@openora/core 0.4.0 → 0.4.1-canary.100

package/dist/pam/identity/__tests__/identity.service.int.test.js

@@ -0,0 +1,551 @@
+import { randomUUID } from 'node:crypto';
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { eq, sql } from 'drizzle-orm';
+import { ORPCError } from '@orpc/server';
+import { createTestDb, createTestRedis, seedUser as insertUser, } from '@openora/core/testing';
+import { migrate as migrateIdentity } from '@openora/core/pam/migrate/identity';
+import { player } from '@openora/core/pam/schema/profile';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { IdentityService, SESSION_DURATION_IN_SECONDS, } from '../service/identity.service.js';
+import { UnsupportedLanguageError } from '../../shared/language.js';
+import { user, session } from '../schema/index.js';
+import { makeIdentityReader, mock, makeEventBus } from '../../../testing/mock.js';
+const { signInEmailMock, getSessionMock, updateUserMock, requestPasswordResetEmailOTPMock, checkVerificationOTPMock, resetPasswordEmailOTPMock, capturedAuthOptions, } = vi.hoisted(() => ({
+    signInEmailMock: vi.fn(),
+    getSessionMock: vi.fn().mockResolvedValue(null),
+    updateUserMock: vi.fn(),
+    requestPasswordResetEmailOTPMock: vi.fn(),
+    checkVerificationOTPMock: vi.fn(),
+    resetPasswordEmailOTPMock: vi.fn(),
+    capturedAuthOptions: {
+        current: undefined,
+    },
+}));
+vi.mock('@openora/core/server', async (importOriginal) => ({
+    ...(await importOriginal()),
+    createAuth: vi.fn((options) => {
+        capturedAuthOptions.current = options;
+        return {
+            options: {
+                session: {
+                    expiresIn: SESSION_DURATION_IN_SECONDS,
+                },
+            },
+            api: {
+                getSession: getSessionMock,
+                signUpEmail: vi.fn(),
+                signInEmail: signInEmailMock,
+                signOut: vi.fn(),
+                updateUser: updateUserMock,
+                requestPasswordResetEmailOTP: requestPasswordResetEmailOTPMock,
+                checkVerificationOTP: checkVerificationOTPMock,
+                resetPasswordEmailOTP: resetPasswordEmailOTPMock,
+            },
+        };
+    }),
+}));
+const { RedisCache } = await import('@openora/core/server');
+let db;
+let redis;
+const allowLimiter = () => mock({
+    consume: vi.fn().mockResolvedValue({ allowed: true, retryAfterMs: 0 }),
+    reset: vi.fn().mockResolvedValue(undefined),
+});
+const testTemplateRenderer = {
+    render: () => ({ subject: 'subject', body: 'body' }),
+};
+function buildService(deps = {}) {
+    return new IdentityService({
+        templateRenderer: testTemplateRenderer,
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        identityReader: makeIdentityReader(),
+        ...deps,
+    });
+}
+function jsonResponse(body, status) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+const betterAuthUser = {
+    id: '00000000-0000-4000-8000-000000000001',
+    email: 'a@b.dev',
+    name: 'A',
+    emailVerified: true,
+    createdAt: '2020-01-01T00:00:00.000Z',
+    updatedAt: '2020-01-01T00:00:00.000Z',
+};
+const EMAIL = 'a@b.dev';
+const seedUser = (over = {}) => insertUser(db, { name: 'A', email: EMAIL, ...over });
+async function readUser(userId) {
+    const [row] = await db.drizzle.db.select().from(user).where(eq(user.id, userId));
+    return row;
+}
+const realCache = () => new RedisCache(redis.client);
+const signInSuccess = (userId) => jsonResponse({
+    user: { ...betterAuthUser, id: userId },
+    token: 'tok',
+    session: { expiresAt: '2020-02-01T00:00:00.000Z' },
+}, 200);
+beforeAll(async () => {
+    db = await createTestDb([migrateIdentity, migrateProfile]);
+    redis = await createTestRedis();
+});
+afterAll(async () => {
+    await db.drop();
+    await redis.quit();
+});
+beforeEach(async () => {
+    vi.clearAllMocks();
+    getSessionMock.mockResolvedValue(null);
+    await db.drizzle.db.execute(sql `TRUNCATE ${user}, ${session}, ${player} RESTART IDENTITY CASCADE`);
+    await redis.flush();
+});
+describe('IdentityService.me', () => {
+    it('returns null when no session exists', async () => {
+        expect(await buildService().me({})).toBeNull();
+    });
+});
+describe('IdentityService - login lockout (real PG + real Redis)', () => {
+    it('locks the account once failed attempts reach the threshold and emits lockout.triggered', async () => {
+        const account = await seedUser({ failedLoginAttempts: 4 });
+        const events = makeEventBus();
+        const limiter = allowLimiter();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({ events, limiter });
+        await expect(svc.login({ email: 'A@B.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({
+            data: { attemptsRemaining: 0, lockoutUntil: expect.any(String) },
+        });
+        const row = await readUser(account.id);
+        expect(row.failedLoginAttempts).toBe(5);
+        expect(row.lockoutUntil?.getTime()).toBeGreaterThan(Date.now());
+        expect(row.lockoutUntil?.getTime()).toBeLessThanOrEqual(Date.now() + 60_000);
+        expect(row.lockoutCount).toBe(1);
+        expect(events.emit).toHaveBeenCalledTimes(1);
+        expect(events.emit).toHaveBeenCalledWith('identity.user.lockout.triggered', expect.objectContaining({ userId: account.id, email: EMAIL }));
+        expect(limiter.reset).toHaveBeenCalledWith(`login:${EMAIL}`);
+    });
+    it('escalates the lockout duration on a repeat lockout inside the 24h window', async () => {
+        const account = await seedUser({
+            failedLoginAttempts: 4,
+            lockoutCount: 1,
+            lastLockoutAt: new Date(Date.now() - 60_000),
+            lastFailedLoginAt: new Date(Date.now() - 60_000),
+        });
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService();
+        await expect(svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({
+            data: { attemptsRemaining: 0, lockoutUntil: expect.any(String) },
+        });
+        const row = await readUser(account.id);
+        expect(row.lockoutCount).toBe(2);
+        expect(row.lockoutUntil?.getTime()).toBeGreaterThan(Date.now() + 60_000);
+    });
+    it('resets the progressive tier after 24 hours without a failed login', async () => {
+        const account = await seedUser({
+            failedLoginAttempts: 4,
+            lockoutCount: 3,
+            lastLockoutAt: new Date(Date.now() - 25 * 60 * 60 * 1000),
+            lastFailedLoginAt: new Date(Date.now() - 25 * 60 * 60 * 1000),
+        });
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService();
+        for (const attemptsRemaining of [4, 3, 2, 1]) {
+            await expect(svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({ data: { attemptsRemaining, lockoutUntil: null } });
+        }
+        await expect(svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({
+            data: { attemptsRemaining: 0, lockoutUntil: expect.any(String) },
+        });
+        const row = await readUser(account.id);
+        expect(row.lockoutCount).toBe(1);
+        expect(row.lockoutUntil?.getTime()).toBeLessThanOrEqual(Date.now() + 60_000);
+    });
+    it('emits login.failed (not lockout) while still below the threshold', async () => {
+        const account = await seedUser();
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({ events });
+        await expect(svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
+        const row = await readUser(account.id);
+        expect(row.failedLoginAttempts).toBe(1);
+        expect(row.lastFailedLoginAt).not.toBeNull();
+        expect(row.lockoutUntil).toBeNull();
+        expect(events.emit).toHaveBeenCalledWith('identity.user.login.failed', expect.objectContaining({ email: EMAIL, reason: 'invalid_credentials' }));
+        expect(events.emit).not.toHaveBeenCalledWith('identity.user.lockout.triggered', expect.anything());
+    });
+    it('returns the post-increment attempts remaining on every failed login', async () => {
+        await seedUser();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService();
+        for (const attemptsRemaining of [4, 3, 2, 1]) {
+            await expect(svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({ data: { attemptsRemaining, lockoutUntil: null } });
+        }
+        await expect(svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({
+            data: { attemptsRemaining: 0, lockoutUntil: expect.any(String) },
+        });
+    });
+    it('counts concurrent credential failures exactly once each (atomic SQL increment)', async () => {
+        const account = await seedUser();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService();
+        await Promise.allSettled(Array.from({ length: 3 }, () => svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())));
+        expect((await readUser(account.id)).failedLoginAttempts).toBe(3);
+    });
+    it('commits only one first-tier lockout when concurrent failures cross the threshold', async () => {
+        const account = await seedUser({ failedLoginAttempts: 4 });
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({ events });
+        await Promise.allSettled(Array.from({ length: 2 }, () => svc.login({ email: EMAIL, password: 'wrongpass1' }, {}, new Headers())));
+        const row = await readUser(account.id);
+        expect(row.lockoutCount).toBe(1);
+        expect(row.lockoutUntil?.getTime()).toBeLessThanOrEqual(Date.now() + 60_000);
+        expect(events.emit).toHaveBeenCalledTimes(1);
+    });
+    it('rejects a currently-locked account before attempting sign-in', async () => {
+        const future = new Date(Date.now() + 60_000);
+        await seedUser({ failedLoginAttempts: 5, lockoutUntil: future });
+        const svc = buildService();
+        const promise = svc.login({ email: EMAIL, password: 'whatever1' }, {}, new Headers());
+        await expect(promise).rejects.toThrow(ORPCError);
+        await expect(promise).rejects.toMatchObject({
+            code: 'UNAUTHORIZED',
+            message: 'Account is temporarily locked. Please try again later.',
+            data: {
+                code: 'ACCOUNT_LOCKED',
+                lockoutUntil: future.toISOString(),
+            },
+        });
+        expect(signInEmailMock).not.toHaveBeenCalled();
+    });
+    it('clears the counter and emits login on success', async () => {
+        const account = await seedUser({ failedLoginAttempts: 2 });
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(signInSuccess(account.id));
+        const svc = buildService({ events });
+        const result = await svc.login({ email: EMAIL, password: 'rightpass1' }, {}, new Headers());
+        expect(result).toMatchObject({ session: { token: 'tok' } });
+        expect((await readUser(account.id)).failedLoginAttempts).toBe(0);
+        expect(events.emit).toHaveBeenCalledWith('identity.user.login', expect.objectContaining({ userId: account.id }));
+    });
+    it('bypasses lockout for admins if configured with bypassForAdmins: true', async () => {
+        const account = await seedUser({
+            email: 'admin@b.dev',
+            role: 'admin',
+            failedLoginAttempts: 4,
+        });
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({
+            events,
+            options: { lockout: { enabled: true, bypassForAdmins: true } },
+        });
+        await expect(svc.login({ email: 'admin@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
+        const row = await readUser(account.id);
+        expect(row.failedLoginAttempts).toBe(4);
+        expect(row.lockoutUntil).toBeNull();
+        expect(events.emit).toHaveBeenCalledWith('identity.user.login.failed', expect.objectContaining({ email: 'admin@b.dev' }));
+        expect(events.emit).not.toHaveBeenCalledWith('identity.user.lockout.triggered', expect.anything());
+    });
+    it('does not bypass lockout for other backoffice roles if bypassForAdmins is true', async () => {
+        const account = await seedUser({
+            email: 'support@b.dev',
+            role: 'support',
+            failedLoginAttempts: 4,
+        });
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({
+            events,
+            options: { lockout: { enabled: true, bypassForAdmins: true, maxAttempts: 5 } },
+        });
+        await expect(svc.login({ email: 'support@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
+        const row = await readUser(account.id);
+        expect(row.failedLoginAttempts).toBe(5);
+        expect(row.lockoutUntil?.getTime()).toBeGreaterThan(Date.now());
+        expect(events.emit).toHaveBeenCalledWith('identity.user.lockout.triggered', expect.objectContaining({ userId: account.id, email: 'support@b.dev' }));
+    });
+    it('anti-enumeration: locks a nonexistent email once failed attempts reach the threshold, mirroring a real account, without emitting lockout.triggered', async () => {
+        const events = makeEventBus();
+        const limiter = allowLimiter();
+        signInEmailMock.mockImplementation(async () => jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({ events, limiter, cache: realCache() });
+        for (let i = 0; i < 4; i++) {
+            await expect(svc.login({ email: 'nobody@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({ code: 'UNAUTHORIZED', message: 'Invalid' });
+        }
+        await expect(svc.login({ email: 'nobody@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({
+            code: 'UNAUTHORIZED',
+            data: { code: 'ACCOUNT_LOCKED' },
+        });
+        expect(limiter.reset).toHaveBeenCalledWith('login:nobody@b.dev');
+        expect(events.emit).not.toHaveBeenCalledWith('identity.user.lockout.triggered', expect.anything());
+    });
+    it('anti-enumeration: the shadow lockout survives a fresh service instance (state lives in Redis, not memory)', async () => {
+        signInEmailMock.mockImplementation(async () => jsonResponse({ message: 'Invalid' }, 401));
+        for (let i = 0; i < 5; i++) {
+            const svc = buildService({ cache: realCache() });
+            await expect(svc.login({ email: 'nobody@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
+        }
+        await expect(buildService({ cache: realCache() }).login({ email: 'nobody@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({ data: { code: 'ACCOUNT_LOCKED' } });
+    });
+    it('never locks a nonexistent email when cache is not provided (degrades to the pre-mirroring behavior)', async () => {
+        const events = makeEventBus();
+        signInEmailMock.mockImplementation(async () => jsonResponse({ message: 'Invalid' }, 401));
+        const svc = buildService({ events });
+        for (let i = 0; i < 6; i++) {
+            await expect(svc.login({ email: 'nobody@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toMatchObject({ code: 'UNAUTHORIZED', message: 'Invalid' });
+        }
+        expect(events.emit).not.toHaveBeenCalledWith('identity.user.lockout.triggered', expect.anything());
+    });
+});
+describe('IdentityService - login banned-user 403 (not the RG block)', () => {
+    it('surfaces a banned-user 403 from signInEmail as FORBIDDEN and still emits login.failed', async () => {
+        await seedUser();
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'BANNED_USER' }, 403));
+        const svc = buildService({ events });
+        await expect(svc.login({ email: EMAIL, password: 'whatever1' }, {}, new Headers())).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        expect(events.emit).toHaveBeenCalledWith('identity.user.login.failed', expect.objectContaining({ email: EMAIL, reason: 'error' }));
+        expect(events.emit).not.toHaveBeenCalledWith('rg.exclusion.login_blocked', expect.anything());
+    });
+});
+describe('IdentityService - RG login gate (real PG)', () => {
+    it('blocks a self-excluded login AFTER credentials verify, expires the issued session, and emits rg.exclusion.login_blocked', async () => {
+        const account = await seedUser({ rgBlocked: true, rgBlockedUntil: null });
+        const live = new Date(Date.now() + 24 * 60 * 60 * 1000);
+        await db.drizzle.db
+            .insert(session)
+            .values({ userId: account.id, token: randomUUID(), expiresAt: live });
+        const events = makeEventBus();
+        // Valid credentials (200) - the gate must still block.
+        signInEmailMock.mockResolvedValue(signInSuccess(account.id));
+        const svc = buildService({ events });
+        await expect(svc.login({ email: EMAIL, password: 'rightpass1' }, {}, new Headers())).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        expect(signInEmailMock).toHaveBeenCalled();
+        expect(events.emit).toHaveBeenCalledWith('rg.exclusion.login_blocked', expect.objectContaining({ userId: account.id }));
+        expect(events.emit).not.toHaveBeenCalledWith('identity.user.login', expect.anything());
+        expect(events.emit).not.toHaveBeenCalledWith('identity.user.login.failed', expect.anything());
+        const [revoked] = await db.drizzle.db
+            .select()
+            .from(session)
+            .where(eq(session.userId, account.id));
+        expect(revoked.expiresAt.getTime()).toBeLessThanOrEqual(Date.now());
+    });
+    it('allows login once a lapsed cooling-off block has elapsed', async () => {
+        const account = await seedUser({
+            rgBlocked: true,
+            rgBlockedUntil: new Date(Date.now() - 60_000),
+        });
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(signInSuccess(account.id));
+        const svc = buildService({ events });
+        const result = await svc.login({ email: EMAIL, password: 'rightpass1' }, {}, new Headers());
+        expect(result).toMatchObject({ session: { token: 'tok' } });
+        expect(events.emit).toHaveBeenCalledWith('identity.user.login', expect.objectContaining({ userId: account.id }));
+        expect(events.emit).not.toHaveBeenCalledWith('rg.exclusion.login_blocked', expect.anything());
+    });
+});
+describe('IdentityService - player-status login gate (real PG)', () => {
+    async function seedBlockedPlayer(status) {
+        const account = await seedUser();
+        await db.drizzle.db.insert(player).values({ userId: account.id, status });
+        const live = new Date(Date.now() + 24 * 60 * 60 * 1000);
+        await db.drizzle.db
+            .insert(session)
+            .values({ userId: account.id, token: randomUUID(), expiresAt: live });
+        return account;
+    }
+    for (const status of ['suspended', 'closed']) {
+        it(`blocks a ${status} player AFTER credentials verify, expires the issued session, and emits player.login_blocked`, async () => {
+            const account = await seedBlockedPlayer(status);
+            const events = makeEventBus();
+            // Valid credentials (200) - the gate must still block.
+            signInEmailMock.mockResolvedValue(signInSuccess(account.id));
+            const svc = buildService({ events });
+            await expect(svc.login({ email: EMAIL, password: 'rightpass1' }, {}, new Headers())).rejects.toMatchObject({ code: 'FORBIDDEN', data: { code: 'ACCOUNT_SUSPENDED' } });
+            expect(signInEmailMock).toHaveBeenCalled();
+            expect(events.emit).toHaveBeenCalledWith('player.login_blocked', expect.objectContaining({ userId: account.id, status }));
+            expect(events.emit).not.toHaveBeenCalledWith('identity.user.login', expect.anything());
+            expect(events.emit).not.toHaveBeenCalledWith('identity.user.login.failed', expect.anything());
+            const [revoked] = await db.drizzle.db
+                .select()
+                .from(session)
+                .where(eq(session.userId, account.id));
+            expect(revoked.expiresAt.getTime()).toBeLessThanOrEqual(Date.now());
+        });
+    }
+    it('allows login for an active player (no regression)', async () => {
+        const account = await seedUser();
+        await db.drizzle.db.insert(player).values({ userId: account.id, status: 'active' });
+        const events = makeEventBus();
+        signInEmailMock.mockResolvedValue(signInSuccess(account.id));
+        const svc = buildService({ events });
+        const result = await svc.login({ email: EMAIL, password: 'rightpass1' }, {}, new Headers());
+        expect(result).toMatchObject({ session: { token: 'tok' } });
+        expect(events.emit).toHaveBeenCalledWith('identity.user.login', expect.objectContaining({ userId: account.id }));
+        expect(events.emit).not.toHaveBeenCalledWith('player.login_blocked', expect.anything());
+    });
+});
+describe('IdentityService.unlockUser (real PG)', () => {
+    it('clears the lockout row and emits unlocked with the prior state', async () => {
+        const lockedUntil = new Date('2020-01-01T00:00:00.000Z');
+        const account = await seedUser({ failedLoginAttempts: 5, lockoutUntil: lockedUntil });
+        const events = makeEventBus();
+        const svc = buildService({ events });
+        const res = await svc.unlockUser(account.id, 'admin1');
+        expect(res).toEqual({ success: true });
+        const row = await readUser(account.id);
+        expect(row.failedLoginAttempts).toBe(0);
+        expect(row.lockoutUntil).toBeNull();
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unlocked', expect.objectContaining({
+            userId: account.id,
+            actorId: 'admin1',
+            previousFailedAttempts: 5,
+            previousLockoutUntil: lockedUntil.toISOString(),
+        }));
+    });
+    it('throws when the user does not exist', async () => {
+        await expect(buildService().unlockUser(randomUUID(), 'admin1')).rejects.toThrow();
+    });
+    it('resets the login rate-limit window for the unlocked user', async () => {
+        const account = await seedUser({
+            failedLoginAttempts: 5,
+            lockoutUntil: new Date('2020-01-01'),
+        });
+        const limiter = allowLimiter();
+        const svc = buildService({ limiter });
+        await svc.unlockUser(account.id, 'admin1');
+        expect(limiter.reset).toHaveBeenCalledWith(`login:${EMAIL}`);
+    });
+});
+describe('IdentityService.adminRequestPasswordReset (real PG)', () => {
+    it('requests an OTP for the user email, sets the admin-marker in cache, and emits the audit event', async () => {
+        requestPasswordResetEmailOTPMock.mockResolvedValue(jsonResponse({ success: true }, 200));
+        const account = await seedUser();
+        const events = makeEventBus();
+        const cache = realCache();
+        const svc = buildService({ events, cache });
+        const res = await svc.adminRequestPasswordReset(account.id, 'admin1', {
+            ip: '1.2.3.4',
+            userAgent: 'ua',
+        });
+        expect(res).toEqual({ success: true });
+        expect(requestPasswordResetEmailOTPMock).toHaveBeenCalledWith(expect.objectContaining({ body: { email: EMAIL } }));
+        expect(await cache.get(`admin-password-reset:${EMAIL}`)).toBe(true);
+        expect(events.emit).toHaveBeenCalledWith('identity.password.admin_reset_requested', expect.objectContaining({
+            userId: account.id,
+            email: EMAIL,
+            actorId: 'admin1',
+            ip: '1.2.3.4',
+            userAgent: 'ua',
+        }));
+    });
+    it('throws NOT_FOUND when the user does not exist', async () => {
+        await expect(buildService().adminRequestPasswordReset(randomUUID(), 'admin1')).rejects.toThrow();
+    });
+    it('swallows an OTP-send failure and still returns SUCCESS', async () => {
+        requestPasswordResetEmailOTPMock.mockRejectedValue(new Error('boom'));
+        const account = await seedUser();
+        await expect(buildService().adminRequestPasswordReset(account.id, 'admin1')).resolves.toEqual({
+            success: true,
+        });
+    });
+});
+describe('IdentityService.requestPasswordReset', () => {
+    it('calls the non-deprecated requestPasswordResetEmailOTP endpoint and returns SUCCESS', async () => {
+        requestPasswordResetEmailOTPMock.mockResolvedValue(jsonResponse({ success: true }, 200));
+        const result = await buildService().requestPasswordReset({ email: EMAIL });
+        expect(result).toEqual({ success: true });
+        expect(requestPasswordResetEmailOTPMock).toHaveBeenCalledWith(expect.objectContaining({ body: { email: EMAIL } }));
+    });
+    it('swallows a failure and still returns SUCCESS (anti-enumeration)', async () => {
+        requestPasswordResetEmailOTPMock.mockRejectedValue(new Error('boom'));
+        await expect(buildService().requestPasswordReset({ email: 'unregistered@x.dev' })).resolves.toEqual({ success: true });
+    });
+});
+describe('IdentityService.verifyPasswordResetOtp', () => {
+    it('calls checkVerificationOTP with type forget-password and returns SUCCESS', async () => {
+        checkVerificationOTPMock.mockResolvedValue(jsonResponse({ success: true }, 200));
+        const result = await buildService().verifyPasswordResetOtp({ email: EMAIL, otp: '123456' });
+        expect(result).toEqual({ success: true });
+        expect(checkVerificationOTPMock).toHaveBeenCalledWith(expect.objectContaining({
+            body: { email: EMAIL, type: 'forget-password', otp: '123456' },
+        }));
+    });
+    it('surfaces an invalid OTP (400) response as ORPCError BAD_REQUEST with a generic message', async () => {
+        checkVerificationOTPMock.mockResolvedValue(jsonResponse({ message: 'INVALID_OTP' }, 400));
+        await expect(buildService().verifyPasswordResetOtp({ email: EMAIL, otp: '000000' })).rejects.toMatchObject({
+            code: 'BAD_REQUEST',
+            message: 'Invalid or expired verification code',
+        });
+    });
+    it('does not leak better-auth USER_NOT_FOUND message - forces the same generic message as a wrong OTP (anti-enumeration)', async () => {
+        // better-auth's checkVerificationOTP checks findUserByEmail BEFORE the OTP row, so an
+        // unregistered email produces a distinct raw message ("User not found") that must never
+        // reach the caller - it would let an unauthenticated caller learn whether an email exists.
+        checkVerificationOTPMock.mockResolvedValue(jsonResponse({ message: 'User not found' }, 400));
+        await expect(buildService().verifyPasswordResetOtp({ email: 'unregistered@x.dev', otp: '000000' })).rejects.toMatchObject({
+            code: 'BAD_REQUEST',
+            message: 'Invalid or expired verification code',
+        });
+    });
+    it('surfaces a TOO_MANY_ATTEMPTS (403) response as ORPCError BAD_REQUEST (masked)', async () => {
+        checkVerificationOTPMock.mockResolvedValue(jsonResponse({ message: 'TOO_MANY_ATTEMPTS' }, 403));
+        await expect(buildService().verifyPasswordResetOtp({ email: EMAIL, otp: '000000' })).rejects.toMatchObject({ code: 'BAD_REQUEST' });
+    });
+});
+describe('IdentityService.resetPassword', () => {
+    it('calls resetPasswordEmailOTP with the right body and returns SUCCESS', async () => {
+        resetPasswordEmailOTPMock.mockResolvedValue(jsonResponse({ success: true }, 200));
+        const result = await buildService().resetPassword({
+            email: EMAIL,
+            otp: '123456',
+            newPassword: 'newpassword1',
+        });
+        expect(result).toEqual({ success: true });
+        expect(resetPasswordEmailOTPMock).toHaveBeenCalledWith(expect.objectContaining({
+            body: { email: EMAIL, otp: '123456', password: 'newpassword1' },
+        }));
+    });
+    it('surfaces a TOO_MANY_ATTEMPTS (403) response as ORPCError BAD_REQUEST (masked)', async () => {
+        resetPasswordEmailOTPMock.mockResolvedValue(jsonResponse({ message: 'TOO_MANY_ATTEMPTS' }, 403));
+        await expect(buildService().resetPassword({ email: EMAIL, otp: '000000', newPassword: 'newpassword1' })).rejects.toMatchObject({ code: 'BAD_REQUEST' });
+    });
+});
+describe('IdentityService onPasswordReset hook (wired via createAuth)', () => {
+    it('clears the lockout row and emits identity.password.reset when better-auth invokes the hook', async () => {
+        const account = await seedUser({
+            failedLoginAttempts: 5,
+            lockoutUntil: new Date(Date.now() + 60_000),
+        });
+        const events = makeEventBus();
+        buildService({ events });
+        await capturedAuthOptions.current?.onPasswordReset?.({ id: account.id, email: EMAIL });
+        expect(events.emit).toHaveBeenCalledWith('identity.password.reset', expect.objectContaining({ userId: account.id }));
+        const row = await readUser(account.id);
+        expect(row.failedLoginAttempts).toBe(0);
+        expect(row.lockoutUntil).toBeNull();
+    });
+});
+describe('IdentityService.updateProfile language validation', () => {
+    it('rejects an unsupported language before calling updateUser', async () => {
+        const svc = buildService({
+            platformConfig: mock({ supportedLanguages: ['en', 'fr'] }),
+        });
+        await expect(svc.updateProfile({ language: 'de' }, {}, new Headers())).rejects.toThrow(UnsupportedLanguageError);
+        expect(updateUserMock).not.toHaveBeenCalled();
+    });
+    it('accepts a supported language and forwards it to updateUser', async () => {
+        updateUserMock.mockResolvedValue(jsonResponse({ status: true }, 200));
+        getSessionMock.mockResolvedValueOnce({ user: { ...betterAuthUser, language: 'fr' } });
+        const svc = buildService({
+            platformConfig: mock({ supportedLanguages: ['en', 'fr'] }),
+        });
+        const result = await svc.updateProfile({ language: 'fr' }, {}, new Headers());
+        expect(updateUserMock).toHaveBeenCalledWith(expect.objectContaining({ body: expect.objectContaining({ language: 'fr' }) }));
+        expect(result.user.language).toBe('fr');
+    });
+});
+//# sourceMappingURL=identity.service.int.test.js.map

package/dist/pam/identity/__tests__/identity.service.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.service.int.test.js","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/identity.service.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,eAAe,EAGf,QAAQ,IAAI,UAAU,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAM9E,OAAO,EACL,eAAe,EACf,2BAA2B,GAE5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAElF,MAAM,EACJ,eAAe,EACf,cAAc,EACd,cAAc,EACd,gCAAgC,EAChC,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,GACpB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IAC/C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,gCAAgC,EAAE,EAAE,CAAC,EAAE,EAAE;IACzC,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;IACjC,yBAAyB,EAAE,EAAE,CAAC,EAAE,EAAE;IAClC,mBAAmB,EAAE;QACnB,OAAO,EAAE,SAEI;KACd;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,MAAM,cAAc,EAAU,CAAC;IACnC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5B,mBAAmB,CAAC,OAAO,GAAG,OAAO,CAAC;QACtC,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,SAAS,EAAE,2BAA2B;iBACvC;aACF;YACD,GAAG,EAAE;gBACH,UAAU,EAAE,cAAc;gBAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;gBACpB,WAAW,EAAE,eAAe;gBAC5B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;gBAChB,UAAU,EAAE,cAAc;gBAC1B,4BAA4B,EAAE,gCAAgC;gBAC9D,oBAAoB,EAAE,wBAAwB;gBAC9C,qBAAqB,EAAE,yBAAyB;aACjD;SACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAE5D,IAAI,EAAU,CAAC;AACf,IAAI,KAAgB,CAAC;AAErB,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,IAAI,CAAqB;IACvB,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;CAC5C,CAAC,CAAC;AAEL,MAAM,oBAAoB,GAA0B;IAClD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;CACrD,CAAC;AAEF,SAAS,YAAY,CAAC,OAA+D,EAAE;IACrF,OAAO,IAAI,eAAe,CAAC;QACzB,gBAAgB,EAAE,oBAAoB;QACtC,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,cAAc,EAAE,kBAAkB,EAAE;QACpC,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAc;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,EAAE,EAAE,sCAAsC;IAC1C,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,GAAG;IACT,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,0BAA0B;IACrC,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,MAAM,QAAQ,GAAG,CAAC,OAA0C,EAAE,EAAE,EAAE,CAChE,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAEvD,KAAK,UAAU,QAAQ,CAAC,MAAc;IACpC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CACvC,YAAY,CACV;IACE,IAAI,EAAE,EAAE,GAAG,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE;IACvC,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE;CACnD,EACD,GAAG,CACJ,CAAC;AAEJ,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3D,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,IAAI,KAAK,OAAO,KAAK,MAAM,2BAA2B,CACtE,CAAC;IACF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,CAAC,MAAM,YAAY,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAE9C,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SACjE,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7E,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,iCAAiC,EACjC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAC9D,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,mBAAmB,EAAE,CAAC;YACtB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YAC5C,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACjD,CAAC,CAAC;QACH,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SACjE,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,mBAAmB,EAAE,CAAC;YACtB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YACzD,iBAAiB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;SAC9D,CAAC,CAAC;QACH,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,KAAK,MAAM,iBAAiB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SACjE,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CACzE,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,iCAAiC,EACjC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,QAAQ,EAAE,CAAC;QACjB,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,KAAK,MAAM,iBAAiB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SACjE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QACjC,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,MAAM,OAAO,CAAC,UAAU,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAC7B,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CACF,CAAC;QAEF,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,OAAO,CAAC,UAAU,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAC7B,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAE3B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE;gBACJ,IAAI,EAAE,gBAAgB;gBACtB,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;aACnC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAE5F,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,OAAO;YACb,mBAAmB,EAAE,CAAC;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,CAAC;YACvB,MAAM;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE;SAC/D,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAC/E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAClD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,iCAAiC,EACjC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,SAAS;YACf,mBAAmB,EAAE,CAAC;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,YAAY,CAAC;YACvB,MAAM;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;SAC/E,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACjF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,iCAAiC,EACjC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oJAAoJ,EAAE,KAAK,IAAI,EAAE;QAClK,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,eAAe,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAElE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;SACjC,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,iCAAiC,EACjC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;QACzH,eAAe,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAE1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,MAAM,CACV,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CACxC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,EACjD,EAAE,EACF,IAAI,OAAO,EAAE,CACd,CACF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;QACnH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,iCAAiC,EACjC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACjF,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACtE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAC3D,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,yHAAyH,EAAE,KAAK,IAAI,EAAE;QACvI,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAChB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,uDAAuD;QACvD,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,eAAe,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,qBAAqB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9F,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAClC,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAE5F,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,KAAK,UAAU,iBAAiB,CAAC,MAA8B;QAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAChB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAU,EAAE,CAAC;QACtD,EAAE,CAAC,YAAY,MAAM,8FAA8F,EAAE,KAAK,IAAI,EAAE;YAC9H,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,uDAAuD;YACvD,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAErC,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAEpF,MAAM,CAAC,eAAe,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,sBAAsB,EACtB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CACxD,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,qBAAqB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAE9F,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;iBAClC,MAAM,EAAE;iBACR,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAE5F,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAErC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEvD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,wBAAwB,EACxB,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,OAAO,EAAE,QAAQ;YACjB,sBAAsB,EAAE,CAAC;YACzB,oBAAoB,EAAE,WAAW,CAAC,WAAW,EAAE;SAChD,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,mBAAmB,EAAE,CAAC;YACtB,YAAY,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEtC,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE3C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,gCAAgC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE;YACpE,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,gCAAgC,CAAC,CAAC,oBAAoB,CAC3D,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACpD,CAAC;QACF,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,yCAAyC,EACzC,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,QAAQ;YACjB,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,IAAI;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,CACV,YAAY,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,CACjE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,gCAAgC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QAEjC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5F,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,gCAAgC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAEzF,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,gCAAgC,CAAC,CAAC,oBAAoB,CAC3D,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACpD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,gCAAgC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAEtE,MAAM,MAAM,CACV,YAAY,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CACrE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,wBAAwB,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAEjF,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE5F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,wBAAwB,CAAC,CAAC,oBAAoB,CACnD,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE;SAC/D,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,wBAAwB,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,CACV,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sHAAsH,EAAE,KAAK,IAAI,EAAE;QACpI,sFAAsF;QACtF,wFAAwF;QACxF,2FAA2F;QAC3F,wBAAwB,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAE7F,MAAM,MAAM,CACV,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CACtF,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,wBAAwB,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAEhG,MAAM,MAAM,CACV,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,yBAAyB,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,aAAa,CAAC;YAChD,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,QAAQ;YACb,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,yBAAyB,CAAC,CAAC,oBAAoB,CACpD,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE;SAChE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,yBAAyB,CAAC,iBAAiB,CACzC,YAAY,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CACpD,CAAC;QAEF,MAAM,MAAM,CACV,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAC3F,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;YAC7B,mBAAmB,EAAE,CAAC;YACtB,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzB,MAAM,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,yBAAyB,EACzB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,YAAY,CAAC;YACvB,cAAc,EAAE,IAAI,CAAiB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpF,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,cAAc,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACtE,cAAc,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,YAAY,CAAC;YACvB,cAAc,EAAE,IAAI,CAAiB,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAE9E,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAC/E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/identity/__tests__/login-enforcement.service.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=login-enforcement.service.int.test.d.ts.map

package/dist/pam/identity/__tests__/login-enforcement.service.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-enforcement.service.int.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/login-enforcement.service.int.test.ts"],"names":[],"mappings":""}