@nxgt/janus 0.24.0 → 0.26.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +39 -12
- package/dist/auth/config/reserved.d.ts +1 -1
- package/dist/auth/config/reserved.d.ts.map +1 -1
- package/dist/auth/email-flows/any-type-change-email.d.ts +18 -0
- package/dist/auth/email-flows/any-type-change-email.d.ts.map +1 -0
- package/dist/auth/email-flows/change-email-token.d.ts +6 -1
- package/dist/auth/email-flows/change-email-token.d.ts.map +1 -1
- package/dist/auth/email-flows/change-email.d.ts +6 -0
- package/dist/auth/email-flows/change-email.d.ts.map +1 -1
- package/dist/auth/index.d.ts +1 -1
- package/dist/auth/index.d.ts.map +1 -1
- package/dist/auth/janus.d.ts.map +1 -1
- package/dist/auth/outage.d.ts +2 -2
- package/dist/auth/port/assert-stores.d.ts.map +1 -1
- package/dist/auth/port/memory/tokens.d.ts.map +1 -1
- package/dist/auth/port/types/stores.d.ts +2 -0
- package/dist/auth/port/types/stores.d.ts.map +1 -1
- package/dist/auth/port/types/tokens.d.ts +12 -0
- package/dist/auth/port/types/tokens.d.ts.map +1 -1
- package/dist/auth/sessions/collect-expired.d.ts +14 -0
- package/dist/auth/sessions/collect-expired.d.ts.map +1 -0
- package/dist/auth/sessions/shared-api.d.ts +1 -1
- package/dist/auth/sessions/shared-api.d.ts.map +1 -1
- package/dist/auth/types/change-email.d.ts +31 -0
- package/dist/auth/types/change-email.d.ts.map +1 -1
- package/dist/auth/types/index.d.ts +1 -1
- package/dist/auth/types/index.d.ts.map +1 -1
- package/dist/auth/types/janus.d.ts +13 -5
- package/dist/auth/types/janus.d.ts.map +1 -1
- package/dist/chunks/{index-6bjfv4xv.js → index-q3w3vr69.js} +13 -3
- package/dist/chunks/{index-6bjfv4xv.js.map → index-q3w3vr69.js.map} +3 -3
- package/dist/chunks/{index-cntabs9d.js → index-rpp0bw6e.js} +2 -2
- package/dist/chunks/{index-kppkcbn5.js → index-spwh8b9z.js} +2 -5
- package/dist/chunks/{index-kppkcbn5.js.map → index-spwh8b9z.js.map} +2 -2
- package/dist/chunks/{index-4khsm7mw.js → index-y9b327j8.js} +18 -18
- package/dist/chunks/{index-4khsm7mw.js.map → index-y9b327j8.js.map} +5 -5
- package/dist/conformance/cases/outage.d.ts.map +1 -1
- package/dist/conformance/cases/tokens/deletion.d.ts.map +1 -1
- package/dist/conformance/describe.d.ts +1 -0
- package/dist/conformance/describe.d.ts.map +1 -1
- package/dist/conformance/index.js +39 -5
- package/dist/conformance/index.js.map +5 -5
- package/dist/conformance/types.d.ts +1 -1
- package/dist/conformance/types.d.ts.map +1 -1
- package/dist/index.js +478 -453
- package/dist/index.js.map +21 -19
- package/dist/permissions/index.js +3 -3
- package/docs/guide/adapters.md +40 -3
- package/docs/guide/email-flows.md +16 -2
- package/docs/guide/errors.md +1 -1
- package/docs/guide/passwords.md +7 -10
- package/docs/guide/sessions.md +15 -4
- package/docs/guide/users.md +1 -1
- package/docs/roadmap.md +14 -20
- package/docs/troubleshooting.md +12 -10
- package/package.json +1 -1
- /package/dist/chunks/{index-cntabs9d.js.map → index-rpp0bw6e.js.map} +0 -0
package/dist/index.js.map
CHANGED
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
{
|
|
2
2
|
"version": 3,
|
|
3
|
-
"sources": ["../src/auth/hashers.ts", "../src/time/clock.ts", "../src/auth/config/normalize.ts", "../src/auth/config/reserved.ts", "../src/time/duration.ts", "../src/auth/config/names.ts", "../src/auth/config/resolve-cookie.ts", "../src/auth/sealing.ts", "../src/auth/config/resolve-devices.ts", "../src/auth/config/resolve-second-factor.ts", "../src/auth/config/resolve-throttle.ts", "../src/auth/config/resolve-type.ts", "../src/auth/config/resolve-config.ts", "../src/auth/config/warn-throttle-window.ts", "../src/auth/context/create-context.ts", "../src/auth/context/logins.ts", "../src/auth/outage.ts", "../src/auth/context/password.ts", "../src/auth/context/user.ts", "../src/auth/context/records.ts", "../src/auth/context/validate-fields.ts", "../src/auth/events.ts", "../src/auth/
|
|
3
|
+
"sources": ["../src/auth/hashers.ts", "../src/time/clock.ts", "../src/auth/config/normalize.ts", "../src/auth/config/reserved.ts", "../src/time/duration.ts", "../src/auth/config/names.ts", "../src/auth/config/resolve-cookie.ts", "../src/auth/sealing.ts", "../src/auth/config/resolve-devices.ts", "../src/auth/config/resolve-second-factor.ts", "../src/auth/config/resolve-throttle.ts", "../src/auth/config/resolve-type.ts", "../src/auth/config/resolve-config.ts", "../src/auth/config/warn-throttle-window.ts", "../src/auth/context/create-context.ts", "../src/auth/context/logins.ts", "../src/auth/outage.ts", "../src/auth/context/password.ts", "../src/auth/context/user.ts", "../src/auth/context/records.ts", "../src/auth/context/validate-fields.ts", "../src/auth/events.ts", "../src/auth/derived-keys.ts", "../src/auth/counter-key.ts", "../src/auth/one-time/codes.ts", "../src/auth/secrets.ts", "../src/auth/one-time/refusals.ts", "../src/auth/one-time/spend.ts", "../src/auth/one-time/issue.ts", "../src/auth/one-time/window.ts", "../src/auth/mail-requests.ts", "../src/auth/users/fields-patch.ts", "../src/auth/email-flows/change-email-token.ts", "../src/auth/email-flows/change-email.ts", "../src/auth/email-flows/any-type-change-email.ts", "../src/auth/port/assert-stores.ts", "../src/auth/devices/token.ts", "../src/auth/devices/hint.ts", "../src/auth/devices/report.ts", "../src/auth/sessions/open-session.ts", "../src/auth/sessions/presented-token.ts", "../src/auth/sessions/standing.ts", "../src/auth/sessions/authenticate.ts", "../src/auth/sessions/collect-expired.ts", "../src/auth/sessions/cookie.ts", "../src/auth/sessions/shared-api.ts", "../src/auth/password-written.ts", "../src/auth/prepared.ts", "../src/auth/email-flows/email-token.ts", "../src/auth/email-flows/reset-password.ts", "../src/auth/totp.ts", "../src/auth/second-factor/factor.ts", "../src/auth/first-proof.ts", "../src/auth/email-flows/prove-first.ts", "../src/auth/email-flows/verify-email.ts", "../src/auth/email-flows/flows.ts", "../src/auth/email-sign-in.ts", "../src/auth/magic-link.ts", "../src/auth/proven-sign-in.ts", "../src/auth/sign-in-attempts.ts", "../src/auth/second-factor/redeem.ts", "../src/auth/second-factor/challenge.ts", "../src/auth/second-factor/codes-left.ts", "../src/auth/second-factor/recovery-codes.ts", "../src/auth/second-factor/refusal.ts", "../src/auth/second-factor/activate.ts", "../src/auth/second-factor/disable.ts", "../src/auth/second-factor/enroll.ts", "../src/auth/second-factor/app-code-attempts.ts", "../src/auth/second-factor/regenerate.ts", "../src/auth/second-factor/lifecycle.ts", "../src/auth/second-factor/recovery.ts", "../src/auth/second-factor/flows.ts", "../src/auth/sign-in-code.ts", "../src/auth/step-up/codes.ts", "../src/auth/step-up/open.ts", "../src/auth/step-up/request.ts", "../src/auth/step-up/flows.ts", "../src/auth/users/find-by-email.ts", "../src/auth/users/by-login.ts", "../src/auth/users/insert.ts", "../src/auth/users/find-or-create.ts", "../src/auth/users/change-password.ts", "../src/auth/users/sign-in.ts", "../src/auth/users/password-flows.ts", "../src/auth/users/delete.ts", "../src/auth/users/find-many.ts", "../src/auth/users/update.ts", "../src/auth/users/record-flows.ts", "../src/auth/users/type-api.ts", "../src/auth/janus.ts", "../src/auth/sessions/fresh.ts"],
|
|
4
4
|
"sourcesContent": [
|
|
5
5
|
"import { randomBytes, scrypt, timingSafeEqual } from 'node:crypto';\nimport type { PasswordHasher } from './config';\n\n/**\n * scrypt through `node:crypto` — the hasher that runs **everywhere**: Node and\n * Bun both implement it, and it needs no dependency.\n *\n * Measured before choosing it: `bun build --target node` leaves `Bun.password`\n * in the output as it is — a target changes the bundle's format, not which\n * APIs exist — and `crypto.argon2` is absent from Node 22. scrypt is the one\n * memory-hard function both runtimes ship.\n *\n * The defaults are OWASP's: N = 2^17, r = 8, p = 1, about 128 MiB per hash.\n * The parameters are written into the hash —\n * `$scrypt$ln=17,r=8,p=1$<salt>$<key>` — and read back from it to verify, so\n * raising `cost` later leaves every existing hash readable.\n *\n * `cost` is log2(N). Lower it only in tests: 10 is fast and still exercises\n * every line.\n *\n * A hash written with other parameters than these is rewritten with these the\n * next time its owner signs in (`needsRehash`), so raising `cost` reaches every\n * active user without a migration.\n */\nexport function scryptHasher(options?: {\n\treadonly cost?: number;\n}): PasswordHasher {\n\tconst cost = options?.cost ?? 17;\n\tif (!Number.isInteger(cost) || cost < 10 || cost > 20) {\n\t\tthrow new TypeError(\n\t\t\t'scryptHasher: cost is log2(N), an integer from 10 to 20 — 17 is the recommended value',\n\t\t);\n\t}\n\n\treturn {\n\t\tprefix: SCRYPT_PREFIX,\n\t\tasync hash(plain) {\n\t\t\tconst salt = randomBytes(16);\n\t\t\tconst key = await derive(plain, salt, cost, 8, 1);\n\t\t\treturn `${SCRYPT_PREFIX}ln=${cost},r=8,p=1$${salt.toString('base64')}$${key.toString('base64')}`;\n\t\t},\n\t\tasync verify(plain, hash) {\n\t\t\tconst parsed = SCRYPT_HASH.exec(hash);\n\t\t\t// A hash this hasher cannot parse is not a wrong password, and not\n\t\t\t// something to guess at: the core picked this verifier by prefix, so\n\t\t\t// the stored hash is corrupt.\n\t\t\tif (parsed === null) {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t'scryptHasher: the stored hash has the $scrypt$ prefix and not its format',\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [, ln, r, p, salt, key] = parsed as unknown as [\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t\tstring,\n\t\t\t];\n\t\t\tconst expected = Buffer.from(key, 'base64');\n\t\t\tconst actual = await derive(\n\t\t\t\tplain,\n\t\t\t\tBuffer.from(salt, 'base64'),\n\t\t\t\tNumber(ln),\n\t\t\t\tNumber(r),\n\t\t\t\tNumber(p),\n\t\t\t\texpected.length,\n\t\t\t);\n\t\t\treturn timingSafeEqual(actual, expected);\n\t\t},\n\t\tneedsRehash(hash) {\n\t\t\tconst parsed = SCRYPT_HASH.exec(hash);\n\t\t\t// Unparseable is verify's refusal to make, not a reason to rewrite.\n\t\t\tif (parsed === null) return false;\n\t\t\tconst [, ln, r, p] = parsed;\n\t\t\treturn Number(ln) !== cost || r !== '8' || p !== '1';\n\t\t},\n\t};\n}\n\nconst SCRYPT_PREFIX = '$scrypt$';\nconst SCRYPT_HASH =\n\t/^\\$scrypt\\$ln=(\\d+),r=(\\d+),p=(\\d+)\\$([A-Za-z0-9+/=]+)\\$([A-Za-z0-9+/=]+)$/;\n\nfunction derive(\n\tplain: string,\n\tsalt: Buffer,\n\tln: number,\n\tr: number,\n\tp: number,\n\tlength = 32,\n): Promise<Buffer> {\n\t// Node's camelCase aliases for N, r and p: this repository has no other\n\t// casing, and Node accepts both spellings.\n\tconst n = 2 ** ln;\n\treturn new Promise((resolve, reject) => {\n\t\t// maxmem: Node's default (32 MiB) is below what N = 2^17, r = 8 needs.\n\t\t// `error` is null on Node and undefined on Bun when there is none —\n\t\t// measured: testing `=== null` rejected every hash under Bun.\n\t\tscrypt(\n\t\t\tplain,\n\t\t\tsalt,\n\t\t\tlength,\n\t\t\t{ cost: n, blockSize: r, parallelization: p, maxmem: 256 * n * r },\n\t\t\t(error, key) => (error ? reject(error) : resolve(key)),\n\t\t);\n\t});\n}\n\n/**\n * argon2id through `Bun.password`.\n *\n * **Loaded only when named**: nothing reads `Bun` until this function is called,\n * so the package imports cleanly under Node. On Node, `scryptHasher()` is the\n * hasher; a hash written here reads anywhere a verifier for `$argon2id$` is\n * wired, so a database can move between the two runtimes.\n */\nexport function bunHasher(): PasswordHasher {\n\t// `typeof` on an undeclared global is 'undefined' rather than a throw, so\n\t// this line is safe under Node.\n\tconst password: BunPassword | undefined =\n\t\ttypeof Bun === 'undefined' ? undefined : Bun.password;\n\n\tif (password === undefined) {\n\t\tthrow new TypeError(\n\t\t\t'bunHasher: Bun.password is not available — this runtime is not Bun; wire scryptHasher() instead',\n\t\t);\n\t}\n\n\treturn {\n\t\tprefix: '$argon2id$',\n\t\thash: (plain) => password.hash(plain, ARGON2ID),\n\t\tverify: (plain, hash) => password.verify(plain, hash),\n\t\tneedsRehash: (hash) => !hash.startsWith(ARGON2ID_PARAMETERS),\n\t};\n}\n\n/**\n * Pinned rather than left to `Bun.password`'s defaults — which they equal\n * today, measured: `$argon2id$v=19$m=65536,t=2,p=1$` — so that a change of\n * default in a Bun release is a rehash this package decided, not one it\n * inherited.\n */\nconst ARGON2ID = {\n\talgorithm: 'argon2id',\n\tmemoryCost: 65_536,\n\ttimeCost: 2,\n} as const;\nconst ARGON2ID_PARAMETERS = '$argon2id$v=19$m=65536,t=2,p=1$';\n\ninterface BunPassword {\n\thash(plain: string, options: typeof ARGON2ID): Promise<string>;\n\tverify(plain: string, hash: string): Promise<boolean>;\n}\n",
|
|
6
6
|
"/**\n * Where `now` comes from.\n *\n * Injected rather than read from `Date` directly, for one practical reason:\n * every expiry in this package — sessions, one-time tokens, refresh windows —\n * is a comparison against the current time, and a spec that has to move the\n * real clock to test one is a spec that needs fake timers, leaks them, and\n * fails differently under load. A `Clock` makes those specs synchronous and\n * exact.\n *\n * It is also the seam an application needs if it ever has to reason about a\n * store's clock rather than its own: MongoDB stamps a TTL against the server's\n * time, not the process's.\n */\nexport interface Clock {\n\tnow(): Date;\n}\n\n/** The process's own clock. The default everywhere. */\nexport const systemClock: Clock = {\n\tnow: () => new Date(),\n};\n\n/**\n * A clock a spec drives by hand.\n *\n * Shipped rather than kept in `test/`: a consumer writing their own tests\n * against this package needs exactly this, and writing it again is how two\n * subtly different versions of \"advance time\" come to exist.\n */\nexport function fixedClock(start: Date | number = 0): Clock & {\n\tadvance(ms: number): void;\n\tset(at: Date | number): void;\n} {\n\tlet ms = start instanceof Date ? start.getTime() : start;\n\n\treturn {\n\t\tnow: () => new Date(ms),\n\t\tadvance: (by) => {\n\t\t\tms += by;\n\t\t},\n\t\tset: (at) => {\n\t\t\tms = at instanceof Date ? at.getTime() : at;\n\t\t},\n\t};\n}\n",
|
|
7
7
|
"/**\n * How a login, and an e-mail, is normalised before any store sees it: the\n * rules `password.normalize` may name, and the one an e-mail always uses.\n */\n\n/**\n * How a login is normalised before any store sees it. `'lowercaseTrim'` when\n * absent — right for an e-mail and for most usernames.\n *\n * A function is accepted for anything else. It must be deterministic: the same\n * rule normalises at sign-up and at sign-in.\n */\nexport type Normalize =\n\t| 'none'\n\t| 'lowercase'\n\t| 'lowercaseTrim'\n\t| 'nfkcLowercaseTrim'\n\t| ((value: string) => string);\n\nconst NORMALIZERS = {\n\tnone: (value: string) => value,\n\tlowercase: (value: string) => value.toLowerCase(),\n\tlowercaseTrim: (value: string) => value.toLowerCase().trim(),\n\tnfkcLowercaseTrim: (value: string) =>\n\t\tvalue.normalize('NFKC').toLowerCase().trim(),\n} as const satisfies Record<string, (value: string) => string>;\n\n/** How an e-mail is compared: always the same rule, whatever the login's. */\nexport const normalizeEmail = NORMALIZERS.lowercaseTrim;\n\n/** The function a {@link Normalize} rule names, or a wiring refusal. */\nexport function normalizer(\n\trule: Normalize,\n\twhere: string,\n): (value: string) => string {\n\tif (typeof rule === 'function') return rule;\n\tif (typeof rule === 'string' && Object.hasOwn(NORMALIZERS, rule)) {\n\t\treturn NORMALIZERS[rule];\n\t}\n\n\tthrow new TypeError(\n\t\t`${where} must be \"none\", \"lowercase\", \"lowercaseTrim\", \"nfkcLowercaseTrim\" or a function`,\n\t);\n}\n",
|
|
8
|
-
"/**\n * The names `janus` keeps for itself: the single-type form's type name, the\n * keys it sets on every user, and the methods on its answer.\n */\n\n/** The type name the single-type form gives its users. */\nexport const SINGLE_TYPE = 'user';\n\n/**\n * Keys `janus` sets on every user, so a schema may not declare them.\n * `password` too: it is taken beside the fields, and never stored among them.\n */\nexport const RESERVED_FIELDS = [\n\t'id',\n\t'type',\n\t'emailVerified',\n\t'active',\n\t'hasPassword',\n\t'hasSecondFactor',\n\t'version',\n\t'createdAt',\n\t'updatedAt',\n\t'password',\n] as const;\n\n/** Names on `janus()`'s answer, so a user type may not take one. */\nexport const RESERVED_TYPES = [\n\t'authenticate',\n\t'signOut',\n\t'signOutEverywhere',\n\t'findUser',\n\t'getUser',\n\t'cookie',\n\t'collectExpired',\n\t'types',\n] as const;\n",
|
|
8
|
+
"/**\n * The names `janus` keeps for itself: the single-type form's type name, the\n * keys it sets on every user, and the methods on its answer.\n */\n\n/** The type name the single-type form gives its users. */\nexport const SINGLE_TYPE = 'user';\n\n/**\n * Keys `janus` sets on every user, so a schema may not declare them.\n * `password` too: it is taken beside the fields, and never stored among them.\n */\nexport const RESERVED_FIELDS = [\n\t'id',\n\t'type',\n\t'emailVerified',\n\t'active',\n\t'hasPassword',\n\t'hasSecondFactor',\n\t'version',\n\t'createdAt',\n\t'updatedAt',\n\t'password',\n] as const;\n\n/** Names on `janus()`'s answer, so a user type may not take one. */\nexport const RESERVED_TYPES = [\n\t'authenticate',\n\t'signOut',\n\t'signOutEverywhere',\n\t'findUser',\n\t'getUser',\n\t'cookie',\n\t'collectExpired',\n\t'types',\n\t'changeEmail',\n] as const;\n",
|
|
9
9
|
"/**\n * A span of time, written the way a configuration file writes one: `'15m'`,\n * `'720h'`, `'30d'`. A plain number is milliseconds.\n *\n * Strings rather than milliseconds everywhere, because `2592000000` in a config\n * object is a number nobody reads back correctly, and Ory's own configuration\n * uses exactly this notation — so a team moving across recognises it.\n */\nexport type Duration = number | `${number}${'ms' | 's' | 'm' | 'h' | 'd'}`;\n\nconst UNITS = {\n\tms: 1,\n\ts: 1_000,\n\tm: 60_000,\n\th: 3_600_000,\n\td: 86_400_000,\n} as const;\n\nconst PATTERN = /^(\\d+(?:\\.\\d+)?)(ms|s|m|h|d)$/;\n\n/**\n * The duration in milliseconds.\n *\n * `where` names the option the consumer wrote — `session.lifespan`, not\n * `parseDuration` — because this package has half a dozen durations and a\n * message that does not say which one leaves the reader to guess.\n *\n * A bare `TypeError`: durations are written when the application is wired, so\n * this cannot come from a request, and no handler should answer it. The refusal\n * reports the **shape** expected and not the value's own bytes beyond echoing\n * it, which is the rule this repository inherits.\n */\nexport function parseDuration(value: Duration, where: string): number {\n\tif (typeof value === 'number') {\n\t\tif (!Number.isFinite(value) || value <= 0) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: a duration in milliseconds must be a finite number above zero`,\n\t\t\t);\n\t\t}\n\t\treturn value;\n\t}\n\n\tconst match = PATTERN.exec(value);\n\n\tif (!match) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: \"${value}\" is not a duration; write a number followed by ms, s, m, h or d — for example \"15m\" or \"720h\"`,\n\t\t);\n\t}\n\n\tconst amount = Number(match[1]);\n\tconst unit = match[2] as keyof typeof UNITS;\n\tconst ms = amount * UNITS[unit];\n\n\tif (ms <= 0) {\n\t\tthrow new TypeError(`${where}: a duration must be above zero`);\n\t}\n\n\treturn ms;\n}\n",
|
|
10
10
|
"/**\n * The names a configuration gives: a user type's, and the fields it points\n * at — each camelCase, and none of them one `janus` sets itself.\n */\n\nimport { RESERVED_FIELDS } from './reserved';\n\n/** A type name, or a field name: camelCase, as every key in this package. */\nexport const NAME = /^[A-Za-z][A-Za-z0-9]*$/;\n\n/** The field a configuration key names, or a wiring refusal. */\nexport function fieldName(field: unknown, where: string): string {\n\tif (typeof field !== 'string' || !NAME.test(field)) {\n\t\tthrow new TypeError(\n\t\t\t`${where} must name a top-level field of the schema, such as \"email\"`,\n\t\t);\n\t}\n\tif ((RESERVED_FIELDS as readonly string[]).includes(field)) {\n\t\tthrow new TypeError(`${where}: \"${field}\" is a field janus sets itself`);\n\t}\n\treturn field;\n}\n",
|
|
11
11
|
"/** Resolves the session cookie: the strict defaults, and a name browsers take. */\n\nimport type { CookieConfig } from './janus-config';\nimport type { ResolvedConfig } from './resolved-config';\n\n/** RFC 6265's cookie-name token: no control character, space, or separator. */\nconst COOKIE_NAME = /^[!#$%&'*+\\-.^_`|~0-9A-Za-z]+$/;\n\nexport function resolveCookie(\n\tcookie: CookieConfig,\n\twhere: string,\n): ResolvedConfig['cookie'] {\n\tconst name = cookie.name ?? 'janus-session';\n\tif (!COOKIE_NAME.test(name)) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: cookie.name must be a cookie-name token — letters, digits and !#$%&'*+-.^_\\`|~, with no space, \";\" or \"=\"`,\n\t\t);\n\t}\n\tconst sameSite = cookie.sameSite ?? 'lax';\n\tconst secure = cookie.secure ?? true;\n\tif (sameSite === 'none' && !secure) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: cookie.sameSite \"none\" requires cookie.secure — browsers refuse the cookie otherwise`,\n\t\t);\n\t}\n\n\treturn {\n\t\tname,\n\t\tdomain: cookie.domain ?? null,\n\t\tpath: cookie.path ?? '/',\n\t\tsameSite,\n\t\tsecure,\n\t};\n}\n",
|
|
@@ -18,34 +18,36 @@
|
|
|
18
18
|
"/**\n * The one wiring mistake the mail throttle cannot refuse: a `tokens.*`\n * lifetime shorter than `mail.throttle.window`. A refused request spends\n * nothing, so the last link or code sent keeps working, but only while it has\n * not expired: with a shorter lifetime it can lapse before the refusal ends.\n * That is a choice an application may make on purpose, so it is a warning,\n * emitted once per `janus()` call, never an error.\n */\n\nimport type { ResolvedConfig } from './resolved-config';\n\n/** The flows the mail throttle counts, in the order a warning names them. */\nconst FLOWS = [\n\t'magicLink',\n\t'signInCode',\n\t'resetPassword',\n\t'verifyEmail',\n\t'stepUp',\n\t'changeEmail',\n] as const;\n\nconst UNITS: readonly (readonly [string, number])[] = [\n\t['d', 86_400_000],\n\t['h', 3_600_000],\n\t['m', 60_000],\n\t['s', 1_000],\n];\n\n/** `600000` as `10m`: the largest unit that divides it exactly. */\nfunction show(ms: number): string {\n\tconst unit = UNITS.find(([, size]) => ms % size === 0);\n\treturn unit === undefined ? `${ms}ms` : `${ms / unit[1]}${unit[0]}`;\n}\n\n/** The warning's text, or `null` when no lifetime is shorter than the window. */\nexport function throttleWindowMessage(\n\tresolved: Pick<ResolvedConfig, 'mailThrottle' | 'tokenTtlMs'>,\n\twhere: string,\n): string | null {\n\tconst throttle = resolved.mailThrottle;\n\tif (throttle === null) return null;\n\tconst window = show(throttle.windowMs);\n\tconst shorter = FLOWS.filter(\n\t\t(flow) => resolved.tokenTtlMs[flow] < throttle.windowMs,\n\t);\n\tif (shorter.length === 0) return null;\n\tconst shortest = Math.min(\n\t\t...shorter.map((flow) => resolved.tokenTtlMs[flow]),\n\t);\n\tconst parts = shorter.map(\n\t\t(flow) =>\n\t\t\t`tokens.${flow} is ${show(resolved.tokenTtlMs[flow])}, shorter than mail.throttle.window, ${window}`,\n\t);\n\treturn `${where}: ${parts.join('; ')} — past the limit the last ${shorter.length === 1 ? 'token' : 'tokens'} sent can expire before the refusal ends. Set mail.throttle.window to ${show(shortest)} or less, or raise ${shorter.map((flow) => `tokens.${flow}`).join(', ')} to ${window} or more.`;\n}\n\n/** Emits {@link throttleWindowMessage} through `process.emitWarning`, where the runtime has one. */\nexport function warnThrottleWindow(\n\tresolved: Pick<ResolvedConfig, 'mailThrottle' | 'tokenTtlMs'>,\n\twhere: string,\n): void {\n\tconst message = throttleWindowMessage(resolved, where);\n\tif (message === null) return;\n\tif (\n\t\ttypeof process === 'undefined' ||\n\t\ttypeof process.emitWarning !== 'function'\n\t) {\n\t\treturn;\n\t}\n\tprocess.emitWarning(message, { code: 'JANUS_THROTTLE_WINDOW' });\n}\n",
|
|
19
19
|
"/**\n * What every operation of the core is handed: the resolved configuration, the\n * guarded stores, the clock, the hashers and the events listener.\n */\n\nimport { mintId } from '../../ids/id';\nimport type { RelationStore } from '../../permissions/port/types';\nimport type { Clock } from '../../time/clock';\nimport type { PasswordHasher, ResolvedConfig } from '../config';\nimport type { UserEventListener } from '../events';\nimport type { JanusStores, StoreCapabilities } from '../port/types';\n\nexport interface Context {\n\treadonly config: ResolvedConfig;\n\t/** Already guarded, by `src/stores/guard.ts`. */\n\treadonly store: JanusStores;\n\t/** Already guarded. `null` when no relation store is wired. */\n\treadonly relations: RelationStore | null;\n\treadonly capabilities: StoreCapabilities;\n\treadonly clock: Clock;\n\treadonly hasher: PasswordHasher | null;\n\t/** The hasher first, then every verifier: whoever claims a prefix verifies it. */\n\treadonly verifiers: readonly PasswordHasher[];\n\t/** Hashed once, lazily: what a missing user's password is compared against. */\n\tdummyHash(): Promise<string>;\n\t/** What `janus({ events })` was given, or `null`. */\n\treadonly events: UserEventListener | null;\n}\n\nexport function createContext(\n\tconfig: ResolvedConfig,\n\tstore: JanusStores,\n\trelations: RelationStore | null,\n\tcapabilities: StoreCapabilities,\n\tclock: Clock,\n\thasher: PasswordHasher | null,\n\tverifiers: readonly PasswordHasher[],\n\tevents: UserEventListener | null = null,\n): Context {\n\tlet dummy: Promise<string> | null = null;\n\n\treturn {\n\t\tconfig,\n\t\tstore,\n\t\trelations,\n\t\tcapabilities,\n\t\tclock,\n\t\thasher,\n\t\tverifiers,\n\t\tevents,\n\t\tdummyHash: () => {\n\t\t\tif (hasher === null) {\n\t\t\t\tthrow new TypeError('janus: no hasher to compare a dummy hash with');\n\t\t\t}\n\t\t\tdummy ??= hasher.hash(`janus-dummy-${mintId()}`);\n\t\t\treturn dummy;\n\t\t},\n\t};\n}\n",
|
|
20
20
|
"/**\n * What a user signs in with, and is found by: the login field and the e-mail,\n * each normalised by its own rule.\n */\n\nimport { UserInvalidError } from '../../errors/janus-error';\nimport { isStorable, UNSTORABLE } from '../../stores/storable';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport type { JsonObject, UserRecord } from '../port/types';\nimport type { Context } from './create-context';\n\n/** The user's e-mail, as stored, or `null` when the schema let it be absent. */\nexport function emailOf(type: ResolvedType, fields: JsonObject): string | null {\n\tconst value = fields[type.email];\n\treturn typeof value === 'string' ? value : null;\n}\n\n/**\n * What a user signs in with, normalised: the login field, by its own rule,\n * and the e-mail, by the e-mail rule — so a user whose login is a username can\n * still be found by the e-mail a reset is requested for.\n */\nexport function loginsOf(\n\ttype: ResolvedType,\n\tfields: JsonObject,\n\twhere: string,\n): string[] {\n\tconst logins = new Set<string>();\n\n\tif (type.password !== null) {\n\t\tconst login = fields[type.password.login];\n\t\tif (typeof login !== 'string') {\n\t\t\tthrow new TypeError(\n\t\t\t\t`janus: password.login \"${type.password.login}\" did not name a string in validated ${type.name} fields — it must name a required string field`,\n\t\t\t);\n\t\t}\n\t\tconst normalized = type.password.normalize(login);\n\t\t// The fields were checked; a function normaliser can still cut a\n\t\t// surrogate pair in half. Refused here, or the user is written with a\n\t\t// login nobody can sign in with — or not written at all, on PostgreSQL.\n\t\tif (!isStorable(normalized)) {\n\t\t\tconst path = [type.password.login];\n\t\t\tthrow new UserInvalidError(\n\t\t\t\t`${where}: the fields do not match the ${type.name} schema (1 issue, at ${path.join('.')})`,\n\t\t\t\t{\n\t\t\t\t\tissues: [\n\t\t\t\t\t\t{ path, message: `normalises to a login that ${UNSTORABLE}` },\n\t\t\t\t\t],\n\t\t\t\t\tuserType: type.name,\n\t\t\t\t},\n\t\t\t);\n\t\t}\n\t\tlogins.add(normalized);\n\t}\n\n\tconst email = emailOf(type, fields);\n\tif (email !== null) logins.add(normalizeEmail(email));\n\n\treturn [...logins];\n}\n\n/**\n * The user of this type whose e-mail this is, or `null`. Looked up as a\n * login — every e-mail is one — and then compared, so a username that only\n * looks like an e-mail is nobody's.\n */\nexport async function holderOfEmail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\temail: string,\n): Promise<UserRecord | null> {\n\tconst wanted = normalizeEmail(email);\n\tif (!isStorable(wanted)) return null;\n\tconst record = await context.store.users.findUserByLogin(type.name, wanted);\n\tconst held = record === null ? null : emailOf(type, record.fields);\n\treturn held !== null && normalizeEmail(held) === wanted ? record : null;\n}\n",
|
|
21
|
-
"/**\n * **The identity side's two conversions**, and the one place a `null` becomes\n * an error.\n *\n * > An absence is `null`. A failure throws.\n *\n * {@link guardStores} puts the three identity stores behind the shared guard\n * (`src/stores/guard.ts`), the one place a store's answer is caught.\n * {@link required} turns an absence the caller cannot accept into its refusal,\n * {@link unlessVersionConflict} absorbs one named conflict and rethrows\n * everything else, and {@link unlessLoginTaken} hands back the other one.\n *\n * `outage.scan.spec.ts` reads every other file of `src/auth/`, `src/permissions/`\n * and `src/stores/` and fails if a `catch` appears in one, because the failure\n * this design exists to prevent is a single careless `catch { return null }`.\n */\n\nimport { type JanusError, StoreConflict } from '../errors/janus-error';\nimport { guardStore } from '../stores/guard';\nimport type { JanusStores } from './port/types';\n\n/**\n * The stores, with every method guarded.\n *\n * - A `JanusError` the adapter threw — `StoreFailure`, `StoreConflict`,\n * `NotFoundError` — passes through untouched, so `instanceof` still holds.\n * - **Anything else it threw is a failure**: a driver error, a `TypeError` from\n * a bug in the adapter, a string. It becomes `StoreFailure` with the original\n * as `cause`, naming the slot and the method. It is never an absence.\n * - A method that answers `undefined` where the port says `null` is a store\n * that forgot to answer, and becomes `StoreFailure` rather than \"not found\".\n * Rule 2 of the port, enforced at run time for the JavaScript adapter the\n * compiler never saw.\n *\n * The optional `deleteExpiredSessions`
|
|
21
|
+
"/**\n * **The identity side's two conversions**, and the one place a `null` becomes\n * an error.\n *\n * > An absence is `null`. A failure throws.\n *\n * {@link guardStores} puts the three identity stores behind the shared guard\n * (`src/stores/guard.ts`), the one place a store's answer is caught.\n * {@link required} turns an absence the caller cannot accept into its refusal,\n * {@link unlessVersionConflict} absorbs one named conflict and rethrows\n * everything else, and {@link unlessLoginTaken} hands back the other one.\n *\n * `outage.scan.spec.ts` reads every other file of `src/auth/`, `src/permissions/`\n * and `src/stores/` and fails if a `catch` appears in one, because the failure\n * this design exists to prevent is a single careless `catch { return null }`.\n */\n\nimport { type JanusError, StoreConflict } from '../errors/janus-error';\nimport { guardStore } from '../stores/guard';\nimport type { JanusStores } from './port/types';\n\n/**\n * The stores, with every method guarded.\n *\n * - A `JanusError` the adapter threw — `StoreFailure`, `StoreConflict`,\n * `NotFoundError` — passes through untouched, so `instanceof` still holds.\n * - **Anything else it threw is a failure**: a driver error, a `TypeError` from\n * a bug in the adapter, a string. It becomes `StoreFailure` with the original\n * as `cause`, naming the slot and the method. It is never an absence.\n * - A method that answers `undefined` where the port says `null` is a store\n * that forgot to answer, and becomes `StoreFailure` rather than \"not found\".\n * Rule 2 of the port, enforced at run time for the JavaScript adapter the\n * compiler never saw.\n *\n * The optional `deleteExpiredSessions` and `deleteExpiredTokens` are guarded\n * when present and left absent when absent, so capability detection still reads the truth.\n */\nexport function guardStores(stores: JanusStores): JanusStores {\n\treturn {\n\t\tusers: guardStore('users', stores.users),\n\t\tsessions: guardStore('sessions', stores.sessions),\n\t\ttokens: guardStore('tokens', stores.tokens),\n\t};\n}\n\n/**\n * A value the caller requires, or the refusal an absence deserves.\n *\n * The only place in the core where a `null` from a store turns into an error —\n * `get` becoming `NOT_FOUND`. Written as a function so that the conversion is\n * visible at every call site and nowhere else.\n */\nexport function required<T>(value: T | null, absent: () => JanusError): T {\n\tif (value === null) throw absent();\n\treturn value;\n}\n\n/**\n * A write that may lose a race, and is allowed to: its answer, or `null` when\n * the record's version moved under it.\n *\n * **Only `StoreConflict('version')` is absorbed.** A failure still throws, a\n * taken login still throws, `NOT_FOUND` still throws: an outage never reads as\n * \"somebody else wrote first\". It exists for writes the caller did not ask for\n * — rewriting a password hash on sign-in — where losing to a concurrent update\n * means only that the next sign-in tries again — and for `verifyEmail.proveFirst`,\n * which reads again and retries once.\n */\nexport async function unlessVersionConflict<T>(\n\twrite: Promise<T>,\n): Promise<T | null> {\n\ttry {\n\t\treturn await write;\n\t} catch (error) {\n\t\tif (error instanceof StoreConflict && error.on === 'version') return null;\n\t\tthrow error;\n\t}\n}\n\n/**\n * A write that may lose a race on a login, and says so: its answer, or the\n * `StoreConflict('login')` the store refused it with, **as a value**, for the\n * caller to read the login again and then rethrow or answer the winner.\n *\n * **Only `StoreConflict('login')` is handed back.** A failure still throws, a\n * version conflict still throws: an outage never reads as \"somebody else\n * created the user first\".\n */\nexport async function unlessLoginTaken<T>(\n\twrite: Promise<T>,\n): Promise<T | StoreConflict> {\n\ttry {\n\t\treturn await write;\n\t} catch (error) {\n\t\tif (error instanceof StoreConflict && error.on === 'login') return error;\n\t\tthrow error;\n\t}\n}\n",
|
|
22
22
|
"/**\n * The password steps every flow takes the same way: the type's rule, the\n * policy, the hasher, the comparison, and the rewrite of a stale hash.\n */\n\nimport { CredentialError } from '../../errors/janus-error';\nimport type { PasswordHasher, ResolvedType } from '../config';\nimport { unlessVersionConflict } from '../outage';\nimport type { UserRecord } from '../port/types';\nimport type { Context } from './create-context';\n\n/** The type's password rule, or a wiring refusal for a JavaScript caller. */\nexport function passwordRule(type: ResolvedType, where: string) {\n\tif (type.password === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: the ${type.name} type does not sign in with a password — add password: { login } to it`,\n\t\t);\n\t}\n\treturn type.password;\n}\n\n/** Refuses a password shorter than the policy. Reports the policy, never the password. */\nexport function checkPassword(\n\ttype: ResolvedType,\n\tpassword: string,\n\twhere: string,\n): void {\n\tconst minLength = type.password?.minLength ?? 8;\n\tif (typeof password !== 'string' || password.length < minLength) {\n\t\tthrow new CredentialError(\n\t\t\t'PASSWORD_TOO_SHORT',\n\t\t\t`${where}: the password is shorter than the policy's ${minLength} characters`,\n\t\t\t{ minLength, userType: type.name },\n\t\t);\n\t}\n}\n\n/** The hasher. `janus()` refused a password type without one, so this is a wiring net. */\nexport function requireHasher(context: Context, where: string): PasswordHasher {\n\tif (context.hasher === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: no password hasher is wired — pass hasher: scryptHasher(), or bunHasher() on Bun`,\n\t\t);\n\t}\n\treturn context.hasher;\n}\n\n/**\n * Whether `password` matches the stored hash. A hash whose prefix no wired\n * verifier claims is `HASH_UNSUPPORTED`, reporting the prefix, never the hash.\n */\nexport async function passwordMatches(\n\tcontext: Context,\n\trecord: UserRecord,\n\tpassword: string,\n\twhere: string,\n): Promise<boolean> {\n\tconst stored = record.password;\n\tif (stored === null) return false;\n\n\tconst verifier = context.verifiers.find((candidate) =>\n\t\tstored.hash.startsWith(candidate.prefix),\n\t);\n\tif (verifier === undefined) {\n\t\tconst hashPrefix = /^\\$[^$]*\\$/.exec(stored.hash)?.[0] ?? '(none)';\n\t\tthrow new CredentialError(\n\t\t\t'HASH_UNSUPPORTED',\n\t\t\t`${where}: no wired verifier claims the prefix \"${hashPrefix}\"`,\n\t\t\t{ hashPrefix, userId: record.id, userType: record.type },\n\t\t);\n\t}\n\n\treturn verifier.verify(password, stored.hash);\n}\n\n/**\n * The record, with its password hash rewritten by the current hasher when the\n * stored one is stale: written by another hasher — a `verifiers` one — or by\n * this one with other parameters. Called only once `password` has matched.\n *\n * The rewrite is conditioned on the version just read. Losing that race to a\n * concurrent update is not the sign-in's failure: the record is answered as\n * read, and the next sign-in tries again. A store failure still throws.\n */\nexport async function rehashed(\n\tcontext: Context,\n\trecord: UserRecord,\n\tpassword: string,\n): Promise<UserRecord> {\n\tconst { hasher } = context;\n\tconst stored = record.password;\n\tif (hasher === null || stored === null) return record;\n\n\tconst stale =\n\t\t!stored.hash.startsWith(hasher.prefix) ||\n\t\thasher.needsRehash?.(stored.hash) === true;\n\tif (!stale) return record;\n\n\tconst written = await unlessVersionConflict(\n\t\tcontext.store.users.updateUser(\n\t\t\trecord.id,\n\t\t\t{\n\t\t\t\tupdatedAt: context.clock.now(),\n\t\t\t\t// The same password, so the same `updatedAt`: when it was *set*.\n\t\t\t\tpassword: {\n\t\t\t\t\thash: await hasher.hash(password),\n\t\t\t\t\tupdatedAt: stored.updatedAt,\n\t\t\t\t},\n\t\t\t},\n\t\t\trecord.version,\n\t\t),\n\t);\n\treturn written ?? record;\n}\n",
|
|
23
23
|
"/** A user as the core answers one, from the record a store holds. */\n\nimport type { UserRecord } from '../port/types';\nimport type { User, UserRef } from '../types';\n\n/** A user of any type, as the degenericised core handles them. */\nexport type AnyUser = User<string, Record<string, unknown>>;\n\n/**\n * A user as application code sees it: their fields at the top level, then\n * what `janus` sets — written last, so no stored key can shadow it. No password\n * hash, ever.\n */\nexport function toUser(record: UserRecord): AnyUser {\n\treturn {\n\t\t...record.fields,\n\t\tid: record.id,\n\t\ttype: record.type,\n\t\temailVerified: record.emailVerifiedAt !== null,\n\t\tactive: record.active,\n\t\thasPassword: record.password !== null,\n\t\thasSecondFactor: record.secondFactor?.confirmedAt != null,\n\t\tversion: record.version,\n\t\tcreatedAt: record.createdAt,\n\t\tupdatedAt: record.updatedAt,\n\t};\n}\n\n/** The id a {@link UserRef} names. */\nexport const idOf = (user: UserRef): string =>\n\ttypeof user === 'string' ? user : user.id;\n\n/**\n * The id a JavaScript caller's reference names, or `''` — malformed, and\n * so `NOT_FOUND` without reaching the store — for anything that names none:\n * what the privileged calls read, `signInProven` and\n * `verifyEmail.proveFirst`, which must never mistake a bad value for a user.\n */\nexport function refId(user: UserRef): string {\n\tif (typeof user === 'string') return user;\n\tconst id: unknown =\n\t\ttypeof user === 'object' && user !== null ? user.id : undefined;\n\treturn typeof id === 'string' ? id : '';\n}\n",
|
|
24
24
|
"/**\n * Reading a user's record by id — an absence is `null`, `getRecord` makes it\n * `NOT_FOUND` — and the one write that follows such a read, under a version.\n */\n\nimport { NotFoundError, StoreConflict } from '../../errors/janus-error';\nimport { isId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport { required } from '../outage';\nimport type { UserPatch, UserRecord } from '../port/types';\nimport type { UserRef, WriteOptions } from '../types';\nimport type { Context } from './create-context';\nimport { idOf } from './user';\n\nconst notFound = (where: string, id: string, type: string | null) =>\n\tnew NotFoundError(\n\t\t`${where}: no ${type ?? 'user'} has this id`,\n\t\ttype === null\n\t\t\t? { userId: id, operation: where }\n\t\t\t: { userId: id, userType: type, operation: where },\n\t);\n\n/**\n * The user — of this type, when one is given — or `null`. A malformed id is an\n * absence decided without reaching the store: it arrives off a URL, and it is\n * \"no such user\", not a query and not an outage. A user of another type is\n * absent too: `auth.staff.find(patientId)` finds nobody.\n */\nexport async function findRecord(\n\tcontext: Context,\n\tid: string,\n\ttype: string | null,\n): Promise<UserRecord | null> {\n\tif (!isId(id)) return null;\n\tconst record = await context.store.users.findUser(id);\n\treturn record !== null && (type === null || record.type === type)\n\t\t? record\n\t\t: null;\n}\n\n/** The user, or `NOT_FOUND`. */\nexport async function getRecord(\n\tcontext: Context,\n\tid: string,\n\ttype: string | null,\n\twhere: string,\n): Promise<UserRecord> {\n\treturn required(await findRecord(context, id, type), () =>\n\t\tnotFound(where, id, type),\n\t);\n}\n\n/**\n * One write that follows a read, under a version: the core reads the user,\n * checks `ifVersion` against what it read, computes the patch from the record,\n * and writes under the version it read. A user who changed in between is\n * `VERSION_CONFLICT`, and nothing is written.\n */\nexport async function writeUser(\n\tcontext: Context,\n\tuser: UserRef,\n\ttype: ResolvedType,\n\toptions: WriteOptions | undefined,\n\twhere: string,\n\tpatchOf: (\n\t\trecord: UserRecord,\n\t\tnow: Date,\n\t) => Omit<UserPatch, 'updatedAt'> | Promise<Omit<UserPatch, 'updatedAt'>>,\n): Promise<UserRecord> {\n\tconst id = idOf(user);\n\tconst record = await getRecord(context, id, type.name, where);\n\tconst ifVersion = options?.ifVersion;\n\n\tif (ifVersion !== undefined && ifVersion !== record.version) {\n\t\tthrow new StoreConflict(\n\t\t\t'version',\n\t\t\t`${where}: expected version ${ifVersion}, found ${record.version}`,\n\t\t\t{\n\t\t\t\tuserId: id,\n\t\t\t\texpectedVersion: ifVersion,\n\t\t\t\tactualVersion: record.version,\n\t\t\t\toperation: where,\n\t\t\t},\n\t\t);\n\t}\n\n\tconst now = context.clock.now();\n\tconst patch = await patchOf(record, now);\n\treturn context.store.users.updateUser(\n\t\trecord.id,\n\t\t{ ...patch, updatedAt: now },\n\t\trecord.version,\n\t);\n}\n",
|
|
25
25
|
"/**\n * A user's fields, validated against the type's schema and answered as the\n * port holds them — or refused, reporting where and never the values.\n */\n\nimport { type Issue, UserInvalidError } from '../../errors/janus-error';\nimport { isStorable, UNSTORABLE } from '../../stores/storable';\nimport { RESERVED_FIELDS, type ResolvedType } from '../config';\nimport type { Json, JsonObject } from '../port/types';\nimport type { StandardSchemaV1 } from '../standard-schema';\n\n/**\n * Validates fields against the type's schema, and answers them as the port\n * holds them: an `undefined` property dropped, at every depth.\n */\nexport async function validateFields(\n\ttype: ResolvedType,\n\tinput: unknown,\n\twhere: string,\n): Promise<JsonObject> {\n\tconst result = await type.schema['~standard'].validate(input);\n\n\tconst issues: Issue[] =\n\t\tresult.issues === undefined\n\t\t\t? []\n\t\t\t: result.issues.map((issue) => ({\n\t\t\t\t\tpath: storablePrefix((issue.path ?? []).map(segmentKey)),\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t}));\n\n\t// A schema that passes unknown keys through would let a request set `id` or\n\t// `active` among the fields. `toUser` would shadow them anyway; refusing\n\t// them says so to whoever sent them.\n\tif (result.issues === undefined) {\n\t\tconst value = result.value as Record<string, unknown>;\n\t\tfor (const key of RESERVED_FIELDS) {\n\t\t\tif (Object.hasOwn(value, key)) {\n\t\t\t\tissues.push({ path: [key], message: 'set by janus, not by a request' });\n\t\t\t}\n\t\t}\n\t\tunstorableIn(value, [], issues);\n\t}\n\n\tif (issues.length > 0) {\n\t\t// The message reports how many and where, never the values: a field may\n\t\t// be anything the application chose to store, including something\n\t\t// private.\n\t\tthrow new UserInvalidError(\n\t\t\t`${where}: the fields do not match the ${type.name} schema (${issues.length} issue${issues.length === 1 ? '' : 's'}, at ${issues.map((i) => i.path.join('.') || '(root)').join(', ')})`,\n\t\t\t{ issues, userType: type.name },\n\t\t);\n\t}\n\n\treturn withoutUndefined((result as { value: unknown }).value) as JsonObject;\n}\n\n/** Pushes an issue for every key and every string no store can keep. */\nfunction unstorableIn(\n\tvalue: unknown,\n\tpath: (string | number)[],\n\tissues: Issue[],\n): void {\n\tif (typeof value === 'string') {\n\t\tif (!isStorable(value)) issues.push({ path, message: UNSTORABLE });\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tfor (const [index, inner] of value.entries()) {\n\t\t\tunstorableIn(inner, [...path, index], issues);\n\t\t}\n\t\treturn;\n\t}\n\tif (typeof value === 'object' && value !== null) {\n\t\tfor (const [key, inner] of Object.entries(value)) {\n\t\t\t// The key itself stays out of the path: the path reaches the message,\n\t\t\t// and a NUL has no business in a log line.\n\t\t\tif (!isStorable(key)) {\n\t\t\t\tissues.push({ path, message: `a key ${UNSTORABLE}` });\n\t\t\t} else {\n\t\t\t\tunstorableIn(inner, [...path, key], issues);\n\t\t\t}\n\t\t}\n\t}\n}\n\n/**\n * A path up to its first key no store can keep: the path reaches the message,\n * and a NUL has no business in a log line.\n */\nfunction storablePrefix(path: (string | number)[]): (string | number)[] {\n\tconst cut = path.findIndex(\n\t\t(segment) => typeof segment === 'string' && !isStorable(segment),\n\t);\n\treturn cut === -1 ? path : path.slice(0, cut);\n}\n\nfunction segmentKey(\n\tsegment: PropertyKey | StandardSchemaV1.PathSegment,\n): string | number {\n\tconst key = typeof segment === 'object' ? segment.key : segment;\n\treturn typeof key === 'number' ? key : String(key);\n}\n\nfunction withoutUndefined(value: unknown): Json {\n\tif (Array.isArray(value)) return value.map(withoutUndefined);\n\n\tif (typeof value === 'object' && value !== null) {\n\t\tconst out: Record<string, Json> = {};\n\t\tfor (const [key, inner] of Object.entries(value)) {\n\t\t\tif (inner !== undefined) out[key] = withoutUndefined(inner);\n\t\t}\n\t\treturn out;\n\t}\n\n\treturn value as Json;\n}\n",
|
|
26
26
|
"import { type Id, mintId } from '../ids/id';\nimport type { Context } from './context';\n\n/**\n * What happened to a user, once it is written:\n *\n * - `user.created` — by `create` or `signUp`;\n * - `user.emailVerified` — by `verifyEmail.confirm`, or by the link of\n * `resetPassword.confirm`, `magicLink.confirm` or `changeEmail.confirm`, or the code of\n * `signInCode.confirm`, which prove the e-mail too; never for an e-mail\n * already verified;\n * - `user.passwordReset` — by `resetPassword.confirm`;\n * - `user.passwordChanged` — by `changePassword` and `setPassword`, and by\n * `signInCode.confirm` and `magicLink.confirm` when their first proof of\n * the e-mail dropped a password, after `user.emailVerified`; never by a\n * reset, which is `user.passwordReset` alone;\n * - `user.emailChanged` — by `update` and `changeEmail.confirm`, when they\n * changed the e-mail — compared\n * normalised, the same test that makes the new one unverified. The one\n * event that carries more than the user: `formerEmail`;\n * - `user.secondFactorEnabled` — by `secondFactor.activate`, once the factor\n * is active: not by `enroll`, which leaves it waiting for its first code;\n * - `user.secondFactorDisabled` — by `secondFactor.disable`, when it removed\n * an active factor, and by `signInCode.confirm` and `magicLink.confirm`\n * when their first proof of the e-mail removed one, after\n * `user.emailVerified` and any `user.passwordChanged`; never for a user who\n * had none, or one still waiting;\n * - `user.recoveryCodesRegenerated` — by `secondFactor.regenerateRecoveryCodes`:\n * the codes the user held stopped working. Not by `activate`, whose codes\n * come with `user.secondFactorEnabled`;\n * - `user.recoveryCodeUsed` — by `secondFactor.recover`, once the code is\n * spent: a sign-in without the user's phone;\n * - `user.newDeviceSignedIn` — by a sign-in that opened a session from a\n * device the user had not signed in from: `signIn`, `secondFactor.confirm`,\n * `secondFactor.recover`, `signInCode.confirm`, `magicLink.confirm` and\n * `signInProven`, when given a `device` its token did not prove. Never by\n * `signUp`, nor without a `device`. Carries `sessionId`;\n * - `user.deleted` — by `delete`, once; a replay that finds nobody is none.\n */\nexport type UserEventType =\n\t| 'user.created'\n\t| 'user.emailVerified'\n\t| 'user.passwordReset'\n\t| 'user.passwordChanged'\n\t| 'user.emailChanged'\n\t| 'user.secondFactorEnabled'\n\t| 'user.secondFactorDisabled'\n\t| 'user.recoveryCodesRegenerated'\n\t| 'user.recoveryCodeUsed'\n\t| 'user.newDeviceSignedIn'\n\t| 'user.deleted';\n\n/**\n * A user event: **the user named by id, and nothing else** — no login, no\n * field, no password, no token. Whoever receives it reads the rest from where\n * it is kept, if they may. Two exceptions: `formerEmail` on\n * `user.emailChanged` — once the write landed, the old address is kept\n * nowhere — and `sessionId` on `user.newDeviceSignedIn`, the session the new\n * device holds.\n */\nexport interface UserEvent {\n\t/** A UUIDv7 minted for this event: the key to deliver it once. */\n\treadonly id: Id;\n\treadonly type: UserEventType;\n\t/**\n\t * When the write landed: the `createdAt` or `updatedAt` it wrote, or, for\n\t * a deletion, the time read just before it — not when the listener ran.\n\t */\n\treadonly occurredAt: Date;\n\treadonly userId: Id;\n\treadonly userType: string;\n\t/**\n\t * On `user.emailChanged` only: the address the user had before, as it was\n\t * stored — `null` when they had none. So a notice can reach the inbox the\n\t * account was just taken from; the new address is on the user. Absent\n\t * from every other type, and from an event a webhook delivered.\n\t */\n\treadonly formerEmail?: string | null;\n\t/**\n\t * On `user.newDeviceSignedIn` only: the session the new device opened —\n\t * to sign it out from a \"this wasn't me\" page. Absent from every other\n\t * type, and from an event a webhook delivered.\n\t */\n\treadonly sessionId?: string;\n}\n\n/** What an event carries beyond the user, on the two types that do. */\nexport type EventExtras = Pick<UserEvent, 'formerEmail' | 'sessionId'>;\n\n/**\n * What `janus({ events })` takes: called once per event, **after** the write\n * landed and before the flow answers — awaited, so a queue that stores the\n * event durably has done so by then. A listener that throws fails nothing:\n * the write happened, and the flow answers as it would have. The failure is a\n * `JANUS_EVENT_FAILED` warning naming the event, never silence.\n */\nexport type UserEventListener = (event: UserEvent) => void | Promise<void>;\n\n/** The listener given to `janus()`, or a wiring refusal for a JavaScript caller. */\nexport function resolveEvents(\n\tevents: unknown,\n\twhere: string,\n): UserEventListener | null {\n\tif (events === undefined) return null;\n\tif (typeof events !== 'function') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: events must be a function that takes a user event — webhooks({ … }) from @nxgt/janus-webhooks, or your own`,\n\t\t);\n\t}\n\treturn events as UserEventListener;\n}\n\n/**\n * Hands one event to the listener after the write it reports. A flow whose\n * steps after the write matter to the listener — a reset's revocation, a\n * deletion's cleanup — runs them in a `try` and emits from its `finally`, so\n * an outage there does not lose the event for good. Its failure is the application's, not the flow's: warned about, with what\n * it takes to send the event again — never thrown, since the write has landed.\n */\nexport async function emit(\n\tcontext: Context,\n\ttype: UserEventType,\n\tuser: { readonly id: Id; readonly type: string },\n\toccurredAt: Date,\n\textras: EventExtras = {},\n): Promise<void> {\n\tconst listener = context.events;\n\tif (listener === null) return;\n\n\tconst event: UserEvent = Object.freeze({\n\t\tid: mintId(occurredAt.getTime()),\n\t\ttype,\n\t\t// A copy: the record's own Date is also the user the flow answers.\n\t\toccurredAt: new Date(occurredAt.getTime()),\n\t\tuserId: user.id,\n\t\tuserType: user.type,\n\t\t...extras,\n\t});\n\ttry {\n\t\tawait listener(event);\n\t} catch (failure) {\n\t\tprocess.emitWarning(\n\t\t\t`janus: the events listener failed on ${type} ${event.id} for user ${user.id}: ${failure instanceof Error ? failure.name : typeof failure}`,\n\t\t\t{ code: 'JANUS_EVENT_FAILED' },\n\t\t);\n\t}\n}\n",
|
|
27
|
-
"import type { JanusStores, StoreCapabilities } from './types';\n\n/**\n * The methods each slot must answer, in the order the port declares them.\n *\n * Kept beside the interfaces rather than derived from them: a type does not\n * exist at runtime, and this list is the net for the JavaScript caller the\n * compiler never saw.\n */\nconst REQUIRED = {\n\tusers: [\n\t\t'insertUser',\n\t\t'findUser',\n\t\t'findUserByLogin',\n\t\t'listUsers',\n\t\t'updateUser',\n\t\t'deleteUser',\n\t],\n\tsessions: [\n\t\t'insertSession',\n\t\t'findSessionByTokenHash',\n\t\t'extendSession',\n\t\t'reauthenticateSession',\n\t\t'revokeSession',\n\t\t'revokeUserSessions',\n\t\t'deleteUserSessions',\n\t],\n\ttokens: [\n\t\t'insertToken',\n\t\t'consumeToken',\n\t\t'countAttempt',\n\t\t'spendUserTokens',\n\t\t'deleteUserTokens',\n\t],\n} as const satisfies Record<keyof JanusStores, readonly string[]>;\n\n/**\n * Checks that every slot answers every method the port declares, and reports\n * the optional capabilities found.\n *\n * TypeScript already refuses a partial store and names the missing method;\n * this is the net for a JavaScript caller, and for a store assembled from\n * `any`. A bare `TypeError`, because a missing method can only come from how\n * the application was wired — no request produces one, and no handler should\n * answer one.\n *\n * `where` names the call the consumer wrote — `janus` — so the\n * sentence says which call to fix and which slot to change.\n */\nexport function assertStores(\n\tstores: unknown,\n\twhere: string,\n): StoreCapabilities {\n\tif (typeof stores !== 'object' || stores === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: store must be an object with users, sessions and tokens`,\n\t\t);\n\t}\n\n\tfor (const slot of Object.keys(REQUIRED) as (keyof typeof REQUIRED)[]) {\n\t\tconst store: unknown = (stores as Record<string, unknown>)[slot];\n\n\t\tif (typeof store !== 'object' || store === null) {\n\t\t\tthrow new TypeError(`${where}: store.${slot} is missing`);\n\t\t}\n\n\t\tfor (const method of REQUIRED[slot]) {\n\t\t\tif (typeof (store as Record<string, unknown>)[method] !== 'function') {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t`${where}: store.${slot} has no method ${method}, which the port requires`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tconst slots = stores as Record<\n\t\tkeyof typeof REQUIRED,\n\t\tRecord<string, unknown>\n\t>;\n\treturn {\n\t\tcollectExpired: optional(slots, 'sessions', 'deleteExpiredSessions', where),\n\t\tfindUsers: optional(slots, 'users', 'findUsers', where),\n\t};\n}\n\n/**\n * Whether an optional method is there. Present but not a function is a wiring\n * mistake, not an absent capability: reporting it as \"unsupported\" would send\n * the reader to the wrong fix.\n */\nfunction optional(\n\tstores: Record<keyof typeof REQUIRED, Record<string, unknown>>,\n\tslot: keyof typeof REQUIRED,\n\tmethod: string,\n\twhere: string,\n): boolean {\n\tconst found = stores[slot][method];\n\tif (found !== undefined && typeof found !== 'function') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: store.${slot}.${method} must be a function or absent`,\n\t\t);\n\t}\n\treturn found !== undefined;\n}\n",
|
|
28
|
-
"import { randomBytes, timingSafeEqual } from 'node:crypto';\nimport { derivedKey, keyedHash } from '../derived-keys';\nimport type { Sealer } from '../sealing';\n\n/**\n * A device token: `d1.<key id>.<device id>.<mac>`, the last two in\n * base64url. The device id is 16 random bytes; the mac is an HMAC-SHA256 of\n * the user's id and the device id, under a key derived for this purpose from\n * `devices.keys`. **Nothing is stored**: the token is its own proof that this\n * user signed in on this device before, and a token copied onto another user\n * proves nothing.\n *\n * Every character is a cookie-value character, so it goes in a cookie as is.\n */\n\n/** What the key is derived for. Renamed, every device would be new again. */\nconst PURPOSE = 'janus/devices/v1';\n\nconst TOKEN =\n\t/^d1\\.([A-Za-z0-9_-]{1,64})\\.([A-Za-z0-9_-]{22})\\.([A-Za-z0-9_-]{43})$/;\n\nfunction macOf(key: Buffer, userId: string, deviceId: string): Buffer {\n\treturn keyedHash(key, [userId, deviceId]);\n}\n\nfunction signed(sealer: Sealer, userId: string, deviceId: string): string {\n\t// The first key is always held: resolveSealer names it from the keys.\n\tconst key = derivedKey(sealer, PURPOSE) as Buffer;\n\tconst mac = macOf(key, userId, deviceId).toString('base64url');\n\treturn `d1.${sealer.sealWith}.${deviceId}.${mac}`;\n}\n\n/** A token for a device never seen: a fresh device id, signed with the first key. */\nexport function mintDeviceToken(sealer: Sealer, userId: string): string {\n\treturn signed(sealer, userId, randomBytes(16).toString('base64url'));\n}\n\n/**\n * The token to hand back when `presented` proves this user signed in on this\n * device before — itself, or the same device signed again with the first key\n * when an older key signed it — or `null` when it proves nothing: malformed,\n * another user's, forged, or signed with a key no longer held.\n *\n * `presented` comes from a request, so nothing here throws.\n */\nexport function knownDeviceToken(\n\tsealer: Sealer,\n\tuserId: string,\n\tpresented: string,\n): string | null {\n\tconst [, keyId, deviceId, mac] = TOKEN.exec(presented) ?? [];\n\tif (keyId === undefined || deviceId === undefined || mac === undefined) {\n\t\treturn null;\n\t}\n\tconst key = derivedKey(sealer, PURPOSE, keyId);\n\tif (key === undefined) return null;\n\n\tconst expected = macOf(key, userId, deviceId);\n\tconst given = Buffer.from(mac, 'base64url');\n\tif (given.length !== expected.length || !timingSafeEqual(given, expected)) {\n\t\treturn null;\n\t}\n\treturn keyId === sealer.sealWith\n\t\t? presented\n\t\t: signed(sealer, userId, deviceId);\n}\n",
|
|
29
27
|
"import { createHmac, hkdfSync } from 'node:crypto';\nimport type { Sealer } from './sealing';\n\n/**\n * Keys derived from the sealing keys, one per purpose — never the key that\n * seals a secret itself — and the keyed hashes made with them: a recovery\n * code's, and the names of the counts of attempts. Each caller keeps its own\n * purpose: renamed, what it hashed no longer matches.\n */\n\nconst derived = new WeakMap<Sealer, Map<string, Buffer>>();\n\n/**\n * The key `keyId` lends `purpose` — the first key by default — derived once\n * per key, or `undefined` when the sealer no longer holds that key.\n */\nexport function derivedKey(\n\tsealer: Sealer,\n\tpurpose: string,\n\tkeyId: string = sealer.sealWith,\n): Buffer | undefined {\n\tlet keys = derived.get(sealer);\n\tif (keys === undefined) {\n\t\tkeys = new Map();\n\t\tderived.set(sealer, keys);\n\t}\n\tconst name = `${purpose}\\u0000${keyId}`;\n\tlet key = keys.get(name);\n\tif (key === undefined) {\n\t\tconst secret = sealer.keys.get(keyId);\n\t\tif (secret === undefined) return undefined;\n\t\tkey = Buffer.from(hkdfSync('sha256', secret, Buffer.alloc(0), purpose, 32));\n\t\tkeys.set(name, key);\n\t}\n\treturn key;\n}\n\n/** HMAC-SHA256 of `parts`, joined by a NUL — which no part may hold. */\nexport function keyedHash(key: Buffer, parts: readonly string[]): Buffer {\n\treturn createHmac('sha256', key).update(parts.join('\\u0000')).digest();\n}\n",
|
|
30
|
-
"import type { Context } from '../context';\nimport type { SignInOptions } from '../types';\nimport { knownDeviceToken, mintDeviceToken } from './token';\n\n/**\n * What a sign-in was told of the device: `undefined` when nothing — devices\n * are not tracked for that call — `null` for a device holding no token yet,\n * or the token it presented.\n */\nexport type DeviceHint = string | null | undefined;\n\n/** What a session-opening answer says of the device. */\nexport interface DeviceOutcome {\n\treadonly newDevice: boolean;\n\treadonly deviceToken: string | null;\n}\n\n/** No device given: nothing tracked, nothing minted. */\nexport const UNTRACKED: DeviceOutcome = Object.freeze({\n\tnewDevice: false,\n\tdeviceToken: null,\n});\n\n/**\n * The device a sign-in's options name. A JavaScript caller's options that\n * are not an object (the token itself), a `device` of another type, and a\n * device given to a `janus()` wired without `devices`, are wiring\n * mistakes — bare `TypeError`s. The value itself, whatever it holds, is the\n * client's, and never refused.\n */\nexport function deviceHint(\n\tcontext: Context,\n\toptions: SignInOptions | undefined,\n\twhere: string,\n): DeviceHint {\n\tif (\n\t\toptions !== undefined &&\n\t\t(typeof options !== 'object' || options === null)\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: options must be { device }, or left out — the token goes under device`,\n\t\t);\n\t}\n\tconst device = options?.device;\n\tif (device === undefined) return undefined;\n\tif (device !== null && typeof device !== 'string') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: options.device must be the device token the client holds, or null when it holds none`,\n\t\t);\n\t}\n\tif (context.config.devices === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: a device was given, but janus() has no devices — pass devices: { keys }`,\n\t\t);\n\t}\n\treturn device;\n}\n\n/**\n * Whether a session opening for `userId` comes from a new device, and the\n * token the client keeps from now on. A sign-up mints a token and is never\n * new: the account has no device to be new against.\n */\nexport function deviceOutcome(\n\tcontext: Context,\n\tuserId: string,\n\thint: DeviceHint,\n\tsignUp: boolean,\n): DeviceOutcome {\n\tconst sealer = context.config.devices?.sealer;\n\tif (hint === undefined || sealer === undefined) return UNTRACKED;\n\n\tconst known =\n\t\thint === null || signUp ? null : knownDeviceToken(sealer, userId, hint);\n\tif (known !== null) return { newDevice: false, deviceToken: known };\n\treturn {\n\t\tnewDevice: !signUp,\n\t\tdeviceToken: mintDeviceToken(sealer, userId),\n\t};\n}\n",
|
|
31
|
-
"import type { AnyUser, Context } from '../context';\nimport { emit } from '../events';\nimport type { SignInResult } from '../types';\n\n/**\n * Sends `user.newDeviceSignedIn` for a session a new device just opened —\n * once the sign-in is complete, so a sign-in refused after its session\n * opened (a password written meanwhile) reports nothing. A challenge, and a\n * session from a known device or with no device given, report nothing\n * either.\n */\nexport async function reportNewDevice(\n\tcontext: Context,\n\tresult: SignInResult<AnyUser>,\n): Promise<void> {\n\tif (result.status !== 'signedIn' || !result.newDevice) return;\n\tawait emit(\n\t\tcontext,\n\t\t'user.newDeviceSignedIn',\n\t\tresult.user,\n\t\tresult.session.createdAt,\n\t\t{ sessionId: result.session.id },\n\t);\n}\n",
|
|
32
|
-
"import { createHash, randomBytes } from 'node:crypto';\n\n/**\n * A fresh secret: 32 random bytes, base64url — safe in a header, a cookie and a\n * URL without escaping.\n *\n * Given to the application **once**. No store ever holds it.\n */\nexport function mintSecret(): string {\n\treturn randomBytes(32).toString('base64url');\n}\n\n/**\n * What a store holds instead of the secret: `sha256`, hex.\n *\n * SHA-256 and not argon2, on purpose. The secret carries 256 bits of entropy, so\n * there is nothing to brute-force, and an argon2 per request would put ~50 ms on\n * every authenticated call. What the hash buys is that a dump of the store\n * cannot be replayed.\n */\nexport function hashSecret(secret: string): string {\n\treturn createHash('sha256').update(secret).digest('hex');\n}\n",
|
|
33
|
-
"/**\n * Opening a session once a user proved who they are, and the session as\n * application code sees it.\n */\n\nimport { mintId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport { type AnyUser, type Context, toUser } from '../context';\nimport { type DeviceHint, deviceOutcome } from '../devices';\nimport type { SessionRecord, UserRecord } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport type { Session, SignedIn } from '../types';\n\n/** A session as application code sees it: everything but the token's hash. */\nexport function toSession(record: SessionRecord): Session {\n\tconst { tokenHash: _, ...session } = record;\n\treturn session;\n}\n\n/**\n * Opens a session for a user who just proved who they are. The token is in\n * the answer and nowhere else: the store holds its hash.\n *\n * `device` is what the sign-in was told of the device, and the answer says\n * whether it is new to the user; `signUp` mints a first token and is never\n * new. Reporting a new device is the caller's, once its sign-in is complete\n * (`reportNewDevice`).\n */\nexport async function openSession(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\tdevice: DeviceHint,\n\tsignUp = false,\n): Promise<SignedIn<AnyUser>> {\n\tconst now = context.clock.now();\n\tconst token = mintSecret();\n\tconst record: SessionRecord = {\n\t\tid: mintId(now.getTime()),\n\t\ttokenHash: hashSecret(token),\n\t\tuserId: user.id,\n\t\tauthenticatedAt: now,\n\t\texpiresAt: new Date(now.getTime() + type.lifespanMs),\n\t\trevokedAt: null,\n\t\tcreatedAt: now,\n\t};\n\n\tawait context.store.sessions.insertSession(record);\n\treturn {\n\t\tstatus: 'signedIn',\n\t\tuser: toUser(user),\n\t\tsession: toSession(record),\n\t\ttoken,\n\t\t...deviceOutcome(context, user.id, device, signUp),\n\t};\n}\n",
|
|
34
|
-
"/**\n * Reading the session token a request presents, whatever shape the request\n * arrives in.\n */\n\nimport type { HeaderRecord, RequestLike } from '../types';\n\n/**\n * The session token a request presents: `Authorization: Bearer`, then\n * `X-Session-Token`, then the cookie.\n *\n * **The first credential present wins, not the first valid one.** A browser\n * sending a lapsed bearer beside a live cookie is anonymous, and should fix its\n * header rather than be rescued in silence — the rule `resolve` in `nxgt-ory`'s\n * SDK learned. An `Authorization` header of another scheme (`Basic`) is not a\n * session credential, and does not count as one.\n */\nexport function presentedToken(\n\trequest: RequestLike,\n\tcookieName: string,\n): string | null {\n\tconst headers = headersOf(request);\n\tconst read = (name: string): string | null => {\n\t\tif (headers instanceof Headers) return headers.get(name);\n\t\tfor (const [key, value] of Object.entries(headers)) {\n\t\t\tif (key.toLowerCase() !== name || value === undefined) continue;\n\t\t\treturn typeof value === 'string' ? value : value.join(', ');\n\t\t}\n\t\treturn null;\n\t};\n\n\tconst authorization = read('authorization');\n\tif (authorization !== null) {\n\t\tconst match = /^bearer(?:\\s+(.*))?$/i.exec(authorization.trim());\n\t\tif (match) return match[1]?.trim() ?? '';\n\t}\n\n\tconst header = read('x-session-token');\n\tif (header !== null) return header.trim();\n\n\tconst cookie = read('cookie');\n\tif (cookie !== null) {\n\t\tfor (const pair of cookie.split(';')) {\n\t\t\tconst at = pair.indexOf('=');\n\t\t\tif (at !== -1 && pair.slice(0, at).trim() === cookieName) {\n\t\t\t\treturn pair.slice(at + 1).trim();\n\t\t\t}\n\t\t}\n\t}\n\n\treturn null;\n}\n\n/**\n * The headers of whatever was passed: a `Request`, `Headers`, anything with a\n * `headers` property — Node's `IncomingMessage` — or a plain record.\n */\nfunction headersOf(request: RequestLike): Headers | HeaderRecord {\n\tif (request instanceof Headers) return request;\n\tconst inner = (request as { headers?: unknown }).headers;\n\tif (inner instanceof Headers) return inner;\n\tif (typeof inner === 'object' && inner !== null) return inner as HeaderRecord;\n\treturn request as HeaderRecord;\n}\n",
|
|
35
|
-
"/**\n * The standing session a request presents — one rule for `authenticate` and\n * `stepUp.confirm`, so the two never disagree on what \"signed in\" means.\n */\n\nimport type { Context } from '../context';\nimport type { SessionRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport type { RequestLike } from '../types';\nimport { presentedToken } from './presented-token';\n\n/** A standing session, and the session token that presented it. */\nexport interface Presented {\n\treadonly token: string;\n\treadonly session: SessionRecord;\n}\n\n/**\n * Answers the session `request` presents, with its token — or `null` when\n * none stands: no token, or a session gone, revoked or lapsed. Expiry is\n * decided here, against the context's clock: a store may still hold a\n * session past its term.\n */\nexport async function standingSession(\n\tcontext: Context,\n\trequest: RequestLike,\n): Promise<Presented | null> {\n\tconst token = presentedToken(request, context.config.cookie.name);\n\tif (token === null) return null;\n\n\tconst session = await context.store.sessions.findSessionByTokenHash(\n\t\thashSecret(token),\n\t);\n\tconst now = context.clock.now().getTime();\n\treturn session === null ||\n\t\tsession.revokedAt !== null ||\n\t\tsession.expiresAt.getTime() <= now\n\t\t? null\n\t\t: { token, session };\n}\n",
|
|
36
|
-
"/**\n * `authenticate`: the user and the session a request presents, or `null` for\n * anonymous — and the renewal of a session used past its `renewAfter`.\n */\n\nimport type { ResolvedType } from '../config';\nimport { type AnyUser, type Context, toUser } from '../context';\nimport type { SessionRecord } from '../port/types';\nimport type { Authenticated, RequestLike } from '../types';\nimport { toSession } from './open-session';\nimport { standingSession } from './standing';\n\n/** Answers the user and the session `request` presents, or `null` for anonymous. */\nexport async function authenticate(\n\tcontext: Context,\n\trequest: RequestLike,\n\toptions?: { readonly type?: string },\n): Promise<Authenticated<AnyUser> | null> {\n\tconst { store, clock, config } = context;\n\t// Lapsed, revoked, or gone: anonymous.\n\tconst presented = await standingSession(context, request);\n\tif (presented === null) return null;\n\tconst { token, session } = presented;\n\tconst now = clock.now().getTime();\n\n\t// A user gone, inactive, or of another type than asked for is\n\t// anonymous: the session stands, and proves nothing here.\n\tconst user = await store.users.findUser(session.userId);\n\tif (\n\t\tuser === null ||\n\t\t!user.active ||\n\t\t(options?.type !== undefined && user.type !== options.type)\n\t) {\n\t\treturn null;\n\t}\n\n\tconst type = config.types.get(user.type);\n\tif (type === undefined || !renewalDue(type, session, now)) {\n\t\treturn {\n\t\t\tuser: toUser(user),\n\t\t\tsession: toSession(session),\n\t\t\ttoken,\n\t\t\trenewed: false,\n\t\t};\n\t}\n\n\tconst extended = await store.sessions.extendSession(\n\t\tsession.id,\n\t\tnew Date(now + type.lifespanMs),\n\t);\n\t// Revoked between the read and the renewal: anonymous, and never\n\t// brought back.\n\tif (extended === null) return null;\n\treturn {\n\t\tuser: toUser(user),\n\t\tsession: toSession(extended),\n\t\ttoken,\n\t\trenewed: true,\n\t};\n}\n\n/**\n * Whether a session is renewed now: once `renewAfter` has passed since it\n * was opened or last renewed — the lifespan minus what is left — so a busy\n * session is written at most once per period.\n */\nfunction renewalDue(\n\ttype: ResolvedType,\n\tsession: SessionRecord,\n\tnow: number,\n): boolean {\n\treturn (\n\t\ttype.renewAfterMs !== null &&\n\t\ttype.lifespanMs - (session.expiresAt.getTime() - now) >= type.renewAfterMs\n\t);\n}\n",
|
|
37
|
-
"/**\n * The session cookie: its name, and the `Set-Cookie` values that set and\n * clear it, under the attributes the configuration resolved.\n */\n\nimport type { AnyUser, Context } from '../context';\nimport type { Session, SharedApi } from '../types';\n\n/** The session cookie's name, and how to set it for a session and clear it. */\nexport function cookieOf(context: Context): SharedApi<AnyUser>['cookie'] {\n\tconst { name, domain, path, sameSite, secure } = context.config.cookie;\n\tconst attributes = [\n\t\t`Path=${path}`,\n\t\t...(domain === null ? [] : [`Domain=${domain}`]),\n\t\t'HttpOnly',\n\t\t`SameSite=${sameSite[0]?.toUpperCase()}${sameSite.slice(1)}`,\n\t\t...(secure ? ['Secure'] : []),\n\t].join('; ');\n\n\treturn {\n\t\tname,\n\t\tserialize: (token: string, session: Session) =>\n\t\t\t`${name}=${token}; Expires=${session.expiresAt.toUTCString()}; ${attributes}`,\n\t\tclear: () =>\n\t\t\t`${name}=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; ${attributes}`,\n\t};\n}\n",
|
|
38
|
-
"/**\n * What `janus()` answers whatever its user types: authenticating a request,\n * signing out, finding a user by id, the cookie, and collecting expired\n * sessions.\n */\n\nimport { UnsupportedError } from '../../errors/janus-error';\nimport { isId } from '../../ids/id';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n} from '../context';\nimport { hashSecret } from '../secrets';\nimport type { Authenticated, RequestLike, SharedApi } from '../types';\nimport { authenticate } from './authenticate';\nimport { cookieOf } from './cookie';\nimport { presentedToken } from './presented-token';\n\n/** `SharedApi`, degenericised: `janus()` casts it to the typed form once. */\nexport type InternalSharedApi = Omit<SharedApi<AnyUser>, 'authenticate'> & {\n\tauthenticate(\n\t\trequest: RequestLike,\n\t\toptions?: { readonly type?: string },\n\t): Promise<Authenticated<AnyUser> | null>;\n};\n\n/** Everything `janus()` answers whatever its user types. */\nexport function sharedApi(context: Context): InternalSharedApi {\n\tconst { store, clock, config } = context;\n\n\treturn {\n\t\tasync authenticate(request, options) {\n\t\t\treturn authenticate(context, request, options);\n\t\t},\n\n\t\tasync signOut(request) {\n\t\t\tconst token = presentedToken(request, config.cookie.name);\n\t\t\tif (token === null) return false;\n\n\t\t\tconst session = await store.sessions.findSessionByTokenHash(\n\t\t\t\thashSecret(token),\n\t\t\t);\n\t\t\tif (session === null) return false;\n\t\t\treturn store.sessions.revokeSession(session.id, clock.now());\n\t\t},\n\n\t\tasync signOutEverywhere(user, options) {\n\t\t\tconst id = idOf(user);\n\t\t\tif (!isId(id)) return 0;\n\t\t\t// An `except` that is no id this package minted names no session:\n\t\t\t// every session goes, as it would for an unknown one.\n\t\t\treturn options?.except === undefined || !isId(options.except)\n\t\t\t\t? store.sessions.revokeUserSessions(id, clock.now())\n\t\t\t\t: store.sessions.revokeUserSessions(id, clock.now(), options.except);\n\t\t},\n\n\t\tasync findUser(id) {\n\t\t\tconst record = await findRecord(context, id, null);\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync getUser(id) {\n\t\t\treturn toUser(await getRecord(context, id, null, 'getUser'));\n\t\t},\n\n\t\tcookie: cookieOf(context),\n\n\t\tasync collectExpired() {\n\t\t\tconst collect = store.sessions.deleteExpiredSessions;\n\t\t\tif (!context.capabilities.collectExpired || collect === undefined) {\n\t\t\t\tthrow new UnsupportedError(\n\t\t\t\t\t'collectExpired: store.sessions does not implement deleteExpiredSessions — its store expires sessions on its own, or implement the method',\n\t\t\t\t\t{ slot: 'sessions', operation: 'deleteExpiredSessions' },\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn collect(clock.now());\n\t\t},\n\n\t\ttypes: [...config.types.keys()],\n\t};\n}\n",
|
|
39
28
|
"/**\n * The key that names a count of attempts stored under no user — the\n * passwords tried at a login (`sign-in-attempts.ts`), the e-mails asked for\n * an address (`mail-requests.ts`) — and the keyed hashes made with it.\n *\n * Derived from the sealing keys when `secondFactor` is configured; without\n * them it is a fixed one, and the hash only keeps the login or the address\n * out of plain sight — safe because a `secondFactor` token is redeemed only\n * by the second factor's flows, which do not exist without the keys.\n */\n\nimport type { Context } from './context';\nimport { derivedKey, keyedHash } from './derived-keys';\n\n/**\n * The key `purpose` names its counts with. Renamed, a purpose's every count\n * in progress would start over.\n */\nexport function counterKey(context: Context, purpose: string): Buffer {\n\tconst sealer = context.config.secondFactor?.sealer;\n\t// The first key is always held: resolveSealer names it from the keys.\n\treturn sealer === undefined\n\t\t? Buffer.from(purpose)\n\t\t: (derivedKey(sealer, purpose) as Buffer);\n}\n\n/** A keyed hash of `parts`, base64url: a name, never a secret. */\nexport const keyed = (key: Buffer, parts: readonly string[]): string =>\n\tkeyedHash(key, parts).toString('base64url');\n",
|
|
40
29
|
"/**\n * The six-digit code a challenge carries — a second factor's or an e-mailed\n * one: its attempts, counted before anything is compared, its hash, keyed by\n * the challenge, and the refusal of one that does not match.\n */\n\nimport { timingSafeEqual } from 'node:crypto';\nimport { TokenError } from '../../errors/janus-error';\nimport type { Context } from '../context';\nimport type { TokenKind, TokenRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport { refuseUnusable, unknownOneTime } from './refusals';\nimport { burnOneTime } from './spend';\n\n/**\n * How many codes one challenge takes — a second factor's or an e-mail\n * code's. A six-digit code has a million values: five attempts is a\n * one-in-200,000 chance **per challenge**, and the attempts are counted by\n * the store in one write, never read then written.\n */\nexport const CODE_ATTEMPTS = 5;\n\n/**\n * Counts one attempt at a challenge's code, before anything is compared: a\n * guess that fails for any reason has still cost one. Refuses a challenge\n * that cannot be used, and one past its last attempt — a call that raced the\n * one that spent it — unread.\n */\nexport async function countCodeAttempt(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n\twhere: string,\n\tuserType: string,\n): Promise<{ readonly token: TokenRecord; readonly attemptsLeft: number }> {\n\tconst token = await context.store.tokens.countAttempt(\n\t\thashSecret(secret),\n\t\tkind,\n\t);\n\trefuseUnusable(token, context.clock.now(), where, 'challenge');\n\tif (token.attempts > CODE_ATTEMPTS) {\n\t\tthrow codeInvalid(where, token.userId, userType, 0);\n\t}\n\treturn { token, attemptsLeft: CODE_ATTEMPTS - token.attempts };\n}\n\n/**\n * A code that does not match — a second factor's or an e-mailed one — or a\n * TOTP code already used. `attemptsLeft` only when a challenge counted it.\n */\nexport function codeInvalid(\n\twhere: string,\n\tuserId: string,\n\tuserType: string,\n\tattemptsLeft?: number,\n): TokenError {\n\treturn new TokenError(\n\t\t'CODE_INVALID',\n\t\t`${where}: the code does not match, or was already used`,\n\t\t{\n\t\t\toperation: where,\n\t\t\tuserId,\n\t\t\tuserType,\n\t\t\t...(attemptsLeft === undefined ? {} : { attemptsLeft }),\n\t\t},\n\t);\n}\n\n/**\n * The refusal for a challenge whose user is gone, or of another type — the\n * API of the wrong type compares no code. Its attempt was counted all the\n * same, before the type was known, so the last one spends the challenge, as\n * a wrong code would: past it, every call answers `TOKEN_SPENT`.\n */\nexport async function unknownChallenge(\n\tcontext: Context,\n\ttoken: TokenRecord,\n\tsecret: string,\n\twhere: string,\n): Promise<TokenError> {\n\tif (token.attempts === CODE_ATTEMPTS) {\n\t\tawait burnOneTime(context, secret, token.kind);\n\t}\n\treturn unknownOneTime(where, 'challenge');\n}\n\n/**\n * A code's hash, **keyed by its challenge**: the tokens alone — a dump, a\n * log of the table — do not reveal the code, since a million guesses at it\n * each need the challenge, which only the visitor holds.\n */\nexport const hashCode = (challenge: string, code: string): string =>\n\thashSecret(`${challenge}${code}`);\n\n/** Whether `code` is the one whose hash the token holds, compared in constant time. */\nexport function codeMatches(\n\ttoken: TokenRecord,\n\tchallenge: string,\n\tcode: string,\n): boolean {\n\tif (token.codeHash === null || !/^\\d{6}$/.test(code)) return false;\n\tconst given = Buffer.from(hashCode(challenge, code));\n\tconst held = Buffer.from(token.codeHash);\n\treturn given.length === held.length && timingSafeEqual(given, held);\n}\n",
|
|
30
|
+
"import { createHash, randomBytes } from 'node:crypto';\n\n/**\n * A fresh secret: 32 random bytes, base64url — safe in a header, a cookie and a\n * URL without escaping.\n *\n * Given to the application **once**. No store ever holds it.\n */\nexport function mintSecret(): string {\n\treturn randomBytes(32).toString('base64url');\n}\n\n/**\n * What a store holds instead of the secret: `sha256`, hex.\n *\n * SHA-256 and not argon2, on purpose. The secret carries 256 bits of entropy, so\n * there is nothing to brute-force, and an argon2 per request would put ~50 ms on\n * every authenticated call. What the hash buys is that a dump of the store\n * cannot be replayed.\n */\nexport function hashSecret(secret: string): string {\n\treturn createHash('sha256').update(secret).digest('hex');\n}\n",
|
|
41
31
|
"/**\n * The refusals of a one-time token that could not be used: none, spent,\n * lapsed, or sent to an e-mail the user no longer has.\n */\n\nimport { TokenError } from '../../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf } from '../context';\nimport type { TokenRecord, UserRecord } from '../port/types';\n\n/**\n * `noun` is what the messages call it: `token` for a link, `challenge` for\n * what `signIn` answers. No message names the secret or its hash.\n */\nexport type OneTimeNoun = 'token' | 'challenge';\n\n/**\n * Refuses a token sent to an e-mail the user no longer has: redeeming it\n * would prove an address nobody holds any more.\n */\nexport function refuseStale(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\ttoken: TokenRecord,\n\twhere: string,\n\tnoun: 'token' | 'code',\n): void {\n\tconst email = emailOf(type, user.fields);\n\tif (\n\t\temail === null ||\n\t\tnormalizeEmail(email) !== normalizeEmail(token.address)\n\t) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_STALE',\n\t\t\t`${where}: the ${noun} was sent to an e-mail the user no longer has`,\n\t\t\t{ operation: where, userId: user.id, userType: type.name },\n\t\t);\n\t}\n}\n\n/**\n * Refuses a token that cannot be used: none, spent, or lapsed. What a store\n * answered — before a `consumeToken`, after a `countAttempt` — is read the\n * same way: `spentAt` set means somebody else used it.\n */\nexport function refuseUnusable(\n\ttoken: TokenRecord | null,\n\tnow: Date,\n\twhere: string,\n\tnoun: OneTimeNoun,\n): asserts token is TokenRecord {\n\tif (token === null) {\n\t\tthrow new TokenError('TOKEN_UNKNOWN', `${where}: no such ${noun}`, {\n\t\t\toperation: where,\n\t\t});\n\t}\n\tif (token.spentAt !== null) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_SPENT',\n\t\t\t`${where}: the ${noun} was already used`,\n\t\t\t{ operation: where },\n\t\t);\n\t}\n\tif (token.expiresAt.getTime() <= now.getTime()) {\n\t\tthrow new TokenError('TOKEN_EXPIRED', `${where}: the ${noun} has expired`, {\n\t\t\toperation: where,\n\t\t});\n\t}\n}\n\n/** The refusal for a token whose user is gone, or of another type. */\nexport const unknownOneTime = (where: string, noun: OneTimeNoun) =>\n\tnew TokenError('TOKEN_UNKNOWN', `${where}: no such ${noun}`, {\n\t\toperation: where,\n\t});\n",
|
|
42
32
|
"/**\n * Spending a one-time token: once when it is redeemed, and once more when its\n * last attempt failed.\n */\n\nimport type { Context } from '../context';\nimport type { TokenKind, TokenRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport { type OneTimeNoun, refuseUnusable } from './refusals';\n\n/**\n * Spends a token, and refuses it when this call did not: the store answers it\n * **as it was before**, so exactly one call ever reads `spentAt: null`. A\n * lapsed token is spent all the same, so it cannot be retried.\n */\nexport async function spendOneTime(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n\twhere: string,\n\tnoun: OneTimeNoun,\n): Promise<TokenRecord> {\n\tconst now = context.clock.now();\n\tconst token = await context.store.tokens.consumeToken(\n\t\thashSecret(secret),\n\t\tkind,\n\t\tnow,\n\t);\n\trefuseUnusable(token, now, where, noun);\n\treturn token;\n}\n\n/**\n * Spends a token whose last attempt failed. Its answer is not read: a racing\n * call that spent it first changes nothing for this one, which is refused\n * for its code either way.\n */\nexport async function burnOneTime(\n\tcontext: Context,\n\tsecret: string,\n\tkind: TokenKind,\n): Promise<void> {\n\tawait context.store.tokens.consumeToken(\n\t\thashSecret(secret),\n\t\tkind,\n\t\tcontext.clock.now(),\n\t);\n}\n",
|
|
43
33
|
"/**\n * Issuing a one-time token — a link's, or a challenge carrying a code for a\n * person to type. The secret is given back once; the store holds its hash.\n */\n\nimport { randomInt } from 'node:crypto';\nimport type { Context } from '../context';\nimport type { TokenKind } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport { hashCode } from './codes';\n\ninterface OneTimeRequest {\n\treadonly kind: TokenKind;\n\treadonly userId: string;\n\treadonly address: string;\n\treadonly ttlMs: number;\n\t/**\n\t * The secret to issue under, minted beforehand — a sign-in code's\n\t * challenge, handed to the visitor by `prepare` before the lookup. A\n\t * fresh one by default.\n\t */\n\treadonly secret?: string;\n}\n\n/**\n * Issues a one-time token: 32 random bytes, given back once, and only their\n * hash stored.\n */\nexport async function issueOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest & {\n\t\t/**\n\t\t * What the token is bound to, stored as its `codeHash`: `changeEmail`\n\t\t * binds the address it replaces. `null` by default.\n\t\t */\n\t\treadonly boundHash?: string;\n\t},\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\treturn insertOneTime(context, token, null, token.boundHash ?? null);\n}\n\n/**\n * Issues a one-time token with a six-digit code for a person to type: the\n * token is the challenge, and only the code's hash is stored, keyed by it.\n */\nexport async function issueCode(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n): Promise<{\n\treadonly secret: string;\n\treadonly expiresAt: Date;\n\treadonly code: string;\n}> {\n\tconst code = String(randomInt(1_000_000)).padStart(6, '0');\n\treturn { ...(await insertOneTime(context, token, code, null)), code };\n}\n\nasync function insertOneTime(\n\tcontext: Context,\n\ttoken: OneTimeRequest,\n\tcode: string | null,\n\tboundHash: string | null,\n): Promise<{ readonly secret: string; readonly expiresAt: Date }> {\n\tconst now = context.clock.now();\n\tconst secret = token.secret ?? mintSecret();\n\tconst expiresAt = new Date(now.getTime() + token.ttlMs);\n\n\tawait context.store.tokens.insertToken({\n\t\ttokenHash: hashSecret(secret),\n\t\tkind: token.kind,\n\t\tuserId: token.userId,\n\t\taddress: token.address,\n\t\tcodeHash: code === null ? boundHash : hashCode(secret, code),\n\t\tattempts: 0,\n\t\texpiresAt,\n\t\tspentAt: null,\n\t\tcreatedAt: now,\n\t});\n\treturn { secret, expiresAt };\n}\n",
|
|
44
34
|
"/**\n * Attempts counted by the store in fixed windows of the clock — what bounds\n * the codes tried at an app outside a sign-in (`second-factor/app-code-attempts.ts`)\n * and the passwords tried at one login (`../sign-in-attempts.ts`).\n *\n * **No port of its own.** The count is a one-time token of kind\n * `secondFactor`, counted by `countAttempt` like a challenge's: one\n * conditional write per attempt, never read then written, so twenty guesses\n * at once are twenty distinct counts. Its secret is never given out: each\n * caller names it by a keyed hash of what the count is for, so it cannot be\n * redeemed as a challenge.\n *\n * A token once spent counts nothing more. So the count is a **chain** of\n * links, and what a spent link means is the caller's to say: `carry`, and the\n * next link carries on from the attempts it holds — a password written, which\n * spends every `secondFactor` token of the user, buys no guess; `restart`,\n * and the next link starts from zero — a sign-in that succeeded spends the\n * link it counted on, and the login's count starts again.\n */\n\nimport type { Context } from '../context';\nimport type { TokenRecord } from '../port/types';\n\n/**\n * More links than this in one window, for `carry`: more passwords written\n * than guesses, and the count is past any limit.\n */\nexport const MAX_LINKS = 32;\n\n/**\n * Probes enough for 2^30 sign-ins in one window, for `restart`: past them, the\n * store answers links nobody stored, and the count fails closed.\n */\nconst MAX_PROBES = 64;\n\n/** What {@link countInWindow} counts, and how. */\nexport interface AttemptWindow {\n\t/** How long one window lasts, in milliseconds. */\n\treadonly windowMs: number;\n\t/** What a spent link means: its attempts carried on, or a count started again. */\n\treadonly spent: 'carry' | 'restart';\n\t/** The `userId` each link is stored under. */\n\treadonly userId: string;\n\t/** A link's token hash in one window: never given out, and never a secret. */\n\treadonly linkHash: (window: number, link: number) => string;\n\t/** What to throw when a link is gone right after it was stored, or the links never end. */\n\treadonly vanished: () => Error;\n}\n\n/** One attempt, counted. */\nexport interface CountedAttempt {\n\t/** The attempts of this window, this one included. */\n\treadonly attempts: number;\n\t/** The link it was counted on — what spending restarts — or `null` past the last one. */\n\treadonly link: string | null;\n\t/** When the window ends, in milliseconds since the epoch. */\n\treadonly endsAt: number;\n}\n\ninterface Links {\n\treadonly context: Context;\n\treadonly counting: AttemptWindow;\n\treadonly window: number;\n\treadonly now: number;\n\treadonly expiresAt: number;\n}\n\n/** Counts one attempt in the current window, before anything is compared. */\nexport async function countInWindow(\n\tcontext: Context,\n\tcounting: AttemptWindow,\n): Promise<CountedAttempt> {\n\tconst now = context.clock.now().getTime();\n\tconst window = Math.floor(now / counting.windowMs);\n\t// A window of slack: a store whose clock runs ahead of this one must not\n\t// drop a link before its window ends. The window is in the hash, so a\n\t// link never counts for the next one.\n\tconst expiresAt = (window + 2) * counting.windowMs;\n\tconst links = { context, counting, window, now, expiresAt };\n\tconst counted =\n\t\tcounting.spent === 'carry'\n\t\t\t? await countCarrying(links)\n\t\t\t: await countRestarting(links);\n\treturn { ...counted, endsAt: (window + 1) * counting.windowMs };\n}\n\n/** Every link from the first, each spent one's attempts carried on. */\nasync function countCarrying(\n\tlinks: Links,\n): Promise<Omit<CountedAttempt, 'endsAt'>> {\n\tlet carried = 0;\n\tfor (let link = 0; link < MAX_LINKS; link += 1) {\n\t\tconst hash = links.counting.linkHash(links.window, link);\n\t\tconst counted = await countLink(links, hash);\n\t\tconst attempts = carried + counted.attempts;\n\t\tif (counted.spentAt === null) return { attempts, link: hash };\n\t\tcarried = attempts;\n\t}\n\treturn { attempts: Number.POSITIVE_INFINITY, link: null };\n}\n\n/**\n * The one unspent link, found by probing rather than walked to: a link is\n * stored only once the one before it is spent, so every link below it is\n * spent and none above it is stored. Probing a spent link or one never\n * stored writes nothing; probing the unspent one counts the attempt. So a\n * login signed in to a thousand times in one window costs twenty probes,\n * not a thousand — and no number of sign-ins turns the count off.\n */\nasync function countRestarting(\n\tlinks: Links,\n): Promise<Omit<CountedAttempt, 'endsAt'>> {\n\tconst tokens = links.context.store.tokens;\n\tlet spent = -1;\n\tlet absent = Number.POSITIVE_INFINITY;\n\tfor (let probes = 0; probes < MAX_PROBES; probes += 1) {\n\t\tconst next = absent === spent + 1;\n\t\tconst link = next\n\t\t\t? absent\n\t\t\t: absent === Number.POSITIVE_INFINITY\n\t\t\t\t? 2 * spent + 2\n\t\t\t\t: Math.floor((spent + absent) / 2);\n\t\tconst hash = links.counting.linkHash(links.window, link);\n\t\tconst counted = next\n\t\t\t? await insertLink(links, hash)\n\t\t\t: await tokens.countAttempt(hash, 'secondFactor');\n\t\tif (counted === null) absent = link;\n\t\telse if (counted.spentAt === null) {\n\t\t\treturn { attempts: counted.attempts, link: hash };\n\t\t} else {\n\t\t\tspent = link;\n\t\t\t// Spent by a sign-in that raced this one: look further on.\n\t\t\tif (absent <= spent) absent = Number.POSITIVE_INFINITY;\n\t\t}\n\t}\n\t// A store whose links never end: it cannot be counting what it stores.\n\tthrow links.counting.vanished();\n}\n\n/** One attempt on one link: inserted on the first, and counted. */\nasync function countLink(\n\tlinks: Links,\n\ttokenHash: string,\n): Promise<TokenRecord> {\n\tconst tokens = links.context.store.tokens;\n\tconst counted = await tokens.countAttempt(tokenHash, 'secondFactor');\n\treturn counted ?? insertLink(links, tokenHash);\n}\n\n/** A link stored — idempotent: of two first attempts at once, one inserts — and counted. */\nasync function insertLink(\n\tlinks: Links,\n\ttokenHash: string,\n): Promise<TokenRecord> {\n\tconst tokens = links.context.store.tokens;\n\tawait tokens.insertToken({\n\t\ttokenHash,\n\t\tkind: 'secondFactor',\n\t\tuserId: links.counting.userId,\n\t\taddress: '',\n\t\tcodeHash: null,\n\t\tattempts: 0,\n\t\texpiresAt: new Date(links.expiresAt),\n\t\tspentAt: null,\n\t\tcreatedAt: new Date(links.now),\n\t});\n\tconst inserted = await tokens.countAttempt(tokenHash, 'secondFactor');\n\tif (inserted !== null) return inserted;\n\tthrow links.counting.vanished();\n}\n",
|
|
45
35
|
"/**\n * The requests that hand out something to e-mail, counted by the store per\n * window — `janus({ mail: { throttle } })`, five per ten minutes by\n * default. Past the last one, the request answers `MAIL_THROTTLED` with\n * `retryAfter`, and **issues nothing**: no token is minted, so there is\n * nothing to send — and **nothing is spent**: counted before anything is\n * issued, a refused request never reaches the step that spends the earlier\n * tokens, so the last link or code sent still works. Nothing locks past a\n * window. With the default lifetimes, the window (`'10m'`) is no longer than\n * any token's, so the last one sent — issued in the window — outlives the\n * refusal: somebody who asks for an address in a loop mails its owner real\n * links, and the last of them signs in.\n *\n * **Each flow counts on its own**, so a loop on one — a sign-in link asked\n * for again and again — never shuts another, and what one address can be\n * sent is bounded per flow:\n *\n * - **per address**, for the requests anybody can make with an e-mail —\n * `magicLink.request`, `signInCode.request`, `resetPassword.request`.\n * Counted **before anything is looked up**, the address normalised, and\n * whatever the user type: an address nobody holds is counted, and refused\n * past the limit, as a registered one is, so being throttled never tells\n * who has an account;\n * - **per user**, for the requests the application makes for a user it\n * knows — `verifyEmail.send`, `changeEmail.send` (and, for the address it\n * names, per address too), and `stepUp.request` when it e-mails a code.\n * Nobody without the user's session or the application's call can spend\n * that count, so a loop on their address leaves their own requests alone;\n * and whatever addresses one user moves through, they are sent at most as\n * many.\n *\n * Counted in an attempt window (`one-time/window.ts`), in `secondFactor`\n * tokens stored under no user: the `userId` of each is a keyed hash of the\n * flow and the address or the user (`counter-key.ts`). Nothing spends a\n * link, and one that is spent carries its count on: the count never starts\n * again before its window ends.\n *\n * A store that cannot count throws `STORE_FAILED`: never a refusal, and\n * never a request let through uncounted.\n */\n\nimport { MailThrottledError, StoreFailure } from '../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from './config';\nimport type { Context } from './context';\nimport { counterKey, keyed } from './counter-key';\nimport { countInWindow } from './one-time';\nimport { hashSecret } from './secrets';\n\n/** What the key is derived for. Renamed, every count in progress would start over. */\nconst PURPOSE = 'janus/mail/requests/v1';\n\n/** The flows that hand out something to e-mail, each counted on its own. */\nexport type MailFlow =\n\t| 'magicLink'\n\t| 'signInCode'\n\t| 'resetPassword'\n\t| 'verifyEmail'\n\t| 'stepUp'\n\t| 'changeEmail';\n\n/**\n * Who a request is counted for: the address it names (and, when the request\n * is a user's, the user it is made for, carried by a refusal), or the user.\n */\ntype Counted =\n\t| { readonly address: string; readonly userId?: string }\n\t| { readonly userId: string };\n\n/**\n * Counts one request of `flow` for `email` — before it is looked up — and\n * refuses past the last one, whether anybody holds the address or not.\n * `userId`, for a request made for a user (`changeEmail.send`), is only\n * carried by the refusal; the count stays the address's.\n */\nexport async function countMailByAddress(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\temail: string,\n\twhere: string,\n\tuserId?: string,\n): Promise<void> {\n\tawait countMail(\n\t\tcontext,\n\t\ttype,\n\t\tflow,\n\t\t{\n\t\t\taddress: normalizeEmail(email),\n\t\t\t...(userId === undefined ? {} : { userId }),\n\t\t},\n\t\twhere,\n\t);\n}\n\n/** Counts one request of `flow` for the user `userId`, and refuses past the last one. */\nexport async function countMailByUser(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\tuserId: string,\n\twhere: string,\n): Promise<void> {\n\tawait countMail(context, type, flow, { userId }, where);\n}\n\nasync function countMail(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tflow: MailFlow,\n\tcounted: Counted,\n\twhere: string,\n): Promise<void> {\n\tconst throttle = context.config.mailThrottle;\n\tif (throttle === null) return;\n\tconst key = counterKey(context, PURPOSE);\n\tconst subject =\n\t\t'address' in counted\n\t\t\t? keyed(key, [flow, 'address', counted.address])\n\t\t\t: keyed(key, [flow, 'user', counted.userId]);\n\tconst { attempts, endsAt } = await countInWindow(context, {\n\t\twindowMs: throttle.windowMs,\n\t\tspent: 'carry',\n\t\tuserId: subject,\n\t\tlinkHash: (window, link) =>\n\t\t\thashSecret(keyed(key, [subject, String(window), String(link)])),\n\t\t// A store that lost what it just stored cannot count: an outage.\n\t\tvanished: () =>\n\t\t\tnew StoreFailure(\n\t\t\t\t`${where}: the store dropped the requests it had just counted`,\n\t\t\t\t{ slot: 'tokens', operation: 'countAttempt' },\n\t\t\t),\n\t});\n\tif (attempts <= throttle.attempts) return;\n\n\tconst now = context.clock.now().getTime();\n\tthrow new MailThrottledError(\n\t\t`${where}: too many e-mails asked for this ${'address' in counted ? 'address' : 'user'} — the last one sent still works; use it, or wait for the next window`,\n\t\t{\n\t\t\tuserType: type.name,\n\t\t\t...(counted.userId === undefined ? {} : { userId: counted.userId }),\n\t\t\tretryAfter: Math.max(1, Math.ceil((endsAt - now) / 1000)),\n\t\t},\n\t);\n}\n",
|
|
46
36
|
"import { normalizeEmail, type ResolvedType } from '../config';\nimport { emailOf, loginsOf, validateFields } from '../context';\nimport type { JsonObject, UserRecord } from '../port/types';\nimport type { Input } from './flow-types';\n\nconst normalized = (email: string | null) =>\n\temail === null ? null : normalizeEmail(email);\n\n/**\n * Whether the e-mail differs between two sets of fields, compared normalised:\n * `Ada@Example.com` for `ada@example.com` is no change. The one test behind\n * both the new e-mail's verification reset and `user.emailChanged`.\n */\nexport function emailChanged(\n\ttype: ResolvedType,\n\tbefore: JsonObject,\n\tafter: JsonObject,\n): boolean {\n\treturn normalized(emailOf(type, before)) !== normalized(emailOf(type, after));\n}\n\n/**\n * What `update` writes: the patch merged over the stored fields, the whole\n * result validated, and the logins derived again from it.\n */\nexport async function fieldsPatch(\n\ttype: ResolvedType,\n\trecord: UserRecord,\n\tpatch: Input,\n\twhere: string,\n) {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...record.fields, ...patch },\n\t\twhere,\n\t);\n\n\treturn {\n\t\tfields,\n\t\tlogins: loginsOf(type, fields, where),\n\t\tschemaVersion: type.schemaVersion,\n\t\t// A new e-mail is an unproven one.\n\t\t...(emailChanged(type, record.fields, fields)\n\t\t\t? { emailVerifiedAt: null }\n\t\t\t: {}),\n\t};\n}\n",
|
|
47
|
-
"/**\n * The token a change of e-mail sends and redeems: issued for the NEW\n * address, bound to the address it replaces, and refused when the user's\n * e-mail is no longer that one.\n *\n * `address` holds the new address; `codeHash` holds the former one, keyed by\n * the token's secret (`TokenRecord.codeHash`), so the port needs no field and\n * a dump of the store reveals neither.\n */\n\nimport { TokenError, UserInvalidError } from '../../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport { type Context, emailOf, findRecord, validateFields } from '../context';\nimport { issueOneTime, spendOneTime, unknownOneTime } from '../one-time';\nimport type { TokenRecord, UserRecord } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport type { IssuedToken } from '../types';\n\n/** What binds a token to the address it replaces. */\nexport const formerHash = (secret: string, former: string | null): string =>\n\thashSecret(\n\t\t`janus/changeEmail/former\\0${secret}\\0${normalizeEmail(former ?? '')}`,\n\t);\n\n/**\n * Validates `email` as the user's new address — by the type's own schema, the\n * other fields as they are — and gives it back as the schema left it. An\n * address equal to the current one once normalised is `USER_INVALID`: moving\n * to where the user already is means nothing (`verifyEmail` proves it).\n */\nexport async function newAddressOf(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\temail: string,\n\twhere: string,\n): Promise<string> {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...user.fields, [type.email]: email },\n\t\twhere,\n\t);\n\tconst address = emailOf(type, fields);\n\tif (address === null) {\n\t\tthrow new TypeError(\n\t\t\t`janus: email \"${type.email}\" did not name a string in validated ${type.name} fields — the schema must keep the e-mail field a required string`,\n\t\t);\n\t}\n\tif (\n\t\tnormalizeEmail(address) === normalizeEmail(emailOf(type, user.fields) ?? '')\n\t) {\n\t\tthrow new UserInvalidError(\n\t\t\t`${where}: the new e-mail is the user's current one — a change moves to another address; verifyEmail proves the current one`,\n\t\t\t{\n\t\t\t\tissues: [\n\t\t\t\t\t{ path: [type.email], message: 'is the current e-mail of the user' },\n\t\t\t\t],\n\t\t\t\tuserType: type.name,\n\t\t\t},\n\t\t);\n\t}\n\treturn address;\n}\n\n/**\n * Issues the token for the validated new `address`, bound to the address the\n * user has now, and spends the user's earlier ones.\n */\nexport async function issueChangeEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\taddress: string,\n): Promise<IssuedToken> {\n\tconst secret = mintSecret();\n\tconst { expiresAt } = await issueOneTime(context, {\n\t\tkind: 'changeEmail',\n\t\tuserId: user.id,\n\t\taddress,\n\t\tttlMs: context.config.tokenTtlMs.changeEmail,\n\t\tsecret,\n\t\tboundHash: formerHash(secret, emailOf(type, user.fields)),\n\t});\n\t// One live link per user: issued first, spent after, as for a reset, so\n\t// requests that race leave at most one live — never one each.\n\tawait context.store.tokens.spendUserTokens(\n\t\tuser.id,\n\t\t'changeEmail',\n\t\tcontext.clock.now(),\n\t\thashSecret(secret),\n\t);\n\treturn { token: secret, email: address, expiresAt };\n}\n\n/**\n * Refuses a token asked from an address the user has left: the link would\n * move somebody who is no longer where the request came from.\n */\nexport function refuseMoved(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\ttoken: TokenRecord,\n\tsecret: string,\n\twhere: string,\n): void {\n\tif (token.codeHash !== formerHash(secret, emailOf(type, user.fields))) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_STALE',\n\t\t\t`${where}: the token was asked from an e-mail the user no longer has`,\n\t\t\t{ operation: where, userId: user.id, userType: type.name },\n\t\t);\n\t}\n}\n\n/**\n * Spends a change's token and says why it cannot be used, when it cannot. A\n * user gone since, or of another type, is as good as no token; a user who\n * moved since the link was asked is stale.\n */\nexport async function redeemChangeEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tsecret: string,\n\twhere: string,\n): Promise<{ token: TokenRecord; user: UserRecord }> {\n\tconst token = await spendOneTime(\n\t\tcontext,\n\t\tsecret,\n\t\t'changeEmail',\n\t\twhere,\n\t\t'token',\n\t);\n\tconst user = await findRecord(context, token.userId, type
|
|
48
|
-
"/**\n * Changing a user's e-mail: send a token to the NEW address, then redeem it\n * to move the user there — verified, since the link reached its inbox.\n */\n\nimport { UserInactiveError } from '../../errors/janus-error';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\temailOf,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { countMailByAddress, countMailByUser } from '../mail-requests';\nimport type { UserRecord } from '../port/types';\nimport type { ChangeEmailApi } from '../types';\nimport { emailChanged, fieldsPatch } from '../users/fields-patch';\nimport {\n\tissueChangeEmailToken,\n\tnewAddressOf,\n\tredeemChangeEmailToken,\n\trefuseMoved,\n} from './change-email-token';\n\nconst inactive = (type: ResolvedType, user: UserRecord, where: string) =>\n\tnew UserInactiveError(`${where}: the user is inactive`, {\n\t\tuserId: user.id,\n\t\tuserType: type.name,\n\t});\n\n/** `changeEmail` of one user type: `send` to the new address, then `confirm`. */\nexport function changeEmailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): ChangeEmailApi<AnyUser>['changeEmail'] {\n\treturn {\n\t\tasync send(user, email) {\n\t\t\tconst where = at('changeEmail.send');\n\t\t\tconst record = await getRecord(context, idOf(user), type.name, where);\n\t\t\tif (!record.active) throw inactive(type, record, where);\n\t\t\t// Validated first — a USER_INVALID spends nothing — then the user is\n\t\t\t// counted, then the address, all before anything is issued. The user\n\t\t\t// first: an account past its own count spends no address's, so one\n\t\t\t// account can exhaust at most one address per window. An address\n\t\t\t// other people exhausted costs the asking user one of their own.\n\t\t\tconst address = await newAddressOf(type, record, email, where);\n\t\t\tawait countMailByUser(context, type, 'changeEmail', record.id, where);\n\t\t\tawait countMailByAddress(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\t'changeEmail',\n\t\t\t\taddress,\n\t\t\t\twhere,\n\t\t\t\trecord.id,\n\t\t\t);\n\t\t\treturn issueChangeEmailToken(context, type, record, address);\n\t\t},\n\n\t\tasync confirm(secret) {\n\t\t\treturn confirmChange(context, type, secret, at('changeEmail.confirm'));\n\t\t},\n\t};\n}\n\n
|
|
37
|
+
"/**\n * The token a change of e-mail sends and redeems: issued for the NEW\n * address, bound to the address it replaces, and refused when the user's\n * e-mail is no longer that one.\n *\n * `address` holds the new address; `codeHash` holds the former one, keyed by\n * the token's secret (`TokenRecord.codeHash`), so the port needs no field and\n * a dump of the store reveals neither.\n */\n\nimport { TokenError, UserInvalidError } from '../../errors/janus-error';\nimport { normalizeEmail, type ResolvedType } from '../config';\nimport { type Context, emailOf, findRecord, validateFields } from '../context';\nimport { issueOneTime, spendOneTime, unknownOneTime } from '../one-time';\nimport type { TokenRecord, UserRecord } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport type { IssuedToken } from '../types';\n\n/** What binds a token to the address it replaces. */\nexport const formerHash = (secret: string, former: string | null): string =>\n\thashSecret(\n\t\t`janus/changeEmail/former\\0${secret}\\0${normalizeEmail(former ?? '')}`,\n\t);\n\n/**\n * Validates `email` as the user's new address — by the type's own schema, the\n * other fields as they are — and gives it back as the schema left it. An\n * address equal to the current one once normalised is `USER_INVALID`: moving\n * to where the user already is means nothing (`verifyEmail` proves it).\n */\nexport async function newAddressOf(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\temail: string,\n\twhere: string,\n): Promise<string> {\n\tconst fields = await validateFields(\n\t\ttype,\n\t\t{ ...user.fields, [type.email]: email },\n\t\twhere,\n\t);\n\tconst address = emailOf(type, fields);\n\tif (address === null) {\n\t\tthrow new TypeError(\n\t\t\t`janus: email \"${type.email}\" did not name a string in validated ${type.name} fields — the schema must keep the e-mail field a required string`,\n\t\t);\n\t}\n\tif (\n\t\tnormalizeEmail(address) === normalizeEmail(emailOf(type, user.fields) ?? '')\n\t) {\n\t\tthrow new UserInvalidError(\n\t\t\t`${where}: the new e-mail is the user's current one — a change moves to another address; verifyEmail proves the current one`,\n\t\t\t{\n\t\t\t\tissues: [\n\t\t\t\t\t{ path: [type.email], message: 'is the current e-mail of the user' },\n\t\t\t\t],\n\t\t\t\tuserType: type.name,\n\t\t\t},\n\t\t);\n\t}\n\treturn address;\n}\n\n/**\n * Issues the token for the validated new `address`, bound to the address the\n * user has now, and spends the user's earlier ones.\n */\nexport async function issueChangeEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\taddress: string,\n): Promise<IssuedToken> {\n\tconst secret = mintSecret();\n\tconst { expiresAt } = await issueOneTime(context, {\n\t\tkind: 'changeEmail',\n\t\tuserId: user.id,\n\t\taddress,\n\t\tttlMs: context.config.tokenTtlMs.changeEmail,\n\t\tsecret,\n\t\tboundHash: formerHash(secret, emailOf(type, user.fields)),\n\t});\n\t// One live link per user: issued first, spent after, as for a reset, so\n\t// requests that race leave at most one live — never one each.\n\tawait context.store.tokens.spendUserTokens(\n\t\tuser.id,\n\t\t'changeEmail',\n\t\tcontext.clock.now(),\n\t\thashSecret(secret),\n\t);\n\treturn { token: secret, email: address, expiresAt };\n}\n\n/**\n * Refuses a token asked from an address the user has left: the link would\n * move somebody who is no longer where the request came from.\n */\nexport function refuseMoved(\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\ttoken: TokenRecord,\n\tsecret: string,\n\twhere: string,\n): void {\n\tif (token.codeHash !== formerHash(secret, emailOf(type, user.fields))) {\n\t\tthrow new TokenError(\n\t\t\t'TOKEN_STALE',\n\t\t\t`${where}: the token was asked from an e-mail the user no longer has`,\n\t\t\t{ operation: where, userId: user.id, userType: type.name },\n\t\t);\n\t}\n}\n\n/**\n * Spends a change's token and says why it cannot be used, when it cannot. A\n * user gone since, or of another type, is as good as no token; a user who\n * moved since the link was asked is stale.\n *\n * With `type` null the user's own type answers — whichever it is, provided it\n * has an e-mail: a page that does not know the type confirms the link, and\n * `type` in the answer is the one the user has.\n */\nexport async function redeemChangeEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType | null,\n\tsecret: string,\n\twhere: string,\n): Promise<{ token: TokenRecord; user: UserRecord; type: ResolvedType }> {\n\tconst token = await spendOneTime(\n\t\tcontext,\n\t\tsecret,\n\t\t'changeEmail',\n\t\twhere,\n\t\t'token',\n\t);\n\tconst user = await findRecord(context, token.userId, type?.name ?? null);\n\tconst owner = type ?? context.config.types.get(user?.type ?? '');\n\tif (user === null || owner === undefined)\n\t\tthrow unknownOneTime(where, 'token');\n\t// A type with no e-mail field has no changeEmail: its users are as good as\n\t// unknown here, as through their own type, which has no such flow.\n\tif (emailOf(owner, user.fields) === null)\n\t\tthrow unknownOneTime(where, 'token');\n\n\trefuseMoved(owner, user, token, secret, where);\n\treturn { token, user, type: owner };\n}\n",
|
|
38
|
+
"/**\n * Changing a user's e-mail: send a token to the NEW address, then redeem it\n * to move the user there — verified, since the link reached its inbox.\n */\n\nimport { UserInactiveError } from '../../errors/janus-error';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\temailOf,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport { emit } from '../events';\nimport { countMailByAddress, countMailByUser } from '../mail-requests';\nimport type { UserRecord } from '../port/types';\nimport type { ChangeEmailApi } from '../types';\nimport { emailChanged, fieldsPatch } from '../users/fields-patch';\nimport {\n\tissueChangeEmailToken,\n\tnewAddressOf,\n\tredeemChangeEmailToken,\n\trefuseMoved,\n} from './change-email-token';\n\nconst inactive = (type: ResolvedType, user: UserRecord, where: string) =>\n\tnew UserInactiveError(`${where}: the user is inactive`, {\n\t\tuserId: user.id,\n\t\tuserType: type.name,\n\t});\n\n/** `changeEmail` of one user type: `send` to the new address, then `confirm`. */\nexport function changeEmailFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): ChangeEmailApi<AnyUser>['changeEmail'] {\n\treturn {\n\t\tasync send(user, email) {\n\t\t\tconst where = at('changeEmail.send');\n\t\t\tconst record = await getRecord(context, idOf(user), type.name, where);\n\t\t\tif (!record.active) throw inactive(type, record, where);\n\t\t\t// Validated first — a USER_INVALID spends nothing — then the user is\n\t\t\t// counted, then the address, all before anything is issued. The user\n\t\t\t// first: an account past its own count spends no address's, so one\n\t\t\t// account can exhaust at most one address per window. An address\n\t\t\t// other people exhausted costs the asking user one of their own.\n\t\t\tconst address = await newAddressOf(type, record, email, where);\n\t\t\tawait countMailByUser(context, type, 'changeEmail', record.id, where);\n\t\t\tawait countMailByAddress(\n\t\t\t\tcontext,\n\t\t\t\ttype,\n\t\t\t\t'changeEmail',\n\t\t\t\taddress,\n\t\t\t\twhere,\n\t\t\t\trecord.id,\n\t\t\t);\n\t\t\treturn issueChangeEmailToken(context, type, record, address);\n\t\t},\n\n\t\tasync confirm(secret) {\n\t\t\treturn confirmChange(context, type, secret, at('changeEmail.confirm'));\n\t\t},\n\t};\n}\n\n/**\n * Redeems a change's token: the write, then the events it earned. `asked` is\n * the type whose `confirm` was called, or null for the root's, where the\n * user's own type answers.\n */\nexport async function confirmChange(\n\tcontext: Context,\n\tasked: ResolvedType | null,\n\tsecret: string,\n\twhere: string,\n): Promise<AnyUser> {\n\tconst { token, user, type } = await redeemChangeEmailToken(\n\t\tcontext,\n\t\tasked,\n\t\tsecret,\n\t\twhere,\n\t);\n\tif (!user.active) throw inactive(type, user, where);\n\n\t// The record the write replaced, read in its callback, as `update` does.\n\tconst seen: { replaced: UserRecord | null } = { replaced: null };\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser.id,\n\t\ttype,\n\t\tundefined,\n\t\twhere,\n\t\tasync (record, now) => {\n\t\t\t// Checked again on the record written, as for verifyEmail.\n\t\t\tif (!record.active) throw inactive(type, record, where);\n\t\t\trefuseMoved(type, record, token, secret, where);\n\t\t\tseen.replaced = record;\n\t\t\tconst patch = await fieldsPatch(\n\t\t\t\ttype,\n\t\t\t\trecord,\n\t\t\t\t{ [type.email]: token.address },\n\t\t\t\twhere,\n\t\t\t);\n\t\t\t// Verified by the link that reached the new address. `send` refuses\n\t\t\t// the current address and an `update` spends the link, so the address\n\t\t\t// always moves here; the test is a guard, not a path.\n\t\t\tconst proved =\n\t\t\t\trecord.emailVerifiedAt === null ||\n\t\t\t\temailChanged(type, record.fields, patch.fields);\n\t\t\treturn proved ? { ...patch, emailVerifiedAt: now } : patch;\n\t\t},\n\t);\n\tconst { replaced } = seen;\n\tconst moved =\n\t\treplaced !== null && emailChanged(type, replaced.fields, written.fields);\n\tif (replaced !== null && moved) {\n\t\tawait emit(context, 'user.emailChanged', written, written.updatedAt, {\n\t\t\tformerEmail: emailOf(type, replaced.fields),\n\t\t});\n\t}\n\tif (moved || replaced?.emailVerifiedAt === null) {\n\t\tawait emit(context, 'user.emailVerified', written, written.updatedAt);\n\t}\n\treturn toUser(written);\n}\n",
|
|
39
|
+
"/**\n * The confirmation of a change of e-mail at the root of an instance with\n * several user types: for the page that follows the link and does not know\n * the user's type.\n */\n\nimport type { AnyUser, Context } from '../context';\nimport { confirmChange } from './change-email';\n\n/**\n * `{ changeEmail: { confirm } }`. Built whatever the types, as each type's\n * flows are; the types show it only when one has an e-mail, and a user of a\n * type without one is `TOKEN_UNKNOWN`. `send` stays on each type: it needs the\n * user's type to validate the address.\n */\nexport function anyTypeChangeEmail(context: Context): {\n\treadonly changeEmail: { confirm(token: string): Promise<AnyUser> };\n} {\n\treturn {\n\t\tchangeEmail: {\n\t\t\tconfirm: (secret) =>\n\t\t\t\tconfirmChange(context, null, secret, 'changeEmail.confirm'),\n\t\t},\n\t};\n}\n",
|
|
40
|
+
"import type { JanusStores, StoreCapabilities } from './types';\n\n/**\n * The methods each slot must answer, in the order the port declares them.\n *\n * Kept beside the interfaces rather than derived from them: a type does not\n * exist at runtime, and this list is the net for the JavaScript caller the\n * compiler never saw.\n */\nconst REQUIRED = {\n\tusers: [\n\t\t'insertUser',\n\t\t'findUser',\n\t\t'findUserByLogin',\n\t\t'listUsers',\n\t\t'updateUser',\n\t\t'deleteUser',\n\t],\n\tsessions: [\n\t\t'insertSession',\n\t\t'findSessionByTokenHash',\n\t\t'extendSession',\n\t\t'reauthenticateSession',\n\t\t'revokeSession',\n\t\t'revokeUserSessions',\n\t\t'deleteUserSessions',\n\t],\n\ttokens: [\n\t\t'insertToken',\n\t\t'consumeToken',\n\t\t'countAttempt',\n\t\t'spendUserTokens',\n\t\t'deleteUserTokens',\n\t],\n} as const satisfies Record<keyof JanusStores, readonly string[]>;\n\n/**\n * Checks that every slot answers every method the port declares, and reports\n * the optional capabilities found.\n *\n * TypeScript already refuses a partial store and names the missing method;\n * this is the net for a JavaScript caller, and for a store assembled from\n * `any`. A bare `TypeError`, because a missing method can only come from how\n * the application was wired — no request produces one, and no handler should\n * answer one.\n *\n * `where` names the call the consumer wrote — `janus` — so the\n * sentence says which call to fix and which slot to change.\n */\nexport function assertStores(\n\tstores: unknown,\n\twhere: string,\n): StoreCapabilities {\n\tif (typeof stores !== 'object' || stores === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: store must be an object with users, sessions and tokens`,\n\t\t);\n\t}\n\n\tfor (const slot of Object.keys(REQUIRED) as (keyof typeof REQUIRED)[]) {\n\t\tconst store: unknown = (stores as Record<string, unknown>)[slot];\n\n\t\tif (typeof store !== 'object' || store === null) {\n\t\t\tthrow new TypeError(`${where}: store.${slot} is missing`);\n\t\t}\n\n\t\tfor (const method of REQUIRED[slot]) {\n\t\t\tif (typeof (store as Record<string, unknown>)[method] !== 'function') {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t`${where}: store.${slot} has no method ${method}, which the port requires`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tconst slots = stores as Record<\n\t\tkeyof typeof REQUIRED,\n\t\tRecord<string, unknown>\n\t>;\n\treturn {\n\t\tcollectExpired: optional(slots, 'sessions', 'deleteExpiredSessions', where),\n\t\tcollectExpiredTokens: optional(\n\t\t\tslots,\n\t\t\t'tokens',\n\t\t\t'deleteExpiredTokens',\n\t\t\twhere,\n\t\t),\n\t\tfindUsers: optional(slots, 'users', 'findUsers', where),\n\t};\n}\n\n/**\n * Whether an optional method is there. Present but not a function is a wiring\n * mistake, not an absent capability: reporting it as \"unsupported\" would send\n * the reader to the wrong fix.\n */\nfunction optional(\n\tstores: Record<keyof typeof REQUIRED, Record<string, unknown>>,\n\tslot: keyof typeof REQUIRED,\n\tmethod: string,\n\twhere: string,\n): boolean {\n\tconst found = stores[slot][method];\n\tif (found !== undefined && typeof found !== 'function') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: store.${slot}.${method} must be a function or absent`,\n\t\t);\n\t}\n\treturn found !== undefined;\n}\n",
|
|
41
|
+
"import { randomBytes, timingSafeEqual } from 'node:crypto';\nimport { derivedKey, keyedHash } from '../derived-keys';\nimport type { Sealer } from '../sealing';\n\n/**\n * A device token: `d1.<key id>.<device id>.<mac>`, the last two in\n * base64url. The device id is 16 random bytes; the mac is an HMAC-SHA256 of\n * the user's id and the device id, under a key derived for this purpose from\n * `devices.keys`. **Nothing is stored**: the token is its own proof that this\n * user signed in on this device before, and a token copied onto another user\n * proves nothing.\n *\n * Every character is a cookie-value character, so it goes in a cookie as is.\n */\n\n/** What the key is derived for. Renamed, every device would be new again. */\nconst PURPOSE = 'janus/devices/v1';\n\nconst TOKEN =\n\t/^d1\\.([A-Za-z0-9_-]{1,64})\\.([A-Za-z0-9_-]{22})\\.([A-Za-z0-9_-]{43})$/;\n\nfunction macOf(key: Buffer, userId: string, deviceId: string): Buffer {\n\treturn keyedHash(key, [userId, deviceId]);\n}\n\nfunction signed(sealer: Sealer, userId: string, deviceId: string): string {\n\t// The first key is always held: resolveSealer names it from the keys.\n\tconst key = derivedKey(sealer, PURPOSE) as Buffer;\n\tconst mac = macOf(key, userId, deviceId).toString('base64url');\n\treturn `d1.${sealer.sealWith}.${deviceId}.${mac}`;\n}\n\n/** A token for a device never seen: a fresh device id, signed with the first key. */\nexport function mintDeviceToken(sealer: Sealer, userId: string): string {\n\treturn signed(sealer, userId, randomBytes(16).toString('base64url'));\n}\n\n/**\n * The token to hand back when `presented` proves this user signed in on this\n * device before — itself, or the same device signed again with the first key\n * when an older key signed it — or `null` when it proves nothing: malformed,\n * another user's, forged, or signed with a key no longer held.\n *\n * `presented` comes from a request, so nothing here throws.\n */\nexport function knownDeviceToken(\n\tsealer: Sealer,\n\tuserId: string,\n\tpresented: string,\n): string | null {\n\tconst [, keyId, deviceId, mac] = TOKEN.exec(presented) ?? [];\n\tif (keyId === undefined || deviceId === undefined || mac === undefined) {\n\t\treturn null;\n\t}\n\tconst key = derivedKey(sealer, PURPOSE, keyId);\n\tif (key === undefined) return null;\n\n\tconst expected = macOf(key, userId, deviceId);\n\tconst given = Buffer.from(mac, 'base64url');\n\tif (given.length !== expected.length || !timingSafeEqual(given, expected)) {\n\t\treturn null;\n\t}\n\treturn keyId === sealer.sealWith\n\t\t? presented\n\t\t: signed(sealer, userId, deviceId);\n}\n",
|
|
42
|
+
"import type { Context } from '../context';\nimport type { SignInOptions } from '../types';\nimport { knownDeviceToken, mintDeviceToken } from './token';\n\n/**\n * What a sign-in was told of the device: `undefined` when nothing — devices\n * are not tracked for that call — `null` for a device holding no token yet,\n * or the token it presented.\n */\nexport type DeviceHint = string | null | undefined;\n\n/** What a session-opening answer says of the device. */\nexport interface DeviceOutcome {\n\treadonly newDevice: boolean;\n\treadonly deviceToken: string | null;\n}\n\n/** No device given: nothing tracked, nothing minted. */\nexport const UNTRACKED: DeviceOutcome = Object.freeze({\n\tnewDevice: false,\n\tdeviceToken: null,\n});\n\n/**\n * The device a sign-in's options name. A JavaScript caller's options that\n * are not an object (the token itself), a `device` of another type, and a\n * device given to a `janus()` wired without `devices`, are wiring\n * mistakes — bare `TypeError`s. The value itself, whatever it holds, is the\n * client's, and never refused.\n */\nexport function deviceHint(\n\tcontext: Context,\n\toptions: SignInOptions | undefined,\n\twhere: string,\n): DeviceHint {\n\tif (\n\t\toptions !== undefined &&\n\t\t(typeof options !== 'object' || options === null)\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: options must be { device }, or left out — the token goes under device`,\n\t\t);\n\t}\n\tconst device = options?.device;\n\tif (device === undefined) return undefined;\n\tif (device !== null && typeof device !== 'string') {\n\t\tthrow new TypeError(\n\t\t\t`${where}: options.device must be the device token the client holds, or null when it holds none`,\n\t\t);\n\t}\n\tif (context.config.devices === null) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: a device was given, but janus() has no devices — pass devices: { keys }`,\n\t\t);\n\t}\n\treturn device;\n}\n\n/**\n * Whether a session opening for `userId` comes from a new device, and the\n * token the client keeps from now on. A sign-up mints a token and is never\n * new: the account has no device to be new against.\n */\nexport function deviceOutcome(\n\tcontext: Context,\n\tuserId: string,\n\thint: DeviceHint,\n\tsignUp: boolean,\n): DeviceOutcome {\n\tconst sealer = context.config.devices?.sealer;\n\tif (hint === undefined || sealer === undefined) return UNTRACKED;\n\n\tconst known =\n\t\thint === null || signUp ? null : knownDeviceToken(sealer, userId, hint);\n\tif (known !== null) return { newDevice: false, deviceToken: known };\n\treturn {\n\t\tnewDevice: !signUp,\n\t\tdeviceToken: mintDeviceToken(sealer, userId),\n\t};\n}\n",
|
|
43
|
+
"import type { AnyUser, Context } from '../context';\nimport { emit } from '../events';\nimport type { SignInResult } from '../types';\n\n/**\n * Sends `user.newDeviceSignedIn` for a session a new device just opened —\n * once the sign-in is complete, so a sign-in refused after its session\n * opened (a password written meanwhile) reports nothing. A challenge, and a\n * session from a known device or with no device given, report nothing\n * either.\n */\nexport async function reportNewDevice(\n\tcontext: Context,\n\tresult: SignInResult<AnyUser>,\n): Promise<void> {\n\tif (result.status !== 'signedIn' || !result.newDevice) return;\n\tawait emit(\n\t\tcontext,\n\t\t'user.newDeviceSignedIn',\n\t\tresult.user,\n\t\tresult.session.createdAt,\n\t\t{ sessionId: result.session.id },\n\t);\n}\n",
|
|
44
|
+
"/**\n * Opening a session once a user proved who they are, and the session as\n * application code sees it.\n */\n\nimport { mintId } from '../../ids/id';\nimport type { ResolvedType } from '../config';\nimport { type AnyUser, type Context, toUser } from '../context';\nimport { type DeviceHint, deviceOutcome } from '../devices';\nimport type { SessionRecord, UserRecord } from '../port/types';\nimport { hashSecret, mintSecret } from '../secrets';\nimport type { Session, SignedIn } from '../types';\n\n/** A session as application code sees it: everything but the token's hash. */\nexport function toSession(record: SessionRecord): Session {\n\tconst { tokenHash: _, ...session } = record;\n\treturn session;\n}\n\n/**\n * Opens a session for a user who just proved who they are. The token is in\n * the answer and nowhere else: the store holds its hash.\n *\n * `device` is what the sign-in was told of the device, and the answer says\n * whether it is new to the user; `signUp` mints a first token and is never\n * new. Reporting a new device is the caller's, once its sign-in is complete\n * (`reportNewDevice`).\n */\nexport async function openSession(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRecord,\n\tdevice: DeviceHint,\n\tsignUp = false,\n): Promise<SignedIn<AnyUser>> {\n\tconst now = context.clock.now();\n\tconst token = mintSecret();\n\tconst record: SessionRecord = {\n\t\tid: mintId(now.getTime()),\n\t\ttokenHash: hashSecret(token),\n\t\tuserId: user.id,\n\t\tauthenticatedAt: now,\n\t\texpiresAt: new Date(now.getTime() + type.lifespanMs),\n\t\trevokedAt: null,\n\t\tcreatedAt: now,\n\t};\n\n\tawait context.store.sessions.insertSession(record);\n\treturn {\n\t\tstatus: 'signedIn',\n\t\tuser: toUser(user),\n\t\tsession: toSession(record),\n\t\ttoken,\n\t\t...deviceOutcome(context, user.id, device, signUp),\n\t};\n}\n",
|
|
45
|
+
"/**\n * Reading the session token a request presents, whatever shape the request\n * arrives in.\n */\n\nimport type { HeaderRecord, RequestLike } from '../types';\n\n/**\n * The session token a request presents: `Authorization: Bearer`, then\n * `X-Session-Token`, then the cookie.\n *\n * **The first credential present wins, not the first valid one.** A browser\n * sending a lapsed bearer beside a live cookie is anonymous, and should fix its\n * header rather than be rescued in silence — the rule `resolve` in `nxgt-ory`'s\n * SDK learned. An `Authorization` header of another scheme (`Basic`) is not a\n * session credential, and does not count as one.\n */\nexport function presentedToken(\n\trequest: RequestLike,\n\tcookieName: string,\n): string | null {\n\tconst headers = headersOf(request);\n\tconst read = (name: string): string | null => {\n\t\tif (headers instanceof Headers) return headers.get(name);\n\t\tfor (const [key, value] of Object.entries(headers)) {\n\t\t\tif (key.toLowerCase() !== name || value === undefined) continue;\n\t\t\treturn typeof value === 'string' ? value : value.join(', ');\n\t\t}\n\t\treturn null;\n\t};\n\n\tconst authorization = read('authorization');\n\tif (authorization !== null) {\n\t\tconst match = /^bearer(?:\\s+(.*))?$/i.exec(authorization.trim());\n\t\tif (match) return match[1]?.trim() ?? '';\n\t}\n\n\tconst header = read('x-session-token');\n\tif (header !== null) return header.trim();\n\n\tconst cookie = read('cookie');\n\tif (cookie !== null) {\n\t\tfor (const pair of cookie.split(';')) {\n\t\t\tconst at = pair.indexOf('=');\n\t\t\tif (at !== -1 && pair.slice(0, at).trim() === cookieName) {\n\t\t\t\treturn pair.slice(at + 1).trim();\n\t\t\t}\n\t\t}\n\t}\n\n\treturn null;\n}\n\n/**\n * The headers of whatever was passed: a `Request`, `Headers`, anything with a\n * `headers` property — Node's `IncomingMessage` — or a plain record.\n */\nfunction headersOf(request: RequestLike): Headers | HeaderRecord {\n\tif (request instanceof Headers) return request;\n\tconst inner = (request as { headers?: unknown }).headers;\n\tif (inner instanceof Headers) return inner;\n\tif (typeof inner === 'object' && inner !== null) return inner as HeaderRecord;\n\treturn request as HeaderRecord;\n}\n",
|
|
46
|
+
"/**\n * The standing session a request presents — one rule for `authenticate` and\n * `stepUp.confirm`, so the two never disagree on what \"signed in\" means.\n */\n\nimport type { Context } from '../context';\nimport type { SessionRecord } from '../port/types';\nimport { hashSecret } from '../secrets';\nimport type { RequestLike } from '../types';\nimport { presentedToken } from './presented-token';\n\n/** A standing session, and the session token that presented it. */\nexport interface Presented {\n\treadonly token: string;\n\treadonly session: SessionRecord;\n}\n\n/**\n * Answers the session `request` presents, with its token — or `null` when\n * none stands: no token, or a session gone, revoked or lapsed. Expiry is\n * decided here, against the context's clock: a store may still hold a\n * session past its term.\n */\nexport async function standingSession(\n\tcontext: Context,\n\trequest: RequestLike,\n): Promise<Presented | null> {\n\tconst token = presentedToken(request, context.config.cookie.name);\n\tif (token === null) return null;\n\n\tconst session = await context.store.sessions.findSessionByTokenHash(\n\t\thashSecret(token),\n\t);\n\tconst now = context.clock.now().getTime();\n\treturn session === null ||\n\t\tsession.revokedAt !== null ||\n\t\tsession.expiresAt.getTime() <= now\n\t\t? null\n\t\t: { token, session };\n}\n",
|
|
47
|
+
"/**\n * `authenticate`: the user and the session a request presents, or `null` for\n * anonymous — and the renewal of a session used past its `renewAfter`.\n */\n\nimport type { ResolvedType } from '../config';\nimport { type AnyUser, type Context, toUser } from '../context';\nimport type { SessionRecord } from '../port/types';\nimport type { Authenticated, RequestLike } from '../types';\nimport { toSession } from './open-session';\nimport { standingSession } from './standing';\n\n/** Answers the user and the session `request` presents, or `null` for anonymous. */\nexport async function authenticate(\n\tcontext: Context,\n\trequest: RequestLike,\n\toptions?: { readonly type?: string },\n): Promise<Authenticated<AnyUser> | null> {\n\tconst { store, clock, config } = context;\n\t// Lapsed, revoked, or gone: anonymous.\n\tconst presented = await standingSession(context, request);\n\tif (presented === null) return null;\n\tconst { token, session } = presented;\n\tconst now = clock.now().getTime();\n\n\t// A user gone, inactive, or of another type than asked for is\n\t// anonymous: the session stands, and proves nothing here.\n\tconst user = await store.users.findUser(session.userId);\n\tif (\n\t\tuser === null ||\n\t\t!user.active ||\n\t\t(options?.type !== undefined && user.type !== options.type)\n\t) {\n\t\treturn null;\n\t}\n\n\tconst type = config.types.get(user.type);\n\tif (type === undefined || !renewalDue(type, session, now)) {\n\t\treturn {\n\t\t\tuser: toUser(user),\n\t\t\tsession: toSession(session),\n\t\t\ttoken,\n\t\t\trenewed: false,\n\t\t};\n\t}\n\n\tconst extended = await store.sessions.extendSession(\n\t\tsession.id,\n\t\tnew Date(now + type.lifespanMs),\n\t);\n\t// Revoked between the read and the renewal: anonymous, and never\n\t// brought back.\n\tif (extended === null) return null;\n\treturn {\n\t\tuser: toUser(user),\n\t\tsession: toSession(extended),\n\t\ttoken,\n\t\trenewed: true,\n\t};\n}\n\n/**\n * Whether a session is renewed now: once `renewAfter` has passed since it\n * was opened or last renewed — the lifespan minus what is left — so a busy\n * session is written at most once per period.\n */\nfunction renewalDue(\n\ttype: ResolvedType,\n\tsession: SessionRecord,\n\tnow: number,\n): boolean {\n\treturn (\n\t\ttype.renewAfterMs !== null &&\n\t\ttype.lifespanMs - (session.expiresAt.getTime() - now) >= type.renewAfterMs\n\t);\n}\n",
|
|
48
|
+
"/**\n * `collectExpired()`: the lapsed sessions and the lapsed one-time tokens, from\n * whichever of the two stores implements its collector.\n */\n\nimport { UnsupportedError } from '../../errors/janus-error';\nimport type { Context } from '../context';\n\n/**\n * Deletes what has lapsed at `clock.now()` and answers how many in all.\n *\n * Sessions first, then tokens, one after the other: both deletions are\n * idempotent, so a token failure after the sessions went leaves a call that can\n * simply be repeated. `UNSUPPORTED` only when neither store has a collector.\n */\nexport async function collectExpired(context: Context): Promise<number> {\n\tconst { store, clock, capabilities } = context;\n\tconst sessions = capabilities.collectExpired\n\t\t? store.sessions.deleteExpiredSessions\n\t\t: undefined;\n\tconst tokens = capabilities.collectExpiredTokens\n\t\t? store.tokens.deleteExpiredTokens\n\t\t: undefined;\n\n\tif (sessions === undefined && tokens === undefined) {\n\t\tthrow new UnsupportedError(\n\t\t\t'collectExpired: store.sessions does not implement deleteExpiredSessions, nor store.tokens deleteExpiredTokens — their stores expire records on their own, or implement the methods',\n\t\t\t{ slot: 'sessions', operation: 'deleteExpiredSessions' },\n\t\t);\n\t}\n\n\tconst before = clock.now();\n\tconst collected = sessions === undefined ? 0 : await sessions(before);\n\treturn collected + (tokens === undefined ? 0 : await tokens(before));\n}\n",
|
|
49
|
+
"/**\n * The session cookie: its name, and the `Set-Cookie` values that set and\n * clear it, under the attributes the configuration resolved.\n */\n\nimport type { AnyUser, Context } from '../context';\nimport type { Session, SharedApi } from '../types';\n\n/** The session cookie's name, and how to set it for a session and clear it. */\nexport function cookieOf(context: Context): SharedApi<AnyUser>['cookie'] {\n\tconst { name, domain, path, sameSite, secure } = context.config.cookie;\n\tconst attributes = [\n\t\t`Path=${path}`,\n\t\t...(domain === null ? [] : [`Domain=${domain}`]),\n\t\t'HttpOnly',\n\t\t`SameSite=${sameSite[0]?.toUpperCase()}${sameSite.slice(1)}`,\n\t\t...(secure ? ['Secure'] : []),\n\t].join('; ');\n\n\treturn {\n\t\tname,\n\t\tserialize: (token: string, session: Session) =>\n\t\t\t`${name}=${token}; Expires=${session.expiresAt.toUTCString()}; ${attributes}`,\n\t\tclear: () =>\n\t\t\t`${name}=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; ${attributes}`,\n\t};\n}\n",
|
|
50
|
+
"/**\n * What `janus()` answers whatever its user types: authenticating a request,\n * signing out, finding a user by id, the cookie, and collecting expired\n * sessions and one-time tokens.\n */\n\nimport { isId } from '../../ids/id';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tgetRecord,\n\tidOf,\n\ttoUser,\n} from '../context';\nimport { hashSecret } from '../secrets';\nimport type { Authenticated, RequestLike, SharedApi } from '../types';\nimport { authenticate } from './authenticate';\nimport { collectExpired } from './collect-expired';\nimport { cookieOf } from './cookie';\nimport { presentedToken } from './presented-token';\n\n/** `SharedApi`, degenericised: `janus()` casts it to the typed form once. */\nexport type InternalSharedApi = Omit<SharedApi<AnyUser>, 'authenticate'> & {\n\tauthenticate(\n\t\trequest: RequestLike,\n\t\toptions?: { readonly type?: string },\n\t): Promise<Authenticated<AnyUser> | null>;\n};\n\n/** Everything `janus()` answers whatever its user types. */\nexport function sharedApi(context: Context): InternalSharedApi {\n\tconst { store, clock, config } = context;\n\n\treturn {\n\t\tasync authenticate(request, options) {\n\t\t\treturn authenticate(context, request, options);\n\t\t},\n\n\t\tasync signOut(request) {\n\t\t\tconst token = presentedToken(request, config.cookie.name);\n\t\t\tif (token === null) return false;\n\n\t\t\tconst session = await store.sessions.findSessionByTokenHash(\n\t\t\t\thashSecret(token),\n\t\t\t);\n\t\t\tif (session === null) return false;\n\t\t\treturn store.sessions.revokeSession(session.id, clock.now());\n\t\t},\n\n\t\tasync signOutEverywhere(user, options) {\n\t\t\tconst id = idOf(user);\n\t\t\tif (!isId(id)) return 0;\n\t\t\t// An `except` that is no id this package minted names no session:\n\t\t\t// every session goes, as it would for an unknown one.\n\t\t\treturn options?.except === undefined || !isId(options.except)\n\t\t\t\t? store.sessions.revokeUserSessions(id, clock.now())\n\t\t\t\t: store.sessions.revokeUserSessions(id, clock.now(), options.except);\n\t\t},\n\n\t\tasync findUser(id) {\n\t\t\tconst record = await findRecord(context, id, null);\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync getUser(id) {\n\t\t\treturn toUser(await getRecord(context, id, null, 'getUser'));\n\t\t},\n\n\t\tcookie: cookieOf(context),\n\n\t\tasync collectExpired() {\n\t\t\treturn collectExpired(context);\n\t\t},\n\n\t\ttypes: [...config.types.keys()],\n\t};\n}\n",
|
|
49
51
|
"import type { Id } from '../ids/id';\nimport type { ResolvedType } from './config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tpasswordMatches,\n} from './context';\nimport { emit } from './events';\nimport { burnOneTime } from './one-time';\nimport type { UserRecord } from './port/types';\nimport type { SignInResult } from './types';\n\n/**\n * What writing a password ends besides. A reset, a change and a set each call\n * it **after** the write, and a failure here throws — it is never ignored:\n *\n * - The user's reset links still unspent. A link answers a request to\n * replace the password; once it is replaced, an older link would replace\n * it again, without knowing the new one.\n * - Every second-factor challenge still open, so a sign-in started with the\n * old password cannot be finished — the other half of\n * {@link heldByPassword}, which reads **after** it issued.\n *\n * Both spends are attempted even when one fails, so a store failing one kind\n * still spends the other; the first failure is then thrown.\n *\n * After the write, not before: a link issued while the password is written\n * is spent too, where one issued between an earlier spend and the write\n * would survive. So an outage here leaves the password written and the\n * older links live, and the caller is told, with `STORE_FAILED`; the next\n * `resetPassword.request` spends them. Sign-in codes and step-ups are left\n * alone: the password proves neither, and a step-up belongs to a session,\n * which a reset revokes.\n */\nexport async function endWhatThePasswordOpened(\n\tcontext: Context,\n\tuserId: Id,\n): Promise<void> {\n\tconst now = context.clock.now();\n\tconst spent = await Promise.allSettled(\n\t\t(['resetPassword', 'secondFactor'] as const).map((kind) =>\n\t\t\tcontext.store.tokens.spendUserTokens(userId, kind, now),\n\t\t),\n\t);\n\tconst failed = spent.find(\n\t\t(result): result is PromiseRejectedResult => result.status === 'rejected',\n\t);\n\tif (failed !== undefined) throw failed.reason;\n}\n\n/**\n * What a change and a set do once the password is written: end what the\n * old one opened, then send `user.passwordChanged` — from a `finally`, so an\n * outage ending them still reports the write, which a retry would not make\n * again. A reset sends `user.passwordReset` instead, from its own flow.\n */\nexport async function passwordChanged(\n\tcontext: Context,\n\twritten: UserRecord,\n): Promise<void> {\n\ttry {\n\t\tawait endWhatThePasswordOpened(context, written.id);\n\t} finally {\n\t\tawait emit(context, 'user.passwordChanged', written, written.updatedAt);\n\t}\n}\n\n/**\n * Whether the password a sign-in verified is still the user's, once the\n * sign-in answered. A password written meanwhile ends the sign-in: its\n * session is revoked, or its challenge spent, and `false` is answered.\n *\n * A password writer writes, then spends the challenges waiting; a sign-in\n * issues, then reads here. Whichever order they interleave in, one of the two\n * sees the other. A hash that changed with the same password — a concurrent\n * sign-in rehashing it — is not a change: the password is compared again.\n */\nexport async function heldByPassword(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tverified: UserRecord,\n\tpassword: string,\n\tresult: SignInResult<AnyUser>,\n\twhere: string,\n): Promise<boolean> {\n\tconst now = await findRecord(context, verified.id, type.name);\n\tconst kept =\n\t\tnow !== null &&\n\t\tnow.password !== null &&\n\t\t(now.password.hash === verified.password?.hash ||\n\t\t\t(await passwordMatches(context, now, password, where)));\n\tif (kept) return true;\n\n\tif (result.status === 'signedIn') {\n\t\tawait context.store.sessions.revokeSession(\n\t\t\tresult.session.id,\n\t\t\tcontext.clock.now(),\n\t\t);\n\t} else {\n\t\tawait burnOneTime(context, result.challenge, 'secondFactor');\n\t}\n\treturn false;\n}\n",
|
|
50
52
|
"/**\n * A request for an e-mail made in two steps — `prepare` counts it, `send`\n * issues — so the mail throttle answers in the visitor's own request, while\n * the lookup and the writes, whose time depends on whether the address has\n * an account, run off it.\n *\n * `prepare` looks nobody up: it validates, counts the address\n * (`mail-requests.ts`) and refuses past the limit, the same store calls for\n * any address. `send` is what `request` does after the count, **once**: the\n * count `prepare` made pays for one issue, so a second call is a `TypeError`\n * — a bug of the caller's, never a value from a request — and nothing a\n * caller can pass skips the count.\n */\n\n/**\n * `send` for a prepared request: `issue` on the first call, a `TypeError`\n * on every other — marked spent before `issue` starts, so two calls at once\n * cannot both issue, and spent even when `issue` fails: prepare again then,\n * which counts again.\n */\nexport function sendOnce<T>(\n\twhere: string,\n\tissue: () => Promise<T>,\n): () => Promise<T> {\n\tlet sent = false;\n\treturn async () => {\n\t\tif (sent) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}(…).send: already called — a prepared request sends once; call ${where} again for another`,\n\t\t\t);\n\t\t}\n\t\tsent = true;\n\t\treturn issue();\n\t};\n}\n",
|
|
51
53
|
"/**\n * The token an e-mail flow sends and redeems: issued for the user's current\n * e-mail, and refused on redemption when that e-mail is not the one it was\n * sent to any more.\n */\n\nimport { NotFoundError } from '../../errors/janus-error';\nimport type { ResolvedType } from '../config';\nimport { type Context, emailOf, findRecord } from '../context';\nimport {\n\tissueOneTime,\n\trefuseStale,\n\tspendOneTime,\n\tunknownOneTime,\n} from '../one-time';\nimport type { TokenKind, TokenRecord, UserRecord } from '../port/types';\nimport type { IssuedToken } from '../types';\n\n/**\n * Spends a token and says why it cannot be used, when it cannot. A user\n * gone since, or of another type, is as good as no token; a token sent to\n * an e-mail the user no longer has is stale.\n */\nexport async function redeemEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tkind: TokenKind,\n\tsecret: string,\n\twhere: string,\n): Promise<{ token: TokenRecord; user: UserRecord }> {\n\tconst token = await spendOneTime(context, secret, kind, where, 'token');\n\tconst user = await findRecord(context, token.userId, type.name);\n\tif (user === null) throw unknownOneTime(where, 'token');\n\n\trefuseStale(type, user, token, where, 'token');\n\treturn { token, user };\n}\n\n/** Issues a one-time token for the user's current e-mail. */\nexport async function issueEmailToken(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tkind: 'verifyEmail' | 'resetPassword',\n\tuser: UserRecord,\n\twhere: string,\n): Promise<IssuedToken> {\n\tconst email = emailOf(type, user.fields);\n\tif (email === null) {\n\t\tthrow new NotFoundError(`${where}: the user has no e-mail`, {\n\t\t\tuserId: user.id,\n\t\t\tuserType: type.name,\n\t\t\toperation: where,\n\t\t});\n\t}\n\n\tconst { secret, expiresAt } = await issueOneTime(context, {\n\t\tkind,\n\t\tuserId: user.id,\n\t\taddress: email,\n\t\tttlMs: context.config.tokenTtlMs[kind],\n\t});\n\treturn { token: secret, email, expiresAt };\n}\n",
|
|
@@ -90,10 +92,10 @@
|
|
|
90
92
|
"import type { ResolvedType } from '../config';\nimport { type Context, emailOf, writeUser } from '../context';\nimport { emit } from '../events';\nimport type { UserRecord } from '../port/types';\nimport type { UserRef, WriteOptions } from '../types';\nimport { emailChanged, fieldsPatch } from './fields-patch';\nimport type { Input } from './flow-types';\n\n/**\n * `update`: the patch written over the stored fields, then — when it changed\n * the e-mail — `user.emailChanged`, carrying the address the write replaced,\n * which nothing keeps once it landed, and the user's pending `changeEmail`\n * links spent.\n */\nexport async function update(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tuser: UserRef,\n\tpatch: Input,\n\toptions: WriteOptions | undefined,\n\twhere: string,\n): Promise<UserRecord> {\n\t// The record the write replaced, read in its callback — which writeUser\n\t// always calls, once, before it writes under that record's version — so\n\t// the e-mail compared is the one this write changed.\n\tconst seen: { replaced: UserRecord | null } = { replaced: null };\n\tconst written = await writeUser(\n\t\tcontext,\n\t\tuser,\n\t\ttype,\n\t\toptions,\n\t\twhere,\n\t\t(record) => {\n\t\t\tseen.replaced = record;\n\t\t\treturn fieldsPatch(type, record, patch, where);\n\t\t},\n\t);\n\tconst { replaced } = seen;\n\tif (\n\t\treplaced !== null &&\n\t\temailChanged(type, replaced.fields, written.fields)\n\t) {\n\t\t// A pending changeEmail link was asked from the address just left:\n\t\t// spent, so a move back to that address cannot revive it. The event is\n\t\t// sent from a `finally`, so an outage there still reports the write.\n\t\ttry {\n\t\t\tawait context.store.tokens.spendUserTokens(\n\t\t\t\twritten.id,\n\t\t\t\t'changeEmail',\n\t\t\t\tcontext.clock.now(),\n\t\t\t);\n\t\t} finally {\n\t\t\tawait emit(context, 'user.emailChanged', written, written.updatedAt, {\n\t\t\t\tformerEmail: emailOf(type, replaced.fields),\n\t\t\t});\n\t\t}\n\t}\n\treturn written;\n}\n",
|
|
91
93
|
"import { isId } from '../../ids/id';\nimport { invalidCursor, pageLimit } from '../../pagination/cursor-page';\nimport type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport {\n\ttype AnyUser,\n\ttype Context,\n\tfindRecord,\n\tgetRecord,\n\ttoUser,\n\twriteUser,\n} from '../context';\nimport type { UserTypeApi } from '../types';\nimport { deleteUser } from './delete';\nimport { findManyRecords } from './find-many';\nimport type { Input } from './flow-types';\nimport { insert } from './insert';\nimport { update } from './update';\n\n/**\n * The flows every user type has, whatever its configuration: creating,\n * reading, listing, updating, deactivating and deleting its users.\n */\nexport function recordFlows(\n\tcontext: Context,\n\ttype: ResolvedType,\n\tat: At,\n): UserTypeApi<AnyUser, Input> {\n\tconst { store } = context;\n\n\treturn {\n\t\tasync create(input) {\n\t\t\treturn toUser(await insert(context, type, input as Input, at('create')));\n\t\t},\n\n\t\tasync find(id) {\n\t\t\tconst record = await findRecord(context, id, type.name);\n\t\t\treturn record === null ? null : toUser(record);\n\t\t},\n\n\t\tasync findMany(ids) {\n\t\t\tconst records = await findManyRecords(\n\t\t\t\tcontext,\n\t\t\t\tids,\n\t\t\t\ttype.name,\n\t\t\t\tat('findMany'),\n\t\t\t);\n\t\t\treturn records.map(toUser);\n\t\t},\n\n\t\tasync get(id) {\n\t\t\treturn toUser(await getRecord(context, id, type.name, at('get')));\n\t\t},\n\n\t\tasync list(page) {\n\t\t\tconst after = page?.after ?? null;\n\t\t\t// Never a silent first page: a caller paging a list would loop for\n\t\t\t// ever, and the loop would look like a slow query.\n\t\t\tif (after !== null && !isId(after)) {\n\t\t\t\tthrow invalidCursor(at('list'), after);\n\t\t\t}\n\n\t\t\tconst answer = await store.users.listUsers({\n\t\t\t\ttype: type.name,\n\t\t\t\tafter,\n\t\t\t\tlimit: pageLimit(page?.limit, at('list')),\n\t\t\t});\n\t\t\treturn { items: answer.items.map(toUser), nextCursor: answer.nextCursor };\n\t\t},\n\n\t\tasync update(user, patch, options) {\n\t\t\treturn toUser(\n\t\t\t\tawait update(\n\t\t\t\t\tcontext,\n\t\t\t\t\ttype,\n\t\t\t\t\tuser,\n\t\t\t\t\tpatch as Input,\n\t\t\t\t\toptions,\n\t\t\t\t\tat('update'),\n\t\t\t\t),\n\t\t\t);\n\t\t},\n\n\t\tasync setActive(user, active, options) {\n\t\t\treturn toUser(\n\t\t\t\tawait writeUser(context, user, type, options, at('setActive'), () => ({\n\t\t\t\t\tactive: active === true,\n\t\t\t\t})),\n\t\t\t);\n\t\t},\n\n\t\tasync delete(user) {\n\t\t\treturn deleteUser(context, type, user);\n\t\t},\n\t};\n}\n",
|
|
92
94
|
"import type { At } from '../at';\nimport type { ResolvedType } from '../config';\nimport type { Context } from '../context';\nimport { emailFlows } from '../email-flows';\nimport { magicLinkFlows } from '../magic-link';\nimport { provenSignInFlows } from '../proven-sign-in';\nimport { secondFactorFlows } from '../second-factor/flows';\nimport { signInCodeFlows } from '../sign-in-code';\nimport { stepUpFlows } from '../step-up/flows';\nimport type { AnyTypeApi } from './any-type-api';\nimport { findByEmailFlows } from './find-by-email';\nimport { findOrCreateFlows } from './find-or-create';\nimport { passwordFlows } from './password-flows';\nimport { recordFlows } from './record-flows';\n\n/**\n * Everything one user type answers, gathered from its flows: its records,\n * its password, its sign-in on the application's proof, its second factor,\n * its sign-in code and link, its step-up, its e-mails, the lookup by e-mail and the lookup that creates.\n */\nexport function typeApi(context: Context, type: ResolvedType): AnyTypeApi {\n\tconst at: At = (operation) =>\n\t\tcontext.config.single ? operation : `${type.name}.${operation}`;\n\tconst secondFactor = secondFactorFlows(context, type, at);\n\tconst signInCode = signInCodeFlows(context, type, at, secondFactor.finish);\n\n\treturn {\n\t\t...recordFlows(context, type, at),\n\t\t...passwordFlows(context, type, at, secondFactor.finish),\n\t\t...provenSignInFlows(context, type, at, secondFactor.finish),\n\n\t\tsecondFactor: secondFactor.api,\n\t\tsignInCode,\n\t\tmagicLink: magicLinkFlows(context, type, at, secondFactor.finish),\n\t\tstepUp: stepUpFlows(context, type, at),\n\n\t\t...findByEmailFlows(context, type),\n\t\t...findOrCreateFlows(context, type, at),\n\t\t...emailFlows(context, type, at),\n\t};\n}\n",
|
|
93
|
-
"import { guardRelations } from '../stores/guard';\nimport { systemClock } from '../time/clock';\nimport { type JanusConfig, resolveConfig } from './config';\nimport { warnThrottleWindow } from './config/warn-throttle-window';\nimport { createContext } from './context';\nimport { resolveEvents } from './events';\nimport { guardStores } from './outage';\nimport { assertStores } from './port/assert-stores';\nimport { sharedApi } from './sessions';\nimport type { Checked, Janus } from './types';\nimport { typeApi } from './users';\n\n/**\n * Wires the identities side over the stores the application opened. **Synchronous,\n * and does no I/O**: it connects to nothing.\n *\n * ```ts\n * // One user type\n * const auth = janus({\n * user: z.object({ email: z.email(), name: z.string() }),\n * password: { login: 'email' },\n * store: createMemoryStores(),\n * hasher: scryptHasher(),\n * });\n * const { user, token } = await auth.signUp({ email, name, password });\n *\n * // Several\n * const auth = janus({\n * users: {\n * patient: { schema: Patient, password: { login: 'email' } },\n * staff: { schema: Staff, password: { login: 'email' }, session: { lifespan: '8h' } },\n * },\n * store, hasher,\n * });\n * await auth.staff.signIn({ email, password });\n * const current = await auth.authenticate(request, { type: 'staff' });\n * ```\n *\n * The types refuse first, on the offending key: a login or an e-mail that\n * names no required string field, a schema declaring a field `janus` sets, a\n * user type named like a method. What follows at run time is the net for\n * JavaScript callers, each a bare `TypeError` because only wiring produces one:\n * a store slot missing or incomplete; a password type with no hasher — there\n * is no silent fallback; two hashers claiming the same prefix, which would make\n * verification depend on the order they were listed in.\n */\nexport function janus<const C extends JanusConfig>(\n\tconfig: C & Checked<C>,\n): Janus<C> {\n\tconst where = 'janus';\n\tconst resolved = resolveConfig(config, where);\n\twarnThrottleWindow(resolved, where);\n\tconst capabilities = assertStores(config.store, where);\n\n\tconst hasher = config.hasher ?? null;\n\tconst verifiers = [\n\t\t...(hasher === null ? [] : [hasher]),\n\t\t...(config.verifiers ?? []),\n\t];\n\tconst prefixes = new Set<string>();\n\tfor (const verifier of verifiers) {\n\t\tif (typeof verifier?.prefix !== 'string' || verifier.prefix === '') {\n\t\t\tthrow new TypeError(`${where}: every hasher needs a non-empty prefix`);\n\t\t}\n\t\tif (prefixes.has(verifier.prefix)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: two hashers claim the prefix \"${verifier.prefix}\" — which one verifies would depend on their order`,\n\t\t\t);\n\t\t}\n\t\tprefixes.add(verifier.prefix);\n\t}\n\n\tconst relations = config.relations ?? null;\n\tif (\n\t\trelations !== null &&\n\t\ttypeof (relations as { deleteEntity?: unknown }).deleteEntity !== 'function'\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: relations must be a relation store — relations.deleteEntity is missing`,\n\t\t);\n\t}\n\n\tconst context = createContext(\n\t\tresolved,\n\t\tguardStores(config.store),\n\t\trelations === null ? null : guardRelations(relations),\n\t\tcapabilities,\n\t\tconfig.clock ?? systemClock,\n\t\thasher,\n\t\tverifiers,\n\t\tresolveEvents(config.events, where),\n\t);\n\n\tconst shared = sharedApi(context);\n\tconst types = Object.fromEntries(\n\t\t[...resolved.types.values()].map((type) => [\n\t\t\ttype.name,\n\t\t\ttypeApi(context, type),\n\t\t]),\n\t);\n\n\t// The one cast at the boundary: every field was validated against its\n\t// type's schema before any of these answers was built.\n\tconst surface = resolved.single\n\t\t? { ...shared, ...types['user'] }\n\t\t: {
|
|
95
|
+
"import { guardRelations } from '../stores/guard';\nimport { systemClock } from '../time/clock';\nimport { type JanusConfig, resolveConfig } from './config';\nimport { warnThrottleWindow } from './config/warn-throttle-window';\nimport { createContext } from './context';\nimport { anyTypeChangeEmail } from './email-flows/any-type-change-email';\nimport { resolveEvents } from './events';\nimport { guardStores } from './outage';\nimport { assertStores } from './port/assert-stores';\nimport { sharedApi } from './sessions';\nimport type { Checked, Janus } from './types';\nimport { typeApi } from './users';\n\n/**\n * Wires the identities side over the stores the application opened. **Synchronous,\n * and does no I/O**: it connects to nothing.\n *\n * ```ts\n * // One user type\n * const auth = janus({\n * user: z.object({ email: z.email(), name: z.string() }),\n * password: { login: 'email' },\n * store: createMemoryStores(),\n * hasher: scryptHasher(),\n * });\n * const { user, token } = await auth.signUp({ email, name, password });\n *\n * // Several\n * const auth = janus({\n * users: {\n * patient: { schema: Patient, password: { login: 'email' } },\n * staff: { schema: Staff, password: { login: 'email' }, session: { lifespan: '8h' } },\n * },\n * store, hasher,\n * });\n * await auth.staff.signIn({ email, password });\n * const current = await auth.authenticate(request, { type: 'staff' });\n * ```\n *\n * The types refuse first, on the offending key: a login or an e-mail that\n * names no required string field, a schema declaring a field `janus` sets, a\n * user type named like a method. What follows at run time is the net for\n * JavaScript callers, each a bare `TypeError` because only wiring produces one:\n * a store slot missing or incomplete; a password type with no hasher — there\n * is no silent fallback; two hashers claiming the same prefix, which would make\n * verification depend on the order they were listed in.\n */\nexport function janus<const C extends JanusConfig>(\n\tconfig: C & Checked<C>,\n): Janus<C> {\n\tconst where = 'janus';\n\tconst resolved = resolveConfig(config, where);\n\twarnThrottleWindow(resolved, where);\n\tconst capabilities = assertStores(config.store, where);\n\n\tconst hasher = config.hasher ?? null;\n\tconst verifiers = [\n\t\t...(hasher === null ? [] : [hasher]),\n\t\t...(config.verifiers ?? []),\n\t];\n\tconst prefixes = new Set<string>();\n\tfor (const verifier of verifiers) {\n\t\tif (typeof verifier?.prefix !== 'string' || verifier.prefix === '') {\n\t\t\tthrow new TypeError(`${where}: every hasher needs a non-empty prefix`);\n\t\t}\n\t\tif (prefixes.has(verifier.prefix)) {\n\t\t\tthrow new TypeError(\n\t\t\t\t`${where}: two hashers claim the prefix \"${verifier.prefix}\" — which one verifies would depend on their order`,\n\t\t\t);\n\t\t}\n\t\tprefixes.add(verifier.prefix);\n\t}\n\n\tconst relations = config.relations ?? null;\n\tif (\n\t\trelations !== null &&\n\t\ttypeof (relations as { deleteEntity?: unknown }).deleteEntity !== 'function'\n\t) {\n\t\tthrow new TypeError(\n\t\t\t`${where}: relations must be a relation store — relations.deleteEntity is missing`,\n\t\t);\n\t}\n\n\tconst context = createContext(\n\t\tresolved,\n\t\tguardStores(config.store),\n\t\trelations === null ? null : guardRelations(relations),\n\t\tcapabilities,\n\t\tconfig.clock ?? systemClock,\n\t\thasher,\n\t\tverifiers,\n\t\tresolveEvents(config.events, where),\n\t);\n\n\tconst shared = sharedApi(context);\n\tconst types = Object.fromEntries(\n\t\t[...resolved.types.values()].map((type) => [\n\t\t\ttype.name,\n\t\t\ttypeApi(context, type),\n\t\t]),\n\t);\n\n\t// The one cast at the boundary: every field was validated against its\n\t// type's schema before any of these answers was built.\n\tconst surface = resolved.single\n\t\t? { ...shared, ...types['user'] }\n\t\t: {\n\t\t\t\t...shared,\n\t\t\t\t...types,\n\t\t\t\t...anyTypeChangeEmail(context),\n\t\t\t};\n\treturn surface as unknown as Janus<C>;\n}\n",
|
|
94
96
|
"/**\n * `assertFresh`: whether a session proved who it is recently enough for a\n * sensitive action — signed in, or confirmed by a step-up, less than\n * `maxAge` ago.\n */\n\nimport { StepUpRequiredError } from '../../errors/janus-error';\nimport { type Clock, systemClock } from '../../time/clock';\nimport { type Duration, parseDuration } from '../../time/duration';\nimport type { Session } from '../types';\n\n/**\n * Refuses a session whose credentials were last presented `maxAge` ago or\n * more — at its sign-in, or since by `stepUp.confirm` — with\n * `STEP_UP_REQUIRED` (403): ask for a step-up, then run the action again. One\n * field of the session `authenticate` already answered, so no store is read.\n *\n * ```ts\n * const current = await auth.authenticate(request);\n * if (current === null) return new Response(null, { status: 401 });\n * assertFresh(current.session, '10m'); // STEP_UP_REQUIRED past ten minutes\n * ```\n *\n * Pass the `clock` given to `janus()` when it is not the system's. A\n * `maxAge` that is not a duration is a `TypeError`: it is written in the\n * code, never read from a request.\n */\nexport function assertFresh(\n\tsession: Pick<Session, 'authenticatedAt' | 'userId'>,\n\tmaxAge: Duration,\n\tclock: Clock = systemClock,\n): void {\n\tconst maxAgeMs = parseDuration(maxAge, 'assertFresh: maxAge');\n\tconst age = clock.now().getTime() - session.authenticatedAt.getTime();\n\tif (age >= maxAgeMs) {\n\t\tthrow new StepUpRequiredError(\n\t\t\t'assertFresh: the session proved who it is longer ago than maxAge — confirm with a step-up',\n\t\t\t{ userId: session.userId },\n\t\t);\n\t}\n}\n"
|
|
95
97
|
],
|
|
96
|
-
"mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,SAAS,YAAY,CAAC,SAEV;AAAA,EAClB,MAAM,OAAO,SAAS,QAAQ;AAAA,EAC9B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM,OAAO,IAAI;AAAA,IACtD,MAAM,IAAI,UACT,uFACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,SACF,KAAI,CAAC,OAAO;AAAA,MACjB,MAAM,OAAO,YAAY,EAAE;AAAA,MAC3B,MAAM,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,GAAG,CAAC;AAAA,MAChD,OAAO,GAAG,mBAAmB,gBAAgB,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ;AAAA;AAAA,SAExF,OAAM,CAAC,OAAO,MAAM;AAAA,MACzB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAIpC,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UACT,0EACD;AAAA,MACD;AAAA,MACA,SAAS,IAAI,GAAG,GAAG,MAAM,OAAO;AAAA,MAQhC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;AAAA,MAC1C,MAAM,SAAS,MAAM,OACpB,OACA,OAAO,KAAK,MAAM,QAAQ,GAC1B,OAAO,EAAE,GACT,OAAO,CAAC,GACR,OAAO,CAAC,GACR,SAAS,MACV;AAAA,MACA,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAAA,IAExC,WAAW,CAAC,MAAM;AAAA,MACjB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAEpC,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAC5B,SAAS,IAAI,GAAG,KAAK;AAAA,MACrB,OAAO,OAAO,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA;AAAA,EAEnD;AAAA;AAGD,IAAM,gBAAgB;AACtB,IAAM,cACL;AAED,SAAS,MAAM,CACd,OACA,MACA,IACA,GACA,GACA,SAAS,IACS;AAAA,EAGlB,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,IAIvC,OACC,OACA,MACA,QACA,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,MAAM,IAAI,EAAE,GACjE,CAAC,OAAO,QAAS,QAAQ,OAAO,KAAK,IAAI,QAAQ,GAAG,CACrD;AAAA,GACA;AAAA;AAWK,SAAS,SAAS,GAAmB;AAAA,EAG3C,MAAM,WACL,OAAO,QAAQ,cAAc,YAAY,IAAI;AAAA,EAE9C,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,IAAI,UACT,iGACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ;AAAA,IAC9C,QAAQ,CAAC,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAAA,IACpD,aAAa,CAAC,SAAS,CAAC,KAAK,WAAW,mBAAmB;AAAA,EAC5D;AAAA;AASD,IAAM,WAAW;AAAA,EAChB,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,UAAU;AACX;AACA,IAAM,sBAAsB;;ACjIrB,IAAM,cAAqB;AAAA,EACjC,KAAK,MAAM,IAAI;AAChB;AASO,SAAS,UAAU,CAAC,QAAuB,GAGhD;AAAA,EACD,IAAI,KAAK,iBAAiB,OAAO,MAAM,QAAQ,IAAI;AAAA,EAEnD,OAAO;AAAA,IACN,KAAK,MAAM,IAAI,KAAK,EAAE;AAAA,IACtB,SAAS,CAAC,OAAO;AAAA,MAChB,MAAM;AAAA;AAAA,IAEP,KAAK,CAAC,OAAO;AAAA,MACZ,KAAK,cAAc,OAAO,GAAG,QAAQ,IAAI;AAAA;AAAA,EAE3C;AAAA;;;ACzBD,IAAM,cAAc;AAAA,EACnB,MAAM,CAAC,UAAkB;AAAA,EACzB,WAAW,CAAC,UAAkB,MAAM,YAAY;AAAA,EAChD,eAAe,CAAC,UAAkB,MAAM,YAAY,EAAE,KAAK;AAAA,EAC3D,mBAAmB,CAAC,UACnB,MAAM,UAAU,MAAM,EAAE,YAAY,EAAE,KAAK;AAC7C;AAGO,IAAM,iBAAiB,YAAY;AAGnC,SAAS,UAAU,CACzB,MACA,OAC4B;AAAA,EAC5B,IAAI,OAAO,SAAS;AAAA,IAAY,OAAO;AAAA,EACvC,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,IAAI,GAAG;AAAA,IACjE,OAAO,YAAY;AAAA,EACpB;AAAA,EAEA,MAAM,IAAI,UACT,GAAG,uFACJ;AAAA;;ACpCM,IAAM,cAAc;AAMpB,IAAM,kBAAkB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGO,IAAM,iBAAiB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;;ACzBA,IAAM,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACJ;AAEA,IAAM,UAAU;AAcT,SAAS,aAAa,CAAC,OAAiB,OAAuB;AAAA,EACrE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,MAC1C,MAAM,IAAI,UACT,GAAG,sEACJ;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAEhC,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,IAAI,UACT,GAAG,WAAW,qGACf;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,OAAO,MAAM,EAAE;AAAA,EAC9B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,MAAM;AAAA,EAE1B,IAAI,MAAM,GAAG;AAAA,IACZ,MAAM,IAAI,UAAU,GAAG,sCAAsC;AAAA,EAC9D;AAAA,EAEA,OAAO;AAAA;;;AClDD,IAAM,OAAO;AAGb,SAAS,SAAS,CAAC,OAAgB,OAAuB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA,IACnD,MAAM,IAAI,UACT,GAAG,kEACJ;AAAA,EACD;AAAA,EACA,IAAK,gBAAsC,SAAS,KAAK,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,GAAG,WAAW,qCAAqC;AAAA,EACxE;AAAA,EACA,OAAO;AAAA;;;ACdR,IAAM,cAAc;AAEb,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,MAAM,OAAO,OAAO,QAAQ;AAAA,EAC5B,IAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,kHACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,OAAO,YAAY;AAAA,EACpC,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,IAAI,aAAa,UAAU,CAAC,QAAQ;AAAA,IACnC,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,OAAO,UAAU;AAAA,IACzB,MAAM,OAAO,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AAAA;;;AChCD,0DAA2C;AA6B3C,IAAM,YAAY;AAElB,IAAM,SAAS;AACf,IAAM,MAAM;AAGL,SAAS,aAAa,CAAC,MAAe,OAAuB;AAAA,EACnE,IAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAAA,IAC9C,MAAM,IAAI,UACT,GAAG,mEACJ;AAAA,EACD;AAAA,EACA,MAAM,UAAU,IAAI;AAAA,EACpB,WAAW,SAAS,MAA+B;AAAA,IAClD,MAAM,KAAK,OAAO;AAAA,IAClB,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,KAAK,EAAE,GAAG;AAAA,MAC/C,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,IACD;AAAA,IACA,IAAI,QAAQ,IAAI,EAAE,GAAG;AAAA,MACpB,MAAM,IAAI,UAAU,GAAG,gCAAgC,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,MAAM,MAAM;AAAA,IAClB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GAAG,GAAG;AAAA,MAC9C,MAAM,IAAI,UACT,GAAG,mBAAmB,uEACvB;AAAA,IACD;AAAA,IACA,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,EAAE,UAAW,KAAK,GAAkB,IAAI,MAAM,QAAQ;AAAA;AAIvD,SAAS,IAAI,CAAC,QAAgB,OAAe,SAAyB;AAAA,EAC5E,MAAM,MAAM,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,EAC3C,MAAM,KAAK,aAAY,EAAE;AAAA,EACzB,MAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AAAA,EACpD,OAAO,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,EAClC,MAAM,SAAS,OAAO,OAAO;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM;AAAA,IAC3B,OAAO,MAAM;AAAA,IACb,OAAO,WAAW;AAAA,EACnB,CAAC;AAAA,EACD,OAAO,MAAM,OAAO,YAAY,GAAG,SAAS,WAAW,KAAK,OAAO,SAAS,WAAW;AAAA;AAUjF,SAAS,MAAM,CACrB,QACA,QACA,SACA,OACqD;AAAA,EACrD,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,OAAO,SAAS,OAAO,IAAI,QAAQ;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK,QAAQ,IAAI,WAAW;AAAA,EAEjD,IACC,MAAM,WAAW,KACjB,YAAY,QACZ,UAAU,aACV,OAAO,aACP,MAAM,UAAU,WACf;AAAA,IACD,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,EACtE;AAAA,EACA,MAAM,MAAM,OAAO,KAAK,IAAI,KAAK;AAAA,EACjC,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,IAAI,UACT,GAAG,6CAA6C,gGACjD;AAAA,EACD;AAAA,EACA,IAAI;AAAA,IACH,MAAM,WAAW,iBAChB,eACA,KACA,OAAO,KAAK,IAAI,WAAW,GAC3B,EAAE,eAAe,UAAU,CAC5B;AAAA,IACA,SAAS,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,IACpC,SAAS,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;AAAA,IAC5D,MAAM,QAAQ,OAAO,OAAO;AAAA,MAC3B,SAAS,OAAO,MAAM,SAAS,GAAG,MAAM,SAAS,SAAS,CAAC;AAAA,MAC3D,SAAS,MAAM;AAAA,IAChB,CAAC,EAAE,SAAS,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,MAAM;AAAA,IACrB,OAAO,OAAO;AAAA,IACf,MAAM,IAAI,UACT,GAAG,iDAAiD,4FACpD,EAAE,MAAM,CACT;AAAA;AAAA;;;ACzHK,SAAS,cAAc,CAC7B,QACA,OAC4B;AAAA,EAC5B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EAEjC,OAAO,EAAE,QAAQ,cAAc,QAAQ,MAAM,GAAG,qBAAqB,EAAE;AAAA;;;ACLjE,SAAS,mBAAmB,CAClC,QACA,OACiC;AAAA,EACjC,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,KAAK,GAAG;AAAA,EACd,IAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,KAAK,MAAM,IAAI;AAAA,IACtE,MAAM,IAAI,UACT,GAAG,0FACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,QAAQ,cAAc,OAAO,MAAM,GAAG,SAAS;AAAA,IAC/C,gBAAgB,cAAc,OAAO,aAAa,MAAM,GAAG,cAAc;AAAA,EAC1E;AAAA;;;ACMM,SAAS,qBAAqB,CACpC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,UAAU,UAAU,IAAI,QAAQ,MAAM,GAChD,KACD;AAAA;AAWM,SAAS,mBAAmB,CAClC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,QAAQ,UAAU,GAAG,QAAQ,MAAM,GAC7C,KACD;AAAA;AAGD,SAAS,eAAe,CACvB,QACA,UACA,OACmB;AAAA,EACnB,QAAQ,WAAW;AAAA,EACnB,IAAI,WAAW,cAAc,OAAO,WAAW,YAAY,WAAW,OAAO;AAAA,IAC5E,MAAM,IAAI,UAAU,GAAG,UAAU,yCAAyC;AAAA,EAC3E;AAAA,EACA,MAAM,WAAW,QAAQ,YAAY,CAAC;AAAA,EACtC,IAAI,aAAa;AAAA,IAAO,OAAO;AAAA,EAC/B,MAAM,KAAK,GAAG,UAAU;AAAA,EACxB,IAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AAAA,IACtD,MAAM,IAAI,UACT,GAAG,4DACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,SAAS,YAAY,SAAS;AAAA,EAC/C,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,GAAG;AAAA,IACpD,MAAM,IAAI,UAAU,GAAG,+CAA+C;AAAA,EACvE;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA,UAAU,cAAc,SAAS,UAAU,SAAS,QAAQ,GAAG,WAAW;AAAA,EAC3E;AAAA;;;ACxEM,SAAS,WAAW,CAC1B,MACA,MACA,IACA,WACe;AAAA,EACf,IACC,OAAO,MAAM,WAAW,YACxB,KAAK,WAAW,QAChB,OAAO,KAAK,OAAO,cAAc,aAAa,YAC7C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,OAAO,0EACX;AAAA,EACD;AAAA,EAEA,MAAM,WACL,KAAK,aAAa,YAAY,OAAO,gBAAgB,KAAK,UAAU,EAAE;AAAA,EAEvE,MAAM,aAAa,KAAK,SAAS,cAAc;AAAA,EAE/C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO,UAAU,KAAK,SAAS,SAAS,GAAG,WAAW;AAAA,IACtD,YAAY,cACX,KAAK,SAAS,YAAY,MAC1B,GAAG,sBACJ;AAAA,IACA,cACC,eAAe,QACZ,OACA,cAAc,YAAY,GAAG,wBAAwB;AAAA,EAC1D;AAAA;AAGD,SAAS,eAAe,CACvB,UACA,IACwC;AAAA,EACxC,MAAM,YAAY,SAAS,aAAa;AAAA,EACxC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,yDACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,OAAO,UAAU,SAAS,OAAO,GAAG,oBAAoB;AAAA,IACxD,WAAW,WACV,SAAS,aAAa,iBACtB,GAAG,wBACJ;AAAA,IACA;AAAA,EACD;AAAA;;;AC3CM,SAAS,aAAa,CAC5B,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UAAU,GAAG,wCAAwC;AAAA,EAChE;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,WAAW,OAAO,UAAU;AAAA,EAClC,IAAI,YAAY,UAAU;AAAA,IACzB,MAAM,IAAI,UACT,GAAG,gGACJ;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ,aAAa,UAAU,QAAQ,QAAQ,GAAG,UAAU,KAAK;AAAA,EACvE,2BAA2B,QAAQ,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA,IACN,QAAQ,CAAC;AAAA,IACT;AAAA,IACA,YAAY,iBAAiB,QAAQ,KAAK;AAAA,IAC1C,QAAQ,cAAc,OAAO,UAAU,CAAC,GAAG,KAAK;AAAA,IAChD,gBAAgB,sBAAsB,OAAO,QAAQ,KAAK;AAAA,IAC1D,cAAc,oBAAoB,OAAO,MAAM,KAAK;AAAA,IACpD,cAAc,oBAAoB,OAAO,cAAc,KAAK;AAAA,IAC5D,SAAS,eAAe,OAAO,SAAS,KAAK;AAAA,EAC9C;AAAA;AAID,SAAS,SAAS,CACjB,QACA,UAC6B;AAAA,EAC7B,OAAO,WACJ,OAAO,QAAQ,OAAO,KAAiC,IACvD;AAAA,IACA;AAAA,MACC;AAAA,MACA;AAAA,WACK;AAAA,QACJ,QAAQ,OAAO;AAAA,MAChB;AAAA,IACD;AAAA,EACD;AAAA;AAGH,SAAS,YAAY,CACpB,SACA,UACA,OAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW,GAAG;AAAA,IACzB,MAAM,IAAI,UAAU,GAAG,oCAAoC;AAAA,EAC5D;AAAA,EAEA,MAAM,QAAQ,IAAI;AAAA,EAClB,YAAY,MAAM,SAAS,SAAS;AAAA,IACnC,MAAM,KAAK,WAAW,GAAG,gBAAgB,SAAS;AAAA,IAElD,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AAAA,MACrB,MAAM,IAAI,UACT,GAAG,yBAAyB,6EAC7B;AAAA,IACD;AAAA,IACA,IAAK,eAAqC,SAAS,IAAI,GAAG;AAAA,MACzD,MAAM,IAAI,UACT,GAAG,WAAW,uEACf;AAAA,IACD;AAAA,IACA,MAAM,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,WAAW,WAAW,MAAM,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGR,SAAS,0BAA0B,CAClC,QACA,OACA,OACO;AAAA,EACP,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI;AAAA,EACzE,IAAI,WAAW,OAAO,WAAW,WAAW;AAAA,IAC3C,MAAM,IAAI,UACT,GAAG,sJACJ;AAAA,EACD;AAAA;AAGD,SAAS,gBAAgB,CACxB,QACA,OAC+B;AAAA,EAC/B,OAAO;AAAA,IACN,aAAa,cACZ,OAAO,QAAQ,eAAe,OAC9B,GAAG,2BACJ;AAAA,IACA,eAAe,cACd,OAAO,QAAQ,iBAAiB,MAChC,GAAG,6BACJ;AAAA,IACA,YAAY,cACX,OAAO,QAAQ,cAAc,OAC7B,GAAG,0BACJ;AAAA,IACA,WAAW,cACV,OAAO,QAAQ,aAAa,OAC5B,GAAG,yBACJ;AAAA,IACA,QAAQ,cACP,OAAO,QAAQ,UAAU,OACzB,GAAG,sBACJ;AAAA,IACA,aAAa,cACZ,OAAO,QAAQ,eAAe,MAC9B,GAAG,2BACJ;AAAA,EACD;AAAA;;ACjID,IAAM,QAAQ;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAEA,IAAM,SAAgD;AAAA,EACrD,CAAC,KAAK,QAAU;AAAA,EAChB,CAAC,KAAK,OAAS;AAAA,EACf,CAAC,KAAK,KAAM;AAAA,EACZ,CAAC,KAAK,IAAK;AACZ;AAGA,SAAS,IAAI,CAAC,IAAoB;AAAA,EACjC,MAAM,OAAO,OAAM,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC;AAAA,EACrD,OAAO,SAAS,YAAY,GAAG,SAAS,GAAG,KAAK,KAAK,KAAK,KAAK;AAAA;AAIzD,SAAS,qBAAqB,CACpC,UACA,OACgB;AAAA,EAChB,MAAM,WAAW,SAAS;AAAA,EAC1B,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,EACrC,MAAM,UAAU,MAAM,OACrB,CAAC,SAAS,SAAS,WAAW,QAAQ,SAAS,QAChD;AAAA,EACA,IAAI,QAAQ,WAAW;AAAA,IAAG,OAAO;AAAA,EACjC,MAAM,WAAW,KAAK,IACrB,GAAG,QAAQ,IAAI,CAAC,SAAS,SAAS,WAAW,KAAK,CACnD;AAAA,EACA,MAAM,QAAQ,QAAQ,IACrB,CAAC,SACA,UAAU,WAAW,KAAK,SAAS,WAAW,KAAK,yCAAyC,QAC9F;AAAA,EACA,OAAO,GAAG,UAAU,MAAM,KAAK,IAAI,+BAA+B,QAAQ,WAAW,IAAI,UAAU,iFAAiF,KAAK,QAAQ,uBAAuB,QAAQ,IAAI,CAAC,SAAS,UAAU,MAAM,EAAE,KAAK,IAAI,QAAQ;AAAA;AAI3Q,SAAS,kBAAkB,CACjC,UACA,OACO;AAAA,EACP,MAAM,UAAU,sBAAsB,UAAU,KAAK;AAAA,EACrD,IAAI,YAAY;AAAA,IAAM;AAAA,EACtB,IACC,OAAO,YAAY,eACnB,OAAO,QAAQ,gBAAgB,YAC9B;AAAA,IACD;AAAA,EACD;AAAA,EACA,QAAQ,YAAY,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAAA;;;ACxCxD,SAAS,aAAa,CAC5B,QACA,OACA,WACA,cACA,OACA,QACA,WACA,SAAmC,MACzB;AAAA,EACV,IAAI,QAAgC;AAAA,EAEpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,MAAM;AAAA,MAChB,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UAAU,+CAA+C;AAAA,MACpE;AAAA,MACA,UAAU,OAAO,KAAK,eAAe,QAAO,GAAG;AAAA,MAC/C,OAAO;AAAA;AAAA,EAET;AAAA;;AC7CM,SAAS,OAAO,CAAC,MAAoB,QAAmC;AAAA,EAC9E,MAAM,QAAQ,OAAO,KAAK;AAAA,EAC1B,OAAO,OAAO,UAAU,WAAW,QAAQ;AAAA;AAQrC,SAAS,QAAQ,CACvB,MACA,QACA,OACW;AAAA,EACX,MAAM,SAAS,IAAI;AAAA,EAEnB,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,IAAI,OAAO,UAAU,UAAU;AAAA,MAC9B,MAAM,IAAI,UACT,0BAA0B,KAAK,SAAS,6CAA6C,KAAK,oDAC3F;AAAA,IACD;AAAA,IACA,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK;AAAA,IAIhD,IAAI,CAAC,WAAW,UAAU,GAAG;AAAA,MAC5B,MAAM,OAAO,CAAC,KAAK,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,4BAA4B,KAAK,KAAK,GAAG,MACvF;AAAA,QACC,QAAQ;AAAA,UACP,EAAE,MAAM,SAAS,8BAA8B,aAAa;AAAA,QAC7D;AAAA,QACA,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO,IAAI,UAAU;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,IAAI,UAAU;AAAA,IAAM,OAAO,IAAI,eAAe,KAAK,CAAC;AAAA,EAEpD,OAAO,CAAC,GAAG,MAAM;AAAA;AAQlB,eAAsB,aAAa,CAClC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,eAAe,KAAK;AAAA,EACnC,IAAI,CAAC,WAAW,MAAM;AAAA,IAAG,OAAO;AAAA,EAChC,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,MAAM;AAAA,EAC1E,MAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,MAAM,OAAO,MAAM;AAAA,EACjE,OAAO,SAAS,QAAQ,eAAe,IAAI,MAAM,SAAS,SAAS;AAAA;;ACtC7D,SAAS,WAAW,CAAC,QAAkC;AAAA,EAC7D,OAAO;AAAA,IACN,OAAO,WAAW,SAAS,OAAO,KAAK;AAAA,IACvC,UAAU,WAAW,YAAY,OAAO,QAAQ;AAAA,IAChD,QAAQ,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AAAA;AAUM,SAAS,QAAW,CAAC,OAAiB,QAA6B;AAAA,EACzE,IAAI,UAAU;AAAA,IAAM,MAAM,OAAO;AAAA,EACjC,OAAO;AAAA;AAcR,eAAsB,qBAAwB,CAC7C,OACoB;AAAA,EACpB,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAW,OAAO;AAAA,IACrE,MAAM;AAAA;AAAA;AAaR,eAAsB,gBAAmB,CACxC,OAC6B;AAAA,EAC7B,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAS,OAAO;AAAA,IACnE,MAAM;AAAA;AAAA;;;ACnFD,SAAS,YAAY,CAAC,MAAoB,OAAe;AAAA,EAC/D,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,4EACvB;AAAA,EACD;AAAA,EACA,OAAO,KAAK;AAAA;AAIN,SAAS,aAAa,CAC5B,MACA,UACA,OACO;AAAA,EACP,MAAM,YAAY,KAAK,UAAU,aAAa;AAAA,EAC9C,IAAI,OAAO,aAAa,YAAY,SAAS,SAAS,WAAW;AAAA,IAChE,MAAM,IAAI,iBACT,sBACA,GAAG,oDAAoD,wBACvD,EAAE,WAAW,UAAU,KAAK,KAAK,CAClC;AAAA,EACD;AAAA;AAIM,SAAS,aAAa,CAAC,SAAkB,OAA+B;AAAA,EAC9E,IAAI,QAAQ,WAAW,MAAM;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,yFACJ;AAAA,EACD;AAAA,EACA,OAAO,QAAQ;AAAA;AAOhB,eAAsB,eAAe,CACpC,SACA,QACA,UACA,OACmB;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,WAAW,QAAQ,UAAU,KAAK,CAAC,cACxC,OAAO,KAAK,WAAW,UAAU,MAAM,CACxC;AAAA,EACA,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,aAAa,aAAa,KAAK,OAAO,IAAI,IAAI,MAAM;AAAA,IAC1D,MAAM,IAAI,iBACT,oBACA,GAAG,+CAA+C,eAClD,EAAE,YAAY,QAAQ,OAAO,IAAI,UAAU,OAAO,KAAK,CACxD;AAAA,EACD;AAAA,EAEA,OAAO,SAAS,OAAO,UAAU,OAAO,IAAI;AAAA;AAY7C,eAAsB,QAAQ,CAC7B,SACA,QACA,UACsB;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW,QAAQ,WAAW;AAAA,IAAM,OAAO;AAAA,EAE/C,MAAM,QACL,CAAC,OAAO,KAAK,WAAW,OAAO,MAAM,KACrC,OAAO,cAAc,OAAO,IAAI,MAAM;AAAA,EACvC,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,MAAM,UAAU,MAAM,sBACrB,QAAQ,MAAM,MAAM,WACnB,OAAO,IACP;AAAA,IACC,WAAW,QAAQ,MAAM,IAAI;AAAA,IAE7B,UAAU;AAAA,MACT,MAAM,MAAM,OAAO,KAAK,QAAQ;AAAA,MAChC,WAAW,OAAO;AAAA,IACnB;AAAA,EACD,GACA,OAAO,OACR,CACD;AAAA,EACA,OAAO,WAAW;AAAA;;ACnGZ,SAAS,MAAM,CAAC,QAA6B;AAAA,EACnD,OAAO;AAAA,OACH,OAAO;AAAA,IACV,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,eAAe,OAAO,oBAAoB;AAAA,IAC1C,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO,aAAa;AAAA,IACjC,iBAAiB,OAAO,cAAc,eAAe;AAAA,IACrD,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACnB;AAAA;AAIM,IAAM,OAAO,CAAC,SACpB,OAAO,SAAS,WAAW,OAAO,KAAK;AAQjC,SAAS,KAAK,CAAC,MAAuB;AAAA,EAC5C,IAAI,OAAO,SAAS;AAAA,IAAU,OAAO;AAAA,EACrC,MAAM,KACL,OAAO,SAAS,YAAY,SAAS,OAAO,KAAK,KAAK;AAAA,EACvD,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA;;;AC5BtC,IAAM,WAAW,CAAC,OAAe,IAAY,SAC5C,IAAI,eACH,GAAG,aAAa,QAAQ,sBACxB,SAAS,OACN,EAAE,QAAQ,IAAI,WAAW,MAAM,IAC/B,EAAE,QAAQ,IAAI,UAAU,MAAM,WAAW,MAAM,CACnD;AAQD,eAAsB,UAAU,CAC/B,SACA,IACA,MAC6B;AAAA,EAC7B,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EACtB,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,SAAS,EAAE;AAAA,EACpD,OAAO,WAAW,SAAS,SAAS,QAAQ,OAAO,SAAS,QACzD,SACA;AAAA;AAIJ,eAAsB,SAAS,CAC9B,SACA,IACA,MACA,OACsB;AAAA,EACtB,OAAO,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,GAAG,MACpD,SAAS,OAAO,IAAI,IAAI,CACzB;AAAA;AASD,eAAsB,SAAS,CAC9B,SACA,MACA,MACA,SACA,OACA,SAIsB;AAAA,EACtB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,MAAM,YAAY,SAAS;AAAA,EAE3B,IAAI,cAAc,aAAa,cAAc,OAAO,SAAS;AAAA,IAC5D,MAAM,IAAI,eACT,WACA,GAAG,2BAA2B,oBAAoB,OAAO,WACzD;AAAA,MACC,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,eAAe,OAAO;AAAA,MACtB,WAAW;AAAA,IACZ,CACD;AAAA,EACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG;AAAA,EACvC,OAAO,QAAQ,MAAM,MAAM,WAC1B,OAAO,IACP,KAAK,OAAO,WAAW,IAAI,GAC3B,OAAO,OACR;AAAA;;AC7ED,eAAsB,cAAc,CACnC,MACA,OACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,KAAK,OAAO,aAAa,SAAS,KAAK;AAAA,EAE5D,MAAM,SACL,OAAO,WAAW,YACf,CAAC,IACD,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC9B,MAAM,gBAAgB,MAAM,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC;AAAA,IACvD,SAAS,MAAM;AAAA,EAChB,EAAE;AAAA,EAKL,IAAI,OAAO,WAAW,WAAW;AAAA,IAChC,MAAM,QAAQ,OAAO;AAAA,IACrB,WAAW,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,OAAO,OAAO,GAAG,GAAG;AAAA,QAC9B,OAAO,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACvE;AAAA,IACD;AAAA,IACA,aAAa,OAAO,CAAC,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,IAAI,OAAO,SAAS,GAAG;AAAA,IAItB,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,gBAAgB,OAAO,eAAe,OAAO,WAAW,IAAI,KAAK,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,EAAE,KAAK,IAAI,MACnL,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EACD;AAAA,EAEA,OAAO,iBAAkB,OAA8B,KAAK;AAAA;AAI7D,SAAS,YAAY,CACpB,OACA,MACA,QACO;AAAA,EACP,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,WAAW,KAAK;AAAA,MAAG,OAAO,KAAK,EAAE,MAAM,SAAS,WAAW,CAAC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,YAAY,OAAO,UAAU,MAAM,QAAQ,GAAG;AAAA,MAC7C,aAAa,OAAO,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,IAC7C;AAAA,IACA;AAAA,EACD;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAGjD,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,QACrB,OAAO,KAAK,EAAE,MAAM,SAAS,SAAS,aAAa,CAAC;AAAA,MACrD,EAAO;AAAA,QACN,aAAa,OAAO,CAAC,GAAG,MAAM,GAAG,GAAG,MAAM;AAAA;AAAA,IAE5C;AAAA,EACD;AAAA;AAOD,SAAS,cAAc,CAAC,MAAgD;AAAA,EACvE,MAAM,MAAM,KAAK,UAChB,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,WAAW,OAAO,CAChE;AAAA,EACA,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG;AAAA;AAG7C,SAAS,UAAU,CAClB,SACkB;AAAA,EAClB,MAAM,MAAM,OAAO,YAAY,WAAW,QAAQ,MAAM;AAAA,EACxD,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AAAA;AAGlD,SAAS,gBAAgB,CAAC,OAAsB;AAAA,EAC/C,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,gBAAgB;AAAA,EAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,MAAM,MAA4B,CAAC;AAAA,IACnC,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjD,IAAI,UAAU;AAAA,QAAW,IAAI,OAAO,iBAAiB,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;;ACfD,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,IAAI,UACT,GAAG,mHACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAUR,eAAsB,IAAI,CACzB,SACA,MACA,MACA,YACA,SAAsB,CAAC,GACP;AAAA,EAChB,MAAM,WAAW,QAAQ;AAAA,EACzB,IAAI,aAAa;AAAA,IAAM;AAAA,EAEvB,MAAM,QAAmB,OAAO,OAAO;AAAA,IACtC,IAAI,QAAO,WAAW,QAAQ,CAAC;AAAA,IAC/B;AAAA,IAEA,YAAY,IAAI,KAAK,WAAW,QAAQ,CAAC;AAAA,IACzC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,OACZ;AAAA,EACJ,CAAC;AAAA,EACD,IAAI;AAAA,IACH,MAAM,SAAS,KAAK;AAAA,IACnB,OAAO,SAAS;AAAA,IACjB,QAAQ,YACP,wCAAwC,QAAQ,MAAM,eAAe,KAAK,OAAO,mBAAmB,QAAQ,QAAQ,OAAO,OAAO,WAClI,EAAE,MAAM,qBAAqB,CAC9B;AAAA;AAAA;;;ACvIF,IAAM,WAAW;AAAA,EAChB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,UAAU;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,QAAQ;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAeO,SAAS,YAAY,CAC3B,QACA,OACoB;AAAA,EACpB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,gEACJ;AAAA,EACD;AAAA,EAEA,WAAW,QAAQ,OAAO,KAAK,QAAQ,GAAgC;AAAA,IACtE,MAAM,QAAkB,OAAmC;AAAA,IAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,MAChD,MAAM,IAAI,UAAU,GAAG,gBAAgB,iBAAiB;AAAA,IACzD;AAAA,IAEA,WAAW,UAAU,SAAS,OAAO;AAAA,MACpC,IAAI,OAAQ,MAAkC,YAAY,YAAY;AAAA,QACrE,MAAM,IAAI,UACT,GAAG,gBAAgB,sBAAsB,iCAC1C;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ;AAAA,EAId,OAAO;AAAA,IACN,gBAAgB,SAAS,OAAO,YAAY,yBAAyB,KAAK;AAAA,IAC1E,WAAW,SAAS,OAAO,SAAS,aAAa,KAAK;AAAA,EACvD;AAAA;AAQD,SAAS,QAAQ,CAChB,QACA,MACA,QACA,OACU;AAAA,EACV,MAAM,QAAQ,OAAO,MAAM;AAAA,EAC3B,IAAI,UAAU,aAAa,OAAO,UAAU,YAAY;AAAA,IACvD,MAAM,IAAI,UACT,GAAG,gBAAgB,QAAQ,qCAC5B;AAAA,EACD;AAAA,EACA,OAAO,UAAU;AAAA;;;ACtGlB,wBAAS,iCAAa;;;ACAtB;AAUA,IAAM,UAAU,IAAI;AAMb,SAAS,UAAU,CACzB,QACA,SACA,QAAgB,OAAO,UACF;AAAA,EACrB,IAAI,OAAO,QAAQ,IAAI,MAAM;AAAA,EAC7B,IAAI,SAAS,WAAW;AAAA,IACvB,OAAO,IAAI;AAAA,IACX,QAAQ,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EACA,MAAM,OAAO,GAAG,cAAgB;AAAA,EAChC,IAAI,MAAM,KAAK,IAAI,IAAI;AAAA,EACvB,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,KAAK;AAAA,IACpC,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;AAAA,IAC1E,KAAK,IAAI,MAAM,GAAG;AAAA,EACnB;AAAA,EACA,OAAO;AAAA;AAID,SAAS,SAAS,CAAC,KAAa,OAAkC;AAAA,EACxE,OAAO,WAAW,UAAU,GAAG,EAAE,OAAO,MAAM,KAAK,MAAQ,CAAC,EAAE,OAAO;AAAA;;;ADvBtE,IAAM,UAAU;AAEhB,IAAM,QACL;AAED,SAAS,KAAK,CAAC,KAAa,QAAgB,UAA0B;AAAA,EACrE,OAAO,UAAU,KAAK,CAAC,QAAQ,QAAQ,CAAC;AAAA;AAGzC,SAAS,MAAM,CAAC,QAAgB,QAAgB,UAA0B;AAAA,EAEzE,MAAM,MAAM,WAAW,QAAQ,OAAO;AAAA,EACtC,MAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,SAAS,WAAW;AAAA,EAC7D,OAAO,MAAM,OAAO,YAAY,YAAY;AAAA;AAItC,SAAS,eAAe,CAAC,QAAgB,QAAwB;AAAA,EACvE,OAAO,OAAO,QAAQ,QAAQ,aAAY,EAAE,EAAE,SAAS,WAAW,CAAC;AAAA;AAW7D,SAAS,gBAAgB,CAC/B,QACA,QACA,WACgB;AAAA,EAChB,SAAS,OAAO,UAAU,OAAO,MAAM,KAAK,SAAS,KAAK,CAAC;AAAA,EAC3D,IAAI,UAAU,aAAa,aAAa,aAAa,QAAQ,WAAW;AAAA,IACvE,OAAO;AAAA,EACR;AAAA,EACA,MAAM,MAAM,WAAW,QAAQ,SAAS,KAAK;AAAA,EAC7C,IAAI,QAAQ;AAAA,IAAW,OAAO;AAAA,EAE9B,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ;AAAA,EAC5C,MAAM,QAAQ,OAAO,KAAK,KAAK,WAAW;AAAA,EAC1C,IAAI,MAAM,WAAW,SAAS,UAAU,CAAC,iBAAgB,OAAO,QAAQ,GAAG;AAAA,IAC1E,OAAO;AAAA,EACR;AAAA,EACA,OAAO,UAAU,OAAO,WACrB,YACA,OAAO,QAAQ,QAAQ,QAAQ;AAAA;;;AE9C5B,IAAM,YAA2B,OAAO,OAAO;AAAA,EACrD,WAAW;AAAA,EACX,aAAa;AACd,CAAC;AASM,SAAS,UAAU,CACzB,SACA,SACA,OACa;AAAA,EACb,IACC,YAAY,cACX,OAAO,YAAY,YAAY,YAAY,OAC3C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,EACD;AAAA,EACA,MAAM,SAAS,SAAS;AAAA,EACxB,IAAI,WAAW;AAAA,IAAW;AAAA,EAC1B,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EACA,IAAI,QAAQ,OAAO,YAAY,MAAM;AAAA,IACpC,MAAM,IAAI,UACT,GAAG,gFACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAQD,SAAS,aAAa,CAC5B,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,EACvC,IAAI,SAAS,aAAa,WAAW;AAAA,IAAW,OAAO;AAAA,EAEvD,MAAM,QACL,SAAS,QAAQ,SAAS,OAAO,iBAAiB,QAAQ,QAAQ,IAAI;AAAA,EACvE,IAAI,UAAU;AAAA,IAAM,OAAO,EAAE,WAAW,OAAO,aAAa,MAAM;AAAA,EAClE,OAAO;AAAA,IACN,WAAW,CAAC;AAAA,IACZ,aAAa,gBAAgB,QAAQ,MAAM;AAAA,EAC5C;AAAA;;ACnED,eAAsB,eAAe,CACpC,SACA,QACgB;AAAA,EAChB,IAAI,OAAO,WAAW,cAAc,CAAC,OAAO;AAAA,IAAW;AAAA,EACvD,MAAM,KACL,SACA,0BACA,OAAO,MACP,OAAO,QAAQ,WACf,EAAE,WAAW,OAAO,QAAQ,GAAG,CAChC;AAAA;;ACtBD,oCAAqB;AAQd,SAAS,UAAU,GAAW;AAAA,EACpC,OAAO,aAAY,EAAE,EAAE,SAAS,WAAW;AAAA;AAWrC,SAAS,UAAU,CAAC,QAAwB;AAAA,EAClD,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AAAA;;;ACPjD,SAAS,SAAS,CAAC,QAAgC;AAAA,EACzD,QAAQ,WAAW,MAAM,YAAY;AAAA,EACrC,OAAO;AAAA;AAYR,eAAsB,WAAW,CAChC,SACA,MACA,MACA,QACA,SAAS,OACoB;AAAA,EAC7B,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,WAAW;AAAA,EACzB,MAAM,SAAwB;AAAA,IAC7B,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,WAAW,WAAW,KAAK;AAAA,IAC3B,QAAQ,KAAK;AAAA,IACb,iBAAiB;AAAA,IACjB,WAAW,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,UAAU;AAAA,IACnD,WAAW;AAAA,IACX,WAAW;AAAA,EACZ;AAAA,EAEA,MAAM,QAAQ,MAAM,SAAS,cAAc,MAAM;AAAA,EACjD,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,MAAM;AAAA,IACzB;AAAA,OACG,cAAc,SAAS,KAAK,IAAI,QAAQ,MAAM;AAAA,EAClD;AAAA;;ACrCM,SAAS,cAAc,CAC7B,SACA,YACgB;AAAA,EAChB,MAAM,UAAU,UAAU,OAAO;AAAA,EACjC,MAAM,OAAO,CAAC,SAAgC;AAAA,IAC7C,IAAI,mBAAmB;AAAA,MAAS,OAAO,QAAQ,IAAI,IAAI;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;AAAA,MACnD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU;AAAA,QAAW;AAAA,MACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,MAAM,gBAAgB,KAAK,eAAe;AAAA,EAC1C,IAAI,kBAAkB,MAAM;AAAA,IAC3B,MAAM,QAAQ,wBAAwB,KAAK,cAAc,KAAK,CAAC;AAAA,IAC/D,IAAI;AAAA,MAAO,OAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,SAAS,KAAK,iBAAiB;AAAA,EACrC,IAAI,WAAW;AAAA,IAAM,OAAO,OAAO,KAAK;AAAA,EAExC,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,WAAW,MAAM;AAAA,IACpB,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,MACrC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC3B,IAAI,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,YAAY;AAAA,QACzD,OAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,MAChC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA;AAOR,SAAS,SAAS,CAAC,SAA8C;AAAA,EAChE,IAAI,mBAAmB;AAAA,IAAS,OAAO;AAAA,EACvC,MAAM,QAAS,QAAkC;AAAA,EACjD,IAAI,iBAAiB;AAAA,IAAS,OAAO;AAAA,EACrC,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,OAAO;AAAA;;ACvCR,eAAsB,eAAe,CACpC,SACA,SAC4B;AAAA,EAC5B,MAAM,QAAQ,eAAe,SAAS,QAAQ,OAAO,OAAO,IAAI;AAAA,EAChE,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAE3B,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,uBAC5C,WAAW,KAAK,CACjB;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,OAAO,YAAY,QAClB,QAAQ,cAAc,QACtB,QAAQ,UAAU,QAAQ,KAAK,MAC7B,OACA,EAAE,OAAO,QAAQ;AAAA;;;ACzBrB,eAAsB,YAAY,CACjC,SACA,SACA,SACyC;AAAA,EACzC,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACxD,IAAI,cAAc;AAAA,IAAM,OAAO;AAAA,EAC/B,QAAQ,OAAO,YAAY;AAAA,EAC3B,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ;AAAA,EAIhC,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACtD,IACC,SAAS,QACT,CAAC,KAAK,UACL,SAAS,SAAS,aAAa,KAAK,SAAS,QAAQ,MACrD;AAAA,IACD,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK,IAAI;AAAA,EACvC,IAAI,SAAS,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG,GAAG;AAAA,IAC1D,OAAO;AAAA,MACN,MAAM,OAAO,IAAI;AAAA,MACjB,SAAS,UAAU,OAAO;AAAA,MAC1B;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,cACrC,QAAQ,IACR,IAAI,KAAK,MAAM,KAAK,UAAU,CAC/B;AAAA,EAGA,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,OAAO;AAAA,IACN,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,EACV;AAAA;AAQD,SAAS,UAAU,CAClB,MACA,SACA,KACU;AAAA,EACV,OACC,KAAK,iBAAiB,QACtB,KAAK,cAAc,QAAQ,UAAU,QAAQ,IAAI,QAAQ,KAAK;AAAA;;;AChEzD,SAAS,QAAQ,CAAC,SAAgD;AAAA,EACxE,QAAQ,MAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,OAAO;AAAA,EAChE,MAAM,aAAa;AAAA,IAClB,QAAQ;AAAA,IACR,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ;AAAA,IAC9C;AAAA,IACA,YAAY,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC;AAAA,IACzD,GAAI,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5B,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACN;AAAA,IACA,WAAW,CAAC,OAAe,YAC1B,GAAG,QAAQ,kBAAkB,QAAQ,UAAU,YAAY,MAAM;AAAA,IAClE,OAAO,MACN,GAAG,4DAA4D;AAAA,EACjE;AAAA;;;ACMM,SAAS,SAAS,CAAC,SAAqC;AAAA,EAC9D,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,OAAO;AAAA,SACA,aAAY,CAAC,SAAS,SAAS;AAAA,MACpC,OAAO,aAAa,SAAS,SAAS,OAAO;AAAA;AAAA,SAGxC,QAAO,CAAC,SAAS;AAAA,MACtB,MAAM,QAAQ,eAAe,SAAS,OAAO,OAAO,IAAI;AAAA,MACxD,IAAI,UAAU;AAAA,QAAM,OAAO;AAAA,MAE3B,MAAM,UAAU,MAAM,MAAM,SAAS,uBACpC,WAAW,KAAK,CACjB;AAAA,MACA,IAAI,YAAY;AAAA,QAAM,OAAO;AAAA,MAC7B,OAAO,MAAM,SAAS,cAAc,QAAQ,IAAI,MAAM,IAAI,CAAC;AAAA;AAAA,SAGtD,kBAAiB,CAAC,MAAM,SAAS;AAAA,MACtC,MAAM,KAAK,KAAK,IAAI;AAAA,MACpB,IAAI,CAAC,MAAK,EAAE;AAAA,QAAG,OAAO;AAAA,MAGtB,OAAO,SAAS,WAAW,aAAa,CAAC,MAAK,QAAQ,MAAM,IACzD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,CAAC,IACjD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,GAAG,QAAQ,MAAM;AAAA;AAAA,SAG/D,SAAQ,CAAC,IAAI;AAAA,MAClB,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI;AAAA,MACjD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,QAAO,CAAC,IAAI;AAAA,MACjB,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,MAAM,SAAS,CAAC;AAAA;AAAA,IAG5D,QAAQ,SAAS,OAAO;AAAA,SAElB,eAAc,GAAG;AAAA,MACtB,MAAM,UAAU,MAAM,SAAS;AAAA,MAC/B,IAAI,CAAC,QAAQ,aAAa,kBAAkB,YAAY,WAAW;AAAA,QAClE,MAAM,IAAI,kBACT,4IACA,EAAE,MAAM,YAAY,WAAW,wBAAwB,CACxD;AAAA,MACD;AAAA,MACA,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA,IAG3B,OAAO,CAAC,GAAG,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/B;AAAA;;ACjEM,SAAS,UAAU,CAAC,SAAkB,SAAyB;AAAA,EACrE,MAAM,SAAS,QAAQ,OAAO,cAAc;AAAA,EAE5C,OAAO,WAAW,YACf,OAAO,KAAK,OAAO,IAClB,WAAW,QAAQ,OAAO;AAAA;AAIxB,IAAM,QAAQ,CAAC,KAAa,UAClC,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW;;;ACtB3C,4BAAS;;;ACcF,SAAS,WAAW,CAC1B,MACA,MACA,OACA,OACA,MACO;AAAA,EACP,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IACC,UAAU,QACV,eAAe,KAAK,MAAM,eAAe,MAAM,OAAO,GACrD;AAAA,IACD,MAAM,IAAI,YACT,eACA,GAAG,cAAc,qDACjB,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQM,SAAS,cAAc,CAC7B,OACA,KACA,OACA,MAC+B;AAAA,EAC/B,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,MAClE,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,YAAY,MAAM;AAAA,IAC3B,MAAM,IAAI,YACT,eACA,GAAG,cAAc,yBACjB,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,IAAI,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,IAC/C,MAAM,IAAI,YAAW,iBAAiB,GAAG,cAAc,oBAAoB;AAAA,MAC1E,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA;AAIM,IAAM,iBAAiB,CAAC,OAAe,SAC7C,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,EAC5D,WAAW;AACZ,CAAC;;;AC3DF,eAAsB,YAAY,CACjC,SACA,QACA,MACA,OACA,MACuB;AAAA,EACvB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,MACA,GACD;AAAA,EACA,eAAe,OAAO,KAAK,OAAO,IAAI;AAAA,EACtC,OAAO;AAAA;AAQR,eAAsB,WAAW,CAChC,SACA,QACA,MACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,aAC1B,WAAW,MAAM,GACjB,MACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AF1BM,IAAM,gBAAgB;AAQ7B,eAAsB,gBAAgB,CACrC,SACA,QACA,MACA,OACA,UAC0E;AAAA,EAC1E,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,IACD;AAAA,EACA,eAAe,OAAO,QAAQ,MAAM,IAAI,GAAG,OAAO,WAAW;AAAA,EAC7D,IAAI,MAAM,WAAW,eAAe;AAAA,IACnC,MAAM,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC;AAAA,EACnD;AAAA,EACA,OAAO,EAAE,OAAO,cAAc,gBAAgB,MAAM,SAAS;AAAA;AAOvD,SAAS,WAAW,CAC1B,OACA,QACA,UACA,cACa;AAAA,EACb,OAAO,IAAI,YACV,gBACA,GAAG,uDACH;AAAA,IACC,WAAW;AAAA,IACX;AAAA,IACA;AAAA,OACI,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa;AAAA,EACtD,CACD;AAAA;AASD,eAAsB,gBAAgB,CACrC,SACA,OACA,QACA,OACsB;AAAA,EACtB,IAAI,MAAM,aAAa,eAAe;AAAA,IACrC,MAAM,YAAY,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC9C;AAAA,EACA,OAAO,eAAe,OAAO,WAAW;AAAA;AAQlC,IAAM,WAAW,CAAC,WAAmB,SAC3C,WAAW,GAAG,YAAY,MAAM;AAG1B,SAAS,WAAW,CAC1B,OACA,WACA,MACU;AAAA,EACV,IAAI,MAAM,aAAa,QAAQ,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAC7D,MAAM,QAAQ,OAAO,KAAK,SAAS,WAAW,IAAI,CAAC;AAAA,EACnD,MAAM,OAAO,OAAO,KAAK,MAAM,QAAQ;AAAA,EACvC,OAAO,MAAM,WAAW,KAAK,UAAU,iBAAgB,OAAO,IAAI;AAAA;;AGlGnE;AAuBA,eAAsB,YAAY,CACjC,SACA,OAOiE;AAAA,EACjE,OAAO,cAAc,SAAS,OAAO,MAAM,MAAM,aAAa,IAAI;AAAA;AAOnE,eAAsB,SAAS,CAC9B,SACA,OAKE;AAAA,EACF,MAAM,OAAO,OAAO,UAAU,GAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,EACzD,OAAO,KAAM,MAAM,cAAc,SAAS,OAAO,MAAM,IAAI,GAAI,KAAK;AAAA;AAGrE,eAAe,aAAa,CAC3B,SACA,OACA,MACA,WACiE;AAAA,EACjE,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,SAAS,MAAM,UAAU,WAAW;AAAA,EAC1C,MAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EAEtD,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,IACtC,WAAW,WAAW,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,SAAS,OAAO,YAAY,SAAS,QAAQ,IAAI;AAAA,IAC3D,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACZ,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,UAAU;AAAA;;ACnDrB,IAAM,YAAY;AAMzB,IAAM,aAAa;AAmCnB,eAAsB,aAAa,CAClC,SACA,UAC0B;AAAA,EAC1B,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,QAAQ;AAAA,EAIjD,MAAM,aAAa,SAAS,KAAK,SAAS;AAAA,EAC1C,MAAM,QAAQ,EAAE,SAAS,UAAU,QAAQ,KAAK,UAAU;AAAA,EAC1D,MAAM,UACL,SAAS,UAAU,UAChB,MAAM,cAAc,KAAK,IACzB,MAAM,gBAAgB,KAAK;AAAA,EAC/B,OAAO,KAAK,SAAS,SAAS,SAAS,KAAK,SAAS,SAAS;AAAA;AAI/D,eAAe,aAAa,CAC3B,OAC0C;AAAA,EAC1C,IAAI,UAAU;AAAA,EACd,SAAS,OAAO,EAAG,OAAO,WAAW,QAAQ,GAAG;AAAA,IAC/C,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,MAAM,UAAU,OAAO,IAAI;AAAA,IAC3C,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,IAAI,QAAQ,YAAY;AAAA,MAAM,OAAO,EAAE,UAAU,MAAM,KAAK;AAAA,IAC5D,UAAU;AAAA,EACX;AAAA,EACA,OAAO,EAAE,UAAU,OAAO,mBAAmB,MAAM,KAAK;AAAA;AAWzD,eAAe,eAAe,CAC7B,OAC0C;AAAA,EAC1C,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,IAAI,SAAS,OAAO;AAAA,EACpB,SAAS,SAAS,EAAG,SAAS,YAAY,UAAU,GAAG;AAAA,IACtD,MAAM,OAAO,WAAW,QAAQ;AAAA,IAChC,MAAM,OAAO,OACV,SACA,WAAW,OAAO,oBACjB,IAAI,QAAQ,IACZ,KAAK,OAAO,QAAQ,UAAU,CAAC;AAAA,IACnC,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,OACb,MAAM,WAAW,OAAO,IAAI,IAC5B,MAAM,OAAO,aAAa,MAAM,cAAc;AAAA,IACjD,IAAI,YAAY;AAAA,MAAM,SAAS;AAAA,IAC1B,SAAI,QAAQ,YAAY,MAAM;AAAA,MAClC,OAAO,EAAE,UAAU,QAAQ,UAAU,MAAM,KAAK;AAAA,IACjD,EAAO;AAAA,MACN,QAAQ;AAAA,MAER,IAAI,UAAU;AAAA,QAAO,SAAS,OAAO;AAAA;AAAA,EAEvC;AAAA,EAEA,MAAM,MAAM,SAAS,SAAS;AAAA;AAI/B,eAAe,SAAS,CACvB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,UAAU,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACnE,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA;AAI9C,eAAe,UAAU,CACxB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,OAAO,YAAY;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,QAAQ,MAAM,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW,IAAI,KAAK,MAAM,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,WAAW,IAAI,KAAK,MAAM,GAAG;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACpE,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,SAAS,SAAS;AAAA;;ACvH/B,IAAM,WAAU;AAyBhB,eAAsB,kBAAkB,CACvC,SACA,MACA,MACA,OACA,OACA,QACgB;AAAA,EAChB,MAAM,UACL,SACA,MACA,MACA;AAAA,IACC,SAAS,eAAe,KAAK;AAAA,OACzB,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,EAC1C,GACA,KACD;AAAA;AAID,eAAsB,eAAe,CACpC,SACA,MACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK;AAAA;AAGvD,eAAe,SAAS,CACvB,SACA,MACA,MACA,SACA,OACgB;AAAA,EAChB,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM;AAAA,EACvB,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,UACL,aAAa,UACV,MAAM,KAAK,CAAC,MAAM,WAAW,QAAQ,OAAO,CAAC,IAC7C,MAAM,KAAK,CAAC,MAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,EAC7C,QAAQ,UAAU,WAAW,MAAM,cAAc,SAAS;AAAA,IACzD,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,SAAS,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAE/D,UAAU,MACT,IAAI,cACH,GAAG,6DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA,EACD,IAAI,YAAY,SAAS;AAAA,IAAU;AAAA,EAEnC,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,oBACT,GAAG,0CAA0C,aAAa,UAAU,YAAY,+EAChF;AAAA,IACC,UAAU,KAAK;AAAA,OACX,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,IACjE,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,CAAC;AAAA,EACzD,CACD;AAAA;;;ACzID,IAAM,aAAa,CAAC,UACnB,UAAU,OAAO,OAAO,eAAe,KAAK;AAOtC,SAAS,YAAY,CAC3B,MACA,QACA,OACU;AAAA,EACV,OAAO,WAAW,QAAQ,MAAM,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,KAAK,CAAC;AAAA;AAO7E,eAAsB,WAAW,CAChC,MACA,QACA,OACA,OACC;AAAA,EACD,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,OAAO,WAAW,MAAM,GAC7B,KACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,eAAe,KAAK;AAAA,OAEhB,aAAa,MAAM,OAAO,QAAQ,MAAM,IACzC,EAAE,iBAAiB,KAAK,IACxB,CAAC;AAAA,EACL;AAAA;;;AC1BM,IAAM,aAAa,CAAC,QAAgB,WAC1C,WACC,+BAA6B,aAAW,eAAe,UAAU,EAAE,GACpE;AAQD,eAAsB,YAAY,CACjC,MACA,MACA,OACA,OACkB;AAAA,EAClB,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,KAAK,SAAS,KAAK,QAAQ,MAAM,GACtC,KACD;AAAA,EACA,MAAM,UAAU,QAAQ,MAAM,MAAM;AAAA,EACpC,IAAI,YAAY,MAAM;AAAA,IACrB,MAAM,IAAI,UACT,iBAAiB,KAAK,6CAA6C,KAAK,uEACzE;AAAA,EACD;AAAA,EACA,IACC,eAAe,OAAO,MAAM,eAAe,QAAQ,MAAM,KAAK,MAAM,KAAK,EAAE,GAC1E;AAAA,IACD,MAAM,IAAI,kBACT,GAAG,2HACH;AAAA,MACC,QAAQ;AAAA,QACP,EAAE,MAAM,CAAC,KAAK,KAAK,GAAG,SAAS,oCAAoC;AAAA,MACpE;AAAA,MACA,UAAU,KAAK;AAAA,IAChB,CACD;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAOR,eAAsB,qBAAqB,CAC1C,SACA,MACA,MACA,SACuB;AAAA,EACvB,MAAM,SAAS,WAAW;AAAA,EAC1B,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACjD,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC;AAAA,IACA,WAAW,WAAW,QAAQ,QAAQ,MAAM,KAAK,MAAM,CAAC;AAAA,EACzD,CAAC;AAAA,EAGD,MAAM,QAAQ,MAAM,OAAO,gBAC1B,KAAK,IACL,eACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA,EACA,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,UAAU;AAAA;AAO5C,SAAS,WAAW,CAC1B,MACA,MACA,OACA,QACA,OACO;AAAA,EACP,IAAI,MAAM,aAAa,WAAW,QAAQ,QAAQ,MAAM,KAAK,MAAM,CAAC,GAAG;AAAA,IACtE,MAAM,IAAI,YACT,eACA,GAAG,oEACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQD,eAAsB,sBAAsB,CAC3C,SACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aACnB,SACA,QACA,eACA,OACA,OACD;AAAA,EACA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,EAC5C,OAAO,EAAE,OAAO,KAAK;AAAA;;;AC1GtB,IAAM,WAAW,CAAC,MAAoB,MAAkB,UACvD,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,EACvD,QAAQ,KAAK;AAAA,EACb,UAAU,KAAK;AAChB,CAAC;AAGK,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM,OAAO;AAAA,MACvB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACpE,IAAI,CAAC,OAAO;AAAA,QAAQ,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,MAMtD,MAAM,UAAU,MAAM,aAAa,MAAM,QAAQ,OAAO,KAAK;AAAA,MAC7D,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,MAAM,mBACL,SACA,MACA,eACA,SACA,OACA,OAAO,EACR;AAAA,MACA,OAAO,sBAAsB,SAAS,MAAM,QAAQ,OAAO;AAAA;AAAA,SAGtD,QAAO,CAAC,QAAQ;AAAA,MACrB,OAAO,cAAc,SAAS,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAAA;AAAA,EAEvE;AAAA;AAID,eAAe,aAAa,CAC3B,SACA,MACA,QACA,OACmB;AAAA,EACnB,QAAQ,OAAO,SAAS,MAAM,uBAC7B,SACA,MACA,QACA,KACD;AAAA,EACA,IAAI,CAAC,KAAK;AAAA,IAAQ,MAAM,SAAS,MAAM,MAAM,KAAK;AAAA,EAGlD,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IAEtB,IAAI,CAAC,OAAO;AAAA,MAAQ,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,IACtD,YAAY,MAAM,QAAQ,OAAO,QAAQ,KAAK;AAAA,IAC9C,KAAK,WAAW;AAAA,IAChB,MAAM,QAAQ,MAAM,YACnB,MACA,QACA,GAAG,KAAK,QAAQ,MAAM,QAAQ,GAC9B,KACD;AAAA,IAIA,MAAM,SACL,OAAO,oBAAoB,QAC3B,aAAa,MAAM,OAAO,QAAQ,MAAM,MAAM;AAAA,IAC/C,OAAO,SAAS,KAAK,OAAO,iBAAiB,IAAI,IAAI;AAAA,GAEvD;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,MAAM,QACL,aAAa,QAAQ,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM;AAAA,EACxE,IAAI,aAAa,QAAQ,OAAO;AAAA,IAC/B,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,MACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,IAC3C,CAAC;AAAA,EACF;AAAA,EACA,IAAI,SAAS,UAAU,oBAAoB,MAAM;AAAA,IAChD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,EACrE;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;ACzFtB,eAAsB,wBAAwB,CAC7C,SACA,QACgB;AAAA,EAChB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,WAC1B,CAAC,iBAAiB,cAAc,EAAY,IAAI,CAAC,SACjD,QAAQ,MAAM,OAAO,gBAAgB,QAAQ,MAAM,GAAG,CACvD,CACD;AAAA,EACA,MAAM,SAAS,MAAM,KACpB,CAAC,WAA4C,OAAO,WAAW,UAChE;AAAA,EACA,IAAI,WAAW;AAAA,IAAW,MAAM,OAAO;AAAA;AASxC,eAAsB,eAAe,CACpC,SACA,SACgB;AAAA,EAChB,IAAI;AAAA,IACH,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IACD,MAAM,KAAK,SAAS,wBAAwB,SAAS,QAAQ,SAAS;AAAA;AAAA;AAcxE,eAAsB,cAAc,CACnC,SACA,MACA,UACA,UACA,QACA,OACmB;AAAA,EACnB,MAAM,MAAM,MAAM,WAAW,SAAS,SAAS,IAAI,KAAK,IAAI;AAAA,EAC5D,MAAM,OACL,QAAQ,QACR,IAAI,aAAa,SAChB,IAAI,SAAS,SAAS,SAAS,UAAU,QACxC,MAAM,gBAAgB,SAAS,KAAK,UAAU,KAAK;AAAA,EACtD,IAAI;AAAA,IAAM,OAAO;AAAA,EAEjB,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,QAAQ,MAAM,SAAS,cAC5B,OAAO,QAAQ,IACf,QAAQ,MAAM,IAAI,CACnB;AAAA,EACD,EAAO;AAAA,IACN,MAAM,YAAY,SAAS,OAAO,WAAW,cAAc;AAAA;AAAA,EAE5D,OAAO;AAAA;;;AClFD,SAAS,QAAW,CAC1B,OACA,OACmB;AAAA,EACnB,IAAI,OAAO;AAAA,EACX,OAAO,YAAY;AAAA,IAClB,IAAI,MAAM;AAAA,MACT,MAAM,IAAI,UACT,GAAG,uEAAuE,yBAC3E;AAAA,IACD;AAAA,IACA,OAAO;AAAA,IACP,OAAO,MAAM;AAAA;AAAA;;;ACTf,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,MAAM,OAAO,OAAO;AAAA,EACtE,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,OAAO,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,KAAK;AAAA;AAItB,eAAsB,eAAe,CACpC,SACA,MACA,MACA,MACA,OACuB;AAAA,EACvB,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAEA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,QAAQ,OAAO,UAAU;AAAA;;;AC3BnC,SAAS,kBAAkB,CACjC,SACA,MACA,IACgB;AAAA,EAChB,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,QAAQ,MAAM,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,OAAO,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGlD,QAAO,CAAC,QAAQ,UAAU;AAAA,MAC/B,OAAO,aACN,SACA,MACA,QACA,UACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,YAAY,CAC1B,SACA,MACA,OACA,OACwC;AAAA,EACxC,aAAa,MAAM,KAAK;AAAA,EACxB,MAAM,mBAAmB,SAAS,MAAM,iBAAiB,OAAO,KAAK;AAAA,EACrE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AAAA;AAIF,eAAe,UAAU,CACxB,SACA,MACA,OACA,OAC8B;AAAA,EAC9B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,SAAS,MAAM,gBACpB,SACA,MACA,iBACA,QACA,KACD;AAAA,EAIA,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,iBACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,KAAK,CACxB;AAAA,EACA,OAAO,KAAK,QAAQ,MAAM,OAAO,MAAM,EAAE;AAAA;AAI1C,eAAe,YAAY,CAC1B,SACA,MACA,QACA,UACA,OACmB;AAAA,EACnB,aAAa,MAAM,KAAK;AAAA,EAGxB,cAAc,MAAM,UAAU,KAAK;AAAA,EACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,EAE9D,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,iBACA,QACA,KACD;AAAA,EACA,IAAI,gBAAgB;AAAA,EACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAEhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,IAC/C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,OAAO;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,IAAI;AAAA,SAE7B,OAAO,oBAAoB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,IACnE;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAKH,MAAM,QAAQ,MAAM,SAAS,mBAC5B,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,IACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IAGD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACpE,IAAI,eAAe;AAAA,MAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACrE;AAAA;AAAA,EAED,OAAO,OAAO,OAAO;AAAA;;;ACtKtB,uBAAS,4BAAY;AAQd,IAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ,OAAQ,OAAO,EAAE;AAE1D,IAAM,SAAS;AAGR,SAAS,cAAc,GAAW;AAAA,EACxC,OAAO,SAAS,aAAY,EAAE,CAAC;AAAA;AAIzB,SAAS,QAAQ,CAAC,OAA2B;AAAA,EACnD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,IAAI,MAAM;AAAA,EACV,WAAW,QAAQ,OAAO;AAAA,IACzB,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,OAAO,QAAQ,GAAG;AAAA,MACjB,OAAO,OAAQ,UAAW,OAAO,IAAM;AAAA,MACvC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,IAAI,OAAO;AAAA,IAAG,OAAO,OAAQ,SAAU,IAAI,OAAS;AAAA,EACpD,OAAO;AAAA;AAGD,SAAS,UAAU,CAAC,MAAsB;AAAA,EAChD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,MAAM,MAAgB,CAAC;AAAA,EACvB,WAAW,QAAQ,MAAM;AAAA,IACxB,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAAA,IACjC,IAAI,UAAU;AAAA,MAAI,MAAM,IAAI,UAAU,gCAAgC;AAAA,IACtE,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG;AAAA,MACd,IAAI,KAAM,UAAW,OAAO,IAAM,GAAG;AAAA,MACrC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAIhB,IAAM,SAAS,CAAC,QACtB,KAAK,MAAM,IAAI,QAAQ,IAAI,KAAK,MAAM;AAGhC,SAAS,MAAM,CAAC,QAAgB,MAAsB;AAAA,EAC5D,MAAM,UAAU,OAAO,MAAM,CAAC;AAAA,EAC9B,QAAQ,iBAAiB,OAAO,IAAI,CAAC;AAAA,EACrC,MAAM,SAAS,YAAW,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EACjE,MAAM,SAAU,OAAO,MAAiB;AAAA,EACxC,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI;AAAA,EAC7C,OAAO,OAAO,SAAS,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK,QAAQ,GAAG;AAAA;AAW7D,SAAS,SAAS,CACxB,QACA,MACA,KACA,UACgB;AAAA,EAChB,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAClC,MAAM,UAAU,OAAO,GAAG;AAAA,EAC1B,IAAI,UAAyB;AAAA,EAC7B,SAAS,OAAO,UAAU,KAAK,MAAO,QAAQ,UAAU,KAAK,OAAO,QAAQ;AAAA,IAC3E,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAAA,IAC1C,IAAI,WAAW,OAAO,QAAQ,IAAI,GAAG,IAAI,KAAK,SAAS,YAAY,MAAM;AAAA,MACxE,UAAU;AAAA,IACX;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,UAAU,CAAC,GAAW,GAAoB;AAAA,EAClD,IAAI,aAAa,EAAE,SAAS,EAAE;AAAA,EAC9B,SAAS,IAAI,EAAG,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,cAAc,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AAAA,EACA,OAAO,eAAe;AAAA;AAQhB,SAAS,UAAU,CACzB,QACA,SACA,QACS;AAAA,EACT,MAAM,QAAQ,GAAG,mBAAmB,MAAM,KAAK,mBAAmB,OAAO;AAAA,EACzE,MAAM,QAAQ,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC1B,QAAQ,OAAO,KAAK,SAAS,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,kBAAkB,SAAS;AAAA;;;ACnG5B,IAAM,WAAW,CACvB,WAC4B,WAAW,QAAQ,OAAO,gBAAgB;AAGhE,SAAS,eAAe,CAC9B,SACA,OACA,KACW;AAAA,EACX,MAAM,aAAa,QAAQ,OAAO;AAAA,EAClC,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,IAAI,UACT,GAAG,UAAU,kFACd;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AASD,SAAS,UAAU,CACzB,YACA,QACA,QACA,MACA,KACA,OAC4B;AAAA,EAC5B,QAAQ,OAAO,UAAU,OACxB,WAAW,QACX,OAAO,QACP,OAAO,IACP,KACD;AAAA,EACA,MAAM,OAAO,UAAU,WAAW,KAAK,GAAG,MAAM,KAAK,OAAO,QAAQ;AAAA,EACpE,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,OAAO;AAAA,OACH;AAAA,IACH,UAAU;AAAA,IACV,QACC,UAAU,WAAW,OAAO,WACzB,OAAO,SACP,KAAK,WAAW,QAAQ,OAAO,OAAO,EAAE;AAAA,EAC7C;AAAA;;;AC1BD,eAAsB,eAAe,CACpC,SACA,MACA,MACA,OACsB;AAAA,EACtB,MAAM,yBAAyB,SAAS,KAAK,EAAE;AAAA,EAC/C,IAAI,UAAU;AAAA,EACd,IAAI,WAAW;AAAA,EACf,MAAM,SAAS,MAAM,UACpB,SACA,KAAK,IACL,MACA,EAAE,WAAW,KAAK,QAAQ,GAC1B,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,UAAU,OAAO,aAAa;AAAA,IAC9B,WAAW,SAAS,OAAO,YAAY;AAAA,IACvC,OAAO;AAAA,MACN,iBAAiB;AAAA,SACb,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,SAChC,OAAO,iBAAiB,OAAO,CAAC,IAAI,EAAE,cAAc,KAAK;AAAA,IAC9D;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAIH,MAAM,yBAAyB,SAAS,OAAO,EAAE;AAAA,YAChD;AAAA,IACD,MAAM,KAAK,SAAS,sBAAsB,QAAQ,OAAO,SAAS;AAAA,IAClE,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,wBAAwB,QAAQ,OAAO,SAAS;AAAA,IACrE;AAAA,IACA,IAAI,UAAU;AAAA,MACb,MAAM,KACL,SACA,6BACA,QACA,OAAO,SACR;AAAA,IACD;AAAA;AAAA,EAED,OAAO;AAAA;AAIR,eAAe,wBAAwB,CACtC,SACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,SAAS,mBAAmB,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,EAC3E,MAAM,yBAAyB,SAAS,MAAM;AAAA;;;ACtCxC,SAAS,cAAc,CAC7B,SACA,MACA,IACuD;AAAA,EACvD,OAAO,OAAO,SAAS;AAAA,IACtB,MAAM,QAAQ,GAAG,wBAAwB;AAAA,IACzC,MAAM,KAAK,MAAM,IAAI;AAAA,IACrB,MAAM,UAAU,aAAa,MAAM,IAAI;AAAA,IACvC,MAAM,QAAQ,MAAM,WAAW,SAAS,MAAM,IAAI,KAAK;AAAA,IACvD,cAAc,MAAM,SAAS,OAAO,MAAM,KAAK;AAAA,IAC/C,MAAM,SAAS,MAAM,sBACpB,cAAc,SAAS,MAAM,OAAO,KAAK,CAC1C;AAAA,IACA,IAAI,WAAW;AAAA,MAAM,OAAO;AAAA,IAC5B,MAAM,QAAQ,MAAM,WAAW,SAAS,MAAM,IAAI,KAAK;AAAA,IACvD,cAAc,MAAM,SAAS,OAAO,MAAM,KAAK;AAAA,IAC/C,IAAI,CAAC,UAAU,MAAM,OAAO,KAAK,GAAG;AAAA,MACnC,MAAM,IAAI,eACT,WACA,GAAG,+CACH;AAAA,QACC,QAAQ,MAAM;AAAA,QACd,iBAAiB,MAAM;AAAA,QACvB,eAAe,MAAM;AAAA,QACrB,WAAW;AAAA,MACZ,CACD;AAAA,IACD;AAAA,IACA,OAAO,cAAc,SAAS,MAAM,OAAO,KAAK;AAAA;AAAA;AAKlD,eAAe,UAAU,CACxB,SACA,MACA,IACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,aAAa,CAC3B,SACA,MACA,QACA,OAC8C;AAAA,EAC9C,IAAI,OAAO,oBAAoB,MAAM;AAAA,IACpC,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,MAAM;AAAA,EAC9C;AAAA,EACA,MAAM,SAAS,MAAM,gBAAgB,SAAS,MAAM,QAAQ,KAAK;AAAA,EACjE,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,KAAK;AAAA;AAI7C,SAAS,SAAS,CAAC,MAAoB,GAAe,GAAwB;AAAA,EAC7E,MAAM,OAAO,CAAC,WAAuB;AAAA,IACpC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,IACzC,OAAO,UAAU,OAAO,OAAO,eAAe,KAAK;AAAA;AAAA,EAEpD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAAA;AAI1B,SAAS,YAAY,CAAC,MAAoB,MAA8B;AAAA,EACvE,IAAI,OAAO,SAAS,YAAY,SAAS;AAAA,IAAM,OAAO;AAAA,EACtD,MAAM,QAAkB,KAAiC,KAAK;AAAA,EAC9D,OAAO,OAAO,UAAU,WAAW,eAAe,KAAK,IAAI;AAAA;AAI5D,SAAS,aAAa,CACrB,MACA,SACA,QACA,MACA,OACO;AAAA,EACP,IAAI,YAAY;AAAA,IAAM;AAAA,EACtB,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,QAAQ,eAAe,KAAK,MAAM;AAAA,IAAS;AAAA,EACzD,MAAM,OAAQ,KAAwC;AAAA,EACtD,MAAM,IAAI,eACT,WACA,GAAG,qDACH;AAAA,IACC,QAAQ,OAAO;AAAA,OACX,OAAO,SAAS,WAAW,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAC5D,eAAe,OAAO;AAAA,IACtB,WAAW;AAAA,EACZ,CACD;AAAA;;;AClIM,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MAEpE,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,OAAO,gBAAgB,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA;AAAA,SAG7D,QAAO,CAAC,QAAQ;AAAA,MACrB,MAAM,QAAQ,GAAG,qBAAqB;AAAA,MACtC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,eACA,QACA,KACD;AAAA,MACA,IAAI,gBAAgB;AAAA,MACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,QAGhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,QAC/C,gBAAgB,OAAO,oBAAoB;AAAA,QAC3C,OAAO,EAAE,iBAAiB,IAAI;AAAA,OAEhC;AAAA,MACA,IAAI,eAAe;AAAA,QAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,MACrE;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,IAGtB,YAAY,eAAe,SAAS,MAAM,EAAE;AAAA,EAC7C;AAAA;;;ACpDM,SAAS,UAAU,CACzB,SACA,MACA,IAGwB;AAAA,EACxB,OAAO;AAAA,IACN,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,IAC/C,eAAe,mBAAmB,SAAS,MAAM,EAAE;AAAA,IACnD,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,EAChD;AAAA;;ACDD,eAAsB,YAAY,CACjC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,OAAO,WAAW,QAAQ,CAAC,OAAO,SAAS,OAAO;AAAA;AAQnD,eAAsB,cAAc,CACnC,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QACA,MACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA;AAgBD,eAAsB,iBAAiB,CACtC,SACA,MACA,QACA,QAOiC;AAAA,EACjC,QAAQ,MAAM,OAAO,OAAO,MAAM,WAAW;AAAA,EAC7C,YAAY,MAAM,MAAM,OAAO,OAAO,IAAI;AAAA,EAC1C,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SACL,KAAK,oBAAoB,OACtB,OACA,MAAM,gBAAgB,SAAS,MAAM,MAAM,KAAK;AAAA,EACpD,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,EACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;ACzDD,SAAS,cAAc,CAC7B,SACA,MACA,IACA,QAC4D;AAAA,EAC5D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,OAAO,SAAS;AAAA,MAC7B,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,YAAY,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,MAAM;AAAA;AAAA,EAExE;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACuC;AAAA,EACvC,MAAM,mBAAmB,SAAS,MAAM,aAAa,OAAO,KAAK;AAAA,EACjE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,UAAU,SAAS,MAAM,KAAK,CAAC;AAAA,EAC5D,CAAC;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,MACA,OAC6B;AAAA,EAE7B,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,aAAa,MAAM;AAAA,EAC5D,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA;AAIzE,eAAe,WAAW,CACzB,SACA,MACA,QACA,QACA,OACA,QACiC;AAAA,EAGjC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,aACA,QACA,KACD;AAAA,EAEA,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;AC1GK,SAAS,iBAAiB,CAChC,SACA,MACA,IACA,QACkD;AAAA,EAClD,OAAO;AAAA,SACA,aAAY,CAAC,MAAM,SAAS;AAAA,MACjC,MAAM,QAAQ,GAAG,cAAc;AAAA,MAC/B,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,MAAM,SAAS,MAAM,UAAU,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACrE,IAAI,CAAC,OAAO,QAAQ;AAAA,QACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,UAC7D,QAAQ,OAAO;AAAA,UACf,UAAU,KAAK;AAAA,QAChB,CAAC;AAAA,MACF;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,MACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,MACrC,OAAO;AAAA;AAAA,EAET;AAAA;;;ACZD,IAAM,WAAU;AAGhB,eAAe,UAAU,CACxB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,WAAW,MAAM,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC;AAAA,EAC9C,OAAO,cAAc,SAAS;AAAA,IAC7B,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,UAAU,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAEhE,UAAU,MACT,IAAI,cACH,GAAG,4DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA;AAOF,eAAsB,kBAAkB,CACvC,SACA,MACA,OACA,OACgB;AAAA,EAChB,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK;AAAA,EAC5D,MAAM,QAAQ,QAAQ,OAAO,gBAAgB;AAAA,EAC7C,IAAI,YAAY,QAAQ,UAAU,aAAa,QAAQ,YAAY,OAAO;AAAA,IACzE;AAAA,EACD;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,iBACT,uBACA,GAAG,4EACH;AAAA,IACC,QAAQ;AAAA,IACR,UAAU,KAAK;AAAA,IACf,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,EACjE,CACD;AAAA;AAUD,eAAsB,kBAAkB,CACvC,SACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,OAAO,KAAK;AAAA,EAClB,MAAM,QAAQ,SAAS,OAAO,YAAY,OAAO,OAAO,KAAK;AAAA,EAC7D,IAAI,SAAS,QAAQ,OAAO,UAAU;AAAA,IAAU;AAAA,EAChD,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,KAAK,UAAU,KAAK,GAAG,KAAK;AAAA,EAC5E,IAAI,SAAS,QAAQ;AAAA,IAAM;AAAA,EAC3B,MAAM,QAAQ,MAAM,OAAO,aAC1B,QAAQ,MACR,gBACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AC/EM,IAAM,iBAAiB,CAC7B,SACA,WACA,UACI,aAAa,SAAS,WAAW,gBAAgB,OAAO,WAAW;AAMxE,eAAsB,aAAa,CAClC,SACA,MACA,WACA,OAC2B;AAAA,EAC3B,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,SAAS,OAAO,SAAS;AAAA,EAE/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,gBACA,OACA,KAAK,IACN;AAAA,EAGA,MAAM,SAAS,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAChE,IAAI,WAAW,MAAM;AAAA,IACpB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBACT,8BACA,GAAG,iEACH,EAAE,WAAW,OAAO,QAAQ,OAAO,IAAI,UAAU,KAAK,KAAK,CAC5D;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK,QAAQ,cAAc,OAAO;AAAA,EAC3C;AAAA;AAID,eAAsB,UAAU,CAC/B,SACA,MACA,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,iBAAiB,GAAG;AAAA,IAC9B,MAAM,YAAY,SAAS,OAAO,QAAQ,cAAc;AAAA,EACzD;AAAA,EACA,MAAM,YAAY,OAAO,OAAO,OAAO,IAAI,KAAK,MAAM,OAAO,YAAY;AAAA;;;ACpFnE,SAAS,cAAc,CAAC,SAAkB,MAAoB,IAAQ;AAAA,EAC5E,OAAO;AAAA,SACA,MAAK,CACV,QACA,OACgC;AAAA,MAChC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,MACA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,QACzD,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QAEf,SAAS;AAAA,QACT,OAAO,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,OAAO;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,OAAO;AAAA,MAChB;AAAA;AAAA,SAGK,QAAO,CACZ,WACA,MACA,SAC6B;AAAA,MAC7B,OAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,IAAI,OAAO;AAAA;AAAA,EAErE;AAAA;AAQD,eAAe,gBAAgB,CAC9B,SACA,MACA,WACA,MACA,IACA,SAC6B;AAAA,EAC7B,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,EACjD,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EAEnB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAChB,OAAO,YACP,QACA,OAAO,cACP,OAAO,IAAI,GACX,KACA,KACD;AAAA,EACA,IAAI,aAAa;AAAA,IAAM,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAIrE,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,OAAO,OACR;AAAA,EACA,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,EAElD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,EACtD,MAAM,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,EACjE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO;AAAA;;;AChFR,eAAsB,mBAAmB,CACxC,SACA,MACA,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,MAAM,SAAS,OAAO;AAAA,EACtB,OAAO,SAAS,MAAM,IAAI,OAAO,cAAc,SAAS;AAAA;;;ACtBzD,sBAAS,+BAAW;AAmBb,IAAM,iBAAiB;AAE9B,IAAM,WAAW;AACjB,IAAM,SAAS;AACf,IAAM,QAAQ;AAGd,IAAM,WAAU;AAGT,SAAS,iBAAiB,GAAa;AAAA,EAC7C,OAAO,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM;AAAA,IACnD,IAAI,OAAO;AAAA,IACX,SAAS,KAAK,EAAG,KAAK,QAAQ,MAAM,GAAG;AAAA,MACtC,QAAQ,SAAS,WAAU,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;AAAA,GAC1C;AAAA;AAQK,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EAC9D,MAAM,OAAO,MACX,YAAY,EACZ,QAAQ,UAAU,EAAE,EACpB,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,GAAG;AAAA,EACtB,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO;AAAA;AAIlC,IAAM,SAAS,CAAC,QAAgB,UAC/B,WAAW,QAAQ,UAAS,KAAK;AAElC,IAAM,MAAM,CAAC,KAAa,QAAgB,SACzC,UAAU,KAAK,CAAC,QAAQ,IAAI,CAAC;AAGvB,SAAS,gBAAgB,CAC/B,QACA,QACA,MACS;AAAA,EACT,MAAM,OAAO,iBAAiB,IAAI,KAAK;AAAA,EACvC,MAAM,MAAM,OAAO,QAAQ,OAAO,QAAQ;AAAA,EAC1C,OAAO,MAAM,OAAO,YAAY,IAAI,KAAK,QAAQ,IAAI,EAAE,SAAS,WAAW;AAAA;AAWrE,SAAS,gBAAgB,CAC/B,QACA,QACA,QACA,OACA,OACS;AAAA,EACT,MAAM,OAAO,iBAAiB,KAAK;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,OAAO,QAAQ,CAAC,MAAM,UAAU;AAAA,IAC/B,OAAO,SAAS,OAAO,SAAS,QAAQ,KAAK,MAAM,GAAG;AAAA,IACtD,IACC,YAAY,QACZ,UAAU,aACV,SAAS,aACT,KAAK,SAAS,GACb;AAAA,MACD,MAAM,IAAI,UACT,GAAG,mDACJ;AAAA,IACD;AAAA,IACA,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,IAChC,IAAI,QAAQ,WAAW;AAAA,MACtB,MAAM,IAAI,UACT,GAAG,kDAAkD,uGACtD;AAAA,IACD;AAAA,IACA,IAAI,SAAS;AAAA,MAAM;AAAA,IACnB,MAAM,OAAO,OAAO,KAAK,MAAM,WAAW;AAAA,IAC1C,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,IACnC,IAAI,KAAK,WAAW,MAAM,UAAU,iBAAgB,MAAM,KAAK,GAAG;AAAA,MACjE,QAAQ,UAAU,KAAK,QAAQ;AAAA,IAChC;AAAA,GACA;AAAA,EACD,OAAO;AAAA;;;AC5GD,IAAM,UAAU,CACtB,MACA,MACA,SACA,OACA,WAEA,IAAI,mBAAkB,MAAM,GAAG,UAAU,WAAW;AAAA,EACnD,WAAW;AAAA,EACX,QAAQ,OAAO;AAAA,EACf,UAAU,KAAK;AAChB,CAAC;;;ACHF,eAAsB,cAAc,CACnC,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,WAAW,MAAM;AAAA,MACpB,MAAM,QACL,MACA,8BACA,6DACA,OACA,MACD;AAAA,IACD;AAAA,IACA,IAAI,SAAS,MAAM,GAAG;AAAA,MACrB,MAAM,QACL,MACA,wBACA,8CACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa;AAAA,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,IAAI;AAAA,IACpE,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,aAAa;AAAA,QACb,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,MAAM,KAAK,SAAS,4BAA4B,SAAS,QAAQ,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;ACjE/C,eAAsB,aAAa,CAClC,SACA,MACA,MACA,SACA,OACmB;AAAA,EACnB,IAAI,YAAY;AAAA,EAChB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,YAAY,SAAS,OAAO,YAAY;AAAA,IACxC,OAAO,EAAE,cAAc,KAAK;AAAA,GAE9B;AAAA,EACA,IAAI,WAAW;AAAA,IACd,MAAM,KACL,SACA,6BACA,SACA,QAAQ,SACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;AC5BtB,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,OACiC;AAAA,EACjC,MAAM,aAAa,gBAClB,SACA,OACA,mCACD;AAAA,EACA,MAAM,SAAS,eAAe;AAAA,EAE9B,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,IAAI,SAAS,OAAO,YAAY,GAAG;AAAA,MAClC,MAAM,QACL,MACA,wBACA,yDACA,OACA,MACD;AAAA,IACD;AAAA,IACA,UAAU,MAAM,QAAQ,KAAK;AAAA,IAC7B,OAAO;AAAA,MACN,cAAc;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,EAAE;AAAA,QACjD,aAAa;AAAA,QACb,UAAU;AAAA,QACV,eAAe,CAAC;AAAA,MACjB;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,KAAK,WAAW,WAAW,QAAQ,UAAU,MAAM,SAAS,KAAK,GAAG,MAAM;AAAA,EAC3E;AAAA;AAID,SAAS,SAAS,CACjB,MACA,QACA,OACS;AAAA,EACT,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,wEACvB;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO,OAAO,KAAK,SAAS,MAAM;AAAA;;;ACvC1C,IAAM,qBAAqB,KAAK;AAEvC,IAAM,iBAAiB,qBAAqB;AAO5C,IAAM,WAAU;AAGhB,SAAS,QAAQ,CAChB,QACA,QACA,QACA,MACS;AAAA,EACT,MAAM,QAAQ;AAAA,IACb,OAAO;AAAA,IACP,OAAO,MAAM;AAAA,IACb,OAAO,OAAO,cAAc,YAAY,EAAE;AAAA,IAC1C,OAAO,IAAI;AAAA,EACZ;AAAA,EAEA,MAAM,MAAM,WAAW,QAAQ,QAAO;AAAA,EACtC,OAAO,WAAW,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW,CAAC;AAAA;AAS9D,eAAsB,mBAAmB,CACxC,SACA,QACA,QACA,OACkB;AAAA,EAClB,QAAQ,aAAa,MAAM,cAAc,SAAS;AAAA,IACjD,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ,OAAO;AAAA,IACf,UAAU,CAAC,QAAQ,SAAS,SAAS,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAEjE,UAAU,MACT,IAAI,eACH,WACA,GAAG,gFACH;AAAA,MACC,QAAQ,OAAO;AAAA,MACf,iBAAiB,OAAO;AAAA,MACxB,WAAW;AAAA,IACZ,CACD;AAAA,EACF,CAAC;AAAA,EACD,IAAI,WAAW,eAAe;AAAA,IAC7B,MAAM,IAAI,YACT,gBACA,GAAG,mDAAmD,gCACtD;AAAA,MACC,WAAW;AAAA,MACX,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,cAAc;AAAA,IACf,CACD;AAAA,EACD;AAAA,EACA,OAAO,gBAAgB;AAAA;;;ACpFxB,eAAsB,uBAAuB,CAC5C,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,sCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,MACtB,MAAM,QACL,MACA,8BACA,uEACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,OAAO,MAAM,oBAClB,SACA,WAAW,QACX,QACA,KACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa,MAAM;AAAA,MACtB,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,KACL,SACA,iCACA,SACA,QAAQ,SACT;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;AC9DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACY;AAAA,EACZ,OAAO;AAAA,SACA,OAAM,CAAC,MAAM,SAAS;AAAA,MAC3B,OAAO,aACN,SACA,MACA,MACA,SACA,GAAG,qBAAqB,CACzB;AAAA;AAAA,SAGK,SAAQ,CAAC,MAAM,MAAM,SAAS;AAAA,MACnC,OAAO,eACN,SACA,MACA,MACA,MACA,SACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,SAGK,wBAAuB,CAAC,MAAM,MAAM,SAAS;AAAA,MAClD,OAAO,wBACN,SACA,MACA,MACA,MACA,SACA,GAAG,sCAAsC,CAC1C;AAAA;AAAA,SAGK,QAAO,CAAC,MAAM,SAAS;AAAA,MAC5B,OAAO,cACN,SACA,MACA,MACA,SACA,GAAG,sBAAsB,CAC1B;AAAA;AAAA,EAEF;AAAA;;;AC9CD,eAAsB,eAAe,CACpC,SACA,MACA,OAKA,IACoC;AAAA,EACpC,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,QAAQ,SAAS;AAAA,EACjB,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,WAAW,KAAK;AAAA,EACxE,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EAEtB,MAAM,QAAQ,iBACb,OAAO,WAAW,QAClB,OAAO,IACP,OAAO,eACP,OAAO,IAAI,GACX,KACD;AAAA,EACA,IAAI,UAAU;AAAA,IAAI,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAEhE,MAAM,gBAAgB,OAAO,cAAc,OAC1C,CAAC,GAAG,UAAU,UAAU,KACzB;AAAA,EACA,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP;AAAA,IACC,cAAc,KAAK,QAAQ,cAAc;AAAA,IACzC,WAAW,QAAQ,MAAM,IAAI;AAAA,EAC9B,GACA,OAAO,OACR;AAAA,EAGA,IAAI;AAAA,EACJ,IAAI;AAAA,IACH,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,IAClD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,IACtD,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,YAC1D;AAAA,IACD,MAAM,KAAK,SAAS,yBAAyB,SAAS,QAAQ,SAAS;AAAA;AAAA,EAExE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO,KAAK,UAAU,mBAAmB,cAAc,OAAO;AAAA;;;ACpDxD,SAAS,iBAAiB,CAChC,SACA,MACA,IACC;AAAA,EACD,MAAM,aAAa,eAAe,SAAS,MAAM,EAAE;AAAA,EACnD,MAAM,MAAgD;AAAA,OAClD,eAAe,SAAS,MAAM,EAAE;AAAA,IACnC,SAAS,WAAW;AAAA,IACpB,SAAS,CAAC,WAAW,MAAM,YAC1B,gBAAgB,SAAS,MAAM,EAAE,WAAW,MAAM,QAAQ,GAAG,EAAE;AAAA,IAChE,mBAAmB,CAAC,SACnB,oBACC,SACA,MACA,MACA,GAAG,gCAAgC,CACpC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IAOA,QAAQ,CACP,QACA,OACA,WAEA,SAAS,OAAO,YAAY,IACzB,WAAW,MAAM,QAAQ,KAAK,IAC9B,YAAY,SAAS,MAAM,QAAQ,MAAM;AAAA,EAC9C;AAAA;;;ACHM,SAAS,eAAe,CAC9B,SACA,MACA,IACA,QAC8D;AAAA,EAC9D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,WAAW,MAAM,SAAS;AAAA,MACvC,OAAO,YACN,SACA,MACA,QACA,EAAE,WAAW,MAAM,QAAQ,GAC3B,EACD;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,mBAAmB,SAAS,MAAM,cAAc,OAAO,KAAK;AAAA,EAClE,MAAM,YAAY,WAAW;AAAA,EAC7B,OAAO,OAAO,OAAO;AAAA,IACpB;AAAA,IACA,MAAM,SAAS,OAAO,MACrB,gBAAgB,SAAS,MAAM,OAAO,SAAS,CAChD;AAAA,EACD,CAAC;AAAA;AAIF,eAAe,eAAe,CAC7B,SACA,MACA,OACA,WACsC;AAAA,EAEtC,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC,QAAQ;AAAA,EACT,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,cAAc,MAAM;AAAA,EAC7D,OAAO;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,OAAO;AAAA,IACP;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,WAAW,CACzB,SACA,MACA,QACA,OAKA,IACiC;AAAA,EACjC,MAAM,QAAQ,GAAG,oBAAoB;AAAA,EACrC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,MAAM,SAAS,OAAO,MAAM,SAAS;AAAA,EACrC,MAAM,OAAO,MAAM;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,cACA,OACA,KAAK,IACN;AAAA,EAKA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,IAAI,CAAC,GAAG;AAAA,IAE9C,IAAI,MAAM,aAAa,eAAe;AAAA,MACrC,MAAM,YAAY,SAAS,QAAQ,YAAY;AAAA,IAChD;AAAA,IACA,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EAEA,MAAM,aAAa,SAAS,QAAQ,cAAc,OAAO,WAAW;AAAA,EACpE,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;ACtJF,IAAM,QAAQ,CAAC,SAAkB,QAAgB,UAChD,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAO3D,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,OAAO,QAAQ,iBAAiB;AAAA,EACxC,IAAI,SAAS,KAAK,YAAY,GAAG;AAAA,IAChC,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,wBACA,GAAG,mGACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,IAAI,CAAC,YAAY,OAAO,QAAQ,IAAI,GAAG;AAAA,IACtC,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,EAClC,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA;AAU7C,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,QAAQ,iBAAiB;AAAA,EACjC,MAAM,SAAS,KAAK;AAAA,EACpB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,8BACA,GAAG,2EACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,aAAa,MAAM,oBACxB,SACA,WAAW,QACX,MACA,KACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,KAAK;AAAA,EACtE,IAAI,aAAa,MAAM;AAAA,IACtB,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YACL,OACA,KAAK,IACL,KAAK,MACL,KAAK,IAAI,cAAc,UAAU,CAClC;AAAA,EACD;AAAA,EAGA,MAAM,QAAQ,MAAM,MAAM,WACzB,KAAK,IACL,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,KAAK,OACN;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA;;;ACxFnC,eAAsB,UAAU,CAC/B,SACA,MACA,SACA,OACA,QACA,OACwB;AAAA,EACxB,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO,IAAI,WAAW;AAAA,EACtE,IAAI,YAAY,QAAQ,QAAQ,WAAW,MAAM,QAAQ;AAAA,IACxD,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAAA,IAChE,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;ACzBxB,eAAsB,aAAa,CAClC,SACA,MACA,MACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAAS,OAAO,YAAY,IACxC,MAAM,MAAM,SAAS,QAAQ,KAAK,IAClC,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,EAG7C,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,UACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,SAAS,CAC5B;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,KAAK,CACnB,SACA,QACA,OACgC;AAAA,EAChC,gBAAgB,SAAS,OAAO,oCAAoC;AAAA,EACpE,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,OAAO,CACrB,SACA,MACA,QACA,OACkC;AAAA,EAClC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAGA,MAAM,gBAAgB,SAAS,MAAM,UAAU,OAAO,IAAI,KAAK;AAAA,EAC/D,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;;;AClFM,SAAS,WAAW,CAC1B,SACA,MACA,IAC6C;AAAA,EAC7C,OAAO;AAAA,SACA,QAAO,CAAC,MAAM;AAAA,MACnB,OAAO,cAAc,SAAS,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAAA;AAAA,SAGzD,QAAO,CAAC,SAAS,WAAW,MAAM;AAAA,MACvC,OAAO,cACN,SACA,MACA,SACA,OAAO,SAAS,GAChB,OAAO,IAAI,GACX,GAAG,gBAAgB,CACpB;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,aAAa,CAC3B,SACA,MACA,SACA,QACA,MACA,OACmB;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,UACA,OACA,KAAK,IACN;AAAA,EACA,QAAQ,SAAS,SAAS,MAAM,WAC/B,SACA,MACA,SACA,OACA,QACA,KACD;AAAA,EAEA,MAAM,UAAU,EAAE,OAAO,QAAQ,aAAa;AAAA,EAE9C,IAAI,MAAM,aAAa,MAAM;AAAA,IAC5B,MAAM,aAAa,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA,EAC7D,EAAO;AAAA,IACN,MAAM,iBAAiB,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA;AAAA,EAGjE,MAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,sBAC9C,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,EAEA,IAAI,cAAc,MAAM;AAAA,IACvB,MAAM,IAAI,YACT,iBACA,GAAG,gEACH,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,OAAO,UAAU,SAAS;AAAA;;;ACtFpB,SAAS,gBAAgB,CAC/B,SACA,MAC0B;AAAA,EAC1B,OAAO;AAAA,SACA,YAAW,CAAC,OAAO;AAAA,MAExB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM;AAAA,QAAI,OAAO;AAAA,MAC7D,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,MACvD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,EAE/C;AAAA;;;ACXM,IAAM,UAAU,OACtB,SACA,MACA,UAEA,WAAW,KAAK,IACb,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,KAAK,IACpD;;;ACEJ,eAAsB,MAAM,CAC3B,SACA,MACA,OACA,OACA,QACsB;AAAA,EACtB,QAAQ,OAAO,UAAU;AAAA,EACzB,QAAQ,UAAU,WAAW,SAAS,SAAS,CAAC;AAAA,EAChD,MAAM,MAAM,MAAM,IAAI;AAAA,EACtB,MAAM,SAAS,MAAM,eAAe,MAAM,MAAM,KAAK;AAAA,EACrD,SAAS,MAAM;AAAA,EAEf,IAAI,OAA+B;AAAA,EACnC,IAAI,aAAa,WAAW;AAAA,IAC3B,cAAc,MAAM,UAAoB,KAAK;AAAA,IAC7C,OAAO;AAAA,MACN,MAAM,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAkB;AAAA,MACjE,WAAW;AAAA,IACZ;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,MAAM,WAAW;AAAA,IAC7C,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,IACpB,QAAQ,WAAW,YAAY,OAAO,WAAW;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACZ,CAAC;AAAA,EAGD,MAAM,KAAK,SAAS,gBAAgB,UAAU,SAAS,SAAS;AAAA,EAChE,OAAO;AAAA;;;AC9CR,eAAe,MAAM,CACpB,SACA,MACA,KAC6B;AAAA,EAC7B,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,OAAO,QAAQ,SAAS,MAAM,KAAK,SAAS,UAAU,GAAG,CAAC;AAAA,EAC3D;AAAA,EACA,OAAO,IAAI,KAAK,MAAM,KAAK,OAAO,cAAc,SAAS,MAAM,GAAG;AAAA;AAInE,SAAS,QAAO,CAAC,MAAoB,OAAe,OAAe;AAAA,EAClE,OAAO,IAAI,kBACV,GAAG,sCAAsC,KAAK,4BAA4B,UAC1E;AAAA,IACC,QAAQ;AAAA,MACP,EAAE,MAAM,CAAC,KAAK,GAAG,SAAS,wCAAwC;AAAA,IACnE;AAAA,IACA,UAAU,KAAK;AAAA,EAChB,CACD;AAAA;AAID,SAAS,WAAW,CACnB,MACA,KACA,OAC+B;AAAA,EAC/B,OAAO,CAAC,WAAW;AAAA,IAClB,MAAM,QAAQ,KAAK,aAAa,OAAO,KAAK,QAAQ,KAAK,SAAS;AAAA,IAClE,MAAM,QAAQ,OAAO;AAAA,IACrB,MAAM,QACL,OAAO,UAAU,WACd,OACA,KAAK,aAAa,OACjB,eAAe,KAAK,IACpB,KAAK,SAAS,UAAU,KAAK;AAAA,IAClC,MAAM,SACL,KAAK,aAAa,OACf,eAAe,GAAG,IAClB,KAAK,SAAS,UAAU,GAAG;AAAA,IAC/B,IAAI,UAAU,QAAQ,UAAU,QAAQ;AAAA,MACvC,MAAM,SAAQ,MAAM,OAAO,KAAK;AAAA,IACjC;AAAA;AAAA;AASK,SAAS,iBAAiB,CAChC,SACA,MACA,IACkC;AAAA,EAClC,OAAO;AAAA,SACA,aAAY,CAAC,KAAK,OAAO;AAAA,MAC9B,MAAM,QAAQ,GAAG,cAAc;AAAA,MAC/B,IAAI,OAAO,QAAQ,UAAU;AAAA,QAC5B,MAAM,IAAI,kBAAiB,GAAG,mCAAmC;AAAA,UAChE,QAAQ,CAAC,EAAE,MAAM,CAAC,GAAG,SAAS,kBAAkB,CAAC;AAAA,UACjD,UAAU,KAAK;AAAA,QAChB,CAAC;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,MAAM,OAAO,SAAS,MAAM,GAAG;AAAA,MAC7C,IAAI,UAAU;AAAA,QAAM,OAAO,EAAE,MAAM,OAAO,KAAK,GAAG,SAAS,MAAM;AAAA,MAEjE,MAAM,SAAS,MAAM,MAAM;AAAA,MAC3B,MAAM,UAAU,MAAM,iBACrB,OAAO,SAAS,MAAM,QAAQ,OAAO,YAAY,MAAM,KAAK,KAAK,CAAC,CACnE;AAAA,MACA,IAAI,EAAE,mBAAmB,iBAAgB;AAAA,QACxC,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,SAAS,KAAK;AAAA,MAC/C;AAAA,MAEA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,GAAG;AAAA,MAC9C,IAAI,WAAW;AAAA,QAAM,MAAM;AAAA,MAC3B,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,SAAS,MAAM;AAAA;AAAA,EAEhD;AAAA;;;AC7ED,eAAsB,cAAc,CACnC,SACA,MACA,MACA,QACA,SACA,OACsB;AAAA,EACtB,aAAa,MAAM,KAAK;AAAA,EACxB,cAAc,MAAM,QAAQ,MAAM,KAAK;AAAA,EACvC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAE3C,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,IACC,OAAO,aAAa,QACpB,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,SAAS,KAAK,GAC7D;AAAA,MACD,MAAM,IAAI,iBACT,uBACA,GAAG,8CACH;AAAA,QACC,QAAQ,OAAO,aAAa,OAAO,eAAe;AAAA,QAClD,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO;AAAA,MACN,UAAU;AAAA,QACT,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI;AAAA,QACnC,WAAW;AAAA,MACZ;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACtC,OAAO;AAAA;;;ACjCR,eAAsB,MAAM,CAC3B,SACA,MACA,QACA,OACA,MACiC;AAAA,EACjC,QAAQ,OAAO,WAAW;AAAA,EAC1B,MAAM,OAAO,aAAa,MAAM,KAAK;AAAA,EACrC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAC3C,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,MAAM,WAAW,QAAQ;AAAA,EAEzB,MAAM,aAAa,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI;AAAA,EAGvE,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,mBAAmB,SAAS,MAAM,YAAY,KAAK;AAAA,EAC1D;AAAA,EACA,MAAM,SACL,eAAe,OAAO,OAAO,MAAM,QAAQ,SAAS,MAAM,UAAU;AAAA,EACrE,MAAM,SAAS,CAAC,WACf,IAAI,iBACH,uBACA,GAAG,kDACH,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EAED,IAAI,WAAW,QAAQ,OAAO,aAAa,MAAM;AAAA,IAIhD,MAAM,OAAO,OAAO,OAAO,QAAQ,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,IAC/D,MAAM,OAAO,WAAW,OAAO,iBAAiB,YAAY;AAAA,EAC7D;AAAA,EAEA,IAAI,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,QAAQ,GAAG,KAAK,GAAI;AAAA,IACvE,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAGA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAKA,IAAI,CAAC,SAAS,OAAO,YAAY,GAAG;AAAA,IACnC,MAAM,mBAAmB,SAAS,MAAM,QAAQ,KAAK;AAAA,EACtD;AAAA,EACA,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,EACjE,MAAM,SAAS,MAAM,OAAO,UAAU,OAAO,MAAM;AAAA,EAGnD,IACC,CAAE,MAAM,eACP,SACA,MACA,UACA,OAAO,QAAQ,GACf,QACA,KACD,GACC;AAAA,IACD,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAEA,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;AC1ED,SAAS,aAAa,CAC5B,SACA,MACA,IACA,QAC6D;AAAA,EAC7D,OAAO;AAAA,SACA,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,aAAa,MAAM,KAAK;AAAA,MACxB,IAAK,QAAkB,gBAAgB,WAAW;AAAA,QACjD,cAAc,MAAM,WAAgC,KAAK;AAAA,MAC1D;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,OAAgB,KAAK;AAAA,MAChE,OAAO,YAAY,SAAS,MAAM,QAAQ,QAAQ,IAAI;AAAA;AAAA,SAGjD,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,OAAO,SAAS,MAAM,QAAQ,OAAgB,EAAE,OAAO,OAAO,CAAC;AAAA;AAAA,SAGjE,YAAW,CAAC,OAAO;AAAA,MACxB,MAAM,OAAO,aAAa,MAAM,GAAG,aAAa,CAAC;AAAA,MACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,MACjE,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,YAAW,CAAC,MAAM,UAAU,SAAS;AAAA,MAC1C,MAAM,QAAQ,GAAG,aAAa;AAAA,MAC9B,aAAa,MAAM,KAAK;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK;AAAA,MACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,MAE9D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,IAAI,EAAE,EACnD;AAAA,MACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,MACtC,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,eAAc,CAAC,MAAM,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,GAAG,gBAAgB;AAAA,MACjC,OAAO,OACN,MAAM,eAAe,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,CACjE;AAAA;AAAA,EAEF;AAAA;;;ACpED,eAAsB,UAAU,CAC/B,SACA,MACA,MACmB;AAAA,EACnB,QAAQ,OAAO,UAAU;AAAA,EACzB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EAItB,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS,EAAE;AAAA,EAC5C,IAAI,WAAW,QAAQ,OAAO,SAAS,KAAK;AAAA,IAAM,OAAO;AAAA,EAMzD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,MAAM,UAAU,WAAW,QAAS,MAAM,MAAM,MAAM,WAAW,EAAE;AAAA,EACnE,IAAI;AAAA,IACH,MAAM,MAAM,SAAS,mBAAmB,EAAE;AAAA,IAC1C,MAAM,MAAM,OAAO,iBAAiB,EAAE;AAAA,IAEtC,MAAM,QAAQ,WAAW,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,YAC5D;AAAA,IAID,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,gBAAgB,EAAE,IAAI,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,IACvE;AAAA;AAAA,EAED,OAAO;AAAA;;;AC7BD,IAAM,kBAAkB;AAOxB,IAAM,wBAAwB;AAWrC,eAAsB,eAAe,CACpC,SACA,KACA,MACA,OACwB;AAAA,EACxB,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AAAA,IACxB,MAAM,IAAI,UAAU,GAAG,yCAAyC;AAAA,EACjE;AAAA,EAEA,MAAM,SAAS;AAAA,IACd,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,MAAK,EAAE,CAAC,CAAC;AAAA,EAClE;AAAA,EACA,MAAM,QAAQ,IAAI;AAAA,EAElB,SAAS,QAAQ,EAAG,QAAQ,OAAO,QAAQ,SAAS,iBAAiB;AAAA,IACpE,MAAM,QAAQ,OAAO,MAAM,OAAO,QAAQ,eAAe;AAAA,IACzD,WAAW,UAAU,MAAM,UAAU,SAAS,KAAK,GAAG;AAAA,MACrD,IAAI,OAAO,SAAS;AAAA,QAAM,MAAM,IAAI,OAAO,IAAI,MAAM;AAAA,IACtD;AAAA,EACD;AAAA,EAIA,OAAO,OAAO,QAAQ,CAAC,OAAO;AAAA,IAC7B,MAAM,SAAS,MAAM,IAAI,EAAE;AAAA,IAC3B,OAAO,WAAW,YAAY,CAAC,IAAI,CAAC,MAAM;AAAA,GAC1C;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,KACiC;AAAA,EACjC,QAAQ,UAAU,QAAQ;AAAA,EAE1B,IAAI,QAAQ,aAAa,aAAa,MAAM,cAAc,WAAW;AAAA,IACpE,MAAM,SAAkB,MAAM,MAAM,UAAU,GAAG;AAAA,IACjD,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAAA,MAC3B,MAAM,IAAI,cACT,kGACA,EAAE,MAAM,SAAS,WAAW,YAAY,CACzC;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,UAAwB,CAAC;AAAA,EAC/B,SAAS,QAAQ,EAAG,QAAQ,IAAI,QAAQ,SAAS,uBAAuB;AAAA,IACvE,MAAM,UAAU,MAAM,QAAQ,IAC7B,IACE,MAAM,OAAO,QAAQ,qBAAqB,EAC1C,IAAI,CAAC,OAAO,MAAM,SAAS,EAAE,CAAC,CACjC;AAAA,IACA,WAAW,UAAU;AAAA,MAAS,IAAI,WAAW;AAAA,QAAM,QAAQ,KAAK,MAAM;AAAA,EACvE;AAAA,EACA,OAAO;AAAA;;;AC5ER,eAAsB,MAAM,CAC3B,SACA,MACA,MACA,OACA,SACA,OACsB;AAAA,EAItB,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,KAAK,WAAW;AAAA,IAChB,OAAO,YAAY,MAAM,QAAQ,OAAO,KAAK;AAAA,GAE/C;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,IACC,aAAa,QACb,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM,GACjD;AAAA,IAID,IAAI;AAAA,MACH,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QAAQ,IACR,eACA,QAAQ,MAAM,IAAI,CACnB;AAAA,cACC;AAAA,MACD,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,QACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,MAC3C,CAAC;AAAA;AAAA,EAEH;AAAA,EACA,OAAO;AAAA;;;AClCD,SAAS,WAAW,CAC1B,SACA,MACA,IAC8B;AAAA,EAC9B,QAAQ,UAAU;AAAA,EAElB,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,MAAM,OAAO,SAAS,MAAM,OAAgB,GAAG,QAAQ,CAAC,CAAC;AAAA;AAAA,SAGlE,KAAI,CAAC,IAAI;AAAA,MACd,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,KAAK,IAAI;AAAA,MACtD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,SAAQ,CAAC,KAAK;AAAA,MACnB,MAAM,UAAU,MAAM,gBACrB,SACA,KACA,KAAK,MACL,GAAG,UAAU,CACd;AAAA,MACA,OAAO,QAAQ,IAAI,MAAM;AAAA;AAAA,SAGpB,IAAG,CAAC,IAAI;AAAA,MACb,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC;AAAA;AAAA,SAG3D,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,MAAM,SAAS;AAAA,MAG7B,IAAI,UAAU,QAAQ,CAAC,MAAK,KAAK,GAAG;AAAA,QACnC,MAAM,eAAc,GAAG,MAAM,GAAG,KAAK;AAAA,MACtC;AAAA,MAEA,MAAM,SAAS,MAAM,MAAM,MAAM,UAAU;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX;AAAA,QACA,OAAO,WAAU,MAAM,OAAO,GAAG,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,MACD,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,YAAY,OAAO,WAAW;AAAA;AAAA,SAGnE,OAAM,CAAC,MAAM,OAAO,SAAS;AAAA,MAClC,OAAO,OACN,MAAM,OACL,SACA,MACA,MACA,OACA,SACA,GAAG,QAAQ,CACZ,CACD;AAAA;AAAA,SAGK,UAAS,CAAC,MAAM,QAAQ,SAAS;AAAA,MACtC,OAAO,OACN,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,OAAO;AAAA,QACrE,QAAQ,WAAW;AAAA,MACpB,EAAE,CACH;AAAA;AAAA,SAGK,OAAM,CAAC,MAAM;AAAA,MAClB,OAAO,WAAW,SAAS,MAAM,IAAI;AAAA;AAAA,EAEvC;AAAA;;;AC1EM,SAAS,OAAO,CAAC,SAAkB,MAAgC;AAAA,EACzE,MAAM,KAAS,CAAC,cACf,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,QAAQ;AAAA,EACrD,MAAM,eAAe,kBAAkB,SAAS,MAAM,EAAE;AAAA,EACxD,MAAM,aAAa,gBAAgB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,EAEzE,OAAO;AAAA,OACH,YAAY,SAAS,MAAM,EAAE;AAAA,OAC7B,cAAc,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,OACpD,kBAAkB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAE3D,cAAc,aAAa;AAAA,IAC3B;AAAA,IACA,WAAW,eAAe,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAChE,QAAQ,YAAY,SAAS,MAAM,EAAE;AAAA,OAElC,iBAAiB,SAAS,IAAI;AAAA,OAC9B,kBAAkB,SAAS,MAAM,EAAE;AAAA,OACnC,WAAW,SAAS,MAAM,EAAE;AAAA,EAChC;AAAA;;ACOM,SAAS,KAAkC,CACjD,QACW;AAAA,EACX,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW,cAAc,QAAQ,KAAK;AAAA,EAC5C,mBAAmB,UAAU,KAAK;AAAA,EAClC,MAAM,eAAe,aAAa,OAAO,OAAO,KAAK;AAAA,EAErD,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,MAAM,YAAY;AAAA,IACjB,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM;AAAA,IAClC,GAAI,OAAO,aAAa,CAAC;AAAA,EAC1B;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,YAAY,WAAW;AAAA,IACjC,IAAI,OAAO,UAAU,WAAW,YAAY,SAAS,WAAW,IAAI;AAAA,MACnE,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,IACtE;AAAA,IACA,IAAI,SAAS,IAAI,SAAS,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,UACT,GAAG,wCAAwC,SAAS,0DACrD;AAAA,IACD;AAAA,IACA,SAAS,IAAI,SAAS,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,OAAO,aAAa;AAAA,EACtC,IACC,cAAc,QACd,OAAQ,UAAyC,iBAAiB,YACjE;AAAA,IACD,MAAM,IAAI,UACT,GAAG,+EACJ;AAAA,EACD;AAAA,EAEA,MAAM,UAAU,cACf,UACA,YAAY,OAAO,KAAK,GACxB,cAAc,OAAO,OAAO,eAAe,SAAS,GACpD,cACA,OAAO,SAAS,aAChB,QACA,WACA,cAAc,OAAO,QAAQ,KAAK,CACnC;AAAA,EAEA,MAAM,SAAS,UAAU,OAAO;AAAA,EAChC,MAAM,QAAQ,OAAO,YACpB,CAAC,GAAG,SAAS,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1C,KAAK;AAAA,IACL,QAAQ,SAAS,IAAI;AAAA,EACtB,CAAC,CACF;AAAA,EAIA,MAAM,UAAU,SAAS,SACtB,KAAK,WAAW,MAAM,QAAQ,IAC9B,KAAK,WAAW,MAAM;AAAA,EACzB,OAAO;AAAA;;AC/ED,SAAS,WAAW,CAC1B,SACA,QACA,QAAe,aACR;AAAA,EACP,MAAM,WAAW,cAAc,QAAQ,qBAAqB;AAAA,EAC5D,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,EACpE,IAAI,OAAO,UAAU;AAAA,IACpB,MAAM,IAAI,qBACT,6FACA,EAAE,QAAQ,QAAQ,OAAO,CAC1B;AAAA,EACD;AAAA;",
|
|
97
|
-
"debugId": "
|
|
98
|
+
"mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,SAAS,YAAY,CAAC,SAEV;AAAA,EAClB,MAAM,OAAO,SAAS,QAAQ;AAAA,EAC9B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM,OAAO,IAAI;AAAA,IACtD,MAAM,IAAI,UACT,uFACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,SACF,KAAI,CAAC,OAAO;AAAA,MACjB,MAAM,OAAO,YAAY,EAAE;AAAA,MAC3B,MAAM,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,GAAG,CAAC;AAAA,MAChD,OAAO,GAAG,mBAAmB,gBAAgB,KAAK,SAAS,QAAQ,KAAK,IAAI,SAAS,QAAQ;AAAA;AAAA,SAExF,OAAM,CAAC,OAAO,MAAM;AAAA,MACzB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAIpC,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UACT,0EACD;AAAA,MACD;AAAA,MACA,SAAS,IAAI,GAAG,GAAG,MAAM,OAAO;AAAA,MAQhC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;AAAA,MAC1C,MAAM,SAAS,MAAM,OACpB,OACA,OAAO,KAAK,MAAM,QAAQ,GAC1B,OAAO,EAAE,GACT,OAAO,CAAC,GACR,OAAO,CAAC,GACR,SAAS,MACV;AAAA,MACA,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAAA,IAExC,WAAW,CAAC,MAAM;AAAA,MACjB,MAAM,SAAS,YAAY,KAAK,IAAI;AAAA,MAEpC,IAAI,WAAW;AAAA,QAAM,OAAO;AAAA,MAC5B,SAAS,IAAI,GAAG,KAAK;AAAA,MACrB,OAAO,OAAO,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM;AAAA;AAAA,EAEnD;AAAA;AAGD,IAAM,gBAAgB;AACtB,IAAM,cACL;AAED,SAAS,MAAM,CACd,OACA,MACA,IACA,GACA,GACA,SAAS,IACS;AAAA,EAGlB,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,IAIvC,OACC,OACA,MACA,QACA,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,MAAM,IAAI,EAAE,GACjE,CAAC,OAAO,QAAS,QAAQ,OAAO,KAAK,IAAI,QAAQ,GAAG,CACrD;AAAA,GACA;AAAA;AAWK,SAAS,SAAS,GAAmB;AAAA,EAG3C,MAAM,WACL,OAAO,QAAQ,cAAc,YAAY,IAAI;AAAA,EAE9C,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,IAAI,UACT,iGACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ;AAAA,IAC9C,QAAQ,CAAC,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAAA,IACpD,aAAa,CAAC,SAAS,CAAC,KAAK,WAAW,mBAAmB;AAAA,EAC5D;AAAA;AASD,IAAM,WAAW;AAAA,EAChB,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,UAAU;AACX;AACA,IAAM,sBAAsB;;ACjIrB,IAAM,cAAqB;AAAA,EACjC,KAAK,MAAM,IAAI;AAChB;AASO,SAAS,UAAU,CAAC,QAAuB,GAGhD;AAAA,EACD,IAAI,KAAK,iBAAiB,OAAO,MAAM,QAAQ,IAAI;AAAA,EAEnD,OAAO;AAAA,IACN,KAAK,MAAM,IAAI,KAAK,EAAE;AAAA,IACtB,SAAS,CAAC,OAAO;AAAA,MAChB,MAAM;AAAA;AAAA,IAEP,KAAK,CAAC,OAAO;AAAA,MACZ,KAAK,cAAc,OAAO,GAAG,QAAQ,IAAI;AAAA;AAAA,EAE3C;AAAA;;;ACzBD,IAAM,cAAc;AAAA,EACnB,MAAM,CAAC,UAAkB;AAAA,EACzB,WAAW,CAAC,UAAkB,MAAM,YAAY;AAAA,EAChD,eAAe,CAAC,UAAkB,MAAM,YAAY,EAAE,KAAK;AAAA,EAC3D,mBAAmB,CAAC,UACnB,MAAM,UAAU,MAAM,EAAE,YAAY,EAAE,KAAK;AAC7C;AAGO,IAAM,iBAAiB,YAAY;AAGnC,SAAS,UAAU,CACzB,MACA,OAC4B;AAAA,EAC5B,IAAI,OAAO,SAAS;AAAA,IAAY,OAAO;AAAA,EACvC,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,IAAI,GAAG;AAAA,IACjE,OAAO,YAAY;AAAA,EACpB;AAAA,EAEA,MAAM,IAAI,UACT,GAAG,uFACJ;AAAA;;ACpCM,IAAM,cAAc;AAMpB,IAAM,kBAAkB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGO,IAAM,iBAAiB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;;AC1BA,IAAM,QAAQ;AAAA,EACb,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACJ;AAEA,IAAM,UAAU;AAcT,SAAS,aAAa,CAAC,OAAiB,OAAuB;AAAA,EACrE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,MAC1C,MAAM,IAAI,UACT,GAAG,sEACJ;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAEhC,IAAI,CAAC,OAAO;AAAA,IACX,MAAM,IAAI,UACT,GAAG,WAAW,qGACf;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,OAAO,MAAM,EAAE;AAAA,EAC9B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,MAAM;AAAA,EAE1B,IAAI,MAAM,GAAG;AAAA,IACZ,MAAM,IAAI,UAAU,GAAG,sCAAsC;AAAA,EAC9D;AAAA,EAEA,OAAO;AAAA;;;AClDD,IAAM,OAAO;AAGb,SAAS,SAAS,CAAC,OAAgB,OAAuB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA,IACnD,MAAM,IAAI,UACT,GAAG,kEACJ;AAAA,EACD;AAAA,EACA,IAAK,gBAAsC,SAAS,KAAK,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,GAAG,WAAW,qCAAqC;AAAA,EACxE;AAAA,EACA,OAAO;AAAA;;;ACdR,IAAM,cAAc;AAEb,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,MAAM,OAAO,OAAO,QAAQ;AAAA,EAC5B,IAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,kHACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,OAAO,YAAY;AAAA,EACpC,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,IAAI,aAAa,UAAU,CAAC,QAAQ;AAAA,IACnC,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,OAAO,UAAU;AAAA,IACzB,MAAM,OAAO,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACD;AAAA;;;AChCD,0DAA2C;AA6B3C,IAAM,YAAY;AAElB,IAAM,SAAS;AACf,IAAM,MAAM;AAGL,SAAS,aAAa,CAAC,MAAe,OAAuB;AAAA,EACnE,IAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,KAAK,WAAW,GAAG;AAAA,IAC9C,MAAM,IAAI,UACT,GAAG,mEACJ;AAAA,EACD;AAAA,EACA,MAAM,UAAU,IAAI;AAAA,EACpB,WAAW,SAAS,MAA+B;AAAA,IAClD,MAAM,KAAK,OAAO;AAAA,IAClB,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,KAAK,EAAE,GAAG;AAAA,MAC/C,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,IACD;AAAA,IACA,IAAI,QAAQ,IAAI,EAAE,GAAG;AAAA,MACpB,MAAM,IAAI,UAAU,GAAG,gCAAgC,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,MAAM,MAAM;AAAA,IAClB,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GAAG,GAAG;AAAA,MAC9C,MAAM,IAAI,UACT,GAAG,mBAAmB,uEACvB;AAAA,IACD;AAAA,IACA,QAAQ,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,EAAE,UAAW,KAAK,GAAkB,IAAI,MAAM,QAAQ;AAAA;AAIvD,SAAS,IAAI,CAAC,QAAgB,OAAe,SAAyB;AAAA,EAC5E,MAAM,MAAM,OAAO,KAAK,IAAI,OAAO,QAAQ;AAAA,EAC3C,MAAM,KAAK,aAAY,EAAE;AAAA,EACzB,MAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AAAA,EACpD,OAAO,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,EAClC,MAAM,SAAS,OAAO,OAAO;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM;AAAA,IAC3B,OAAO,MAAM;AAAA,IACb,OAAO,WAAW;AAAA,EACnB,CAAC;AAAA,EACD,OAAO,MAAM,OAAO,YAAY,GAAG,SAAS,WAAW,KAAK,OAAO,SAAS,WAAW;AAAA;AAUjF,SAAS,MAAM,CACrB,QACA,QACA,SACA,OACqD;AAAA,EACrD,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,OAAO,SAAS,OAAO,IAAI,QAAQ;AAAA,EACnC,MAAM,QAAQ,OAAO,KAAK,QAAQ,IAAI,WAAW;AAAA,EAEjD,IACC,MAAM,WAAW,KACjB,YAAY,QACZ,UAAU,aACV,OAAO,aACP,MAAM,UAAU,WACf;AAAA,IACD,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,EACtE;AAAA,EACA,MAAM,MAAM,OAAO,KAAK,IAAI,KAAK;AAAA,EACjC,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,IAAI,UACT,GAAG,6CAA6C,gGACjD;AAAA,EACD;AAAA,EACA,IAAI;AAAA,IACH,MAAM,WAAW,iBAChB,eACA,KACA,OAAO,KAAK,IAAI,WAAW,GAC3B,EAAE,eAAe,UAAU,CAC5B;AAAA,IACA,SAAS,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,IACpC,SAAS,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;AAAA,IAC5D,MAAM,QAAQ,OAAO,OAAO;AAAA,MAC3B,SAAS,OAAO,MAAM,SAAS,GAAG,MAAM,SAAS,SAAS,CAAC;AAAA,MAC3D,SAAS,MAAM;AAAA,IAChB,CAAC,EAAE,SAAS,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,MAAM;AAAA,IACrB,OAAO,OAAO;AAAA,IACf,MAAM,IAAI,UACT,GAAG,iDAAiD,4FACpD,EAAE,MAAM,CACT;AAAA;AAAA;;;ACzHK,SAAS,cAAc,CAC7B,QACA,OAC4B;AAAA,EAC5B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EAEjC,OAAO,EAAE,QAAQ,cAAc,QAAQ,MAAM,GAAG,qBAAqB,EAAE;AAAA;;;ACLjE,SAAS,mBAAmB,CAClC,QACA,OACiC;AAAA,EACjC,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,KAAK,GAAG;AAAA,EACd,IAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,KAAK,MAAM,IAAI;AAAA,IACtE,MAAM,IAAI,UACT,GAAG,0FACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,QAAQ,cAAc,OAAO,MAAM,GAAG,SAAS;AAAA,IAC/C,gBAAgB,cAAc,OAAO,aAAa,MAAM,GAAG,cAAc;AAAA,EAC1E;AAAA;;;ACMM,SAAS,qBAAqB,CACpC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,UAAU,UAAU,IAAI,QAAQ,MAAM,GAChD,KACD;AAAA;AAWM,SAAS,mBAAmB,CAClC,QACA,OACmB;AAAA,EACnB,OAAO,gBACN,QACA,EAAE,QAAQ,QAAQ,UAAU,GAAG,QAAQ,MAAM,GAC7C,KACD;AAAA;AAGD,SAAS,eAAe,CACvB,QACA,UACA,OACmB;AAAA,EACnB,QAAQ,WAAW;AAAA,EACnB,IAAI,WAAW,cAAc,OAAO,WAAW,YAAY,WAAW,OAAO;AAAA,IAC5E,MAAM,IAAI,UAAU,GAAG,UAAU,yCAAyC;AAAA,EAC3E;AAAA,EACA,MAAM,WAAW,QAAQ,YAAY,CAAC;AAAA,EACtC,IAAI,aAAa;AAAA,IAAO,OAAO;AAAA,EAC/B,MAAM,KAAK,GAAG,UAAU;AAAA,EACxB,IAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AAAA,IACtD,MAAM,IAAI,UACT,GAAG,4DACJ;AAAA,EACD;AAAA,EACA,MAAM,WAAW,SAAS,YAAY,SAAS;AAAA,EAC/C,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,GAAG;AAAA,IACpD,MAAM,IAAI,UAAU,GAAG,+CAA+C;AAAA,EACvE;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA,UAAU,cAAc,SAAS,UAAU,SAAS,QAAQ,GAAG,WAAW;AAAA,EAC3E;AAAA;;;ACxEM,SAAS,WAAW,CAC1B,MACA,MACA,IACA,WACe;AAAA,EACf,IACC,OAAO,MAAM,WAAW,YACxB,KAAK,WAAW,QAChB,OAAO,KAAK,OAAO,cAAc,aAAa,YAC7C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,OAAO,0EACX;AAAA,EACD;AAAA,EAEA,MAAM,WACL,KAAK,aAAa,YAAY,OAAO,gBAAgB,KAAK,UAAU,EAAE;AAAA,EAEvE,MAAM,aAAa,KAAK,SAAS,cAAc;AAAA,EAE/C,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO,UAAU,KAAK,SAAS,SAAS,GAAG,WAAW;AAAA,IACtD,YAAY,cACX,KAAK,SAAS,YAAY,MAC1B,GAAG,sBACJ;AAAA,IACA,cACC,eAAe,QACZ,OACA,cAAc,YAAY,GAAG,wBAAwB;AAAA,EAC1D;AAAA;AAGD,SAAS,eAAe,CACvB,UACA,IACwC;AAAA,EACxC,MAAM,YAAY,SAAS,aAAa;AAAA,EACxC,IAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAAG;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,yDACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN,OAAO,UAAU,SAAS,OAAO,GAAG,oBAAoB;AAAA,IACxD,WAAW,WACV,SAAS,aAAa,iBACtB,GAAG,wBACJ;AAAA,IACA;AAAA,EACD;AAAA;;;AC3CM,SAAS,aAAa,CAC5B,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UAAU,GAAG,wCAAwC;AAAA,EAChE;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,WAAW,OAAO,UAAU;AAAA,EAClC,IAAI,YAAY,UAAU;AAAA,IACzB,MAAM,IAAI,UACT,GAAG,gGACJ;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ,aAAa,UAAU,QAAQ,QAAQ,GAAG,UAAU,KAAK;AAAA,EACvE,2BAA2B,QAAQ,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA,IACN,QAAQ,CAAC;AAAA,IACT;AAAA,IACA,YAAY,iBAAiB,QAAQ,KAAK;AAAA,IAC1C,QAAQ,cAAc,OAAO,UAAU,CAAC,GAAG,KAAK;AAAA,IAChD,gBAAgB,sBAAsB,OAAO,QAAQ,KAAK;AAAA,IAC1D,cAAc,oBAAoB,OAAO,MAAM,KAAK;AAAA,IACpD,cAAc,oBAAoB,OAAO,cAAc,KAAK;AAAA,IAC5D,SAAS,eAAe,OAAO,SAAS,KAAK;AAAA,EAC9C;AAAA;AAID,SAAS,SAAS,CACjB,QACA,UAC6B;AAAA,EAC7B,OAAO,WACJ,OAAO,QAAQ,OAAO,KAAiC,IACvD;AAAA,IACA;AAAA,MACC;AAAA,MACA;AAAA,WACK;AAAA,QACJ,QAAQ,OAAO;AAAA,MAChB;AAAA,IACD;AAAA,EACD;AAAA;AAGH,SAAS,YAAY,CACpB,SACA,UACA,OAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW,GAAG;AAAA,IACzB,MAAM,IAAI,UAAU,GAAG,oCAAoC;AAAA,EAC5D;AAAA,EAEA,MAAM,QAAQ,IAAI;AAAA,EAClB,YAAY,MAAM,SAAS,SAAS;AAAA,IACnC,MAAM,KAAK,WAAW,GAAG,gBAAgB,SAAS;AAAA,IAElD,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AAAA,MACrB,MAAM,IAAI,UACT,GAAG,yBAAyB,6EAC7B;AAAA,IACD;AAAA,IACA,IAAK,eAAqC,SAAS,IAAI,GAAG;AAAA,MACzD,MAAM,IAAI,UACT,GAAG,WAAW,uEACf;AAAA,IACD;AAAA,IACA,MAAM,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,WAAW,WAAW,MAAM,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGR,SAAS,0BAA0B,CAClC,QACA,OACA,OACO;AAAA,EACP,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI;AAAA,EACzE,IAAI,WAAW,OAAO,WAAW,WAAW;AAAA,IAC3C,MAAM,IAAI,UACT,GAAG,sJACJ;AAAA,EACD;AAAA;AAGD,SAAS,gBAAgB,CACxB,QACA,OAC+B;AAAA,EAC/B,OAAO;AAAA,IACN,aAAa,cACZ,OAAO,QAAQ,eAAe,OAC9B,GAAG,2BACJ;AAAA,IACA,eAAe,cACd,OAAO,QAAQ,iBAAiB,MAChC,GAAG,6BACJ;AAAA,IACA,YAAY,cACX,OAAO,QAAQ,cAAc,OAC7B,GAAG,0BACJ;AAAA,IACA,WAAW,cACV,OAAO,QAAQ,aAAa,OAC5B,GAAG,yBACJ;AAAA,IACA,QAAQ,cACP,OAAO,QAAQ,UAAU,OACzB,GAAG,sBACJ;AAAA,IACA,aAAa,cACZ,OAAO,QAAQ,eAAe,MAC9B,GAAG,2BACJ;AAAA,EACD;AAAA;;ACjID,IAAM,QAAQ;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAEA,IAAM,SAAgD;AAAA,EACrD,CAAC,KAAK,QAAU;AAAA,EAChB,CAAC,KAAK,OAAS;AAAA,EACf,CAAC,KAAK,KAAM;AAAA,EACZ,CAAC,KAAK,IAAK;AACZ;AAGA,SAAS,IAAI,CAAC,IAAoB;AAAA,EACjC,MAAM,OAAO,OAAM,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC;AAAA,EACrD,OAAO,SAAS,YAAY,GAAG,SAAS,GAAG,KAAK,KAAK,KAAK,KAAK;AAAA;AAIzD,SAAS,qBAAqB,CACpC,UACA,OACgB;AAAA,EAChB,MAAM,WAAW,SAAS;AAAA,EAC1B,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,EACrC,MAAM,UAAU,MAAM,OACrB,CAAC,SAAS,SAAS,WAAW,QAAQ,SAAS,QAChD;AAAA,EACA,IAAI,QAAQ,WAAW;AAAA,IAAG,OAAO;AAAA,EACjC,MAAM,WAAW,KAAK,IACrB,GAAG,QAAQ,IAAI,CAAC,SAAS,SAAS,WAAW,KAAK,CACnD;AAAA,EACA,MAAM,QAAQ,QAAQ,IACrB,CAAC,SACA,UAAU,WAAW,KAAK,SAAS,WAAW,KAAK,yCAAyC,QAC9F;AAAA,EACA,OAAO,GAAG,UAAU,MAAM,KAAK,IAAI,+BAA+B,QAAQ,WAAW,IAAI,UAAU,iFAAiF,KAAK,QAAQ,uBAAuB,QAAQ,IAAI,CAAC,SAAS,UAAU,MAAM,EAAE,KAAK,IAAI,QAAQ;AAAA;AAI3Q,SAAS,kBAAkB,CACjC,UACA,OACO;AAAA,EACP,MAAM,UAAU,sBAAsB,UAAU,KAAK;AAAA,EACrD,IAAI,YAAY;AAAA,IAAM;AAAA,EACtB,IACC,OAAO,YAAY,eACnB,OAAO,QAAQ,gBAAgB,YAC9B;AAAA,IACD;AAAA,EACD;AAAA,EACA,QAAQ,YAAY,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAAA;;;ACxCxD,SAAS,aAAa,CAC5B,QACA,OACA,WACA,cACA,OACA,QACA,WACA,SAAmC,MACzB;AAAA,EACV,IAAI,QAAgC;AAAA,EAEpC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,MAAM;AAAA,MAChB,IAAI,WAAW,MAAM;AAAA,QACpB,MAAM,IAAI,UAAU,+CAA+C;AAAA,MACpE;AAAA,MACA,UAAU,OAAO,KAAK,eAAe,QAAO,GAAG;AAAA,MAC/C,OAAO;AAAA;AAAA,EAET;AAAA;;AC7CM,SAAS,OAAO,CAAC,MAAoB,QAAmC;AAAA,EAC9E,MAAM,QAAQ,OAAO,KAAK;AAAA,EAC1B,OAAO,OAAO,UAAU,WAAW,QAAQ;AAAA;AAQrC,SAAS,QAAQ,CACvB,MACA,QACA,OACW;AAAA,EACX,MAAM,SAAS,IAAI;AAAA,EAEnB,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,IAAI,OAAO,UAAU,UAAU;AAAA,MAC9B,MAAM,IAAI,UACT,0BAA0B,KAAK,SAAS,6CAA6C,KAAK,oDAC3F;AAAA,IACD;AAAA,IACA,MAAM,aAAa,KAAK,SAAS,UAAU,KAAK;AAAA,IAIhD,IAAI,CAAC,WAAW,UAAU,GAAG;AAAA,MAC5B,MAAM,OAAO,CAAC,KAAK,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,4BAA4B,KAAK,KAAK,GAAG,MACvF;AAAA,QACC,QAAQ;AAAA,UACP,EAAE,MAAM,SAAS,8BAA8B,aAAa;AAAA,QAC7D;AAAA,QACA,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO,IAAI,UAAU;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAClC,IAAI,UAAU;AAAA,IAAM,OAAO,IAAI,eAAe,KAAK,CAAC;AAAA,EAEpD,OAAO,CAAC,GAAG,MAAM;AAAA;AAQlB,eAAsB,aAAa,CAClC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,eAAe,KAAK;AAAA,EACnC,IAAI,CAAC,WAAW,MAAM;AAAA,IAAG,OAAO;AAAA,EAChC,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,MAAM;AAAA,EAC1E,MAAM,OAAO,WAAW,OAAO,OAAO,QAAQ,MAAM,OAAO,MAAM;AAAA,EACjE,OAAO,SAAS,QAAQ,eAAe,IAAI,MAAM,SAAS,SAAS;AAAA;;ACtC7D,SAAS,WAAW,CAAC,QAAkC;AAAA,EAC7D,OAAO;AAAA,IACN,OAAO,WAAW,SAAS,OAAO,KAAK;AAAA,IACvC,UAAU,WAAW,YAAY,OAAO,QAAQ;AAAA,IAChD,QAAQ,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AAAA;AAUM,SAAS,QAAW,CAAC,OAAiB,QAA6B;AAAA,EACzE,IAAI,UAAU;AAAA,IAAM,MAAM,OAAO;AAAA,EACjC,OAAO;AAAA;AAcR,eAAsB,qBAAwB,CAC7C,OACoB;AAAA,EACpB,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAW,OAAO;AAAA,IACrE,MAAM;AAAA;AAAA;AAaR,eAAsB,gBAAmB,CACxC,OAC6B;AAAA,EAC7B,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACZ,OAAO,OAAO;AAAA,IACf,IAAI,iBAAiB,kBAAiB,MAAM,OAAO;AAAA,MAAS,OAAO;AAAA,IACnE,MAAM;AAAA;AAAA;;;ACnFD,SAAS,YAAY,CAAC,MAAoB,OAAe;AAAA,EAC/D,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,4EACvB;AAAA,EACD;AAAA,EACA,OAAO,KAAK;AAAA;AAIN,SAAS,aAAa,CAC5B,MACA,UACA,OACO;AAAA,EACP,MAAM,YAAY,KAAK,UAAU,aAAa;AAAA,EAC9C,IAAI,OAAO,aAAa,YAAY,SAAS,SAAS,WAAW;AAAA,IAChE,MAAM,IAAI,iBACT,sBACA,GAAG,oDAAoD,wBACvD,EAAE,WAAW,UAAU,KAAK,KAAK,CAClC;AAAA,EACD;AAAA;AAIM,SAAS,aAAa,CAAC,SAAkB,OAA+B;AAAA,EAC9E,IAAI,QAAQ,WAAW,MAAM;AAAA,IAC5B,MAAM,IAAI,UACT,GAAG,yFACJ;AAAA,EACD;AAAA,EACA,OAAO,QAAQ;AAAA;AAOhB,eAAsB,eAAe,CACpC,SACA,QACA,UACA,OACmB;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,WAAW,QAAQ,UAAU,KAAK,CAAC,cACxC,OAAO,KAAK,WAAW,UAAU,MAAM,CACxC;AAAA,EACA,IAAI,aAAa,WAAW;AAAA,IAC3B,MAAM,aAAa,aAAa,KAAK,OAAO,IAAI,IAAI,MAAM;AAAA,IAC1D,MAAM,IAAI,iBACT,oBACA,GAAG,+CAA+C,eAClD,EAAE,YAAY,QAAQ,OAAO,IAAI,UAAU,OAAO,KAAK,CACxD;AAAA,EACD;AAAA,EAEA,OAAO,SAAS,OAAO,UAAU,OAAO,IAAI;AAAA;AAY7C,eAAsB,QAAQ,CAC7B,SACA,QACA,UACsB;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,WAAW,QAAQ,WAAW;AAAA,IAAM,OAAO;AAAA,EAE/C,MAAM,QACL,CAAC,OAAO,KAAK,WAAW,OAAO,MAAM,KACrC,OAAO,cAAc,OAAO,IAAI,MAAM;AAAA,EACvC,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,MAAM,UAAU,MAAM,sBACrB,QAAQ,MAAM,MAAM,WACnB,OAAO,IACP;AAAA,IACC,WAAW,QAAQ,MAAM,IAAI;AAAA,IAE7B,UAAU;AAAA,MACT,MAAM,MAAM,OAAO,KAAK,QAAQ;AAAA,MAChC,WAAW,OAAO;AAAA,IACnB;AAAA,EACD,GACA,OAAO,OACR,CACD;AAAA,EACA,OAAO,WAAW;AAAA;;ACnGZ,SAAS,MAAM,CAAC,QAA6B;AAAA,EACnD,OAAO;AAAA,OACH,OAAO;AAAA,IACV,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,eAAe,OAAO,oBAAoB;AAAA,IAC1C,QAAQ,OAAO;AAAA,IACf,aAAa,OAAO,aAAa;AAAA,IACjC,iBAAiB,OAAO,cAAc,eAAe;AAAA,IACrD,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACnB;AAAA;AAIM,IAAM,OAAO,CAAC,SACpB,OAAO,SAAS,WAAW,OAAO,KAAK;AAQjC,SAAS,KAAK,CAAC,MAAuB;AAAA,EAC5C,IAAI,OAAO,SAAS;AAAA,IAAU,OAAO;AAAA,EACrC,MAAM,KACL,OAAO,SAAS,YAAY,SAAS,OAAO,KAAK,KAAK;AAAA,EACvD,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA;;;AC5BtC,IAAM,WAAW,CAAC,OAAe,IAAY,SAC5C,IAAI,eACH,GAAG,aAAa,QAAQ,sBACxB,SAAS,OACN,EAAE,QAAQ,IAAI,WAAW,MAAM,IAC/B,EAAE,QAAQ,IAAI,UAAU,MAAM,WAAW,MAAM,CACnD;AAQD,eAAsB,UAAU,CAC/B,SACA,IACA,MAC6B;AAAA,EAC7B,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EACtB,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,SAAS,EAAE;AAAA,EACpD,OAAO,WAAW,SAAS,SAAS,QAAQ,OAAO,SAAS,QACzD,SACA;AAAA;AAIJ,eAAsB,SAAS,CAC9B,SACA,IACA,MACA,OACsB;AAAA,EACtB,OAAO,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,GAAG,MACpD,SAAS,OAAO,IAAI,IAAI,CACzB;AAAA;AASD,eAAsB,SAAS,CAC9B,SACA,MACA,MACA,SACA,OACA,SAIsB;AAAA,EACtB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,MAAM,YAAY,SAAS;AAAA,EAE3B,IAAI,cAAc,aAAa,cAAc,OAAO,SAAS;AAAA,IAC5D,MAAM,IAAI,eACT,WACA,GAAG,2BAA2B,oBAAoB,OAAO,WACzD;AAAA,MACC,QAAQ;AAAA,MACR,iBAAiB;AAAA,MACjB,eAAe,OAAO;AAAA,MACtB,WAAW;AAAA,IACZ,CACD;AAAA,EACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG;AAAA,EACvC,OAAO,QAAQ,MAAM,MAAM,WAC1B,OAAO,IACP,KAAK,OAAO,WAAW,IAAI,GAC3B,OAAO,OACR;AAAA;;AC7ED,eAAsB,cAAc,CACnC,MACA,OACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,KAAK,OAAO,aAAa,SAAS,KAAK;AAAA,EAE5D,MAAM,SACL,OAAO,WAAW,YACf,CAAC,IACD,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC9B,MAAM,gBAAgB,MAAM,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC;AAAA,IACvD,SAAS,MAAM;AAAA,EAChB,EAAE;AAAA,EAKL,IAAI,OAAO,WAAW,WAAW;AAAA,IAChC,MAAM,QAAQ,OAAO;AAAA,IACrB,WAAW,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,OAAO,OAAO,GAAG,GAAG;AAAA,QAC9B,OAAO,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,SAAS,iCAAiC,CAAC;AAAA,MACvE;AAAA,IACD;AAAA,IACA,aAAa,OAAO,CAAC,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,IAAI,OAAO,SAAS,GAAG;AAAA,IAItB,MAAM,IAAI,kBACT,GAAG,sCAAsC,KAAK,gBAAgB,OAAO,eAAe,OAAO,WAAW,IAAI,KAAK,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,EAAE,KAAK,IAAI,MACnL,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EACD;AAAA,EAEA,OAAO,iBAAkB,OAA8B,KAAK;AAAA;AAI7D,SAAS,YAAY,CACpB,OACA,MACA,QACO;AAAA,EACP,IAAI,OAAO,UAAU,UAAU;AAAA,IAC9B,IAAI,CAAC,WAAW,KAAK;AAAA,MAAG,OAAO,KAAK,EAAE,MAAM,SAAS,WAAW,CAAC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,YAAY,OAAO,UAAU,MAAM,QAAQ,GAAG;AAAA,MAC7C,aAAa,OAAO,CAAC,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,IAC7C;AAAA,IACA;AAAA,EACD;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAGjD,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,QACrB,OAAO,KAAK,EAAE,MAAM,SAAS,SAAS,aAAa,CAAC;AAAA,MACrD,EAAO;AAAA,QACN,aAAa,OAAO,CAAC,GAAG,MAAM,GAAG,GAAG,MAAM;AAAA;AAAA,IAE5C;AAAA,EACD;AAAA;AAOD,SAAS,cAAc,CAAC,MAAgD;AAAA,EACvE,MAAM,MAAM,KAAK,UAChB,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,WAAW,OAAO,CAChE;AAAA,EACA,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG;AAAA;AAG7C,SAAS,UAAU,CAClB,SACkB;AAAA,EAClB,MAAM,MAAM,OAAO,YAAY,WAAW,QAAQ,MAAM;AAAA,EACxD,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AAAA;AAGlD,SAAS,gBAAgB,CAAC,OAAsB;AAAA,EAC/C,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,gBAAgB;AAAA,EAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAChD,MAAM,MAA4B,CAAC;AAAA,IACnC,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjD,IAAI,UAAU;AAAA,QAAW,IAAI,OAAO,iBAAiB,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;;ACfD,SAAS,aAAa,CAC5B,QACA,OAC2B;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,IAAI,UACT,GAAG,mHACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAUR,eAAsB,IAAI,CACzB,SACA,MACA,MACA,YACA,SAAsB,CAAC,GACP;AAAA,EAChB,MAAM,WAAW,QAAQ;AAAA,EACzB,IAAI,aAAa;AAAA,IAAM;AAAA,EAEvB,MAAM,QAAmB,OAAO,OAAO;AAAA,IACtC,IAAI,QAAO,WAAW,QAAQ,CAAC;AAAA,IAC/B;AAAA,IAEA,YAAY,IAAI,KAAK,WAAW,QAAQ,CAAC;AAAA,IACzC,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,OACZ;AAAA,EACJ,CAAC;AAAA,EACD,IAAI;AAAA,IACH,MAAM,SAAS,KAAK;AAAA,IACnB,OAAO,SAAS;AAAA,IACjB,QAAQ,YACP,wCAAwC,QAAQ,MAAM,eAAe,KAAK,OAAO,mBAAmB,QAAQ,QAAQ,OAAO,OAAO,WAClI,EAAE,MAAM,qBAAqB,CAC9B;AAAA;AAAA;;;AChJF;AAUA,IAAM,UAAU,IAAI;AAMb,SAAS,UAAU,CACzB,QACA,SACA,QAAgB,OAAO,UACF;AAAA,EACrB,IAAI,OAAO,QAAQ,IAAI,MAAM;AAAA,EAC7B,IAAI,SAAS,WAAW;AAAA,IACvB,OAAO,IAAI;AAAA,IACX,QAAQ,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EACA,MAAM,OAAO,GAAG,cAAgB;AAAA,EAChC,IAAI,MAAM,KAAK,IAAI,IAAI;AAAA,EACvB,IAAI,QAAQ,WAAW;AAAA,IACtB,MAAM,SAAS,OAAO,KAAK,IAAI,KAAK;AAAA,IACpC,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,UAAU,QAAQ,OAAO,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;AAAA,IAC1E,KAAK,IAAI,MAAM,GAAG;AAAA,EACnB;AAAA,EACA,OAAO;AAAA;AAID,SAAS,SAAS,CAAC,KAAa,OAAkC;AAAA,EACxE,OAAO,WAAW,UAAU,GAAG,EAAE,OAAO,MAAM,KAAK,MAAQ,CAAC,EAAE,OAAO;AAAA;;;ACrB/D,SAAS,UAAU,CAAC,SAAkB,SAAyB;AAAA,EACrE,MAAM,SAAS,QAAQ,OAAO,cAAc;AAAA,EAE5C,OAAO,WAAW,YACf,OAAO,KAAK,OAAO,IAClB,WAAW,QAAQ,OAAO;AAAA;AAIxB,IAAM,QAAQ,CAAC,KAAa,UAClC,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW;;;ACtB3C,4BAAS;;;ACNT,oCAAqB;AAQd,SAAS,UAAU,GAAW;AAAA,EACpC,OAAO,aAAY,EAAE,EAAE,SAAS,WAAW;AAAA;AAWrC,SAAS,UAAU,CAAC,QAAwB;AAAA,EAClD,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AAAA;;;ACDjD,SAAS,WAAW,CAC1B,MACA,MACA,OACA,OACA,MACO;AAAA,EACP,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IACC,UAAU,QACV,eAAe,KAAK,MAAM,eAAe,MAAM,OAAO,GACrD;AAAA,IACD,MAAM,IAAI,YACT,eACA,GAAG,cAAc,qDACjB,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAQM,SAAS,cAAc,CAC7B,OACA,KACA,OACA,MAC+B;AAAA,EAC/B,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,MAClE,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,YAAY,MAAM;AAAA,IAC3B,MAAM,IAAI,YACT,eACA,GAAG,cAAc,yBACjB,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,IAAI,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,IAC/C,MAAM,IAAI,YAAW,iBAAiB,GAAG,cAAc,oBAAoB;AAAA,MAC1E,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA;AAIM,IAAM,iBAAiB,CAAC,OAAe,SAC7C,IAAI,YAAW,iBAAiB,GAAG,kBAAkB,QAAQ;AAAA,EAC5D,WAAW;AACZ,CAAC;;;AC3DF,eAAsB,YAAY,CACjC,SACA,QACA,MACA,OACA,MACuB;AAAA,EACvB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,MACA,GACD;AAAA,EACA,eAAe,OAAO,KAAK,OAAO,IAAI;AAAA,EACtC,OAAO;AAAA;AAQR,eAAsB,WAAW,CAChC,SACA,QACA,MACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,aAC1B,WAAW,MAAM,GACjB,MACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AH1BM,IAAM,gBAAgB;AAQ7B,eAAsB,gBAAgB,CACrC,SACA,QACA,MACA,OACA,UAC0E;AAAA,EAC1E,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO,aACxC,WAAW,MAAM,GACjB,IACD;AAAA,EACA,eAAe,OAAO,QAAQ,MAAM,IAAI,GAAG,OAAO,WAAW;AAAA,EAC7D,IAAI,MAAM,WAAW,eAAe;AAAA,IACnC,MAAM,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC;AAAA,EACnD;AAAA,EACA,OAAO,EAAE,OAAO,cAAc,gBAAgB,MAAM,SAAS;AAAA;AAOvD,SAAS,WAAW,CAC1B,OACA,QACA,UACA,cACa;AAAA,EACb,OAAO,IAAI,YACV,gBACA,GAAG,uDACH;AAAA,IACC,WAAW;AAAA,IACX;AAAA,IACA;AAAA,OACI,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa;AAAA,EACtD,CACD;AAAA;AASD,eAAsB,gBAAgB,CACrC,SACA,OACA,QACA,OACsB;AAAA,EACtB,IAAI,MAAM,aAAa,eAAe;AAAA,IACrC,MAAM,YAAY,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC9C;AAAA,EACA,OAAO,eAAe,OAAO,WAAW;AAAA;AAQlC,IAAM,WAAW,CAAC,WAAmB,SAC3C,WAAW,GAAG,YAAY,MAAM;AAG1B,SAAS,WAAW,CAC1B,OACA,WACA,MACU;AAAA,EACV,IAAI,MAAM,aAAa,QAAQ,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAC7D,MAAM,QAAQ,OAAO,KAAK,SAAS,WAAW,IAAI,CAAC;AAAA,EACnD,MAAM,OAAO,OAAO,KAAK,MAAM,QAAQ;AAAA,EACvC,OAAO,MAAM,WAAW,KAAK,UAAU,iBAAgB,OAAO,IAAI;AAAA;;AIlGnE;AAuBA,eAAsB,YAAY,CACjC,SACA,OAOiE;AAAA,EACjE,OAAO,cAAc,SAAS,OAAO,MAAM,MAAM,aAAa,IAAI;AAAA;AAOnE,eAAsB,SAAS,CAC9B,SACA,OAKE;AAAA,EACF,MAAM,OAAO,OAAO,UAAU,GAAS,CAAC,EAAE,SAAS,GAAG,GAAG;AAAA,EACzD,OAAO,KAAM,MAAM,cAAc,SAAS,OAAO,MAAM,IAAI,GAAI,KAAK;AAAA;AAGrE,eAAe,aAAa,CAC3B,SACA,OACA,MACA,WACiE;AAAA,EACjE,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,SAAS,MAAM,UAAU,WAAW;AAAA,EAC1C,MAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,KAAK;AAAA,EAEtD,MAAM,QAAQ,MAAM,OAAO,YAAY;AAAA,IACtC,WAAW,WAAW,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,SAAS,OAAO,YAAY,SAAS,QAAQ,IAAI;AAAA,IAC3D,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,EACZ,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,UAAU;AAAA;;ACnDrB,IAAM,YAAY;AAMzB,IAAM,aAAa;AAmCnB,eAAsB,aAAa,CAClC,SACA,UAC0B;AAAA,EAC1B,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,QAAQ;AAAA,EAIjD,MAAM,aAAa,SAAS,KAAK,SAAS;AAAA,EAC1C,MAAM,QAAQ,EAAE,SAAS,UAAU,QAAQ,KAAK,UAAU;AAAA,EAC1D,MAAM,UACL,SAAS,UAAU,UAChB,MAAM,cAAc,KAAK,IACzB,MAAM,gBAAgB,KAAK;AAAA,EAC/B,OAAO,KAAK,SAAS,SAAS,SAAS,KAAK,SAAS,SAAS;AAAA;AAI/D,eAAe,aAAa,CAC3B,OAC0C;AAAA,EAC1C,IAAI,UAAU;AAAA,EACd,SAAS,OAAO,EAAG,OAAO,WAAW,QAAQ,GAAG;AAAA,IAC/C,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,MAAM,UAAU,OAAO,IAAI;AAAA,IAC3C,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,IAAI,QAAQ,YAAY;AAAA,MAAM,OAAO,EAAE,UAAU,MAAM,KAAK;AAAA,IAC5D,UAAU;AAAA,EACX;AAAA,EACA,OAAO,EAAE,UAAU,OAAO,mBAAmB,MAAM,KAAK;AAAA;AAWzD,eAAe,eAAe,CAC7B,OAC0C;AAAA,EAC1C,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,IAAI,SAAS,OAAO;AAAA,EACpB,SAAS,SAAS,EAAG,SAAS,YAAY,UAAU,GAAG;AAAA,IACtD,MAAM,OAAO,WAAW,QAAQ;AAAA,IAChC,MAAM,OAAO,OACV,SACA,WAAW,OAAO,oBACjB,IAAI,QAAQ,IACZ,KAAK,OAAO,QAAQ,UAAU,CAAC;AAAA,IACnC,MAAM,OAAO,MAAM,SAAS,SAAS,MAAM,QAAQ,IAAI;AAAA,IACvD,MAAM,UAAU,OACb,MAAM,WAAW,OAAO,IAAI,IAC5B,MAAM,OAAO,aAAa,MAAM,cAAc;AAAA,IACjD,IAAI,YAAY;AAAA,MAAM,SAAS;AAAA,IAC1B,SAAI,QAAQ,YAAY,MAAM;AAAA,MAClC,OAAO,EAAE,UAAU,QAAQ,UAAU,MAAM,KAAK;AAAA,IACjD,EAAO;AAAA,MACN,QAAQ;AAAA,MAER,IAAI,UAAU;AAAA,QAAO,SAAS,OAAO;AAAA;AAAA,EAEvC;AAAA,EAEA,MAAM,MAAM,SAAS,SAAS;AAAA;AAI/B,eAAe,SAAS,CACvB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,UAAU,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACnE,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA;AAI9C,eAAe,UAAU,CACxB,OACA,WACuB;AAAA,EACvB,MAAM,SAAS,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,OAAO,YAAY;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,QAAQ,MAAM,SAAS;AAAA,IACvB,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,WAAW,IAAI,KAAK,MAAM,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,WAAW,IAAI,KAAK,MAAM,GAAG;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW,cAAc;AAAA,EACpE,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,SAAS,SAAS;AAAA;;ACvH/B,IAAM,UAAU;AAyBhB,eAAsB,kBAAkB,CACvC,SACA,MACA,MACA,OACA,OACA,QACgB;AAAA,EAChB,MAAM,UACL,SACA,MACA,MACA;AAAA,IACC,SAAS,eAAe,KAAK;AAAA,OACzB,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,EAC1C,GACA,KACD;AAAA;AAID,eAAsB,eAAe,CACpC,SACA,MACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK;AAAA;AAGvD,eAAe,SAAS,CACvB,SACA,MACA,MACA,SACA,OACgB;AAAA,EAChB,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM;AAAA,EACvB,MAAM,MAAM,WAAW,SAAS,OAAO;AAAA,EACvC,MAAM,UACL,aAAa,UACV,MAAM,KAAK,CAAC,MAAM,WAAW,QAAQ,OAAO,CAAC,IAC7C,MAAM,KAAK,CAAC,MAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,EAC7C,QAAQ,UAAU,WAAW,MAAM,cAAc,SAAS;AAAA,IACzD,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,SAAS,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAE/D,UAAU,MACT,IAAI,cACH,GAAG,6DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA,EACD,IAAI,YAAY,SAAS;AAAA,IAAU;AAAA,EAEnC,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,oBACT,GAAG,0CAA0C,aAAa,UAAU,YAAY,+EAChF;AAAA,IACC,UAAU,KAAK;AAAA,OACX,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,IACjE,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,CAAC;AAAA,EACzD,CACD;AAAA;;;ACzID,IAAM,aAAa,CAAC,UACnB,UAAU,OAAO,OAAO,eAAe,KAAK;AAOtC,SAAS,YAAY,CAC3B,MACA,QACA,OACU;AAAA,EACV,OAAO,WAAW,QAAQ,MAAM,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,KAAK,CAAC;AAAA;AAO7E,eAAsB,WAAW,CAChC,MACA,QACA,OACA,OACC;AAAA,EACD,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,OAAO,WAAW,MAAM,GAC7B,KACD;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,eAAe,KAAK;AAAA,OAEhB,aAAa,MAAM,OAAO,QAAQ,MAAM,IACzC,EAAE,iBAAiB,KAAK,IACxB,CAAC;AAAA,EACL;AAAA;;;AC1BM,IAAM,aAAa,CAAC,QAAgB,WAC1C,WACC,+BAA6B,aAAW,eAAe,UAAU,EAAE,GACpE;AAQD,eAAsB,YAAY,CACjC,MACA,MACA,OACA,OACkB;AAAA,EAClB,MAAM,SAAS,MAAM,eACpB,MACA,KAAK,KAAK,SAAS,KAAK,QAAQ,MAAM,GACtC,KACD;AAAA,EACA,MAAM,UAAU,QAAQ,MAAM,MAAM;AAAA,EACpC,IAAI,YAAY,MAAM;AAAA,IACrB,MAAM,IAAI,UACT,iBAAiB,KAAK,6CAA6C,KAAK,uEACzE;AAAA,EACD;AAAA,EACA,IACC,eAAe,OAAO,MAAM,eAAe,QAAQ,MAAM,KAAK,MAAM,KAAK,EAAE,GAC1E;AAAA,IACD,MAAM,IAAI,kBACT,GAAG,2HACH;AAAA,MACC,QAAQ;AAAA,QACP,EAAE,MAAM,CAAC,KAAK,KAAK,GAAG,SAAS,oCAAoC;AAAA,MACpE;AAAA,MACA,UAAU,KAAK;AAAA,IAChB,CACD;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAOR,eAAsB,qBAAqB,CAC1C,SACA,MACA,MACA,SACuB;AAAA,EACvB,MAAM,SAAS,WAAW;AAAA,EAC1B,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACjD,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC;AAAA,IACA,WAAW,WAAW,QAAQ,QAAQ,MAAM,KAAK,MAAM,CAAC;AAAA,EACzD,CAAC;AAAA,EAGD,MAAM,QAAQ,MAAM,OAAO,gBAC1B,KAAK,IACL,eACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA,EACA,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,UAAU;AAAA;AAO5C,SAAS,WAAW,CAC1B,MACA,MACA,OACA,QACA,OACO;AAAA,EACP,IAAI,MAAM,aAAa,WAAW,QAAQ,QAAQ,MAAM,KAAK,MAAM,CAAC,GAAG;AAAA,IACtE,MAAM,IAAI,YACT,eACA,GAAG,oEACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA;AAYD,eAAsB,sBAAsB,CAC3C,SACA,MACA,QACA,OACwE;AAAA,EACxE,MAAM,QAAQ,MAAM,aACnB,SACA,QACA,eACA,OACA,OACD;AAAA,EACA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,MAAM,QAAQ,IAAI;AAAA,EACvE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,IAAI,MAAM,QAAQ,EAAE;AAAA,EAC/D,IAAI,SAAS,QAAQ,UAAU;AAAA,IAC9B,MAAM,eAAe,OAAO,OAAO;AAAA,EAGpC,IAAI,QAAQ,OAAO,KAAK,MAAM,MAAM;AAAA,IACnC,MAAM,eAAe,OAAO,OAAO;AAAA,EAEpC,YAAY,OAAO,MAAM,OAAO,QAAQ,KAAK;AAAA,EAC7C,OAAO,EAAE,OAAO,MAAM,MAAM,MAAM;AAAA;;;ACpHnC,IAAM,WAAW,CAAC,MAAoB,MAAkB,UACvD,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,EACvD,QAAQ,KAAK;AAAA,EACb,UAAU,KAAK;AAChB,CAAC;AAGK,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM,OAAO;AAAA,MACvB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACpE,IAAI,CAAC,OAAO;AAAA,QAAQ,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,MAMtD,MAAM,UAAU,MAAM,aAAa,MAAM,QAAQ,OAAO,KAAK;AAAA,MAC7D,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,MAAM,mBACL,SACA,MACA,eACA,SACA,OACA,OAAO,EACR;AAAA,MACA,OAAO,sBAAsB,SAAS,MAAM,QAAQ,OAAO;AAAA;AAAA,SAGtD,QAAO,CAAC,QAAQ;AAAA,MACrB,OAAO,cAAc,SAAS,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAAA;AAAA,EAEvE;AAAA;AAQD,eAAsB,aAAa,CAClC,SACA,OACA,QACA,OACmB;AAAA,EACnB,QAAQ,OAAO,MAAM,SAAS,MAAM,uBACnC,SACA,OACA,QACA,KACD;AAAA,EACA,IAAI,CAAC,KAAK;AAAA,IAAQ,MAAM,SAAS,MAAM,MAAM,KAAK;AAAA,EAGlD,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IAEtB,IAAI,CAAC,OAAO;AAAA,MAAQ,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,IACtD,YAAY,MAAM,QAAQ,OAAO,QAAQ,KAAK;AAAA,IAC9C,KAAK,WAAW;AAAA,IAChB,MAAM,QAAQ,MAAM,YACnB,MACA,QACA,GAAG,KAAK,QAAQ,MAAM,QAAQ,GAC9B,KACD;AAAA,IAIA,MAAM,SACL,OAAO,oBAAoB,QAC3B,aAAa,MAAM,OAAO,QAAQ,MAAM,MAAM;AAAA,IAC/C,OAAO,SAAS,KAAK,OAAO,iBAAiB,IAAI,IAAI;AAAA,GAEvD;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,MAAM,QACL,aAAa,QAAQ,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM;AAAA,EACxE,IAAI,aAAa,QAAQ,OAAO;AAAA,IAC/B,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,MACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,IAC3C,CAAC;AAAA,EACF;AAAA,EACA,IAAI,SAAS,UAAU,oBAAoB,MAAM;AAAA,IAChD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,EACrE;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;ACjHf,SAAS,kBAAkB,CAAC,SAEjC;AAAA,EACD,OAAO;AAAA,IACN,aAAa;AAAA,MACZ,SAAS,CAAC,WACT,cAAc,SAAS,MAAM,QAAQ,qBAAqB;AAAA,IAC5D;AAAA,EACD;AAAA;;;ACdD,IAAM,WAAW;AAAA,EAChB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,UAAU;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAAA,EACA,QAAQ;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAeO,SAAS,YAAY,CAC3B,QACA,OACoB;AAAA,EACpB,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,gEACJ;AAAA,EACD;AAAA,EAEA,WAAW,QAAQ,OAAO,KAAK,QAAQ,GAAgC;AAAA,IACtE,MAAM,QAAkB,OAAmC;AAAA,IAE3D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,MAChD,MAAM,IAAI,UAAU,GAAG,gBAAgB,iBAAiB;AAAA,IACzD;AAAA,IAEA,WAAW,UAAU,SAAS,OAAO;AAAA,MACpC,IAAI,OAAQ,MAAkC,YAAY,YAAY;AAAA,QACrE,MAAM,IAAI,UACT,GAAG,gBAAgB,sBAAsB,iCAC1C;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,QAAQ;AAAA,EAId,OAAO;AAAA,IACN,gBAAgB,SAAS,OAAO,YAAY,yBAAyB,KAAK;AAAA,IAC1E,sBAAsB,SACrB,OACA,UACA,uBACA,KACD;AAAA,IACA,WAAW,SAAS,OAAO,SAAS,aAAa,KAAK;AAAA,EACvD;AAAA;AAQD,SAAS,QAAQ,CAChB,QACA,MACA,QACA,OACU;AAAA,EACV,MAAM,QAAQ,OAAO,MAAM;AAAA,EAC3B,IAAI,UAAU,aAAa,OAAO,UAAU,YAAY;AAAA,IACvD,MAAM,IAAI,UACT,GAAG,gBAAgB,QAAQ,qCAC5B;AAAA,EACD;AAAA,EACA,OAAO,UAAU;AAAA;;;AC5GlB,wBAAS,iCAAa;AAgBtB,IAAM,WAAU;AAEhB,IAAM,QACL;AAED,SAAS,KAAK,CAAC,KAAa,QAAgB,UAA0B;AAAA,EACrE,OAAO,UAAU,KAAK,CAAC,QAAQ,QAAQ,CAAC;AAAA;AAGzC,SAAS,MAAM,CAAC,QAAgB,QAAgB,UAA0B;AAAA,EAEzE,MAAM,MAAM,WAAW,QAAQ,QAAO;AAAA,EACtC,MAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,SAAS,WAAW;AAAA,EAC7D,OAAO,MAAM,OAAO,YAAY,YAAY;AAAA;AAItC,SAAS,eAAe,CAAC,QAAgB,QAAwB;AAAA,EACvE,OAAO,OAAO,QAAQ,QAAQ,aAAY,EAAE,EAAE,SAAS,WAAW,CAAC;AAAA;AAW7D,SAAS,gBAAgB,CAC/B,QACA,QACA,WACgB;AAAA,EAChB,SAAS,OAAO,UAAU,OAAO,MAAM,KAAK,SAAS,KAAK,CAAC;AAAA,EAC3D,IAAI,UAAU,aAAa,aAAa,aAAa,QAAQ,WAAW;AAAA,IACvE,OAAO;AAAA,EACR;AAAA,EACA,MAAM,MAAM,WAAW,QAAQ,UAAS,KAAK;AAAA,EAC7C,IAAI,QAAQ;AAAA,IAAW,OAAO;AAAA,EAE9B,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ;AAAA,EAC5C,MAAM,QAAQ,OAAO,KAAK,KAAK,WAAW;AAAA,EAC1C,IAAI,MAAM,WAAW,SAAS,UAAU,CAAC,iBAAgB,OAAO,QAAQ,GAAG;AAAA,IAC1E,OAAO;AAAA,EACR;AAAA,EACA,OAAO,UAAU,OAAO,WACrB,YACA,OAAO,QAAQ,QAAQ,QAAQ;AAAA;;;AC9C5B,IAAM,YAA2B,OAAO,OAAO;AAAA,EACrD,WAAW;AAAA,EACX,aAAa;AACd,CAAC;AASM,SAAS,UAAU,CACzB,SACA,SACA,OACa;AAAA,EACb,IACC,YAAY,cACX,OAAO,YAAY,YAAY,YAAY,OAC3C;AAAA,IACD,MAAM,IAAI,UACT,GAAG,8EACJ;AAAA,EACD;AAAA,EACA,MAAM,SAAS,SAAS;AAAA,EACxB,IAAI,WAAW;AAAA,IAAW;AAAA,EAC1B,IAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AAAA,IAClD,MAAM,IAAI,UACT,GAAG,6FACJ;AAAA,EACD;AAAA,EACA,IAAI,QAAQ,OAAO,YAAY,MAAM;AAAA,IACpC,MAAM,IAAI,UACT,GAAG,gFACJ;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAQD,SAAS,aAAa,CAC5B,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,EACvC,IAAI,SAAS,aAAa,WAAW;AAAA,IAAW,OAAO;AAAA,EAEvD,MAAM,QACL,SAAS,QAAQ,SAAS,OAAO,iBAAiB,QAAQ,QAAQ,IAAI;AAAA,EACvE,IAAI,UAAU;AAAA,IAAM,OAAO,EAAE,WAAW,OAAO,aAAa,MAAM;AAAA,EAClE,OAAO;AAAA,IACN,WAAW,CAAC;AAAA,IACZ,aAAa,gBAAgB,QAAQ,MAAM;AAAA,EAC5C;AAAA;;ACnED,eAAsB,eAAe,CACpC,SACA,QACgB;AAAA,EAChB,IAAI,OAAO,WAAW,cAAc,CAAC,OAAO;AAAA,IAAW;AAAA,EACvD,MAAM,KACL,SACA,0BACA,OAAO,MACP,OAAO,QAAQ,WACf,EAAE,WAAW,OAAO,QAAQ,GAAG,CAChC;AAAA;;ACRM,SAAS,SAAS,CAAC,QAAgC;AAAA,EACzD,QAAQ,WAAW,MAAM,YAAY;AAAA,EACrC,OAAO;AAAA;AAYR,eAAsB,WAAW,CAChC,SACA,MACA,MACA,QACA,SAAS,OACoB;AAAA,EAC7B,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,WAAW;AAAA,EACzB,MAAM,SAAwB;AAAA,IAC7B,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,WAAW,WAAW,KAAK;AAAA,IAC3B,QAAQ,KAAK;AAAA,IACb,iBAAiB;AAAA,IACjB,WAAW,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,UAAU;AAAA,IACnD,WAAW;AAAA,IACX,WAAW;AAAA,EACZ;AAAA,EAEA,MAAM,QAAQ,MAAM,SAAS,cAAc,MAAM;AAAA,EACjD,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,MAAM;AAAA,IACzB;AAAA,OACG,cAAc,SAAS,KAAK,IAAI,QAAQ,MAAM;AAAA,EAClD;AAAA;;ACrCM,SAAS,cAAc,CAC7B,SACA,YACgB;AAAA,EAChB,MAAM,UAAU,UAAU,OAAO;AAAA,EACjC,MAAM,OAAO,CAAC,SAAgC;AAAA,IAC7C,IAAI,mBAAmB;AAAA,MAAS,OAAO,QAAQ,IAAI,IAAI;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;AAAA,MACnD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU;AAAA,QAAW;AAAA,MACvD,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,MAAM,gBAAgB,KAAK,eAAe;AAAA,EAC1C,IAAI,kBAAkB,MAAM;AAAA,IAC3B,MAAM,QAAQ,wBAAwB,KAAK,cAAc,KAAK,CAAC;AAAA,IAC/D,IAAI;AAAA,MAAO,OAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,SAAS,KAAK,iBAAiB;AAAA,EACrC,IAAI,WAAW;AAAA,IAAM,OAAO,OAAO,KAAK;AAAA,EAExC,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,WAAW,MAAM;AAAA,IACpB,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,MACrC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC3B,IAAI,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,YAAY;AAAA,QACzD,OAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,MAChC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,OAAO;AAAA;AAOR,SAAS,SAAS,CAAC,SAA8C;AAAA,EAChE,IAAI,mBAAmB;AAAA,IAAS,OAAO;AAAA,EACvC,MAAM,QAAS,QAAkC;AAAA,EACjD,IAAI,iBAAiB;AAAA,IAAS,OAAO;AAAA,EACrC,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,OAAO;AAAA;;ACvCR,eAAsB,eAAe,CACpC,SACA,SAC4B;AAAA,EAC5B,MAAM,QAAQ,eAAe,SAAS,QAAQ,OAAO,OAAO,IAAI;AAAA,EAChE,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAE3B,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,uBAC5C,WAAW,KAAK,CACjB;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,OAAO,YAAY,QAClB,QAAQ,cAAc,QACtB,QAAQ,UAAU,QAAQ,KAAK,MAC7B,OACA,EAAE,OAAO,QAAQ;AAAA;;;ACzBrB,eAAsB,YAAY,CACjC,SACA,SACA,SACyC;AAAA,EACzC,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACxD,IAAI,cAAc;AAAA,IAAM,OAAO;AAAA,EAC/B,QAAQ,OAAO,YAAY;AAAA,EAC3B,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ;AAAA,EAIhC,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACtD,IACC,SAAS,QACT,CAAC,KAAK,UACL,SAAS,SAAS,aAAa,KAAK,SAAS,QAAQ,MACrD;AAAA,IACD,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK,IAAI;AAAA,EACvC,IAAI,SAAS,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG,GAAG;AAAA,IAC1D,OAAO;AAAA,MACN,MAAM,OAAO,IAAI;AAAA,MACjB,SAAS,UAAU,OAAO;AAAA,MAC1B;AAAA,MACA,SAAS;AAAA,IACV;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,cACrC,QAAQ,IACR,IAAI,KAAK,MAAM,KAAK,UAAU,CAC/B;AAAA,EAGA,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,OAAO;AAAA,IACN,MAAM,OAAO,IAAI;AAAA,IACjB,SAAS,UAAU,QAAQ;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,EACV;AAAA;AAQD,SAAS,UAAU,CAClB,MACA,SACA,KACU;AAAA,EACV,OACC,KAAK,iBAAiB,QACtB,KAAK,cAAc,QAAQ,UAAU,QAAQ,IAAI,QAAQ,KAAK;AAAA;;;AC1DhE,eAAsB,cAAc,CAAC,SAAmC;AAAA,EACvE,QAAQ,OAAO,OAAO,iBAAiB;AAAA,EACvC,MAAM,WAAW,aAAa,iBAC3B,MAAM,SAAS,wBACf;AAAA,EACH,MAAM,SAAS,aAAa,uBACzB,MAAM,OAAO,sBACb;AAAA,EAEH,IAAI,aAAa,aAAa,WAAW,WAAW;AAAA,IACnD,MAAM,IAAI,kBACT,sLACA,EAAE,MAAM,YAAY,WAAW,wBAAwB,CACxD;AAAA,EACD;AAAA,EAEA,MAAM,SAAS,MAAM,IAAI;AAAA,EACzB,MAAM,YAAY,aAAa,YAAY,IAAI,MAAM,SAAS,MAAM;AAAA,EACpE,OAAO,aAAa,WAAW,YAAY,IAAI,MAAM,OAAO,MAAM;AAAA;;;ACxB5D,SAAS,QAAQ,CAAC,SAAgD;AAAA,EACxE,QAAQ,MAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,OAAO;AAAA,EAChE,MAAM,aAAa;AAAA,IAClB,QAAQ;AAAA,IACR,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ;AAAA,IAC9C;AAAA,IACA,YAAY,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC;AAAA,IACzD,GAAI,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,EAC5B,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACN;AAAA,IACA,WAAW,CAAC,OAAe,YAC1B,GAAG,QAAQ,kBAAkB,QAAQ,UAAU,YAAY,MAAM;AAAA,IAClE,OAAO,MACN,GAAG,4DAA4D;AAAA,EACjE;AAAA;;;ACMM,SAAS,SAAS,CAAC,SAAqC;AAAA,EAC9D,QAAQ,OAAO,OAAO,WAAW;AAAA,EAEjC,OAAO;AAAA,SACA,aAAY,CAAC,SAAS,SAAS;AAAA,MACpC,OAAO,aAAa,SAAS,SAAS,OAAO;AAAA;AAAA,SAGxC,QAAO,CAAC,SAAS;AAAA,MACtB,MAAM,QAAQ,eAAe,SAAS,OAAO,OAAO,IAAI;AAAA,MACxD,IAAI,UAAU;AAAA,QAAM,OAAO;AAAA,MAE3B,MAAM,UAAU,MAAM,MAAM,SAAS,uBACpC,WAAW,KAAK,CACjB;AAAA,MACA,IAAI,YAAY;AAAA,QAAM,OAAO;AAAA,MAC7B,OAAO,MAAM,SAAS,cAAc,QAAQ,IAAI,MAAM,IAAI,CAAC;AAAA;AAAA,SAGtD,kBAAiB,CAAC,MAAM,SAAS;AAAA,MACtC,MAAM,KAAK,KAAK,IAAI;AAAA,MACpB,IAAI,CAAC,MAAK,EAAE;AAAA,QAAG,OAAO;AAAA,MAGtB,OAAO,SAAS,WAAW,aAAa,CAAC,MAAK,QAAQ,MAAM,IACzD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,CAAC,IACjD,MAAM,SAAS,mBAAmB,IAAI,MAAM,IAAI,GAAG,QAAQ,MAAM;AAAA;AAAA,SAG/D,SAAQ,CAAC,IAAI;AAAA,MAClB,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI;AAAA,MACjD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,QAAO,CAAC,IAAI;AAAA,MACjB,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,MAAM,SAAS,CAAC;AAAA;AAAA,IAG5D,QAAQ,SAAS,OAAO;AAAA,SAElB,eAAc,GAAG;AAAA,MACtB,OAAO,eAAe,OAAO;AAAA;AAAA,IAG9B,OAAO,CAAC,GAAG,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/B;AAAA;;ACzCD,eAAsB,wBAAwB,CAC7C,SACA,QACgB;AAAA,EAChB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,QAAQ,MAAM,QAAQ,WAC1B,CAAC,iBAAiB,cAAc,EAAY,IAAI,CAAC,SACjD,QAAQ,MAAM,OAAO,gBAAgB,QAAQ,MAAM,GAAG,CACvD,CACD;AAAA,EACA,MAAM,SAAS,MAAM,KACpB,CAAC,WAA4C,OAAO,WAAW,UAChE;AAAA,EACA,IAAI,WAAW;AAAA,IAAW,MAAM,OAAO;AAAA;AASxC,eAAsB,eAAe,CACpC,SACA,SACgB;AAAA,EAChB,IAAI;AAAA,IACH,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IACD,MAAM,KAAK,SAAS,wBAAwB,SAAS,QAAQ,SAAS;AAAA;AAAA;AAcxE,eAAsB,cAAc,CACnC,SACA,MACA,UACA,UACA,QACA,OACmB;AAAA,EACnB,MAAM,MAAM,MAAM,WAAW,SAAS,SAAS,IAAI,KAAK,IAAI;AAAA,EAC5D,MAAM,OACL,QAAQ,QACR,IAAI,aAAa,SAChB,IAAI,SAAS,SAAS,SAAS,UAAU,QACxC,MAAM,gBAAgB,SAAS,KAAK,UAAU,KAAK;AAAA,EACtD,IAAI;AAAA,IAAM,OAAO;AAAA,EAEjB,IAAI,OAAO,WAAW,YAAY;AAAA,IACjC,MAAM,QAAQ,MAAM,SAAS,cAC5B,OAAO,QAAQ,IACf,QAAQ,MAAM,IAAI,CACnB;AAAA,EACD,EAAO;AAAA,IACN,MAAM,YAAY,SAAS,OAAO,WAAW,cAAc;AAAA;AAAA,EAE5D,OAAO;AAAA;;;AClFD,SAAS,QAAW,CAC1B,OACA,OACmB;AAAA,EACnB,IAAI,OAAO;AAAA,EACX,OAAO,YAAY;AAAA,IAClB,IAAI,MAAM;AAAA,MACT,MAAM,IAAI,UACT,GAAG,uEAAuE,yBAC3E;AAAA,IACD;AAAA,IACA,OAAO;AAAA,IACP,OAAO,MAAM;AAAA;AAAA;;;ACTf,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,QACA,OACoD;AAAA,EACpD,MAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,MAAM,OAAO,OAAO;AAAA,EACtE,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS;AAAA,IAAM,MAAM,eAAe,OAAO,OAAO;AAAA,EAEtD,YAAY,MAAM,MAAM,OAAO,OAAO,OAAO;AAAA,EAC7C,OAAO,EAAE,OAAO,KAAK;AAAA;AAItB,eAAsB,eAAe,CACpC,SACA,MACA,MACA,MACA,OACuB;AAAA,EACvB,MAAM,QAAQ,QAAQ,MAAM,KAAK,MAAM;AAAA,EACvC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAEA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,QAAQ,OAAO,UAAU;AAAA;;;AC3BnC,SAAS,kBAAkB,CACjC,SACA,MACA,IACgB;AAAA,EAChB,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,QAAQ,MAAM,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,uBAAuB;AAAA,MACxC,OAAO,aAAa,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGlD,QAAO,CAAC,QAAQ,UAAU;AAAA,MAC/B,OAAO,aACN,SACA,MACA,QACA,UACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,YAAY,CAC1B,SACA,MACA,OACA,OACwC;AAAA,EACxC,aAAa,MAAM,KAAK;AAAA,EACxB,MAAM,mBAAmB,SAAS,MAAM,iBAAiB,OAAO,KAAK;AAAA,EACrE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AAAA;AAIF,eAAe,UAAU,CACxB,SACA,MACA,OACA,OAC8B;AAAA,EAC9B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,SAAS,MAAM,gBACpB,SACA,MACA,iBACA,QACA,KACD;AAAA,EAIA,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,iBACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,KAAK,CACxB;AAAA,EACA,OAAO,KAAK,QAAQ,MAAM,OAAO,MAAM,EAAE;AAAA;AAI1C,eAAe,YAAY,CAC1B,SACA,MACA,QACA,UACA,OACmB;AAAA,EACnB,aAAa,MAAM,KAAK;AAAA,EAGxB,cAAc,MAAM,UAAU,KAAK;AAAA,EACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,EAE9D,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,iBACA,QACA,KACD;AAAA,EACA,IAAI,gBAAgB;AAAA,EACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAEhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,IAC/C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,OAAO;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,IAAI;AAAA,SAE7B,OAAO,oBAAoB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,IACnE;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAKH,MAAM,QAAQ,MAAM,SAAS,mBAC5B,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,IACA,MAAM,yBAAyB,SAAS,QAAQ,EAAE;AAAA,YACjD;AAAA,IAGD,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACpE,IAAI,eAAe;AAAA,MAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,IACrE;AAAA;AAAA,EAED,OAAO,OAAO,OAAO;AAAA;;;ACtKtB,uBAAS,4BAAY;AAQd,IAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ,OAAQ,OAAO,EAAE;AAE1D,IAAM,SAAS;AAGR,SAAS,cAAc,GAAW;AAAA,EACxC,OAAO,SAAS,aAAY,EAAE,CAAC;AAAA;AAIzB,SAAS,QAAQ,CAAC,OAA2B;AAAA,EACnD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,IAAI,MAAM;AAAA,EACV,WAAW,QAAQ,OAAO;AAAA,IACzB,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,OAAO,QAAQ,GAAG;AAAA,MACjB,OAAO,OAAQ,UAAW,OAAO,IAAM;AAAA,MACvC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,IAAI,OAAO;AAAA,IAAG,OAAO,OAAQ,SAAU,IAAI,OAAS;AAAA,EACpD,OAAO;AAAA;AAGD,SAAS,UAAU,CAAC,MAAsB;AAAA,EAChD,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,MAAM,MAAgB,CAAC;AAAA,EACvB,WAAW,QAAQ,MAAM;AAAA,IACxB,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAAA,IACjC,IAAI,UAAU;AAAA,MAAI,MAAM,IAAI,UAAU,gCAAgC;AAAA,IACtE,QAAS,SAAS,IAAK;AAAA,IACvB,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG;AAAA,MACd,IAAI,KAAM,UAAW,OAAO,IAAM,GAAG;AAAA,MACrC,QAAQ;AAAA,IACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAIhB,IAAM,SAAS,CAAC,QACtB,KAAK,MAAM,IAAI,QAAQ,IAAI,KAAK,MAAM;AAGhC,SAAS,MAAM,CAAC,QAAgB,MAAsB;AAAA,EAC5D,MAAM,UAAU,OAAO,MAAM,CAAC;AAAA,EAC9B,QAAQ,iBAAiB,OAAO,IAAI,CAAC;AAAA,EACrC,MAAM,SAAS,YAAW,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO;AAAA,EACjE,MAAM,SAAU,OAAO,MAAiB;AAAA,EACxC,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI;AAAA,EAC7C,OAAO,OAAO,SAAS,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK,QAAQ,GAAG;AAAA;AAW7D,SAAS,SAAS,CACxB,QACA,MACA,KACA,UACgB;AAAA,EAChB,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EAClC,MAAM,UAAU,OAAO,GAAG;AAAA,EAC1B,IAAI,UAAyB;AAAA,EAC7B,SAAS,OAAO,UAAU,KAAK,MAAO,QAAQ,UAAU,KAAK,OAAO,QAAQ;AAAA,IAC3E,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAAA,IAC1C,IAAI,WAAW,OAAO,QAAQ,IAAI,GAAG,IAAI,KAAK,SAAS,YAAY,MAAM;AAAA,MACxE,UAAU;AAAA,IACX;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AAIR,SAAS,UAAU,CAAC,GAAW,GAAoB;AAAA,EAClD,IAAI,aAAa,EAAE,SAAS,EAAE;AAAA,EAC9B,SAAS,IAAI,EAAG,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,cAAc,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AAAA,EACA,OAAO,eAAe;AAAA;AAQhB,SAAS,UAAU,CACzB,QACA,SACA,QACS;AAAA,EACT,MAAM,QAAQ,GAAG,mBAAmB,MAAM,KAAK,mBAAmB,OAAO;AAAA,EACzE,MAAM,QAAQ,IAAI,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC1B,QAAQ,OAAO,KAAK,SAAS,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,kBAAkB,SAAS;AAAA;;;ACnG5B,IAAM,WAAW,CACvB,WAC4B,WAAW,QAAQ,OAAO,gBAAgB;AAGhE,SAAS,eAAe,CAC9B,SACA,OACA,KACW;AAAA,EACX,MAAM,aAAa,QAAQ,OAAO;AAAA,EAClC,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,IAAI,UACT,GAAG,UAAU,kFACd;AAAA,EACD;AAAA,EACA,OAAO;AAAA;AASD,SAAS,UAAU,CACzB,YACA,QACA,QACA,MACA,KACA,OAC4B;AAAA,EAC5B,QAAQ,OAAO,UAAU,OACxB,WAAW,QACX,OAAO,QACP,OAAO,IACP,KACD;AAAA,EACA,MAAM,OAAO,UAAU,WAAW,KAAK,GAAG,MAAM,KAAK,OAAO,QAAQ;AAAA,EACpE,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,OAAO;AAAA,OACH;AAAA,IACH,UAAU;AAAA,IACV,QACC,UAAU,WAAW,OAAO,WACzB,OAAO,SACP,KAAK,WAAW,QAAQ,OAAO,OAAO,EAAE;AAAA,EAC7C;AAAA;;;AC1BD,eAAsB,eAAe,CACpC,SACA,MACA,MACA,OACsB;AAAA,EACtB,MAAM,yBAAyB,SAAS,KAAK,EAAE;AAAA,EAC/C,IAAI,UAAU;AAAA,EACd,IAAI,WAAW;AAAA,EACf,MAAM,SAAS,MAAM,UACpB,SACA,KAAK,IACL,MACA,EAAE,WAAW,KAAK,QAAQ,GAC1B,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,UAAU,OAAO,aAAa;AAAA,IAC9B,WAAW,SAAS,OAAO,YAAY;AAAA,IACvC,OAAO;AAAA,MACN,iBAAiB;AAAA,SACb,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,SAChC,OAAO,iBAAiB,OAAO,CAAC,IAAI,EAAE,cAAc,KAAK;AAAA,IAC9D;AAAA,GAEF;AAAA,EACA,IAAI;AAAA,IAIH,MAAM,yBAAyB,SAAS,OAAO,EAAE;AAAA,YAChD;AAAA,IACD,MAAM,KAAK,SAAS,sBAAsB,QAAQ,OAAO,SAAS;AAAA,IAClE,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,wBAAwB,QAAQ,OAAO,SAAS;AAAA,IACrE;AAAA,IACA,IAAI,UAAU;AAAA,MACb,MAAM,KACL,SACA,6BACA,QACA,OAAO,SACR;AAAA,IACD;AAAA;AAAA,EAED,OAAO;AAAA;AAIR,eAAe,wBAAwB,CACtC,SACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,SAAS,mBAAmB,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,EAC3E,MAAM,yBAAyB,SAAS,MAAM;AAAA;;;ACtCxC,SAAS,cAAc,CAC7B,SACA,MACA,IACuD;AAAA,EACvD,OAAO,OAAO,SAAS;AAAA,IACtB,MAAM,QAAQ,GAAG,wBAAwB;AAAA,IACzC,MAAM,KAAK,MAAM,IAAI;AAAA,IACrB,MAAM,UAAU,aAAa,MAAM,IAAI;AAAA,IACvC,MAAM,QAAQ,MAAM,WAAW,SAAS,MAAM,IAAI,KAAK;AAAA,IACvD,cAAc,MAAM,SAAS,OAAO,MAAM,KAAK;AAAA,IAC/C,MAAM,SAAS,MAAM,sBACpB,cAAc,SAAS,MAAM,OAAO,KAAK,CAC1C;AAAA,IACA,IAAI,WAAW;AAAA,MAAM,OAAO;AAAA,IAC5B,MAAM,QAAQ,MAAM,WAAW,SAAS,MAAM,IAAI,KAAK;AAAA,IACvD,cAAc,MAAM,SAAS,OAAO,MAAM,KAAK;AAAA,IAC/C,IAAI,CAAC,UAAU,MAAM,OAAO,KAAK,GAAG;AAAA,MACnC,MAAM,IAAI,eACT,WACA,GAAG,+CACH;AAAA,QACC,QAAQ,MAAM;AAAA,QACd,iBAAiB,MAAM;AAAA,QACvB,eAAe,MAAM;AAAA,QACrB,WAAW;AAAA,MACZ,CACD;AAAA,IACD;AAAA,IACA,OAAO,cAAc,SAAS,MAAM,OAAO,KAAK;AAAA;AAAA;AAKlD,eAAe,UAAU,CACxB,SACA,MACA,IACA,OACsB;AAAA,EACtB,MAAM,SAAS,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,KAAK;AAAA,EAC5D,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,aAAa,CAC3B,SACA,MACA,QACA,OAC8C;AAAA,EAC9C,IAAI,OAAO,oBAAoB,MAAM;AAAA,IACpC,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,MAAM;AAAA,EAC9C;AAAA,EACA,MAAM,SAAS,MAAM,gBAAgB,SAAS,MAAM,QAAQ,KAAK;AAAA,EACjE,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,QAAQ,KAAK;AAAA;AAI7C,SAAS,SAAS,CAAC,MAAoB,GAAe,GAAwB;AAAA,EAC7E,MAAM,OAAO,CAAC,WAAuB;AAAA,IACpC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,IACzC,OAAO,UAAU,OAAO,OAAO,eAAe,KAAK;AAAA;AAAA,EAEpD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAAA;AAI1B,SAAS,YAAY,CAAC,MAAoB,MAA8B;AAAA,EACvE,IAAI,OAAO,SAAS,YAAY,SAAS;AAAA,IAAM,OAAO;AAAA,EACtD,MAAM,QAAkB,KAAiC,KAAK;AAAA,EAC9D,OAAO,OAAO,UAAU,WAAW,eAAe,KAAK,IAAI;AAAA;AAI5D,SAAS,aAAa,CACrB,MACA,SACA,QACA,MACA,OACO;AAAA,EACP,IAAI,YAAY;AAAA,IAAM;AAAA,EACtB,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,QAAQ,eAAe,KAAK,MAAM;AAAA,IAAS;AAAA,EACzD,MAAM,OAAQ,KAAwC;AAAA,EACtD,MAAM,IAAI,eACT,WACA,GAAG,qDACH;AAAA,IACC,QAAQ,OAAO;AAAA,OACX,OAAO,SAAS,WAAW,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAC5D,eAAe,OAAO;AAAA,IACtB,WAAW;AAAA,EACZ,CACD;AAAA;;;AClIM,SAAS,gBAAgB,CAC/B,SACA,MACA,IACyC;AAAA,EACzC,OAAO;AAAA,SACA,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,GAAG,kBAAkB;AAAA,MACnC,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MAEpE,MAAM,gBAAgB,SAAS,MAAM,eAAe,OAAO,IAAI,KAAK;AAAA,MACpE,OAAO,gBAAgB,SAAS,MAAM,eAAe,QAAQ,KAAK;AAAA;AAAA,SAG7D,QAAO,CAAC,QAAQ;AAAA,MACrB,MAAM,QAAQ,GAAG,qBAAqB;AAAA,MACtC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,eACA,QACA,KACD;AAAA,MACA,IAAI,gBAAgB;AAAA,MACpB,MAAM,UAAU,MAAM,UACrB,SACA,KAAK,IACL,MACA,WACA,OACA,CAAC,QAAQ,QAAQ;AAAA,QAGhB,YAAY,MAAM,QAAQ,OAAO,OAAO,OAAO;AAAA,QAC/C,gBAAgB,OAAO,oBAAoB;AAAA,QAC3C,OAAO,EAAE,iBAAiB,IAAI;AAAA,OAEhC;AAAA,MACA,IAAI,eAAe;AAAA,QAClB,MAAM,KAAK,SAAS,sBAAsB,SAAS,QAAQ,SAAS;AAAA,MACrE;AAAA,MACA,OAAO,OAAO,OAAO;AAAA;AAAA,IAGtB,YAAY,eAAe,SAAS,MAAM,EAAE;AAAA,EAC7C;AAAA;;;ACpDM,SAAS,UAAU,CACzB,SACA,MACA,IAGwB;AAAA,EACxB,OAAO;AAAA,IACN,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,IAC/C,eAAe,mBAAmB,SAAS,MAAM,EAAE;AAAA,IACnD,aAAa,iBAAiB,SAAS,MAAM,EAAE;AAAA,EAChD;AAAA;;ACDD,eAAsB,YAAY,CACjC,SACA,MACA,OAC6B;AAAA,EAC7B,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,EACvD,OAAO,WAAW,QAAQ,CAAC,OAAO,SAAS,OAAO;AAAA;AAQnD,eAAsB,cAAc,CACnC,SACA,QACA,MACA,QACgB;AAAA,EAChB,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QACA,MACA,QAAQ,MAAM,IAAI,GAClB,WAAW,MAAM,CAClB;AAAA;AAgBD,eAAsB,iBAAiB,CACtC,SACA,MACA,QACA,QAOiC;AAAA,EACjC,QAAQ,MAAM,OAAO,OAAO,MAAM,WAAW;AAAA,EAC7C,YAAY,MAAM,MAAM,OAAO,OAAO,IAAI;AAAA,EAC1C,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SACL,KAAK,oBAAoB,OACtB,OACA,MAAM,gBAAgB,SAAS,MAAM,MAAM,KAAK;AAAA,EACpD,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,EACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;ACzDD,SAAS,cAAc,CAC7B,SACA,MACA,IACA,QAC4D;AAAA,EAC5D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,OAAO,SAAS;AAAA,MAC7B,MAAM,QAAQ,GAAG,mBAAmB;AAAA,MACpC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,YAAY,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,MAAM;AAAA;AAAA,EAExE;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACuC;AAAA,EACvC,MAAM,mBAAmB,SAAS,MAAM,aAAa,OAAO,KAAK;AAAA,EACjE,OAAO,OAAO,OAAO;AAAA,IACpB,MAAM,SAAS,OAAO,MAAM,UAAU,SAAS,MAAM,KAAK,CAAC;AAAA,EAC5D,CAAC;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,MACA,OAC6B;AAAA,EAE7B,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,aAAa,MAAM;AAAA,EAC5D,OAAO,EAAE,OAAO,QAAQ,OAAO,SAAS,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA;AAIzE,eAAe,WAAW,CACzB,SACA,MACA,QACA,QACA,OACA,QACiC;AAAA,EAGjC,QAAQ,OAAO,SAAS,MAAM,iBAC7B,SACA,MACA,aACA,QACA,KACD;AAAA,EAEA,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;AC1GK,SAAS,iBAAiB,CAChC,SACA,MACA,IACA,QACkD;AAAA,EAClD,OAAO;AAAA,SACA,aAAY,CAAC,MAAM,SAAS;AAAA,MACjC,MAAM,QAAQ,GAAG,cAAc;AAAA,MAC/B,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,MAAM,SAAS,MAAM,UAAU,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,MACrE,IAAI,CAAC,OAAO,QAAQ;AAAA,QACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,UAC7D,QAAQ,OAAO;AAAA,UACf,UAAU,KAAK;AAAA,QAChB,CAAC;AAAA,MACF;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO,MAAM;AAAA,MACjD,MAAM,gBAAgB,SAAS,MAAM;AAAA,MACrC,OAAO;AAAA;AAAA,EAET;AAAA;;;ACZD,IAAM,WAAU;AAGhB,eAAe,UAAU,CACxB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,WAAW,QAAQ,OAAO;AAAA,EAChC,IAAI,aAAa;AAAA,IAAM,OAAO;AAAA,EAC9B,MAAM,MAAM,WAAW,SAAS,QAAO;AAAA,EACvC,MAAM,WAAW,MAAM,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC;AAAA,EAC9C,OAAO,cAAc,SAAS;AAAA,IAC7B,UAAU,SAAS;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU,CAAC,QAAQ,SAClB,WAAW,MAAM,KAAK,CAAC,UAAU,OAAO,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;AAAA,IAEhE,UAAU,MACT,IAAI,cACH,GAAG,4DACH,EAAE,MAAM,UAAU,WAAW,eAAe,CAC7C;AAAA,EACF,CAAC;AAAA;AAOF,eAAsB,kBAAkB,CACvC,SACA,MACA,OACA,OACgB;AAAA,EAChB,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,OAAO,KAAK;AAAA,EAC5D,MAAM,QAAQ,QAAQ,OAAO,gBAAgB;AAAA,EAC7C,IAAI,YAAY,QAAQ,UAAU,aAAa,QAAQ,YAAY,OAAO;AAAA,IACzE;AAAA,EACD;AAAA,EACA,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ;AAAA,EACxC,MAAM,IAAI,iBACT,uBACA,GAAG,4EACH;AAAA,IACC,QAAQ;AAAA,IACR,UAAU,KAAK;AAAA,IACf,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,EACjE,CACD;AAAA;AAUD,eAAsB,kBAAkB,CACvC,SACA,MACA,QACA,OACgB;AAAA,EAChB,MAAM,OAAO,KAAK;AAAA,EAClB,MAAM,QAAQ,SAAS,OAAO,YAAY,OAAO,OAAO,KAAK;AAAA,EAC7D,IAAI,SAAS,QAAQ,OAAO,UAAU;AAAA,IAAU;AAAA,EAChD,MAAM,UAAU,MAAM,WAAW,SAAS,MAAM,KAAK,UAAU,KAAK,GAAG,KAAK;AAAA,EAC5E,IAAI,SAAS,QAAQ;AAAA,IAAM;AAAA,EAC3B,MAAM,QAAQ,MAAM,OAAO,aAC1B,QAAQ,MACR,gBACA,QAAQ,MAAM,IAAI,CACnB;AAAA;;;AC/EM,IAAM,iBAAiB,CAC7B,SACA,WACA,UACI,aAAa,SAAS,WAAW,gBAAgB,OAAO,WAAW;AAMxE,eAAsB,aAAa,CAClC,SACA,MACA,WACA,OAC2B;AAAA,EAC3B,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,SAAS,OAAO,SAAS;AAAA,EAE/B,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,gBACA,OACA,KAAK,IACN;AAAA,EAGA,MAAM,SAAS,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAChE,IAAI,WAAW,MAAM;AAAA,IACpB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,MAAM,SAAS,OAAO;AAAA,EACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,eAAe,SAAS,QAAQ,KAAK;AAAA,IAC3C,MAAM,IAAI,mBACT,8BACA,GAAG,iEACH,EAAE,WAAW,OAAO,QAAQ,OAAO,IAAI,UAAU,KAAK,KAAK,CAC5D;AAAA,EACD;AAAA,EACA,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK,QAAQ,cAAc,OAAO;AAAA,EAC3C;AAAA;AAID,eAAsB,UAAU,CAC/B,SACA,MACA,QACA,OACiB;AAAA,EACjB,IAAI,OAAO,iBAAiB,GAAG;AAAA,IAC9B,MAAM,YAAY,SAAS,OAAO,QAAQ,cAAc;AAAA,EACzD;AAAA,EACA,MAAM,YAAY,OAAO,OAAO,OAAO,IAAI,KAAK,MAAM,OAAO,YAAY;AAAA;;;ACpFnE,SAAS,cAAc,CAAC,SAAkB,MAAoB,IAAQ;AAAA,EAC5E,OAAO;AAAA,SACA,MAAK,CACV,QACA,OACgC;AAAA,MAChC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,MACA,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,QACzD,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QAEf,SAAS;AAAA,QACT,OAAO,WAAW;AAAA,MACnB,CAAC;AAAA,MACD,OAAO;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,OAAO;AAAA,MAChB;AAAA;AAAA,SAGK,QAAO,CACZ,WACA,MACA,SAC6B;AAAA,MAC7B,OAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,IAAI,OAAO;AAAA;AAAA,EAErE;AAAA;AAQD,eAAe,gBAAgB,CAC9B,SACA,MACA,WACA,MACA,IACA,SAC6B;AAAA,EAC7B,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,EACjD,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,WAAW,KAAK;AAAA,EAClE,QAAQ,WAAW;AAAA,EAEnB,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAChB,OAAO,YACP,QACA,OAAO,cACP,OAAO,IAAI,GACX,KACA,KACD;AAAA,EACA,IAAI,aAAa;AAAA,IAAM,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAIrE,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,OAAO,OACR;AAAA,EACA,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,EAElD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,EACtD,MAAM,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,EACjE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO;AAAA;;;AChFR,eAAsB,mBAAmB,CACxC,SACA,MACA,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,MAAM,SAAS,OAAO;AAAA,EACtB,OAAO,SAAS,MAAM,IAAI,OAAO,cAAc,SAAS;AAAA;;;ACtBzD,sBAAS,+BAAW;AAmBb,IAAM,iBAAiB;AAE9B,IAAM,WAAW;AACjB,IAAM,SAAS;AACf,IAAM,QAAQ;AAGd,IAAM,WAAU;AAGT,SAAS,iBAAiB,GAAa;AAAA,EAC7C,OAAO,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM;AAAA,IACnD,IAAI,OAAO;AAAA,IACX,SAAS,KAAK,EAAG,KAAK,QAAQ,MAAM,GAAG;AAAA,MACtC,QAAQ,SAAS,WAAU,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;AAAA,GAC1C;AAAA;AAQK,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EAC9D,MAAM,OAAO,MACX,YAAY,EACZ,QAAQ,UAAU,EAAE,EACpB,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,GAAG;AAAA,EACtB,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO;AAAA;AAIlC,IAAM,SAAS,CAAC,QAAgB,UAC/B,WAAW,QAAQ,UAAS,KAAK;AAElC,IAAM,MAAM,CAAC,KAAa,QAAgB,SACzC,UAAU,KAAK,CAAC,QAAQ,IAAI,CAAC;AAGvB,SAAS,gBAAgB,CAC/B,QACA,QACA,MACS;AAAA,EACT,MAAM,OAAO,iBAAiB,IAAI,KAAK;AAAA,EACvC,MAAM,MAAM,OAAO,QAAQ,OAAO,QAAQ;AAAA,EAC1C,OAAO,MAAM,OAAO,YAAY,IAAI,KAAK,QAAQ,IAAI,EAAE,SAAS,WAAW;AAAA;AAWrE,SAAS,gBAAgB,CAC/B,QACA,QACA,QACA,OACA,OACS;AAAA,EACT,MAAM,OAAO,iBAAiB,KAAK;AAAA,EACnC,IAAI,QAAQ;AAAA,EACZ,OAAO,QAAQ,CAAC,MAAM,UAAU;AAAA,IAC/B,OAAO,SAAS,OAAO,SAAS,QAAQ,KAAK,MAAM,GAAG;AAAA,IACtD,IACC,YAAY,QACZ,UAAU,aACV,SAAS,aACT,KAAK,SAAS,GACb;AAAA,MACD,MAAM,IAAI,UACT,GAAG,mDACJ;AAAA,IACD;AAAA,IACA,MAAM,MAAM,OAAO,QAAQ,KAAK;AAAA,IAChC,IAAI,QAAQ,WAAW;AAAA,MACtB,MAAM,IAAI,UACT,GAAG,kDAAkD,uGACtD;AAAA,IACD;AAAA,IACA,IAAI,SAAS;AAAA,MAAM;AAAA,IACnB,MAAM,OAAO,OAAO,KAAK,MAAM,WAAW;AAAA,IAC1C,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,IACnC,IAAI,KAAK,WAAW,MAAM,UAAU,iBAAgB,MAAM,KAAK,GAAG;AAAA,MACjE,QAAQ,UAAU,KAAK,QAAQ;AAAA,IAChC;AAAA,GACA;AAAA,EACD,OAAO;AAAA;;;AC5GD,IAAM,UAAU,CACtB,MACA,MACA,SACA,OACA,WAEA,IAAI,mBAAkB,MAAM,GAAG,UAAU,WAAW;AAAA,EACnD,WAAW;AAAA,EACX,QAAQ,OAAO;AAAA,EACf,UAAU,KAAK;AAChB,CAAC;;;ACHF,eAAsB,cAAc,CACnC,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,WAAW,MAAM;AAAA,MACpB,MAAM,QACL,MACA,8BACA,6DACA,OACA,MACD;AAAA,IACD;AAAA,IACA,IAAI,SAAS,MAAM,GAAG;AAAA,MACrB,MAAM,QACL,MACA,wBACA,8CACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa;AAAA,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,IAAI;AAAA,IACpE,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,aAAa;AAAA,QACb,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,MAAM,KAAK,SAAS,4BAA4B,SAAS,QAAQ,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;ACjE/C,eAAsB,aAAa,CAClC,SACA,MACA,MACA,SACA,OACmB;AAAA,EACnB,IAAI,YAAY;AAAA,EAChB,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,YAAY,SAAS,OAAO,YAAY;AAAA,IACxC,OAAO,EAAE,cAAc,KAAK;AAAA,GAE9B;AAAA,EACA,IAAI,WAAW;AAAA,IACd,MAAM,KACL,SACA,6BACA,SACA,QAAQ,SACT;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO;AAAA;;;AC5BtB,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,OACiC;AAAA,EACjC,MAAM,aAAa,gBAClB,SACA,OACA,mCACD;AAAA,EACA,MAAM,SAAS,eAAe;AAAA,EAE9B,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,IAAI,SAAS,OAAO,YAAY,GAAG;AAAA,MAClC,MAAM,QACL,MACA,wBACA,yDACA,OACA,MACD;AAAA,IACD;AAAA,IACA,UAAU,MAAM,QAAQ,KAAK;AAAA,IAC7B,OAAO;AAAA,MACN,cAAc;AAAA,QACb,QAAQ;AAAA,QACR,QAAQ,KAAK,WAAW,QAAQ,QAAQ,OAAO,EAAE;AAAA,QACjD,aAAa;AAAA,QACb,UAAU;AAAA,QACV,eAAe,CAAC;AAAA,MACjB;AAAA,IACD;AAAA,GAEF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IACA,KAAK,WAAW,WAAW,QAAQ,UAAU,MAAM,SAAS,KAAK,GAAG,MAAM;AAAA,EAC3E;AAAA;AAID,SAAS,SAAS,CACjB,MACA,QACA,OACS;AAAA,EACT,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,MAAM,IAAI,UACT,GAAG,cAAc,KAAK,wEACvB;AAAA,EACD;AAAA,EACA,OAAO,OAAO,OAAO,OAAO,KAAK,SAAS,MAAM;AAAA;;;ACvC1C,IAAM,qBAAqB,KAAK;AAEvC,IAAM,iBAAiB,qBAAqB;AAO5C,IAAM,WAAU;AAGhB,SAAS,QAAQ,CAChB,QACA,QACA,QACA,MACS;AAAA,EACT,MAAM,QAAQ;AAAA,IACb,OAAO;AAAA,IACP,OAAO,MAAM;AAAA,IACb,OAAO,OAAO,cAAc,YAAY,EAAE;AAAA,IAC1C,OAAO,IAAI;AAAA,EACZ;AAAA,EAEA,MAAM,MAAM,WAAW,QAAQ,QAAO;AAAA,EACtC,OAAO,WAAW,UAAU,KAAK,KAAK,EAAE,SAAS,WAAW,CAAC;AAAA;AAS9D,eAAsB,mBAAmB,CACxC,SACA,QACA,QACA,OACkB;AAAA,EAClB,QAAQ,aAAa,MAAM,cAAc,SAAS;AAAA,IACjD,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ,OAAO;AAAA,IACf,UAAU,CAAC,QAAQ,SAAS,SAAS,QAAQ,QAAQ,QAAQ,IAAI;AAAA,IAEjE,UAAU,MACT,IAAI,eACH,WACA,GAAG,gFACH;AAAA,MACC,QAAQ,OAAO;AAAA,MACf,iBAAiB,OAAO;AAAA,MACxB,WAAW;AAAA,IACZ,CACD;AAAA,EACF,CAAC;AAAA,EACD,IAAI,WAAW,eAAe;AAAA,IAC7B,MAAM,IAAI,YACT,gBACA,GAAG,mDAAmD,gCACtD;AAAA,MACC,WAAW;AAAA,MACX,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,MACjB,cAAc;AAAA,IACf,CACD;AAAA,EACD;AAAA,EACA,OAAO,gBAAgB;AAAA;;;ACpFxB,eAAsB,uBAAuB,CAC5C,SACA,MACA,MACA,MACA,SACA,OACwC;AAAA,EACxC,MAAM,aAAa,gBAClB,SACA,OACA,sCACD;AAAA,EACA,MAAM,gBAAgB,kBAAkB;AAAA,EAExC,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,MAAM,SAAS,OAAO;AAAA,IACtB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,MACtB,MAAM,QACL,MACA,8BACA,uEACA,OACA,MACD;AAAA,IACD;AAAA,IACA,MAAM,OAAO,MAAM,oBAClB,SACA,WAAW,QACX,QACA,KACD;AAAA,IACA,MAAM,WAAW,WAChB,YACA,QACA,QACA,OAAO,IAAI,GACX,KACA,KACD;AAAA,IACA,IAAI,aAAa,MAAM;AAAA,MACtB,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,OAAO;AAAA,MACN,cAAc;AAAA,WACV;AAAA,QACH,eAAe,cAAc,IAAI,CAAC,QACjC,iBAAiB,WAAW,QAAQ,OAAO,IAAI,GAAG,CACnD;AAAA,MACD;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,KACL,SACA,iCACA,SACA,QAAQ,SACT;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,cAAc;AAAA;;;AC9DxC,SAAS,cAAc,CAC7B,SACA,MACA,IACY;AAAA,EACZ,OAAO;AAAA,SACA,OAAM,CAAC,MAAM,SAAS;AAAA,MAC3B,OAAO,aACN,SACA,MACA,MACA,SACA,GAAG,qBAAqB,CACzB;AAAA;AAAA,SAGK,SAAQ,CAAC,MAAM,MAAM,SAAS;AAAA,MACnC,OAAO,eACN,SACA,MACA,MACA,MACA,SACA,GAAG,uBAAuB,CAC3B;AAAA;AAAA,SAGK,wBAAuB,CAAC,MAAM,MAAM,SAAS;AAAA,MAClD,OAAO,wBACN,SACA,MACA,MACA,MACA,SACA,GAAG,sCAAsC,CAC1C;AAAA;AAAA,SAGK,QAAO,CAAC,MAAM,SAAS;AAAA,MAC5B,OAAO,cACN,SACA,MACA,MACA,SACA,GAAG,sBAAsB,CAC1B;AAAA;AAAA,EAEF;AAAA;;;AC9CD,eAAsB,eAAe,CACpC,SACA,MACA,OAKA,IACoC;AAAA,EACpC,MAAM,QAAQ,GAAG,sBAAsB;AAAA,EACvC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,QAAQ,SAAS;AAAA,EACjB,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,WAAW,KAAK;AAAA,EACxE,QAAQ,WAAW;AAAA,EACnB,MAAM,SAAS,OAAO;AAAA,EAEtB,MAAM,QAAQ,iBACb,OAAO,WAAW,QAClB,OAAO,IACP,OAAO,eACP,OAAO,IAAI,GACX,KACD;AAAA,EACA,IAAI,UAAU;AAAA,IAAI,OAAO,WAAW,SAAS,MAAM,QAAQ,KAAK;AAAA,EAEhE,MAAM,gBAAgB,OAAO,cAAc,OAC1C,CAAC,GAAG,UAAU,UAAU,KACzB;AAAA,EACA,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,WACzC,OAAO,IACP;AAAA,IACC,cAAc,KAAK,QAAQ,cAAc;AAAA,IACzC,WAAW,QAAQ,MAAM,IAAI;AAAA,EAC9B,GACA,OAAO,OACR;AAAA,EAGA,IAAI;AAAA,EACJ,IAAI;AAAA,IACH,MAAM,eAAe,SAAS,OAAO,QAAQ,KAAK;AAAA,IAClD,MAAM,mBAAmB,SAAS,MAAM,SAAS,KAAK;AAAA,IACtD,WAAW,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;AAAA,YAC1D;AAAA,IACD,MAAM,KAAK,SAAS,yBAAyB,SAAS,QAAQ,SAAS;AAAA;AAAA,EAExE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACvC,OAAO,KAAK,UAAU,mBAAmB,cAAc,OAAO;AAAA;;;ACpDxD,SAAS,iBAAiB,CAChC,SACA,MACA,IACC;AAAA,EACD,MAAM,aAAa,eAAe,SAAS,MAAM,EAAE;AAAA,EACnD,MAAM,MAAgD;AAAA,OAClD,eAAe,SAAS,MAAM,EAAE;AAAA,IACnC,SAAS,WAAW;AAAA,IACpB,SAAS,CAAC,WAAW,MAAM,YAC1B,gBAAgB,SAAS,MAAM,EAAE,WAAW,MAAM,QAAQ,GAAG,EAAE;AAAA,IAChE,mBAAmB,CAAC,SACnB,oBACC,SACA,MACA,MACA,GAAG,gCAAgC,CACpC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACN;AAAA,IAOA,QAAQ,CACP,QACA,OACA,WAEA,SAAS,OAAO,YAAY,IACzB,WAAW,MAAM,QAAQ,KAAK,IAC9B,YAAY,SAAS,MAAM,QAAQ,MAAM;AAAA,EAC9C;AAAA;;;ACHM,SAAS,eAAe,CAC9B,SACA,MACA,IACA,QAC8D;AAAA,EAC9D,OAAO;AAAA,SACA,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,QAAQ,MAAM,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK,GAAG,KAAK;AAAA;AAAA,SAGhE,QAAO,CAAC,OAAO;AAAA,MACpB,MAAM,QAAQ,GAAG,oBAAoB;AAAA,MACrC,OAAO,YAAY,SAAS,MAAM,OAAO,KAAK,GAAG,KAAK;AAAA;AAAA,SAGjD,QAAO,CAAC,WAAW,MAAM,SAAS;AAAA,MACvC,OAAO,YACN,SACA,MACA,QACA,EAAE,WAAW,MAAM,QAAQ,GAC3B,EACD;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,WAAW,CACzB,SACA,MACA,OACA,OACiC;AAAA,EACjC,MAAM,mBAAmB,SAAS,MAAM,cAAc,OAAO,KAAK;AAAA,EAClE,MAAM,YAAY,WAAW;AAAA,EAC7B,OAAO,OAAO,OAAO;AAAA,IACpB;AAAA,IACA,MAAM,SAAS,OAAO,MACrB,gBAAgB,SAAS,MAAM,OAAO,SAAS,CAChD;AAAA,EACD,CAAC;AAAA;AAIF,eAAe,eAAe,CAC7B,SACA,MACA,OACA,WACsC;AAAA,EAEtC,MAAM,SAAS,MAAM,aAAa,SAAS,MAAM,KAAK;AAAA,EACtD,IAAI,WAAW;AAAA,IAAM,OAAO;AAAA,EAE5B,MAAM,UAAU,OAAO,OAAO,OAAO,KAAK,MAAM;AAAA,EAChD,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,OAAO,QAAQ,OAAO,WAAW;AAAA,IACjC,QAAQ;AAAA,EACT,CAAC;AAAA,EAED,MAAM,eAAe,SAAS,OAAO,IAAI,cAAc,MAAM;AAAA,EAC7D,OAAO;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,OAAO;AAAA,IACP;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,WAAW,CACzB,SACA,MACA,QACA,OAKA,IACiC;AAAA,EACjC,MAAM,QAAQ,GAAG,oBAAoB;AAAA,EACrC,MAAM,SAAS,WAAW,SAAS,MAAM,SAAS,KAAK;AAAA,EACvD,MAAM,SAAS,OAAO,MAAM,SAAS;AAAA,EACrC,MAAM,OAAO,MAAM;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,cACA,OACA,KAAK,IACN;AAAA,EAKA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,IAAI,CAAC,GAAG;AAAA,IAE9C,IAAI,MAAM,aAAa,eAAe;AAAA,MACrC,MAAM,YAAY,SAAS,QAAQ,YAAY;AAAA,IAChD;AAAA,IACA,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EAEA,MAAM,aAAa,SAAS,QAAQ,cAAc,OAAO,WAAW;AAAA,EACpE,OAAO,kBAAkB,SAAS,MAAM,QAAQ;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,EACD,CAAC;AAAA;;;ACtJF,IAAM,QAAQ,CAAC,SAAkB,QAAgB,UAChD,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAO3D,eAAsB,gBAAgB,CACrC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,OAAO,QAAQ,iBAAiB;AAAA,EACxC,IAAI,SAAS,KAAK,YAAY,GAAG;AAAA,IAChC,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,wBACA,GAAG,mGACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,IAAI,CAAC,YAAY,OAAO,QAAQ,IAAI,GAAG;AAAA,IACtC,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YAAY,OAAO,KAAK,IAAI,KAAK,MAAM,YAAY;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,EAClC,YAAY,MAAM,MAAM,OAAO,OAAO,MAAM;AAAA;AAU7C,eAAsB,YAAY,CACjC,SACA,MACA,MACA,SACA,MACA,OACgB;AAAA,EAChB,QAAQ,QAAQ,iBAAiB;AAAA,EACjC,MAAM,SAAS,KAAK;AAAA,EACpB,IAAI,CAAC,SAAS,MAAM,GAAG;AAAA,IACtB,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,mBACT,8BACA,GAAG,2EACH,EAAE,WAAW,OAAO,QAAQ,KAAK,IAAI,UAAU,KAAK,KAAK,CAC1D;AAAA,EACD;AAAA,EACA,MAAM,aAAa,gBAClB,SACA,OACA,oCACD;AAAA,EACA,MAAM,aAAa,MAAM,oBACxB,SACA,WAAW,QACX,MACA,KACD;AAAA,EAEA,MAAM,MAAM,QAAQ,MAAM,IAAI;AAAA,EAC9B,MAAM,WAAW,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,KAAK;AAAA,EACtE,IAAI,aAAa,MAAM;AAAA,IACtB,IAAI,iBAAiB;AAAA,MAAG,MAAM,YAAY,SAAS,QAAQ,QAAQ;AAAA,IACnE,MAAM,YACL,OACA,KAAK,IACL,KAAK,MACL,KAAK,IAAI,cAAc,UAAU,CAClC;AAAA,EACD;AAAA,EAGA,MAAM,QAAQ,MAAM,MAAM,WACzB,KAAK,IACL,EAAE,cAAc,UAAU,WAAW,IAAI,GACzC,KAAK,OACN;AAAA,EACA,MAAM,MAAM,SAAS,QAAQ,KAAK;AAAA;;;ACxFnC,eAAsB,UAAU,CAC/B,SACA,MACA,SACA,OACA,QACA,OACwB;AAAA,EACxB,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO,IAAI,WAAW;AAAA,EACtE,IAAI,YAAY,QAAQ,QAAQ,WAAW,MAAM,QAAQ;AAAA,IACxD,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EAEA,MAAM,OAAO,MAAM,WAAW,SAAS,MAAM,QAAQ,KAAK,IAAI;AAAA,EAC9D,IAAI,SAAS,MAAM;AAAA,IAClB,MAAM,MAAM,iBAAiB,SAAS,OAAO,QAAQ,KAAK;AAAA,EAC3D;AAAA,EACA,IAAI,CAAC,KAAK,QAAQ;AAAA,IACjB,MAAM,aAAa,SAAS,QAAQ,UAAU,OAAO,WAAW;AAAA,IAChE,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EACA,OAAO,EAAE,SAAS,KAAK;AAAA;;;ACzBxB,eAAsB,aAAa,CAClC,SACA,MACA,MACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAAA,EACpE,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAAS,OAAO,YAAY,IACxC,MAAM,MAAM,SAAS,QAAQ,KAAK,IAClC,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,EAG7C,MAAM,QAAQ,MAAM,OAAO,gBAC1B,OAAO,IACP,UACA,QAAQ,MAAM,IAAI,GAClB,WAAW,OAAO,SAAS,CAC5B;AAAA,EACA,OAAO;AAAA;AAIR,eAAe,KAAK,CACnB,SACA,QACA,OACgC;AAAA,EAChC,gBAAgB,SAAS,OAAO,oCAAoC;AAAA,EACpE,QAAQ,QAAQ,cAAc,MAAM,aAAa,SAAS;AAAA,IACzD,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;AAID,eAAe,OAAO,CACrB,SACA,MACA,QACA,OACkC;AAAA,EAClC,MAAM,QAAQ,QAAQ,MAAM,OAAO,MAAM;AAAA,EACzC,IAAI,UAAU,MAAM;AAAA,IACnB,MAAM,IAAI,eAAc,GAAG,iCAAiC;AAAA,MAC3D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACZ,CAAC;AAAA,EACF;AAAA,EAGA,MAAM,gBAAgB,SAAS,MAAM,UAAU,OAAO,IAAI,KAAK;AAAA,EAC/D,QAAQ,QAAQ,MAAM,cAAc,MAAM,UAAU,SAAS;AAAA,IAC5D,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,SAAS;AAAA,IACT,OAAO,QAAQ,OAAO,WAAW;AAAA,EAClC,CAAC;AAAA,EACD,OAAO;AAAA,IACN,KAAK;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA,MAAM,OAAO,MAAM;AAAA,EACpB;AAAA;;;AClFM,SAAS,WAAW,CAC1B,SACA,MACA,IAC6C;AAAA,EAC7C,OAAO;AAAA,SACA,QAAO,CAAC,MAAM;AAAA,MACnB,OAAO,cAAc,SAAS,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAAA;AAAA,SAGzD,QAAO,CAAC,SAAS,WAAW,MAAM;AAAA,MACvC,OAAO,cACN,SACA,MACA,SACA,OAAO,SAAS,GAChB,OAAO,IAAI,GACX,GAAG,gBAAgB,CACpB;AAAA;AAAA,EAEF;AAAA;AAQD,eAAe,aAAa,CAC3B,SACA,MACA,SACA,QACA,MACA,OACmB;AAAA,EACnB,QAAQ,OAAO,iBAAiB,MAAM,iBACrC,SACA,QACA,UACA,OACA,KAAK,IACN;AAAA,EACA,QAAQ,SAAS,SAAS,MAAM,WAC/B,SACA,MACA,SACA,OACA,QACA,KACD;AAAA,EAEA,MAAM,UAAU,EAAE,OAAO,QAAQ,aAAa;AAAA,EAE9C,IAAI,MAAM,aAAa,MAAM;AAAA,IAC5B,MAAM,aAAa,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA,EAC7D,EAAO;AAAA,IACN,MAAM,iBAAiB,SAAS,MAAM,MAAM,SAAS,MAAM,KAAK;AAAA;AAAA,EAGjE,MAAM,YAAY,MAAM,QAAQ,MAAM,SAAS,sBAC9C,QAAQ,IACR,QAAQ,MAAM,IAAI,CACnB;AAAA,EAEA,IAAI,cAAc,MAAM;AAAA,IACvB,MAAM,IAAI,YACT,iBACA,GAAG,gEACH,EAAE,WAAW,MAAM,CACpB;AAAA,EACD;AAAA,EACA,OAAO,UAAU,SAAS;AAAA;;;ACtFpB,SAAS,gBAAgB,CAC/B,SACA,MAC0B;AAAA,EAC1B,OAAO;AAAA,SACA,YAAW,CAAC,OAAO;AAAA,MAExB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM;AAAA,QAAI,OAAO;AAAA,MAC7D,MAAM,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK;AAAA,MACvD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,EAE/C;AAAA;;;ACXM,IAAM,UAAU,OACtB,SACA,MACA,UAEA,WAAW,KAAK,IACb,QAAQ,MAAM,MAAM,gBAAgB,KAAK,MAAM,KAAK,IACpD;;;ACEJ,eAAsB,MAAM,CAC3B,SACA,MACA,OACA,OACA,QACsB;AAAA,EACtB,QAAQ,OAAO,UAAU;AAAA,EACzB,QAAQ,UAAU,WAAW,SAAS,SAAS,CAAC;AAAA,EAChD,MAAM,MAAM,MAAM,IAAI;AAAA,EACtB,MAAM,SAAS,MAAM,eAAe,MAAM,MAAM,KAAK;AAAA,EACrD,SAAS,MAAM;AAAA,EAEf,IAAI,OAA+B;AAAA,EACnC,IAAI,aAAa,WAAW;AAAA,IAC3B,cAAc,MAAM,UAAoB,KAAK;AAAA,IAC7C,OAAO;AAAA,MACN,MAAM,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAkB;AAAA,MACjE,WAAW;AAAA,IACZ;AAAA,EACD;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,MAAM,WAAW;AAAA,IAC7C,IAAI,QAAO,IAAI,QAAQ,CAAC;AAAA,IACxB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,IACpB,QAAQ,WAAW,YAAY,OAAO,WAAW;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS,MAAM,QAAQ,KAAK;AAAA,IACpC,UAAU;AAAA,IACV,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,EACZ,CAAC;AAAA,EAGD,MAAM,KAAK,SAAS,gBAAgB,UAAU,SAAS,SAAS;AAAA,EAChE,OAAO;AAAA;;;AC9CR,eAAe,MAAM,CACpB,SACA,MACA,KAC6B;AAAA,EAC7B,IAAI,KAAK,aAAa,MAAM;AAAA,IAC3B,OAAO,QAAQ,SAAS,MAAM,KAAK,SAAS,UAAU,GAAG,CAAC;AAAA,EAC3D;AAAA,EACA,OAAO,IAAI,KAAK,MAAM,KAAK,OAAO,cAAc,SAAS,MAAM,GAAG;AAAA;AAInE,SAAS,QAAO,CAAC,MAAoB,OAAe,OAAe;AAAA,EAClE,OAAO,IAAI,kBACV,GAAG,sCAAsC,KAAK,4BAA4B,UAC1E;AAAA,IACC,QAAQ;AAAA,MACP,EAAE,MAAM,CAAC,KAAK,GAAG,SAAS,wCAAwC;AAAA,IACnE;AAAA,IACA,UAAU,KAAK;AAAA,EAChB,CACD;AAAA;AAID,SAAS,WAAW,CACnB,MACA,KACA,OAC+B;AAAA,EAC/B,OAAO,CAAC,WAAW;AAAA,IAClB,MAAM,QAAQ,KAAK,aAAa,OAAO,KAAK,QAAQ,KAAK,SAAS;AAAA,IAClE,MAAM,QAAQ,OAAO;AAAA,IACrB,MAAM,QACL,OAAO,UAAU,WACd,OACA,KAAK,aAAa,OACjB,eAAe,KAAK,IACpB,KAAK,SAAS,UAAU,KAAK;AAAA,IAClC,MAAM,SACL,KAAK,aAAa,OACf,eAAe,GAAG,IAClB,KAAK,SAAS,UAAU,GAAG;AAAA,IAC/B,IAAI,UAAU,QAAQ,UAAU,QAAQ;AAAA,MACvC,MAAM,SAAQ,MAAM,OAAO,KAAK;AAAA,IACjC;AAAA;AAAA;AASK,SAAS,iBAAiB,CAChC,SACA,MACA,IACkC;AAAA,EAClC,OAAO;AAAA,SACA,aAAY,CAAC,KAAK,OAAO;AAAA,MAC9B,MAAM,QAAQ,GAAG,cAAc;AAAA,MAC/B,IAAI,OAAO,QAAQ,UAAU;AAAA,QAC5B,MAAM,IAAI,kBAAiB,GAAG,mCAAmC;AAAA,UAChE,QAAQ,CAAC,EAAE,MAAM,CAAC,GAAG,SAAS,kBAAkB,CAAC;AAAA,UACjD,UAAU,KAAK;AAAA,QAChB,CAAC;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,MAAM,OAAO,SAAS,MAAM,GAAG;AAAA,MAC7C,IAAI,UAAU;AAAA,QAAM,OAAO,EAAE,MAAM,OAAO,KAAK,GAAG,SAAS,MAAM;AAAA,MAEjE,MAAM,SAAS,MAAM,MAAM;AAAA,MAC3B,MAAM,UAAU,MAAM,iBACrB,OAAO,SAAS,MAAM,QAAQ,OAAO,YAAY,MAAM,KAAK,KAAK,CAAC,CACnE;AAAA,MACA,IAAI,EAAE,mBAAmB,iBAAgB;AAAA,QACxC,OAAO,EAAE,MAAM,OAAO,OAAO,GAAG,SAAS,KAAK;AAAA,MAC/C;AAAA,MAEA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,GAAG;AAAA,MAC9C,IAAI,WAAW;AAAA,QAAM,MAAM;AAAA,MAC3B,OAAO,EAAE,MAAM,OAAO,MAAM,GAAG,SAAS,MAAM;AAAA;AAAA,EAEhD;AAAA;;;AC7ED,eAAsB,cAAc,CACnC,SACA,MACA,MACA,QACA,SACA,OACsB;AAAA,EACtB,aAAa,MAAM,KAAK;AAAA,EACxB,cAAc,MAAM,QAAQ,MAAM,KAAK;AAAA,EACvC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAE3C,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,OAAO,QAAQ,QAAQ;AAAA,IACtB,IACC,OAAO,aAAa,QACpB,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,SAAS,KAAK,GAC7D;AAAA,MACD,MAAM,IAAI,iBACT,uBACA,GAAG,8CACH;AAAA,QACC,QAAQ,OAAO,aAAa,OAAO,eAAe;AAAA,QAClD,QAAQ,OAAO;AAAA,QACf,UAAU,KAAK;AAAA,MAChB,CACD;AAAA,IACD;AAAA,IACA,OAAO;AAAA,MACN,UAAU;AAAA,QACT,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI;AAAA,QACnC,WAAW;AAAA,MACZ;AAAA,IACD;AAAA,GAEF;AAAA,EACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,EACtC,OAAO;AAAA;;;ACjCR,eAAsB,MAAM,CAC3B,SACA,MACA,QACA,OACA,MACiC;AAAA,EACjC,QAAQ,OAAO,WAAW;AAAA,EAC1B,MAAM,OAAO,aAAa,MAAM,KAAK;AAAA,EACrC,MAAM,SAAS,cAAc,SAAS,KAAK;AAAA,EAC3C,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,MAAM,WAAW,QAAQ;AAAA,EAEzB,MAAM,aAAa,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI;AAAA,EAGvE,IAAI,eAAe,MAAM;AAAA,IACxB,MAAM,mBAAmB,SAAS,MAAM,YAAY,KAAK;AAAA,EAC1D;AAAA,EACA,MAAM,SACL,eAAe,OAAO,OAAO,MAAM,QAAQ,SAAS,MAAM,UAAU;AAAA,EACrE,MAAM,SAAS,CAAC,WACf,IAAI,iBACH,uBACA,GAAG,kDACH,EAAE,QAAQ,UAAU,KAAK,KAAK,CAC/B;AAAA,EAED,IAAI,WAAW,QAAQ,OAAO,aAAa,MAAM;AAAA,IAIhD,MAAM,OAAO,OAAO,OAAO,QAAQ,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,IAC/D,MAAM,OAAO,WAAW,OAAO,iBAAiB,YAAY;AAAA,EAC7D;AAAA,EAEA,IAAI,CAAE,MAAM,gBAAgB,SAAS,QAAQ,OAAO,QAAQ,GAAG,KAAK,GAAI;AAAA,IACvE,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAGA,IAAI,CAAC,OAAO,QAAQ;AAAA,IACnB,MAAM,IAAI,mBAAkB,GAAG,+BAA+B;AAAA,MAC7D,QAAQ,OAAO;AAAA,MACf,UAAU,KAAK;AAAA,IAChB,CAAC;AAAA,EACF;AAAA,EAKA,IAAI,CAAC,SAAS,OAAO,YAAY,GAAG;AAAA,IACnC,MAAM,mBAAmB,SAAS,MAAM,QAAQ,KAAK;AAAA,EACtD;AAAA,EACA,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,EACjE,MAAM,SAAS,MAAM,OAAO,UAAU,OAAO,MAAM;AAAA,EAGnD,IACC,CAAE,MAAM,eACP,SACA,MACA,UACA,OAAO,QAAQ,GACf,QACA,KACD,GACC;AAAA,IACD,MAAM,OAAO,eAAe;AAAA,EAC7B;AAAA,EAEA,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACrC,OAAO;AAAA;;;AC1ED,SAAS,aAAa,CAC5B,SACA,MACA,IACA,QAC6D;AAAA,EAC7D,OAAO;AAAA,SACA,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,aAAa,MAAM,KAAK;AAAA,MACxB,IAAK,QAAkB,gBAAgB,WAAW;AAAA,QACjD,cAAc,MAAM,WAAgC,KAAK;AAAA,MAC1D;AAAA,MACA,MAAM,SAAS,MAAM,OAAO,SAAS,MAAM,OAAgB,KAAK;AAAA,MAChE,OAAO,YAAY,SAAS,MAAM,QAAQ,QAAQ,IAAI;AAAA;AAAA,SAGjD,OAAM,CAAC,OAAO,SAAS;AAAA,MAC5B,MAAM,QAAQ,GAAG,QAAQ;AAAA,MACzB,MAAM,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,MACjD,OAAO,OAAO,SAAS,MAAM,QAAQ,OAAgB,EAAE,OAAO,OAAO,CAAC;AAAA;AAAA,SAGjE,YAAW,CAAC,OAAO;AAAA,MACxB,MAAM,OAAO,aAAa,MAAM,GAAG,aAAa,CAAC;AAAA,MACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,MACjE,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,YAAW,CAAC,MAAM,UAAU,SAAS;AAAA,MAC1C,MAAM,QAAQ,GAAG,aAAa;AAAA,MAC9B,aAAa,MAAM,KAAK;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK;AAAA,MACnC,MAAM,OAAO,MAAM,cAAc,SAAS,KAAK,EAAE,KAAK,QAAQ;AAAA,MAE9D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,IAAI,EAAE,EACnD;AAAA,MACA,MAAM,gBAAgB,SAAS,OAAO;AAAA,MACtC,OAAO,OAAO,OAAO;AAAA;AAAA,SAGhB,eAAc,CAAC,MAAM,QAAQ,SAAS;AAAA,MAC3C,MAAM,QAAQ,GAAG,gBAAgB;AAAA,MACjC,OAAO,OACN,MAAM,eAAe,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,CACjE;AAAA;AAAA,EAEF;AAAA;;;ACpED,eAAsB,UAAU,CAC/B,SACA,MACA,MACmB;AAAA,EACnB,QAAQ,OAAO,UAAU;AAAA,EACzB,MAAM,KAAK,KAAK,IAAI;AAAA,EACpB,IAAI,CAAC,MAAK,EAAE;AAAA,IAAG,OAAO;AAAA,EAItB,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS,EAAE;AAAA,EAC5C,IAAI,WAAW,QAAQ,OAAO,SAAS,KAAK;AAAA,IAAM,OAAO;AAAA,EAMzD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,MAAM,UAAU,WAAW,QAAS,MAAM,MAAM,MAAM,WAAW,EAAE;AAAA,EACnE,IAAI;AAAA,IACH,MAAM,MAAM,SAAS,mBAAmB,EAAE;AAAA,IAC1C,MAAM,MAAM,OAAO,iBAAiB,EAAE;AAAA,IAEtC,MAAM,QAAQ,WAAW,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,YAC5D;AAAA,IAID,IAAI,SAAS;AAAA,MACZ,MAAM,KAAK,SAAS,gBAAgB,EAAE,IAAI,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,IACvE;AAAA;AAAA,EAED,OAAO;AAAA;;;AC7BD,IAAM,kBAAkB;AAOxB,IAAM,wBAAwB;AAWrC,eAAsB,eAAe,CACpC,SACA,KACA,MACA,OACwB;AAAA,EACxB,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AAAA,IACxB,MAAM,IAAI,UAAU,GAAG,yCAAyC;AAAA,EACjE;AAAA,EAEA,MAAM,SAAS;AAAA,IACd,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,MAAK,EAAE,CAAC,CAAC;AAAA,EAClE;AAAA,EACA,MAAM,QAAQ,IAAI;AAAA,EAElB,SAAS,QAAQ,EAAG,QAAQ,OAAO,QAAQ,SAAS,iBAAiB;AAAA,IACpE,MAAM,QAAQ,OAAO,MAAM,OAAO,QAAQ,eAAe;AAAA,IACzD,WAAW,UAAU,MAAM,UAAU,SAAS,KAAK,GAAG;AAAA,MACrD,IAAI,OAAO,SAAS;AAAA,QAAM,MAAM,IAAI,OAAO,IAAI,MAAM;AAAA,IACtD;AAAA,EACD;AAAA,EAIA,OAAO,OAAO,QAAQ,CAAC,OAAO;AAAA,IAC7B,MAAM,SAAS,MAAM,IAAI,EAAE;AAAA,IAC3B,OAAO,WAAW,YAAY,CAAC,IAAI,CAAC,MAAM;AAAA,GAC1C;AAAA;AAIF,eAAe,SAAS,CACvB,SACA,KACiC;AAAA,EACjC,QAAQ,UAAU,QAAQ;AAAA,EAE1B,IAAI,QAAQ,aAAa,aAAa,MAAM,cAAc,WAAW;AAAA,IACpE,MAAM,SAAkB,MAAM,MAAM,UAAU,GAAG;AAAA,IACjD,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAAA,MAC3B,MAAM,IAAI,cACT,kGACA,EAAE,MAAM,SAAS,WAAW,YAAY,CACzC;AAAA,IACD;AAAA,IACA,OAAO;AAAA,EACR;AAAA,EAEA,MAAM,UAAwB,CAAC;AAAA,EAC/B,SAAS,QAAQ,EAAG,QAAQ,IAAI,QAAQ,SAAS,uBAAuB;AAAA,IACvE,MAAM,UAAU,MAAM,QAAQ,IAC7B,IACE,MAAM,OAAO,QAAQ,qBAAqB,EAC1C,IAAI,CAAC,OAAO,MAAM,SAAS,EAAE,CAAC,CACjC;AAAA,IACA,WAAW,UAAU;AAAA,MAAS,IAAI,WAAW;AAAA,QAAM,QAAQ,KAAK,MAAM;AAAA,EACvE;AAAA,EACA,OAAO;AAAA;;;AC5ER,eAAsB,MAAM,CAC3B,SACA,MACA,MACA,OACA,SACA,OACsB;AAAA,EAItB,MAAM,OAAwC,EAAE,UAAU,KAAK;AAAA,EAC/D,MAAM,UAAU,MAAM,UACrB,SACA,MACA,MACA,SACA,OACA,CAAC,WAAW;AAAA,IACX,KAAK,WAAW;AAAA,IAChB,OAAO,YAAY,MAAM,QAAQ,OAAO,KAAK;AAAA,GAE/C;AAAA,EACA,QAAQ,aAAa;AAAA,EACrB,IACC,aAAa,QACb,aAAa,MAAM,SAAS,QAAQ,QAAQ,MAAM,GACjD;AAAA,IAID,IAAI;AAAA,MACH,MAAM,QAAQ,MAAM,OAAO,gBAC1B,QAAQ,IACR,eACA,QAAQ,MAAM,IAAI,CACnB;AAAA,cACC;AAAA,MACD,MAAM,KAAK,SAAS,qBAAqB,SAAS,QAAQ,WAAW;AAAA,QACpE,aAAa,QAAQ,MAAM,SAAS,MAAM;AAAA,MAC3C,CAAC;AAAA;AAAA,EAEH;AAAA,EACA,OAAO;AAAA;;;AClCD,SAAS,WAAW,CAC1B,SACA,MACA,IAC8B;AAAA,EAC9B,QAAQ,UAAU;AAAA,EAElB,OAAO;AAAA,SACA,OAAM,CAAC,OAAO;AAAA,MACnB,OAAO,OAAO,MAAM,OAAO,SAAS,MAAM,OAAgB,GAAG,QAAQ,CAAC,CAAC;AAAA;AAAA,SAGlE,KAAI,CAAC,IAAI;AAAA,MACd,MAAM,SAAS,MAAM,WAAW,SAAS,IAAI,KAAK,IAAI;AAAA,MACtD,OAAO,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,SAGxC,SAAQ,CAAC,KAAK;AAAA,MACnB,MAAM,UAAU,MAAM,gBACrB,SACA,KACA,KAAK,MACL,GAAG,UAAU,CACd;AAAA,MACA,OAAO,QAAQ,IAAI,MAAM;AAAA;AAAA,SAGpB,IAAG,CAAC,IAAI;AAAA,MACb,OAAO,OAAO,MAAM,UAAU,SAAS,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC;AAAA;AAAA,SAG3D,KAAI,CAAC,MAAM;AAAA,MAChB,MAAM,QAAQ,MAAM,SAAS;AAAA,MAG7B,IAAI,UAAU,QAAQ,CAAC,MAAK,KAAK,GAAG;AAAA,QACnC,MAAM,eAAc,GAAG,MAAM,GAAG,KAAK;AAAA,MACtC;AAAA,MAEA,MAAM,SAAS,MAAM,MAAM,MAAM,UAAU;AAAA,QAC1C,MAAM,KAAK;AAAA,QACX;AAAA,QACA,OAAO,WAAU,MAAM,OAAO,GAAG,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,MACD,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,YAAY,OAAO,WAAW;AAAA;AAAA,SAGnE,OAAM,CAAC,MAAM,OAAO,SAAS;AAAA,MAClC,OAAO,OACN,MAAM,OACL,SACA,MACA,MACA,OACA,SACA,GAAG,QAAQ,CACZ,CACD;AAAA;AAAA,SAGK,UAAS,CAAC,MAAM,QAAQ,SAAS;AAAA,MACtC,OAAO,OACN,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,OAAO;AAAA,QACrE,QAAQ,WAAW;AAAA,MACpB,EAAE,CACH;AAAA;AAAA,SAGK,OAAM,CAAC,MAAM;AAAA,MAClB,OAAO,WAAW,SAAS,MAAM,IAAI;AAAA;AAAA,EAEvC;AAAA;;;AC1EM,SAAS,OAAO,CAAC,SAAkB,MAAgC;AAAA,EACzE,MAAM,KAAS,CAAC,cACf,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,QAAQ;AAAA,EACrD,MAAM,eAAe,kBAAkB,SAAS,MAAM,EAAE;AAAA,EACxD,MAAM,aAAa,gBAAgB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,EAEzE,OAAO;AAAA,OACH,YAAY,SAAS,MAAM,EAAE;AAAA,OAC7B,cAAc,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,OACpD,kBAAkB,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAE3D,cAAc,aAAa;AAAA,IAC3B;AAAA,IACA,WAAW,eAAe,SAAS,MAAM,IAAI,aAAa,MAAM;AAAA,IAChE,QAAQ,YAAY,SAAS,MAAM,EAAE;AAAA,OAElC,iBAAiB,SAAS,IAAI;AAAA,OAC9B,kBAAkB,SAAS,MAAM,EAAE;AAAA,OACnC,WAAW,SAAS,MAAM,EAAE;AAAA,EAChC;AAAA;;ACQM,SAAS,KAAkC,CACjD,QACW;AAAA,EACX,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW,cAAc,QAAQ,KAAK;AAAA,EAC5C,mBAAmB,UAAU,KAAK;AAAA,EAClC,MAAM,eAAe,aAAa,OAAO,OAAO,KAAK;AAAA,EAErD,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,MAAM,YAAY;AAAA,IACjB,GAAI,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM;AAAA,IAClC,GAAI,OAAO,aAAa,CAAC;AAAA,EAC1B;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,YAAY,WAAW;AAAA,IACjC,IAAI,OAAO,UAAU,WAAW,YAAY,SAAS,WAAW,IAAI;AAAA,MACnE,MAAM,IAAI,UAAU,GAAG,8CAA8C;AAAA,IACtE;AAAA,IACA,IAAI,SAAS,IAAI,SAAS,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,UACT,GAAG,wCAAwC,SAAS,0DACrD;AAAA,IACD;AAAA,IACA,SAAS,IAAI,SAAS,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,OAAO,aAAa;AAAA,EACtC,IACC,cAAc,QACd,OAAQ,UAAyC,iBAAiB,YACjE;AAAA,IACD,MAAM,IAAI,UACT,GAAG,+EACJ;AAAA,EACD;AAAA,EAEA,MAAM,UAAU,cACf,UACA,YAAY,OAAO,KAAK,GACxB,cAAc,OAAO,OAAO,eAAe,SAAS,GACpD,cACA,OAAO,SAAS,aAChB,QACA,WACA,cAAc,OAAO,QAAQ,KAAK,CACnC;AAAA,EAEA,MAAM,SAAS,UAAU,OAAO;AAAA,EAChC,MAAM,QAAQ,OAAO,YACpB,CAAC,GAAG,SAAS,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1C,KAAK;AAAA,IACL,QAAQ,SAAS,IAAI;AAAA,EACtB,CAAC,CACF;AAAA,EAIA,MAAM,UAAU,SAAS,SACtB,KAAK,WAAW,MAAM,QAAQ,IAC9B;AAAA,OACG;AAAA,OACA;AAAA,OACA,mBAAmB,OAAO;AAAA,EAC9B;AAAA,EACF,OAAO;AAAA;;ACpFD,SAAS,WAAW,CAC1B,SACA,QACA,QAAe,aACR;AAAA,EACP,MAAM,WAAW,cAAc,QAAQ,qBAAqB;AAAA,EAC5D,MAAM,MAAM,MAAM,IAAI,EAAE,QAAQ,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,EACpE,IAAI,OAAO,UAAU;AAAA,IACpB,MAAM,IAAI,qBACT,6FACA,EAAE,QAAQ,QAAQ,OAAO,CAC1B;AAAA,EACD;AAAA;",
|
|
99
|
+
"debugId": "48ED60BDDE6B1B3264756E2164756E21",
|
|
98
100
|
"names": []
|
|
99
101
|
}
|