@nxgt/janus 0.22.1 → 0.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (54) hide show
  1. package/README.md +96 -16
  2. package/dist/auth/config/janus-config.d.ts +2 -0
  3. package/dist/auth/config/janus-config.d.ts.map +1 -1
  4. package/dist/auth/config/resolved-config.d.ts +1 -0
  5. package/dist/auth/config/resolved-config.d.ts.map +1 -1
  6. package/dist/auth/config/warn-throttle-window.d.ts.map +1 -1
  7. package/dist/auth/email-flows/change-email-token.d.ts +42 -0
  8. package/dist/auth/email-flows/change-email-token.d.ts.map +1 -0
  9. package/dist/auth/email-flows/change-email.d.ts +11 -0
  10. package/dist/auth/email-flows/change-email.d.ts.map +1 -0
  11. package/dist/auth/email-flows/flows.d.ts +5 -5
  12. package/dist/auth/email-flows/flows.d.ts.map +1 -1
  13. package/dist/auth/events.d.ts +3 -2
  14. package/dist/auth/events.d.ts.map +1 -1
  15. package/dist/auth/index.d.ts +1 -1
  16. package/dist/auth/index.d.ts.map +1 -1
  17. package/dist/auth/mail-requests.d.ts +6 -3
  18. package/dist/auth/mail-requests.d.ts.map +1 -1
  19. package/dist/auth/one-time/issue.d.ts +7 -1
  20. package/dist/auth/one-time/issue.d.ts.map +1 -1
  21. package/dist/auth/port/types/tokens.d.ts +10 -4
  22. package/dist/auth/port/types/tokens.d.ts.map +1 -1
  23. package/dist/auth/types/change-email.d.ts +51 -0
  24. package/dist/auth/types/change-email.d.ts.map +1 -0
  25. package/dist/auth/types/index.d.ts +1 -0
  26. package/dist/auth/types/index.d.ts.map +1 -1
  27. package/dist/auth/types/janus.d.ts +2 -1
  28. package/dist/auth/types/janus.d.ts.map +1 -1
  29. package/dist/auth/types/user-type.d.ts +3 -1
  30. package/dist/auth/types/user-type.d.ts.map +1 -1
  31. package/dist/auth/users/any-type-api.d.ts +2 -2
  32. package/dist/auth/users/any-type-api.d.ts.map +1 -1
  33. package/dist/auth/users/update.d.ts +2 -1
  34. package/dist/auth/users/update.d.ts.map +1 -1
  35. package/dist/conformance/cases/tokens/change-email.d.ts +8 -0
  36. package/dist/conformance/cases/tokens/change-email.d.ts.map +1 -0
  37. package/dist/conformance/cases/tokens/index.d.ts.map +1 -1
  38. package/dist/conformance/cases/tokens/kinds.d.ts.map +1 -1
  39. package/dist/conformance/index.js +92 -57
  40. package/dist/conformance/index.js.map +6 -5
  41. package/dist/errors/janus-error/codes.d.ts +7 -3
  42. package/dist/errors/janus-error/codes.d.ts.map +1 -1
  43. package/dist/index.js +134 -31
  44. package/dist/index.js.map +13 -11
  45. package/docs/README.md +1 -1
  46. package/docs/guide/adapters.md +13 -7
  47. package/docs/guide/email-flows.md +90 -10
  48. package/docs/guide/errors.md +3 -3
  49. package/docs/guide/events.md +5 -4
  50. package/docs/guide/users.md +10 -8
  51. package/docs/guide/vocabulary.md +3 -3
  52. package/docs/roadmap.md +13 -10
  53. package/docs/troubleshooting.md +32 -12
  54. package/package.json +1 -1
package/dist/index.js.map CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "version": 3,
3
- "sources": ["../src/auth/hashers.ts", "../src/time/clock.ts", "../src/auth/config/normalize.ts", "../src/auth/config/reserved.ts", "../src/time/duration.ts", "../src/auth/config/names.ts", "../src/auth/config/resolve-cookie.ts", "../src/auth/sealing.ts", "../src/auth/config/resolve-devices.ts", "../src/auth/config/resolve-second-factor.ts", "../src/auth/config/resolve-throttle.ts", "../src/auth/config/resolve-type.ts", "../src/auth/config/resolve-config.ts", "../src/auth/config/warn-throttle-window.ts", "../src/auth/context/create-context.ts", "../src/auth/context/logins.ts", "../src/auth/outage.ts", "../src/auth/context/password.ts", "../src/auth/context/user.ts", "../src/auth/context/records.ts", "../src/auth/context/validate-fields.ts", "../src/auth/events.ts", "../src/auth/port/assert-stores.ts", "../src/auth/devices/token.ts", "../src/auth/derived-keys.ts", "../src/auth/devices/hint.ts", "../src/auth/devices/report.ts", "../src/auth/secrets.ts", "../src/auth/sessions/open-session.ts", "../src/auth/sessions/presented-token.ts", "../src/auth/sessions/standing.ts", "../src/auth/sessions/authenticate.ts", "../src/auth/sessions/cookie.ts", "../src/auth/sessions/shared-api.ts", "../src/auth/counter-key.ts", "../src/auth/one-time/codes.ts", "../src/auth/one-time/refusals.ts", "../src/auth/one-time/spend.ts", "../src/auth/one-time/issue.ts", "../src/auth/one-time/window.ts", "../src/auth/mail-requests.ts", "../src/auth/password-written.ts", "../src/auth/prepared.ts", "../src/auth/email-flows/email-token.ts", "../src/auth/email-flows/reset-password.ts", "../src/auth/totp.ts", "../src/auth/second-factor/factor.ts", "../src/auth/first-proof.ts", "../src/auth/email-flows/prove-first.ts", "../src/auth/email-flows/verify-email.ts", "../src/auth/email-flows/flows.ts", "../src/auth/email-sign-in.ts", "../src/auth/magic-link.ts", "../src/auth/proven-sign-in.ts", "../src/auth/sign-in-attempts.ts", "../src/auth/second-factor/redeem.ts", "../src/auth/second-factor/challenge.ts", "../src/auth/second-factor/codes-left.ts", "../src/auth/second-factor/recovery-codes.ts", "../src/auth/second-factor/refusal.ts", "../src/auth/second-factor/activate.ts", "../src/auth/second-factor/disable.ts", "../src/auth/second-factor/enroll.ts", "../src/auth/second-factor/app-code-attempts.ts", "../src/auth/second-factor/regenerate.ts", "../src/auth/second-factor/lifecycle.ts", "../src/auth/second-factor/recovery.ts", "../src/auth/second-factor/flows.ts", "../src/auth/sign-in-code.ts", "../src/auth/step-up/codes.ts", "../src/auth/step-up/open.ts", "../src/auth/step-up/request.ts", "../src/auth/step-up/flows.ts", "../src/auth/users/find-by-email.ts", "../src/auth/users/by-login.ts", "../src/auth/users/change-password.ts", "../src/auth/users/insert.ts", "../src/auth/users/sign-in.ts", "../src/auth/users/password-flows.ts", "../src/auth/users/delete.ts", "../src/auth/users/find-many.ts", "../src/auth/users/fields-patch.ts", "../src/auth/users/update.ts", "../src/auth/users/record-flows.ts", "../src/auth/users/type-api.ts", "../src/auth/janus.ts", "../src/auth/sessions/fresh.ts"],
3
+ "sources": ["../src/auth/hashers.ts", "../src/time/clock.ts", "../src/auth/config/normalize.ts", "../src/auth/config/reserved.ts", "../src/time/duration.ts", "../src/auth/config/names.ts", "../src/auth/config/resolve-cookie.ts", "../src/auth/sealing.ts", "../src/auth/config/resolve-devices.ts", "../src/auth/config/resolve-second-factor.ts", "../src/auth/config/resolve-throttle.ts", "../src/auth/config/resolve-type.ts", "../src/auth/config/resolve-config.ts", "../src/auth/config/warn-throttle-window.ts", "../src/auth/context/create-context.ts", "../src/auth/context/logins.ts", "../src/auth/outage.ts", "../src/auth/context/password.ts", "../src/auth/context/user.ts", "../src/auth/context/records.ts", "../src/auth/context/validate-fields.ts", "../src/auth/events.ts", "../src/auth/port/assert-stores.ts", "../src/auth/devices/token.ts", "../src/auth/derived-keys.ts", "../src/auth/devices/hint.ts", "../src/auth/devices/report.ts", "../src/auth/secrets.ts", "../src/auth/sessions/open-session.ts", "../src/auth/sessions/presented-token.ts", "../src/auth/sessions/standing.ts", "../src/auth/sessions/authenticate.ts", "../src/auth/sessions/cookie.ts", "../src/auth/sessions/shared-api.ts", "../src/auth/counter-key.ts", "../src/auth/one-time/codes.ts", "../src/auth/one-time/refusals.ts", "../src/auth/one-time/spend.ts", "../src/auth/one-time/issue.ts", "../src/auth/one-time/window.ts", "../src/auth/mail-requests.ts", "../src/auth/users/fields-patch.ts", "../src/auth/email-flows/change-email-token.ts", "../src/auth/email-flows/change-email.ts", "../src/auth/password-written.ts", "../src/auth/prepared.ts", "../src/auth/email-flows/email-token.ts", "../src/auth/email-flows/reset-password.ts", "../src/auth/totp.ts", "../src/auth/second-factor/factor.ts", "../src/auth/first-proof.ts", "../src/auth/email-flows/prove-first.ts", "../src/auth/email-flows/verify-email.ts", "../src/auth/email-flows/flows.ts", "../src/auth/email-sign-in.ts", "../src/auth/magic-link.ts", "../src/auth/proven-sign-in.ts", "../src/auth/sign-in-attempts.ts", "../src/auth/second-factor/redeem.ts", "../src/auth/second-factor/challenge.ts", "../src/auth/second-factor/codes-left.ts", "../src/auth/second-factor/recovery-codes.ts", "../src/auth/second-factor/refusal.ts", "../src/auth/second-factor/activate.ts", "../src/auth/second-factor/disable.ts", "../src/auth/second-factor/enroll.ts", "../src/auth/second-factor/app-code-attempts.ts", "../src/auth/second-factor/regenerate.ts", "../src/auth/second-factor/lifecycle.ts", "../src/auth/second-factor/recovery.ts", "../src/auth/second-factor/flows.ts", "../src/auth/sign-in-code.ts", "../src/auth/step-up/codes.ts", "../src/auth/step-up/open.ts", "../src/auth/step-up/request.ts", "../src/auth/step-up/flows.ts", "../src/auth/users/find-by-email.ts", "../src/auth/users/by-login.ts", "../src/auth/users/change-password.ts", "../src/auth/users/insert.ts", "../src/auth/users/sign-in.ts", "../src/auth/users/password-flows.ts", "../src/auth/users/delete.ts", "../src/auth/users/find-many.ts", "../src/auth/users/update.ts", "../src/auth/users/record-flows.ts", "../src/auth/users/type-api.ts", "../src/auth/janus.ts", "../src/auth/sessions/fresh.ts"],
4
4
  "sourcesContent": [
5
5
  "import { randomBytes, scrypt, timingSafeEqual } from 'node:crypto';\nimport type { PasswordHasher } from './config';\n\n/**\n * scrypt through `node:crypto` — the hasher that runs **everywhere**: Node and\n * Bun both implement it, and it needs no dependency.\n *\n * Measured before choosing it: `bun build --target node` leaves `Bun.password`\n * in the output as it is — a target changes the bundle's format, not which\n * APIs exist — and `crypto.argon2` is absent from Node 22. scrypt is the one\n * memory-hard function both runtimes ship.\n *\n * The defaults are OWASP's: N = 2^17, r = 8, p = 1, about 128 MiB per hash.\n * The parameters are written into the hash —\n * `$scrypt$ln=17,r=8,p=1$<salt>$<key>` — and read back from it to verify, so\n * raising `cost` later leaves every existing hash readable.\n *\n * `cost` is log2(N). Lower it only in tests: 10 is fast and still exercises\n * every line.\n *\n * A hash written with other parameters than these is rewritten with these the\n * next time its owner signs in (`needsRehash`), so raising `cost` reaches every\n * active user without a migration.\n */\nexport function scryptHasher(options?: {\n\treadonly cost?: number;\n}): PasswordHasher {\n\tconst cost = options?.cost ?? 17;\n\tif (!Number.isInteger(cost) || cost < 10 || cost > 20) {\n\t\tthrow new TypeError(\n\t\t\t'scryptHasher: cost is log2(N), an integer from 10 to 20 — 17 is the recommended value',\n\t\t);\n\t}\n\n\treturn {\n\t\tprefix: SCRYPT_PREFIX,\n\t\tasync hash(plain) {\n\t\t\tconst salt = randomBytes(16);\n\t\t\tconst key = await derive(plain, salt, cost, 8, 1);\n\t\t\treturn `${SCRYPT_PREFIX}ln=${cost},r=8,p=1$${salt.toString('base64')}$${key.toString('base64')}`;\n\t\t},\n\t\tasync verify(plain, hash) {\n\t\t\tconst parsed = SCRYPT_HASH.exec(hash);\n\t\t\t// A hash this hasher cannot parse is not a wrong password, and not\n\t\t\t// something to guess at: the core picked this verifier by prefix, so\n\t\t\t// the stored hash is corrupt.\n\t\t\tif (parsed === null) {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t'scryptHasher: the stored hash has the $scrypt$ prefix and not its format',\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [, ln, r, p, salt, key] = parsed as unknown as [\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t];\n\t\t\tconst expected = Buffer.from(key, 'base64');\n\t\t\tconst actual = await derive(\n\t\t\t\tplain,\n\t\t\t\tBuffer.from(salt, 'base64'),\n\t\t\t\tNumber(ln),\n\t\t\t\tNumber(r),\n\t\t\t\tNumber(p),\n\t\t\t\texpected.length,\n\t\t\t);\n\t\t\treturn timingSafeEqual(actual, expected);\n\t\t},\n\t\tneedsRehash(hash) {\n\t\t\tconst parsed = SCRYPT_HASH.exec(hash);\n\t\t\t// Unparseable is verify's refusal to make, not a reason to rewrite.\n\t\t\tif (parsed === null) return false;\n\t\t\tconst [, ln, r, p] = parsed;\n\t\t\treturn Number(ln) !== cost || r !== '8' || p !== '1';\n\t\t},\n\t};\n}\n\nconst SCRYPT_PREFIX = '$scrypt$';\nconst SCRYPT_HASH =\n\t/^\\$scrypt\\$ln=(\\d+),r=(\\d+),p=(\\d+)\\$([A-Za-z0-9+/=]+)\\$([A-Za-z0-9+/=]+)$/;\n\nfunction derive(\n\tplain: string,\n\tsalt: Buffer,\n\tln: number,\n\tr: number,\n\tp: number,\n\tlength = 32,\n): Promise<Buffer> {\n\t// Node's camelCase aliases for N, r and p: this repository has no other\n\t// casing, and Node accepts both spellings.\n\tconst n = 2 ** ln;\n\treturn new Promise((resolve, reject) => {\n\t\t// maxmem: Node's default (32 MiB) is below what N = 2^17, r = 8 needs.\n\t\t// `error` is null on Node and undefined on Bun when there is none —\n\t\t// measured: testing `=== null` rejected every hash under Bun.\n\t\tscrypt(\n\t\t\tplain,\n\t\t\tsalt,\n\t\t\tlength,\n\t\t\t{ cost: n, blockSize: r, parallelization: p, maxmem: 256 * n * r },\n\t\t\t(error, key) => (error ? reject(error) : resolve(key)),\n\t\t);\n\t});\n}\n\n/**\n * argon2id through `Bun.password`.\n *\n * **Loaded only when named**: nothing reads `Bun` until this function is called,\n * so the package imports cleanly under Node. On Node, `scryptHasher()` is the\n * hasher; a hash written here reads anywhere a verifier for `$argon2id$` is\n * wired, so a database can move between the two runtimes.\n */\nexport function bunHasher(): PasswordHasher {\n\t// `typeof` on an undeclared global is 'undefined' rather than a throw, so\n\t// this line is safe under Node.\n\tconst password: BunPassword | undefined =\n\t\ttypeof Bun === 'undefined' ? undefined : Bun.password;\n\n\tif (password === undefined) {\n\t\tthrow new TypeError(\n\t\t\t'bunHasher: Bun.password is not available — this runtime is not Bun; wire scryptHasher() instead',\n\t\t);\n\t}\n\n\treturn {\n\t\tprefix: '$argon2id$',\n\t\thash: (plain) => password.hash(plain, ARGON2ID),\n\t\tverify: (plain, hash) => password.verify(plain, hash),\n\t\tneedsRehash: (hash) => !hash.startsWith(ARGON2ID_PARAMETERS),\n\t};\n}\n\n/**\n * Pinned rather than left to `Bun.password`'s defaults — which they equal\n * today, measured: `$argon2id$v=19$m=65536,t=2,p=1$` — so that a change of\n * default in a Bun release is a rehash this package decided, not one it\n * inherited.\n */\nconst ARGON2ID = {\n\talgorithm: 'argon2id',\n\tmemoryCost: 65_536,\n\ttimeCost: 2,\n} as const;\nconst ARGON2ID_PARAMETERS = '$argon2id$v=19$m=65536,t=2,p=1$';\n\ninterface BunPassword {\n\thash(plain: string, options: typeof ARGON2ID): Promise<string>;\n\tverify(plain: string, hash: string): Promise<boolean>;\n}\n",
6
6
  "/**\n * Where `now` comes from.\n *\n * Injected rather than read from `Date` directly, for one practical reason:\n * every expiry in this package — sessions, one-time tokens, refresh windows —\n * is a comparison against the current time, and a spec that has to move the\n * real clock to test one is a spec that needs fake timers, leaks them, and\n * fails differently under load. A `Clock` makes those specs synchronous and\n * exact.\n *\n * It is also the seam an application needs if it ever has to reason about a\n * store's clock rather than its own: MongoDB stamps a TTL against the server's\n * time, not the process's.\n */\nexport interface Clock {\n\tnow(): Date;\n}\n\n/** The process's own clock. The default everywhere. */\nexport const systemClock: Clock = {\n\tnow: () => new Date(),\n};\n\n/**\n * A clock a spec drives by hand.\n *\n * Shipped rather than kept in `test/`: a consumer writing their own tests\n * against this package needs exactly this, and writing it again is how two\n * subtly different versions of \"advance time\" come to exist.\n */\nexport function fixedClock(start: Date | number = 0): Clock & {\n\tadvance(ms: number): void;\n\tset(at: Date | number): void;\n} {\n\tlet ms = start instanceof Date ? start.getTime() : start;\n\n\treturn {\n\t\tnow: () => new Date(ms),\n\t\tadvance: (by) => {\n\t\t\tms += by;\n\t\t},\n\t\tset: (at) => {\n\t\t\tms = at instanceof Date ? at.getTime() : at;\n\t\t},\n\t};\n}\n",
@@ -14,8 +14,8 @@
14
14
  "/** Resolves the TOTP second factor: its issuer, its sealer, its challenge's lifespan. */\n\nimport { parseDuration } from '../../time/duration';\nimport { resolveSealer } from '../sealing';\nimport type { SecondFactorConfig } from './janus-config';\nimport type { ResolvedConfig } from './resolved-config';\n\nexport function resolveSecondFactor(\n\tconfig: SecondFactorConfig | undefined,\n\twhere: string,\n): ResolvedConfig['secondFactor'] {\n\tif (config === undefined) return null;\n\tconst at = `${where}: secondFactor`;\n\tif (typeof config?.issuer !== 'string' || config.issuer.trim() === '') {\n\t\tthrow new TypeError(\n\t\t\t`${at}.issuer must name your application — the authenticator app shows it beside the account`,\n\t\t);\n\t}\n\treturn {\n\t\tissuer: config.issuer,\n\t\tsealer: resolveSealer(config.keys, `${at}.keys`),\n\t\tchallengeTtlMs: parseDuration(config.challenge ?? '5m', `${at}.challenge`),\n\t};\n}\n",
15
15
  "/**\n * Resolves the two `{ throttle }` options, which take the same shape and\n * differ in their defaults: `signIn.throttle`, ten passwords per login per\n * fifteen minutes, and `mail.throttle`, five requests per flow, per address\n * or user, per ten minutes. Each is on unless `false`.\n */\n\nimport { type Duration, parseDuration } from '../../time/duration';\nimport type { ResolvedConfig } from './resolved-config';\n\n/** A throttle once resolved, or `null` when it is `false`. */\ntype ResolvedThrottle = ResolvedConfig['signInThrottle'];\n\n/** What either option takes: `{ throttle }`, a limit or `false`. */\ninterface ThrottleOption {\n\treadonly throttle?:\n\t\t| { readonly attempts?: number; readonly window?: Duration }\n\t\t| false;\n}\n\n/** The defaults of one option, and the name a refusal gives it. */\ninterface Defaults {\n\treadonly option: 'signIn' | 'mail';\n\treadonly attempts: number;\n\treadonly window: Duration;\n}\n\n/** Resolves `signIn.throttle`: on unless `false`, ten passwords per login per fifteen minutes. */\nexport function resolveSignInThrottle(\n\tconfig: ThrottleOption | undefined,\n\twhere: string,\n): ResolvedThrottle {\n\treturn resolveThrottle(\n\t\tconfig,\n\t\t{ option: 'signIn', attempts: 10, window: '15m' },\n\t\twhere,\n\t);\n}\n\n/**\n * Resolves `mail.throttle`: on unless `false`, five requests per flow, per\n * address or user, per ten minutes — room for a visitor who asks again, a\n * loop held to thirty e-mails an hour, and a window **no longer than the\n * shortest default lifetime** (a sign-in code's and a step-up's, `'10m'`):\n * the last link or code sent, issued in the window, still works until the\n * refusal ends.\n */\nexport function resolveMailThrottle(\n\tconfig: ThrottleOption | undefined,\n\twhere: string,\n): ResolvedThrottle {\n\treturn resolveThrottle(\n\t\tconfig,\n\t\t{ option: 'mail', attempts: 5, window: '10m' },\n\t\twhere,\n\t);\n}\n\nfunction resolveThrottle(\n\tconfig: ThrottleOption | undefined,\n\tdefaults: Defaults,\n\twhere: string,\n): ResolvedThrottle {\n\tconst { option } = defaults;\n\tif (config !== undefined && (typeof config !== 'object' || config === null)) {\n\t\tthrow new TypeError(`${where}: ${option} must be an object — { throttle }`);\n\t}\n\tconst throttle = config?.throttle ?? {};\n\tif (throttle === false) return null;\n\tconst at = `${where}: ${option}.throttle`;\n\tif (typeof throttle !== 'object' || throttle === null) {\n\t\tthrow new TypeError(\n\t\t\t`${at} must be { attempts, window }, or false to count nothing`,\n\t\t);\n\t}\n\tconst attempts = throttle.attempts ?? defaults.attempts;\n\tif (!Number.isSafeInteger(attempts) || attempts < 1) {\n\t\tthrow new TypeError(`${at}.attempts must be a whole number above zero`);\n\t}\n\treturn {\n\t\tattempts,\n\t\twindowMs: parseDuration(throttle.window ?? defaults.window, `${at}.window`),\n\t};\n}\n",
16
16
  "/** Resolves one user type: its schema, its password policy, its sessions. */\n\nimport { parseDuration } from '../../time/duration';\nimport { fieldName } from './names';\nimport { normalizer } from './normalize';\nimport type { PasswordConfig } from './password-config';\nimport type { ResolvedType } from './resolved-config';\nimport type { UserTypeConfig } from './user-type';\n\n/** `at` names the type in a refusal; `schemaKey` is the key its schema came in. */\nexport function resolveType(\n\tname: string,\n\ttype: UserTypeConfig,\n\tat: string,\n\tschemaKey: string,\n): ResolvedType {\n\tif (\n\t\ttypeof type?.schema !== 'object' ||\n\t\ttype.schema === null ||\n\t\ttypeof type.schema['~standard']?.validate !== 'function'\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${at}: ${schemaKey} must be a Standard Schema — a Zod 4, Valibot or ArkType schema`,\n\t\t);\n\t}\n\n\tconst password =\n\t\ttype.password === undefined ? null : resolvePassword(type.password, at);\n\n\tconst renewAfter = type.session?.renewAfter ?? '1d';\n\n\treturn {\n\t\tname,\n\t\tschema: type.schema,\n\t\tschemaVersion: type.schemaVersion ?? '1',\n\t\tpassword,\n\t\temail: fieldName(type.email ?? 'email', `${at}: email`),\n\t\tlifespanMs: parseDuration(\n\t\t\ttype.session?.lifespan ?? '7d',\n\t\t\t`${at}: session.lifespan`,\n\t\t),\n\t\trenewAfterMs:\n\t\t\trenewAfter === false\n\t\t\t\t? null\n\t\t\t\t: parseDuration(renewAfter, `${at}: session.renewAfter`),\n\t};\n}\n\nfunction resolvePassword(\n\tpassword: PasswordConfig,\n\tat: string,\n): NonNullable<ResolvedType['password']> {\n\tconst minLength = password.minLength ?? 8;\n\tif (!Number.isInteger(minLength) || minLength < 1) {\n\t\tthrow new TypeError(\n\t\t\t`${at}: password.minLength must be an integer of at least 1`,\n\t\t);\n\t}\n\treturn {\n\t\tlogin: fieldName(password.login, `${at}: password.login`),\n\t\tnormalize: normalizer(\n\t\t\tpassword.normalize ?? 'lowercaseTrim',\n\t\t\t`${at}: password.normalize`,\n\t\t),\n\t\tminLength,\n\t};\n}\n",
17
- "/**\n * Resolves what `janus()` was given: applies the defaults and refuses what\n * cannot be wired, with a bare `TypeError` naming where.\n */\n\nimport { parseDuration } from '../../time/duration';\nimport type {\n\tJanusConfig,\n\tMultiTypeConfig,\n\tSingleTypeConfig,\n} from './janus-config';\nimport { NAME } from './names';\nimport { RESERVED_TYPES, SINGLE_TYPE } from './reserved';\nimport { resolveCookie } from './resolve-cookie';\nimport { resolveDevices } from './resolve-devices';\nimport { resolveSecondFactor } from './resolve-second-factor';\nimport { resolveMailThrottle, resolveSignInThrottle } from './resolve-throttle';\nimport { resolveType } from './resolve-type';\nimport type { ResolvedConfig, ResolvedType } from './resolved-config';\nimport type { UserSchema, UserTypeConfig } from './user-type';\n\n/** Applies the defaults and refuses what cannot be wired. `where` names the call. */\nexport function resolveConfig(\n\tconfig: JanusConfig,\n\twhere: string,\n): ResolvedConfig {\n\tif (typeof config !== 'object' || config === null) {\n\t\tthrow new TypeError(`${where}: expected a configuration object`);\n\t}\n\n\tconst hasUser = config.user !== undefined;\n\tconst hasUsers = config.users !== undefined;\n\tif (hasUser === hasUsers) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: pass either user (one user type) or users (several user types), and exactly one of them`,\n\t\t);\n\t}\n\n\tconst types = resolveTypes(entriesOf(config, hasUsers), hasUsers, where);\n\trefuseHashingWithoutHasher(config, types, where);\n\n\treturn {\n\t\tsingle: !hasUsers,\n\t\ttypes,\n\t\ttokenTtlMs: resolveTokenTtls(config, where),\n\t\tcookie: resolveCookie(config.cookie ?? {}, where),\n\t\tsignInThrottle: resolveSignInThrottle(config.signIn, where),\n\t\tmailThrottle: resolveMailThrottle(config.mail, where),\n\t\tsecondFactor: resolveSecondFactor(config.secondFactor, where),\n\t\tdevices: resolveDevices(config.devices, where),\n\t};\n}\n\n/** Every user type declared, by name: the single-type form's under {@link SINGLE_TYPE}. */\nfunction entriesOf(\n\tconfig: JanusConfig,\n\thasUsers: boolean,\n): [string, UserTypeConfig][] {\n\treturn hasUsers\n\t\t? Object.entries(config.users as MultiTypeConfig['users'])\n\t\t: [\n\t\t\t\t[\n\t\t\t\t\tSINGLE_TYPE,\n\t\t\t\t\t{\n\t\t\t\t\t\t...(config as SingleTypeConfig),\n\t\t\t\t\t\tschema: config.user as UserSchema,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t];\n}\n\nfunction resolveTypes(\n\tentries: [string, UserTypeConfig][],\n\thasUsers: boolean,\n\twhere: string,\n): Map<string, ResolvedType> {\n\tif (entries.length === 0) {\n\t\tthrow new TypeError(`${where}: users declares no user type`);\n\t}\n\n\tconst types = new Map<string, ResolvedType>();\n\tfor (const [name, type] of entries) {\n\t\tconst at = hasUsers ? `${where}: users.${name}` : where;\n\n\t\tif (!NAME.test(name)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: the user type \"${name}\" must be a camelCase name — letters and digits, starting with a letter`,\n\t\t\t);\n\t\t}\n\t\tif ((RESERVED_TYPES as readonly string[]).includes(name)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: \"${name}\" cannot name a user type — janus() answers a method of that name`,\n\t\t\t);\n\t\t}\n\t\ttypes.set(name, resolveType(name, type, at, hasUsers ? 'schema' : 'user'));\n\t}\n\treturn types;\n}\n\nfunction refuseHashingWithoutHasher(\n\tconfig: JanusConfig,\n\ttypes: ReadonlyMap<string, ResolvedType>,\n\twhere: string,\n): void {\n\tconst hashing = [...types.values()].some((type) => type.password !== null);\n\tif (hashing && config.hasher === undefined) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: a user type signs in with a password and no hasher is wired — pass hasher: scryptHasher(), or bunHasher() on Bun. There is no silent fallback`,\n\t\t);\n\t}\n}\n\nfunction resolveTokenTtls(\n\tconfig: JanusConfig,\n\twhere: string,\n): ResolvedConfig['tokenTtlMs'] {\n\treturn {\n\t\tverifyEmail: parseDuration(\n\t\t\tconfig.tokens?.verifyEmail ?? '24h',\n\t\t\t`${where}: tokens.verifyEmail`,\n\t\t),\n\t\tresetPassword: parseDuration(\n\t\t\tconfig.tokens?.resetPassword ?? '1h',\n\t\t\t`${where}: tokens.resetPassword`,\n\t\t),\n\t\tsignInCode: parseDuration(\n\t\t\tconfig.tokens?.signInCode ?? '10m',\n\t\t\t`${where}: tokens.signInCode`,\n\t\t),\n\t\tmagicLink: parseDuration(\n\t\t\tconfig.tokens?.magicLink ?? '15m',\n\t\t\t`${where}: tokens.magicLink`,\n\t\t),\n\t\tstepUp: parseDuration(\n\t\t\tconfig.tokens?.stepUp ?? '10m',\n\t\t\t`${where}: tokens.stepUp`,\n\t\t),\n\t};\n}\n",
18
- "/**\n * The one wiring mistake the mail throttle cannot refuse: a `tokens.*`\n * lifetime shorter than `mail.throttle.window`. A refused request spends\n * nothing, so the last link or code sent keeps working, but only while it has\n * not expired: with a shorter lifetime it can lapse before the refusal ends.\n * That is a choice an application may make on purpose, so it is a warning,\n * emitted once per `janus()` call, never an error.\n */\n\nimport type { ResolvedConfig } from './resolved-config';\n\n/** The flows the mail throttle counts, in the order a warning names them. */\nconst FLOWS = [\n\t'magicLink',\n\t'signInCode',\n\t'resetPassword',\n\t'verifyEmail',\n\t'stepUp',\n] as const;\n\nconst UNITS: readonly (readonly [string, number])[] = [\n\t['d', 86_400_000],\n\t['h', 3_600_000],\n\t['m', 60_000],\n\t['s', 1_000],\n];\n\n/** `600000` as `10m`: the largest unit that divides it exactly. */\nfunction show(ms: number): string {\n\tconst unit = UNITS.find(([, size]) => ms % size === 0);\n\treturn unit === undefined ? `${ms}ms` : `${ms / unit[1]}${unit[0]}`;\n}\n\n/** The warning's text, or `null` when no lifetime is shorter than the window. */\nexport function throttleWindowMessage(\n\tresolved: Pick<ResolvedConfig, 'mailThrottle' | 'tokenTtlMs'>,\n\twhere: string,\n): string | null {\n\tconst throttle = resolved.mailThrottle;\n\tif (throttle === null) return null;\n\tconst window = show(throttle.windowMs);\n\tconst shorter = FLOWS.filter(\n\t\t(flow) => resolved.tokenTtlMs[flow] < throttle.windowMs,\n\t);\n\tif (shorter.length === 0) return null;\n\tconst shortest = Math.min(\n\t\t...shorter.map((flow) => resolved.tokenTtlMs[flow]),\n\t);\n\tconst parts = shorter.map(\n\t\t(flow) =>\n\t\t\t`tokens.${flow} is ${show(resolved.tokenTtlMs[flow])}, shorter than mail.throttle.window, ${window}`,\n\t);\n\treturn `${where}: ${parts.join('; ')} — past the limit the last ${shorter.length === 1 ? 'token' : 'tokens'} sent can expire before the refusal ends. Set mail.throttle.window to ${show(shortest)} or less, or raise ${shorter.map((flow) => `tokens.${flow}`).join(', ')} to ${window} or more.`;\n}\n\n/** Emits {@link throttleWindowMessage} through `process.emitWarning`, where the runtime has one. */\nexport function warnThrottleWindow(\n\tresolved: Pick<ResolvedConfig, 'mailThrottle' | 'tokenTtlMs'>,\n\twhere: string,\n): void {\n\tconst message = throttleWindowMessage(resolved, where);\n\tif (message === null) return;\n\tif (\n\t\ttypeof process === 'undefined' ||\n\t\ttypeof process.emitWarning !== 'function'\n\t) {\n\t\treturn;\n\t}\n\tprocess.emitWarning(message, { code: 'JANUS_THROTTLE_WINDOW' });\n}\n",
17
+ "/**\n * Resolves what `janus()` was given: applies the defaults and refuses what\n * cannot be wired, with a bare `TypeError` naming where.\n */\n\nimport { parseDuration } from '../../time/duration';\nimport type {\n\tJanusConfig,\n\tMultiTypeConfig,\n\tSingleTypeConfig,\n} from './janus-config';\nimport { NAME } from './names';\nimport { RESERVED_TYPES, SINGLE_TYPE } from './reserved';\nimport { resolveCookie } from './resolve-cookie';\nimport { resolveDevices } from './resolve-devices';\nimport { resolveSecondFactor } from './resolve-second-factor';\nimport { resolveMailThrottle, resolveSignInThrottle } from './resolve-throttle';\nimport { resolveType } from './resolve-type';\nimport type { ResolvedConfig, ResolvedType } from './resolved-config';\nimport type { UserSchema, UserTypeConfig } from './user-type';\n\n/** Applies the defaults and refuses what cannot be wired. `where` names the call. */\nexport function resolveConfig(\n\tconfig: JanusConfig,\n\twhere: string,\n): ResolvedConfig {\n\tif (typeof config !== 'object' || config === null) {\n\t\tthrow new TypeError(`${where}: expected a configuration object`);\n\t}\n\n\tconst hasUser = config.user !== undefined;\n\tconst hasUsers = config.users !== undefined;\n\tif (hasUser === hasUsers) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: pass either user (one user type) or users (several user types), and exactly one of them`,\n\t\t);\n\t}\n\n\tconst types = resolveTypes(entriesOf(config, hasUsers), hasUsers, where);\n\trefuseHashingWithoutHasher(config, types, where);\n\n\treturn {\n\t\tsingle: !hasUsers,\n\t\ttypes,\n\t\ttokenTtlMs: resolveTokenTtls(config, where),\n\t\tcookie: resolveCookie(config.cookie ?? {}, where),\n\t\tsignInThrottle: resolveSignInThrottle(config.signIn, where),\n\t\tmailThrottle: resolveMailThrottle(config.mail, where),\n\t\tsecondFactor: resolveSecondFactor(config.secondFactor, where),\n\t\tdevices: resolveDevices(config.devices, where),\n\t};\n}\n\n/** Every user type declared, by name: the single-type form's under {@link SINGLE_TYPE}. */\nfunction entriesOf(\n\tconfig: JanusConfig,\n\thasUsers: boolean,\n): [string, UserTypeConfig][] {\n\treturn hasUsers\n\t\t? Object.entries(config.users as MultiTypeConfig['users'])\n\t\t: [\n\t\t\t\t[\n\t\t\t\t\tSINGLE_TYPE,\n\t\t\t\t\t{\n\t\t\t\t\t\t...(config as SingleTypeConfig),\n\t\t\t\t\t\tschema: config.user as UserSchema,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t];\n}\n\nfunction resolveTypes(\n\tentries: [string, UserTypeConfig][],\n\thasUsers: boolean,\n\twhere: string,\n): Map<string, ResolvedType> {\n\tif (entries.length === 0) {\n\t\tthrow new TypeError(`${where}: users declares no user type`);\n\t}\n\n\tconst types = new Map<string, ResolvedType>();\n\tfor (const [name, type] of entries) {\n\t\tconst at = hasUsers ? `${where}: users.${name}` : where;\n\n\t\tif (!NAME.test(name)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: the user type \"${name}\" must be a camelCase name — letters and digits, starting with a letter`,\n\t\t\t);\n\t\t}\n\t\tif ((RESERVED_TYPES as readonly string[]).includes(name)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: \"${name}\" cannot name a user type — janus() answers a method of that name`,\n\t\t\t);\n\t\t}\n\t\ttypes.set(name, resolveType(name, type, at, hasUsers ? 'schema' : 'user'));\n\t}\n\treturn types;\n}\n\nfunction refuseHashingWithoutHasher(\n\tconfig: JanusConfig,\n\ttypes: ReadonlyMap<string, ResolvedType>,\n\twhere: string,\n): void {\n\tconst hashing = [...types.values()].some((type) => type.password !== null);\n\tif (hashing && config.hasher === undefined) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: a user type signs in with a password and no hasher is wired — pass hasher: scryptHasher(), or bunHasher() on Bun. There is no silent fallback`,\n\t\t);\n\t}\n}\n\nfunction resolveTokenTtls(\n\tconfig: JanusConfig,\n\twhere: string,\n): ResolvedConfig['tokenTtlMs'] {\n\treturn {\n\t\tverifyEmail: parseDuration(\n\t\t\tconfig.tokens?.verifyEmail ?? '24h',\n\t\t\t`${where}: tokens.verifyEmail`,\n\t\t),\n\t\tresetPassword: parseDuration(\n\t\t\tconfig.tokens?.resetPassword ?? '1h',\n\t\t\t`${where}: tokens.resetPassword`,\n\t\t),\n\t\tsignInCode: parseDuration(\n\t\t\tconfig.tokens?.signInCode ?? '10m',\n\t\t\t`${where}: tokens.signInCode`,\n\t\t),\n\t\tmagicLink: parseDuration(\n\t\t\tconfig.tokens?.magicLink ?? '15m',\n\t\t\t`${where}: tokens.magicLink`,\n\t\t),\n\t\tstepUp: parseDuration(\n\t\t\tconfig.tokens?.stepUp ?? '10m',\n\t\t\t`${where}: tokens.stepUp`,\n\t\t),\n\t\tchangeEmail: parseDuration(\n\t\t\tconfig.tokens?.changeEmail ?? '1h',\n\t\t\t`${where}: tokens.changeEmail`,\n\t\t),\n\t};\n}\n",
18
+ "/**\n * The one wiring mistake the mail throttle cannot refuse: a `tokens.*`\n * lifetime shorter than `mail.throttle.window`. A refused request spends\n * nothing, so the last link or code sent keeps working, but only while it has\n * not expired: with a shorter lifetime it can lapse before the refusal ends.\n * That is a choice an application may make on purpose, so it is a warning,\n * emitted once per `janus()` call, never an error.\n */\n\nimport type { ResolvedConfig } from './resolved-config';\n\n/** The flows the mail throttle counts, in the order a warning names them. */\nconst FLOWS = [\n\t'magicLink',\n\t'signInCode',\n\t'resetPassword',\n\t'verifyEmail',\n\t'stepUp',\n\t'changeEmail',\n] as const;\n\nconst UNITS: readonly (readonly [string, number])[] = [\n\t['d', 86_400_000],\n\t['h', 3_600_000],\n\t['m', 60_000],\n\t['s', 1_000],\n];\n\n/** `600000` as `10m`: the largest unit that divides it exactly. */\nfunction show(ms: number): string {\n\tconst unit = UNITS.find(([, size]) => ms % size === 0);\n\treturn unit === undefined ? `${ms}ms` : `${ms / unit[1]}${unit[0]}`;\n}\n\n/** The warning's text, or `null` when no lifetime is shorter than the window. */\nexport function throttleWindowMessage(\n\tresolved: Pick<ResolvedConfig, 'mailThrottle' | 'tokenTtlMs'>,\n\twhere: string,\n): string | null {\n\tconst throttle = resolved.mailThrottle;\n\tif (throttle === null) return null;\n\tconst window = show(throttle.windowMs);\n\tconst shorter = FLOWS.filter(\n\t\t(flow) => resolved.tokenTtlMs[flow] < throttle.windowMs,\n\t);\n\tif (shorter.length === 0) return null;\n\tconst shortest = Math.min(\n\t\t...shorter.map((flow) => resolved.tokenTtlMs[flow]),\n\t);\n\tconst parts = shorter.map(\n\t\t(flow) =>\n\t\t\t`tokens.${flow} is ${show(resolved.tokenTtlMs[flow])}, shorter than mail.throttle.window, ${window}`,\n\t);\n\treturn `${where}: ${parts.join('; ')} — past the limit the last ${shorter.length === 1 ? 'token' : 'tokens'} sent can expire before the refusal ends. Set mail.throttle.window to ${show(shortest)} or less, or raise ${shorter.map((flow) => `tokens.${flow}`).join(', ')} to ${window} or more.`;\n}\n\n/** Emits {@link throttleWindowMessage} through `process.emitWarning`, where the runtime has one. */\nexport function warnThrottleWindow(\n\tresolved: Pick<ResolvedConfig, 'mailThrottle' | 'tokenTtlMs'>,\n\twhere: string,\n): void {\n\tconst message = throttleWindowMessage(resolved, where);\n\tif (message === null) return;\n\tif (\n\t\ttypeof process === 'undefined' ||\n\t\ttypeof process.emitWarning !== 'function'\n\t) {\n\t\treturn;\n\t}\n\tprocess.emitWarning(message, { code: 'JANUS_THROTTLE_WINDOW' });\n}\n",
19
19
  "/**\n * What every operation of the core is handed: the resolved configuration, the\n * guarded stores, the clock, the hashers and the events listener.\n */\n\nimport { mintId } from '../../ids/id';\nimport type { RelationStore } from '../../permissions/port/types';\nimport type { Clock } from '../../time/clock';\nimport type { PasswordHasher, ResolvedConfig } from '../config';\nimport type { UserEventListener } from '../events';\nimport type { JanusStores, StoreCapabilities } from '../port/types';\n\nexport interface Context {\n\treadonly config: ResolvedConfig;\n\t/** Already guarded, by `src/stores/guard.ts`. */\n\treadonly store: JanusStores;\n\t/** Already guarded. `null` when no relation store is wired. */\n\treadonly relations: RelationStore | null;\n\treadonly capabilities: StoreCapabilities;\n\treadonly clock: Clock;\n\treadonly hasher: PasswordHasher | null;\n\t/** The hasher first, then every verifier: whoever claims a prefix verifies it. */\n\treadonly verifiers: readonly PasswordHasher[];\n\t/** Hashed once, lazily: what a missing user's password is compared against. */\n\tdummyHash(): Promise<string>;\n\t/** What `janus({ events })` was given, or `null`. */\n\treadonly events: UserEventListener | null;\n}\n\nexport function createContext(\n\tconfig: ResolvedConfig,\n\tstore: JanusStores,\n\trelations: RelationStore | null,\n\tcapabilities: StoreCapabilities,\n\tclock: Clock,\n\thasher: PasswordHasher | null,\n\tverifiers: readonly PasswordHasher[],\n\tevents: UserEventListener | null = null,\n): Context {\n\tlet dummy: Promise<string> | null = null;\n\n\treturn {\n\t\tconfig,\n\t\tstore,\n\t\trelations,\n\t\tcapabilities,\n\t\tclock,\n\t\thasher,\n\t\tverifiers,\n\t\tevents,\n\t\tdummyHash: () => {\n\t\t\tif (hasher === null) {\n\t\t\t\tthrow new TypeError('janus: no hasher to compare a dummy hash with');\n\t\t\t}\n\t\t\tdummy ??= hasher.hash(`janus-dummy-${mintId()}`);\n\t\t\treturn dummy;\n\t\t},\n\t};\n}\n",
20
20
  "/**\n * What a user signs in with, and is found by: the login field and the e-mail,\n * each normalised by its own rule.\n */\n\nimport { UserInvalidError } from '../../errors/janus-error';\nimport { isStorable, UNSTORABLE } from '../../stores/storable';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport type { JsonObject, UserRecord } from '../port/types';\nimport type { Context } from './create-context';\n\n/** The user's e-mail, as stored, or `null` when the schema let it be absent. */\nexport function emailOf(type: ResolvedType, fields: JsonObject): string | null {\n\tconst value = fields[type.email];\n\treturn typeof value === 'string' ? value : null;\n}\n\n/**\n * What a user signs in with, normalised: the login field, by its own rule,\n * and the e-mail, by the e-mail rule — so a user whose login is a username can\n * still be found by the e-mail a reset is requested for.\n */\nexport function loginsOf(\n\ttype: ResolvedType,\n\tfields: JsonObject,\n\twhere: string,\n): string[] {\n\tconst logins = new Set<string>();\n\n\tif (type.password !== null) {\n\t\tconst login = fields[type.password.login];\n\t\tif (typeof login !== 'string') {\n\t\t\tthrow new TypeError(\n\t\t\t\t`janus: password.login \"${type.password.login}\" did not name a string in validated ${type.name} fields — it must name a required string field`,\n\t\t\t);\n\t\t}\n\t\tconst normalized = type.password.normalize(login);\n\t\t// The fields were checked; a function normaliser can still cut a\n\t\t// surrogate pair in half. Refused here, or the user is written with a\n\t\t// login nobody can sign in with — or not written at all, on PostgreSQL.\n\t\tif (!isStorable(normalized)) {\n\t\t\tconst path = [type.password.login];\n\t\t\tthrow new UserInvalidError(\n\t\t\t\t`${where}: the fields do not match the ${type.name} schema (1 issue, at ${path.join('.')})`,\n\t\t\t\t{\n\t\t\t\t\tissues: [\n\t\t\t\t\t\t{ path, message: `normalises to a login that ${UNSTORABLE}` },\n\t\t\t\t\t],\n\t\t\t\t\tuserType: type.name,\n\t\t\t\t},\n\t\t\t);\n\t\t}\n\t\tlogins.add(normalized);\n\t}\n\n\tconst email = emailOf(type, fields);\n\tif (email !== null) logins.add(normalizeEmail(email));\n\n\treturn [...logins];\n}\n\n/**\n * The user of this type whose e-mail this is, or `null`. Looked up as a\n * login — every e-mail is one — and then compared, so a username that only\n * looks like an e-mail is nobody's.\n */\nexport async function holderOfEmail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\temail: string,\n): Promise<UserRecord | null> {\n\tconst wanted = normalizeEmail(email);\n\tif (!isStorable(wanted)) return null;\n\tconst record = await context.store.users.findUserByLogin(type.name, wanted);\n\tconst held = record === null ? null : emailOf(type, record.fields);\n\treturn held !== null && normalizeEmail(held) === wanted ? record : null;\n}\n",
21
21
  "/**\n * **The identity side's two conversions**, and the one place a `null` becomes\n * an error.\n *\n * > An absence is `null`. A failure throws.\n *\n * {@link guardStores} puts the three identity stores behind the shared guard\n * (`src/stores/guard.ts`), the one place a store's answer is caught.\n * {@link required} turns an absence the caller cannot accept into its refusal,\n * and {@link unlessVersionConflict} absorbs one named conflict and rethrows\n * everything else.\n *\n * `outage.scan.spec.ts` reads every other file of `src/auth/`, `src/permissions/`\n * and `src/stores/` and fails if a `catch` appears in one, because the failure\n * this design exists to prevent is a single careless `catch { return null }`.\n */\n\nimport { type JanusError, StoreConflict } from '../errors/janus-error';\nimport { guardStore } from '../stores/guard';\nimport type { JanusStores } from './port/types';\n\n/**\n * The stores, with every method guarded.\n *\n * - A `JanusError` the adapter threw — `StoreFailure`, `StoreConflict`,\n * `NotFoundError` — passes through untouched, so `instanceof` still holds.\n * - **Anything else it threw is a failure**: a driver error, a `TypeError` from\n * a bug in the adapter, a string. It becomes `StoreFailure` with the original\n * as `cause`, naming the slot and the method. It is never an absence.\n * - A method that answers `undefined` where the port says `null` is a store\n * that forgot to answer, and becomes `StoreFailure` rather than \"not found\".\n * Rule 2 of the port, enforced at run time for the JavaScript adapter the\n * compiler never saw.\n *\n * The optional `deleteExpiredSessions` is guarded when present and left absent\n * when absent, so capability detection still reads the truth.\n */\nexport function guardStores(stores: JanusStores): JanusStores {\n\treturn {\n\t\tusers: guardStore('users', stores.users),\n\t\tsessions: guardStore('sessions', stores.sessions),\n\t\ttokens: guardStore('tokens', stores.tokens),\n\t};\n}\n\n/**\n * A value the caller requires, or the refusal an absence deserves.\n *\n * The only place in the core where a `null` from a store turns into an error —\n * `get` becoming `NOT_FOUND`. Written as a function so that the conversion is\n * visible at every call site and nowhere else.\n */\nexport function required<T>(value: T | null, absent: () => JanusError): T {\n\tif (value === null) throw absent();\n\treturn value;\n}\n\n/**\n * A write that may lose a race, and is allowed to: its answer, or `null` when\n * the record's version moved under it.\n *\n * **Only `StoreConflict('version')` is absorbed.** A failure still throws, a\n * taken login still throws, `NOT_FOUND` still throws: an outage never reads as\n * \"somebody else wrote first\". It exists for writes the caller did not ask for\n * — rewriting a password hash on sign-in — where losing to a concurrent update\n * means only that the next sign-in tries again.\n */\nexport async function unlessVersionConflict<T>(\n\twrite: Promise<T>,\n): Promise<T | null> {\n\ttry {\n\t\treturn await write;\n\t} catch (error) {\n\t\tif (error instanceof StoreConflict && error.on === 'version') return null;\n\t\tthrow error;\n\t}\n}\n",
@@ -23,7 +23,7 @@
23
23
  "/** A user as the core answers one, from the record a store holds. */\n\nimport type { UserRecord } from '../port/types';\nimport type { User, UserRef } from '../types';\n\n/** A user of any type, as the degenericised core handles them. */\nexport type AnyUser = User<string, Record<string, unknown>>;\n\n/**\n * A user as application code sees it: their fields at the top level, then\n * what `janus` sets — written last, so no stored key can shadow it. No password\n * hash, ever.\n */\nexport function toUser(record: UserRecord): AnyUser {\n\treturn {\n\t\t...record.fields,\n\t\tid: record.id,\n\t\ttype: record.type,\n\t\temailVerified: record.emailVerifiedAt !== null,\n\t\tactive: record.active,\n\t\thasPassword: record.password !== null,\n\t\thasSecondFactor: record.secondFactor?.confirmedAt != null,\n\t\tversion: record.version,\n\t\tcreatedAt: record.createdAt,\n\t\tupdatedAt: record.updatedAt,\n\t};\n}\n\n/** The id a {@link UserRef} names. */\nexport const idOf = (user: UserRef): string =>\n\ttypeof user === 'string' ? user : user.id;\n\n/**\n * The id a JavaScript caller's reference names, or `''` — malformed, and\n * so `NOT_FOUND` without reaching the store — for anything that names none:\n * what the privileged calls read, `signInProven` and\n * `verifyEmail.proveFirst`, which must never mistake a bad value for a user.\n */\nexport function refId(user: UserRef): string {\n\tif (typeof user === 'string') return user;\n\tconst id: unknown =\n\t\ttypeof user === 'object' && user !== null ? user.id : undefined;\n\treturn typeof id === 'string' ? id : '';\n}\n",
24
24
  "/**\n * Reading a user's record by id — an absence is `null`, `getRecord` makes it\n * `NOT_FOUND` — and the one write that follows such a read, under a version.\n */\n\nimport { NotFoundError, StoreConflict } from '../../errors/janus-error';\nimport { isId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport { required } from '../outage';\nimport type { UserPatch, UserRecord } from '../port/types';\nimport type { UserRef, WriteOptions } from '../types';\nimport type { Context } from './create-context';\nimport { idOf } from './user';\n\nconst notFound = (where: string, id: string, type: string | null) =>\n\tnew NotFoundError(\n\t\t`${where}: no ${type ?? 'user'} has this id`,\n\t\ttype === null\n\t\t\t? { userId: id, operation: where }\n\t\t\t: { userId: id, userType: type, operation: where },\n\t);\n\n/**\n * The user — of this type, when one is given — or `null`. A malformed id is an\n * absence decided without reaching the store: it arrives off a URL, and it is\n * \"no such user\", not a query and not an outage. A user of another type is\n * absent too: `auth.staff.find(patientId)` finds nobody.\n */\nexport async function findRecord(\n\tcontext: Context,\n\tid: string,\n\ttype: string | null,\n): Promise<UserRecord | null> {\n\tif (!isId(id)) return null;\n\tconst record = await context.store.users.findUser(id);\n\treturn record !== null && (type === null || record.type === type)\n\t\t? record\n\t\t: null;\n}\n\n/** The user, or `NOT_FOUND`. */\nexport async function getRecord(\n\tcontext: Context,\n\tid: string,\n\ttype: string | null,\n\twhere: string,\n): Promise<UserRecord> {\n\treturn required(await findRecord(context, id, type), () =>\n\t\tnotFound(where, id, type),\n\t);\n}\n\n/**\n * One write that follows a read, under a version: the core reads the user,\n * checks `ifVersion` against what it read, computes the patch from the record,\n * and writes under the version it read. A user who changed in between is\n * `VERSION_CONFLICT`, and nothing is written.\n */\nexport async function writeUser(\n\tcontext: Context,\n\tuser: UserRef,\n\ttype: ResolvedType,\n\toptions: WriteOptions | undefined,\n\twhere: string,\n\tpatchOf: (\n\t\trecord: UserRecord,\n\t\tnow: Date,\n\t) => Omit<UserPatch, 'updatedAt'> | Promise<Omit<UserPatch, 'updatedAt'>>,\n): Promise<UserRecord> {\n\tconst id = idOf(user);\n\tconst record = await getRecord(context, id, type.name, where);\n\tconst ifVersion = options?.ifVersion;\n\n\tif (ifVersion !== undefined && ifVersion !== record.version) {\n\t\tthrow new StoreConflict(\n\t\t\t'version',\n\t\t\t`${where}: expected version ${ifVersion}, found ${record.version}`,\n\t\t\t{\n\t\t\t\tuserId: id,\n\t\t\t\texpectedVersion: ifVersion,\n\t\t\t\tactualVersion: record.version,\n\t\t\t\toperation: where,\n\t\t\t},\n\t\t);\n\t}\n\n\tconst now = context.clock.now();\n\tconst patch = await patchOf(record, now);\n\treturn context.store.users.updateUser(\n\t\trecord.id,\n\t\t{ ...patch, updatedAt: now },\n\t\trecord.version,\n\t);\n}\n",
25
25
  "/**\n * A user's fields, validated against the type's schema and answered as the\n * port holds them — or refused, reporting where and never the values.\n */\n\nimport { type Issue, UserInvalidError } from '../../errors/janus-error';\nimport { isStorable, UNSTORABLE } from '../../stores/storable';\nimport { RESERVED_FIELDS, type ResolvedType } from '../config';\nimport type { Json, JsonObject } from '../port/types';\nimport type { StandardSchemaV1 } from '../standard-schema';\n\n/**\n * Validates fields against the type's schema, and answers them as the port\n * holds them: an `undefined` property dropped, at every depth.\n */\nexport async function validateFields(\n\ttype: ResolvedType,\n\tinput: unknown,\n\twhere: string,\n): Promise<JsonObject> {\n\tconst result = await type.schema['~standard'].validate(input);\n\n\tconst issues: Issue[] =\n\t\tresult.issues === undefined\n\t\t\t? []\n\t\t\t: result.issues.map((issue) => ({\n\t\t\t\t\tpath: storablePrefix((issue.path ?? []).map(segmentKey)),\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t}));\n\n\t// A schema that passes unknown keys through would let a request set `id` or\n\t// `active` among the fields. `toUser` would shadow them anyway; refusing\n\t// them says so to whoever sent them.\n\tif (result.issues === undefined) {\n\t\tconst value = result.value as Record<string, unknown>;\n\t\tfor (const key of RESERVED_FIELDS) {\n\t\t\tif (Object.hasOwn(value, key)) {\n\t\t\t\tissues.push({ path: [key], message: 'set by janus, not by a request' });\n\t\t\t}\n\t\t}\n\t\tunstorableIn(value, [], issues);\n\t}\n\n\tif (issues.length > 0) {\n\t\t// The message reports how many and where, never the values: a field may\n\t\t// be anything the application chose to store, including something\n\t\t// private.\n\t\tthrow new UserInvalidError(\n\t\t\t`${where}: the fields do not match the ${type.name} schema (${issues.length} issue${issues.length === 1 ? '' : 's'}, at ${issues.map((i) => i.path.join('.') || '(root)').join(', ')})`,\n\t\t\t{ issues, userType: type.name },\n\t\t);\n\t}\n\n\treturn withoutUndefined((result as { value: unknown }).value) as JsonObject;\n}\n\n/** Pushes an issue for every key and every string no store can keep. */\nfunction unstorableIn(\n\tvalue: unknown,\n\tpath: (string | number)[],\n\tissues: Issue[],\n): void {\n\tif (typeof value === 'string') {\n\t\tif (!isStorable(value)) issues.push({ path, message: UNSTORABLE });\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tfor (const [index, inner] of value.entries()) {\n\t\t\tunstorableIn(inner, [...path, index], issues);\n\t\t}\n\t\treturn;\n\t}\n\tif (typeof value === 'object' && value !== null) {\n\t\tfor (const [key, inner] of Object.entries(value)) {\n\t\t\t// The key itself stays out of the path: the path reaches the message,\n\t\t\t// and a NUL has no business in a log line.\n\t\t\tif (!isStorable(key)) {\n\t\t\t\tissues.push({ path, message: `a key ${UNSTORABLE}` });\n\t\t\t} else {\n\t\t\t\tunstorableIn(inner, [...path, key], issues);\n\t\t\t}\n\t\t}\n\t}\n}\n\n/**\n * A path up to its first key no store can keep: the path reaches the message,\n * and a NUL has no business in a log line.\n */\nfunction storablePrefix(path: (string | number)[]): (string | number)[] {\n\tconst cut = path.findIndex(\n\t\t(segment) => typeof segment === 'string' && !isStorable(segment),\n\t);\n\treturn cut === -1 ? path : path.slice(0, cut);\n}\n\nfunction segmentKey(\n\tsegment: PropertyKey | StandardSchemaV1.PathSegment,\n): string | number {\n\tconst key = typeof segment === 'object' ? segment.key : segment;\n\treturn typeof key === 'number' ? key : String(key);\n}\n\nfunction withoutUndefined(value: unknown): Json {\n\tif (Array.isArray(value)) return value.map(withoutUndefined);\n\n\tif (typeof value === 'object' && value !== null) {\n\t\tconst out: Record<string, Json> = {};\n\t\tfor (const [key, inner] of Object.entries(value)) {\n\t\t\tif (inner !== undefined) out[key] = withoutUndefined(inner);\n\t\t}\n\t\treturn out;\n\t}\n\n\treturn value as Json;\n}\n",
26
- "import { type Id, mintId } from '../ids/id';\nimport type { Context } from './context';\n\n/**\n * What happened to a user, once it is written:\n *\n * - `user.created` — by `create` or `signUp`;\n * - `user.emailVerified` — by `verifyEmail.confirm`, or by the link of\n * `resetPassword.confirm` or `magicLink.confirm`, or the code of\n * `signInCode.confirm`, which prove the e-mail too; never for an e-mail\n * already verified;\n * - `user.passwordReset` — by `resetPassword.confirm`;\n * - `user.passwordChanged` — by `changePassword` and `setPassword`, and by\n * `signInCode.confirm` and `magicLink.confirm` when their first proof of\n * the e-mail dropped a password, after `user.emailVerified`; never by a\n * reset, which is `user.passwordReset` alone;\n * - `user.emailChanged` — by `update`, when it changed the e-mail — compared\n * normalised, the same test that makes the new one unverified. The one\n * event that carries more than the user: `formerEmail`;\n * - `user.secondFactorEnabled` — by `secondFactor.activate`, once the factor\n * is active: not by `enroll`, which leaves it waiting for its first code;\n * - `user.secondFactorDisabled` — by `secondFactor.disable`, when it removed\n * an active factor, and by `signInCode.confirm` and `magicLink.confirm`\n * when their first proof of the e-mail removed one, after\n * `user.emailVerified` and any `user.passwordChanged`; never for a user who\n * had none, or one still waiting;\n * - `user.recoveryCodesRegenerated` — by `secondFactor.regenerateRecoveryCodes`:\n * the codes the user held stopped working. Not by `activate`, whose codes\n * come with `user.secondFactorEnabled`;\n * - `user.recoveryCodeUsed` — by `secondFactor.recover`, once the code is\n * spent: a sign-in without the user's phone;\n * - `user.newDeviceSignedIn` — by a sign-in that opened a session from a\n * device the user had not signed in from: `signIn`, `secondFactor.confirm`,\n * `secondFactor.recover`, `signInCode.confirm`, `magicLink.confirm` and\n * `signInProven`, when given a `device` its token did not prove. Never by\n * `signUp`, nor without a `device`. Carries `sessionId`;\n * - `user.deleted` — by `delete`, once; a replay that finds nobody is none.\n */\nexport type UserEventType =\n\t| 'user.created'\n\t| 'user.emailVerified'\n\t| 'user.passwordReset'\n\t| 'user.passwordChanged'\n\t| 'user.emailChanged'\n\t| 'user.secondFactorEnabled'\n\t| 'user.secondFactorDisabled'\n\t| 'user.recoveryCodesRegenerated'\n\t| 'user.recoveryCodeUsed'\n\t| 'user.newDeviceSignedIn'\n\t| 'user.deleted';\n\n/**\n * A user event: **the user named by id, and nothing else** — no login, no\n * field, no password, no token. Whoever receives it reads the rest from where\n * it is kept, if they may. Two exceptions: `formerEmail` on\n * `user.emailChanged` — once the write landed, the old address is kept\n * nowhere — and `sessionId` on `user.newDeviceSignedIn`, the session the new\n * device holds.\n */\nexport interface UserEvent {\n\t/** A UUIDv7 minted for this event: the key to deliver it once. */\n\treadonly id: Id;\n\treadonly type: UserEventType;\n\t/**\n\t * When the write landed: the `createdAt` or `updatedAt` it wrote, or, for\n\t * a deletion, the time read just before it — not when the listener ran.\n\t */\n\treadonly occurredAt: Date;\n\treadonly userId: Id;\n\treadonly userType: string;\n\t/**\n\t * On `user.emailChanged` only: the address the user had before, as it was\n\t * stored — `null` when they had none. So a notice can reach the inbox the\n\t * account was just taken from; the new address is on the user. Absent\n\t * from every other type, and from an event a webhook delivered.\n\t */\n\treadonly formerEmail?: string | null;\n\t/**\n\t * On `user.newDeviceSignedIn` only: the session the new device opened —\n\t * to sign it out from a \"this wasn't me\" page. Absent from every other\n\t * type, and from an event a webhook delivered.\n\t */\n\treadonly sessionId?: string;\n}\n\n/** What an event carries beyond the user, on the two types that do. */\nexport type EventExtras = Pick<UserEvent, 'formerEmail' | 'sessionId'>;\n\n/**\n * What `janus({ events })` takes: called once per event, **after** the write\n * landed and before the flow answers — awaited, so a queue that stores the\n * event durably has done so by then. A listener that throws fails nothing:\n * the write happened, and the flow answers as it would have. The failure is a\n * `JANUS_EVENT_FAILED` warning naming the event, never silence.\n */\nexport type UserEventListener = (event: UserEvent) => void | Promise<void>;\n\n/** The listener given to `janus()`, or a wiring refusal for a JavaScript caller. */\nexport function resolveEvents(\n\tevents: unknown,\n\twhere: string,\n): UserEventListener | null {\n\tif (events === undefined) return null;\n\tif (typeof events !== 'function') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: events must be a function that takes a user event — webhooks({ … }) from @nxgt/janus-webhooks, or your own`,\n\t\t);\n\t}\n\treturn events as UserEventListener;\n}\n\n/**\n * Hands one event to the listener after the write it reports. A flow whose\n * steps after the write matter to the listener — a reset's revocation, a\n * deletion's cleanup — runs them in a `try` and emits from its `finally`, so\n * an outage there does not lose the event for good. Its failure is the application's, not the flow's: warned about, with what\n * it takes to send the event again — never thrown, since the write has landed.\n */\nexport async function emit(\n\tcontext: Context,\n\ttype: UserEventType,\n\tuser: { readonly id: Id; readonly type: string },\n\toccurredAt: Date,\n\textras: EventExtras = {},\n): Promise<void> {\n\tconst listener = context.events;\n\tif (listener === null) return;\n\n\tconst event: UserEvent = Object.freeze({\n\t\tid: mintId(occurredAt.getTime()),\n\t\ttype,\n\t\t// A copy: the record's own Date is also the user the flow answers.\n\t\toccurredAt: new Date(occurredAt.getTime()),\n\t\tuserId: user.id,\n\t\tuserType: user.type,\n\t\t...extras,\n\t});\n\ttry {\n\t\tawait listener(event);\n\t} catch (failure) {\n\t\tprocess.emitWarning(\n\t\t\t`janus: the events listener failed on ${type} ${event.id} for user ${user.id}: ${failure instanceof Error ? failure.name : typeof failure}`,\n\t\t\t{ code: 'JANUS_EVENT_FAILED' },\n\t\t);\n\t}\n}\n",
26
+ "import { type Id, mintId } from '../ids/id';\nimport type { Context } from './context';\n\n/**\n * What happened to a user, once it is written:\n *\n * - `user.created` — by `create` or `signUp`;\n * - `user.emailVerified` — by `verifyEmail.confirm`, or by the link of\n * `resetPassword.confirm`, `magicLink.confirm` or `changeEmail.confirm`, or the code of\n * `signInCode.confirm`, which prove the e-mail too; never for an e-mail\n * already verified;\n * - `user.passwordReset` — by `resetPassword.confirm`;\n * - `user.passwordChanged` — by `changePassword` and `setPassword`, and by\n * `signInCode.confirm` and `magicLink.confirm` when their first proof of\n * the e-mail dropped a password, after `user.emailVerified`; never by a\n * reset, which is `user.passwordReset` alone;\n * - `user.emailChanged` — by `update` and `changeEmail.confirm`, when they\n * changed the e-mail — compared\n * normalised, the same test that makes the new one unverified. The one\n * event that carries more than the user: `formerEmail`;\n * - `user.secondFactorEnabled` — by `secondFactor.activate`, once the factor\n * is active: not by `enroll`, which leaves it waiting for its first code;\n * - `user.secondFactorDisabled` — by `secondFactor.disable`, when it removed\n * an active factor, and by `signInCode.confirm` and `magicLink.confirm`\n * when their first proof of the e-mail removed one, after\n * `user.emailVerified` and any `user.passwordChanged`; never for a user who\n * had none, or one still waiting;\n * - `user.recoveryCodesRegenerated` — by `secondFactor.regenerateRecoveryCodes`:\n * the codes the user held stopped working. Not by `activate`, whose codes\n * come with `user.secondFactorEnabled`;\n * - `user.recoveryCodeUsed` — by `secondFactor.recover`, once the code is\n * spent: a sign-in without the user's phone;\n * - `user.newDeviceSignedIn` — by a sign-in that opened a session from a\n * device the user had not signed in from: `signIn`, `secondFactor.confirm`,\n * `secondFactor.recover`, `signInCode.confirm`, `magicLink.confirm` and\n * `signInProven`, when given a `device` its token did not prove. Never by\n * `signUp`, nor without a `device`. Carries `sessionId`;\n * - `user.deleted` — by `delete`, once; a replay that finds nobody is none.\n */\nexport type UserEventType =\n\t| 'user.created'\n\t| 'user.emailVerified'\n\t| 'user.passwordReset'\n\t| 'user.passwordChanged'\n\t| 'user.emailChanged'\n\t| 'user.secondFactorEnabled'\n\t| 'user.secondFactorDisabled'\n\t| 'user.recoveryCodesRegenerated'\n\t| 'user.recoveryCodeUsed'\n\t| 'user.newDeviceSignedIn'\n\t| 'user.deleted';\n\n/**\n * A user event: **the user named by id, and nothing else** — no login, no\n * field, no password, no token. Whoever receives it reads the rest from where\n * it is kept, if they may. Two exceptions: `formerEmail` on\n * `user.emailChanged` — once the write landed, the old address is kept\n * nowhere — and `sessionId` on `user.newDeviceSignedIn`, the session the new\n * device holds.\n */\nexport interface UserEvent {\n\t/** A UUIDv7 minted for this event: the key to deliver it once. */\n\treadonly id: Id;\n\treadonly type: UserEventType;\n\t/**\n\t * When the write landed: the `createdAt` or `updatedAt` it wrote, or, for\n\t * a deletion, the time read just before it — not when the listener ran.\n\t */\n\treadonly occurredAt: Date;\n\treadonly userId: Id;\n\treadonly userType: string;\n\t/**\n\t * On `user.emailChanged` only: the address the user had before, as it was\n\t * stored — `null` when they had none. So a notice can reach the inbox the\n\t * account was just taken from; the new address is on the user. Absent\n\t * from every other type, and from an event a webhook delivered.\n\t */\n\treadonly formerEmail?: string | null;\n\t/**\n\t * On `user.newDeviceSignedIn` only: the session the new device opened —\n\t * to sign it out from a \"this wasn't me\" page. Absent from every other\n\t * type, and from an event a webhook delivered.\n\t */\n\treadonly sessionId?: string;\n}\n\n/** What an event carries beyond the user, on the two types that do. */\nexport type EventExtras = Pick<UserEvent, 'formerEmail' | 'sessionId'>;\n\n/**\n * What `janus({ events })` takes: called once per event, **after** the write\n * landed and before the flow answers — awaited, so a queue that stores the\n * event durably has done so by then. A listener that throws fails nothing:\n * the write happened, and the flow answers as it would have. The failure is a\n * `JANUS_EVENT_FAILED` warning naming the event, never silence.\n */\nexport type UserEventListener = (event: UserEvent) => void | Promise<void>;\n\n/** The listener given to `janus()`, or a wiring refusal for a JavaScript caller. */\nexport function resolveEvents(\n\tevents: unknown,\n\twhere: string,\n): UserEventListener | null {\n\tif (events === undefined) return null;\n\tif (typeof events !== 'function') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: events must be a function that takes a user event — webhooks({ … }) from @nxgt/janus-webhooks, or your own`,\n\t\t);\n\t}\n\treturn events as UserEventListener;\n}\n\n/**\n * Hands one event to the listener after the write it reports. A flow whose\n * steps after the write matter to the listener — a reset's revocation, a\n * deletion's cleanup — runs them in a `try` and emits from its `finally`, so\n * an outage there does not lose the event for good. Its failure is the application's, not the flow's: warned about, with what\n * it takes to send the event again — never thrown, since the write has landed.\n */\nexport async function emit(\n\tcontext: Context,\n\ttype: UserEventType,\n\tuser: { readonly id: Id; readonly type: string },\n\toccurredAt: Date,\n\textras: EventExtras = {},\n): Promise<void> {\n\tconst listener = context.events;\n\tif (listener === null) return;\n\n\tconst event: UserEvent = Object.freeze({\n\t\tid: mintId(occurredAt.getTime()),\n\t\ttype,\n\t\t// A copy: the record's own Date is also the user the flow answers.\n\t\toccurredAt: new Date(occurredAt.getTime()),\n\t\tuserId: user.id,\n\t\tuserType: user.type,\n\t\t...extras,\n\t});\n\ttry {\n\t\tawait listener(event);\n\t} catch (failure) {\n\t\tprocess.emitWarning(\n\t\t\t`janus: the events listener failed on ${type} ${event.id} for user ${user.id}: ${failure instanceof Error ? failure.name : typeof failure}`,\n\t\t\t{ code: 'JANUS_EVENT_FAILED' },\n\t\t);\n\t}\n}\n",
27
27
  "import type { JanusStores, StoreCapabilities } from './types';\n\n/**\n * The methods each slot must answer, in the order the port declares them.\n *\n * Kept beside the interfaces rather than derived from them: a type does not\n * exist at runtime, and this list is the net for the JavaScript caller the\n * compiler never saw.\n */\nconst REQUIRED = {\n\tusers: [\n\t\t'insertUser',\n\t\t'findUser',\n\t\t'findUserByLogin',\n\t\t'listUsers',\n\t\t'updateUser',\n\t\t'deleteUser',\n\t],\n\tsessions: [\n\t\t'insertSession',\n\t\t'findSessionByTokenHash',\n\t\t'extendSession',\n\t\t'reauthenticateSession',\n\t\t'revokeSession',\n\t\t'revokeUserSessions',\n\t\t'deleteUserSessions',\n\t],\n\ttokens: [\n\t\t'insertToken',\n\t\t'consumeToken',\n\t\t'countAttempt',\n\t\t'spendUserTokens',\n\t\t'deleteUserTokens',\n\t],\n} as const satisfies Record<keyof JanusStores, readonly string[]>;\n\n/**\n * Checks that every slot answers every method the port declares, and reports\n * the optional capabilities found.\n *\n * TypeScript already refuses a partial store and names the missing method;\n * this is the net for a JavaScript caller, and for a store assembled from\n * `any`. A bare `TypeError`, because a missing method can only come from how\n * the application was wired — no request produces one, and no handler should\n * answer one.\n *\n * `where` names the call the consumer wrote — `janus` — so the\n * sentence says which call to fix and which slot to change.\n */\nexport function assertStores(\n\tstores: unknown,\n\twhere: string,\n): StoreCapabilities {\n\tif (typeof stores !== 'object' || stores === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: store must be an object with users, sessions and tokens`,\n\t\t);\n\t}\n\n\tfor (const slot of Object.keys(REQUIRED) as (keyof typeof REQUIRED)[]) {\n\t\tconst store: unknown = (stores as Record<string, unknown>)[slot];\n\n\t\tif (typeof store !== 'object' || store === null) {\n\t\t\tthrow new TypeError(`${where}: store.${slot} is missing`);\n\t\t}\n\n\t\tfor (const method of REQUIRED[slot]) {\n\t\t\tif (typeof (store as Record<string, unknown>)[method] !== 'function') {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t`${where}: store.${slot} has no method ${method}, which the port requires`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tconst slots = stores as Record<\n\t\tkeyof typeof REQUIRED,\n\t\tRecord<string, unknown>\n\t>;\n\treturn {\n\t\tcollectExpired: optional(slots, 'sessions', 'deleteExpiredSessions', where),\n\t\tfindUsers: optional(slots, 'users', 'findUsers', where),\n\t};\n}\n\n/**\n * Whether an optional method is there. Present but not a function is a wiring\n * mistake, not an absent capability: reporting it as \"unsupported\" would send\n * the reader to the wrong fix.\n */\nfunction optional(\n\tstores: Record<keyof typeof REQUIRED, Record<string, unknown>>,\n\tslot: keyof typeof REQUIRED,\n\tmethod: string,\n\twhere: string,\n): boolean {\n\tconst found = stores[slot][method];\n\tif (found !== undefined && typeof found !== 'function') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: store.${slot}.${method} must be a function or absent`,\n\t\t);\n\t}\n\treturn found !== undefined;\n}\n",
28
28
  "import { randomBytes, timingSafeEqual } from 'node:crypto';\nimport { derivedKey, keyedHash } from '../derived-keys';\nimport type { Sealer } from '../sealing';\n\n/**\n * A device token: `d1.<key id>.<device id>.<mac>`, the last two in\n * base64url. The device id is 16 random bytes; the mac is an HMAC-SHA256 of\n * the user's id and the device id, under a key derived for this purpose from\n * `devices.keys`. **Nothing is stored**: the token is its own proof that this\n * user signed in on this device before, and a token copied onto another user\n * proves nothing.\n *\n * Every character is a cookie-value character, so it goes in a cookie as is.\n */\n\n/** What the key is derived for. Renamed, every device would be new again. */\nconst PURPOSE = 'janus/devices/v1';\n\nconst TOKEN =\n\t/^d1\\.([A-Za-z0-9_-]{1,64})\\.([A-Za-z0-9_-]{22})\\.([A-Za-z0-9_-]{43})$/;\n\nfunction macOf(key: Buffer, userId: string, deviceId: string): Buffer {\n\treturn keyedHash(key, [userId, deviceId]);\n}\n\nfunction signed(sealer: Sealer, userId: string, deviceId: string): string {\n\t// The first key is always held: resolveSealer names it from the keys.\n\tconst key = derivedKey(sealer, PURPOSE) as Buffer;\n\tconst mac = macOf(key, userId, deviceId).toString('base64url');\n\treturn `d1.${sealer.sealWith}.${deviceId}.${mac}`;\n}\n\n/** A token for a device never seen: a fresh device id, signed with the first key. */\nexport function mintDeviceToken(sealer: Sealer, userId: string): string {\n\treturn signed(sealer, userId, randomBytes(16).toString('base64url'));\n}\n\n/**\n * The token to hand back when `presented` proves this user signed in on this\n * device before — itself, or the same device signed again with the first key\n * when an older key signed it — or `null` when it proves nothing: malformed,\n * another user's, forged, or signed with a key no longer held.\n *\n * `presented` comes from a request, so nothing here throws.\n */\nexport function knownDeviceToken(\n\tsealer: Sealer,\n\tuserId: string,\n\tpresented: string,\n): string | null {\n\tconst [, keyId, deviceId, mac] = TOKEN.exec(presented) ?? [];\n\tif (keyId === undefined || deviceId === undefined || mac === undefined) {\n\t\treturn null;\n\t}\n\tconst key = derivedKey(sealer, PURPOSE, keyId);\n\tif (key === undefined) return null;\n\n\tconst expected = macOf(key, userId, deviceId);\n\tconst given = Buffer.from(mac, 'base64url');\n\tif (given.length !== expected.length || !timingSafeEqual(given, expected)) {\n\t\treturn null;\n\t}\n\treturn keyId === sealer.sealWith\n\t\t? presented\n\t\t: signed(sealer, userId, deviceId);\n}\n",
29
29
  "import { createHmac, hkdfSync } from 'node:crypto';\nimport type { Sealer } from './sealing';\n\n/**\n * Keys derived from the sealing keys, one per purpose — never the key that\n * seals a secret itself — and the keyed hashes made with them: a recovery\n * code's, and the names of the counts of attempts. Each caller keeps its own\n * purpose: renamed, what it hashed no longer matches.\n */\n\nconst derived = new WeakMap<Sealer, Map<string, Buffer>>();\n\n/**\n * The key `keyId` lends `purpose` — the first key by default — derived once\n * per key, or `undefined` when the sealer no longer holds that key.\n */\nexport function derivedKey(\n\tsealer: Sealer,\n\tpurpose: string,\n\tkeyId: string = sealer.sealWith,\n): Buffer | undefined {\n\tlet keys = derived.get(sealer);\n\tif (keys === undefined) {\n\t\tkeys = new Map();\n\t\tderived.set(sealer, keys);\n\t}\n\tconst name = `${purpose}\\u0000${keyId}`;\n\tlet key = keys.get(name);\n\tif (key === undefined) {\n\t\tconst secret = sealer.keys.get(keyId);\n\t\tif (secret === undefined) return undefined;\n\t\tkey = Buffer.from(hkdfSync('sha256', secret, Buffer.alloc(0), purpose, 32));\n\t\tkeys.set(name, key);\n\t}\n\treturn key;\n}\n\n/** HMAC-SHA256 of `parts`, joined by a NUL — which no part may hold. */\nexport function keyedHash(key: Buffer, parts: readonly string[]): Buffer {\n\treturn createHmac('sha256', key).update(parts.join('\\u0000')).digest();\n}\n",
@@ -40,9 +40,12 @@
40
40
  "/**\n * The six-digit code a challenge carries — a second factor's or an e-mailed\n * one: its attempts, counted before anything is compared, its hash, keyed by\n * the challenge, and the refusal of one that does not match.\n */\n\nimport { timingSafeEqual } from 'node:crypto';\nimport { TokenError } from '../../errors/janus-error';\nimport type { Context } from '../context';\nimport type { TokenKind, TokenRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport { refuseUnusable, unknownOneTime } from './refusals';\nimport { burnOneTime } from './spend';\n\n/**\n * How many codes one challenge takes — a second factor's or an e-mail\n * code's. A six-digit code has a million values: five attempts is a\n * one-in-200,000 chance **per challenge**, and the attempts are counted by\n * the store in one write, never read then written.\n */\nexport const CODE_ATTEMPTS = 5;\n\n/**\n * Counts one attempt at a challenge's code, before anything is compared: a\n * guess that fails for any reason has still cost one. Refuses a challenge\n * that cannot be used, and one past its last attempt — a call that raced the\n * one that spent it — unread.\n */\nexport async function countCodeAttempt(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n\twhere: string,\n\tuserType: string,\n): Promise<{ readonly token: TokenRecord; readonly attemptsLeft: number }> {\n\tconst token = await context.store.tokens.countAttempt(\n\t\thashSecret(secret),\n\t\tkind,\n\t);\n\trefuseUnusable(token, context.clock.now(), where, 'challenge');\n\tif (token.attempts > CODE_ATTEMPTS) {\n\t\tthrow codeInvalid(where, token.userId, userType, 0);\n\t}\n\treturn { token, attemptsLeft: CODE_ATTEMPTS - token.attempts };\n}\n\n/**\n * A code that does not match — a second factor's or an e-mailed one — or a\n * TOTP code already used. `attemptsLeft` only when a challenge counted it.\n */\nexport function codeInvalid(\n\twhere: string,\n\tuserId: string,\n\tuserType: string,\n\tattemptsLeft?: number,\n): TokenError {\n\treturn new TokenError(\n\t\t'CODE_INVALID',\n\t\t`${where}: the code does not match, or was already used`,\n\t\t{\n\t\t\toperation: where,\n\t\t\tuserId,\n\t\t\tuserType,\n\t\t\t...(attemptsLeft === undefined ? {} : { attemptsLeft }),\n\t\t},\n\t);\n}\n\n/**\n * The refusal for a challenge whose user is gone, or of another type — the\n * API of the wrong type compares no code. Its attempt was counted all the\n * same, before the type was known, so the last one spends the challenge, as\n * a wrong code would: past it, every call answers `TOKEN_SPENT`.\n */\nexport async function unknownChallenge(\n\tcontext: Context,\n\ttoken: TokenRecord,\n\tsecret: string,\n\twhere: string,\n): Promise<TokenError> {\n\tif (token.attempts === CODE_ATTEMPTS) {\n\t\tawait burnOneTime(context, secret, token.kind);\n\t}\n\treturn unknownOneTime(where, 'challenge');\n}\n\n/**\n * A code's hash, **keyed by its challenge**: the tokens alone — a dump, a\n * log of the table — do not reveal the code, since a million guesses at it\n * each need the challenge, which only the visitor holds.\n */\nexport const hashCode = (challenge: string, code: string): string =>\n\thashSecret(`${challenge}${code}`);\n\n/** Whether `code` is the one whose hash the token holds, compared in constant time. */\nexport function codeMatches(\n\ttoken: TokenRecord,\n\tchallenge: string,\n\tcode: string,\n): boolean {\n\tif (token.codeHash === null || !/^\\d{6}$/.test(code)) return false;\n\tconst given = Buffer.from(hashCode(challenge, code));\n\tconst held = Buffer.from(token.codeHash);\n\treturn given.length === held.length && timingSafeEqual(given, held);\n}\n",
41
41
  "/**\n * The refusals of a one-time token that could not be used: none, spent,\n * lapsed, or sent to an e-mail the user no longer has.\n */\n\nimport { TokenError } from '../../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf } from '../context';\nimport type { TokenRecord, UserRecord } from '../port/types';\n\n/**\n * `noun` is what the messages call it: `token` for a link, `challenge` for\n * what `signIn` answers. No message names the secret or its hash.\n */\nexport type OneTimeNoun = 'token' | 'challenge';\n\n/**\n * Refuses a token sent to an e-mail the user no longer has: redeeming it\n * would prove an address nobody holds any more.\n */\nexport function refuseStale(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\ttoken: TokenRecord,\n\twhere: string,\n\tnoun: 'token' | 'code',\n): void {\n\tconst email = emailOf(type, user.fields);\n\tif (\n\t\temail === null ||\n\t\tnormalizeEmail(email) !== normalizeEmail(token.address)\n\t) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_STALE',\n\t\t\t`${where}: the ${noun} was sent to an e-mail the user no longer has`,\n\t\t\t{ operation: where, userId: user.id, userType: type.name },\n\t\t);\n\t}\n}\n\n/**\n * Refuses a token that cannot be used: none, spent, or lapsed. What a store\n * answered — before a `consumeToken`, after a `countAttempt` — is read the\n * same way: `spentAt` set means somebody else used it.\n */\nexport function refuseUnusable(\n\ttoken: TokenRecord | null,\n\tnow: Date,\n\twhere: string,\n\tnoun: OneTimeNoun,\n): asserts token is TokenRecord {\n\tif (token === null) {\n\t\tthrow new TokenError('TOKEN_UNKNOWN', `${where}: no such ${noun}`, {\n\t\t\toperation: where,\n\t\t});\n\t}\n\tif (token.spentAt !== null) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_SPENT',\n\t\t\t`${where}: the ${noun} was already used`,\n\t\t\t{ operation: where },\n\t\t);\n\t}\n\tif (token.expiresAt.getTime() <= now.getTime()) {\n\t\tthrow new TokenError('TOKEN_EXPIRED', `${where}: the ${noun} has expired`, {\n\t\t\toperation: where,\n\t\t});\n\t}\n}\n\n/** The refusal for a token whose user is gone, or of another type. */\nexport const unknownOneTime = (where: string, noun: OneTimeNoun) =>\n\tnew TokenError('TOKEN_UNKNOWN', `${where}: no such ${noun}`, {\n\t\toperation: where,\n\t});\n",
42
42
  "/**\n * Spending a one-time token: once when it is redeemed, and once more when its\n * last attempt failed.\n */\n\nimport type { Context } from '../context';\nimport type { TokenKind, TokenRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport { type OneTimeNoun, refuseUnusable } from './refusals';\n\n/**\n * Spends a token, and refuses it when this call did not: the store answers it\n * **as it was before**, so exactly one call ever reads `spentAt: null`. A\n * lapsed token is spent all the same, so it cannot be retried.\n */\nexport async function spendOneTime(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n\twhere: string,\n\tnoun: OneTimeNoun,\n): Promise<TokenRecord> {\n\tconst now = context.clock.now();\n\tconst token = await context.store.tokens.consumeToken(\n\t\thashSecret(secret),\n\t\tkind,\n\t\tnow,\n\t);\n\trefuseUnusable(token, now, where, noun);\n\treturn token;\n}\n\n/**\n * Spends a token whose last attempt failed. Its answer is not read: a racing\n * call that spent it first changes nothing for this one, which is refused\n * for its code either way.\n */\nexport async function burnOneTime(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n): Promise<void> {\n\tawait context.store.tokens.consumeToken(\n\t\thashSecret(secret),\n\t\tkind,\n\t\tcontext.clock.now(),\n\t);\n}\n",
43
- "/**\n * Issuing a one-time token — a link's, or a challenge carrying a code for a\n * person to type. The secret is given back once; the store holds its hash.\n */\n\nimport { randomInt } from 'node:crypto';\nimport type { Context } from '../context';\nimport type { TokenKind } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport { hashCode } from './codes';\n\ninterface OneTimeRequest {\n\treadonly kind: TokenKind;\n\treadonly userId: string;\n\treadonly address: string;\n\treadonly ttlMs: number;\n\t/**\n\t * The secret to issue under, minted beforehand — a sign-in code's\n\t * challenge, handed to the visitor by `prepare` before the lookup. A\n\t * fresh one by default.\n\t */\n\treadonly secret?: string;\n}\n\n/**\n * Issues a one-time token: 32 random bytes, given back once, and only their\n * hash stored.\n */\nexport async function issueOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\treturn insertOneTime(context, token, null);\n}\n\n/**\n * Issues a one-time token with a six-digit code for a person to type: the\n * token is the challenge, and only the code's hash is stored, keyed by it.\n */\nexport async function issueCode(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n): Promise<{\n\treadonly secret: string;\n\treadonly expiresAt: Date;\n\treadonly code: string;\n}> {\n\tconst code = String(randomInt(1_000_000)).padStart(6, '0');\n\treturn { ...(await insertOneTime(context, token, code)), code };\n}\n\nasync function insertOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n\tcode: string | null,\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\tconst now = context.clock.now();\n\tconst secret = token.secret ?? mintSecret();\n\tconst expiresAt = new Date(now.getTime() + token.ttlMs);\n\n\tawait context.store.tokens.insertToken({\n\t\ttokenHash: hashSecret(secret),\n\t\tkind: token.kind,\n\t\tuserId: token.userId,\n\t\taddress: token.address,\n\t\tcodeHash: code === null ? null : hashCode(secret, code),\n\t\tattempts: 0,\n\t\texpiresAt,\n\t\tspentAt: null,\n\t\tcreatedAt: now,\n\t});\n\treturn { secret, expiresAt };\n}\n",
43
+ "/**\n * Issuing a one-time token — a link's, or a challenge carrying a code for a\n * person to type. The secret is given back once; the store holds its hash.\n */\n\nimport { randomInt } from 'node:crypto';\nimport type { Context } from '../context';\nimport type { TokenKind } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport { hashCode } from './codes';\n\ninterface OneTimeRequest {\n\treadonly kind: TokenKind;\n\treadonly userId: string;\n\treadonly address: string;\n\treadonly ttlMs: number;\n\t/**\n\t * The secret to issue under, minted beforehand — a sign-in code's\n\t * challenge, handed to the visitor by `prepare` before the lookup. A\n\t * fresh one by default.\n\t */\n\treadonly secret?: string;\n}\n\n/**\n * Issues a one-time token: 32 random bytes, given back once, and only their\n * hash stored.\n */\nexport async function issueOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest & {\n\t\t/**\n\t\t * What the token is bound to, stored as its `codeHash`: `changeEmail`\n\t\t * binds the address it replaces. `null` by default.\n\t\t */\n\t\treadonly boundHash?: string;\n\t},\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\treturn insertOneTime(context, token, null, token.boundHash ?? null);\n}\n\n/**\n * Issues a one-time token with a six-digit code for a person to type: the\n * token is the challenge, and only the code's hash is stored, keyed by it.\n */\nexport async function issueCode(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n): Promise<{\n\treadonly secret: string;\n\treadonly expiresAt: Date;\n\treadonly code: string;\n}> {\n\tconst code = String(randomInt(1_000_000)).padStart(6, '0');\n\treturn { ...(await insertOneTime(context, token, code, null)), code };\n}\n\nasync function insertOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n\tcode: string | null,\n\tboundHash: string | null,\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\tconst now = context.clock.now();\n\tconst secret = token.secret ?? mintSecret();\n\tconst expiresAt = new Date(now.getTime() + token.ttlMs);\n\n\tawait context.store.tokens.insertToken({\n\t\ttokenHash: hashSecret(secret),\n\t\tkind: token.kind,\n\t\tuserId: token.userId,\n\t\taddress: token.address,\n\t\tcodeHash: code === null ? boundHash : hashCode(secret, code),\n\t\tattempts: 0,\n\t\texpiresAt,\n\t\tspentAt: null,\n\t\tcreatedAt: now,\n\t});\n\treturn { secret, expiresAt };\n}\n",
44
44
  "/**\n * Attempts counted by the store in fixed windows of the clock — what bounds\n * the codes tried at an app outside a sign-in (`second-factor/app-code-attempts.ts`)\n * and the passwords tried at one login (`../sign-in-attempts.ts`).\n *\n * **No port of its own.** The count is a one-time token of kind\n * `secondFactor`, counted by `countAttempt` like a challenge's: one\n * conditional write per attempt, never read then written, so twenty guesses\n * at once are twenty distinct counts. Its secret is never given out: each\n * caller names it by a keyed hash of what the count is for, so it cannot be\n * redeemed as a challenge.\n *\n * A token once spent counts nothing more. So the count is a **chain** of\n * links, and what a spent link means is the caller's to say: `carry`, and the\n * next link carries on from the attempts it holds — a password written, which\n * spends every `secondFactor` token of the user, buys no guess; `restart`,\n * and the next link starts from zero — a sign-in that succeeded spends the\n * link it counted on, and the login's count starts again.\n */\n\nimport type { Context } from '../context';\nimport type { TokenRecord } from '../port/types';\n\n/**\n * More links than this in one window, for `carry`: more passwords written\n * than guesses, and the count is past any limit.\n */\nexport const MAX_LINKS = 32;\n\n/**\n * Probes enough for 2^30 sign-ins in one window, for `restart`: past them, the\n * store answers links nobody stored, and the count fails closed.\n */\nconst MAX_PROBES = 64;\n\n/** What {@link countInWindow} counts, and how. */\nexport interface AttemptWindow {\n\t/** How long one window lasts, in milliseconds. */\n\treadonly windowMs: number;\n\t/** What a spent link means: its attempts carried on, or a count started again. */\n\treadonly spent: 'carry' | 'restart';\n\t/** The `userId` each link is stored under. */\n\treadonly userId: string;\n\t/** A link's token hash in one window: never given out, and never a secret. */\n\treadonly linkHash: (window: number, link: number) => string;\n\t/** What to throw when a link is gone right after it was stored, or the links never end. */\n\treadonly vanished: () => Error;\n}\n\n/** One attempt, counted. */\nexport interface CountedAttempt {\n\t/** The attempts of this window, this one included. */\n\treadonly attempts: number;\n\t/** The link it was counted on — what spending restarts — or `null` past the last one. */\n\treadonly link: string | null;\n\t/** When the window ends, in milliseconds since the epoch. */\n\treadonly endsAt: number;\n}\n\ninterface Links {\n\treadonly context: Context;\n\treadonly counting: AttemptWindow;\n\treadonly window: number;\n\treadonly now: number;\n\treadonly expiresAt: number;\n}\n\n/** Counts one attempt in the current window, before anything is compared. */\nexport async function countInWindow(\n\tcontext: Context,\n\tcounting: AttemptWindow,\n): Promise<CountedAttempt> {\n\tconst now = context.clock.now().getTime();\n\tconst window = Math.floor(now / counting.windowMs);\n\t// A window of slack: a store whose clock runs ahead of this one must not\n\t// drop a link before its window ends. The window is in the hash, so a\n\t// link never counts for the next one.\n\tconst expiresAt = (window + 2) * counting.windowMs;\n\tconst links = { context, counting, window, now, expiresAt };\n\tconst counted =\n\t\tcounting.spent === 'carry'\n\t\t\t? await countCarrying(links)\n\t\t\t: await countRestarting(links);\n\treturn { ...counted, endsAt: (window + 1) * counting.windowMs };\n}\n\n/** Every link from the first, each spent one's attempts carried on. */\nasync function countCarrying(\n\tlinks: Links,\n): Promise<Omit<CountedAttempt, 'endsAt'>> {\n\tlet carried = 0;\n\tfor (let link = 0; link < MAX_LINKS; link += 1) {\n\t\tconst hash = links.counting.linkHash(links.window, link);\n\t\tconst counted = await countLink(links, hash);\n\t\tconst attempts = carried + counted.attempts;\n\t\tif (counted.spentAt === null) return { attempts, link: hash };\n\t\tcarried = attempts;\n\t}\n\treturn { attempts: Number.POSITIVE_INFINITY, link: null };\n}\n\n/**\n * The one unspent link, found by probing rather than walked to: a link is\n * stored only once the one before it is spent, so every link below it is\n * spent and none above it is stored. Probing a spent link or one never\n * stored writes nothing; probing the unspent one counts the attempt. So a\n * login signed in to a thousand times in one window costs twenty probes,\n * not a thousand — and no number of sign-ins turns the count off.\n */\nasync function countRestarting(\n\tlinks: Links,\n): Promise<Omit<CountedAttempt, 'endsAt'>> {\n\tconst tokens = links.context.store.tokens;\n\tlet spent = -1;\n\tlet absent = Number.POSITIVE_INFINITY;\n\tfor (let probes = 0; probes < MAX_PROBES; probes += 1) {\n\t\tconst next = absent === spent + 1;\n\t\tconst link = next\n\t\t\t? absent\n\t\t\t: absent === Number.POSITIVE_INFINITY\n\t\t\t\t? 2 * spent + 2\n\t\t\t\t: Math.floor((spent + absent) / 2);\n\t\tconst hash = links.counting.linkHash(links.window, link);\n\t\tconst counted = next\n\t\t\t? await insertLink(links, hash)\n\t\t\t: await tokens.countAttempt(hash, 'secondFactor');\n\t\tif (counted === null) absent = link;\n\t\telse if (counted.spentAt === null) {\n\t\t\treturn { attempts: counted.attempts, link: hash };\n\t\t} else {\n\t\t\tspent = link;\n\t\t\t// Spent by a sign-in that raced this one: look further on.\n\t\t\tif (absent <= spent) absent = Number.POSITIVE_INFINITY;\n\t\t}\n\t}\n\t// A store whose links never end: it cannot be counting what it stores.\n\tthrow links.counting.vanished();\n}\n\n/** One attempt on one link: inserted on the first, and counted. */\nasync function countLink(\n\tlinks: Links,\n\ttokenHash: string,\n): Promise<TokenRecord> {\n\tconst tokens = links.context.store.tokens;\n\tconst counted = await tokens.countAttempt(tokenHash, 'secondFactor');\n\treturn counted ?? insertLink(links, tokenHash);\n}\n\n/** A link stored — idempotent: of two first attempts at once, one inserts — and counted. */\nasync function insertLink(\n\tlinks: Links,\n\ttokenHash: string,\n): Promise<TokenRecord> {\n\tconst tokens = links.context.store.tokens;\n\tawait tokens.insertToken({\n\t\ttokenHash,\n\t\tkind: 'secondFactor',\n\t\tuserId: links.counting.userId,\n\t\taddress: '',\n\t\tcodeHash: null,\n\t\tattempts: 0,\n\t\texpiresAt: new Date(links.expiresAt),\n\t\tspentAt: null,\n\t\tcreatedAt: new Date(links.now),\n\t});\n\tconst inserted = await tokens.countAttempt(tokenHash, 'secondFactor');\n\tif (inserted !== null) return inserted;\n\tthrow links.counting.vanished();\n}\n",
45
- "/**\n * The requests that hand out something to e-mail, counted by the store per\n * window — `janus({ mail: { throttle } })`, five per ten minutes by\n * default. Past the last one, the request answers `MAIL_THROTTLED` with\n * `retryAfter`, and **issues nothing**: no token is minted, so there is\n * nothing to send — and **nothing is spent**: counted before anything is\n * issued, a refused request never reaches the step that spends the earlier\n * tokens, so the last link or code sent still works. Nothing locks past a\n * window. With the default lifetimes, the window (`'10m'`) is no longer than\n * any token's, so the last one sent — issued in the window — outlives the\n * refusal: somebody who asks for an address in a loop mails its owner real\n * links, and the last of them signs in.\n *\n * **Each flow counts on its own**, so a loop on one — a sign-in link asked\n * for again and again — never shuts another, and what one address can be\n * sent is bounded per flow:\n *\n * - **per address**, for the requests anybody can make with an e-mail —\n * `magicLink.request`, `signInCode.request`, `resetPassword.request`.\n * Counted **before anything is looked up**, the address normalised, and\n * whatever the user type: an address nobody holds is counted, and refused\n * past the limit, as a registered one is, so being throttled never tells\n * who has an account;\n * - **per user**, for the requests the application makes for a user it\n * knows — `verifyEmail.send`, and `stepUp.request` when it e-mails a code.\n * Nobody without the user's session or the application's call can spend\n * that count, so a loop on their address leaves their own requests alone;\n * and whatever addresses one user moves through, they are sent at most as\n * many.\n *\n * Counted in an attempt window (`one-time/window.ts`), in `secondFactor`\n * tokens stored under no user: the `userId` of each is a keyed hash of the\n * flow and the address or the user (`counter-key.ts`). Nothing spends a\n * link, and one that is spent carries its count on: the count never starts\n * again before its window ends.\n *\n * A store that cannot count throws `STORE_FAILED`: never a refusal, and\n * never a request let through uncounted.\n */\n\nimport { MailThrottledError, StoreFailure } from '../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from './config';\nimport type { Context } from './context';\nimport { counterKey, keyed } from './counter-key';\nimport { countInWindow } from './one-time';\nimport { hashSecret } from './secrets';\n\n/** What the key is derived for. Renamed, every count in progress would start over. */\nconst PURPOSE = 'janus/mail/requests/v1';\n\n/** The flows that hand out something to e-mail, each counted on its own. */\nexport type MailFlow =\n\t| 'magicLink'\n\t| 'signInCode'\n\t| 'resetPassword'\n\t| 'verifyEmail'\n\t| 'stepUp';\n\n/** Who a request is counted for: the address it names, or the user it is for. */\ntype Counted = { readonly address: string } | { readonly userId: string };\n\n/**\n * Counts one request of `flow` for `email` — before it is looked up — and\n * refuses past the last one, whether anybody holds the address or not.\n */\nexport async function countMailByAddress(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\temail: string,\n\twhere: string,\n): Promise<void> {\n\tawait countMail(\n\t\tcontext,\n\t\ttype,\n\t\tflow,\n\t\t{ address: normalizeEmail(email) },\n\t\twhere,\n\t);\n}\n\n/** Counts one request of `flow` for the user `userId`, and refuses past the last one. */\nexport async function countMailByUser(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\tuserId: string,\n\twhere: string,\n): Promise<void> {\n\tawait countMail(context, type, flow, { userId }, where);\n}\n\nasync function countMail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\tcounted: Counted,\n\twhere: string,\n): Promise<void> {\n\tconst throttle = context.config.mailThrottle;\n\tif (throttle === null) return;\n\tconst key = counterKey(context, PURPOSE);\n\tconst subject =\n\t\t'address' in counted\n\t\t\t? keyed(key, [flow, 'address', counted.address])\n\t\t\t: keyed(key, [flow, 'user', counted.userId]);\n\tconst { attempts, endsAt } = await countInWindow(context, {\n\t\twindowMs: throttle.windowMs,\n\t\tspent: 'carry',\n\t\tuserId: subject,\n\t\tlinkHash: (window, link) =>\n\t\t\thashSecret(keyed(key, [subject, String(window), String(link)])),\n\t\t// A store that lost what it just stored cannot count: an outage.\n\t\tvanished: () =>\n\t\t\tnew StoreFailure(\n\t\t\t\t`${where}: the store dropped the requests it had just counted`,\n\t\t\t\t{ slot: 'tokens', operation: 'countAttempt' },\n\t\t\t),\n\t});\n\tif (attempts <= throttle.attempts) return;\n\n\tconst now = context.clock.now().getTime();\n\tconst byUser = 'userId' in counted;\n\tthrow new MailThrottledError(\n\t\t`${where}: too many e-mails asked for this ${byUser ? 'user' : 'address'} — the last one sent still works; use it, or wait for the next window`,\n\t\t{\n\t\t\tuserType: type.name,\n\t\t\t...(byUser ? { userId: counted.userId } : {}),\n\t\t\tretryAfter: Math.max(1, Math.ceil((endsAt - now) / 1000)),\n\t\t},\n\t);\n}\n",
45
+ "/**\n * The requests that hand out something to e-mail, counted by the store per\n * window — `janus({ mail: { throttle } })`, five per ten minutes by\n * default. Past the last one, the request answers `MAIL_THROTTLED` with\n * `retryAfter`, and **issues nothing**: no token is minted, so there is\n * nothing to send — and **nothing is spent**: counted before anything is\n * issued, a refused request never reaches the step that spends the earlier\n * tokens, so the last link or code sent still works. Nothing locks past a\n * window. With the default lifetimes, the window (`'10m'`) is no longer than\n * any token's, so the last one sent — issued in the window — outlives the\n * refusal: somebody who asks for an address in a loop mails its owner real\n * links, and the last of them signs in.\n *\n * **Each flow counts on its own**, so a loop on one — a sign-in link asked\n * for again and again — never shuts another, and what one address can be\n * sent is bounded per flow:\n *\n * - **per address**, for the requests anybody can make with an e-mail —\n * `magicLink.request`, `signInCode.request`, `resetPassword.request`.\n * Counted **before anything is looked up**, the address normalised, and\n * whatever the user type: an address nobody holds is counted, and refused\n * past the limit, as a registered one is, so being throttled never tells\n * who has an account;\n * - **per user**, for the requests the application makes for a user it\n * knows — `verifyEmail.send`, `changeEmail.send` (and, for the address it\n * names, per address too), and `stepUp.request` when it e-mails a code.\n * Nobody without the user's session or the application's call can spend\n * that count, so a loop on their address leaves their own requests alone;\n * and whatever addresses one user moves through, they are sent at most as\n * many.\n *\n * Counted in an attempt window (`one-time/window.ts`), in `secondFactor`\n * tokens stored under no user: the `userId` of each is a keyed hash of the\n * flow and the address or the user (`counter-key.ts`). Nothing spends a\n * link, and one that is spent carries its count on: the count never starts\n * again before its window ends.\n *\n * A store that cannot count throws `STORE_FAILED`: never a refusal, and\n * never a request let through uncounted.\n */\n\nimport { MailThrottledError, StoreFailure } from '../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from './config';\nimport type { Context } from './context';\nimport { counterKey, keyed } from './counter-key';\nimport { countInWindow } from './one-time';\nimport { hashSecret } from './secrets';\n\n/** What the key is derived for. Renamed, every count in progress would start over. */\nconst PURPOSE = 'janus/mail/requests/v1';\n\n/** The flows that hand out something to e-mail, each counted on its own. */\nexport type MailFlow =\n\t| 'magicLink'\n\t| 'signInCode'\n\t| 'resetPassword'\n\t| 'verifyEmail'\n\t| 'stepUp'\n\t| 'changeEmail';\n\n/**\n * Who a request is counted for: the address it names (and, when the request\n * is a user's, the user it is made for, carried by a refusal), or the user.\n */\ntype Counted =\n\t| { readonly address: string; readonly userId?: string }\n\t| { readonly userId: string };\n\n/**\n * Counts one request of `flow` for `email` — before it is looked up — and\n * refuses past the last one, whether anybody holds the address or not.\n * `userId`, for a request made for a user (`changeEmail.send`), is only\n * carried by the refusal; the count stays the address's.\n */\nexport async function countMailByAddress(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\temail: string,\n\twhere: string,\n\tuserId?: string,\n): Promise<void> {\n\tawait countMail(\n\t\tcontext,\n\t\ttype,\n\t\tflow,\n\t\t{\n\t\t\taddress: normalizeEmail(email),\n\t\t\t...(userId === undefined ? {} : { userId }),\n\t\t},\n\t\twhere,\n\t);\n}\n\n/** Counts one request of `flow` for the user `userId`, and refuses past the last one. */\nexport async function countMailByUser(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\tuserId: string,\n\twhere: string,\n): Promise<void> {\n\tawait countMail(context, type, flow, { userId }, where);\n}\n\nasync function countMail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\tcounted: Counted,\n\twhere: string,\n): Promise<void> {\n\tconst throttle = context.config.mailThrottle;\n\tif (throttle === null) return;\n\tconst key = counterKey(context, PURPOSE);\n\tconst subject =\n\t\t'address' in counted\n\t\t\t? keyed(key, [flow, 'address', counted.address])\n\t\t\t: keyed(key, [flow, 'user', counted.userId]);\n\tconst { attempts, endsAt } = await countInWindow(context, {\n\t\twindowMs: throttle.windowMs,\n\t\tspent: 'carry',\n\t\tuserId: subject,\n\t\tlinkHash: (window, link) =>\n\t\t\thashSecret(keyed(key, [subject, String(window), String(link)])),\n\t\t// A store that lost what it just stored cannot count: an outage.\n\t\tvanished: () =>\n\t\t\tnew StoreFailure(\n\t\t\t\t`${where}: the store dropped the requests it had just counted`,\n\t\t\t\t{ slot: 'tokens', operation: 'countAttempt' },\n\t\t\t),\n\t});\n\tif (attempts <= throttle.attempts) return;\n\n\tconst now = context.clock.now().getTime();\n\tthrow new MailThrottledError(\n\t\t`${where}: too many e-mails asked for this ${'address' in counted ? 'address' : 'user'} — the last one sent still works; use it, or wait for the next window`,\n\t\t{\n\t\t\tuserType: type.name,\n\t\t\t...(counted.userId === undefined ? {} : { userId: counted.userId }),\n\t\t\tretryAfter: Math.max(1, Math.ceil((endsAt - now) / 1000)),\n\t\t},\n\t);\n}\n",
46
+ "import { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf, loginsOf, validateFields } from '../context';\nimport type { JsonObject, UserRecord } from '../port/types';\nimport type { Input } from './flow-types';\n\nconst normalized = (email: string | null) =>\n\temail === null ? null : normalizeEmail(email);\n\n/**\n * Whether the e-mail differs between two sets of fields, compared normalised:\n * `Ada@Example.com` for `ada@example.com` is no change. The one test behind\n * both the new e-mail's verification reset and `user.emailChanged`.\n */\nexport function emailChanged(\n\ttype: ResolvedType,\n\tbefore: JsonObject,\n\tafter: JsonObject,\n): boolean {\n\treturn normalized(emailOf(type, before)) !== normalized(emailOf(type, after));\n}\n\n/**\n * What `update` writes: the patch merged over the stored fields, the whole\n * result validated, and the logins derived again from it.\n */\nexport async function fieldsPatch(\n\ttype: ResolvedType,\n\trecord: UserRecord,\n\tpatch: Input,\n\twhere: string,\n) {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...record.fields, ...patch },\n\t\twhere,\n\t);\n\n\treturn {\n\t\tfields,\n\t\tlogins: loginsOf(type, fields, where),\n\t\tschemaVersion: type.schemaVersion,\n\t\t// A new e-mail is an unproven one.\n\t\t...(emailChanged(type, record.fields, fields)\n\t\t\t? { emailVerifiedAt: null }\n\t\t\t: {}),\n\t};\n}\n",
47
+ "/**\n * The token a change of e-mail sends and redeems: issued for the NEW\n * address, bound to the address it replaces, and refused when the user's\n * e-mail is no longer that one.\n *\n * `address` holds the new address; `codeHash` holds the former one, keyed by\n * the token's secret (`TokenRecord.codeHash`), so the port needs no field and\n * a dump of the store reveals neither.\n */\n\nimport { TokenError, UserInvalidError } from '../../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport { type Context, emailOf, findRecord, validateFields } from '../context';\nimport { issueOneTime, spendOneTime, unknownOneTime } from '../one-time';\nimport type { TokenRecord, UserRecord } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport type { IssuedToken } from '../types';\n\n/** What binds a token to the address it replaces. */\nexport const formerHash = (secret: string, former: string | null): string =>\n\thashSecret(\n\t\t`janus/changeEmail/former\\0${secret}\\0${normalizeEmail(former ?? '')}`,\n\t);\n\n/**\n * Validates `email` as the user's new address — by the type's own schema, the\n * other fields as they are — and gives it back as the schema left it. An\n * address equal to the current one once normalised is `USER_INVALID`: moving\n * to where the user already is means nothing (`verifyEmail` proves it).\n */\nexport async function newAddressOf(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\temail: string,\n\twhere: string,\n): Promise<string> {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...user.fields, [type.email]: email },\n\t\twhere,\n\t);\n\tconst address = emailOf(type, fields);\n\tif (address === null) {\n\t\tthrow new TypeError(\n\t\t\t`janus: email \"${type.email}\" did not name a string in validated ${type.name} fields — the schema must keep the e-mail field a required string`,\n\t\t);\n\t}\n\tif (\n\t\tnormalizeEmail(address) === normalizeEmail(emailOf(type, user.fields) ?? '')\n\t) {\n\t\tthrow new UserInvalidError(\n\t\t\t`${where}: the new e-mail is the user's current one — a change moves to another address; verifyEmail proves the current one`,\n\t\t\t{\n\t\t\t\tissues: [\n\t\t\t\t\t{ path: [type.email], message: 'is the current e-mail of the user' },\n\t\t\t\t],\n\t\t\t\tuserType: type.name,\n\t\t\t},\n\t\t);\n\t}\n\treturn address;\n}\n\n/**\n * Issues the token for the validated new `address`, bound to the address the\n * user has now, and spends the user's earlier ones.\n */\nexport async function issueChangeEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\taddress: string,\n): Promise<IssuedToken> {\n\tconst secret = mintSecret();\n\tconst { expiresAt } = await issueOneTime(context, {\n\t\tkind: 'changeEmail',\n\t\tuserId: user.id,\n\t\taddress,\n\t\tttlMs: context.config.tokenTtlMs.changeEmail,\n\t\tsecret,\n\t\tboundHash: formerHash(secret, emailOf(type, user.fields)),\n\t});\n\t// One live link per user: issued first, spent after, as for a reset, so\n\t// requests that race leave at most one live — never one each.\n\tawait context.store.tokens.spendUserTokens(\n\t\tuser.id,\n\t\t'changeEmail',\n\t\tcontext.clock.now(),\n\t\thashSecret(secret),\n\t);\n\treturn { token: secret, email: address, expiresAt };\n}\n\n/**\n * Refuses a token asked from an address the user has left: the link would\n * move somebody who is no longer where the request came from.\n */\nexport function refuseMoved(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\ttoken: TokenRecord,\n\tsecret: string,\n\twhere: string,\n): void {\n\tif (token.codeHash !== formerHash(secret, emailOf(type, user.fields))) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_STALE',\n\t\t\t`${where}: the token was asked from an e-mail the user no longer has`,\n\t\t\t{ operation: where, userId: user.id, userType: type.name },\n\t\t);\n\t}\n}\n\n/**\n * Spends a change's token and says why it cannot be used, when it cannot. A\n * user gone since, or of another type, is as good as no token; a user who\n * moved since the link was asked is stale.\n */\nexport async function redeemChangeEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tsecret: string,\n\twhere: string,\n): Promise<{ token: TokenRecord; user: UserRecord }> {\n\tconst token = await spendOneTime(\n\t\tcontext,\n\t\tsecret,\n\t\t'changeEmail',\n\t\twhere,\n\t\t'token',\n\t);\n\tconst user = await findRecord(context, token.userId, type.name);\n\tif (user === null) throw unknownOneTime(where, 'token');\n\n\trefuseMoved(type, user, token, secret, where);\n\treturn { token, user };\n}\n",
48
+ "/**\n * Changing a user's e-mail: send a token to the NEW address, then redeem it\n * to move the user there — verified, since the link reached its inbox.\n */\n\nimport { UserInactiveError } from '../../errors/janus-error';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\temailOf,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { countMailByAddress, countMailByUser } from '../mail-requests';\nimport type { UserRecord } from '../port/types';\nimport type { ChangeEmailApi } from '../types';\nimport { emailChanged, fieldsPatch } from '../users/fields-patch';\nimport {\n\tissueChangeEmailToken,\n\tnewAddressOf,\n\tredeemChangeEmailToken,\n\trefuseMoved,\n} from './change-email-token';\n\nconst inactive = (type: ResolvedType, user: UserRecord, where: string) =>\n\tnew UserInactiveError(`${where}: the user is inactive`, {\n\t\tuserId: user.id,\n\t\tuserType: type.name,\n\t});\n\n/** `changeEmail` of one user type: `send` to the new address, then `confirm`. */\nexport function changeEmailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): ChangeEmailApi<AnyUser>['changeEmail'] {\n\treturn {\n\t\tasync send(user, email) {\n\t\t\tconst where = at('changeEmail.send');\n\t\t\tconst record = await getRecord(context, idOf(user), type.name, where);\n\t\t\tif (!record.active) throw inactive(type, record, where);\n\t\t\t// Validated first — a USER_INVALID spends nothing — then the user is\n\t\t\t// counted, then the address, all before anything is issued. The user\n\t\t\t// first: an account past its own count spends no address's, so one\n\t\t\t// account can exhaust at most one address per window. An address\n\t\t\t// other people exhausted costs the asking user one of their own.\n\t\t\tconst address = await newAddressOf(type, record, email, where);\n\t\t\tawait countMailByUser(context, type, 'changeEmail', record.id, where);\n\t\t\tawait countMailByAddress(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\t'changeEmail',\n\t\t\t\taddress,\n\t\t\t\twhere,\n\t\t\t\trecord.id,\n\t\t\t);\n\t\t\treturn issueChangeEmailToken(context, type, record, address);\n\t\t},\n\n\t\tasync confirm(secret) {\n\t\t\treturn confirmChange(context, type, secret, at('changeEmail.confirm'));\n\t\t},\n\t};\n}\n\n/** Redeems a change's token: the write, then the events it earned. */\nasync function confirmChange(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tsecret: string,\n\twhere: string,\n): Promise<AnyUser> {\n\tconst { token, user } = await redeemChangeEmailToken(\n\t\tcontext,\n\t\ttype,\n\t\tsecret,\n\t\twhere,\n\t);\n\tif (!user.active) throw inactive(type, user, where);\n\n\t// The record the write replaced, read in its callback, as `update` does.\n\tconst seen: { replaced: UserRecord | null } = { replaced: null };\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser.id,\n\t\ttype,\n\t\tundefined,\n\t\twhere,\n\t\tasync (record, now) => {\n\t\t\t// Checked again on the record written, as for verifyEmail.\n\t\t\tif (!record.active) throw inactive(type, record, where);\n\t\t\trefuseMoved(type, record, token, secret, where);\n\t\t\tseen.replaced = record;\n\t\t\tconst patch = await fieldsPatch(\n\t\t\t\ttype,\n\t\t\t\trecord,\n\t\t\t\t{ [type.email]: token.address },\n\t\t\t\twhere,\n\t\t\t);\n\t\t\t// Verified by the link that reached the new address. `send` refuses\n\t\t\t// the current address and an `update` spends the link, so the address\n\t\t\t// always moves here; the test is a guard, not a path.\n\t\t\tconst proved =\n\t\t\t\trecord.emailVerifiedAt === null ||\n\t\t\t\temailChanged(type, record.fields, patch.fields);\n\t\t\treturn proved ? { ...patch, emailVerifiedAt: now } : patch;\n\t\t},\n\t);\n\tconst { replaced } = seen;\n\tconst moved =\n\t\treplaced !== null && emailChanged(type, replaced.fields, written.fields);\n\tif (replaced !== null && moved) {\n\t\tawait emit(context, 'user.emailChanged', written, written.updatedAt, {\n\t\t\tformerEmail: emailOf(type, replaced.fields),\n\t\t});\n\t}\n\tif (moved || replaced?.emailVerifiedAt === null) {\n\t\tawait emit(context, 'user.emailVerified', written, written.updatedAt);\n\t}\n\treturn toUser(written);\n}\n",
46
49
  "import type { Id } from '../ids/id';\nimport type { ResolvedType } from './config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tpasswordMatches,\n} from './context';\nimport { emit } from './events';\nimport { burnOneTime } from './one-time';\nimport type { UserRecord } from './port/types';\nimport type { SignInResult } from './types';\n\n/**\n * What writing a password ends besides. A reset, a change and a set each call\n * it **after** the write, and a failure here throws — it is never ignored:\n *\n * - The user's reset links still unspent. A link answers a request to\n * replace the password; once it is replaced, an older link would replace\n * it again, without knowing the new one.\n * - Every second-factor challenge still open, so a sign-in started with the\n * old password cannot be finished — the other half of\n * {@link heldByPassword}, which reads **after** it issued.\n *\n * Both spends are attempted even when one fails, so a store failing one kind\n * still spends the other; the first failure is then thrown.\n *\n * After the write, not before: a link issued while the password is written\n * is spent too, where one issued between an earlier spend and the write\n * would survive. So an outage here leaves the password written and the\n * older links live, and the caller is told, with `STORE_FAILED`; the next\n * `resetPassword.request` spends them. Sign-in codes and step-ups are left\n * alone: the password proves neither, and a step-up belongs to a session,\n * which a reset revokes.\n */\nexport async function endWhatThePasswordOpened(\n\tcontext: Context,\n\tuserId: Id,\n): Promise<void> {\n\tconst now = context.clock.now();\n\tconst spent = await Promise.allSettled(\n\t\t(['resetPassword', 'secondFactor'] as const).map((kind) =>\n\t\t\tcontext.store.tokens.spendUserTokens(userId, kind, now),\n\t\t),\n\t);\n\tconst failed = spent.find(\n\t\t(result): result is PromiseRejectedResult => result.status === 'rejected',\n\t);\n\tif (failed !== undefined) throw failed.reason;\n}\n\n/**\n * What a change and a set do once the password is written: end what the\n * old one opened, then send `user.passwordChanged` — from a `finally`, so an\n * outage ending them still reports the write, which a retry would not make\n * again. A reset sends `user.passwordReset` instead, from its own flow.\n */\nexport async function passwordChanged(\n\tcontext: Context,\n\twritten: UserRecord,\n): Promise<void> {\n\ttry {\n\t\tawait endWhatThePasswordOpened(context, written.id);\n\t} finally {\n\t\tawait emit(context, 'user.passwordChanged', written, written.updatedAt);\n\t}\n}\n\n/**\n * Whether the password a sign-in verified is still the user's, once the\n * sign-in answered. A password written meanwhile ends the sign-in: its\n * session is revoked, or its challenge spent, and `false` is answered.\n *\n * A password writer writes, then spends the challenges waiting; a sign-in\n * issues, then reads here. Whichever order they interleave in, one of the two\n * sees the other. A hash that changed with the same password — a concurrent\n * sign-in rehashing it — is not a change: the password is compared again.\n */\nexport async function heldByPassword(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tverified: UserRecord,\n\tpassword: string,\n\tresult: SignInResult<AnyUser>,\n\twhere: string,\n): Promise<boolean> {\n\tconst now = await findRecord(context, verified.id, type.name);\n\tconst kept =\n\t\tnow !== null &&\n\t\tnow.password !== null &&\n\t\t(now.password.hash === verified.password?.hash ||\n\t\t\t(await passwordMatches(context, now, password, where)));\n\tif (kept) return true;\n\n\tif (result.status === 'signedIn') {\n\t\tawait context.store.sessions.revokeSession(\n\t\t\tresult.session.id,\n\t\t\tcontext.clock.now(),\n\t\t);\n\t} else {\n\t\tawait burnOneTime(context, result.challenge, 'secondFactor');\n\t}\n\treturn false;\n}\n",
47
50
  "/**\n * A request for an e-mail made in two steps — `prepare` counts it, `send`\n * issues — so the mail throttle answers in the visitor's own request, while\n * the lookup and the writes, whose time depends on whether the address has\n * an account, run off it.\n *\n * `prepare` looks nobody up: it validates, counts the address\n * (`mail-requests.ts`) and refuses past the limit, the same store calls for\n * any address. `send` is what `request` does after the count, **once**: the\n * count `prepare` made pays for one issue, so a second call is a `TypeError`\n * — a bug of the caller's, never a value from a request — and nothing a\n * caller can pass skips the count.\n */\n\n/**\n * `send` for a prepared request: `issue` on the first call, a `TypeError`\n * on every other — marked spent before `issue` starts, so two calls at once\n * cannot both issue, and spent even when `issue` fails: prepare again then,\n * which counts again.\n */\nexport function sendOnce<T>(\n\twhere: string,\n\tissue: () => Promise<T>,\n): () => Promise<T> {\n\tlet sent = false;\n\treturn async () => {\n\t\tif (sent) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}(…).send: already called — a prepared request sends once; call ${where} again for another`,\n\t\t\t);\n\t\t}\n\t\tsent = true;\n\t\treturn issue();\n\t};\n}\n",
48
51
  "/**\n * The token an e-mail flow sends and redeems: issued for the user's current\n * e-mail, and refused on redemption when that e-mail is not the one it was\n * sent to any more.\n */\n\nimport { NotFoundError } from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport { type Context, emailOf, findRecord } from '../context';\nimport {\n\tissueOneTime,\n\trefuseStale,\n\tspendOneTime,\n\tunknownOneTime,\n} from '../one-time';\nimport type { TokenKind, TokenRecord, UserRecord } from '../port/types';\nimport type { IssuedToken } from '../types';\n\n/**\n * Spends a token and says why it cannot be used, when it cannot. A user\n * gone since, or of another type, is as good as no token; a token sent to\n * an e-mail the user no longer has is stale.\n */\nexport async function redeemEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tkind: TokenKind,\n\tsecret: string,\n\twhere: string,\n): Promise<{ token: TokenRecord; user: UserRecord }> {\n\tconst token = await spendOneTime(context, secret, kind, where, 'token');\n\tconst user = await findRecord(context, token.userId, type.name);\n\tif (user === null) throw unknownOneTime(where, 'token');\n\n\trefuseStale(type, user, token, where, 'token');\n\treturn { token, user };\n}\n\n/** Issues a one-time token for the user's current e-mail. */\nexport async function issueEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tkind: 'verifyEmail' | 'resetPassword',\n\tuser: UserRecord,\n\twhere: string,\n): Promise<IssuedToken> {\n\tconst email = emailOf(type, user.fields);\n\tif (email === null) {\n\t\tthrow new NotFoundError(`${where}: the user has no e-mail`, {\n\t\t\tuserId: user.id,\n\t\t\tuserType: type.name,\n\t\t\toperation: where,\n\t\t});\n\t}\n\n\tconst { secret, expiresAt } = await issueOneTime(context, {\n\t\tkind,\n\t\tuserId: user.id,\n\t\taddress: email,\n\t\tttlMs: context.config.tokenTtlMs[kind],\n\t});\n\treturn { token: secret, email, expiresAt };\n}\n",
@@ -52,7 +55,7 @@
52
55
  "/**\n * The first proof of an e-mail by a sign-in code or a sign-in link: the\n * address reached an inbox no one had proved before, so whatever was set on\n * the account before that proof is not the inbox holder's to keep.\n *\n * Anybody can sign up with somebody else's e-mail and a password of their\n * own — and enrol a second factor on their own phone. Without this, the real\n * holder signing in by e-mail later would verify the address and leave that\n * password, that factor and their sessions working: locked out by a factor\n * they never set, or signed in beside someone who still holds the account.\n * So the write that proves the address also drops the password and the\n * second factor with its recovery codes, and every session is revoked before\n * the new one opens: the same ending as `resetPassword.confirm`, which\n * proves the address too, plus the factor it keeps.\n */\n\nimport type { Id } from '../ids/id';\nimport type { ResolvedType } from './config';\nimport { type Context, writeUser } from './context';\nimport { emit } from './events';\nimport { endWhatThePasswordOpened } from './password-written';\nimport type { UserRecord } from './port/types';\nimport { isActive } from './second-factor/factor';\n\n/**\n * Proves `user`'s e-mail, never proved before, under the version read — an\n * address changed since is not the one proved: a `VERSION_CONFLICT` then.\n * Drops the password and the second factor — active or waiting, and its\n * recovery codes with it — in the same write, and revokes every session and\n * spends what the password opened — reset links and second-factor\n * challenges — **both before the write and after it**.\n *\n * Before, so an outage there leaves the e-mail unproved and the owner's next\n * code or link runs this again; after, so a sign-in landing in between is\n * ended too. An outage after the write is the one that leaves a session live.\n *\n * `user.emailVerified` is sent, then `user.passwordChanged` when a password\n * was dropped and `user.secondFactorDisabled` when an active factor was —\n * the rule of `secondFactor.disable` — from a `finally`, so an outage ending\n * the sessions still reports the write, which a retry would not make again.\n */\nexport async function proveFirstEmail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\twhere: string,\n): Promise<UserRecord> {\n\tawait endWhatTheSquatterOpened(context, user.id);\n\tlet dropped = false;\n\tlet disabled = false;\n\tconst proved = await writeUser(\n\t\tcontext,\n\t\tuser.id,\n\t\ttype,\n\t\t{ ifVersion: user.version },\n\t\twhere,\n\t\t(record, now) => {\n\t\t\tdropped = record.password !== null;\n\t\t\tdisabled = isActive(record.secondFactor);\n\t\t\treturn {\n\t\t\t\temailVerifiedAt: now,\n\t\t\t\t...(dropped ? { password: null } : {}),\n\t\t\t\t...(record.secondFactor === null ? {} : { secondFactor: null }),\n\t\t\t};\n\t\t},\n\t);\n\ttry {\n\t\t// Whoever signed up with this address and not its inbox is signed\n\t\t// out, and a sign-in they left waiting on its second factor cannot\n\t\t// be finished — before the new session opens.\n\t\tawait endWhatTheSquatterOpened(context, proved.id);\n\t} finally {\n\t\tawait emit(context, 'user.emailVerified', proved, proved.updatedAt);\n\t\tif (dropped) {\n\t\t\tawait emit(context, 'user.passwordChanged', proved, proved.updatedAt);\n\t\t}\n\t\tif (disabled) {\n\t\t\tawait emit(\n\t\t\t\tcontext,\n\t\t\t\t'user.secondFactorDisabled',\n\t\t\t\tproved,\n\t\t\t\tproved.updatedAt,\n\t\t\t);\n\t\t}\n\t}\n\treturn proved;\n}\n\n/** Every session of the user revoked, and what their password opened spent. */\nasync function endWhatTheSquatterOpened(\n\tcontext: Context,\n\tuserId: Id,\n): Promise<void> {\n\tawait context.store.sessions.revokeUserSessions(userId, context.clock.now());\n\tawait endWhatThePasswordOpened(context, userId);\n}\n",
53
56
  "/**\n * Proving an e-mail on the application's own proof of the inbox — an\n * invitation token it issued to the address — with the ending a first\n * sign-in by link or code gives an e-mail never proved (`../first-proof`).\n */\n\nimport { UserInactiveError } from '../../errors/janus-error';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tgetRecord,\n\trefId,\n\ttoUser,\n} from '../context';\nimport { proveFirstEmail } from '../first-proof';\nimport type { VerifyEmailApi } from '../types';\n\n/**\n * `verifyEmail.proveFirst` for one user type: the user read by id —\n * `NOT_FOUND` for nobody, as `signInProven` — refused when inactive, then,\n * when the e-mail was never proved, `proveFirstEmail` exactly as\n * `magicLink.confirm` and `signInCode.confirm` run it, decided the same way:\n * on the record read, `emailVerifiedAt === null`. An e-mail already proved\n * is answered as it is, with nothing written.\n *\n * No throttle is counted and no count restarted, no e-mail sent and no\n * token issued; the only tokens spent are the ones `proveFirstEmail`\n * spends, what the password opened.\n */\nexport function proveFirstFlow(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): VerifyEmailApi<AnyUser>['verifyEmail']['proveFirst'] {\n\treturn async (user) => {\n\t\tconst where = at('verifyEmail.proveFirst');\n\t\tconst record = await getRecord(context, refId(user), type.name, where);\n\t\tif (!record.active) {\n\t\t\tthrow new UserInactiveError(`${where}: the user is inactive`, {\n\t\t\t\tuserId: record.id,\n\t\t\t\tuserType: type.name,\n\t\t\t});\n\t\t}\n\t\tif (record.emailVerifiedAt !== null) {\n\t\t\treturn { user: toUser(record), proved: false };\n\t\t}\n\t\tconst proved = await proveFirstEmail(context, type, record, where);\n\t\treturn { user: toUser(proved), proved: true };\n\t};\n}\n",
54
57
  "/**\n * Verifying an e-mail: send a token to it, then redeem the token to mark the\n * address verified — or prove it on the application's own proof\n * (`prove-first.ts`).\n */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { countMailByUser } from '../mail-requests';\nimport { refuseStale } from '../one-time';\nimport type { VerifyEmailApi } from '../types';\nimport { issueEmailToken, redeemEmailToken } from './email-token';\nimport { proveFirstFlow } from './prove-first';\n\n/**\n * `verifyEmail` of one user type: `send` a token to its e-mail, then\n * `confirm` it; or `proveFirst`, on the application's own proof.\n */\nexport function verifyEmailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): VerifyEmailApi<AnyUser>['verifyEmail'] {\n\treturn {\n\t\tasync send(user) {\n\t\t\tconst where = at('verifyEmail.send');\n\t\t\tconst record = await getRecord(context, idOf(user), type.name, where);\n\t\t\t// Counted per user: the application asks for a user it knows.\n\t\t\tawait countMailByUser(context, type, 'verifyEmail', record.id, where);\n\t\t\treturn issueEmailToken(context, type, 'verifyEmail', record, where);\n\t\t},\n\n\t\tasync confirm(secret) {\n\t\t\tconst where = at('verifyEmail.confirm');\n\t\t\tconst { token, user } = await redeemEmailToken(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\t'verifyEmail',\n\t\t\t\tsecret,\n\t\t\t\twhere,\n\t\t\t);\n\t\t\tlet newlyVerified = false;\n\t\t\tconst written = await writeUser(\n\t\t\t\tcontext,\n\t\t\t\tuser.id,\n\t\t\t\ttype,\n\t\t\t\tundefined,\n\t\t\t\twhere,\n\t\t\t\t(record, now) => {\n\t\t\t\t\t// Checked again on the record written: an e-mail changed\n\t\t\t\t\t// since the read above is not the one the link proved.\n\t\t\t\t\trefuseStale(type, record, token, where, 'token');\n\t\t\t\t\tnewlyVerified = record.emailVerifiedAt === null;\n\t\t\t\t\treturn { emailVerifiedAt: now };\n\t\t\t\t},\n\t\t\t);\n\t\t\tif (newlyVerified) {\n\t\t\t\tawait emit(context, 'user.emailVerified', written, written.updatedAt);\n\t\t\t}\n\t\t\treturn toUser(written);\n\t\t},\n\n\t\tproveFirst: proveFirstFlow(context, type, at),\n\t};\n}\n",
55
- "/** The e-mail flows of one user type, assembled from the files beside this one. */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport type { AnyUser, Context } from '../context';\nimport type { ResetPasswordApi, VerifyEmailApi } from '../types';\nimport { resetPasswordFlows } from './reset-password';\nimport { verifyEmailFlows } from './verify-email';\n\n/**\n * The e-mail flows: send a one-time token by e-mail, then confirm it —\n * verifying the address, or resetting the password. Both confirm the same\n * way: spend the token, read the user, and check the address again on the\n * very record the write replaces.\n */\nexport function emailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): VerifyEmailApi<AnyUser> & ResetPasswordApi<AnyUser> {\n\treturn {\n\t\tverifyEmail: verifyEmailFlows(context, type, at),\n\t\tresetPassword: resetPasswordFlows(context, type, at),\n\t};\n}\n",
58
+ "/** The e-mail flows of one user type, assembled from the files beside this one. */\n\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport type { AnyUser, Context } from '../context';\nimport type {\n\tChangeEmailApi,\n\tResetPasswordApi,\n\tVerifyEmailApi,\n} from '../types';\nimport { changeEmailFlows } from './change-email';\nimport { resetPasswordFlows } from './reset-password';\nimport { verifyEmailFlows } from './verify-email';\n\n/**\n * The e-mail flows: send a one-time token by e-mail, then confirm it —\n * verifying the address, resetting the password, or moving to a new address.\n * All three confirm the same way: spend the token, read the user, and check\n * the address again on the very record the write replaces.\n */\nexport function emailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): VerifyEmailApi<AnyUser> &\n\tResetPasswordApi<AnyUser> &\n\tChangeEmailApi<AnyUser> {\n\treturn {\n\t\tverifyEmail: verifyEmailFlows(context, type, at),\n\t\tresetPassword: resetPasswordFlows(context, type, at),\n\t\tchangeEmail: changeEmailFlows(context, type, at),\n\t};\n}\n",
56
59
  "/**\n * What the two sign-ins by e-mail share — a code typed back\n * (`sign-in-code.ts`) and a link followed (`magic-link.ts`): who may be sent\n * one, keeping only the last one live, and how a redeemed one ends — the\n * e-mail proved, then the same session or second-factor challenge a\n * password opens.\n */\n\nimport { UserInactiveError } from '../errors/janus-error';\nimport type { ResolvedType } from './config';\nimport { type AnyUser, type Context, holderOfEmail } from './context';\nimport { type DeviceHint, reportNewDevice } from './devices';\nimport { proveFirstEmail } from './first-proof';\nimport { refuseStale } from './one-time';\nimport type { TokenKind, TokenRecord, UserRecord } from './port/types';\nimport { hashSecret } from './secrets';\nimport type { SignInResult } from './types';\n\n/** What a sign-in answers once the user proved who they are: `secondFactor.finish`. */\nexport type Finish = (\n\trecord: UserRecord,\n\twhere: string,\n\tdevice: DeviceHint,\n) => Promise<SignInResult<AnyUser>>;\n\n/**\n * The user of this type holding `email`, when they may be sent a sign-in:\n * `null` for nobody, and for an inactive user — the same answer, so the\n * caller cannot tell them apart either.\n */\nexport async function signInHolder(\n\tcontext: Context,\n\ttype: ResolvedType,\n\temail: string,\n): Promise<UserRecord | null> {\n\tconst record = await holderOfEmail(context, type, email);\n\treturn record === null || !record.active ? null : record;\n}\n\n/**\n * Spends every other unspent token of this kind the user holds, sparing the\n * one just issued. Issued first, spent after, so requests that race leave\n * at most one live — maybe none, and the visitor asks again — never one each.\n */\nexport async function keepOnlyLatest(\n\tcontext: Context,\n\tuserId: string,\n\tkind: TokenKind,\n\tsecret: string,\n): Promise<void> {\n\tawait context.store.tokens.spendUserTokens(\n\t\tuserId,\n\t\tkind,\n\t\tcontext.clock.now(),\n\t\thashSecret(secret),\n\t);\n}\n\n/**\n * Ends a sign-in by e-mail whose token is spent: refuses an e-mail changed\n * since it was sent and an inactive user, proves the e-mail — it reached the\n * inbox — and finishes as a password would, reporting a new device.\n *\n * **An e-mail proved for the first time drops the password and the second\n * factor, and revokes every session** before the new one opens\n * (`./first-proof`): whoever signed up with the address without holding its\n * inbox keeps nothing, and the owner is asked for no factor they never set.\n * An e-mail already proved changes nothing. The proof is written under the\n * version read, so an address changed since is not the one proved: a\n * `VERSION_CONFLICT` then, with the token spent.\n */\nexport async function finishEmailSignIn(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tfinish: Finish,\n\tsignIn: {\n\t\treadonly user: UserRecord;\n\t\treadonly token: TokenRecord;\n\t\treadonly where: string;\n\t\treadonly noun: 'token' | 'code';\n\t\treadonly device: DeviceHint;\n\t},\n): Promise<SignInResult<AnyUser>> {\n\tconst { user, token, where, noun, device } = signIn;\n\trefuseStale(type, user, token, where, noun);\n\tif (!user.active) {\n\t\tthrow new UserInactiveError(`${where}: the user is inactive`, {\n\t\t\tuserId: user.id,\n\t\t\tuserType: type.name,\n\t\t});\n\t}\n\n\tconst proved =\n\t\tuser.emailVerifiedAt !== null\n\t\t\t? user\n\t\t\t: await proveFirstEmail(context, type, user, where);\n\tconst result = await finish(proved, where, device);\n\tawait reportNewDevice(context, result);\n\treturn result;\n}\n",
57
60
  "import type { At } from './at';\nimport type { ResolvedType } from './config';\nimport { type AnyUser, type Context, toUser } from './context';\nimport { type DeviceHint, deviceHint } from './devices';\nimport { redeemEmailToken } from './email-flows/email-token';\nimport {\n\ttype Finish,\n\tfinishEmailSignIn,\n\tkeepOnlyLatest,\n\tsignInHolder,\n} from './email-sign-in';\nimport { countMailByAddress } from './mail-requests';\nimport { issueOneTime } from './one-time';\nimport { sendOnce } from './prepared';\nimport type {\n\tIssuedToken,\n\tMagicLinkApi,\n\tPreparedRequest,\n\tSignInResult,\n} from './types';\n\ntype IssuedLink = IssuedToken & { readonly user: AnyUser };\n\n/**\n * Signing in with a link sent to the user's e-mail: no password, and the\n * link proves the address — a sign-in code with nothing to type.\n *\n * The token is 32 random bytes, so there is nothing to guess and no attempt\n * to count: redeeming it is one conditional write, and of two redemptions\n * at once exactly one signs in. **At most one link is live per user**, as\n * for a sign-in code: `request` spends every other once it issued its own.\n * A token of its own kind, `magicLink`, so a sign-in code's challenge — which\n * the visitor holds — is never a link, nor a link a challenge.\n *\n * Whoever opens the link signs in, in the browser that opened it: the\n * application confirms it from a `POST`, never from the `GET` of the link,\n * which a mail scanner follows too.\n *\n * `request` is `prepare`, then `send`: counted, then looked up and issued\n * (`prepared.ts`).\n */\nexport function magicLinkFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n\tfinish: Finish,\n): MagicLinkApi<AnyUser, SignInResult<AnyUser>>['magicLink'] {\n\treturn {\n\t\tasync request(email) {\n\t\t\tconst where = at('magicLink.request');\n\t\t\treturn (await prepareLink(context, type, String(email), where)).send();\n\t\t},\n\n\t\tasync prepare(email) {\n\t\t\tconst where = at('magicLink.prepare');\n\t\t\treturn prepareLink(context, type, String(email), where);\n\t\t},\n\n\t\tasync confirm(token, options) {\n\t\t\tconst where = at('magicLink.confirm');\n\t\t\tconst device = deviceHint(context, options, where);\n\t\t\treturn confirmLink(context, type, finish, String(token), where, device);\n\t\t},\n\t};\n}\n\n/**\n * Counts a link asked for `email` — before it is looked up: past the limit,\n * nobody and somebody are refused alike — and answers the `send` that\n * issues it, once.\n */\nasync function prepareLink(\n\tcontext: Context,\n\ttype: ResolvedType,\n\temail: string,\n\twhere: string,\n): Promise<PreparedRequest<IssuedLink>> {\n\tawait countMailByAddress(context, type, 'magicLink', email, where);\n\treturn Object.freeze({\n\t\tsend: sendOnce(where, () => issueLink(context, type, email)),\n\t});\n}\n\n/** Issues a link's token for the holder of `email`, and spends every other they had. */\nasync function issueLink(\n\tcontext: Context,\n\ttype: ResolvedType,\n\temail: string,\n): Promise<IssuedLink | null> {\n\t// Nobody, and an inactive user, get the same answer: no link.\n\tconst record = await signInHolder(context, type, email);\n\tif (record === null) return null;\n\n\tconst address = String(record.fields[type.email]);\n\tconst { secret, expiresAt } = await issueOneTime(context, {\n\t\tkind: 'magicLink',\n\t\tuserId: record.id,\n\t\taddress,\n\t\tttlMs: context.config.tokenTtlMs.magicLink,\n\t});\n\t// One live link per user: the ones sent before stop working.\n\tawait keepOnlyLatest(context, record.id, 'magicLink', secret);\n\treturn { token: secret, email: address, expiresAt, user: toUser(record) };\n}\n\n/** Spends a link's token, proves the e-mail, and finishes the sign-in. */\nasync function confirmLink(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tfinish: Finish,\n\tsecret: string,\n\twhere: string,\n\tdevice: DeviceHint,\n): Promise<SignInResult<AnyUser>> {\n\t// Spent first, whatever follows: a link is redeemed once, and a refused\n\t// one — stale, inactive, another type's — cannot be tried again.\n\tconst { token, user } = await redeemEmailToken(\n\t\tcontext,\n\t\ttype,\n\t\t'magicLink',\n\t\tsecret,\n\t\twhere,\n\t);\n\n\treturn finishEmailSignIn(context, type, finish, {\n\t\tuser,\n\t\ttoken,\n\t\twhere,\n\t\tnoun: 'token',\n\t\tdevice,\n\t});\n}\n",
58
61
  "/**\n * Signing in a user the application proved by its own means — an\n * invitation token it issued, a channel of its own: no credential checked\n * here, so nothing to count, nothing to send and nothing to spend.\n */\n\nimport { UserInactiveError } from '../errors/janus-error';\nimport type { At } from './at';\nimport type { ResolvedType } from './config';\nimport { type AnyUser, type Context, getRecord, refId } from './context';\nimport { deviceHint, reportNewDevice } from './devices';\nimport type { Finish } from './email-sign-in';\nimport type { ProvenSignInApi, SignInResult } from './types';\n\n/**\n * `signInProven` for one user type: the user read by id — `NOT_FOUND` for\n * nobody, as `get` — refused when inactive, then finished as every sign-in\n * is, by `secondFactor.finish`: a session, or a challenge for an active\n * factor.\n *\n * No throttle is counted and no count restarted, no token issued or spent,\n * no e-mail proved: the proof is the application's, and links and codes\n * already sent keep working.\n */\nexport function provenSignInFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n\tfinish: Finish,\n): ProvenSignInApi<AnyUser, SignInResult<AnyUser>> {\n\treturn {\n\t\tasync signInProven(user, options) {\n\t\t\tconst where = at('signInProven');\n\t\t\tconst device = deviceHint(context, options, where);\n\t\t\tconst record = await getRecord(context, refId(user), type.name, where);\n\t\t\tif (!record.active) {\n\t\t\t\tthrow new UserInactiveError(`${where}: the user is inactive`, {\n\t\t\t\t\tuserId: record.id,\n\t\t\t\t\tuserType: type.name,\n\t\t\t\t});\n\t\t\t}\n\t\t\tconst result = await finish(record, where, device);\n\t\t\tawait reportNewDevice(context, result);\n\t\t\treturn result;\n\t\t},\n\t};\n}\n",
@@ -83,14 +86,13 @@
83
86
  "import type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tcheckPassword,\n\tpasswordRule,\n\trequireHasher,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { deviceHint } from '../devices';\nimport { passwordChanged } from '../password-written';\nimport { openSession } from '../sessions';\nimport type { PasswordApi, SignInResult } from '../types';\nimport { byLogin } from './by-login';\nimport { changePassword } from './change-password';\nimport type { Finish, Input } from './flow-types';\nimport { insert } from './insert';\nimport { signIn } from './sign-in';\n\n/**\n * The password flows of one user type: signing up and in, finding a user by\n * the login they sign in with, and setting or changing their password.\n */\nexport function passwordFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n\tfinish: Finish,\n): PasswordApi<AnyUser, Input, string, SignInResult<AnyUser>> {\n\treturn {\n\t\tasync signUp(input, options) {\n\t\t\tconst where = at('signUp');\n\t\t\tconst device = deviceHint(context, options, where);\n\t\t\tpasswordRule(type, where);\n\t\t\tif ((input as Input)?.['password'] === undefined) {\n\t\t\t\tcheckPassword(type, undefined as unknown as string, where);\n\t\t\t}\n\t\t\tconst record = await insert(context, type, input as Input, where);\n\t\t\treturn openSession(context, type, record, device, true);\n\t\t},\n\n\t\tasync signIn(input, options) {\n\t\t\tconst where = at('signIn');\n\t\t\tconst device = deviceHint(context, options, where);\n\t\t\treturn signIn(context, type, finish, input as Input, { where, device });\n\t\t},\n\n\t\tasync findByLogin(login) {\n\t\t\tconst rule = passwordRule(type, at('findByLogin'));\n\t\t\tconst record = await byLogin(context, type, rule.normalize(login));\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync setPassword(user, password, options) {\n\t\t\tconst where = at('setPassword');\n\t\t\tpasswordRule(type, where);\n\t\t\tcheckPassword(type, password, where);\n\t\t\tconst hash = await requireHasher(context, where).hash(password);\n\n\t\t\tconst written = await writeUser(\n\t\t\t\tcontext,\n\t\t\t\tuser,\n\t\t\t\ttype,\n\t\t\t\toptions,\n\t\t\t\twhere,\n\t\t\t\t(_, now) => ({ password: { hash, updatedAt: now } }),\n\t\t\t);\n\t\t\tawait passwordChanged(context, written);\n\t\t\treturn toUser(written);\n\t\t},\n\n\t\tasync changePassword(user, change, options) {\n\t\t\tconst where = at('changePassword');\n\t\t\treturn toUser(\n\t\t\t\tawait changePassword(context, type, user, change, options, where),\n\t\t\t);\n\t\t},\n\t};\n}\n",
84
87
  "import { isId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport { type Context, idOf } from '../context';\nimport { emit } from '../events';\nimport type { UserRef } from '../types';\n\n/**\n * Deletes the user, then every session, token and tuple naming them. `true`\n * when this call deleted them; a replay finds nobody, answers `false`, and\n * still deletes what was left.\n */\nexport async function deleteUser(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n): Promise<boolean> {\n\tconst { store, clock } = context;\n\tconst id = idOf(user);\n\tif (!isId(id)) return false;\n\n\t// Read first, so a staff API never deletes a patient: another type's\n\t// id is answered as nobody, and nothing of theirs is touched.\n\tconst record = await store.users.findUser(id);\n\tif (record !== null && record.type !== type.name) return false;\n\n\t// The user first: from then on nobody can sign in as them, and what\n\t// is left — sessions, tokens — is refused for a user who is gone. An\n\t// outage between the steps leaves only that inert remainder, and a\n\t// replay, finding no user, still deletes it.\n\tconst deletedAt = clock.now();\n\tconst deleted = record !== null && (await store.users.deleteUser(id));\n\ttry {\n\t\tawait store.sessions.deleteUserSessions(id);\n\t\tawait store.tokens.deleteUserTokens(id);\n\t\t// Last, and on a replay too: the tuples naming them.\n\t\tawait context.relations?.deleteEntity({ type: type.name, id });\n\t} finally {\n\t\t// Once, when this call deleted them — even when an outage\n\t\t// interrupts the steps above: a replay deletes nobody, so it\n\t\t// could not send it.\n\t\tif (deleted) {\n\t\t\tawait emit(context, 'user.deleted', { id, type: type.name }, deletedAt);\n\t\t}\n\t}\n\treturn deleted;\n}\n",
85
88
  "/**\n * `findMany`: several users of one type by id, in one query when the users\n * store implements the optional `findUsers`, and with `findUser`, a few ids at\n * a time, when it does not.\n */\n\nimport { StoreFailure } from '../../errors/janus-error';\nimport { isId } from '../../ids/id';\nimport type { Context } from '../context';\nimport type { UserRecord } from '../port/types';\n\n/**\n * The most ids one `findUsers` call is given. A longer list is read in\n * several calls, one after another, so no query grows with the caller's list.\n */\nexport const FIND_MANY_BATCH = 100;\n\n/**\n * How many `findUser` calls run at once when the store has no `findUsers`:\n * enough to keep a 100-row list quick, few enough to leave the connection\n * pool to the rest of the application.\n */\nexport const FIND_MANY_CONCURRENCY = 10;\n\n/**\n * The users of this type holding these ids, **in the order the ids were\n * given**, each once — at its first occurrence. An id that is malformed, held\n * by nobody or held by a user of another type is left out: an absence is a\n * shorter list, never a rejection. A failure throws.\n *\n * An empty list — or one with no well-formed id — answers `[]` without\n * reaching the store.\n */\nexport async function findManyRecords(\n\tcontext: Context,\n\tids: readonly string[],\n\ttype: string,\n\twhere: string,\n): Promise<UserRecord[]> {\n\tif (!Array.isArray(ids)) {\n\t\tthrow new TypeError(`${where}: ids must be an array of user ids`);\n\t}\n\n\tconst wanted = [\n\t\t...new Set(ids.filter((id) => typeof id === 'string' && isId(id))),\n\t];\n\tconst found = new Map<string, UserRecord>();\n\n\tfor (let start = 0; start < wanted.length; start += FIND_MANY_BATCH) {\n\t\tconst batch = wanted.slice(start, start + FIND_MANY_BATCH);\n\t\tfor (const record of await readBatch(context, batch)) {\n\t\t\tif (record.type === type) found.set(record.id, record);\n\t\t}\n\t}\n\n\t// Read back through the ids asked for, so a record the store answered\n\t// for an id nobody asked about never reaches the caller.\n\treturn wanted.flatMap((id) => {\n\t\tconst record = found.get(id);\n\t\treturn record === undefined ? [] : [record];\n\t});\n}\n\n/** One batch: one `findUsers` call, or bounded `findUser` calls. */\nasync function readBatch(\n\tcontext: Context,\n\tids: readonly string[],\n): Promise<readonly UserRecord[]> {\n\tconst { users } = context.store;\n\n\tif (context.capabilities.findUsers && users.findUsers !== undefined) {\n\t\tconst answer: unknown = await users.findUsers(ids);\n\t\tif (!Array.isArray(answer)) {\n\t\t\tthrow new StoreFailure(\n\t\t\t\t'users.findUsers answered no list: an absence is a shorter list, so this store forgot to answer',\n\t\t\t\t{ slot: 'users', operation: 'findUsers' },\n\t\t\t);\n\t\t}\n\t\treturn answer as readonly UserRecord[];\n\t}\n\n\tconst records: UserRecord[] = [];\n\tfor (let start = 0; start < ids.length; start += FIND_MANY_CONCURRENCY) {\n\t\tconst answers = await Promise.all(\n\t\t\tids\n\t\t\t\t.slice(start, start + FIND_MANY_CONCURRENCY)\n\t\t\t\t.map((id) => users.findUser(id)),\n\t\t);\n\t\tfor (const record of answers) if (record !== null) records.push(record);\n\t}\n\treturn records;\n}\n",
86
- "import { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf, loginsOf, validateFields } from '../context';\nimport type { JsonObject, UserRecord } from '../port/types';\nimport type { Input } from './flow-types';\n\nconst normalized = (email: string | null) =>\n\temail === null ? null : normalizeEmail(email);\n\n/**\n * Whether the e-mail differs between two sets of fields, compared normalised:\n * `Ada@Example.com` for `ada@example.com` is no change. The one test behind\n * both the new e-mail's verification reset and `user.emailChanged`.\n */\nexport function emailChanged(\n\ttype: ResolvedType,\n\tbefore: JsonObject,\n\tafter: JsonObject,\n): boolean {\n\treturn normalized(emailOf(type, before)) !== normalized(emailOf(type, after));\n}\n\n/**\n * What `update` writes: the patch merged over the stored fields, the whole\n * result validated, and the logins derived again from it.\n */\nexport async function fieldsPatch(\n\ttype: ResolvedType,\n\trecord: UserRecord,\n\tpatch: Input,\n\twhere: string,\n) {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...record.fields, ...patch },\n\t\twhere,\n\t);\n\n\treturn {\n\t\tfields,\n\t\tlogins: loginsOf(type, fields, where),\n\t\tschemaVersion: type.schemaVersion,\n\t\t// A new e-mail is an unproven one.\n\t\t...(emailChanged(type, record.fields, fields)\n\t\t\t? { emailVerifiedAt: null }\n\t\t\t: {}),\n\t};\n}\n",
87
- "import type { ResolvedType } from '../config';\nimport { type Context, emailOf, writeUser } from '../context';\nimport { emit } from '../events';\nimport type { UserRecord } from '../port/types';\nimport type { UserRef, WriteOptions } from '../types';\nimport { emailChanged, fieldsPatch } from './fields-patch';\nimport type { Input } from './flow-types';\n\n/**\n * `update`: the patch written over the stored fields, then — when it changed\n * the e-mail — `user.emailChanged`, carrying the address the write replaced,\n * which nothing keeps once it landed.\n */\nexport async function update(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n\tpatch: Input,\n\toptions: WriteOptions | undefined,\n\twhere: string,\n): Promise<UserRecord> {\n\t// The record the write replaced, read in its callback — which writeUser\n\t// always calls, once, before it writes under that record's version — so\n\t// the e-mail compared is the one this write changed.\n\tconst seen: { replaced: UserRecord | null } = { replaced: null };\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser,\n\t\ttype,\n\t\toptions,\n\t\twhere,\n\t\t(record) => {\n\t\t\tseen.replaced = record;\n\t\t\treturn fieldsPatch(type, record, patch, where);\n\t\t},\n\t);\n\tconst { replaced } = seen;\n\tif (\n\t\treplaced !== null &&\n\t\temailChanged(type, replaced.fields, written.fields)\n\t) {\n\t\tawait emit(context, 'user.emailChanged', written, written.updatedAt, {\n\t\t\tformerEmail: emailOf(type, replaced.fields),\n\t\t});\n\t}\n\treturn written;\n}\n",
89
+ "import type { ResolvedType } from '../config';\nimport { type Context, emailOf, writeUser } from '../context';\nimport { emit } from '../events';\nimport type { UserRecord } from '../port/types';\nimport type { UserRef, WriteOptions } from '../types';\nimport { emailChanged, fieldsPatch } from './fields-patch';\nimport type { Input } from './flow-types';\n\n/**\n * `update`: the patch written over the stored fields, then — when it changed\n * the e-mail — `user.emailChanged`, carrying the address the write replaced,\n * which nothing keeps once it landed, and the user's pending `changeEmail`\n * links spent.\n */\nexport async function update(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n\tpatch: Input,\n\toptions: WriteOptions | undefined,\n\twhere: string,\n): Promise<UserRecord> {\n\t// The record the write replaced, read in its callback — which writeUser\n\t// always calls, once, before it writes under that record's version — so\n\t// the e-mail compared is the one this write changed.\n\tconst seen: { replaced: UserRecord | null } = { replaced: null };\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser,\n\t\ttype,\n\t\toptions,\n\t\twhere,\n\t\t(record) => {\n\t\t\tseen.replaced = record;\n\t\t\treturn fieldsPatch(type, record, patch, where);\n\t\t},\n\t);\n\tconst { replaced } = seen;\n\tif (\n\t\treplaced !== null &&\n\t\temailChanged(type, replaced.fields, written.fields)\n\t) {\n\t\t// A pending changeEmail link was asked from the address just left:\n\t\t// spent, so a move back to that address cannot revive it. The event is\n\t\t// sent from a `finally`, so an outage there still reports the write.\n\t\ttry {\n\t\t\tawait context.store.tokens.spendUserTokens(\n\t\t\t\twritten.id,\n\t\t\t\t'changeEmail',\n\t\t\t\tcontext.clock.now(),\n\t\t\t);\n\t\t} finally {\n\t\t\tawait emit(context, 'user.emailChanged', written, written.updatedAt, {\n\t\t\t\tformerEmail: emailOf(type, replaced.fields),\n\t\t\t});\n\t\t}\n\t}\n\treturn written;\n}\n",
88
90
  "import { isId } from '../../ids/id';\nimport { invalidCursor, pageLimit } from '../../pagination/cursor-page';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tgetRecord,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport type { UserTypeApi } from '../types';\nimport { deleteUser } from './delete';\nimport { findManyRecords } from './find-many';\nimport type { Input } from './flow-types';\nimport { insert } from './insert';\nimport { update } from './update';\n\n/**\n * The flows every user type has, whatever its configuration: creating,\n * reading, listing, updating, deactivating and deleting its users.\n */\nexport function recordFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): UserTypeApi<AnyUser, Input> {\n\tconst { store } = context;\n\n\treturn {\n\t\tasync create(input) {\n\t\t\treturn toUser(await insert(context, type, input as Input, at('create')));\n\t\t},\n\n\t\tasync find(id) {\n\t\t\tconst record = await findRecord(context, id, type.name);\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync findMany(ids) {\n\t\t\tconst records = await findManyRecords(\n\t\t\t\tcontext,\n\t\t\t\tids,\n\t\t\t\ttype.name,\n\t\t\t\tat('findMany'),\n\t\t\t);\n\t\t\treturn records.map(toUser);\n\t\t},\n\n\t\tasync get(id) {\n\t\t\treturn toUser(await getRecord(context, id, type.name, at('get')));\n\t\t},\n\n\t\tasync list(page) {\n\t\t\tconst after = page?.after ?? null;\n\t\t\t// Never a silent first page: a caller paging a list would loop for\n\t\t\t// ever, and the loop would look like a slow query.\n\t\t\tif (after !== null && !isId(after)) {\n\t\t\t\tthrow invalidCursor(at('list'), after);\n\t\t\t}\n\n\t\t\tconst answer = await store.users.listUsers({\n\t\t\t\ttype: type.name,\n\t\t\t\tafter,\n\t\t\t\tlimit: pageLimit(page?.limit, at('list')),\n\t\t\t});\n\t\t\treturn { items: answer.items.map(toUser), nextCursor: answer.nextCursor };\n\t\t},\n\n\t\tasync update(user, patch, options) {\n\t\t\treturn toUser(\n\t\t\t\tawait update(\n\t\t\t\t\tcontext,\n\t\t\t\t\ttype,\n\t\t\t\t\tuser,\n\t\t\t\t\tpatch as Input,\n\t\t\t\t\toptions,\n\t\t\t\t\tat('update'),\n\t\t\t\t),\n\t\t\t);\n\t\t},\n\n\t\tasync setActive(user, active, options) {\n\t\t\treturn toUser(\n\t\t\t\tawait writeUser(context, user, type, options, at('setActive'), () => ({\n\t\t\t\t\tactive: active === true,\n\t\t\t\t})),\n\t\t\t);\n\t\t},\n\n\t\tasync delete(user) {\n\t\t\treturn deleteUser(context, type, user);\n\t\t},\n\t};\n}\n",
89
91
  "import type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport type { Context } from '../context';\nimport { emailFlows } from '../email-flows';\nimport { magicLinkFlows } from '../magic-link';\nimport { provenSignInFlows } from '../proven-sign-in';\nimport { secondFactorFlows } from '../second-factor/flows';\nimport { signInCodeFlows } from '../sign-in-code';\nimport { stepUpFlows } from '../step-up/flows';\nimport type { AnyTypeApi } from './any-type-api';\nimport { findByEmailFlows } from './find-by-email';\nimport { passwordFlows } from './password-flows';\nimport { recordFlows } from './record-flows';\n\n/**\n * Everything one user type answers, gathered from its flows: its records,\n * its password, its sign-in on the application's proof, its second factor,\n * its sign-in code and link, its step-up, its e-mails and the lookup by e-mail.\n */\nexport function typeApi(context: Context, type: ResolvedType): AnyTypeApi {\n\tconst at: At = (operation) =>\n\t\tcontext.config.single ? operation : `${type.name}.${operation}`;\n\tconst secondFactor = secondFactorFlows(context, type, at);\n\tconst signInCode = signInCodeFlows(context, type, at, secondFactor.finish);\n\n\treturn {\n\t\t...recordFlows(context, type, at),\n\t\t...passwordFlows(context, type, at, secondFactor.finish),\n\t\t...provenSignInFlows(context, type, at, secondFactor.finish),\n\n\t\tsecondFactor: secondFactor.api,\n\t\tsignInCode,\n\t\tmagicLink: magicLinkFlows(context, type, at, secondFactor.finish),\n\t\tstepUp: stepUpFlows(context, type, at),\n\n\t\t...findByEmailFlows(context, type),\n\t\t...emailFlows(context, type, at),\n\t};\n}\n",
90
92
  "import { guardRelations } from '../stores/guard';\nimport { systemClock } from '../time/clock';\nimport { type JanusConfig, resolveConfig } from './config';\nimport { warnThrottleWindow } from './config/warn-throttle-window';\nimport { createContext } from './context';\nimport { resolveEvents } from './events';\nimport { guardStores } from './outage';\nimport { assertStores } from './port/assert-stores';\nimport { sharedApi } from './sessions';\nimport type { Checked, Janus } from './types';\nimport { typeApi } from './users';\n\n/**\n * Wires the identities side over the stores the application opened. **Synchronous,\n * and does no I/O**: it connects to nothing.\n *\n * ```ts\n * // One user type\n * const auth = janus({\n * user: z.object({ email: z.email(), name: z.string() }),\n * password: { login: 'email' },\n * store: createMemoryStores(),\n * hasher: scryptHasher(),\n * });\n * const { user, token } = await auth.signUp({ email, name, password });\n *\n * // Several\n * const auth = janus({\n * users: {\n * patient: { schema: Patient, password: { login: 'email' } },\n * staff: { schema: Staff, password: { login: 'email' }, session: { lifespan: '8h' } },\n * },\n * store, hasher,\n * });\n * await auth.staff.signIn({ email, password });\n * const current = await auth.authenticate(request, { type: 'staff' });\n * ```\n *\n * The types refuse first, on the offending key: a login or an e-mail that\n * names no required string field, a schema declaring a field `janus` sets, a\n * user type named like a method. What follows at run time is the net for\n * JavaScript callers, each a bare `TypeError` because only wiring produces one:\n * a store slot missing or incomplete; a password type with no hasher — there\n * is no silent fallback; two hashers claiming the same prefix, which would make\n * verification depend on the order they were listed in.\n */\nexport function janus<const C extends JanusConfig>(\n\tconfig: C & Checked<C>,\n): Janus<C> {\n\tconst where = 'janus';\n\tconst resolved = resolveConfig(config, where);\n\twarnThrottleWindow(resolved, where);\n\tconst capabilities = assertStores(config.store, where);\n\n\tconst hasher = config.hasher ?? null;\n\tconst verifiers = [\n\t\t...(hasher === null ? [] : [hasher]),\n\t\t...(config.verifiers ?? []),\n\t];\n\tconst prefixes = new Set<string>();\n\tfor (const verifier of verifiers) {\n\t\tif (typeof verifier?.prefix !== 'string' || verifier.prefix === '') {\n\t\t\tthrow new TypeError(`${where}: every hasher needs a non-empty prefix`);\n\t\t}\n\t\tif (prefixes.has(verifier.prefix)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: two hashers claim the prefix \"${verifier.prefix}\" — which one verifies would depend on their order`,\n\t\t\t);\n\t\t}\n\t\tprefixes.add(verifier.prefix);\n\t}\n\n\tconst relations = config.relations ?? null;\n\tif (\n\t\trelations !== null &&\n\t\ttypeof (relations as { deleteEntity?: unknown }).deleteEntity !== 'function'\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: relations must be a relation store — relations.deleteEntity is missing`,\n\t\t);\n\t}\n\n\tconst context = createContext(\n\t\tresolved,\n\t\tguardStores(config.store),\n\t\trelations === null ? null : guardRelations(relations),\n\t\tcapabilities,\n\t\tconfig.clock ?? systemClock,\n\t\thasher,\n\t\tverifiers,\n\t\tresolveEvents(config.events, where),\n\t);\n\n\tconst shared = sharedApi(context);\n\tconst types = Object.fromEntries(\n\t\t[...resolved.types.values()].map((type) => [\n\t\t\ttype.name,\n\t\t\ttypeApi(context, type),\n\t\t]),\n\t);\n\n\t// The one cast at the boundary: every field was validated against its\n\t// type's schema before any of these answers was built.\n\tconst surface = resolved.single\n\t\t? { ...shared, ...types['user'] }\n\t\t: { ...shared, ...types };\n\treturn surface as unknown as Janus<C>;\n}\n",
91
93
  "/**\n * `assertFresh`: whether a session proved who it is recently enough for a\n * sensitive action — signed in, or confirmed by a step-up, less than\n * `maxAge` ago.\n */\n\nimport { StepUpRequiredError } from '../../errors/janus-error';\nimport { type Clock, systemClock } from '../../time/clock';\nimport { type Duration, parseDuration } from '../../time/duration';\nimport type { Session } from '../types';\n\n/**\n * Refuses a session whose credentials were last presented `maxAge` ago or\n * more — at its sign-in, or since by `stepUp.confirm` — with\n * `STEP_UP_REQUIRED` (403): ask for a step-up, then run the action again. One\n * field of the session `authenticate` already answered, so no store is read.\n *\n * ```ts\n * const current = await auth.authenticate(request);\n * if (current === null) return new Response(null, { status: 401 });\n * assertFresh(current.session, '10m'); // STEP_UP_REQUIRED past ten minutes\n * ```\n *\n * Pass the `clock` given to `janus()` when it is not the system's. A\n * `maxAge` that is not a duration is a `TypeError`: it is written in the\n * code, never read from a request.\n */\nexport function assertFresh(\n\tsession: Pick<Session, 'authenticatedAt' | 'userId'>,\n\tmaxAge: Duration,\n\tclock: Clock = systemClock,\n): void {\n\tconst maxAgeMs = parseDuration(maxAge, 'assertFresh: maxAge');\n\tconst age = clock.now().getTime() - session.authenticatedAt.getTime();\n\tif (age >= maxAgeMs) {\n\t\tthrow new StepUpRequiredError(\n\t\t\t'assertFresh: the session proved who it is longer ago than maxAge — confirm with a step-up',\n\t\t\t{ userId: session.userId },\n\t\t);\n\t}\n}\n"
92
94
  ],
93
- "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,SAAS,YAAY,CAAC,SAEV;AAAA,EAClB,MAAM,OAAO,SAAS,QAAQ;AAAA,EAC9B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM,OAAO,IAAI;AAAA,IACtD,MAAM,IAAI,UACT,uFACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,SACF,KAAI,CAAC,OAAO;AAAA,MACjB,MAAM,OAAO,YAAY,EAAE;AAAA,MAC3B,MAAM,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,GAAG,CAAC;AAAA,MAChD,OAAO,GAAG,mBAAmB,gBAAgB,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ;AAAA;AAAA,SAExF,OAAM,CAAC,OAAO,MAAM;AAAA,MACzB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAIpC,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UACT,0EACD;AAAA,MACD;AAAA,MACA,SAAS,IAAI,GAAG,GAAG,MAAM,OAAO;AAAA,MAQhC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;AAAA,MAC1C,MAAM,SAAS,MAAM,OACpB,OACA,OAAO,KAAK,MAAM,QAAQ,GAC1B,OAAO,EAAE,GACT,OAAO,CAAC,GACR,OAAO,CAAC,GACR,SAAS,MACV;AAAA,MACA,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAAA,IAExC,WAAW,CAAC,MAAM;AAAA,MACjB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAEpC,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAC5B,SAAS,IAAI,GAAG,KAAK;AAAA,MACrB,OAAO,OAAO,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA;AAAA,EAEnD;AAAA;AAGD,IAAM,gBAAgB;AACtB,IAAM,cACL;AAED,SAAS,MAAM,CACd,OACA,MACA,IACA,GACA,GACA,SAAS,IACS;AAAA,EAGlB,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,IAIvC,OACC,OACA,MACA,QACA,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,MAAM,IAAI,EAAE,GACjE,CAAC,OAAO,QAAS,QAAQ,OAAO,KAAK,IAAI,QAAQ,GAAG,CACrD;AAAA,GACA;AAAA;AAWK,SAAS,SAAS,GAAmB;AAAA,EAG3C,MAAM,WACL,OAAO,QAAQ,cAAc,YAAY,IAAI;AAAA,EAE9C,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,IAAI,UACT,iGACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ;AAAA,IAC9C,QAAQ,CAAC,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAAA,IACpD,aAAa,CAAC,SAAS,CAAC,KAAK,WAAW,mBAAmB;AAAA,EAC5D;AAAA;AASD,IAAM,WAAW;AAAA,EAChB,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,UAAU;AACX;AACA,IAAM,sBAAsB;;ACjIrB,IAAM,cAAqB;AAAA,EACjC,KAAK,MAAM,IAAI;AAChB;AASO,SAAS,UAAU,CAAC,QAAuB,GAGhD;AAAA,EACD,IAAI,KAAK,iBAAiB,OAAO,MAAM,QAAQ,IAAI;AAAA,EAEnD,OAAO;AAAA,IACN,KAAK,MAAM,IAAI,KAAK,EAAE;AAAA,IACtB,SAAS,CAAC,OAAO;AAAA,MAChB,MAAM;AAAA;AAAA,IAEP,KAAK,CAAC,OAAO;AAAA,MACZ,KAAK,cAAc,OAAO,GAAG,QAAQ,IAAI;AAAA;AAAA,EAE3C;AAAA;;;ACzBD,IAAM,cAAc;AAAA,EACnB,MAAM,CAAC,UAAkB;AAAA,EACzB,WAAW,CAAC,UAAkB,MAAM,YAAY;AAAA,EAChD,eAAe,CAAC,UAAkB,MAAM,YAAY,EAAE,KAAK;AAAA,EAC3D,mBAAmB,CAAC,UACnB,MAAM,UAAU,MAAM,EAAE,YAAY,EAAE,KAAK;AAC7C;AAGO,IAAM,iBAAiB,YAAY;AAGnC,SAAS,UAAU,CACzB,MACA,OAC4B;AAAA,EAC5B,IAAI,OAAO,SAAS;AAAA,IAAY,OAAO;AAAA,EACvC,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,IAAI,GAAG;AAAA,IACjE,OAAO,YAAY;AAAA,EACpB;AAAA,EAEA,MAAM,IAAI,UACT,GAAG,uFACJ;AAAA;;ACpCM,IAAM,cAAc;AAMpB,IAAM,kBAAkB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGO,IAAM,iBAAiB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;;ACzBA,IAAM,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACJ;AAEA,IAAM,UAAU;AAcT,SAAS,aAAa,CAAC,OAAiB,OAAuB;AAAA,EACrE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,MAC1C,MAAM,IAAI,UACT,GAAG,sEACJ;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAEhC,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,IAAI,UACT,GAAG,WAAW,qGACf;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,OAAO,MAAM,EAAE;AAAA,EAC9B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,MAAM;AAAA,EAE1B,IAAI,MAAM,GAAG;AAAA,IACZ,MAAM,IAAI,UAAU,GAAG,sCAAsC;AAAA,EAC9D;AAAA,EAEA,OAAO;AAAA;;;AClDD,IAAM,OAAO;AAGb,SAAS,SAAS,CAAC,OAAgB,OAAuB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA,IACnD,MAAM,IAAI,UACT,GAAG,kEACJ;AAAA,EACD;AAAA,EACA,IAAK,gBAAsC,SAAS,KAAK,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,GAAG,WAAW,qCAAqC;AAAA,EACxE;AAAA,EACA,OAAO;AAAA;;;ACdR,IAAM,cAAc;AAEb,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,MAAM,OAAO,OAAO,QAAQ;AAAA,EAC5B,IAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,kHACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,OAAO,YAAY;AAAA,EACpC,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,IAAI,aAAa,UAAU,CAAC,QAAQ;AAAA,IACnC,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,OAAO,UAAU;AAAA,IACzB,MAAM,OAAO,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AAAA;;;AChCD,0DAA2C;AA6B3C,IAAM,YAAY;AAElB,IAAM,SAAS;AACf,IAAM,MAAM;AAGL,SAAS,aAAa,CAAC,MAAe,OAAuB;AAAA,EACnE,IAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAAA,IAC9C,MAAM,IAAI,UACT,GAAG,mEACJ;AAAA,EACD;AAAA,EACA,MAAM,UAAU,IAAI;AAAA,EACpB,WAAW,SAAS,MAA+B;AAAA,IAClD,MAAM,KAAK,OAAO;AAAA,IAClB,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,KAAK,EAAE,GAAG;AAAA,MAC/C,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,IACD;AAAA,IACA,IAAI,QAAQ,IAAI,EAAE,GAAG;AAAA,MACpB,MAAM,IAAI,UAAU,GAAG,gCAAgC,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,MAAM,MAAM;AAAA,IAClB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GAAG,GAAG;AAAA,MAC9C,MAAM,IAAI,UACT,GAAG,mBAAmB,uEACvB;AAAA,IACD;AAAA,IACA,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,EAAE,UAAW,KAAK,GAAkB,IAAI,MAAM,QAAQ;AAAA;AAIvD,SAAS,IAAI,CAAC,QAAgB,OAAe,SAAyB;AAAA,EAC5E,MAAM,MAAM,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,EAC3C,MAAM,KAAK,aAAY,EAAE;AAAA,EACzB,MAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AAAA,EACpD,OAAO,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,EAClC,MAAM,SAAS,OAAO,OAAO;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM;AAAA,IAC3B,OAAO,MAAM;AAAA,IACb,OAAO,WAAW;AAAA,EACnB,CAAC;AAAA,EACD,OAAO,MAAM,OAAO,YAAY,GAAG,SAAS,WAAW,KAAK,OAAO,SAAS,WAAW;AAAA;AAUjF,SAAS,MAAM,CACrB,QACA,QACA,SACA,OACqD;AAAA,EACrD,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,OAAO,SAAS,OAAO,IAAI,QAAQ;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK,QAAQ,IAAI,WAAW;AAAA,EAEjD,IACC,MAAM,WAAW,KACjB,YAAY,QACZ,UAAU,aACV,OAAO,aACP,MAAM,UAAU,WACf;AAAA,IACD,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,EACtE;AAAA,EACA,MAAM,MAAM,OAAO,KAAK,IAAI,KAAK;AAAA,EACjC,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,IAAI,UACT,GAAG,6CAA6C,gGACjD;AAAA,EACD;AAAA,EACA,IAAI;AAAA,IACH,MAAM,WAAW,iBAChB,eACA,KACA,OAAO,KAAK,IAAI,WAAW,GAC3B,EAAE,eAAe,UAAU,CAC5B;AAAA,IACA,SAAS,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,IACpC,SAAS,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;AAAA,IAC5D,MAAM,QAAQ,OAAO,OAAO;AAAA,MAC3B,SAAS,OAAO,MAAM,SAAS,GAAG,MAAM,SAAS,SAAS,CAAC;AAAA,MAC3D,SAAS,MAAM;AAAA,IAChB,CAAC,EAAE,SAAS,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,MAAM;AAAA,IACrB,OAAO,OAAO;AAAA,IACf,MAAM,IAAI,UACT,GAAG,iDAAiD,4FACpD,EAAE,MAAM,CACT;AAAA;AAAA;;;ACzHK,SAAS,cAAc,CAC7B,QACA,OAC4B;AAAA,EAC5B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EAEjC,OAAO,EAAE,QAAQ,cAAc,QAAQ,MAAM,GAAG,qBAAqB,EAAE;AAAA;;;ACLjE,SAAS,mBAAmB,CAClC,QACA,OACiC;AAAA,EACjC,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,KAAK,GAAG;AAAA,EACd,IAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,KAAK,MAAM,IAAI;AAAA,IACtE,MAAM,IAAI,UACT,GAAG,0FACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,QAAQ,cAAc,OAAO,MAAM,GAAG,SAAS;AAAA,IAC/C,gBAAgB,cAAc,OAAO,aAAa,MAAM,GAAG,cAAc;AAAA,EAC1E;AAAA;;;ACMM,SAAS,qBAAqB,CACpC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,UAAU,UAAU,IAAI,QAAQ,MAAM,GAChD,KACD;AAAA;AAWM,SAAS,mBAAmB,CAClC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,QAAQ,UAAU,GAAG,QAAQ,MAAM,GAC7C,KACD;AAAA;AAGD,SAAS,eAAe,CACvB,QACA,UACA,OACmB;AAAA,EACnB,QAAQ,WAAW;AAAA,EACnB,IAAI,WAAW,cAAc,OAAO,WAAW,YAAY,WAAW,OAAO;AAAA,IAC5E,MAAM,IAAI,UAAU,GAAG,UAAU,yCAAyC;AAAA,EAC3E;AAAA,EACA,MAAM,WAAW,QAAQ,YAAY,CAAC;AAAA,EACtC,IAAI,aAAa;AAAA,IAAO,OAAO;AAAA,EAC/B,MAAM,KAAK,GAAG,UAAU;AAAA,EACxB,IAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AAAA,IACtD,MAAM,IAAI,UACT,GAAG,4DACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,SAAS,YAAY,SAAS;AAAA,EAC/C,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,GAAG;AAAA,IACpD,MAAM,IAAI,UAAU,GAAG,+CAA+C;AAAA,EACvE;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA,UAAU,cAAc,SAAS,UAAU,SAAS,QAAQ,GAAG,WAAW;AAAA,EAC3E;AAAA;;;ACxEM,SAAS,WAAW,CAC1B,MACA,MACA,IACA,WACe;AAAA,EACf,IACC,OAAO,MAAM,WAAW,YACxB,KAAK,WAAW,QAChB,OAAO,KAAK,OAAO,cAAc,aAAa,YAC7C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,OAAO,0EACX;AAAA,EACD;AAAA,EAEA,MAAM,WACL,KAAK,aAAa,YAAY,OAAO,gBAAgB,KAAK,UAAU,EAAE;AAAA,EAEvE,MAAM,aAAa,KAAK,SAAS,cAAc;AAAA,EAE/C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO,UAAU,KAAK,SAAS,SAAS,GAAG,WAAW;AAAA,IACtD,YAAY,cACX,KAAK,SAAS,YAAY,MAC1B,GAAG,sBACJ;AAAA,IACA,cACC,eAAe,QACZ,OACA,cAAc,YAAY,GAAG,wBAAwB;AAAA,EAC1D;AAAA;AAGD,SAAS,eAAe,CACvB,UACA,IACwC;AAAA,EACxC,MAAM,YAAY,SAAS,aAAa;AAAA,EACxC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,yDACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,OAAO,UAAU,SAAS,OAAO,GAAG,oBAAoB;AAAA,IACxD,WAAW,WACV,SAAS,aAAa,iBACtB,GAAG,wBACJ;AAAA,IACA;AAAA,EACD;AAAA;;;AC3CM,SAAS,aAAa,CAC5B,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UAAU,GAAG,wCAAwC;AAAA,EAChE;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,WAAW,OAAO,UAAU;AAAA,EAClC,IAAI,YAAY,UAAU;AAAA,IACzB,MAAM,IAAI,UACT,GAAG,gGACJ;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ,aAAa,UAAU,QAAQ,QAAQ,GAAG,UAAU,KAAK;AAAA,EACvE,2BAA2B,QAAQ,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA,IACN,QAAQ,CAAC;AAAA,IACT;AAAA,IACA,YAAY,iBAAiB,QAAQ,KAAK;AAAA,IAC1C,QAAQ,cAAc,OAAO,UAAU,CAAC,GAAG,KAAK;AAAA,IAChD,gBAAgB,sBAAsB,OAAO,QAAQ,KAAK;AAAA,IAC1D,cAAc,oBAAoB,OAAO,MAAM,KAAK;AAAA,IACpD,cAAc,oBAAoB,OAAO,cAAc,KAAK;AAAA,IAC5D,SAAS,eAAe,OAAO,SAAS,KAAK;AAAA,EAC9C;AAAA;AAID,SAAS,SAAS,CACjB,QACA,UAC6B;AAAA,EAC7B,OAAO,WACJ,OAAO,QAAQ,OAAO,KAAiC,IACvD;AAAA,IACA;AAAA,MACC;AAAA,MACA;AAAA,WACK;AAAA,QACJ,QAAQ,OAAO;AAAA,MAChB;AAAA,IACD;AAAA,EACD;AAAA;AAGH,SAAS,YAAY,CACpB,SACA,UACA,OAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW,GAAG;AAAA,IACzB,MAAM,IAAI,UAAU,GAAG,oCAAoC;AAAA,EAC5D;AAAA,EAEA,MAAM,QAAQ,IAAI;AAAA,EAClB,YAAY,MAAM,SAAS,SAAS;AAAA,IACnC,MAAM,KAAK,WAAW,GAAG,gBAAgB,SAAS;AAAA,IAElD,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AAAA,MACrB,MAAM,IAAI,UACT,GAAG,yBAAyB,6EAC7B;AAAA,IACD;AAAA,IACA,IAAK,eAAqC,SAAS,IAAI,GAAG;AAAA,MACzD,MAAM,IAAI,UACT,GAAG,WAAW,uEACf;AAAA,IACD;AAAA,IACA,MAAM,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,WAAW,WAAW,MAAM,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGR,SAAS,0BAA0B,CAClC,QACA,OACA,OACO;AAAA,EACP,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI;AAAA,EACzE,IAAI,WAAW,OAAO,WAAW,WAAW;AAAA,IAC3C,MAAM,IAAI,UACT,GAAG,sJACJ;AAAA,EACD;AAAA;AAGD,SAAS,gBAAgB,CACxB,QACA,OAC+B;AAAA,EAC/B,OAAO;AAAA,IACN,aAAa,cACZ,OAAO,QAAQ,eAAe,OAC9B,GAAG,2BACJ;AAAA,IACA,eAAe,cACd,OAAO,QAAQ,iBAAiB,MAChC,GAAG,6BACJ;AAAA,IACA,YAAY,cACX,OAAO,QAAQ,cAAc,OAC7B,GAAG,0BACJ;AAAA,IACA,WAAW,cACV,OAAO,QAAQ,aAAa,OAC5B,GAAG,yBACJ;AAAA,IACA,QAAQ,cACP,OAAO,QAAQ,UAAU,OACzB,GAAG,sBACJ;AAAA,EACD;AAAA;;AC7HD,IAAM,QAAQ;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAEA,IAAM,SAAgD;AAAA,EACrD,CAAC,KAAK,QAAU;AAAA,EAChB,CAAC,KAAK,OAAS;AAAA,EACf,CAAC,KAAK,KAAM;AAAA,EACZ,CAAC,KAAK,IAAK;AACZ;AAGA,SAAS,IAAI,CAAC,IAAoB;AAAA,EACjC,MAAM,OAAO,OAAM,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC;AAAA,EACrD,OAAO,SAAS,YAAY,GAAG,SAAS,GAAG,KAAK,KAAK,KAAK,KAAK;AAAA;AAIzD,SAAS,qBAAqB,CACpC,UACA,OACgB;AAAA,EAChB,MAAM,WAAW,SAAS;AAAA,EAC1B,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,EACrC,MAAM,UAAU,MAAM,OACrB,CAAC,SAAS,SAAS,WAAW,QAAQ,SAAS,QAChD;AAAA,EACA,IAAI,QAAQ,WAAW;AAAA,IAAG,OAAO;AAAA,EACjC,MAAM,WAAW,KAAK,IACrB,GAAG,QAAQ,IAAI,CAAC,SAAS,SAAS,WAAW,KAAK,CACnD;AAAA,EACA,MAAM,QAAQ,QAAQ,IACrB,CAAC,SACA,UAAU,WAAW,KAAK,SAAS,WAAW,KAAK,yCAAyC,QAC9F;AAAA,EACA,OAAO,GAAG,UAAU,MAAM,KAAK,IAAI,+BAA+B,QAAQ,WAAW,IAAI,UAAU,iFAAiF,KAAK,QAAQ,uBAAuB,QAAQ,IAAI,CAAC,SAAS,UAAU,MAAM,EAAE,KAAK,IAAI,QAAQ;AAAA;AAI3Q,SAAS,kBAAkB,CACjC,UACA,OACO;AAAA,EACP,MAAM,UAAU,sBAAsB,UAAU,KAAK;AAAA,EACrD,IAAI,YAAY;AAAA,IAAM;AAAA,EACtB,IACC,OAAO,YAAY,eACnB,OAAO,QAAQ,gBAAgB,YAC9B;AAAA,IACD;AAAA,EACD;AAAA,EACA,QAAQ,YAAY,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAAA;;;ACvCxD,SAAS,aAAa,CAC5B,QACA,OACA,WACA,cACA,OACA,QACA,WACA,SAAmC,MACzB;AAAA,EACV,IAAI,QAAgC;AAAA,EAEpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,MAAM;AAAA,MAChB,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UAAU,+CAA+C;AAAA,MACpE;AAAA,MACA,UAAU,OAAO,KAAK,eAAe,QAAO,GAAG;AAAA,MAC/C,OAAO;AAAA;AAAA,EAET;AAAA;;AC7CM,SAAS,OAAO,CAAC,MAAoB,QAAmC;AAAA,EAC9E,MAAM,QAAQ,OAAO,KAAK;AAAA,EAC1B,OAAO,OAAO,UAAU,WAAW,QAAQ;AAAA;AAQrC,SAAS,QAAQ,CACvB,MACA,QACA,OACW;AAAA,EACX,MAAM,SAAS,IAAI;AAAA,EAEnB,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,IAAI,OAAO,UAAU,UAAU;AAAA,MAC9B,MAAM,IAAI,UACT,0BAA0B,KAAK,SAAS,6CAA6C,KAAK,oDAC3F;AAAA,IACD;AAAA,IACA,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK;AAAA,IAIhD,IAAI,CAAC,WAAW,UAAU,GAAG;AAAA,MAC5B,MAAM,OAAO,CAAC,KAAK,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,4BAA4B,KAAK,KAAK,GAAG,MACvF;AAAA,QACC,QAAQ;AAAA,UACP,EAAE,MAAM,SAAS,8BAA8B,aAAa;AAAA,QAC7D;AAAA,QACA,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO,IAAI,UAAU;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,IAAI,UAAU;AAAA,IAAM,OAAO,IAAI,eAAe,KAAK,CAAC;AAAA,EAEpD,OAAO,CAAC,GAAG,MAAM;AAAA;AAQlB,eAAsB,aAAa,CAClC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,eAAe,KAAK;AAAA,EACnC,IAAI,CAAC,WAAW,MAAM;AAAA,IAAG,OAAO;AAAA,EAChC,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,MAAM;AAAA,EAC1E,MAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,MAAM,OAAO,MAAM;AAAA,EACjE,OAAO,SAAS,QAAQ,eAAe,IAAI,MAAM,SAAS,SAAS;AAAA;;ACtC7D,SAAS,WAAW,CAAC,QAAkC;AAAA,EAC7D,OAAO;AAAA,IACN,OAAO,WAAW,SAAS,OAAO,KAAK;AAAA,IACvC,UAAU,WAAW,YAAY,OAAO,QAAQ;AAAA,IAChD,QAAQ,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AAAA;AAUM,SAAS,QAAW,CAAC,OAAiB,QAA6B;AAAA,EACzE,IAAI,UAAU;AAAA,IAAM,MAAM,OAAO;AAAA,EACjC,OAAO;AAAA;AAaR,eAAsB,qBAAwB,CAC7C,OACoB;AAAA,EACpB,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAW,OAAO;AAAA,IACrE,MAAM;AAAA;AAAA;;;AC9DD,SAAS,YAAY,CAAC,MAAoB,OAAe;AAAA,EAC/D,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,4EACvB;AAAA,EACD;AAAA,EACA,OAAO,KAAK;AAAA;AAIN,SAAS,aAAa,CAC5B,MACA,UACA,OACO;AAAA,EACP,MAAM,YAAY,KAAK,UAAU,aAAa;AAAA,EAC9C,IAAI,OAAO,aAAa,YAAY,SAAS,SAAS,WAAW;AAAA,IAChE,MAAM,IAAI,iBACT,sBACA,GAAG,oDAAoD,wBACvD,EAAE,WAAW,UAAU,KAAK,KAAK,CAClC;AAAA,EACD;AAAA;AAIM,SAAS,aAAa,CAAC,SAAkB,OAA+B;AAAA,EAC9E,IAAI,QAAQ,WAAW,MAAM;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,yFACJ;AAAA,EACD;AAAA,EACA,OAAO,QAAQ;AAAA;AAOhB,eAAsB,eAAe,CACpC,SACA,QACA,UACA,OACmB;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,WAAW,QAAQ,UAAU,KAAK,CAAC,cACxC,OAAO,KAAK,WAAW,UAAU,MAAM,CACxC;AAAA,EACA,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,aAAa,aAAa,KAAK,OAAO,IAAI,IAAI,MAAM;AAAA,IAC1D,MAAM,IAAI,iBACT,oBACA,GAAG,+CAA+C,eAClD,EAAE,YAAY,QAAQ,OAAO,IAAI,UAAU,OAAO,KAAK,CACxD;AAAA,EACD;AAAA,EAEA,OAAO,SAAS,OAAO,UAAU,OAAO,IAAI;AAAA;AAY7C,eAAsB,QAAQ,CAC7B,SACA,QACA,UACsB;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW,QAAQ,WAAW;AAAA,IAAM,OAAO;AAAA,EAE/C,MAAM,QACL,CAAC,OAAO,KAAK,WAAW,OAAO,MAAM,KACrC,OAAO,cAAc,OAAO,IAAI,MAAM;AAAA,EACvC,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,MAAM,UAAU,MAAM,sBACrB,QAAQ,MAAM,MAAM,WACnB,OAAO,IACP;AAAA,IACC,WAAW,QAAQ,MAAM,IAAI;AAAA,IAE7B,UAAU;AAAA,MACT,MAAM,MAAM,OAAO,KAAK,QAAQ;AAAA,MAChC,WAAW,OAAO;AAAA,IACnB;AAAA,EACD,GACA,OAAO,OACR,CACD;AAAA,EACA,OAAO,WAAW;AAAA;;ACnGZ,SAAS,MAAM,CAAC,QAA6B;AAAA,EACnD,OAAO;AAAA,OACH,OAAO;AAAA,IACV,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,eAAe,OAAO,oBAAoB;AAAA,IAC1C,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO,aAAa;AAAA,IACjC,iBAAiB,OAAO,cAAc,eAAe;AAAA,IACrD,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACnB;AAAA;AAIM,IAAM,OAAO,CAAC,SACpB,OAAO,SAAS,WAAW,OAAO,KAAK;AAQjC,SAAS,KAAK,CAAC,MAAuB;AAAA,EAC5C,IAAI,OAAO,SAAS;AAAA,IAAU,OAAO;AAAA,EACrC,MAAM,KACL,OAAO,SAAS,YAAY,SAAS,OAAO,KAAK,KAAK;AAAA,EACvD,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA;;;AC5BtC,IAAM,WAAW,CAAC,OAAe,IAAY,SAC5C,IAAI,eACH,GAAG,aAAa,QAAQ,sBACxB,SAAS,OACN,EAAE,QAAQ,IAAI,WAAW,MAAM,IAC/B,EAAE,QAAQ,IAAI,UAAU,MAAM,WAAW,MAAM,CACnD;AAQD,eAAsB,UAAU,CAC/B,SACA,IACA,MAC6B;AAAA,EAC7B,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EACtB,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,SAAS,EAAE;AAAA,EACpD,OAAO,WAAW,SAAS,SAAS,QAAQ,OAAO,SAAS,QACzD,SACA;AAAA;AAIJ,eAAsB,SAAS,CAC9B,SACA,IACA,MACA,OACsB;AAAA,EACtB,OAAO,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,GAAG,MACpD,SAAS,OAAO,IAAI,IAAI,CACzB;AAAA;AASD,eAAsB,SAAS,CAC9B,SACA,MACA,MACA,SACA,OACA,SAIsB;AAAA,EACtB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,MAAM,YAAY,SAAS;AAAA,EAE3B,IAAI,cAAc,aAAa,cAAc,OAAO,SAAS;AAAA,IAC5D,MAAM,IAAI,eACT,WACA,GAAG,2BAA2B,oBAAoB,OAAO,WACzD;AAAA,MACC,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,eAAe,OAAO;AAAA,MACtB,WAAW;AAAA,IACZ,CACD;AAAA,EACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG;AAAA,EACvC,OAAO,QAAQ,MAAM,MAAM,WAC1B,OAAO,IACP,KAAK,OAAO,WAAW,IAAI,GAC3B,OAAO,OACR;AAAA;;AC7ED,eAAsB,cAAc,CACnC,MACA,OACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,KAAK,OAAO,aAAa,SAAS,KAAK;AAAA,EAE5D,MAAM,SACL,OAAO,WAAW,YACf,CAAC,IACD,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC9B,MAAM,gBAAgB,MAAM,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC;AAAA,IACvD,SAAS,MAAM;AAAA,EAChB,EAAE;AAAA,EAKL,IAAI,OAAO,WAAW,WAAW;AAAA,IAChC,MAAM,QAAQ,OAAO;AAAA,IACrB,WAAW,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,OAAO,OAAO,GAAG,GAAG;AAAA,QAC9B,OAAO,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACvE;AAAA,IACD;AAAA,IACA,aAAa,OAAO,CAAC,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,IAAI,OAAO,SAAS,GAAG;AAAA,IAItB,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,gBAAgB,OAAO,eAAe,OAAO,WAAW,IAAI,KAAK,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,EAAE,KAAK,IAAI,MACnL,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EACD;AAAA,EAEA,OAAO,iBAAkB,OAA8B,KAAK;AAAA;AAI7D,SAAS,YAAY,CACpB,OACA,MACA,QACO;AAAA,EACP,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,WAAW,KAAK;AAAA,MAAG,OAAO,KAAK,EAAE,MAAM,SAAS,WAAW,CAAC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,YAAY,OAAO,UAAU,MAAM,QAAQ,GAAG;AAAA,MAC7C,aAAa,OAAO,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,IAC7C;AAAA,IACA;AAAA,EACD;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAGjD,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,QACrB,OAAO,KAAK,EAAE,MAAM,SAAS,SAAS,aAAa,CAAC;AAAA,MACrD,EAAO;AAAA,QACN,aAAa,OAAO,CAAC,GAAG,MAAM,GAAG,GAAG,MAAM;AAAA;AAAA,IAE5C;AAAA,EACD;AAAA;AAOD,SAAS,cAAc,CAAC,MAAgD;AAAA,EACvE,MAAM,MAAM,KAAK,UAChB,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,WAAW,OAAO,CAChE;AAAA,EACA,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG;AAAA;AAG7C,SAAS,UAAU,CAClB,SACkB;AAAA,EAClB,MAAM,MAAM,OAAO,YAAY,WAAW,QAAQ,MAAM;AAAA,EACxD,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AAAA;AAGlD,SAAS,gBAAgB,CAAC,OAAsB;AAAA,EAC/C,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,gBAAgB;AAAA,EAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,MAAM,MAA4B,CAAC;AAAA,IACnC,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjD,IAAI,UAAU;AAAA,QAAW,IAAI,OAAO,iBAAiB,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;;AChBD,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,IAAI,UACT,GAAG,mHACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAUR,eAAsB,IAAI,CACzB,SACA,MACA,MACA,YACA,SAAsB,CAAC,GACP;AAAA,EAChB,MAAM,WAAW,QAAQ;AAAA,EACzB,IAAI,aAAa;AAAA,IAAM;AAAA,EAEvB,MAAM,QAAmB,OAAO,OAAO;AAAA,IACtC,IAAI,QAAO,WAAW,QAAQ,CAAC;AAAA,IAC/B;AAAA,IAEA,YAAY,IAAI,KAAK,WAAW,QAAQ,CAAC;AAAA,IACzC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,OACZ;AAAA,EACJ,CAAC;AAAA,EACD,IAAI;AAAA,IACH,MAAM,SAAS,KAAK;AAAA,IACnB,OAAO,SAAS;AAAA,IACjB,QAAQ,YACP,wCAAwC,QAAQ,MAAM,eAAe,KAAK,OAAO,mBAAmB,QAAQ,QAAQ,OAAO,OAAO,WAClI,EAAE,MAAM,qBAAqB,CAC9B;AAAA;AAAA;;;ACtIF,IAAM,WAAW;AAAA,EAChB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,UAAU;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,QAAQ;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAeO,SAAS,YAAY,CAC3B,QACA,OACoB;AAAA,EACpB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,gEACJ;AAAA,EACD;AAAA,EAEA,WAAW,QAAQ,OAAO,KAAK,QAAQ,GAAgC;AAAA,IACtE,MAAM,QAAkB,OAAmC;AAAA,IAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,MAChD,MAAM,IAAI,UAAU,GAAG,gBAAgB,iBAAiB;AAAA,IACzD;AAAA,IAEA,WAAW,UAAU,SAAS,OAAO;AAAA,MACpC,IAAI,OAAQ,MAAkC,YAAY,YAAY;AAAA,QACrE,MAAM,IAAI,UACT,GAAG,gBAAgB,sBAAsB,iCAC1C;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ;AAAA,EAId,OAAO;AAAA,IACN,gBAAgB,SAAS,OAAO,YAAY,yBAAyB,KAAK;AAAA,IAC1E,WAAW,SAAS,OAAO,SAAS,aAAa,KAAK;AAAA,EACvD;AAAA;AAQD,SAAS,QAAQ,CAChB,QACA,MACA,QACA,OACU;AAAA,EACV,MAAM,QAAQ,OAAO,MAAM;AAAA,EAC3B,IAAI,UAAU,aAAa,OAAO,UAAU,YAAY;AAAA,IACvD,MAAM,IAAI,UACT,GAAG,gBAAgB,QAAQ,qCAC5B;AAAA,EACD;AAAA,EACA,OAAO,UAAU;AAAA;;;ACtGlB,wBAAS,iCAAa;;;ACAtB;AAUA,IAAM,UAAU,IAAI;AAMb,SAAS,UAAU,CACzB,QACA,SACA,QAAgB,OAAO,UACF;AAAA,EACrB,IAAI,OAAO,QAAQ,IAAI,MAAM;AAAA,EAC7B,IAAI,SAAS,WAAW;AAAA,IACvB,OAAO,IAAI;AAAA,IACX,QAAQ,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EACA,MAAM,OAAO,GAAG,cAAgB;AAAA,EAChC,IAAI,MAAM,KAAK,IAAI,IAAI;AAAA,EACvB,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,KAAK;AAAA,IACpC,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;AAAA,IAC1E,KAAK,IAAI,MAAM,GAAG;AAAA,EACnB;AAAA,EACA,OAAO;AAAA;AAID,SAAS,SAAS,CAAC,KAAa,OAAkC;AAAA,EACxE,OAAO,WAAW,UAAU,GAAG,EAAE,OAAO,MAAM,KAAK,MAAQ,CAAC,EAAE,OAAO;AAAA;;;ADvBtE,IAAM,UAAU;AAEhB,IAAM,QACL;AAED,SAAS,KAAK,CAAC,KAAa,QAAgB,UAA0B;AAAA,EACrE,OAAO,UAAU,KAAK,CAAC,QAAQ,QAAQ,CAAC;AAAA;AAGzC,SAAS,MAAM,CAAC,QAAgB,QAAgB,UAA0B;AAAA,EAEzE,MAAM,MAAM,WAAW,QAAQ,OAAO;AAAA,EACtC,MAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,SAAS,WAAW;AAAA,EAC7D,OAAO,MAAM,OAAO,YAAY,YAAY;AAAA;AAItC,SAAS,eAAe,CAAC,QAAgB,QAAwB;AAAA,EACvE,OAAO,OAAO,QAAQ,QAAQ,aAAY,EAAE,EAAE,SAAS,WAAW,CAAC;AAAA;AAW7D,SAAS,gBAAgB,CAC/B,QACA,QACA,WACgB;AAAA,EAChB,SAAS,OAAO,UAAU,OAAO,MAAM,KAAK,SAAS,KAAK,CAAC;AAAA,EAC3D,IAAI,UAAU,aAAa,aAAa,aAAa,QAAQ,WAAW;AAAA,IACvE,OAAO;AAAA,EACR;AAAA,EACA,MAAM,MAAM,WAAW,QAAQ,SAAS,KAAK;AAAA,EAC7C,IAAI,QAAQ;AAAA,IAAW,OAAO;AAAA,EAE9B,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ;AAAA,EAC5C,MAAM,QAAQ,OAAO,KAAK,KAAK,WAAW;AAAA,EAC1C,IAAI,MAAM,WAAW,SAAS,UAAU,CAAC,iBAAgB,OAAO,QAAQ,GAAG;AAAA,IAC1E,OAAO;AAAA,EACR;AAAA,EACA,OAAO,UAAU,OAAO,WACrB,YACA,OAAO,QAAQ,QAAQ,QAAQ;AAAA;;;AE9C5B,IAAM,YAA2B,OAAO,OAAO;AAAA,EACrD,WAAW;AAAA,EACX,aAAa;AACd,CAAC;AASM,SAAS,UAAU,CACzB,SACA,SACA,OACa;AAAA,EACb,IACC,YAAY,cACX,OAAO,YAAY,YAAY,YAAY,OAC3C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,EACD;AAAA,EACA,MAAM,SAAS,SAAS;AAAA,EACxB,IAAI,WAAW;AAAA,IAAW;AAAA,EAC1B,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EACA,IAAI,QAAQ,OAAO,YAAY,MAAM;AAAA,IACpC,MAAM,IAAI,UACT,GAAG,gFACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAQD,SAAS,aAAa,CAC5B,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,EACvC,IAAI,SAAS,aAAa,WAAW;AAAA,IAAW,OAAO;AAAA,EAEvD,MAAM,QACL,SAAS,QAAQ,SAAS,OAAO,iBAAiB,QAAQ,QAAQ,IAAI;AAAA,EACvE,IAAI,UAAU;AAAA,IAAM,OAAO,EAAE,WAAW,OAAO,aAAa,MAAM;AAAA,EAClE,OAAO;AAAA,IACN,WAAW,CAAC;AAAA,IACZ,aAAa,gBAAgB,QAAQ,MAAM;AAAA,EAC5C;AAAA;;ACnED,eAAsB,eAAe,CACpC,SACA,QACgB;AAAA,EAChB,IAAI,OAAO,WAAW,cAAc,CAAC,OAAO;AAAA,IAAW;AAAA,EACvD,MAAM,KACL,SACA,0BACA,OAAO,MACP,OAAO,QAAQ,WACf,EAAE,WAAW,OAAO,QAAQ,GAAG,CAChC;AAAA;;ACtBD,oCAAqB;AAQd,SAAS,UAAU,GAAW;AAAA,EACpC,OAAO,aAAY,EAAE,EAAE,SAAS,WAAW;AAAA;AAWrC,SAAS,UAAU,CAAC,QAAwB;AAAA,EAClD,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AAAA;;;ACPjD,SAAS,SAAS,CAAC,QAAgC;AAAA,EACzD,QAAQ,WAAW,MAAM,YAAY;AAAA,EACrC,OAAO;AAAA;AAYR,eAAsB,WAAW,CAChC,SACA,MACA,MACA,QACA,SAAS,OACoB;AAAA,EAC7B,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,WAAW;AAAA,EACzB,MAAM,SAAwB;AAAA,IAC7B,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,WAAW,WAAW,KAAK;AAAA,IAC3B,QAAQ,KAAK;AAAA,IACb,iBAAiB;AAAA,IACjB,WAAW,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,UAAU;AAAA,IACnD,WAAW;AAAA,IACX,WAAW;AAAA,EACZ;AAAA,EAEA,MAAM,QAAQ,MAAM,SAAS,cAAc,MAAM;AAAA,EACjD,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,MAAM;AAAA,IACzB;AAAA,OACG,cAAc,SAAS,KAAK,IAAI,QAAQ,MAAM;AAAA,EAClD;AAAA;;ACrCM,SAAS,cAAc,CAC7B,SACA,YACgB;AAAA,EAChB,MAAM,UAAU,UAAU,OAAO;AAAA,EACjC,MAAM,OAAO,CAAC,SAAgC;AAAA,IAC7C,IAAI,mBAAmB;AAAA,MAAS,OAAO,QAAQ,IAAI,IAAI;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;AAAA,MACnD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU;AAAA,QAAW;AAAA,MACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,MAAM,gBAAgB,KAAK,eAAe;AAAA,EAC1C,IAAI,kBAAkB,MAAM;AAAA,IAC3B,MAAM,QAAQ,wBAAwB,KAAK,cAAc,KAAK,CAAC;AAAA,IAC/D,IAAI;AAAA,MAAO,OAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,SAAS,KAAK,iBAAiB;AAAA,EACrC,IAAI,WAAW;AAAA,IAAM,OAAO,OAAO,KAAK;AAAA,EAExC,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,WAAW,MAAM;AAAA,IACpB,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,MACrC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC3B,IAAI,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,YAAY;AAAA,QACzD,OAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,MAChC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA;AAOR,SAAS,SAAS,CAAC,SAA8C;AAAA,EAChE,IAAI,mBAAmB;AAAA,IAAS,OAAO;AAAA,EACvC,MAAM,QAAS,QAAkC;AAAA,EACjD,IAAI,iBAAiB;AAAA,IAAS,OAAO;AAAA,EACrC,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,OAAO;AAAA;;ACvCR,eAAsB,eAAe,CACpC,SACA,SAC4B;AAAA,EAC5B,MAAM,QAAQ,eAAe,SAAS,QAAQ,OAAO,OAAO,IAAI;AAAA,EAChE,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAE3B,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,uBAC5C,WAAW,KAAK,CACjB;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,OAAO,YAAY,QAClB,QAAQ,cAAc,QACtB,QAAQ,UAAU,QAAQ,KAAK,MAC7B,OACA,EAAE,OAAO,QAAQ;AAAA;;;ACzBrB,eAAsB,YAAY,CACjC,SACA,SACA,SACyC;AAAA,EACzC,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACxD,IAAI,cAAc;AAAA,IAAM,OAAO;AAAA,EAC/B,QAAQ,OAAO,YAAY;AAAA,EAC3B,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ;AAAA,EAIhC,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACtD,IACC,SAAS,QACT,CAAC,KAAK,UACL,SAAS,SAAS,aAAa,KAAK,SAAS,QAAQ,MACrD;AAAA,IACD,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK,IAAI;AAAA,EACvC,IAAI,SAAS,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG,GAAG;AAAA,IAC1D,OAAO;AAAA,MACN,MAAM,OAAO,IAAI;AAAA,MACjB,SAAS,UAAU,OAAO;AAAA,MAC1B;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,cACrC,QAAQ,IACR,IAAI,KAAK,MAAM,KAAK,UAAU,CAC/B;AAAA,EAGA,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,OAAO;AAAA,IACN,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,EACV;AAAA;AAQD,SAAS,UAAU,CAClB,MACA,SACA,KACU;AAAA,EACV,OACC,KAAK,iBAAiB,QACtB,KAAK,cAAc,QAAQ,UAAU,QAAQ,IAAI,QAAQ,KAAK;AAAA;;;AChEzD,SAAS,QAAQ,CAAC,SAAgD;AAAA,EACxE,QAAQ,MAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,OAAO;AAAA,EAChE,MAAM,aAAa;AAAA,IAClB,QAAQ;AAAA,IACR,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ;AAAA,IAC9C;AAAA,IACA,YAAY,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC;AAAA,IACzD,GAAI,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5B,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACN;AAAA,IACA,WAAW,CAAC,OAAe,YAC1B,GAAG,QAAQ,kBAAkB,QAAQ,UAAU,YAAY,MAAM;AAAA,IAClE,OAAO,MACN,GAAG,4DAA4D;AAAA,EACjE;AAAA;;;ACMM,SAAS,SAAS,CAAC,SAAqC;AAAA,EAC9D,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,OAAO;AAAA,SACA,aAAY,CAAC,SAAS,SAAS;AAAA,MACpC,OAAO,aAAa,SAAS,SAAS,OAAO;AAAA;AAAA,SAGxC,QAAO,CAAC,SAAS;AAAA,MACtB,MAAM,QAAQ,eAAe,SAAS,OAAO,OAAO,IAAI;AAAA,MACxD,IAAI,UAAU;AAAA,QAAM,OAAO;AAAA,MAE3B,MAAM,UAAU,MAAM,MAAM,SAAS,uBACpC,WAAW,KAAK,CACjB;AAAA,MACA,IAAI,YAAY;AAAA,QAAM,OAAO;AAAA,MAC7B,OAAO,MAAM,SAAS,cAAc,QAAQ,IAAI,MAAM,IAAI,CAAC;AAAA;AAAA,SAGtD,kBAAiB,CAAC,MAAM,SAAS;AAAA,MACtC,MAAM,KAAK,KAAK,IAAI;AAAA,MACpB,IAAI,CAAC,MAAK,EAAE;AAAA,QAAG,OAAO;AAAA,MAGtB,OAAO,SAAS,WAAW,aAAa,CAAC,MAAK,QAAQ,MAAM,IACzD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,CAAC,IACjD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,GAAG,QAAQ,MAAM;AAAA;AAAA,SAG/D,SAAQ,CAAC,IAAI;AAAA,MAClB,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI;AAAA,MACjD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,QAAO,CAAC,IAAI;AAAA,MACjB,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,MAAM,SAAS,CAAC;AAAA;AAAA,IAG5D,QAAQ,SAAS,OAAO;AAAA,SAElB,eAAc,GAAG;AAAA,MACtB,MAAM,UAAU,MAAM,SAAS;AAAA,MAC/B,IAAI,CAAC,QAAQ,aAAa,kBAAkB,YAAY,WAAW;AAAA,QAClE,MAAM,IAAI,kBACT,4IACA,EAAE,MAAM,YAAY,WAAW,wBAAwB,CACxD;AAAA,MACD;AAAA,MACA,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA,IAG3B,OAAO,CAAC,GAAG,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/B;AAAA;;ACjEM,SAAS,UAAU,CAAC,SAAkB,SAAyB;AAAA,EACrE,MAAM,SAAS,QAAQ,OAAO,cAAc;AAAA,EAE5C,OAAO,WAAW,YACf,OAAO,KAAK,OAAO,IAClB,WAAW,QAAQ,OAAO;AAAA;AAIxB,IAAM,QAAQ,CAAC,KAAa,UAClC,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW;;;ACtB3C,4BAAS;;;ACcF,SAAS,WAAW,CAC1B,MACA,MACA,OACA,OACA,MACO;AAAA,EACP,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IACC,UAAU,QACV,eAAe,KAAK,MAAM,eAAe,MAAM,OAAO,GACrD;AAAA,IACD,MAAM,IAAI,YACT,eACA,GAAG,cAAc,qDACjB,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQM,SAAS,cAAc,CAC7B,OACA,KACA,OACA,MAC+B;AAAA,EAC/B,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,MAClE,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,YAAY,MAAM;AAAA,IAC3B,MAAM,IAAI,YACT,eACA,GAAG,cAAc,yBACjB,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,IAAI,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,IAC/C,MAAM,IAAI,YAAW,iBAAiB,GAAG,cAAc,oBAAoB;AAAA,MAC1E,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA;AAIM,IAAM,iBAAiB,CAAC,OAAe,SAC7C,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,EAC5D,WAAW;AACZ,CAAC;;;AC3DF,eAAsB,YAAY,CACjC,SACA,QACA,MACA,OACA,MACuB;AAAA,EACvB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,MACA,GACD;AAAA,EACA,eAAe,OAAO,KAAK,OAAO,IAAI;AAAA,EACtC,OAAO;AAAA;AAQR,eAAsB,WAAW,CAChC,SACA,QACA,MACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,aAC1B,WAAW,MAAM,GACjB,MACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AF1BM,IAAM,gBAAgB;AAQ7B,eAAsB,gBAAgB,CACrC,SACA,QACA,MACA,OACA,UAC0E;AAAA,EAC1E,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,IACD;AAAA,EACA,eAAe,OAAO,QAAQ,MAAM,IAAI,GAAG,OAAO,WAAW;AAAA,EAC7D,IAAI,MAAM,WAAW,eAAe;AAAA,IACnC,MAAM,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC;AAAA,EACnD;AAAA,EACA,OAAO,EAAE,OAAO,cAAc,gBAAgB,MAAM,SAAS;AAAA;AAOvD,SAAS,WAAW,CAC1B,OACA,QACA,UACA,cACa;AAAA,EACb,OAAO,IAAI,YACV,gBACA,GAAG,uDACH;AAAA,IACC,WAAW;AAAA,IACX;AAAA,IACA;AAAA,OACI,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa;AAAA,EACtD,CACD;AAAA;AASD,eAAsB,gBAAgB,CACrC,SACA,OACA,QACA,OACsB;AAAA,EACtB,IAAI,MAAM,aAAa,eAAe;AAAA,IACrC,MAAM,YAAY,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC9C;AAAA,EACA,OAAO,eAAe,OAAO,WAAW;AAAA;AAQlC,IAAM,WAAW,CAAC,WAAmB,SAC3C,WAAW,GAAG,YAAY,MAAM;AAG1B,SAAS,WAAW,CAC1B,OACA,WACA,MACU;AAAA,EACV,IAAI,MAAM,aAAa,QAAQ,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAC7D,MAAM,QAAQ,OAAO,KAAK,SAAS,WAAW,IAAI,CAAC;AAAA,EACnD,MAAM,OAAO,OAAO,KAAK,MAAM,QAAQ;AAAA,EACvC,OAAO,MAAM,WAAW,KAAK,UAAU,iBAAgB,OAAO,IAAI;AAAA;;AGlGnE;AAuBA,eAAsB,YAAY,CACjC,SACA,OACiE;AAAA,EACjE,OAAO,cAAc,SAAS,OAAO,IAAI;AAAA;AAO1C,eAAsB,SAAS,CAC9B,SACA,OAKE;AAAA,EACF,MAAM,OAAO,OAAO,UAAU,GAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,EACzD,OAAO,KAAM,MAAM,cAAc,SAAS,OAAO,IAAI,GAAI,KAAK;AAAA;AAG/D,eAAe,aAAa,CAC3B,SACA,OACA,MACiE;AAAA,EACjE,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,SAAS,MAAM,UAAU,WAAW;AAAA,EAC1C,MAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EAEtD,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,IACtC,WAAW,WAAW,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,SAAS,OAAO,OAAO,SAAS,QAAQ,IAAI;AAAA,IACtD,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACZ,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,UAAU;AAAA;;AC5CrB,IAAM,YAAY;AAMzB,IAAM,aAAa;AAmCnB,eAAsB,aAAa,CAClC,SACA,UAC0B;AAAA,EAC1B,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,QAAQ;AAAA,EAIjD,MAAM,aAAa,SAAS,KAAK,SAAS;AAAA,EAC1C,MAAM,QAAQ,EAAE,SAAS,UAAU,QAAQ,KAAK,UAAU;AAAA,EAC1D,MAAM,UACL,SAAS,UAAU,UAChB,MAAM,cAAc,KAAK,IACzB,MAAM,gBAAgB,KAAK;AAAA,EAC/B,OAAO,KAAK,SAAS,SAAS,SAAS,KAAK,SAAS,SAAS;AAAA;AAI/D,eAAe,aAAa,CAC3B,OAC0C;AAAA,EAC1C,IAAI,UAAU;AAAA,EACd,SAAS,OAAO,EAAG,OAAO,WAAW,QAAQ,GAAG;AAAA,IAC/C,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,MAAM,UAAU,OAAO,IAAI;AAAA,IAC3C,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,IAAI,QAAQ,YAAY;AAAA,MAAM,OAAO,EAAE,UAAU,MAAM,KAAK;AAAA,IAC5D,UAAU;AAAA,EACX;AAAA,EACA,OAAO,EAAE,UAAU,OAAO,mBAAmB,MAAM,KAAK;AAAA;AAWzD,eAAe,eAAe,CAC7B,OAC0C;AAAA,EAC1C,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,IAAI,SAAS,OAAO;AAAA,EACpB,SAAS,SAAS,EAAG,SAAS,YAAY,UAAU,GAAG;AAAA,IACtD,MAAM,OAAO,WAAW,QAAQ;AAAA,IAChC,MAAM,OAAO,OACV,SACA,WAAW,OAAO,oBACjB,IAAI,QAAQ,IACZ,KAAK,OAAO,QAAQ,UAAU,CAAC;AAAA,IACnC,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,OACb,MAAM,WAAW,OAAO,IAAI,IAC5B,MAAM,OAAO,aAAa,MAAM,cAAc;AAAA,IACjD,IAAI,YAAY;AAAA,MAAM,SAAS;AAAA,IAC1B,SAAI,QAAQ,YAAY,MAAM;AAAA,MAClC,OAAO,EAAE,UAAU,QAAQ,UAAU,MAAM,KAAK;AAAA,IACjD,EAAO;AAAA,MACN,QAAQ;AAAA,MAER,IAAI,UAAU;AAAA,QAAO,SAAS,OAAO;AAAA;AAAA,EAEvC;AAAA,EAEA,MAAM,MAAM,SAAS,SAAS;AAAA;AAI/B,eAAe,SAAS,CACvB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,UAAU,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACnE,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA;AAI9C,eAAe,UAAU,CACxB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,OAAO,YAAY;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,QAAQ,MAAM,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW,IAAI,KAAK,MAAM,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,WAAW,IAAI,KAAK,MAAM,GAAG;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACpE,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,SAAS,SAAS;AAAA;;ACxH/B,IAAM,WAAU;AAiBhB,eAAsB,kBAAkB,CACvC,SACA,MACA,MACA,OACA,OACgB;AAAA,EAChB,MAAM,UACL,SACA,MACA,MACA,EAAE,SAAS,eAAe,KAAK,EAAE,GACjC,KACD;AAAA;AAID,eAAsB,eAAe,CACpC,SACA,MACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK;AAAA;AAGvD,eAAe,SAAS,CACvB,SACA,MACA,MACA,SACA,OACgB;AAAA,EAChB,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM;AAAA,EACvB,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,UACL,aAAa,UACV,MAAM,KAAK,CAAC,MAAM,WAAW,QAAQ,OAAO,CAAC,IAC7C,MAAM,KAAK,CAAC,MAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,EAC7C,QAAQ,UAAU,WAAW,MAAM,cAAc,SAAS;AAAA,IACzD,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,SAAS,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAE/D,UAAU,MACT,IAAI,cACH,GAAG,6DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA,EACD,IAAI,YAAY,SAAS;AAAA,IAAU;AAAA,EAEnC,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,YAAY;AAAA,EAC3B,MAAM,IAAI,oBACT,GAAG,0CAA0C,SAAS,SAAS,kFAC/D;AAAA,IACC,UAAU,KAAK;AAAA,OACX,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IAC3C,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,CAAC;AAAA,EACzD,CACD;AAAA;;;AC/FD,eAAsB,wBAAwB,CAC7C,SACA,QACgB;AAAA,EAChB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,WAC1B,CAAC,iBAAiB,cAAc,EAAY,IAAI,CAAC,SACjD,QAAQ,MAAM,OAAO,gBAAgB,QAAQ,MAAM,GAAG,CACvD,CACD;AAAA,EACA,MAAM,SAAS,MAAM,KACpB,CAAC,WAA4C,OAAO,WAAW,UAChE;AAAA,EACA,IAAI,WAAW;AAAA,IAAW,MAAM,OAAO;AAAA;AASxC,eAAsB,eAAe,CACpC,SACA,SACgB;AAAA,EAChB,IAAI;AAAA,IACH,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IACD,MAAM,KAAK,SAAS,wBAAwB,SAAS,QAAQ,SAAS;AAAA;AAAA;AAcxE,eAAsB,cAAc,CACnC,SACA,MACA,UACA,UACA,QACA,OACmB;AAAA,EACnB,MAAM,MAAM,MAAM,WAAW,SAAS,SAAS,IAAI,KAAK,IAAI;AAAA,EAC5D,MAAM,OACL,QAAQ,QACR,IAAI,aAAa,SAChB,IAAI,SAAS,SAAS,SAAS,UAAU,QACxC,MAAM,gBAAgB,SAAS,KAAK,UAAU,KAAK;AAAA,EACtD,IAAI;AAAA,IAAM,OAAO;AAAA,EAEjB,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,QAAQ,MAAM,SAAS,cAC5B,OAAO,QAAQ,IACf,QAAQ,MAAM,IAAI,CACnB;AAAA,EACD,EAAO;AAAA,IACN,MAAM,YAAY,SAAS,OAAO,WAAW,cAAc;AAAA;AAAA,EAE5D,OAAO;AAAA;;;AClFD,SAAS,QAAW,CAC1B,OACA,OACmB;AAAA,EACnB,IAAI,OAAO;AAAA,EACX,OAAO,YAAY;AAAA,IAClB,IAAI,MAAM;AAAA,MACT,MAAM,IAAI,UACT,GAAG,uEAAuE,yBAC3E;AAAA,IACD;AAAA,IACA,OAAO;AAAA,IACP,OAAO,MAAM;AAAA;AAAA;;;ACTf,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,MAAM,OAAO,OAAO;AAAA,EACtE,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,OAAO,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,KAAK;AAAA;AAItB,eAAsB,eAAe,CACpC,SACA,MACA,MACA,MACA,OACuB;AAAA,EACvB,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAEA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,QAAQ,OAAO,UAAU;AAAA;;;AC3BnC,SAAS,kBAAkB,CACjC,SACA,MACA,IACgB;AAAA,EAChB,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,QAAQ,MAAM,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,OAAO,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGlD,QAAO,CAAC,QAAQ,UAAU;AAAA,MAC/B,OAAO,aACN,SACA,MACA,QACA,UACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,YAAY,CAC1B,SACA,MACA,OACA,OACwC;AAAA,EACxC,aAAa,MAAM,KAAK;AAAA,EACxB,MAAM,mBAAmB,SAAS,MAAM,iBAAiB,OAAO,KAAK;AAAA,EACrE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AAAA;AAIF,eAAe,UAAU,CACxB,SACA,MACA,OACA,OAC8B;AAAA,EAC9B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,SAAS,MAAM,gBACpB,SACA,MACA,iBACA,QACA,KACD;AAAA,EAIA,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,iBACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,KAAK,CACxB;AAAA,EACA,OAAO,KAAK,QAAQ,MAAM,OAAO,MAAM,EAAE;AAAA;AAI1C,eAAe,YAAY,CAC1B,SACA,MACA,QACA,UACA,OACmB;AAAA,EACnB,aAAa,MAAM,KAAK;AAAA,EAGxB,cAAc,MAAM,UAAU,KAAK;AAAA,EACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,EAE9D,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,iBACA,QACA,KACD;AAAA,EACA,IAAI,gBAAgB;AAAA,EACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAEhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,IAC/C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,OAAO;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,IAAI;AAAA,SAE7B,OAAO,oBAAoB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,IACnE;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAKH,MAAM,QAAQ,MAAM,SAAS,mBAC5B,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,IACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IAGD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACpE,IAAI,eAAe;AAAA,MAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACrE;AAAA;AAAA,EAED,OAAO,OAAO,OAAO;AAAA;;;ACtKtB,uBAAS,4BAAY;AAQd,IAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ,OAAQ,OAAO,EAAE;AAE1D,IAAM,SAAS;AAGR,SAAS,cAAc,GAAW;AAAA,EACxC,OAAO,SAAS,aAAY,EAAE,CAAC;AAAA;AAIzB,SAAS,QAAQ,CAAC,OAA2B;AAAA,EACnD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,IAAI,MAAM;AAAA,EACV,WAAW,QAAQ,OAAO;AAAA,IACzB,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,OAAO,QAAQ,GAAG;AAAA,MACjB,OAAO,OAAQ,UAAW,OAAO,IAAM;AAAA,MACvC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,IAAI,OAAO;AAAA,IAAG,OAAO,OAAQ,SAAU,IAAI,OAAS;AAAA,EACpD,OAAO;AAAA;AAGD,SAAS,UAAU,CAAC,MAAsB;AAAA,EAChD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,MAAM,MAAgB,CAAC;AAAA,EACvB,WAAW,QAAQ,MAAM;AAAA,IACxB,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAAA,IACjC,IAAI,UAAU;AAAA,MAAI,MAAM,IAAI,UAAU,gCAAgC;AAAA,IACtE,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG;AAAA,MACd,IAAI,KAAM,UAAW,OAAO,IAAM,GAAG;AAAA,MACrC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAIhB,IAAM,SAAS,CAAC,QACtB,KAAK,MAAM,IAAI,QAAQ,IAAI,KAAK,MAAM;AAGhC,SAAS,MAAM,CAAC,QAAgB,MAAsB;AAAA,EAC5D,MAAM,UAAU,OAAO,MAAM,CAAC;AAAA,EAC9B,QAAQ,iBAAiB,OAAO,IAAI,CAAC;AAAA,EACrC,MAAM,SAAS,YAAW,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EACjE,MAAM,SAAU,OAAO,MAAiB;AAAA,EACxC,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI;AAAA,EAC7C,OAAO,OAAO,SAAS,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK,QAAQ,GAAG;AAAA;AAW7D,SAAS,SAAS,CACxB,QACA,MACA,KACA,UACgB;AAAA,EAChB,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAClC,MAAM,UAAU,OAAO,GAAG;AAAA,EAC1B,IAAI,UAAyB;AAAA,EAC7B,SAAS,OAAO,UAAU,KAAK,MAAO,QAAQ,UAAU,KAAK,OAAO,QAAQ;AAAA,IAC3E,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAAA,IAC1C,IAAI,WAAW,OAAO,QAAQ,IAAI,GAAG,IAAI,KAAK,SAAS,YAAY,MAAM;AAAA,MACxE,UAAU;AAAA,IACX;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,UAAU,CAAC,GAAW,GAAoB;AAAA,EAClD,IAAI,aAAa,EAAE,SAAS,EAAE;AAAA,EAC9B,SAAS,IAAI,EAAG,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,cAAc,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AAAA,EACA,OAAO,eAAe;AAAA;AAQhB,SAAS,UAAU,CACzB,QACA,SACA,QACS;AAAA,EACT,MAAM,QAAQ,GAAG,mBAAmB,MAAM,KAAK,mBAAmB,OAAO;AAAA,EACzE,MAAM,QAAQ,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC1B,QAAQ,OAAO,KAAK,SAAS,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,kBAAkB,SAAS;AAAA;;;ACnG5B,IAAM,WAAW,CACvB,WAC4B,WAAW,QAAQ,OAAO,gBAAgB;AAGhE,SAAS,eAAe,CAC9B,SACA,OACA,KACW;AAAA,EACX,MAAM,aAAa,QAAQ,OAAO;AAAA,EAClC,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,IAAI,UACT,GAAG,UAAU,kFACd;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AASD,SAAS,UAAU,CACzB,YACA,QACA,QACA,MACA,KACA,OAC4B;AAAA,EAC5B,QAAQ,OAAO,UAAU,OACxB,WAAW,QACX,OAAO,QACP,OAAO,IACP,KACD;AAAA,EACA,MAAM,OAAO,UAAU,WAAW,KAAK,GAAG,MAAM,KAAK,OAAO,QAAQ;AAAA,EACpE,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,OAAO;AAAA,OACH;AAAA,IACH,UAAU;AAAA,IACV,QACC,UAAU,WAAW,OAAO,WACzB,OAAO,SACP,KAAK,WAAW,QAAQ,OAAO,OAAO,EAAE;AAAA,EAC7C;AAAA;;;AC1BD,eAAsB,eAAe,CACpC,SACA,MACA,MACA,OACsB;AAAA,EACtB,MAAM,yBAAyB,SAAS,KAAK,EAAE;AAAA,EAC/C,IAAI,UAAU;AAAA,EACd,IAAI,WAAW;AAAA,EACf,MAAM,SAAS,MAAM,UACpB,SACA,KAAK,IACL,MACA,EAAE,WAAW,KAAK,QAAQ,GAC1B,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,UAAU,OAAO,aAAa;AAAA,IAC9B,WAAW,SAAS,OAAO,YAAY;AAAA,IACvC,OAAO;AAAA,MACN,iBAAiB;AAAA,SACb,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,SAChC,OAAO,iBAAiB,OAAO,CAAC,IAAI,EAAE,cAAc,KAAK;AAAA,IAC9D;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAIH,MAAM,yBAAyB,SAAS,OAAO,EAAE;AAAA,YAChD;AAAA,IACD,MAAM,KAAK,SAAS,sBAAsB,QAAQ,OAAO,SAAS;AAAA,IAClE,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,wBAAwB,QAAQ,OAAO,SAAS;AAAA,IACrE;AAAA,IACA,IAAI,UAAU;AAAA,MACb,MAAM,KACL,SACA,6BACA,QACA,OAAO,SACR;AAAA,IACD;AAAA;AAAA,EAED,OAAO;AAAA;AAIR,eAAe,wBAAwB,CACtC,SACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,SAAS,mBAAmB,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,EAC3E,MAAM,yBAAyB,SAAS,MAAM;AAAA;;;AC/DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACuD;AAAA,EACvD,OAAO,OAAO,SAAS;AAAA,IACtB,MAAM,QAAQ,GAAG,wBAAwB;AAAA,IACzC,MAAM,SAAS,MAAM,UAAU,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,IACrE,IAAI,CAAC,OAAO,QAAQ;AAAA,MACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,QAC7D,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CAAC;AAAA,IACF;AAAA,IACA,IAAI,OAAO,oBAAoB,MAAM;AAAA,MACpC,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,MAAM;AAAA,IAC9C;AAAA,IACA,MAAM,SAAS,MAAM,gBAAgB,SAAS,MAAM,QAAQ,KAAK;AAAA,IACjE,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,KAAK;AAAA;AAAA;;;ACtBvC,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MAEpE,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,OAAO,gBAAgB,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA;AAAA,SAG7D,QAAO,CAAC,QAAQ;AAAA,MACrB,MAAM,QAAQ,GAAG,qBAAqB;AAAA,MACtC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,eACA,QACA,KACD;AAAA,MACA,IAAI,gBAAgB;AAAA,MACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,QAGhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,QAC/C,gBAAgB,OAAO,oBAAoB;AAAA,QAC3C,OAAO,EAAE,iBAAiB,IAAI;AAAA,OAEhC;AAAA,MACA,IAAI,eAAe;AAAA,QAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,MACrE;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,IAGtB,YAAY,eAAe,SAAS,MAAM,EAAE;AAAA,EAC7C;AAAA;;;ACzDM,SAAS,UAAU,CACzB,SACA,MACA,IACsD;AAAA,EACtD,OAAO;AAAA,IACN,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,IAC/C,eAAe,mBAAmB,SAAS,MAAM,EAAE;AAAA,EACpD;AAAA;;ACOD,eAAsB,YAAY,CACjC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,OAAO,WAAW,QAAQ,CAAC,OAAO,SAAS,OAAO;AAAA;AAQnD,eAAsB,cAAc,CACnC,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QACA,MACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA;AAgBD,eAAsB,iBAAiB,CACtC,SACA,MACA,QACA,QAOiC;AAAA,EACjC,QAAQ,MAAM,OAAO,OAAO,MAAM,WAAW;AAAA,EAC7C,YAAY,MAAM,MAAM,OAAO,OAAO,IAAI;AAAA,EAC1C,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SACL,KAAK,oBAAoB,OACtB,OACA,MAAM,gBAAgB,SAAS,MAAM,MAAM,KAAK;AAAA,EACpD,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,EACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;ACzDD,SAAS,cAAc,CAC7B,SACA,MACA,IACA,QAC4D;AAAA,EAC5D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,OAAO,SAAS;AAAA,MAC7B,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,YAAY,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,MAAM;AAAA;AAAA,EAExE;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACuC;AAAA,EACvC,MAAM,mBAAmB,SAAS,MAAM,aAAa,OAAO,KAAK;AAAA,EACjE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,UAAU,SAAS,MAAM,KAAK,CAAC;AAAA,EAC5D,CAAC;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,MACA,OAC6B;AAAA,EAE7B,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,aAAa,MAAM;AAAA,EAC5D,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA;AAIzE,eAAe,WAAW,CACzB,SACA,MACA,QACA,QACA,OACA,QACiC;AAAA,EAGjC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,aACA,QACA,KACD;AAAA,EAEA,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;AC1GK,SAAS,iBAAiB,CAChC,SACA,MACA,IACA,QACkD;AAAA,EAClD,OAAO;AAAA,SACA,aAAY,CAAC,MAAM,SAAS;AAAA,MACjC,MAAM,QAAQ,GAAG,cAAc;AAAA,MAC/B,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,MAAM,SAAS,MAAM,UAAU,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACrE,IAAI,CAAC,OAAO,QAAQ;AAAA,QACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,UAC7D,QAAQ,OAAO;AAAA,UACf,UAAU,KAAK;AAAA,QAChB,CAAC;AAAA,MACF;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,MACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,MACrC,OAAO;AAAA;AAAA,EAET;AAAA;;;ACZD,IAAM,WAAU;AAGhB,eAAe,UAAU,CACxB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,WAAW,MAAM,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC;AAAA,EAC9C,OAAO,cAAc,SAAS;AAAA,IAC7B,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,UAAU,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAEhE,UAAU,MACT,IAAI,cACH,GAAG,4DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA;AAOF,eAAsB,kBAAkB,CACvC,SACA,MACA,OACA,OACgB;AAAA,EAChB,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK;AAAA,EAC5D,MAAM,QAAQ,QAAQ,OAAO,gBAAgB;AAAA,EAC7C,IAAI,YAAY,QAAQ,UAAU,aAAa,QAAQ,YAAY,OAAO;AAAA,IACzE;AAAA,EACD;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,iBACT,uBACA,GAAG,4EACH;AAAA,IACC,QAAQ;AAAA,IACR,UAAU,KAAK;AAAA,IACf,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,EACjE,CACD;AAAA;AAUD,eAAsB,kBAAkB,CACvC,SACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,OAAO,KAAK;AAAA,EAClB,MAAM,QAAQ,SAAS,OAAO,YAAY,OAAO,OAAO,KAAK;AAAA,EAC7D,IAAI,SAAS,QAAQ,OAAO,UAAU;AAAA,IAAU;AAAA,EAChD,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,KAAK,UAAU,KAAK,GAAG,KAAK;AAAA,EAC5E,IAAI,SAAS,QAAQ;AAAA,IAAM;AAAA,EAC3B,MAAM,QAAQ,MAAM,OAAO,aAC1B,QAAQ,MACR,gBACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AC/EM,IAAM,iBAAiB,CAC7B,SACA,WACA,UACI,aAAa,SAAS,WAAW,gBAAgB,OAAO,WAAW;AAMxE,eAAsB,aAAa,CAClC,SACA,MACA,WACA,OAC2B;AAAA,EAC3B,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,SAAS,OAAO,SAAS;AAAA,EAE/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,gBACA,OACA,KAAK,IACN;AAAA,EAGA,MAAM,SAAS,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAChE,IAAI,WAAW,MAAM;AAAA,IACpB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBACT,8BACA,GAAG,iEACH,EAAE,WAAW,OAAO,QAAQ,OAAO,IAAI,UAAU,KAAK,KAAK,CAC5D;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK,QAAQ,cAAc,OAAO;AAAA,EAC3C;AAAA;AAID,eAAsB,UAAU,CAC/B,SACA,MACA,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,iBAAiB,GAAG;AAAA,IAC9B,MAAM,YAAY,SAAS,OAAO,QAAQ,cAAc;AAAA,EACzD;AAAA,EACA,MAAM,YAAY,OAAO,OAAO,OAAO,IAAI,KAAK,MAAM,OAAO,YAAY;AAAA;;;ACpFnE,SAAS,cAAc,CAAC,SAAkB,MAAoB,IAAQ;AAAA,EAC5E,OAAO;AAAA,SACA,MAAK,CACV,QACA,OACgC;AAAA,MAChC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,MACA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,QACzD,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QAEf,SAAS;AAAA,QACT,OAAO,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,OAAO;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,OAAO;AAAA,MAChB;AAAA;AAAA,SAGK,QAAO,CACZ,WACA,MACA,SAC6B;AAAA,MAC7B,OAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,IAAI,OAAO;AAAA;AAAA,EAErE;AAAA;AAQD,eAAe,gBAAgB,CAC9B,SACA,MACA,WACA,MACA,IACA,SAC6B;AAAA,EAC7B,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,EACjD,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EAEnB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAChB,OAAO,YACP,QACA,OAAO,cACP,OAAO,IAAI,GACX,KACA,KACD;AAAA,EACA,IAAI,aAAa;AAAA,IAAM,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAIrE,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,OAAO,OACR;AAAA,EACA,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,EAElD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,EACtD,MAAM,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,EACjE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO;AAAA;;;AChFR,eAAsB,mBAAmB,CACxC,SACA,MACA,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,MAAM,SAAS,OAAO;AAAA,EACtB,OAAO,SAAS,MAAM,IAAI,OAAO,cAAc,SAAS;AAAA;;;ACtBzD,sBAAS,+BAAW;AAmBb,IAAM,iBAAiB;AAE9B,IAAM,WAAW;AACjB,IAAM,SAAS;AACf,IAAM,QAAQ;AAGd,IAAM,WAAU;AAGT,SAAS,iBAAiB,GAAa;AAAA,EAC7C,OAAO,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM;AAAA,IACnD,IAAI,OAAO;AAAA,IACX,SAAS,KAAK,EAAG,KAAK,QAAQ,MAAM,GAAG;AAAA,MACtC,QAAQ,SAAS,WAAU,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;AAAA,GAC1C;AAAA;AAQK,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EAC9D,MAAM,OAAO,MACX,YAAY,EACZ,QAAQ,UAAU,EAAE,EACpB,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,GAAG;AAAA,EACtB,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO;AAAA;AAIlC,IAAM,SAAS,CAAC,QAAgB,UAC/B,WAAW,QAAQ,UAAS,KAAK;AAElC,IAAM,MAAM,CAAC,KAAa,QAAgB,SACzC,UAAU,KAAK,CAAC,QAAQ,IAAI,CAAC;AAGvB,SAAS,gBAAgB,CAC/B,QACA,QACA,MACS;AAAA,EACT,MAAM,OAAO,iBAAiB,IAAI,KAAK;AAAA,EACvC,MAAM,MAAM,OAAO,QAAQ,OAAO,QAAQ;AAAA,EAC1C,OAAO,MAAM,OAAO,YAAY,IAAI,KAAK,QAAQ,IAAI,EAAE,SAAS,WAAW;AAAA;AAWrE,SAAS,gBAAgB,CAC/B,QACA,QACA,QACA,OACA,OACS;AAAA,EACT,MAAM,OAAO,iBAAiB,KAAK;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,OAAO,QAAQ,CAAC,MAAM,UAAU;AAAA,IAC/B,OAAO,SAAS,OAAO,SAAS,QAAQ,KAAK,MAAM,GAAG;AAAA,IACtD,IACC,YAAY,QACZ,UAAU,aACV,SAAS,aACT,KAAK,SAAS,GACb;AAAA,MACD,MAAM,IAAI,UACT,GAAG,mDACJ;AAAA,IACD;AAAA,IACA,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,IAChC,IAAI,QAAQ,WAAW;AAAA,MACtB,MAAM,IAAI,UACT,GAAG,kDAAkD,uGACtD;AAAA,IACD;AAAA,IACA,IAAI,SAAS;AAAA,MAAM;AAAA,IACnB,MAAM,OAAO,OAAO,KAAK,MAAM,WAAW;AAAA,IAC1C,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,IACnC,IAAI,KAAK,WAAW,MAAM,UAAU,iBAAgB,MAAM,KAAK,GAAG;AAAA,MACjE,QAAQ,UAAU,KAAK,QAAQ;AAAA,IAChC;AAAA,GACA;AAAA,EACD,OAAO;AAAA;;;AC5GD,IAAM,UAAU,CACtB,MACA,MACA,SACA,OACA,WAEA,IAAI,mBAAkB,MAAM,GAAG,UAAU,WAAW;AAAA,EACnD,WAAW;AAAA,EACX,QAAQ,OAAO;AAAA,EACf,UAAU,KAAK;AAChB,CAAC;;;ACHF,eAAsB,cAAc,CACnC,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,WAAW,MAAM;AAAA,MACpB,MAAM,QACL,MACA,8BACA,6DACA,OACA,MACD;AAAA,IACD;AAAA,IACA,IAAI,SAAS,MAAM,GAAG;AAAA,MACrB,MAAM,QACL,MACA,wBACA,8CACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa;AAAA,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,IAAI;AAAA,IACpE,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,aAAa;AAAA,QACb,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,MAAM,KAAK,SAAS,4BAA4B,SAAS,QAAQ,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;ACjE/C,eAAsB,aAAa,CAClC,SACA,MACA,MACA,SACA,OACmB;AAAA,EACnB,IAAI,YAAY;AAAA,EAChB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,YAAY,SAAS,OAAO,YAAY;AAAA,IACxC,OAAO,EAAE,cAAc,KAAK;AAAA,GAE9B;AAAA,EACA,IAAI,WAAW;AAAA,IACd,MAAM,KACL,SACA,6BACA,SACA,QAAQ,SACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;AC5BtB,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,OACiC;AAAA,EACjC,MAAM,aAAa,gBAClB,SACA,OACA,mCACD;AAAA,EACA,MAAM,SAAS,eAAe;AAAA,EAE9B,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,IAAI,SAAS,OAAO,YAAY,GAAG;AAAA,MAClC,MAAM,QACL,MACA,wBACA,yDACA,OACA,MACD;AAAA,IACD;AAAA,IACA,UAAU,MAAM,QAAQ,KAAK;AAAA,IAC7B,OAAO;AAAA,MACN,cAAc;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,EAAE;AAAA,QACjD,aAAa;AAAA,QACb,UAAU;AAAA,QACV,eAAe,CAAC;AAAA,MACjB;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,KAAK,WAAW,WAAW,QAAQ,UAAU,MAAM,SAAS,KAAK,GAAG,MAAM;AAAA,EAC3E;AAAA;AAID,SAAS,SAAS,CACjB,MACA,QACA,OACS;AAAA,EACT,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,wEACvB;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO,OAAO,KAAK,SAAS,MAAM;AAAA;;;ACvC1C,IAAM,qBAAqB,KAAK;AAEvC,IAAM,iBAAiB,qBAAqB;AAO5C,IAAM,WAAU;AAGhB,SAAS,QAAQ,CAChB,QACA,QACA,QACA,MACS;AAAA,EACT,MAAM,QAAQ;AAAA,IACb,OAAO;AAAA,IACP,OAAO,MAAM;AAAA,IACb,OAAO,OAAO,cAAc,YAAY,EAAE;AAAA,IAC1C,OAAO,IAAI;AAAA,EACZ;AAAA,EAEA,MAAM,MAAM,WAAW,QAAQ,QAAO;AAAA,EACtC,OAAO,WAAW,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW,CAAC;AAAA;AAS9D,eAAsB,mBAAmB,CACxC,SACA,QACA,QACA,OACkB;AAAA,EAClB,QAAQ,aAAa,MAAM,cAAc,SAAS;AAAA,IACjD,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ,OAAO;AAAA,IACf,UAAU,CAAC,QAAQ,SAAS,SAAS,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAEjE,UAAU,MACT,IAAI,eACH,WACA,GAAG,gFACH;AAAA,MACC,QAAQ,OAAO;AAAA,MACf,iBAAiB,OAAO;AAAA,MACxB,WAAW;AAAA,IACZ,CACD;AAAA,EACF,CAAC;AAAA,EACD,IAAI,WAAW,eAAe;AAAA,IAC7B,MAAM,IAAI,YACT,gBACA,GAAG,mDAAmD,gCACtD;AAAA,MACC,WAAW;AAAA,MACX,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,cAAc;AAAA,IACf,CACD;AAAA,EACD;AAAA,EACA,OAAO,gBAAgB;AAAA;;;ACpFxB,eAAsB,uBAAuB,CAC5C,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,sCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,MACtB,MAAM,QACL,MACA,8BACA,uEACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,OAAO,MAAM,oBAClB,SACA,WAAW,QACX,QACA,KACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa,MAAM;AAAA,MACtB,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,KACL,SACA,iCACA,SACA,QAAQ,SACT;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;AC9DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACY;AAAA,EACZ,OAAO;AAAA,SACA,OAAM,CAAC,MAAM,SAAS;AAAA,MAC3B,OAAO,aACN,SACA,MACA,MACA,SACA,GAAG,qBAAqB,CACzB;AAAA;AAAA,SAGK,SAAQ,CAAC,MAAM,MAAM,SAAS;AAAA,MACnC,OAAO,eACN,SACA,MACA,MACA,MACA,SACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,SAGK,wBAAuB,CAAC,MAAM,MAAM,SAAS;AAAA,MAClD,OAAO,wBACN,SACA,MACA,MACA,MACA,SACA,GAAG,sCAAsC,CAC1C;AAAA;AAAA,SAGK,QAAO,CAAC,MAAM,SAAS;AAAA,MAC5B,OAAO,cACN,SACA,MACA,MACA,SACA,GAAG,sBAAsB,CAC1B;AAAA;AAAA,EAEF;AAAA;;;AC9CD,eAAsB,eAAe,CACpC,SACA,MACA,OAKA,IACoC;AAAA,EACpC,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,QAAQ,SAAS;AAAA,EACjB,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,WAAW,KAAK;AAAA,EACxE,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EAEtB,MAAM,QAAQ,iBACb,OAAO,WAAW,QAClB,OAAO,IACP,OAAO,eACP,OAAO,IAAI,GACX,KACD;AAAA,EACA,IAAI,UAAU;AAAA,IAAI,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAEhE,MAAM,gBAAgB,OAAO,cAAc,OAC1C,CAAC,GAAG,UAAU,UAAU,KACzB;AAAA,EACA,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP;AAAA,IACC,cAAc,KAAK,QAAQ,cAAc;AAAA,IACzC,WAAW,QAAQ,MAAM,IAAI;AAAA,EAC9B,GACA,OAAO,OACR;AAAA,EAGA,IAAI;AAAA,EACJ,IAAI;AAAA,IACH,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,IAClD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,IACtD,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,YAC1D;AAAA,IACD,MAAM,KAAK,SAAS,yBAAyB,SAAS,QAAQ,SAAS;AAAA;AAAA,EAExE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO,KAAK,UAAU,mBAAmB,cAAc,OAAO;AAAA;;;ACpDxD,SAAS,iBAAiB,CAChC,SACA,MACA,IACC;AAAA,EACD,MAAM,aAAa,eAAe,SAAS,MAAM,EAAE;AAAA,EACnD,MAAM,MAAgD;AAAA,OAClD,eAAe,SAAS,MAAM,EAAE;AAAA,IACnC,SAAS,WAAW;AAAA,IACpB,SAAS,CAAC,WAAW,MAAM,YAC1B,gBAAgB,SAAS,MAAM,EAAE,WAAW,MAAM,QAAQ,GAAG,EAAE;AAAA,IAChE,mBAAmB,CAAC,SACnB,oBACC,SACA,MACA,MACA,GAAG,gCAAgC,CACpC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IAOA,QAAQ,CACP,QACA,OACA,WAEA,SAAS,OAAO,YAAY,IACzB,WAAW,MAAM,QAAQ,KAAK,IAC9B,YAAY,SAAS,MAAM,QAAQ,MAAM;AAAA,EAC9C;AAAA;;;ACHM,SAAS,eAAe,CAC9B,SACA,MACA,IACA,QAC8D;AAAA,EAC9D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,WAAW,MAAM,SAAS;AAAA,MACvC,OAAO,YACN,SACA,MACA,QACA,EAAE,WAAW,MAAM,QAAQ,GAC3B,EACD;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,mBAAmB,SAAS,MAAM,cAAc,OAAO,KAAK;AAAA,EAClE,MAAM,YAAY,WAAW;AAAA,EAC7B,OAAO,OAAO,OAAO;AAAA,IACpB;AAAA,IACA,MAAM,SAAS,OAAO,MACrB,gBAAgB,SAAS,MAAM,OAAO,SAAS,CAChD;AAAA,EACD,CAAC;AAAA;AAIF,eAAe,eAAe,CAC7B,SACA,MACA,OACA,WACsC;AAAA,EAEtC,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC,QAAQ;AAAA,EACT,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,cAAc,MAAM;AAAA,EAC7D,OAAO;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,OAAO;AAAA,IACP;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,WAAW,CACzB,SACA,MACA,QACA,OAKA,IACiC;AAAA,EACjC,MAAM,QAAQ,GAAG,oBAAoB;AAAA,EACrC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,MAAM,SAAS,OAAO,MAAM,SAAS;AAAA,EACrC,MAAM,OAAO,MAAM;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,cACA,OACA,KAAK,IACN;AAAA,EAKA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,IAAI,CAAC,GAAG;AAAA,IAE9C,IAAI,MAAM,aAAa,eAAe;AAAA,MACrC,MAAM,YAAY,SAAS,QAAQ,YAAY;AAAA,IAChD;AAAA,IACA,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EAEA,MAAM,aAAa,SAAS,QAAQ,cAAc,OAAO,WAAW;AAAA,EACpE,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;ACtJF,IAAM,QAAQ,CAAC,SAAkB,QAAgB,UAChD,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAO3D,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,OAAO,QAAQ,iBAAiB;AAAA,EACxC,IAAI,SAAS,KAAK,YAAY,GAAG;AAAA,IAChC,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,wBACA,GAAG,mGACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,IAAI,CAAC,YAAY,OAAO,QAAQ,IAAI,GAAG;AAAA,IACtC,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,EAClC,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA;AAU7C,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,QAAQ,iBAAiB;AAAA,EACjC,MAAM,SAAS,KAAK;AAAA,EACpB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,8BACA,GAAG,2EACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,aAAa,MAAM,oBACxB,SACA,WAAW,QACX,MACA,KACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,KAAK;AAAA,EACtE,IAAI,aAAa,MAAM;AAAA,IACtB,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YACL,OACA,KAAK,IACL,KAAK,MACL,KAAK,IAAI,cAAc,UAAU,CAClC;AAAA,EACD;AAAA,EAGA,MAAM,QAAQ,MAAM,MAAM,WACzB,KAAK,IACL,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,KAAK,OACN;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA;;;ACxFnC,eAAsB,UAAU,CAC/B,SACA,MACA,SACA,OACA,QACA,OACwB;AAAA,EACxB,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO,IAAI,WAAW;AAAA,EACtE,IAAI,YAAY,QAAQ,QAAQ,WAAW,MAAM,QAAQ;AAAA,IACxD,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAAA,IAChE,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;ACzBxB,eAAsB,aAAa,CAClC,SACA,MACA,MACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAAS,OAAO,YAAY,IACxC,MAAM,MAAM,SAAS,QAAQ,KAAK,IAClC,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,EAG7C,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,UACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,SAAS,CAC5B;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,KAAK,CACnB,SACA,QACA,OACgC;AAAA,EAChC,gBAAgB,SAAS,OAAO,oCAAoC;AAAA,EACpE,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,OAAO,CACrB,SACA,MACA,QACA,OACkC;AAAA,EAClC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAGA,MAAM,gBAAgB,SAAS,MAAM,UAAU,OAAO,IAAI,KAAK;AAAA,EAC/D,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;;;AClFM,SAAS,WAAW,CAC1B,SACA,MACA,IAC6C;AAAA,EAC7C,OAAO;AAAA,SACA,QAAO,CAAC,MAAM;AAAA,MACnB,OAAO,cAAc,SAAS,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAAA;AAAA,SAGzD,QAAO,CAAC,SAAS,WAAW,MAAM;AAAA,MACvC,OAAO,cACN,SACA,MACA,SACA,OAAO,SAAS,GAChB,OAAO,IAAI,GACX,GAAG,gBAAgB,CACpB;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,aAAa,CAC3B,SACA,MACA,SACA,QACA,MACA,OACmB;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,UACA,OACA,KAAK,IACN;AAAA,EACA,QAAQ,SAAS,SAAS,MAAM,WAC/B,SACA,MACA,SACA,OACA,QACA,KACD;AAAA,EAEA,MAAM,UAAU,EAAE,OAAO,QAAQ,aAAa;AAAA,EAE9C,IAAI,MAAM,aAAa,MAAM;AAAA,IAC5B,MAAM,aAAa,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA,EAC7D,EAAO;AAAA,IACN,MAAM,iBAAiB,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA;AAAA,EAGjE,MAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,sBAC9C,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,EAEA,IAAI,cAAc,MAAM;AAAA,IACvB,MAAM,IAAI,YACT,iBACA,GAAG,gEACH,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,OAAO,UAAU,SAAS;AAAA;;;ACtFpB,SAAS,gBAAgB,CAC/B,SACA,MAC0B;AAAA,EAC1B,OAAO;AAAA,SACA,YAAW,CAAC,OAAO;AAAA,MAExB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM;AAAA,QAAI,OAAO;AAAA,MAC7D,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,MACvD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,EAE/C;AAAA;;;ACXM,IAAM,UAAU,OACtB,SACA,MACA,UAEA,WAAW,KAAK,IACb,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,KAAK,IACpD;;;ACCJ,eAAsB,cAAc,CACnC,SACA,MACA,MACA,QACA,SACA,OACsB;AAAA,EACtB,aAAa,MAAM,KAAK;AAAA,EACxB,cAAc,MAAM,QAAQ,MAAM,KAAK;AAAA,EACvC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAE3C,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,IACC,OAAO,aAAa,QACpB,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,SAAS,KAAK,GAC7D;AAAA,MACD,MAAM,IAAI,iBACT,uBACA,GAAG,8CACH;AAAA,QACC,QAAQ,OAAO,aAAa,OAAO,eAAe;AAAA,QAClD,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO;AAAA,MACN,UAAU;AAAA,QACT,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI;AAAA,QACnC,WAAW;AAAA,MACZ;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACtC,OAAO;AAAA;;;AC9CR,eAAsB,MAAM,CAC3B,SACA,MACA,OACA,OACsB;AAAA,EACtB,QAAQ,OAAO,UAAU;AAAA,EACzB,QAAQ,UAAU,WAAW,SAAS,SAAS,CAAC;AAAA,EAChD,MAAM,MAAM,MAAM,IAAI;AAAA,EACtB,MAAM,SAAS,MAAM,eAAe,MAAM,MAAM,KAAK;AAAA,EAErD,IAAI,OAA+B;AAAA,EACnC,IAAI,aAAa,WAAW;AAAA,IAC3B,cAAc,MAAM,UAAoB,KAAK;AAAA,IAC7C,OAAO;AAAA,MACN,MAAM,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAkB;AAAA,MACjE,WAAW;AAAA,IACZ;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,MAAM,WAAW;AAAA,IAC7C,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,IACpB,QAAQ,WAAW,YAAY,OAAO,WAAW;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACZ,CAAC;AAAA,EAGD,MAAM,KAAK,SAAS,gBAAgB,UAAU,SAAS,SAAS;AAAA,EAChE,OAAO;AAAA;;;ACxBR,eAAsB,MAAM,CAC3B,SACA,MACA,QACA,OACA,MACiC;AAAA,EACjC,QAAQ,OAAO,WAAW;AAAA,EAC1B,MAAM,OAAO,aAAa,MAAM,KAAK;AAAA,EACrC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAC3C,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,MAAM,WAAW,QAAQ;AAAA,EAEzB,MAAM,aAAa,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI;AAAA,EAGvE,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,mBAAmB,SAAS,MAAM,YAAY,KAAK;AAAA,EAC1D;AAAA,EACA,MAAM,SACL,eAAe,OAAO,OAAO,MAAM,QAAQ,SAAS,MAAM,UAAU;AAAA,EACrE,MAAM,SAAS,CAAC,WACf,IAAI,iBACH,uBACA,GAAG,kDACH,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EAED,IAAI,WAAW,QAAQ,OAAO,aAAa,MAAM;AAAA,IAIhD,MAAM,OAAO,OAAO,OAAO,QAAQ,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,IAC/D,MAAM,OAAO,WAAW,OAAO,iBAAiB,YAAY;AAAA,EAC7D;AAAA,EAEA,IAAI,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,QAAQ,GAAG,KAAK,GAAI;AAAA,IACvE,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAGA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAKA,IAAI,CAAC,SAAS,OAAO,YAAY,GAAG;AAAA,IACnC,MAAM,mBAAmB,SAAS,MAAM,QAAQ,KAAK;AAAA,EACtD;AAAA,EACA,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,EACjE,MAAM,SAAS,MAAM,OAAO,UAAU,OAAO,MAAM;AAAA,EAGnD,IACC,CAAE,MAAM,eACP,SACA,MACA,UACA,OAAO,QAAQ,GACf,QACA,KACD,GACC;AAAA,IACD,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAEA,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;AC1ED,SAAS,aAAa,CAC5B,SACA,MACA,IACA,QAC6D;AAAA,EAC7D,OAAO;AAAA,SACA,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,aAAa,MAAM,KAAK;AAAA,MACxB,IAAK,QAAkB,gBAAgB,WAAW;AAAA,QACjD,cAAc,MAAM,WAAgC,KAAK;AAAA,MAC1D;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,OAAgB,KAAK;AAAA,MAChE,OAAO,YAAY,SAAS,MAAM,QAAQ,QAAQ,IAAI;AAAA;AAAA,SAGjD,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,OAAO,SAAS,MAAM,QAAQ,OAAgB,EAAE,OAAO,OAAO,CAAC;AAAA;AAAA,SAGjE,YAAW,CAAC,OAAO;AAAA,MACxB,MAAM,OAAO,aAAa,MAAM,GAAG,aAAa,CAAC;AAAA,MACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,MACjE,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,YAAW,CAAC,MAAM,UAAU,SAAS;AAAA,MAC1C,MAAM,QAAQ,GAAG,aAAa;AAAA,MAC9B,aAAa,MAAM,KAAK;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK;AAAA,MACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,MAE9D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,IAAI,EAAE,EACnD;AAAA,MACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,MACtC,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,eAAc,CAAC,MAAM,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,GAAG,gBAAgB;AAAA,MACjC,OAAO,OACN,MAAM,eAAe,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,CACjE;AAAA;AAAA,EAEF;AAAA;;;ACpED,eAAsB,UAAU,CAC/B,SACA,MACA,MACmB;AAAA,EACnB,QAAQ,OAAO,UAAU;AAAA,EACzB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EAItB,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS,EAAE;AAAA,EAC5C,IAAI,WAAW,QAAQ,OAAO,SAAS,KAAK;AAAA,IAAM,OAAO;AAAA,EAMzD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,MAAM,UAAU,WAAW,QAAS,MAAM,MAAM,MAAM,WAAW,EAAE;AAAA,EACnE,IAAI;AAAA,IACH,MAAM,MAAM,SAAS,mBAAmB,EAAE;AAAA,IAC1C,MAAM,MAAM,OAAO,iBAAiB,EAAE;AAAA,IAEtC,MAAM,QAAQ,WAAW,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,YAC5D;AAAA,IAID,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,gBAAgB,EAAE,IAAI,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,IACvE;AAAA;AAAA,EAED,OAAO;AAAA;;;AC7BD,IAAM,kBAAkB;AAOxB,IAAM,wBAAwB;AAWrC,eAAsB,eAAe,CACpC,SACA,KACA,MACA,OACwB;AAAA,EACxB,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AAAA,IACxB,MAAM,IAAI,UAAU,GAAG,yCAAyC;AAAA,EACjE;AAAA,EAEA,MAAM,SAAS;AAAA,IACd,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,MAAK,EAAE,CAAC,CAAC;AAAA,EAClE;AAAA,EACA,MAAM,QAAQ,IAAI;AAAA,EAElB,SAAS,QAAQ,EAAG,QAAQ,OAAO,QAAQ,SAAS,iBAAiB;AAAA,IACpE,MAAM,QAAQ,OAAO,MAAM,OAAO,QAAQ,eAAe;AAAA,IACzD,WAAW,UAAU,MAAM,UAAU,SAAS,KAAK,GAAG;AAAA,MACrD,IAAI,OAAO,SAAS;AAAA,QAAM,MAAM,IAAI,OAAO,IAAI,MAAM;AAAA,IACtD;AAAA,EACD;AAAA,EAIA,OAAO,OAAO,QAAQ,CAAC,OAAO;AAAA,IAC7B,MAAM,SAAS,MAAM,IAAI,EAAE;AAAA,IAC3B,OAAO,WAAW,YAAY,CAAC,IAAI,CAAC,MAAM;AAAA,GAC1C;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,KACiC;AAAA,EACjC,QAAQ,UAAU,QAAQ;AAAA,EAE1B,IAAI,QAAQ,aAAa,aAAa,MAAM,cAAc,WAAW;AAAA,IACpE,MAAM,SAAkB,MAAM,MAAM,UAAU,GAAG;AAAA,IACjD,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAAA,MAC3B,MAAM,IAAI,cACT,kGACA,EAAE,MAAM,SAAS,WAAW,YAAY,CACzC;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,UAAwB,CAAC;AAAA,EAC/B,SAAS,QAAQ,EAAG,QAAQ,IAAI,QAAQ,SAAS,uBAAuB;AAAA,IACvE,MAAM,UAAU,MAAM,QAAQ,IAC7B,IACE,MAAM,OAAO,QAAQ,qBAAqB,EAC1C,IAAI,CAAC,OAAO,MAAM,SAAS,EAAE,CAAC,CACjC;AAAA,IACA,WAAW,UAAU;AAAA,MAAS,IAAI,WAAW;AAAA,QAAM,QAAQ,KAAK,MAAM;AAAA,EACvE;AAAA,EACA,OAAO;AAAA;;;ACrFR,IAAM,aAAa,CAAC,UACnB,UAAU,OAAO,OAAO,eAAe,KAAK;AAOtC,SAAS,YAAY,CAC3B,MACA,QACA,OACU;AAAA,EACV,OAAO,WAAW,QAAQ,MAAM,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,KAAK,CAAC;AAAA;AAO7E,eAAsB,WAAW,CAChC,MACA,QACA,OACA,OACC;AAAA,EACD,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,OAAO,WAAW,MAAM,GAC7B,KACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,eAAe,KAAK;AAAA,OAEhB,aAAa,MAAM,OAAO,QAAQ,MAAM,IACzC,EAAE,iBAAiB,KAAK,IACxB,CAAC;AAAA,EACL;AAAA;;;AChCD,eAAsB,MAAM,CAC3B,SACA,MACA,MACA,OACA,SACA,OACsB;AAAA,EAItB,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,KAAK,WAAW;AAAA,IAChB,OAAO,YAAY,MAAM,QAAQ,OAAO,KAAK;AAAA,GAE/C;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,IACC,aAAa,QACb,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM,GACjD;AAAA,IACD,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,MACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,IAC3C,CAAC;AAAA,EACF;AAAA,EACA,OAAO;AAAA;;;ACtBD,SAAS,WAAW,CAC1B,SACA,MACA,IAC8B;AAAA,EAC9B,QAAQ,UAAU;AAAA,EAElB,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,MAAM,OAAO,SAAS,MAAM,OAAgB,GAAG,QAAQ,CAAC,CAAC;AAAA;AAAA,SAGlE,KAAI,CAAC,IAAI;AAAA,MACd,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,KAAK,IAAI;AAAA,MACtD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,SAAQ,CAAC,KAAK;AAAA,MACnB,MAAM,UAAU,MAAM,gBACrB,SACA,KACA,KAAK,MACL,GAAG,UAAU,CACd;AAAA,MACA,OAAO,QAAQ,IAAI,MAAM;AAAA;AAAA,SAGpB,IAAG,CAAC,IAAI;AAAA,MACb,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC;AAAA;AAAA,SAG3D,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,MAAM,SAAS;AAAA,MAG7B,IAAI,UAAU,QAAQ,CAAC,MAAK,KAAK,GAAG;AAAA,QACnC,MAAM,eAAc,GAAG,MAAM,GAAG,KAAK;AAAA,MACtC;AAAA,MAEA,MAAM,SAAS,MAAM,MAAM,MAAM,UAAU;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX;AAAA,QACA,OAAO,WAAU,MAAM,OAAO,GAAG,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,MACD,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,YAAY,OAAO,WAAW;AAAA;AAAA,SAGnE,OAAM,CAAC,MAAM,OAAO,SAAS;AAAA,MAClC,OAAO,OACN,MAAM,OACL,SACA,MACA,MACA,OACA,SACA,GAAG,QAAQ,CACZ,CACD;AAAA;AAAA,SAGK,UAAS,CAAC,MAAM,QAAQ,SAAS;AAAA,MACtC,OAAO,OACN,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,OAAO;AAAA,QACrE,QAAQ,WAAW;AAAA,MACpB,EAAE,CACH;AAAA;AAAA,SAGK,OAAM,CAAC,MAAM;AAAA,MAClB,OAAO,WAAW,SAAS,MAAM,IAAI;AAAA;AAAA,EAEvC;AAAA;;;AC3EM,SAAS,OAAO,CAAC,SAAkB,MAAgC;AAAA,EACzE,MAAM,KAAS,CAAC,cACf,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,QAAQ;AAAA,EACrD,MAAM,eAAe,kBAAkB,SAAS,MAAM,EAAE;AAAA,EACxD,MAAM,aAAa,gBAAgB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,EAEzE,OAAO;AAAA,OACH,YAAY,SAAS,MAAM,EAAE;AAAA,OAC7B,cAAc,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,OACpD,kBAAkB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAE3D,cAAc,aAAa;AAAA,IAC3B;AAAA,IACA,WAAW,eAAe,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAChE,QAAQ,YAAY,SAAS,MAAM,EAAE;AAAA,OAElC,iBAAiB,SAAS,IAAI;AAAA,OAC9B,WAAW,SAAS,MAAM,EAAE;AAAA,EAChC;AAAA;;ACSM,SAAS,KAAkC,CACjD,QACW;AAAA,EACX,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW,cAAc,QAAQ,KAAK;AAAA,EAC5C,mBAAmB,UAAU,KAAK;AAAA,EAClC,MAAM,eAAe,aAAa,OAAO,OAAO,KAAK;AAAA,EAErD,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,MAAM,YAAY;AAAA,IACjB,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM;AAAA,IAClC,GAAI,OAAO,aAAa,CAAC;AAAA,EAC1B;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,YAAY,WAAW;AAAA,IACjC,IAAI,OAAO,UAAU,WAAW,YAAY,SAAS,WAAW,IAAI;AAAA,MACnE,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,IACtE;AAAA,IACA,IAAI,SAAS,IAAI,SAAS,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,UACT,GAAG,wCAAwC,SAAS,0DACrD;AAAA,IACD;AAAA,IACA,SAAS,IAAI,SAAS,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,OAAO,aAAa;AAAA,EACtC,IACC,cAAc,QACd,OAAQ,UAAyC,iBAAiB,YACjE;AAAA,IACD,MAAM,IAAI,UACT,GAAG,+EACJ;AAAA,EACD;AAAA,EAEA,MAAM,UAAU,cACf,UACA,YAAY,OAAO,KAAK,GACxB,cAAc,OAAO,OAAO,eAAe,SAAS,GACpD,cACA,OAAO,SAAS,aAChB,QACA,WACA,cAAc,OAAO,QAAQ,KAAK,CACnC;AAAA,EAEA,MAAM,SAAS,UAAU,OAAO;AAAA,EAChC,MAAM,QAAQ,OAAO,YACpB,CAAC,GAAG,SAAS,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1C,KAAK;AAAA,IACL,QAAQ,SAAS,IAAI;AAAA,EACtB,CAAC,CACF;AAAA,EAIA,MAAM,UAAU,SAAS,SACtB,KAAK,WAAW,MAAM,QAAQ,IAC9B,KAAK,WAAW,MAAM;AAAA,EACzB,OAAO;AAAA;;AC/ED,SAAS,WAAW,CAC1B,SACA,QACA,QAAe,aACR;AAAA,EACP,MAAM,WAAW,cAAc,QAAQ,qBAAqB;AAAA,EAC5D,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,EACpE,IAAI,OAAO,UAAU;AAAA,IACpB,MAAM,IAAI,qBACT,6FACA,EAAE,QAAQ,QAAQ,OAAO,CAC1B;AAAA,EACD;AAAA;",
94
- "debugId": "D104C8FB67042A0864756E2164756E21",
95
+ "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,SAAS,YAAY,CAAC,SAEV;AAAA,EAClB,MAAM,OAAO,SAAS,QAAQ;AAAA,EAC9B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM,OAAO,IAAI;AAAA,IACtD,MAAM,IAAI,UACT,uFACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,SACF,KAAI,CAAC,OAAO;AAAA,MACjB,MAAM,OAAO,YAAY,EAAE;AAAA,MAC3B,MAAM,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,GAAG,CAAC;AAAA,MAChD,OAAO,GAAG,mBAAmB,gBAAgB,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ;AAAA;AAAA,SAExF,OAAM,CAAC,OAAO,MAAM;AAAA,MACzB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAIpC,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UACT,0EACD;AAAA,MACD;AAAA,MACA,SAAS,IAAI,GAAG,GAAG,MAAM,OAAO;AAAA,MAQhC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;AAAA,MAC1C,MAAM,SAAS,MAAM,OACpB,OACA,OAAO,KAAK,MAAM,QAAQ,GAC1B,OAAO,EAAE,GACT,OAAO,CAAC,GACR,OAAO,CAAC,GACR,SAAS,MACV;AAAA,MACA,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAAA,IAExC,WAAW,CAAC,MAAM;AAAA,MACjB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAEpC,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAC5B,SAAS,IAAI,GAAG,KAAK;AAAA,MACrB,OAAO,OAAO,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA;AAAA,EAEnD;AAAA;AAGD,IAAM,gBAAgB;AACtB,IAAM,cACL;AAED,SAAS,MAAM,CACd,OACA,MACA,IACA,GACA,GACA,SAAS,IACS;AAAA,EAGlB,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,IAIvC,OACC,OACA,MACA,QACA,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,MAAM,IAAI,EAAE,GACjE,CAAC,OAAO,QAAS,QAAQ,OAAO,KAAK,IAAI,QAAQ,GAAG,CACrD;AAAA,GACA;AAAA;AAWK,SAAS,SAAS,GAAmB;AAAA,EAG3C,MAAM,WACL,OAAO,QAAQ,cAAc,YAAY,IAAI;AAAA,EAE9C,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,IAAI,UACT,iGACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ;AAAA,IAC9C,QAAQ,CAAC,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAAA,IACpD,aAAa,CAAC,SAAS,CAAC,KAAK,WAAW,mBAAmB;AAAA,EAC5D;AAAA;AASD,IAAM,WAAW;AAAA,EAChB,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,UAAU;AACX;AACA,IAAM,sBAAsB;;ACjIrB,IAAM,cAAqB;AAAA,EACjC,KAAK,MAAM,IAAI;AAChB;AASO,SAAS,UAAU,CAAC,QAAuB,GAGhD;AAAA,EACD,IAAI,KAAK,iBAAiB,OAAO,MAAM,QAAQ,IAAI;AAAA,EAEnD,OAAO;AAAA,IACN,KAAK,MAAM,IAAI,KAAK,EAAE;AAAA,IACtB,SAAS,CAAC,OAAO;AAAA,MAChB,MAAM;AAAA;AAAA,IAEP,KAAK,CAAC,OAAO;AAAA,MACZ,KAAK,cAAc,OAAO,GAAG,QAAQ,IAAI;AAAA;AAAA,EAE3C;AAAA;;;ACzBD,IAAM,cAAc;AAAA,EACnB,MAAM,CAAC,UAAkB;AAAA,EACzB,WAAW,CAAC,UAAkB,MAAM,YAAY;AAAA,EAChD,eAAe,CAAC,UAAkB,MAAM,YAAY,EAAE,KAAK;AAAA,EAC3D,mBAAmB,CAAC,UACnB,MAAM,UAAU,MAAM,EAAE,YAAY,EAAE,KAAK;AAC7C;AAGO,IAAM,iBAAiB,YAAY;AAGnC,SAAS,UAAU,CACzB,MACA,OAC4B;AAAA,EAC5B,IAAI,OAAO,SAAS;AAAA,IAAY,OAAO;AAAA,EACvC,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,IAAI,GAAG;AAAA,IACjE,OAAO,YAAY;AAAA,EACpB;AAAA,EAEA,MAAM,IAAI,UACT,GAAG,uFACJ;AAAA;;ACpCM,IAAM,cAAc;AAMpB,IAAM,kBAAkB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGO,IAAM,iBAAiB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;;ACzBA,IAAM,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACJ;AAEA,IAAM,UAAU;AAcT,SAAS,aAAa,CAAC,OAAiB,OAAuB;AAAA,EACrE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,MAC1C,MAAM,IAAI,UACT,GAAG,sEACJ;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAEhC,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,IAAI,UACT,GAAG,WAAW,qGACf;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,OAAO,MAAM,EAAE;AAAA,EAC9B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,MAAM;AAAA,EAE1B,IAAI,MAAM,GAAG;AAAA,IACZ,MAAM,IAAI,UAAU,GAAG,sCAAsC;AAAA,EAC9D;AAAA,EAEA,OAAO;AAAA;;;AClDD,IAAM,OAAO;AAGb,SAAS,SAAS,CAAC,OAAgB,OAAuB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA,IACnD,MAAM,IAAI,UACT,GAAG,kEACJ;AAAA,EACD;AAAA,EACA,IAAK,gBAAsC,SAAS,KAAK,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,GAAG,WAAW,qCAAqC;AAAA,EACxE;AAAA,EACA,OAAO;AAAA;;;ACdR,IAAM,cAAc;AAEb,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,MAAM,OAAO,OAAO,QAAQ;AAAA,EAC5B,IAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,kHACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,OAAO,YAAY;AAAA,EACpC,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,IAAI,aAAa,UAAU,CAAC,QAAQ;AAAA,IACnC,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,OAAO,UAAU;AAAA,IACzB,MAAM,OAAO,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AAAA;;;AChCD,0DAA2C;AA6B3C,IAAM,YAAY;AAElB,IAAM,SAAS;AACf,IAAM,MAAM;AAGL,SAAS,aAAa,CAAC,MAAe,OAAuB;AAAA,EACnE,IAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAAA,IAC9C,MAAM,IAAI,UACT,GAAG,mEACJ;AAAA,EACD;AAAA,EACA,MAAM,UAAU,IAAI;AAAA,EACpB,WAAW,SAAS,MAA+B;AAAA,IAClD,MAAM,KAAK,OAAO;AAAA,IAClB,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,KAAK,EAAE,GAAG;AAAA,MAC/C,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,IACD;AAAA,IACA,IAAI,QAAQ,IAAI,EAAE,GAAG;AAAA,MACpB,MAAM,IAAI,UAAU,GAAG,gCAAgC,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,MAAM,MAAM;AAAA,IAClB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GAAG,GAAG;AAAA,MAC9C,MAAM,IAAI,UACT,GAAG,mBAAmB,uEACvB;AAAA,IACD;AAAA,IACA,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,EAAE,UAAW,KAAK,GAAkB,IAAI,MAAM,QAAQ;AAAA;AAIvD,SAAS,IAAI,CAAC,QAAgB,OAAe,SAAyB;AAAA,EAC5E,MAAM,MAAM,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,EAC3C,MAAM,KAAK,aAAY,EAAE;AAAA,EACzB,MAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AAAA,EACpD,OAAO,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,EAClC,MAAM,SAAS,OAAO,OAAO;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM;AAAA,IAC3B,OAAO,MAAM;AAAA,IACb,OAAO,WAAW;AAAA,EACnB,CAAC;AAAA,EACD,OAAO,MAAM,OAAO,YAAY,GAAG,SAAS,WAAW,KAAK,OAAO,SAAS,WAAW;AAAA;AAUjF,SAAS,MAAM,CACrB,QACA,QACA,SACA,OACqD;AAAA,EACrD,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,OAAO,SAAS,OAAO,IAAI,QAAQ;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK,QAAQ,IAAI,WAAW;AAAA,EAEjD,IACC,MAAM,WAAW,KACjB,YAAY,QACZ,UAAU,aACV,OAAO,aACP,MAAM,UAAU,WACf;AAAA,IACD,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,EACtE;AAAA,EACA,MAAM,MAAM,OAAO,KAAK,IAAI,KAAK;AAAA,EACjC,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,IAAI,UACT,GAAG,6CAA6C,gGACjD;AAAA,EACD;AAAA,EACA,IAAI;AAAA,IACH,MAAM,WAAW,iBAChB,eACA,KACA,OAAO,KAAK,IAAI,WAAW,GAC3B,EAAE,eAAe,UAAU,CAC5B;AAAA,IACA,SAAS,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,IACpC,SAAS,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;AAAA,IAC5D,MAAM,QAAQ,OAAO,OAAO;AAAA,MAC3B,SAAS,OAAO,MAAM,SAAS,GAAG,MAAM,SAAS,SAAS,CAAC;AAAA,MAC3D,SAAS,MAAM;AAAA,IAChB,CAAC,EAAE,SAAS,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,MAAM;AAAA,IACrB,OAAO,OAAO;AAAA,IACf,MAAM,IAAI,UACT,GAAG,iDAAiD,4FACpD,EAAE,MAAM,CACT;AAAA;AAAA;;;ACzHK,SAAS,cAAc,CAC7B,QACA,OAC4B;AAAA,EAC5B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EAEjC,OAAO,EAAE,QAAQ,cAAc,QAAQ,MAAM,GAAG,qBAAqB,EAAE;AAAA;;;ACLjE,SAAS,mBAAmB,CAClC,QACA,OACiC;AAAA,EACjC,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,KAAK,GAAG;AAAA,EACd,IAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,KAAK,MAAM,IAAI;AAAA,IACtE,MAAM,IAAI,UACT,GAAG,0FACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,QAAQ,cAAc,OAAO,MAAM,GAAG,SAAS;AAAA,IAC/C,gBAAgB,cAAc,OAAO,aAAa,MAAM,GAAG,cAAc;AAAA,EAC1E;AAAA;;;ACMM,SAAS,qBAAqB,CACpC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,UAAU,UAAU,IAAI,QAAQ,MAAM,GAChD,KACD;AAAA;AAWM,SAAS,mBAAmB,CAClC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,QAAQ,UAAU,GAAG,QAAQ,MAAM,GAC7C,KACD;AAAA;AAGD,SAAS,eAAe,CACvB,QACA,UACA,OACmB;AAAA,EACnB,QAAQ,WAAW;AAAA,EACnB,IAAI,WAAW,cAAc,OAAO,WAAW,YAAY,WAAW,OAAO;AAAA,IAC5E,MAAM,IAAI,UAAU,GAAG,UAAU,yCAAyC;AAAA,EAC3E;AAAA,EACA,MAAM,WAAW,QAAQ,YAAY,CAAC;AAAA,EACtC,IAAI,aAAa;AAAA,IAAO,OAAO;AAAA,EAC/B,MAAM,KAAK,GAAG,UAAU;AAAA,EACxB,IAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AAAA,IACtD,MAAM,IAAI,UACT,GAAG,4DACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,SAAS,YAAY,SAAS;AAAA,EAC/C,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,GAAG;AAAA,IACpD,MAAM,IAAI,UAAU,GAAG,+CAA+C;AAAA,EACvE;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA,UAAU,cAAc,SAAS,UAAU,SAAS,QAAQ,GAAG,WAAW;AAAA,EAC3E;AAAA;;;ACxEM,SAAS,WAAW,CAC1B,MACA,MACA,IACA,WACe;AAAA,EACf,IACC,OAAO,MAAM,WAAW,YACxB,KAAK,WAAW,QAChB,OAAO,KAAK,OAAO,cAAc,aAAa,YAC7C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,OAAO,0EACX;AAAA,EACD;AAAA,EAEA,MAAM,WACL,KAAK,aAAa,YAAY,OAAO,gBAAgB,KAAK,UAAU,EAAE;AAAA,EAEvE,MAAM,aAAa,KAAK,SAAS,cAAc;AAAA,EAE/C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO,UAAU,KAAK,SAAS,SAAS,GAAG,WAAW;AAAA,IACtD,YAAY,cACX,KAAK,SAAS,YAAY,MAC1B,GAAG,sBACJ;AAAA,IACA,cACC,eAAe,QACZ,OACA,cAAc,YAAY,GAAG,wBAAwB;AAAA,EAC1D;AAAA;AAGD,SAAS,eAAe,CACvB,UACA,IACwC;AAAA,EACxC,MAAM,YAAY,SAAS,aAAa;AAAA,EACxC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,yDACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,OAAO,UAAU,SAAS,OAAO,GAAG,oBAAoB;AAAA,IACxD,WAAW,WACV,SAAS,aAAa,iBACtB,GAAG,wBACJ;AAAA,IACA;AAAA,EACD;AAAA;;;AC3CM,SAAS,aAAa,CAC5B,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UAAU,GAAG,wCAAwC;AAAA,EAChE;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,WAAW,OAAO,UAAU;AAAA,EAClC,IAAI,YAAY,UAAU;AAAA,IACzB,MAAM,IAAI,UACT,GAAG,gGACJ;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ,aAAa,UAAU,QAAQ,QAAQ,GAAG,UAAU,KAAK;AAAA,EACvE,2BAA2B,QAAQ,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA,IACN,QAAQ,CAAC;AAAA,IACT;AAAA,IACA,YAAY,iBAAiB,QAAQ,KAAK;AAAA,IAC1C,QAAQ,cAAc,OAAO,UAAU,CAAC,GAAG,KAAK;AAAA,IAChD,gBAAgB,sBAAsB,OAAO,QAAQ,KAAK;AAAA,IAC1D,cAAc,oBAAoB,OAAO,MAAM,KAAK;AAAA,IACpD,cAAc,oBAAoB,OAAO,cAAc,KAAK;AAAA,IAC5D,SAAS,eAAe,OAAO,SAAS,KAAK;AAAA,EAC9C;AAAA;AAID,SAAS,SAAS,CACjB,QACA,UAC6B;AAAA,EAC7B,OAAO,WACJ,OAAO,QAAQ,OAAO,KAAiC,IACvD;AAAA,IACA;AAAA,MACC;AAAA,MACA;AAAA,WACK;AAAA,QACJ,QAAQ,OAAO;AAAA,MAChB;AAAA,IACD;AAAA,EACD;AAAA;AAGH,SAAS,YAAY,CACpB,SACA,UACA,OAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW,GAAG;AAAA,IACzB,MAAM,IAAI,UAAU,GAAG,oCAAoC;AAAA,EAC5D;AAAA,EAEA,MAAM,QAAQ,IAAI;AAAA,EAClB,YAAY,MAAM,SAAS,SAAS;AAAA,IACnC,MAAM,KAAK,WAAW,GAAG,gBAAgB,SAAS;AAAA,IAElD,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AAAA,MACrB,MAAM,IAAI,UACT,GAAG,yBAAyB,6EAC7B;AAAA,IACD;AAAA,IACA,IAAK,eAAqC,SAAS,IAAI,GAAG;AAAA,MACzD,MAAM,IAAI,UACT,GAAG,WAAW,uEACf;AAAA,IACD;AAAA,IACA,MAAM,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,WAAW,WAAW,MAAM,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGR,SAAS,0BAA0B,CAClC,QACA,OACA,OACO;AAAA,EACP,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI;AAAA,EACzE,IAAI,WAAW,OAAO,WAAW,WAAW;AAAA,IAC3C,MAAM,IAAI,UACT,GAAG,sJACJ;AAAA,EACD;AAAA;AAGD,SAAS,gBAAgB,CACxB,QACA,OAC+B;AAAA,EAC/B,OAAO;AAAA,IACN,aAAa,cACZ,OAAO,QAAQ,eAAe,OAC9B,GAAG,2BACJ;AAAA,IACA,eAAe,cACd,OAAO,QAAQ,iBAAiB,MAChC,GAAG,6BACJ;AAAA,IACA,YAAY,cACX,OAAO,QAAQ,cAAc,OAC7B,GAAG,0BACJ;AAAA,IACA,WAAW,cACV,OAAO,QAAQ,aAAa,OAC5B,GAAG,yBACJ;AAAA,IACA,QAAQ,cACP,OAAO,QAAQ,UAAU,OACzB,GAAG,sBACJ;AAAA,IACA,aAAa,cACZ,OAAO,QAAQ,eAAe,MAC9B,GAAG,2BACJ;AAAA,EACD;AAAA;;ACjID,IAAM,QAAQ;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAEA,IAAM,SAAgD;AAAA,EACrD,CAAC,KAAK,QAAU;AAAA,EAChB,CAAC,KAAK,OAAS;AAAA,EACf,CAAC,KAAK,KAAM;AAAA,EACZ,CAAC,KAAK,IAAK;AACZ;AAGA,SAAS,IAAI,CAAC,IAAoB;AAAA,EACjC,MAAM,OAAO,OAAM,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC;AAAA,EACrD,OAAO,SAAS,YAAY,GAAG,SAAS,GAAG,KAAK,KAAK,KAAK,KAAK;AAAA;AAIzD,SAAS,qBAAqB,CACpC,UACA,OACgB;AAAA,EAChB,MAAM,WAAW,SAAS;AAAA,EAC1B,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,EACrC,MAAM,UAAU,MAAM,OACrB,CAAC,SAAS,SAAS,WAAW,QAAQ,SAAS,QAChD;AAAA,EACA,IAAI,QAAQ,WAAW;AAAA,IAAG,OAAO;AAAA,EACjC,MAAM,WAAW,KAAK,IACrB,GAAG,QAAQ,IAAI,CAAC,SAAS,SAAS,WAAW,KAAK,CACnD;AAAA,EACA,MAAM,QAAQ,QAAQ,IACrB,CAAC,SACA,UAAU,WAAW,KAAK,SAAS,WAAW,KAAK,yCAAyC,QAC9F;AAAA,EACA,OAAO,GAAG,UAAU,MAAM,KAAK,IAAI,+BAA+B,QAAQ,WAAW,IAAI,UAAU,iFAAiF,KAAK,QAAQ,uBAAuB,QAAQ,IAAI,CAAC,SAAS,UAAU,MAAM,EAAE,KAAK,IAAI,QAAQ;AAAA;AAI3Q,SAAS,kBAAkB,CACjC,UACA,OACO;AAAA,EACP,MAAM,UAAU,sBAAsB,UAAU,KAAK;AAAA,EACrD,IAAI,YAAY;AAAA,IAAM;AAAA,EACtB,IACC,OAAO,YAAY,eACnB,OAAO,QAAQ,gBAAgB,YAC9B;AAAA,IACD;AAAA,EACD;AAAA,EACA,QAAQ,YAAY,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAAA;;;ACxCxD,SAAS,aAAa,CAC5B,QACA,OACA,WACA,cACA,OACA,QACA,WACA,SAAmC,MACzB;AAAA,EACV,IAAI,QAAgC;AAAA,EAEpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,MAAM;AAAA,MAChB,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UAAU,+CAA+C;AAAA,MACpE;AAAA,MACA,UAAU,OAAO,KAAK,eAAe,QAAO,GAAG;AAAA,MAC/C,OAAO;AAAA;AAAA,EAET;AAAA;;AC7CM,SAAS,OAAO,CAAC,MAAoB,QAAmC;AAAA,EAC9E,MAAM,QAAQ,OAAO,KAAK;AAAA,EAC1B,OAAO,OAAO,UAAU,WAAW,QAAQ;AAAA;AAQrC,SAAS,QAAQ,CACvB,MACA,QACA,OACW;AAAA,EACX,MAAM,SAAS,IAAI;AAAA,EAEnB,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,IAAI,OAAO,UAAU,UAAU;AAAA,MAC9B,MAAM,IAAI,UACT,0BAA0B,KAAK,SAAS,6CAA6C,KAAK,oDAC3F;AAAA,IACD;AAAA,IACA,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK;AAAA,IAIhD,IAAI,CAAC,WAAW,UAAU,GAAG;AAAA,MAC5B,MAAM,OAAO,CAAC,KAAK,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,4BAA4B,KAAK,KAAK,GAAG,MACvF;AAAA,QACC,QAAQ;AAAA,UACP,EAAE,MAAM,SAAS,8BAA8B,aAAa;AAAA,QAC7D;AAAA,QACA,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO,IAAI,UAAU;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,IAAI,UAAU;AAAA,IAAM,OAAO,IAAI,eAAe,KAAK,CAAC;AAAA,EAEpD,OAAO,CAAC,GAAG,MAAM;AAAA;AAQlB,eAAsB,aAAa,CAClC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,eAAe,KAAK;AAAA,EACnC,IAAI,CAAC,WAAW,MAAM;AAAA,IAAG,OAAO;AAAA,EAChC,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,MAAM;AAAA,EAC1E,MAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,MAAM,OAAO,MAAM;AAAA,EACjE,OAAO,SAAS,QAAQ,eAAe,IAAI,MAAM,SAAS,SAAS;AAAA;;ACtC7D,SAAS,WAAW,CAAC,QAAkC;AAAA,EAC7D,OAAO;AAAA,IACN,OAAO,WAAW,SAAS,OAAO,KAAK;AAAA,IACvC,UAAU,WAAW,YAAY,OAAO,QAAQ;AAAA,IAChD,QAAQ,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AAAA;AAUM,SAAS,QAAW,CAAC,OAAiB,QAA6B;AAAA,EACzE,IAAI,UAAU;AAAA,IAAM,MAAM,OAAO;AAAA,EACjC,OAAO;AAAA;AAaR,eAAsB,qBAAwB,CAC7C,OACoB;AAAA,EACpB,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAW,OAAO;AAAA,IACrE,MAAM;AAAA;AAAA;;;AC9DD,SAAS,YAAY,CAAC,MAAoB,OAAe;AAAA,EAC/D,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,4EACvB;AAAA,EACD;AAAA,EACA,OAAO,KAAK;AAAA;AAIN,SAAS,aAAa,CAC5B,MACA,UACA,OACO;AAAA,EACP,MAAM,YAAY,KAAK,UAAU,aAAa;AAAA,EAC9C,IAAI,OAAO,aAAa,YAAY,SAAS,SAAS,WAAW;AAAA,IAChE,MAAM,IAAI,iBACT,sBACA,GAAG,oDAAoD,wBACvD,EAAE,WAAW,UAAU,KAAK,KAAK,CAClC;AAAA,EACD;AAAA;AAIM,SAAS,aAAa,CAAC,SAAkB,OAA+B;AAAA,EAC9E,IAAI,QAAQ,WAAW,MAAM;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,yFACJ;AAAA,EACD;AAAA,EACA,OAAO,QAAQ;AAAA;AAOhB,eAAsB,eAAe,CACpC,SACA,QACA,UACA,OACmB;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,WAAW,QAAQ,UAAU,KAAK,CAAC,cACxC,OAAO,KAAK,WAAW,UAAU,MAAM,CACxC;AAAA,EACA,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,aAAa,aAAa,KAAK,OAAO,IAAI,IAAI,MAAM;AAAA,IAC1D,MAAM,IAAI,iBACT,oBACA,GAAG,+CAA+C,eAClD,EAAE,YAAY,QAAQ,OAAO,IAAI,UAAU,OAAO,KAAK,CACxD;AAAA,EACD;AAAA,EAEA,OAAO,SAAS,OAAO,UAAU,OAAO,IAAI;AAAA;AAY7C,eAAsB,QAAQ,CAC7B,SACA,QACA,UACsB;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW,QAAQ,WAAW;AAAA,IAAM,OAAO;AAAA,EAE/C,MAAM,QACL,CAAC,OAAO,KAAK,WAAW,OAAO,MAAM,KACrC,OAAO,cAAc,OAAO,IAAI,MAAM;AAAA,EACvC,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,MAAM,UAAU,MAAM,sBACrB,QAAQ,MAAM,MAAM,WACnB,OAAO,IACP;AAAA,IACC,WAAW,QAAQ,MAAM,IAAI;AAAA,IAE7B,UAAU;AAAA,MACT,MAAM,MAAM,OAAO,KAAK,QAAQ;AAAA,MAChC,WAAW,OAAO;AAAA,IACnB;AAAA,EACD,GACA,OAAO,OACR,CACD;AAAA,EACA,OAAO,WAAW;AAAA;;ACnGZ,SAAS,MAAM,CAAC,QAA6B;AAAA,EACnD,OAAO;AAAA,OACH,OAAO;AAAA,IACV,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,eAAe,OAAO,oBAAoB;AAAA,IAC1C,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO,aAAa;AAAA,IACjC,iBAAiB,OAAO,cAAc,eAAe;AAAA,IACrD,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACnB;AAAA;AAIM,IAAM,OAAO,CAAC,SACpB,OAAO,SAAS,WAAW,OAAO,KAAK;AAQjC,SAAS,KAAK,CAAC,MAAuB;AAAA,EAC5C,IAAI,OAAO,SAAS;AAAA,IAAU,OAAO;AAAA,EACrC,MAAM,KACL,OAAO,SAAS,YAAY,SAAS,OAAO,KAAK,KAAK;AAAA,EACvD,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA;;;AC5BtC,IAAM,WAAW,CAAC,OAAe,IAAY,SAC5C,IAAI,eACH,GAAG,aAAa,QAAQ,sBACxB,SAAS,OACN,EAAE,QAAQ,IAAI,WAAW,MAAM,IAC/B,EAAE,QAAQ,IAAI,UAAU,MAAM,WAAW,MAAM,CACnD;AAQD,eAAsB,UAAU,CAC/B,SACA,IACA,MAC6B;AAAA,EAC7B,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EACtB,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,SAAS,EAAE;AAAA,EACpD,OAAO,WAAW,SAAS,SAAS,QAAQ,OAAO,SAAS,QACzD,SACA;AAAA;AAIJ,eAAsB,SAAS,CAC9B,SACA,IACA,MACA,OACsB;AAAA,EACtB,OAAO,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,GAAG,MACpD,SAAS,OAAO,IAAI,IAAI,CACzB;AAAA;AASD,eAAsB,SAAS,CAC9B,SACA,MACA,MACA,SACA,OACA,SAIsB;AAAA,EACtB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,MAAM,YAAY,SAAS;AAAA,EAE3B,IAAI,cAAc,aAAa,cAAc,OAAO,SAAS;AAAA,IAC5D,MAAM,IAAI,eACT,WACA,GAAG,2BAA2B,oBAAoB,OAAO,WACzD;AAAA,MACC,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,eAAe,OAAO;AAAA,MACtB,WAAW;AAAA,IACZ,CACD;AAAA,EACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG;AAAA,EACvC,OAAO,QAAQ,MAAM,MAAM,WAC1B,OAAO,IACP,KAAK,OAAO,WAAW,IAAI,GAC3B,OAAO,OACR;AAAA;;AC7ED,eAAsB,cAAc,CACnC,MACA,OACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,KAAK,OAAO,aAAa,SAAS,KAAK;AAAA,EAE5D,MAAM,SACL,OAAO,WAAW,YACf,CAAC,IACD,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC9B,MAAM,gBAAgB,MAAM,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC;AAAA,IACvD,SAAS,MAAM;AAAA,EAChB,EAAE;AAAA,EAKL,IAAI,OAAO,WAAW,WAAW;AAAA,IAChC,MAAM,QAAQ,OAAO;AAAA,IACrB,WAAW,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,OAAO,OAAO,GAAG,GAAG;AAAA,QAC9B,OAAO,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACvE;AAAA,IACD;AAAA,IACA,aAAa,OAAO,CAAC,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,IAAI,OAAO,SAAS,GAAG;AAAA,IAItB,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,gBAAgB,OAAO,eAAe,OAAO,WAAW,IAAI,KAAK,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,EAAE,KAAK,IAAI,MACnL,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EACD;AAAA,EAEA,OAAO,iBAAkB,OAA8B,KAAK;AAAA;AAI7D,SAAS,YAAY,CACpB,OACA,MACA,QACO;AAAA,EACP,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,WAAW,KAAK;AAAA,MAAG,OAAO,KAAK,EAAE,MAAM,SAAS,WAAW,CAAC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,YAAY,OAAO,UAAU,MAAM,QAAQ,GAAG;AAAA,MAC7C,aAAa,OAAO,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,IAC7C;AAAA,IACA;AAAA,EACD;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAGjD,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,QACrB,OAAO,KAAK,EAAE,MAAM,SAAS,SAAS,aAAa,CAAC;AAAA,MACrD,EAAO;AAAA,QACN,aAAa,OAAO,CAAC,GAAG,MAAM,GAAG,GAAG,MAAM;AAAA;AAAA,IAE5C;AAAA,EACD;AAAA;AAOD,SAAS,cAAc,CAAC,MAAgD;AAAA,EACvE,MAAM,MAAM,KAAK,UAChB,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,WAAW,OAAO,CAChE;AAAA,EACA,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG;AAAA;AAG7C,SAAS,UAAU,CAClB,SACkB;AAAA,EAClB,MAAM,MAAM,OAAO,YAAY,WAAW,QAAQ,MAAM;AAAA,EACxD,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AAAA;AAGlD,SAAS,gBAAgB,CAAC,OAAsB;AAAA,EAC/C,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,gBAAgB;AAAA,EAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,MAAM,MAA4B,CAAC;AAAA,IACnC,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjD,IAAI,UAAU;AAAA,QAAW,IAAI,OAAO,iBAAiB,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;;ACfD,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,IAAI,UACT,GAAG,mHACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAUR,eAAsB,IAAI,CACzB,SACA,MACA,MACA,YACA,SAAsB,CAAC,GACP;AAAA,EAChB,MAAM,WAAW,QAAQ;AAAA,EACzB,IAAI,aAAa;AAAA,IAAM;AAAA,EAEvB,MAAM,QAAmB,OAAO,OAAO;AAAA,IACtC,IAAI,QAAO,WAAW,QAAQ,CAAC;AAAA,IAC/B;AAAA,IAEA,YAAY,IAAI,KAAK,WAAW,QAAQ,CAAC;AAAA,IACzC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,OACZ;AAAA,EACJ,CAAC;AAAA,EACD,IAAI;AAAA,IACH,MAAM,SAAS,KAAK;AAAA,IACnB,OAAO,SAAS;AAAA,IACjB,QAAQ,YACP,wCAAwC,QAAQ,MAAM,eAAe,KAAK,OAAO,mBAAmB,QAAQ,QAAQ,OAAO,OAAO,WAClI,EAAE,MAAM,qBAAqB,CAC9B;AAAA;AAAA;;;ACvIF,IAAM,WAAW;AAAA,EAChB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,UAAU;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,QAAQ;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAeO,SAAS,YAAY,CAC3B,QACA,OACoB;AAAA,EACpB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,gEACJ;AAAA,EACD;AAAA,EAEA,WAAW,QAAQ,OAAO,KAAK,QAAQ,GAAgC;AAAA,IACtE,MAAM,QAAkB,OAAmC;AAAA,IAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,MAChD,MAAM,IAAI,UAAU,GAAG,gBAAgB,iBAAiB;AAAA,IACzD;AAAA,IAEA,WAAW,UAAU,SAAS,OAAO;AAAA,MACpC,IAAI,OAAQ,MAAkC,YAAY,YAAY;AAAA,QACrE,MAAM,IAAI,UACT,GAAG,gBAAgB,sBAAsB,iCAC1C;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ;AAAA,EAId,OAAO;AAAA,IACN,gBAAgB,SAAS,OAAO,YAAY,yBAAyB,KAAK;AAAA,IAC1E,WAAW,SAAS,OAAO,SAAS,aAAa,KAAK;AAAA,EACvD;AAAA;AAQD,SAAS,QAAQ,CAChB,QACA,MACA,QACA,OACU;AAAA,EACV,MAAM,QAAQ,OAAO,MAAM;AAAA,EAC3B,IAAI,UAAU,aAAa,OAAO,UAAU,YAAY;AAAA,IACvD,MAAM,IAAI,UACT,GAAG,gBAAgB,QAAQ,qCAC5B;AAAA,EACD;AAAA,EACA,OAAO,UAAU;AAAA;;;ACtGlB,wBAAS,iCAAa;;;ACAtB;AAUA,IAAM,UAAU,IAAI;AAMb,SAAS,UAAU,CACzB,QACA,SACA,QAAgB,OAAO,UACF;AAAA,EACrB,IAAI,OAAO,QAAQ,IAAI,MAAM;AAAA,EAC7B,IAAI,SAAS,WAAW;AAAA,IACvB,OAAO,IAAI;AAAA,IACX,QAAQ,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EACA,MAAM,OAAO,GAAG,cAAgB;AAAA,EAChC,IAAI,MAAM,KAAK,IAAI,IAAI;AAAA,EACvB,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,KAAK;AAAA,IACpC,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;AAAA,IAC1E,KAAK,IAAI,MAAM,GAAG;AAAA,EACnB;AAAA,EACA,OAAO;AAAA;AAID,SAAS,SAAS,CAAC,KAAa,OAAkC;AAAA,EACxE,OAAO,WAAW,UAAU,GAAG,EAAE,OAAO,MAAM,KAAK,MAAQ,CAAC,EAAE,OAAO;AAAA;;;ADvBtE,IAAM,UAAU;AAEhB,IAAM,QACL;AAED,SAAS,KAAK,CAAC,KAAa,QAAgB,UAA0B;AAAA,EACrE,OAAO,UAAU,KAAK,CAAC,QAAQ,QAAQ,CAAC;AAAA;AAGzC,SAAS,MAAM,CAAC,QAAgB,QAAgB,UAA0B;AAAA,EAEzE,MAAM,MAAM,WAAW,QAAQ,OAAO;AAAA,EACtC,MAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,SAAS,WAAW;AAAA,EAC7D,OAAO,MAAM,OAAO,YAAY,YAAY;AAAA;AAItC,SAAS,eAAe,CAAC,QAAgB,QAAwB;AAAA,EACvE,OAAO,OAAO,QAAQ,QAAQ,aAAY,EAAE,EAAE,SAAS,WAAW,CAAC;AAAA;AAW7D,SAAS,gBAAgB,CAC/B,QACA,QACA,WACgB;AAAA,EAChB,SAAS,OAAO,UAAU,OAAO,MAAM,KAAK,SAAS,KAAK,CAAC;AAAA,EAC3D,IAAI,UAAU,aAAa,aAAa,aAAa,QAAQ,WAAW;AAAA,IACvE,OAAO;AAAA,EACR;AAAA,EACA,MAAM,MAAM,WAAW,QAAQ,SAAS,KAAK;AAAA,EAC7C,IAAI,QAAQ;AAAA,IAAW,OAAO;AAAA,EAE9B,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ;AAAA,EAC5C,MAAM,QAAQ,OAAO,KAAK,KAAK,WAAW;AAAA,EAC1C,IAAI,MAAM,WAAW,SAAS,UAAU,CAAC,iBAAgB,OAAO,QAAQ,GAAG;AAAA,IAC1E,OAAO;AAAA,EACR;AAAA,EACA,OAAO,UAAU,OAAO,WACrB,YACA,OAAO,QAAQ,QAAQ,QAAQ;AAAA;;;AE9C5B,IAAM,YAA2B,OAAO,OAAO;AAAA,EACrD,WAAW;AAAA,EACX,aAAa;AACd,CAAC;AASM,SAAS,UAAU,CACzB,SACA,SACA,OACa;AAAA,EACb,IACC,YAAY,cACX,OAAO,YAAY,YAAY,YAAY,OAC3C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,EACD;AAAA,EACA,MAAM,SAAS,SAAS;AAAA,EACxB,IAAI,WAAW;AAAA,IAAW;AAAA,EAC1B,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EACA,IAAI,QAAQ,OAAO,YAAY,MAAM;AAAA,IACpC,MAAM,IAAI,UACT,GAAG,gFACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAQD,SAAS,aAAa,CAC5B,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,EACvC,IAAI,SAAS,aAAa,WAAW;AAAA,IAAW,OAAO;AAAA,EAEvD,MAAM,QACL,SAAS,QAAQ,SAAS,OAAO,iBAAiB,QAAQ,QAAQ,IAAI;AAAA,EACvE,IAAI,UAAU;AAAA,IAAM,OAAO,EAAE,WAAW,OAAO,aAAa,MAAM;AAAA,EAClE,OAAO;AAAA,IACN,WAAW,CAAC;AAAA,IACZ,aAAa,gBAAgB,QAAQ,MAAM;AAAA,EAC5C;AAAA;;ACnED,eAAsB,eAAe,CACpC,SACA,QACgB;AAAA,EAChB,IAAI,OAAO,WAAW,cAAc,CAAC,OAAO;AAAA,IAAW;AAAA,EACvD,MAAM,KACL,SACA,0BACA,OAAO,MACP,OAAO,QAAQ,WACf,EAAE,WAAW,OAAO,QAAQ,GAAG,CAChC;AAAA;;ACtBD,oCAAqB;AAQd,SAAS,UAAU,GAAW;AAAA,EACpC,OAAO,aAAY,EAAE,EAAE,SAAS,WAAW;AAAA;AAWrC,SAAS,UAAU,CAAC,QAAwB;AAAA,EAClD,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AAAA;;;ACPjD,SAAS,SAAS,CAAC,QAAgC;AAAA,EACzD,QAAQ,WAAW,MAAM,YAAY;AAAA,EACrC,OAAO;AAAA;AAYR,eAAsB,WAAW,CAChC,SACA,MACA,MACA,QACA,SAAS,OACoB;AAAA,EAC7B,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,WAAW;AAAA,EACzB,MAAM,SAAwB;AAAA,IAC7B,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,WAAW,WAAW,KAAK;AAAA,IAC3B,QAAQ,KAAK;AAAA,IACb,iBAAiB;AAAA,IACjB,WAAW,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,UAAU;AAAA,IACnD,WAAW;AAAA,IACX,WAAW;AAAA,EACZ;AAAA,EAEA,MAAM,QAAQ,MAAM,SAAS,cAAc,MAAM;AAAA,EACjD,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,MAAM;AAAA,IACzB;AAAA,OACG,cAAc,SAAS,KAAK,IAAI,QAAQ,MAAM;AAAA,EAClD;AAAA;;ACrCM,SAAS,cAAc,CAC7B,SACA,YACgB;AAAA,EAChB,MAAM,UAAU,UAAU,OAAO;AAAA,EACjC,MAAM,OAAO,CAAC,SAAgC;AAAA,IAC7C,IAAI,mBAAmB;AAAA,MAAS,OAAO,QAAQ,IAAI,IAAI;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;AAAA,MACnD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU;AAAA,QAAW;AAAA,MACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,MAAM,gBAAgB,KAAK,eAAe;AAAA,EAC1C,IAAI,kBAAkB,MAAM;AAAA,IAC3B,MAAM,QAAQ,wBAAwB,KAAK,cAAc,KAAK,CAAC;AAAA,IAC/D,IAAI;AAAA,MAAO,OAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,SAAS,KAAK,iBAAiB;AAAA,EACrC,IAAI,WAAW;AAAA,IAAM,OAAO,OAAO,KAAK;AAAA,EAExC,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,WAAW,MAAM;AAAA,IACpB,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,MACrC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC3B,IAAI,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,YAAY;AAAA,QACzD,OAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,MAChC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA;AAOR,SAAS,SAAS,CAAC,SAA8C;AAAA,EAChE,IAAI,mBAAmB;AAAA,IAAS,OAAO;AAAA,EACvC,MAAM,QAAS,QAAkC;AAAA,EACjD,IAAI,iBAAiB;AAAA,IAAS,OAAO;AAAA,EACrC,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,OAAO;AAAA;;ACvCR,eAAsB,eAAe,CACpC,SACA,SAC4B;AAAA,EAC5B,MAAM,QAAQ,eAAe,SAAS,QAAQ,OAAO,OAAO,IAAI;AAAA,EAChE,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAE3B,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,uBAC5C,WAAW,KAAK,CACjB;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,OAAO,YAAY,QAClB,QAAQ,cAAc,QACtB,QAAQ,UAAU,QAAQ,KAAK,MAC7B,OACA,EAAE,OAAO,QAAQ;AAAA;;;ACzBrB,eAAsB,YAAY,CACjC,SACA,SACA,SACyC;AAAA,EACzC,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACxD,IAAI,cAAc;AAAA,IAAM,OAAO;AAAA,EAC/B,QAAQ,OAAO,YAAY;AAAA,EAC3B,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ;AAAA,EAIhC,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACtD,IACC,SAAS,QACT,CAAC,KAAK,UACL,SAAS,SAAS,aAAa,KAAK,SAAS,QAAQ,MACrD;AAAA,IACD,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK,IAAI;AAAA,EACvC,IAAI,SAAS,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG,GAAG;AAAA,IAC1D,OAAO;AAAA,MACN,MAAM,OAAO,IAAI;AAAA,MACjB,SAAS,UAAU,OAAO;AAAA,MAC1B;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,cACrC,QAAQ,IACR,IAAI,KAAK,MAAM,KAAK,UAAU,CAC/B;AAAA,EAGA,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,OAAO;AAAA,IACN,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,EACV;AAAA;AAQD,SAAS,UAAU,CAClB,MACA,SACA,KACU;AAAA,EACV,OACC,KAAK,iBAAiB,QACtB,KAAK,cAAc,QAAQ,UAAU,QAAQ,IAAI,QAAQ,KAAK;AAAA;;;AChEzD,SAAS,QAAQ,CAAC,SAAgD;AAAA,EACxE,QAAQ,MAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,OAAO;AAAA,EAChE,MAAM,aAAa;AAAA,IAClB,QAAQ;AAAA,IACR,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ;AAAA,IAC9C;AAAA,IACA,YAAY,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC;AAAA,IACzD,GAAI,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5B,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACN;AAAA,IACA,WAAW,CAAC,OAAe,YAC1B,GAAG,QAAQ,kBAAkB,QAAQ,UAAU,YAAY,MAAM;AAAA,IAClE,OAAO,MACN,GAAG,4DAA4D;AAAA,EACjE;AAAA;;;ACMM,SAAS,SAAS,CAAC,SAAqC;AAAA,EAC9D,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,OAAO;AAAA,SACA,aAAY,CAAC,SAAS,SAAS;AAAA,MACpC,OAAO,aAAa,SAAS,SAAS,OAAO;AAAA;AAAA,SAGxC,QAAO,CAAC,SAAS;AAAA,MACtB,MAAM,QAAQ,eAAe,SAAS,OAAO,OAAO,IAAI;AAAA,MACxD,IAAI,UAAU;AAAA,QAAM,OAAO;AAAA,MAE3B,MAAM,UAAU,MAAM,MAAM,SAAS,uBACpC,WAAW,KAAK,CACjB;AAAA,MACA,IAAI,YAAY;AAAA,QAAM,OAAO;AAAA,MAC7B,OAAO,MAAM,SAAS,cAAc,QAAQ,IAAI,MAAM,IAAI,CAAC;AAAA;AAAA,SAGtD,kBAAiB,CAAC,MAAM,SAAS;AAAA,MACtC,MAAM,KAAK,KAAK,IAAI;AAAA,MACpB,IAAI,CAAC,MAAK,EAAE;AAAA,QAAG,OAAO;AAAA,MAGtB,OAAO,SAAS,WAAW,aAAa,CAAC,MAAK,QAAQ,MAAM,IACzD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,CAAC,IACjD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,GAAG,QAAQ,MAAM;AAAA;AAAA,SAG/D,SAAQ,CAAC,IAAI;AAAA,MAClB,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI;AAAA,MACjD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,QAAO,CAAC,IAAI;AAAA,MACjB,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,MAAM,SAAS,CAAC;AAAA;AAAA,IAG5D,QAAQ,SAAS,OAAO;AAAA,SAElB,eAAc,GAAG;AAAA,MACtB,MAAM,UAAU,MAAM,SAAS;AAAA,MAC/B,IAAI,CAAC,QAAQ,aAAa,kBAAkB,YAAY,WAAW;AAAA,QAClE,MAAM,IAAI,kBACT,4IACA,EAAE,MAAM,YAAY,WAAW,wBAAwB,CACxD;AAAA,MACD;AAAA,MACA,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA,IAG3B,OAAO,CAAC,GAAG,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/B;AAAA;;ACjEM,SAAS,UAAU,CAAC,SAAkB,SAAyB;AAAA,EACrE,MAAM,SAAS,QAAQ,OAAO,cAAc;AAAA,EAE5C,OAAO,WAAW,YACf,OAAO,KAAK,OAAO,IAClB,WAAW,QAAQ,OAAO;AAAA;AAIxB,IAAM,QAAQ,CAAC,KAAa,UAClC,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW;;;ACtB3C,4BAAS;;;ACcF,SAAS,WAAW,CAC1B,MACA,MACA,OACA,OACA,MACO;AAAA,EACP,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IACC,UAAU,QACV,eAAe,KAAK,MAAM,eAAe,MAAM,OAAO,GACrD;AAAA,IACD,MAAM,IAAI,YACT,eACA,GAAG,cAAc,qDACjB,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQM,SAAS,cAAc,CAC7B,OACA,KACA,OACA,MAC+B;AAAA,EAC/B,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,MAClE,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,YAAY,MAAM;AAAA,IAC3B,MAAM,IAAI,YACT,eACA,GAAG,cAAc,yBACjB,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,IAAI,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,IAC/C,MAAM,IAAI,YAAW,iBAAiB,GAAG,cAAc,oBAAoB;AAAA,MAC1E,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA;AAIM,IAAM,iBAAiB,CAAC,OAAe,SAC7C,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,EAC5D,WAAW;AACZ,CAAC;;;AC3DF,eAAsB,YAAY,CACjC,SACA,QACA,MACA,OACA,MACuB;AAAA,EACvB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,MACA,GACD;AAAA,EACA,eAAe,OAAO,KAAK,OAAO,IAAI;AAAA,EACtC,OAAO;AAAA;AAQR,eAAsB,WAAW,CAChC,SACA,QACA,MACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,aAC1B,WAAW,MAAM,GACjB,MACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AF1BM,IAAM,gBAAgB;AAQ7B,eAAsB,gBAAgB,CACrC,SACA,QACA,MACA,OACA,UAC0E;AAAA,EAC1E,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,IACD;AAAA,EACA,eAAe,OAAO,QAAQ,MAAM,IAAI,GAAG,OAAO,WAAW;AAAA,EAC7D,IAAI,MAAM,WAAW,eAAe;AAAA,IACnC,MAAM,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC;AAAA,EACnD;AAAA,EACA,OAAO,EAAE,OAAO,cAAc,gBAAgB,MAAM,SAAS;AAAA;AAOvD,SAAS,WAAW,CAC1B,OACA,QACA,UACA,cACa;AAAA,EACb,OAAO,IAAI,YACV,gBACA,GAAG,uDACH;AAAA,IACC,WAAW;AAAA,IACX;AAAA,IACA;AAAA,OACI,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa;AAAA,EACtD,CACD;AAAA;AASD,eAAsB,gBAAgB,CACrC,SACA,OACA,QACA,OACsB;AAAA,EACtB,IAAI,MAAM,aAAa,eAAe;AAAA,IACrC,MAAM,YAAY,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC9C;AAAA,EACA,OAAO,eAAe,OAAO,WAAW;AAAA;AAQlC,IAAM,WAAW,CAAC,WAAmB,SAC3C,WAAW,GAAG,YAAY,MAAM;AAG1B,SAAS,WAAW,CAC1B,OACA,WACA,MACU;AAAA,EACV,IAAI,MAAM,aAAa,QAAQ,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAC7D,MAAM,QAAQ,OAAO,KAAK,SAAS,WAAW,IAAI,CAAC;AAAA,EACnD,MAAM,OAAO,OAAO,KAAK,MAAM,QAAQ;AAAA,EACvC,OAAO,MAAM,WAAW,KAAK,UAAU,iBAAgB,OAAO,IAAI;AAAA;;AGlGnE;AAuBA,eAAsB,YAAY,CACjC,SACA,OAOiE;AAAA,EACjE,OAAO,cAAc,SAAS,OAAO,MAAM,MAAM,aAAa,IAAI;AAAA;AAOnE,eAAsB,SAAS,CAC9B,SACA,OAKE;AAAA,EACF,MAAM,OAAO,OAAO,UAAU,GAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,EACzD,OAAO,KAAM,MAAM,cAAc,SAAS,OAAO,MAAM,IAAI,GAAI,KAAK;AAAA;AAGrE,eAAe,aAAa,CAC3B,SACA,OACA,MACA,WACiE;AAAA,EACjE,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,SAAS,MAAM,UAAU,WAAW;AAAA,EAC1C,MAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EAEtD,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,IACtC,WAAW,WAAW,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,SAAS,OAAO,YAAY,SAAS,QAAQ,IAAI;AAAA,IAC3D,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACZ,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,UAAU;AAAA;;ACnDrB,IAAM,YAAY;AAMzB,IAAM,aAAa;AAmCnB,eAAsB,aAAa,CAClC,SACA,UAC0B;AAAA,EAC1B,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,QAAQ;AAAA,EAIjD,MAAM,aAAa,SAAS,KAAK,SAAS;AAAA,EAC1C,MAAM,QAAQ,EAAE,SAAS,UAAU,QAAQ,KAAK,UAAU;AAAA,EAC1D,MAAM,UACL,SAAS,UAAU,UAChB,MAAM,cAAc,KAAK,IACzB,MAAM,gBAAgB,KAAK;AAAA,EAC/B,OAAO,KAAK,SAAS,SAAS,SAAS,KAAK,SAAS,SAAS;AAAA;AAI/D,eAAe,aAAa,CAC3B,OAC0C;AAAA,EAC1C,IAAI,UAAU;AAAA,EACd,SAAS,OAAO,EAAG,OAAO,WAAW,QAAQ,GAAG;AAAA,IAC/C,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,MAAM,UAAU,OAAO,IAAI;AAAA,IAC3C,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,IAAI,QAAQ,YAAY;AAAA,MAAM,OAAO,EAAE,UAAU,MAAM,KAAK;AAAA,IAC5D,UAAU;AAAA,EACX;AAAA,EACA,OAAO,EAAE,UAAU,OAAO,mBAAmB,MAAM,KAAK;AAAA;AAWzD,eAAe,eAAe,CAC7B,OAC0C;AAAA,EAC1C,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,IAAI,SAAS,OAAO;AAAA,EACpB,SAAS,SAAS,EAAG,SAAS,YAAY,UAAU,GAAG;AAAA,IACtD,MAAM,OAAO,WAAW,QAAQ;AAAA,IAChC,MAAM,OAAO,OACV,SACA,WAAW,OAAO,oBACjB,IAAI,QAAQ,IACZ,KAAK,OAAO,QAAQ,UAAU,CAAC;AAAA,IACnC,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,OACb,MAAM,WAAW,OAAO,IAAI,IAC5B,MAAM,OAAO,aAAa,MAAM,cAAc;AAAA,IACjD,IAAI,YAAY;AAAA,MAAM,SAAS;AAAA,IAC1B,SAAI,QAAQ,YAAY,MAAM;AAAA,MAClC,OAAO,EAAE,UAAU,QAAQ,UAAU,MAAM,KAAK;AAAA,IACjD,EAAO;AAAA,MACN,QAAQ;AAAA,MAER,IAAI,UAAU;AAAA,QAAO,SAAS,OAAO;AAAA;AAAA,EAEvC;AAAA,EAEA,MAAM,MAAM,SAAS,SAAS;AAAA;AAI/B,eAAe,SAAS,CACvB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,UAAU,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACnE,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA;AAI9C,eAAe,UAAU,CACxB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,OAAO,YAAY;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,QAAQ,MAAM,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW,IAAI,KAAK,MAAM,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,WAAW,IAAI,KAAK,MAAM,GAAG;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACpE,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,SAAS,SAAS;AAAA;;ACvH/B,IAAM,WAAU;AAyBhB,eAAsB,kBAAkB,CACvC,SACA,MACA,MACA,OACA,OACA,QACgB;AAAA,EAChB,MAAM,UACL,SACA,MACA,MACA;AAAA,IACC,SAAS,eAAe,KAAK;AAAA,OACzB,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,EAC1C,GACA,KACD;AAAA;AAID,eAAsB,eAAe,CACpC,SACA,MACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK;AAAA;AAGvD,eAAe,SAAS,CACvB,SACA,MACA,MACA,SACA,OACgB;AAAA,EAChB,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM;AAAA,EACvB,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,UACL,aAAa,UACV,MAAM,KAAK,CAAC,MAAM,WAAW,QAAQ,OAAO,CAAC,IAC7C,MAAM,KAAK,CAAC,MAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,EAC7C,QAAQ,UAAU,WAAW,MAAM,cAAc,SAAS;AAAA,IACzD,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,SAAS,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAE/D,UAAU,MACT,IAAI,cACH,GAAG,6DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA,EACD,IAAI,YAAY,SAAS;AAAA,IAAU;AAAA,EAEnC,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,oBACT,GAAG,0CAA0C,aAAa,UAAU,YAAY,+EAChF;AAAA,IACC,UAAU,KAAK;AAAA,OACX,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,IACjE,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,CAAC;AAAA,EACzD,CACD;AAAA;;;ACzID,IAAM,aAAa,CAAC,UACnB,UAAU,OAAO,OAAO,eAAe,KAAK;AAOtC,SAAS,YAAY,CAC3B,MACA,QACA,OACU;AAAA,EACV,OAAO,WAAW,QAAQ,MAAM,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,KAAK,CAAC;AAAA;AAO7E,eAAsB,WAAW,CAChC,MACA,QACA,OACA,OACC;AAAA,EACD,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,OAAO,WAAW,MAAM,GAC7B,KACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,eAAe,KAAK;AAAA,OAEhB,aAAa,MAAM,OAAO,QAAQ,MAAM,IACzC,EAAE,iBAAiB,KAAK,IACxB,CAAC;AAAA,EACL;AAAA;;;AC1BM,IAAM,aAAa,CAAC,QAAgB,WAC1C,WACC,+BAA6B,aAAW,eAAe,UAAU,EAAE,GACpE;AAQD,eAAsB,YAAY,CACjC,MACA,MACA,OACA,OACkB;AAAA,EAClB,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,KAAK,SAAS,KAAK,QAAQ,MAAM,GACtC,KACD;AAAA,EACA,MAAM,UAAU,QAAQ,MAAM,MAAM;AAAA,EACpC,IAAI,YAAY,MAAM;AAAA,IACrB,MAAM,IAAI,UACT,iBAAiB,KAAK,6CAA6C,KAAK,uEACzE;AAAA,EACD;AAAA,EACA,IACC,eAAe,OAAO,MAAM,eAAe,QAAQ,MAAM,KAAK,MAAM,KAAK,EAAE,GAC1E;AAAA,IACD,MAAM,IAAI,kBACT,GAAG,2HACH;AAAA,MACC,QAAQ;AAAA,QACP,EAAE,MAAM,CAAC,KAAK,KAAK,GAAG,SAAS,oCAAoC;AAAA,MACpE;AAAA,MACA,UAAU,KAAK;AAAA,IAChB,CACD;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAOR,eAAsB,qBAAqB,CAC1C,SACA,MACA,MACA,SACuB;AAAA,EACvB,MAAM,SAAS,WAAW;AAAA,EAC1B,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACjD,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC;AAAA,IACA,WAAW,WAAW,QAAQ,QAAQ,MAAM,KAAK,MAAM,CAAC;AAAA,EACzD,CAAC;AAAA,EAGD,MAAM,QAAQ,MAAM,OAAO,gBAC1B,KAAK,IACL,eACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA,EACA,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,UAAU;AAAA;AAO5C,SAAS,WAAW,CAC1B,MACA,MACA,OACA,QACA,OACO;AAAA,EACP,IAAI,MAAM,aAAa,WAAW,QAAQ,QAAQ,MAAM,KAAK,MAAM,CAAC,GAAG;AAAA,IACtE,MAAM,IAAI,YACT,eACA,GAAG,oEACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQD,eAAsB,sBAAsB,CAC3C,SACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aACnB,SACA,QACA,eACA,OACA,OACD;AAAA,EACA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,EAC5C,OAAO,EAAE,OAAO,KAAK;AAAA;;;AC1GtB,IAAM,WAAW,CAAC,MAAoB,MAAkB,UACvD,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,EACvD,QAAQ,KAAK;AAAA,EACb,UAAU,KAAK;AAChB,CAAC;AAGK,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM,OAAO;AAAA,MACvB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACpE,IAAI,CAAC,OAAO;AAAA,QAAQ,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,MAMtD,MAAM,UAAU,MAAM,aAAa,MAAM,QAAQ,OAAO,KAAK;AAAA,MAC7D,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,MAAM,mBACL,SACA,MACA,eACA,SACA,OACA,OAAO,EACR;AAAA,MACA,OAAO,sBAAsB,SAAS,MAAM,QAAQ,OAAO;AAAA;AAAA,SAGtD,QAAO,CAAC,QAAQ;AAAA,MACrB,OAAO,cAAc,SAAS,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAAA;AAAA,EAEvE;AAAA;AAID,eAAe,aAAa,CAC3B,SACA,MACA,QACA,OACmB;AAAA,EACnB,QAAQ,OAAO,SAAS,MAAM,uBAC7B,SACA,MACA,QACA,KACD;AAAA,EACA,IAAI,CAAC,KAAK;AAAA,IAAQ,MAAM,SAAS,MAAM,MAAM,KAAK;AAAA,EAGlD,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IAEtB,IAAI,CAAC,OAAO;AAAA,MAAQ,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,IACtD,YAAY,MAAM,QAAQ,OAAO,QAAQ,KAAK;AAAA,IAC9C,KAAK,WAAW;AAAA,IAChB,MAAM,QAAQ,MAAM,YACnB,MACA,QACA,GAAG,KAAK,QAAQ,MAAM,QAAQ,GAC9B,KACD;AAAA,IAIA,MAAM,SACL,OAAO,oBAAoB,QAC3B,aAAa,MAAM,OAAO,QAAQ,MAAM,MAAM;AAAA,IAC/C,OAAO,SAAS,KAAK,OAAO,iBAAiB,IAAI,IAAI;AAAA,GAEvD;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,MAAM,QACL,aAAa,QAAQ,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM;AAAA,EACxE,IAAI,aAAa,QAAQ,OAAO;AAAA,IAC/B,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,MACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,IAC3C,CAAC;AAAA,EACF;AAAA,EACA,IAAI,SAAS,UAAU,oBAAoB,MAAM;AAAA,IAChD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,EACrE;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;ACzFtB,eAAsB,wBAAwB,CAC7C,SACA,QACgB;AAAA,EAChB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,WAC1B,CAAC,iBAAiB,cAAc,EAAY,IAAI,CAAC,SACjD,QAAQ,MAAM,OAAO,gBAAgB,QAAQ,MAAM,GAAG,CACvD,CACD;AAAA,EACA,MAAM,SAAS,MAAM,KACpB,CAAC,WAA4C,OAAO,WAAW,UAChE;AAAA,EACA,IAAI,WAAW;AAAA,IAAW,MAAM,OAAO;AAAA;AASxC,eAAsB,eAAe,CACpC,SACA,SACgB;AAAA,EAChB,IAAI;AAAA,IACH,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IACD,MAAM,KAAK,SAAS,wBAAwB,SAAS,QAAQ,SAAS;AAAA;AAAA;AAcxE,eAAsB,cAAc,CACnC,SACA,MACA,UACA,UACA,QACA,OACmB;AAAA,EACnB,MAAM,MAAM,MAAM,WAAW,SAAS,SAAS,IAAI,KAAK,IAAI;AAAA,EAC5D,MAAM,OACL,QAAQ,QACR,IAAI,aAAa,SAChB,IAAI,SAAS,SAAS,SAAS,UAAU,QACxC,MAAM,gBAAgB,SAAS,KAAK,UAAU,KAAK;AAAA,EACtD,IAAI;AAAA,IAAM,OAAO;AAAA,EAEjB,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,QAAQ,MAAM,SAAS,cAC5B,OAAO,QAAQ,IACf,QAAQ,MAAM,IAAI,CACnB;AAAA,EACD,EAAO;AAAA,IACN,MAAM,YAAY,SAAS,OAAO,WAAW,cAAc;AAAA;AAAA,EAE5D,OAAO;AAAA;;;AClFD,SAAS,QAAW,CAC1B,OACA,OACmB;AAAA,EACnB,IAAI,OAAO;AAAA,EACX,OAAO,YAAY;AAAA,IAClB,IAAI,MAAM;AAAA,MACT,MAAM,IAAI,UACT,GAAG,uEAAuE,yBAC3E;AAAA,IACD;AAAA,IACA,OAAO;AAAA,IACP,OAAO,MAAM;AAAA;AAAA;;;ACTf,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,MAAM,OAAO,OAAO;AAAA,EACtE,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,OAAO,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,KAAK;AAAA;AAItB,eAAsB,eAAe,CACpC,SACA,MACA,MACA,MACA,OACuB;AAAA,EACvB,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAEA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,QAAQ,OAAO,UAAU;AAAA;;;AC3BnC,SAAS,kBAAkB,CACjC,SACA,MACA,IACgB;AAAA,EAChB,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,QAAQ,MAAM,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,OAAO,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGlD,QAAO,CAAC,QAAQ,UAAU;AAAA,MAC/B,OAAO,aACN,SACA,MACA,QACA,UACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,YAAY,CAC1B,SACA,MACA,OACA,OACwC;AAAA,EACxC,aAAa,MAAM,KAAK;AAAA,EACxB,MAAM,mBAAmB,SAAS,MAAM,iBAAiB,OAAO,KAAK;AAAA,EACrE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AAAA;AAIF,eAAe,UAAU,CACxB,SACA,MACA,OACA,OAC8B;AAAA,EAC9B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,SAAS,MAAM,gBACpB,SACA,MACA,iBACA,QACA,KACD;AAAA,EAIA,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,iBACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,KAAK,CACxB;AAAA,EACA,OAAO,KAAK,QAAQ,MAAM,OAAO,MAAM,EAAE;AAAA;AAI1C,eAAe,YAAY,CAC1B,SACA,MACA,QACA,UACA,OACmB;AAAA,EACnB,aAAa,MAAM,KAAK;AAAA,EAGxB,cAAc,MAAM,UAAU,KAAK;AAAA,EACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,EAE9D,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,iBACA,QACA,KACD;AAAA,EACA,IAAI,gBAAgB;AAAA,EACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAEhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,IAC/C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,OAAO;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,IAAI;AAAA,SAE7B,OAAO,oBAAoB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,IACnE;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAKH,MAAM,QAAQ,MAAM,SAAS,mBAC5B,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,IACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IAGD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACpE,IAAI,eAAe;AAAA,MAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACrE;AAAA;AAAA,EAED,OAAO,OAAO,OAAO;AAAA;;;ACtKtB,uBAAS,4BAAY;AAQd,IAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ,OAAQ,OAAO,EAAE;AAE1D,IAAM,SAAS;AAGR,SAAS,cAAc,GAAW;AAAA,EACxC,OAAO,SAAS,aAAY,EAAE,CAAC;AAAA;AAIzB,SAAS,QAAQ,CAAC,OAA2B;AAAA,EACnD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,IAAI,MAAM;AAAA,EACV,WAAW,QAAQ,OAAO;AAAA,IACzB,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,OAAO,QAAQ,GAAG;AAAA,MACjB,OAAO,OAAQ,UAAW,OAAO,IAAM;AAAA,MACvC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,IAAI,OAAO;AAAA,IAAG,OAAO,OAAQ,SAAU,IAAI,OAAS;AAAA,EACpD,OAAO;AAAA;AAGD,SAAS,UAAU,CAAC,MAAsB;AAAA,EAChD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,MAAM,MAAgB,CAAC;AAAA,EACvB,WAAW,QAAQ,MAAM;AAAA,IACxB,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAAA,IACjC,IAAI,UAAU;AAAA,MAAI,MAAM,IAAI,UAAU,gCAAgC;AAAA,IACtE,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG;AAAA,MACd,IAAI,KAAM,UAAW,OAAO,IAAM,GAAG;AAAA,MACrC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAIhB,IAAM,SAAS,CAAC,QACtB,KAAK,MAAM,IAAI,QAAQ,IAAI,KAAK,MAAM;AAGhC,SAAS,MAAM,CAAC,QAAgB,MAAsB;AAAA,EAC5D,MAAM,UAAU,OAAO,MAAM,CAAC;AAAA,EAC9B,QAAQ,iBAAiB,OAAO,IAAI,CAAC;AAAA,EACrC,MAAM,SAAS,YAAW,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EACjE,MAAM,SAAU,OAAO,MAAiB;AAAA,EACxC,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI;AAAA,EAC7C,OAAO,OAAO,SAAS,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK,QAAQ,GAAG;AAAA;AAW7D,SAAS,SAAS,CACxB,QACA,MACA,KACA,UACgB;AAAA,EAChB,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAClC,MAAM,UAAU,OAAO,GAAG;AAAA,EAC1B,IAAI,UAAyB;AAAA,EAC7B,SAAS,OAAO,UAAU,KAAK,MAAO,QAAQ,UAAU,KAAK,OAAO,QAAQ;AAAA,IAC3E,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAAA,IAC1C,IAAI,WAAW,OAAO,QAAQ,IAAI,GAAG,IAAI,KAAK,SAAS,YAAY,MAAM;AAAA,MACxE,UAAU;AAAA,IACX;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,UAAU,CAAC,GAAW,GAAoB;AAAA,EAClD,IAAI,aAAa,EAAE,SAAS,EAAE;AAAA,EAC9B,SAAS,IAAI,EAAG,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,cAAc,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AAAA,EACA,OAAO,eAAe;AAAA;AAQhB,SAAS,UAAU,CACzB,QACA,SACA,QACS;AAAA,EACT,MAAM,QAAQ,GAAG,mBAAmB,MAAM,KAAK,mBAAmB,OAAO;AAAA,EACzE,MAAM,QAAQ,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC1B,QAAQ,OAAO,KAAK,SAAS,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,kBAAkB,SAAS;AAAA;;;ACnG5B,IAAM,WAAW,CACvB,WAC4B,WAAW,QAAQ,OAAO,gBAAgB;AAGhE,SAAS,eAAe,CAC9B,SACA,OACA,KACW;AAAA,EACX,MAAM,aAAa,QAAQ,OAAO;AAAA,EAClC,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,IAAI,UACT,GAAG,UAAU,kFACd;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AASD,SAAS,UAAU,CACzB,YACA,QACA,QACA,MACA,KACA,OAC4B;AAAA,EAC5B,QAAQ,OAAO,UAAU,OACxB,WAAW,QACX,OAAO,QACP,OAAO,IACP,KACD;AAAA,EACA,MAAM,OAAO,UAAU,WAAW,KAAK,GAAG,MAAM,KAAK,OAAO,QAAQ;AAAA,EACpE,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,OAAO;AAAA,OACH;AAAA,IACH,UAAU;AAAA,IACV,QACC,UAAU,WAAW,OAAO,WACzB,OAAO,SACP,KAAK,WAAW,QAAQ,OAAO,OAAO,EAAE;AAAA,EAC7C;AAAA;;;AC1BD,eAAsB,eAAe,CACpC,SACA,MACA,MACA,OACsB;AAAA,EACtB,MAAM,yBAAyB,SAAS,KAAK,EAAE;AAAA,EAC/C,IAAI,UAAU;AAAA,EACd,IAAI,WAAW;AAAA,EACf,MAAM,SAAS,MAAM,UACpB,SACA,KAAK,IACL,MACA,EAAE,WAAW,KAAK,QAAQ,GAC1B,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,UAAU,OAAO,aAAa;AAAA,IAC9B,WAAW,SAAS,OAAO,YAAY;AAAA,IACvC,OAAO;AAAA,MACN,iBAAiB;AAAA,SACb,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,SAChC,OAAO,iBAAiB,OAAO,CAAC,IAAI,EAAE,cAAc,KAAK;AAAA,IAC9D;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAIH,MAAM,yBAAyB,SAAS,OAAO,EAAE;AAAA,YAChD;AAAA,IACD,MAAM,KAAK,SAAS,sBAAsB,QAAQ,OAAO,SAAS;AAAA,IAClE,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,wBAAwB,QAAQ,OAAO,SAAS;AAAA,IACrE;AAAA,IACA,IAAI,UAAU;AAAA,MACb,MAAM,KACL,SACA,6BACA,QACA,OAAO,SACR;AAAA,IACD;AAAA;AAAA,EAED,OAAO;AAAA;AAIR,eAAe,wBAAwB,CACtC,SACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,SAAS,mBAAmB,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,EAC3E,MAAM,yBAAyB,SAAS,MAAM;AAAA;;;AC/DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACuD;AAAA,EACvD,OAAO,OAAO,SAAS;AAAA,IACtB,MAAM,QAAQ,GAAG,wBAAwB;AAAA,IACzC,MAAM,SAAS,MAAM,UAAU,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,IACrE,IAAI,CAAC,OAAO,QAAQ;AAAA,MACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,QAC7D,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CAAC;AAAA,IACF;AAAA,IACA,IAAI,OAAO,oBAAoB,MAAM;AAAA,MACpC,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,MAAM;AAAA,IAC9C;AAAA,IACA,MAAM,SAAS,MAAM,gBAAgB,SAAS,MAAM,QAAQ,KAAK;AAAA,IACjE,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,KAAK;AAAA;AAAA;;;ACtBvC,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MAEpE,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,OAAO,gBAAgB,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA;AAAA,SAG7D,QAAO,CAAC,QAAQ;AAAA,MACrB,MAAM,QAAQ,GAAG,qBAAqB;AAAA,MACtC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,eACA,QACA,KACD;AAAA,MACA,IAAI,gBAAgB;AAAA,MACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,QAGhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,QAC/C,gBAAgB,OAAO,oBAAoB;AAAA,QAC3C,OAAO,EAAE,iBAAiB,IAAI;AAAA,OAEhC;AAAA,MACA,IAAI,eAAe;AAAA,QAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,MACrE;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,IAGtB,YAAY,eAAe,SAAS,MAAM,EAAE;AAAA,EAC7C;AAAA;;;ACpDM,SAAS,UAAU,CACzB,SACA,MACA,IAGwB;AAAA,EACxB,OAAO;AAAA,IACN,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,IAC/C,eAAe,mBAAmB,SAAS,MAAM,EAAE;AAAA,IACnD,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,EAChD;AAAA;;ACDD,eAAsB,YAAY,CACjC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,OAAO,WAAW,QAAQ,CAAC,OAAO,SAAS,OAAO;AAAA;AAQnD,eAAsB,cAAc,CACnC,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QACA,MACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA;AAgBD,eAAsB,iBAAiB,CACtC,SACA,MACA,QACA,QAOiC;AAAA,EACjC,QAAQ,MAAM,OAAO,OAAO,MAAM,WAAW;AAAA,EAC7C,YAAY,MAAM,MAAM,OAAO,OAAO,IAAI;AAAA,EAC1C,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SACL,KAAK,oBAAoB,OACtB,OACA,MAAM,gBAAgB,SAAS,MAAM,MAAM,KAAK;AAAA,EACpD,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,EACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;ACzDD,SAAS,cAAc,CAC7B,SACA,MACA,IACA,QAC4D;AAAA,EAC5D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,OAAO,SAAS;AAAA,MAC7B,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,YAAY,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,MAAM;AAAA;AAAA,EAExE;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACuC;AAAA,EACvC,MAAM,mBAAmB,SAAS,MAAM,aAAa,OAAO,KAAK;AAAA,EACjE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,UAAU,SAAS,MAAM,KAAK,CAAC;AAAA,EAC5D,CAAC;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,MACA,OAC6B;AAAA,EAE7B,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,aAAa,MAAM;AAAA,EAC5D,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA;AAIzE,eAAe,WAAW,CACzB,SACA,MACA,QACA,QACA,OACA,QACiC;AAAA,EAGjC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,aACA,QACA,KACD;AAAA,EAEA,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;AC1GK,SAAS,iBAAiB,CAChC,SACA,MACA,IACA,QACkD;AAAA,EAClD,OAAO;AAAA,SACA,aAAY,CAAC,MAAM,SAAS;AAAA,MACjC,MAAM,QAAQ,GAAG,cAAc;AAAA,MAC/B,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,MAAM,SAAS,MAAM,UAAU,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACrE,IAAI,CAAC,OAAO,QAAQ;AAAA,QACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,UAC7D,QAAQ,OAAO;AAAA,UACf,UAAU,KAAK;AAAA,QAChB,CAAC;AAAA,MACF;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,MACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,MACrC,OAAO;AAAA;AAAA,EAET;AAAA;;;ACZD,IAAM,WAAU;AAGhB,eAAe,UAAU,CACxB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,WAAW,MAAM,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC;AAAA,EAC9C,OAAO,cAAc,SAAS;AAAA,IAC7B,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,UAAU,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAEhE,UAAU,MACT,IAAI,cACH,GAAG,4DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA;AAOF,eAAsB,kBAAkB,CACvC,SACA,MACA,OACA,OACgB;AAAA,EAChB,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK;AAAA,EAC5D,MAAM,QAAQ,QAAQ,OAAO,gBAAgB;AAAA,EAC7C,IAAI,YAAY,QAAQ,UAAU,aAAa,QAAQ,YAAY,OAAO;AAAA,IACzE;AAAA,EACD;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,iBACT,uBACA,GAAG,4EACH;AAAA,IACC,QAAQ;AAAA,IACR,UAAU,KAAK;AAAA,IACf,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,EACjE,CACD;AAAA;AAUD,eAAsB,kBAAkB,CACvC,SACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,OAAO,KAAK;AAAA,EAClB,MAAM,QAAQ,SAAS,OAAO,YAAY,OAAO,OAAO,KAAK;AAAA,EAC7D,IAAI,SAAS,QAAQ,OAAO,UAAU;AAAA,IAAU;AAAA,EAChD,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,KAAK,UAAU,KAAK,GAAG,KAAK;AAAA,EAC5E,IAAI,SAAS,QAAQ;AAAA,IAAM;AAAA,EAC3B,MAAM,QAAQ,MAAM,OAAO,aAC1B,QAAQ,MACR,gBACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AC/EM,IAAM,iBAAiB,CAC7B,SACA,WACA,UACI,aAAa,SAAS,WAAW,gBAAgB,OAAO,WAAW;AAMxE,eAAsB,aAAa,CAClC,SACA,MACA,WACA,OAC2B;AAAA,EAC3B,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,SAAS,OAAO,SAAS;AAAA,EAE/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,gBACA,OACA,KAAK,IACN;AAAA,EAGA,MAAM,SAAS,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAChE,IAAI,WAAW,MAAM;AAAA,IACpB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBACT,8BACA,GAAG,iEACH,EAAE,WAAW,OAAO,QAAQ,OAAO,IAAI,UAAU,KAAK,KAAK,CAC5D;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK,QAAQ,cAAc,OAAO;AAAA,EAC3C;AAAA;AAID,eAAsB,UAAU,CAC/B,SACA,MACA,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,iBAAiB,GAAG;AAAA,IAC9B,MAAM,YAAY,SAAS,OAAO,QAAQ,cAAc;AAAA,EACzD;AAAA,EACA,MAAM,YAAY,OAAO,OAAO,OAAO,IAAI,KAAK,MAAM,OAAO,YAAY;AAAA;;;ACpFnE,SAAS,cAAc,CAAC,SAAkB,MAAoB,IAAQ;AAAA,EAC5E,OAAO;AAAA,SACA,MAAK,CACV,QACA,OACgC;AAAA,MAChC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,MACA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,QACzD,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QAEf,SAAS;AAAA,QACT,OAAO,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,OAAO;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,OAAO;AAAA,MAChB;AAAA;AAAA,SAGK,QAAO,CACZ,WACA,MACA,SAC6B;AAAA,MAC7B,OAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,IAAI,OAAO;AAAA;AAAA,EAErE;AAAA;AAQD,eAAe,gBAAgB,CAC9B,SACA,MACA,WACA,MACA,IACA,SAC6B;AAAA,EAC7B,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,EACjD,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EAEnB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAChB,OAAO,YACP,QACA,OAAO,cACP,OAAO,IAAI,GACX,KACA,KACD;AAAA,EACA,IAAI,aAAa;AAAA,IAAM,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAIrE,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,OAAO,OACR;AAAA,EACA,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,EAElD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,EACtD,MAAM,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,EACjE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO;AAAA;;;AChFR,eAAsB,mBAAmB,CACxC,SACA,MACA,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,MAAM,SAAS,OAAO;AAAA,EACtB,OAAO,SAAS,MAAM,IAAI,OAAO,cAAc,SAAS;AAAA;;;ACtBzD,sBAAS,+BAAW;AAmBb,IAAM,iBAAiB;AAE9B,IAAM,WAAW;AACjB,IAAM,SAAS;AACf,IAAM,QAAQ;AAGd,IAAM,WAAU;AAGT,SAAS,iBAAiB,GAAa;AAAA,EAC7C,OAAO,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM;AAAA,IACnD,IAAI,OAAO;AAAA,IACX,SAAS,KAAK,EAAG,KAAK,QAAQ,MAAM,GAAG;AAAA,MACtC,QAAQ,SAAS,WAAU,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;AAAA,GAC1C;AAAA;AAQK,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EAC9D,MAAM,OAAO,MACX,YAAY,EACZ,QAAQ,UAAU,EAAE,EACpB,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,GAAG;AAAA,EACtB,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO;AAAA;AAIlC,IAAM,SAAS,CAAC,QAAgB,UAC/B,WAAW,QAAQ,UAAS,KAAK;AAElC,IAAM,MAAM,CAAC,KAAa,QAAgB,SACzC,UAAU,KAAK,CAAC,QAAQ,IAAI,CAAC;AAGvB,SAAS,gBAAgB,CAC/B,QACA,QACA,MACS;AAAA,EACT,MAAM,OAAO,iBAAiB,IAAI,KAAK;AAAA,EACvC,MAAM,MAAM,OAAO,QAAQ,OAAO,QAAQ;AAAA,EAC1C,OAAO,MAAM,OAAO,YAAY,IAAI,KAAK,QAAQ,IAAI,EAAE,SAAS,WAAW;AAAA;AAWrE,SAAS,gBAAgB,CAC/B,QACA,QACA,QACA,OACA,OACS;AAAA,EACT,MAAM,OAAO,iBAAiB,KAAK;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,OAAO,QAAQ,CAAC,MAAM,UAAU;AAAA,IAC/B,OAAO,SAAS,OAAO,SAAS,QAAQ,KAAK,MAAM,GAAG;AAAA,IACtD,IACC,YAAY,QACZ,UAAU,aACV,SAAS,aACT,KAAK,SAAS,GACb;AAAA,MACD,MAAM,IAAI,UACT,GAAG,mDACJ;AAAA,IACD;AAAA,IACA,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,IAChC,IAAI,QAAQ,WAAW;AAAA,MACtB,MAAM,IAAI,UACT,GAAG,kDAAkD,uGACtD;AAAA,IACD;AAAA,IACA,IAAI,SAAS;AAAA,MAAM;AAAA,IACnB,MAAM,OAAO,OAAO,KAAK,MAAM,WAAW;AAAA,IAC1C,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,IACnC,IAAI,KAAK,WAAW,MAAM,UAAU,iBAAgB,MAAM,KAAK,GAAG;AAAA,MACjE,QAAQ,UAAU,KAAK,QAAQ;AAAA,IAChC;AAAA,GACA;AAAA,EACD,OAAO;AAAA;;;AC5GD,IAAM,UAAU,CACtB,MACA,MACA,SACA,OACA,WAEA,IAAI,mBAAkB,MAAM,GAAG,UAAU,WAAW;AAAA,EACnD,WAAW;AAAA,EACX,QAAQ,OAAO;AAAA,EACf,UAAU,KAAK;AAChB,CAAC;;;ACHF,eAAsB,cAAc,CACnC,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,WAAW,MAAM;AAAA,MACpB,MAAM,QACL,MACA,8BACA,6DACA,OACA,MACD;AAAA,IACD;AAAA,IACA,IAAI,SAAS,MAAM,GAAG;AAAA,MACrB,MAAM,QACL,MACA,wBACA,8CACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa;AAAA,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,IAAI;AAAA,IACpE,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,aAAa;AAAA,QACb,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,MAAM,KAAK,SAAS,4BAA4B,SAAS,QAAQ,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;ACjE/C,eAAsB,aAAa,CAClC,SACA,MACA,MACA,SACA,OACmB;AAAA,EACnB,IAAI,YAAY;AAAA,EAChB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,YAAY,SAAS,OAAO,YAAY;AAAA,IACxC,OAAO,EAAE,cAAc,KAAK;AAAA,GAE9B;AAAA,EACA,IAAI,WAAW;AAAA,IACd,MAAM,KACL,SACA,6BACA,SACA,QAAQ,SACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;AC5BtB,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,OACiC;AAAA,EACjC,MAAM,aAAa,gBAClB,SACA,OACA,mCACD;AAAA,EACA,MAAM,SAAS,eAAe;AAAA,EAE9B,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,IAAI,SAAS,OAAO,YAAY,GAAG;AAAA,MAClC,MAAM,QACL,MACA,wBACA,yDACA,OACA,MACD;AAAA,IACD;AAAA,IACA,UAAU,MAAM,QAAQ,KAAK;AAAA,IAC7B,OAAO;AAAA,MACN,cAAc;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,EAAE;AAAA,QACjD,aAAa;AAAA,QACb,UAAU;AAAA,QACV,eAAe,CAAC;AAAA,MACjB;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,KAAK,WAAW,WAAW,QAAQ,UAAU,MAAM,SAAS,KAAK,GAAG,MAAM;AAAA,EAC3E;AAAA;AAID,SAAS,SAAS,CACjB,MACA,QACA,OACS;AAAA,EACT,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,wEACvB;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO,OAAO,KAAK,SAAS,MAAM;AAAA;;;ACvC1C,IAAM,qBAAqB,KAAK;AAEvC,IAAM,iBAAiB,qBAAqB;AAO5C,IAAM,WAAU;AAGhB,SAAS,QAAQ,CAChB,QACA,QACA,QACA,MACS;AAAA,EACT,MAAM,QAAQ;AAAA,IACb,OAAO;AAAA,IACP,OAAO,MAAM;AAAA,IACb,OAAO,OAAO,cAAc,YAAY,EAAE;AAAA,IAC1C,OAAO,IAAI;AAAA,EACZ;AAAA,EAEA,MAAM,MAAM,WAAW,QAAQ,QAAO;AAAA,EACtC,OAAO,WAAW,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW,CAAC;AAAA;AAS9D,eAAsB,mBAAmB,CACxC,SACA,QACA,QACA,OACkB;AAAA,EAClB,QAAQ,aAAa,MAAM,cAAc,SAAS;AAAA,IACjD,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ,OAAO;AAAA,IACf,UAAU,CAAC,QAAQ,SAAS,SAAS,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAEjE,UAAU,MACT,IAAI,eACH,WACA,GAAG,gFACH;AAAA,MACC,QAAQ,OAAO;AAAA,MACf,iBAAiB,OAAO;AAAA,MACxB,WAAW;AAAA,IACZ,CACD;AAAA,EACF,CAAC;AAAA,EACD,IAAI,WAAW,eAAe;AAAA,IAC7B,MAAM,IAAI,YACT,gBACA,GAAG,mDAAmD,gCACtD;AAAA,MACC,WAAW;AAAA,MACX,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,cAAc;AAAA,IACf,CACD;AAAA,EACD;AAAA,EACA,OAAO,gBAAgB;AAAA;;;ACpFxB,eAAsB,uBAAuB,CAC5C,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,sCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,MACtB,MAAM,QACL,MACA,8BACA,uEACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,OAAO,MAAM,oBAClB,SACA,WAAW,QACX,QACA,KACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa,MAAM;AAAA,MACtB,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,KACL,SACA,iCACA,SACA,QAAQ,SACT;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;AC9DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACY;AAAA,EACZ,OAAO;AAAA,SACA,OAAM,CAAC,MAAM,SAAS;AAAA,MAC3B,OAAO,aACN,SACA,MACA,MACA,SACA,GAAG,qBAAqB,CACzB;AAAA;AAAA,SAGK,SAAQ,CAAC,MAAM,MAAM,SAAS;AAAA,MACnC,OAAO,eACN,SACA,MACA,MACA,MACA,SACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,SAGK,wBAAuB,CAAC,MAAM,MAAM,SAAS;AAAA,MAClD,OAAO,wBACN,SACA,MACA,MACA,MACA,SACA,GAAG,sCAAsC,CAC1C;AAAA;AAAA,SAGK,QAAO,CAAC,MAAM,SAAS;AAAA,MAC5B,OAAO,cACN,SACA,MACA,MACA,SACA,GAAG,sBAAsB,CAC1B;AAAA;AAAA,EAEF;AAAA;;;AC9CD,eAAsB,eAAe,CACpC,SACA,MACA,OAKA,IACoC;AAAA,EACpC,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,QAAQ,SAAS;AAAA,EACjB,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,WAAW,KAAK;AAAA,EACxE,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EAEtB,MAAM,QAAQ,iBACb,OAAO,WAAW,QAClB,OAAO,IACP,OAAO,eACP,OAAO,IAAI,GACX,KACD;AAAA,EACA,IAAI,UAAU;AAAA,IAAI,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAEhE,MAAM,gBAAgB,OAAO,cAAc,OAC1C,CAAC,GAAG,UAAU,UAAU,KACzB;AAAA,EACA,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP;AAAA,IACC,cAAc,KAAK,QAAQ,cAAc;AAAA,IACzC,WAAW,QAAQ,MAAM,IAAI;AAAA,EAC9B,GACA,OAAO,OACR;AAAA,EAGA,IAAI;AAAA,EACJ,IAAI;AAAA,IACH,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,IAClD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,IACtD,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,YAC1D;AAAA,IACD,MAAM,KAAK,SAAS,yBAAyB,SAAS,QAAQ,SAAS;AAAA;AAAA,EAExE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO,KAAK,UAAU,mBAAmB,cAAc,OAAO;AAAA;;;ACpDxD,SAAS,iBAAiB,CAChC,SACA,MACA,IACC;AAAA,EACD,MAAM,aAAa,eAAe,SAAS,MAAM,EAAE;AAAA,EACnD,MAAM,MAAgD;AAAA,OAClD,eAAe,SAAS,MAAM,EAAE;AAAA,IACnC,SAAS,WAAW;AAAA,IACpB,SAAS,CAAC,WAAW,MAAM,YAC1B,gBAAgB,SAAS,MAAM,EAAE,WAAW,MAAM,QAAQ,GAAG,EAAE;AAAA,IAChE,mBAAmB,CAAC,SACnB,oBACC,SACA,MACA,MACA,GAAG,gCAAgC,CACpC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IAOA,QAAQ,CACP,QACA,OACA,WAEA,SAAS,OAAO,YAAY,IACzB,WAAW,MAAM,QAAQ,KAAK,IAC9B,YAAY,SAAS,MAAM,QAAQ,MAAM;AAAA,EAC9C;AAAA;;;ACHM,SAAS,eAAe,CAC9B,SACA,MACA,IACA,QAC8D;AAAA,EAC9D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,WAAW,MAAM,SAAS;AAAA,MACvC,OAAO,YACN,SACA,MACA,QACA,EAAE,WAAW,MAAM,QAAQ,GAC3B,EACD;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,mBAAmB,SAAS,MAAM,cAAc,OAAO,KAAK;AAAA,EAClE,MAAM,YAAY,WAAW;AAAA,EAC7B,OAAO,OAAO,OAAO;AAAA,IACpB;AAAA,IACA,MAAM,SAAS,OAAO,MACrB,gBAAgB,SAAS,MAAM,OAAO,SAAS,CAChD;AAAA,EACD,CAAC;AAAA;AAIF,eAAe,eAAe,CAC7B,SACA,MACA,OACA,WACsC;AAAA,EAEtC,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC,QAAQ;AAAA,EACT,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,cAAc,MAAM;AAAA,EAC7D,OAAO;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,OAAO;AAAA,IACP;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,WAAW,CACzB,SACA,MACA,QACA,OAKA,IACiC;AAAA,EACjC,MAAM,QAAQ,GAAG,oBAAoB;AAAA,EACrC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,MAAM,SAAS,OAAO,MAAM,SAAS;AAAA,EACrC,MAAM,OAAO,MAAM;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,cACA,OACA,KAAK,IACN;AAAA,EAKA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,IAAI,CAAC,GAAG;AAAA,IAE9C,IAAI,MAAM,aAAa,eAAe;AAAA,MACrC,MAAM,YAAY,SAAS,QAAQ,YAAY;AAAA,IAChD;AAAA,IACA,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EAEA,MAAM,aAAa,SAAS,QAAQ,cAAc,OAAO,WAAW;AAAA,EACpE,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;ACtJF,IAAM,QAAQ,CAAC,SAAkB,QAAgB,UAChD,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAO3D,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,OAAO,QAAQ,iBAAiB;AAAA,EACxC,IAAI,SAAS,KAAK,YAAY,GAAG;AAAA,IAChC,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,wBACA,GAAG,mGACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,IAAI,CAAC,YAAY,OAAO,QAAQ,IAAI,GAAG;AAAA,IACtC,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,EAClC,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA;AAU7C,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,QAAQ,iBAAiB;AAAA,EACjC,MAAM,SAAS,KAAK;AAAA,EACpB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,8BACA,GAAG,2EACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,aAAa,MAAM,oBACxB,SACA,WAAW,QACX,MACA,KACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,KAAK;AAAA,EACtE,IAAI,aAAa,MAAM;AAAA,IACtB,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YACL,OACA,KAAK,IACL,KAAK,MACL,KAAK,IAAI,cAAc,UAAU,CAClC;AAAA,EACD;AAAA,EAGA,MAAM,QAAQ,MAAM,MAAM,WACzB,KAAK,IACL,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,KAAK,OACN;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA;;;ACxFnC,eAAsB,UAAU,CAC/B,SACA,MACA,SACA,OACA,QACA,OACwB;AAAA,EACxB,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO,IAAI,WAAW;AAAA,EACtE,IAAI,YAAY,QAAQ,QAAQ,WAAW,MAAM,QAAQ;AAAA,IACxD,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAAA,IAChE,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;ACzBxB,eAAsB,aAAa,CAClC,SACA,MACA,MACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAAS,OAAO,YAAY,IACxC,MAAM,MAAM,SAAS,QAAQ,KAAK,IAClC,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,EAG7C,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,UACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,SAAS,CAC5B;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,KAAK,CACnB,SACA,QACA,OACgC;AAAA,EAChC,gBAAgB,SAAS,OAAO,oCAAoC;AAAA,EACpE,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,OAAO,CACrB,SACA,MACA,QACA,OACkC;AAAA,EAClC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAGA,MAAM,gBAAgB,SAAS,MAAM,UAAU,OAAO,IAAI,KAAK;AAAA,EAC/D,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;;;AClFM,SAAS,WAAW,CAC1B,SACA,MACA,IAC6C;AAAA,EAC7C,OAAO;AAAA,SACA,QAAO,CAAC,MAAM;AAAA,MACnB,OAAO,cAAc,SAAS,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAAA;AAAA,SAGzD,QAAO,CAAC,SAAS,WAAW,MAAM;AAAA,MACvC,OAAO,cACN,SACA,MACA,SACA,OAAO,SAAS,GAChB,OAAO,IAAI,GACX,GAAG,gBAAgB,CACpB;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,aAAa,CAC3B,SACA,MACA,SACA,QACA,MACA,OACmB;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,UACA,OACA,KAAK,IACN;AAAA,EACA,QAAQ,SAAS,SAAS,MAAM,WAC/B,SACA,MACA,SACA,OACA,QACA,KACD;AAAA,EAEA,MAAM,UAAU,EAAE,OAAO,QAAQ,aAAa;AAAA,EAE9C,IAAI,MAAM,aAAa,MAAM;AAAA,IAC5B,MAAM,aAAa,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA,EAC7D,EAAO;AAAA,IACN,MAAM,iBAAiB,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA;AAAA,EAGjE,MAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,sBAC9C,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,EAEA,IAAI,cAAc,MAAM;AAAA,IACvB,MAAM,IAAI,YACT,iBACA,GAAG,gEACH,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,OAAO,UAAU,SAAS;AAAA;;;ACtFpB,SAAS,gBAAgB,CAC/B,SACA,MAC0B;AAAA,EAC1B,OAAO;AAAA,SACA,YAAW,CAAC,OAAO;AAAA,MAExB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM;AAAA,QAAI,OAAO;AAAA,MAC7D,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,MACvD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,EAE/C;AAAA;;;ACXM,IAAM,UAAU,OACtB,SACA,MACA,UAEA,WAAW,KAAK,IACb,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,KAAK,IACpD;;;ACCJ,eAAsB,cAAc,CACnC,SACA,MACA,MACA,QACA,SACA,OACsB;AAAA,EACtB,aAAa,MAAM,KAAK;AAAA,EACxB,cAAc,MAAM,QAAQ,MAAM,KAAK;AAAA,EACvC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAE3C,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,IACC,OAAO,aAAa,QACpB,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,SAAS,KAAK,GAC7D;AAAA,MACD,MAAM,IAAI,iBACT,uBACA,GAAG,8CACH;AAAA,QACC,QAAQ,OAAO,aAAa,OAAO,eAAe;AAAA,QAClD,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO;AAAA,MACN,UAAU;AAAA,QACT,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI;AAAA,QACnC,WAAW;AAAA,MACZ;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACtC,OAAO;AAAA;;;AC9CR,eAAsB,MAAM,CAC3B,SACA,MACA,OACA,OACsB;AAAA,EACtB,QAAQ,OAAO,UAAU;AAAA,EACzB,QAAQ,UAAU,WAAW,SAAS,SAAS,CAAC;AAAA,EAChD,MAAM,MAAM,MAAM,IAAI;AAAA,EACtB,MAAM,SAAS,MAAM,eAAe,MAAM,MAAM,KAAK;AAAA,EAErD,IAAI,OAA+B;AAAA,EACnC,IAAI,aAAa,WAAW;AAAA,IAC3B,cAAc,MAAM,UAAoB,KAAK;AAAA,IAC7C,OAAO;AAAA,MACN,MAAM,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAkB;AAAA,MACjE,WAAW;AAAA,IACZ;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,MAAM,WAAW;AAAA,IAC7C,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,IACpB,QAAQ,WAAW,YAAY,OAAO,WAAW;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACZ,CAAC;AAAA,EAGD,MAAM,KAAK,SAAS,gBAAgB,UAAU,SAAS,SAAS;AAAA,EAChE,OAAO;AAAA;;;ACxBR,eAAsB,MAAM,CAC3B,SACA,MACA,QACA,OACA,MACiC;AAAA,EACjC,QAAQ,OAAO,WAAW;AAAA,EAC1B,MAAM,OAAO,aAAa,MAAM,KAAK;AAAA,EACrC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAC3C,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,MAAM,WAAW,QAAQ;AAAA,EAEzB,MAAM,aAAa,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI;AAAA,EAGvE,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,mBAAmB,SAAS,MAAM,YAAY,KAAK;AAAA,EAC1D;AAAA,EACA,MAAM,SACL,eAAe,OAAO,OAAO,MAAM,QAAQ,SAAS,MAAM,UAAU;AAAA,EACrE,MAAM,SAAS,CAAC,WACf,IAAI,iBACH,uBACA,GAAG,kDACH,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EAED,IAAI,WAAW,QAAQ,OAAO,aAAa,MAAM;AAAA,IAIhD,MAAM,OAAO,OAAO,OAAO,QAAQ,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,IAC/D,MAAM,OAAO,WAAW,OAAO,iBAAiB,YAAY;AAAA,EAC7D;AAAA,EAEA,IAAI,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,QAAQ,GAAG,KAAK,GAAI;AAAA,IACvE,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAGA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAKA,IAAI,CAAC,SAAS,OAAO,YAAY,GAAG;AAAA,IACnC,MAAM,mBAAmB,SAAS,MAAM,QAAQ,KAAK;AAAA,EACtD;AAAA,EACA,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,EACjE,MAAM,SAAS,MAAM,OAAO,UAAU,OAAO,MAAM;AAAA,EAGnD,IACC,CAAE,MAAM,eACP,SACA,MACA,UACA,OAAO,QAAQ,GACf,QACA,KACD,GACC;AAAA,IACD,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAEA,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;AC1ED,SAAS,aAAa,CAC5B,SACA,MACA,IACA,QAC6D;AAAA,EAC7D,OAAO;AAAA,SACA,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,aAAa,MAAM,KAAK;AAAA,MACxB,IAAK,QAAkB,gBAAgB,WAAW;AAAA,QACjD,cAAc,MAAM,WAAgC,KAAK;AAAA,MAC1D;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,OAAgB,KAAK;AAAA,MAChE,OAAO,YAAY,SAAS,MAAM,QAAQ,QAAQ,IAAI;AAAA;AAAA,SAGjD,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,OAAO,SAAS,MAAM,QAAQ,OAAgB,EAAE,OAAO,OAAO,CAAC;AAAA;AAAA,SAGjE,YAAW,CAAC,OAAO;AAAA,MACxB,MAAM,OAAO,aAAa,MAAM,GAAG,aAAa,CAAC;AAAA,MACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,MACjE,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,YAAW,CAAC,MAAM,UAAU,SAAS;AAAA,MAC1C,MAAM,QAAQ,GAAG,aAAa;AAAA,MAC9B,aAAa,MAAM,KAAK;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK;AAAA,MACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,MAE9D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,IAAI,EAAE,EACnD;AAAA,MACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,MACtC,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,eAAc,CAAC,MAAM,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,GAAG,gBAAgB;AAAA,MACjC,OAAO,OACN,MAAM,eAAe,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,CACjE;AAAA;AAAA,EAEF;AAAA;;;ACpED,eAAsB,UAAU,CAC/B,SACA,MACA,MACmB;AAAA,EACnB,QAAQ,OAAO,UAAU;AAAA,EACzB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EAItB,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS,EAAE;AAAA,EAC5C,IAAI,WAAW,QAAQ,OAAO,SAAS,KAAK;AAAA,IAAM,OAAO;AAAA,EAMzD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,MAAM,UAAU,WAAW,QAAS,MAAM,MAAM,MAAM,WAAW,EAAE;AAAA,EACnE,IAAI;AAAA,IACH,MAAM,MAAM,SAAS,mBAAmB,EAAE;AAAA,IAC1C,MAAM,MAAM,OAAO,iBAAiB,EAAE;AAAA,IAEtC,MAAM,QAAQ,WAAW,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,YAC5D;AAAA,IAID,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,gBAAgB,EAAE,IAAI,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,IACvE;AAAA;AAAA,EAED,OAAO;AAAA;;;AC7BD,IAAM,kBAAkB;AAOxB,IAAM,wBAAwB;AAWrC,eAAsB,eAAe,CACpC,SACA,KACA,MACA,OACwB;AAAA,EACxB,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AAAA,IACxB,MAAM,IAAI,UAAU,GAAG,yCAAyC;AAAA,EACjE;AAAA,EAEA,MAAM,SAAS;AAAA,IACd,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,MAAK,EAAE,CAAC,CAAC;AAAA,EAClE;AAAA,EACA,MAAM,QAAQ,IAAI;AAAA,EAElB,SAAS,QAAQ,EAAG,QAAQ,OAAO,QAAQ,SAAS,iBAAiB;AAAA,IACpE,MAAM,QAAQ,OAAO,MAAM,OAAO,QAAQ,eAAe;AAAA,IACzD,WAAW,UAAU,MAAM,UAAU,SAAS,KAAK,GAAG;AAAA,MACrD,IAAI,OAAO,SAAS;AAAA,QAAM,MAAM,IAAI,OAAO,IAAI,MAAM;AAAA,IACtD;AAAA,EACD;AAAA,EAIA,OAAO,OAAO,QAAQ,CAAC,OAAO;AAAA,IAC7B,MAAM,SAAS,MAAM,IAAI,EAAE;AAAA,IAC3B,OAAO,WAAW,YAAY,CAAC,IAAI,CAAC,MAAM;AAAA,GAC1C;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,KACiC;AAAA,EACjC,QAAQ,UAAU,QAAQ;AAAA,EAE1B,IAAI,QAAQ,aAAa,aAAa,MAAM,cAAc,WAAW;AAAA,IACpE,MAAM,SAAkB,MAAM,MAAM,UAAU,GAAG;AAAA,IACjD,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAAA,MAC3B,MAAM,IAAI,cACT,kGACA,EAAE,MAAM,SAAS,WAAW,YAAY,CACzC;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,UAAwB,CAAC;AAAA,EAC/B,SAAS,QAAQ,EAAG,QAAQ,IAAI,QAAQ,SAAS,uBAAuB;AAAA,IACvE,MAAM,UAAU,MAAM,QAAQ,IAC7B,IACE,MAAM,OAAO,QAAQ,qBAAqB,EAC1C,IAAI,CAAC,OAAO,MAAM,SAAS,EAAE,CAAC,CACjC;AAAA,IACA,WAAW,UAAU;AAAA,MAAS,IAAI,WAAW;AAAA,QAAM,QAAQ,KAAK,MAAM;AAAA,EACvE;AAAA,EACA,OAAO;AAAA;;;AC5ER,eAAsB,MAAM,CAC3B,SACA,MACA,MACA,OACA,SACA,OACsB;AAAA,EAItB,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,KAAK,WAAW;AAAA,IAChB,OAAO,YAAY,MAAM,QAAQ,OAAO,KAAK;AAAA,GAE/C;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,IACC,aAAa,QACb,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM,GACjD;AAAA,IAID,IAAI;AAAA,MACH,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QAAQ,IACR,eACA,QAAQ,MAAM,IAAI,CACnB;AAAA,cACC;AAAA,MACD,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,QACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,MAC3C,CAAC;AAAA;AAAA,EAEH;AAAA,EACA,OAAO;AAAA;;;AClCD,SAAS,WAAW,CAC1B,SACA,MACA,IAC8B;AAAA,EAC9B,QAAQ,UAAU;AAAA,EAElB,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,MAAM,OAAO,SAAS,MAAM,OAAgB,GAAG,QAAQ,CAAC,CAAC;AAAA;AAAA,SAGlE,KAAI,CAAC,IAAI;AAAA,MACd,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,KAAK,IAAI;AAAA,MACtD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,SAAQ,CAAC,KAAK;AAAA,MACnB,MAAM,UAAU,MAAM,gBACrB,SACA,KACA,KAAK,MACL,GAAG,UAAU,CACd;AAAA,MACA,OAAO,QAAQ,IAAI,MAAM;AAAA;AAAA,SAGpB,IAAG,CAAC,IAAI;AAAA,MACb,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC;AAAA;AAAA,SAG3D,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,MAAM,SAAS;AAAA,MAG7B,IAAI,UAAU,QAAQ,CAAC,MAAK,KAAK,GAAG;AAAA,QACnC,MAAM,eAAc,GAAG,MAAM,GAAG,KAAK;AAAA,MACtC;AAAA,MAEA,MAAM,SAAS,MAAM,MAAM,MAAM,UAAU;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX;AAAA,QACA,OAAO,WAAU,MAAM,OAAO,GAAG,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,MACD,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,YAAY,OAAO,WAAW;AAAA;AAAA,SAGnE,OAAM,CAAC,MAAM,OAAO,SAAS;AAAA,MAClC,OAAO,OACN,MAAM,OACL,SACA,MACA,MACA,OACA,SACA,GAAG,QAAQ,CACZ,CACD;AAAA;AAAA,SAGK,UAAS,CAAC,MAAM,QAAQ,SAAS;AAAA,MACtC,OAAO,OACN,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,OAAO;AAAA,QACrE,QAAQ,WAAW;AAAA,MACpB,EAAE,CACH;AAAA;AAAA,SAGK,OAAM,CAAC,MAAM;AAAA,MAClB,OAAO,WAAW,SAAS,MAAM,IAAI;AAAA;AAAA,EAEvC;AAAA;;;AC3EM,SAAS,OAAO,CAAC,SAAkB,MAAgC;AAAA,EACzE,MAAM,KAAS,CAAC,cACf,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,QAAQ;AAAA,EACrD,MAAM,eAAe,kBAAkB,SAAS,MAAM,EAAE;AAAA,EACxD,MAAM,aAAa,gBAAgB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,EAEzE,OAAO;AAAA,OACH,YAAY,SAAS,MAAM,EAAE;AAAA,OAC7B,cAAc,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,OACpD,kBAAkB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAE3D,cAAc,aAAa;AAAA,IAC3B;AAAA,IACA,WAAW,eAAe,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAChE,QAAQ,YAAY,SAAS,MAAM,EAAE;AAAA,OAElC,iBAAiB,SAAS,IAAI;AAAA,OAC9B,WAAW,SAAS,MAAM,EAAE;AAAA,EAChC;AAAA;;ACSM,SAAS,KAAkC,CACjD,QACW;AAAA,EACX,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW,cAAc,QAAQ,KAAK;AAAA,EAC5C,mBAAmB,UAAU,KAAK;AAAA,EAClC,MAAM,eAAe,aAAa,OAAO,OAAO,KAAK;AAAA,EAErD,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,MAAM,YAAY;AAAA,IACjB,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM;AAAA,IAClC,GAAI,OAAO,aAAa,CAAC;AAAA,EAC1B;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,YAAY,WAAW;AAAA,IACjC,IAAI,OAAO,UAAU,WAAW,YAAY,SAAS,WAAW,IAAI;AAAA,MACnE,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,IACtE;AAAA,IACA,IAAI,SAAS,IAAI,SAAS,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,UACT,GAAG,wCAAwC,SAAS,0DACrD;AAAA,IACD;AAAA,IACA,SAAS,IAAI,SAAS,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,OAAO,aAAa;AAAA,EACtC,IACC,cAAc,QACd,OAAQ,UAAyC,iBAAiB,YACjE;AAAA,IACD,MAAM,IAAI,UACT,GAAG,+EACJ;AAAA,EACD;AAAA,EAEA,MAAM,UAAU,cACf,UACA,YAAY,OAAO,KAAK,GACxB,cAAc,OAAO,OAAO,eAAe,SAAS,GACpD,cACA,OAAO,SAAS,aAChB,QACA,WACA,cAAc,OAAO,QAAQ,KAAK,CACnC;AAAA,EAEA,MAAM,SAAS,UAAU,OAAO;AAAA,EAChC,MAAM,QAAQ,OAAO,YACpB,CAAC,GAAG,SAAS,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1C,KAAK;AAAA,IACL,QAAQ,SAAS,IAAI;AAAA,EACtB,CAAC,CACF;AAAA,EAIA,MAAM,UAAU,SAAS,SACtB,KAAK,WAAW,MAAM,QAAQ,IAC9B,KAAK,WAAW,MAAM;AAAA,EACzB,OAAO;AAAA;;AC/ED,SAAS,WAAW,CAC1B,SACA,QACA,QAAe,aACR;AAAA,EACP,MAAM,WAAW,cAAc,QAAQ,qBAAqB;AAAA,EAC5D,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,EACpE,IAAI,OAAO,UAAU;AAAA,IACpB,MAAM,IAAI,qBACT,6FACA,EAAE,QAAQ,QAAQ,OAAO,CAC1B;AAAA,EACD;AAAA;",
96
+ "debugId": "33064E7A9A36409664756E2164756E21",
95
97
  "names": []
96
98
  }