t\thParams = option.hashParams; // add at the end\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (typeof option[param] == 'function') {\n\t\t\t\t\t\t\toption[param](u[param], u)\n\t\t\t\t\t\t} else if (\n\t\t\t\t\t\t\ttypeof option[param] == 'string' || option[param] instanceof String \n\t\t\t\t\t\t\t|| typeof option[param] == 'number' || option[param] instanceof Number\n\t\t\t\t\t\t\t|| typeof option[param] == 'boolean' || option[param] instanceof Boolean\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tu[param] = ''+option[param]\n\t\t\t\t\t\t} else if (typeof option[param] == 'object' && option[param].toString) {\n\t\t\t\t\t\t\tu[param] = option[param].toString()\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tthrow metroError('metro.url: unsupported value for '+param+' '+metroURL+'url/unsupported-param-value/', options[param])\n\t\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t}\n\t\t} else {\n\t\t\tthrow metroError('metro.url: unsupported option value '+metroURL+'url/unsupported-option-value/', option)\n\t\t}\n\t}\n\tif (hParams) {\n\t\tif (!u.hash) {\n\t\t\tu.hash = '#'\n\t\t}\n\t\tif (typeof hParams=='string') {\n\t\t\tu.hash += hParams\n\t\t} else {\n\t\t\tu = appendHashParams(u, hParams)\n\t\t}\n\t}\n\tObject.freeze(u)\n\treturn new Proxy(u, {\n\t\tget(target, prop) {\n\t\t\tlet result\n\t\t\tswitch(prop) {\n\t\t\t\tcase Symbol.metroProxy:\n\t\t\t\t\tresult = true\n\t\t\t\tbreak\n\t\t\t\tcase Symbol.metroSource:\n\t\t\t\t\tresult = target\n\t\t\t\tbreak\n\t\t\t\tcase 'with':\n\t\t\t\t\tresult = function(...options) {\n\t\t\t\t\t\treturn url(target, ...options)\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tcase 'filename':\n\t\t\t\t\tresult = target.pathname.split('/').pop()\n\t\t\t\tbreak\n\t\t\t\tcase 'folderpath':\n\t\t\t\t\tresult = target.pathname.substring(0,target.pathname.lastIndexOf('/')+1)\n\t\t\t\tbreak\n\t\t\t\tcase 'authority':\n\t\t\t\t\tresult = target.username ?? ''\n\t\t\t\t\tresult += target.password ? ':'+target.password : ''\n\t\t\t\t\tresult += result ? '@' : ''\n\t\t\t\t\tresult += target.hostname\n\t\t\t\t\tresult += target.port ? ':'+target.port : ''\n\t\t\t\t\tresult += '/'\n\t\t\t\t\tresult = target.protocol + '//' + result\n\t\t\t\tbreak\n\t\t\t\tcase 'fragment':\n\t\t\t\t\tresult = target.hash.substring(1)\n\t\t\t\tbreak\n\t\t\t\tcase 'scheme':\n\t\t\t\t\tif (target.protocol) {\n\t\t\t\t\t\tresult = target.protocol.substring(0, target.protocol.length-1)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = ''\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\tif (target[prop] instanceof Function) {\n\t\t\t\t\t\tresult = target[prop].bind(target)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresult = target[prop]\n\t\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t\treturn result\n\t\t}\n\t})\n}\n\nconst metroConsole = {\n\terror: (message, ...details) => {\n\t\tconsole.error('\u24C2\uFE0F  ',message, ...details)\n\t},\n\tinfo: (message, ...details) => {\n\t\tconsole.info('\u24C2\uFE0F  ',message, ...details)\n\t},\n\tgroup: (name) => {\n\t\tconsole.group('\u24C2\uFE0F  '+name)\n\t},\n\tgroupEnd: (name) => {\n\t\tconsole.groupEnd('\u24C2\uFE0F  '+name)\n\t}\n}\n\n\n/**\n * Custom Metro Error function that outputs to the console then throws an error\n */\nexport function metroError(message, ...details) {\n\tmetroConsole.error(message, ...details)\n\treturn new Error(message, ...details)\n}\n\nexport function deepClone(object) {\n\tif (Array.isArray(object)) {\n\t\treturn object.slice().map(deepClone)\n\t}\n\tif (object && typeof object==='object') {\n\t\tif (object.__proto__?.constructor==Object || !object.__proto__) { // plain objects\n\t\t\tlet result = Object.assign({}, object)\n\t\t\tObject.keys(result).forEach(key => {\n\t\t\t\tresult[key] = deepClone(object[key])\n\t\t\t})\n\t\t\treturn result\n\t\t} else {\n\t\t\treturn object // don't clone custom classes or functions\n\t\t}\n\t}\n\treturn object\n}", "/*\nTODO: add assertExplain global flag, so that if assert() fails, you can call explain() with\n  the same pattern and it will return text explanation of why it failed, each assertion function must \n  then check assertExplain, and return a text explanation of what fails or succeeds\n  top level can then filter to show only the failures\n  (so that not(x) can show the succeeds message of x)\n*/\n\nlet assertEnabled = false\n\n/**\n * Enables assertion testing with assert()\n */\nexport function enable() {\n\tassertEnabled = true\n}\n\n/**\n * Disables assertion testing with assert()\n */\nexport function disable() {\n\tassertEnabled = false\n}\n\nfunction appendPath(path='', key) {\n\tif (typeof path == 'undefined' || path == null) {\n\t\tpath = ''\n\t}\n\tif (typeof key == 'number') {\n\t\treturn `${path}[${key}]`\n\t}\n\treturn `${path}.${key}`\n}\n\nfunction pathToArray(path='') {\n\tif (Array.isArray(path)) {\n\t\treturn path\n\t}\n\tif (!path) {\n\t\treturn []\n\t}\n\tlet result = []\n\tlet matcher = /(?:^|\\.)([^.\\[\\]]+)|\\[(\\d+)\\]/g\n\tlet match\n\twhile ((match = matcher.exec(path))) {\n\t\tif (typeof match[1] != 'undefined') {\n\t\t\tresult.push(match[1])\n\t\t} else if (typeof match[2] != 'undefined') {\n\t\t\tresult.push(Number(match[2]))\n\t\t}\n\t}\n\treturn result\n}\n\nfunction pathToString(path=[]) {\n\tif (typeof path == 'string') {\n\t\treturn path.startsWith('.') ? path.slice(1) : path\n\t}\n\treturn path.map((part, index) => {\n\t\tif (typeof part == 'number') {\n\t\t\treturn `[${part}]`\n\t\t}\n\t\treturn `${index ? '.' : ''}${part}`\n\t}).join('')\n}\n\n\nfunction describeFunction(value) {\n\tif (value === String) {\n\t\treturn 'string'\n\t}\n\tif (value === Number) {\n\t\treturn 'number'\n\t}\n\tif (value === Boolean) {\n\t\treturn 'boolean'\n\t}\n\treturn value.name || 'function'\n}\n\nfunction clip(text, maxLength=60) {\n\tif (text.length <= maxLength) {\n\t\treturn text\n\t}\n\treturn text.slice(0, maxLength - 1)+'\u2026'\n}\n\nfunction quoteString(value) {\n\treturn `'${clip(String(value).replace(/\\\\/g, '\\\\\\\\').replace(/'/g, \"\\\\'\").replace(/\\n/g, '\\\\n'))}'`\n}\n\nfunction jsonSummary(value) {\n\ttry {\n\t\tlet json = JSON.stringify(value)\n\t\tif (typeof json == 'string') {\n\t\t\treturn clip(json)\n\t\t}\n\t} catch(e) {\n\t\t// fall through to the generic object description below\n\t}\n\tlet name = value?.constructor?.name\n\tif (name && name != 'Object') {\n\t\treturn name\n\t}\n\treturn Object.prototype.toString.call(value)\n}\n\nfunction formatValue(value) {\n\tif (typeof value == 'string') {\n\t\treturn quoteString(value)\n\t}\n\tif (typeof value == 'undefined') {\n\t\treturn 'undefined'\n\t}\n\tif (value === null) {\n\t\treturn 'null'\n\t}\n\tif (typeof value == 'function') {\n\t\treturn describeFunction(value)\n\t}\n\tif (value instanceof RegExp) {\n\t\treturn value.toString()\n\t}\n\tif (typeof value == 'number' || typeof value == 'boolean' || typeof value == 'bigint') {\n\t\treturn String(value)\n\t}\n\tif (typeof value == 'symbol') {\n\t\treturn value.toString()\n\t}\n\treturn jsonSummary(value)\n}\n\nfunction describeExpected(value) {\n\tif (value === String || value === Number || value === Boolean) {\n\t\treturn describeFunction(value)\n\t}\n\tif (typeof value == 'function') {\n\t\treturn describeFunction(value)\n\t}\n\tif (value instanceof RegExp) {\n\t\treturn value.toString()\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn '['+value.map(describeExpected).join(', ')+']'\n\t}\n\treturn formatValue(value)\n}\n\nfunction describeOneOf(patterns) {\n\treturn patterns.map(describeExpected).join(', ')\n}\n\nfunction conciseMessage(message, actual, expected) {\n\tif (message == 'data and pattern are not equal') {\n\t\treturn `expected ${formatValue(expected)}, found ${formatValue(actual)}`\n\t}\n\tif (message == 'data does not match pattern' || /^data\\[\\d+\\] does not match pattern$/.test(message)) {\n\t\treturn `expected ${describeExpected(expected)}, found ${formatValue(actual)}`\n\t}\n\tif (message == 'data is undefined, should match pattern') {\n\t\treturn `missing; expected ${describeExpected(expected)}`\n\t}\n\tif (message == 'data is required') {\n\t\treturn 'required'\n\t}\n\tif (message == 'data is an empty string, which is not allowed') {\n\t\treturn 'empty string is not allowed'\n\t}\n\tif (message == 'data is not an object, pattern is') {\n\t\treturn 'data is not an object'\n\t}\n\tif (message == 'data is not an instanceof pattern') {\n\t\treturn `expected instance of ${describeExpected(expected)}, found ${formatValue(actual)}`\n\t}\n\tif (message == 'data does not match oneOf patterns' || message == 'data does not match anyOf patterns') {\n\t\treturn `expected one of ${describeOneOf(expected)}, found ${formatValue(actual)}`\n\t}\n\tif (message == 'data matches pattern, when required not to') {\n\t\treturn `must not match ${describeExpected(expected)}`\n\t}\n\treturn message\n}\n\nexport function formatIssue(issue, options={}) {\n\tif (!issue || typeof issue != 'object') {\n\t\treturn String(issue)\n\t}\n\tlet path = issue.pathString || pathToString(issue.path || []) || 'value'\n\tlet indent = options.indent ?? ''\n\treturn `${indent}${path}: ${issue.message}`\n}\n\nexport function formatIssues(issues, options={}) {\n\tif (!issues) {\n\t\treturn false\n\t}\n\tlet indent = options.indent ?? '  - '\n\treturn (Array.isArray(issues) ? issues : [issues]).map(issue => formatIssue(issue, { ...options, indent }))\n}\n\nfunction issueFromProblem(problem) {\n\tif (!problem || typeof problem != 'object') {\n\t\treturn {\n\t\t\tpath: [],\n\t\t\tpathString: '',\n\t\t\tmessage: String(problem),\n\t\t\texpected: undefined,\n\t\t\tactual: undefined\n\t\t}\n\t}\n\tlet path = pathToArray(problem.path)\n\tlet pathString = pathToString(path)\n\tlet actual = problem.actual ?? problem.found\n\tlet expected = describeExpected(problem.expected)\n\tlet message = conciseMessage(problem.message, actual, problem.expected)\n\treturn {\n\t\tpath,\n\t\tpathString,\n\t\tmessage,\n\t\texpected,\n\t\tactual\n\t}\n}\n\nfunction problemsToIssues(problems) {\n\tif (!problems) {\n\t\treturn []\n\t}\n\tlet result = []\n\tfor (let problem of Array.isArray(problems) ? problems : [problems]) {\n\t\tif (!problem) {\n\t\t\tcontinue\n\t\t}\n\t\tif (problem && typeof problem == 'object' && problem.problems) {\n\t\t\tlet nested = problemsToIssues(problem.problems)\n\t\t\tif (nested.length) {\n\t\t\t\tresult = result.concat(nested)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t}\n\t\tresult.push(issueFromProblem(problem))\n\t}\n\treturn result\n}\n\n/**\n * This function will check the source for the assertions in test, if\n * assertion checking is enabled.\n * If it is, and any assertion fails, it will throw an assertError\n * with a list of problems and other details.\n */\nexport function assert(source, test) {\n\tif (assertEnabled) {\n\t\tlet problems = fails(source,test)\n\t\tif (problems) {\n\t\t\tlet assertionIssues = problemsToIssues(problems)\n\t\t\tlet formattedIssues = formatIssues(assertionIssues)\n\t\t\tlet message = 'Assertions failed:\\n'+formattedIssues.join('\\n')\n\t\t\tconsole.error('\uD83C\uDD70\uFE0F  '+message)\n\t\t\tthrow new Error(message, {\n\t\t\t\tcause: { problems, issues: assertionIssues, source } \n\t\t\t})\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a pattern, only if the value is not null or undefined\n */\nexport function Optional(pattern) {\n\treturn function _Optional(data, root, path) {\n\t\tif (typeof data != 'undefined' && data!=null && typeof pattern != 'undefined' ) {\n\t\t\treturn fails(data, pattern, root, path)\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a pattern, always.\n */\nexport function Required(pattern) {\n\treturn function _Required(data, root, path) {\n\t\tif (data==null || typeof data == 'undefined') {\n\t\t\treturn error('data is required', data, pattern || 'any value', path)\n\t\t} else if (typeof pattern != 'undefined') {\n\t\t\treturn fails(data, pattern, root, path)\n\t\t} else {\n\t\t\treturn false\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a pattern, only if the value is not null or undefined\n * If null or undefined, it does print a warning to the console.\n */\nexport function Recommended(pattern) {\n\treturn function _Recommended(data, root, path) {\n\t\tif (data==null || typeof data == 'undefined') {\n\t\t\twarn('data does not contain recommended value', data, pattern, path)\n\t\t\treturn false\n\t\t} else {\n\t\t\treturn fails(data, pattern, root, path)\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value against a set of patterns, untill one succeeds\n * Returns an error if none succeed\n */\nexport function oneOf(...patterns) { \n\treturn function _oneOf(data, root, path) {\n\t\tfor(let pattern of patterns) {\n\t\t\tif (!fails(data, pattern, root, path)) {\n\t\t\t\treturn false\n\t\t\t}\n\t\t}\n\t\treturn error('data does not match oneOf patterns', data, patterns, path)\n\t}\n}\n\n/**\n * Tests a given array of values against a set of patterns\n * If any value does not match one of the patterns, it will return an error\n * If not given an array to test, it will return an error\n */\nexport function anyOf(...patterns) {\n\treturn function _anyOf(data, root, path) {\n\t\tif (!Array.isArray(data)) {\n\t\t\treturn error('data is not an array',data,'anyOf',path)\n\t\t}\n\t\tfor (let [index, value] of data.entries()) {\n\t\t\tlet itemPath = appendPath(path, index)\n\t\t\tif (oneOf(...patterns)(value, root, itemPath)) {\n\t\t\t\treturn error('data does not match anyOf patterns',value,patterns,itemPath)\n\t\t\t}\n\t\t}\n\t\treturn false\n\t}\n}\n\nexport function allOf(...patterns) {\n\treturn function _allOf(data, root, path) {\n\t\tlet problems = []\n\t\tfor (let pattern of patterns) {\n\t\t\tproblems = problems.concat(fails(data, pattern, root, path))\n\t\t}\n\t\tproblems = problems.filter(Boolean)\n\t\tif (problems.length) {\n\t\t\treturn error('data does not match all given patterns', data, patterns, path, problems)\n\t\t}\n\t}\n}\n\n/**\n * Tests a given value to see if it is a valid (and absolute) URL, by\n * parsing it with the URL() constructor, and then testing the href\n * value to be equal to the initial value.\n */\nexport function validURL(data, root, path) {\n\ttry {\n\t\tif (data instanceof URL) {\n\t\t\tdata = data.href\n\t\t}\n\t\tlet url = new URL(data)\n\t\tif (url.href!=data) {\n\t\t\tif (!(url.href+'/'==data || url.href==data+'/')) {\n\t\t\t\t// new URL() always adds a / as path\n\t\t\t\treturn error('data is not a valid url',data,'validURL',path)\n\t\t\t}\n\t\t}\n\t} catch(e) {\n\t\treturn error('data is not a valid url',data,'validURL',path)\n\t}\n}\n\n/**\n * Tests a given value to see if it looks like a valid email address, by\n * testing it against a regular expression. So there are no guarantees that\n * it is an actual working email address, just that it looks like one.\n */\nexport function validEmail(data, root, path) {\n\tif (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(data)) {\n\t\treturn error('data is not a valid email',data,'validEmail',path)\n\t}\n}\n\n/**\n * Tests a given value to see if it is an object which is an instance of the given\n * constructor\n */\nexport function instanceOf(constructor) {\n\treturn function _instanceOf(data, root, path) {\n\t\tif (!(data instanceof constructor)) {\n\t\t\treturn error('data is not an instanceof pattern',data,constructor,path)\n\t\t}\n\t}\n}\n\n/**\n * Runs the given test pattern on a value, if the test succeeds, it fails\n * the not() test.\n */\nexport function not(pattern) {\n\treturn function _not(data, root, path) {\n\t\tif (!fails(data, pattern, root, path)) {\n\t\t\treturn error('data matches pattern, when required not to', data, pattern, path)\n\t\t}\n\t}\n}\n\n/**\n * Returns structured, path-aware issues if the data fails to satisfy\n * the assertions in the given pattern, or false otherwise.\n * @param {any} data    The data to match\n * @param {any} pattern The pattern to match\n * @param {any} root    Root object for assertions, set to data by default\n * @return {Array|false} Array with structured issues if the pattern fails, false otherwise\n */\nexport function issues(data, pattern, root) {\n\tlet problems = fails(data, pattern, root)\n\tif (!problems) {\n\t\treturn false\n\t}\n\treturn problemsToIssues(problems)\n}\n\n/**\n * returns an array of problems if the data fails to satisfy \n * the assertions in the given pattern, false otherwise\n * @param {any} data    The data to match\n * @param {any} pattern The pattern to match\n * @param {any} root    Root object for assertions, set to data by default\n * @return {Array|false} Array with problems if the pattern fails, false otherwise\n */\nexport function fails(data, pattern, root, path='') {\n\tif (typeof root == 'undefined') {\n\t\troot = data\n\t}\n\tlet problems = []\n\tif (pattern === Boolean) {\n\t\tif (typeof data != 'boolean' && !(data instanceof Boolean)) {\n\t\t\tproblems.push(error('data is not a boolean', data, pattern, path))\n\t\t}\t\t\n\t} else if (pattern === Number) {\n\t\tif (typeof data != 'number' && !(data instanceof Number)) {\n\t\t\tproblems.push(error('data is not a number', data, pattern, path))\n\t\t}\n\t} else if (pattern === String) {\n\t\tif (typeof data != 'string' && !(data instanceof String)) {\n\t\t\tproblems.push(error('data is not a string', data, pattern, path))\n\t\t}\n\t\tif (data == \"\") {\n\t\t\tproblems.push(error('data is an empty string, which is not allowed', data, pattern, path))\n\t\t}\n\t} else if (pattern instanceof RegExp) {\n    \tif (Array.isArray(data)) {\n\t\t\tlet index = data.findIndex((element,index) => fails(element,pattern,root,appendPath(path, index)))\n            if (index>-1) {\n            \tproblems.push(error('data['+index+'] does not match pattern', data[index], pattern, appendPath(path, index)))\n            }\n        } else if (typeof data == 'undefined') {\n        \tproblems.push(error('data is undefined, should match pattern', data, pattern, path))\n    \t} else if (!pattern.test(data)) {\n        \tproblems.push(error('data does not match pattern', data, pattern, path))\n        }\n    } else if (pattern instanceof Function) {\n        let problem = pattern(data, root, path)\n        if (problem) {\n        \tif (Array.isArray(problem)) {\n        \t\tproblems = problems.concat(problem)\n        \t} else {\n\t        \tproblems.push(problem)\n\t        }\n        }\n    } else if (Array.isArray(pattern)) {\n\t\tif (!Array.isArray(data)) {\n\t\t\tproblems.push(error('data is not an array',data,[],path))\n\t\t} else {\n\t\t\tfor (let p of pattern) {\n\t\t\t\tfor (let index of data.keys()) {\n\t\t\t\t\tlet problem = fails(data[index], p, root, appendPath(path, index))\n\t\t\t\t\tif (Array.isArray(problem)) {\n\t\t\t\t\t\tproblems = problems.concat(problem)\n\t\t\t\t\t} else if (problem) {\n\t\t\t\t\t\tproblems.push(problem)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n    } else if (pattern && typeof pattern == 'object') {\n        if (Array.isArray(data)) {\n            let index = data.findIndex((element,index) => fails(element,pattern,root,appendPath(path, index)))\n            if (index>-1) {\n            \tproblems.push(error('data['+index+'] does not match pattern', data[index], pattern, appendPath(path, index)))\n            }\n        } else if (!data || typeof data != 'object') {\n        \tproblems.push(error('data is not an object, pattern is', data, pattern, path))\n        } else {\n        \tif (data instanceof URLSearchParams) {\n        \t\tdata = Object.fromEntries(data)\n        \t}\n        \tif (pattern instanceof Function) {\n        \t\tlet result = fails(data, pattern, root, path)\n\t            if (result) {\n\t            \tproblems = problems.concat(result)\n\t            }\n        \t} else {\n\t\t        for (const [patternKey, subpattern] of Object.entries(pattern)) {\n\t\t            let result = fails(data[patternKey], subpattern, root, appendPath(path, patternKey))\n\t\t            if (result) {\n\t\t            \tproblems = problems.concat(result)\n\t\t            }\n\t\t        }\n\t\t    }\n\t    }\n    } else {\n    \tif (pattern!=data) {\n    \t\tproblems.push(error('data and pattern are not equal', data, pattern, path))\n    \t}\n    }\n    if (problems.length) {\n    \treturn problems\n    }\n    return false\n}\n\n/**\n * Returns an object with message, found and expected properties\n */ \nexport function error(message, found, expected, path='', problems) {\n\tlet pathParts = pathToArray(path)\n\tlet result = {\n\t\tpath,\n\t\tpathString: pathToString(pathParts),\n\t\tpathParts,\n\t\tmessage,\n\t\tfound,\n\t\texpected\n\t}\n\tif (problems) {\n\t\tresult.problems = problems\n\t}\n\treturn result\n}\n\nexport function warn(message, data, pattern, path) {\n\tconsole.warn('\uD83C\uDD70\uFE0F  Assert: '+path, message, pattern, data)\n}\n", "import * as assertApi from './assert-core.mjs'\n\nexport * from './assert-core.mjs'\n\nglobalThis.assert = { ...assertApi }\n", "export function tokenStore(site) {\n\tlet localState, localTokens\n\tif (typeof localStorage !== 'undefined') {\n\t\tlocalState = {\n\t\t\tget: ()      => localStorage.getItem('metro/state:'+site),\n\t\t\tset: (value) => localStorage.setItem('metro/state:'+site, value),\n\t\t\thas: ()      => localStorage.getItem('metro/state:'+site)!==null,\n\t\t\tdelete: ()   => localStorage.removeItem('metro/state:'+site)\n\t\t}\n\t\tlocalTokens = {\n\t\t\tget: (name)        => JSON.parse(localStorage.getItem(site+':'+name)),\n\t\t\tset: (name, value) => localStorage.setItem(site+':'+name, JSON.stringify(value)),\n\t\t\thas: (name)        => localStorage.getItem(site+':'+name)!==null,\n\t\t\tdelete: (name)     => localStorage.removeItem(site+':'+name)\n\t\t}\n\t} else {\n\t\tlet stateMap = new Map()\n\t\tlocalState = {\n\t\t\tget: ()      => stateMap.get('metro/state:'+site),\n\t\t\tset: (value) => stateMap.set('metro/state:'+site, value),\n\t\t\thas: ()      => stateMap.has('metro/state:'+site),\n\t\t\tdelete: ()   => stateMap.delete('metro/state:'+site)\n\t\t}\n\t\tlocalTokens = new Map()\n\t}\n\treturn {\n\t\tstate: localState,\n\t\ttokens: localTokens\n\t}\n}", "import * as metro from '@muze-nl/metro-core'\nimport { assert, Required, validURL } from '@muze-nl/assert'\nimport {tokenStore} from './tokenstore.mjs'\n\nconst SUPPORTED_TOKEN_TYPES = new Map([\n\t['bearer', 'Bearer'],\n\t['dpop', 'DPoP']\n])\n\nconst SUPPORTED_TOKEN_ENDPOINT_AUTH_METHODS = new Set([\n\t'none',\n\t'client_secret_post',\n\t'client_secret_basic'\n])\n\n/**\n * oauth2mw returns a middleware for @muze-nl/metro that\n * implements oauth2 authentication in the metro client.\n * it supports the authorization_code, refresh_token and\n * client_credentials grant_type.\n * Since implicit flow is deemed insecure, it is not supported.\n * by default it will use PKCE and generate a random code_verifier,\n * to skip this, set options.oauth2_configuration.code_verifier to false\n */\nexport default function oauth2mw(options)\n{\n\tconst defaultOptions = {\n\t\tclient: metro.client(),\n\t\tforce_authorization: false,\n\t\tsite: 'default',\n\t\toauth2_configuration: {\n\t\t\tauthorization_endpoint: '/authorize',\n\t\t\ttoken_endpoint: '/token',\n\t\t\tredirect_uri: globalThis.document?.location.href,\n\t\t\tgrant_type: 'authorization_code',\n\t\t\tcode_verifier: generateCodeVerifier(64)\n\t\t},\n\t\tauthorize_callback: async url => {\n\t\t\tif (window.location.href != url.href) {\n\t\t\t\twindow.location.replace(url.href)\n\t\t\t}\n\t\t\treturn false\n\t\t}\n\t}\n\n\tassert(options, {})\n\n\tconst oauth2 = Object.assign({}, defaultOptions.oauth2_configuration, options?.oauth2_configuration)\n\toptions = Object.assign({}, defaultOptions, options)\n\toptions.oauth2_configuration = oauth2\n\n\tconst store = tokenStore(options.site)\n\tif (!options.tokens) {\n\t\toptions.tokens = store.tokens\n\t}\n\tif (!options.state) {\n\t\toptions.state = store.state\n\t}\n\n\tassert(options, {\n\t\toauth2_configuration: {\n\t\t\tclient_id: Required(/.+/),\n\t\t\tgrant_type: 'authorization_code',\n\t\t\tauthorization_endpoint: Required(validURL),\n\t\t\ttoken_endpoint: Required(validURL),\n\t\t\tredirect_uri: Required(validURL)\n\t\t}\n\t})\n\n\tfor (let option in oauth2) {\n\t\tswitch(option) {\n\t\t\tcase 'access_token':\n\t\t\tcase 'authorization_code':\n\t\t\tcase 'refresh_token':\n\t\t\t\toptions.tokens.set(option, normalizeInitialToken(option, oauth2[option]))\n\t\t\tbreak\n\t\t}\n\t}\n\n\t/**\n\t * This is the Metro middleware function. It lets public requests pass through\n\t * unchanged, but retries through the OAuth2 flow when the resource responds\n\t * as if authorization is required. Exceptions from downstream middleware are\n\t * intentionally not caught here; network/programming errors should remain\n\t * visible to the caller instead of being mistaken for an auth challenge.\n\t */\n\treturn async function(req, next) {\n\t\tif (options.force_authorization) {\n\t\t\treturn oauth2authorized(req, next)\n\t\t}\n\t\tconst res = await next(req)\n\t\tif (res.ok || !shouldAuthorizeResponse(res)) {\n\t\t\treturn res\n\t\t}\n\t\treturn oauth2authorized(req, next)\n\t}\n\n\t/**\n\t * Implements the OAuth2 authorization flow for a single request. It retrieves\n\t * an authorization code from the current location when returning from a\n\t * redirect, fetches or refreshes an access token when needed, and finally\n\t * sends the request with the correct Authorization header.\n\t */\n\tasync function oauth2authorized(req, next, retryState = {})\n\t{\n\t\tgetTokensFromLocation()\n\t\tconst accessToken = options.tokens.get('access_token')\n\t\tconst refreshToken = options.tokens.get('refresh_token')\n\t\tconst tokenIsExpired = isExpired(accessToken)\n\t\tif (!accessToken || (tokenIsExpired && !refreshToken)) {\n\t\t\tconst token = await fetchAccessToken()\n\t\t\tif (!token) {\n\t\t\t\treturn metro.response('false')\n\t\t\t}\n\t\t\treturn oauth2authorized(req, next)\n\t\t} else if (tokenIsExpired && refreshToken) {\n\t\t\tconst token = await refreshAccessToken()\n\t\t\tif (!token) {\n\t\t\t\treturn metro.response('false')\n\t\t\t}\n\t\t\treturn oauth2authorized(req, next)\n\t\t} else {\n\t\t\tconst authorizedReq = metro.request(req, {\n\t\t\t\theaders: {\n\t\t\t\t\tAuthorization: accessToken.type+' '+accessToken.value\n\t\t\t\t}\n\t\t\t})\n\t\t\tconst res = await next(authorizedReq)\n\t\t\tif (!shouldAuthorizeResponse(res) || retryState.handledRejectedToken) {\n\t\t\t\treturn res\n\t\t\t}\n\t\t\toptions.tokens.delete('access_token')\n\t\t\tconst token = refreshToken\n\t\t\t\t? await refreshAccessToken()\n\t\t\t\t: await fetchAccessToken()\n\t\t\tif (!token) {\n\t\t\t\treturn metro.response('false')\n\t\t\t}\n\t\t\treturn oauth2authorized(req, next, { handledRejectedToken: true })\n\t\t}\n\t}\n\n\t/**\n\t * Fetches the authorization_code from a redirected URI or hash fragment,\n\t * validates the stored state, and removes OAuth2 callback parameters from the\n\t * browser URL. Authorization endpoint errors are surfaced immediately.\n\t */\n\tfunction getTokensFromLocation()\n\t{\n\t\tif (typeof window !== 'undefined' && window?.location) {\n\t\t\tlet url = metro.url(window.location)\n\t\t\tlet code, state, params\n\t\t\tif (url.searchParams.has('code') || url.searchParams.has('error')) {\n\t\t\t\tparams = url.searchParams\n\t\t\t\turl = url.with({ search:'' })\n\t\t\t\thistory.pushState({},'',url.href)\n\t\t\t} else if (url.hash) {\n\t\t\t\tlet query = url.hash.substr(1)\n\t\t\t\tparams = new URLSearchParams('?'+query)\n\t\t\t\turl = url.with({ hash:'' })\n\t\t\t\thistory.pushState({},'',url.href)\n\t\t\t}\n\t\t\tif (params) {\n\t\t\t\tif (params.has('error')) {\n\t\t\t\t\tthrow metro.metroError('oauth2mw: authorization failed: '+params.get('error')+(params.get('error_description') ? ' ('+params.get('error_description')+')' : ''))\n\t\t\t\t}\n\t\t\t\tcode = params.get('code')\n\t\t\t\tstate = params.get('state')\n\t\t\t\tvalidateState(state)\n\t\t\t\tif (code) {\n\t\t\t\t\toptions.tokens.set('authorization_code', code)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Fetches an access token. For authorization_code flow, this first asks the\n\t * configured authorize_callback to obtain an authorization code. Token\n\t * responses are validated and normalized before they are stored.\n\t */\n\tasync function fetchAccessToken()\n\t{\n\t\tif (oauth2.grant_type === 'authorization_code' && !options.tokens.has('authorization_code')) {\n\t\t\tlet authReqURL = await getAuthorizationCodeURL()\n\t\t\tif (!options.authorize_callback || typeof options.authorize_callback !== 'function') {\n\t\t\t\tthrow metro.metroError('oauth2mw: oauth2 with grant_type:authorization_code requires a callback function in client options.authorize_callback')\n\t\t\t}\n\t\t\tlet authorization = await options.authorize_callback(authReqURL)\n\t\t\tif (authorization) {\n\t\t\t\tstoreAuthorizationResult(authorization)\n\t\t\t} else {\n\t\t\t\treturn false\n\t\t\t}\n\t\t}\n\t\tlet tokenReq = getAccessTokenRequest()\n\t\tlet response = await options.client.post(tokenReq)\n\t\tif (!response.ok) {\n\t\t\tlet msg = await response.text()\n\t\t\tthrow metro.metroError('OAuth2mw: fetch access_token: '+response.status+': '+response.statusText+' ('+msg+')', {cause: tokenReq} )\n\t\t}\n\t\tlet data = await response.json()\n\t\tstoreTokenResponse(data)\n\t\toptions.tokens.delete('authorization_code')\n\t\treturn data\n\t}\n\n\t/**\n\t * Fetches a new access token using the stored refresh token. If the server\n\t * returns a replacement refresh token, it replaces the stored token; if not,\n\t * the existing refresh token remains valid until the provider rejects it.\n\t */\n\tasync function refreshAccessToken()\n\t{\n\t\tlet refreshTokenReq = getAccessTokenRequest('refresh_token')\n\t\tlet response = await options.client.post(refreshTokenReq)\n\t\tif (!response.ok) {\n\t\t\tlet msg = await response.text()\n\t\t\tthrow metro.metroError('OAuth2mw: refresh access_token: '+response.status+': '+response.statusText+' ('+msg+')', {cause: refreshTokenReq} )\n\t\t}\n\t\tlet data = await response.json()\n\t\tstoreTokenResponse(data)\n\t\treturn data\n\t}\n\n\t/**\n\t * Returns the front-channel authorization URL used to obtain an authorization\n\t * code. Client secrets are deliberately never included here; confidential\n\t * client authentication belongs at the token endpoint only.\n\t */\n\tasync function getAuthorizationCodeURL()\n\t{\n\t\tif (!oauth2.authorization_endpoint) {\n\t\t\tthrow metro.metroError('oauth2mw: Missing options.oauth2_configuration.authorization_endpoint')\n\t\t}\n\t\tlet url = metro.url(oauth2.authorization_endpoint, {hash: ''})\n\t\tassert(oauth2, {\n\t\t\tclient_id: /.+/,\n\t\t\tredirect_uri: /.+/,\n\t\t\tscope: /.*/\n\t\t})\n\t\tlet search = {\n\t\t\tresponse_type: 'code',\n\t\t\tclient_id:     oauth2.client_id,\n\t\t\tredirect_uri:  oauth2.redirect_uri,\n\t\t\tstate:         oauth2.state || createState(40)\n\t\t}\n\t\tif (oauth2.response_type) {\n\t\t\tsearch.response_type = oauth2.response_type\n\t\t}\n\t\tif (oauth2.response_mode) {\n\t\t\tsearch.response_mode = oauth2.response_mode\n\t\t}\n\t\toptions.state.set(search.state)\n\t\tif (oauth2.code_verifier) {\n\t\t\toptions.tokens.set('code_verifier', oauth2.code_verifier)\n\t\t\tsearch.code_challenge = await generateCodeChallenge(oauth2.code_verifier)\n\t\t\tsearch.code_challenge_method = 'S256'\n\t\t}\n\t\tif (oauth2.scope) {\n\t\t\tsearch.scope = oauth2.scope\n\t\t}\n\t\tif (oauth2.prompt) {\n\t\t\tsearch.prompt = oauth2.prompt\n\t\t}\n\t\tif (oauth2.nonce) {\n\t\t\tsearch.nonce = oauth2.nonce\n\t\t}\n\t\treturn metro.url(url, { search })\n\t}\n\n\t/**\n\t * Returns a token endpoint request for the configured grant_type. The returned\n\t * request contains the form-encoded body and, when needed, the token endpoint\n\t * client authentication headers.\n\t */\n\tfunction getAccessTokenRequest(grant_type=null)\n\t{\n\t\tassert(oauth2, {\n\t\t\tclient_id: /.+/,\n\t\t\tredirect_uri: /.+/\n\t\t})\n\t\tif (!oauth2.token_endpoint) {\n\t\t\tthrow metro.metroError('oauth2mw: Missing options.endpoints.token url')\n\t\t}\n\t\tlet url = metro.url(oauth2.token_endpoint, {hash: ''})\n\t\tlet params = {\n\t\t\tgrant_type: grant_type || oauth2.grant_type\n\t\t}\n\t\tlet headers = {}\n\t\tapplyTokenEndpointAuthentication(params, headers)\n\t\tif (oauth2.scope) {\n\t\t\tparams.scope = oauth2.scope\n\t\t}\n\t\tswitch(params.grant_type) {\n\t\t\tcase 'authorization_code':\n\t\t\t\tparams.redirect_uri = oauth2.redirect_uri\n\t\t\t\tparams.code = options.tokens.get('authorization_code')\n\t\t\t\tconst code_verifier = options.tokens.get('code_verifier')\n\t\t\t\tif (code_verifier) {\n\t\t\t\t\tparams.code_verifier = code_verifier\n\t\t\t\t}\n\t\t\tbreak\n\t\t\tcase 'client_credentials':\n\t\t\tbreak\n\t\t\tcase 'refresh_token':\n\t\t\t\tparams.refresh_token = tokenValue(options.tokens.get('refresh_token'))\n\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tthrow new Error('Unknown grant_type: '+params.grant_type)\n\t\t\tbreak\n\t\t}\n\t\treturn metro.request(url, {method: 'POST', headers, body: new URLSearchParams(params) })\n\t}\n\n\t/**\n\t * Adds client authentication to the token endpoint request. Public clients use\n\t * token_endpoint_auth_method 'none'; confidential clients can use\n\t * client_secret_post or client_secret_basic.\n\t */\n\tfunction applyTokenEndpointAuthentication(params, headers)\n\t{\n\t\tconst method = tokenEndpointAuthMethod(oauth2)\n\t\tif (method === 'none') {\n\t\t\tparams.client_id = oauth2.client_id\n\t\t\treturn\n\t\t}\n\t\tif (!oauth2.client_secret) {\n\t\t\tthrow metro.metroError('oauth2mw: token_endpoint_auth_method '+method+' requires oauth2_configuration.client_secret')\n\t\t}\n\t\tif (method === 'client_secret_post') {\n\t\t\tparams.client_id = oauth2.client_id\n\t\t\tparams.client_secret = oauth2.client_secret\n\t\t\treturn\n\t\t}\n\t\tif (method === 'client_secret_basic') {\n\t\t\theaders.Authorization = basicAuth(oauth2.client_id, oauth2.client_secret)\n\t\t\treturn\n\t\t}\n\t}\n\n\t/**\n\t * Stores the authorization code returned by the authorize_callback. Callbacks\n\t * may return either a plain code string or an object containing code/state.\n\t */\n\tfunction storeAuthorizationResult(authorization)\n\t{\n\t\tlet code = authorization\n\t\tif (authorization && typeof authorization === 'object') {\n\t\t\tif (authorization.error) {\n\t\t\t\tthrow metro.metroError('oauth2mw: authorization failed: '+authorization.error)\n\t\t\t}\n\t\t\tvalidateState(authorization.state)\n\t\t\tcode = authorization.authorization_code || authorization.code\n\t\t}\n\t\tif (!code) {\n\t\t\tthrow metro.metroError('oauth2mw: authorization callback did not return an authorization code')\n\t\t}\n\t\toptions.tokens.set('authorization_code', code)\n\t}\n\n\t/**\n\t * Validates the OAuth2 state value to protect the authorization response from\n\t * being accepted in the wrong client flow.\n\t */\n\tfunction validateState(state)\n\t{\n\t\tlet storedState = options.state.get()\n\t\tif (!state || state!==storedState) {\n\t\t\tthrow metro.metroError('oauth2mw: authorization state mismatch')\n\t\t}\n\t}\n\n\t/**\n\t * Validates and stores a token endpoint response. Unknown extra fields are\n\t * ignored, as required by OAuth2, while access_token/token_type are required.\n\t */\n\tfunction storeTokenResponse(data)\n\t{\n\t\tconst token = validateTokenResponse(data)\n\t\toptions.tokens.set('access_token', token)\n\t\tif (data.refresh_token) {\n\t\t\toptions.tokens.set('refresh_token', { value: data.refresh_token })\n\t\t}\n\t}\n}\n\n/**\n * Returns true when a resource response should trigger OAuth2 authorization.\n * A 401 usually means missing/invalid credentials. A Bearer/DPoP\n * insufficient_scope challenge is not recoverable by simply retrying login, so\n * it is passed back to the caller.\n */\nfunction shouldAuthorizeResponse(res)\n{\n\tif (!res) {\n\t\treturn false\n\t}\n\tif (res.status === 400) {\n\t\treturn true\n\t}\n\tconst challenge = parseBearerChallenge(res.headers?.get('WWW-Authenticate'))\n\tif (challenge?.error === 'insufficient_scope') {\n\t\treturn false\n\t}\n\treturn res.status === 401\n}\n\n/**\n * Normalizes tokens supplied directly in oauth2_configuration so older calling\n * code can still pass plain token strings while the middleware internally uses\n * token objects for access tokens.\n */\nfunction normalizeInitialToken(name, token)\n{\n\tif (name === 'access_token' && token && typeof token === 'object') {\n\t\treturn token\n\t}\n\tif (name === 'access_token') {\n\t\treturn { value: token, type: 'Bearer', expires: null }\n\t}\n\tif (name === 'refresh_token' && token && typeof token === 'object') {\n\t\treturn token\n\t}\n\treturn token\n}\n\n/**\n * Validates the client-relevant fields of a token endpoint response and returns\n * the internal access-token shape used by the middleware.\n */\nfunction validateTokenResponse(data)\n{\n\tif (!data || typeof data !== 'object') {\n\t\tthrow metro.metroError('OAuth2mw: token endpoint did not return a JSON object')\n\t}\n\tif (!data.access_token) {\n\t\tthrow metro.metroError('OAuth2mw: token response did not include access_token')\n\t}\n\tif (!data.token_type) {\n\t\tthrow metro.metroError('OAuth2mw: token response did not include token_type')\n\t}\n\tconst tokenType = normalizeTokenType(data.token_type)\n\treturn {\n\t\tvalue: data.access_token,\n\t\texpires: data.expires_in === undefined ? null : getExpires(data.expires_in),\n\t\ttype: tokenType,\n\t\tscope: data.scope\n\t}\n}\n\n/**\n * Normalizes supported token types to the spelling used in Authorization\n * headers. Unsupported token types are rejected because the client would not\n * know how to use them safely.\n */\nfunction normalizeTokenType(type)\n{\n\tconst normalized = SUPPORTED_TOKEN_TYPES.get(String(type).toLowerCase())\n\tif (!normalized) {\n\t\tthrow metro.metroError('OAuth2mw: unsupported token_type '+type)\n\t}\n\treturn normalized\n}\n\n/**\n * Determines the token endpoint authentication method. The legacy default is\n * kept for compatibility: clients with a secret use client_secret_post, public\n * clients use none.\n */\nfunction tokenEndpointAuthMethod(oauth2)\n{\n\tconst method = oauth2.token_endpoint_auth_method || (oauth2.client_secret ? 'client_secret_post' : 'none')\n\tif (!SUPPORTED_TOKEN_ENDPOINT_AUTH_METHODS.has(method)) {\n\t\tthrow metro.metroError('oauth2mw: unsupported token_endpoint_auth_method '+method)\n\t}\n\treturn method\n}\n\n/**\n * Builds a client_secret_basic Authorization header value for the token\n * endpoint. The credentials are form-encoded before base64 encoding.\n */\nfunction basicAuth(clientId, clientSecret)\n{\n\tconst value = formEncode(clientId)+':'+formEncode(clientSecret)\n\treturn 'Basic '+base64_encode(value)\n}\n\nfunction formEncode(value)\n{\n\treturn encodeURIComponent(value).replace(/%20/g, '+')\n}\n\nfunction base64_encode(value)\n{\n\tif (typeof btoa === 'function') {\n\t\treturn btoa(value)\n\t}\n\treturn Buffer.from(value, 'binary').toString('base64')\n}\n\n/**\n * Returns the raw token value from either the current object form or the older\n * plain-string form.\n */\nfunction tokenValue(token)\n{\n\treturn token && typeof token === 'object' ? token.value : token\n}\n\n/**\n * Returns true if the access token is expired. Tokens without an expires value\n * are treated as having unknown/non-expiring lifetime.\n */\nexport function isExpired(token)\n{\n\tif (!token) {\n\t\treturn true\n\t}\n\tif (!token.expires) {\n\t\treturn false\n\t}\n\tlet expires = new Date(token.expires)\n\tlet now = new Date();\n\treturn now.getTime() > expires.getTime();\n}\n\n/**\n * Returns a Date based on a duration, which can either be a Date instance or a\n * number of seconds from now.\n */\nexport function getExpires(duration)\n{\n\tif (duration instanceof Date) {\n\t\treturn new Date(duration.getTime());\n\t}\n\tif (typeof duration === 'number') {\n\t\tlet date = new Date();\n\t\tdate.setSeconds(date.getSeconds() + duration);\n\t\treturn date;\n\t}\n\tthrow new TypeError('Unknown expires type '+duration);\n}\n\n/**\n * Returns a PKCE code_verifier. The result is already base64url encoded and can\n * be stored until the matching authorization code is exchanged.\n */\nexport function\tgenerateCodeVerifier(size=64)\n{\n\tconst code_verifier = new Uint8Array(size)\n\tglobalThis.crypto.getRandomValues(code_verifier)\n\treturn base64url_encode(code_verifier)\n}\n\n/**\n * Returns the PKCE S256 code_challenge derived from a code_verifier. This is\n * async because it uses WebCrypto's SHA-256 digest API.\n */\nexport async function generateCodeChallenge(code_verifier)\n{\n\tconst encoder = new TextEncoder()\n\tconst data = encoder.encode(code_verifier)\n\tconst challenge = await globalThis.crypto.subtle.digest('SHA-256', data)\n\treturn base64url_encode(challenge)\n}\n\n/**\n * Base64url encoding for byte buffers. Used for PKCE verifier/challenge and\n * generated state values.\n */\nexport function base64url_encode(buffer)\n{\n\tconst byteString = Array.from(new Uint8Array(buffer), b => String.fromCharCode(b)).join('')\n    return btoa(byteString)\n        .replace(/\\+/g, '-')\n        .replace(/\\//g, '_')\n        .replace(/=+$/, '');\n}\n\n/**\n * Creates a random OAuth2 state value. Uses cryptographic randomness when\n * available, with the previous Math.random fallback kept only for older/test\n * environments where WebCrypto is absent.\n */\nexport function createState(length)\n{\n\tconst bytes = new Uint8Array(Math.ceil(length * 3 / 4) + 1)\n\tif (globalThis.crypto?.getRandomValues) {\n\t\tglobalThis.crypto.getRandomValues(bytes)\n\t\treturn base64url_encode(bytes).slice(0, length)\n\t}\n\tconst validChars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'\n\tlet randomState = ''\n\tlet counter = 0\n    while (counter < length) {\n        randomState += validChars.charAt(Math.floor(Math.random() * validChars.length))\n        counter++\n    }\n\treturn randomState\n}\n\n/**\n * Returns true if the current document.location contains an OAuth2 code\n * parameter in either the query string or hash fragment.\n */\nexport function isRedirected() {\n\tlet url = new URL(document.location.href)\n\tif (!url.searchParams.has('code')) {\n\t\tif (url.hash) {\n\t\t\tlet query = url.hash.substr(1)\n\t\t\tconst params = new URLSearchParams('?'+query)\n\t\t\tif (params.has('code')) {\n\t\t\t\treturn true\n\t\t\t}\n\t\t}\n\t\treturn false\n\t}\n\treturn true\n}\n\n/**\n * Returns true if there is a valid access token or any refresh token in the\n * provided token store. If a string is passed, it is treated as a tokenStore\n * site/issuer name for backwards compatibility.\n */\nexport function isAuthorized(tokens) {\n\tif (typeof tokens == 'string') {\n\t\ttokens = tokenStore(tokens).tokens\n\t}\n\tlet accessToken = tokens.get('access_token')\n\tif (accessToken && !isExpired(accessToken)) {\n\t\treturn true\n\t}\n\tlet refreshToken = tokens.get('refresh_token')\n\tif (refreshToken) {\n\t\treturn true\n\t}\n\treturn false\n}\n\n/**\n * Parses Bearer and DPoP WWW-Authenticate challenge headers into a small object\n * so the middleware can distinguish invalid_token from insufficient_scope and\n * similar OAuth2 resource-server errors.\n */\nexport function parseBearerChallenge(value)\n{\n\tif (!value || typeof value !== 'string') {\n\t\treturn null\n\t}\n\tconst trimmed = value.trim()\n\tconst index = trimmed.search(/\\s/)\n\tconst scheme = index < 0 ? trimmed : trimmed.slice(0, index)\n\tconst rest = index < 0 ? '' : trimmed.slice(index + 1)\n\tif (!['bearer', 'dpop'].includes(scheme.toLowerCase())) {\n\t\treturn null\n\t}\n\tconst result = { scheme }\n\tconst pattern = /([A-Za-z][A-Za-z0-9_-]*)=(\"(?:[^\"\\\\]|\\\\.)*\"|[^,\\s]*)/g\n\tlet match\n\twhile ((match = pattern.exec(rest))) {\n\t\tlet value = match[2]\n\t\tif (value.startsWith('\"') && value.endsWith('\"')) {\n\t\t\tvalue = value.slice(1, -1).replace(/\\\\\"/g, '\"')\n\t\t}\n\t\tresult[match[1]] = value\n\t}\n\treturn result\n}\n", null, "export default function keysStore() {\n\treturn new Promise((resolve, reject) => {\n\t\tconst request = globalThis.indexedDB.open('metro', 1)\n\n\t\trequest.onupgradeneeded = () => request.result.createObjectStore('keyPairs', { keyPath: 'domain'})\n\n\t\trequest.onerror = (event) => {\n\t\t\treject(event)\n\t\t}\n\n\t\trequest.onsuccess = (event) => {\n\t\t\tconst db = event.target.result\n\t\t\tresolve({\n\t\t\t\tset: function(value, key) {\n\t\t\t\t\treturn new Promise((resolve, reject) => {\n\t\t\t\t\t\tconst tx = db.transaction('keyPairs', 'readwrite', {durability: 'strict'})\n\t\t\t\t\t\tconst objectStore = tx.objectStore('keyPairs')\n\t\t\t\t\t\ttx.oncomplete = () => {\n\t\t\t\t\t\t\tresolve()\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttx.onerror = reject\n\t\t\t\t\t\tobjectStore.put(value, key)\n\t\t\t\t\t})\n\t\t\t\t},\n\t\t\t\tget: function(key) {\n\t\t\t\t\treturn new Promise((resolve, reject) => {\n\t\t\t\t\t\tconst tx = db.transaction('keyPairs', 'readonly')\n\t\t\t\t\t\tconst objectStore = tx.objectStore('keyPairs')\n\t\t\t\t\t\tconst request = objectStore.get(key)\n\t\t\t\t\t\trequest.onsuccess = () => {\n\t\t\t\t\t\t\tresolve(request.result)\n\t\t\t\t\t\t}\n\t\t\t\t\t\trequest.onerror = reject\n\t\t\t\t\t\ttx.onerror = reject\n\t\t\t\t\t})\n\t\t\t\t},\n\t\t\t\tclear: function() {\n\t\t\t\t\treturn new Promise((resolve,reject) => {\n\t\t\t\t\t\tconst tx = db.transaction('keyPairs', 'readwrite')\n\t\t\t\t\t\tconst objectStore = tx.objectStore('keyPairs')\n\t\t\t\t\t\tconst request = objectStore.clear()\n\t\t\t\t\t\trequest.onsuccess = () => {\n\t\t\t\t\t\t\tresolve()\n\t\t\t\t\t\t}\n\t\t\t\t\t\trequest.onerror = reject\n\t\t\t\t\t\ttx.onerror = reject\t\t\t\t\t\t\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t})\n}", "import * as metro from '@muze-nl/metro-core'\nimport * as DPoP from 'dpop'\nimport { assert, Required, Optional, validURL } from '@muze-nl/assert'\nimport keysStore from './keysstore.mjs'\n\nexport default function dpopmw(options) {\n\n\tassert(options, {\n\t\tsite: Required(validURL),\n\t\tauthorization_endpoint: Required(validURL),\n\t\ttoken_endpoint: Required(validURL),\n\t\tdpop_signing_alg_values_supported: Optional([]) // this property is unfortunately rarely supported\n\t})\n\n\treturn async (req, next) => {\n\t\tconst keys = await keysStore()\n\t\tlet keyInfo = await keys.get(options.site)\n\t\tif (!keyInfo) {\n \t\t\t// FIXME fetch from dpop_signing_alg_values_supported\n \t\t\t// which is unfortunately not available usually\n \t\t\tlet keyPair = await DPoP.generateKeyPair('ES256') // note: don't make them extractable! That potentially allows hackers to steal the privateKey\n\t\t\tkeyInfo = { domain: options.site, keyPair }\n\t\t\tawait keys.set(keyInfo)\n\t\t}\n\t\tconst url = metro.url(req.url)\n\n\t\tif (req.url.startsWith(options.authorization_endpoint)) {\n\t\t\tlet params = req.body\n\t\t\tif (params instanceof URLSearchParams || params instanceof FormData) {\n\t\t\t\tparams.set('dpop_jkt', keyInfo.keyPair.publicKey)\n\t\t\t} else {\n\t\t\t\tparams.dpop_jkt = keyInfo.keyPair.publicKey\n\t\t\t}\n\n\t\t} else if (req.url.startsWith(options.token_endpoint)) {\n\t\t\tconst dpopHeader = await DPoP.generateProof(keyInfo.keyPair, req.url, req.method)\n\t\t\treq = req.with({\n\t\t\t\theaders: {\n\t\t\t\t\t'DPoP': dpopHeader\n\t\t\t\t}\n\t\t\t})\n\n\t\t} else if (req.headers.has('Authorization')) { //FIXME: not all requests use the dpop bound access token, so check which key to use, or if to add dpop at all\n\t\t\t// note: don't use options.site here, nonce can differ\n\t\t\tconst nonce       = localStorage.getItem(url.host+':nonce') || undefined // null is not acceptible for DpOp()\n\t\t\tconst accessToken = req.headers.get('Authorization').split(' ')[1]\n\t\t\tconst dpopHeader  = await DPoP.generateProof(keyInfo.keyPair, req.url, req.method, nonce, accessToken)\n\t\t\treq = req.with({\n\t\t\t\theaders: {\n\t\t\t\t\t'Authorization': 'DPoP '+accessToken,\n\t\t\t\t\t'DPoP': dpopHeader\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\n\t\tlet response = await next(req)\n\t\tif (response.headers.get('DPoP-Nonce')) {\n\t\t\t// note: don't use options.site here, nonce can differ\n\t\t\tlocalStorage.setItem(url.host+':nonce', response.headers.get('DPoP-Nonce'))\n\t\t}\n\t\treturn response\n\t}\n\t\n}", "export default function jsonmw(options)\n{\n    options = Object.assign({\n        contentType: 'application/json',\n        reviver: null,\n        replacer: null,\n        space: ''\n    }, options)\n\n    return async function json(req, next) {\n        if (!req.headers.get('Accept')) {\n            req = req.with({\n                headers: {\n                    'Accept': options.accept ?? options.contentType\n                }\n            })\n        }\n        if (req.method!=='GET' && req.method!=='HEAD') {\n            //https://developer.mozilla.org/en-US/docs/Web/API/Request/body\n            if (req.data && typeof req.data=='object' && !(req.data instanceof ReadableStream)) {\n                const contentType = req.headers.get('Content-Type')\n                if (!contentType || isPlainText(contentType)) {\n                    req = req.with({\n                        headers: {\n                            'Content-Type':options.contentType,\n                        }\n                    })\n                }\n                if (isJSON(req.headers.get('Content-Type'))) {\n                    req = req.with({\n                        body: JSON.stringify(req.data, options.replacer, options.space)\n                    })\n                }\n            }\n        }\n        let res = await next(req)\n        if (res && isJSON(res.headers?.get('Content-Type'))) {\n            let tempRes = res.clone()\n            let body = await tempRes.text()\n            if (body === '') {\n                // e.g. 204 No Content or HEAD: there is no JSON to parse\n                return res\n            }\n            try {\n                let json = JSON.parse(body, options.reviver)\n                return res.with({\n                    body: json\n                })\n            }\n            catch(error) {\n                // the status already reports an HTTP failure, so an\n                // unparseable error body is left as text\n                if (!res.ok) {\n                    return res\n                }\n                throw parseError(req, res, error)\n            }\n        }\n        return res\n    }\n}\n\n/**\n * The error's cause is the JSON.parse error. The request and the unparsed\n * response remain available for inspection.\n */\nfunction parseError(req, res, cause)\n{\n    const message = 'jsonmw: could not parse '\n        + res.headers.get('Content-Type') + ' response from ' + req.url\n    const error = new Error(message, { cause })\n    error.request = req\n    error.response = res\n    return error\n}\n\n/*\n  this matches:\n  - application/json\n  - application/ld+json\n  - application/json; charset=utf-8\n  - application/ld+json; charset=utf-8\n*/\nconst jsonRE = /^application\\/([a-zA-Z0-9\\-_]+\\+)?json\\b/\nfunction isJSON(contentType)\n{\n    return jsonRE.exec(contentType)\n}\n\nfunction isPlainText(contentType)\n{\n    return /^text\\/plain\\b/.exec(contentType)\n}", "export default function throwermw(options) {\n\n\treturn async function thrower(req, next) {\n\t\tlet res = await next(req)\n\t\tif (!res.ok) {\n\t\t\tif (options && typeof options[res.status] == 'function') {\n\t\t\t\tres = options[res.status].apply(res, req)\n\t\t\t} else {\n\t\t\t\tthrow new Error(res.status+': '+res.statusText, {\n\t\t\t\t\tcause: res\n\t\t\t\t})\n\t\t\t}\n\t\t}\n\t\treturn res\n\t}\n\n}", "import { error } from '@muze-nl/assert'\n\nexport const MustHave = (...options) => \n\t(value, root) => {\n\t\tif (options.filter(o => root.hasOwnKey(o)).length > 0) {\n\t\t\treturn false\n\t\t}\n\t\treturn error('root data must have all of', root, options)\n\t}\n\nexport const MustInclude = (...options) =>\n\t(value) => {\n\t\tif (Array.isArray(value) && options.filter(o => !value.includes(o)).length == 0) {\n\t\t\treturn false\n\t\t} else {\n\t\t\treturn error('data must be an array which includes',value,options)\n\t\t}\n\t}\n\n//TODO: add link to spec\nexport const validJWK = [\n\t'HS256','HS384','HS512','RS256','RS384','RS512','ES256','ES384','ES512'\n]\n\n//TODO: add link to spec\n// FIXME: enter correct values\nexport const validJWA = [\n\t'HS256','HS384','HS512','RS256','RS384','RS512','ES256','ES384','ES512'\n]\n\n//TODO: add link to spec\nexport const validAuthMethods = [\n\t'none', 'client_secret_post', 'client_secret_basic','client_secret_jwt','private_key_jwt'\n]\n", "/**\n * This module adheres to OpenID Connect Discovery 1.0 incorporating errata set 2 - december 15, 2023\n * https://openid.net/specs/openid-connect-discovery-1_0.html\n */\nimport * as metro from '@muze-nl/metro-core'\nimport jsonmw from '@muze-nl/metro-middleware/json'\nimport throwermw from '@muze-nl/metro-middleware/thrower'\nimport { validJWA, MustInclude, validAuthMethods } from './oidc.util.mjs'\nimport { assert, fails, Required, Recommended, Optional, oneOf, anyOf, allOf, validURL, instanceOf, not, error } from '@muze-nl/assert'\n\n/**\n * Given options.issuer will get the .well-known/openid-configuration information\n * parse it, assert if follows the specification and return it as a javascript object\n * @param options.issuer Required: URL with the root of the oidc issuer\n * @param options.client Optional: metro client to use in the request\n * @returns object with openid-configuration\n * @throws Error when a network error occurs while fetching openid-configuration\n * @throws assertError when either the options or the openid-configuration fail assertions (and assertion testing is enabled)\n */\nexport default async function oidcDiscovery(options={}) {\n\tassert(options, {\n\t\tclient: Optional(instanceOf(metro.client().constructor)),\n\t\tissuer: Required(validURL)\n\t})\n\n\tconst defaultOptions = {\n\t\tclient: metro.client().with(throwermw()).with(jsonmw()),\n\t\trequireDynamicRegistration: false\n\t}\n\n\toptions = Object.assign({},defaultOptions,options)\n\toptions.client = options.client.with(throwermw()).with(jsonmw())\n\n\tconst TestSucceeded = false\n\tfunction MustUseHTTPS(url) {\n\t\treturn TestSucceeded // FIXME todo\n\t}\n\n\t// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata\n\t// @TODO: this is a first approximation of the specced requirements, needs to implement\n\t// all MUST/MUST NOT etc. notes in the specification.\n\tconst openid_provider_metadata = {\n\t\tissuer: Required(allOf(options.issuer, MustUseHTTPS)),\n\t\tauthorization_endpoint: Required(validURL),\n\t\ttoken_endpoint: Required(validURL),\n\t\tuserinfo_endpoint: Recommended(validURL), // todo: test for https protocol\n\t\tjwks_uri: Required(validURL),\n\t\tregistration_endpoint: options.requireDynamicRegistration \n\t\t\t? Required(validURL) \n\t\t\t: Recommended(validURL),\n\t\tscopes_supported: Recommended(MustInclude('openid')),\n\t\tresponse_types_supported: options.requireDynamicRegistration\n\t\t\t? Required(MustInclude('code','id_token','id_token token')) \n\t\t\t: Required([]),\n\t\tresponse_modes_supported: Optional([]),\n\t\tgrant_types_supported: options.requireDynamicRegistration\n\t\t\t? Optional(MustInclude('authorization_code')) // implicit is required according to the spec, but not used in web apps\n\t\t\t: Optional([]),\n\t\tacr_values_supported: Optional([]),\n\t\tsubject_types_supported: Required([]),\n\t\tid_token_signing_alg_values_supported: Required(MustInclude('RS256')),\n\t\tid_token_encryption_alg_values_supported: Optional([]),\n\t\tid_token_encryption_enc_values_supported: Optional([]),\n\t\tuserinfo_signing_alg_values_supported: Optional([]),\n\t\tuserinfo_encryption_alg_values_supported: Optional([]),\n\t\tuserinfo_encryption_enc_values_supported: Optional([]),\n\t\trequest_object_signing_alg_values_supported: Optional(MustInclude('RS256')), // not testing for 'none'\n\t\trequest_object_encryption_alg_values_supported: Optional([]),\n\t\trequest_object_encryption_enc_values_supported: Optional([]),\n\t\ttoken_endpoint_auth_methods_supported: Optional(anyOf(...validAuthMethods)),\n\t\ttoken_endpoint_auth_signing_alg_values_supported: Optional(MustInclude('RS256'), not(MustInclude('none'))),\n\t\tdisplay_values_supported: Optional(anyOf('page','popup','touch','wap')),\n\t\tclaim_types_supported: Optional(anyOf('normal','aggregated','distributed')),\n\t\tclaims_supported: Recommended([]),\n\t\tservice_documentation: Optional(validURL),\n\t\tclaims_locales_supported: Optional([]),\n\t\tui_locales_supported: Optional([]),\n\t\tclaims_parameter_supported: Optional(Boolean),\n\t\trequest_parameter_supported: Optional(Boolean),\n\t\trequest_uri_parameter_supported: Optional(Boolean),\n\t\top_policy_uri: Optional(validURL),\n\t\top_tos_uri: Optional(validURL)\t\n\t}\n\n\t// fetch openid configuration from wellknown and return the json\n\tconst configURL = metro.url(options.issuer, '.well-known/openid-configuration')\n\n\tconst response = await options.client.get(\n\t\t// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationRequest\n\t\t// note: this allows path components in the options.issuer url\n\t\tconfigURL\n\t)\n\tconst openid_config = response.data\n\tassert(openid_config, openid_provider_metadata)\n\n\t// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationValidation\n\tassert(openid_config.issuer, options.issuer)\n\treturn openid_config\n}", "/**\n * This module adheres to OpenID Connect Dynamic Client Registration 1.0 \n * incorporating errata set 2 - december 15, 2023\n * https://openid.net/specs/openid-connect-registration-1_0.html\n */\nimport * as metro from '@muze-nl/metro-core'\nimport jsonmw from '@muze-nl/metro-middleware/json'\nimport throwermw from '@muze-nl/metro-middleware/thrower'\nimport { validJWA, validAuthMethods, MustHave } from './oidc.util.mjs'\nimport { assert, Required, Optional, oneOf, anyOf, validURL, validEmail, not, instanceOf } from '@muze-nl/assert'\n\nexport default async function register(options)\n{\n\n    // https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata\n\tconst openid_client_metadata = {\n\t\tredirect_uris: Required([validURL]),\n\t\tresponse_types: Optional([]),\n\t\tgrant_types: Optional(anyOf('authorization_code','refresh_token')), //TODO: match response_types with grant_types\n\t\tapplication_type: Optional(oneOf('native','web')),\n\t\tcontacts: Optional([validEmail]),\n\t\tclient_name: Optional(String),\n\t\tlogo_uri: Optional(validURL),\n\t\tclient_uri: Optional(validURL),\n\t\tpolicy_uri: Optional(validURL),\n\t\ttos_uri: Optional(validURL),\n\t\tjwks_uri: Optional(validURL, not(MustHave('jwks'))),\n\t\tjwks: Optional(validURL, not(MustHave('jwks_uri'))),\n\t\tsector_identifier_uri: Optional(validURL),\n\t\tsubject_type: Optional(String),\n\t\tid_token_signed_response_alg: Optional(oneOf(...validJWA)),\n\t\tid_token_encrypted_response_alg: Optional(oneOf(...validJWA)),\n\t\tid_token_encrypted_response_enc: Optional(oneOf(...validJWA), MustHave('id_token_encrypted_response_alg')),\n\t\tuserinfo_signed_response_alg: Optional(oneOf(...validJWA)),\n\t\tuserinfo_encrypted_response_alg: Optional(oneOf(...validJWA)),\n\t\tuserinfo_encrypted_response_enc: Optional(oneOf(...validJWA), MustHave('userinfo_encrypted_response_alg')),\n\t\trequest_object_signing_alg: Optional(oneOf(...validJWA)),\n\t\trequest_object_encryption_alg: Optional(oneOf(...validJWA)),\n\t\trequest_object_encryption_enc: Optional(oneOf(...validJWA)),\n\t\ttoken_endpoint_auth_method: Optional(oneOf(...validAuthMethods)),\n\t\ttoken_endpoint_auth_signing_alg: Optional(oneOf(...validJWA)),\n\t\tdefault_max_age: Optional(Number),\n\t\trequire_auth_time: Optional(Boolean),\n\t\tdefault_acr_values: Optional([String]),\n\t\tinitiate_login_uri: Optional([validURL]),\n\t\trequest_uris: Optional([validURL])\n\t}\n\n\tassert(options, {\n\t\tclient: Optional(instanceOf(metro.client().constructor)),\n\t\tregistration_endpoint: validURL, \n\t\tclient_info: openid_client_metadata\n\t})\n\n\tconst defaultOptions = {\n\t\tclient: metro.client().with(throwermw()).with(jsonmw()),\n\t\tclient_info: {\n\t\t\tredirect_uris: [ globalThis.document?.location.href ]\n\t\t}\n\t}\n\n\toptions = Object.assign({}, defaultOptions, options)\n\toptions.client = options.client.with(throwermw()).with(jsonmw())\n\tif (!options.client_info) {\n\t\toptions.client_info = {}\n\t} \n\tif (!options.client_info.redirect_uris) {\n\t\toptions.client_info.redirect_uris = [ globalThis.document?.location.href ]\n\t}\n\tlet response = await options.client\n\t\t.post(options.registration_endpoint, {\n\t\t\tbody: options.client_info\n\t\t})\n\tlet info = response.data\n\tif (!info.client_id) {\n\t\tthrow metro.metroError('metro.oidc: Error: dynamic registration of client failed, no client_id returned', response)\n\t}\n\toptions.client_info = Object.assign(options.client_info, info)\n\treturn options.client_info\n}", "export default function oidcStore(site) {\n\tlet store\n\tif (typeof localStorage !== 'undefined') {\n\t\tstore = {\n\t\t\tget: (name)        => JSON.parse(localStorage.getItem('metro/oidc:'+site+':'+name)),\n\t\t\tset: (name, value) => localStorage.setItem('metro/oidc:'+site+':'+name, JSON.stringify(value)),\n\t\t\thas: (name)        => localStorage.getItem('metro/oidc:'+site+':'+name)!==null\n\t\t}\n\t} else {\n\t\tlet storeMap = new Map()\n\t\tstore = {\n\t\t\tget: (name)        => JSON.parse(storeMap.get('metro/oidc:'+site+':'+name)||null),\n\t\t\tset: (name, value) => storeMap.set('metro/oidc:'+site+':'+name, JSON.stringify(value)),\n\t\t\thas: (name)        => storeMap.has('metro/oidc:'+site+':'+name)\n\t\t}\n\t}\n\treturn store\n}", "export const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n    const size = buffers.reduce((acc, { length }) => acc + length, 0);\n    const buf = new Uint8Array(size);\n    let i = 0;\n    for (const buffer of buffers) {\n        buf.set(buffer, i);\n        i += buffer.length;\n    }\n    return buf;\n}\nfunction writeUInt32BE(buf, value, offset) {\n    if (value < 0 || value >= MAX_INT32) {\n        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n    }\n    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n    const high = Math.floor(value / MAX_INT32);\n    const low = value % MAX_INT32;\n    const buf = new Uint8Array(8);\n    writeUInt32BE(buf, high, 0);\n    writeUInt32BE(buf, low, 4);\n    return buf;\n}\nexport function uint32be(value) {\n    const buf = new Uint8Array(4);\n    writeUInt32BE(buf, value);\n    return buf;\n}\nexport function encode(string) {\n    const bytes = new Uint8Array(string.length);\n    for (let i = 0; i < string.length; i++) {\n        const code = string.charCodeAt(i);\n        if (code > 127) {\n            throw new TypeError('non-ASCII string encountered in encode()');\n        }\n        bytes[i] = code;\n    }\n    return bytes;\n}\n", "export function encodeBase64(input) {\n    if (Uint8Array.prototype.toBase64) {\n        return input.toBase64();\n    }\n    const CHUNK_SIZE = 0x8000;\n    const arr = [];\n    for (let i = 0; i < input.length; i += CHUNK_SIZE) {\n        arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));\n    }\n    return btoa(arr.join(''));\n}\nexport function decodeBase64(encoded) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(encoded);\n    }\n    const binary = atob(encoded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n        bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n}\n", "import { encoder, decoder } from '../lib/buffer_utils.js';\nimport { encodeBase64, decodeBase64 } from '../lib/base64.js';\nexport function decode(input) {\n    if (Uint8Array.fromBase64) {\n        return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {\n            alphabet: 'base64url',\n        });\n    }\n    let encoded = input;\n    if (encoded instanceof Uint8Array) {\n        encoded = decoder.decode(encoded);\n    }\n    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');\n    try {\n        return decodeBase64(encoded);\n    }\n    catch {\n        throw new TypeError('The input to be decoded is not correctly encoded.');\n    }\n}\nexport function encode(input) {\n    let unencoded = input;\n    if (typeof unencoded === 'string') {\n        unencoded = encoder.encode(unencoded);\n    }\n    if (Uint8Array.prototype.toBase64) {\n        return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });\n    }\n    return encodeBase64(unencoded).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n", "const unusable = (name, prop = 'algorithm.name') => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\nconst isAlgorithm = (algorithm, name) => algorithm.name === name;\nfunction getHashLength(hash) {\n    return parseInt(hash.name.slice(4), 10);\n}\nfunction checkHashLength(algorithm, expected) {\n    const actual = getHashLength(algorithm.hash);\n    if (actual !== expected)\n        throw unusable(`SHA-${expected}`, 'algorithm.hash');\n}\nfunction getNamedCurve(alg) {\n    switch (alg) {\n        case 'ES256':\n            return 'P-256';\n        case 'ES384':\n            return 'P-384';\n        case 'ES512':\n            return 'P-521';\n        default:\n            throw new Error('unreachable');\n    }\n}\nfunction checkUsage(key, usage) {\n    if (usage && !key.usages.includes(usage)) {\n        throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);\n    }\n}\nexport function checkSigCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512': {\n            if (!isAlgorithm(key.algorithm, 'HMAC'))\n                throw unusable('HMAC');\n            checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));\n            break;\n        }\n        case 'RS256':\n        case 'RS384':\n        case 'RS512': {\n            if (!isAlgorithm(key.algorithm, 'RSASSA-PKCS1-v1_5'))\n                throw unusable('RSASSA-PKCS1-v1_5');\n            checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));\n            break;\n        }\n        case 'PS256':\n        case 'PS384':\n        case 'PS512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-PSS'))\n                throw unusable('RSA-PSS');\n            checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));\n            break;\n        }\n        case 'Ed25519':\n        case 'EdDSA': {\n            if (!isAlgorithm(key.algorithm, 'Ed25519'))\n                throw unusable('Ed25519');\n            break;\n        }\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87': {\n            if (!isAlgorithm(key.algorithm, alg))\n                throw unusable(alg);\n            break;\n        }\n        case 'ES256':\n        case 'ES384':\n        case 'ES512': {\n            if (!isAlgorithm(key.algorithm, 'ECDSA'))\n                throw unusable('ECDSA');\n            const expected = getNamedCurve(alg);\n            const actual = key.algorithm.namedCurve;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.namedCurve');\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\nexport function checkEncCryptoKey(key, alg, usage) {\n    switch (alg) {\n        case 'A128GCM':\n        case 'A192GCM':\n        case 'A256GCM': {\n            if (!isAlgorithm(key.algorithm, 'AES-GCM'))\n                throw unusable('AES-GCM');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'A128KW':\n        case 'A192KW':\n        case 'A256KW': {\n            if (!isAlgorithm(key.algorithm, 'AES-KW'))\n                throw unusable('AES-KW');\n            const expected = parseInt(alg.slice(1, 4), 10);\n            const actual = key.algorithm.length;\n            if (actual !== expected)\n                throw unusable(expected, 'algorithm.length');\n            break;\n        }\n        case 'ECDH': {\n            switch (key.algorithm.name) {\n                case 'ECDH':\n                case 'X25519':\n                    break;\n                default:\n                    throw unusable('ECDH or X25519');\n            }\n            break;\n        }\n        case 'PBES2-HS256+A128KW':\n        case 'PBES2-HS384+A192KW':\n        case 'PBES2-HS512+A256KW':\n            if (!isAlgorithm(key.algorithm, 'PBKDF2'))\n                throw unusable('PBKDF2');\n            break;\n        case 'RSA-OAEP':\n        case 'RSA-OAEP-256':\n        case 'RSA-OAEP-384':\n        case 'RSA-OAEP-512': {\n            if (!isAlgorithm(key.algorithm, 'RSA-OAEP'))\n                throw unusable('RSA-OAEP');\n            checkHashLength(key.algorithm, parseInt(alg.slice(9), 10) || 1);\n            break;\n        }\n        default:\n            throw new TypeError('CryptoKey does not support this operation');\n    }\n    checkUsage(key, usage);\n}\n", "function message(msg, actual, ...types) {\n    types = types.filter(Boolean);\n    if (types.length > 2) {\n        const last = types.pop();\n        msg += `one of type ${types.join(', ')}, or ${last}.`;\n    }\n    else if (types.length === 2) {\n        msg += `one of type ${types[0]} or ${types[1]}.`;\n    }\n    else {\n        msg += `of type ${types[0]}.`;\n    }\n    if (actual == null) {\n        msg += ` Received ${actual}`;\n    }\n    else if (typeof actual === 'function' && actual.name) {\n        msg += ` Received function ${actual.name}`;\n    }\n    else if (typeof actual === 'object' && actual != null) {\n        if (actual.constructor?.name) {\n            msg += ` Received an instance of ${actual.constructor.name}`;\n        }\n    }\n    return msg;\n}\nexport const invalidKeyInput = (actual, ...types) => message('Key must be ', actual, ...types);\nexport const withAlg = (alg, actual, ...types) => message(`Key for the ${alg} algorithm must be `, actual, ...types);\n", "export class JOSEError extends Error {\n    static code = 'ERR_JOSE_GENERIC';\n    code = 'ERR_JOSE_GENERIC';\n    constructor(message, options) {\n        super(message, options);\n        this.name = this.constructor.name;\n        Error.captureStackTrace?.(this, this.constructor);\n    }\n}\nexport class JWTClaimValidationFailed extends JOSEError {\n    static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JWTExpired extends JOSEError {\n    static code = 'ERR_JWT_EXPIRED';\n    code = 'ERR_JWT_EXPIRED';\n    claim;\n    reason;\n    payload;\n    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n        super(message, { cause: { claim, reason, payload } });\n        this.claim = claim;\n        this.reason = reason;\n        this.payload = payload;\n    }\n}\nexport class JOSEAlgNotAllowed extends JOSEError {\n    static code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n    code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n}\nexport class JOSENotSupported extends JOSEError {\n    static code = 'ERR_JOSE_NOT_SUPPORTED';\n    code = 'ERR_JOSE_NOT_SUPPORTED';\n}\nexport class JWEDecryptionFailed extends JOSEError {\n    static code = 'ERR_JWE_DECRYPTION_FAILED';\n    code = 'ERR_JWE_DECRYPTION_FAILED';\n    constructor(message = 'decryption operation failed', options) {\n        super(message, options);\n    }\n}\nexport class JWEInvalid extends JOSEError {\n    static code = 'ERR_JWE_INVALID';\n    code = 'ERR_JWE_INVALID';\n}\nexport class JWSInvalid extends JOSEError {\n    static code = 'ERR_JWS_INVALID';\n    code = 'ERR_JWS_INVALID';\n}\nexport class JWTInvalid extends JOSEError {\n    static code = 'ERR_JWT_INVALID';\n    code = 'ERR_JWT_INVALID';\n}\nexport class JWKInvalid extends JOSEError {\n    static code = 'ERR_JWK_INVALID';\n    code = 'ERR_JWK_INVALID';\n}\nexport class JWKSInvalid extends JOSEError {\n    static code = 'ERR_JWKS_INVALID';\n    code = 'ERR_JWKS_INVALID';\n}\nexport class JWKSNoMatchingKey extends JOSEError {\n    static code = 'ERR_JWKS_NO_MATCHING_KEY';\n    code = 'ERR_JWKS_NO_MATCHING_KEY';\n    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n    [Symbol.asyncIterator];\n    static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n        super(message, options);\n    }\n}\nexport class JWKSTimeout extends JOSEError {\n    static code = 'ERR_JWKS_TIMEOUT';\n    code = 'ERR_JWKS_TIMEOUT';\n    constructor(message = 'request timed out', options) {\n        super(message, options);\n    }\n}\nexport class JWSSignatureVerificationFailed extends JOSEError {\n    static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n    constructor(message = 'signature verification failed', options) {\n        super(message, options);\n    }\n}\n", "export function assertCryptoKey(key) {\n    if (!isCryptoKey(key)) {\n        throw new Error('CryptoKey instance expected');\n    }\n}\nexport const isCryptoKey = (key) => {\n    if (key?.[Symbol.toStringTag] === 'CryptoKey')\n        return true;\n    try {\n        return key instanceof CryptoKey;\n    }\n    catch {\n        return false;\n    }\n};\nexport const isKeyObject = (key) => key?.[Symbol.toStringTag] === 'KeyObject';\nexport const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);\n", "import { decode } from '../util/base64url.js';\nexport const unprotected = Symbol();\nexport function assertNotSet(value, name) {\n    if (value) {\n        throw new TypeError(`${name} can only be called once`);\n    }\n}\nexport function decodeBase64url(value, label, ErrorClass) {\n    try {\n        return decode(value);\n    }\n    catch {\n        throw new ErrorClass(`Failed to base64url decode the ${label}`);\n    }\n}\nexport async function digest(algorithm, data) {\n    const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n    return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));\n}\n", "const isObjectLike = (value) => typeof value === 'object' && value !== null;\nexport function isObject(input) {\n    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {\n        return false;\n    }\n    if (Object.getPrototypeOf(input) === null) {\n        return true;\n    }\n    let proto = input;\n    while (Object.getPrototypeOf(proto) !== null) {\n        proto = Object.getPrototypeOf(proto);\n    }\n    return Object.getPrototypeOf(input) === proto;\n}\nexport function isDisjoint(...headers) {\n    const sources = headers.filter(Boolean);\n    if (sources.length === 0 || sources.length === 1) {\n        return true;\n    }\n    let acc;\n    for (const header of sources) {\n        const parameters = Object.keys(header);\n        if (!acc || acc.size === 0) {\n            acc = new Set(parameters);\n            continue;\n        }\n        for (const parameter of parameters) {\n            if (acc.has(parameter)) {\n                return false;\n            }\n            acc.add(parameter);\n        }\n    }\n    return true;\n}\nexport const isJWK = (key) => isObject(key) && typeof key.kty === 'string';\nexport const isPrivateJWK = (key) => key.kty !== 'oct' &&\n    ((key.kty === 'AKP' && typeof key.priv === 'string') || typeof key.d === 'string');\nexport const isPublicJWK = (key) => key.kty !== 'oct' && key.d === undefined && key.priv === undefined;\nexport const isSecretJWK = (key) => key.kty === 'oct' && typeof key.k === 'string';\n", "import { JOSENotSupported } from '../util/errors.js';\nimport { checkSigCryptoKey } from './crypto_key.js';\nimport { invalidKeyInput } from './invalid_key_input.js';\nexport function checkKeyLength(alg, key) {\n    if (alg.startsWith('RS') || alg.startsWith('PS')) {\n        const { modulusLength } = key.algorithm;\n        if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n            throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n        }\n    }\n}\nfunction subtleAlgorithm(alg, algorithm) {\n    const hash = `SHA-${alg.slice(-3)}`;\n    switch (alg) {\n        case 'HS256':\n        case 'HS384':\n        case 'HS512':\n            return { hash, name: 'HMAC' };\n        case 'PS256':\n        case 'PS384':\n        case 'PS512':\n            return { hash, name: 'RSA-PSS', saltLength: parseInt(alg.slice(-3), 10) >> 3 };\n        case 'RS256':\n        case 'RS384':\n        case 'RS512':\n            return { hash, name: 'RSASSA-PKCS1-v1_5' };\n        case 'ES256':\n        case 'ES384':\n        case 'ES512':\n            return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };\n        case 'Ed25519':\n        case 'EdDSA':\n            return { name: 'Ed25519' };\n        case 'ML-DSA-44':\n        case 'ML-DSA-65':\n        case 'ML-DSA-87':\n            return { name: alg };\n        default:\n            throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n    }\n}\nasync function getSigKey(alg, key, usage) {\n    if (key instanceof Uint8Array) {\n        if (!alg.startsWith('HS')) {\n            throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n        }\n        return crypto.subtle.importKey('raw', key, { hash: `SHA-${alg.slice(-3)}`, name: 'HMAC' }, false, [usage]);\n    }\n    checkSigCryptoKey(key, alg, usage);\n    return key;\n}\nexport async function sign(alg, key, data) {\n    const cryptoKey = await getSigKey(alg, key, 'sign');\n    checkKeyLength(alg, cryptoKey);\n    const signature = await crypto.subtle.sign(subtleAlgorithm(alg, cryptoKey.algorithm), cryptoKey, data);\n    return new Uint8Array(signature);\n}\nexport async function verify(alg, key, signature, data) {\n    const cryptoKey = await getSigKey(alg, key, 'verify');\n    checkKeyLength(alg, cryptoKey);\n    const algorithm = subtleAlgorithm(alg, cryptoKey.algorithm);\n    try {\n        return await crypto.subtle.verify(algorithm, cryptoKey, signature, data);\n    }\n    catch {\n        return false;\n    }\n}\n", "import { JOSENotSupported } from '../util/errors.js';\nconst unsupportedAlg = 'Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value';\nfunction subtleMapping(jwk) {\n    let algorithm;\n    let keyUsages;\n    switch (jwk.kty) {\n        case 'AKP': {\n            switch (jwk.alg) {\n                case 'ML-DSA-44':\n                case 'ML-DSA-65':\n                case 'ML-DSA-87':\n                    algorithm = { name: jwk.alg };\n                    keyUsages = jwk.priv ? ['sign'] : ['verify'];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        case 'RSA': {\n            switch (jwk.alg) {\n                case 'PS256':\n                case 'PS384':\n                case 'PS512':\n                    algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RS256':\n                case 'RS384':\n                case 'RS512':\n                    algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'RSA-OAEP':\n                case 'RSA-OAEP-256':\n                case 'RSA-OAEP-384':\n                case 'RSA-OAEP-512':\n                    algorithm = {\n                        name: 'RSA-OAEP',\n                        hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,\n                    };\n                    keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        case 'EC': {\n            switch (jwk.alg) {\n                case 'ES256':\n                case 'ES384':\n                case 'ES512':\n                    algorithm = {\n                        name: 'ECDSA',\n                        namedCurve: { ES256: 'P-256', ES384: 'P-384', ES512: 'P-521' }[jwk.alg],\n                    };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: 'ECDH', namedCurve: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        case 'OKP': {\n            switch (jwk.alg) {\n                case 'Ed25519':\n                case 'EdDSA':\n                    algorithm = { name: 'Ed25519' };\n                    keyUsages = jwk.d ? ['sign'] : ['verify'];\n                    break;\n                case 'ECDH-ES':\n                case 'ECDH-ES+A128KW':\n                case 'ECDH-ES+A192KW':\n                case 'ECDH-ES+A256KW':\n                    algorithm = { name: jwk.crv };\n                    keyUsages = jwk.d ? ['deriveBits'] : [];\n                    break;\n                default:\n                    throw new JOSENotSupported(unsupportedAlg);\n            }\n            break;\n        }\n        default:\n            throw new JOSENotSupported('Invalid or unsupported JWK \"kty\" (Key Type) Parameter value');\n    }\n    return { algorithm, keyUsages };\n}\nexport async function jwkToKey(jwk) {\n    if (!jwk.alg) {\n        throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n    }\n    const { algorithm, keyUsages } = subtleMapping(jwk);\n    const keyData = { ...jwk };\n    if (keyData.kty !== 'AKP') {\n        delete keyData.alg;\n    }\n    delete keyData.use;\n    return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);\n}\n", "import { isJWK } from './type_checks.js';\nimport { decode } from '../util/base64url.js';\nimport { jwkToKey } from './jwk_to_key.js';\nimport { isCryptoKey, isKeyObject } from './is_key_like.js';\nconst unusableForAlg = 'given KeyObject instance cannot be used for this algorithm';\nlet cache;\nconst handleJWK = async (key, jwk, alg, freeze = false) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(key);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const cryptoKey = await jwkToKey({ ...jwk, alg });\n    if (freeze)\n        Object.freeze(key);\n    if (!cached) {\n        cache.set(key, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nconst handleKeyObject = (keyObject, alg) => {\n    cache ||= new WeakMap();\n    let cached = cache.get(keyObject);\n    if (cached?.[alg]) {\n        return cached[alg];\n    }\n    const isPublic = keyObject.type === 'public';\n    const extractable = isPublic ? true : false;\n    let cryptoKey;\n    if (keyObject.asymmetricKeyType === 'x25519') {\n        switch (alg) {\n            case 'ECDH-ES':\n            case 'ECDH-ES+A128KW':\n            case 'ECDH-ES+A192KW':\n            case 'ECDH-ES+A256KW':\n                break;\n            default:\n                throw new TypeError(unusableForAlg);\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, isPublic ? [] : ['deriveBits']);\n    }\n    if (keyObject.asymmetricKeyType === 'ed25519') {\n        if (alg !== 'EdDSA' && alg !== 'Ed25519') {\n            throw new TypeError(unusableForAlg);\n        }\n        cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n            isPublic ? 'verify' : 'sign',\n        ]);\n    }\n    switch (keyObject.asymmetricKeyType) {\n        case 'ml-dsa-44':\n        case 'ml-dsa-65':\n        case 'ml-dsa-87': {\n            if (alg !== keyObject.asymmetricKeyType.toUpperCase()) {\n                throw new TypeError(unusableForAlg);\n            }\n            cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [\n                isPublic ? 'verify' : 'sign',\n            ]);\n        }\n    }\n    if (keyObject.asymmetricKeyType === 'rsa') {\n        let hash;\n        switch (alg) {\n            case 'RSA-OAEP':\n                hash = 'SHA-1';\n                break;\n            case 'RS256':\n            case 'PS256':\n            case 'RSA-OAEP-256':\n                hash = 'SHA-256';\n                break;\n            case 'RS384':\n            case 'PS384':\n            case 'RSA-OAEP-384':\n                hash = 'SHA-384';\n                break;\n            case 'RS512':\n            case 'PS512':\n            case 'RSA-OAEP-512':\n                hash = 'SHA-512';\n                break;\n            default:\n                throw new TypeError(unusableForAlg);\n        }\n        if (alg.startsWith('RSA-OAEP')) {\n            return keyObject.toCryptoKey({\n                name: 'RSA-OAEP',\n                hash,\n            }, extractable, isPublic ? ['encrypt'] : ['decrypt']);\n        }\n        cryptoKey = keyObject.toCryptoKey({\n            name: alg.startsWith('PS') ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5',\n            hash,\n        }, extractable, [isPublic ? 'verify' : 'sign']);\n    }\n    if (keyObject.asymmetricKeyType === 'ec') {\n        const nist = new Map([\n            ['prime256v1', 'P-256'],\n            ['secp384r1', 'P-384'],\n            ['secp521r1', 'P-521'],\n        ]);\n        const namedCurve = nist.get(keyObject.asymmetricKeyDetails?.namedCurve);\n        if (!namedCurve) {\n            throw new TypeError(unusableForAlg);\n        }\n        const expectedCurve = { ES256: 'P-256', ES384: 'P-384', ES512: 'P-521' };\n        if (expectedCurve[alg] && namedCurve === expectedCurve[alg]) {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDSA',\n                namedCurve,\n            }, extractable, [isPublic ? 'verify' : 'sign']);\n        }\n        if (alg.startsWith('ECDH-ES')) {\n            cryptoKey = keyObject.toCryptoKey({\n                name: 'ECDH',\n                namedCurve,\n            }, extractable, isPublic ? [] : ['deriveBits']);\n        }\n    }\n    if (!cryptoKey) {\n        throw new TypeError(unusableForAlg);\n    }\n    if (!cached) {\n        cache.set(keyObject, { [alg]: cryptoKey });\n    }\n    else {\n        cached[alg] = cryptoKey;\n    }\n    return cryptoKey;\n};\nexport async function normalizeKey(key, alg) {\n    if (key instanceof Uint8Array) {\n        return key;\n    }\n    if (isCryptoKey(key)) {\n        return key;\n    }\n    if (isKeyObject(key)) {\n        if (key.type === 'secret') {\n            return key.export();\n        }\n        if ('toCryptoKey' in key && typeof key.toCryptoKey === 'function') {\n            try {\n                return handleKeyObject(key, alg);\n            }\n            catch (err) {\n                if (err instanceof TypeError) {\n                    throw err;\n                }\n            }\n        }\n        let jwk = key.export({ format: 'jwk' });\n        return handleJWK(key, jwk, alg);\n    }\n    if (isJWK(key)) {\n        if (key.k) {\n            return decode(key.k);\n        }\n        return handleJWK(key, key, alg, true);\n    }\n    throw new Error('unreachable');\n}\n", "import { decode as decodeBase64URL } from '../util/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../lib/asn1.js';\nimport { jwkToKey } from '../lib/jwk_to_key.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { isObject } from '../lib/type_checks.js';\nexport async function importSPKI(spki, alg, options) {\n    if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n        throw new TypeError('\"spki\" must be SPKI formatted string');\n    }\n    return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n    if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n        throw new TypeError('\"x509\" must be X.509 formatted string');\n    }\n    return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n    if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n        throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n    }\n    return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg, options) {\n    if (!isObject(jwk)) {\n        throw new TypeError('JWK must be an object');\n    }\n    let ext;\n    alg ??= jwk.alg;\n    ext ??= options?.extractable ?? jwk.ext;\n    switch (jwk.kty) {\n        case 'oct':\n            if (typeof jwk.k !== 'string' || !jwk.k) {\n                throw new TypeError('missing \"k\" (Key Value) Parameter value');\n            }\n            return decodeBase64URL(jwk.k);\n        case 'RSA':\n            if ('oth' in jwk && jwk.oth !== undefined) {\n                throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n            }\n            return jwkToKey({ ...jwk, alg, ext });\n        case 'AKP': {\n            if (typeof jwk.alg !== 'string' || !jwk.alg) {\n                throw new TypeError('missing \"alg\" (Algorithm) Parameter value');\n            }\n            if (alg !== undefined && alg !== jwk.alg) {\n                throw new TypeError('JWK alg and alg option value mismatch');\n            }\n            return jwkToKey({ ...jwk, ext });\n        }\n        case 'EC':\n        case 'OKP':\n            return jwkToKey({ ...jwk, alg, ext });\n        default:\n            throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n    }\n}\n", "import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';\nexport function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n    }\n    if (!protectedHeader || protectedHeader.crit === undefined) {\n        return new Set();\n    }\n    if (!Array.isArray(protectedHeader.crit) ||\n        protectedHeader.crit.length === 0 ||\n        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n        throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n    }\n    let recognized;\n    if (recognizedOption !== undefined) {\n        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);\n    }\n    else {\n        recognized = recognizedDefault;\n    }\n    for (const parameter of protectedHeader.crit) {\n        if (!recognized.has(parameter)) {\n            throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n        }\n        if (joseHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n        }\n        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {\n            throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n        }\n    }\n    return new Set(protectedHeader.crit);\n}\n", "export function validateAlgorithms(option, algorithms) {\n    if (algorithms !== undefined &&\n        (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n        throw new TypeError(`\"${option}\" option must be an array of strings`);\n    }\n    if (!algorithms) {\n        return undefined;\n    }\n    return new Set(algorithms);\n}\n", "import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport { isKeyLike } from './is_key_like.js';\nimport * as jwk from './type_checks.js';\nconst tag = (key) => key?.[Symbol.toStringTag];\nconst jwkMatchesOp = (alg, key, usage) => {\n    if (key.use !== undefined) {\n        let expected;\n        switch (usage) {\n            case 'sign':\n            case 'verify':\n                expected = 'sig';\n                break;\n            case 'encrypt':\n            case 'decrypt':\n                expected = 'enc';\n                break;\n        }\n        if (key.use !== expected) {\n            throw new TypeError(`Invalid key for this operation, its \"use\" must be \"${expected}\" when present`);\n        }\n    }\n    if (key.alg !== undefined && key.alg !== alg) {\n        throw new TypeError(`Invalid key for this operation, its \"alg\" must be \"${alg}\" when present`);\n    }\n    if (Array.isArray(key.key_ops)) {\n        let expectedKeyOp;\n        switch (true) {\n            case usage === 'sign' || usage === 'verify':\n            case alg === 'dir':\n            case alg.includes('CBC-HS'):\n                expectedKeyOp = usage;\n                break;\n            case alg.startsWith('PBES2'):\n                expectedKeyOp = 'deriveBits';\n                break;\n            case /^A\\d{3}(?:GCM)?(?:KW)?$/.test(alg):\n                if (!alg.includes('GCM') && alg.endsWith('KW')) {\n                    expectedKeyOp = usage === 'encrypt' ? 'wrapKey' : 'unwrapKey';\n                }\n                else {\n                    expectedKeyOp = usage;\n                }\n                break;\n            case usage === 'encrypt' && alg.startsWith('RSA'):\n                expectedKeyOp = 'wrapKey';\n                break;\n            case usage === 'decrypt':\n                expectedKeyOp = alg.startsWith('RSA') ? 'unwrapKey' : 'deriveBits';\n                break;\n        }\n        if (expectedKeyOp && key.key_ops?.includes?.(expectedKeyOp) === false) {\n            throw new TypeError(`Invalid key for this operation, its \"key_ops\" must include \"${expectedKeyOp}\" when present`);\n        }\n    }\n    return true;\n};\nconst symmetricTypeCheck = (alg, key, usage) => {\n    if (key instanceof Uint8Array)\n        return;\n    if (jwk.isJWK(key)) {\n        if (jwk.isSecretJWK(key) && jwkMatchesOp(alg, key, usage))\n            return;\n        throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`);\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key', 'Uint8Array'));\n    }\n    if (key.type !== 'secret') {\n        throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n    }\n};\nconst asymmetricTypeCheck = (alg, key, usage) => {\n    if (jwk.isJWK(key)) {\n        switch (usage) {\n            case 'decrypt':\n            case 'sign':\n                if (jwk.isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation must be a private JWK`);\n            case 'encrypt':\n            case 'verify':\n                if (jwk.isPublicJWK(key) && jwkMatchesOp(alg, key, usage))\n                    return;\n                throw new TypeError(`JSON Web Key for this operation must be a public JWK`);\n        }\n    }\n    if (!isKeyLike(key)) {\n        throw new TypeError(invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n    }\n    if (key.type === 'secret') {\n        throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n    }\n    if (key.type === 'public') {\n        switch (usage) {\n            case 'sign':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type \"private\"`);\n            case 'decrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type \"private\"`);\n        }\n    }\n    if (key.type === 'private') {\n        switch (usage) {\n            case 'verify':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type \"public\"`);\n            case 'encrypt':\n                throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type \"public\"`);\n        }\n    }\n};\nexport function checkKeyType(alg, key, usage) {\n    switch (alg.substring(0, 2)) {\n        case 'A1':\n        case 'A2':\n        case 'di':\n        case 'HS':\n        case 'PB':\n            symmetricTypeCheck(alg, key, usage);\n            break;\n        default:\n            asymmetricTypeCheck(alg, key, usage);\n    }\n}\n", "import { decode as b64u } from '../../util/base64url.js';\nimport { verify } from '../../lib/signing.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { concat, encoder, decoder, encode } from '../../lib/buffer_utils.js';\nimport { decodeBase64url } from '../../lib/helpers.js';\nimport { isDisjoint } from '../../lib/type_checks.js';\nimport { isObject } from '../../lib/type_checks.js';\nimport { checkKeyType } from '../../lib/check_key_type.js';\nimport { validateCrit } from '../../lib/validate_crit.js';\nimport { validateAlgorithms } from '../../lib/validate_algorithms.js';\nimport { normalizeKey } from '../../lib/normalize_key.js';\nexport async function flattenedVerify(jws, key, options) {\n    if (!isObject(jws)) {\n        throw new JWSInvalid('Flattened JWS must be an object');\n    }\n    if (jws.protected === undefined && jws.header === undefined) {\n        throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n    }\n    if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n        throw new JWSInvalid('JWS Protected Header incorrect type');\n    }\n    if (jws.payload === undefined) {\n        throw new JWSInvalid('JWS Payload missing');\n    }\n    if (typeof jws.signature !== 'string') {\n        throw new JWSInvalid('JWS Signature missing or incorrect type');\n    }\n    if (jws.header !== undefined && !isObject(jws.header)) {\n        throw new JWSInvalid('JWS Unprotected Header incorrect type');\n    }\n    let parsedProt = {};\n    if (jws.protected) {\n        try {\n            const protectedHeader = b64u(jws.protected);\n            parsedProt = JSON.parse(decoder.decode(protectedHeader));\n        }\n        catch {\n            throw new JWSInvalid('JWS Protected Header is invalid');\n        }\n    }\n    if (!isDisjoint(parsedProt, jws.header)) {\n        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n    }\n    const joseHeader = {\n        ...parsedProt,\n        ...jws.header,\n    };\n    const extensions = validateCrit(JWSInvalid, new Map([['b64', true]]), options?.crit, parsedProt, joseHeader);\n    let b64 = true;\n    if (extensions.has('b64')) {\n        b64 = parsedProt.b64;\n        if (typeof b64 !== 'boolean') {\n            throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n        }\n    }\n    const { alg } = joseHeader;\n    if (typeof alg !== 'string' || !alg) {\n        throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n    }\n    const algorithms = options && validateAlgorithms('algorithms', options.algorithms);\n    if (algorithms && !algorithms.has(alg)) {\n        throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n    }\n    if (b64) {\n        if (typeof jws.payload !== 'string') {\n            throw new JWSInvalid('JWS Payload must be a string');\n        }\n    }\n    else if (typeof jws.payload !== 'string' && !(jws.payload instanceof Uint8Array)) {\n        throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n    }\n    let resolvedKey = false;\n    if (typeof key === 'function') {\n        key = await key(parsedProt, jws);\n        resolvedKey = true;\n    }\n    checkKeyType(alg, key, 'verify');\n    const data = concat(jws.protected !== undefined ? encode(jws.protected) : new Uint8Array(), encode('.'), typeof jws.payload === 'string'\n        ? b64\n            ? encode(jws.payload)\n            : encoder.encode(jws.payload)\n        : jws.payload);\n    const signature = decodeBase64url(jws.signature, 'signature', JWSInvalid);\n    const k = await normalizeKey(key, alg);\n    const verified = await verify(alg, k, signature, data);\n    if (!verified) {\n        throw new JWSSignatureVerificationFailed();\n    }\n    let payload;\n    if (b64) {\n        payload = decodeBase64url(jws.payload, 'payload', JWSInvalid);\n    }\n    else if (typeof jws.payload === 'string') {\n        payload = encoder.encode(jws.payload);\n    }\n    else {\n        payload = jws.payload;\n    }\n    const result = { payload };\n    if (jws.protected !== undefined) {\n        result.protectedHeader = parsedProt;\n    }\n    if (jws.header !== undefined) {\n        result.unprotectedHeader = jws.header;\n    }\n    if (resolvedKey) {\n        return { ...result, key: k };\n    }\n    return result;\n}\n", "import { flattenedVerify } from '../flattened/verify.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { decoder } from '../../lib/buffer_utils.js';\nexport async function compactVerify(jws, key, options) {\n    if (jws instanceof Uint8Array) {\n        jws = decoder.decode(jws);\n    }\n    if (typeof jws !== 'string') {\n        throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n    }\n    const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n    if (length !== 3) {\n        throw new JWSInvalid('Invalid Compact JWS');\n    }\n    const verified = await flattenedVerify({ payload, protected: protectedHeader, signature }, key, options);\n    const result = { payload: verified.payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n", "import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { encoder, decoder } from './buffer_utils.js';\nimport { isObject } from './type_checks.js';\nconst epoch = (date) => Math.floor(date.getTime() / 1000);\nconst minute = 60;\nconst hour = minute * 60;\nconst day = hour * 24;\nconst week = day * 7;\nconst year = day * 365.25;\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nexport function secs(str) {\n    const matched = REGEX.exec(str);\n    if (!matched || (matched[4] && matched[1])) {\n        throw new TypeError('Invalid time period format');\n    }\n    const value = parseFloat(matched[2]);\n    const unit = matched[3].toLowerCase();\n    let numericDate;\n    switch (unit) {\n        case 'sec':\n        case 'secs':\n        case 'second':\n        case 'seconds':\n        case 's':\n            numericDate = Math.round(value);\n            break;\n        case 'minute':\n        case 'minutes':\n        case 'min':\n        case 'mins':\n        case 'm':\n            numericDate = Math.round(value * minute);\n            break;\n        case 'hour':\n        case 'hours':\n        case 'hr':\n        case 'hrs':\n        case 'h':\n            numericDate = Math.round(value * hour);\n            break;\n        case 'day':\n        case 'days':\n        case 'd':\n            numericDate = Math.round(value * day);\n            break;\n        case 'week':\n        case 'weeks':\n        case 'w':\n            numericDate = Math.round(value * week);\n            break;\n        default:\n            numericDate = Math.round(value * year);\n            break;\n    }\n    if (matched[1] === '-' || matched[4] === 'ago') {\n        return -numericDate;\n    }\n    return numericDate;\n}\nfunction validateInput(label, input) {\n    if (!Number.isFinite(input)) {\n        throw new TypeError(`Invalid ${label} input`);\n    }\n    return input;\n}\nconst normalizeTyp = (value) => {\n    if (value.includes('/')) {\n        return value.toLowerCase();\n    }\n    return `application/${value.toLowerCase()}`;\n};\nconst checkAudiencePresence = (audPayload, audOption) => {\n    if (typeof audPayload === 'string') {\n        return audOption.includes(audPayload);\n    }\n    if (Array.isArray(audPayload)) {\n        return audOption.some(Set.prototype.has.bind(new Set(audPayload)));\n    }\n    return false;\n};\nexport function validateClaimsSet(protectedHeader, encodedPayload, options = {}) {\n    let payload;\n    try {\n        payload = JSON.parse(decoder.decode(encodedPayload));\n    }\n    catch {\n    }\n    if (!isObject(payload)) {\n        throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n    }\n    const { typ } = options;\n    if (typ &&\n        (typeof protectedHeader.typ !== 'string' ||\n            normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n        throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', 'check_failed');\n    }\n    const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n    const presenceCheck = [...requiredClaims];\n    if (maxTokenAge !== undefined)\n        presenceCheck.push('iat');\n    if (audience !== undefined)\n        presenceCheck.push('aud');\n    if (subject !== undefined)\n        presenceCheck.push('sub');\n    if (issuer !== undefined)\n        presenceCheck.push('iss');\n    for (const claim of new Set(presenceCheck.reverse())) {\n        if (!(claim in payload)) {\n            throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n        }\n    }\n    if (issuer &&\n        !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n        throw new JWTClaimValidationFailed('unexpected \"iss\" claim value', payload, 'iss', 'check_failed');\n    }\n    if (subject && payload.sub !== subject) {\n        throw new JWTClaimValidationFailed('unexpected \"sub\" claim value', payload, 'sub', 'check_failed');\n    }\n    if (audience &&\n        !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n        throw new JWTClaimValidationFailed('unexpected \"aud\" claim value', payload, 'aud', 'check_failed');\n    }\n    let tolerance;\n    switch (typeof options.clockTolerance) {\n        case 'string':\n            tolerance = secs(options.clockTolerance);\n            break;\n        case 'number':\n            tolerance = options.clockTolerance;\n            break;\n        case 'undefined':\n            tolerance = 0;\n            break;\n        default:\n            throw new TypeError('Invalid clockTolerance option type');\n    }\n    const { currentDate } = options;\n    const now = epoch(currentDate || new Date());\n    if ((payload.iat !== undefined || maxTokenAge) && typeof payload.iat !== 'number') {\n        throw new JWTClaimValidationFailed('\"iat\" claim must be a number', payload, 'iat', 'invalid');\n    }\n    if (payload.nbf !== undefined) {\n        if (typeof payload.nbf !== 'number') {\n            throw new JWTClaimValidationFailed('\"nbf\" claim must be a number', payload, 'nbf', 'invalid');\n        }\n        if (payload.nbf > now + tolerance) {\n            throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', 'check_failed');\n        }\n    }\n    if (payload.exp !== undefined) {\n        if (typeof payload.exp !== 'number') {\n            throw new JWTClaimValidationFailed('\"exp\" claim must be a number', payload, 'exp', 'invalid');\n        }\n        if (payload.exp <= now - tolerance) {\n            throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', 'check_failed');\n        }\n    }\n    if (maxTokenAge) {\n        const age = now - payload.iat;\n        const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n        if (age - tolerance > max) {\n            throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', 'check_failed');\n        }\n        if (age < 0 - tolerance) {\n            throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', 'check_failed');\n        }\n    }\n    return payload;\n}\nexport class JWTClaimsBuilder {\n    #payload;\n    constructor(payload) {\n        if (!isObject(payload)) {\n            throw new TypeError('JWT Claims Set MUST be an object');\n        }\n        this.#payload = structuredClone(payload);\n    }\n    data() {\n        return encoder.encode(JSON.stringify(this.#payload));\n    }\n    get iss() {\n        return this.#payload.iss;\n    }\n    set iss(value) {\n        this.#payload.iss = value;\n    }\n    get sub() {\n        return this.#payload.sub;\n    }\n    set sub(value) {\n        this.#payload.sub = value;\n    }\n    get aud() {\n        return this.#payload.aud;\n    }\n    set aud(value) {\n        this.#payload.aud = value;\n    }\n    set jti(value) {\n        this.#payload.jti = value;\n    }\n    set nbf(value) {\n        if (typeof value === 'number') {\n            this.#payload.nbf = validateInput('setNotBefore', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.nbf = validateInput('setNotBefore', epoch(value));\n        }\n        else {\n            this.#payload.nbf = epoch(new Date()) + secs(value);\n        }\n    }\n    set exp(value) {\n        if (typeof value === 'number') {\n            this.#payload.exp = validateInput('setExpirationTime', value);\n        }\n        else if (value instanceof Date) {\n            this.#payload.exp = validateInput('setExpirationTime', epoch(value));\n        }\n        else {\n            this.#payload.exp = epoch(new Date()) + secs(value);\n        }\n    }\n    set iat(value) {\n        if (value === undefined) {\n            this.#payload.iat = epoch(new Date());\n        }\n        else if (value instanceof Date) {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(value));\n        }\n        else if (typeof value === 'string') {\n            this.#payload.iat = validateInput('setIssuedAt', epoch(new Date()) + secs(value));\n        }\n        else {\n            this.#payload.iat = validateInput('setIssuedAt', value);\n        }\n    }\n}\n", "import { compactVerify } from '../jws/compact/verify.js';\nimport { validateClaimsSet } from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n    const verified = await compactVerify(jwt, key, options);\n    if (verified.protectedHeader.crit?.includes('b64') && verified.protectedHeader.b64 === false) {\n        throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n    }\n    const payload = validateClaimsSet(verified.protectedHeader, verified.payload, options);\n    const result = { payload, protectedHeader: verified.protectedHeader };\n    if (typeof key === 'function') {\n        return { ...result, key: verified.key };\n    }\n    return result;\n}\n", "import { importJWK } from '../key/import.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport { isObject } from '../lib/type_checks.js';\nfunction getKtyFromAlg(alg) {\n    switch (typeof alg === 'string' && alg.slice(0, 2)) {\n        case 'RS':\n        case 'PS':\n            return 'RSA';\n        case 'ES':\n            return 'EC';\n        case 'Ed':\n            return 'OKP';\n        case 'ML':\n            return 'AKP';\n        default:\n            throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n    }\n}\nfunction isJWKSLike(jwks) {\n    return (jwks &&\n        typeof jwks === 'object' &&\n        Array.isArray(jwks.keys) &&\n        jwks.keys.every(isJWKLike));\n}\nfunction isJWKLike(key) {\n    return isObject(key);\n}\nclass LocalJWKSet {\n    #jwks;\n    #cached = new WeakMap();\n    constructor(jwks) {\n        if (!isJWKSLike(jwks)) {\n            throw new JWKSInvalid('JSON Web Key Set malformed');\n        }\n        this.#jwks = structuredClone(jwks);\n    }\n    jwks() {\n        return this.#jwks;\n    }\n    async getKey(protectedHeader, token) {\n        const { alg, kid } = { ...protectedHeader, ...token?.header };\n        const kty = getKtyFromAlg(alg);\n        const candidates = this.#jwks.keys.filter((jwk) => {\n            let candidate = kty === jwk.kty;\n            if (candidate && typeof kid === 'string') {\n                candidate = kid === jwk.kid;\n            }\n            if (candidate && (typeof jwk.alg === 'string' || kty === 'AKP')) {\n                candidate = alg === jwk.alg;\n            }\n            if (candidate && typeof jwk.use === 'string') {\n                candidate = jwk.use === 'sig';\n            }\n            if (candidate && Array.isArray(jwk.key_ops)) {\n                candidate = jwk.key_ops.includes('verify');\n            }\n            if (candidate) {\n                switch (alg) {\n                    case 'ES256':\n                        candidate = jwk.crv === 'P-256';\n                        break;\n                    case 'ES384':\n                        candidate = jwk.crv === 'P-384';\n                        break;\n                    case 'ES512':\n                        candidate = jwk.crv === 'P-521';\n                        break;\n                    case 'Ed25519':\n                    case 'EdDSA':\n                        candidate = jwk.crv === 'Ed25519';\n                        break;\n                }\n            }\n            return candidate;\n        });\n        const { 0: jwk, length } = candidates;\n        if (length === 0) {\n            throw new JWKSNoMatchingKey();\n        }\n        if (length !== 1) {\n            const error = new JWKSMultipleMatchingKeys();\n            const _cached = this.#cached;\n            error[Symbol.asyncIterator] = async function* () {\n                for (const jwk of candidates) {\n                    try {\n                        yield await importWithAlgCache(_cached, jwk, alg);\n                    }\n                    catch { }\n                }\n            };\n            throw error;\n        }\n        return importWithAlgCache(this.#cached, jwk, alg);\n    }\n}\nasync function importWithAlgCache(cache, jwk, alg) {\n    const cached = cache.get(jwk) || cache.set(jwk, {}).get(jwk);\n    if (cached[alg] === undefined) {\n        const key = await importJWK({ ...jwk, ext: true }, alg);\n        if (key instanceof Uint8Array || key.type !== 'public') {\n            throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n        }\n        cached[alg] = key;\n    }\n    return cached[alg];\n}\nexport function createLocalJWKSet(jwks) {\n    const set = new LocalJWKSet(jwks);\n    const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n    Object.defineProperties(localJWKSet, {\n        jwks: {\n            value: () => structuredClone(set.jwks()),\n            enumerable: false,\n            configurable: false,\n            writable: false,\n        },\n    });\n    return localJWKSet;\n}\n", "import { createLocalJWKSet, jwtVerify } from 'jose'\nimport * as metro from '@muze-nl/metro-core'\n\nconst jwksCache = new WeakMap()\n\nfunction keySetFor(jwks) {\n\tif (!jwks || !Array.isArray(jwks.keys)) {\n\t\tthrow metro.metroError('metro.oidc: Error: jwks must be an object with a keys array')\n\t}\n\tif (!jwksCache.has(jwks)) {\n\t\tjwksCache.set(jwks, createLocalJWKSet(jwks))\n\t}\n\treturn jwksCache.get(jwks)\n}\n\nfunction supportedAlgorithms(openidConfiguration = {}) {\n\tconst algorithms = openidConfiguration.id_token_signing_alg_values_supported\n\tif (Array.isArray(algorithms) && algorithms.length) {\n\t\treturn algorithms.filter(algorithm => algorithm !== 'none')\n\t}\n\treturn ['RS256']\n}\n\n/**\n * Validate an OpenID Connect ID Token.\n *\n * This intentionally keeps jose behind a tiny Metro/OIDC helper so the public\n * OIDC middleware API can stay small while still delegating JWT/JWS/JWKS\n * validation to a mature library.\n */\nexport async function validateIdToken(idToken, options = {}) {\n\tif (!idToken) {\n\t\tthrow metro.metroError('metro.oidc: Error: token response did not include an id_token')\n\t}\n\tif (!options.jwks) {\n\t\tthrow metro.metroError('metro.oidc: Error: cannot validate id_token without jwks')\n\t}\n\tif (!options.issuer) {\n\t\tthrow metro.metroError('metro.oidc: Error: cannot validate id_token without issuer')\n\t}\n\tif (!options.client_id) {\n\t\tthrow metro.metroError('metro.oidc: Error: cannot validate id_token without client_id')\n\t}\n\n\tconst { payload, protectedHeader } = await jwtVerify(\n\t\tidToken,\n\t\tkeySetFor(options.jwks),\n\t\t{\n\t\t\tissuer: options.issuer,\n\t\t\taudience: options.client_id,\n\t\t\talgorithms: options.algorithms || supportedAlgorithms(options.openid_configuration),\n\t\t\tclockTolerance: options.clockTolerance ?? 60,\n\t\t\trequiredClaims: ['iss', 'sub', 'aud', 'exp', 'iat']\n\t\t}\n\t)\n\n\tif (options.nonce !== undefined && payload.nonce !== options.nonce) {\n\t\tthrow metro.metroError('metro.oidc: Error: id_token nonce mismatch')\n\t}\n\n\treturn {\n\t\theader: protectedHeader,\n\t\tclaims: payload\n\t}\n}\n", "import * as metro from '@muze-nl/metro-core'\nimport oauth2mw, * as oauth2 from '@muze-nl/metro-oauth2/oauth2'\nimport dpopmw from '@muze-nl/metro-oauth2/dpop'\nimport { assert, Required, Optional, validURL, instanceOf } from '@muze-nl/assert'\nimport discover from './oidc.discovery.mjs'\nimport register from './oidc.register.mjs'\nimport oidcStore from './oidc.store.mjs'\nimport jsonmw from '@muze-nl/metro-middleware/json'\nimport throwermw from '@muze-nl/metro-middleware/thrower'\nimport { validateIdToken } from './oidc.jwt.mjs'\n\nexport default function oidcmw(options={}) {\n\n\tconst defaultOptions = {\n\t\tclient: metro.client(),\n\t\tforce_authorization: false,\n\t\tuse_dpop: true,\n\t\tauthorize_callback: async url => {\n\t\t\tif (window.location.href != url.href) {\n\t\t\t\twindow.location.replace(url.href)\n\t\t\t}\n\t\t\treturn false\n\t\t}\n\t}\n\n\toptions = Object.assign({}, defaultOptions, options)\n\tconst requestedClientInfo = options.client_info\n\n\tassert(options, {\n\t\tclient: Required(instanceOf(metro.client().constructor)), // required because it is set in defaultOptions\n\t\tclient_info: Required(),\n\t\tissuer: Required(validURL),\n\t\toauth2: Optional({}),\n\t\topenid_configuration: Optional()\n\t})\n\n\tif (!options.store) {\n\t\toptions.store = oidcStore(options.issuer)\n\t}\n\tif (!options.openid_configuration && options.store.has('openid_configuration')) {\n\t\toptions.openid_configuration = options.store.get('openid_configuration')\n\t}\n\tif (!options.client_info?.client_id && options.store.has('client_info')) {\n\t\tconst storedClientInfo = options.store.get('client_info')\n\t\tif (clientInfoMatchesRequest(storedClientInfo, requestedClientInfo)) {\n\t\t\toptions.client_info = storedClientInfo\n\t\t}\n\t}\n\n\treturn async (req, next) => {\n\t\tlet res\n\t\tif (!options.force_authorization) {\n\t\t\ttry {\n\t\t\t\tres = await next(req)\n\t\t\t} catch(err) {\n\t\t\t\tres = err?.cause\n\t\t\t\tif (!res || (res.status!=401 && res.status!=403)) {\n\t\t\t\t\tthrow err\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (res.ok || (res.status!=401 && res.status!=403)) {\n\t\t\t\treturn res\n\t\t\t}\n\t\t}\n\t\tif (!options.openid_configuration) {\n\t\t\toptions.openid_configuration = await discover({\n\t\t\t\tissuer: options.issuer,\n\t\t\t\tclient: options.client.with(options.issuer)\n\t\t\t})\n\t\t\toptions.store.set('openid_configuration', options.openid_configuration)\n\t\t}\n\n\t\tif (!options.client_info?.client_id) {\n\t\t\tif (!options.openid_configuration.registration_endpoint) {\n\t\t\t\tthrow metro.metroError('metro.oidcmw: Error: issuer '+options.issuer+' does not support dynamic client registration, but you haven\\'t specified a client_id')\n\t\t\t}\n\t\t\toptions.client_info = await register({\n\t\t\t\tregistration_endpoint: options.openid_configuration.registration_endpoint,\n\t\t\t\tclient: options.client,\n\t\t\t\tclient_info: options.client_info\n\t\t\t})\n\t\t\toptions.store.set('client_info', options.client_info)\n\t\t}\n\n\t\t// now initialize an oauth2 client stack, using options.client as default\n\t\t// with forceAuthentication: true\n\t\tconst scope = options.scope || 'openid'\n\t\tconst nonce = options.nonce || oauth2.generateCodeVerifier(32)\n\t\toptions.store.set('pending_nonce', nonce)\n\n\t\tconst oauth2Options = Object.assign(\n\t\t\t{\n\t\t\t\tsite: options.issuer,\n\t\t\t\tclient: options.client,\n\t\t\t\tforce_authorization: true,\n\t\t\t\tauthorize_callback: options.authorize_callback,\n\t\t\t\toauth2_configuration: {\n\t\t\t\t\tclient_id: options.client_info?.client_id,\n\t\t\t\t\tclient_secret: options.client_info?.client_secret,\n\t\t\t\t\tgrant_type: 'authorization_code',\n\t\t\t\t\tresponse_type: 'code',\n\t\t\t\t\tresponse_mode: 'query',\n\t\t\t\t\tauthorization_endpoint: options.openid_configuration.authorization_endpoint,\n\t\t\t\t\ttoken_endpoint: options.openid_configuration.token_endpoint,\n\t\t\t\t\tscope, //FIXME: should only use scopes supported by server\n\t\t\t\t\tredirect_uri: options.client_info.redirect_uris[0],\n\t\t\t\t\tnonce\n\t\t\t\t}\n\t\t\t}\n\t\t\t//...\n\t\t)\n\t\t\n\t\tconst storeIdToken = async (req, next) => {\n\t\t\tconst res = await next(req)\n\t\t\tconst tokenEndpoint = metro.url(options.openid_configuration.token_endpoint, { hash: '' }).href\n\t\t\tconst requestUrl = metro.url(req.url, { hash: '' }).href\n\t\t\tif (requestUrl !== tokenEndpoint) {\n\t\t\t\treturn res\n\t\t\t}\n\t\t\tconst contentType = res.headers.get('content-type')\n\t\t\tif (!contentType?.startsWith('application/json')) {\n\t\t\t\treturn res\n\t\t\t}\n\n\t\t\tlet data = res.data && typeof res.data === 'object' ? res.data : null\n\t\t\tif (!data) {\n\t\t\t\tconst res2 = res.clone() // otherwise res.body can't be read again\n\t\t\t\tdata = await res2.json()\n\t\t\t}\n\n\t\t\tconst id_token = data?.id_token\n\t\t\tconst jwks = await getJwks()\n\t\t\tconst validation = await validateIdToken(id_token, {\n\t\t\t\tissuer: options.openid_configuration.issuer,\n\t\t\t\tclient_id: options.client_info.client_id,\n\t\t\t\tjwks,\n\t\t\t\topenid_configuration: options.openid_configuration,\n\t\t\t\tnonce: options.store.get('pending_nonce')\n\t\t\t})\n\t\t\toptions.store.set('id_token', id_token)\n\t\t\toptions.store.set('id_token_claims', validation.claims)\n\t\t\treturn res\n\t\t}\n\n\t\tconst getJwks = async () => {\n\t\t\tif (!options.jwks) {\n\t\t\t\tconst jwksClient = options.client.with(throwermw()).with(jsonmw())\n\t\t\t\tconst response = await jwksClient.get(options.openid_configuration.jwks_uri)\n\t\t\t\toptions.jwks = response.data\n\t\t\t}\n\t\t\treturn options.jwks\n\t\t}\n\n\t\tlet oauth2client = options.client.with(options.issuer).with(storeIdToken)\n\n\t\tif (options.use_dpop) {\n\t\t\tconst dpopOptions = {\n\t\t\t\tsite: options.issuer,\n\t\t\t\tauthorization_endpoint: options.openid_configuration.authorization_endpoint,\n\t\t\t\ttoken_endpoint: options.openid_configuration.token_endpoint,\n\t\t\t\tdpop_signing_alg_values_supported: options.openid_configuration.dpop_signing_alg_values_supported\n\t\t\t}\n\t\t\toauth2client = oauth2client.with(dpopmw(dpopOptions)) // add DPoP headers in requests with Authorization headers\n\t\t}\n\t\toauth2Options.client = oauth2client // make sure token requests use the OIDC token-observing stack\n\n\t\toauth2client = oauth2client.with(oauth2mw(oauth2Options))\n\n\t\tres = await oauth2client.fetch(req)\n\n\t\treturn res\n\t}\n\n}\n\nfunction clientInfoMatchesRequest(storedClientInfo, requestedClientInfo) {\n\tif (!storedClientInfo?.client_id) {\n\t\treturn false\n\t}\n\tif (!Array.isArray(requestedClientInfo?.redirect_uris)) {\n\t\treturn true\n\t}\n\tconst storedRedirectUris = new Set(storedClientInfo.redirect_uris || [])\n\treturn requestedClientInfo.redirect_uris.every(uri => storedRedirectUris.has(uri))\n}\n\nexport function isRedirected() {\n\treturn oauth2.isRedirected()\n}\n\nexport function idToken(options) {\n\tif (!options.store) {\n\t\tif (!options.issuer) {\n\t\t\tthrow metro.metroError('Must supply options.issuer or options.store to get the id_token')\n\t\t}\n\t\toptions.store = oidcStore(options.issuer)\n\t}\n\treturn options.store.get('id_token')\n}\n\nexport function idTokenClaims(options) {\n\tif (!options.store) {\n\t\tif (!options.issuer) {\n\t\t\tthrow metro.metroError('Must supply options.issuer or options.store to get the id_token claims')\n\t\t}\n\t\toptions.store = oidcStore(options.issuer)\n\t}\n\treturn options.store.get('id_token_claims')\n}\n", "import oidcmw, { isRedirected, idToken, idTokenClaims } from './oidcmw.mjs'\nimport discover from './oidc.discovery.mjs'\nimport register from './oidc.register.mjs'\n\nconst oidc = {\n\toidcmw,\n\tdiscover,\n\tregister,\n\tisRedirected,\n\tidToken,\n\tidTokenClaims\n}\n\nexport default oidc\nexport { default as oidcmw } from './oidcmw.mjs'\nexport { isRedirected, idToken, idTokenClaims } from './oidcmw.mjs'\nexport { default as discover } from './oidc.discovery.mjs'\nexport { default as register } from './oidc.register.mjs'\nexport { default as oidcStore } from './oidc.store.mjs'\nexport { validateIdToken } from './oidc.jwt.mjs'\n", "import * as core from '@muze-nl/metro-core'\nimport oidc from './index.mjs'\n\nconst metro = Object.assign({}, core, globalThis.metro || {})\n\nif (!metro.oidc) {\n\tmetro.oidc = oidc\n}\n\nglobalThis.metro = metro\n\nexport * from './index.mjs'\nexport default oidc\n"],
+  "mappings": ";;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACQA,MAAM,WAAW;AAOjB,MAAI,CAAC,OAAO,YAAY;AACvB,WAAO,aAAa,uBAAO,SAAS;AAAA,EACrC;AACA,MAAI,CAAC,OAAO,aAAa;AACxB,WAAO,cAAc,uBAAO,QAAQ;AAAA,EACrC;AAcO,MAAM,SAAN,MAAM,QACb;AAAA,IACC,gBAAgB;AAAA,MACf,KAAK,OAAO,UAAU,cAAc,IAAI,OAAO,QAAQ,IAAI,IAAI,mBAAmB;AAAA,MAClF,OAAO,CAAC,OAAM,QAAO,OAAM,UAAS,SAAQ,QAAO,WAAU,OAAO;AAAA,IACrE;AAAA,IAEA,OAAO,UAAU,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAYlB,eAAe,SACf;AACC,eAAS,UAAU,SAAS;AAC3B,YAAI,OAAO,UAAU,YAAY,kBAAkB,QAAQ;AAC1D,eAAK,cAAc,MAAM,IAAI,KAAK,cAAc,IAAI,MAAM,MAAM;AAAA,QACjE,WAAW,kBAAkB,SAAQ;AACpC,iBAAO,OAAO,KAAK,eAAe,OAAO,aAAa;AAAA,QACvD,WAAW,kBAAkB,UAAU;AACtC,eAAK,gBAAgB,CAAC,MAAM,CAAC;AAAA,QAC9B,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,mBAAS,SAAS,QAAQ;AACzB,gBAAI,SAAS,eAAe;AAC3B,mBAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,YACnC,WAAW,SAAS,OAAO;AAC1B,mBAAK,cAAc,MAAM,IAAI,KAAK,cAAc,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,YACxE,WAAW,OAAO,OAAO,KAAK,KAAK,YAAY;AAC9C,mBAAK,cAAc,KAAK,IAAI,OAAO,KAAK,EAAE,KAAK,cAAc,KAAK,GAAG,KAAK,aAAa;AAAA,YACxF,OAAO;AACN,mBAAK,cAAc,KAAK,IAAI,OAAO,KAAK;AAAA,YACzC;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAEA,iBAAW,QAAQ,KAAK,cAAc,OAAO;AAC5C,aAAK,IAAI,IAAI,kBAAkBA,UAAS;AACvC,iBAAO,KAAK;AAAA,YACX;AAAA,cACC,KAAK;AAAA,cACL,GAAGA;AAAA,cACH,EAAC,QAAQ,KAAK,YAAY,EAAC;AAAA,YAC5B;AAAA,YACA,iBAAiB,GAAGA,QAAO;AAAA,UAC5B;AAAA,QACD;AAAA,MACD;AAAA,IAED;AAAA,IAEA,gBAAgB,aAChB;AACC,UAAI,OAAO,eAAe,YAAY;AACrC,sBAAc,CAAE,WAAY;AAAA,MAC7B;AACA,UAAI,QAAQ,YAAY,UAAU,OAAK,OAAO,KAAK,UAAU;AAC7D,UAAI,SAAO,GAAG;AACb,cAAM,WAAW,2EACf,WAAS,+BAA+B,YAAY,KAAK,CAAC;AAAA,MAC7D;AACA,UAAI,CAAC,MAAM,QAAQ,KAAK,cAAc,WAAW,GAAG;AACnD,aAAK,cAAc,cAAc,CAAC;AAAA,MACnC;AACA,WAAK,cAAc,cAAc,KAAK,cAAc,YAAY,OAAO,WAAW;AAAA,IACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAM,KAAK,SACX;AACC,YAAM,QAAQ,KAAK,OAAO;AAC1B,UAAI,CAAC,IAAI,KAAK;AACb,cAAM,WAAW,kBAAgB,IAAI,OAAO,YAAY,IAAE,6BAA2B,WAAS,6BAA6B,GAAG;AAAA,MAC/H;AACA,UAAI,CAAC,SAAS;AACb,kBAAU,CAAC;AAAA,MACZ;AACA,UAAI,EAAE,OAAO,YAAY,aACrB,mBAAmB,QACvB;AACC,cAAM,WAAW,mDAAiD,WAAS,iCAAiC,OAAO;AAAA,MACpH;AAEA,YAAM,aAAa,eAAe,aAAaC,MAC/C;AACC,YAAIA,KAAI,OAAO,UAAU,GAAG;AAC3B,UAAAA,OAAMA,KAAI,OAAO,WAAW;AAAA,QAC7B;AACA,cAAM,MAAM,MAAM,MAAMA,IAAG;AAC3B,eAAO,SAAS,GAAG;AAAA,MACpB;AAEA,UAAI,cAAc,CAAC,UAAU,EAAE,OAAO,KAAK,eAAe,aAAa,MAAM,KAAK,CAAC,CAAC;AACpF,gBAAU,OAAO,OAAO,CAAC,GAAG,KAAK,eAAe,OAAO;AACvD,YAAM,eAAe,mBAAmB,KAAK,OAAO;AACpD,YAAM,oBAAoB,wBAAwB,MAAM,SAAS,YAAY;AAE7E,UAAI;AACJ,eAAS,cAAc,aAAa;AACnC,eAAQ,0BAASC,OAAMC,aAAY;AAClC,iBAAO,eAAeF,MAAK;AAC1B,gBAAI;AACJ,gBAAI,UAAU,aAAa;AAC3B,wBAAY,SAAS,WAAWA,MAAKE,aAAY,YAAY;AAC7D,gBAAI;AACH,oBAAM,MAAMA,YAAWF,MAAKC,OAAM,iBAAiB;AAAA,YACpD,SAAQE,QAAO;AACd,0BAAY,SAAS,SAASA,QAAOH,MAAKE,aAAY,YAAY;AAClE,oBAAMC;AAAA,YACP;AACA,wBAAY,SAAS,YAAY,KAAKD,aAAY,YAAY;AAC9D,mBAAO;AAAA,UACR;AAAA,QACD,GAAG,MAAM,UAAU;AAAA,MACpB;AACA,aAAO,KAAK,GAAG;AAAA,IAChB;AAAA,IAEA,QAAQ,SAAS;AAChB,aAAO,IAAI,QAAO,UAAU,KAAK,aAAa,GAAG,GAAG,OAAO;AAAA,IAC5D;AAAA,IAEA,IAAI,WAAW;AACd,aAAO,KAAK,cAAc;AAAA,IAC3B;AAAA,EAED;AAGA,MAAI,iBAAiB;AACrB,MAAM,oBAAoB,CAAC,SAAS,UAAU,SAAS;AAEvD,WAAS,oBAAoB,SAC7B;AACC,UAAM,SAAS,CAAC;AAChB,eAAW,UAAU,SAAS;AAC7B,UAAI,CAAC,cAAc,MAAM,GAAG;AAC3B;AAAA,MACD;AACA,iBAAW,OAAO,mBAAmB;AACpC,YAAI,OAAO,QAAQ;AAClB,iBAAO,GAAG,IAAI,OAAO,GAAG;AAAA,QACzB;AAAA,MACD;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAEA,WAAS,mBAAmB,KAAK,UAAQ,CAAC,GAC1C;AACC,UAAM,SAAS,gBAAgB,QAAQ,SAAS,QAAQ,UAAU,QAAQ,OAAO;AACjF,QAAI,eAAe,CAAC;AACpB,QAAI,QAAQ;AACX,qBAAe,OAAO,gBAAgB,CAAC;AAAA,IACxC,OAAO;AACN,qBAAe,iBAAiB,QAAQ,KAAK,EAC3C,OAAO,iBAAiB,QAAQ,MAAM,CAAC,EACvC,OAAO,iBAAiB,QAAQ,OAAO,CAAC;AAAA,IAC3C;AACA,UAAM,gBAAgB,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC;AACxD,UAAM,UAAU;AAAA,MACf,qBAAqB;AAAA,MACrB,IAAI,yBAAwB,EAAE;AAAA,MAC9B;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,cAAc,OAAO,YAAY;AAAA,IAC3C;AACA,WAAO;AAAA,EACR;AAEA,WAAS,gBAAgB,OACzB;AACC,QAAI,CAAC,OAAO;AACX,aAAO;AAAA,IACR;AACA,QAAI,MAAM,SAAS,qBAAqB;AACvC,aAAO,MAAM;AAAA,IACd;AACA,QAAI,MAAM,qBAAqB;AAC9B,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAEA,WAAS,iBAAiB,OAC1B;AACC,QAAI,CAAC,SAAS,MAAM,uBAAuB,MAAM,SAAS,qBAAqB;AAC9E,aAAO,CAAC;AAAA,IACT;AACA,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,aAAO,MAAM,QAAQ,gBAAgB;AAAA,IACtC;AACA,QAAI,SAAS,KAAK,GAAG;AACpB,aAAO,CAAC,KAAK;AAAA,IACd;AACA,QAAI,cAAc,KAAK,GAAG;AACzB,aAAO,OAAO,OAAO,KAAK,EAAE,QAAQ,gBAAgB;AAAA,IACrD;AACA,WAAO,CAAC;AAAA,EACT;AAEA,WAAS,SAAS,OAClB;AACC,WAAO,SAAS,OAAO,SAAS,YAAY;AAAA,MAC3C;AAAA,MAAW;AAAA,MAAY;AAAA,MAAS;AAAA,MAAS;AAAA,MAAc;AAAA,MAAQ;AAAA,MAAQ;AAAA,IACxE,EAAE,KAAK,UAAQ,OAAO,MAAM,IAAI,KAAK,UAAU;AAAA,EAChD;AAEA,WAAS,wBAAwBE,SAAQ,SAAS,cAClD;AACC,UAAM,QAAQ,eAAe,YAAY;AACzC,WAAO,OAAO,OAAO;AAAA,MACpB,QAAAA;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,KAAK,eAAa,CAAC,GAAG;AAC3B,eAAOA,QAAO,MAAM,KAAK,OAAO,OAAO,CAAC,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC;AAAA,MACpE;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,eAAe,SACxB;AACC,UAAM,MAAM;AAAA,MACX,qBAAqB;AAAA,MACrB;AAAA,MACA,MAAM,MAAM,OAAK,CAAC,GAAG;AACpB,oBAAY,QAAQ,SAAS,SAAS,MAAM,MAAM,OAAO;AAAA,MAC1D;AAAA,MACA,WAAW,aAAW,CAAC,GAAG;AACzB,oBAAY,QAAQ,SAAS,cAAc,YAAY,OAAO;AAAA,MAC/D;AAAA,MACA,UAAU;AACT,mBAAW,UAAU,QAAQ,SAAS;AACrC,cAAI,OAAO,OAAO,WAAW,YAAY;AACxC,kBAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,gBAAI,SAAS;AACZ,qBAAO;AAAA,YACR;AAAA,UACD;AAAA,QACD;AACA,eAAO,EAAE,SAAS,MAAM,QAAQ,KAAK;AAAA,MACtC;AAAA,MACA,MAAM,KAAK,MAAM,IAAI,OAAK,CAAC,GAAG;AAC7B,cAAM,SAAS,QAAQ,QAAQ,KAAK,CAAAC,YAAU,OAAOA,QAAO,QAAQ,UAAU;AAC9E,YAAI,CAAC,QAAQ;AACZ,iBAAO,GAAG;AAAA,QACX;AACA,eAAO,OAAO,KAAK,MAAM,IAAI,MAAM,OAAO;AAAA,MAC3C;AAAA,MACA,KAAK,KAAK;AACT,YAAI,UAAU;AACd,mBAAW,UAAU,QAAQ,SAAS;AACrC,cAAI,OAAO,OAAO,QAAQ,YAAY;AACrC,sBAAU,OAAO,KAAK,KAAK,QAAW,OAAO,KAAK;AAAA,UACnD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,MACA,QAAQ,QAAM,CAAC,GAAG;AACjB,eAAO,OAAO,OAAO,CAAC,GAAG,OAAO,EAAE,OAAO,IAAI,CAAC;AAAA,MAC/C;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAEA,WAAS,YAAY,SAAS,WAAW,MACzC;AACC,eAAW,UAAU,SAAS;AAC7B,UAAI,UAAU,OAAO,OAAO,MAAM,KAAK,YAAY;AAClD,eAAO,MAAM,EAAE,KAAK,QAAQ,GAAG,IAAI;AAAA,MACpC;AAAA,IACD;AAAA,EACD;AAEA,WAAS,cAAc,OACvB;AACC,WAAO,SAAS,OAAO,SAAS,aAC3B,OAAO,eAAe,KAAK,MAAM,OAAO,aAAa,OAAO,eAAe,KAAK,MAAM;AAAA,EAC5F;AAOO,WAAS,UAAU,SAC1B;AACC,WAAO,IAAI,OAAO,GAAG,UAAU,OAAO,CAAC;AAAA,EACxC;AA4BA,WAAS,iBAAiB,KAAK,SAC/B;AACC,QAAI,SAAS,WAAW,CAAC;AACzB,QAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAC/B,aAAO,MAAM,QAAQ;AAAA,IACtB;AAEA,aAAQ,QAAQ;AAAA,MAAC;AAAA,MAAS;AAAA,MAAU;AAAA,MAAO;AAAA,MAAO;AAAA,MAAc;AAAA,MAAQ;AAAA,MACvE;AAAA,MAAW;AAAA,MAAiB;AAAA,MAAY;AAAA,MAAY;AAAA,MACpD;AAAA,MAAW;AAAA,IAAK,GAAG;AACnB,UAAI,QAAQ,IAAI,IAAI;AACpB,UAAI,OAAO,SAAO,eAAe,SAAS,MAAM;AAC/C;AAAA,MACD;AACA,UAAI,QAAQ,OAAO,UAAU,GAAG;AAC/B,gBAAQ,MAAM,OAAO,WAAW;AAAA,MACjC;AACA,UAAI,OAAO,SAAS,YAAY;AAC/B,eAAO,IAAI,IAAI,MAAM,OAAO,IAAI,GAAG,MAAM;AAAA,MAC1C,OAAO;AACN,YAAI,QAAQ,OAAO;AAClB,iBAAO,MAAM,IAAI,OAAO,KAAK,KAAK;AAAA,QACnC,WAAW,QAAQ,WAAW;AAE7B,iBAAO,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC5C,cAAI,EAAE,iBAAiB,UAAU;AAChC,oBAAQ,IAAI,QAAQ,IAAI,OAAO;AAAA,UAChC;AACA,mBAAS,CAAC,KAAK,GAAG,KAAK,MAAM,QAAQ,GAAG;AACvC,mBAAO,QAAQ,IAAI,KAAK,GAAG;AAAA,UAC5B;AAAA,QACD,OAAO;AACN,iBAAO,IAAI,IAAI;AAAA,QAChB;AAAA,MACD;AAAA,IACD;AACA,QAAI,eAAe,WAAW,IAAI,MAAM;AAGvC,aAAO,OAAO,IAAI;AAAA,IACnB;AACA,WAAO;AAAA,EACR;AAeO,WAAS,WAAW,SAC3B;AAIC,QAAI,gBAAgB;AAAA,MACnB,KAAK,OAAO,UAAU,cAAc,IAAI,OAAO,QAAQ,IAAI,IAAI,oBAAoB;AAAA,MACnF,QAAQ;AAAA;AAAA,IACT;AACA,aAAS,UAAU,SAAS;AAC3B,UAAI,OAAO,UAAU,YACjB,kBAAkB,OAClB,kBAAkB,iBACpB;AACD,sBAAc,MAAM,IAAI,cAAc,KAAK,MAAM;AAAA,MAClD,WAAW,WACV,kBAAkB,YACf,kBAAkB,kBAClB,kBAAkB,QAClB,kBAAkB,eAClB,kBAAkB,WACnB;AACF,sBAAc,OAAO;AAAA,MACtB,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,eAAO,OAAO,eAAe,iBAAiB,QAAQ,aAAa,CAAC;AAAA,MACrE;AAAA,IACD;AACA,QAAI,IAAI,IAAI,QAAQ,cAAc,KAAK,aAAa;AACpD,QAAI,OAAO,cAAc;AACzB,QAAI,MAAM;AACT,UAAI,OAAO,QAAQ,YACf,EAAE,gBAAgB,WAClB,EAAE,gBAAgB,mBAClB,EAAE,gBAAgB,SAClB,EAAE,gBAAgB,gBAClB,EAAE,gBAAgB,aAClB,EAAE,gBAAgB,aAClB,EAAE,gBAAgB,qBACjB,WAAW,eAAe,YAAY,OAAO,IAAI,IACpD;AAID,YAAI,OAAO,KAAK,YAAY,YAAY;AACvC,wBAAc,OAAO,KAAK,SAAS,EAAC,SAAQ,EAAE,QAAO,CAAC;AACtD,cAAI,IAAI,QAAQ,cAAc,KAAK,aAAa;AAAA,QACjD;AAAA,MACD;AAAA,IACD;AACA,WAAO,OAAO,CAAC;AACf,WAAO,IAAI,MAAM,GAAG;AAAA,MACnB,IAAI,QAAQ,MAAM;AACjB,YAAI;AACJ,gBAAO,MAAM;AAAA,UACZ,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAS,YAAYN,UAAS;AAC7B,kBAAI,OAAO,SAAS,aAAa;AAChC,gBAAAA,SAAQ,QAAQ,EAAE,MAAM,KAAK,CAAC;AAAA,cAC/B;AACA,qBAAO,QAAQ,QAAQ,GAAGA,QAAO;AAAA,YAClC;AACD;AAAA,UACA,KAAK;AACJ,qBAAS;AACV;AAAA,UACA;AACC,gBAAI,OAAO,IAAI,aAAa,UAAU;AACrC,kBAAI,SAAS,SAAS;AACrB,yBAAS,WAAW;AACnB,wBAAM,SAAS,OAAO,MAAM;AAE5B,sBAAI,OAAO,QAAQ,eACf,EAAE,OAAO,kBAAkB,eAC1B,gBAAgB,iBAAiB;AACrC,2BAAO,QAAQ,QAAQ,EAAE,MAAM,KAAK,CAAC;AAAA,kBACtC;AAEA,yBAAO,QAAQ,MAAM;AAAA,gBACtB;AAAA,cACD,OAAO;AACN,yBAAS,OAAO,IAAI,EAAE,KAAK,MAAM;AAAA,cAClC;AAAA,YACD,OAAO;AACN,uBAAS,OAAO,IAAI;AAAA,YACrB;AACD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,kBAAkB,KAAK,SAChC;AAEC,QAAI,SAAS,WAAW,CAAC;AACzB,QAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAC/B,aAAO,MAAM,QAAQ;AAAA,IACtB;AACA,aAAQ,QAAQ,CAAC,UAAS,cAAa,WAAU,QAAO,OAAM,QAAO,YAAY,GAAG;AACnF,UAAI,QAAQ,IAAI,IAAI;AACpB,UAAI,OAAO,SAAS,eAAe,SAAS,MAAM;AACjD;AAAA,MACD;AACA,UAAI,QAAQ,OAAO,UAAU,GAAG;AAC/B,gBAAQ,MAAM,OAAO,WAAW;AAAA,MACjC;AACA,UAAI,OAAO,SAAS,YAAY;AAC/B,eAAO,IAAI,IAAI,MAAM,OAAO,IAAI,GAAG,MAAM;AAAA,MAC1C,OAAO;AACN,YAAI,QAAQ,OAAO;AAElB,iBAAO,MAAM,IAAI,IAAI,OAAO,OAAO,OAAO,oBAAoB;AAAA,QAC/D,OAAO;AACN,iBAAO,IAAI,IAAI;AAAA,QAChB;AAAA,MACD;AAAA,IACD;AACA,QAAI,eAAe,YAAY,IAAI,MAAM;AAGxC,aAAO,OAAO,IAAI;AAAA,IACnB;AACA,WAAO;AAAA,EACR;AAeO,WAAS,YAAY,SAC5B;AACC,QAAI,iBAAiB,CAAC;AACtB,aAAS,UAAU,SAAS;AAC3B,UAAI,OAAO,UAAU,UAAU;AAC9B,uBAAe,OAAO;AAAA,MACvB,WAAW,kBAAkB,UAAU;AACtC,eAAO,OAAO,gBAAgB,kBAAkB,QAAQ,cAAc,CAAC;AAAA,MACxE,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,YAAI,kBAAkB,YAClB,kBAAkB,QAClB,kBAAkB,eAClB,kBAAkB,YAClB,kBAAkB,kBAClB,kBAAkB,mBAClB,kBAAkB,UACjB,OAAO,WAAW,cAAc,eAAe,kBAAkB,WAAW,YAC/E;AACD,yBAAe,OAAO;AAAA,QACvB,OAAO;AACN,iBAAO,OAAO,gBAAgB,kBAAkB,QAAQ,cAAc,CAAC;AAAA,QACxE;AAAA,MACD;AAAA,IACD;AACA,QAAI,OAAO;AACX,QAAI,eAAe,MAAM;AACxB,aAAO,eAAe;AAAA,IACvB;AAIA,QAAI,CAAC,KAAK,KAAK,KAAK,GAAI,EAAE,SAAS,eAAe,MAAM,GAAG;AAC1D,qBAAe,OAAO;AAAA,IACvB;AACA,QAAI,IAAI,IAAI,SAAS,eAAe,MAAM,cAAc;AACxD,WAAO,OAAO,CAAC;AACf,WAAO,IAAI,MAAM,GAAG;AAAA,MACnB,IAAI,QAAQ,MAAM;AACjB,YAAI;AACJ,gBAAO,MAAM;AAAA,UACZ,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAS,YAAYA,UAAS;AAC7B,qBAAO,SAAS,QAAQ,GAAGA,QAAO;AAAA,YACnC;AACD;AAAA,UACA,KAAK;AAGJ,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAU,OAAO,UAAQ,OAAS,OAAO,SAAO;AACjD;AAAA,UACA;AACC,gBAAI,OAAO,OAAO,IAAI,KAAK,YAAY;AACtC,uBAAS,OAAO,IAAI,EAAE,KAAK,MAAM;AAAA,YAClC,OAAO;AACN,uBAAS,OAAO,IAAI;AAAA,YACrB;AACD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,mBAAmBO,MAAK,QACjC;AACC,QAAI,OAAO,UAAU,YAAY;AAChC,aAAOA,KAAI,cAAcA,IAAG;AAAA,IAC7B,OAAO;AACN,eAAS,IAAI,gBAAgB,MAAM;AACnC,aAAO,QAAQ,CAAC,OAAM,QAAQ;AAC7B,QAAAA,KAAI,aAAa,OAAO,KAAK,KAAK;AAAA,MACnC,CAAC;AAAA,IACF;AAAA,EACD;AAEA,WAAS,iBAAiB,OAAO,QACjC;AACC,UAAM,SAAS,MAAM,OAAO,WAAW,KAAK;AAC5C,QAAI,EAAE,kBAAkB,kBAAkB;AACzC,eAAS,IAAI,gBAAgB,MAAM;AAAA,IACpC;AACA,QAAI,OAAO,OAAO,QAAQ;AAC1B,YAAQ,MAAM;AACd,WAAO,IAAI,QAAQ,EAAE,KAAK,CAAC;AAAA,EAC5B;AAaO,WAAS,OAAO,SACvB;AACC,QAAI,cAAc;AAAA,MAAC;AAAA,MAAO;AAAA,MAAW;AAAA,MAAO;AAAA,MAAW;AAAA,MACtD;AAAA,MAAW;AAAA,MAAW;AAAA,MAAO;AAAA,MAAW;AAAA,MAAW;AAAA,MAAS;AAAA,MAAe;AAAA,IAAY;AACxF,QAAI,IAAI,IAAI,IAAI,oBAAoB;AACpC,QAAI,UAAU;AACd,aAAS,UAAU,SAAS;AAC3B,UAAI,OAAO,UAAU,YAAY,kBAAkB,QAAQ;AAE1D,YAAI,IAAI,IAAI,QAAQ,CAAC;AAAA,MACtB,WAAW,kBAAkB,OACxB,OAAO,YAAY,eACnB,kBAAkB,UACrB;AACD,YAAI,IAAI,IAAI,MAAM;AAAA,MACnB,WAAW,kBAAkB,iBAAiB;AAC7C,2BAAmB,GAAG,MAAM;AAAA,MAC7B,WAAW,UAAU,OAAO,UAAU,UAAU;AAC/C,iBAAS,SAAS,QAAQ;AACzB,kBAAO,OAAO;AAAA,YACb,KAAK;AACJ,kBAAI,OAAO,OAAO,UAAU,YAAY;AACvC,uBAAO,OAAO,EAAE,QAAQ,CAAC;AAAA,cAC1B,OAAO;AACN,kBAAE,SAAS,IAAI,gBAAgB,OAAO,MAAM;AAAA,cAC7C;AACD;AAAA,YACA,KAAK;AACJ,iCAAmB,GAAG,OAAO,YAAY;AAC1C;AAAA,YACA;AACC,kBAAI,CAAC,YAAY,SAAS,KAAK,GAAG;AACjC,sBAAM,WAAW,sCAAoC,WAAS,2BAA2B,KAAK;AAAA,cAC/F;AACA,kBAAI,SAAO,YAAY;AACtB,oBAAI,WAAW,OAAO;AACtB,oBAAI,YAAY,OAAO,YAAY,YAAY,SAAS,CAAC,KAAG,KAAK;AAChE,6BAAW,MAAI;AAAA,gBAChB;AACA,uBAAO,OAAO;AACd,wBAAQ;AAAA,cACT,WAAW,SAAO,cAAc;AAC/B,0BAAU,OAAO;AAAA,cAClB;AACA,kBAAI,OAAO,OAAO,KAAK,KAAK,YAAY;AACvC,uBAAO,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,cAC1B,WACC,OAAO,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,aAAa,UAC1D,OAAO,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,aAAa,UAC7D,OAAO,OAAO,KAAK,KAAK,aAAa,OAAO,KAAK,aAAa,SAChE;AACD,kBAAE,KAAK,IAAI,KAAG,OAAO,KAAK;AAAA,cAC3B,WAAW,OAAO,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,EAAE,UAAU;AACtE,kBAAE,KAAK,IAAI,OAAO,KAAK,EAAE,SAAS;AAAA,cACnC,OAAO;AACN,sBAAM,WAAW,sCAAoC,QAAM,MAAI,WAAS,gCAAgC,QAAQ,KAAK,CAAC;AAAA,cACvH;AACD;AAAA,UACD;AAAA,QACD;AAAA,MACD,OAAO;AACN,cAAM,WAAW,yCAAuC,WAAS,iCAAiC,MAAM;AAAA,MACzG;AAAA,IACD;AACA,QAAI,SAAS;AACZ,UAAI,CAAC,EAAE,MAAM;AACZ,UAAE,OAAO;AAAA,MACV;AACA,UAAI,OAAO,WAAS,UAAU;AAC7B,UAAE,QAAQ;AAAA,MACX,OAAO;AACN,YAAI,iBAAiB,GAAG,OAAO;AAAA,MAChC;AAAA,IACD;AACA,WAAO,OAAO,CAAC;AACf,WAAO,IAAI,MAAM,GAAG;AAAA,MACnB,IAAI,QAAQ,MAAM;AACjB,YAAI;AACJ,gBAAO,MAAM;AAAA,UACZ,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK,OAAO;AACX,qBAAS;AACV;AAAA,UACA,KAAK;AACJ,qBAAS,YAAYP,UAAS;AAC7B,qBAAO,IAAI,QAAQ,GAAGA,QAAO;AAAA,YAC9B;AACD;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,SAAS,MAAM,GAAG,EAAE,IAAI;AACzC;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,SAAS,UAAU,GAAE,OAAO,SAAS,YAAY,GAAG,IAAE,CAAC;AACxE;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,YAAY;AAC5B,sBAAU,OAAO,WAAW,MAAI,OAAO,WAAW;AAClD,sBAAU,SAAS,MAAM;AACzB,sBAAU,OAAO;AACjB,sBAAU,OAAO,OAAO,MAAI,OAAO,OAAO;AAC1C,sBAAU;AACV,qBAAS,OAAO,WAAW,OAAO;AACnC;AAAA,UACA,KAAK;AACJ,qBAAS,OAAO,KAAK,UAAU,CAAC;AACjC;AAAA,UACA,KAAK;AACJ,gBAAI,OAAO,UAAU;AACpB,uBAAS,OAAO,SAAS,UAAU,GAAG,OAAO,SAAS,SAAO,CAAC;AAAA,YAC/D,OAAO;AACN,uBAAS;AAAA,YACV;AACD;AAAA,UACA;AACC,gBAAI,OAAO,IAAI,aAAa,UAAU;AACrC,uBAAS,OAAO,IAAI,EAAE,KAAK,MAAM;AAAA,YAClC,OAAO;AACN,uBAAS,OAAO,IAAI;AAAA,YACrB;AACD;AAAA,QACD;AACA,eAAO;AAAA,MACR;AAAA,IACD,CAAC;AAAA,EACF;AAEA,MAAM,eAAe;AAAA,IACpB,OAAO,CAACQ,aAAY,YAAY;AAC/B,cAAQ,MAAM,kBAAOA,UAAS,GAAG,OAAO;AAAA,IACzC;AAAA,IACA,MAAM,CAACA,aAAY,YAAY;AAC9B,cAAQ,KAAK,kBAAOA,UAAS,GAAG,OAAO;AAAA,IACxC;AAAA,IACA,OAAO,CAAC,SAAS;AAChB,cAAQ,MAAM,mBAAO,IAAI;AAAA,IAC1B;AAAA,IACA,UAAU,CAAC,SAAS;AACnB,cAAQ,SAAS,mBAAO,IAAI;AAAA,IAC7B;AAAA,EACD;AAMO,WAAS,WAAWA,aAAY,SAAS;AAC/C,iBAAa,MAAMA,UAAS,GAAG,OAAO;AACtC,WAAO,IAAI,MAAMA,UAAS,GAAG,OAAO;AAAA,EACrC;AAEO,WAAS,UAAU,QAAQ;AACjC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAC1B,aAAO,OAAO,MAAM,EAAE,IAAI,SAAS;AAAA,IACpC;AACA,QAAI,UAAU,OAAO,WAAS,UAAU;AACvC,UAAI,OAAO,WAAW,eAAa,UAAU,CAAC,OAAO,WAAW;AAC/D,YAAI,SAAS,OAAO,OAAO,CAAC,GAAG,MAAM;AACrC,eAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AAClC,iBAAO,GAAG,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACpC,CAAC;AACD,eAAO;AAAA,MACR,OAAO;AACN,eAAO;AAAA,MACR;AAAA,IACD;AACA,WAAO;AAAA,EACR;;;AC30BA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,MAAI,gBAAgB;AAKb,WAAS,SAAS;AACxB,oBAAgB;AAAA,EACjB;AAKO,WAAS,UAAU;AACzB,oBAAgB;AAAA,EACjB;AAEA,WAAS,WAAW,OAAK,IAAI,KAAK;AACjC,QAAI,OAAO,QAAQ,eAAe,QAAQ,MAAM;AAC/C,aAAO;AAAA,IACR;AACA,QAAI,OAAO,OAAO,UAAU;AAC3B,aAAO,GAAG,IAAI,IAAI,GAAG;AAAA,IACtB;AACA,WAAO,GAAG,IAAI,IAAI,GAAG;AAAA,EACtB;AAEA,WAAS,YAAY,OAAK,IAAI;AAC7B,QAAI,MAAM,QAAQ,IAAI,GAAG;AACxB,aAAO;AAAA,IACR;AACA,QAAI,CAAC,MAAM;AACV,aAAO,CAAC;AAAA,IACT;AACA,QAAI,SAAS,CAAC;AACd,QAAI,UAAU;AACd,QAAI;AACJ,WAAQ,QAAQ,QAAQ,KAAK,IAAI,GAAI;AACpC,UAAI,OAAO,MAAM,CAAC,KAAK,aAAa;AACnC,eAAO,KAAK,MAAM,CAAC,CAAC;AAAA,MACrB,WAAW,OAAO,MAAM,CAAC,KAAK,aAAa;AAC1C,eAAO,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC;AAAA,MAC7B;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAEA,WAAS,aAAa,OAAK,CAAC,GAAG;AAC9B,QAAI,OAAO,QAAQ,UAAU;AAC5B,aAAO,KAAK,WAAW,GAAG,IAAI,KAAK,MAAM,CAAC,IAAI;AAAA,IAC/C;AACA,WAAO,KAAK,IAAI,CAAC,MAAM,UAAU;AAChC,UAAI,OAAO,QAAQ,UAAU;AAC5B,eAAO,IAAI,IAAI;AAAA,MAChB;AACA,aAAO,GAAG,QAAQ,MAAM,EAAE,GAAG,IAAI;AAAA,IAClC,CAAC,EAAE,KAAK,EAAE;AAAA,EACX;AAGA,WAAS,iBAAiB,OAAO;AAChC,QAAI,UAAU,QAAQ;AACrB,aAAO;AAAA,IACR;AACA,QAAI,UAAU,QAAQ;AACrB,aAAO;AAAA,IACR;AACA,QAAI,UAAU,SAAS;AACtB,aAAO;AAAA,IACR;AACA,WAAO,MAAM,QAAQ;AAAA,EACtB;AAEA,WAAS,KAAK,MAAM,YAAU,IAAI;AACjC,QAAI,KAAK,UAAU,WAAW;AAC7B,aAAO;AAAA,IACR;AACA,WAAO,KAAK,MAAM,GAAG,YAAY,CAAC,IAAE;AAAA,EACrC;AAEA,WAAS,YAAY,OAAO;AAC3B,WAAO,IAAI,KAAK,OAAO,KAAK,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,OAAO,KAAK,CAAC,CAAC;AAAA,EACjG;AAEA,WAAS,YAAY,OAAO;AAC3B,QAAI;AACH,UAAI,OAAO,KAAK,UAAU,KAAK;AAC/B,UAAI,OAAO,QAAQ,UAAU;AAC5B,eAAO,KAAK,IAAI;AAAA,MACjB;AAAA,IACD,SAAQ,GAAG;AAAA,IAEX;AACA,QAAI,OAAO,OAAO,aAAa;AAC/B,QAAI,QAAQ,QAAQ,UAAU;AAC7B,aAAO;AAAA,IACR;AACA,WAAO,OAAO,UAAU,SAAS,KAAK,KAAK;AAAA,EAC5C;AAEA,WAAS,YAAY,OAAO;AAC3B,QAAI,OAAO,SAAS,UAAU;AAC7B,aAAO,YAAY,KAAK;AAAA,IACzB;AACA,QAAI,OAAO,SAAS,aAAa;AAChC,aAAO;AAAA,IACR;AACA,QAAI,UAAU,MAAM;AACnB,aAAO;AAAA,IACR;AACA,QAAI,OAAO,SAAS,YAAY;AAC/B,aAAO,iBAAiB,KAAK;AAAA,IAC9B;AACA,QAAI,iBAAiB,QAAQ;AAC5B,aAAO,MAAM,SAAS;AAAA,IACvB;AACA,QAAI,OAAO,SAAS,YAAY,OAAO,SAAS,aAAa,OAAO,SAAS,UAAU;AACtF,aAAO,OAAO,KAAK;AAAA,IACpB;AACA,QAAI,OAAO,SAAS,UAAU;AAC7B,aAAO,MAAM,SAAS;AAAA,IACvB;AACA,WAAO,YAAY,KAAK;AAAA,EACzB;AAEA,WAAS,iBAAiB,OAAO;AAChC,QAAI,UAAU,UAAU,UAAU,UAAU,UAAU,SAAS;AAC9D,aAAO,iBAAiB,KAAK;AAAA,IAC9B;AACA,QAAI,OAAO,SAAS,YAAY;AAC/B,aAAO,iBAAiB,KAAK;AAAA,IAC9B;AACA,QAAI,iBAAiB,QAAQ;AAC5B,aAAO,MAAM,SAAS;AAAA,IACvB;AACA,QAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,aAAO,MAAI,MAAM,IAAI,gBAAgB,EAAE,KAAK,IAAI,IAAE;AAAA,IACnD;AACA,WAAO,YAAY,KAAK;AAAA,EACzB;AAEA,WAAS,cAAc,UAAU;AAChC,WAAO,SAAS,IAAI,gBAAgB,EAAE,KAAK,IAAI;AAAA,EAChD;AAEA,WAAS,eAAeC,UAAS,QAAQ,UAAU;AAClD,QAAIA,YAAW,kCAAkC;AAChD,aAAO,YAAY,YAAY,QAAQ,CAAC,WAAW,YAAY,MAAM,CAAC;AAAA,IACvE;AACA,QAAIA,YAAW,iCAAiC,uCAAuC,KAAKA,QAAO,GAAG;AACrG,aAAO,YAAY,iBAAiB,QAAQ,CAAC,WAAW,YAAY,MAAM,CAAC;AAAA,IAC5E;AACA,QAAIA,YAAW,2CAA2C;AACzD,aAAO,qBAAqB,iBAAiB,QAAQ,CAAC;AAAA,IACvD;AACA,QAAIA,YAAW,oBAAoB;AAClC,aAAO;AAAA,IACR;AACA,QAAIA,YAAW,iDAAiD;AAC/D,aAAO;AAAA,IACR;AACA,QAAIA,YAAW,qCAAqC;AACnD,aAAO;AAAA,IACR;AACA,QAAIA,YAAW,qCAAqC;AACnD,aAAO,wBAAwB,iBAAiB,QAAQ,CAAC,WAAW,YAAY,MAAM,CAAC;AAAA,IACxF;AACA,QAAIA,YAAW,wCAAwCA,YAAW,sCAAsC;AACvG,aAAO,mBAAmB,cAAc,QAAQ,CAAC,WAAW,YAAY,MAAM,CAAC;AAAA,IAChF;AACA,QAAIA,YAAW,8CAA8C;AAC5D,aAAO,kBAAkB,iBAAiB,QAAQ,CAAC;AAAA,IACpD;AACA,WAAOA;AAAA,EACR;AAEO,WAAS,YAAY,OAAO,UAAQ,CAAC,GAAG;AAC9C,QAAI,CAAC,SAAS,OAAO,SAAS,UAAU;AACvC,aAAO,OAAO,KAAK;AAAA,IACpB;AACA,QAAI,OAAO,MAAM,cAAc,aAAa,MAAM,QAAQ,CAAC,CAAC,KAAK;AACjE,QAAI,SAAS,QAAQ,UAAU;AAC/B,WAAO,GAAG,MAAM,GAAG,IAAI,KAAK,MAAM,OAAO;AAAA,EAC1C;AAEO,WAAS,aAAaC,SAAQ,UAAQ,CAAC,GAAG;AAChD,QAAI,CAACA,SAAQ;AACZ,aAAO;AAAA,IACR;AACA,QAAI,SAAS,QAAQ,UAAU;AAC/B,YAAQ,MAAM,QAAQA,OAAM,IAAIA,UAAS,CAACA,OAAM,GAAG,IAAI,WAAS,YAAY,OAAO,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AAAA,EAC3G;AAEA,WAAS,iBAAiB,SAAS;AAClC,QAAI,CAAC,WAAW,OAAO,WAAW,UAAU;AAC3C,aAAO;AAAA,QACN,MAAM,CAAC;AAAA,QACP,YAAY;AAAA,QACZ,SAAS,OAAO,OAAO;AAAA,QACvB,UAAU;AAAA,QACV,QAAQ;AAAA,MACT;AAAA,IACD;AACA,QAAI,OAAO,YAAY,QAAQ,IAAI;AACnC,QAAI,aAAa,aAAa,IAAI;AAClC,QAAI,SAAS,QAAQ,UAAU,QAAQ;AACvC,QAAI,WAAW,iBAAiB,QAAQ,QAAQ;AAChD,QAAID,WAAU,eAAe,QAAQ,SAAS,QAAQ,QAAQ,QAAQ;AACtE,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,SAAAA;AAAA,MACA;AAAA,MACA;AAAA,IACD;AAAA,EACD;AAEA,WAAS,iBAAiB,UAAU;AACnC,QAAI,CAAC,UAAU;AACd,aAAO,CAAC;AAAA,IACT;AACA,QAAI,SAAS,CAAC;AACd,aAAS,WAAW,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ,GAAG;AACpE,UAAI,CAAC,SAAS;AACb;AAAA,MACD;AACA,UAAI,WAAW,OAAO,WAAW,YAAY,QAAQ,UAAU;AAC9D,YAAI,SAAS,iBAAiB,QAAQ,QAAQ;AAC9C,YAAI,OAAO,QAAQ;AAClB,mBAAS,OAAO,OAAO,MAAM;AAC7B;AAAA,QACD;AAAA,MACD;AACA,aAAO,KAAK,iBAAiB,OAAO,CAAC;AAAA,IACtC;AACA,WAAO;AAAA,EACR;AAQO,WAAS,OAAO,QAAQ,MAAM;AACpC,QAAI,eAAe;AAClB,UAAI,WAAW,MAAM,QAAO,IAAI;AAChC,UAAI,UAAU;AACb,YAAI,kBAAkB,iBAAiB,QAAQ;AAC/C,YAAI,kBAAkB,aAAa,eAAe;AAClD,YAAIA,WAAU,yBAAuB,gBAAgB,KAAK,IAAI;AAC9D,gBAAQ,MAAM,sBAAQA,QAAO;AAC7B,cAAM,IAAI,MAAMA,UAAS;AAAA,UACxB,OAAO,EAAE,UAAU,QAAQ,iBAAiB,OAAO;AAAA,QACpD,CAAC;AAAA,MACF;AAAA,IACD;AAAA,EACD;AAKO,WAAS,SAAS,SAAS;AACjC,WAAO,SAAS,UAAU,MAAM,MAAM,MAAM;AAC3C,UAAI,OAAO,QAAQ,eAAe,QAAM,QAAQ,OAAO,WAAW,aAAc;AAC/E,eAAO,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,MACvC;AAAA,IACD;AAAA,EACD;AAKO,WAAS,SAAS,SAAS;AACjC,WAAO,SAAS,UAAU,MAAM,MAAM,MAAM;AAC3C,UAAI,QAAM,QAAQ,OAAO,QAAQ,aAAa;AAC7C,eAAO,MAAM,oBAAoB,MAAM,WAAW,aAAa,IAAI;AAAA,MACpE,WAAW,OAAO,WAAW,aAAa;AACzC,eAAO,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,MACvC,OAAO;AACN,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AAMO,WAAS,YAAY,SAAS;AACpC,WAAO,SAAS,aAAa,MAAM,MAAM,MAAM;AAC9C,UAAI,QAAM,QAAQ,OAAO,QAAQ,aAAa;AAC7C,aAAK,2CAA2C,MAAM,SAAS,IAAI;AACnE,eAAO;AAAA,MACR,OAAO;AACN,eAAO,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,MACvC;AAAA,IACD;AAAA,EACD;AAMO,WAAS,SAAS,UAAU;AAClC,WAAO,SAAS,OAAO,MAAM,MAAM,MAAM;AACxC,eAAQ,WAAW,UAAU;AAC5B,YAAI,CAAC,MAAM,MAAM,SAAS,MAAM,IAAI,GAAG;AACtC,iBAAO;AAAA,QACR;AAAA,MACD;AACA,aAAO,MAAM,sCAAsC,MAAM,UAAU,IAAI;AAAA,IACxE;AAAA,EACD;AAOO,WAAS,SAAS,UAAU;AAClC,WAAO,SAAS,OAAO,MAAM,MAAM,MAAM;AACxC,UAAI,CAAC,MAAM,QAAQ,IAAI,GAAG;AACzB,eAAO,MAAM,wBAAuB,MAAK,SAAQ,IAAI;AAAA,MACtD;AACA,eAAS,CAAC,OAAO,KAAK,KAAK,KAAK,QAAQ,GAAG;AAC1C,YAAI,WAAW,WAAW,MAAM,KAAK;AACrC,YAAI,MAAM,GAAG,QAAQ,EAAE,OAAO,MAAM,QAAQ,GAAG;AAC9C,iBAAO,MAAM,sCAAqC,OAAM,UAAS,QAAQ;AAAA,QAC1E;AAAA,MACD;AACA,aAAO;AAAA,IACR;AAAA,EACD;AAEO,WAAS,SAAS,UAAU;AAClC,WAAO,SAAS,OAAO,MAAM,MAAM,MAAM;AACxC,UAAI,WAAW,CAAC;AAChB,eAAS,WAAW,UAAU;AAC7B,mBAAW,SAAS,OAAO,MAAM,MAAM,SAAS,MAAM,IAAI,CAAC;AAAA,MAC5D;AACA,iBAAW,SAAS,OAAO,OAAO;AAClC,UAAI,SAAS,QAAQ;AACpB,eAAO,MAAM,0CAA0C,MAAM,UAAU,MAAM,QAAQ;AAAA,MACtF;AAAA,IACD;AAAA,EACD;AAOO,WAAS,SAAS,MAAM,MAAM,MAAM;AAC1C,QAAI;AACH,UAAI,gBAAgB,KAAK;AACxB,eAAO,KAAK;AAAA,MACb;AACA,UAAIE,OAAM,IAAI,IAAI,IAAI;AACtB,UAAIA,KAAI,QAAM,MAAM;AACnB,YAAI,EAAEA,KAAI,OAAK,OAAK,QAAQA,KAAI,QAAM,OAAK,MAAM;AAEhD,iBAAO,MAAM,2BAA0B,MAAK,YAAW,IAAI;AAAA,QAC5D;AAAA,MACD;AAAA,IACD,SAAQ,GAAG;AACV,aAAO,MAAM,2BAA0B,MAAK,YAAW,IAAI;AAAA,IAC5D;AAAA,EACD;AAOO,WAAS,WAAW,MAAM,MAAM,MAAM;AAC5C,QAAI,CAAC,6BAA6B,KAAK,IAAI,GAAG;AAC7C,aAAO,MAAM,6BAA4B,MAAK,cAAa,IAAI;AAAA,IAChE;AAAA,EACD;AAMO,WAAS,WAAW,aAAa;AACvC,WAAO,SAAS,YAAY,MAAM,MAAM,MAAM;AAC7C,UAAI,EAAE,gBAAgB,cAAc;AACnC,eAAO,MAAM,qCAAoC,MAAK,aAAY,IAAI;AAAA,MACvE;AAAA,IACD;AAAA,EACD;AAMO,WAAS,IAAI,SAAS;AAC5B,WAAO,SAAS,KAAK,MAAM,MAAM,MAAM;AACtC,UAAI,CAAC,MAAM,MAAM,SAAS,MAAM,IAAI,GAAG;AACtC,eAAO,MAAM,8CAA8C,MAAM,SAAS,IAAI;AAAA,MAC/E;AAAA,IACD;AAAA,EACD;AAUO,WAAS,OAAO,MAAM,SAAS,MAAM;AAC3C,QAAI,WAAW,MAAM,MAAM,SAAS,IAAI;AACxC,QAAI,CAAC,UAAU;AACd,aAAO;AAAA,IACR;AACA,WAAO,iBAAiB,QAAQ;AAAA,EACjC;AAUO,WAAS,MAAM,MAAM,SAAS,MAAM,OAAK,IAAI;AACnD,QAAI,OAAO,QAAQ,aAAa;AAC/B,aAAO;AAAA,IACR;AACA,QAAI,WAAW,CAAC;AAChB,QAAI,YAAY,SAAS;AACxB,UAAI,OAAO,QAAQ,aAAa,EAAE,gBAAgB,UAAU;AAC3D,iBAAS,KAAK,MAAM,yBAAyB,MAAM,SAAS,IAAI,CAAC;AAAA,MAClE;AAAA,IACD,WAAW,YAAY,QAAQ;AAC9B,UAAI,OAAO,QAAQ,YAAY,EAAE,gBAAgB,SAAS;AACzD,iBAAS,KAAK,MAAM,wBAAwB,MAAM,SAAS,IAAI,CAAC;AAAA,MACjE;AAAA,IACD,WAAW,YAAY,QAAQ;AAC9B,UAAI,OAAO,QAAQ,YAAY,EAAE,gBAAgB,SAAS;AACzD,iBAAS,KAAK,MAAM,wBAAwB,MAAM,SAAS,IAAI,CAAC;AAAA,MACjE;AACA,UAAI,QAAQ,IAAI;AACf,iBAAS,KAAK,MAAM,iDAAiD,MAAM,SAAS,IAAI,CAAC;AAAA,MAC1F;AAAA,IACD,WAAW,mBAAmB,QAAQ;AAClC,UAAI,MAAM,QAAQ,IAAI,GAAG;AAC3B,YAAI,QAAQ,KAAK,UAAU,CAAC,SAAQC,WAAU,MAAM,SAAQ,SAAQ,MAAK,WAAW,MAAMA,MAAK,CAAC,CAAC;AACxF,YAAI,QAAM,IAAI;AACb,mBAAS,KAAK,MAAM,UAAQ,QAAM,4BAA4B,KAAK,KAAK,GAAG,SAAS,WAAW,MAAM,KAAK,CAAC,CAAC;AAAA,QAC7G;AAAA,MACJ,WAAW,OAAO,QAAQ,aAAa;AACtC,iBAAS,KAAK,MAAM,2CAA2C,MAAM,SAAS,IAAI,CAAC;AAAA,MACvF,WAAW,CAAC,QAAQ,KAAK,IAAI,GAAG;AAC5B,iBAAS,KAAK,MAAM,+BAA+B,MAAM,SAAS,IAAI,CAAC;AAAA,MACxE;AAAA,IACJ,WAAW,mBAAmB,UAAU;AACpC,UAAI,UAAU,QAAQ,MAAM,MAAM,IAAI;AACtC,UAAI,SAAS;AACZ,YAAI,MAAM,QAAQ,OAAO,GAAG;AAC3B,qBAAW,SAAS,OAAO,OAAO;AAAA,QACnC,OAAO;AACN,mBAAS,KAAK,OAAO;AAAA,QACtB;AAAA,MACD;AAAA,IACJ,WAAW,MAAM,QAAQ,OAAO,GAAG;AACrC,UAAI,CAAC,MAAM,QAAQ,IAAI,GAAG;AACzB,iBAAS,KAAK,MAAM,wBAAuB,MAAK,CAAC,GAAE,IAAI,CAAC;AAAA,MACzD,OAAO;AACN,iBAAS,KAAK,SAAS;AACtB,mBAAS,SAAS,KAAK,KAAK,GAAG;AAC9B,gBAAI,UAAU,MAAM,KAAK,KAAK,GAAG,GAAG,MAAM,WAAW,MAAM,KAAK,CAAC;AACjE,gBAAI,MAAM,QAAQ,OAAO,GAAG;AAC3B,yBAAW,SAAS,OAAO,OAAO;AAAA,YACnC,WAAW,SAAS;AACnB,uBAAS,KAAK,OAAO;AAAA,YACtB;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,IACE,WAAW,WAAW,OAAO,WAAW,UAAU;AAC9C,UAAI,MAAM,QAAQ,IAAI,GAAG;AACrB,YAAI,QAAQ,KAAK,UAAU,CAAC,SAAQA,WAAU,MAAM,SAAQ,SAAQ,MAAK,WAAW,MAAMA,MAAK,CAAC,CAAC;AACjG,YAAI,QAAM,IAAI;AACb,mBAAS,KAAK,MAAM,UAAQ,QAAM,4BAA4B,KAAK,KAAK,GAAG,SAAS,WAAW,MAAM,KAAK,CAAC,CAAC;AAAA,QAC7G;AAAA,MACJ,WAAW,CAAC,QAAQ,OAAO,QAAQ,UAAU;AAC5C,iBAAS,KAAK,MAAM,qCAAqC,MAAM,SAAS,IAAI,CAAC;AAAA,MAC9E,OAAO;AACN,YAAI,gBAAgB,iBAAiB;AACpC,iBAAO,OAAO,YAAY,IAAI;AAAA,QAC/B;AACA,YAAI,mBAAmB,UAAU;AAChC,cAAI,SAAS,MAAM,MAAM,SAAS,MAAM,IAAI;AACzC,cAAI,QAAQ;AACX,uBAAW,SAAS,OAAO,MAAM;AAAA,UAClC;AAAA,QACJ,OAAO;AACN,qBAAW,CAAC,YAAY,UAAU,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC5D,gBAAI,SAAS,MAAM,KAAK,UAAU,GAAG,YAAY,MAAM,WAAW,MAAM,UAAU,CAAC;AACnF,gBAAI,QAAQ;AACX,yBAAW,SAAS,OAAO,MAAM;AAAA,YAClC;AAAA,UACJ;AAAA,QACJ;AAAA,MACD;AAAA,IACD,OAAO;AACN,UAAI,WAAS,MAAM;AAClB,iBAAS,KAAK,MAAM,kCAAkC,MAAM,SAAS,IAAI,CAAC;AAAA,MAC3E;AAAA,IACD;AACA,QAAI,SAAS,QAAQ;AACpB,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACX;AAKO,WAAS,MAAMH,UAAS,OAAO,UAAU,OAAK,IAAI,UAAU;AAClE,QAAI,YAAY,YAAY,IAAI;AAChC,QAAI,SAAS;AAAA,MACZ;AAAA,MACA,YAAY,aAAa,SAAS;AAAA,MAClC;AAAA,MACA,SAAAA;AAAA,MACA;AAAA,MACA;AAAA,IACD;AACA,QAAI,UAAU;AACb,aAAO,WAAW;AAAA,IACnB;AACA,WAAO;AAAA,EACR;AAEO,WAAS,KAAKA,UAAS,MAAM,SAAS,MAAM;AAClD,YAAQ,KAAK,8BAAgB,MAAMA,UAAS,SAAS,IAAI;AAAA,EAC1D;;;ACjiBA,aAAW,SAAS,EAAE,GAAG,oBAAU;;;ACJ5B,WAAS,WAAW,MAAM;AAChC,QAAI,YAAY;AAChB,QAAI,OAAO,iBAAiB,aAAa;AACxC,mBAAa;AAAA,QACZ,KAAK,MAAW,aAAa,QAAQ,iBAAe,IAAI;AAAA,QACxD,KAAK,CAAC,UAAU,aAAa,QAAQ,iBAAe,MAAM,KAAK;AAAA,QAC/D,KAAK,MAAW,aAAa,QAAQ,iBAAe,IAAI,MAAI;AAAA,QAC5D,QAAQ,MAAQ,aAAa,WAAW,iBAAe,IAAI;AAAA,MAC5D;AACA,oBAAc;AAAA,QACb,KAAK,CAAC,SAAgB,KAAK,MAAM,aAAa,QAAQ,OAAK,MAAI,IAAI,CAAC;AAAA,QACpE,KAAK,CAAC,MAAM,UAAU,aAAa,QAAQ,OAAK,MAAI,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QAC/E,KAAK,CAAC,SAAgB,aAAa,QAAQ,OAAK,MAAI,IAAI,MAAI;AAAA,QAC5D,QAAQ,CAAC,SAAa,aAAa,WAAW,OAAK,MAAI,IAAI;AAAA,MAC5D;AAAA,IACD,OAAO;AACN,UAAI,WAAW,oBAAI,IAAI;AACvB,mBAAa;AAAA,QACZ,KAAK,MAAW,SAAS,IAAI,iBAAe,IAAI;AAAA,QAChD,KAAK,CAAC,UAAU,SAAS,IAAI,iBAAe,MAAM,KAAK;AAAA,QACvD,KAAK,MAAW,SAAS,IAAI,iBAAe,IAAI;AAAA,QAChD,QAAQ,MAAQ,SAAS,OAAO,iBAAe,IAAI;AAAA,MACpD;AACA,oBAAc,oBAAI,IAAI;AAAA,IACvB;AACA,WAAO;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,IACT;AAAA,EACD;;;ACzBA,MAAM,wBAAwB,oBAAI,IAAI;AAAA,IACrC,CAAC,UAAU,QAAQ;AAAA,IACnB,CAAC,QAAQ,MAAM;AAAA,EAChB,CAAC;AAED,MAAM,wCAAwC,oBAAI,IAAI;AAAA,IACrD;AAAA,IACA;AAAA,IACA;AAAA,EACD,CAAC;AAWc,WAAR,SAA0B,SACjC;AACC,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO;AAAA,MACrB,qBAAqB;AAAA,MACrB,MAAM;AAAA,MACN,sBAAsB;AAAA,QACrB,wBAAwB;AAAA,QACxB,gBAAgB;AAAA,QAChB,cAAc,WAAW,UAAU,SAAS;AAAA,QAC5C,YAAY;AAAA,QACZ,eAAe,qBAAqB,EAAE;AAAA,MACvC;AAAA,MACA,oBAAoB,OAAMI,SAAO;AAChC,YAAI,OAAO,SAAS,QAAQA,KAAI,MAAM;AACrC,iBAAO,SAAS,QAAQA,KAAI,IAAI;AAAA,QACjC;AACA,eAAO;AAAA,MACR;AAAA,IACD;AAEA,WAAO,SAAS,CAAC,CAAC;AAElB,UAAM,SAAS,OAAO,OAAO,CAAC,GAAG,eAAe,sBAAsB,SAAS,oBAAoB;AACnG,cAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,OAAO;AACnD,YAAQ,uBAAuB;AAE/B,UAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,QAAI,CAAC,QAAQ,QAAQ;AACpB,cAAQ,SAAS,MAAM;AAAA,IACxB;AACA,QAAI,CAAC,QAAQ,OAAO;AACnB,cAAQ,QAAQ,MAAM;AAAA,IACvB;AAEA,WAAO,SAAS;AAAA,MACf,sBAAsB;AAAA,QACrB,WAAW,SAAS,IAAI;AAAA,QACxB,YAAY;AAAA,QACZ,wBAAwB,SAAS,QAAQ;AAAA,QACzC,gBAAgB,SAAS,QAAQ;AAAA,QACjC,cAAc,SAAS,QAAQ;AAAA,MAChC;AAAA,IACD,CAAC;AAED,aAAS,UAAU,QAAQ;AAC1B,cAAO,QAAQ;AAAA,QACd,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACJ,kBAAQ,OAAO,IAAI,QAAQ,sBAAsB,QAAQ,OAAO,MAAM,CAAC,CAAC;AACzE;AAAA,MACD;AAAA,IACD;AASA,WAAO,eAAe,KAAK,MAAM;AAChC,UAAI,QAAQ,qBAAqB;AAChC,eAAO,iBAAiB,KAAK,IAAI;AAAA,MAClC;AACA,YAAM,MAAM,MAAM,KAAK,GAAG;AAC1B,UAAI,IAAI,MAAM,CAAC,wBAAwB,GAAG,GAAG;AAC5C,eAAO;AAAA,MACR;AACA,aAAO,iBAAiB,KAAK,IAAI;AAAA,IAClC;AAQA,mBAAe,iBAAiB,KAAK,MAAM,aAAa,CAAC,GACzD;AACC,4BAAsB;AACtB,YAAM,cAAc,QAAQ,OAAO,IAAI,cAAc;AACrD,YAAM,eAAe,QAAQ,OAAO,IAAI,eAAe;AACvD,YAAM,iBAAiB,UAAU,WAAW;AAC5C,UAAI,CAAC,eAAgB,kBAAkB,CAAC,cAAe;AACtD,cAAM,QAAQ,MAAM,iBAAiB;AACrC,YAAI,CAAC,OAAO;AACX,iBAAa,SAAS,OAAO;AAAA,QAC9B;AACA,eAAO,iBAAiB,KAAK,IAAI;AAAA,MAClC,WAAW,kBAAkB,cAAc;AAC1C,cAAM,QAAQ,MAAM,mBAAmB;AACvC,YAAI,CAAC,OAAO;AACX,iBAAa,SAAS,OAAO;AAAA,QAC9B;AACA,eAAO,iBAAiB,KAAK,IAAI;AAAA,MAClC,OAAO;AACN,cAAM,gBAAsB,QAAQ,KAAK;AAAA,UACxC,SAAS;AAAA,YACR,eAAe,YAAY,OAAK,MAAI,YAAY;AAAA,UACjD;AAAA,QACD,CAAC;AACD,cAAM,MAAM,MAAM,KAAK,aAAa;AACpC,YAAI,CAAC,wBAAwB,GAAG,KAAK,WAAW,sBAAsB;AACrE,iBAAO;AAAA,QACR;AACA,gBAAQ,OAAO,OAAO,cAAc;AACpC,cAAM,QAAQ,eACX,MAAM,mBAAmB,IACzB,MAAM,iBAAiB;AAC1B,YAAI,CAAC,OAAO;AACX,iBAAa,SAAS,OAAO;AAAA,QAC9B;AACA,eAAO,iBAAiB,KAAK,MAAM,EAAE,sBAAsB,KAAK,CAAC;AAAA,MAClE;AAAA,IACD;AAOA,aAAS,wBACT;AACC,UAAI,OAAO,WAAW,eAAe,QAAQ,UAAU;AACtD,YAAIA,OAAY,IAAI,OAAO,QAAQ;AACnC,YAAI,MAAM,OAAO;AACjB,YAAIA,KAAI,aAAa,IAAI,MAAM,KAAKA,KAAI,aAAa,IAAI,OAAO,GAAG;AAClE,mBAASA,KAAI;AACb,UAAAA,OAAMA,KAAI,KAAK,EAAE,QAAO,GAAG,CAAC;AAC5B,kBAAQ,UAAU,CAAC,GAAE,IAAGA,KAAI,IAAI;AAAA,QACjC,WAAWA,KAAI,MAAM;AACpB,cAAI,QAAQA,KAAI,KAAK,OAAO,CAAC;AAC7B,mBAAS,IAAI,gBAAgB,MAAI,KAAK;AACtC,UAAAA,OAAMA,KAAI,KAAK,EAAE,MAAK,GAAG,CAAC;AAC1B,kBAAQ,UAAU,CAAC,GAAE,IAAGA,KAAI,IAAI;AAAA,QACjC;AACA,YAAI,QAAQ;AACX,cAAI,OAAO,IAAI,OAAO,GAAG;AACxB,kBAAY,WAAW,qCAAmC,OAAO,IAAI,OAAO,KAAG,OAAO,IAAI,mBAAmB,IAAI,OAAK,OAAO,IAAI,mBAAmB,IAAE,MAAM,GAAG;AAAA,UAChK;AACA,iBAAO,OAAO,IAAI,MAAM;AACxB,kBAAQ,OAAO,IAAI,OAAO;AAC1B,wBAAc,KAAK;AACnB,cAAI,MAAM;AACT,oBAAQ,OAAO,IAAI,sBAAsB,IAAI;AAAA,UAC9C;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAOA,mBAAe,mBACf;AACC,UAAI,OAAO,eAAe,wBAAwB,CAAC,QAAQ,OAAO,IAAI,oBAAoB,GAAG;AAC5F,YAAI,aAAa,MAAM,wBAAwB;AAC/C,YAAI,CAAC,QAAQ,sBAAsB,OAAO,QAAQ,uBAAuB,YAAY;AACpF,gBAAY,WAAW,uHAAuH;AAAA,QAC/I;AACA,YAAI,gBAAgB,MAAM,QAAQ,mBAAmB,UAAU;AAC/D,YAAI,eAAe;AAClB,mCAAyB,aAAa;AAAA,QACvC,OAAO;AACN,iBAAO;AAAA,QACR;AAAA,MACD;AACA,UAAI,WAAW,sBAAsB;AACrC,UAAIC,YAAW,MAAM,QAAQ,OAAO,KAAK,QAAQ;AACjD,UAAI,CAACA,UAAS,IAAI;AACjB,YAAI,MAAM,MAAMA,UAAS,KAAK;AAC9B,cAAY,WAAW,mCAAiCA,UAAS,SAAO,OAAKA,UAAS,aAAW,OAAK,MAAI,KAAK,EAAC,OAAO,SAAQ,CAAE;AAAA,MAClI;AACA,UAAI,OAAO,MAAMA,UAAS,KAAK;AAC/B,yBAAmB,IAAI;AACvB,cAAQ,OAAO,OAAO,oBAAoB;AAC1C,aAAO;AAAA,IACR;AAOA,mBAAe,qBACf;AACC,UAAI,kBAAkB,sBAAsB,eAAe;AAC3D,UAAIA,YAAW,MAAM,QAAQ,OAAO,KAAK,eAAe;AACxD,UAAI,CAACA,UAAS,IAAI;AACjB,YAAI,MAAM,MAAMA,UAAS,KAAK;AAC9B,cAAY,WAAW,qCAAmCA,UAAS,SAAO,OAAKA,UAAS,aAAW,OAAK,MAAI,KAAK,EAAC,OAAO,gBAAe,CAAE;AAAA,MAC3I;AACA,UAAI,OAAO,MAAMA,UAAS,KAAK;AAC/B,yBAAmB,IAAI;AACvB,aAAO;AAAA,IACR;AAOA,mBAAe,0BACf;AACC,UAAI,CAAC,OAAO,wBAAwB;AACnC,cAAY,WAAW,uEAAuE;AAAA,MAC/F;AACA,UAAID,OAAY,IAAI,OAAO,wBAAwB,EAAC,MAAM,GAAE,CAAC;AAC7D,aAAO,QAAQ;AAAA,QACd,WAAW;AAAA,QACX,cAAc;AAAA,QACd,OAAO;AAAA,MACR,CAAC;AACD,UAAI,SAAS;AAAA,QACZ,eAAe;AAAA,QACf,WAAe,OAAO;AAAA,QACtB,cAAe,OAAO;AAAA,QACtB,OAAe,OAAO,SAAS,YAAY,EAAE;AAAA,MAC9C;AACA,UAAI,OAAO,eAAe;AACzB,eAAO,gBAAgB,OAAO;AAAA,MAC/B;AACA,UAAI,OAAO,eAAe;AACzB,eAAO,gBAAgB,OAAO;AAAA,MAC/B;AACA,cAAQ,MAAM,IAAI,OAAO,KAAK;AAC9B,UAAI,OAAO,eAAe;AACzB,gBAAQ,OAAO,IAAI,iBAAiB,OAAO,aAAa;AACxD,eAAO,iBAAiB,MAAM,sBAAsB,OAAO,aAAa;AACxE,eAAO,wBAAwB;AAAA,MAChC;AACA,UAAI,OAAO,OAAO;AACjB,eAAO,QAAQ,OAAO;AAAA,MACvB;AACA,UAAI,OAAO,QAAQ;AAClB,eAAO,SAAS,OAAO;AAAA,MACxB;AACA,UAAI,OAAO,OAAO;AACjB,eAAO,QAAQ,OAAO;AAAA,MACvB;AACA,aAAa,IAAIA,MAAK,EAAE,OAAO,CAAC;AAAA,IACjC;AAOA,aAAS,sBAAsB,aAAW,MAC1C;AACC,aAAO,QAAQ;AAAA,QACd,WAAW;AAAA,QACX,cAAc;AAAA,MACf,CAAC;AACD,UAAI,CAAC,OAAO,gBAAgB;AAC3B,cAAY,WAAW,+CAA+C;AAAA,MACvE;AACA,UAAIA,OAAY,IAAI,OAAO,gBAAgB,EAAC,MAAM,GAAE,CAAC;AACrD,UAAI,SAAS;AAAA,QACZ,YAAY,cAAc,OAAO;AAAA,MAClC;AACA,UAAI,UAAU,CAAC;AACf,uCAAiC,QAAQ,OAAO;AAChD,UAAI,OAAO,OAAO;AACjB,eAAO,QAAQ,OAAO;AAAA,MACvB;AACA,cAAO,OAAO,YAAY;AAAA,QACzB,KAAK;AACJ,iBAAO,eAAe,OAAO;AAC7B,iBAAO,OAAO,QAAQ,OAAO,IAAI,oBAAoB;AACrD,gBAAM,gBAAgB,QAAQ,OAAO,IAAI,eAAe;AACxD,cAAI,eAAe;AAClB,mBAAO,gBAAgB;AAAA,UACxB;AACD;AAAA,QACA,KAAK;AACL;AAAA,QACA,KAAK;AACJ,iBAAO,gBAAgB,WAAW,QAAQ,OAAO,IAAI,eAAe,CAAC;AACtE;AAAA,QACA;AACC,gBAAM,IAAI,MAAM,yBAAuB,OAAO,UAAU;AACzD;AAAA,MACD;AACA,aAAa,QAAQA,MAAK,EAAC,QAAQ,QAAQ,SAAS,MAAM,IAAI,gBAAgB,MAAM,EAAE,CAAC;AAAA,IACxF;AAOA,aAAS,iCAAiC,QAAQ,SAClD;AACC,YAAM,SAAS,wBAAwB,MAAM;AAC7C,UAAI,WAAW,QAAQ;AACtB,eAAO,YAAY,OAAO;AAC1B;AAAA,MACD;AACA,UAAI,CAAC,OAAO,eAAe;AAC1B,cAAY,WAAW,0CAAwC,SAAO,8CAA8C;AAAA,MACrH;AACA,UAAI,WAAW,sBAAsB;AACpC,eAAO,YAAY,OAAO;AAC1B,eAAO,gBAAgB,OAAO;AAC9B;AAAA,MACD;AACA,UAAI,WAAW,uBAAuB;AACrC,gBAAQ,gBAAgB,UAAU,OAAO,WAAW,OAAO,aAAa;AACxE;AAAA,MACD;AAAA,IACD;AAMA,aAAS,yBAAyB,eAClC;AACC,UAAI,OAAO;AACX,UAAI,iBAAiB,OAAO,kBAAkB,UAAU;AACvD,YAAI,cAAc,OAAO;AACxB,gBAAY,WAAW,qCAAmC,cAAc,KAAK;AAAA,QAC9E;AACA,sBAAc,cAAc,KAAK;AACjC,eAAO,cAAc,sBAAsB,cAAc;AAAA,MAC1D;AACA,UAAI,CAAC,MAAM;AACV,cAAY,WAAW,uEAAuE;AAAA,MAC/F;AACA,cAAQ,OAAO,IAAI,sBAAsB,IAAI;AAAA,IAC9C;AAMA,aAAS,cAAc,OACvB;AACC,UAAI,cAAc,QAAQ,MAAM,IAAI;AACpC,UAAI,CAAC,SAAS,UAAQ,aAAa;AAClC,cAAY,WAAW,wCAAwC;AAAA,MAChE;AAAA,IACD;AAMA,aAAS,mBAAmB,MAC5B;AACC,YAAM,QAAQ,sBAAsB,IAAI;AACxC,cAAQ,OAAO,IAAI,gBAAgB,KAAK;AACxC,UAAI,KAAK,eAAe;AACvB,gBAAQ,OAAO,IAAI,iBAAiB,EAAE,OAAO,KAAK,cAAc,CAAC;AAAA,MAClE;AAAA,IACD;AAAA,EACD;AAQA,WAAS,wBAAwB,KACjC;AACC,QAAI,CAAC,KAAK;AACT,aAAO;AAAA,IACR;AACA,QAAI,IAAI,WAAW,KAAK;AACvB,aAAO;AAAA,IACR;AACA,UAAM,YAAY,qBAAqB,IAAI,SAAS,IAAI,kBAAkB,CAAC;AAC3E,QAAI,WAAW,UAAU,sBAAsB;AAC9C,aAAO;AAAA,IACR;AACA,WAAO,IAAI,WAAW;AAAA,EACvB;AAOA,WAAS,sBAAsB,MAAM,OACrC;AACC,QAAI,SAAS,kBAAkB,SAAS,OAAO,UAAU,UAAU;AAClE,aAAO;AAAA,IACR;AACA,QAAI,SAAS,gBAAgB;AAC5B,aAAO,EAAE,OAAO,OAAO,MAAM,UAAU,SAAS,KAAK;AAAA,IACtD;AACA,QAAI,SAAS,mBAAmB,SAAS,OAAO,UAAU,UAAU;AACnE,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAMA,WAAS,sBAAsB,MAC/B;AACC,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACtC,YAAY,WAAW,uDAAuD;AAAA,IAC/E;AACA,QAAI,CAAC,KAAK,cAAc;AACvB,YAAY,WAAW,uDAAuD;AAAA,IAC/E;AACA,QAAI,CAAC,KAAK,YAAY;AACrB,YAAY,WAAW,qDAAqD;AAAA,IAC7E;AACA,UAAM,YAAY,mBAAmB,KAAK,UAAU;AACpD,WAAO;AAAA,MACN,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK,eAAe,SAAY,OAAO,WAAW,KAAK,UAAU;AAAA,MAC1E,MAAM;AAAA,MACN,OAAO,KAAK;AAAA,IACb;AAAA,EACD;AAOA,WAAS,mBAAmB,MAC5B;AACC,UAAM,aAAa,sBAAsB,IAAI,OAAO,IAAI,EAAE,YAAY,CAAC;AACvE,QAAI,CAAC,YAAY;AAChB,YAAY,WAAW,sCAAoC,IAAI;AAAA,IAChE;AACA,WAAO;AAAA,EACR;AAOA,WAAS,wBAAwB,QACjC;AACC,UAAM,SAAS,OAAO,+BAA+B,OAAO,gBAAgB,uBAAuB;AACnG,QAAI,CAAC,sCAAsC,IAAI,MAAM,GAAG;AACvD,YAAY,WAAW,sDAAoD,MAAM;AAAA,IAClF;AACA,WAAO;AAAA,EACR;AAMA,WAAS,UAAU,UAAU,cAC7B;AACC,UAAM,QAAQ,WAAW,QAAQ,IAAE,MAAI,WAAW,YAAY;AAC9D,WAAO,WAAS,cAAc,KAAK;AAAA,EACpC;AAEA,WAAS,WAAW,OACpB;AACC,WAAO,mBAAmB,KAAK,EAAE,QAAQ,QAAQ,GAAG;AAAA,EACrD;AAEA,WAAS,cAAc,OACvB;AACC,QAAI,OAAO,SAAS,YAAY;AAC/B,aAAO,KAAK,KAAK;AAAA,IAClB;AACA,WAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,SAAS,QAAQ;AAAA,EACtD;AAMA,WAAS,WAAW,OACpB;AACC,WAAO,SAAS,OAAO,UAAU,WAAW,MAAM,QAAQ;AAAA,EAC3D;AAMO,WAAS,UAAU,OAC1B;AACC,QAAI,CAAC,OAAO;AACX,aAAO;AAAA,IACR;AACA,QAAI,CAAC,MAAM,SAAS;AACnB,aAAO;AAAA,IACR;AACA,QAAI,UAAU,IAAI,KAAK,MAAM,OAAO;AACpC,QAAI,MAAM,oBAAI,KAAK;AACnB,WAAO,IAAI,QAAQ,IAAI,QAAQ,QAAQ;AAAA,EACxC;AAMO,WAAS,WAAW,UAC3B;AACC,QAAI,oBAAoB,MAAM;AAC7B,aAAO,IAAI,KAAK,SAAS,QAAQ,CAAC;AAAA,IACnC;AACA,QAAI,OAAO,aAAa,UAAU;AACjC,UAAI,OAAO,oBAAI,KAAK;AACpB,WAAK,WAAW,KAAK,WAAW,IAAI,QAAQ;AAC5C,aAAO;AAAA,IACR;AACA,UAAM,IAAI,UAAU,0BAAwB,QAAQ;AAAA,EACrD;AAMO,WAAS,qBAAqB,OAAK,IAC1C;AACC,UAAM,gBAAgB,IAAI,WAAW,IAAI;AACzC,eAAW,OAAO,gBAAgB,aAAa;AAC/C,WAAO,iBAAiB,aAAa;AAAA,EACtC;AAMA,iBAAsB,sBAAsB,eAC5C;AACC,UAAME,WAAU,IAAI,YAAY;AAChC,UAAM,OAAOA,SAAQ,OAAO,aAAa;AACzC,UAAM,YAAY,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,IAAI;AACvE,WAAO,iBAAiB,SAAS;AAAA,EAClC;AAMO,WAAS,iBAAiB,QACjC;AACC,UAAM,aAAa,MAAM,KAAK,IAAI,WAAW,MAAM,GAAG,OAAK,OAAO,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE;AACvF,WAAO,KAAK,UAAU,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AAAA,EAC1B;AAOO,WAAS,YAAY,QAC5B;AACC,UAAM,QAAQ,IAAI,WAAW,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC;AAC1D,QAAI,WAAW,QAAQ,iBAAiB;AACvC,iBAAW,OAAO,gBAAgB,KAAK;AACvC,aAAO,iBAAiB,KAAK,EAAE,MAAM,GAAG,MAAM;AAAA,IAC/C;AACA,UAAM,aAAa;AACnB,QAAI,cAAc;AAClB,QAAI,UAAU;AACX,WAAO,UAAU,QAAQ;AACrB,qBAAe,WAAW,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,WAAW,MAAM,CAAC;AAC9E;AAAA,IACJ;AACH,WAAO;AAAA,EACR;AAMO,WAAS,eAAe;AAC9B,QAAIF,OAAM,IAAI,IAAI,SAAS,SAAS,IAAI;AACxC,QAAI,CAACA,KAAI,aAAa,IAAI,MAAM,GAAG;AAClC,UAAIA,KAAI,MAAM;AACb,YAAI,QAAQA,KAAI,KAAK,OAAO,CAAC;AAC7B,cAAM,SAAS,IAAI,gBAAgB,MAAI,KAAK;AAC5C,YAAI,OAAO,IAAI,MAAM,GAAG;AACvB,iBAAO;AAAA,QACR;AAAA,MACD;AACA,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AA2BO,WAAS,qBAAqB,OACrC;AACC,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACxC,aAAO;AAAA,IACR;AACA,UAAM,UAAU,MAAM,KAAK;AAC3B,UAAM,QAAQ,QAAQ,OAAO,IAAI;AACjC,UAAM,SAAS,QAAQ,IAAI,UAAU,QAAQ,MAAM,GAAG,KAAK;AAC3D,UAAM,OAAO,QAAQ,IAAI,KAAK,QAAQ,MAAM,QAAQ,CAAC;AACrD,QAAI,CAAC,CAAC,UAAU,MAAM,EAAE,SAAS,OAAO,YAAY,CAAC,GAAG;AACvD,aAAO;AAAA,IACR;AACA,UAAM,SAAS,EAAE,OAAO;AACxB,UAAM,UAAU;AAChB,QAAI;AACJ,WAAQ,QAAQ,QAAQ,KAAK,IAAI,GAAI;AACpC,UAAIG,SAAQ,MAAM,CAAC;AACnB,UAAIA,OAAM,WAAW,GAAG,KAAKA,OAAM,SAAS,GAAG,GAAG;AACjD,QAAAA,SAAQA,OAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,QAAQ,GAAG;AAAA,MAC/C;AACA,aAAO,MAAM,CAAC,CAAC,IAAIA;AAAA,IACpB;AACA,WAAO;AAAA,EACR;;;ACjpBA,MAAM,UAAU,IAAI,YAAW;AAC/B,MAAM,UAAU,IAAI,YAAW;AAI/B,WAAS,IAAI,OAA0B;AACrC,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,QAAQ,OAAO,KAAK;IAC7B;AAEA,WAAO,QAAQ,OAAO,KAAK;EAC7B;AAQA,WAAS,qBAAqB,WAA0B;AACtD,QAAI,OAAO,UAAU,kBAAkB,YAAY,UAAU,gBAAgB,MAAM;AACjF,YAAM,IAAI,yBAAyB,GAAG,UAAU,IAAI,2CAA2C;IACjG;EACF;AAEA,WAAS,gBAAgB,KAAc;AACrC,YAAQ,IAAI,UAAU,MAAM;MAC1B,KAAK;AACH,eAAoB,EAAE,MAAM,IAAI,UAAU,MAAM,MAAM,UAAS;MACjE,KAAK;AACH,6BAAsC,IAAI,SAAS;AACnD,eAAqB;UACnB,MAAM,IAAI,UAAU;UACpB,YAAY,OAAO;;MAEvB,KAAK;AACH,6BAAsC,IAAI,SAAS;AACnD,eAAO,EAAE,MAAM,IAAI,UAAU,KAAI;MACnC,KAAK;AACH,eAAO,EAAE,MAAM,IAAI,UAAU,KAAI;IACrC;AACA,UAAM,IAAI,0BAAyB;EACrC;AAKA,iBAAe,IACb,QACA,WACA,KAAc;AAEd,QAAI,IAAI,OAAO,SAAS,MAAM,MAAM,OAAO;AACzC,YAAM,IAAI,UACR,+FAA+F;IAEnG;AACA,UAAM,QAAQ,GAAG,KAAK,IAAI,KAAK,UAAU,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC,CAAC;AAC1F,UAAM,YAAY,KAAK,MAAM,OAAO,OAAO,KAAK,gBAAgB,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,CAAC;AACtF,WAAO,GAAG,KAAK,IAAI,SAAS;EAC9B;AAEA,MAAI;AAEJ,MAAI,WAAW,UAAU,UAAU;AACjC,sBAAkB,CAAC,UAAS;AAC1B,UAAI,iBAAiB,aAAa;AAChC,gBAAQ,IAAI,WAAW,KAAK;MAC9B;AAGA,aAAO,MAAM,SAAS,EAAE,UAAU,aAAa,aAAa,KAAI,CAAE;IACpE;EACF,OAAO;AACL,UAAM,aAAa;AACnB,sBAAkB,CAAC,UAAS;AAC1B,UAAI,iBAAiB,aAAa;AAChC,gBAAQ,IAAI,WAAW,KAAK;MAC9B;AAEA,YAAM,MAAM,CAAA;AACZ,eAAS,IAAI,GAAG,IAAI,MAAM,YAAY,KAAK,YAAY;AAErD,YAAI,KAAK,OAAO,aAAa,MAAM,MAAM,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC;MAC7E;AACA,aAAO,KAAK,IAAI,KAAK,EAAE,CAAC,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;IACpF;EACF;AAEA,WAAS,KAAK,OAA+B;AAC3C,WAAO,gBAAgB,KAAK;EAC9B;AA0CA,MAAM,4BAAN,cAAwC,MAAK;IAC3C,YAAYC,UAAgB;;AAC1B,YAAMA,aAAO,QAAPA,aAAO,SAAPA,WAAW,yBAAyB;AAC1C,WAAK,OAAO,KAAK,YAAY;AAE7B,OAAA,KAAA,MAAM,uBAAiB,QAAA,OAAA,SAAA,SAAA,GAAA,KAAA,OAAG,MAAM,KAAK,WAAW;IAClD;;AAGF,MAAM,2BAAN,cAAuC,MAAK;IAC1C,YAAYA,UAAe;;AACzB,YAAMA,QAAO;AACb,WAAK,OAAO,KAAK,YAAY;AAE7B,OAAA,KAAA,MAAM,uBAAiB,QAAA,OAAA,SAAA,SAAA,GAAA,KAAA,OAAG,MAAM,KAAK,WAAW;IAClD;;AAMF,WAAS,MAAM,KAAc;AAC3B,YAAgC,IAAI,UAAW,KAAK,MAAM;MACxD,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,6CAA6C;IACrF;EACF;AAKA,WAAS,MAAM,KAAc;AAC3B,YAAgC,IAAI,UAAW,KAAK,MAAM;MACxD,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,6CAA6C;IACrF;EACF;AAKA,WAAS,MAAM,KAAc;AAC3B,YAAyB,IAAI,UAAW,YAAY;MAClD,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,uCAAuC;IAC/E;EACF;AAKA,WAAS,sBAAsB,KAAc;AAC3C,YAAQ,IAAI,UAAU,MAAM;MAC1B,KAAK;AACH,eAAO,MAAM,GAAG;MAClB,KAAK;AACH,eAAO,MAAM,GAAG;MAClB,KAAK;AACH,eAAO,MAAM,GAAG;MAClB,KAAK;AACH,eAAO;MACT;AACE,cAAM,IAAI,0BAA0B,sCAAsC;IAC9E;EACF;AAEA,WAAS,YAAY,KAAY;AAC/B,WAAO,eAAe;EACxB;AAEA,WAAS,aAAa,KAAY;AAChC,WAAO,YAAY,GAAG,KAAK,IAAI,SAAS;EAC1C;AAEA,WAAS,YAAY,KAAY;AAC/B,WAAO,YAAY,GAAG,KAAK,IAAI,SAAS;EAC1C;AAKA,WAAS,YAAS;AAChB,WAAO,KAAK,MAAM,KAAK,IAAG,IAAK,GAAI;EACrC;AAkCA,iBAAsB,cACpB,SACA,KACA,KACA,OACA,aACA,YAAsC;AAEtC,UAAM,aAAa,YAAO,QAAP,YAAO,SAAA,SAAP,QAAS;AAC5B,UAAM,YAAY,YAAO,QAAP,YAAO,SAAA,SAAP,QAAS;AAE3B,QAAI,CAAC,aAAa,UAAU,GAAG;AAC7B,YAAM,IAAI,UAAU,kDAAkD;IACxE;AAEA,QAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,YAAM,IAAI,UAAU,gDAAgD;IACtE;AAEA,QAAI,UAAU,gBAAgB,MAAM;AAClC,YAAM,IAAI,UAAU,8CAA8C;IACpE;AAEA,QAAI,OAAO,QAAQ,UAAU;AAC3B,YAAM,IAAI,UAAU,wBAAwB;IAC9C;AAEA,QAAI,OAAO,QAAQ,UAAU;AAC3B,YAAM,IAAI,UAAU,wBAAwB;IAC9C;AAEA,QAAI,UAAU,UAAa,OAAO,UAAU,UAAU;AACpD,YAAM,IAAI,UAAU,uCAAuC;IAC7D;AAEA,QAAI,gBAAgB,UAAa,OAAO,gBAAgB,UAAU;AAChE,YAAM,IAAI,UAAU,6CAA6C;IACnE;AAEA,QACE,eAAe,WACd,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,IAClF;AACA,YAAM,IAAI,UAAU,gCAAgC;IACtD;AAEA,WAAO,IACL;MACE,KAAK,sBAAsB,UAAU;MACrC,KAAK;MACL,KAAK,MAAM,UAAU,SAAS;OAC/B,OAAA,OAAA,OAAA,OAAA,CAAA,GAEI,UAAU,GAAA;MACb,KAAK,UAAS;MACd,KAAK,OAAO,WAAU;MACtB;MACA;MACA;MACA,KAAK,cAAc,KAAK,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,WAAW,CAAC,CAAC,IAAI;IAAS,CAAA,GAE9F,UAAU;EAEd;AAKA,iBAAe,UAAU,KAAc;AACrC,UAAM,EAAE,KAAK,GAAG,GAAG,GAAG,GAAG,IAAG,IAAK,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AACzE,WAAO,EAAE,KAAK,KAAK,GAAG,GAAG,GAAG,EAAC;EAC/B;AAcA,iBAAsB,gBACpB,KACA,SAAgC;;AAEhC,QAAI;AAEJ,QAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,GAAG;AAC/C,YAAM,IAAI,UAAU,kCAAkC;IACxD;AAEA,YAAQ,KAAK;MACX,KAAK;AACH,oBAAY;UACV,MAAM;UACN,MAAM;UACN,eAAe;UACf,gBAAgB,IAAI,WAAW,CAAC,GAAM,GAAM,CAAI,CAAC;;AAEnD;MACF,KAAK;AACH,oBAAY;UACV,MAAM;UACN,MAAM;UACN,eAAe;UACf,gBAAgB,IAAI,WAAW,CAAC,GAAM,GAAM,CAAI,CAAC;;AAEnD;MACF,KAAK;AACH,oBAAY,EAAE,MAAM,SAAS,YAAY,QAAO;AAChD;MACF,KAAK;AACH,oBAAY,EAAE,MAAM,UAAS;AAC7B;MACF;AACE,cAAM,IAAI,0BAAyB;IACvC;AAEA,WACE,OAAO,OAAO,YAAY,YAAW,KAAA,YAAO,QAAP,YAAO,SAAA,SAAP,QAAS,iBAAW,QAAA,OAAA,SAAA,KAAI,OAAO,CAAC,QAAQ,QAAQ,CAAC;EAE1F;;;AC1Ye,WAAR,YAA6B;AACnC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACvC,YAAMC,WAAU,WAAW,UAAU,KAAK,SAAS,CAAC;AAEpD,MAAAA,SAAQ,kBAAkB,MAAMA,SAAQ,OAAO,kBAAkB,YAAY,EAAE,SAAS,SAAQ,CAAC;AAEjG,MAAAA,SAAQ,UAAU,CAAC,UAAU;AAC5B,eAAO,KAAK;AAAA,MACb;AAEA,MAAAA,SAAQ,YAAY,CAAC,UAAU;AAC9B,cAAM,KAAK,MAAM,OAAO;AACxB,gBAAQ;AAAA,UACP,KAAK,SAAS,OAAO,KAAK;AACzB,mBAAO,IAAI,QAAQ,CAACC,UAASC,YAAW;AACvC,oBAAM,KAAK,GAAG,YAAY,YAAY,aAAa,EAAC,YAAY,SAAQ,CAAC;AACzE,oBAAM,cAAc,GAAG,YAAY,UAAU;AAC7C,iBAAG,aAAa,MAAM;AACrB,gBAAAD,SAAQ;AAAA,cACT;AACA,iBAAG,UAAUC;AACb,0BAAY,IAAI,OAAO,GAAG;AAAA,YAC3B,CAAC;AAAA,UACF;AAAA,UACA,KAAK,SAAS,KAAK;AAClB,mBAAO,IAAI,QAAQ,CAACD,UAASC,YAAW;AACvC,oBAAM,KAAK,GAAG,YAAY,YAAY,UAAU;AAChD,oBAAM,cAAc,GAAG,YAAY,UAAU;AAC7C,oBAAMF,WAAU,YAAY,IAAI,GAAG;AACnC,cAAAA,SAAQ,YAAY,MAAM;AACzB,gBAAAC,SAAQD,SAAQ,MAAM;AAAA,cACvB;AACA,cAAAA,SAAQ,UAAUE;AAClB,iBAAG,UAAUA;AAAA,YACd,CAAC;AAAA,UACF;AAAA,UACA,OAAO,WAAW;AACjB,mBAAO,IAAI,QAAQ,CAACD,UAAQC,YAAW;AACtC,oBAAM,KAAK,GAAG,YAAY,YAAY,WAAW;AACjD,oBAAM,cAAc,GAAG,YAAY,UAAU;AAC7C,oBAAMF,WAAU,YAAY,MAAM;AAClC,cAAAA,SAAQ,YAAY,MAAM;AACzB,gBAAAC,SAAQ;AAAA,cACT;AACA,cAAAD,SAAQ,UAAUE;AAClB,iBAAG,UAAUA;AAAA,YACd,CAAC;AAAA,UACF;AAAA,QACD,CAAC;AAAA,MACF;AAAA,IACD,CAAC;AAAA,EACF;;;AC9Ce,WAAR,OAAwB,SAAS;AAEvC,WAAO,SAAS;AAAA,MACf,MAAM,SAAS,QAAQ;AAAA,MACvB,wBAAwB,SAAS,QAAQ;AAAA,MACzC,gBAAgB,SAAS,QAAQ;AAAA,MACjC,mCAAmC,SAAS,CAAC,CAAC;AAAA;AAAA,IAC/C,CAAC;AAED,WAAO,OAAO,KAAK,SAAS;AAC3B,YAAM,OAAO,MAAM,UAAU;AAC7B,UAAI,UAAU,MAAM,KAAK,IAAI,QAAQ,IAAI;AACzC,UAAI,CAAC,SAAS;AAGZ,YAAI,UAAU,MAAW,gBAAgB,OAAO;AACjD,kBAAU,EAAE,QAAQ,QAAQ,MAAM,QAAQ;AAC1C,cAAM,KAAK,IAAI,OAAO;AAAA,MACvB;AACA,YAAMC,OAAY,IAAI,IAAI,GAAG;AAE7B,UAAI,IAAI,IAAI,WAAW,QAAQ,sBAAsB,GAAG;AACvD,YAAI,SAAS,IAAI;AACjB,YAAI,kBAAkB,mBAAmB,kBAAkB,UAAU;AACpE,iBAAO,IAAI,YAAY,QAAQ,QAAQ,SAAS;AAAA,QACjD,OAAO;AACN,iBAAO,WAAW,QAAQ,QAAQ;AAAA,QACnC;AAAA,MAED,WAAW,IAAI,IAAI,WAAW,QAAQ,cAAc,GAAG;AACtD,cAAM,aAAa,MAAW,cAAc,QAAQ,SAAS,IAAI,KAAK,IAAI,MAAM;AAChF,cAAM,IAAI,KAAK;AAAA,UACd,SAAS;AAAA,YACR,QAAQ;AAAA,UACT;AAAA,QACD,CAAC;AAAA,MAEF,WAAW,IAAI,QAAQ,IAAI,eAAe,GAAG;AAE5C,cAAM,QAAc,aAAa,QAAQA,KAAI,OAAK,QAAQ,KAAK;AAC/D,cAAM,cAAc,IAAI,QAAQ,IAAI,eAAe,EAAE,MAAM,GAAG,EAAE,CAAC;AACjE,cAAM,aAAc,MAAW,cAAc,QAAQ,SAAS,IAAI,KAAK,IAAI,QAAQ,OAAO,WAAW;AACrG,cAAM,IAAI,KAAK;AAAA,UACd,SAAS;AAAA,YACR,iBAAiB,UAAQ;AAAA,YACzB,QAAQ;AAAA,UACT;AAAA,QACD,CAAC;AAAA,MACF;AAEA,UAAIC,YAAW,MAAM,KAAK,GAAG;AAC7B,UAAIA,UAAS,QAAQ,IAAI,YAAY,GAAG;AAEvC,qBAAa,QAAQD,KAAI,OAAK,UAAUC,UAAS,QAAQ,IAAI,YAAY,CAAC;AAAA,MAC3E;AACA,aAAOA;AAAA,IACR;AAAA,EAED;;;AC/De,WAAR,OAAwB,SAC/B;AACI,cAAU,OAAO,OAAO;AAAA,MACpB,aAAa;AAAA,MACb,SAAS;AAAA,MACT,UAAU;AAAA,MACV,OAAO;AAAA,IACX,GAAG,OAAO;AAEV,WAAO,eAAe,KAAK,KAAK,MAAM;AAClC,UAAI,CAAC,IAAI,QAAQ,IAAI,QAAQ,GAAG;AAC5B,cAAM,IAAI,KAAK;AAAA,UACX,SAAS;AAAA,YACL,UAAU,QAAQ,UAAU,QAAQ;AAAA,UACxC;AAAA,QACJ,CAAC;AAAA,MACL;AACA,UAAI,IAAI,WAAS,SAAS,IAAI,WAAS,QAAQ;AAE3C,YAAI,IAAI,QAAQ,OAAO,IAAI,QAAM,YAAY,EAAE,IAAI,gBAAgB,iBAAiB;AAChF,gBAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,cAAI,CAAC,eAAe,YAAY,WAAW,GAAG;AAC1C,kBAAM,IAAI,KAAK;AAAA,cACX,SAAS;AAAA,gBACL,gBAAe,QAAQ;AAAA,cAC3B;AAAA,YACJ,CAAC;AAAA,UACL;AACA,cAAI,OAAO,IAAI,QAAQ,IAAI,cAAc,CAAC,GAAG;AACzC,kBAAM,IAAI,KAAK;AAAA,cACX,MAAM,KAAK,UAAU,IAAI,MAAM,QAAQ,UAAU,QAAQ,KAAK;AAAA,YAClE,CAAC;AAAA,UACL;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,MAAM,MAAM,KAAK,GAAG;AACxB,UAAI,OAAO,OAAO,IAAI,SAAS,IAAI,cAAc,CAAC,GAAG;AACjD,YAAI,UAAU,IAAI,MAAM;AACxB,YAAI,OAAO,MAAM,QAAQ,KAAK;AAC9B,YAAI,SAAS,IAAI;AAEb,iBAAO;AAAA,QACX;AACA,YAAI;AACA,cAAIC,QAAO,KAAK,MAAM,MAAM,QAAQ,OAAO;AAC3C,iBAAO,IAAI,KAAK;AAAA,YACZ,MAAMA;AAAA,UACV,CAAC;AAAA,QACL,SACMC,QAAO;AAGT,cAAI,CAAC,IAAI,IAAI;AACT,mBAAO;AAAA,UACX;AACA,gBAAM,WAAW,KAAK,KAAKA,MAAK;AAAA,QACpC;AAAA,MACJ;AACA,aAAO;AAAA,IACX;AAAA,EACJ;AAMA,WAAS,WAAW,KAAK,KAAK,OAC9B;AACI,UAAMC,WAAU,6BACV,IAAI,QAAQ,IAAI,cAAc,IAAI,oBAAoB,IAAI;AAChE,UAAMD,SAAQ,IAAI,MAAMC,UAAS,EAAE,MAAM,CAAC;AAC1C,IAAAD,OAAM,UAAU;AAChB,IAAAA,OAAM,WAAW;AACjB,WAAOA;AAAA,EACX;AASA,MAAM,SAAS;AACf,WAAS,OAAO,aAChB;AACI,WAAO,OAAO,KAAK,WAAW;AAAA,EAClC;AAEA,WAAS,YAAY,aACrB;AACI,WAAO,iBAAiB,KAAK,WAAW;AAAA,EAC5C;;;AC5Fe,WAAR,UAA2B,SAAS;AAE1C,WAAO,eAAe,QAAQ,KAAK,MAAM;AACxC,UAAI,MAAM,MAAM,KAAK,GAAG;AACxB,UAAI,CAAC,IAAI,IAAI;AACZ,YAAI,WAAW,OAAO,QAAQ,IAAI,MAAM,KAAK,YAAY;AACxD,gBAAM,QAAQ,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG;AAAA,QACzC,OAAO;AACN,gBAAM,IAAI,MAAM,IAAI,SAAO,OAAK,IAAI,YAAY;AAAA,YAC/C,OAAO;AAAA,UACR,CAAC;AAAA,QACF;AAAA,MACD;AACA,aAAO;AAAA,IACR;AAAA,EAED;;;ACdO,MAAM,WAAW,IAAI,YAC3B,CAAC,OAAO,SAAS;AAChB,QAAI,QAAQ,OAAO,OAAK,KAAK,UAAU,CAAC,CAAC,EAAE,SAAS,GAAG;AACtD,aAAO;AAAA,IACR;AACA,WAAO,MAAM,8BAA8B,MAAM,OAAO;AAAA,EACzD;AAEM,MAAM,cAAc,IAAI,YAC9B,CAAC,UAAU;AACV,QAAI,MAAM,QAAQ,KAAK,KAAK,QAAQ,OAAO,OAAK,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG;AAChF,aAAO;AAAA,IACR,OAAO;AACN,aAAO,MAAM,wCAAuC,OAAM,OAAO;AAAA,IAClE;AAAA,EACD;AASM,MAAM,WAAW;AAAA,IACvB;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,IAAQ;AAAA,EACjE;AAGO,MAAM,mBAAmB;AAAA,IAC/B;AAAA,IAAQ;AAAA,IAAsB;AAAA,IAAsB;AAAA,IAAoB;AAAA,EACzE;;;ACdA,iBAAO,cAAqC,UAAQ,CAAC,GAAG;AACvD,WAAO,SAAS;AAAA,MACf,QAAQ,SAAS,WAAiB,OAAO,EAAE,WAAW,CAAC;AAAA,MACvD,QAAQ,SAAS,QAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO,EAAE,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAAA,MACtD,4BAA4B;AAAA,IAC7B;AAEA,cAAU,OAAO,OAAO,CAAC,GAAE,gBAAe,OAAO;AACjD,YAAQ,SAAS,QAAQ,OAAO,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAE/D,UAAM,gBAAgB;AACtB,aAAS,aAAaE,MAAK;AAC1B,aAAO;AAAA,IACR;AAKA,UAAM,2BAA2B;AAAA,MAChC,QAAQ,SAAS,MAAM,QAAQ,QAAQ,YAAY,CAAC;AAAA,MACpD,wBAAwB,SAAS,QAAQ;AAAA,MACzC,gBAAgB,SAAS,QAAQ;AAAA,MACjC,mBAAmB,YAAY,QAAQ;AAAA;AAAA,MACvC,UAAU,SAAS,QAAQ;AAAA,MAC3B,uBAAuB,QAAQ,6BAC5B,SAAS,QAAQ,IACjB,YAAY,QAAQ;AAAA,MACvB,kBAAkB,YAAY,YAAY,QAAQ,CAAC;AAAA,MACnD,0BAA0B,QAAQ,6BAC/B,SAAS,YAAY,QAAO,YAAW,gBAAgB,CAAC,IACxD,SAAS,CAAC,CAAC;AAAA,MACd,0BAA0B,SAAS,CAAC,CAAC;AAAA,MACrC,uBAAuB,QAAQ,6BAC5B,SAAS,YAAY,oBAAoB,CAAC,IAC1C,SAAS,CAAC,CAAC;AAAA,MACd,sBAAsB,SAAS,CAAC,CAAC;AAAA,MACjC,yBAAyB,SAAS,CAAC,CAAC;AAAA,MACpC,uCAAuC,SAAS,YAAY,OAAO,CAAC;AAAA,MACpE,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,uCAAuC,SAAS,CAAC,CAAC;AAAA,MAClD,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,0CAA0C,SAAS,CAAC,CAAC;AAAA,MACrD,6CAA6C,SAAS,YAAY,OAAO,CAAC;AAAA;AAAA,MAC1E,gDAAgD,SAAS,CAAC,CAAC;AAAA,MAC3D,gDAAgD,SAAS,CAAC,CAAC;AAAA,MAC3D,uCAAuC,SAAS,MAAM,GAAG,gBAAgB,CAAC;AAAA,MAC1E,kDAAkD,SAAS,YAAY,OAAO,GAAG,IAAI,YAAY,MAAM,CAAC,CAAC;AAAA,MACzG,0BAA0B,SAAS,MAAM,QAAO,SAAQ,SAAQ,KAAK,CAAC;AAAA,MACtE,uBAAuB,SAAS,MAAM,UAAS,cAAa,aAAa,CAAC;AAAA,MAC1E,kBAAkB,YAAY,CAAC,CAAC;AAAA,MAChC,uBAAuB,SAAS,QAAQ;AAAA,MACxC,0BAA0B,SAAS,CAAC,CAAC;AAAA,MACrC,sBAAsB,SAAS,CAAC,CAAC;AAAA,MACjC,4BAA4B,SAAS,OAAO;AAAA,MAC5C,6BAA6B,SAAS,OAAO;AAAA,MAC7C,iCAAiC,SAAS,OAAO;AAAA,MACjD,eAAe,SAAS,QAAQ;AAAA,MAChC,YAAY,SAAS,QAAQ;AAAA,IAC9B;AAGA,UAAM,YAAkB,IAAI,QAAQ,QAAQ,kCAAkC;AAE9E,UAAMC,YAAW,MAAM,QAAQ,OAAO;AAAA;AAAA;AAAA,MAGrC;AAAA,IACD;AACA,UAAM,gBAAgBA,UAAS;AAC/B,WAAO,eAAe,wBAAwB;AAG9C,WAAO,cAAc,QAAQ,QAAQ,MAAM;AAC3C,WAAO;AAAA,EACR;;;ACvFA,iBAAO,SAAgC,SACvC;AAGC,UAAM,yBAAyB;AAAA,MAC9B,eAAe,SAAS,CAAC,QAAQ,CAAC;AAAA,MAClC,gBAAgB,SAAS,CAAC,CAAC;AAAA,MAC3B,aAAa,SAAS,MAAM,sBAAqB,eAAe,CAAC;AAAA;AAAA,MACjE,kBAAkB,SAAS,MAAM,UAAS,KAAK,CAAC;AAAA,MAChD,UAAU,SAAS,CAAC,UAAU,CAAC;AAAA,MAC/B,aAAa,SAAS,MAAM;AAAA,MAC5B,UAAU,SAAS,QAAQ;AAAA,MAC3B,YAAY,SAAS,QAAQ;AAAA,MAC7B,YAAY,SAAS,QAAQ;AAAA,MAC7B,SAAS,SAAS,QAAQ;AAAA,MAC1B,UAAU,SAAS,UAAU,IAAI,SAAS,MAAM,CAAC,CAAC;AAAA,MAClD,MAAM,SAAS,UAAU,IAAI,SAAS,UAAU,CAAC,CAAC;AAAA,MAClD,uBAAuB,SAAS,QAAQ;AAAA,MACxC,cAAc,SAAS,MAAM;AAAA,MAC7B,8BAA8B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MACzD,iCAAiC,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC5D,iCAAiC,SAAS,MAAM,GAAG,QAAQ,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACzG,8BAA8B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MACzD,iCAAiC,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC5D,iCAAiC,SAAS,MAAM,GAAG,QAAQ,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACzG,4BAA4B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MACvD,+BAA+B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC1D,+BAA+B,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC1D,4BAA4B,SAAS,MAAM,GAAG,gBAAgB,CAAC;AAAA,MAC/D,iCAAiC,SAAS,MAAM,GAAG,QAAQ,CAAC;AAAA,MAC5D,iBAAiB,SAAS,MAAM;AAAA,MAChC,mBAAmB,SAAS,OAAO;AAAA,MACnC,oBAAoB,SAAS,CAAC,MAAM,CAAC;AAAA,MACrC,oBAAoB,SAAS,CAAC,QAAQ,CAAC;AAAA,MACvC,cAAc,SAAS,CAAC,QAAQ,CAAC;AAAA,IAClC;AAEA,WAAO,SAAS;AAAA,MACf,QAAQ,SAAS,WAAiB,OAAO,EAAE,WAAW,CAAC;AAAA,MACvD,uBAAuB;AAAA,MACvB,aAAa;AAAA,IACd,CAAC;AAED,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO,EAAE,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAAA,MACtD,aAAa;AAAA,QACZ,eAAe,CAAE,WAAW,UAAU,SAAS,IAAK;AAAA,MACrD;AAAA,IACD;AAEA,cAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,OAAO;AACnD,YAAQ,SAAS,QAAQ,OAAO,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AAC/D,QAAI,CAAC,QAAQ,aAAa;AACzB,cAAQ,cAAc,CAAC;AAAA,IACxB;AACA,QAAI,CAAC,QAAQ,YAAY,eAAe;AACvC,cAAQ,YAAY,gBAAgB,CAAE,WAAW,UAAU,SAAS,IAAK;AAAA,IAC1E;AACA,QAAIC,YAAW,MAAM,QAAQ,OAC3B,KAAK,QAAQ,uBAAuB;AAAA,MACpC,MAAM,QAAQ;AAAA,IACf,CAAC;AACF,QAAI,OAAOA,UAAS;AACpB,QAAI,CAAC,KAAK,WAAW;AACpB,YAAY,WAAW,mFAAmFA,SAAQ;AAAA,IACnH;AACA,YAAQ,cAAc,OAAO,OAAO,QAAQ,aAAa,IAAI;AAC7D,WAAO,QAAQ;AAAA,EAChB;;;AC/Ee,WAAR,UAA2B,MAAM;AACvC,QAAI;AACJ,QAAI,OAAO,iBAAiB,aAAa;AACxC,cAAQ;AAAA,QACP,KAAK,CAAC,SAAgB,KAAK,MAAM,aAAa,QAAQ,gBAAc,OAAK,MAAI,IAAI,CAAC;AAAA,QAClF,KAAK,CAAC,MAAM,UAAU,aAAa,QAAQ,gBAAc,OAAK,MAAI,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QAC7F,KAAK,CAAC,SAAgB,aAAa,QAAQ,gBAAc,OAAK,MAAI,IAAI,MAAI;AAAA,MAC3E;AAAA,IACD,OAAO;AACN,UAAI,WAAW,oBAAI,IAAI;AACvB,cAAQ;AAAA,QACP,KAAK,CAAC,SAAgB,KAAK,MAAM,SAAS,IAAI,gBAAc,OAAK,MAAI,IAAI,KAAG,IAAI;AAAA,QAChF,KAAK,CAAC,MAAM,UAAU,SAAS,IAAI,gBAAc,OAAK,MAAI,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QACrF,KAAK,CAAC,SAAgB,SAAS,IAAI,gBAAc,OAAK,MAAI,IAAI;AAAA,MAC/D;AAAA,IACD;AACA,WAAO;AAAA,EACR;;;ACjBO,MAAMC,WAAU,IAAI,YAAY;AAChC,MAAMC,WAAU,IAAI,YAAY;AACvC,MAAM,YAAY,KAAK;AAChB,WAAS,UAAU,SAAS;AAC/B,UAAM,OAAO,QAAQ,OAAO,CAAC,KAAK,EAAE,OAAO,MAAM,MAAM,QAAQ,CAAC;AAChE,UAAMC,OAAM,IAAI,WAAW,IAAI;AAC/B,QAAI,IAAI;AACR,eAAW,UAAU,SAAS;AAC1B,MAAAA,KAAI,IAAI,QAAQ,CAAC;AACjB,WAAK,OAAO;AAAA,IAChB;AACA,WAAOA;AAAA,EACX;AAoBO,WAAS,OAAO,QAAQ;AAC3B,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,YAAM,OAAO,OAAO,WAAW,CAAC;AAChC,UAAI,OAAO,KAAK;AACZ,cAAM,IAAI,UAAU,0CAA0C;AAAA,MAClE;AACA,YAAM,CAAC,IAAI;AAAA,IACf;AACA,WAAO;AAAA,EACX;;;AC/BO,WAAS,aAAa,SAAS;AAClC,QAAI,WAAW,YAAY;AACvB,aAAO,WAAW,WAAW,OAAO;AAAA,IACxC;AACA,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,YAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,IAClC;AACA,WAAO;AAAA,EACX;;;ACnBO,WAAS,OAAO,OAAO;AAC1B,QAAI,WAAW,YAAY;AACvB,aAAO,WAAW,WAAW,OAAO,UAAU,WAAW,QAAQC,SAAQ,OAAO,KAAK,GAAG;AAAA,QACpF,UAAU;AAAA,MACd,CAAC;AAAA,IACL;AACA,QAAI,UAAU;AACd,QAAI,mBAAmB,YAAY;AAC/B,gBAAUA,SAAQ,OAAO,OAAO;AAAA,IACpC;AACA,cAAU,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACtD,QAAI;AACA,aAAO,aAAa,OAAO;AAAA,IAC/B,QACM;AACF,YAAM,IAAI,UAAU,mDAAmD;AAAA,IAC3E;AAAA,EACJ;;;ACnBA,MAAM,WAAW,CAAC,MAAM,OAAO,qBAAqB,IAAI,UAAU,kDAAkD,IAAI,YAAY,IAAI,EAAE;AAC1I,MAAM,cAAc,CAAC,WAAW,SAAS,UAAU,SAAS;AAC5D,WAAS,cAAc,MAAM;AACzB,WAAO,SAAS,KAAK,KAAK,MAAM,CAAC,GAAG,EAAE;AAAA,EAC1C;AACA,WAAS,gBAAgB,WAAW,UAAU;AAC1C,UAAM,SAAS,cAAc,UAAU,IAAI;AAC3C,QAAI,WAAW;AACX,YAAM,SAAS,OAAO,QAAQ,IAAI,gBAAgB;AAAA,EAC1D;AACA,WAAS,cAAc,KAAK;AACxB,YAAQ,KAAK;AAAA,MACT,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX;AACI,cAAM,IAAI,MAAM,aAAa;AAAA,IACrC;AAAA,EACJ;AACA,WAAS,WAAW,KAAK,OAAO;AAC5B,QAAI,SAAS,CAAC,IAAI,OAAO,SAAS,KAAK,GAAG;AACtC,YAAM,IAAI,UAAU,sEAAsE,KAAK,GAAG;AAAA,IACtG;AAAA,EACJ;AACO,WAAS,kBAAkB,KAAK,KAAK,OAAO;AAC/C,YAAQ,KAAK;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,MAAM;AAClC,gBAAM,SAAS,MAAM;AACzB,wBAAgB,IAAI,WAAW,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACzD;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,mBAAmB;AAC/C,gBAAM,SAAS,mBAAmB;AACtC,wBAAgB,IAAI,WAAW,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACzD;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,SAAS;AACrC,gBAAM,SAAS,SAAS;AAC5B,wBAAgB,IAAI,WAAW,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACzD;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,SAAS;AACrC,gBAAM,SAAS,SAAS;AAC5B;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,aAAa;AACd,YAAI,CAAC,YAAY,IAAI,WAAW,GAAG;AAC/B,gBAAM,SAAS,GAAG;AACtB;AAAA,MACJ;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,SAAS;AACV,YAAI,CAAC,YAAY,IAAI,WAAW,OAAO;AACnC,gBAAM,SAAS,OAAO;AAC1B,cAAM,WAAW,cAAc,GAAG;AAClC,cAAM,SAAS,IAAI,UAAU;AAC7B,YAAI,WAAW;AACX,gBAAM,SAAS,UAAU,sBAAsB;AACnD;AAAA,MACJ;AAAA,MACA;AACI,cAAM,IAAI,UAAU,2CAA2C;AAAA,IACvE;AACA,eAAW,KAAK,KAAK;AAAA,EACzB;;;ACjFA,WAAS,QAAQ,KAAK,WAAW,OAAO;AACpC,YAAQ,MAAM,OAAO,OAAO;AAC5B,QAAI,MAAM,SAAS,GAAG;AAClB,YAAM,OAAO,MAAM,IAAI;AACvB,aAAO,eAAe,MAAM,KAAK,IAAI,CAAC,QAAQ,IAAI;AAAA,IACtD,WACS,MAAM,WAAW,GAAG;AACzB,aAAO,eAAe,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC;AAAA,IACjD,OACK;AACD,aAAO,WAAW,MAAM,CAAC,CAAC;AAAA,IAC9B;AACA,QAAI,UAAU,MAAM;AAChB,aAAO,aAAa,MAAM;AAAA,IAC9B,WACS,OAAO,WAAW,cAAc,OAAO,MAAM;AAClD,aAAO,sBAAsB,OAAO,IAAI;AAAA,IAC5C,WACS,OAAO,WAAW,YAAY,UAAU,MAAM;AACnD,UAAI,OAAO,aAAa,MAAM;AAC1B,eAAO,4BAA4B,OAAO,YAAY,IAAI;AAAA,MAC9D;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACO,MAAM,kBAAkB,CAAC,WAAW,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,KAAK;AACtF,MAAM,UAAU,CAAC,KAAK,WAAW,UAAU,QAAQ,eAAe,GAAG,uBAAuB,QAAQ,GAAG,KAAK;;;AC1B5G,MAAM,YAAN,cAAwB,MAAM;AAAA,IACjC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYC,UAAS,SAAS;AAC1B,YAAMA,UAAS,OAAO;AACtB,WAAK,OAAO,KAAK,YAAY;AAC7B,YAAM,oBAAoB,MAAM,KAAK,WAAW;AAAA,IACpD;AAAA,EACJ;AACO,MAAM,2BAAN,cAAuC,UAAU;AAAA,IACpD,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAYA,UAAS,SAAS,QAAQ,eAAe,SAAS,eAAe;AACzE,YAAMA,UAAS,EAAE,OAAO,EAAE,OAAO,QAAQ,QAAQ,EAAE,CAAC;AACpD,WAAK,QAAQ;AACb,WAAK,SAAS;AACd,WAAK,UAAU;AAAA,IACnB;AAAA,EACJ;AACO,MAAM,aAAN,cAAyB,UAAU;AAAA,IACtC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAYA,UAAS,SAAS,QAAQ,eAAe,SAAS,eAAe;AACzE,YAAMA,UAAS,EAAE,OAAO,EAAE,OAAO,QAAQ,QAAQ,EAAE,CAAC;AACpD,WAAK,QAAQ;AACb,WAAK,SAAS;AACd,WAAK,UAAU;AAAA,IACnB;AAAA,EACJ;AACO,MAAM,oBAAN,cAAgC,UAAU;AAAA,IAC7C,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AACO,MAAM,mBAAN,cAA+B,UAAU;AAAA,IAC5C,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AAYO,MAAM,aAAN,cAAyB,UAAU;AAAA,IACtC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AACO,MAAM,aAAN,cAAyB,UAAU;AAAA,IACtC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AAKO,MAAM,cAAN,cAA0B,UAAU;AAAA,IACvC,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,EACX;AACO,MAAM,oBAAN,cAAgC,UAAU;AAAA,IAC7C,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYC,WAAU,mDAAmD,SAAS;AAC9E,YAAMA,UAAS,OAAO;AAAA,IAC1B;AAAA,EACJ;AACO,MAAM,2BAAN,cAAuC,UAAU;AAAA,IACpD,CAAC,OAAO,aAAa;AAAA,IACrB,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYA,WAAU,wDAAwD,SAAS;AACnF,YAAMA,UAAS,OAAO;AAAA,IAC1B;AAAA,EACJ;AAQO,MAAM,iCAAN,cAA6C,UAAU;AAAA,IAC1D,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,IACP,YAAYC,WAAU,iCAAiC,SAAS;AAC5D,YAAMA,UAAS,OAAO;AAAA,IAC1B;AAAA,EACJ;;;AC7FO,MAAMC,eAAc,CAAC,QAAQ;AAChC,QAAI,MAAM,OAAO,WAAW,MAAM;AAC9B,aAAO;AACX,QAAI;AACA,aAAO,eAAe;AAAA,IAC1B,QACM;AACF,aAAO;AAAA,IACX;AAAA,EACJ;AACO,MAAM,cAAc,CAAC,QAAQ,MAAM,OAAO,WAAW,MAAM;AAC3D,MAAM,YAAY,CAAC,QAAQA,aAAY,GAAG,KAAK,YAAY,GAAG;;;ACT9D,WAAS,gBAAgB,OAAO,OAAO,YAAY;AACtD,QAAI;AACA,aAAO,OAAO,KAAK;AAAA,IACvB,QACM;AACF,YAAM,IAAI,WAAW,kCAAkC,KAAK,EAAE;AAAA,IAClE;AAAA,EACJ;;;ACdA,MAAM,eAAe,CAAC,UAAU,OAAO,UAAU,YAAY,UAAU;AAChE,WAAS,SAAS,OAAO;AAC5B,QAAI,CAAC,aAAa,KAAK,KAAK,OAAO,UAAU,SAAS,KAAK,KAAK,MAAM,mBAAmB;AACrF,aAAO;AAAA,IACX;AACA,QAAI,OAAO,eAAe,KAAK,MAAM,MAAM;AACvC,aAAO;AAAA,IACX;AACA,QAAI,QAAQ;AACZ,WAAO,OAAO,eAAe,KAAK,MAAM,MAAM;AAC1C,cAAQ,OAAO,eAAe,KAAK;AAAA,IACvC;AACA,WAAO,OAAO,eAAe,KAAK,MAAM;AAAA,EAC5C;AACO,WAAS,cAAc,SAAS;AACnC,UAAM,UAAU,QAAQ,OAAO,OAAO;AACtC,QAAI,QAAQ,WAAW,KAAK,QAAQ,WAAW,GAAG;AAC9C,aAAO;AAAA,IACX;AACA,QAAI;AACJ,eAAW,UAAU,SAAS;AAC1B,YAAM,aAAa,OAAO,KAAK,MAAM;AACrC,UAAI,CAAC,OAAO,IAAI,SAAS,GAAG;AACxB,cAAM,IAAI,IAAI,UAAU;AACxB;AAAA,MACJ;AACA,iBAAW,aAAa,YAAY;AAChC,YAAI,IAAI,IAAI,SAAS,GAAG;AACpB,iBAAO;AAAA,QACX;AACA,YAAI,IAAI,SAAS;AAAA,MACrB;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACO,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,KAAK,OAAO,IAAI,QAAQ;AAC3D,MAAM,eAAe,CAAC,QAAQ,IAAI,QAAQ,UAC3C,IAAI,QAAQ,SAAS,OAAO,IAAI,SAAS,YAAa,OAAO,IAAI,MAAM;AACtE,MAAM,cAAc,CAAC,QAAQ,IAAI,QAAQ,SAAS,IAAI,MAAM,UAAa,IAAI,SAAS;AACtF,MAAM,cAAc,CAAC,QAAQ,IAAI,QAAQ,SAAS,OAAO,IAAI,MAAM;;;ACpCnE,WAAS,eAAe,KAAK,KAAK;AACrC,QAAI,IAAI,WAAW,IAAI,KAAK,IAAI,WAAW,IAAI,GAAG;AAC9C,YAAM,EAAE,cAAc,IAAI,IAAI;AAC9B,UAAI,OAAO,kBAAkB,YAAY,gBAAgB,MAAM;AAC3D,cAAM,IAAI,UAAU,GAAG,GAAG,uDAAuD;AAAA,MACrF;AAAA,IACJ;AAAA,EACJ;AACA,WAASC,iBAAgB,KAAK,WAAW;AACrC,UAAM,OAAO,OAAO,IAAI,MAAM,EAAE,CAAC;AACjC,YAAQ,KAAK;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,OAAO;AAAA,MAChC,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,WAAW,YAAY,SAAS,IAAI,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE;AAAA,MACjF,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,oBAAoB;AAAA,MAC7C,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,MAAM,SAAS,YAAY,UAAU,WAAW;AAAA,MACnE,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,UAAU;AAAA,MAC7B,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,eAAO,EAAE,MAAM,IAAI;AAAA,MACvB;AACI,cAAM,IAAI,iBAAiB,OAAO,GAAG,6DAA6D;AAAA,IAC1G;AAAA,EACJ;AACA,iBAAe,UAAU,KAAK,KAAK,OAAO;AACtC,QAAI,eAAe,YAAY;AAC3B,UAAI,CAAC,IAAI,WAAW,IAAI,GAAG;AACvB,cAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,aAAa,cAAc,CAAC;AAAA,MACtF;AACA,aAAO,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC,IAAI,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;AAAA,IAC7G;AACA,sBAAkB,KAAK,KAAK,KAAK;AACjC,WAAO;AAAA,EACX;AAOA,iBAAsB,OAAO,KAAK,KAAK,WAAW,MAAM;AACpD,UAAM,YAAY,MAAM,UAAU,KAAK,KAAK,QAAQ;AACpD,mBAAe,KAAK,SAAS;AAC7B,UAAM,YAAYC,iBAAgB,KAAK,UAAU,SAAS;AAC1D,QAAI;AACA,aAAO,MAAM,OAAO,OAAO,OAAO,WAAW,WAAW,WAAW,IAAI;AAAA,IAC3E,QACM;AACF,aAAO;AAAA,IACX;AAAA,EACJ;;;AClEA,MAAM,iBAAiB;AACvB,WAAS,cAAc,KAAK;AACxB,QAAI;AACJ,QAAI;AACJ,YAAQ,IAAI,KAAK;AAAA,MACb,KAAK,OAAO;AACR,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,IAAI,IAAI;AAC5B,wBAAY,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ;AAC3C;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA,KAAK,OAAO;AACR,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,WAAW,MAAM,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,GAAG;AAChE,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,qBAAqB,MAAM,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC,GAAG;AAC1E,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY;AAAA,cACR,MAAM;AAAA,cACN,MAAM,OAAO,SAAS,IAAI,IAAI,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;AAAA,YACrD;AACA,wBAAY,IAAI,IAAI,CAAC,WAAW,WAAW,IAAI,CAAC,WAAW,SAAS;AACpE;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA,KAAK,MAAM;AACP,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY;AAAA,cACR,MAAM;AAAA,cACN,YAAY,EAAE,OAAO,SAAS,OAAO,SAAS,OAAO,QAAQ,EAAE,IAAI,GAAG;AAAA,YAC1E;AACA,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,QAAQ,YAAY,IAAI,IAAI;AAChD,wBAAY,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC;AACtC;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA,KAAK,OAAO;AACR,gBAAQ,IAAI,KAAK;AAAA,UACb,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,UAAU;AAC9B,wBAAY,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;AACxC;AAAA,UACJ,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AACD,wBAAY,EAAE,MAAM,IAAI,IAAI;AAC5B,wBAAY,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC;AACtC;AAAA,UACJ;AACI,kBAAM,IAAI,iBAAiB,cAAc;AAAA,QACjD;AACA;AAAA,MACJ;AAAA,MACA;AACI,cAAM,IAAI,iBAAiB,6DAA6D;AAAA,IAChG;AACA,WAAO,EAAE,WAAW,UAAU;AAAA,EAClC;AACA,iBAAsB,SAAS,KAAK;AAChC,QAAI,CAAC,IAAI,KAAK;AACV,YAAM,IAAI,UAAU,0DAA0D;AAAA,IAClF;AACA,UAAM,EAAE,WAAW,UAAU,IAAI,cAAc,GAAG;AAClD,UAAM,UAAU,EAAE,GAAG,IAAI;AACzB,QAAI,QAAQ,QAAQ,OAAO;AACvB,aAAO,QAAQ;AAAA,IACnB;AACA,WAAO,QAAQ;AACf,WAAO,OAAO,OAAO,UAAU,OAAO,SAAS,WAAW,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,QAAQ,OAAO,IAAI,WAAW,SAAS;AAAA,EACrI;;;ACtGA,MAAM,iBAAiB;AACvB,MAAI;AACJ,MAAM,YAAY,OAAO,KAAK,KAAK,KAAK,SAAS,UAAU;AACvD,cAAU,oBAAI,QAAQ;AACtB,QAAI,SAAS,MAAM,IAAI,GAAG;AAC1B,QAAI,SAAS,GAAG,GAAG;AACf,aAAO,OAAO,GAAG;AAAA,IACrB;AACA,UAAM,YAAY,MAAM,SAAS,EAAE,GAAG,KAAK,IAAI,CAAC;AAChD,QAAI;AACA,aAAO,OAAO,GAAG;AACrB,QAAI,CAAC,QAAQ;AACT,YAAM,IAAI,KAAK,EAAE,CAAC,GAAG,GAAG,UAAU,CAAC;AAAA,IACvC,OACK;AACD,aAAO,GAAG,IAAI;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AACA,MAAM,kBAAkB,CAAC,WAAW,QAAQ;AACxC,cAAU,oBAAI,QAAQ;AACtB,QAAI,SAAS,MAAM,IAAI,SAAS;AAChC,QAAI,SAAS,GAAG,GAAG;AACf,aAAO,OAAO,GAAG;AAAA,IACrB;AACA,UAAM,WAAW,UAAU,SAAS;AACpC,UAAM,cAAc,WAAW,OAAO;AACtC,QAAI;AACJ,QAAI,UAAU,sBAAsB,UAAU;AAC1C,cAAQ,KAAK;AAAA,QACT,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD;AAAA,QACJ;AACI,gBAAM,IAAI,UAAU,cAAc;AAAA,MAC1C;AACA,kBAAY,UAAU,YAAY,UAAU,mBAAmB,aAAa,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AAAA,IAC9G;AACA,QAAI,UAAU,sBAAsB,WAAW;AAC3C,UAAI,QAAQ,WAAW,QAAQ,WAAW;AACtC,cAAM,IAAI,UAAU,cAAc;AAAA,MACtC;AACA,kBAAY,UAAU,YAAY,UAAU,mBAAmB,aAAa;AAAA,QACxE,WAAW,WAAW;AAAA,MAC1B,CAAC;AAAA,IACL;AACA,YAAQ,UAAU,mBAAmB;AAAA,MACjC,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,aAAa;AACd,YAAI,QAAQ,UAAU,kBAAkB,YAAY,GAAG;AACnD,gBAAM,IAAI,UAAU,cAAc;AAAA,QACtC;AACA,oBAAY,UAAU,YAAY,UAAU,mBAAmB,aAAa;AAAA,UACxE,WAAW,WAAW;AAAA,QAC1B,CAAC;AAAA,MACL;AAAA,IACJ;AACA,QAAI,UAAU,sBAAsB,OAAO;AACvC,UAAI;AACJ,cAAQ,KAAK;AAAA,QACT,KAAK;AACD,iBAAO;AACP;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD,iBAAO;AACP;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD,iBAAO;AACP;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AACD,iBAAO;AACP;AAAA,QACJ;AACI,gBAAM,IAAI,UAAU,cAAc;AAAA,MAC1C;AACA,UAAI,IAAI,WAAW,UAAU,GAAG;AAC5B,eAAO,UAAU,YAAY;AAAA,UACzB,MAAM;AAAA,UACN;AAAA,QACJ,GAAG,aAAa,WAAW,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC;AAAA,MACxD;AACA,kBAAY,UAAU,YAAY;AAAA,QAC9B,MAAM,IAAI,WAAW,IAAI,IAAI,YAAY;AAAA,QACzC;AAAA,MACJ,GAAG,aAAa,CAAC,WAAW,WAAW,MAAM,CAAC;AAAA,IAClD;AACA,QAAI,UAAU,sBAAsB,MAAM;AACtC,YAAM,OAAO,oBAAI,IAAI;AAAA,QACjB,CAAC,cAAc,OAAO;AAAA,QACtB,CAAC,aAAa,OAAO;AAAA,QACrB,CAAC,aAAa,OAAO;AAAA,MACzB,CAAC;AACD,YAAM,aAAa,KAAK,IAAI,UAAU,sBAAsB,UAAU;AACtE,UAAI,CAAC,YAAY;AACb,cAAM,IAAI,UAAU,cAAc;AAAA,MACtC;AACA,YAAM,gBAAgB,EAAE,OAAO,SAAS,OAAO,SAAS,OAAO,QAAQ;AACvE,UAAI,cAAc,GAAG,KAAK,eAAe,cAAc,GAAG,GAAG;AACzD,oBAAY,UAAU,YAAY;AAAA,UAC9B,MAAM;AAAA,UACN;AAAA,QACJ,GAAG,aAAa,CAAC,WAAW,WAAW,MAAM,CAAC;AAAA,MAClD;AACA,UAAI,IAAI,WAAW,SAAS,GAAG;AAC3B,oBAAY,UAAU,YAAY;AAAA,UAC9B,MAAM;AAAA,UACN;AAAA,QACJ,GAAG,aAAa,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AAAA,MAClD;AAAA,IACJ;AACA,QAAI,CAAC,WAAW;AACZ,YAAM,IAAI,UAAU,cAAc;AAAA,IACtC;AACA,QAAI,CAAC,QAAQ;AACT,YAAM,IAAI,WAAW,EAAE,CAAC,GAAG,GAAG,UAAU,CAAC;AAAA,IAC7C,OACK;AACD,aAAO,GAAG,IAAI;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AACA,iBAAsB,aAAa,KAAK,KAAK;AACzC,QAAI,eAAe,YAAY;AAC3B,aAAO;AAAA,IACX;AACA,QAAIC,aAAY,GAAG,GAAG;AAClB,aAAO;AAAA,IACX;AACA,QAAI,YAAY,GAAG,GAAG;AAClB,UAAI,IAAI,SAAS,UAAU;AACvB,eAAO,IAAI,OAAO;AAAA,MACtB;AACA,UAAI,iBAAiB,OAAO,OAAO,IAAI,gBAAgB,YAAY;AAC/D,YAAI;AACA,iBAAO,gBAAgB,KAAK,GAAG;AAAA,QACnC,SACO,KAAK;AACR,cAAI,eAAe,WAAW;AAC1B,kBAAM;AAAA,UACV;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,MAAM,IAAI,OAAO,EAAE,QAAQ,MAAM,CAAC;AACtC,aAAO,UAAU,KAAK,KAAK,GAAG;AAAA,IAClC;AACA,QAAI,MAAM,GAAG,GAAG;AACZ,UAAI,IAAI,GAAG;AACP,eAAO,OAAO,IAAI,CAAC;AAAA,MACvB;AACA,aAAO,UAAU,KAAK,KAAK,KAAK,IAAI;AAAA,IACxC;AACA,UAAM,IAAI,MAAM,aAAa;AAAA,EACjC;;;AC9IA,iBAAsB,UAAU,KAAK,KAAK,SAAS;AAC/C,QAAI,CAAC,SAAS,GAAG,GAAG;AAChB,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC/C;AACA,QAAI;AACJ,YAAQ,IAAI;AACZ,YAAQ,SAAS,eAAe,IAAI;AACpC,YAAQ,IAAI,KAAK;AAAA,MACb,KAAK;AACD,YAAI,OAAO,IAAI,MAAM,YAAY,CAAC,IAAI,GAAG;AACrC,gBAAM,IAAI,UAAU,yCAAyC;AAAA,QACjE;AACA,eAAO,OAAgB,IAAI,CAAC;AAAA,MAChC,KAAK;AACD,YAAI,SAAS,OAAO,IAAI,QAAQ,QAAW;AACvC,gBAAM,IAAI,iBAAiB,oEAAoE;AAAA,QACnG;AACA,eAAO,SAAS,EAAE,GAAG,KAAK,KAAK,IAAI,CAAC;AAAA,MACxC,KAAK,OAAO;AACR,YAAI,OAAO,IAAI,QAAQ,YAAY,CAAC,IAAI,KAAK;AACzC,gBAAM,IAAI,UAAU,2CAA2C;AAAA,QACnE;AACA,YAAI,QAAQ,UAAa,QAAQ,IAAI,KAAK;AACtC,gBAAM,IAAI,UAAU,uCAAuC;AAAA,QAC/D;AACA,eAAO,SAAS,EAAE,GAAG,KAAK,IAAI,CAAC;AAAA,MACnC;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AACD,eAAO,SAAS,EAAE,GAAG,KAAK,KAAK,IAAI,CAAC;AAAA,MACxC;AACI,cAAM,IAAI,iBAAiB,8CAA8C;AAAA,IACjF;AAAA,EACJ;;;ACvDO,WAAS,aAAa,KAAK,mBAAmB,kBAAkB,iBAAiB,YAAY;AAChG,QAAI,WAAW,SAAS,UAAa,iBAAiB,SAAS,QAAW;AACtE,YAAM,IAAI,IAAI,gEAAgE;AAAA,IAClF;AACA,QAAI,CAAC,mBAAmB,gBAAgB,SAAS,QAAW;AACxD,aAAO,oBAAI,IAAI;AAAA,IACnB;AACA,QAAI,CAAC,MAAM,QAAQ,gBAAgB,IAAI,KACnC,gBAAgB,KAAK,WAAW,KAChC,gBAAgB,KAAK,KAAK,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,CAAC,GAAG;AACvF,YAAM,IAAI,IAAI,uFAAuF;AAAA,IACzG;AACA,QAAI;AACJ,QAAI,qBAAqB,QAAW;AAChC,mBAAa,IAAI,IAAI,CAAC,GAAG,OAAO,QAAQ,gBAAgB,GAAG,GAAG,kBAAkB,QAAQ,CAAC,CAAC;AAAA,IAC9F,OACK;AACD,mBAAa;AAAA,IACjB;AACA,eAAW,aAAa,gBAAgB,MAAM;AAC1C,UAAI,CAAC,WAAW,IAAI,SAAS,GAAG;AAC5B,cAAM,IAAI,iBAAiB,+BAA+B,SAAS,qBAAqB;AAAA,MAC5F;AACA,UAAI,WAAW,SAAS,MAAM,QAAW;AACrC,cAAM,IAAI,IAAI,+BAA+B,SAAS,cAAc;AAAA,MACxE;AACA,UAAI,WAAW,IAAI,SAAS,KAAK,gBAAgB,SAAS,MAAM,QAAW;AACvE,cAAM,IAAI,IAAI,+BAA+B,SAAS,+BAA+B;AAAA,MACzF;AAAA,IACJ;AACA,WAAO,IAAI,IAAI,gBAAgB,IAAI;AAAA,EACvC;;;AChCO,WAAS,mBAAmB,QAAQ,YAAY;AACnD,QAAI,eAAe,WACd,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,KAAK,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AAC/E,YAAM,IAAI,UAAU,IAAI,MAAM,sCAAsC;AAAA,IACxE;AACA,QAAI,CAAC,YAAY;AACb,aAAO;AAAA,IACX;AACA,WAAO,IAAI,IAAI,UAAU;AAAA,EAC7B;;;ACNA,MAAM,MAAM,CAAC,QAAQ,MAAM,OAAO,WAAW;AAC7C,MAAM,eAAe,CAAC,KAAK,KAAK,UAAU;AACtC,QAAI,IAAI,QAAQ,QAAW;AACvB,UAAI;AACJ,cAAQ,OAAO;AAAA,QACX,KAAK;AAAA,QACL,KAAK;AACD,qBAAW;AACX;AAAA,QACJ,KAAK;AAAA,QACL,KAAK;AACD,qBAAW;AACX;AAAA,MACR;AACA,UAAI,IAAI,QAAQ,UAAU;AACtB,cAAM,IAAI,UAAU,sDAAsD,QAAQ,gBAAgB;AAAA,MACtG;AAAA,IACJ;AACA,QAAI,IAAI,QAAQ,UAAa,IAAI,QAAQ,KAAK;AAC1C,YAAM,IAAI,UAAU,sDAAsD,GAAG,gBAAgB;AAAA,IACjG;AACA,QAAI,MAAM,QAAQ,IAAI,OAAO,GAAG;AAC5B,UAAI;AACJ,cAAQ,MAAM;AAAA,QACV,MAAK,UAAU,UAAU,UAAU;AAAA,QACnC,KAAK,QAAQ;AAAA,QACb,KAAK,IAAI,SAAS,QAAQ;AACtB,0BAAgB;AAChB;AAAA,QACJ,KAAK,IAAI,WAAW,OAAO;AACvB,0BAAgB;AAChB;AAAA,QACJ,KAAK,0BAA0B,KAAK,GAAG;AACnC,cAAI,CAAC,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,IAAI,GAAG;AAC5C,4BAAgB,UAAU,YAAY,YAAY;AAAA,UACtD,OACK;AACD,4BAAgB;AAAA,UACpB;AACA;AAAA,QACJ,MAAK,UAAU,aAAa,IAAI,WAAW,KAAK;AAC5C,0BAAgB;AAChB;AAAA,QACJ,KAAK,UAAU;AACX,0BAAgB,IAAI,WAAW,KAAK,IAAI,cAAc;AACtD;AAAA,MACR;AACA,UAAI,iBAAiB,IAAI,SAAS,WAAW,aAAa,MAAM,OAAO;AACnE,cAAM,IAAI,UAAU,+DAA+D,aAAa,gBAAgB;AAAA,MACpH;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACA,MAAM,qBAAqB,CAAC,KAAK,KAAK,UAAU;AAC5C,QAAI,eAAe;AACf;AACJ,QAAQ,MAAM,GAAG,GAAG;AAChB,UAAQ,YAAY,GAAG,KAAK,aAAa,KAAK,KAAK,KAAK;AACpD;AACJ,YAAM,IAAI,UAAU,yHAAyH;AAAA,IACjJ;AACA,QAAI,CAAC,UAAU,GAAG,GAAG;AACjB,YAAM,IAAI,UAAU,QAAgB,KAAK,KAAK,aAAa,aAAa,gBAAgB,YAAY,CAAC;AAAA,IACzG;AACA,QAAI,IAAI,SAAS,UAAU;AACvB,YAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,8DAA8D;AAAA,IACjG;AAAA,EACJ;AACA,MAAM,sBAAsB,CAAC,KAAK,KAAK,UAAU;AAC7C,QAAQ,MAAM,GAAG,GAAG;AAChB,cAAQ,OAAO;AAAA,QACX,KAAK;AAAA,QACL,KAAK;AACD,cAAQ,aAAa,GAAG,KAAK,aAAa,KAAK,KAAK,KAAK;AACrD;AACJ,gBAAM,IAAI,UAAU,uDAAuD;AAAA,QAC/E,KAAK;AAAA,QACL,KAAK;AACD,cAAQ,YAAY,GAAG,KAAK,aAAa,KAAK,KAAK,KAAK;AACpD;AACJ,gBAAM,IAAI,UAAU,sDAAsD;AAAA,MAClF;AAAA,IACJ;AACA,QAAI,CAAC,UAAU,GAAG,GAAG;AACjB,YAAM,IAAI,UAAU,QAAgB,KAAK,KAAK,aAAa,aAAa,cAAc,CAAC;AAAA,IAC3F;AACA,QAAI,IAAI,SAAS,UAAU;AACvB,YAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,mEAAmE;AAAA,IACtG;AACA,QAAI,IAAI,SAAS,UAAU;AACvB,cAAQ,OAAO;AAAA,QACX,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,uEAAuE;AAAA,QAC1G,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,0EAA0E;AAAA,MACjH;AAAA,IACJ;AACA,QAAI,IAAI,SAAS,WAAW;AACxB,cAAQ,OAAO;AAAA,QACX,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,wEAAwE;AAAA,QAC3G,KAAK;AACD,gBAAM,IAAI,UAAU,GAAG,IAAI,GAAG,CAAC,yEAAyE;AAAA,MAChH;AAAA,IACJ;AAAA,EACJ;AACO,WAAS,aAAa,KAAK,KAAK,OAAO;AAC1C,YAAQ,IAAI,UAAU,GAAG,CAAC,GAAG;AAAA,MACzB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,2BAAmB,KAAK,KAAK,KAAK;AAClC;AAAA,MACJ;AACI,4BAAoB,KAAK,KAAK,KAAK;AAAA,IAC3C;AAAA,EACJ;;;AC9GA,iBAAsB,gBAAgB,KAAK,KAAK,SAAS;AACrD,QAAI,CAAC,SAAS,GAAG,GAAG;AAChB,YAAM,IAAI,WAAW,iCAAiC;AAAA,IAC1D;AACA,QAAI,IAAI,cAAc,UAAa,IAAI,WAAW,QAAW;AACzD,YAAM,IAAI,WAAW,uEAAuE;AAAA,IAChG;AACA,QAAI,IAAI,cAAc,UAAa,OAAO,IAAI,cAAc,UAAU;AAClE,YAAM,IAAI,WAAW,qCAAqC;AAAA,IAC9D;AACA,QAAI,IAAI,YAAY,QAAW;AAC3B,YAAM,IAAI,WAAW,qBAAqB;AAAA,IAC9C;AACA,QAAI,OAAO,IAAI,cAAc,UAAU;AACnC,YAAM,IAAI,WAAW,yCAAyC;AAAA,IAClE;AACA,QAAI,IAAI,WAAW,UAAa,CAAC,SAAS,IAAI,MAAM,GAAG;AACnD,YAAM,IAAI,WAAW,uCAAuC;AAAA,IAChE;AACA,QAAI,aAAa,CAAC;AAClB,QAAI,IAAI,WAAW;AACf,UAAI;AACA,cAAM,kBAAkB,OAAK,IAAI,SAAS;AAC1C,qBAAa,KAAK,MAAMC,SAAQ,OAAO,eAAe,CAAC;AAAA,MAC3D,QACM;AACF,cAAM,IAAI,WAAW,iCAAiC;AAAA,MAC1D;AAAA,IACJ;AACA,QAAI,CAAC,WAAW,YAAY,IAAI,MAAM,GAAG;AACrC,YAAM,IAAI,WAAW,2EAA2E;AAAA,IACpG;AACA,UAAM,aAAa;AAAA,MACf,GAAG;AAAA,MACH,GAAG,IAAI;AAAA,IACX;AACA,UAAM,aAAa,aAAa,YAAY,oBAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,SAAS,MAAM,YAAY,UAAU;AAC3G,QAAI,MAAM;AACV,QAAI,WAAW,IAAI,KAAK,GAAG;AACvB,YAAM,WAAW;AACjB,UAAI,OAAO,QAAQ,WAAW;AAC1B,cAAM,IAAI,WAAW,yEAAyE;AAAA,MAClG;AAAA,IACJ;AACA,UAAM,EAAE,IAAI,IAAI;AAChB,QAAI,OAAO,QAAQ,YAAY,CAAC,KAAK;AACjC,YAAM,IAAI,WAAW,2DAA2D;AAAA,IACpF;AACA,UAAM,aAAa,WAAW,mBAAmB,cAAc,QAAQ,UAAU;AACjF,QAAI,cAAc,CAAC,WAAW,IAAI,GAAG,GAAG;AACpC,YAAM,IAAI,kBAAkB,sDAAsD;AAAA,IACtF;AACA,QAAI,KAAK;AACL,UAAI,OAAO,IAAI,YAAY,UAAU;AACjC,cAAM,IAAI,WAAW,8BAA8B;AAAA,MACvD;AAAA,IACJ,WACS,OAAO,IAAI,YAAY,YAAY,EAAE,IAAI,mBAAmB,aAAa;AAC9E,YAAM,IAAI,WAAW,wDAAwD;AAAA,IACjF;AACA,QAAI,cAAc;AAClB,QAAI,OAAO,QAAQ,YAAY;AAC3B,YAAM,MAAM,IAAI,YAAY,GAAG;AAC/B,oBAAc;AAAA,IAClB;AACA,iBAAa,KAAK,KAAK,QAAQ;AAC/B,UAAM,OAAO,OAAO,IAAI,cAAc,SAAY,OAAO,IAAI,SAAS,IAAI,IAAI,WAAW,GAAG,OAAO,GAAG,GAAG,OAAO,IAAI,YAAY,WAC1H,MACI,OAAO,IAAI,OAAO,IAClBC,SAAQ,OAAO,IAAI,OAAO,IAC9B,IAAI,OAAO;AACjB,UAAM,YAAY,gBAAgB,IAAI,WAAW,aAAa,UAAU;AACxE,UAAM,IAAI,MAAM,aAAa,KAAK,GAAG;AACrC,UAAM,WAAW,MAAM,OAAO,KAAK,GAAG,WAAW,IAAI;AACrD,QAAI,CAAC,UAAU;AACX,YAAM,IAAI,+BAA+B;AAAA,IAC7C;AACA,QAAI;AACJ,QAAI,KAAK;AACL,gBAAU,gBAAgB,IAAI,SAAS,WAAW,UAAU;AAAA,IAChE,WACS,OAAO,IAAI,YAAY,UAAU;AACtC,gBAAUA,SAAQ,OAAO,IAAI,OAAO;AAAA,IACxC,OACK;AACD,gBAAU,IAAI;AAAA,IAClB;AACA,UAAM,SAAS,EAAE,QAAQ;AACzB,QAAI,IAAI,cAAc,QAAW;AAC7B,aAAO,kBAAkB;AAAA,IAC7B;AACA,QAAI,IAAI,WAAW,QAAW;AAC1B,aAAO,oBAAoB,IAAI;AAAA,IACnC;AACA,QAAI,aAAa;AACb,aAAO,EAAE,GAAG,QAAQ,KAAK,EAAE;AAAA,IAC/B;AACA,WAAO;AAAA,EACX;;;AC1GA,iBAAsB,cAAc,KAAK,KAAK,SAAS;AACnD,QAAI,eAAe,YAAY;AAC3B,YAAMC,SAAQ,OAAO,GAAG;AAAA,IAC5B;AACA,QAAI,OAAO,QAAQ,UAAU;AACzB,YAAM,IAAI,WAAW,4CAA4C;AAAA,IACrE;AACA,UAAM,EAAE,GAAG,iBAAiB,GAAG,SAAS,GAAG,WAAW,OAAO,IAAI,IAAI,MAAM,GAAG;AAC9E,QAAI,WAAW,GAAG;AACd,YAAM,IAAI,WAAW,qBAAqB;AAAA,IAC9C;AACA,UAAM,WAAW,MAAM,gBAAgB,EAAE,SAAS,WAAW,iBAAiB,UAAU,GAAG,KAAK,OAAO;AACvG,UAAM,SAAS,EAAE,SAAS,SAAS,SAAS,iBAAiB,SAAS,gBAAgB;AACtF,QAAI,OAAO,QAAQ,YAAY;AAC3B,aAAO,EAAE,GAAG,QAAQ,KAAK,SAAS,IAAI;AAAA,IAC1C;AACA,WAAO;AAAA,EACX;;;ACjBA,MAAM,QAAQ,CAAC,SAAS,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAI;AACxD,MAAM,SAAS;AACf,MAAM,OAAO,SAAS;AACtB,MAAM,MAAM,OAAO;AACnB,MAAM,OAAO,MAAM;AACnB,MAAM,OAAO,MAAM;AACnB,MAAM,QAAQ;AACP,WAAS,KAAK,KAAK;AACtB,UAAM,UAAU,MAAM,KAAK,GAAG;AAC9B,QAAI,CAAC,WAAY,QAAQ,CAAC,KAAK,QAAQ,CAAC,GAAI;AACxC,YAAM,IAAI,UAAU,4BAA4B;AAAA,IACpD;AACA,UAAM,QAAQ,WAAW,QAAQ,CAAC,CAAC;AACnC,UAAM,OAAO,QAAQ,CAAC,EAAE,YAAY;AACpC,QAAI;AACJ,YAAQ,MAAM;AAAA,MACV,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,KAAK;AAC9B;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,MAAM;AACvC;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,IAAI;AACrC;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,GAAG;AACpC;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACD,sBAAc,KAAK,MAAM,QAAQ,IAAI;AACrC;AAAA,MACJ;AACI,sBAAc,KAAK,MAAM,QAAQ,IAAI;AACrC;AAAA,IACR;AACA,QAAI,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,MAAM,OAAO;AAC5C,aAAO,CAAC;AAAA,IACZ;AACA,WAAO;AAAA,EACX;AAOA,MAAM,eAAe,CAAC,UAAU;AAC5B,QAAI,MAAM,SAAS,GAAG,GAAG;AACrB,aAAO,MAAM,YAAY;AAAA,IAC7B;AACA,WAAO,eAAe,MAAM,YAAY,CAAC;AAAA,EAC7C;AACA,MAAM,wBAAwB,CAAC,YAAY,cAAc;AACrD,QAAI,OAAO,eAAe,UAAU;AAChC,aAAO,UAAU,SAAS,UAAU;AAAA,IACxC;AACA,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC3B,aAAO,UAAU,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC;AAAA,IACrE;AACA,WAAO;AAAA,EACX;AACO,WAAS,kBAAkB,iBAAiB,gBAAgB,UAAU,CAAC,GAAG;AAC7E,QAAI;AACJ,QAAI;AACA,gBAAU,KAAK,MAAMC,SAAQ,OAAO,cAAc,CAAC;AAAA,IACvD,QACM;AAAA,IACN;AACA,QAAI,CAAC,SAAS,OAAO,GAAG;AACpB,YAAM,IAAI,WAAW,gDAAgD;AAAA,IACzE;AACA,UAAM,EAAE,IAAI,IAAI;AAChB,QAAI,QACC,OAAO,gBAAgB,QAAQ,YAC5B,aAAa,gBAAgB,GAAG,MAAM,aAAa,GAAG,IAAI;AAC9D,YAAM,IAAI,yBAAyB,qCAAqC,SAAS,OAAO,cAAc;AAAA,IAC1G;AACA,UAAM,EAAE,iBAAiB,CAAC,GAAG,QAAQ,SAAS,UAAU,YAAY,IAAI;AACxE,UAAM,gBAAgB,CAAC,GAAG,cAAc;AACxC,QAAI,gBAAgB;AAChB,oBAAc,KAAK,KAAK;AAC5B,QAAI,aAAa;AACb,oBAAc,KAAK,KAAK;AAC5B,QAAI,YAAY;AACZ,oBAAc,KAAK,KAAK;AAC5B,QAAI,WAAW;AACX,oBAAc,KAAK,KAAK;AAC5B,eAAW,SAAS,IAAI,IAAI,cAAc,QAAQ,CAAC,GAAG;AAClD,UAAI,EAAE,SAAS,UAAU;AACrB,cAAM,IAAI,yBAAyB,qBAAqB,KAAK,WAAW,SAAS,OAAO,SAAS;AAAA,MACrG;AAAA,IACJ;AACA,QAAI,UACA,EAAE,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,QAAQ,GAAG,GAAG;AACpE,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,cAAc;AAAA,IACrG;AACA,QAAI,WAAW,QAAQ,QAAQ,SAAS;AACpC,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,cAAc;AAAA,IACrG;AACA,QAAI,YACA,CAAC,sBAAsB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI,QAAQ,GAAG;AAC3F,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,cAAc;AAAA,IACrG;AACA,QAAI;AACJ,YAAQ,OAAO,QAAQ,gBAAgB;AAAA,MACnC,KAAK;AACD,oBAAY,KAAK,QAAQ,cAAc;AACvC;AAAA,MACJ,KAAK;AACD,oBAAY,QAAQ;AACpB;AAAA,MACJ,KAAK;AACD,oBAAY;AACZ;AAAA,MACJ;AACI,cAAM,IAAI,UAAU,oCAAoC;AAAA,IAChE;AACA,UAAM,EAAE,YAAY,IAAI;AACxB,UAAM,MAAM,MAAM,eAAe,oBAAI,KAAK,CAAC;AAC3C,SAAK,QAAQ,QAAQ,UAAa,gBAAgB,OAAO,QAAQ,QAAQ,UAAU;AAC/E,YAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,SAAS;AAAA,IAChG;AACA,QAAI,QAAQ,QAAQ,QAAW;AAC3B,UAAI,OAAO,QAAQ,QAAQ,UAAU;AACjC,cAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,SAAS;AAAA,MAChG;AACA,UAAI,QAAQ,MAAM,MAAM,WAAW;AAC/B,cAAM,IAAI,yBAAyB,sCAAsC,SAAS,OAAO,cAAc;AAAA,MAC3G;AAAA,IACJ;AACA,QAAI,QAAQ,QAAQ,QAAW;AAC3B,UAAI,OAAO,QAAQ,QAAQ,UAAU;AACjC,cAAM,IAAI,yBAAyB,gCAAgC,SAAS,OAAO,SAAS;AAAA,MAChG;AACA,UAAI,QAAQ,OAAO,MAAM,WAAW;AAChC,cAAM,IAAI,WAAW,sCAAsC,SAAS,OAAO,cAAc;AAAA,MAC7F;AAAA,IACJ;AACA,QAAI,aAAa;AACb,YAAM,MAAM,MAAM,QAAQ;AAC1B,YAAM,MAAM,OAAO,gBAAgB,WAAW,cAAc,KAAK,WAAW;AAC5E,UAAI,MAAM,YAAY,KAAK;AACvB,cAAM,IAAI,WAAW,4DAA4D,SAAS,OAAO,cAAc;AAAA,MACnH;AACA,UAAI,MAAM,IAAI,WAAW;AACrB,cAAM,IAAI,yBAAyB,iEAAiE,SAAS,OAAO,cAAc;AAAA,MACtI;AAAA,IACJ;AACA,WAAO;AAAA,EACX;;;ACrKA,iBAAsB,UAAUC,MAAK,KAAK,SAAS;AAC/C,UAAM,WAAW,MAAM,cAAcA,MAAK,KAAK,OAAO;AACtD,QAAI,SAAS,gBAAgB,MAAM,SAAS,KAAK,KAAK,SAAS,gBAAgB,QAAQ,OAAO;AAC1F,YAAM,IAAI,WAAW,qCAAqC;AAAA,IAC9D;AACA,UAAM,UAAU,kBAAkB,SAAS,iBAAiB,SAAS,SAAS,OAAO;AACrF,UAAM,SAAS,EAAE,SAAS,iBAAiB,SAAS,gBAAgB;AACpE,QAAI,OAAO,QAAQ,YAAY;AAC3B,aAAO,EAAE,GAAG,QAAQ,KAAK,SAAS,IAAI;AAAA,IAC1C;AACA,WAAO;AAAA,EACX;;;ACXA,WAAS,cAAc,KAAK;AACxB,YAAQ,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,CAAC,GAAG;AAAA,MAChD,KAAK;AAAA,MACL,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX,KAAK;AACD,eAAO;AAAA,MACX;AACI,cAAM,IAAI,iBAAiB,gDAAgD;AAAA,IACnF;AAAA,EACJ;AACA,WAAS,WAAW,MAAM;AACtB,WAAQ,QACJ,OAAO,SAAS,YAChB,MAAM,QAAQ,KAAK,IAAI,KACvB,KAAK,KAAK,MAAM,SAAS;AAAA,EACjC;AACA,WAAS,UAAU,KAAK;AACpB,WAAO,SAAS,GAAG;AAAA,EACvB;AACA,MAAM,cAAN,MAAkB;AAAA,IACd;AAAA,IACA,UAAU,oBAAI,QAAQ;AAAA,IACtB,YAAY,MAAM;AACd,UAAI,CAAC,WAAW,IAAI,GAAG;AACnB,cAAM,IAAI,YAAY,4BAA4B;AAAA,MACtD;AACA,WAAK,QAAQ,gBAAgB,IAAI;AAAA,IACrC;AAAA,IACA,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,IACA,MAAM,OAAO,iBAAiB,OAAO;AACjC,YAAM,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,iBAAiB,GAAG,OAAO,OAAO;AAC5D,YAAM,MAAM,cAAc,GAAG;AAC7B,YAAM,aAAa,KAAK,MAAM,KAAK,OAAO,CAACC,SAAQ;AAC/C,YAAI,YAAY,QAAQA,KAAI;AAC5B,YAAI,aAAa,OAAO,QAAQ,UAAU;AACtC,sBAAY,QAAQA,KAAI;AAAA,QAC5B;AACA,YAAI,cAAc,OAAOA,KAAI,QAAQ,YAAY,QAAQ,QAAQ;AAC7D,sBAAY,QAAQA,KAAI;AAAA,QAC5B;AACA,YAAI,aAAa,OAAOA,KAAI,QAAQ,UAAU;AAC1C,sBAAYA,KAAI,QAAQ;AAAA,QAC5B;AACA,YAAI,aAAa,MAAM,QAAQA,KAAI,OAAO,GAAG;AACzC,sBAAYA,KAAI,QAAQ,SAAS,QAAQ;AAAA,QAC7C;AACA,YAAI,WAAW;AACX,kBAAQ,KAAK;AAAA,YACT,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,YACJ,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,YACJ,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,YACJ,KAAK;AAAA,YACL,KAAK;AACD,0BAAYA,KAAI,QAAQ;AACxB;AAAA,UACR;AAAA,QACJ;AACA,eAAO;AAAA,MACX,CAAC;AACD,YAAM,EAAE,GAAG,KAAK,OAAO,IAAI;AAC3B,UAAI,WAAW,GAAG;AACd,cAAM,IAAI,kBAAkB;AAAA,MAChC;AACA,UAAI,WAAW,GAAG;AACd,cAAMC,SAAQ,IAAI,yBAAyB;AAC3C,cAAM,UAAU,KAAK;AACrB,QAAAA,OAAM,OAAO,aAAa,IAAI,mBAAmB;AAC7C,qBAAWD,QAAO,YAAY;AAC1B,gBAAI;AACA,oBAAM,MAAM,mBAAmB,SAASA,MAAK,GAAG;AAAA,YACpD,QACM;AAAA,YAAE;AAAA,UACZ;AAAA,QACJ;AACA,cAAMC;AAAA,MACV;AACA,aAAO,mBAAmB,KAAK,SAAS,KAAK,GAAG;AAAA,IACpD;AAAA,EACJ;AACA,iBAAe,mBAAmBC,QAAO,KAAK,KAAK;AAC/C,UAAM,SAASA,OAAM,IAAI,GAAG,KAAKA,OAAM,IAAI,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG;AAC3D,QAAI,OAAO,GAAG,MAAM,QAAW;AAC3B,YAAM,MAAM,MAAM,UAAU,EAAE,GAAG,KAAK,KAAK,KAAK,GAAG,GAAG;AACtD,UAAI,eAAe,cAAc,IAAI,SAAS,UAAU;AACpD,cAAM,IAAI,YAAY,8CAA8C;AAAA,MACxE;AACA,aAAO,GAAG,IAAI;AAAA,IAClB;AACA,WAAO,OAAO,GAAG;AAAA,EACrB;AACO,WAAS,kBAAkB,MAAM;AACpC,UAAM,MAAM,IAAI,YAAY,IAAI;AAChC,UAAM,cAAc,OAAO,iBAAiB,UAAU,IAAI,OAAO,iBAAiB,KAAK;AACvF,WAAO,iBAAiB,aAAa;AAAA,MACjC,MAAM;AAAA,QACF,OAAO,MAAM,gBAAgB,IAAI,KAAK,CAAC;AAAA,QACvC,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AACD,WAAO;AAAA,EACX;;;ACnHA,MAAM,YAAY,oBAAI,QAAQ;AAE9B,WAAS,UAAU,MAAM;AACxB,QAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,GAAG;AACvC,YAAY,WAAW,6DAA6D;AAAA,IACrF;AACA,QAAI,CAAC,UAAU,IAAI,IAAI,GAAG;AACzB,gBAAU,IAAI,MAAM,kBAAkB,IAAI,CAAC;AAAA,IAC5C;AACA,WAAO,UAAU,IAAI,IAAI;AAAA,EAC1B;AAEA,WAAS,oBAAoB,sBAAsB,CAAC,GAAG;AACtD,UAAM,aAAa,oBAAoB;AACvC,QAAI,MAAM,QAAQ,UAAU,KAAK,WAAW,QAAQ;AACnD,aAAO,WAAW,OAAO,eAAa,cAAc,MAAM;AAAA,IAC3D;AACA,WAAO,CAAC,OAAO;AAAA,EAChB;AASA,iBAAsB,gBAAgBC,UAAS,UAAU,CAAC,GAAG;AAC5D,QAAI,CAACA,UAAS;AACb,YAAY,WAAW,+DAA+D;AAAA,IACvF;AACA,QAAI,CAAC,QAAQ,MAAM;AAClB,YAAY,WAAW,0DAA0D;AAAA,IAClF;AACA,QAAI,CAAC,QAAQ,QAAQ;AACpB,YAAY,WAAW,4DAA4D;AAAA,IACpF;AACA,QAAI,CAAC,QAAQ,WAAW;AACvB,YAAY,WAAW,+DAA+D;AAAA,IACvF;AAEA,UAAM,EAAE,SAAS,gBAAgB,IAAI,MAAM;AAAA,MAC1CA;AAAA,MACA,UAAU,QAAQ,IAAI;AAAA,MACtB;AAAA,QACC,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,YAAY,QAAQ,cAAc,oBAAoB,QAAQ,oBAAoB;AAAA,QAClF,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,gBAAgB,CAAC,OAAO,OAAO,OAAO,OAAO,KAAK;AAAA,MACnD;AAAA,IACD;AAEA,QAAI,QAAQ,UAAU,UAAa,QAAQ,UAAU,QAAQ,OAAO;AACnE,YAAY,WAAW,4CAA4C;AAAA,IACpE;AAEA,WAAO;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACT;AAAA,EACD;;;ACrDe,WAAR,OAAwB,UAAQ,CAAC,GAAG;AAE1C,UAAM,iBAAiB;AAAA,MACtB,QAAc,OAAO;AAAA,MACrB,qBAAqB;AAAA,MACrB,UAAU;AAAA,MACV,oBAAoB,OAAMC,SAAO;AAChC,YAAI,OAAO,SAAS,QAAQA,KAAI,MAAM;AACrC,iBAAO,SAAS,QAAQA,KAAI,IAAI;AAAA,QACjC;AACA,eAAO;AAAA,MACR;AAAA,IACD;AAEA,cAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,OAAO;AACnD,UAAM,sBAAsB,QAAQ;AAEpC,WAAO,SAAS;AAAA,MACf,QAAQ,SAAS,WAAiB,OAAO,EAAE,WAAW,CAAC;AAAA;AAAA,MACvD,aAAa,SAAS;AAAA,MACtB,QAAQ,SAAS,QAAQ;AAAA,MACzB,QAAQ,SAAS,CAAC,CAAC;AAAA,MACnB,sBAAsB,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,QAAQ,OAAO;AACnB,cAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,wBAAwB,QAAQ,MAAM,IAAI,sBAAsB,GAAG;AAC/E,cAAQ,uBAAuB,QAAQ,MAAM,IAAI,sBAAsB;AAAA,IACxE;AACA,QAAI,CAAC,QAAQ,aAAa,aAAa,QAAQ,MAAM,IAAI,aAAa,GAAG;AACxE,YAAM,mBAAmB,QAAQ,MAAM,IAAI,aAAa;AACxD,UAAI,yBAAyB,kBAAkB,mBAAmB,GAAG;AACpE,gBAAQ,cAAc;AAAA,MACvB;AAAA,IACD;AAEA,WAAO,OAAO,KAAK,SAAS;AAC3B,UAAI;AACJ,UAAI,CAAC,QAAQ,qBAAqB;AACjC,YAAI;AACH,gBAAM,MAAM,KAAK,GAAG;AAAA,QACrB,SAAQ,KAAK;AACZ,gBAAM,KAAK;AACX,cAAI,CAAC,OAAQ,IAAI,UAAQ,OAAO,IAAI,UAAQ,KAAM;AACjD,kBAAM;AAAA,UACP;AAAA,QACD;AACA,YAAI,IAAI,MAAO,IAAI,UAAQ,OAAO,IAAI,UAAQ,KAAM;AACnD,iBAAO;AAAA,QACR;AAAA,MACD;AACA,UAAI,CAAC,QAAQ,sBAAsB;AAClC,gBAAQ,uBAAuB,MAAM,cAAS;AAAA,UAC7C,QAAQ,QAAQ;AAAA,UAChB,QAAQ,QAAQ,OAAO,KAAK,QAAQ,MAAM;AAAA,QAC3C,CAAC;AACD,gBAAQ,MAAM,IAAI,wBAAwB,QAAQ,oBAAoB;AAAA,MACvE;AAEA,UAAI,CAAC,QAAQ,aAAa,WAAW;AACpC,YAAI,CAAC,QAAQ,qBAAqB,uBAAuB;AACxD,gBAAY,WAAW,iCAA+B,QAAQ,SAAO,sFAAuF;AAAA,QAC7J;AACA,gBAAQ,cAAc,MAAM,SAAS;AAAA,UACpC,uBAAuB,QAAQ,qBAAqB;AAAA,UACpD,QAAQ,QAAQ;AAAA,UAChB,aAAa,QAAQ;AAAA,QACtB,CAAC;AACD,gBAAQ,MAAM,IAAI,eAAe,QAAQ,WAAW;AAAA,MACrD;AAIA,YAAM,QAAQ,QAAQ,SAAS;AAC/B,YAAM,QAAQ,QAAQ,SAAgB,qBAAqB,EAAE;AAC7D,cAAQ,MAAM,IAAI,iBAAiB,KAAK;AAExC,YAAM,gBAAgB,OAAO;AAAA,QAC5B;AAAA,UACC,MAAM,QAAQ;AAAA,UACd,QAAQ,QAAQ;AAAA,UAChB,qBAAqB;AAAA,UACrB,oBAAoB,QAAQ;AAAA,UAC5B,sBAAsB;AAAA,YACrB,WAAW,QAAQ,aAAa;AAAA,YAChC,eAAe,QAAQ,aAAa;AAAA,YACpC,YAAY;AAAA,YACZ,eAAe;AAAA,YACf,eAAe;AAAA,YACf,wBAAwB,QAAQ,qBAAqB;AAAA,YACrD,gBAAgB,QAAQ,qBAAqB;AAAA,YAC7C;AAAA;AAAA,YACA,cAAc,QAAQ,YAAY,cAAc,CAAC;AAAA,YACjD;AAAA,UACD;AAAA,QACD;AAAA;AAAA,MAED;AAEA,YAAM,eAAe,OAAOC,MAAKC,UAAS;AACzC,cAAMC,OAAM,MAAMD,MAAKD,IAAG;AAC1B,cAAM,gBAAsB,IAAI,QAAQ,qBAAqB,gBAAgB,EAAE,MAAM,GAAG,CAAC,EAAE;AAC3F,cAAM,aAAmB,IAAIA,KAAI,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE;AACpD,YAAI,eAAe,eAAe;AACjC,iBAAOE;AAAA,QACR;AACA,cAAM,cAAcA,KAAI,QAAQ,IAAI,cAAc;AAClD,YAAI,CAAC,aAAa,WAAW,kBAAkB,GAAG;AACjD,iBAAOA;AAAA,QACR;AAEA,YAAI,OAAOA,KAAI,QAAQ,OAAOA,KAAI,SAAS,WAAWA,KAAI,OAAO;AACjE,YAAI,CAAC,MAAM;AACV,gBAAMC,QAAOD,KAAI,MAAM;AACvB,iBAAO,MAAMC,MAAK,KAAK;AAAA,QACxB;AAEA,cAAM,WAAW,MAAM;AACvB,cAAM,OAAO,MAAM,QAAQ;AAC3B,cAAM,aAAa,MAAM,gBAAgB,UAAU;AAAA,UAClD,QAAQ,QAAQ,qBAAqB;AAAA,UACrC,WAAW,QAAQ,YAAY;AAAA,UAC/B;AAAA,UACA,sBAAsB,QAAQ;AAAA,UAC9B,OAAO,QAAQ,MAAM,IAAI,eAAe;AAAA,QACzC,CAAC;AACD,gBAAQ,MAAM,IAAI,YAAY,QAAQ;AACtC,gBAAQ,MAAM,IAAI,mBAAmB,WAAW,MAAM;AACtD,eAAOD;AAAA,MACR;AAEA,YAAM,UAAU,YAAY;AAC3B,YAAI,CAAC,QAAQ,MAAM;AAClB,gBAAM,aAAa,QAAQ,OAAO,KAAK,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC;AACjE,gBAAME,YAAW,MAAM,WAAW,IAAI,QAAQ,qBAAqB,QAAQ;AAC3E,kBAAQ,OAAOA,UAAS;AAAA,QACzB;AACA,eAAO,QAAQ;AAAA,MAChB;AAEA,UAAI,eAAe,QAAQ,OAAO,KAAK,QAAQ,MAAM,EAAE,KAAK,YAAY;AAExE,UAAI,QAAQ,UAAU;AACrB,cAAM,cAAc;AAAA,UACnB,MAAM,QAAQ;AAAA,UACd,wBAAwB,QAAQ,qBAAqB;AAAA,UACrD,gBAAgB,QAAQ,qBAAqB;AAAA,UAC7C,mCAAmC,QAAQ,qBAAqB;AAAA,QACjE;AACA,uBAAe,aAAa,KAAK,OAAO,WAAW,CAAC;AAAA,MACrD;AACA,oBAAc,SAAS;AAEvB,qBAAe,aAAa,KAAK,SAAS,aAAa,CAAC;AAExD,YAAM,MAAM,aAAa,MAAM,GAAG;AAElC,aAAO;AAAA,IACR;AAAA,EAED;AAEA,WAAS,yBAAyB,kBAAkB,qBAAqB;AACxE,QAAI,CAAC,kBAAkB,WAAW;AACjC,aAAO;AAAA,IACR;AACA,QAAI,CAAC,MAAM,QAAQ,qBAAqB,aAAa,GAAG;AACvD,aAAO;AAAA,IACR;AACA,UAAM,qBAAqB,IAAI,IAAI,iBAAiB,iBAAiB,CAAC,CAAC;AACvE,WAAO,oBAAoB,cAAc,MAAM,SAAO,mBAAmB,IAAI,GAAG,CAAC;AAAA,EAClF;AAEO,WAASC,gBAAe;AAC9B,WAAc,aAAa;AAAA,EAC5B;AAEO,WAAS,QAAQ,SAAS;AAChC,QAAI,CAAC,QAAQ,OAAO;AACnB,UAAI,CAAC,QAAQ,QAAQ;AACpB,cAAY,WAAW,iEAAiE;AAAA,MACzF;AACA,cAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACzC;AACA,WAAO,QAAQ,MAAM,IAAI,UAAU;AAAA,EACpC;AAEO,WAAS,cAAc,SAAS;AACtC,QAAI,CAAC,QAAQ,OAAO;AACnB,UAAI,CAAC,QAAQ,QAAQ;AACpB,cAAY,WAAW,wEAAwE;AAAA,MAChG;AACA,cAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACzC;AACA,WAAO,QAAQ,MAAM,IAAI,iBAAiB;AAAA,EAC3C;;;AC5MA,MAAM,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAAC;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAEA,MAAO,gBAAQ;;;ACVf,MAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,aAAM,WAAW,SAAS,CAAC,CAAC;AAE5D,MAAI,CAAC,MAAM,MAAM;AAChB,UAAM,OAAO;AAAA,EACd;AAEA,aAAW,QAAQ;AAGnB,MAAO,kBAAQ;",
+  "names": ["options", "req", "next", "middleware", "error", "client", "tracer", "url", "message", "message", "issues", "url", "index", "url", "response", "encoder", "value", "message", "request", "resolve", "reject", "url", "response", "json", "error", "message", "url", "response", "response", "encoder", "decoder", "buf", "decoder", "message", "message", "message", "isCryptoKey", "subtleAlgorithm", "subtleAlgorithm", "isCryptoKey", "decoder", "encoder", "decoder", "decoder", "jwt", "jwk", "error", "cache", "idToken", "url", "req", "next", "res", "res2", "response", "isRedirected", "isRedirected"]
 }