@open-nav/core 0.1.0

package/dist/crypto/token.js

@@ -0,0 +1,82 @@
+import { getCryptoProvider } from './provider.js';
+import { NavValidationError } from '../errors.js';
+const EXCHANGE_KEY_LENGTH = 16;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+/** Decode a base64 string to bytes on any runtime (no Node Buffer). */
+function base64ToBytes(base64) {
+    let binary;
+    try {
+        binary = atob(base64);
+    }
+    catch {
+        throw new NavValidationError('Invalid encoded exchange token', [
+            {
+                path: 'encodedExchangeToken',
+                code: 'EXCHANGE_TOKEN_LENGTH',
+                message: 'not valid base64',
+            },
+        ]);
+    }
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+/**
+ * Decrypt the `encodedExchangeToken` returned by `tokenExchange`.
+ *
+ * NAV encrypts the 16 character exchange token with AES-128 in ECB mode using
+ * the technical user's exchange key (csereklucs / "XML aláírás kulcs" pair) as
+ * the raw key, then base64 encodes the result. Padding is optional in
+ * practice: NAV historically returned an unpadded 16 byte block, while some
+ * environments return a PKCS#7 padded 32 byte block, so both are accepted.
+ *
+ * @param encodedToken base64 payload from the response
+ * @param exchangeKey  16 character exchange key of the technical user
+ */
+export function decodeExchangeToken(encodedToken, exchangeKey) {
+    const keyBytes = encoder.encode(exchangeKey);
+    // AES-128 needs a 16-byte key. NAV keys are 16 ASCII characters, so char
+    // length and byte length coincide; guard on bytes so a non-ASCII key fails
+    // here with a NAV code rather than deep inside the cipher.
+    if (keyBytes.length !== EXCHANGE_KEY_LENGTH) {
+        throw new NavValidationError('Invalid NAV exchange key', [
+            {
+                path: 'credentials.exchangeKey',
+                code: 'EXCHANGE_KEY_LENGTH',
+                message: `must be exactly ${EXCHANGE_KEY_LENGTH} bytes, got ${keyBytes.length}`,
+            },
+        ]);
+    }
+    const ciphertext = base64ToBytes(encodedToken);
+    if (ciphertext.length === 0 || ciphertext.length % 16 !== 0) {
+        throw new NavValidationError('Invalid encoded exchange token', [
+            {
+                path: 'encodedExchangeToken',
+                code: 'EXCHANGE_TOKEN_LENGTH',
+                message: `expected a multiple of the 16 byte AES block size, got ${ciphertext.length}`,
+            },
+        ]);
+    }
+    const plaintext = getCryptoProvider().aes128EcbDecrypt(ciphertext, keyBytes);
+    return decoder.decode(stripPkcs7(plaintext));
+}
+/**
+ * Remove PKCS#7 padding if, and only if, the buffer actually carries it.
+ * NAV's unpadded tokens consist of printable ASCII, so a trailing byte in the
+ * 1..16 range is an unambiguous padding marker.
+ */
+function stripPkcs7(buffer) {
+    const last = buffer.at(-1);
+    if (last === undefined || last < 1 || last > 16 || last >= buffer.length) {
+        return buffer;
+    }
+    for (let i = buffer.length - last; i < buffer.length; i += 1) {
+        if (buffer[i] !== last) {
+            return buffer;
+        }
+    }
+    return buffer.subarray(0, buffer.length - last);
+}
+//# sourceMappingURL=token.js.map

package/dist/crypto/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/crypto/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,uEAAuE;AACvE,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,EAAE;YAC7D;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,kBAAkB;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,WAAmB;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7C,yEAAyE;IACzE,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,EAAE;YACvD;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,mBAAmB,mBAAmB,eAAe,QAAQ,CAAC,MAAM,EAAE;aAChF;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,EAAE;YAC7D;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,0DAA0D,UAAU,CAAC,MAAM,EAAE;aACvF;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE7E,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAkB;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/crypto/web-provider.d.ts

@@ -0,0 +1,18 @@
+import type { CryptoProvider } from './provider.js';
+/**
+ * A {@link CryptoProvider} for runtimes without SHA-3 in `node:crypto` —
+ * Cloudflare Workers, browsers, Deno, Bun.
+ *
+ * Uses `@noble/hashes` for SHA-512 / SHA3-512 (WebCrypto offers neither a
+ * synchronous digest nor SHA-3), `@noble/ciphers` for the AES-128-ECB exchange
+ * token (WebCrypto has no ECB mode), and `crypto.getRandomValues` for
+ * randomness. Every operation is synchronous, matching {@link nodeCryptoProvider}.
+ *
+ * @example
+ * ```ts
+ * import { setCryptoProvider, createWebCryptoProvider } from '@open-nav/core';
+ * setCryptoProvider(createWebCryptoProvider());
+ * ```
+ */
+export declare function createWebCryptoProvider(): CryptoProvider;
+//# sourceMappingURL=web-provider.d.ts.map

package/dist/crypto/web-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-provider.d.ts","sourceRoot":"","sources":["../../src/crypto/web-provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,IAAI,cAAc,CAWxD"}

package/dist/crypto/web-provider.js

@@ -0,0 +1,31 @@
+import { sha512 } from '@noble/hashes/sha2';
+import { sha3_512 } from '@noble/hashes/sha3';
+import { ecb } from '@noble/ciphers/aes';
+/**
+ * A {@link CryptoProvider} for runtimes without SHA-3 in `node:crypto` —
+ * Cloudflare Workers, browsers, Deno, Bun.
+ *
+ * Uses `@noble/hashes` for SHA-512 / SHA3-512 (WebCrypto offers neither a
+ * synchronous digest nor SHA-3), `@noble/ciphers` for the AES-128-ECB exchange
+ * token (WebCrypto has no ECB mode), and `crypto.getRandomValues` for
+ * randomness. Every operation is synchronous, matching {@link nodeCryptoProvider}.
+ *
+ * @example
+ * ```ts
+ * import { setCryptoProvider, createWebCryptoProvider } from '@open-nav/core';
+ * setCryptoProvider(createWebCryptoProvider());
+ * ```
+ */
+export function createWebCryptoProvider() {
+    return {
+        sha512: (data) => sha512(data),
+        sha3_512: (data) => sha3_512(data),
+        aes128EcbDecrypt: (ciphertext, key) => ecb(key, { disablePadding: true }).decrypt(ciphertext),
+        randomBytes: (length) => {
+            const bytes = new Uint8Array(length);
+            globalThis.crypto.getRandomValues(bytes);
+            return bytes;
+        },
+    };
+}
+//# sourceMappingURL=web-provider.js.map

package/dist/crypto/web-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-provider.js","sourceRoot":"","sources":["../../src/crypto/web-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAGzC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClC,gBAAgB,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7F,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,75 @@
+/** Base class for every error raised by the open-nav packages. */
+export declare class NavError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * Raised when data fails local validation before a request is ever sent to
+ * NAV — a malformed tax number, an unbalanced invoice, a bad `requestId`.
+ */
+export declare class NavValidationError extends NavError {
+    /** Machine readable issues, in document order. */
+    readonly issues: ValidationIssue[];
+    constructor(message: string, issues?: ValidationIssue[]);
+}
+export interface ValidationIssue {
+    /** Dotted path of the offending value, e.g. `invoiceLines.1.quantity`. */
+    path: string;
+    /** Human readable description of the problem. */
+    message: string;
+    /** Stable identifier so callers can branch on a specific rule. */
+    code?: string;
+}
+/** Raised when the transport fails (DNS, TLS, timeout, connection reset). */
+export declare class NavTransportError extends NavError {
+}
+/**
+ * Raised when NAV replies with a `GeneralErrorResponse`, or with any other
+ * non-success HTTP status.
+ */
+export declare class NavApiError extends NavError {
+    /** HTTP status code of the response. */
+    readonly status: number;
+    /** `result/funcCode`, e.g. `ERROR`. */
+    readonly funcCode?: string;
+    /** `result/errorCode`, e.g. `INVALID_SECURITY_USER`. */
+    readonly errorCode?: string;
+    /** Validation messages NAV attached to the error. */
+    readonly validationMessages: NavValidationMessage[];
+    /** Raw response body, kept for logging and bug reports. */
+    readonly responseBody: string;
+    constructor(init: {
+        message: string;
+        status: number;
+        funcCode?: string;
+        errorCode?: string;
+        validationMessages?: NavValidationMessage[];
+        responseBody?: string;
+    });
+}
+export interface NavValidationMessage {
+    /** `ERROR` blocks processing, `WARN` does not. */
+    validationResultCode: 'ERROR' | 'WARN' | 'INFO' | string;
+    validationErrorCode?: string;
+    message?: string;
+    /** Only present on technical validation messages. */
+    lineNumber?: number;
+    /** Only present on business validation messages. */
+    tag?: string;
+    value?: string;
+}
+/**
+ * Raised when an invoice batch was accepted by NAV but at least one invoice
+ * was rejected during processing.
+ */
+export declare class NavInvoiceRejectedError extends NavError {
+    readonly transactionId: string;
+    readonly rejected: Array<{
+        index: number;
+        invoiceStatus: string;
+        messages: NavValidationMessage[];
+    }>;
+    constructor(transactionId: string, rejected: NavInvoiceRejectedError['rejected']);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,qBAAa,QAAS,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,eAAe,EAAO;CAI5D;AAED,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAMD,6EAA6E;AAC7E,qBAAa,iBAAkB,SAAQ,QAAQ;CAAG;AAElD;;;GAGG;AACH,qBAAa,WAAY,SAAQ,QAAQ;IACvC,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC;IACpD,2DAA2D;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAElB,IAAI,EAAE;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAC;QAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB;CAQF;AAED,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,oBAAoB,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACzD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,QAAQ;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,oBAAoB,EAAE,CAAC;KAClC,CAAC,CAAC;gBAES,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,uBAAuB,CAAC,UAAU,CAAC;CAajF"}

package/dist/errors.js

@@ -0,0 +1,71 @@
+/** Base class for every error raised by the open-nav packages. */
+export class NavError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = new.target.name;
+    }
+}
+/**
+ * Raised when data fails local validation before a request is ever sent to
+ * NAV — a malformed tax number, an unbalanced invoice, a bad `requestId`.
+ */
+export class NavValidationError extends NavError {
+    /** Machine readable issues, in document order. */
+    issues;
+    constructor(message, issues = []) {
+        super(issues.length > 0 ? `${message}: ${formatIssues(issues)}` : message);
+        this.issues = issues;
+    }
+}
+function formatIssues(issues) {
+    return issues.map((issue) => `${issue.path || '<root>'} ${issue.message}`).join('; ');
+}
+/** Raised when the transport fails (DNS, TLS, timeout, connection reset). */
+export class NavTransportError extends NavError {
+}
+/**
+ * Raised when NAV replies with a `GeneralErrorResponse`, or with any other
+ * non-success HTTP status.
+ */
+export class NavApiError extends NavError {
+    /** HTTP status code of the response. */
+    status;
+    /** `result/funcCode`, e.g. `ERROR`. */
+    funcCode;
+    /** `result/errorCode`, e.g. `INVALID_SECURITY_USER`. */
+    errorCode;
+    /** Validation messages NAV attached to the error. */
+    validationMessages;
+    /** Raw response body, kept for logging and bug reports. */
+    responseBody;
+    constructor(init) {
+        super(init.message);
+        this.status = init.status;
+        this.funcCode = init.funcCode;
+        this.errorCode = init.errorCode;
+        this.validationMessages = init.validationMessages ?? [];
+        this.responseBody = init.responseBody ?? '';
+    }
+}
+/**
+ * Raised when an invoice batch was accepted by NAV but at least one invoice
+ * was rejected during processing.
+ */
+export class NavInvoiceRejectedError extends NavError {
+    transactionId;
+    rejected;
+    constructor(transactionId, rejected) {
+        const detail = rejected
+            .map((entry) => {
+            const reasons = entry.messages
+                .map((m) => [m.validationErrorCode, m.message].filter(Boolean).join(': '))
+                .join(' | ');
+            return `#${entry.index} ${entry.invoiceStatus}${reasons ? ` (${reasons})` : ''}`;
+        })
+            .join('; ');
+        super(`Transaction ${transactionId} contains rejected invoices: ${detail}`);
+        this.transactionId = transactionId;
+        this.rejected = rejected;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAmB,SAAQ,QAAQ;IAC9C,kDAAkD;IACzC,MAAM,CAAoB;IAEnC,YAAY,OAAe,EAAE,SAA4B,EAAE;QACzD,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAWD,SAAS,YAAY,CAAC,MAAyB;IAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC;AAED,6EAA6E;AAC7E,MAAM,OAAO,iBAAkB,SAAQ,QAAQ;CAAG;AAElD;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,QAAQ;IACvC,wCAAwC;IAC/B,MAAM,CAAS;IACxB,uCAAuC;IAC9B,QAAQ,CAAU;IAC3B,wDAAwD;IAC/C,SAAS,CAAU;IAC5B,qDAAqD;IAC5C,kBAAkB,CAAyB;IACpD,2DAA2D;IAClD,YAAY,CAAS;IAE9B,YAAY,IAOX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,CAAC;CACF;AAcD;;;GAGG;AACH,MAAM,OAAO,uBAAwB,SAAQ,QAAQ;IAC1C,aAAa,CAAS;IACtB,QAAQ,CAId;IAEH,YAAY,aAAqB,EAAE,QAA6C;QAC9E,MAAM,MAAM,GAAG,QAAQ;aACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACzE,IAAI,CAAC,KAAK,CAAC,CAAC;YACf,OAAO,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnF,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,eAAe,aAAa,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF"}