@nxgt/janus 0.12.0 → 0.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -0
- package/dist/auth/email-flows/reset-password.d.ts.map +1 -1
- package/dist/auth/password-written.d.ts +21 -5
- package/dist/auth/password-written.d.ts.map +1 -1
- package/dist/auth/port/types/tokens.d.ts +3 -2
- package/dist/auth/port/types/tokens.d.ts.map +1 -1
- package/dist/auth/types/email-flows.d.ts +6 -3
- package/dist/auth/types/email-flows.d.ts.map +1 -1
- package/dist/index.js +11 -6
- package/dist/index.js.map +6 -6
- package/docs/README.md +1 -1
- package/docs/guide/adapters.md +3 -2
- package/docs/guide/email-flows.md +40 -1
- package/docs/guide/events.md +1 -1
- package/docs/guide/passwords.md +22 -0
- package/docs/guide/users.md +7 -3
- package/docs/guide/vocabulary.md +1 -1
- package/docs/roadmap.md +7 -8
- package/docs/troubleshooting.md +11 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1025,6 +1025,14 @@ waiting on its second factor is spent with them — as it is by `setPassword`
|
|
|
1025
1025
|
and `changePassword`; what the visitor does next is
|
|
1026
1026
|
your policy. A password refused for its length does not spend the token.
|
|
1027
1027
|
|
|
1028
|
+
**Only the last reset link works, and only until the password changes.** A
|
|
1029
|
+
`resetPassword.request` spends the user's earlier links, and any password
|
|
1030
|
+
written — by a link, `changePassword` or `setPassword` — spends every link
|
|
1031
|
+
still live, so an older e-mail's link answers `TOKEN_SPENT`. Tell the visitor
|
|
1032
|
+
to use the latest e-mail, and rate-limit `resetPassword.request` per address:
|
|
1033
|
+
each request cancels the link before it. **Nothing limits password guesses**: rate-limit
|
|
1034
|
+
`signIn` per login and per client ([passwords](docs/guide/passwords.md#rate-limit-password-guessing)).
|
|
1035
|
+
|
|
1028
1036
|
**A sign-in can move a user's `version`.** Rewriting a stale hash is a write. A
|
|
1029
1037
|
user object read before that sign-in, and then passed as `ifVersion`, gets
|
|
1030
1038
|
`VERSION_CONFLICT`. That is the conflict doing its job: read the user again.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../../src/auth/email-flows/reset-password.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACN,KAAK,OAAO,EACZ,KAAK,OAAO,EAOZ,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../../src/auth/email-flows/reset-password.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACN,KAAK,OAAO,EACZ,KAAK,OAAO,EAOZ,MAAM,YAAY,CAAC;AAKpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGjD,KAAK,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,YAAY,EAClB,EAAE,EAAE,EAAE,GACJ,aAAa,CAqCf"}
|
|
@@ -4,12 +4,28 @@ import { type AnyUser, type Context } from './context';
|
|
|
4
4
|
import type { UserRecord } from './port/types';
|
|
5
5
|
import type { SignInResult } from './types';
|
|
6
6
|
/**
|
|
7
|
-
* What writing a password ends besides
|
|
8
|
-
*
|
|
9
|
-
*
|
|
10
|
-
*
|
|
7
|
+
* What writing a password ends besides. A reset, a change and a set each call
|
|
8
|
+
* it **after** the write, and a failure here throws — it is never ignored:
|
|
9
|
+
*
|
|
10
|
+
* - The user's reset links still unspent. A link answers a request to
|
|
11
|
+
* replace the password; once it is replaced, an older link would replace
|
|
12
|
+
* it again, without knowing the new one.
|
|
13
|
+
* - Every second-factor challenge still open, so a sign-in started with the
|
|
14
|
+
* old password cannot be finished — the other half of
|
|
15
|
+
* {@link heldByPassword}, which reads **after** it issued.
|
|
16
|
+
*
|
|
17
|
+
* Both spends are attempted even when one fails, so a store failing one kind
|
|
18
|
+
* still spends the other; the first failure is then thrown.
|
|
19
|
+
*
|
|
20
|
+
* After the write, not before: a link issued while the password is written
|
|
21
|
+
* is spent too, where one issued between an earlier spend and the write
|
|
22
|
+
* would survive. So an outage here leaves the password written and the
|
|
23
|
+
* older links live, and the caller is told, with `STORE_FAILED`; the next
|
|
24
|
+
* `resetPassword.request` spends them. Sign-in codes and step-ups are left
|
|
25
|
+
* alone: the password proves neither, and a step-up belongs to a session,
|
|
26
|
+
* which a reset revokes.
|
|
11
27
|
*/
|
|
12
|
-
export declare function
|
|
28
|
+
export declare function endWhatThePasswordOpened(context: Context, userId: Id): Promise<void>;
|
|
13
29
|
/**
|
|
14
30
|
* Whether the password a sign-in verified is still the user's, once the
|
|
15
31
|
* sign-in answered. A password written meanwhile ends the sign-in: its
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"password-written.d.ts","sourceRoot":"","sources":["../../src/auth/password-written.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EACN,KAAK,OAAO,EACZ,KAAK,OAAO,EAGZ,MAAM,WAAW,CAAC;AAEnB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C
|
|
1
|
+
{"version":3,"file":"password-written.d.ts","sourceRoot":"","sources":["../../src/auth/password-written.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EACN,KAAK,OAAO,EACZ,KAAK,OAAO,EAGZ,MAAM,WAAW,CAAC;AAEnB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,EAAE,GACR,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CACnC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,UAAU,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAC7B,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAkBlB"}
|
|
@@ -104,8 +104,9 @@ export interface TokenStore {
|
|
|
104
104
|
* Spends every **unspent** token of one user and one `kind` at `at` —
|
|
105
105
|
* but the one whose hash is `except`, when given — and answers how many
|
|
106
106
|
* it spent. What issuing a sign-in code calls, sparing the code it just
|
|
107
|
-
* issued, so only the last code sent works
|
|
108
|
-
* calls, so no
|
|
107
|
+
* issued, so only the last code sent works — and so for a reset link and
|
|
108
|
+
* a step-up; and what writing a password calls, so no reset link and no
|
|
109
|
+
* second-factor challenge opened with the old one survives.
|
|
109
110
|
*
|
|
110
111
|
* - A spent token keeps its `spentAt`: it never changes once set.
|
|
111
112
|
* - A token of another `kind`, or of another user, is not touched.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../../src/auth/port/types/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,SAAS,GAClB,aAAa,GACb,eAAe,GACf,cAAc,GACd,YAAY,GACZ,QAAQ,CAAC;AAEZ,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CACzB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IAC1B;;;OAGG;IACH,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CACX,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,IAAI,GACN,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE/B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE9E
|
|
1
|
+
{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../../src/auth/port/types/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,SAAS,GAClB,aAAa,GACb,eAAe,GACf,cAAc,GACd,YAAY,GACZ,QAAQ,CAAC;AAEZ,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CACzB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IAC1B;;;OAGG;IACH,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CACX,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,IAAI,GACN,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE/B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE9E;;;;;;;;;;;;;;;;;OAiBG;IACH,eAAe,CACd,MAAM,EAAE,EAAE,EACV,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,IAAI,EACR,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C"}
|
|
@@ -80,15 +80,18 @@ export interface ResetPasswordApi<U> {
|
|
|
80
80
|
/**
|
|
81
81
|
* Issues a reset token for the user of this type holding this e-mail, or
|
|
82
82
|
* answers `null` when there is none. **Never tell the visitor which**:
|
|
83
|
-
* answer the same page either way.
|
|
83
|
+
* answer the same page either way. The user's earlier reset tokens are
|
|
84
|
+
* spent: only the last one sent works.
|
|
84
85
|
*/
|
|
85
86
|
request(email: string): Promise<(IssuedToken & {
|
|
86
87
|
readonly user: U;
|
|
87
88
|
}) | null>;
|
|
88
89
|
/**
|
|
89
90
|
* Redeems the token, sets the password, marks the e-mail verified — the
|
|
90
|
-
* link proved it — and **signs the user out everywhere**.
|
|
91
|
-
*
|
|
91
|
+
* link proved it — and **signs the user out everywhere**. Every other
|
|
92
|
+
* reset token of the user is spent, as by `changePassword` and
|
|
93
|
+
* `setPassword`. Opens no session: call `signIn` next if that is your
|
|
94
|
+
* policy.
|
|
92
95
|
*/
|
|
93
96
|
confirm(token: string, password: string): Promise<U>;
|
|
94
97
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"email-flows.d.ts","sourceRoot":"","sources":["../../../src/auth/types/email-flows.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU,CAAC,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE;QACpB;;;;;;;;;;WAUG;QACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD;;;;;;;;;WASG;QACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KAC1D,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,WAAW,cAAc,CAAC,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE;QACrB,yEAAyE;QACzE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C;;;WAGG;QACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KACnC,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB,CAAC,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE;QACvB
|
|
1
|
+
{"version":3,"file":"email-flows.d.ts","sourceRoot":"","sources":["../../../src/auth/types/email-flows.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CACzB;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU,CAAC,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE;QACpB;;;;;;;;;;WAUG;QACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD;;;;;;;;;WASG;QACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KAC1D,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,WAAW,cAAc,CAAC,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE;QACrB,yEAAyE;QACzE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C;;;WAGG;QACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KACnC,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB,CAAC,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE;QACvB;;;;;WAKG;QACH,OAAO,CACN,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,CAAC,WAAW,GAAG;YAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;SAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD;;;;;;WAMG;QACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KACrD,CAAC;CACF"}
|
package/dist/index.js
CHANGED
|
@@ -978,8 +978,12 @@ async function insertOneTime(context, token, code) {
|
|
|
978
978
|
return { secret, expiresAt };
|
|
979
979
|
}
|
|
980
980
|
// src/auth/password-written.ts
|
|
981
|
-
async function
|
|
982
|
-
|
|
981
|
+
async function endWhatThePasswordOpened(context, userId) {
|
|
982
|
+
const now = context.clock.now();
|
|
983
|
+
const spent = await Promise.allSettled(["resetPassword", "secondFactor"].map((kind) => context.store.tokens.spendUserTokens(userId, kind, now)));
|
|
984
|
+
const failed = spent.find((result) => result.status === "rejected");
|
|
985
|
+
if (failed !== undefined)
|
|
986
|
+
throw failed.reason;
|
|
983
987
|
}
|
|
984
988
|
async function heldByPassword(context, type, verified, password, result, where) {
|
|
985
989
|
const now = await findRecord(context, verified.id, type.name);
|
|
@@ -1031,6 +1035,7 @@ function resetPasswordFlows(context, type, at) {
|
|
|
1031
1035
|
if (record === null)
|
|
1032
1036
|
return null;
|
|
1033
1037
|
const issued = await issueEmailToken(context, type, "resetPassword", record, where);
|
|
1038
|
+
await context.store.tokens.spendUserTokens(record.id, "resetPassword", context.clock.now(), hashSecret(issued.token));
|
|
1034
1039
|
return { ...issued, user: toUser(record) };
|
|
1035
1040
|
},
|
|
1036
1041
|
async confirm(secret, password) {
|
|
@@ -1054,7 +1059,7 @@ async function confirmReset(context, type, secret, password, where) {
|
|
|
1054
1059
|
});
|
|
1055
1060
|
try {
|
|
1056
1061
|
await context.store.sessions.revokeUserSessions(written.id, context.clock.now());
|
|
1057
|
-
await
|
|
1062
|
+
await endWhatThePasswordOpened(context, written.id);
|
|
1058
1063
|
} finally {
|
|
1059
1064
|
await emit(context, "user.passwordReset", written, written.updatedAt);
|
|
1060
1065
|
if (newlyVerified) {
|
|
@@ -1793,7 +1798,7 @@ async function changePassword(context, type, user, change, options, where) {
|
|
|
1793
1798
|
}
|
|
1794
1799
|
};
|
|
1795
1800
|
});
|
|
1796
|
-
await
|
|
1801
|
+
await endWhatThePasswordOpened(context, written.id);
|
|
1797
1802
|
return written;
|
|
1798
1803
|
}
|
|
1799
1804
|
|
|
@@ -1884,7 +1889,7 @@ function passwordFlows(context, type, at, finish) {
|
|
|
1884
1889
|
checkPassword(type, password, where);
|
|
1885
1890
|
const hash = await requireHasher(context, where).hash(password);
|
|
1886
1891
|
const written = await writeUser(context, user, type, options, where, (_, now) => ({ password: { hash, updatedAt: now } }));
|
|
1887
|
-
await
|
|
1892
|
+
await endWhatThePasswordOpened(context, written.id);
|
|
1888
1893
|
return toUser(written);
|
|
1889
1894
|
},
|
|
1890
1895
|
async changePassword(user, change, options) {
|
|
@@ -2070,5 +2075,5 @@ export {
|
|
|
2070
2075
|
systemClock
|
|
2071
2076
|
};
|
|
2072
2077
|
|
|
2073
|
-
//# debugId=
|
|
2078
|
+
//# debugId=D61F9F351D899C2964756E2164756E21
|
|
2074
2079
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -33,9 +33,9 @@
|
|
|
33
33
|
"/**\n * The refusals of a one-time token that could not be used: none, spent,\n * lapsed, or sent to an e-mail the user no longer has.\n */\n\nimport { TokenError } from '../../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf } from '../context';\nimport type { TokenRecord, UserRecord } from '../port/types';\n\n/**\n * `noun` is what the messages call it: `token` for a link, `challenge` for\n * what `signIn` answers. No message names the secret or its hash.\n */\nexport type OneTimeNoun = 'token' | 'challenge';\n\n/**\n * Refuses a token sent to an e-mail the user no longer has: redeeming it\n * would prove an address nobody holds any more.\n */\nexport function refuseStale(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\ttoken: TokenRecord,\n\twhere: string,\n\tnoun: 'token' | 'code',\n): void {\n\tconst email = emailOf(type, user.fields);\n\tif (\n\t\temail === null ||\n\t\tnormalizeEmail(email) !== normalizeEmail(token.address)\n\t) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_STALE',\n\t\t\t`${where}: the ${noun} was sent to an e-mail the user no longer has`,\n\t\t\t{ operation: where, userId: user.id, userType: type.name },\n\t\t);\n\t}\n}\n\n/**\n * Refuses a token that cannot be used: none, spent, or lapsed. What a store\n * answered — before a `consumeToken`, after a `countAttempt` — is read the\n * same way: `spentAt` set means somebody else used it.\n */\nexport function refuseUnusable(\n\ttoken: TokenRecord | null,\n\tnow: Date,\n\twhere: string,\n\tnoun: OneTimeNoun,\n): asserts token is TokenRecord {\n\tif (token === null) {\n\t\tthrow new TokenError('TOKEN_UNKNOWN', `${where}: no such ${noun}`, {\n\t\t\toperation: where,\n\t\t});\n\t}\n\tif (token.spentAt !== null) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_SPENT',\n\t\t\t`${where}: the ${noun} was already used`,\n\t\t\t{ operation: where },\n\t\t);\n\t}\n\tif (token.expiresAt.getTime() <= now.getTime()) {\n\t\tthrow new TokenError('TOKEN_EXPIRED', `${where}: the ${noun} has expired`, {\n\t\t\toperation: where,\n\t\t});\n\t}\n}\n\n/** The refusal for a token whose user is gone, or of another type. */\nexport const unknownOneTime = (where: string, noun: OneTimeNoun) =>\n\tnew TokenError('TOKEN_UNKNOWN', `${where}: no such ${noun}`, {\n\t\toperation: where,\n\t});\n",
|
|
34
34
|
"/**\n * Spending a one-time token: once when it is redeemed, and once more when its\n * last attempt failed.\n */\n\nimport type { Context } from '../context';\nimport type { TokenKind, TokenRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport { type OneTimeNoun, refuseUnusable } from './refusals';\n\n/**\n * Spends a token, and refuses it when this call did not: the store answers it\n * **as it was before**, so exactly one call ever reads `spentAt: null`. A\n * lapsed token is spent all the same, so it cannot be retried.\n */\nexport async function spendOneTime(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n\twhere: string,\n\tnoun: OneTimeNoun,\n): Promise<TokenRecord> {\n\tconst now = context.clock.now();\n\tconst token = await context.store.tokens.consumeToken(\n\t\thashSecret(secret),\n\t\tkind,\n\t\tnow,\n\t);\n\trefuseUnusable(token, now, where, noun);\n\treturn token;\n}\n\n/**\n * Spends a token whose last attempt failed. Its answer is not read: a racing\n * call that spent it first changes nothing for this one, which is refused\n * for its code either way.\n */\nexport async function burnOneTime(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n): Promise<void> {\n\tawait context.store.tokens.consumeToken(\n\t\thashSecret(secret),\n\t\tkind,\n\t\tcontext.clock.now(),\n\t);\n}\n",
|
|
35
35
|
"/**\n * Issuing a one-time token — a link's, or a challenge carrying a code for a\n * person to type. The secret is given back once; the store holds its hash.\n */\n\nimport { randomInt } from 'node:crypto';\nimport type { Context } from '../context';\nimport type { TokenKind } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport { hashCode } from './codes';\n\ninterface OneTimeRequest {\n\treadonly kind: TokenKind;\n\treadonly userId: string;\n\treadonly address: string;\n\treadonly ttlMs: number;\n}\n\n/**\n * Issues a one-time token: 32 random bytes, given back once, and only their\n * hash stored.\n */\nexport async function issueOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\treturn insertOneTime(context, token, null);\n}\n\n/**\n * Issues a one-time token with a six-digit code for a person to type: the\n * token is the challenge, and only the code's hash is stored, keyed by it.\n */\nexport async function issueCode(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n): Promise<{\n\treadonly secret: string;\n\treadonly expiresAt: Date;\n\treadonly code: string;\n}> {\n\tconst code = String(randomInt(1_000_000)).padStart(6, '0');\n\treturn { ...(await insertOneTime(context, token, code)), code };\n}\n\nasync function insertOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n\tcode: string | null,\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\tconst now = context.clock.now();\n\tconst secret = mintSecret();\n\tconst expiresAt = new Date(now.getTime() + token.ttlMs);\n\n\tawait context.store.tokens.insertToken({\n\t\ttokenHash: hashSecret(secret),\n\t\tkind: token.kind,\n\t\tuserId: token.userId,\n\t\taddress: token.address,\n\t\tcodeHash: code === null ? null : hashCode(secret, code),\n\t\tattempts: 0,\n\t\texpiresAt,\n\t\tspentAt: null,\n\t\tcreatedAt: now,\n\t});\n\treturn { secret, expiresAt };\n}\n",
|
|
36
|
-
"import type { Id } from '../ids/id';\nimport type { ResolvedType } from './config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tpasswordMatches,\n} from './context';\nimport { burnOneTime } from './one-time';\nimport type { UserRecord } from './port/types';\nimport type { SignInResult } from './types';\n\n/**\n * What writing a password ends besides
|
|
36
|
+
"import type { Id } from '../ids/id';\nimport type { ResolvedType } from './config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tpasswordMatches,\n} from './context';\nimport { burnOneTime } from './one-time';\nimport type { UserRecord } from './port/types';\nimport type { SignInResult } from './types';\n\n/**\n * What writing a password ends besides. A reset, a change and a set each call\n * it **after** the write, and a failure here throws — it is never ignored:\n *\n * - The user's reset links still unspent. A link answers a request to\n * replace the password; once it is replaced, an older link would replace\n * it again, without knowing the new one.\n * - Every second-factor challenge still open, so a sign-in started with the\n * old password cannot be finished — the other half of\n * {@link heldByPassword}, which reads **after** it issued.\n *\n * Both spends are attempted even when one fails, so a store failing one kind\n * still spends the other; the first failure is then thrown.\n *\n * After the write, not before: a link issued while the password is written\n * is spent too, where one issued between an earlier spend and the write\n * would survive. So an outage here leaves the password written and the\n * older links live, and the caller is told, with `STORE_FAILED`; the next\n * `resetPassword.request` spends them. Sign-in codes and step-ups are left\n * alone: the password proves neither, and a step-up belongs to a session,\n * which a reset revokes.\n */\nexport async function endWhatThePasswordOpened(\n\tcontext: Context,\n\tuserId: Id,\n): Promise<void> {\n\tconst now = context.clock.now();\n\tconst spent = await Promise.allSettled(\n\t\t(['resetPassword', 'secondFactor'] as const).map((kind) =>\n\t\t\tcontext.store.tokens.spendUserTokens(userId, kind, now),\n\t\t),\n\t);\n\tconst failed = spent.find(\n\t\t(result): result is PromiseRejectedResult => result.status === 'rejected',\n\t);\n\tif (failed !== undefined) throw failed.reason;\n}\n\n/**\n * Whether the password a sign-in verified is still the user's, once the\n * sign-in answered. A password written meanwhile ends the sign-in: its\n * session is revoked, or its challenge spent, and `false` is answered.\n *\n * A password writer writes, then spends the challenges waiting; a sign-in\n * issues, then reads here. Whichever order they interleave in, one of the two\n * sees the other. A hash that changed with the same password — a concurrent\n * sign-in rehashing it — is not a change: the password is compared again.\n */\nexport async function heldByPassword(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tverified: UserRecord,\n\tpassword: string,\n\tresult: SignInResult<AnyUser>,\n\twhere: string,\n): Promise<boolean> {\n\tconst now = await findRecord(context, verified.id, type.name);\n\tconst kept =\n\t\tnow !== null &&\n\t\tnow.password !== null &&\n\t\t(now.password.hash === verified.password?.hash ||\n\t\t\t(await passwordMatches(context, now, password, where)));\n\tif (kept) return true;\n\n\tif (result.status === 'signedIn') {\n\t\tawait context.store.sessions.revokeSession(\n\t\t\tresult.session.id,\n\t\t\tcontext.clock.now(),\n\t\t);\n\t} else {\n\t\tawait burnOneTime(context, result.challenge, 'secondFactor');\n\t}\n\treturn false;\n}\n",
|
|
37
37
|
"/**\n * The token an e-mail flow sends and redeems: issued for the user's current\n * e-mail, and refused on redemption when that e-mail is not the one it was\n * sent to any more.\n */\n\nimport { NotFoundError } from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport { type Context, emailOf, findRecord } from '../context';\nimport {\n\tissueOneTime,\n\trefuseStale,\n\tspendOneTime,\n\tunknownOneTime,\n} from '../one-time';\nimport type { TokenKind, TokenRecord, UserRecord } from '../port/types';\nimport type { IssuedToken } from '../types';\n\n/**\n * Spends a token and says why it cannot be used, when it cannot. A user\n * gone since, or of another type, is as good as no token; a token sent to\n * an e-mail the user no longer has is stale.\n */\nexport async function redeemEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tkind: TokenKind,\n\tsecret: string,\n\twhere: string,\n): Promise<{ token: TokenRecord; user: UserRecord }> {\n\tconst token = await spendOneTime(context, secret, kind, where, 'token');\n\tconst user = await findRecord(context, token.userId, type.name);\n\tif (user === null) throw unknownOneTime(where, 'token');\n\n\trefuseStale(type, user, token, where, 'token');\n\treturn { token, user };\n}\n\n/** Issues a one-time token for the user's current e-mail. */\nexport async function issueEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tkind: 'verifyEmail' | 'resetPassword',\n\tuser: UserRecord,\n\twhere: string,\n): Promise<IssuedToken> {\n\tconst email = emailOf(type, user.fields);\n\tif (email === null) {\n\t\tthrow new NotFoundError(`${where}: the user has no e-mail`, {\n\t\t\tuserId: user.id,\n\t\t\tuserType: type.name,\n\t\t\toperation: where,\n\t\t});\n\t}\n\n\tconst { secret, expiresAt } = await issueOneTime(context, {\n\t\tkind,\n\t\tuserId: user.id,\n\t\taddress: email,\n\t\tttlMs: context.config.tokenTtlMs[kind],\n\t});\n\treturn { token: secret, email, expiresAt };\n}\n",
|
|
38
|
-
"/**\n * Resetting a password: send a token to the holder of an e-mail, then redeem\n * it to set the password — which proves the e-mail, and signs the user out\n * everywhere.\n */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tcheckPassword,\n\tholderOfEmail,\n\tpasswordRule,\n\trequireHasher,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { refuseStale } from '../one-time';\nimport {
|
|
38
|
+
"/**\n * Resetting a password: send a token to the holder of an e-mail, then redeem\n * it to set the password — which proves the e-mail, and signs the user out\n * everywhere.\n */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tcheckPassword,\n\tholderOfEmail,\n\tpasswordRule,\n\trequireHasher,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { refuseStale } from '../one-time';\nimport { endWhatThePasswordOpened } from '../password-written';\nimport { hashSecret } from '../secrets';\nimport type { ResetPasswordApi } from '../types';\nimport { issueEmailToken, redeemEmailToken } from './email-token';\n\ntype ResetPassword = ResetPasswordApi<AnyUser>['resetPassword'];\n\n/**\n * `resetPassword` of one user type: `request` a token for the holder of an\n * e-mail, then `confirm` it with a new password.\n */\nexport function resetPasswordFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): ResetPassword {\n\treturn {\n\t\tasync request(email) {\n\t\t\tconst where = at('resetPassword.request');\n\t\t\tpasswordRule(type, where);\n\t\t\tconst record = await holderOfEmail(context, type, String(email));\n\t\t\tif (record === null) return null;\n\n\t\t\tconst issued = await issueEmailToken(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\t'resetPassword',\n\t\t\t\trecord,\n\t\t\t\twhere,\n\t\t\t);\n\t\t\t// One live link per user: the ones sent before stop working.\n\t\t\t// Issued first, spent after, as for a sign-in code, so requests\n\t\t\t// that race leave at most one live — never one each.\n\t\t\tawait context.store.tokens.spendUserTokens(\n\t\t\t\trecord.id,\n\t\t\t\t'resetPassword',\n\t\t\t\tcontext.clock.now(),\n\t\t\t\thashSecret(issued.token),\n\t\t\t);\n\t\t\treturn { ...issued, user: toUser(record) };\n\t\t},\n\n\t\tasync confirm(secret, password) {\n\t\t\treturn confirmReset(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\tsecret,\n\t\t\t\tpassword,\n\t\t\t\tat('resetPassword.confirm'),\n\t\t\t);\n\t\t},\n\t};\n}\n\n/** Redeems a reset token: sets the password, proves the e-mail, signs out everywhere. */\nasync function confirmReset(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tsecret: string,\n\tpassword: string,\n\twhere: string,\n): Promise<AnyUser> {\n\tpasswordRule(type, where);\n\t// Checked before the token is spent: a password refused for its\n\t// length must not cost the visitor their link.\n\tcheckPassword(type, password, where);\n\tconst hash = await requireHasher(context, where).hash(password);\n\n\tconst { token, user } = await redeemEmailToken(\n\t\tcontext,\n\t\ttype,\n\t\t'resetPassword',\n\t\tsecret,\n\t\twhere,\n\t);\n\tlet newlyVerified = false;\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser.id,\n\t\ttype,\n\t\tundefined,\n\t\twhere,\n\t\t(record, now) => {\n\t\t\t// Checked again on the record written, as for verifyEmail.\n\t\t\trefuseStale(type, record, token, where, 'token');\n\t\t\tnewlyVerified = record.emailVerifiedAt === null;\n\t\t\treturn {\n\t\t\t\tpassword: { hash, updatedAt: now },\n\t\t\t\t// The link reached the inbox: that proves the e-mail.\n\t\t\t\t...(record.emailVerifiedAt === null ? { emailVerifiedAt: now } : {}),\n\t\t\t};\n\t\t},\n\t);\n\ttry {\n\t\t// Whoever had the old password is signed out, a sign-in they\n\t\t// left waiting on its second factor cannot be finished, and no\n\t\t// other link replaces the password again — before the listener\n\t\t// runs, however long it takes.\n\t\tawait context.store.sessions.revokeUserSessions(\n\t\t\twritten.id,\n\t\t\tcontext.clock.now(),\n\t\t);\n\t\tawait endWhatThePasswordOpened(context, written.id);\n\t} finally {\n\t\t// Reported even when an outage interrupts the steps above:\n\t\t// the link is spent, so a retry is refused and could not.\n\t\tawait emit(context, 'user.passwordReset', written, written.updatedAt);\n\t\tif (newlyVerified) {\n\t\t\tawait emit(context, 'user.emailVerified', written, written.updatedAt);\n\t\t}\n\t}\n\treturn toUser(written);\n}\n",
|
|
39
39
|
"/**\n * Verifying an e-mail: send a token to it, then redeem the token to mark the\n * address verified.\n */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { refuseStale } from '../one-time';\nimport type { VerifyEmailApi } from '../types';\nimport { issueEmailToken, redeemEmailToken } from './email-token';\n\n/** `verifyEmail` of one user type: `send` a token to its e-mail, then `confirm` it. */\nexport function verifyEmailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): VerifyEmailApi<AnyUser>['verifyEmail'] {\n\treturn {\n\t\tasync send(user) {\n\t\t\tconst where = at('verifyEmail.send');\n\t\t\tconst record = await getRecord(context, idOf(user), type.name, where);\n\t\t\treturn issueEmailToken(context, type, 'verifyEmail', record, where);\n\t\t},\n\n\t\tasync confirm(secret) {\n\t\t\tconst where = at('verifyEmail.confirm');\n\t\t\tconst { token, user } = await redeemEmailToken(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\t'verifyEmail',\n\t\t\t\tsecret,\n\t\t\t\twhere,\n\t\t\t);\n\t\t\tlet newlyVerified = false;\n\t\t\tconst written = await writeUser(\n\t\t\t\tcontext,\n\t\t\t\tuser.id,\n\t\t\t\ttype,\n\t\t\t\tundefined,\n\t\t\t\twhere,\n\t\t\t\t(record, now) => {\n\t\t\t\t\t// Checked again on the record written: an e-mail changed\n\t\t\t\t\t// since the read above is not the one the link proved.\n\t\t\t\t\trefuseStale(type, record, token, where, 'token');\n\t\t\t\t\tnewlyVerified = record.emailVerifiedAt === null;\n\t\t\t\t\treturn { emailVerifiedAt: now };\n\t\t\t\t},\n\t\t\t);\n\t\t\tif (newlyVerified) {\n\t\t\t\tawait emit(context, 'user.emailVerified', written, written.updatedAt);\n\t\t\t}\n\t\t\treturn toUser(written);\n\t\t},\n\t};\n}\n",
|
|
40
40
|
"/** The e-mail flows of one user type, assembled from the files beside this one. */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport type { AnyUser, Context } from '../context';\nimport type { ResetPasswordApi, VerifyEmailApi } from '../types';\nimport { resetPasswordFlows } from './reset-password';\nimport { verifyEmailFlows } from './verify-email';\n\n/**\n * The e-mail flows: send a one-time token by e-mail, then confirm it —\n * verifying the address, or resetting the password. Both confirm the same\n * way: spend the token, read the user, and check the address again on the\n * very record the write replaces.\n */\nexport function emailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): VerifyEmailApi<AnyUser> & ResetPasswordApi<AnyUser> {\n\treturn {\n\t\tverifyEmail: verifyEmailFlows(context, type, at),\n\t\tresetPassword: resetPasswordFlows(context, type, at),\n\t};\n}\n",
|
|
41
41
|
"import { createHmac, randomBytes } from 'node:crypto';\n\n/**\n * RFC 6238 as every authenticator app reads it: HMAC-SHA-1, six digits, a\n * thirty-second step. None of the three is configurable, on purpose — an app\n * that ignores `algorithm` or `digits` in the URI, and several do, would show\n * a code the server never accepts.\n */\nexport const TOTP = { digits: 6, stepMs: 30_000, drift: 1 } as const;\n\nconst BASE32 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';\n\n/** A fresh TOTP secret: 20 random bytes — SHA-1's block of key — in base32. */\nexport function mintTotpSecret(): string {\n\treturn toBase32(randomBytes(20));\n}\n\n/** RFC 4648 base32, without padding: what an `otpauth://` URI carries. */\nexport function toBase32(bytes: Uint8Array): string {\n\tlet bits = 0;\n\tlet value = 0;\n\tlet out = '';\n\tfor (const byte of bytes) {\n\t\tvalue = (value << 8) | byte;\n\t\tbits += 8;\n\t\twhile (bits >= 5) {\n\t\t\tout += BASE32[(value >>> (bits - 5)) & 31];\n\t\t\tbits -= 5;\n\t\t}\n\t}\n\tif (bits > 0) out += BASE32[(value << (5 - bits)) & 31];\n\treturn out;\n}\n\nexport function fromBase32(text: string): Buffer {\n\tlet bits = 0;\n\tlet value = 0;\n\tconst out: number[] = [];\n\tfor (const char of text) {\n\t\tconst index = BASE32.indexOf(char);\n\t\tif (index === -1) throw new TypeError('totp: the secret is not base32');\n\t\tvalue = (value << 5) | index;\n\t\tbits += 5;\n\t\tif (bits >= 8) {\n\t\t\tout.push((value >>> (bits - 8)) & 255);\n\t\t\tbits -= 8;\n\t\t}\n\t}\n\treturn Buffer.from(out);\n}\n\n/** The step a moment falls in: whole thirty-second periods since the epoch. */\nexport const stepAt = (now: Date): number =>\n\tMath.floor(now.getTime() / TOTP.stepMs);\n\n/** RFC 4226's code for one counter value, zero-padded to six digits. */\nexport function codeAt(secret: Buffer, step: number): string {\n\tconst counter = Buffer.alloc(8);\n\tcounter.writeBigUInt64BE(BigInt(step));\n\tconst digest = createHmac('sha1', secret).update(counter).digest();\n\tconst offset = (digest[19] as number) & 0x0f;\n\tconst binary = digest.readUInt32BE(offset) & 0x7fffffff;\n\treturn String(binary % 10 ** TOTP.digits).padStart(TOTP.digits, '0');\n}\n\n/**\n * The step this code was shown at — the current one, or one either side for a\n * clock that drifted — or `null`.\n *\n * **Only a step after `lastStep` counts**, so a code is used once: the caller\n * writes the step it got back, and a replay of the same code finds nothing.\n * Every candidate is computed, so the time taken does not say which matched.\n */\nexport function matchStep(\n\tsecret: Buffer,\n\tcode: string,\n\tnow: Date,\n\tlastStep: number | null,\n): number | null {\n\tif (!/^\\d{6}$/.test(code)) return null;\n\tconst current = stepAt(now);\n\tlet matched: number | null = null;\n\tfor (let step = current - TOTP.drift; step <= current + TOTP.drift; step++) {\n\t\tconst fresh = lastStep === null || step > lastStep;\n\t\tif (equalCodes(codeAt(secret, step), code) && fresh && matched === null) {\n\t\t\tmatched = step;\n\t\t}\n\t}\n\treturn matched;\n}\n\n/** Compares two six-digit strings without stopping at the first difference. */\nfunction equalCodes(a: string, b: string): boolean {\n\tlet difference = a.length ^ b.length;\n\tfor (let i = 0; i < a.length; i++) {\n\t\tdifference |= a.charCodeAt(i) ^ b.charCodeAt(i);\n\t}\n\treturn difference === 0;\n}\n\n/**\n * The `otpauth://` URI an authenticator app reads from a QR code. The label is\n * `issuer:account`, each part percent-encoded, and `issuer` is repeated as a\n * parameter, as Google Authenticator requires.\n */\nexport function otpauthUri(\n\tissuer: string,\n\taccount: string,\n\tsecret: string,\n): string {\n\tconst label = `${encodeURIComponent(issuer)}:${encodeURIComponent(account)}`;\n\tconst query = new URLSearchParams({\n\t\tsecret,\n\t\tissuer,\n\t\talgorithm: 'SHA1',\n\t\tdigits: String(TOTP.digits),\n\t\tperiod: String(TOTP.stepMs / 1000),\n\t});\n\treturn `otpauth://totp/${label}?${query}`;\n}\n",
|
|
@@ -59,10 +59,10 @@
|
|
|
59
59
|
"/**\n * Issuing a step-up: a challenge for the user, with a code to e-mail, or to\n * confirm with their app when their second factor is active.\n */\n\nimport { NotFoundError, UserInactiveError } from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\temailOf,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n} from '../context';\nimport { issueCode, issueOneTime } from '../one-time';\nimport type { UserRecord } from '../port/types';\nimport { isActive, requireSettings } from '../second-factor/factor';\nimport { hashSecret } from '../secrets';\nimport type { StepUpByApp, StepUpByEmail, UserRef } from '../types';\n\n/** What `stepUp.request` answers, whatever the type's configuration. */\nexport type IssuedStepUp = StepUpByEmail<AnyUser> | StepUpByApp<AnyUser>;\n\n/** Issues a step-up for the user, and spends every other they had. */\nexport async function requestStepUp(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n\twhere: string,\n): Promise<IssuedStepUp> {\n\tconst record = await getRecord(context, idOf(user), type.name, where);\n\tif (!record.active) {\n\t\tthrow new UserInactiveError(`${where}: the user is inactive`, {\n\t\t\tuserId: record.id,\n\t\t\tuserType: type.name,\n\t\t});\n\t}\n\n\tconst issued = isActive(record.secondFactor)\n\t\t? await byApp(context, record, where)\n\t\t: await byEmail(context, type, record, where);\n\t// One live step-up per user, as for a sign-in code: issued first, the\n\t// others spent after, so requests that race leave at most one.\n\tawait context.store.tokens.spendUserTokens(\n\t\trecord.id,\n\t\t'stepUp',\n\t\tcontext.clock.now(),\n\t\thashSecret(issued.challenge),\n\t);\n\treturn issued;\n}\n\n/** A challenge the user's app confirms: nothing is sent, so there is no address. */\nasync function byApp(\n\tcontext: Context,\n\trecord: UserRecord,\n\twhere: string,\n): Promise<StepUpByApp<AnyUser>> {\n\trequireSettings(context, where, \"the user's second factor is active\");\n\tconst { secret, expiresAt } = await issueOneTime(context, {\n\t\tkind: 'stepUp',\n\t\tuserId: record.id,\n\t\taddress: '',\n\t\tttlMs: context.config.tokenTtlMs.stepUp,\n\t});\n\treturn {\n\t\tvia: 'secondFactor',\n\t\tchallenge: secret,\n\t\texpiresAt,\n\t\tuser: toUser(record),\n\t};\n}\n\n/** A challenge with a six-digit code, for the user's current e-mail. */\nasync function byEmail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\trecord: UserRecord,\n\twhere: string,\n): Promise<StepUpByEmail<AnyUser>> {\n\tconst email = emailOf(type, record.fields);\n\tif (email === null) {\n\t\tthrow new NotFoundError(`${where}: the user has no e-mail`, {\n\t\t\tuserId: record.id,\n\t\t\tuserType: type.name,\n\t\t\toperation: where,\n\t\t});\n\t}\n\tconst { secret, code, expiresAt } = await issueCode(context, {\n\t\tkind: 'stepUp',\n\t\tuserId: record.id,\n\t\taddress: email,\n\t\tttlMs: context.config.tokenTtlMs.stepUp,\n\t});\n\treturn {\n\t\tvia: 'email',\n\t\tcode,\n\t\tchallenge: secret,\n\t\temail,\n\t\texpiresAt,\n\t\tuser: toUser(record),\n\t};\n}\n",
|
|
60
60
|
"/**\n * A step-up: a signed-in user proving again who they are before a sensitive\n * action, with a code sent by e-mail — or from their app, when their second\n * factor is active — and **the session they are on stamped as freshly\n * confirmed**. It opens no session: its `authenticatedAt` moves, which is\n * what a route checks with `assertFresh`.\n *\n * The same six digits, challenge and five attempts as a sign-in code, on a\n * token kind of its own: a sign-in code never confirms an action, nor an\n * action's code signs anyone in.\n */\n\nimport { TokenError } from '../../errors/janus-error';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport type { AnyUser, Context } from '../context';\nimport { countCodeAttempt } from '../one-time';\nimport { toSession } from '../sessions/open-session';\nimport type { RequestLike, Session, StepUpApi } from '../types';\nimport { checkAppCode, checkEmailedCode } from './codes';\nimport { openStepUp } from './open';\nimport { type IssuedStepUp, requestStepUp } from './request';\n\n/** The step-up of one user type. */\nexport function stepUpFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): StepUpApi<AnyUser, IssuedStepUp>['stepUp'] {\n\treturn {\n\t\tasync request(user) {\n\t\t\treturn requestStepUp(context, type, user, at('stepUp.request'));\n\t\t},\n\n\t\tasync confirm(request, challenge, code) {\n\t\t\treturn confirmStepUp(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\trequest,\n\t\t\t\tString(challenge),\n\t\t\t\tString(code),\n\t\t\t\tat('stepUp.confirm'),\n\t\t\t);\n\t\t},\n\t};\n}\n\n/**\n * Counts the attempt first — a guess that fails for any reason has still\n * cost one — then reads the session and the user, checks the code, and\n * stamps the session.\n */\nasync function confirmStepUp(\n\tcontext: Context,\n\ttype: ResolvedType,\n\trequest: RequestLike,\n\tsecret: string,\n\tcode: string,\n\twhere: string,\n): Promise<Session> {\n\tconst { token, attemptsLeft } = await countCodeAttempt(\n\t\tcontext,\n\t\tsecret,\n\t\t'stepUp',\n\t\twhere,\n\t\ttype.name,\n\t);\n\tconst { session, user } = await openStepUp(\n\t\tcontext,\n\t\ttype,\n\t\trequest,\n\t\ttoken,\n\t\tsecret,\n\t\twhere,\n\t);\n\n\tconst counted = { token, secret, attemptsLeft };\n\t// No code hash: the challenge was issued for the user's app.\n\tif (token.codeHash === null) {\n\t\tawait checkAppCode(context, type, user, counted, code, where);\n\t} else {\n\t\tawait checkEmailedCode(context, type, user, counted, code, where);\n\t}\n\n\tconst confirmed = await context.store.sessions.reauthenticateSession(\n\t\tsession.id,\n\t\tcontext.clock.now(),\n\t);\n\t// Revoked while the code was checked: signed out, and never brought back.\n\tif (confirmed === null) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_UNKNOWN',\n\t\t\t`${where}: the session was signed out while the code was checked`,\n\t\t\t{ operation: where },\n\t\t);\n\t}\n\treturn toSession(confirmed);\n}\n",
|
|
61
61
|
"import { isStorable } from '../../stores/storable';\nimport type { ResolvedType } from '../config';\nimport type { Context } from '../context';\nimport type { UserRecord } from '../port/types';\n\n/**\n * The user holding this normalised login, or `null`. A login no store can\n * keep is nobody's: answered as an absence, without asking a store that\n * would fail on it.\n */\nexport const byLogin = async (\n\tcontext: Context,\n\ttype: ResolvedType,\n\tlogin: string,\n): Promise<UserRecord | null> =>\n\tisStorable(login)\n\t\t? context.store.users.findUserByLogin(type.name, login)\n\t\t: null;\n",
|
|
62
|
-
"import { CredentialError } from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype Context,\n\tcheckPassword,\n\tpasswordMatches,\n\tpasswordRule,\n\trequireHasher,\n\twriteUser,\n} from '../context';\nimport {
|
|
62
|
+
"import { CredentialError } from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype Context,\n\tcheckPassword,\n\tpasswordMatches,\n\tpasswordRule,\n\trequireHasher,\n\twriteUser,\n} from '../context';\nimport { endWhatThePasswordOpened } from '../password-written';\nimport type { UserRecord } from '../port/types';\nimport type { UserRef, WriteOptions } from '../types';\n\n/**\n * Replaces the password after checking the current one, in the write that\n * replaces it — so the check is made on the very record the write replaces.\n */\nexport async function changePassword(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n\tchange: { readonly current: string; readonly next: string },\n\toptions: WriteOptions | undefined,\n\twhere: string,\n): Promise<UserRecord> {\n\tpasswordRule(type, where);\n\tcheckPassword(type, change?.next, where);\n\tconst hasher = requireHasher(context, where);\n\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser,\n\t\ttype,\n\t\toptions,\n\t\twhere,\n\t\tasync (record, now) => {\n\t\t\tif (\n\t\t\t\trecord.password === null ||\n\t\t\t\t!(await passwordMatches(context, record, change.current, where))\n\t\t\t) {\n\t\t\t\tthrow new CredentialError(\n\t\t\t\t\t'CREDENTIALS_INVALID',\n\t\t\t\t\t`${where}: the current password does not match`,\n\t\t\t\t\t{\n\t\t\t\t\t\treason: record.password === null ? 'noPassword' : 'wrongPassword',\n\t\t\t\t\t\tuserId: record.id,\n\t\t\t\t\t\tuserType: type.name,\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tpassword: {\n\t\t\t\t\thash: await hasher.hash(change.next),\n\t\t\t\t\tupdatedAt: now,\n\t\t\t\t},\n\t\t\t};\n\t\t},\n\t);\n\tawait endWhatThePasswordOpened(context, written.id);\n\treturn written;\n}\n",
|
|
63
63
|
"import { mintId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype Context,\n\tcheckPassword,\n\tloginsOf,\n\trequireHasher,\n\tvalidateFields,\n} from '../context';\nimport { emit } from '../events';\nimport type { UserRecord } from '../port/types';\nimport type { Input } from './flow-types';\n\n/** Validates, hashes, writes once. What `create` and `signUp` share. */\nexport async function insert(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tinput: Input,\n\twhere: string,\n): Promise<UserRecord> {\n\tconst { store, clock } = context;\n\tconst { password, active, ...rest } = input ?? {};\n\tconst now = clock.now();\n\tconst fields = await validateFields(type, rest, where);\n\n\tlet hash: UserRecord['password'] = null;\n\tif (password !== undefined) {\n\t\tcheckPassword(type, password as string, where);\n\t\thash = {\n\t\t\thash: await requireHasher(context, where).hash(password as string),\n\t\t\tupdatedAt: now,\n\t\t};\n\t}\n\n\tconst inserted = await store.users.insertUser({\n\t\tid: mintId(now.getTime()),\n\t\ttype: type.name,\n\t\tschemaVersion: type.schemaVersion,\n\t\tactive: active === undefined ? true : active === true,\n\t\tfields,\n\t\tlogins: loginsOf(type, fields, where),\n\t\tpassword: hash,\n\t\tsecondFactor: null,\n\t\temailVerifiedAt: null,\n\t\tversion: 0,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t});\n\t// Once the user exists: an outage opening signUp's session later still\n\t// leaves a user created, and reported.\n\tawait emit(context, 'user.created', inserted, inserted.createdAt);\n\treturn inserted;\n}\n",
|
|
64
64
|
"import {\n\tCredentialError,\n\ttype CredentialRefusal,\n\tUserInactiveError,\n} from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tpasswordMatches,\n\tpasswordRule,\n\trehashed,\n\trequireHasher,\n} from '../context';\nimport { heldByPassword } from '../password-written';\nimport type { SignInResult } from '../types';\nimport { byLogin } from './by-login';\nimport type { Finish, Input } from './flow-types';\n\n/**\n * Checks the password and answers what `finish` answers for the user. One\n * refusal for an unknown login, no password and a wrong one; `USER_INACTIVE`\n * only once the password matched.\n */\nexport async function signIn(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tfinish: Finish,\n\tinput: Input,\n\twhere: string,\n): Promise<SignInResult<AnyUser>> {\n\tconst rule = passwordRule(type, where);\n\tconst hasher = requireHasher(context, where);\n\tconst login = input?.[rule.login];\n\tconst password = input?.password;\n\n\tconst record =\n\t\ttypeof login === 'string'\n\t\t\t? await byLogin(context, type, rule.normalize(login))\n\t\t\t: null;\n\tconst refuse = (reason: CredentialRefusal) =>\n\t\tnew CredentialError(\n\t\t\t'CREDENTIALS_INVALID',\n\t\t\t`${where}: the login and the password do not match`,\n\t\t\t{ reason, userType: type.name },\n\t\t);\n\n\tif (record === null || record.password === null) {\n\t\t// Compared all the same, so the response time does not say which\n\t\t// logins are registered. The store's own latency stays observable;\n\t\t// that limit is documented, not denied.\n\t\tawait hasher.verify(String(password), await context.dummyHash());\n\t\tthrow refuse(record === null ? 'unknownLogin' : 'noPassword');\n\t}\n\n\tif (!(await passwordMatches(context, record, String(password), where))) {\n\t\tthrow refuse('wrongPassword');\n\t}\n\t// Checked after the password, so an inactive account is only told to\n\t// somebody who knows its password.\n\tif (!record.active) {\n\t\tthrow new UserInactiveError(`${where}: the user is inactive`, {\n\t\t\tuserId: record.id,\n\t\t\tuserType: type.name,\n\t\t});\n\t}\n\n\tconst verified = await rehashed(context, record, String(password));\n\tconst result = await finish(verified, where);\n\t// A password written while this sign-in ran ends it: the password\n\t// verified above is no longer the user's.\n\tif (\n\t\t!(await heldByPassword(\n\t\t\tcontext,\n\t\t\ttype,\n\t\t\tverified,\n\t\t\tString(password),\n\t\t\tresult,\n\t\t\twhere,\n\t\t))\n\t) {\n\t\tthrow refuse('wrongPassword');\n\t}\n\treturn result;\n}\n",
|
|
65
|
-
"import type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tcheckPassword,\n\tpasswordRule,\n\trequireHasher,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport {
|
|
65
|
+
"import type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tcheckPassword,\n\tpasswordRule,\n\trequireHasher,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { endWhatThePasswordOpened } from '../password-written';\nimport { openSession } from '../sessions';\nimport type { PasswordApi, SignInResult } from '../types';\nimport { byLogin } from './by-login';\nimport { changePassword } from './change-password';\nimport type { Finish, Input } from './flow-types';\nimport { insert } from './insert';\nimport { signIn } from './sign-in';\n\n/**\n * The password flows of one user type: signing up and in, finding a user by\n * the login they sign in with, and setting or changing their password.\n */\nexport function passwordFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n\tfinish: Finish,\n): PasswordApi<AnyUser, Input, string, SignInResult<AnyUser>> {\n\treturn {\n\t\tasync signUp(input) {\n\t\t\tconst where = at('signUp');\n\t\t\tpasswordRule(type, where);\n\t\t\tif ((input as Input)?.password === undefined) {\n\t\t\t\tcheckPassword(type, undefined as unknown as string, where);\n\t\t\t}\n\t\t\tconst record = await insert(context, type, input as Input, where);\n\t\t\treturn openSession(context, type, record);\n\t\t},\n\n\t\tasync signIn(input) {\n\t\t\treturn signIn(context, type, finish, input as Input, at('signIn'));\n\t\t},\n\n\t\tasync findByLogin(login) {\n\t\t\tconst rule = passwordRule(type, at('findByLogin'));\n\t\t\tconst record = await byLogin(context, type, rule.normalize(login));\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync setPassword(user, password, options) {\n\t\t\tconst where = at('setPassword');\n\t\t\tpasswordRule(type, where);\n\t\t\tcheckPassword(type, password, where);\n\t\t\tconst hash = await requireHasher(context, where).hash(password);\n\n\t\t\tconst written = await writeUser(\n\t\t\t\tcontext,\n\t\t\t\tuser,\n\t\t\t\ttype,\n\t\t\t\toptions,\n\t\t\t\twhere,\n\t\t\t\t(_, now) => ({ password: { hash, updatedAt: now } }),\n\t\t\t);\n\t\t\tawait endWhatThePasswordOpened(context, written.id);\n\t\t\treturn toUser(written);\n\t\t},\n\n\t\tasync changePassword(user, change, options) {\n\t\t\tconst where = at('changePassword');\n\t\t\treturn toUser(\n\t\t\t\tawait changePassword(context, type, user, change, options, where),\n\t\t\t);\n\t\t},\n\t};\n}\n",
|
|
66
66
|
"import { isId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport { type Context, idOf } from '../context';\nimport { emit } from '../events';\nimport type { UserRef } from '../types';\n\n/**\n * Deletes the user, then every session, token and tuple naming them. `true`\n * when this call deleted them; a replay finds nobody, answers `false`, and\n * still deletes what was left.\n */\nexport async function deleteUser(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n): Promise<boolean> {\n\tconst { store, clock } = context;\n\tconst id = idOf(user);\n\tif (!isId(id)) return false;\n\n\t// Read first, so a staff API never deletes a patient: another type's\n\t// id is answered as nobody, and nothing of theirs is touched.\n\tconst record = await store.users.findUser(id);\n\tif (record !== null && record.type !== type.name) return false;\n\n\t// The user first: from then on nobody can sign in as them, and what\n\t// is left — sessions, tokens — is refused for a user who is gone. An\n\t// outage between the steps leaves only that inert remainder, and a\n\t// replay, finding no user, still deletes it.\n\tconst deletedAt = clock.now();\n\tconst deleted = record !== null && (await store.users.deleteUser(id));\n\ttry {\n\t\tawait store.sessions.deleteUserSessions(id);\n\t\tawait store.tokens.deleteUserTokens(id);\n\t\t// Last, and on a replay too: the tuples naming them.\n\t\tawait context.relations?.deleteEntity({ type: type.name, id });\n\t} finally {\n\t\t// Once, when this call deleted them — even when an outage\n\t\t// interrupts the steps above: a replay deletes nobody, so it\n\t\t// could not send it.\n\t\tif (deleted) {\n\t\t\tawait emit(context, 'user.deleted', { id, type: type.name }, deletedAt);\n\t\t}\n\t}\n\treturn deleted;\n}\n",
|
|
67
67
|
"import { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf, loginsOf, validateFields } from '../context';\nimport type { UserRecord } from '../port/types';\nimport type { Input } from './flow-types';\n\n/**\n * What `update` writes: the patch merged over the stored fields, the whole\n * result validated, and the logins derived again from it.\n */\nexport async function fieldsPatch(\n\ttype: ResolvedType,\n\trecord: UserRecord,\n\tpatch: Input,\n\twhere: string,\n) {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...record.fields, ...patch },\n\t\twhere,\n\t);\n\tconst before = emailOf(type, record.fields);\n\tconst after = emailOf(type, fields);\n\tconst emailChanged =\n\t\t(before === null ? null : normalizeEmail(before)) !==\n\t\t(after === null ? null : normalizeEmail(after));\n\n\treturn {\n\t\tfields,\n\t\tlogins: loginsOf(type, fields, where),\n\t\tschemaVersion: type.schemaVersion,\n\t\t// A new e-mail is an unproven one.\n\t\t...(emailChanged ? { emailVerifiedAt: null } : {}),\n\t};\n}\n",
|
|
68
68
|
"import { isId } from '../../ids/id';\nimport { invalidCursor, pageLimit } from '../../pagination/cursor-page';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tgetRecord,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport type { UserTypeApi } from '../types';\nimport { deleteUser } from './delete';\nimport { fieldsPatch } from './fields-patch';\nimport type { Input } from './flow-types';\nimport { insert } from './insert';\n\n/**\n * The flows every user type has, whatever its configuration: creating,\n * reading, listing, updating, deactivating and deleting its users.\n */\nexport function recordFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): UserTypeApi<AnyUser, Input> {\n\tconst { store } = context;\n\n\treturn {\n\t\tasync create(input) {\n\t\t\treturn toUser(await insert(context, type, input as Input, at('create')));\n\t\t},\n\n\t\tasync find(id) {\n\t\t\tconst record = await findRecord(context, id, type.name);\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync get(id) {\n\t\t\treturn toUser(await getRecord(context, id, type.name, at('get')));\n\t\t},\n\n\t\tasync list(page) {\n\t\t\tconst after = page?.after ?? null;\n\t\t\t// Never a silent first page: a caller paging a list would loop for\n\t\t\t// ever, and the loop would look like a slow query.\n\t\t\tif (after !== null && !isId(after)) {\n\t\t\t\tthrow invalidCursor(at('list'), after);\n\t\t\t}\n\n\t\t\tconst answer = await store.users.listUsers({\n\t\t\t\ttype: type.name,\n\t\t\t\tafter,\n\t\t\t\tlimit: pageLimit(page?.limit, at('list')),\n\t\t\t});\n\t\t\treturn { items: answer.items.map(toUser), nextCursor: answer.nextCursor };\n\t\t},\n\n\t\tasync update(user, patch, options) {\n\t\t\tconst where = at('update');\n\t\t\tconst written = await writeUser(\n\t\t\t\tcontext,\n\t\t\t\tuser,\n\t\t\t\ttype,\n\t\t\t\toptions,\n\t\t\t\twhere,\n\t\t\t\t(record) => fieldsPatch(type, record, patch as Input, where),\n\t\t\t);\n\t\t\treturn toUser(written);\n\t\t},\n\n\t\tasync setActive(user, active, options) {\n\t\t\treturn toUser(\n\t\t\t\tawait writeUser(context, user, type, options, at('setActive'), () => ({\n\t\t\t\t\tactive: active === true,\n\t\t\t\t})),\n\t\t\t);\n\t\t},\n\n\t\tasync delete(user) {\n\t\t\treturn deleteUser(context, type, user);\n\t\t},\n\t};\n}\n",
|
|
@@ -70,7 +70,7 @@
|
|
|
70
70
|
"import { guardRelations } from '../stores/guard';\nimport { systemClock } from '../time/clock';\nimport { type JanusConfig, resolveConfig } from './config';\nimport { createContext } from './context';\nimport { resolveEvents } from './events';\nimport { guardStores } from './outage';\nimport { assertStores } from './port/assert-stores';\nimport { sharedApi } from './sessions';\nimport type { Checked, Janus } from './types';\nimport { typeApi } from './users';\n\n/**\n * Wires the identities side over the stores the application opened. **Synchronous,\n * and does no I/O**: it connects to nothing.\n *\n * ```ts\n * // One user type\n * const auth = janus({\n * user: z.object({ email: z.email(), name: z.string() }),\n * password: { login: 'email' },\n * store: createMemoryStores(),\n * hasher: scryptHasher(),\n * });\n * const { user, token } = await auth.signUp({ email, name, password });\n *\n * // Several\n * const auth = janus({\n * users: {\n * patient: { schema: Patient, password: { login: 'email' } },\n * staff: { schema: Staff, password: { login: 'email' }, session: { lifespan: '8h' } },\n * },\n * store, hasher,\n * });\n * await auth.staff.signIn({ email, password });\n * const current = await auth.authenticate(request, { type: 'staff' });\n * ```\n *\n * The types refuse first, on the offending key: a login or an e-mail that\n * names no required string field, a schema declaring a field `janus` sets, a\n * user type named like a method. What follows at run time is the net for\n * JavaScript callers, each a bare `TypeError` because only wiring produces one:\n * a store slot missing or incomplete; a password type with no hasher — there\n * is no silent fallback; two hashers claiming the same prefix, which would make\n * verification depend on the order they were listed in.\n */\nexport function janus<const C extends JanusConfig>(\n\tconfig: C & Checked<C>,\n): Janus<C> {\n\tconst where = 'janus';\n\tconst resolved = resolveConfig(config, where);\n\tconst capabilities = assertStores(config.store, where);\n\n\tconst hasher = config.hasher ?? null;\n\tconst verifiers = [\n\t\t...(hasher === null ? [] : [hasher]),\n\t\t...(config.verifiers ?? []),\n\t];\n\tconst prefixes = new Set<string>();\n\tfor (const verifier of verifiers) {\n\t\tif (typeof verifier?.prefix !== 'string' || verifier.prefix === '') {\n\t\t\tthrow new TypeError(`${where}: every hasher needs a non-empty prefix`);\n\t\t}\n\t\tif (prefixes.has(verifier.prefix)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: two hashers claim the prefix \"${verifier.prefix}\" — which one verifies would depend on their order`,\n\t\t\t);\n\t\t}\n\t\tprefixes.add(verifier.prefix);\n\t}\n\n\tconst relations = config.relations ?? null;\n\tif (\n\t\trelations !== null &&\n\t\ttypeof (relations as { deleteEntity?: unknown }).deleteEntity !== 'function'\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: relations must be a relation store — relations.deleteEntity is missing`,\n\t\t);\n\t}\n\n\tconst context = createContext(\n\t\tresolved,\n\t\tguardStores(config.store),\n\t\trelations === null ? null : guardRelations(relations),\n\t\tcapabilities,\n\t\tconfig.clock ?? systemClock,\n\t\thasher,\n\t\tverifiers,\n\t\tresolveEvents(config.events, where),\n\t);\n\n\tconst shared = sharedApi(context);\n\tconst types = Object.fromEntries(\n\t\t[...resolved.types.values()].map((type) => [\n\t\t\ttype.name,\n\t\t\ttypeApi(context, type),\n\t\t]),\n\t);\n\n\t// The one cast at the boundary: every field was validated against its\n\t// type's schema before any of these answers was built.\n\tconst surface = resolved.single\n\t\t? { ...shared, ...types.user }\n\t\t: { ...shared, ...types };\n\treturn surface as unknown as Janus<C>;\n}\n",
|
|
71
71
|
"/**\n * `assertFresh`: whether a session proved who it is recently enough for a\n * sensitive action — signed in, or confirmed by a step-up, less than\n * `maxAge` ago.\n */\n\nimport { StepUpRequiredError } from '../../errors/janus-error';\nimport { type Clock, systemClock } from '../../time/clock';\nimport { type Duration, parseDuration } from '../../time/duration';\nimport type { Session } from '../types';\n\n/**\n * Refuses a session whose credentials were last presented `maxAge` ago or\n * more — at its sign-in, or since by `stepUp.confirm` — with\n * `STEP_UP_REQUIRED` (403): ask for a step-up, then run the action again. One\n * field of the session `authenticate` already answered, so no store is read.\n *\n * ```ts\n * const current = await auth.authenticate(request);\n * if (current === null) return new Response(null, { status: 401 });\n * assertFresh(current.session, '10m'); // STEP_UP_REQUIRED past ten minutes\n * ```\n *\n * Pass the `clock` given to `janus()` when it is not the system's. A\n * `maxAge` that is not a duration is a `TypeError`: it is written in the\n * code, never read from a request.\n */\nexport function assertFresh(\n\tsession: Pick<Session, 'authenticatedAt' | 'userId'>,\n\tmaxAge: Duration,\n\tclock: Clock = systemClock,\n): void {\n\tconst maxAgeMs = parseDuration(maxAge, 'assertFresh: maxAge');\n\tconst age = clock.now().getTime() - session.authenticatedAt.getTime();\n\tif (age >= maxAgeMs) {\n\t\tthrow new StepUpRequiredError(\n\t\t\t'assertFresh: the session proved who it is longer ago than maxAge — confirm with a step-up',\n\t\t\t{ userId: session.userId },\n\t\t);\n\t}\n}\n"
|
|
72
72
|
],
|
|
73
|
-
"mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,SAAS,YAAY,CAAC,SAEV;AAAA,EAClB,MAAM,OAAO,SAAS,QAAQ;AAAA,EAC9B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM,OAAO,IAAI;AAAA,IACtD,MAAM,IAAI,UACT,uFACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,SACF,KAAI,CAAC,OAAO;AAAA,MACjB,MAAM,OAAO,YAAY,EAAE;AAAA,MAC3B,MAAM,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,GAAG,CAAC;AAAA,MAChD,OAAO,GAAG,mBAAmB,gBAAgB,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ;AAAA;AAAA,SAExF,OAAM,CAAC,OAAO,MAAM;AAAA,MACzB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAIpC,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UACT,0EACD;AAAA,MACD;AAAA,MACA,SAAS,IAAI,GAAG,GAAG,MAAM,OAAO;AAAA,MAQhC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;AAAA,MAC1C,MAAM,SAAS,MAAM,OACpB,OACA,OAAO,KAAK,MAAM,QAAQ,GAC1B,OAAO,EAAE,GACT,OAAO,CAAC,GACR,OAAO,CAAC,GACR,SAAS,MACV;AAAA,MACA,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAAA,IAExC,WAAW,CAAC,MAAM;AAAA,MACjB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAEpC,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAC5B,SAAS,IAAI,GAAG,KAAK;AAAA,MACrB,OAAO,OAAO,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA;AAAA,EAEnD;AAAA;AAGD,IAAM,gBAAgB;AACtB,IAAM,cACL;AAED,SAAS,MAAM,CACd,OACA,MACA,IACA,GACA,GACA,SAAS,IACS;AAAA,EAGlB,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,IAIvC,OACC,OACA,MACA,QACA,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,MAAM,IAAI,EAAE,GACjE,CAAC,OAAO,QAAS,QAAQ,OAAO,KAAK,IAAI,QAAQ,GAAG,CACrD;AAAA,GACA;AAAA;AAWK,SAAS,SAAS,GAAmB;AAAA,EAG3C,MAAM,WACL,OAAO,QAAQ,cAAc,YAAY,IAAI;AAAA,EAE9C,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,IAAI,UACT,iGACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ;AAAA,IAC9C,QAAQ,CAAC,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAAA,IACpD,aAAa,CAAC,SAAS,CAAC,KAAK,WAAW,mBAAmB;AAAA,EAC5D;AAAA;AASD,IAAM,WAAW;AAAA,EAChB,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,UAAU;AACX;AACA,IAAM,sBAAsB;;ACjIrB,IAAM,cAAqB;AAAA,EACjC,KAAK,MAAM,IAAI;AAChB;AASO,SAAS,UAAU,CAAC,QAAuB,GAGhD;AAAA,EACD,IAAI,KAAK,iBAAiB,OAAO,MAAM,QAAQ,IAAI;AAAA,EAEnD,OAAO;AAAA,IACN,KAAK,MAAM,IAAI,KAAK,EAAE;AAAA,IACtB,SAAS,CAAC,OAAO;AAAA,MAChB,MAAM;AAAA;AAAA,IAEP,KAAK,CAAC,OAAO;AAAA,MACZ,KAAK,cAAc,OAAO,GAAG,QAAQ,IAAI;AAAA;AAAA,EAE3C;AAAA;;;ACzBD,IAAM,cAAc;AAAA,EACnB,MAAM,CAAC,UAAkB;AAAA,EACzB,WAAW,CAAC,UAAkB,MAAM,YAAY;AAAA,EAChD,eAAe,CAAC,UAAkB,MAAM,YAAY,EAAE,KAAK;AAAA,EAC3D,mBAAmB,CAAC,UACnB,MAAM,UAAU,MAAM,EAAE,YAAY,EAAE,KAAK;AAC7C;AAGO,IAAM,iBAAiB,YAAY;AAGnC,SAAS,UAAU,CACzB,MACA,OAC4B;AAAA,EAC5B,IAAI,OAAO,SAAS;AAAA,IAAY,OAAO;AAAA,EACvC,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,IAAI,GAAG;AAAA,IACjE,OAAO,YAAY;AAAA,EACpB;AAAA,EAEA,MAAM,IAAI,UACT,GAAG,uFACJ;AAAA;;ACpCM,IAAM,cAAc;AAMpB,IAAM,kBAAkB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGO,IAAM,iBAAiB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;;ACzBA,IAAM,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACJ;AAEA,IAAM,UAAU;AAcT,SAAS,aAAa,CAAC,OAAiB,OAAuB;AAAA,EACrE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,MAC1C,MAAM,IAAI,UACT,GAAG,sEACJ;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAEhC,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,IAAI,UACT,GAAG,WAAW,qGACf;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,OAAO,MAAM,EAAE;AAAA,EAC9B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,MAAM;AAAA,EAE1B,IAAI,MAAM,GAAG;AAAA,IACZ,MAAM,IAAI,UAAU,GAAG,sCAAsC;AAAA,EAC9D;AAAA,EAEA,OAAO;AAAA;;;AClDD,IAAM,OAAO;AAGb,SAAS,SAAS,CAAC,OAAgB,OAAuB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA,IACnD,MAAM,IAAI,UACT,GAAG,kEACJ;AAAA,EACD;AAAA,EACA,IAAK,gBAAsC,SAAS,KAAK,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,GAAG,WAAW,qCAAqC;AAAA,EACxE;AAAA,EACA,OAAO;AAAA;;;ACdR,IAAM,cAAc;AAEb,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,MAAM,OAAO,OAAO,QAAQ;AAAA,EAC5B,IAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,kHACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,OAAO,YAAY;AAAA,EACpC,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,IAAI,aAAa,UAAU,CAAC,QAAQ;AAAA,IACnC,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,OAAO,UAAU;AAAA,IACzB,MAAM,OAAO,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AAAA;;;AChCD,0DAA2C;AA6B3C,IAAM,YAAY;AAElB,IAAM,SAAS;AACf,IAAM,MAAM;AAGL,SAAS,aAAa,CAAC,MAAe,OAAuB;AAAA,EACnE,IAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAAA,IAC9C,MAAM,IAAI,UACT,GAAG,mEACJ;AAAA,EACD;AAAA,EACA,MAAM,UAAU,IAAI;AAAA,EACpB,WAAW,SAAS,MAA+B;AAAA,IAClD,MAAM,KAAK,OAAO;AAAA,IAClB,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,KAAK,EAAE,GAAG;AAAA,MAC/C,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,IACD;AAAA,IACA,IAAI,QAAQ,IAAI,EAAE,GAAG;AAAA,MACpB,MAAM,IAAI,UAAU,GAAG,gCAAgC,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,MAAM,MAAM;AAAA,IAClB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GAAG,GAAG;AAAA,MAC9C,MAAM,IAAI,UACT,GAAG,mBAAmB,uEACvB;AAAA,IACD;AAAA,IACA,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,EAAE,UAAW,KAAK,GAAkB,IAAI,MAAM,QAAQ;AAAA;AAIvD,SAAS,IAAI,CAAC,QAAgB,OAAe,SAAyB;AAAA,EAC5E,MAAM,MAAM,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,EAC3C,MAAM,KAAK,aAAY,EAAE;AAAA,EACzB,MAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AAAA,EACpD,OAAO,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,EAClC,MAAM,SAAS,OAAO,OAAO;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM;AAAA,IAC3B,OAAO,MAAM;AAAA,IACb,OAAO,WAAW;AAAA,EACnB,CAAC;AAAA,EACD,OAAO,MAAM,OAAO,YAAY,GAAG,SAAS,WAAW,KAAK,OAAO,SAAS,WAAW;AAAA;AAUjF,SAAS,MAAM,CACrB,QACA,QACA,SACA,OACqD;AAAA,EACrD,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,OAAO,SAAS,OAAO,IAAI,QAAQ;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK,QAAQ,IAAI,WAAW;AAAA,EAEjD,IACC,MAAM,WAAW,KACjB,YAAY,QACZ,UAAU,aACV,OAAO,aACP,MAAM,UAAU,WACf;AAAA,IACD,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,EACtE;AAAA,EACA,MAAM,MAAM,OAAO,KAAK,IAAI,KAAK;AAAA,EACjC,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,IAAI,UACT,GAAG,6CAA6C,gGACjD;AAAA,EACD;AAAA,EACA,IAAI;AAAA,IACH,MAAM,WAAW,iBAChB,eACA,KACA,OAAO,KAAK,IAAI,WAAW,GAC3B,EAAE,eAAe,UAAU,CAC5B;AAAA,IACA,SAAS,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,IACpC,SAAS,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;AAAA,IAC5D,MAAM,QAAQ,OAAO,OAAO;AAAA,MAC3B,SAAS,OAAO,MAAM,SAAS,GAAG,MAAM,SAAS,SAAS,CAAC;AAAA,MAC3D,SAAS,MAAM;AAAA,IAChB,CAAC,EAAE,SAAS,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,MAAM;AAAA,IACrB,OAAO,OAAO;AAAA,IACf,MAAM,IAAI,UACT,GAAG,iDAAiD,4FACpD,EAAE,MAAM,CACT;AAAA;AAAA;;;ACxHK,SAAS,mBAAmB,CAClC,QACA,OACiC;AAAA,EACjC,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,KAAK,GAAG;AAAA,EACd,IAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,KAAK,MAAM,IAAI;AAAA,IACtE,MAAM,IAAI,UACT,GAAG,0FACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,QAAQ,cAAc,OAAO,MAAM,GAAG,SAAS;AAAA,IAC/C,gBAAgB,cAAc,OAAO,aAAa,MAAM,GAAG,cAAc;AAAA,EAC1E;AAAA;;;ACZM,SAAS,WAAW,CAC1B,MACA,MACA,IACA,WACe;AAAA,EACf,IACC,OAAO,MAAM,WAAW,YACxB,KAAK,WAAW,QAChB,OAAO,KAAK,OAAO,cAAc,aAAa,YAC7C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,OAAO,0EACX;AAAA,EACD;AAAA,EAEA,MAAM,WACL,KAAK,aAAa,YAAY,OAAO,gBAAgB,KAAK,UAAU,EAAE;AAAA,EAEvE,MAAM,aAAa,KAAK,SAAS,cAAc;AAAA,EAE/C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO,UAAU,KAAK,SAAS,SAAS,GAAG,WAAW;AAAA,IACtD,YAAY,cACX,KAAK,SAAS,YAAY,MAC1B,GAAG,sBACJ;AAAA,IACA,cACC,eAAe,QACZ,OACA,cAAc,YAAY,GAAG,wBAAwB;AAAA,EAC1D;AAAA;AAGD,SAAS,eAAe,CACvB,UACA,IACwC;AAAA,EACxC,MAAM,YAAY,SAAS,aAAa;AAAA,EACxC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,yDACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,OAAO,UAAU,SAAS,OAAO,GAAG,oBAAoB;AAAA,IACxD,WAAW,WACV,SAAS,aAAa,iBACtB,GAAG,wBACJ;AAAA,IACA;AAAA,EACD;AAAA;;;AC7CM,SAAS,aAAa,CAC5B,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UAAU,GAAG,wCAAwC;AAAA,EAChE;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,WAAW,OAAO,UAAU;AAAA,EAClC,IAAI,YAAY,UAAU;AAAA,IACzB,MAAM,IAAI,UACT,GAAG,gGACJ;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ,aAAa,UAAU,QAAQ,QAAQ,GAAG,UAAU,KAAK;AAAA,EACvE,2BAA2B,QAAQ,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA,IACN,QAAQ,CAAC;AAAA,IACT;AAAA,IACA,YAAY,iBAAiB,QAAQ,KAAK;AAAA,IAC1C,QAAQ,cAAc,OAAO,UAAU,CAAC,GAAG,KAAK;AAAA,IAChD,cAAc,oBAAoB,OAAO,cAAc,KAAK;AAAA,EAC7D;AAAA;AAID,SAAS,SAAS,CACjB,QACA,UAC6B;AAAA,EAC7B,OAAO,WACJ,OAAO,QAAQ,OAAO,KAAiC,IACvD;AAAA,IACA;AAAA,MACC;AAAA,MACA;AAAA,WACK;AAAA,QACJ,QAAQ,OAAO;AAAA,MAChB;AAAA,IACD;AAAA,EACD;AAAA;AAGH,SAAS,YAAY,CACpB,SACA,UACA,OAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW,GAAG;AAAA,IACzB,MAAM,IAAI,UAAU,GAAG,oCAAoC;AAAA,EAC5D;AAAA,EAEA,MAAM,QAAQ,IAAI;AAAA,EAClB,YAAY,MAAM,SAAS,SAAS;AAAA,IACnC,MAAM,KAAK,WAAW,GAAG,gBAAgB,SAAS;AAAA,IAElD,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AAAA,MACrB,MAAM,IAAI,UACT,GAAG,yBAAyB,6EAC7B;AAAA,IACD;AAAA,IACA,IAAK,eAAqC,SAAS,IAAI,GAAG;AAAA,MACzD,MAAM,IAAI,UACT,GAAG,WAAW,uEACf;AAAA,IACD;AAAA,IACA,MAAM,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,WAAW,WAAW,MAAM,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGR,SAAS,0BAA0B,CAClC,QACA,OACA,OACO;AAAA,EACP,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI;AAAA,EACzE,IAAI,WAAW,OAAO,WAAW,WAAW;AAAA,IAC3C,MAAM,IAAI,UACT,GAAG,sJACJ;AAAA,EACD;AAAA;AAGD,SAAS,gBAAgB,CACxB,QACA,OAC+B;AAAA,EAC/B,OAAO;AAAA,IACN,aAAa,cACZ,OAAO,QAAQ,eAAe,OAC9B,GAAG,2BACJ;AAAA,IACA,eAAe,cACd,OAAO,QAAQ,iBAAiB,MAChC,GAAG,6BACJ;AAAA,IACA,YAAY,cACX,OAAO,QAAQ,cAAc,OAC7B,GAAG,0BACJ;AAAA,IACA,QAAQ,cACP,OAAO,QAAQ,UAAU,OACzB,GAAG,sBACJ;AAAA,EACD;AAAA;;ACnGM,SAAS,aAAa,CAC5B,QACA,OACA,WACA,cACA,OACA,QACA,WACA,SAAmC,MACzB;AAAA,EACV,IAAI,QAAgC;AAAA,EAEpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,MAAM;AAAA,MAChB,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UAAU,+CAA+C;AAAA,MACpE;AAAA,MACA,UAAU,OAAO,KAAK,eAAe,QAAO,GAAG;AAAA,MAC/C,OAAO;AAAA;AAAA,EAET;AAAA;;AC7CM,SAAS,OAAO,CAAC,MAAoB,QAAmC;AAAA,EAC9E,MAAM,QAAQ,OAAO,KAAK;AAAA,EAC1B,OAAO,OAAO,UAAU,WAAW,QAAQ;AAAA;AAQrC,SAAS,QAAQ,CACvB,MACA,QACA,OACW;AAAA,EACX,MAAM,SAAS,IAAI;AAAA,EAEnB,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,IAAI,OAAO,UAAU,UAAU;AAAA,MAC9B,MAAM,IAAI,UACT,0BAA0B,KAAK,SAAS,6CAA6C,KAAK,oDAC3F;AAAA,IACD;AAAA,IACA,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK;AAAA,IAIhD,IAAI,CAAC,WAAW,UAAU,GAAG;AAAA,MAC5B,MAAM,OAAO,CAAC,KAAK,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,4BAA4B,KAAK,KAAK,GAAG,MACvF;AAAA,QACC,QAAQ;AAAA,UACP,EAAE,MAAM,SAAS,8BAA8B,aAAa;AAAA,QAC7D;AAAA,QACA,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO,IAAI,UAAU;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,IAAI,UAAU;AAAA,IAAM,OAAO,IAAI,eAAe,KAAK,CAAC;AAAA,EAEpD,OAAO,CAAC,GAAG,MAAM;AAAA;AAQlB,eAAsB,aAAa,CAClC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,eAAe,KAAK;AAAA,EACnC,IAAI,CAAC,WAAW,MAAM;AAAA,IAAG,OAAO;AAAA,EAChC,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,MAAM;AAAA,EAC1E,MAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,MAAM,OAAO,MAAM;AAAA,EACjE,OAAO,SAAS,QAAQ,eAAe,IAAI,MAAM,SAAS,SAAS;AAAA;;ACtC7D,SAAS,WAAW,CAAC,QAAkC;AAAA,EAC7D,OAAO;AAAA,IACN,OAAO,WAAW,SAAS,OAAO,KAAK;AAAA,IACvC,UAAU,WAAW,YAAY,OAAO,QAAQ;AAAA,IAChD,QAAQ,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AAAA;AAUM,SAAS,QAAW,CAAC,OAAiB,QAA6B;AAAA,EACzE,IAAI,UAAU;AAAA,IAAM,MAAM,OAAO;AAAA,EACjC,OAAO;AAAA;AAaR,eAAsB,qBAAwB,CAC7C,OACoB;AAAA,EACpB,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAW,OAAO;AAAA,IACrE,MAAM;AAAA;AAAA;;;AC9DD,SAAS,YAAY,CAAC,MAAoB,OAAe;AAAA,EAC/D,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,4EACvB;AAAA,EACD;AAAA,EACA,OAAO,KAAK;AAAA;AAIN,SAAS,aAAa,CAC5B,MACA,UACA,OACO;AAAA,EACP,MAAM,YAAY,KAAK,UAAU,aAAa;AAAA,EAC9C,IAAI,OAAO,aAAa,YAAY,SAAS,SAAS,WAAW;AAAA,IAChE,MAAM,IAAI,iBACT,sBACA,GAAG,oDAAoD,wBACvD,EAAE,WAAW,UAAU,KAAK,KAAK,CAClC;AAAA,EACD;AAAA;AAIM,SAAS,aAAa,CAAC,SAAkB,OAA+B;AAAA,EAC9E,IAAI,QAAQ,WAAW,MAAM;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,yFACJ;AAAA,EACD;AAAA,EACA,OAAO,QAAQ;AAAA;AAOhB,eAAsB,eAAe,CACpC,SACA,QACA,UACA,OACmB;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,WAAW,QAAQ,UAAU,KAAK,CAAC,cACxC,OAAO,KAAK,WAAW,UAAU,MAAM,CACxC;AAAA,EACA,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,aAAa,aAAa,KAAK,OAAO,IAAI,IAAI,MAAM;AAAA,IAC1D,MAAM,IAAI,iBACT,oBACA,GAAG,+CAA+C,eAClD,EAAE,YAAY,QAAQ,OAAO,IAAI,UAAU,OAAO,KAAK,CACxD;AAAA,EACD;AAAA,EAEA,OAAO,SAAS,OAAO,UAAU,OAAO,IAAI;AAAA;AAY7C,eAAsB,QAAQ,CAC7B,SACA,QACA,UACsB;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW,QAAQ,WAAW;AAAA,IAAM,OAAO;AAAA,EAE/C,MAAM,QACL,CAAC,OAAO,KAAK,WAAW,OAAO,MAAM,KACrC,OAAO,cAAc,OAAO,IAAI,MAAM;AAAA,EACvC,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,MAAM,UAAU,MAAM,sBACrB,QAAQ,MAAM,MAAM,WACnB,OAAO,IACP;AAAA,IACC,WAAW,QAAQ,MAAM,IAAI;AAAA,IAE7B,UAAU;AAAA,MACT,MAAM,MAAM,OAAO,KAAK,QAAQ;AAAA,MAChC,WAAW,OAAO;AAAA,IACnB;AAAA,EACD,GACA,OAAO,OACR,CACD;AAAA,EACA,OAAO,WAAW;AAAA;;ACnGZ,SAAS,MAAM,CAAC,QAA6B;AAAA,EACnD,OAAO;AAAA,OACH,OAAO;AAAA,IACV,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,eAAe,OAAO,oBAAoB;AAAA,IAC1C,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO,aAAa;AAAA,IACjC,iBAAiB,OAAO,cAAc,eAAe;AAAA,IACrD,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACnB;AAAA;AAIM,IAAM,OAAO,CAAC,SACpB,OAAO,SAAS,WAAW,OAAO,KAAK;;;AChBxC,IAAM,WAAW,CAAC,OAAe,IAAY,SAC5C,IAAI,eACH,GAAG,aAAa,QAAQ,sBACxB,SAAS,OACN,EAAE,QAAQ,IAAI,WAAW,MAAM,IAC/B,EAAE,QAAQ,IAAI,UAAU,MAAM,WAAW,MAAM,CACnD;AAQD,eAAsB,UAAU,CAC/B,SACA,IACA,MAC6B;AAAA,EAC7B,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EACtB,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,SAAS,EAAE;AAAA,EACpD,OAAO,WAAW,SAAS,SAAS,QAAQ,OAAO,SAAS,QACzD,SACA;AAAA;AAIJ,eAAsB,SAAS,CAC9B,SACA,IACA,MACA,OACsB;AAAA,EACtB,OAAO,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,GAAG,MACpD,SAAS,OAAO,IAAI,IAAI,CACzB;AAAA;AASD,eAAsB,SAAS,CAC9B,SACA,MACA,MACA,SACA,OACA,SAIsB;AAAA,EACtB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,MAAM,YAAY,SAAS;AAAA,EAE3B,IAAI,cAAc,aAAa,cAAc,OAAO,SAAS;AAAA,IAC5D,MAAM,IAAI,eACT,WACA,GAAG,2BAA2B,oBAAoB,OAAO,WACzD;AAAA,MACC,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,eAAe,OAAO;AAAA,MACtB,WAAW;AAAA,IACZ,CACD;AAAA,EACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG;AAAA,EACvC,OAAO,QAAQ,MAAM,MAAM,WAC1B,OAAO,IACP,KAAK,OAAO,WAAW,IAAI,GAC3B,OAAO,OACR;AAAA;;AC7ED,eAAsB,cAAc,CACnC,MACA,OACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,KAAK,OAAO,aAAa,SAAS,KAAK;AAAA,EAE5D,MAAM,SACL,OAAO,WAAW,YACf,CAAC,IACD,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC9B,MAAM,gBAAgB,MAAM,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC;AAAA,IACvD,SAAS,MAAM;AAAA,EAChB,EAAE;AAAA,EAKL,IAAI,OAAO,WAAW,WAAW;AAAA,IAChC,MAAM,QAAQ,OAAO;AAAA,IACrB,WAAW,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,OAAO,OAAO,GAAG,GAAG;AAAA,QAC9B,OAAO,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACvE;AAAA,IACD;AAAA,IACA,aAAa,OAAO,CAAC,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,IAAI,OAAO,SAAS,GAAG;AAAA,IAItB,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,gBAAgB,OAAO,eAAe,OAAO,WAAW,IAAI,KAAK,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,EAAE,KAAK,IAAI,MACnL,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EACD;AAAA,EAEA,OAAO,iBAAkB,OAA8B,KAAK;AAAA;AAI7D,SAAS,YAAY,CACpB,OACA,MACA,QACO;AAAA,EACP,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,WAAW,KAAK;AAAA,MAAG,OAAO,KAAK,EAAE,MAAM,SAAS,WAAW,CAAC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,YAAY,OAAO,UAAU,MAAM,QAAQ,GAAG;AAAA,MAC7C,aAAa,OAAO,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,IAC7C;AAAA,IACA;AAAA,EACD;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAGjD,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,QACrB,OAAO,KAAK,EAAE,MAAM,SAAS,SAAS,aAAa,CAAC;AAAA,MACrD,EAAO;AAAA,QACN,aAAa,OAAO,CAAC,GAAG,MAAM,GAAG,GAAG,MAAM;AAAA;AAAA,IAE5C;AAAA,EACD;AAAA;AAOD,SAAS,cAAc,CAAC,MAAgD;AAAA,EACvE,MAAM,MAAM,KAAK,UAChB,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,WAAW,OAAO,CAChE;AAAA,EACA,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG;AAAA;AAG7C,SAAS,UAAU,CAClB,SACkB;AAAA,EAClB,MAAM,MAAM,OAAO,YAAY,WAAW,QAAQ,MAAM;AAAA,EACxD,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AAAA;AAGlD,SAAS,gBAAgB,CAAC,OAAsB;AAAA,EAC/C,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,gBAAgB;AAAA,EAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,MAAM,MAA4B,CAAC;AAAA,IACnC,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjD,IAAI,UAAU;AAAA,QAAW,IAAI,OAAO,iBAAiB,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;;ACtDD,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,IAAI,UACT,GAAG,mHACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAUR,eAAsB,IAAI,CACzB,SACA,MACA,MACA,YACgB;AAAA,EAChB,MAAM,WAAW,QAAQ;AAAA,EACzB,IAAI,aAAa;AAAA,IAAM;AAAA,EAEvB,MAAM,QAAmB,OAAO,OAAO;AAAA,IACtC,IAAI,QAAO,WAAW,QAAQ,CAAC;AAAA,IAC/B;AAAA,IAEA,YAAY,IAAI,KAAK,WAAW,QAAQ,CAAC;AAAA,IACzC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,EAChB,CAAC;AAAA,EACD,IAAI;AAAA,IACH,MAAM,SAAS,KAAK;AAAA,IACnB,OAAO,SAAS;AAAA,IACjB,QAAQ,YACP,wCAAwC,QAAQ,MAAM,eAAe,KAAK,OAAO,mBAAmB,QAAQ,QAAQ,OAAO,OAAO,WAClI,EAAE,MAAM,qBAAqB,CAC9B;AAAA;AAAA;;;AC9FF,IAAM,WAAW;AAAA,EAChB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,UAAU;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,QAAQ;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAeO,SAAS,YAAY,CAC3B,QACA,OACoB;AAAA,EACpB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,gEACJ;AAAA,EACD;AAAA,EAEA,WAAW,QAAQ,OAAO,KAAK,QAAQ,GAAgC;AAAA,IACtE,MAAM,QAAkB,OAAmC;AAAA,IAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,MAChD,MAAM,IAAI,UAAU,GAAG,gBAAgB,iBAAiB;AAAA,IACzD;AAAA,IAEA,WAAW,UAAU,SAAS,OAAO;AAAA,MACpC,IAAI,OAAQ,MAAkC,YAAY,YAAY;AAAA,QACrE,MAAM,IAAI,UACT,GAAG,gBAAgB,sBAAsB,iCAC1C;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,WAAY,OAAiD;AAAA,EACnE,MAAM,UAAU,SAAS;AAAA,EAIzB,IAAI,YAAY,aAAa,OAAO,YAAY,YAAY;AAAA,IAC3D,MAAM,IAAI,UACT,GAAG,0EACJ;AAAA,EACD;AAAA,EAEA,OAAO,EAAE,gBAAgB,YAAY,UAAU;AAAA;;;ACtFhD,oCAAqB;AAQd,SAAS,UAAU,GAAW;AAAA,EACpC,OAAO,aAAY,EAAE,EAAE,SAAS,WAAW;AAAA;AAWrC,SAAS,UAAU,CAAC,QAAwB;AAAA,EAClD,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AAAA;;;ACRjD,SAAS,SAAS,CAAC,QAAgC;AAAA,EACzD,QAAQ,WAAW,MAAM,YAAY;AAAA,EACrC,OAAO;AAAA;AAOR,eAAsB,WAAW,CAChC,SACA,MACA,MAC6B;AAAA,EAC7B,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,WAAW;AAAA,EACzB,MAAM,SAAwB;AAAA,IAC7B,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,WAAW,WAAW,KAAK;AAAA,IAC3B,QAAQ,KAAK;AAAA,IACb,iBAAiB;AAAA,IACjB,WAAW,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,UAAU;AAAA,IACnD,WAAW;AAAA,IACX,WAAW;AAAA,EACZ;AAAA,EAEA,MAAM,QAAQ,MAAM,SAAS,cAAc,MAAM;AAAA,EACjD,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,MAAM;AAAA,IACzB;AAAA,EACD;AAAA;;AC5BM,SAAS,cAAc,CAC7B,SACA,YACgB;AAAA,EAChB,MAAM,UAAU,UAAU,OAAO;AAAA,EACjC,MAAM,OAAO,CAAC,SAAgC;AAAA,IAC7C,IAAI,mBAAmB;AAAA,MAAS,OAAO,QAAQ,IAAI,IAAI;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;AAAA,MACnD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU;AAAA,QAAW;AAAA,MACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,MAAM,gBAAgB,KAAK,eAAe;AAAA,EAC1C,IAAI,kBAAkB,MAAM;AAAA,IAC3B,MAAM,QAAQ,wBAAwB,KAAK,cAAc,KAAK,CAAC;AAAA,IAC/D,IAAI;AAAA,MAAO,OAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,SAAS,KAAK,iBAAiB;AAAA,EACrC,IAAI,WAAW;AAAA,IAAM,OAAO,OAAO,KAAK;AAAA,EAExC,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,WAAW,MAAM;AAAA,IACpB,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,MACrC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC3B,IAAI,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,YAAY;AAAA,QACzD,OAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,MAChC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA;AAOR,SAAS,SAAS,CAAC,SAA8C;AAAA,EAChE,IAAI,mBAAmB;AAAA,IAAS,OAAO;AAAA,EACvC,MAAM,QAAS,QAAkC;AAAA,EACjD,IAAI,iBAAiB;AAAA,IAAS,OAAO;AAAA,EACrC,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,OAAO;AAAA;;ACvCR,eAAsB,eAAe,CACpC,SACA,SAC4B;AAAA,EAC5B,MAAM,QAAQ,eAAe,SAAS,QAAQ,OAAO,OAAO,IAAI;AAAA,EAChE,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAE3B,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,uBAC5C,WAAW,KAAK,CACjB;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,OAAO,YAAY,QAClB,QAAQ,cAAc,QACtB,QAAQ,UAAU,QAAQ,KAAK,MAC7B,OACA,EAAE,OAAO,QAAQ;AAAA;;;ACzBrB,eAAsB,YAAY,CACjC,SACA,SACA,SACyC;AAAA,EACzC,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACxD,IAAI,cAAc;AAAA,IAAM,OAAO;AAAA,EAC/B,QAAQ,OAAO,YAAY;AAAA,EAC3B,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ;AAAA,EAIhC,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACtD,IACC,SAAS,QACT,CAAC,KAAK,UACL,SAAS,SAAS,aAAa,KAAK,SAAS,QAAQ,MACrD;AAAA,IACD,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK,IAAI;AAAA,EACvC,IAAI,SAAS,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG,GAAG;AAAA,IAC1D,OAAO;AAAA,MACN,MAAM,OAAO,IAAI;AAAA,MACjB,SAAS,UAAU,OAAO;AAAA,MAC1B;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,cACrC,QAAQ,IACR,IAAI,KAAK,MAAM,KAAK,UAAU,CAC/B;AAAA,EAGA,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,OAAO;AAAA,IACN,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,EACV;AAAA;AAQD,SAAS,UAAU,CAClB,MACA,SACA,KACU;AAAA,EACV,OACC,KAAK,iBAAiB,QACtB,KAAK,cAAc,QAAQ,UAAU,QAAQ,IAAI,QAAQ,KAAK;AAAA;;;AChEzD,SAAS,QAAQ,CAAC,SAAgD;AAAA,EACxE,QAAQ,MAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,OAAO;AAAA,EAChE,MAAM,aAAa;AAAA,IAClB,QAAQ;AAAA,IACR,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ;AAAA,IAC9C;AAAA,IACA,YAAY,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC;AAAA,IACzD,GAAI,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5B,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACN;AAAA,IACA,WAAW,CAAC,OAAe,YAC1B,GAAG,QAAQ,kBAAkB,QAAQ,UAAU,YAAY,MAAM;AAAA,IAClE,OAAO,MACN,GAAG,4DAA4D;AAAA,EACjE;AAAA;;;ACMM,SAAS,SAAS,CAAC,SAAqC;AAAA,EAC9D,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,OAAO;AAAA,SACA,aAAY,CAAC,SAAS,SAAS;AAAA,MACpC,OAAO,aAAa,SAAS,SAAS,OAAO;AAAA;AAAA,SAGxC,QAAO,CAAC,SAAS;AAAA,MACtB,MAAM,QAAQ,eAAe,SAAS,OAAO,OAAO,IAAI;AAAA,MACxD,IAAI,UAAU;AAAA,QAAM,OAAO;AAAA,MAE3B,MAAM,UAAU,MAAM,MAAM,SAAS,uBACpC,WAAW,KAAK,CACjB;AAAA,MACA,IAAI,YAAY;AAAA,QAAM,OAAO;AAAA,MAC7B,OAAO,MAAM,SAAS,cAAc,QAAQ,IAAI,MAAM,IAAI,CAAC;AAAA;AAAA,SAGtD,kBAAiB,CAAC,MAAM,SAAS;AAAA,MACtC,MAAM,KAAK,KAAK,IAAI;AAAA,MACpB,IAAI,CAAC,MAAK,EAAE;AAAA,QAAG,OAAO;AAAA,MAGtB,OAAO,SAAS,WAAW,aAAa,CAAC,MAAK,QAAQ,MAAM,IACzD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,CAAC,IACjD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,GAAG,QAAQ,MAAM;AAAA;AAAA,SAG/D,SAAQ,CAAC,IAAI;AAAA,MAClB,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI;AAAA,MACjD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,QAAO,CAAC,IAAI;AAAA,MACjB,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,MAAM,SAAS,CAAC;AAAA;AAAA,IAG5D,QAAQ,SAAS,OAAO;AAAA,SAElB,eAAc,GAAG;AAAA,MACtB,MAAM,UAAU,MAAM,SAAS;AAAA,MAC/B,IAAI,CAAC,QAAQ,aAAa,kBAAkB,YAAY,WAAW;AAAA,QAClE,MAAM,IAAI,kBACT,4IACA,EAAE,MAAM,YAAY,WAAW,wBAAwB,CACxD;AAAA,MACD;AAAA,MACA,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA,IAG3B,OAAO,CAAC,GAAG,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/B;AAAA;;AC7ED,4BAAS;;;ACcF,SAAS,WAAW,CAC1B,MACA,MACA,OACA,OACA,MACO;AAAA,EACP,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IACC,UAAU,QACV,eAAe,KAAK,MAAM,eAAe,MAAM,OAAO,GACrD;AAAA,IACD,MAAM,IAAI,YACT,eACA,GAAG,cAAc,qDACjB,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQM,SAAS,cAAc,CAC7B,OACA,KACA,OACA,MAC+B;AAAA,EAC/B,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,MAClE,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,YAAY,MAAM;AAAA,IAC3B,MAAM,IAAI,YACT,eACA,GAAG,cAAc,yBACjB,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,IAAI,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,IAC/C,MAAM,IAAI,YAAW,iBAAiB,GAAG,cAAc,oBAAoB;AAAA,MAC1E,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA;AAIM,IAAM,iBAAiB,CAAC,OAAe,SAC7C,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,EAC5D,WAAW;AACZ,CAAC;;;AC3DF,eAAsB,YAAY,CACjC,SACA,QACA,MACA,OACA,MACuB;AAAA,EACvB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,MACA,GACD;AAAA,EACA,eAAe,OAAO,KAAK,OAAO,IAAI;AAAA,EACtC,OAAO;AAAA;AAQR,eAAsB,WAAW,CAChC,SACA,QACA,MACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,aAC1B,WAAW,MAAM,GACjB,MACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AF1BM,IAAM,gBAAgB;AAQ7B,eAAsB,gBAAgB,CACrC,SACA,QACA,MACA,OACA,UAC0E;AAAA,EAC1E,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,IACD;AAAA,EACA,eAAe,OAAO,QAAQ,MAAM,IAAI,GAAG,OAAO,WAAW;AAAA,EAC7D,IAAI,MAAM,WAAW,eAAe;AAAA,IACnC,MAAM,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC;AAAA,EACnD;AAAA,EACA,OAAO,EAAE,OAAO,cAAc,gBAAgB,MAAM,SAAS;AAAA;AAOvD,SAAS,WAAW,CAC1B,OACA,QACA,UACA,cACa;AAAA,EACb,OAAO,IAAI,YACV,gBACA,GAAG,uDACH;AAAA,IACC,WAAW;AAAA,IACX;AAAA,IACA;AAAA,OACI,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa;AAAA,EACtD,CACD;AAAA;AASD,eAAsB,gBAAgB,CACrC,SACA,OACA,QACA,OACsB;AAAA,EACtB,IAAI,MAAM,aAAa,eAAe;AAAA,IACrC,MAAM,YAAY,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC9C;AAAA,EACA,OAAO,eAAe,OAAO,WAAW;AAAA;AAQlC,IAAM,WAAW,CAAC,WAAmB,SAC3C,WAAW,GAAG,YAAY,MAAM;AAG1B,SAAS,WAAW,CAC1B,OACA,WACA,MACU;AAAA,EACV,IAAI,MAAM,aAAa,QAAQ,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAC7D,MAAM,QAAQ,OAAO,KAAK,SAAS,WAAW,IAAI,CAAC;AAAA,EACnD,MAAM,OAAO,OAAO,KAAK,MAAM,QAAQ;AAAA,EACvC,OAAO,MAAM,WAAW,KAAK,UAAU,iBAAgB,OAAO,IAAI;AAAA;;AGlGnE;AAiBA,eAAsB,YAAY,CACjC,SACA,OACiE;AAAA,EACjE,OAAO,cAAc,SAAS,OAAO,IAAI;AAAA;AAO1C,eAAsB,SAAS,CAC9B,SACA,OAKE;AAAA,EACF,MAAM,OAAO,OAAO,UAAU,GAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,EACzD,OAAO,KAAM,MAAM,cAAc,SAAS,OAAO,IAAI,GAAI,KAAK;AAAA;AAG/D,eAAe,aAAa,CAC3B,SACA,OACA,MACiE;AAAA,EACjE,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,SAAS,WAAW;AAAA,EAC1B,MAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EAEtD,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,IACtC,WAAW,WAAW,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,SAAS,OAAO,OAAO,SAAS,QAAQ,IAAI;AAAA,IACtD,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACZ,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,UAAU;AAAA;;AC/C5B,eAAsB,iBAAiB,CACtC,SACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QACA,gBACA,QAAQ,MAAM,IAAI,CACnB;AAAA;AAaD,eAAsB,cAAc,CACnC,SACA,MACA,UACA,UACA,QACA,OACmB;AAAA,EACnB,MAAM,MAAM,MAAM,WAAW,SAAS,SAAS,IAAI,KAAK,IAAI;AAAA,EAC5D,MAAM,OACL,QAAQ,QACR,IAAI,aAAa,SAChB,IAAI,SAAS,SAAS,SAAS,UAAU,QACxC,MAAM,gBAAgB,SAAS,KAAK,UAAU,KAAK;AAAA,EACtD,IAAI;AAAA,IAAM,OAAO;AAAA,EAEjB,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,QAAQ,MAAM,SAAS,cAC5B,OAAO,QAAQ,IACf,QAAQ,MAAM,IAAI,CACnB;AAAA,EACD,EAAO;AAAA,IACN,MAAM,YAAY,SAAS,OAAO,WAAW,cAAc;AAAA;AAAA,EAE5D,OAAO;AAAA;;;ACxCR,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,MAAM,OAAO,OAAO;AAAA,EACtE,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,OAAO,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,KAAK;AAAA;AAItB,eAAsB,eAAe,CACpC,SACA,MACA,MACA,MACA,OACuB;AAAA,EACvB,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAEA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,QAAQ,OAAO,UAAU;AAAA;;;AC/BnC,SAAS,kBAAkB,CACjC,SACA,MACA,IACgB;AAAA,EAChB,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,aAAa,MAAM,KAAK;AAAA,MACxB,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,MAC/D,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAE5B,MAAM,SAAS,MAAM,gBACpB,SACA,MACA,iBACA,QACA,KACD;AAAA,MACA,OAAO,KAAK,QAAQ,MAAM,OAAO,MAAM,EAAE;AAAA;AAAA,SAGpC,QAAO,CAAC,QAAQ,UAAU;AAAA,MAC/B,OAAO,aACN,SACA,MACA,QACA,UACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,EAEF;AAAA;AAID,eAAe,YAAY,CAC1B,SACA,MACA,QACA,UACA,OACmB;AAAA,EACnB,aAAa,MAAM,KAAK;AAAA,EAGxB,cAAc,MAAM,UAAU,KAAK;AAAA,EACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,EAE9D,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,iBACA,QACA,KACD;AAAA,EACA,IAAI,gBAAgB;AAAA,EACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAEhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,IAC/C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,OAAO;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,IAAI;AAAA,SAE7B,OAAO,oBAAoB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,IACnE;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAIH,MAAM,QAAQ,MAAM,SAAS,mBAC5B,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,IACA,MAAM,kBAAkB,SAAS,QAAQ,EAAE;AAAA,YAC1C;AAAA,IAGD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACpE,IAAI,eAAe;AAAA,MAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACrE;AAAA;AAAA,EAED,OAAO,OAAO,OAAO;AAAA;;;ACnGf,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACpE,OAAO,gBAAgB,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA;AAAA,SAG7D,QAAO,CAAC,QAAQ;AAAA,MACrB,MAAM,QAAQ,GAAG,qBAAqB;AAAA,MACtC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,eACA,QACA,KACD;AAAA,MACA,IAAI,gBAAgB;AAAA,MACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,QAGhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,QAC/C,gBAAgB,OAAO,oBAAoB;AAAA,QAC3C,OAAO,EAAE,iBAAiB,IAAI;AAAA,OAEhC;AAAA,MACA,IAAI,eAAe;AAAA,QAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,MACrE;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,EAEvB;AAAA;;;AC/CM,SAAS,UAAU,CACzB,SACA,MACA,IACsD;AAAA,EACtD,OAAO;AAAA,IACN,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,IAC/C,eAAe,mBAAmB,SAAS,MAAM,EAAE;AAAA,EACpD;AAAA;;ACvBD,oCAAqB;AAQd,IAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ,OAAQ,OAAO,EAAE;AAE1D,IAAM,SAAS;AAGR,SAAS,cAAc,GAAW;AAAA,EACxC,OAAO,SAAS,aAAY,EAAE,CAAC;AAAA;AAIzB,SAAS,QAAQ,CAAC,OAA2B;AAAA,EACnD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,IAAI,MAAM;AAAA,EACV,WAAW,QAAQ,OAAO;AAAA,IACzB,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,OAAO,QAAQ,GAAG;AAAA,MACjB,OAAO,OAAQ,UAAW,OAAO,IAAM;AAAA,MACvC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,IAAI,OAAO;AAAA,IAAG,OAAO,OAAQ,SAAU,IAAI,OAAS;AAAA,EACpD,OAAO;AAAA;AAGD,SAAS,UAAU,CAAC,MAAsB;AAAA,EAChD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,MAAM,MAAgB,CAAC;AAAA,EACvB,WAAW,QAAQ,MAAM;AAAA,IACxB,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAAA,IACjC,IAAI,UAAU;AAAA,MAAI,MAAM,IAAI,UAAU,gCAAgC;AAAA,IACtE,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG;AAAA,MACd,IAAI,KAAM,UAAW,OAAO,IAAM,GAAG;AAAA,MACrC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAIhB,IAAM,SAAS,CAAC,QACtB,KAAK,MAAM,IAAI,QAAQ,IAAI,KAAK,MAAM;AAGhC,SAAS,MAAM,CAAC,QAAgB,MAAsB;AAAA,EAC5D,MAAM,UAAU,OAAO,MAAM,CAAC;AAAA,EAC9B,QAAQ,iBAAiB,OAAO,IAAI,CAAC;AAAA,EACrC,MAAM,SAAS,WAAW,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EACjE,MAAM,SAAU,OAAO,MAAiB;AAAA,EACxC,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI;AAAA,EAC7C,OAAO,OAAO,SAAS,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK,QAAQ,GAAG;AAAA;AAW7D,SAAS,SAAS,CACxB,QACA,MACA,KACA,UACgB;AAAA,EAChB,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAClC,MAAM,UAAU,OAAO,GAAG;AAAA,EAC1B,IAAI,UAAyB;AAAA,EAC7B,SAAS,OAAO,UAAU,KAAK,MAAO,QAAQ,UAAU,KAAK,OAAO,QAAQ;AAAA,IAC3E,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAAA,IAC1C,IAAI,WAAW,OAAO,QAAQ,IAAI,GAAG,IAAI,KAAK,SAAS,YAAY,MAAM;AAAA,MACxE,UAAU;AAAA,IACX;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,UAAU,CAAC,GAAW,GAAoB;AAAA,EAClD,IAAI,aAAa,EAAE,SAAS,EAAE;AAAA,EAC9B,SAAS,IAAI,EAAG,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,cAAc,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AAAA,EACA,OAAO,eAAe;AAAA;AAQhB,SAAS,UAAU,CACzB,QACA,SACA,QACS;AAAA,EACT,MAAM,QAAQ,GAAG,mBAAmB,MAAM,KAAK,mBAAmB,OAAO;AAAA,EACzE,MAAM,QAAQ,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC1B,QAAQ,OAAO,KAAK,SAAS,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,kBAAkB,SAAS;AAAA;;;ACnG5B,IAAM,WAAW,CACvB,WAC4B,WAAW,QAAQ,OAAO,gBAAgB;AAGhE,SAAS,eAAe,CAC9B,SACA,OACA,KACW;AAAA,EACX,MAAM,aAAa,QAAQ,OAAO;AAAA,EAClC,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,IAAI,UACT,GAAG,UAAU,kFACd;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AASD,SAAS,UAAU,CACzB,YACA,QACA,QACA,MACA,KACA,OAC4B;AAAA,EAC5B,QAAQ,OAAO,UAAU,OACxB,WAAW,QACX,OAAO,QACP,OAAO,IACP,KACD;AAAA,EACA,MAAM,OAAO,UAAU,WAAW,KAAK,GAAG,MAAM,KAAK,OAAO,QAAQ;AAAA,EACpE,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,OAAO;AAAA,OACH;AAAA,IACH,UAAU;AAAA,IACV,QACC,UAAU,WAAW,OAAO,WACzB,OAAO,SACP,KAAK,WAAW,QAAQ,OAAO,OAAO,EAAE;AAAA,EAC7C;AAAA;;;ACpCM,IAAM,iBAAiB,CAC7B,SACA,WACA,UACI,aAAa,SAAS,WAAW,gBAAgB,OAAO,WAAW;AAMxE,eAAsB,aAAa,CAClC,SACA,MACA,WACA,OAC2B;AAAA,EAC3B,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,SAAS,OAAO,SAAS;AAAA,EAE/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,gBACA,OACA,KAAK,IACN;AAAA,EAGA,MAAM,SAAS,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAChE,IAAI,WAAW,MAAM;AAAA,IACpB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBACT,8BACA,GAAG,iEACH,EAAE,WAAW,OAAO,QAAQ,OAAO,IAAI,UAAU,KAAK,KAAK,CAC5D;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK,QAAQ,cAAc,OAAO;AAAA,EAC3C;AAAA;AAID,eAAsB,UAAU,CAC/B,SACA,MACA,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,iBAAiB,GAAG;AAAA,IAC9B,MAAM,YAAY,SAAS,OAAO,QAAQ,cAAc;AAAA,EACzD;AAAA,EACA,MAAM,YAAY,OAAO,OAAO,OAAO,IAAI,KAAK,MAAM,OAAO,YAAY;AAAA;;;ACtFnE,SAAS,cAAc,CAAC,SAAkB,MAAoB,IAAQ;AAAA,EAC5E,OAAO;AAAA,SACA,MAAK,CACV,QACA,OACgC;AAAA,MAChC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,MACA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,QACzD,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QAEf,SAAS;AAAA,QACT,OAAO,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,OAAO;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,OAAO;AAAA,MAChB;AAAA;AAAA,SAGK,QAAO,CAAC,WAAmB,MAA0C;AAAA,MAC1E,OAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,EAAE;AAAA;AAAA,EAE5D;AAAA;AAQD,eAAe,gBAAgB,CAC9B,SACA,MACA,WACA,MACA,IAC6B;AAAA,EAC7B,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EAEnB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAChB,OAAO,YACP,QACA,OAAO,cACP,OAAO,IAAI,GACX,KACA,KACD;AAAA,EACA,IAAI,aAAa;AAAA,IAAM,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAIrE,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,OAAO,OACR;AAAA,EACA,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,EAClD,OAAO,YAAY,SAAS,MAAM,OAAO;AAAA;;;ACpE1C,eAAsB,mBAAmB,CACxC,SACA,MACA,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,MAAM,SAAS,OAAO;AAAA,EACtB,OAAO,SAAS,MAAM,IAAI,OAAO,cAAc,SAAS;AAAA;;;ACtBzD,uBAAS,oCAAsB,+BAAW;AAkBnC,IAAM,iBAAiB;AAE9B,IAAM,WAAW;AACjB,IAAM,SAAS;AACf,IAAM,QAAQ;AAGd,IAAM,UAAU;AAGT,SAAS,iBAAiB,GAAa;AAAA,EAC7C,OAAO,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM;AAAA,IACnD,IAAI,OAAO;AAAA,IACX,SAAS,KAAK,EAAG,KAAK,QAAQ,MAAM,GAAG;AAAA,MACtC,QAAQ,SAAS,WAAU,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;AAAA,GAC1C;AAAA;AAQK,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EAC9D,MAAM,OAAO,MACX,YAAY,EACZ,QAAQ,UAAU,EAAE,EACpB,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,GAAG;AAAA,EACtB,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO;AAAA;AAGlC,IAAM,UAAU,IAAI;AAGpB,SAAS,MAAM,CAAC,QAAgB,OAAmC;AAAA,EAClE,IAAI,OAAO,QAAQ,IAAI,MAAM;AAAA,EAC7B,IAAI,SAAS,WAAW;AAAA,IACvB,OAAO,IAAI;AAAA,IACX,QAAQ,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EACA,IAAI,MAAM,KAAK,IAAI,KAAK;AAAA,EACxB,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,KAAK;AAAA,IACpC,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;AAAA,IAC1E,KAAK,IAAI,OAAO,GAAG;AAAA,EACpB;AAAA,EACA,OAAO;AAAA;AAGR,IAAM,MAAM,CAAC,KAAa,QAAgB,SACzC,YAAW,UAAU,GAAG,EAAE,OAAO,GAAG,aAAe,MAAM,EAAE,OAAO;AAG5D,SAAS,gBAAgB,CAC/B,QACA,QACA,MACS;AAAA,EACT,MAAM,OAAO,iBAAiB,IAAI,KAAK;AAAA,EACvC,MAAM,MAAM,OAAO,QAAQ,OAAO,QAAQ;AAAA,EAC1C,OAAO,MAAM,OAAO,YAAY,IAAI,KAAK,QAAQ,IAAI,EAAE,SAAS,WAAW;AAAA;AAWrE,SAAS,gBAAgB,CAC/B,QACA,QACA,QACA,OACA,OACS;AAAA,EACT,MAAM,OAAO,iBAAiB,KAAK;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,OAAO,QAAQ,CAAC,MAAM,UAAU;AAAA,IAC/B,OAAO,SAAS,OAAO,SAAS,QAAQ,KAAK,MAAM,GAAG;AAAA,IACtD,IACC,YAAY,QACZ,UAAU,aACV,SAAS,aACT,KAAK,SAAS,GACb;AAAA,MACD,MAAM,IAAI,UACT,GAAG,mDACJ;AAAA,IACD;AAAA,IACA,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,IAChC,IAAI,QAAQ,WAAW;AAAA,MACtB,MAAM,IAAI,UACT,GAAG,kDAAkD,uGACtD;AAAA,IACD;AAAA,IACA,IAAI,SAAS;AAAA,MAAM;AAAA,IACnB,MAAM,OAAO,OAAO,KAAK,MAAM,WAAW;AAAA,IAC1C,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,IACnC,IAAI,KAAK,WAAW,MAAM,UAAU,iBAAgB,MAAM,KAAK,GAAG;AAAA,MACjE,QAAQ,UAAU,KAAK,QAAQ;AAAA,IAChC;AAAA,GACA;AAAA,EACD,OAAO;AAAA;;;AC1HD,IAAM,UAAU,CACtB,MACA,MACA,SACA,OACA,WAEA,IAAI,mBAAkB,MAAM,GAAG,UAAU,WAAW;AAAA,EACnD,WAAW;AAAA,EACX,QAAQ,OAAO;AAAA,EACf,UAAU,KAAK;AAChB,CAAC;;;ACHF,eAAsB,cAAc,CACnC,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,WAAW,MAAM;AAAA,MACpB,MAAM,QACL,MACA,8BACA,6DACA,OACA,MACD;AAAA,IACD;AAAA,IACA,IAAI,SAAS,MAAM,GAAG;AAAA,MACrB,MAAM,QACL,MACA,wBACA,8CACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa;AAAA,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,IAAI;AAAA,IACpE,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,aAAa;AAAA,QACb,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,MAAM,KAAK,SAAS,4BAA4B,SAAS,QAAQ,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;ACjE/C,eAAsB,aAAa,CAClC,SACA,MACA,MACA,SACA,OACmB;AAAA,EACnB,IAAI,YAAY;AAAA,EAChB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,YAAY,SAAS,OAAO,YAAY;AAAA,IACxC,OAAO,EAAE,cAAc,KAAK;AAAA,GAE9B;AAAA,EACA,IAAI,WAAW;AAAA,IACd,MAAM,KACL,SACA,6BACA,SACA,QAAQ,SACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;AC5BtB,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,OACiC;AAAA,EACjC,MAAM,aAAa,gBAClB,SACA,OACA,mCACD;AAAA,EACA,MAAM,SAAS,eAAe;AAAA,EAE9B,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,IAAI,SAAS,OAAO,YAAY,GAAG;AAAA,MAClC,MAAM,QACL,MACA,wBACA,yDACA,OACA,MACD;AAAA,IACD;AAAA,IACA,UAAU,MAAM,QAAQ,KAAK;AAAA,IAC7B,OAAO;AAAA,MACN,cAAc;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,EAAE;AAAA,QACjD,aAAa;AAAA,QACb,UAAU;AAAA,QACV,eAAe,CAAC;AAAA,MACjB;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,KAAK,WAAW,WAAW,QAAQ,UAAU,MAAM,SAAS,KAAK,GAAG,MAAM;AAAA,EAC3E;AAAA;AAID,SAAS,SAAS,CACjB,MACA,QACA,OACS;AAAA,EACT,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,wEACvB;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO,OAAO,KAAK,SAAS,MAAM;AAAA;;;ACtEjD,uBAAS,yBAAY;AAkCd,IAAM,qBAAqB,KAAK;AAEvC,IAAM,iBAAiB,qBAAqB;AAO5C,IAAM,WAAU;AAGhB,IAAM,YAAY;AAElB,IAAM,WAAU,IAAI;AAEpB,SAAS,UAAU,CAAC,QAAwB;AAAA,EAC3C,IAAI,MAAM,SAAQ,IAAI,MAAM;AAAA,EAC5B,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,IAC9C,MAAM,OAAO,KAAK,UAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,UAAS,EAAE,CAAC;AAAA,IAC1E,SAAQ,IAAI,QAAQ,GAAG;AAAA,EACxB;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,QAAQ,CAChB,QACA,QACA,QACA,MACS;AAAA,EACT,MAAM,QAAQ;AAAA,IACb,OAAO;AAAA,IACP,OAAO,MAAM;AAAA,IACb,OAAO,OAAO,cAAc,YAAY,EAAE;AAAA,IAC1C,OAAO,IAAI;AAAA,EACZ;AAAA,EACA,OAAO,WACN,YAAW,UAAU,WAAW,MAAM,CAAC,EACrC,OAAO,MAAM,KAAK,MAAQ,CAAC,EAC3B,OAAO,WAAW,CACrB;AAAA;AASD,eAAsB,mBAAmB,CACxC,SACA,QACA,QACA,OACkB;AAAA,EAClB,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,KAAK,MAAM,MAAM,kBAAkB;AAAA,EAIlD,MAAM,QAAQ,EAAE,KAAK,YAAY,SAAS,KAAK,mBAAmB;AAAA,EAClE,IAAI,QAAQ;AAAA,EACZ,SAAS,OAAO,EAAG,OAAO,WAAW,QAAQ,GAAG;AAAA,IAC/C,MAAM,OAAO,SAAS,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAClD,MAAM,UAAU,MAAM,UAAU,SAAS,MAAM,QAAQ,OAAO,KAAK;AAAA,IACnE,MAAM,WAAW,QAAQ,QAAQ;AAAA,IACjC,IAAI,QAAQ,YAAY;AAAA,MAAM,OAAO,aAAa,UAAU,QAAQ,KAAK;AAAA,IACzE,QAAQ;AAAA,EACT;AAAA,EACA,OAAO,aAAa,OAAO,mBAAmB,QAAQ,KAAK;AAAA;AAI5D,eAAe,SAAS,CACvB,SACA,WACA,QACA,OACA,OACuB;AAAA,EACvB,MAAM,SAAS,QAAQ,MAAM;AAAA,EAC7B,MAAM,UAAU,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACnE,IAAI,YAAY;AAAA,IAAM,OAAO;AAAA,EAE7B,MAAM,OAAO,YAAY;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW,IAAI,KAAK,MAAM,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,WAAW,IAAI,KAAK,MAAM,GAAG;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACpE,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAE9B,MAAM,IAAI,eACT,WACA,GAAG,gFACH,EAAE,QAAQ,OAAO,IAAI,iBAAiB,OAAO,SAAS,WAAW,MAAM,CACxE;AAAA;AAID,SAAS,YAAY,CACpB,UACA,QACA,OACS;AAAA,EACT,IAAI,WAAW,eAAe;AAAA,IAC7B,MAAM,IAAI,YACT,gBACA,GAAG,mDAAmD,gCACtD;AAAA,MACC,WAAW;AAAA,MACX,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,cAAc;AAAA,IACf,CACD;AAAA,EACD;AAAA,EACA,OAAO,gBAAgB;AAAA;;;AC/IxB,eAAsB,uBAAuB,CAC5C,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,sCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,MACtB,MAAM,QACL,MACA,8BACA,uEACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,OAAO,MAAM,oBAClB,SACA,WAAW,QACX,QACA,KACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa,MAAM;AAAA,MACtB,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,KACL,SACA,iCACA,SACA,QAAQ,SACT;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;AC9DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACY;AAAA,EACZ,OAAO;AAAA,SACA,OAAM,CAAC,MAAM,SAAS;AAAA,MAC3B,OAAO,aACN,SACA,MACA,MACA,SACA,GAAG,qBAAqB,CACzB;AAAA;AAAA,SAGK,SAAQ,CAAC,MAAM,MAAM,SAAS;AAAA,MACnC,OAAO,eACN,SACA,MACA,MACA,MACA,SACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,SAGK,wBAAuB,CAAC,MAAM,MAAM,SAAS;AAAA,MAClD,OAAO,wBACN,SACA,MACA,MACA,MACA,SACA,GAAG,sCAAsC,CAC1C;AAAA;AAAA,SAGK,QAAO,CAAC,MAAM,SAAS;AAAA,MAC5B,OAAO,cACN,SACA,MACA,MACA,SACA,GAAG,sBAAsB,CAC1B;AAAA;AAAA,EAEF;AAAA;;;AChDD,eAAsB,eAAe,CACpC,SACA,MACA,WACA,MACA,IACoC;AAAA,EACpC,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EAEtB,MAAM,QAAQ,iBACb,OAAO,WAAW,QAClB,OAAO,IACP,OAAO,eACP,OAAO,IAAI,GACX,KACD;AAAA,EACA,IAAI,UAAU;AAAA,IAAI,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAEhE,MAAM,gBAAgB,OAAO,cAAc,OAC1C,CAAC,GAAG,UAAU,UAAU,KACzB;AAAA,EACA,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP;AAAA,IACC,cAAc,KAAK,QAAQ,cAAc;AAAA,IACzC,WAAW,QAAQ,MAAM,IAAI;AAAA,EAC9B,GACA,OAAO,OACR;AAAA,EAGA,IAAI;AAAA,IACH,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,IAClD,MAAM,WAAW,MAAM,YAAY,SAAS,MAAM,OAAO;AAAA,IACzD,OAAO,KAAK,UAAU,mBAAmB,cAAc,OAAO;AAAA,YAC7D;AAAA,IACD,MAAM,KAAK,SAAS,yBAAyB,SAAS,QAAQ,SAAS;AAAA;AAAA;;;AC1ClE,SAAS,iBAAiB,CAChC,SACA,MACA,IACC;AAAA,EACD,MAAM,aAAa,eAAe,SAAS,MAAM,EAAE;AAAA,EACnD,MAAM,MAAgD;AAAA,OAClD,eAAe,SAAS,MAAM,EAAE;AAAA,IACnC,SAAS,WAAW;AAAA,IACpB,SAAS,CAAC,WAAW,SACpB,gBAAgB,SAAS,MAAM,WAAW,MAAM,EAAE;AAAA,IACnD,mBAAmB,CAAC,SACnB,oBACC,SACA,MACA,MACA,GAAG,gCAAgC,CACpC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IAMA,QAAQ,CACP,QACA,UAEA,SAAS,OAAO,YAAY,IACzB,WAAW,MAAM,QAAQ,KAAK,IAC9B,YAAY,SAAS,MAAM,MAAM;AAAA,EACtC;AAAA;;;ACTM,SAAS,eAAe,CAC9B,SACA,MACA,IACA,QAC8D;AAAA,EAC9D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA;AAAA,SAG1C,QAAO,CAAC,WAAW,MAAM;AAAA,MAC9B,OAAO,YAAY,SAAS,MAAM,QAAQ,WAAW,MAAM,EAAE;AAAA;AAAA,EAE/D;AAAA;AASD,eAAe,WAAW,CACzB,SACA,MACA,OACsC;AAAA,EAEtC,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,IAAI,WAAW,QAAQ,CAAC,OAAO;AAAA,IAAQ,OAAO;AAAA,EAE9C,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,IACzC,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EAID,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,cACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,OAAO,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,IACvC;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,WAAW,CACzB,SACA,MACA,QACA,WACA,MACA,IACiC;AAAA,EACjC,MAAM,QAAQ,GAAG,oBAAoB;AAAA,EACrC,MAAM,SAAS,OAAO,SAAS;AAAA,EAC/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,cACA,OACA,KAAK,IACN;AAAA,EAKA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,IAAI,CAAC,GAAG;AAAA,IAE9C,IAAI,MAAM,aAAa,eAAe;AAAA,MACrC,MAAM,YAAY,SAAS,QAAQ,YAAY;AAAA,IAChD;AAAA,IACA,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EAEA,MAAM,aAAa,SAAS,QAAQ,cAAc,OAAO,WAAW;AAAA,EACpE,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA,EAC5C,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAIA,IAAI,KAAK,oBAAoB;AAAA,IAAM,OAAO,OAAO,MAAM,KAAK;AAAA,EAC5D,MAAM,SAAS,MAAM,UACpB,SACA,KAAK,IACL,MACA,EAAE,WAAW,KAAK,QAAQ,GAC1B,OACA,CAAC,GAAG,SAAS,EAAE,iBAAiB,IAAI,EACrC;AAAA,EACA,MAAM,KAAK,SAAS,sBAAsB,QAAQ,OAAO,SAAS;AAAA,EAClE,OAAO,OAAO,QAAQ,KAAK;AAAA;;;AC9H5B,IAAM,QAAQ,CAAC,SAAkB,QAAgB,UAChD,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAO3D,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,OAAO,QAAQ,iBAAiB;AAAA,EACxC,IAAI,SAAS,KAAK,YAAY,GAAG;AAAA,IAChC,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,wBACA,GAAG,mGACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,IAAI,CAAC,YAAY,OAAO,QAAQ,IAAI,GAAG;AAAA,IACtC,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,EAClC,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA;AAU7C,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,QAAQ,iBAAiB;AAAA,EACjC,MAAM,SAAS,KAAK;AAAA,EACpB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,8BACA,GAAG,2EACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,aAAa,MAAM,oBACxB,SACA,WAAW,QACX,MACA,KACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,KAAK;AAAA,EACtE,IAAI,aAAa,MAAM;AAAA,IACtB,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YACL,OACA,KAAK,IACL,KAAK,MACL,KAAK,IAAI,cAAc,UAAU,CAClC;AAAA,EACD;AAAA,EAGA,MAAM,QAAQ,MAAM,MAAM,WACzB,KAAK,IACL,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,KAAK,OACN;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA;;;ACxFnC,eAAsB,UAAU,CAC/B,SACA,MACA,SACA,OACA,QACA,OACwB;AAAA,EACxB,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO,IAAI,WAAW;AAAA,EACtE,IAAI,YAAY,QAAQ,QAAQ,WAAW,MAAM,QAAQ;AAAA,IACxD,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAAA,IAChE,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;AC1BxB,eAAsB,aAAa,CAClC,SACA,MACA,MACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAAS,OAAO,YAAY,IACxC,MAAM,MAAM,SAAS,QAAQ,KAAK,IAClC,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,EAG7C,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,UACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,SAAS,CAC5B;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,KAAK,CACnB,SACA,QACA,OACgC;AAAA,EAChC,gBAAgB,SAAS,OAAO,oCAAoC;AAAA,EACpE,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,OAAO,CACrB,SACA,MACA,QACA,OACkC;AAAA,EAClC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;;;AC9EM,SAAS,WAAW,CAC1B,SACA,MACA,IAC6C;AAAA,EAC7C,OAAO;AAAA,SACA,QAAO,CAAC,MAAM;AAAA,MACnB,OAAO,cAAc,SAAS,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAAA;AAAA,SAGzD,QAAO,CAAC,SAAS,WAAW,MAAM;AAAA,MACvC,OAAO,cACN,SACA,MACA,SACA,OAAO,SAAS,GAChB,OAAO,IAAI,GACX,GAAG,gBAAgB,CACpB;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,aAAa,CAC3B,SACA,MACA,SACA,QACA,MACA,OACmB;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,UACA,OACA,KAAK,IACN;AAAA,EACA,QAAQ,SAAS,SAAS,MAAM,WAC/B,SACA,MACA,SACA,OACA,QACA,KACD;AAAA,EAEA,MAAM,UAAU,EAAE,OAAO,QAAQ,aAAa;AAAA,EAE9C,IAAI,MAAM,aAAa,MAAM;AAAA,IAC5B,MAAM,aAAa,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA,EAC7D,EAAO;AAAA,IACN,MAAM,iBAAiB,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA;AAAA,EAGjE,MAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,sBAC9C,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,EAEA,IAAI,cAAc,MAAM;AAAA,IACvB,MAAM,IAAI,YACT,iBACA,GAAG,gEACH,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,OAAO,UAAU,SAAS;AAAA;;;ACtFpB,IAAM,UAAU,OACtB,SACA,MACA,UAEA,WAAW,KAAK,IACb,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,KAAK,IACpD;;;ACCJ,eAAsB,cAAc,CACnC,SACA,MACA,MACA,QACA,SACA,OACsB;AAAA,EACtB,aAAa,MAAM,KAAK;AAAA,EACxB,cAAc,MAAM,QAAQ,MAAM,KAAK;AAAA,EACvC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAE3C,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,IACC,OAAO,aAAa,QACpB,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,SAAS,KAAK,GAC7D;AAAA,MACD,MAAM,IAAI,iBACT,uBACA,GAAG,8CACH;AAAA,QACC,QAAQ,OAAO,aAAa,OAAO,eAAe;AAAA,QAClD,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO;AAAA,MACN,UAAU;AAAA,QACT,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI;AAAA,QACnC,WAAW;AAAA,MACZ;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,kBAAkB,SAAS,QAAQ,EAAE;AAAA,EAC3C,OAAO;AAAA;;;AC9CR,eAAsB,MAAM,CAC3B,SACA,MACA,OACA,OACsB;AAAA,EACtB,QAAQ,OAAO,UAAU;AAAA,EACzB,QAAQ,UAAU,WAAW,SAAS,SAAS,CAAC;AAAA,EAChD,MAAM,MAAM,MAAM,IAAI;AAAA,EACtB,MAAM,SAAS,MAAM,eAAe,MAAM,MAAM,KAAK;AAAA,EAErD,IAAI,OAA+B;AAAA,EACnC,IAAI,aAAa,WAAW;AAAA,IAC3B,cAAc,MAAM,UAAoB,KAAK;AAAA,IAC7C,OAAO;AAAA,MACN,MAAM,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAkB;AAAA,MACjE,WAAW;AAAA,IACZ;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,MAAM,WAAW;AAAA,IAC7C,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,IACpB,QAAQ,WAAW,YAAY,OAAO,WAAW;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACZ,CAAC;AAAA,EAGD,MAAM,KAAK,SAAS,gBAAgB,UAAU,SAAS,SAAS;AAAA,EAChE,OAAO;AAAA;;;AC3BR,eAAsB,MAAM,CAC3B,SACA,MACA,QACA,OACA,OACiC;AAAA,EACjC,MAAM,OAAO,aAAa,MAAM,KAAK;AAAA,EACrC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAC3C,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,MAAM,WAAW,OAAO;AAAA,EAExB,MAAM,SACL,OAAO,UAAU,WACd,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC,IAClD;AAAA,EACJ,MAAM,SAAS,CAAC,WACf,IAAI,iBACH,uBACA,GAAG,kDACH,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EAED,IAAI,WAAW,QAAQ,OAAO,aAAa,MAAM;AAAA,IAIhD,MAAM,OAAO,OAAO,OAAO,QAAQ,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,IAC/D,MAAM,OAAO,WAAW,OAAO,iBAAiB,YAAY;AAAA,EAC7D;AAAA,EAEA,IAAI,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,QAAQ,GAAG,KAAK,GAAI;AAAA,IACvE,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAGA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,EACjE,MAAM,SAAS,MAAM,OAAO,UAAU,KAAK;AAAA,EAG3C,IACC,CAAE,MAAM,eACP,SACA,MACA,UACA,OAAO,QAAQ,GACf,QACA,KACD,GACC;AAAA,IACD,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EACA,OAAO;AAAA;;;AC3DD,SAAS,aAAa,CAC5B,SACA,MACA,IACA,QAC6D;AAAA,EAC7D,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,aAAa,MAAM,KAAK;AAAA,MACxB,IAAK,OAAiB,aAAa,WAAW;AAAA,QAC7C,cAAc,MAAM,WAAgC,KAAK;AAAA,MAC1D;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,OAAgB,KAAK;AAAA,MAChE,OAAO,YAAY,SAAS,MAAM,MAAM;AAAA;AAAA,SAGnC,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,SAAS,MAAM,QAAQ,OAAgB,GAAG,QAAQ,CAAC;AAAA;AAAA,SAG5D,YAAW,CAAC,OAAO;AAAA,MACxB,MAAM,OAAO,aAAa,MAAM,GAAG,aAAa,CAAC;AAAA,MACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,MACjE,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,YAAW,CAAC,MAAM,UAAU,SAAS;AAAA,MAC1C,MAAM,QAAQ,GAAG,aAAa;AAAA,MAC9B,aAAa,MAAM,KAAK;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK;AAAA,MACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,MAE9D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,IAAI,EAAE,EACnD;AAAA,MACA,MAAM,kBAAkB,SAAS,QAAQ,EAAE;AAAA,MAC3C,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,eAAc,CAAC,MAAM,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,GAAG,gBAAgB;AAAA,MACjC,OAAO,OACN,MAAM,eAAe,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,CACjE;AAAA;AAAA,EAEF;AAAA;;;AChED,eAAsB,UAAU,CAC/B,SACA,MACA,MACmB;AAAA,EACnB,QAAQ,OAAO,UAAU;AAAA,EACzB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EAItB,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS,EAAE;AAAA,EAC5C,IAAI,WAAW,QAAQ,OAAO,SAAS,KAAK;AAAA,IAAM,OAAO;AAAA,EAMzD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,MAAM,UAAU,WAAW,QAAS,MAAM,MAAM,MAAM,WAAW,EAAE;AAAA,EACnE,IAAI;AAAA,IACH,MAAM,MAAM,SAAS,mBAAmB,EAAE;AAAA,IAC1C,MAAM,MAAM,OAAO,iBAAiB,EAAE;AAAA,IAEtC,MAAM,QAAQ,WAAW,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,YAC5D;AAAA,IAID,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,gBAAgB,EAAE,IAAI,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,IACvE;AAAA;AAAA,EAED,OAAO;AAAA;;;ACnCR,eAAsB,WAAW,CAChC,MACA,QACA,OACA,OACC;AAAA,EACD,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,OAAO,WAAW,MAAM,GAC7B,KACD;AAAA,EACA,MAAM,SAAS,QAAQ,MAAM,OAAO,MAAM;AAAA,EAC1C,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,MAAM,gBACJ,WAAW,OAAO,OAAO,eAAe,MAAM,QAC9C,UAAU,OAAO,OAAO,eAAe,KAAK;AAAA,EAE9C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,eAAe,KAAK;AAAA,OAEhB,eAAe,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,EACjD;AAAA;;;ACVM,SAAS,WAAW,CAC1B,SACA,MACA,IAC8B;AAAA,EAC9B,QAAQ,UAAU;AAAA,EAElB,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,MAAM,OAAO,SAAS,MAAM,OAAgB,GAAG,QAAQ,CAAC,CAAC;AAAA;AAAA,SAGlE,KAAI,CAAC,IAAI;AAAA,MACd,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,KAAK,IAAI;AAAA,MACtD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,IAAG,CAAC,IAAI;AAAA,MACb,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC;AAAA;AAAA,SAG3D,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,MAAM,SAAS;AAAA,MAG7B,IAAI,UAAU,QAAQ,CAAC,MAAK,KAAK,GAAG;AAAA,QACnC,MAAM,eAAc,GAAG,MAAM,GAAG,KAAK;AAAA,MACtC;AAAA,MAEA,MAAM,SAAS,MAAM,MAAM,MAAM,UAAU;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX;AAAA,QACA,OAAO,WAAU,MAAM,OAAO,GAAG,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,MACD,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,YAAY,OAAO,WAAW;AAAA;AAAA,SAGnE,OAAM,CAAC,MAAM,OAAO,SAAS;AAAA,MAClC,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW,YAAY,MAAM,QAAQ,OAAgB,KAAK,CAC5D;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,UAAS,CAAC,MAAM,QAAQ,SAAS;AAAA,MACtC,OAAO,OACN,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,OAAO;AAAA,QACrE,QAAQ,WAAW;AAAA,MACpB,EAAE,CACH;AAAA;AAAA,SAGK,OAAM,CAAC,MAAM;AAAA,MAClB,OAAO,WAAW,SAAS,MAAM,IAAI;AAAA;AAAA,EAEvC;AAAA;;;ACpEM,SAAS,OAAO,CAAC,SAAkB,MAAgC;AAAA,EACzE,MAAM,KAAS,CAAC,cACf,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,QAAQ;AAAA,EACrD,MAAM,eAAe,kBAAkB,SAAS,MAAM,EAAE;AAAA,EACxD,MAAM,aAAa,gBAAgB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,EAEzE,OAAO;AAAA,OACH,YAAY,SAAS,MAAM,EAAE;AAAA,OAC7B,cAAc,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAEvD,cAAc,aAAa;AAAA,IAC3B;AAAA,IACA,QAAQ,YAAY,SAAS,MAAM,EAAE;AAAA,OAElC,WAAW,SAAS,MAAM,EAAE;AAAA,EAChC;AAAA;;ACeM,SAAS,KAAkC,CACjD,QACW;AAAA,EACX,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW,cAAc,QAAQ,KAAK;AAAA,EAC5C,MAAM,eAAe,aAAa,OAAO,OAAO,KAAK;AAAA,EAErD,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,MAAM,YAAY;AAAA,IACjB,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM;AAAA,IAClC,GAAI,OAAO,aAAa,CAAC;AAAA,EAC1B;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,YAAY,WAAW;AAAA,IACjC,IAAI,OAAO,UAAU,WAAW,YAAY,SAAS,WAAW,IAAI;AAAA,MACnE,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,IACtE;AAAA,IACA,IAAI,SAAS,IAAI,SAAS,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,UACT,GAAG,wCAAwC,SAAS,0DACrD;AAAA,IACD;AAAA,IACA,SAAS,IAAI,SAAS,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,OAAO,aAAa;AAAA,EACtC,IACC,cAAc,QACd,OAAQ,UAAyC,iBAAiB,YACjE;AAAA,IACD,MAAM,IAAI,UACT,GAAG,+EACJ;AAAA,EACD;AAAA,EAEA,MAAM,UAAU,cACf,UACA,YAAY,OAAO,KAAK,GACxB,cAAc,OAAO,OAAO,eAAe,SAAS,GACpD,cACA,OAAO,SAAS,aAChB,QACA,WACA,cAAc,OAAO,QAAQ,KAAK,CACnC;AAAA,EAEA,MAAM,SAAS,UAAU,OAAO;AAAA,EAChC,MAAM,QAAQ,OAAO,YACpB,CAAC,GAAG,SAAS,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1C,KAAK;AAAA,IACL,QAAQ,SAAS,IAAI;AAAA,EACtB,CAAC,CACF;AAAA,EAIA,MAAM,UAAU,SAAS,SACtB,KAAK,WAAW,MAAM,KAAK,IAC3B,KAAK,WAAW,MAAM;AAAA,EACzB,OAAO;AAAA;;AC7ED,SAAS,WAAW,CAC1B,SACA,QACA,QAAe,aACR;AAAA,EACP,MAAM,WAAW,cAAc,QAAQ,qBAAqB;AAAA,EAC5D,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,EACpE,IAAI,OAAO,UAAU;AAAA,IACpB,MAAM,IAAI,qBACT,6FACA,EAAE,QAAQ,QAAQ,OAAO,CAC1B;AAAA,EACD;AAAA;",
|
|
74
|
-
"debugId": "
|
|
73
|
+
"mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,SAAS,YAAY,CAAC,SAEV;AAAA,EAClB,MAAM,OAAO,SAAS,QAAQ;AAAA,EAC9B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM,OAAO,IAAI;AAAA,IACtD,MAAM,IAAI,UACT,uFACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,SACF,KAAI,CAAC,OAAO;AAAA,MACjB,MAAM,OAAO,YAAY,EAAE;AAAA,MAC3B,MAAM,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,GAAG,CAAC;AAAA,MAChD,OAAO,GAAG,mBAAmB,gBAAgB,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ;AAAA;AAAA,SAExF,OAAM,CAAC,OAAO,MAAM;AAAA,MACzB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAIpC,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UACT,0EACD;AAAA,MACD;AAAA,MACA,SAAS,IAAI,GAAG,GAAG,MAAM,OAAO;AAAA,MAQhC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;AAAA,MAC1C,MAAM,SAAS,MAAM,OACpB,OACA,OAAO,KAAK,MAAM,QAAQ,GAC1B,OAAO,EAAE,GACT,OAAO,CAAC,GACR,OAAO,CAAC,GACR,SAAS,MACV;AAAA,MACA,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAAA,IAExC,WAAW,CAAC,MAAM;AAAA,MACjB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAEpC,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAC5B,SAAS,IAAI,GAAG,KAAK;AAAA,MACrB,OAAO,OAAO,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA;AAAA,EAEnD;AAAA;AAGD,IAAM,gBAAgB;AACtB,IAAM,cACL;AAED,SAAS,MAAM,CACd,OACA,MACA,IACA,GACA,GACA,SAAS,IACS;AAAA,EAGlB,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,IAIvC,OACC,OACA,MACA,QACA,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,MAAM,IAAI,EAAE,GACjE,CAAC,OAAO,QAAS,QAAQ,OAAO,KAAK,IAAI,QAAQ,GAAG,CACrD;AAAA,GACA;AAAA;AAWK,SAAS,SAAS,GAAmB;AAAA,EAG3C,MAAM,WACL,OAAO,QAAQ,cAAc,YAAY,IAAI;AAAA,EAE9C,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,IAAI,UACT,iGACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ;AAAA,IAC9C,QAAQ,CAAC,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAAA,IACpD,aAAa,CAAC,SAAS,CAAC,KAAK,WAAW,mBAAmB;AAAA,EAC5D;AAAA;AASD,IAAM,WAAW;AAAA,EAChB,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,UAAU;AACX;AACA,IAAM,sBAAsB;;ACjIrB,IAAM,cAAqB;AAAA,EACjC,KAAK,MAAM,IAAI;AAChB;AASO,SAAS,UAAU,CAAC,QAAuB,GAGhD;AAAA,EACD,IAAI,KAAK,iBAAiB,OAAO,MAAM,QAAQ,IAAI;AAAA,EAEnD,OAAO;AAAA,IACN,KAAK,MAAM,IAAI,KAAK,EAAE;AAAA,IACtB,SAAS,CAAC,OAAO;AAAA,MAChB,MAAM;AAAA;AAAA,IAEP,KAAK,CAAC,OAAO;AAAA,MACZ,KAAK,cAAc,OAAO,GAAG,QAAQ,IAAI;AAAA;AAAA,EAE3C;AAAA;;;ACzBD,IAAM,cAAc;AAAA,EACnB,MAAM,CAAC,UAAkB;AAAA,EACzB,WAAW,CAAC,UAAkB,MAAM,YAAY;AAAA,EAChD,eAAe,CAAC,UAAkB,MAAM,YAAY,EAAE,KAAK;AAAA,EAC3D,mBAAmB,CAAC,UACnB,MAAM,UAAU,MAAM,EAAE,YAAY,EAAE,KAAK;AAC7C;AAGO,IAAM,iBAAiB,YAAY;AAGnC,SAAS,UAAU,CACzB,MACA,OAC4B;AAAA,EAC5B,IAAI,OAAO,SAAS;AAAA,IAAY,OAAO;AAAA,EACvC,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,IAAI,GAAG;AAAA,IACjE,OAAO,YAAY;AAAA,EACpB;AAAA,EAEA,MAAM,IAAI,UACT,GAAG,uFACJ;AAAA;;ACpCM,IAAM,cAAc;AAMpB,IAAM,kBAAkB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGO,IAAM,iBAAiB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;;ACzBA,IAAM,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACJ;AAEA,IAAM,UAAU;AAcT,SAAS,aAAa,CAAC,OAAiB,OAAuB;AAAA,EACrE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,MAC1C,MAAM,IAAI,UACT,GAAG,sEACJ;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAEhC,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,IAAI,UACT,GAAG,WAAW,qGACf;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,OAAO,MAAM,EAAE;AAAA,EAC9B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,MAAM;AAAA,EAE1B,IAAI,MAAM,GAAG;AAAA,IACZ,MAAM,IAAI,UAAU,GAAG,sCAAsC;AAAA,EAC9D;AAAA,EAEA,OAAO;AAAA;;;AClDD,IAAM,OAAO;AAGb,SAAS,SAAS,CAAC,OAAgB,OAAuB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA,IACnD,MAAM,IAAI,UACT,GAAG,kEACJ;AAAA,EACD;AAAA,EACA,IAAK,gBAAsC,SAAS,KAAK,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,GAAG,WAAW,qCAAqC;AAAA,EACxE;AAAA,EACA,OAAO;AAAA;;;ACdR,IAAM,cAAc;AAEb,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,MAAM,OAAO,OAAO,QAAQ;AAAA,EAC5B,IAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,kHACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,OAAO,YAAY;AAAA,EACpC,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,IAAI,aAAa,UAAU,CAAC,QAAQ;AAAA,IACnC,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,OAAO,UAAU;AAAA,IACzB,MAAM,OAAO,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AAAA;;;AChCD,0DAA2C;AA6B3C,IAAM,YAAY;AAElB,IAAM,SAAS;AACf,IAAM,MAAM;AAGL,SAAS,aAAa,CAAC,MAAe,OAAuB;AAAA,EACnE,IAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAAA,IAC9C,MAAM,IAAI,UACT,GAAG,mEACJ;AAAA,EACD;AAAA,EACA,MAAM,UAAU,IAAI;AAAA,EACpB,WAAW,SAAS,MAA+B;AAAA,IAClD,MAAM,KAAK,OAAO;AAAA,IAClB,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,KAAK,EAAE,GAAG;AAAA,MAC/C,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,IACD;AAAA,IACA,IAAI,QAAQ,IAAI,EAAE,GAAG;AAAA,MACpB,MAAM,IAAI,UAAU,GAAG,gCAAgC,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,MAAM,MAAM;AAAA,IAClB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GAAG,GAAG;AAAA,MAC9C,MAAM,IAAI,UACT,GAAG,mBAAmB,uEACvB;AAAA,IACD;AAAA,IACA,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,EAAE,UAAW,KAAK,GAAkB,IAAI,MAAM,QAAQ;AAAA;AAIvD,SAAS,IAAI,CAAC,QAAgB,OAAe,SAAyB;AAAA,EAC5E,MAAM,MAAM,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,EAC3C,MAAM,KAAK,aAAY,EAAE;AAAA,EACzB,MAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AAAA,EACpD,OAAO,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,EAClC,MAAM,SAAS,OAAO,OAAO;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM;AAAA,IAC3B,OAAO,MAAM;AAAA,IACb,OAAO,WAAW;AAAA,EACnB,CAAC;AAAA,EACD,OAAO,MAAM,OAAO,YAAY,GAAG,SAAS,WAAW,KAAK,OAAO,SAAS,WAAW;AAAA;AAUjF,SAAS,MAAM,CACrB,QACA,QACA,SACA,OACqD;AAAA,EACrD,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,OAAO,SAAS,OAAO,IAAI,QAAQ;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK,QAAQ,IAAI,WAAW;AAAA,EAEjD,IACC,MAAM,WAAW,KACjB,YAAY,QACZ,UAAU,aACV,OAAO,aACP,MAAM,UAAU,WACf;AAAA,IACD,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,EACtE;AAAA,EACA,MAAM,MAAM,OAAO,KAAK,IAAI,KAAK;AAAA,EACjC,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,IAAI,UACT,GAAG,6CAA6C,gGACjD;AAAA,EACD;AAAA,EACA,IAAI;AAAA,IACH,MAAM,WAAW,iBAChB,eACA,KACA,OAAO,KAAK,IAAI,WAAW,GAC3B,EAAE,eAAe,UAAU,CAC5B;AAAA,IACA,SAAS,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,IACpC,SAAS,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;AAAA,IAC5D,MAAM,QAAQ,OAAO,OAAO;AAAA,MAC3B,SAAS,OAAO,MAAM,SAAS,GAAG,MAAM,SAAS,SAAS,CAAC;AAAA,MAC3D,SAAS,MAAM;AAAA,IAChB,CAAC,EAAE,SAAS,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,MAAM;AAAA,IACrB,OAAO,OAAO;AAAA,IACf,MAAM,IAAI,UACT,GAAG,iDAAiD,4FACpD,EAAE,MAAM,CACT;AAAA;AAAA;;;ACxHK,SAAS,mBAAmB,CAClC,QACA,OACiC;AAAA,EACjC,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,KAAK,GAAG;AAAA,EACd,IAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,KAAK,MAAM,IAAI;AAAA,IACtE,MAAM,IAAI,UACT,GAAG,0FACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,QAAQ,cAAc,OAAO,MAAM,GAAG,SAAS;AAAA,IAC/C,gBAAgB,cAAc,OAAO,aAAa,MAAM,GAAG,cAAc;AAAA,EAC1E;AAAA;;;ACZM,SAAS,WAAW,CAC1B,MACA,MACA,IACA,WACe;AAAA,EACf,IACC,OAAO,MAAM,WAAW,YACxB,KAAK,WAAW,QAChB,OAAO,KAAK,OAAO,cAAc,aAAa,YAC7C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,OAAO,0EACX;AAAA,EACD;AAAA,EAEA,MAAM,WACL,KAAK,aAAa,YAAY,OAAO,gBAAgB,KAAK,UAAU,EAAE;AAAA,EAEvE,MAAM,aAAa,KAAK,SAAS,cAAc;AAAA,EAE/C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO,UAAU,KAAK,SAAS,SAAS,GAAG,WAAW;AAAA,IACtD,YAAY,cACX,KAAK,SAAS,YAAY,MAC1B,GAAG,sBACJ;AAAA,IACA,cACC,eAAe,QACZ,OACA,cAAc,YAAY,GAAG,wBAAwB;AAAA,EAC1D;AAAA;AAGD,SAAS,eAAe,CACvB,UACA,IACwC;AAAA,EACxC,MAAM,YAAY,SAAS,aAAa;AAAA,EACxC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,yDACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,OAAO,UAAU,SAAS,OAAO,GAAG,oBAAoB;AAAA,IACxD,WAAW,WACV,SAAS,aAAa,iBACtB,GAAG,wBACJ;AAAA,IACA;AAAA,EACD;AAAA;;;AC7CM,SAAS,aAAa,CAC5B,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UAAU,GAAG,wCAAwC;AAAA,EAChE;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,WAAW,OAAO,UAAU;AAAA,EAClC,IAAI,YAAY,UAAU;AAAA,IACzB,MAAM,IAAI,UACT,GAAG,gGACJ;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ,aAAa,UAAU,QAAQ,QAAQ,GAAG,UAAU,KAAK;AAAA,EACvE,2BAA2B,QAAQ,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA,IACN,QAAQ,CAAC;AAAA,IACT;AAAA,IACA,YAAY,iBAAiB,QAAQ,KAAK;AAAA,IAC1C,QAAQ,cAAc,OAAO,UAAU,CAAC,GAAG,KAAK;AAAA,IAChD,cAAc,oBAAoB,OAAO,cAAc,KAAK;AAAA,EAC7D;AAAA;AAID,SAAS,SAAS,CACjB,QACA,UAC6B;AAAA,EAC7B,OAAO,WACJ,OAAO,QAAQ,OAAO,KAAiC,IACvD;AAAA,IACA;AAAA,MACC;AAAA,MACA;AAAA,WACK;AAAA,QACJ,QAAQ,OAAO;AAAA,MAChB;AAAA,IACD;AAAA,EACD;AAAA;AAGH,SAAS,YAAY,CACpB,SACA,UACA,OAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW,GAAG;AAAA,IACzB,MAAM,IAAI,UAAU,GAAG,oCAAoC;AAAA,EAC5D;AAAA,EAEA,MAAM,QAAQ,IAAI;AAAA,EAClB,YAAY,MAAM,SAAS,SAAS;AAAA,IACnC,MAAM,KAAK,WAAW,GAAG,gBAAgB,SAAS;AAAA,IAElD,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AAAA,MACrB,MAAM,IAAI,UACT,GAAG,yBAAyB,6EAC7B;AAAA,IACD;AAAA,IACA,IAAK,eAAqC,SAAS,IAAI,GAAG;AAAA,MACzD,MAAM,IAAI,UACT,GAAG,WAAW,uEACf;AAAA,IACD;AAAA,IACA,MAAM,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,WAAW,WAAW,MAAM,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGR,SAAS,0BAA0B,CAClC,QACA,OACA,OACO;AAAA,EACP,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI;AAAA,EACzE,IAAI,WAAW,OAAO,WAAW,WAAW;AAAA,IAC3C,MAAM,IAAI,UACT,GAAG,sJACJ;AAAA,EACD;AAAA;AAGD,SAAS,gBAAgB,CACxB,QACA,OAC+B;AAAA,EAC/B,OAAO;AAAA,IACN,aAAa,cACZ,OAAO,QAAQ,eAAe,OAC9B,GAAG,2BACJ;AAAA,IACA,eAAe,cACd,OAAO,QAAQ,iBAAiB,MAChC,GAAG,6BACJ;AAAA,IACA,YAAY,cACX,OAAO,QAAQ,cAAc,OAC7B,GAAG,0BACJ;AAAA,IACA,QAAQ,cACP,OAAO,QAAQ,UAAU,OACzB,GAAG,sBACJ;AAAA,EACD;AAAA;;ACnGM,SAAS,aAAa,CAC5B,QACA,OACA,WACA,cACA,OACA,QACA,WACA,SAAmC,MACzB;AAAA,EACV,IAAI,QAAgC;AAAA,EAEpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,MAAM;AAAA,MAChB,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UAAU,+CAA+C;AAAA,MACpE;AAAA,MACA,UAAU,OAAO,KAAK,eAAe,QAAO,GAAG;AAAA,MAC/C,OAAO;AAAA;AAAA,EAET;AAAA;;AC7CM,SAAS,OAAO,CAAC,MAAoB,QAAmC;AAAA,EAC9E,MAAM,QAAQ,OAAO,KAAK;AAAA,EAC1B,OAAO,OAAO,UAAU,WAAW,QAAQ;AAAA;AAQrC,SAAS,QAAQ,CACvB,MACA,QACA,OACW;AAAA,EACX,MAAM,SAAS,IAAI;AAAA,EAEnB,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,IAAI,OAAO,UAAU,UAAU;AAAA,MAC9B,MAAM,IAAI,UACT,0BAA0B,KAAK,SAAS,6CAA6C,KAAK,oDAC3F;AAAA,IACD;AAAA,IACA,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK;AAAA,IAIhD,IAAI,CAAC,WAAW,UAAU,GAAG;AAAA,MAC5B,MAAM,OAAO,CAAC,KAAK,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,4BAA4B,KAAK,KAAK,GAAG,MACvF;AAAA,QACC,QAAQ;AAAA,UACP,EAAE,MAAM,SAAS,8BAA8B,aAAa;AAAA,QAC7D;AAAA,QACA,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO,IAAI,UAAU;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,IAAI,UAAU;AAAA,IAAM,OAAO,IAAI,eAAe,KAAK,CAAC;AAAA,EAEpD,OAAO,CAAC,GAAG,MAAM;AAAA;AAQlB,eAAsB,aAAa,CAClC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,eAAe,KAAK;AAAA,EACnC,IAAI,CAAC,WAAW,MAAM;AAAA,IAAG,OAAO;AAAA,EAChC,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,MAAM;AAAA,EAC1E,MAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,MAAM,OAAO,MAAM;AAAA,EACjE,OAAO,SAAS,QAAQ,eAAe,IAAI,MAAM,SAAS,SAAS;AAAA;;ACtC7D,SAAS,WAAW,CAAC,QAAkC;AAAA,EAC7D,OAAO;AAAA,IACN,OAAO,WAAW,SAAS,OAAO,KAAK;AAAA,IACvC,UAAU,WAAW,YAAY,OAAO,QAAQ;AAAA,IAChD,QAAQ,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AAAA;AAUM,SAAS,QAAW,CAAC,OAAiB,QAA6B;AAAA,EACzE,IAAI,UAAU;AAAA,IAAM,MAAM,OAAO;AAAA,EACjC,OAAO;AAAA;AAaR,eAAsB,qBAAwB,CAC7C,OACoB;AAAA,EACpB,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAW,OAAO;AAAA,IACrE,MAAM;AAAA;AAAA;;;AC9DD,SAAS,YAAY,CAAC,MAAoB,OAAe;AAAA,EAC/D,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,4EACvB;AAAA,EACD;AAAA,EACA,OAAO,KAAK;AAAA;AAIN,SAAS,aAAa,CAC5B,MACA,UACA,OACO;AAAA,EACP,MAAM,YAAY,KAAK,UAAU,aAAa;AAAA,EAC9C,IAAI,OAAO,aAAa,YAAY,SAAS,SAAS,WAAW;AAAA,IAChE,MAAM,IAAI,iBACT,sBACA,GAAG,oDAAoD,wBACvD,EAAE,WAAW,UAAU,KAAK,KAAK,CAClC;AAAA,EACD;AAAA;AAIM,SAAS,aAAa,CAAC,SAAkB,OAA+B;AAAA,EAC9E,IAAI,QAAQ,WAAW,MAAM;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,yFACJ;AAAA,EACD;AAAA,EACA,OAAO,QAAQ;AAAA;AAOhB,eAAsB,eAAe,CACpC,SACA,QACA,UACA,OACmB;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,WAAW,QAAQ,UAAU,KAAK,CAAC,cACxC,OAAO,KAAK,WAAW,UAAU,MAAM,CACxC;AAAA,EACA,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,aAAa,aAAa,KAAK,OAAO,IAAI,IAAI,MAAM;AAAA,IAC1D,MAAM,IAAI,iBACT,oBACA,GAAG,+CAA+C,eAClD,EAAE,YAAY,QAAQ,OAAO,IAAI,UAAU,OAAO,KAAK,CACxD;AAAA,EACD;AAAA,EAEA,OAAO,SAAS,OAAO,UAAU,OAAO,IAAI;AAAA;AAY7C,eAAsB,QAAQ,CAC7B,SACA,QACA,UACsB;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW,QAAQ,WAAW;AAAA,IAAM,OAAO;AAAA,EAE/C,MAAM,QACL,CAAC,OAAO,KAAK,WAAW,OAAO,MAAM,KACrC,OAAO,cAAc,OAAO,IAAI,MAAM;AAAA,EACvC,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,MAAM,UAAU,MAAM,sBACrB,QAAQ,MAAM,MAAM,WACnB,OAAO,IACP;AAAA,IACC,WAAW,QAAQ,MAAM,IAAI;AAAA,IAE7B,UAAU;AAAA,MACT,MAAM,MAAM,OAAO,KAAK,QAAQ;AAAA,MAChC,WAAW,OAAO;AAAA,IACnB;AAAA,EACD,GACA,OAAO,OACR,CACD;AAAA,EACA,OAAO,WAAW;AAAA;;ACnGZ,SAAS,MAAM,CAAC,QAA6B;AAAA,EACnD,OAAO;AAAA,OACH,OAAO;AAAA,IACV,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,eAAe,OAAO,oBAAoB;AAAA,IAC1C,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO,aAAa;AAAA,IACjC,iBAAiB,OAAO,cAAc,eAAe;AAAA,IACrD,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACnB;AAAA;AAIM,IAAM,OAAO,CAAC,SACpB,OAAO,SAAS,WAAW,OAAO,KAAK;;;AChBxC,IAAM,WAAW,CAAC,OAAe,IAAY,SAC5C,IAAI,eACH,GAAG,aAAa,QAAQ,sBACxB,SAAS,OACN,EAAE,QAAQ,IAAI,WAAW,MAAM,IAC/B,EAAE,QAAQ,IAAI,UAAU,MAAM,WAAW,MAAM,CACnD;AAQD,eAAsB,UAAU,CAC/B,SACA,IACA,MAC6B;AAAA,EAC7B,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EACtB,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,SAAS,EAAE;AAAA,EACpD,OAAO,WAAW,SAAS,SAAS,QAAQ,OAAO,SAAS,QACzD,SACA;AAAA;AAIJ,eAAsB,SAAS,CAC9B,SACA,IACA,MACA,OACsB;AAAA,EACtB,OAAO,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,GAAG,MACpD,SAAS,OAAO,IAAI,IAAI,CACzB;AAAA;AASD,eAAsB,SAAS,CAC9B,SACA,MACA,MACA,SACA,OACA,SAIsB;AAAA,EACtB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,MAAM,YAAY,SAAS;AAAA,EAE3B,IAAI,cAAc,aAAa,cAAc,OAAO,SAAS;AAAA,IAC5D,MAAM,IAAI,eACT,WACA,GAAG,2BAA2B,oBAAoB,OAAO,WACzD;AAAA,MACC,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,eAAe,OAAO;AAAA,MACtB,WAAW;AAAA,IACZ,CACD;AAAA,EACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG;AAAA,EACvC,OAAO,QAAQ,MAAM,MAAM,WAC1B,OAAO,IACP,KAAK,OAAO,WAAW,IAAI,GAC3B,OAAO,OACR;AAAA;;AC7ED,eAAsB,cAAc,CACnC,MACA,OACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,KAAK,OAAO,aAAa,SAAS,KAAK;AAAA,EAE5D,MAAM,SACL,OAAO,WAAW,YACf,CAAC,IACD,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC9B,MAAM,gBAAgB,MAAM,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC;AAAA,IACvD,SAAS,MAAM;AAAA,EAChB,EAAE;AAAA,EAKL,IAAI,OAAO,WAAW,WAAW;AAAA,IAChC,MAAM,QAAQ,OAAO;AAAA,IACrB,WAAW,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,OAAO,OAAO,GAAG,GAAG;AAAA,QAC9B,OAAO,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACvE;AAAA,IACD;AAAA,IACA,aAAa,OAAO,CAAC,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,IAAI,OAAO,SAAS,GAAG;AAAA,IAItB,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,gBAAgB,OAAO,eAAe,OAAO,WAAW,IAAI,KAAK,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,EAAE,KAAK,IAAI,MACnL,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EACD;AAAA,EAEA,OAAO,iBAAkB,OAA8B,KAAK;AAAA;AAI7D,SAAS,YAAY,CACpB,OACA,MACA,QACO;AAAA,EACP,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,WAAW,KAAK;AAAA,MAAG,OAAO,KAAK,EAAE,MAAM,SAAS,WAAW,CAAC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,YAAY,OAAO,UAAU,MAAM,QAAQ,GAAG;AAAA,MAC7C,aAAa,OAAO,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,IAC7C;AAAA,IACA;AAAA,EACD;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAGjD,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,QACrB,OAAO,KAAK,EAAE,MAAM,SAAS,SAAS,aAAa,CAAC;AAAA,MACrD,EAAO;AAAA,QACN,aAAa,OAAO,CAAC,GAAG,MAAM,GAAG,GAAG,MAAM;AAAA;AAAA,IAE5C;AAAA,EACD;AAAA;AAOD,SAAS,cAAc,CAAC,MAAgD;AAAA,EACvE,MAAM,MAAM,KAAK,UAChB,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,WAAW,OAAO,CAChE;AAAA,EACA,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG;AAAA;AAG7C,SAAS,UAAU,CAClB,SACkB;AAAA,EAClB,MAAM,MAAM,OAAO,YAAY,WAAW,QAAQ,MAAM;AAAA,EACxD,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AAAA;AAGlD,SAAS,gBAAgB,CAAC,OAAsB;AAAA,EAC/C,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,gBAAgB;AAAA,EAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,MAAM,MAA4B,CAAC;AAAA,IACnC,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjD,IAAI,UAAU;AAAA,QAAW,IAAI,OAAO,iBAAiB,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;;ACtDD,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,IAAI,UACT,GAAG,mHACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAUR,eAAsB,IAAI,CACzB,SACA,MACA,MACA,YACgB;AAAA,EAChB,MAAM,WAAW,QAAQ;AAAA,EACzB,IAAI,aAAa;AAAA,IAAM;AAAA,EAEvB,MAAM,QAAmB,OAAO,OAAO;AAAA,IACtC,IAAI,QAAO,WAAW,QAAQ,CAAC;AAAA,IAC/B;AAAA,IAEA,YAAY,IAAI,KAAK,WAAW,QAAQ,CAAC;AAAA,IACzC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,EAChB,CAAC;AAAA,EACD,IAAI;AAAA,IACH,MAAM,SAAS,KAAK;AAAA,IACnB,OAAO,SAAS;AAAA,IACjB,QAAQ,YACP,wCAAwC,QAAQ,MAAM,eAAe,KAAK,OAAO,mBAAmB,QAAQ,QAAQ,OAAO,OAAO,WAClI,EAAE,MAAM,qBAAqB,CAC9B;AAAA;AAAA;;;AC9FF,IAAM,WAAW;AAAA,EAChB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,UAAU;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,QAAQ;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAeO,SAAS,YAAY,CAC3B,QACA,OACoB;AAAA,EACpB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,gEACJ;AAAA,EACD;AAAA,EAEA,WAAW,QAAQ,OAAO,KAAK,QAAQ,GAAgC;AAAA,IACtE,MAAM,QAAkB,OAAmC;AAAA,IAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,MAChD,MAAM,IAAI,UAAU,GAAG,gBAAgB,iBAAiB;AAAA,IACzD;AAAA,IAEA,WAAW,UAAU,SAAS,OAAO;AAAA,MACpC,IAAI,OAAQ,MAAkC,YAAY,YAAY;AAAA,QACrE,MAAM,IAAI,UACT,GAAG,gBAAgB,sBAAsB,iCAC1C;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,WAAY,OAAiD;AAAA,EACnE,MAAM,UAAU,SAAS;AAAA,EAIzB,IAAI,YAAY,aAAa,OAAO,YAAY,YAAY;AAAA,IAC3D,MAAM,IAAI,UACT,GAAG,0EACJ;AAAA,EACD;AAAA,EAEA,OAAO,EAAE,gBAAgB,YAAY,UAAU;AAAA;;;ACtFhD,oCAAqB;AAQd,SAAS,UAAU,GAAW;AAAA,EACpC,OAAO,aAAY,EAAE,EAAE,SAAS,WAAW;AAAA;AAWrC,SAAS,UAAU,CAAC,QAAwB;AAAA,EAClD,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AAAA;;;ACRjD,SAAS,SAAS,CAAC,QAAgC;AAAA,EACzD,QAAQ,WAAW,MAAM,YAAY;AAAA,EACrC,OAAO;AAAA;AAOR,eAAsB,WAAW,CAChC,SACA,MACA,MAC6B;AAAA,EAC7B,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,WAAW;AAAA,EACzB,MAAM,SAAwB;AAAA,IAC7B,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,WAAW,WAAW,KAAK;AAAA,IAC3B,QAAQ,KAAK;AAAA,IACb,iBAAiB;AAAA,IACjB,WAAW,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,UAAU;AAAA,IACnD,WAAW;AAAA,IACX,WAAW;AAAA,EACZ;AAAA,EAEA,MAAM,QAAQ,MAAM,SAAS,cAAc,MAAM;AAAA,EACjD,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,MAAM;AAAA,IACzB;AAAA,EACD;AAAA;;AC5BM,SAAS,cAAc,CAC7B,SACA,YACgB;AAAA,EAChB,MAAM,UAAU,UAAU,OAAO;AAAA,EACjC,MAAM,OAAO,CAAC,SAAgC;AAAA,IAC7C,IAAI,mBAAmB;AAAA,MAAS,OAAO,QAAQ,IAAI,IAAI;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;AAAA,MACnD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU;AAAA,QAAW;AAAA,MACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,MAAM,gBAAgB,KAAK,eAAe;AAAA,EAC1C,IAAI,kBAAkB,MAAM;AAAA,IAC3B,MAAM,QAAQ,wBAAwB,KAAK,cAAc,KAAK,CAAC;AAAA,IAC/D,IAAI;AAAA,MAAO,OAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,SAAS,KAAK,iBAAiB;AAAA,EACrC,IAAI,WAAW;AAAA,IAAM,OAAO,OAAO,KAAK;AAAA,EAExC,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,WAAW,MAAM;AAAA,IACpB,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,MACrC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC3B,IAAI,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,YAAY;AAAA,QACzD,OAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,MAChC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA;AAOR,SAAS,SAAS,CAAC,SAA8C;AAAA,EAChE,IAAI,mBAAmB;AAAA,IAAS,OAAO;AAAA,EACvC,MAAM,QAAS,QAAkC;AAAA,EACjD,IAAI,iBAAiB;AAAA,IAAS,OAAO;AAAA,EACrC,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,OAAO;AAAA;;ACvCR,eAAsB,eAAe,CACpC,SACA,SAC4B;AAAA,EAC5B,MAAM,QAAQ,eAAe,SAAS,QAAQ,OAAO,OAAO,IAAI;AAAA,EAChE,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAE3B,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,uBAC5C,WAAW,KAAK,CACjB;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,OAAO,YAAY,QAClB,QAAQ,cAAc,QACtB,QAAQ,UAAU,QAAQ,KAAK,MAC7B,OACA,EAAE,OAAO,QAAQ;AAAA;;;ACzBrB,eAAsB,YAAY,CACjC,SACA,SACA,SACyC;AAAA,EACzC,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACxD,IAAI,cAAc;AAAA,IAAM,OAAO;AAAA,EAC/B,QAAQ,OAAO,YAAY;AAAA,EAC3B,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ;AAAA,EAIhC,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACtD,IACC,SAAS,QACT,CAAC,KAAK,UACL,SAAS,SAAS,aAAa,KAAK,SAAS,QAAQ,MACrD;AAAA,IACD,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK,IAAI;AAAA,EACvC,IAAI,SAAS,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG,GAAG;AAAA,IAC1D,OAAO;AAAA,MACN,MAAM,OAAO,IAAI;AAAA,MACjB,SAAS,UAAU,OAAO;AAAA,MAC1B;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,cACrC,QAAQ,IACR,IAAI,KAAK,MAAM,KAAK,UAAU,CAC/B;AAAA,EAGA,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,OAAO;AAAA,IACN,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,EACV;AAAA;AAQD,SAAS,UAAU,CAClB,MACA,SACA,KACU;AAAA,EACV,OACC,KAAK,iBAAiB,QACtB,KAAK,cAAc,QAAQ,UAAU,QAAQ,IAAI,QAAQ,KAAK;AAAA;;;AChEzD,SAAS,QAAQ,CAAC,SAAgD;AAAA,EACxE,QAAQ,MAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,OAAO;AAAA,EAChE,MAAM,aAAa;AAAA,IAClB,QAAQ;AAAA,IACR,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ;AAAA,IAC9C;AAAA,IACA,YAAY,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC;AAAA,IACzD,GAAI,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5B,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACN;AAAA,IACA,WAAW,CAAC,OAAe,YAC1B,GAAG,QAAQ,kBAAkB,QAAQ,UAAU,YAAY,MAAM;AAAA,IAClE,OAAO,MACN,GAAG,4DAA4D;AAAA,EACjE;AAAA;;;ACMM,SAAS,SAAS,CAAC,SAAqC;AAAA,EAC9D,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,OAAO;AAAA,SACA,aAAY,CAAC,SAAS,SAAS;AAAA,MACpC,OAAO,aAAa,SAAS,SAAS,OAAO;AAAA;AAAA,SAGxC,QAAO,CAAC,SAAS;AAAA,MACtB,MAAM,QAAQ,eAAe,SAAS,OAAO,OAAO,IAAI;AAAA,MACxD,IAAI,UAAU;AAAA,QAAM,OAAO;AAAA,MAE3B,MAAM,UAAU,MAAM,MAAM,SAAS,uBACpC,WAAW,KAAK,CACjB;AAAA,MACA,IAAI,YAAY;AAAA,QAAM,OAAO;AAAA,MAC7B,OAAO,MAAM,SAAS,cAAc,QAAQ,IAAI,MAAM,IAAI,CAAC;AAAA;AAAA,SAGtD,kBAAiB,CAAC,MAAM,SAAS;AAAA,MACtC,MAAM,KAAK,KAAK,IAAI;AAAA,MACpB,IAAI,CAAC,MAAK,EAAE;AAAA,QAAG,OAAO;AAAA,MAGtB,OAAO,SAAS,WAAW,aAAa,CAAC,MAAK,QAAQ,MAAM,IACzD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,CAAC,IACjD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,GAAG,QAAQ,MAAM;AAAA;AAAA,SAG/D,SAAQ,CAAC,IAAI;AAAA,MAClB,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI;AAAA,MACjD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,QAAO,CAAC,IAAI;AAAA,MACjB,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,MAAM,SAAS,CAAC;AAAA;AAAA,IAG5D,QAAQ,SAAS,OAAO;AAAA,SAElB,eAAc,GAAG;AAAA,MACtB,MAAM,UAAU,MAAM,SAAS;AAAA,MAC/B,IAAI,CAAC,QAAQ,aAAa,kBAAkB,YAAY,WAAW;AAAA,QAClE,MAAM,IAAI,kBACT,4IACA,EAAE,MAAM,YAAY,WAAW,wBAAwB,CACxD;AAAA,MACD;AAAA,MACA,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA,IAG3B,OAAO,CAAC,GAAG,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/B;AAAA;;AC7ED,4BAAS;;;ACcF,SAAS,WAAW,CAC1B,MACA,MACA,OACA,OACA,MACO;AAAA,EACP,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IACC,UAAU,QACV,eAAe,KAAK,MAAM,eAAe,MAAM,OAAO,GACrD;AAAA,IACD,MAAM,IAAI,YACT,eACA,GAAG,cAAc,qDACjB,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQM,SAAS,cAAc,CAC7B,OACA,KACA,OACA,MAC+B;AAAA,EAC/B,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,MAClE,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,YAAY,MAAM;AAAA,IAC3B,MAAM,IAAI,YACT,eACA,GAAG,cAAc,yBACjB,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,IAAI,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,IAC/C,MAAM,IAAI,YAAW,iBAAiB,GAAG,cAAc,oBAAoB;AAAA,MAC1E,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA;AAIM,IAAM,iBAAiB,CAAC,OAAe,SAC7C,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,EAC5D,WAAW;AACZ,CAAC;;;AC3DF,eAAsB,YAAY,CACjC,SACA,QACA,MACA,OACA,MACuB;AAAA,EACvB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,MACA,GACD;AAAA,EACA,eAAe,OAAO,KAAK,OAAO,IAAI;AAAA,EACtC,OAAO;AAAA;AAQR,eAAsB,WAAW,CAChC,SACA,QACA,MACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,aAC1B,WAAW,MAAM,GACjB,MACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AF1BM,IAAM,gBAAgB;AAQ7B,eAAsB,gBAAgB,CACrC,SACA,QACA,MACA,OACA,UAC0E;AAAA,EAC1E,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,IACD;AAAA,EACA,eAAe,OAAO,QAAQ,MAAM,IAAI,GAAG,OAAO,WAAW;AAAA,EAC7D,IAAI,MAAM,WAAW,eAAe;AAAA,IACnC,MAAM,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC;AAAA,EACnD;AAAA,EACA,OAAO,EAAE,OAAO,cAAc,gBAAgB,MAAM,SAAS;AAAA;AAOvD,SAAS,WAAW,CAC1B,OACA,QACA,UACA,cACa;AAAA,EACb,OAAO,IAAI,YACV,gBACA,GAAG,uDACH;AAAA,IACC,WAAW;AAAA,IACX;AAAA,IACA;AAAA,OACI,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa;AAAA,EACtD,CACD;AAAA;AASD,eAAsB,gBAAgB,CACrC,SACA,OACA,QACA,OACsB;AAAA,EACtB,IAAI,MAAM,aAAa,eAAe;AAAA,IACrC,MAAM,YAAY,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC9C;AAAA,EACA,OAAO,eAAe,OAAO,WAAW;AAAA;AAQlC,IAAM,WAAW,CAAC,WAAmB,SAC3C,WAAW,GAAG,YAAY,MAAM;AAG1B,SAAS,WAAW,CAC1B,OACA,WACA,MACU;AAAA,EACV,IAAI,MAAM,aAAa,QAAQ,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAC7D,MAAM,QAAQ,OAAO,KAAK,SAAS,WAAW,IAAI,CAAC;AAAA,EACnD,MAAM,OAAO,OAAO,KAAK,MAAM,QAAQ;AAAA,EACvC,OAAO,MAAM,WAAW,KAAK,UAAU,iBAAgB,OAAO,IAAI;AAAA;;AGlGnE;AAiBA,eAAsB,YAAY,CACjC,SACA,OACiE;AAAA,EACjE,OAAO,cAAc,SAAS,OAAO,IAAI;AAAA;AAO1C,eAAsB,SAAS,CAC9B,SACA,OAKE;AAAA,EACF,MAAM,OAAO,OAAO,UAAU,GAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,EACzD,OAAO,KAAM,MAAM,cAAc,SAAS,OAAO,IAAI,GAAI,KAAK;AAAA;AAG/D,eAAe,aAAa,CAC3B,SACA,OACA,MACiE;AAAA,EACjE,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,SAAS,WAAW;AAAA,EAC1B,MAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EAEtD,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,IACtC,WAAW,WAAW,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,SAAS,OAAO,OAAO,SAAS,QAAQ,IAAI;AAAA,IACtD,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACZ,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,UAAU;AAAA;;AC/B5B,eAAsB,wBAAwB,CAC7C,SACA,QACgB;AAAA,EAChB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,WAC1B,CAAC,iBAAiB,cAAc,EAAY,IAAI,CAAC,SACjD,QAAQ,MAAM,OAAO,gBAAgB,QAAQ,MAAM,GAAG,CACvD,CACD;AAAA,EACA,MAAM,SAAS,MAAM,KACpB,CAAC,WAA4C,OAAO,WAAW,UAChE;AAAA,EACA,IAAI,WAAW;AAAA,IAAW,MAAM,OAAO;AAAA;AAaxC,eAAsB,cAAc,CACnC,SACA,MACA,UACA,UACA,QACA,OACmB;AAAA,EACnB,MAAM,MAAM,MAAM,WAAW,SAAS,SAAS,IAAI,KAAK,IAAI;AAAA,EAC5D,MAAM,OACL,QAAQ,QACR,IAAI,aAAa,SAChB,IAAI,SAAS,SAAS,SAAS,UAAU,QACxC,MAAM,gBAAgB,SAAS,KAAK,UAAU,KAAK;AAAA,EACtD,IAAI;AAAA,IAAM,OAAO;AAAA,EAEjB,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,QAAQ,MAAM,SAAS,cAC5B,OAAO,QAAQ,IACf,QAAQ,MAAM,IAAI,CACnB;AAAA,EACD,EAAO;AAAA,IACN,MAAM,YAAY,SAAS,OAAO,WAAW,cAAc;AAAA;AAAA,EAE5D,OAAO;AAAA;;;AC7DR,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,MAAM,OAAO,OAAO;AAAA,EACtE,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,OAAO,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,KAAK;AAAA;AAItB,eAAsB,eAAe,CACpC,SACA,MACA,MACA,MACA,OACuB;AAAA,EACvB,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAEA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,QAAQ,OAAO,UAAU;AAAA;;;AC9BnC,SAAS,kBAAkB,CACjC,SACA,MACA,IACgB;AAAA,EAChB,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,aAAa,MAAM,KAAK;AAAA,MACxB,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,MAC/D,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAE5B,MAAM,SAAS,MAAM,gBACpB,SACA,MACA,iBACA,QACA,KACD;AAAA,MAIA,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,iBACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,KAAK,CACxB;AAAA,MACA,OAAO,KAAK,QAAQ,MAAM,OAAO,MAAM,EAAE;AAAA;AAAA,SAGpC,QAAO,CAAC,QAAQ,UAAU;AAAA,MAC/B,OAAO,aACN,SACA,MACA,QACA,UACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,EAEF;AAAA;AAID,eAAe,YAAY,CAC1B,SACA,MACA,QACA,UACA,OACmB;AAAA,EACnB,aAAa,MAAM,KAAK;AAAA,EAGxB,cAAc,MAAM,UAAU,KAAK;AAAA,EACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,EAE9D,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,iBACA,QACA,KACD;AAAA,EACA,IAAI,gBAAgB;AAAA,EACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAEhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,IAC/C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,OAAO;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,IAAI;AAAA,SAE7B,OAAO,oBAAoB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,IACnE;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAKH,MAAM,QAAQ,MAAM,SAAS,mBAC5B,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,IACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IAGD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACpE,IAAI,eAAe;AAAA,MAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACrE;AAAA;AAAA,EAED,OAAO,OAAO,OAAO;AAAA;;;AC9Gf,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACpE,OAAO,gBAAgB,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA;AAAA,SAG7D,QAAO,CAAC,QAAQ;AAAA,MACrB,MAAM,QAAQ,GAAG,qBAAqB;AAAA,MACtC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,eACA,QACA,KACD;AAAA,MACA,IAAI,gBAAgB;AAAA,MACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,QAGhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,QAC/C,gBAAgB,OAAO,oBAAoB;AAAA,QAC3C,OAAO,EAAE,iBAAiB,IAAI;AAAA,OAEhC;AAAA,MACA,IAAI,eAAe;AAAA,QAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,MACrE;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,EAEvB;AAAA;;;AC/CM,SAAS,UAAU,CACzB,SACA,MACA,IACsD;AAAA,EACtD,OAAO;AAAA,IACN,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,IAC/C,eAAe,mBAAmB,SAAS,MAAM,EAAE;AAAA,EACpD;AAAA;;ACvBD,oCAAqB;AAQd,IAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ,OAAQ,OAAO,EAAE;AAE1D,IAAM,SAAS;AAGR,SAAS,cAAc,GAAW;AAAA,EACxC,OAAO,SAAS,aAAY,EAAE,CAAC;AAAA;AAIzB,SAAS,QAAQ,CAAC,OAA2B;AAAA,EACnD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,IAAI,MAAM;AAAA,EACV,WAAW,QAAQ,OAAO;AAAA,IACzB,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,OAAO,QAAQ,GAAG;AAAA,MACjB,OAAO,OAAQ,UAAW,OAAO,IAAM;AAAA,MACvC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,IAAI,OAAO;AAAA,IAAG,OAAO,OAAQ,SAAU,IAAI,OAAS;AAAA,EACpD,OAAO;AAAA;AAGD,SAAS,UAAU,CAAC,MAAsB;AAAA,EAChD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,MAAM,MAAgB,CAAC;AAAA,EACvB,WAAW,QAAQ,MAAM;AAAA,IACxB,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAAA,IACjC,IAAI,UAAU;AAAA,MAAI,MAAM,IAAI,UAAU,gCAAgC;AAAA,IACtE,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG;AAAA,MACd,IAAI,KAAM,UAAW,OAAO,IAAM,GAAG;AAAA,MACrC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAIhB,IAAM,SAAS,CAAC,QACtB,KAAK,MAAM,IAAI,QAAQ,IAAI,KAAK,MAAM;AAGhC,SAAS,MAAM,CAAC,QAAgB,MAAsB;AAAA,EAC5D,MAAM,UAAU,OAAO,MAAM,CAAC;AAAA,EAC9B,QAAQ,iBAAiB,OAAO,IAAI,CAAC;AAAA,EACrC,MAAM,SAAS,WAAW,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EACjE,MAAM,SAAU,OAAO,MAAiB;AAAA,EACxC,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI;AAAA,EAC7C,OAAO,OAAO,SAAS,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK,QAAQ,GAAG;AAAA;AAW7D,SAAS,SAAS,CACxB,QACA,MACA,KACA,UACgB;AAAA,EAChB,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAClC,MAAM,UAAU,OAAO,GAAG;AAAA,EAC1B,IAAI,UAAyB;AAAA,EAC7B,SAAS,OAAO,UAAU,KAAK,MAAO,QAAQ,UAAU,KAAK,OAAO,QAAQ;AAAA,IAC3E,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAAA,IAC1C,IAAI,WAAW,OAAO,QAAQ,IAAI,GAAG,IAAI,KAAK,SAAS,YAAY,MAAM;AAAA,MACxE,UAAU;AAAA,IACX;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,UAAU,CAAC,GAAW,GAAoB;AAAA,EAClD,IAAI,aAAa,EAAE,SAAS,EAAE;AAAA,EAC9B,SAAS,IAAI,EAAG,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,cAAc,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AAAA,EACA,OAAO,eAAe;AAAA;AAQhB,SAAS,UAAU,CACzB,QACA,SACA,QACS;AAAA,EACT,MAAM,QAAQ,GAAG,mBAAmB,MAAM,KAAK,mBAAmB,OAAO;AAAA,EACzE,MAAM,QAAQ,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC1B,QAAQ,OAAO,KAAK,SAAS,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,kBAAkB,SAAS;AAAA;;;ACnG5B,IAAM,WAAW,CACvB,WAC4B,WAAW,QAAQ,OAAO,gBAAgB;AAGhE,SAAS,eAAe,CAC9B,SACA,OACA,KACW;AAAA,EACX,MAAM,aAAa,QAAQ,OAAO;AAAA,EAClC,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,IAAI,UACT,GAAG,UAAU,kFACd;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AASD,SAAS,UAAU,CACzB,YACA,QACA,QACA,MACA,KACA,OAC4B;AAAA,EAC5B,QAAQ,OAAO,UAAU,OACxB,WAAW,QACX,OAAO,QACP,OAAO,IACP,KACD;AAAA,EACA,MAAM,OAAO,UAAU,WAAW,KAAK,GAAG,MAAM,KAAK,OAAO,QAAQ;AAAA,EACpE,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,OAAO;AAAA,OACH;AAAA,IACH,UAAU;AAAA,IACV,QACC,UAAU,WAAW,OAAO,WACzB,OAAO,SACP,KAAK,WAAW,QAAQ,OAAO,OAAO,EAAE;AAAA,EAC7C;AAAA;;;ACpCM,IAAM,iBAAiB,CAC7B,SACA,WACA,UACI,aAAa,SAAS,WAAW,gBAAgB,OAAO,WAAW;AAMxE,eAAsB,aAAa,CAClC,SACA,MACA,WACA,OAC2B;AAAA,EAC3B,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,SAAS,OAAO,SAAS;AAAA,EAE/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,gBACA,OACA,KAAK,IACN;AAAA,EAGA,MAAM,SAAS,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAChE,IAAI,WAAW,MAAM;AAAA,IACpB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBACT,8BACA,GAAG,iEACH,EAAE,WAAW,OAAO,QAAQ,OAAO,IAAI,UAAU,KAAK,KAAK,CAC5D;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK,QAAQ,cAAc,OAAO;AAAA,EAC3C;AAAA;AAID,eAAsB,UAAU,CAC/B,SACA,MACA,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,iBAAiB,GAAG;AAAA,IAC9B,MAAM,YAAY,SAAS,OAAO,QAAQ,cAAc;AAAA,EACzD;AAAA,EACA,MAAM,YAAY,OAAO,OAAO,OAAO,IAAI,KAAK,MAAM,OAAO,YAAY;AAAA;;;ACtFnE,SAAS,cAAc,CAAC,SAAkB,MAAoB,IAAQ;AAAA,EAC5E,OAAO;AAAA,SACA,MAAK,CACV,QACA,OACgC;AAAA,MAChC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,MACA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,QACzD,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QAEf,SAAS;AAAA,QACT,OAAO,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,OAAO;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,OAAO;AAAA,MAChB;AAAA;AAAA,SAGK,QAAO,CAAC,WAAmB,MAA0C;AAAA,MAC1E,OAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,EAAE;AAAA;AAAA,EAE5D;AAAA;AAQD,eAAe,gBAAgB,CAC9B,SACA,MACA,WACA,MACA,IAC6B;AAAA,EAC7B,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EAEnB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAChB,OAAO,YACP,QACA,OAAO,cACP,OAAO,IAAI,GACX,KACA,KACD;AAAA,EACA,IAAI,aAAa;AAAA,IAAM,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAIrE,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,OAAO,OACR;AAAA,EACA,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,EAClD,OAAO,YAAY,SAAS,MAAM,OAAO;AAAA;;;ACpE1C,eAAsB,mBAAmB,CACxC,SACA,MACA,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,MAAM,SAAS,OAAO;AAAA,EACtB,OAAO,SAAS,MAAM,IAAI,OAAO,cAAc,SAAS;AAAA;;;ACtBzD,uBAAS,oCAAsB,+BAAW;AAkBnC,IAAM,iBAAiB;AAE9B,IAAM,WAAW;AACjB,IAAM,SAAS;AACf,IAAM,QAAQ;AAGd,IAAM,UAAU;AAGT,SAAS,iBAAiB,GAAa;AAAA,EAC7C,OAAO,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM;AAAA,IACnD,IAAI,OAAO;AAAA,IACX,SAAS,KAAK,EAAG,KAAK,QAAQ,MAAM,GAAG;AAAA,MACtC,QAAQ,SAAS,WAAU,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;AAAA,GAC1C;AAAA;AAQK,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EAC9D,MAAM,OAAO,MACX,YAAY,EACZ,QAAQ,UAAU,EAAE,EACpB,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,GAAG;AAAA,EACtB,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO;AAAA;AAGlC,IAAM,UAAU,IAAI;AAGpB,SAAS,MAAM,CAAC,QAAgB,OAAmC;AAAA,EAClE,IAAI,OAAO,QAAQ,IAAI,MAAM;AAAA,EAC7B,IAAI,SAAS,WAAW;AAAA,IACvB,OAAO,IAAI;AAAA,IACX,QAAQ,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EACA,IAAI,MAAM,KAAK,IAAI,KAAK;AAAA,EACxB,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,KAAK;AAAA,IACpC,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;AAAA,IAC1E,KAAK,IAAI,OAAO,GAAG;AAAA,EACpB;AAAA,EACA,OAAO;AAAA;AAGR,IAAM,MAAM,CAAC,KAAa,QAAgB,SACzC,YAAW,UAAU,GAAG,EAAE,OAAO,GAAG,aAAe,MAAM,EAAE,OAAO;AAG5D,SAAS,gBAAgB,CAC/B,QACA,QACA,MACS;AAAA,EACT,MAAM,OAAO,iBAAiB,IAAI,KAAK;AAAA,EACvC,MAAM,MAAM,OAAO,QAAQ,OAAO,QAAQ;AAAA,EAC1C,OAAO,MAAM,OAAO,YAAY,IAAI,KAAK,QAAQ,IAAI,EAAE,SAAS,WAAW;AAAA;AAWrE,SAAS,gBAAgB,CAC/B,QACA,QACA,QACA,OACA,OACS;AAAA,EACT,MAAM,OAAO,iBAAiB,KAAK;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,OAAO,QAAQ,CAAC,MAAM,UAAU;AAAA,IAC/B,OAAO,SAAS,OAAO,SAAS,QAAQ,KAAK,MAAM,GAAG;AAAA,IACtD,IACC,YAAY,QACZ,UAAU,aACV,SAAS,aACT,KAAK,SAAS,GACb;AAAA,MACD,MAAM,IAAI,UACT,GAAG,mDACJ;AAAA,IACD;AAAA,IACA,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,IAChC,IAAI,QAAQ,WAAW;AAAA,MACtB,MAAM,IAAI,UACT,GAAG,kDAAkD,uGACtD;AAAA,IACD;AAAA,IACA,IAAI,SAAS;AAAA,MAAM;AAAA,IACnB,MAAM,OAAO,OAAO,KAAK,MAAM,WAAW;AAAA,IAC1C,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,IACnC,IAAI,KAAK,WAAW,MAAM,UAAU,iBAAgB,MAAM,KAAK,GAAG;AAAA,MACjE,QAAQ,UAAU,KAAK,QAAQ;AAAA,IAChC;AAAA,GACA;AAAA,EACD,OAAO;AAAA;;;AC1HD,IAAM,UAAU,CACtB,MACA,MACA,SACA,OACA,WAEA,IAAI,mBAAkB,MAAM,GAAG,UAAU,WAAW;AAAA,EACnD,WAAW;AAAA,EACX,QAAQ,OAAO;AAAA,EACf,UAAU,KAAK;AAChB,CAAC;;;ACHF,eAAsB,cAAc,CACnC,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,WAAW,MAAM;AAAA,MACpB,MAAM,QACL,MACA,8BACA,6DACA,OACA,MACD;AAAA,IACD;AAAA,IACA,IAAI,SAAS,MAAM,GAAG;AAAA,MACrB,MAAM,QACL,MACA,wBACA,8CACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa;AAAA,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,IAAI;AAAA,IACpE,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,aAAa;AAAA,QACb,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,MAAM,KAAK,SAAS,4BAA4B,SAAS,QAAQ,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;ACjE/C,eAAsB,aAAa,CAClC,SACA,MACA,MACA,SACA,OACmB;AAAA,EACnB,IAAI,YAAY;AAAA,EAChB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,YAAY,SAAS,OAAO,YAAY;AAAA,IACxC,OAAO,EAAE,cAAc,KAAK;AAAA,GAE9B;AAAA,EACA,IAAI,WAAW;AAAA,IACd,MAAM,KACL,SACA,6BACA,SACA,QAAQ,SACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;AC5BtB,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,OACiC;AAAA,EACjC,MAAM,aAAa,gBAClB,SACA,OACA,mCACD;AAAA,EACA,MAAM,SAAS,eAAe;AAAA,EAE9B,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,IAAI,SAAS,OAAO,YAAY,GAAG;AAAA,MAClC,MAAM,QACL,MACA,wBACA,yDACA,OACA,MACD;AAAA,IACD;AAAA,IACA,UAAU,MAAM,QAAQ,KAAK;AAAA,IAC7B,OAAO;AAAA,MACN,cAAc;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,EAAE;AAAA,QACjD,aAAa;AAAA,QACb,UAAU;AAAA,QACV,eAAe,CAAC;AAAA,MACjB;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,KAAK,WAAW,WAAW,QAAQ,UAAU,MAAM,SAAS,KAAK,GAAG,MAAM;AAAA,EAC3E;AAAA;AAID,SAAS,SAAS,CACjB,MACA,QACA,OACS;AAAA,EACT,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,wEACvB;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO,OAAO,KAAK,SAAS,MAAM;AAAA;;;ACtEjD,uBAAS,yBAAY;AAkCd,IAAM,qBAAqB,KAAK;AAEvC,IAAM,iBAAiB,qBAAqB;AAO5C,IAAM,WAAU;AAGhB,IAAM,YAAY;AAElB,IAAM,WAAU,IAAI;AAEpB,SAAS,UAAU,CAAC,QAAwB;AAAA,EAC3C,IAAI,MAAM,SAAQ,IAAI,MAAM;AAAA,EAC5B,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,IAC9C,MAAM,OAAO,KAAK,UAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,UAAS,EAAE,CAAC;AAAA,IAC1E,SAAQ,IAAI,QAAQ,GAAG;AAAA,EACxB;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,QAAQ,CAChB,QACA,QACA,QACA,MACS;AAAA,EACT,MAAM,QAAQ;AAAA,IACb,OAAO;AAAA,IACP,OAAO,MAAM;AAAA,IACb,OAAO,OAAO,cAAc,YAAY,EAAE;AAAA,IAC1C,OAAO,IAAI;AAAA,EACZ;AAAA,EACA,OAAO,WACN,YAAW,UAAU,WAAW,MAAM,CAAC,EACrC,OAAO,MAAM,KAAK,MAAQ,CAAC,EAC3B,OAAO,WAAW,CACrB;AAAA;AASD,eAAsB,mBAAmB,CACxC,SACA,QACA,QACA,OACkB;AAAA,EAClB,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,KAAK,MAAM,MAAM,kBAAkB;AAAA,EAIlD,MAAM,QAAQ,EAAE,KAAK,YAAY,SAAS,KAAK,mBAAmB;AAAA,EAClE,IAAI,QAAQ;AAAA,EACZ,SAAS,OAAO,EAAG,OAAO,WAAW,QAAQ,GAAG;AAAA,IAC/C,MAAM,OAAO,SAAS,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAClD,MAAM,UAAU,MAAM,UAAU,SAAS,MAAM,QAAQ,OAAO,KAAK;AAAA,IACnE,MAAM,WAAW,QAAQ,QAAQ;AAAA,IACjC,IAAI,QAAQ,YAAY;AAAA,MAAM,OAAO,aAAa,UAAU,QAAQ,KAAK;AAAA,IACzE,QAAQ;AAAA,EACT;AAAA,EACA,OAAO,aAAa,OAAO,mBAAmB,QAAQ,KAAK;AAAA;AAI5D,eAAe,SAAS,CACvB,SACA,WACA,QACA,OACA,OACuB;AAAA,EACvB,MAAM,SAAS,QAAQ,MAAM;AAAA,EAC7B,MAAM,UAAU,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACnE,IAAI,YAAY;AAAA,IAAM,OAAO;AAAA,EAE7B,MAAM,OAAO,YAAY;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW,IAAI,KAAK,MAAM,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,WAAW,IAAI,KAAK,MAAM,GAAG;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACpE,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAE9B,MAAM,IAAI,eACT,WACA,GAAG,gFACH,EAAE,QAAQ,OAAO,IAAI,iBAAiB,OAAO,SAAS,WAAW,MAAM,CACxE;AAAA;AAID,SAAS,YAAY,CACpB,UACA,QACA,OACS;AAAA,EACT,IAAI,WAAW,eAAe;AAAA,IAC7B,MAAM,IAAI,YACT,gBACA,GAAG,mDAAmD,gCACtD;AAAA,MACC,WAAW;AAAA,MACX,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,cAAc;AAAA,IACf,CACD;AAAA,EACD;AAAA,EACA,OAAO,gBAAgB;AAAA;;;AC/IxB,eAAsB,uBAAuB,CAC5C,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,sCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,MACtB,MAAM,QACL,MACA,8BACA,uEACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,OAAO,MAAM,oBAClB,SACA,WAAW,QACX,QACA,KACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa,MAAM;AAAA,MACtB,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,KACL,SACA,iCACA,SACA,QAAQ,SACT;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;AC9DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACY;AAAA,EACZ,OAAO;AAAA,SACA,OAAM,CAAC,MAAM,SAAS;AAAA,MAC3B,OAAO,aACN,SACA,MACA,MACA,SACA,GAAG,qBAAqB,CACzB;AAAA;AAAA,SAGK,SAAQ,CAAC,MAAM,MAAM,SAAS;AAAA,MACnC,OAAO,eACN,SACA,MACA,MACA,MACA,SACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,SAGK,wBAAuB,CAAC,MAAM,MAAM,SAAS;AAAA,MAClD,OAAO,wBACN,SACA,MACA,MACA,MACA,SACA,GAAG,sCAAsC,CAC1C;AAAA;AAAA,SAGK,QAAO,CAAC,MAAM,SAAS;AAAA,MAC5B,OAAO,cACN,SACA,MACA,MACA,SACA,GAAG,sBAAsB,CAC1B;AAAA;AAAA,EAEF;AAAA;;;AChDD,eAAsB,eAAe,CACpC,SACA,MACA,WACA,MACA,IACoC;AAAA,EACpC,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EAEtB,MAAM,QAAQ,iBACb,OAAO,WAAW,QAClB,OAAO,IACP,OAAO,eACP,OAAO,IAAI,GACX,KACD;AAAA,EACA,IAAI,UAAU;AAAA,IAAI,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAEhE,MAAM,gBAAgB,OAAO,cAAc,OAC1C,CAAC,GAAG,UAAU,UAAU,KACzB;AAAA,EACA,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP;AAAA,IACC,cAAc,KAAK,QAAQ,cAAc;AAAA,IACzC,WAAW,QAAQ,MAAM,IAAI;AAAA,EAC9B,GACA,OAAO,OACR;AAAA,EAGA,IAAI;AAAA,IACH,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,IAClD,MAAM,WAAW,MAAM,YAAY,SAAS,MAAM,OAAO;AAAA,IACzD,OAAO,KAAK,UAAU,mBAAmB,cAAc,OAAO;AAAA,YAC7D;AAAA,IACD,MAAM,KAAK,SAAS,yBAAyB,SAAS,QAAQ,SAAS;AAAA;AAAA;;;AC1ClE,SAAS,iBAAiB,CAChC,SACA,MACA,IACC;AAAA,EACD,MAAM,aAAa,eAAe,SAAS,MAAM,EAAE;AAAA,EACnD,MAAM,MAAgD;AAAA,OAClD,eAAe,SAAS,MAAM,EAAE;AAAA,IACnC,SAAS,WAAW;AAAA,IACpB,SAAS,CAAC,WAAW,SACpB,gBAAgB,SAAS,MAAM,WAAW,MAAM,EAAE;AAAA,IACnD,mBAAmB,CAAC,SACnB,oBACC,SACA,MACA,MACA,GAAG,gCAAgC,CACpC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IAMA,QAAQ,CACP,QACA,UAEA,SAAS,OAAO,YAAY,IACzB,WAAW,MAAM,QAAQ,KAAK,IAC9B,YAAY,SAAS,MAAM,MAAM;AAAA,EACtC;AAAA;;;ACTM,SAAS,eAAe,CAC9B,SACA,MACA,IACA,QAC8D;AAAA,EAC9D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA;AAAA,SAG1C,QAAO,CAAC,WAAW,MAAM;AAAA,MAC9B,OAAO,YAAY,SAAS,MAAM,QAAQ,WAAW,MAAM,EAAE;AAAA;AAAA,EAE/D;AAAA;AASD,eAAe,WAAW,CACzB,SACA,MACA,OACsC;AAAA,EAEtC,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,IAAI,WAAW,QAAQ,CAAC,OAAO;AAAA,IAAQ,OAAO;AAAA,EAE9C,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,IACzC,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EAID,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,cACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,OAAO,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,IACvC;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,WAAW,CACzB,SACA,MACA,QACA,WACA,MACA,IACiC;AAAA,EACjC,MAAM,QAAQ,GAAG,oBAAoB;AAAA,EACrC,MAAM,SAAS,OAAO,SAAS;AAAA,EAC/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,cACA,OACA,KAAK,IACN;AAAA,EAKA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,IAAI,CAAC,GAAG;AAAA,IAE9C,IAAI,MAAM,aAAa,eAAe;AAAA,MACrC,MAAM,YAAY,SAAS,QAAQ,YAAY;AAAA,IAChD;AAAA,IACA,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EAEA,MAAM,aAAa,SAAS,QAAQ,cAAc,OAAO,WAAW;AAAA,EACpE,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA,EAC5C,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAIA,IAAI,KAAK,oBAAoB;AAAA,IAAM,OAAO,OAAO,MAAM,KAAK;AAAA,EAC5D,MAAM,SAAS,MAAM,UACpB,SACA,KAAK,IACL,MACA,EAAE,WAAW,KAAK,QAAQ,GAC1B,OACA,CAAC,GAAG,SAAS,EAAE,iBAAiB,IAAI,EACrC;AAAA,EACA,MAAM,KAAK,SAAS,sBAAsB,QAAQ,OAAO,SAAS;AAAA,EAClE,OAAO,OAAO,QAAQ,KAAK;AAAA;;;AC9H5B,IAAM,QAAQ,CAAC,SAAkB,QAAgB,UAChD,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAO3D,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,OAAO,QAAQ,iBAAiB;AAAA,EACxC,IAAI,SAAS,KAAK,YAAY,GAAG;AAAA,IAChC,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,wBACA,GAAG,mGACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,IAAI,CAAC,YAAY,OAAO,QAAQ,IAAI,GAAG;AAAA,IACtC,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,EAClC,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA;AAU7C,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,QAAQ,iBAAiB;AAAA,EACjC,MAAM,SAAS,KAAK;AAAA,EACpB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,8BACA,GAAG,2EACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,aAAa,MAAM,oBACxB,SACA,WAAW,QACX,MACA,KACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,KAAK;AAAA,EACtE,IAAI,aAAa,MAAM;AAAA,IACtB,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YACL,OACA,KAAK,IACL,KAAK,MACL,KAAK,IAAI,cAAc,UAAU,CAClC;AAAA,EACD;AAAA,EAGA,MAAM,QAAQ,MAAM,MAAM,WACzB,KAAK,IACL,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,KAAK,OACN;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA;;;ACxFnC,eAAsB,UAAU,CAC/B,SACA,MACA,SACA,OACA,QACA,OACwB;AAAA,EACxB,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO,IAAI,WAAW;AAAA,EACtE,IAAI,YAAY,QAAQ,QAAQ,WAAW,MAAM,QAAQ;AAAA,IACxD,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAAA,IAChE,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;AC1BxB,eAAsB,aAAa,CAClC,SACA,MACA,MACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAAS,OAAO,YAAY,IACxC,MAAM,MAAM,SAAS,QAAQ,KAAK,IAClC,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,EAG7C,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,UACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,SAAS,CAC5B;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,KAAK,CACnB,SACA,QACA,OACgC;AAAA,EAChC,gBAAgB,SAAS,OAAO,oCAAoC;AAAA,EACpE,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,OAAO,CACrB,SACA,MACA,QACA,OACkC;AAAA,EAClC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;;;AC9EM,SAAS,WAAW,CAC1B,SACA,MACA,IAC6C;AAAA,EAC7C,OAAO;AAAA,SACA,QAAO,CAAC,MAAM;AAAA,MACnB,OAAO,cAAc,SAAS,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAAA;AAAA,SAGzD,QAAO,CAAC,SAAS,WAAW,MAAM;AAAA,MACvC,OAAO,cACN,SACA,MACA,SACA,OAAO,SAAS,GAChB,OAAO,IAAI,GACX,GAAG,gBAAgB,CACpB;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,aAAa,CAC3B,SACA,MACA,SACA,QACA,MACA,OACmB;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,UACA,OACA,KAAK,IACN;AAAA,EACA,QAAQ,SAAS,SAAS,MAAM,WAC/B,SACA,MACA,SACA,OACA,QACA,KACD;AAAA,EAEA,MAAM,UAAU,EAAE,OAAO,QAAQ,aAAa;AAAA,EAE9C,IAAI,MAAM,aAAa,MAAM;AAAA,IAC5B,MAAM,aAAa,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA,EAC7D,EAAO;AAAA,IACN,MAAM,iBAAiB,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA;AAAA,EAGjE,MAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,sBAC9C,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,EAEA,IAAI,cAAc,MAAM;AAAA,IACvB,MAAM,IAAI,YACT,iBACA,GAAG,gEACH,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,OAAO,UAAU,SAAS;AAAA;;;ACtFpB,IAAM,UAAU,OACtB,SACA,MACA,UAEA,WAAW,KAAK,IACb,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,KAAK,IACpD;;;ACCJ,eAAsB,cAAc,CACnC,SACA,MACA,MACA,QACA,SACA,OACsB;AAAA,EACtB,aAAa,MAAM,KAAK;AAAA,EACxB,cAAc,MAAM,QAAQ,MAAM,KAAK;AAAA,EACvC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAE3C,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,IACC,OAAO,aAAa,QACpB,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,SAAS,KAAK,GAC7D;AAAA,MACD,MAAM,IAAI,iBACT,uBACA,GAAG,8CACH;AAAA,QACC,QAAQ,OAAO,aAAa,OAAO,eAAe;AAAA,QAClD,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO;AAAA,MACN,UAAU;AAAA,QACT,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI;AAAA,QACnC,WAAW;AAAA,MACZ;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,EAClD,OAAO;AAAA;;;AC9CR,eAAsB,MAAM,CAC3B,SACA,MACA,OACA,OACsB;AAAA,EACtB,QAAQ,OAAO,UAAU;AAAA,EACzB,QAAQ,UAAU,WAAW,SAAS,SAAS,CAAC;AAAA,EAChD,MAAM,MAAM,MAAM,IAAI;AAAA,EACtB,MAAM,SAAS,MAAM,eAAe,MAAM,MAAM,KAAK;AAAA,EAErD,IAAI,OAA+B;AAAA,EACnC,IAAI,aAAa,WAAW;AAAA,IAC3B,cAAc,MAAM,UAAoB,KAAK;AAAA,IAC7C,OAAO;AAAA,MACN,MAAM,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAkB;AAAA,MACjE,WAAW;AAAA,IACZ;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,MAAM,WAAW;AAAA,IAC7C,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,IACpB,QAAQ,WAAW,YAAY,OAAO,WAAW;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACZ,CAAC;AAAA,EAGD,MAAM,KAAK,SAAS,gBAAgB,UAAU,SAAS,SAAS;AAAA,EAChE,OAAO;AAAA;;;AC3BR,eAAsB,MAAM,CAC3B,SACA,MACA,QACA,OACA,OACiC;AAAA,EACjC,MAAM,OAAO,aAAa,MAAM,KAAK;AAAA,EACrC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAC3C,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,MAAM,WAAW,OAAO;AAAA,EAExB,MAAM,SACL,OAAO,UAAU,WACd,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC,IAClD;AAAA,EACJ,MAAM,SAAS,CAAC,WACf,IAAI,iBACH,uBACA,GAAG,kDACH,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EAED,IAAI,WAAW,QAAQ,OAAO,aAAa,MAAM;AAAA,IAIhD,MAAM,OAAO,OAAO,OAAO,QAAQ,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,IAC/D,MAAM,OAAO,WAAW,OAAO,iBAAiB,YAAY;AAAA,EAC7D;AAAA,EAEA,IAAI,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,QAAQ,GAAG,KAAK,GAAI;AAAA,IACvE,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAGA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,EACjE,MAAM,SAAS,MAAM,OAAO,UAAU,KAAK;AAAA,EAG3C,IACC,CAAE,MAAM,eACP,SACA,MACA,UACA,OAAO,QAAQ,GACf,QACA,KACD,GACC;AAAA,IACD,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EACA,OAAO;AAAA;;;AC3DD,SAAS,aAAa,CAC5B,SACA,MACA,IACA,QAC6D;AAAA,EAC7D,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,aAAa,MAAM,KAAK;AAAA,MACxB,IAAK,OAAiB,aAAa,WAAW;AAAA,QAC7C,cAAc,MAAM,WAAgC,KAAK;AAAA,MAC1D;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,OAAgB,KAAK;AAAA,MAChE,OAAO,YAAY,SAAS,MAAM,MAAM;AAAA;AAAA,SAGnC,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,SAAS,MAAM,QAAQ,OAAgB,GAAG,QAAQ,CAAC;AAAA;AAAA,SAG5D,YAAW,CAAC,OAAO;AAAA,MACxB,MAAM,OAAO,aAAa,MAAM,GAAG,aAAa,CAAC;AAAA,MACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,MACjE,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,YAAW,CAAC,MAAM,UAAU,SAAS;AAAA,MAC1C,MAAM,QAAQ,GAAG,aAAa;AAAA,MAC9B,aAAa,MAAM,KAAK;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK;AAAA,MACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,MAE9D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,IAAI,EAAE,EACnD;AAAA,MACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,MAClD,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,eAAc,CAAC,MAAM,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,GAAG,gBAAgB;AAAA,MACjC,OAAO,OACN,MAAM,eAAe,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,CACjE;AAAA;AAAA,EAEF;AAAA;;;AChED,eAAsB,UAAU,CAC/B,SACA,MACA,MACmB;AAAA,EACnB,QAAQ,OAAO,UAAU;AAAA,EACzB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EAItB,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS,EAAE;AAAA,EAC5C,IAAI,WAAW,QAAQ,OAAO,SAAS,KAAK;AAAA,IAAM,OAAO;AAAA,EAMzD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,MAAM,UAAU,WAAW,QAAS,MAAM,MAAM,MAAM,WAAW,EAAE;AAAA,EACnE,IAAI;AAAA,IACH,MAAM,MAAM,SAAS,mBAAmB,EAAE;AAAA,IAC1C,MAAM,MAAM,OAAO,iBAAiB,EAAE;AAAA,IAEtC,MAAM,QAAQ,WAAW,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,YAC5D;AAAA,IAID,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,gBAAgB,EAAE,IAAI,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,IACvE;AAAA;AAAA,EAED,OAAO;AAAA;;;ACnCR,eAAsB,WAAW,CAChC,MACA,QACA,OACA,OACC;AAAA,EACD,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,OAAO,WAAW,MAAM,GAC7B,KACD;AAAA,EACA,MAAM,SAAS,QAAQ,MAAM,OAAO,MAAM;AAAA,EAC1C,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,MAAM,gBACJ,WAAW,OAAO,OAAO,eAAe,MAAM,QAC9C,UAAU,OAAO,OAAO,eAAe,KAAK;AAAA,EAE9C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,eAAe,KAAK;AAAA,OAEhB,eAAe,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,EACjD;AAAA;;;ACVM,SAAS,WAAW,CAC1B,SACA,MACA,IAC8B;AAAA,EAC9B,QAAQ,UAAU;AAAA,EAElB,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,MAAM,OAAO,SAAS,MAAM,OAAgB,GAAG,QAAQ,CAAC,CAAC;AAAA;AAAA,SAGlE,KAAI,CAAC,IAAI;AAAA,MACd,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,KAAK,IAAI;AAAA,MACtD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,IAAG,CAAC,IAAI;AAAA,MACb,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC;AAAA;AAAA,SAG3D,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,MAAM,SAAS;AAAA,MAG7B,IAAI,UAAU,QAAQ,CAAC,MAAK,KAAK,GAAG;AAAA,QACnC,MAAM,eAAc,GAAG,MAAM,GAAG,KAAK;AAAA,MACtC;AAAA,MAEA,MAAM,SAAS,MAAM,MAAM,MAAM,UAAU;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX;AAAA,QACA,OAAO,WAAU,MAAM,OAAO,GAAG,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,MACD,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,YAAY,OAAO,WAAW;AAAA;AAAA,SAGnE,OAAM,CAAC,MAAM,OAAO,SAAS;AAAA,MAClC,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW,YAAY,MAAM,QAAQ,OAAgB,KAAK,CAC5D;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,UAAS,CAAC,MAAM,QAAQ,SAAS;AAAA,MACtC,OAAO,OACN,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,OAAO;AAAA,QACrE,QAAQ,WAAW;AAAA,MACpB,EAAE,CACH;AAAA;AAAA,SAGK,OAAM,CAAC,MAAM;AAAA,MAClB,OAAO,WAAW,SAAS,MAAM,IAAI;AAAA;AAAA,EAEvC;AAAA;;;ACpEM,SAAS,OAAO,CAAC,SAAkB,MAAgC;AAAA,EACzE,MAAM,KAAS,CAAC,cACf,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,QAAQ;AAAA,EACrD,MAAM,eAAe,kBAAkB,SAAS,MAAM,EAAE;AAAA,EACxD,MAAM,aAAa,gBAAgB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,EAEzE,OAAO;AAAA,OACH,YAAY,SAAS,MAAM,EAAE;AAAA,OAC7B,cAAc,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAEvD,cAAc,aAAa;AAAA,IAC3B;AAAA,IACA,QAAQ,YAAY,SAAS,MAAM,EAAE;AAAA,OAElC,WAAW,SAAS,MAAM,EAAE;AAAA,EAChC;AAAA;;ACeM,SAAS,KAAkC,CACjD,QACW;AAAA,EACX,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW,cAAc,QAAQ,KAAK;AAAA,EAC5C,MAAM,eAAe,aAAa,OAAO,OAAO,KAAK;AAAA,EAErD,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,MAAM,YAAY;AAAA,IACjB,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM;AAAA,IAClC,GAAI,OAAO,aAAa,CAAC;AAAA,EAC1B;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,YAAY,WAAW;AAAA,IACjC,IAAI,OAAO,UAAU,WAAW,YAAY,SAAS,WAAW,IAAI;AAAA,MACnE,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,IACtE;AAAA,IACA,IAAI,SAAS,IAAI,SAAS,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,UACT,GAAG,wCAAwC,SAAS,0DACrD;AAAA,IACD;AAAA,IACA,SAAS,IAAI,SAAS,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,OAAO,aAAa;AAAA,EACtC,IACC,cAAc,QACd,OAAQ,UAAyC,iBAAiB,YACjE;AAAA,IACD,MAAM,IAAI,UACT,GAAG,+EACJ;AAAA,EACD;AAAA,EAEA,MAAM,UAAU,cACf,UACA,YAAY,OAAO,KAAK,GACxB,cAAc,OAAO,OAAO,eAAe,SAAS,GACpD,cACA,OAAO,SAAS,aAChB,QACA,WACA,cAAc,OAAO,QAAQ,KAAK,CACnC;AAAA,EAEA,MAAM,SAAS,UAAU,OAAO;AAAA,EAChC,MAAM,QAAQ,OAAO,YACpB,CAAC,GAAG,SAAS,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1C,KAAK;AAAA,IACL,QAAQ,SAAS,IAAI;AAAA,EACtB,CAAC,CACF;AAAA,EAIA,MAAM,UAAU,SAAS,SACtB,KAAK,WAAW,MAAM,KAAK,IAC3B,KAAK,WAAW,MAAM;AAAA,EACzB,OAAO;AAAA;;AC7ED,SAAS,WAAW,CAC1B,SACA,QACA,QAAe,aACR;AAAA,EACP,MAAM,WAAW,cAAc,QAAQ,qBAAqB;AAAA,EAC5D,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,EACpE,IAAI,OAAO,UAAU;AAAA,IACpB,MAAM,IAAI,qBACT,6FACA,EAAE,QAAQ,QAAQ,OAAO,CAC1B;AAAA,EACD;AAAA;",
|
|
74
|
+
"debugId": "D61F9F351D899C2964756E2164756E21",
|
|
75
75
|
"names": []
|
|
76
76
|
}
|
package/docs/README.md
CHANGED
|
@@ -18,7 +18,7 @@ below are defined once, in [Words](guide/vocabulary.md#words).
|
|
|
18
18
|
| [The second factor](guide/second-factor.md) | You are turning on TOTP codes: making and rotating the sealing keys, the QR code, `signIn`'s `status`, confirming a challenge, recovery codes for a lost phone, disabling |
|
|
19
19
|
| [Step-up](guide/step-up.md) | A sensitive action — changing the e-mail, disabling the second factor, deleting the account — should ask a signed-in user to prove again who they are: `assertFresh`, `stepUp.request` and `confirm`, by e-mailed code or by their app |
|
|
20
20
|
| [User events](guide/events.md) | You want to hear when a user is created, verifies their e-mail, resets their password, turns the second factor on or off, uses a recovery code or is deleted — to queue it, sync it, or send it as a webhook |
|
|
21
|
-
| [Password hashing](guide/passwords.md) | You are choosing a hasher, raising its cost, moving to argon2id, or importing hashes from another system |
|
|
21
|
+
| [Password hashing](guide/passwords.md) | You are choosing a hasher, raising its cost, moving to argon2id, or importing hashes from another system — or rate-limiting password guesses |
|
|
22
22
|
|
|
23
23
|
### Permissions — `@nxgt/janus/permissions`
|
|
24
24
|
|
package/docs/guide/adapters.md
CHANGED
|
@@ -282,8 +282,9 @@ driver's error in `StoreFailure` as in [the six rules](#the-six-rules):
|
|
|
282
282
|
Spends every **unspent** token of one user and one `kind` at `at` — but the
|
|
283
283
|
one whose hash is `except`, when given — and answers how many it spent. The
|
|
284
284
|
core calls it right after issuing a sign-in code, with that code's hash as
|
|
285
|
-
`except`, so only the last code sent works
|
|
286
|
-
for the user's
|
|
285
|
+
`except`, so only the last code sent works — and so after issuing a step-up
|
|
286
|
+
or a reset link; and after writing a password, for the user's
|
|
287
|
+
`resetPassword` links and `secondFactor` challenges:
|
|
287
288
|
|
|
288
289
|
| The stored token | Written | Counted |
|
|
289
290
|
| --- | --- | --- |
|
|
@@ -144,6 +144,45 @@ export async function forgotPassword(request: Request): Promise<Response> {
|
|
|
144
144
|
}
|
|
145
145
|
```
|
|
146
146
|
|
|
147
|
+
**At most one reset link is live per user.** A `request` issues its link,
|
|
148
|
+
then spends every other reset link of the user, so the link in an earlier
|
|
149
|
+
e-mail answers `TOKEN_SPENT` — only the last one works, as for [sign-in
|
|
150
|
+
codes](sign-in-code.md):
|
|
151
|
+
|
|
152
|
+
```ts
|
|
153
|
+
const first = await auth.resetPassword.request(email);
|
|
154
|
+
const second = await auth.resetPassword.request(email); // the visitor asked again
|
|
155
|
+
if (first !== null && second !== null) {
|
|
156
|
+
await auth.resetPassword.confirm(first.token, newPassword); // TOKEN_SPENT
|
|
157
|
+
await auth.resetPassword.confirm(second.token, newPassword); // reset
|
|
158
|
+
}
|
|
159
|
+
```
|
|
160
|
+
|
|
161
|
+
Requests that arrive at once cannot each keep a link: each spends the
|
|
162
|
+
others' once it issued its own, so at most one survives — sometimes none, and
|
|
163
|
+
the visitor asks again. **Rate-limit `request` per address**, as for sign-in
|
|
164
|
+
codes: each one sends an e-mail and cancels the link before it, so without a
|
|
165
|
+
limit anyone who knows an address can keep its owner from ever using a link.
|
|
166
|
+
|
|
167
|
+
**Writing a password spends every reset link still live.** A `confirm`,
|
|
168
|
+
`changePassword` and `setPassword` each do, so a link sent before the
|
|
169
|
+
password changed cannot replace it again:
|
|
170
|
+
|
|
171
|
+
```ts
|
|
172
|
+
const issued = await auth.resetPassword.request(email);
|
|
173
|
+
await auth.changePassword(user, { current, next });
|
|
174
|
+
if (issued !== null) {
|
|
175
|
+
await auth.resetPassword.confirm(issued.token, other); // TOKEN_SPENT
|
|
176
|
+
}
|
|
177
|
+
```
|
|
178
|
+
|
|
179
|
+
The links are spent **after** the password is written, so a link issued
|
|
180
|
+
during the write is spent too. If the store fails at that step, the call
|
|
181
|
+
rejects with `STORE_FAILED` although the password is written — answer 503 as
|
|
182
|
+
usual — and the older links may still be live until the next `request`,
|
|
183
|
+
which spends them. Sign-in codes and step-ups are not spent: the password
|
|
184
|
+
proves neither.
|
|
185
|
+
|
|
147
186
|
`confirm` sets the password, marks the e-mail verified — the link proved it —
|
|
148
187
|
and **signs the user out everywhere**: their sessions are revoked, and every
|
|
149
188
|
second-factor challenge still open is spent, so a sign-in started with the
|
|
@@ -183,7 +222,7 @@ export async function resetPassword(request: Request): Promise<Response> {
|
|
|
183
222
|
| Code | When |
|
|
184
223
|
| --- | --- |
|
|
185
224
|
| `TOKEN_UNKNOWN` | No token holds that secret — or it was issued for the other flow: a verification token is not a reset token |
|
|
186
|
-
| `TOKEN_SPENT` | Already redeemed
|
|
225
|
+
| `TOKEN_SPENT` | Already redeemed — every token is single use. A reset link is also spent by a newer `request` for the same user, and by any password written since it was sent |
|
|
187
226
|
| `TOKEN_EXPIRED` | Its lifespan passed. It is spent all the same, so it cannot be retried |
|
|
188
227
|
| `TOKEN_STALE` | Sent to an e-mail the user no longer has |
|
|
189
228
|
|
package/docs/guide/events.md
CHANGED
|
@@ -151,7 +151,7 @@ Where the listener runs within a flow, and what an outage does to it:
|
|
|
151
151
|
| `signInCode.confirm` | after the write, **before** the session or the second-factor challenge is opened | fails the call; the event is already sent |
|
|
152
152
|
| `secondFactor.activate`, `secondFactor.regenerateRecoveryCodes`, `secondFactor.disable` | after the write — the flow's last step | — |
|
|
153
153
|
| `secondFactor.recover` | after the recovery code is spent and the session opened — or failed to open | fails the call; the recovery code is spent and the event sent all the same, from a `finally` |
|
|
154
|
-
| `resetPassword.confirm` | **after** the sessions opened with the old password are revoked and the second-factor challenges left open are spent | fails the call; the events are sent all the same, from a `finally` |
|
|
154
|
+
| `resetPassword.confirm` | **after** the sessions opened with the old password are revoked, and the other reset links and the second-factor challenges left open are spent | fails the call; the events are sent all the same, from a `finally` |
|
|
155
155
|
| `delete` | **after** the user's sessions and one-time tokens are removed, and the relation tuples naming them when `relations` is wired | fails the call; the event is sent all the same, from a `finally` |
|
|
156
156
|
|
|
157
157
|
So a listener that takes its time never leaves an old session alive after a
|
package/docs/guide/passwords.md
CHANGED
|
@@ -122,6 +122,28 @@ Write each imported user's hash as their `PasswordRecord` with your store's
|
|
|
122
122
|
scrypt the first time they sign in. Wire one verifier
|
|
123
123
|
per prefix the old system wrote (`$2a$`, `$2b$`, `$2y$` for bcrypt).
|
|
124
124
|
|
|
125
|
+
## Rate-limit password guessing
|
|
126
|
+
|
|
127
|
+
**Rate-limit `signIn` per login and per client: `janus` counts no failed
|
|
128
|
+
password**, so without a limit anyone can guess one user's password — or try
|
|
129
|
+
one password against every login — as fast as your server hashes. A sign-in
|
|
130
|
+
code, a second factor and a step-up each count their guesses; a password
|
|
131
|
+
does not. Put the limit in front of the call, with the limiter you already
|
|
132
|
+
run:
|
|
133
|
+
|
|
134
|
+
```ts
|
|
135
|
+
const key = `sign-in:${email.trim().toLowerCase()}`;
|
|
136
|
+
if (!(await limiter.consume(key))) {
|
|
137
|
+
return new Response(null, { status: 429, headers: { 'retry-after': '900' } });
|
|
138
|
+
}
|
|
139
|
+
const signedIn = await auth.signIn({ email, password });
|
|
140
|
+
```
|
|
141
|
+
|
|
142
|
+
Key it on the login normalised as
|
|
143
|
+
[`password.normalize`](users.md#passwordnormalize) does — `lowercaseTrim` by
|
|
144
|
+
default, as above — and add a second limit per client address; a few
|
|
145
|
+
attempts per quarter hour per login is plenty for a person. `changePassword` compares the current password too: limit it per user.
|
|
146
|
+
|
|
125
147
|
## What never happens
|
|
126
148
|
|
|
127
149
|
- The plain password is never stored, and never appears in an error message.
|
package/docs/guide/users.md
CHANGED
|
@@ -189,14 +189,18 @@ With a `password`, besides:
|
|
|
189
189
|
| `signUp(fields & { password })` | `{ status: 'signedIn', user, session, token }` | `USER_INVALID`, `PASSWORD_TOO_SHORT`, `LOGIN_TAKEN` |
|
|
190
190
|
| `signIn({ [login]: string, password })` | `{ status: 'signedIn', user, session, token }` — or, with `secondFactor` configured and the user's factor active, `{ status: 'secondFactor', challenge, expiresAt, userId }`: switch on `status` | `CREDENTIALS_INVALID`, `USER_INACTIVE`, `HASH_UNSUPPORTED` |
|
|
191
191
|
| `findByLogin(login)` | the user, or `null`; the login is normalised first, and one holding a NUL or a lone surrogate is nobody's | |
|
|
192
|
-
| `setPassword(user, password, { ifVersion? })` | the user — an admin's call; spends the user's second-factor challenges still waiting, and signs nobody out | `PASSWORD_TOO_SHORT` |
|
|
193
|
-
| `changePassword(user, { current, next }, { ifVersion? })` | the user — the user's own call; spends the user's second-factor challenges still waiting | `CREDENTIALS_INVALID`, `PASSWORD_TOO_SHORT` |
|
|
192
|
+
| `setPassword(user, password, { ifVersion? })` | the user — an admin's call; spends the user's reset links and second-factor challenges still waiting, and signs nobody out | `PASSWORD_TOO_SHORT` |
|
|
193
|
+
| `changePassword(user, { current, next }, { ifVersion? })` | the user — the user's own call; spends the user's reset links and second-factor challenges still waiting | `CREDENTIALS_INVALID`, `PASSWORD_TOO_SHORT` |
|
|
194
194
|
|
|
195
195
|
With `secondFactor` configured, a type with a password also answers
|
|
196
196
|
`secondFactor.enroll`, `activate`, `disable` and `confirm` — see
|
|
197
197
|
[the second factor](second-factor.md).
|
|
198
198
|
|
|
199
|
-
Every method may also reject with `STORE_FAILED`.
|
|
199
|
+
Every method may also reject with `STORE_FAILED`. `setPassword` and
|
|
200
|
+
`changePassword` spend the user's reset links and second-factor challenges
|
|
201
|
+
after the write, so a `STORE_FAILED` there may come with the password
|
|
202
|
+
already written: a retried `changePassword` with the old `current` then
|
|
203
|
+
answers `CREDENTIALS_INVALID`. A `user` argument is a user
|
|
200
204
|
or its id (`UserRef = string | { id: string }`).
|
|
201
205
|
|
|
202
206
|
```ts
|
package/docs/guide/vocabulary.md
CHANGED
|
@@ -52,7 +52,7 @@ either finds this row.
|
|
|
52
52
|
| **recovery code** | One of ten single-use codes `secondFactor.activate` and `secondFactor.regenerateRecoveryCodes` answer **once** — ten characters, shown `xxxxx-xxxxx` — that `secondFactor.recover` takes instead of a TOTP code, for a user whose authenticator app is gone. Stored only as keyed hashes. Always written in full: *code* alone is a one-time code, and a recovery code is never one | "backup code", "scratch code", "recovery key" |
|
|
53
53
|
| **attempt** | One code tried against a challenge, counted by `countAttempt` in the token's `attempts` before the code is checked. A challenge takes five, a second factor's or a sign-in code's | "try"; "retry" is a repeated write, never a guess |
|
|
54
54
|
| **challenge** | A secret the visitor keeps, redeemed once with a code — which is what *confirm* means for it. `signIn` answers one instead of a session when the user's second factor is active, for `secondFactor.confirm` — or `secondFactor.recover`, with a recovery code; `signInCode.request` answers one beside the sign-in code, for `signInCode.confirm`; `stepUp.request` answers one for `stepUp.confirm`. Stored as its hash, as a one-time token of kind `secondFactor`, `signInCode` or `stepUp`: five minutes or ten by default, and five attempts | "MFA token", "pending session", "ticket" |
|
|
55
|
-
| **spent** | A one-time token or a challenge that can no longer be redeemed — `spentAt` set, `TOKEN_SPENT`, and never unset. Spent by its redemption, by its fifth attempt (a wrong code, or a call through another user type's API), by a redemption after it expired, by a refusal that ends it (`USER_INACTIVE`, `TOKEN_STALE`, `SECOND_FACTOR_NOT_ENROLLED`), or by what ends it early: the next `signInCode.request` or `
|
|
55
|
+
| **spent** | A one-time token or a challenge that can no longer be redeemed — `spentAt` set, `TOKEN_SPENT`, and never unset. Spent by its redemption, by its fifth attempt (a wrong code, or a call through another user type's API), by a redemption after it expired, by a refusal that ends it (`USER_INACTIVE`, `TOKEN_STALE`, `SECOND_FACTOR_NOT_ENROLLED`), or by what ends it early: the next `signInCode.request`, `stepUp.request` or `resetPassword.request` for the same user (at most one of each is live at a time), or a password written by `resetPassword.confirm`, `setPassword` or `changePassword` (every reset link and every second-factor challenge left waiting) | "used up", "invalidated"; "consumed" only in `consumeToken`'s name; "revoked" is a session's |
|
|
56
56
|
| **step** | The thirty-second period a TOTP code belongs to. `lastStep` is the step of the last code accepted, and only a later step counts: that is why a code is accepted once | "window", "period", "counter", in prose |
|
|
57
57
|
| **seal**, **sealing key** | To seal is to encrypt a TOTP secret — AES-256-GCM, bound to the user's id — before a store sees it. A sealing key is one `{ id, key }` of `secondFactor.keys`: the first seals, every one opens | "encrypt", "encryption key", "master key", "pepper" |
|
|
58
58
|
| **token** | Never alone in prose: a *session token* or a *one-time token*. The `tokens` store and the `TOKEN_*` codes are one-time tokens only | |
|
package/docs/roadmap.md
CHANGED
|
@@ -61,6 +61,13 @@ Nothing yet.
|
|
|
61
61
|
The last ten, newest first, each with the version it came in. Everything
|
|
62
62
|
before is in the [CHANGELOG](../CHANGELOG.md).
|
|
63
63
|
|
|
64
|
+
- **An old reset link stops working, v0.13.0** — `resetPassword.request`
|
|
65
|
+
spends the links sent before, so only the last e-mail's works, and writing
|
|
66
|
+
a password — a link's `confirm`, `changePassword`, `setPassword` — spends
|
|
67
|
+
every reset link still live, so a link sent before the change cannot
|
|
68
|
+
replace the new password. Both answer `TOKEN_SPENT`; an outage spending
|
|
69
|
+
them fails the call with `STORE_FAILED`. No change for adapters: the
|
|
70
|
+
existing `TokenStore.spendUserTokens` does it.
|
|
64
71
|
- **Confirm an action with a code (step-up), v0.12.0** —
|
|
65
72
|
`auth.stepUp.request(user)` and `stepUp.confirm(request, challenge, code)`:
|
|
66
73
|
a signed-in user proves again who they are before a sensitive action, with
|
|
@@ -138,11 +145,3 @@ before is in the [CHANGELOG](../CHANGELOG.md).
|
|
|
138
145
|
cases, implemented in `@nxgt/janus-drizzle`, `@nxgt/janus-mongo` and
|
|
139
146
|
`@nxgt/janus-redis` — and the port now says a read sees every write that
|
|
140
147
|
completed before it: never a secondary or a read replica.
|
|
141
|
-
- **Sign in with a code sent by e-mail, v0.6.0** —
|
|
142
|
-
`auth.<type>.signInCode.request(email)` answers a six-digit code to send
|
|
143
|
-
and a challenge to keep with the visitor, or `null` for nobody — never
|
|
144
|
-
saying which; `signInCode.confirm(challenge, code)` marks the e-mail
|
|
145
|
-
verified and opens the session. On every user type with an e-mail, one
|
|
146
|
-
without a password included; an active second factor is still asked for.
|
|
147
|
-
A challenge lives ten minutes (`tokens.signInCode`) and takes five
|
|
148
|
-
attempts, and only the code's hash is stored, keyed by the challenge.
|
package/docs/troubleshooting.md
CHANGED
|
@@ -423,6 +423,8 @@ janus({
|
|
|
423
423
|
**Why:** a store that cannot answer throws; it never answers `null`. The driver's own error is on `error.cause` — not in the message, because a driver message can hold a connection string, and a connection string holds a password.
|
|
424
424
|
**Fix:** answer **503**, and log `cause`. Never map it to 401, 404, `null` or `false`: that turns an outage into a silent lockout, where every user is told they do not exist.
|
|
425
425
|
|
|
426
|
+
**After a password write** — `resetPassword.confirm`, `changePassword`, `setPassword` — the failure may come from spending the user's reset links and second-factor challenges, which runs after the password is written: the new password is then in place. A retried `changePassword` with the old `current` answers `CREDENTIALS_INVALID`; the next `resetPassword.request` spends any link left live.
|
|
427
|
+
|
|
426
428
|
```ts
|
|
427
429
|
import { JanusError } from '@nxgt/janus';
|
|
428
430
|
|
|
@@ -566,7 +568,15 @@ janus({ ..., hasher: scryptHasher(), verifiers: [bcryptVerifier] }); // a Passwo
|
|
|
566
568
|
|
|
567
569
|
**When:** `verifyEmail.confirm`, `resetPassword.confirm`.
|
|
568
570
|
**Why:** a token is spent by its first use, and an expired one is spent too. `TOKEN_UNKNOWN` also covers a token whose user was deleted. The defaults are 24 h for `verifyEmail`, 1 h for `resetPassword`.
|
|
569
|
-
|
|
571
|
+
A reset link answers `resetPassword.confirm: the token was already used` in
|
|
572
|
+
two more cases: a newer `resetPassword.request` for the same user spent it —
|
|
573
|
+
only the last link sent works, so a visitor who asked twice and clicked the
|
|
574
|
+
first e-mail gets `TOKEN_SPENT` — or the password was written since it was
|
|
575
|
+
sent, by another link's `confirm`, `changePassword` or `setPassword`. When two
|
|
576
|
+
requests race, even the last link can be spent: at most one survives,
|
|
577
|
+
sometimes none.
|
|
578
|
+
**Fix:** answer 400 and offer to send a new link — and tell the visitor to use
|
|
579
|
+
the latest e-mail. To change the lifetimes:
|
|
570
580
|
|
|
571
581
|
```ts
|
|
572
582
|
janus({ ..., tokens: { verifyEmail: '72h', resetPassword: '2h' } });
|