@rockcarver/frodo-lib 2.0.0-2 → 2.0.0-3

package/CHANGELOG.md

@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.0-3] - 2023-06-14
+
 ## [2.0.0-2] - 2023-06-12
 
 ## [2.0.0-1] - 2023-06-08
@@ -1153,7 +1155,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 -   Fixed problem with adding connection profiles
 -   Miscellaneous bug fixes
 
-[Unreleased]: https://github.com/rockcarver/frodo-lib/compare/v2.0.0-2...HEAD
+[Unreleased]: https://github.com/rockcarver/frodo-lib/compare/v2.0.0-3...HEAD
+
+[2.0.0-3]: https://github.com/rockcarver/frodo-lib/compare/v2.0.0-2...v2.0.0-3
 
 [2.0.0-2]: https://github.com/rockcarver/frodo-lib/compare/v2.0.0-1...v2.0.0-2
 

package/cjs/index.js

@@ -3,6 +3,12 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+Object.defineProperty(exports, "FrodoLib", {
+  enumerable: true,
+  get: function get() {
+    return _FrodoLib.FrodoLib;
+  }
+});
 Object.defineProperty(exports, "frodo", {
   enumerable: true,
   get: function get() {

package/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_FrodoLib","require"],"sources":["index.ts"],"sourcesContent":["export { frodo, state } from './lib/FrodoLib';\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,IAAAA,SAAA,GAAAC,OAAA"}
+{"version":3,"file":"index.js","names":["_FrodoLib","require"],"sources":["index.ts"],"sourcesContent":["export { frodo, state, FrodoLib } from './lib/FrodoLib';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,SAAA,GAAAC,OAAA"}

package/cjs/ops/AuthenticateOps.js

@@ -556,11 +556,15 @@ function _getLoggedInSubject() {
   _getLoggedInSubject = _asyncToGenerator(function* (state) {
     var subjectString = "user ".concat(state.getUsername());
     if (state.getUseBearerTokenForAmApis()) {
-      var name = (yield (0, _ServiceAccountOps.getServiceAccount)({
-        serviceAccountId: state.getServiceAccountId(),
-        state
-      })).name;
-      subjectString = "service account ".concat(name, " [").concat(state.getServiceAccountId(), "]");
+      try {
+        var name = (yield (0, _ServiceAccountOps.getServiceAccount)({
+          serviceAccountId: state.getServiceAccountId(),
+          state
+        })).name;
+        subjectString = "service account ".concat(name, " [").concat(state.getServiceAccountId(), "]");
+      } catch (error) {
+        subjectString = "service account ".concat(state.getServiceAccountId());
+      }
     }
     return subjectString;
   });

package/cjs/ops/AuthenticateOps.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticateOps.js","names":["_url","_interopRequireDefault","require","_crypto","_readlineSync","_Base","globalConfig","_interopRequireWildcard","_ServerInfoApi","_AuthenticateApi","_OAuth2OIDCApi","_ConnectionProfileOps","_uuid","_ApiUtils","_JoseOps","_ServiceAccountOps","_OpsUtils","_Console","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","asyncGeneratorStep","gen","resolve","reject","_next","_throw","arg","info","value","error","done","Promise","then","_asyncToGenerator","fn","self","args","arguments","apply","err","undefined","AuthenticateOps","constructor","state","getAccessTokenForServiceAccount","_arguments","_this","saId","length","saJwk","getTokens","forceLoginAsUser","exports","adminClientPassword","redirectUrlTemplate","cloudIdmAdminScopes","forgeopsIdmAdminScopes","serviceAccountScopes","adminClientId","determineCookieName","_x","_determineCookieName","data","getServerInfo","debugMessage","concat","cookieName","checkAndHandle2FA","payload","callback","callbacks","type","localAuth","output","provider","input","includes","nextStep","need2fa","factor","supported","printMessage","code","readlineSync","question","getUsername","getPassword","determineDefaultRealm","getRealm","DEFAULT_REALM_KEY","setRealm","DEPLOYMENT_TYPE_REALM_MAP","getDeploymentType","determineDeploymentType","_x2","_determineDeploymentType","cookieValue","getCookieValue","getUseBearerTokenForAmApis","CLOUD_DEPLOYMENT_TYPE_KEY","fidcClientId","forgeopsClientId","verifier","encodeBase64Url","randomBytes","challenge","createHash","update","digest","challengeMethod","redirectURL","url","getHost","config","maxRedirects","headers","getCookieName","bodyFormData","deploymentType","CLASSIC_DEPLOYMENT_TYPE_KEY","authorize","amBaseUrl","e","_e$response","_e$response$headers","_e$response$headers$l","response","status","location","indexOf","verboseMessage","ex","_ex$response","_ex$response$headers","_ex$response$headers$","FORGEOPS_DEPLOYMENT_TYPE_KEY","getSemanticVersion","versionInfo","versionString","version","rx","match","Error","authenticate","_x3","_authenticate","step","body","skip2FA","steps","maxSteps","getAuthCode","_x4","_x5","_x6","_x7","_getAuthCode","codeChallenge","codeChallengeMethod","_response$headers","redirectLocationURL","queryObject","parse","query","_error$response","message","stack","getAccessTokenForUser","_x8","_getAccessTokenForUser","authCode","auth","username","password","accessToken","access_token","_error$response2","createPayload","serviceAccountId","host","u","parseUrl","aud","origin","port","protocol","pathname","exp","Math","floor","Date","getTime","jti","v4","iss","sub","_x9","_getAccessTokenForServiceAccount","_ref","getServiceAccountId","getServiceAccountJwk","jwt","createSignedJwtToken","determineDeploymentTypeAndDefaultRealmAndVersion","_x10","_determineDeploymentTypeAndDefaultRealmAndVersion","setDeploymentType","getServerVersionInfo","fullVersion","setAmVersion","getLoggedInSubject","_x11","_getLoggedInSubject","subjectString","name","getServiceAccount","_x12","_getTokens","_ref2","conn","getConnectionProfile","setHost","tenant","setUsername","setPassword","setAuthenticationService","authenticationService","setAuthenticationHeaderOverrides","authenticationHeaderOverrides","setServiceAccountId","svcacctId","setServiceAccountJwk","svcacctJwk","isValidUrl","setCookieName","token","setBearerToken","setUseBearerTokenForAmApis","saErr","_saErr$response","_saErr$response2","_saErr$response2$data","_saErr$response3","_saErr$response3$data","error_description","setCookieValue","getBearerToken","_error$response3","_error$response3$data","_error$response4","_error$response4$data","_error$response5"],"sources":["ops/AuthenticateOps.ts"],"sourcesContent":["import url from 'url';\nimport { createHash, randomBytes } from 'crypto';\nimport readlineSync from 'readline-sync';\nimport { encodeBase64Url } from '../api/utils/Base64';\nimport State from '../shared/State';\nimport * as globalConfig from '../storage/StaticStorage';\nimport { getServerInfo, getServerVersionInfo } from '../api/ServerInfoApi';\nimport { step } from '../api/AuthenticateApi';\nimport { accessToken, authorize } from '../api/OAuth2OIDCApi';\nimport { getConnectionProfile } from './ConnectionProfileOps';\nimport { v4 } from 'uuid';\nimport { parseUrl } from '../api/utils/ApiUtils';\nimport { JwkRsa, createSignedJwtToken } from './JoseOps';\nimport { getServiceAccount } from './cloud/ServiceAccountOps';\nimport { isValidUrl } from './utils/OpsUtils';\nimport { debugMessage, printMessage, verboseMessage } from './utils/Console';\n\nexport default class AuthenticateOps {\n  state: State;\n  constructor(state: State) {\n    this.state = state;\n  }\n\n  /**\n   * Get access token for service account\n   * @returns {string | null} Access token or null\n   */\n  async getAccessTokenForServiceAccount(\n    saId: string = undefined,\n    saJwk: JwkRsa = undefined\n  ): Promise<string | null> {\n    return getAccessTokenForServiceAccount({ saId, saJwk, state: this.state });\n  }\n\n  /**\n   * Get tokens\n   * @param {boolean} forceLoginAsUser true to force login as user even if a service account is available (default: false)\n   * @returns {Promise<boolean>} true if tokens were successfully obtained, false otherwise\n   */\n  getTokens(forceLoginAsUser = false) {\n    return getTokens({ forceLoginAsUser, state: this.state });\n  }\n}\n\nconst adminClientPassword = 'doesnotmatter';\nconst redirectUrlTemplate = '/platform/appAuthHelperRedirect.html';\n\nconst cloudIdmAdminScopes = 'openid fr:idm:* fr:idc:esv:*';\nconst forgeopsIdmAdminScopes = 'openid fr:idm:*';\nconst serviceAccountScopes = 'fr:am:* fr:idm:* fr:idc:esv:*';\n\nlet adminClientId = 'idmAdminClient';\n\n/**\n * Helper function to get cookie name\n * @param {State} state library state\n * @returns {string} cookie name\n */\nasync function determineCookieName(state: State) {\n  const data = await getServerInfo({ state });\n  debugMessage(\n    `AuthenticateOps.determineCookieName: cookieName=${data.cookieName}`\n  );\n  return data.cookieName;\n}\n\n/**\n * Helper function to determine if this is a setup mfa prompt in the ID Cloud tenant admin login journey\n * @param {Object} payload response from the previous authentication journey step\n * @param {State} state library state\n * @returns {Object} an object indicating if 2fa is required and the original payload\n */\nfunction checkAndHandle2FA(payload, state: State) {\n  debugMessage(`AuthenticateOps.checkAndHandle2FA: start`);\n  // let skippable = false;\n  if ('callbacks' in payload) {\n    for (const callback of payload.callbacks) {\n      // select localAuthentication if Admin Federation is enabled\n      if (callback.type === 'SelectIdPCallback') {\n        debugMessage(\n          `AuthenticateOps.checkAndHandle2FA: Admin federation enabled. Allowed providers:`\n        );\n        let localAuth = false;\n        for (const value of callback.output[0].value) {\n          debugMessage(`${value.provider}`);\n          if (value.provider === 'localAuthentication') {\n            localAuth = true;\n          }\n        }\n        if (localAuth) {\n          debugMessage(`local auth allowed`);\n          callback.input[0].value = 'localAuthentication';\n        } else {\n          debugMessage(`local auth NOT allowed`);\n        }\n      }\n      if (callback.type === 'HiddenValueCallback') {\n        if (callback.input[0].value.includes('skip')) {\n          // skippable = true;\n          callback.input[0].value = 'Skip';\n          // debugMessage(\n          //   `AuthenticateOps.checkAndHandle2FA: end [need2fa=true, skippable=true]`\n          // );\n          // return {\n          //   nextStep: true,\n          //   need2fa: true,\n          //   factor: 'None',\n          //   supported: true,\n          //   payload,\n          // };\n        }\n        if (callback.input[0].value.includes('webAuthnOutcome')) {\n          // webauthn!!!\n          debugMessage(\n            `AuthenticateOps.checkAndHandle2FA: end [need2fa=true, unsupported factor: webauthn]`\n          );\n          return {\n            nextStep: false,\n            need2fa: true,\n            factor: 'WebAuthN',\n            supported: false,\n            payload,\n          };\n        }\n      }\n      if (callback.type === 'NameCallback') {\n        if (callback.output[0].value.includes('code')) {\n          // skippable = false;\n          debugMessage(\n            `AuthenticateOps.checkAndHandle2FA: need2fa=true, skippable=false`\n          );\n          printMessage('2FA is enabled and required for this user...');\n          const code = readlineSync.question(`${callback.output[0].value}: `);\n          callback.input[0].value = code;\n          debugMessage(\n            `AuthenticateOps.checkAndHandle2FA: end [need2fa=true, skippable=false, factor=Code]`\n          );\n          return {\n            nextStep: true,\n            need2fa: true,\n            factor: 'Code',\n            supported: true,\n            payload,\n          };\n        } else {\n          // answer callback\n          callback.input[0].value = state.getUsername();\n        }\n      }\n      if (callback.type === 'PasswordCallback') {\n        // answer callback\n        callback.input[0].value = state.getPassword();\n      }\n    }\n    debugMessage(`AuthenticateOps.checkAndHandle2FA: end [need2fa=false]`);\n    // debugMessage(payload);\n    return {\n      nextStep: true,\n      need2fa: false,\n      factor: 'None',\n      supported: true,\n      payload,\n    };\n  }\n  debugMessage(`AuthenticateOps.checkAndHandle2FA: end [need2fa=false]`);\n  // debugMessage(payload);\n  return {\n    nextStep: false,\n    need2fa: false,\n    factor: 'None',\n    supported: true,\n    payload,\n  };\n}\n\n/**\n * Helper function to set the default realm by deployment type\n * @param {State} state library state\n */\nfunction determineDefaultRealm(state: State) {\n  if (\n    !state.getRealm() ||\n    state.getRealm() === globalConfig.DEFAULT_REALM_KEY\n  ) {\n    state.setRealm(\n      globalConfig.DEPLOYMENT_TYPE_REALM_MAP[state.getDeploymentType()]\n    );\n  }\n}\n\n/**\n * Helper function to determine the deployment type\n * @param {State} state library state\n * @returns {Promise<string>} deployment type\n */\nasync function determineDeploymentType(state: State): Promise<string> {\n  const cookieValue = state.getCookieValue();\n\n  // if we are using a service account, we know it's cloud\n  if (state.getUseBearerTokenForAmApis())\n    return globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY;\n\n  const fidcClientId = 'idmAdminClient';\n  const forgeopsClientId = 'idm-admin-ui';\n\n  const verifier = encodeBase64Url(randomBytes(32));\n  const challenge = encodeBase64Url(\n    createHash('sha256').update(verifier).digest()\n  );\n  const challengeMethod = 'S256';\n  const redirectURL = url.resolve(state.getHost(), redirectUrlTemplate);\n\n  const config = {\n    maxRedirects: 0,\n    headers: {\n      [state.getCookieName()]: state.getCookieValue(),\n    },\n  };\n  let bodyFormData = `redirect_uri=${redirectURL}&scope=${cloudIdmAdminScopes}&response_type=code&client_id=${fidcClientId}&csrf=${cookieValue}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n\n  let deploymentType = globalConfig.CLASSIC_DEPLOYMENT_TYPE_KEY;\n  try {\n    await authorize({\n      amBaseUrl: state.getHost(),\n      data: bodyFormData,\n      config,\n      state,\n    });\n  } catch (e) {\n    // debugMessage(e.response);\n    if (\n      e.response?.status === 302 &&\n      e.response.headers?.location?.indexOf('code=') > -1\n    ) {\n      verboseMessage(`ForgeRock Identity Cloud`['brightCyan'] + ` detected.`);\n      deploymentType = globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY;\n    } else {\n      try {\n        bodyFormData = `redirect_uri=${redirectURL}&scope=${forgeopsIdmAdminScopes}&response_type=code&client_id=${forgeopsClientId}&csrf=${state.getCookieValue()}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n        await authorize({\n          amBaseUrl: state.getHost(),\n          data: bodyFormData,\n          config,\n          state,\n        });\n      } catch (ex) {\n        if (\n          ex.response?.status === 302 &&\n          ex.response.headers?.location?.indexOf('code=') > -1\n        ) {\n          adminClientId = forgeopsClientId;\n          verboseMessage(`ForgeOps deployment`['brightCyan'] + ` detected.`);\n          deploymentType = globalConfig.FORGEOPS_DEPLOYMENT_TYPE_KEY;\n        } else {\n          verboseMessage(`Classic deployment`['brightCyan'] + ` detected.`);\n        }\n      }\n    }\n  }\n  return deploymentType;\n}\n\n/**\n * Helper function to extract the semantic version string from a version info object\n * @param {Object} versionInfo version info object\n * @returns {String} semantic version\n */\nfunction getSemanticVersion(versionInfo) {\n  if ('version' in versionInfo) {\n    const versionString = versionInfo.version;\n    const rx = /([\\d]\\.[\\d]\\.[\\d](\\.[\\d])*)/g;\n    const version = versionString.match(rx);\n    return version[0];\n  }\n  throw new Error('Cannot extract semantic version from version info object.');\n}\n\n/**\n * Helper function to authenticate and obtain and store session cookie\n * @param {State} state library state\n * @returns {string} Session token or null\n */\nasync function authenticate(state: State): Promise<string> {\n  debugMessage(`AuthenticateOps.authenticate: start`);\n  const config = {\n    headers: {\n      'X-OpenAM-Username': state.getUsername(),\n      'X-OpenAM-Password': state.getPassword(),\n    },\n  };\n  let response = await step({ body: {}, config, state });\n\n  let skip2FA = null;\n  let steps = 0;\n  const maxSteps = 3;\n  do {\n    skip2FA = checkAndHandle2FA(response, state);\n\n    // throw exception if 2fa required but factor not supported by frodo (e.g. WebAuthN)\n    if (!skip2FA.supported) {\n      throw new Error(`Unsupported 2FA factor: ${skip2FA.factor}`);\n    }\n\n    if (skip2FA.nextStep) {\n      steps++;\n      response = await step({ body: skip2FA.payload, state });\n    }\n\n    if ('tokenId' in response) {\n      debugMessage(\n        `AuthenticateOps.authenticate: end [tokenId=${response['tokenId']}]`\n      );\n      return response['tokenId'] as string;\n    }\n  } while (skip2FA.nextStep && steps < maxSteps);\n  debugMessage(`AuthenticateOps.authenticate: end [no session]`);\n  return null;\n}\n\n/**\n * Helper function to obtain an oauth2 authorization code\n * @param {string} redirectURL oauth2 redirect uri\n * @param {string} codeChallenge PKCE code challenge\n * @param {string} codeChallengeMethod PKCE code challenge method\n * @param {State} state library state\n * @returns {string} oauth2 authorization code or null\n */\nasync function getAuthCode(\n  redirectURL: string,\n  codeChallenge: string,\n  codeChallengeMethod: string,\n  state: State\n) {\n  try {\n    const bodyFormData = `redirect_uri=${redirectURL}&scope=${\n      state.getDeploymentType() === globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY\n        ? cloudIdmAdminScopes\n        : forgeopsIdmAdminScopes\n    }&response_type=code&client_id=${adminClientId}&csrf=${state.getCookieValue()}&decision=allow&code_challenge=${codeChallenge}&code_challenge_method=${codeChallengeMethod}`;\n    const config = {\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      maxRedirects: 0,\n    };\n    let response = undefined;\n    try {\n      response = await authorize({\n        amBaseUrl: state.getHost(),\n        data: bodyFormData,\n        config,\n        state,\n      });\n    } catch (error) {\n      response = error.response;\n    }\n    if (response.status < 200 || response.status > 399) {\n      printMessage('error getting auth code', 'error');\n      printMessage(\n        'likely cause: mismatched parameters with OAuth client config',\n        'error'\n      );\n      return null;\n    }\n    const redirectLocationURL = response.headers?.location;\n    const queryObject = url.parse(redirectLocationURL, true).query;\n    if ('code' in queryObject) {\n      return queryObject.code;\n    }\n    printMessage('auth code not found', 'error');\n    return null;\n  } catch (error) {\n    printMessage(`error getting auth code - ${error.message}`, 'error');\n    printMessage(error.response?.data, 'error');\n    debugMessage(error.stack);\n    return null;\n  }\n}\n\n/**\n * Helper function to obtain oauth2 access token\n * @param {State} state library state\n * @returns {Promise<string | null>} access token or null\n */\nasync function getAccessTokenForUser(state: State): Promise<string | null> {\n  debugMessage(`AuthenticateOps.getAccessTokenForUser: start`);\n  try {\n    const verifier = encodeBase64Url(randomBytes(32));\n    const challenge = encodeBase64Url(\n      createHash('sha256').update(verifier).digest()\n    );\n    const challengeMethod = 'S256';\n    const redirectURL = url.resolve(state.getHost(), redirectUrlTemplate);\n    const authCode = await getAuthCode(\n      redirectURL,\n      challenge,\n      challengeMethod,\n      state\n    );\n    if (authCode == null) {\n      printMessage('error getting auth code', 'error');\n      return null;\n    }\n    let response = null;\n    if (state.getDeploymentType() === globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY) {\n      const config = {\n        auth: {\n          username: adminClientId,\n          password: adminClientPassword,\n        },\n      };\n      const bodyFormData = `redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken({\n        amBaseUrl: state.getHost(),\n        data: bodyFormData,\n        config,\n        state,\n      });\n    } else {\n      const bodyFormData = `client_id=${adminClientId}&redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken({\n        amBaseUrl: state.getHost(),\n        data: bodyFormData,\n        config: {},\n        state,\n      });\n    }\n    if ('access_token' in response.data) {\n      debugMessage(`AuthenticateOps.getAccessTokenForUser: end with token`);\n      return response.data.access_token;\n    }\n    printMessage('No access token in response.', 'error');\n  } catch (error) {\n    debugMessage(`Error getting access token for user: ${error}`);\n    debugMessage(error.response?.data);\n  }\n  debugMessage(`AuthenticateOps.getAccessTokenForUser: end without token`);\n  return null;\n}\n\nfunction createPayload(serviceAccountId: string, host: string) {\n  const u = parseUrl(host);\n  const aud = `${u.origin}:${\n    u.port ? u.port : u.protocol === 'https' ? '443' : '80'\n  }${u.pathname}/oauth2/access_token`;\n\n  // Cross platform way of setting JWT expiry time 3 minutes in the future, expressed as number of seconds since EPOCH\n  const exp = Math.floor(new Date().getTime() / 1000 + 180);\n\n  // A unique ID for the JWT which is required when requesting the openid scope\n  const jti = v4();\n\n  const iss = serviceAccountId;\n  const sub = serviceAccountId;\n\n  // Create the payload for our bearer token\n  const payload = { iss, sub, aud, exp, jti };\n\n  return payload;\n}\n\n/**\n * Get access token for service account\n * @param {State} state library state\n * @returns {string | null} Access token or null\n */\nexport async function getAccessTokenForServiceAccount({\n  saId = undefined,\n  saJwk = undefined,\n  state,\n}: {\n  saId?: string;\n  saJwk?: JwkRsa;\n  state: State;\n}): Promise<string | null> {\n  saId = saId ? saId : state.getServiceAccountId();\n  saJwk = saJwk ? saJwk : state.getServiceAccountJwk();\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: start`);\n  const payload = createPayload(saId, state.getHost());\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: payload:`);\n  debugMessage(payload);\n  const jwt = await createSignedJwtToken(payload, saJwk);\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: jwt:`);\n  debugMessage(jwt);\n  const bodyFormData = `assertion=${jwt}&client_id=service-account&grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&scope=${serviceAccountScopes}`;\n  const response = await accessToken({\n    amBaseUrl: state.getHost(),\n    data: bodyFormData,\n    config: {},\n    state,\n  });\n  if ('access_token' in response.data) {\n    debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: token:`);\n    debugMessage(response.data.access_token);\n    debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: end`);\n    return response.data.access_token;\n  }\n  debugMessage(\n    `AuthenticateOps.getAccessTokenForServiceAccount: No access token in response.`\n  );\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: end`);\n  return null;\n}\n\n/**\n * Helper function to determine deployment type, default realm, and version and update library state\n * @param state library state\n */\nasync function determineDeploymentTypeAndDefaultRealmAndVersion(\n  state: State\n): Promise<void> {\n  debugMessage(\n    `AuthenticateOps.determineDeploymentTypeAndDefaultRealmAndVersion: start`\n  );\n  if (!state.getDeploymentType()) {\n    state.setDeploymentType(await determineDeploymentType(state));\n  }\n  determineDefaultRealm(state);\n  debugMessage(\n    `AuthenticateOps.determineDeploymentTypeAndDefaultRealmAndVersion: realm=${state.getRealm()}, type=${state.getDeploymentType()}`\n  );\n\n  const versionInfo = await getServerVersionInfo({ state });\n\n  // https://github.com/rockcarver/frodo-cli/issues/109\n  debugMessage(`Full version: ${versionInfo.fullVersion}`);\n\n  const version = await getSemanticVersion(versionInfo);\n  state.setAmVersion(version);\n  debugMessage(\n    `AuthenticateOps.determineDeploymentTypeAndDefaultRealmAndVersion: end`\n  );\n}\n\n/**\n * Get logged-in subject\n * @param {State} state library state\n * @returns {string} a string identifying subject type and id\n */\nasync function getLoggedInSubject(state: State): Promise<string> {\n  let subjectString = `user ${state.getUsername()}`;\n  if (state.getUseBearerTokenForAmApis()) {\n    const name = (\n      await getServiceAccount({\n        serviceAccountId: state.getServiceAccountId(),\n        state,\n      })\n    ).name;\n    subjectString = `service account ${name} [${state.getServiceAccountId()}]`;\n  }\n  return subjectString;\n}\n\n/**\n * Get tokens\n * @param {boolean} forceLoginAsUser true to force login as user even if a service account is available (default: false)\n * @param {State} state library state\n * @returns {Promise<boolean>} true if tokens were successfully obtained, false otherwise\n */\nexport async function getTokens({\n  forceLoginAsUser = false,\n  state,\n}: {\n  forceLoginAsUser?: boolean;\n  state: State;\n}): Promise<boolean> {\n  debugMessage(`AuthenticateOps.getTokens: start`);\n  if (!state.getHost()) {\n    printMessage(\n      `No host specified and FRODO_HOST env variable not set!`,\n      'error'\n    );\n    return false;\n  }\n  try {\n    // if username/password on cli are empty, try to read from connections.json\n    if (\n      state.getUsername() == null &&\n      state.getPassword() == null &&\n      !state.getServiceAccountId() &&\n      !state.getServiceAccountJwk()\n    ) {\n      const conn = await getConnectionProfile({ state });\n      if (conn) {\n        state.setHost(conn.tenant);\n        state.setUsername(conn.username);\n        state.setPassword(conn.password);\n        state.setAuthenticationService(conn.authenticationService);\n        state.setAuthenticationHeaderOverrides(\n          conn.authenticationHeaderOverrides\n        );\n        state.setServiceAccountId(conn.svcacctId);\n        state.setServiceAccountJwk(conn.svcacctJwk);\n      } else {\n        return false;\n      }\n    }\n\n    // if host is not a valid URL, try to locate a valid URL from connections.json\n    if (!isValidUrl(state.getHost())) {\n      const conn = await getConnectionProfile({ state });\n      if (conn) {\n        state.setHost(conn.tenant);\n      } else {\n        return false;\n      }\n    }\n\n    // now that we have the full tenant URL we can lookup the cookie name\n    state.setCookieName(await determineCookieName(state));\n\n    // use service account to login?\n    if (\n      !forceLoginAsUser &&\n      state.getServiceAccountId() &&\n      state.getServiceAccountJwk()\n    ) {\n      debugMessage(\n        `AuthenticateOps.getTokens: Authenticating with service account ${state.getServiceAccountId()}`\n      );\n      try {\n        const token = await getAccessTokenForServiceAccount({ state });\n        state.setBearerToken(token);\n        state.setUseBearerTokenForAmApis(true);\n        await determineDeploymentTypeAndDefaultRealmAndVersion(state);\n      } catch (saErr) {\n        debugMessage(saErr.response?.data || saErr);\n        debugMessage(state);\n        throw new Error(\n          `Service account login error: ${\n            saErr.response?.data?.error_description ||\n            saErr.response?.data?.message ||\n            saErr\n          }`\n        );\n      }\n    }\n    // use user account to login\n    else if (state.getUsername() && state.getPassword()) {\n      debugMessage(\n        `AuthenticateOps.getTokens: Authenticating with user account ${state.getUsername()}`\n      );\n      const token = await authenticate(state);\n      if (token) state.setCookieValue(token);\n      await determineDeploymentTypeAndDefaultRealmAndVersion(state);\n      if (\n        state.getCookieValue() &&\n        !state.getBearerToken() &&\n        (state.getDeploymentType() === globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY ||\n          state.getDeploymentType() ===\n            globalConfig.FORGEOPS_DEPLOYMENT_TYPE_KEY)\n      ) {\n        const accessToken = await getAccessTokenForUser(state);\n        if (accessToken) state.setBearerToken(accessToken);\n      }\n    }\n    // incomplete or no credentials\n    else {\n      printMessage(`Incomplete or no credentials!`, 'error');\n      return false;\n    }\n    if (\n      state.getCookieValue() ||\n      (state.getUseBearerTokenForAmApis() && state.getBearerToken())\n    ) {\n      // https://github.com/rockcarver/frodo-cli/issues/102\n      printMessage(\n        `Connected to ${state.getHost()} [${\n          state.getRealm() ? state.getRealm() : 'root'\n        }] as ${await getLoggedInSubject(state)}`,\n        'info'\n      );\n      debugMessage(`AuthenticateOps.getTokens: end with tokens`);\n      return true;\n    }\n  } catch (error) {\n    // regular error\n    printMessage(error.message, 'error');\n    // axios error am api\n    printMessage(error.response?.data?.message, 'error');\n    // axios error am oauth2 api\n    printMessage(error.response?.data?.error_description, 'error');\n    // axios error data\n    debugMessage(error.response?.data);\n    // stack trace\n    debugMessage(error.stack || new Error().stack);\n  }\n  debugMessage(`AuthenticateOps.getTokens: end without tokens`);\n  return false;\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,IAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AAEA,IAAAI,YAAA,GAAAC,uBAAA,CAAAL,OAAA;AACA,IAAAM,cAAA,GAAAN,OAAA;AACA,IAAAO,gBAAA,GAAAP,OAAA;AACA,IAAAQ,cAAA,GAAAR,OAAA;AACA,IAAAS,qBAAA,GAAAT,OAAA;AACA,IAAAU,KAAA,GAAAV,OAAA;AACA,IAAAW,SAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AACA,IAAAa,kBAAA,GAAAb,OAAA;AACA,IAAAc,SAAA,GAAAd,OAAA;AACA,IAAAe,QAAA,GAAAf,OAAA;AAA6E,SAAAgB,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAZ,wBAAAgB,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAAA,SAAA5B,uBAAAsB,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAAA,SAAAiB,mBAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,EAAAX,GAAA,EAAAY,GAAA,cAAAC,IAAA,GAAAN,GAAA,CAAAP,GAAA,EAAAY,GAAA,OAAAE,KAAA,GAAAD,IAAA,CAAAC,KAAA,WAAAC,KAAA,IAAAN,MAAA,CAAAM,KAAA,iBAAAF,IAAA,CAAAG,IAAA,IAAAR,OAAA,CAAAM,KAAA,YAAAG,OAAA,CAAAT,OAAA,CAAAM,KAAA,EAAAI,IAAA,CAAAR,KAAA,EAAAC,MAAA;AAAA,SAAAQ,kBAAAC,EAAA,6BAAAC,IAAA,SAAAC,IAAA,GAAAC,SAAA,aAAAN,OAAA,WAAAT,OAAA,EAAAC,MAAA,QAAAF,GAAA,GAAAa,EAAA,CAAAI,KAAA,CAAAH,IAAA,EAAAC,IAAA,YAAAZ,MAAAI,KAAA,IAAAR,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,UAAAG,KAAA,cAAAH,OAAAc,GAAA,IAAAnB,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,WAAAc,GAAA,KAAAf,KAAA,CAAAgB,SAAA;AAE9D,MAAMC,eAAe,CAAC;EAEnCC,WAAWA,CAACC,KAAY,EAAE;IACxB,IAAI,CAACA,KAAK,GAAGA,KAAK;EACpB;;EAEA;AACF;AACA;AACA;EACQC,+BAA+BA,CAAA,EAGX;IAAA,IAAAC,UAAA,GAAAR,SAAA;MAAAS,KAAA;IAAA,OAAAb,iBAAA;MAAA,IAFxBc,IAAY,GAAAF,UAAA,CAAAG,MAAA,QAAAH,UAAA,QAAAL,SAAA,GAAAK,UAAA,MAAGL,SAAS;MAAA,IACxBS,KAAa,GAAAJ,UAAA,CAAAG,MAAA,QAAAH,UAAA,QAAAL,SAAA,GAAAK,UAAA,MAAGL,SAAS;MAEzB,OAAOI,+BAA+B,CAAC;QAAEG,IAAI;QAAEE,KAAK;QAAEN,KAAK,EAAEG,KAAI,CAACH;MAAM,CAAC,CAAC;IAAC;EAC7E;;EAEA;AACF;AACA;AACA;AACA;EACEO,SAASA,CAAA,EAA2B;IAAA,IAA1BC,gBAAgB,GAAAd,SAAA,CAAAW,MAAA,QAAAX,SAAA,QAAAG,SAAA,GAAAH,SAAA,MAAG,KAAK;IAChC,OAAOa,SAAS,CAAC;MAAEC,gBAAgB;MAAER,KAAK,EAAE,IAAI,CAACA;IAAM,CAAC,CAAC;EAC3D;AACF;AAACS,OAAA,CAAA/C,OAAA,GAAAoC,eAAA;AAED,IAAMY,mBAAmB,GAAG,eAAe;AAC3C,IAAMC,mBAAmB,GAAG,sCAAsC;AAElE,IAAMC,mBAAmB,GAAG,8BAA8B;AAC1D,IAAMC,sBAAsB,GAAG,iBAAiB;AAChD,IAAMC,oBAAoB,GAAG,+BAA+B;AAE5D,IAAIC,aAAa,GAAG,gBAAgB;;AAEpC;AACA;AACA;AACA;AACA;AAJA,SAKeC,mBAAmBA,CAAAC,EAAA;EAAA,OAAAC,oBAAA,CAAAvB,KAAA,OAAAD,SAAA;AAAA;AAQlC;AACA;AACA;AACA;AACA;AACA;AALA,SAAAwB,qBAAA;EAAAA,oBAAA,GAAA5B,iBAAA,CARA,WAAmCU,KAAY,EAAE;IAC/C,IAAMmB,IAAI,SAAS,IAAAC,4BAAa,EAAC;MAAEpB;IAAM,CAAC,CAAC;IAC3C,IAAAqB,qBAAY,qDAAAC,MAAA,CACyCH,IAAI,CAACI,UAAU,CACpE,CAAC;IACD,OAAOJ,IAAI,CAACI,UAAU;EACxB,CAAC;EAAA,OAAAL,oBAAA,CAAAvB,KAAA,OAAAD,SAAA;AAAA;AAQD,SAAS8B,iBAAiBA,CAACC,OAAO,EAAEzB,KAAY,EAAE;EAChD,IAAAqB,qBAAY,4CAA2C,CAAC;EACxD;EACA,IAAI,WAAW,IAAII,OAAO,EAAE;IAC1B,KAAK,IAAMC,QAAQ,IAAID,OAAO,CAACE,SAAS,EAAE;MACxC;MACA,IAAID,QAAQ,CAACE,IAAI,KAAK,mBAAmB,EAAE;QACzC,IAAAP,qBAAY,mFAEZ,CAAC;QACD,IAAIQ,SAAS,GAAG,KAAK;QACrB,KAAK,IAAM5C,KAAK,IAAIyC,QAAQ,CAACI,MAAM,CAAC,CAAC,CAAC,CAAC7C,KAAK,EAAE;UAC5C,IAAAoC,qBAAY,KAAAC,MAAA,CAAIrC,KAAK,CAAC8C,QAAQ,CAAE,CAAC;UACjC,IAAI9C,KAAK,CAAC8C,QAAQ,KAAK,qBAAqB,EAAE;YAC5CF,SAAS,GAAG,IAAI;UAClB;QACF;QACA,IAAIA,SAAS,EAAE;UACb,IAAAR,qBAAY,sBAAqB,CAAC;UAClCK,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAG,qBAAqB;QACjD,CAAC,MAAM;UACL,IAAAoC,qBAAY,0BAAyB,CAAC;QACxC;MACF;MACA,IAAIK,QAAQ,CAACE,IAAI,KAAK,qBAAqB,EAAE;QAC3C,IAAIF,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,CAACgD,QAAQ,CAAC,MAAM,CAAC,EAAE;UAC5C;UACAP,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAG,MAAM;UAChC;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;QACF;;QACA,IAAIyC,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,CAACgD,QAAQ,CAAC,iBAAiB,CAAC,EAAE;UACvD;UACA,IAAAZ,qBAAY,uFAEZ,CAAC;UACD,OAAO;YACLa,QAAQ,EAAE,KAAK;YACfC,OAAO,EAAE,IAAI;YACbC,MAAM,EAAE,UAAU;YAClBC,SAAS,EAAE,KAAK;YAChBZ;UACF,CAAC;QACH;MACF;MACA,IAAIC,QAAQ,CAACE,IAAI,KAAK,cAAc,EAAE;QACpC,IAAIF,QAAQ,CAACI,MAAM,CAAC,CAAC,CAAC,CAAC7C,KAAK,CAACgD,QAAQ,CAAC,MAAM,CAAC,EAAE;UAC7C;UACA,IAAAZ,qBAAY,oEAEZ,CAAC;UACD,IAAAiB,qBAAY,EAAC,8CAA8C,CAAC;UAC5D,IAAMC,IAAI,GAAGC,qBAAY,CAACC,QAAQ,IAAAnB,MAAA,CAAII,QAAQ,CAACI,MAAM,CAAC,CAAC,CAAC,CAAC7C,KAAK,OAAI,CAAC;UACnEyC,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAGsD,IAAI;UAC9B,IAAAlB,qBAAY,uFAEZ,CAAC;UACD,OAAO;YACLa,QAAQ,EAAE,IAAI;YACdC,OAAO,EAAE,IAAI;YACbC,MAAM,EAAE,MAAM;YACdC,SAAS,EAAE,IAAI;YACfZ;UACF,CAAC;QACH,CAAC,MAAM;UACL;UACAC,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAGe,KAAK,CAAC0C,WAAW,CAAC,CAAC;QAC/C;MACF;MACA,IAAIhB,QAAQ,CAACE,IAAI,KAAK,kBAAkB,EAAE;QACxC;QACAF,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAGe,KAAK,CAAC2C,WAAW,CAAC,CAAC;MAC/C;IACF;IACA,IAAAtB,qBAAY,0DAAyD,CAAC;IACtE;IACA,OAAO;MACLa,QAAQ,EAAE,IAAI;MACdC,OAAO,EAAE,KAAK;MACdC,MAAM,EAAE,MAAM;MACdC,SAAS,EAAE,IAAI;MACfZ;IACF,CAAC;EACH;EACA,IAAAJ,qBAAY,0DAAyD,CAAC;EACtE;EACA,OAAO;IACLa,QAAQ,EAAE,KAAK;IACfC,OAAO,EAAE,KAAK;IACdC,MAAM,EAAE,MAAM;IACdC,SAAS,EAAE,IAAI;IACfZ;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA,SAASmB,qBAAqBA,CAAC5C,KAAY,EAAE;EAC3C,IACE,CAACA,KAAK,CAAC6C,QAAQ,CAAC,CAAC,IACjB7C,KAAK,CAAC6C,QAAQ,CAAC,CAAC,KAAKtG,YAAY,CAACuG,iBAAiB,EACnD;IACA9C,KAAK,CAAC+C,QAAQ,CACZxG,YAAY,CAACyG,yBAAyB,CAAChD,KAAK,CAACiD,iBAAiB,CAAC,CAAC,CAClE,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AAJA,SAKeC,uBAAuBA,CAAAC,GAAA;EAAA,OAAAC,wBAAA,CAAAzD,KAAA,OAAAD,SAAA;AAAA;AAmEtC;AACA;AACA;AACA;AACA;AAJA,SAAA0D,yBAAA;EAAAA,wBAAA,GAAA9D,iBAAA,CAnEA,WAAuCU,KAAY,EAAmB;IACpE,IAAMqD,WAAW,GAAGrD,KAAK,CAACsD,cAAc,CAAC,CAAC;;IAE1C;IACA,IAAItD,KAAK,CAACuD,0BAA0B,CAAC,CAAC,EACpC,OAAOhH,YAAY,CAACiH,yBAAyB;IAE/C,IAAMC,YAAY,GAAG,gBAAgB;IACrC,IAAMC,gBAAgB,GAAG,cAAc;IAEvC,IAAMC,QAAQ,GAAG,IAAAC,qBAAe,EAAC,IAAAC,mBAAW,EAAC,EAAE,CAAC,CAAC;IACjD,IAAMC,SAAS,GAAG,IAAAF,qBAAe,EAC/B,IAAAG,kBAAU,EAAC,QAAQ,CAAC,CAACC,MAAM,CAACL,QAAQ,CAAC,CAACM,MAAM,CAAC,CAC/C,CAAC;IACD,IAAMC,eAAe,GAAG,MAAM;IAC9B,IAAMC,WAAW,GAAGC,YAAG,CAACzF,OAAO,CAACqB,KAAK,CAACqE,OAAO,CAAC,CAAC,EAAE1D,mBAAmB,CAAC;IAErE,IAAM2D,MAAM,GAAG;MACbC,YAAY,EAAE,CAAC;MACfC,OAAO,EAAE;QACP,CAACxE,KAAK,CAACyE,aAAa,CAAC,CAAC,GAAGzE,KAAK,CAACsD,cAAc,CAAC;MAChD;IACF,CAAC;IACD,IAAIoB,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,aAAA7C,MAAA,CAAUV,mBAAmB,oCAAAU,MAAA,CAAiCmC,YAAY,YAAAnC,MAAA,CAAS+B,WAAW,qCAAA/B,MAAA,CAAkCwC,SAAS,6BAAAxC,MAAA,CAA0B4C,eAAe,CAAE;IAElO,IAAIS,cAAc,GAAGpI,YAAY,CAACqI,2BAA2B;IAC7D,IAAI;MACF,MAAM,IAAAC,wBAAS,EAAC;QACdC,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;QAC1BlD,IAAI,EAAEuD,YAAY;QAClBJ,MAAM;QACNtE;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,OAAO+E,CAAC,EAAE;MAAA,IAAAC,WAAA,EAAAC,mBAAA,EAAAC,qBAAA;MACV;MACA,IACE,EAAAF,WAAA,GAAAD,CAAC,CAACI,QAAQ,cAAAH,WAAA,uBAAVA,WAAA,CAAYI,MAAM,MAAK,GAAG,IAC1B,EAAAH,mBAAA,GAAAF,CAAC,CAACI,QAAQ,CAACX,OAAO,cAAAS,mBAAA,wBAAAC,qBAAA,GAAlBD,mBAAA,CAAoBI,QAAQ,cAAAH,qBAAA,uBAA5BA,qBAAA,CAA8BI,OAAO,CAAC,OAAO,CAAC,IAAG,CAAC,CAAC,EACnD;QACA,IAAAC,uBAAc,EAAC,2BAA2B,YAAY,CAAC,eAAe,CAAC;QACvEZ,cAAc,GAAGpI,YAAY,CAACiH,yBAAyB;MACzD,CAAC,MAAM;QACL,IAAI;UACFkB,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,aAAA7C,MAAA,CAAUT,sBAAsB,oCAAAS,MAAA,CAAiCoC,gBAAgB,YAAApC,MAAA,CAAStB,KAAK,CAACsD,cAAc,CAAC,CAAC,qCAAAhC,MAAA,CAAkCwC,SAAS,6BAAAxC,MAAA,CAA0B4C,eAAe,CAAE;UAChP,MAAM,IAAAW,wBAAS,EAAC;YACdC,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;YAC1BlD,IAAI,EAAEuD,YAAY;YAClBJ,MAAM;YACNtE;UACF,CAAC,CAAC;QACJ,CAAC,CAAC,OAAOwF,EAAE,EAAE;UAAA,IAAAC,YAAA,EAAAC,oBAAA,EAAAC,qBAAA;UACX,IACE,EAAAF,YAAA,GAAAD,EAAE,CAACL,QAAQ,cAAAM,YAAA,uBAAXA,YAAA,CAAaL,MAAM,MAAK,GAAG,IAC3B,EAAAM,oBAAA,GAAAF,EAAE,CAACL,QAAQ,CAACX,OAAO,cAAAkB,oBAAA,wBAAAC,qBAAA,GAAnBD,oBAAA,CAAqBL,QAAQ,cAAAM,qBAAA,uBAA7BA,qBAAA,CAA+BL,OAAO,CAAC,OAAO,CAAC,IAAG,CAAC,CAAC,EACpD;YACAvE,aAAa,GAAG2C,gBAAgB;YAChC,IAAA6B,uBAAc,EAAC,sBAAsB,YAAY,CAAC,eAAe,CAAC;YAClEZ,cAAc,GAAGpI,YAAY,CAACqJ,4BAA4B;UAC5D,CAAC,MAAM;YACL,IAAAL,uBAAc,EAAC,qBAAqB,YAAY,CAAC,eAAe,CAAC;UACnE;QACF;MACF;IACF;IACA,OAAOZ,cAAc;EACvB,CAAC;EAAA,OAAAvB,wBAAA,CAAAzD,KAAA,OAAAD,SAAA;AAAA;AAOD,SAASmG,kBAAkBA,CAACC,WAAW,EAAE;EACvC,IAAI,SAAS,IAAIA,WAAW,EAAE;IAC5B,IAAMC,aAAa,GAAGD,WAAW,CAACE,OAAO;IACzC,IAAMC,EAAE,GAAG,8BAA8B;IACzC,IAAMD,OAAO,GAAGD,aAAa,CAACG,KAAK,CAACD,EAAE,CAAC;IACvC,OAAOD,OAAO,CAAC,CAAC,CAAC;EACnB;EACA,MAAM,IAAIG,KAAK,CAAC,2DAA2D,CAAC;AAC9E;;AAEA;AACA;AACA;AACA;AACA;AAJA,SAKeC,YAAYA,CAAAC,GAAA;EAAA,OAAAC,aAAA,CAAA3G,KAAA,OAAAD,SAAA;AAAA;AAqC3B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPA,SAAA4G,cAAA;EAAAA,aAAA,GAAAhH,iBAAA,CArCA,WAA4BU,KAAY,EAAmB;IACzD,IAAAqB,qBAAY,uCAAsC,CAAC;IACnD,IAAMiD,MAAM,GAAG;MACbE,OAAO,EAAE;QACP,mBAAmB,EAAExE,KAAK,CAAC0C,WAAW,CAAC,CAAC;QACxC,mBAAmB,EAAE1C,KAAK,CAAC2C,WAAW,CAAC;MACzC;IACF,CAAC;IACD,IAAIwC,QAAQ,SAAS,IAAAoB,qBAAI,EAAC;MAAEC,IAAI,EAAE,CAAC,CAAC;MAAElC,MAAM;MAAEtE;IAAM,CAAC,CAAC;IAEtD,IAAIyG,OAAO,GAAG,IAAI;IAClB,IAAIC,KAAK,GAAG,CAAC;IACb,IAAMC,QAAQ,GAAG,CAAC;IAClB,GAAG;MACDF,OAAO,GAAGjF,iBAAiB,CAAC2D,QAAQ,EAAEnF,KAAK,CAAC;;MAE5C;MACA,IAAI,CAACyG,OAAO,CAACpE,SAAS,EAAE;QACtB,MAAM,IAAI8D,KAAK,4BAAA7E,MAAA,CAA4BmF,OAAO,CAACrE,MAAM,CAAE,CAAC;MAC9D;MAEA,IAAIqE,OAAO,CAACvE,QAAQ,EAAE;QACpBwE,KAAK,EAAE;QACPvB,QAAQ,SAAS,IAAAoB,qBAAI,EAAC;UAAEC,IAAI,EAAEC,OAAO,CAAChF,OAAO;UAAEzB;QAAM,CAAC,CAAC;MACzD;MAEA,IAAI,SAAS,IAAImF,QAAQ,EAAE;QACzB,IAAA9D,qBAAY,gDAAAC,MAAA,CACoC6D,QAAQ,CAAC,SAAS,CAAC,MACnE,CAAC;QACD,OAAOA,QAAQ,CAAC,SAAS,CAAC;MAC5B;IACF,CAAC,QAAQsB,OAAO,CAACvE,QAAQ,IAAIwE,KAAK,GAAGC,QAAQ;IAC7C,IAAAtF,qBAAY,kDAAiD,CAAC;IAC9D,OAAO,IAAI;EACb,CAAC;EAAA,OAAAiF,aAAA,CAAA3G,KAAA,OAAAD,SAAA;AAAA;AAAA,SAUckH,WAAWA,CAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,YAAA,CAAAtH,KAAA,OAAAD,SAAA;AAAA;AAoD1B;AACA;AACA;AACA;AACA;AAJA,SAAAuH,aAAA;EAAAA,YAAA,GAAA3H,iBAAA,CApDA,WACE6E,WAAmB,EACnB+C,aAAqB,EACrBC,mBAA2B,EAC3BnH,KAAY,EACZ;IACA,IAAI;MAAA,IAAAoH,iBAAA;MACF,IAAM1C,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,aAAA7C,MAAA,CAC9CtB,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KAAK1G,YAAY,CAACiH,yBAAyB,GAChE5C,mBAAmB,GACnBC,sBAAsB,oCAAAS,MAAA,CACKP,aAAa,YAAAO,MAAA,CAAStB,KAAK,CAACsD,cAAc,CAAC,CAAC,qCAAAhC,MAAA,CAAkC4F,aAAa,6BAAA5F,MAAA,CAA0B6F,mBAAmB,CAAE;MAC3K,IAAM7C,MAAM,GAAG;QACbE,OAAO,EAAE;UACP,cAAc,EAAE;QAClB,CAAC;QACDD,YAAY,EAAE;MAChB,CAAC;MACD,IAAIY,QAAQ,GAAGtF,SAAS;MACxB,IAAI;QACFsF,QAAQ,SAAS,IAAAN,wBAAS,EAAC;UACzBC,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;UAC1BlD,IAAI,EAAEuD,YAAY;UAClBJ,MAAM;UACNtE;QACF,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOd,KAAK,EAAE;QACdiG,QAAQ,GAAGjG,KAAK,CAACiG,QAAQ;MAC3B;MACA,IAAIA,QAAQ,CAACC,MAAM,GAAG,GAAG,IAAID,QAAQ,CAACC,MAAM,GAAG,GAAG,EAAE;QAClD,IAAA9C,qBAAY,EAAC,yBAAyB,EAAE,OAAO,CAAC;QAChD,IAAAA,qBAAY,EACV,8DAA8D,EAC9D,OACF,CAAC;QACD,OAAO,IAAI;MACb;MACA,IAAM+E,mBAAmB,IAAAD,iBAAA,GAAGjC,QAAQ,CAACX,OAAO,cAAA4C,iBAAA,uBAAhBA,iBAAA,CAAkB/B,QAAQ;MACtD,IAAMiC,WAAW,GAAGlD,YAAG,CAACmD,KAAK,CAACF,mBAAmB,EAAE,IAAI,CAAC,CAACG,KAAK;MAC9D,IAAI,MAAM,IAAIF,WAAW,EAAE;QACzB,OAAOA,WAAW,CAAC/E,IAAI;MACzB;MACA,IAAAD,qBAAY,EAAC,qBAAqB,EAAE,OAAO,CAAC;MAC5C,OAAO,IAAI;IACb,CAAC,CAAC,OAAOpD,KAAK,EAAE;MAAA,IAAAuI,eAAA;MACd,IAAAnF,qBAAY,+BAAAhB,MAAA,CAA8BpC,KAAK,CAACwI,OAAO,GAAI,OAAO,CAAC;MACnE,IAAApF,qBAAY,GAAAmF,eAAA,GAACvI,KAAK,CAACiG,QAAQ,cAAAsC,eAAA,uBAAdA,eAAA,CAAgBtG,IAAI,EAAE,OAAO,CAAC;MAC3C,IAAAE,qBAAY,EAACnC,KAAK,CAACyI,KAAK,CAAC;MACzB,OAAO,IAAI;IACb;EACF,CAAC;EAAA,OAAAV,YAAA,CAAAtH,KAAA,OAAAD,SAAA;AAAA;AAAA,SAOckI,qBAAqBA,CAAAC,GAAA;EAAA,OAAAC,sBAAA,CAAAnI,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAAoI,uBAAA;EAAAA,sBAAA,GAAAxI,iBAAA,CAApC,WAAqCU,KAAY,EAA0B;IACzE,IAAAqB,qBAAY,gDAA+C,CAAC;IAC5D,IAAI;MACF,IAAMsC,QAAQ,GAAG,IAAAC,qBAAe,EAAC,IAAAC,mBAAW,EAAC,EAAE,CAAC,CAAC;MACjD,IAAMC,SAAS,GAAG,IAAAF,qBAAe,EAC/B,IAAAG,kBAAU,EAAC,QAAQ,CAAC,CAACC,MAAM,CAACL,QAAQ,CAAC,CAACM,MAAM,CAAC,CAC/C,CAAC;MACD,IAAMC,eAAe,GAAG,MAAM;MAC9B,IAAMC,WAAW,GAAGC,YAAG,CAACzF,OAAO,CAACqB,KAAK,CAACqE,OAAO,CAAC,CAAC,EAAE1D,mBAAmB,CAAC;MACrE,IAAMoH,QAAQ,SAASnB,WAAW,CAChCzC,WAAW,EACXL,SAAS,EACTI,eAAe,EACflE,KACF,CAAC;MACD,IAAI+H,QAAQ,IAAI,IAAI,EAAE;QACpB,IAAAzF,qBAAY,EAAC,yBAAyB,EAAE,OAAO,CAAC;QAChD,OAAO,IAAI;MACb;MACA,IAAI6C,QAAQ,GAAG,IAAI;MACnB,IAAInF,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KAAK1G,YAAY,CAACiH,yBAAyB,EAAE;QACxE,IAAMc,MAAM,GAAG;UACb0D,IAAI,EAAE;YACJC,QAAQ,EAAElH,aAAa;YACvBmH,QAAQ,EAAExH;UACZ;QACF,CAAC;QACD,IAAMgE,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,0CAAA7C,MAAA,CAAuCyG,QAAQ,qBAAAzG,MAAA,CAAkBqC,QAAQ,CAAE;QAC3HwB,QAAQ,SAAS,IAAAgD,0BAAW,EAAC;UAC3BrD,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;UAC1BlD,IAAI,EAAEuD,YAAY;UAClBJ,MAAM;UACNtE;QACF,CAAC,CAAC;MACJ,CAAC,MAAM;QACL,IAAM0E,aAAY,gBAAApD,MAAA,CAAgBP,aAAa,oBAAAO,MAAA,CAAiB6C,WAAW,0CAAA7C,MAAA,CAAuCyG,QAAQ,qBAAAzG,MAAA,CAAkBqC,QAAQ,CAAE;QACtJwB,QAAQ,SAAS,IAAAgD,0BAAW,EAAC;UAC3BrD,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;UAC1BlD,IAAI,EAAEuD,aAAY;UAClBJ,MAAM,EAAE,CAAC,CAAC;UACVtE;QACF,CAAC,CAAC;MACJ;MACA,IAAI,cAAc,IAAImF,QAAQ,CAAChE,IAAI,EAAE;QACnC,IAAAE,qBAAY,yDAAwD,CAAC;QACrE,OAAO8D,QAAQ,CAAChE,IAAI,CAACiH,YAAY;MACnC;MACA,IAAA9F,qBAAY,EAAC,8BAA8B,EAAE,OAAO,CAAC;IACvD,CAAC,CAAC,OAAOpD,KAAK,EAAE;MAAA,IAAAmJ,gBAAA;MACd,IAAAhH,qBAAY,0CAAAC,MAAA,CAAyCpC,KAAK,CAAE,CAAC;MAC7D,IAAAmC,qBAAY,GAAAgH,gBAAA,GAACnJ,KAAK,CAACiG,QAAQ,cAAAkD,gBAAA,uBAAdA,gBAAA,CAAgBlH,IAAI,CAAC;IACpC;IACA,IAAAE,qBAAY,4DAA2D,CAAC;IACxE,OAAO,IAAI;EACb,CAAC;EAAA,OAAAyG,sBAAA,CAAAnI,KAAA,OAAAD,SAAA;AAAA;AAED,SAAS4I,aAAaA,CAACC,gBAAwB,EAAEC,IAAY,EAAE;EAC7D,IAAMC,CAAC,GAAG,IAAAC,kBAAQ,EAACF,IAAI,CAAC;EACxB,IAAMG,GAAG,MAAArH,MAAA,CAAMmH,CAAC,CAACG,MAAM,OAAAtH,MAAA,CACrBmH,CAAC,CAACI,IAAI,GAAGJ,CAAC,CAACI,IAAI,GAAGJ,CAAC,CAACK,QAAQ,KAAK,OAAO,GAAG,KAAK,GAAG,IAAI,EAAAxH,MAAA,CACtDmH,CAAC,CAACM,QAAQ,yBAAsB;;EAEnC;EACA,IAAMC,GAAG,GAAGC,IAAI,CAACC,KAAK,CAAC,IAAIC,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC;;EAEzD;EACA,IAAMC,GAAG,GAAG,IAAAC,QAAE,EAAC,CAAC;EAEhB,IAAMC,GAAG,GAAGhB,gBAAgB;EAC5B,IAAMiB,GAAG,GAAGjB,gBAAgB;;EAE5B;EACA,IAAM9G,OAAO,GAAG;IAAE8H,GAAG;IAAEC,GAAG;IAAEb,GAAG;IAAEK,GAAG;IAAEK;EAAI,CAAC;EAE3C,OAAO5H,OAAO;AAChB;;AAEA;AACA;AACA;AACA;AACA;AAJA,SAKsBxB,+BAA+BA,CAAAwJ,GAAA;EAAA,OAAAC,gCAAA,CAAA/J,KAAA,OAAAD,SAAA;AAAA;AAsCrD;AACA;AACA;AACA;AAHA,SAAAgK,iCAAA;EAAAA,gCAAA,GAAApK,iBAAA,CAtCO,WAAAqK,IAAA,EAQoB;IAAA,IAR2B;MACpDvJ,IAAI,GAAGP,SAAS;MAChBS,KAAK,GAAGT,SAAS;MACjBG;IAKF,CAAC,GAAA2J,IAAA;IACCvJ,IAAI,GAAGA,IAAI,GAAGA,IAAI,GAAGJ,KAAK,CAAC4J,mBAAmB,CAAC,CAAC;IAChDtJ,KAAK,GAAGA,KAAK,GAAGA,KAAK,GAAGN,KAAK,CAAC6J,oBAAoB,CAAC,CAAC;IACpD,IAAAxI,qBAAY,0DAAyD,CAAC;IACtE,IAAMI,OAAO,GAAG6G,aAAa,CAAClI,IAAI,EAAEJ,KAAK,CAACqE,OAAO,CAAC,CAAC,CAAC;IACpD,IAAAhD,qBAAY,6DAA4D,CAAC;IACzE,IAAAA,qBAAY,EAACI,OAAO,CAAC;IACrB,IAAMqI,GAAG,SAAS,IAAAC,6BAAoB,EAACtI,OAAO,EAAEnB,KAAK,CAAC;IACtD,IAAAe,qBAAY,yDAAwD,CAAC;IACrE,IAAAA,qBAAY,EAACyI,GAAG,CAAC;IACjB,IAAMpF,YAAY,gBAAApD,MAAA,CAAgBwI,GAAG,8FAAAxI,MAAA,CAA2FR,oBAAoB,CAAE;IACtJ,IAAMqE,QAAQ,SAAS,IAAAgD,0BAAW,EAAC;MACjCrD,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;MAC1BlD,IAAI,EAAEuD,YAAY;MAClBJ,MAAM,EAAE,CAAC,CAAC;MACVtE;IACF,CAAC,CAAC;IACF,IAAI,cAAc,IAAImF,QAAQ,CAAChE,IAAI,EAAE;MACnC,IAAAE,qBAAY,2DAA0D,CAAC;MACvE,IAAAA,qBAAY,EAAC8D,QAAQ,CAAChE,IAAI,CAACiH,YAAY,CAAC;MACxC,IAAA/G,qBAAY,wDAAuD,CAAC;MACpE,OAAO8D,QAAQ,CAAChE,IAAI,CAACiH,YAAY;IACnC;IACA,IAAA/G,qBAAY,iFAEZ,CAAC;IACD,IAAAA,qBAAY,wDAAuD,CAAC;IACpE,OAAO,IAAI;EACb,CAAC;EAAA,OAAAqI,gCAAA,CAAA/J,KAAA,OAAAD,SAAA;AAAA;AAAA,SAMcsK,gDAAgDA,CAAAC,IAAA;EAAA,OAAAC,iDAAA,CAAAvK,KAAA,OAAAD,SAAA;AAAA;AA0B/D;AACA;AACA;AACA;AACA;AAJA,SAAAwK,kDAAA;EAAAA,iDAAA,GAAA5K,iBAAA,CA1BA,WACEU,KAAY,EACG;IACf,IAAAqB,qBAAY,2EAEZ,CAAC;IACD,IAAI,CAACrB,KAAK,CAACiD,iBAAiB,CAAC,CAAC,EAAE;MAC9BjD,KAAK,CAACmK,iBAAiB,OAAOjH,uBAAuB,CAAClD,KAAK,CAAC,CAAC;IAC/D;IACA4C,qBAAqB,CAAC5C,KAAK,CAAC;IAC5B,IAAAqB,qBAAY,6EAAAC,MAAA,CACiEtB,KAAK,CAAC6C,QAAQ,CAAC,CAAC,aAAAvB,MAAA,CAAUtB,KAAK,CAACiD,iBAAiB,CAAC,CAAC,CAChI,CAAC;IAED,IAAM6C,WAAW,SAAS,IAAAsE,mCAAoB,EAAC;MAAEpK;IAAM,CAAC,CAAC;;IAEzD;IACA,IAAAqB,qBAAY,mBAAAC,MAAA,CAAkBwE,WAAW,CAACuE,WAAW,CAAE,CAAC;IAExD,IAAMrE,OAAO,SAASH,kBAAkB,CAACC,WAAW,CAAC;IACrD9F,KAAK,CAACsK,YAAY,CAACtE,OAAO,CAAC;IAC3B,IAAA3E,qBAAY,yEAEZ,CAAC;EACH,CAAC;EAAA,OAAA6I,iDAAA,CAAAvK,KAAA,OAAAD,SAAA;AAAA;AAAA,SAOc6K,kBAAkBA,CAAAC,IAAA;EAAA,OAAAC,mBAAA,CAAA9K,KAAA,OAAAD,SAAA;AAAA;AAcjC;AACA;AACA;AACA;AACA;AACA;AALA,SAAA+K,oBAAA;EAAAA,mBAAA,GAAAnL,iBAAA,CAdA,WAAkCU,KAAY,EAAmB;IAC/D,IAAI0K,aAAa,WAAApJ,MAAA,CAAWtB,KAAK,CAAC0C,WAAW,CAAC,CAAC,CAAE;IACjD,IAAI1C,KAAK,CAACuD,0BAA0B,CAAC,CAAC,EAAE;MACtC,IAAMoH,IAAI,GAAG,OACL,IAAAC,oCAAiB,EAAC;QACtBrC,gBAAgB,EAAEvI,KAAK,CAAC4J,mBAAmB,CAAC,CAAC;QAC7C5J;MACF,CAAC,CAAC,EACF2K,IAAI;MACND,aAAa,sBAAApJ,MAAA,CAAsBqJ,IAAI,QAAArJ,MAAA,CAAKtB,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,MAAG;IAC5E;IACA,OAAOc,aAAa;EACtB,CAAC;EAAA,OAAAD,mBAAA,CAAA9K,KAAA,OAAAD,SAAA;AAAA;AAAA,SAQqBa,SAASA,CAAAsK,IAAA;EAAA,OAAAC,UAAA,CAAAnL,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAAoL,WAAA;EAAAA,UAAA,GAAAxL,iBAAA,CAAxB,WAAAyL,KAAA,EAMc;IAAA,IANW;MAC9BvK,gBAAgB,GAAG,KAAK;MACxBR;IAIF,CAAC,GAAA+K,KAAA;IACC,IAAA1J,qBAAY,oCAAmC,CAAC;IAChD,IAAI,CAACrB,KAAK,CAACqE,OAAO,CAAC,CAAC,EAAE;MACpB,IAAA/B,qBAAY,4DAEV,OACF,CAAC;MACD,OAAO,KAAK;IACd;IACA,IAAI;MACF;MACA,IACEtC,KAAK,CAAC0C,WAAW,CAAC,CAAC,IAAI,IAAI,IAC3B1C,KAAK,CAAC2C,WAAW,CAAC,CAAC,IAAI,IAAI,IAC3B,CAAC3C,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,IAC5B,CAAC5J,KAAK,CAAC6J,oBAAoB,CAAC,CAAC,EAC7B;QACA,IAAMmB,IAAI,SAAS,IAAAC,0CAAoB,EAAC;UAAEjL;QAAM,CAAC,CAAC;QAClD,IAAIgL,IAAI,EAAE;UACRhL,KAAK,CAACkL,OAAO,CAACF,IAAI,CAACG,MAAM,CAAC;UAC1BnL,KAAK,CAACoL,WAAW,CAACJ,IAAI,CAAC/C,QAAQ,CAAC;UAChCjI,KAAK,CAACqL,WAAW,CAACL,IAAI,CAAC9C,QAAQ,CAAC;UAChClI,KAAK,CAACsL,wBAAwB,CAACN,IAAI,CAACO,qBAAqB,CAAC;UAC1DvL,KAAK,CAACwL,gCAAgC,CACpCR,IAAI,CAACS,6BACP,CAAC;UACDzL,KAAK,CAAC0L,mBAAmB,CAACV,IAAI,CAACW,SAAS,CAAC;UACzC3L,KAAK,CAAC4L,oBAAoB,CAACZ,IAAI,CAACa,UAAU,CAAC;QAC7C,CAAC,MAAM;UACL,OAAO,KAAK;QACd;MACF;;MAEA;MACA,IAAI,CAAC,IAAAC,oBAAU,EAAC9L,KAAK,CAACqE,OAAO,CAAC,CAAC,CAAC,EAAE;QAChC,IAAM2G,KAAI,SAAS,IAAAC,0CAAoB,EAAC;UAAEjL;QAAM,CAAC,CAAC;QAClD,IAAIgL,KAAI,EAAE;UACRhL,KAAK,CAACkL,OAAO,CAACF,KAAI,CAACG,MAAM,CAAC;QAC5B,CAAC,MAAM;UACL,OAAO,KAAK;QACd;MACF;;MAEA;MACAnL,KAAK,CAAC+L,aAAa,OAAO/K,mBAAmB,CAAChB,KAAK,CAAC,CAAC;;MAErD;MACA,IACE,CAACQ,gBAAgB,IACjBR,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,IAC3B5J,KAAK,CAAC6J,oBAAoB,CAAC,CAAC,EAC5B;QACA,IAAAxI,qBAAY,oEAAAC,MAAA,CACwDtB,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,CAC/F,CAAC;QACD,IAAI;UACF,IAAMoC,KAAK,SAAS/L,+BAA+B,CAAC;YAAED;UAAM,CAAC,CAAC;UAC9DA,KAAK,CAACiM,cAAc,CAACD,KAAK,CAAC;UAC3BhM,KAAK,CAACkM,0BAA0B,CAAC,IAAI,CAAC;UACtC,MAAMlC,gDAAgD,CAAChK,KAAK,CAAC;QAC/D,CAAC,CAAC,OAAOmM,KAAK,EAAE;UAAA,IAAAC,eAAA,EAAAC,gBAAA,EAAAC,qBAAA,EAAAC,gBAAA,EAAAC,qBAAA;UACd,IAAAnL,qBAAY,EAAC,EAAA+K,eAAA,GAAAD,KAAK,CAAChH,QAAQ,cAAAiH,eAAA,uBAAdA,eAAA,CAAgBjL,IAAI,KAAIgL,KAAK,CAAC;UAC3C,IAAA9K,qBAAY,EAACrB,KAAK,CAAC;UACnB,MAAM,IAAImG,KAAK,iCAAA7E,MAAA,CAEX,EAAA+K,gBAAA,GAAAF,KAAK,CAAChH,QAAQ,cAAAkH,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgBlL,IAAI,cAAAmL,qBAAA,uBAApBA,qBAAA,CAAsBG,iBAAiB,OAAAF,gBAAA,GACvCJ,KAAK,CAAChH,QAAQ,cAAAoH,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgBpL,IAAI,cAAAqL,qBAAA,uBAApBA,qBAAA,CAAsB9E,OAAO,KAC7ByE,KAAK,CAET,CAAC;QACH;MACF;MACA;MAAA,KACK,IAAInM,KAAK,CAAC0C,WAAW,CAAC,CAAC,IAAI1C,KAAK,CAAC2C,WAAW,CAAC,CAAC,EAAE;QACnD,IAAAtB,qBAAY,iEAAAC,MAAA,CACqDtB,KAAK,CAAC0C,WAAW,CAAC,CAAC,CACpF,CAAC;QACD,IAAMsJ,MAAK,SAAS5F,YAAY,CAACpG,KAAK,CAAC;QACvC,IAAIgM,MAAK,EAAEhM,KAAK,CAAC0M,cAAc,CAACV,MAAK,CAAC;QACtC,MAAMhC,gDAAgD,CAAChK,KAAK,CAAC;QAC7D,IACEA,KAAK,CAACsD,cAAc,CAAC,CAAC,IACtB,CAACtD,KAAK,CAAC2M,cAAc,CAAC,CAAC,KACtB3M,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KAAK1G,YAAY,CAACiH,yBAAyB,IACnExD,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KACvB1G,YAAY,CAACqJ,4BAA4B,CAAC,EAC9C;UACA,IAAMuC,YAAW,SAASP,qBAAqB,CAAC5H,KAAK,CAAC;UACtD,IAAImI,YAAW,EAAEnI,KAAK,CAACiM,cAAc,CAAC9D,YAAW,CAAC;QACpD;MACF;MACA;MAAA,KACK;QACH,IAAA7F,qBAAY,mCAAkC,OAAO,CAAC;QACtD,OAAO,KAAK;MACd;MACA,IACEtC,KAAK,CAACsD,cAAc,CAAC,CAAC,IACrBtD,KAAK,CAACuD,0BAA0B,CAAC,CAAC,IAAIvD,KAAK,CAAC2M,cAAc,CAAC,CAAE,EAC9D;QACA;QACA,IAAArK,qBAAY,kBAAAhB,MAAA,CACMtB,KAAK,CAACqE,OAAO,CAAC,CAAC,QAAA/C,MAAA,CAC7BtB,KAAK,CAAC6C,QAAQ,CAAC,CAAC,GAAG7C,KAAK,CAAC6C,QAAQ,CAAC,CAAC,GAAG,MAAM,WAAAvB,MAAA,OAChCiJ,kBAAkB,CAACvK,KAAK,CAAC,GACvC,MACF,CAAC;QACD,IAAAqB,qBAAY,8CAA6C,CAAC;QAC1D,OAAO,IAAI;MACb;IACF,CAAC,CAAC,OAAOnC,KAAK,EAAE;MAAA,IAAA0N,gBAAA,EAAAC,qBAAA,EAAAC,gBAAA,EAAAC,qBAAA,EAAAC,gBAAA;MACd;MACA,IAAA1K,qBAAY,EAACpD,KAAK,CAACwI,OAAO,EAAE,OAAO,CAAC;MACpC;MACA,IAAApF,qBAAY,GAAAsK,gBAAA,GAAC1N,KAAK,CAACiG,QAAQ,cAAAyH,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgBzL,IAAI,cAAA0L,qBAAA,uBAApBA,qBAAA,CAAsBnF,OAAO,EAAE,OAAO,CAAC;MACpD;MACA,IAAApF,qBAAY,GAAAwK,gBAAA,GAAC5N,KAAK,CAACiG,QAAQ,cAAA2H,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgB3L,IAAI,cAAA4L,qBAAA,uBAApBA,qBAAA,CAAsBN,iBAAiB,EAAE,OAAO,CAAC;MAC9D;MACA,IAAApL,qBAAY,GAAA2L,gBAAA,GAAC9N,KAAK,CAACiG,QAAQ,cAAA6H,gBAAA,uBAAdA,gBAAA,CAAgB7L,IAAI,CAAC;MAClC;MACA,IAAAE,qBAAY,EAACnC,KAAK,CAACyI,KAAK,IAAI,IAAIxB,KAAK,CAAC,CAAC,CAACwB,KAAK,CAAC;IAChD;IACA,IAAAtG,qBAAY,iDAAgD,CAAC;IAC7D,OAAO,KAAK;EACd,CAAC;EAAA,OAAAyJ,UAAA,CAAAnL,KAAA,OAAAD,SAAA;AAAA"}
+{"version":3,"file":"AuthenticateOps.js","names":["_url","_interopRequireDefault","require","_crypto","_readlineSync","_Base","globalConfig","_interopRequireWildcard","_ServerInfoApi","_AuthenticateApi","_OAuth2OIDCApi","_ConnectionProfileOps","_uuid","_ApiUtils","_JoseOps","_ServiceAccountOps","_OpsUtils","_Console","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","asyncGeneratorStep","gen","resolve","reject","_next","_throw","arg","info","value","error","done","Promise","then","_asyncToGenerator","fn","self","args","arguments","apply","err","undefined","AuthenticateOps","constructor","state","getAccessTokenForServiceAccount","_arguments","_this","saId","length","saJwk","getTokens","forceLoginAsUser","exports","adminClientPassword","redirectUrlTemplate","cloudIdmAdminScopes","forgeopsIdmAdminScopes","serviceAccountScopes","adminClientId","determineCookieName","_x","_determineCookieName","data","getServerInfo","debugMessage","concat","cookieName","checkAndHandle2FA","payload","callback","callbacks","type","localAuth","output","provider","input","includes","nextStep","need2fa","factor","supported","printMessage","code","readlineSync","question","getUsername","getPassword","determineDefaultRealm","getRealm","DEFAULT_REALM_KEY","setRealm","DEPLOYMENT_TYPE_REALM_MAP","getDeploymentType","determineDeploymentType","_x2","_determineDeploymentType","cookieValue","getCookieValue","getUseBearerTokenForAmApis","CLOUD_DEPLOYMENT_TYPE_KEY","fidcClientId","forgeopsClientId","verifier","encodeBase64Url","randomBytes","challenge","createHash","update","digest","challengeMethod","redirectURL","url","getHost","config","maxRedirects","headers","getCookieName","bodyFormData","deploymentType","CLASSIC_DEPLOYMENT_TYPE_KEY","authorize","amBaseUrl","e","_e$response","_e$response$headers","_e$response$headers$l","response","status","location","indexOf","verboseMessage","ex","_ex$response","_ex$response$headers","_ex$response$headers$","FORGEOPS_DEPLOYMENT_TYPE_KEY","getSemanticVersion","versionInfo","versionString","version","rx","match","Error","authenticate","_x3","_authenticate","step","body","skip2FA","steps","maxSteps","getAuthCode","_x4","_x5","_x6","_x7","_getAuthCode","codeChallenge","codeChallengeMethod","_response$headers","redirectLocationURL","queryObject","parse","query","_error$response","message","stack","getAccessTokenForUser","_x8","_getAccessTokenForUser","authCode","auth","username","password","accessToken","access_token","_error$response2","createPayload","serviceAccountId","host","u","parseUrl","aud","origin","port","protocol","pathname","exp","Math","floor","Date","getTime","jti","v4","iss","sub","_x9","_getAccessTokenForServiceAccount","_ref","getServiceAccountId","getServiceAccountJwk","jwt","createSignedJwtToken","determineDeploymentTypeAndDefaultRealmAndVersion","_x10","_determineDeploymentTypeAndDefaultRealmAndVersion","setDeploymentType","getServerVersionInfo","fullVersion","setAmVersion","getLoggedInSubject","_x11","_getLoggedInSubject","subjectString","name","getServiceAccount","_x12","_getTokens","_ref2","conn","getConnectionProfile","setHost","tenant","setUsername","setPassword","setAuthenticationService","authenticationService","setAuthenticationHeaderOverrides","authenticationHeaderOverrides","setServiceAccountId","svcacctId","setServiceAccountJwk","svcacctJwk","isValidUrl","setCookieName","token","setBearerToken","setUseBearerTokenForAmApis","saErr","_saErr$response","_saErr$response2","_saErr$response2$data","_saErr$response3","_saErr$response3$data","error_description","setCookieValue","getBearerToken","_error$response3","_error$response3$data","_error$response4","_error$response4$data","_error$response5"],"sources":["ops/AuthenticateOps.ts"],"sourcesContent":["import url from 'url';\nimport { createHash, randomBytes } from 'crypto';\nimport readlineSync from 'readline-sync';\nimport { encodeBase64Url } from '../api/utils/Base64';\nimport State from '../shared/State';\nimport * as globalConfig from '../storage/StaticStorage';\nimport { getServerInfo, getServerVersionInfo } from '../api/ServerInfoApi';\nimport { step } from '../api/AuthenticateApi';\nimport { accessToken, authorize } from '../api/OAuth2OIDCApi';\nimport { getConnectionProfile } from './ConnectionProfileOps';\nimport { v4 } from 'uuid';\nimport { parseUrl } from '../api/utils/ApiUtils';\nimport { JwkRsa, createSignedJwtToken } from './JoseOps';\nimport { getServiceAccount } from './cloud/ServiceAccountOps';\nimport { isValidUrl } from './utils/OpsUtils';\nimport { debugMessage, printMessage, verboseMessage } from './utils/Console';\n\nexport default class AuthenticateOps {\n  state: State;\n  constructor(state: State) {\n    this.state = state;\n  }\n\n  /**\n   * Get access token for service account\n   * @returns {string | null} Access token or null\n   */\n  async getAccessTokenForServiceAccount(\n    saId: string = undefined,\n    saJwk: JwkRsa = undefined\n  ): Promise<string | null> {\n    return getAccessTokenForServiceAccount({ saId, saJwk, state: this.state });\n  }\n\n  /**\n   * Get tokens\n   * @param {boolean} forceLoginAsUser true to force login as user even if a service account is available (default: false)\n   * @returns {Promise<boolean>} true if tokens were successfully obtained, false otherwise\n   */\n  getTokens(forceLoginAsUser = false) {\n    return getTokens({ forceLoginAsUser, state: this.state });\n  }\n}\n\nconst adminClientPassword = 'doesnotmatter';\nconst redirectUrlTemplate = '/platform/appAuthHelperRedirect.html';\n\nconst cloudIdmAdminScopes = 'openid fr:idm:* fr:idc:esv:*';\nconst forgeopsIdmAdminScopes = 'openid fr:idm:*';\nconst serviceAccountScopes = 'fr:am:* fr:idm:* fr:idc:esv:*';\n\nlet adminClientId = 'idmAdminClient';\n\n/**\n * Helper function to get cookie name\n * @param {State} state library state\n * @returns {string} cookie name\n */\nasync function determineCookieName(state: State) {\n  const data = await getServerInfo({ state });\n  debugMessage(\n    `AuthenticateOps.determineCookieName: cookieName=${data.cookieName}`\n  );\n  return data.cookieName;\n}\n\n/**\n * Helper function to determine if this is a setup mfa prompt in the ID Cloud tenant admin login journey\n * @param {Object} payload response from the previous authentication journey step\n * @param {State} state library state\n * @returns {Object} an object indicating if 2fa is required and the original payload\n */\nfunction checkAndHandle2FA(payload, state: State) {\n  debugMessage(`AuthenticateOps.checkAndHandle2FA: start`);\n  // let skippable = false;\n  if ('callbacks' in payload) {\n    for (const callback of payload.callbacks) {\n      // select localAuthentication if Admin Federation is enabled\n      if (callback.type === 'SelectIdPCallback') {\n        debugMessage(\n          `AuthenticateOps.checkAndHandle2FA: Admin federation enabled. Allowed providers:`\n        );\n        let localAuth = false;\n        for (const value of callback.output[0].value) {\n          debugMessage(`${value.provider}`);\n          if (value.provider === 'localAuthentication') {\n            localAuth = true;\n          }\n        }\n        if (localAuth) {\n          debugMessage(`local auth allowed`);\n          callback.input[0].value = 'localAuthentication';\n        } else {\n          debugMessage(`local auth NOT allowed`);\n        }\n      }\n      if (callback.type === 'HiddenValueCallback') {\n        if (callback.input[0].value.includes('skip')) {\n          // skippable = true;\n          callback.input[0].value = 'Skip';\n          // debugMessage(\n          //   `AuthenticateOps.checkAndHandle2FA: end [need2fa=true, skippable=true]`\n          // );\n          // return {\n          //   nextStep: true,\n          //   need2fa: true,\n          //   factor: 'None',\n          //   supported: true,\n          //   payload,\n          // };\n        }\n        if (callback.input[0].value.includes('webAuthnOutcome')) {\n          // webauthn!!!\n          debugMessage(\n            `AuthenticateOps.checkAndHandle2FA: end [need2fa=true, unsupported factor: webauthn]`\n          );\n          return {\n            nextStep: false,\n            need2fa: true,\n            factor: 'WebAuthN',\n            supported: false,\n            payload,\n          };\n        }\n      }\n      if (callback.type === 'NameCallback') {\n        if (callback.output[0].value.includes('code')) {\n          // skippable = false;\n          debugMessage(\n            `AuthenticateOps.checkAndHandle2FA: need2fa=true, skippable=false`\n          );\n          printMessage('2FA is enabled and required for this user...');\n          const code = readlineSync.question(`${callback.output[0].value}: `);\n          callback.input[0].value = code;\n          debugMessage(\n            `AuthenticateOps.checkAndHandle2FA: end [need2fa=true, skippable=false, factor=Code]`\n          );\n          return {\n            nextStep: true,\n            need2fa: true,\n            factor: 'Code',\n            supported: true,\n            payload,\n          };\n        } else {\n          // answer callback\n          callback.input[0].value = state.getUsername();\n        }\n      }\n      if (callback.type === 'PasswordCallback') {\n        // answer callback\n        callback.input[0].value = state.getPassword();\n      }\n    }\n    debugMessage(`AuthenticateOps.checkAndHandle2FA: end [need2fa=false]`);\n    // debugMessage(payload);\n    return {\n      nextStep: true,\n      need2fa: false,\n      factor: 'None',\n      supported: true,\n      payload,\n    };\n  }\n  debugMessage(`AuthenticateOps.checkAndHandle2FA: end [need2fa=false]`);\n  // debugMessage(payload);\n  return {\n    nextStep: false,\n    need2fa: false,\n    factor: 'None',\n    supported: true,\n    payload,\n  };\n}\n\n/**\n * Helper function to set the default realm by deployment type\n * @param {State} state library state\n */\nfunction determineDefaultRealm(state: State) {\n  if (\n    !state.getRealm() ||\n    state.getRealm() === globalConfig.DEFAULT_REALM_KEY\n  ) {\n    state.setRealm(\n      globalConfig.DEPLOYMENT_TYPE_REALM_MAP[state.getDeploymentType()]\n    );\n  }\n}\n\n/**\n * Helper function to determine the deployment type\n * @param {State} state library state\n * @returns {Promise<string>} deployment type\n */\nasync function determineDeploymentType(state: State): Promise<string> {\n  const cookieValue = state.getCookieValue();\n\n  // if we are using a service account, we know it's cloud\n  if (state.getUseBearerTokenForAmApis())\n    return globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY;\n\n  const fidcClientId = 'idmAdminClient';\n  const forgeopsClientId = 'idm-admin-ui';\n\n  const verifier = encodeBase64Url(randomBytes(32));\n  const challenge = encodeBase64Url(\n    createHash('sha256').update(verifier).digest()\n  );\n  const challengeMethod = 'S256';\n  const redirectURL = url.resolve(state.getHost(), redirectUrlTemplate);\n\n  const config = {\n    maxRedirects: 0,\n    headers: {\n      [state.getCookieName()]: state.getCookieValue(),\n    },\n  };\n  let bodyFormData = `redirect_uri=${redirectURL}&scope=${cloudIdmAdminScopes}&response_type=code&client_id=${fidcClientId}&csrf=${cookieValue}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n\n  let deploymentType = globalConfig.CLASSIC_DEPLOYMENT_TYPE_KEY;\n  try {\n    await authorize({\n      amBaseUrl: state.getHost(),\n      data: bodyFormData,\n      config,\n      state,\n    });\n  } catch (e) {\n    // debugMessage(e.response);\n    if (\n      e.response?.status === 302 &&\n      e.response.headers?.location?.indexOf('code=') > -1\n    ) {\n      verboseMessage(`ForgeRock Identity Cloud`['brightCyan'] + ` detected.`);\n      deploymentType = globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY;\n    } else {\n      try {\n        bodyFormData = `redirect_uri=${redirectURL}&scope=${forgeopsIdmAdminScopes}&response_type=code&client_id=${forgeopsClientId}&csrf=${state.getCookieValue()}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n        await authorize({\n          amBaseUrl: state.getHost(),\n          data: bodyFormData,\n          config,\n          state,\n        });\n      } catch (ex) {\n        if (\n          ex.response?.status === 302 &&\n          ex.response.headers?.location?.indexOf('code=') > -1\n        ) {\n          adminClientId = forgeopsClientId;\n          verboseMessage(`ForgeOps deployment`['brightCyan'] + ` detected.`);\n          deploymentType = globalConfig.FORGEOPS_DEPLOYMENT_TYPE_KEY;\n        } else {\n          verboseMessage(`Classic deployment`['brightCyan'] + ` detected.`);\n        }\n      }\n    }\n  }\n  return deploymentType;\n}\n\n/**\n * Helper function to extract the semantic version string from a version info object\n * @param {Object} versionInfo version info object\n * @returns {String} semantic version\n */\nfunction getSemanticVersion(versionInfo) {\n  if ('version' in versionInfo) {\n    const versionString = versionInfo.version;\n    const rx = /([\\d]\\.[\\d]\\.[\\d](\\.[\\d])*)/g;\n    const version = versionString.match(rx);\n    return version[0];\n  }\n  throw new Error('Cannot extract semantic version from version info object.');\n}\n\n/**\n * Helper function to authenticate and obtain and store session cookie\n * @param {State} state library state\n * @returns {string} Session token or null\n */\nasync function authenticate(state: State): Promise<string> {\n  debugMessage(`AuthenticateOps.authenticate: start`);\n  const config = {\n    headers: {\n      'X-OpenAM-Username': state.getUsername(),\n      'X-OpenAM-Password': state.getPassword(),\n    },\n  };\n  let response = await step({ body: {}, config, state });\n\n  let skip2FA = null;\n  let steps = 0;\n  const maxSteps = 3;\n  do {\n    skip2FA = checkAndHandle2FA(response, state);\n\n    // throw exception if 2fa required but factor not supported by frodo (e.g. WebAuthN)\n    if (!skip2FA.supported) {\n      throw new Error(`Unsupported 2FA factor: ${skip2FA.factor}`);\n    }\n\n    if (skip2FA.nextStep) {\n      steps++;\n      response = await step({ body: skip2FA.payload, state });\n    }\n\n    if ('tokenId' in response) {\n      debugMessage(\n        `AuthenticateOps.authenticate: end [tokenId=${response['tokenId']}]`\n      );\n      return response['tokenId'] as string;\n    }\n  } while (skip2FA.nextStep && steps < maxSteps);\n  debugMessage(`AuthenticateOps.authenticate: end [no session]`);\n  return null;\n}\n\n/**\n * Helper function to obtain an oauth2 authorization code\n * @param {string} redirectURL oauth2 redirect uri\n * @param {string} codeChallenge PKCE code challenge\n * @param {string} codeChallengeMethod PKCE code challenge method\n * @param {State} state library state\n * @returns {string} oauth2 authorization code or null\n */\nasync function getAuthCode(\n  redirectURL: string,\n  codeChallenge: string,\n  codeChallengeMethod: string,\n  state: State\n) {\n  try {\n    const bodyFormData = `redirect_uri=${redirectURL}&scope=${\n      state.getDeploymentType() === globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY\n        ? cloudIdmAdminScopes\n        : forgeopsIdmAdminScopes\n    }&response_type=code&client_id=${adminClientId}&csrf=${state.getCookieValue()}&decision=allow&code_challenge=${codeChallenge}&code_challenge_method=${codeChallengeMethod}`;\n    const config = {\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      maxRedirects: 0,\n    };\n    let response = undefined;\n    try {\n      response = await authorize({\n        amBaseUrl: state.getHost(),\n        data: bodyFormData,\n        config,\n        state,\n      });\n    } catch (error) {\n      response = error.response;\n    }\n    if (response.status < 200 || response.status > 399) {\n      printMessage('error getting auth code', 'error');\n      printMessage(\n        'likely cause: mismatched parameters with OAuth client config',\n        'error'\n      );\n      return null;\n    }\n    const redirectLocationURL = response.headers?.location;\n    const queryObject = url.parse(redirectLocationURL, true).query;\n    if ('code' in queryObject) {\n      return queryObject.code;\n    }\n    printMessage('auth code not found', 'error');\n    return null;\n  } catch (error) {\n    printMessage(`error getting auth code - ${error.message}`, 'error');\n    printMessage(error.response?.data, 'error');\n    debugMessage(error.stack);\n    return null;\n  }\n}\n\n/**\n * Helper function to obtain oauth2 access token\n * @param {State} state library state\n * @returns {Promise<string | null>} access token or null\n */\nasync function getAccessTokenForUser(state: State): Promise<string | null> {\n  debugMessage(`AuthenticateOps.getAccessTokenForUser: start`);\n  try {\n    const verifier = encodeBase64Url(randomBytes(32));\n    const challenge = encodeBase64Url(\n      createHash('sha256').update(verifier).digest()\n    );\n    const challengeMethod = 'S256';\n    const redirectURL = url.resolve(state.getHost(), redirectUrlTemplate);\n    const authCode = await getAuthCode(\n      redirectURL,\n      challenge,\n      challengeMethod,\n      state\n    );\n    if (authCode == null) {\n      printMessage('error getting auth code', 'error');\n      return null;\n    }\n    let response = null;\n    if (state.getDeploymentType() === globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY) {\n      const config = {\n        auth: {\n          username: adminClientId,\n          password: adminClientPassword,\n        },\n      };\n      const bodyFormData = `redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken({\n        amBaseUrl: state.getHost(),\n        data: bodyFormData,\n        config,\n        state,\n      });\n    } else {\n      const bodyFormData = `client_id=${adminClientId}&redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken({\n        amBaseUrl: state.getHost(),\n        data: bodyFormData,\n        config: {},\n        state,\n      });\n    }\n    if ('access_token' in response.data) {\n      debugMessage(`AuthenticateOps.getAccessTokenForUser: end with token`);\n      return response.data.access_token;\n    }\n    printMessage('No access token in response.', 'error');\n  } catch (error) {\n    debugMessage(`Error getting access token for user: ${error}`);\n    debugMessage(error.response?.data);\n  }\n  debugMessage(`AuthenticateOps.getAccessTokenForUser: end without token`);\n  return null;\n}\n\nfunction createPayload(serviceAccountId: string, host: string) {\n  const u = parseUrl(host);\n  const aud = `${u.origin}:${\n    u.port ? u.port : u.protocol === 'https' ? '443' : '80'\n  }${u.pathname}/oauth2/access_token`;\n\n  // Cross platform way of setting JWT expiry time 3 minutes in the future, expressed as number of seconds since EPOCH\n  const exp = Math.floor(new Date().getTime() / 1000 + 180);\n\n  // A unique ID for the JWT which is required when requesting the openid scope\n  const jti = v4();\n\n  const iss = serviceAccountId;\n  const sub = serviceAccountId;\n\n  // Create the payload for our bearer token\n  const payload = { iss, sub, aud, exp, jti };\n\n  return payload;\n}\n\n/**\n * Get access token for service account\n * @param {State} state library state\n * @returns {string | null} Access token or null\n */\nexport async function getAccessTokenForServiceAccount({\n  saId = undefined,\n  saJwk = undefined,\n  state,\n}: {\n  saId?: string;\n  saJwk?: JwkRsa;\n  state: State;\n}): Promise<string | null> {\n  saId = saId ? saId : state.getServiceAccountId();\n  saJwk = saJwk ? saJwk : state.getServiceAccountJwk();\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: start`);\n  const payload = createPayload(saId, state.getHost());\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: payload:`);\n  debugMessage(payload);\n  const jwt = await createSignedJwtToken(payload, saJwk);\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: jwt:`);\n  debugMessage(jwt);\n  const bodyFormData = `assertion=${jwt}&client_id=service-account&grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&scope=${serviceAccountScopes}`;\n  const response = await accessToken({\n    amBaseUrl: state.getHost(),\n    data: bodyFormData,\n    config: {},\n    state,\n  });\n  if ('access_token' in response.data) {\n    debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: token:`);\n    debugMessage(response.data.access_token);\n    debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: end`);\n    return response.data.access_token;\n  }\n  debugMessage(\n    `AuthenticateOps.getAccessTokenForServiceAccount: No access token in response.`\n  );\n  debugMessage(`AuthenticateOps.getAccessTokenForServiceAccount: end`);\n  return null;\n}\n\n/**\n * Helper function to determine deployment type, default realm, and version and update library state\n * @param state library state\n */\nasync function determineDeploymentTypeAndDefaultRealmAndVersion(\n  state: State\n): Promise<void> {\n  debugMessage(\n    `AuthenticateOps.determineDeploymentTypeAndDefaultRealmAndVersion: start`\n  );\n  if (!state.getDeploymentType()) {\n    state.setDeploymentType(await determineDeploymentType(state));\n  }\n  determineDefaultRealm(state);\n  debugMessage(\n    `AuthenticateOps.determineDeploymentTypeAndDefaultRealmAndVersion: realm=${state.getRealm()}, type=${state.getDeploymentType()}`\n  );\n\n  const versionInfo = await getServerVersionInfo({ state });\n\n  // https://github.com/rockcarver/frodo-cli/issues/109\n  debugMessage(`Full version: ${versionInfo.fullVersion}`);\n\n  const version = await getSemanticVersion(versionInfo);\n  state.setAmVersion(version);\n  debugMessage(\n    `AuthenticateOps.determineDeploymentTypeAndDefaultRealmAndVersion: end`\n  );\n}\n\n/**\n * Get logged-in subject\n * @param {State} state library state\n * @returns {string} a string identifying subject type and id\n */\nasync function getLoggedInSubject(state: State): Promise<string> {\n  let subjectString = `user ${state.getUsername()}`;\n  if (state.getUseBearerTokenForAmApis()) {\n    try {\n      const name = (\n        await getServiceAccount({\n          serviceAccountId: state.getServiceAccountId(),\n          state,\n        })\n      ).name;\n      subjectString = `service account ${name} [${state.getServiceAccountId()}]`;\n    } catch (error) {\n      subjectString = `service account ${state.getServiceAccountId()}`;\n    }\n  }\n  return subjectString;\n}\n\n/**\n * Get tokens\n * @param {boolean} forceLoginAsUser true to force login as user even if a service account is available (default: false)\n * @param {State} state library state\n * @returns {Promise<boolean>} true if tokens were successfully obtained, false otherwise\n */\nexport async function getTokens({\n  forceLoginAsUser = false,\n  state,\n}: {\n  forceLoginAsUser?: boolean;\n  state: State;\n}): Promise<boolean> {\n  debugMessage(`AuthenticateOps.getTokens: start`);\n  if (!state.getHost()) {\n    printMessage(\n      `No host specified and FRODO_HOST env variable not set!`,\n      'error'\n    );\n    return false;\n  }\n  try {\n    // if username/password on cli are empty, try to read from connections.json\n    if (\n      state.getUsername() == null &&\n      state.getPassword() == null &&\n      !state.getServiceAccountId() &&\n      !state.getServiceAccountJwk()\n    ) {\n      const conn = await getConnectionProfile({ state });\n      if (conn) {\n        state.setHost(conn.tenant);\n        state.setUsername(conn.username);\n        state.setPassword(conn.password);\n        state.setAuthenticationService(conn.authenticationService);\n        state.setAuthenticationHeaderOverrides(\n          conn.authenticationHeaderOverrides\n        );\n        state.setServiceAccountId(conn.svcacctId);\n        state.setServiceAccountJwk(conn.svcacctJwk);\n      } else {\n        return false;\n      }\n    }\n\n    // if host is not a valid URL, try to locate a valid URL from connections.json\n    if (!isValidUrl(state.getHost())) {\n      const conn = await getConnectionProfile({ state });\n      if (conn) {\n        state.setHost(conn.tenant);\n      } else {\n        return false;\n      }\n    }\n\n    // now that we have the full tenant URL we can lookup the cookie name\n    state.setCookieName(await determineCookieName(state));\n\n    // use service account to login?\n    if (\n      !forceLoginAsUser &&\n      state.getServiceAccountId() &&\n      state.getServiceAccountJwk()\n    ) {\n      debugMessage(\n        `AuthenticateOps.getTokens: Authenticating with service account ${state.getServiceAccountId()}`\n      );\n      try {\n        const token = await getAccessTokenForServiceAccount({ state });\n        state.setBearerToken(token);\n        state.setUseBearerTokenForAmApis(true);\n        await determineDeploymentTypeAndDefaultRealmAndVersion(state);\n      } catch (saErr) {\n        debugMessage(saErr.response?.data || saErr);\n        debugMessage(state);\n        throw new Error(\n          `Service account login error: ${\n            saErr.response?.data?.error_description ||\n            saErr.response?.data?.message ||\n            saErr\n          }`\n        );\n      }\n    }\n    // use user account to login\n    else if (state.getUsername() && state.getPassword()) {\n      debugMessage(\n        `AuthenticateOps.getTokens: Authenticating with user account ${state.getUsername()}`\n      );\n      const token = await authenticate(state);\n      if (token) state.setCookieValue(token);\n      await determineDeploymentTypeAndDefaultRealmAndVersion(state);\n      if (\n        state.getCookieValue() &&\n        !state.getBearerToken() &&\n        (state.getDeploymentType() === globalConfig.CLOUD_DEPLOYMENT_TYPE_KEY ||\n          state.getDeploymentType() ===\n            globalConfig.FORGEOPS_DEPLOYMENT_TYPE_KEY)\n      ) {\n        const accessToken = await getAccessTokenForUser(state);\n        if (accessToken) state.setBearerToken(accessToken);\n      }\n    }\n    // incomplete or no credentials\n    else {\n      printMessage(`Incomplete or no credentials!`, 'error');\n      return false;\n    }\n    if (\n      state.getCookieValue() ||\n      (state.getUseBearerTokenForAmApis() && state.getBearerToken())\n    ) {\n      // https://github.com/rockcarver/frodo-cli/issues/102\n      printMessage(\n        `Connected to ${state.getHost()} [${\n          state.getRealm() ? state.getRealm() : 'root'\n        }] as ${await getLoggedInSubject(state)}`,\n        'info'\n      );\n      debugMessage(`AuthenticateOps.getTokens: end with tokens`);\n      return true;\n    }\n  } catch (error) {\n    // regular error\n    printMessage(error.message, 'error');\n    // axios error am api\n    printMessage(error.response?.data?.message, 'error');\n    // axios error am oauth2 api\n    printMessage(error.response?.data?.error_description, 'error');\n    // axios error data\n    debugMessage(error.response?.data);\n    // stack trace\n    debugMessage(error.stack || new Error().stack);\n  }\n  debugMessage(`AuthenticateOps.getTokens: end without tokens`);\n  return false;\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,IAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AAEA,IAAAI,YAAA,GAAAC,uBAAA,CAAAL,OAAA;AACA,IAAAM,cAAA,GAAAN,OAAA;AACA,IAAAO,gBAAA,GAAAP,OAAA;AACA,IAAAQ,cAAA,GAAAR,OAAA;AACA,IAAAS,qBAAA,GAAAT,OAAA;AACA,IAAAU,KAAA,GAAAV,OAAA;AACA,IAAAW,SAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AACA,IAAAa,kBAAA,GAAAb,OAAA;AACA,IAAAc,SAAA,GAAAd,OAAA;AACA,IAAAe,QAAA,GAAAf,OAAA;AAA6E,SAAAgB,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAZ,wBAAAgB,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAAA,SAAA5B,uBAAAsB,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAAA,SAAAiB,mBAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,EAAAX,GAAA,EAAAY,GAAA,cAAAC,IAAA,GAAAN,GAAA,CAAAP,GAAA,EAAAY,GAAA,OAAAE,KAAA,GAAAD,IAAA,CAAAC,KAAA,WAAAC,KAAA,IAAAN,MAAA,CAAAM,KAAA,iBAAAF,IAAA,CAAAG,IAAA,IAAAR,OAAA,CAAAM,KAAA,YAAAG,OAAA,CAAAT,OAAA,CAAAM,KAAA,EAAAI,IAAA,CAAAR,KAAA,EAAAC,MAAA;AAAA,SAAAQ,kBAAAC,EAAA,6BAAAC,IAAA,SAAAC,IAAA,GAAAC,SAAA,aAAAN,OAAA,WAAAT,OAAA,EAAAC,MAAA,QAAAF,GAAA,GAAAa,EAAA,CAAAI,KAAA,CAAAH,IAAA,EAAAC,IAAA,YAAAZ,MAAAI,KAAA,IAAAR,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,UAAAG,KAAA,cAAAH,OAAAc,GAAA,IAAAnB,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,WAAAc,GAAA,KAAAf,KAAA,CAAAgB,SAAA;AAE9D,MAAMC,eAAe,CAAC;EAEnCC,WAAWA,CAACC,KAAY,EAAE;IACxB,IAAI,CAACA,KAAK,GAAGA,KAAK;EACpB;;EAEA;AACF;AACA;AACA;EACQC,+BAA+BA,CAAA,EAGX;IAAA,IAAAC,UAAA,GAAAR,SAAA;MAAAS,KAAA;IAAA,OAAAb,iBAAA;MAAA,IAFxBc,IAAY,GAAAF,UAAA,CAAAG,MAAA,QAAAH,UAAA,QAAAL,SAAA,GAAAK,UAAA,MAAGL,SAAS;MAAA,IACxBS,KAAa,GAAAJ,UAAA,CAAAG,MAAA,QAAAH,UAAA,QAAAL,SAAA,GAAAK,UAAA,MAAGL,SAAS;MAEzB,OAAOI,+BAA+B,CAAC;QAAEG,IAAI;QAAEE,KAAK;QAAEN,KAAK,EAAEG,KAAI,CAACH;MAAM,CAAC,CAAC;IAAC;EAC7E;;EAEA;AACF;AACA;AACA;AACA;EACEO,SAASA,CAAA,EAA2B;IAAA,IAA1BC,gBAAgB,GAAAd,SAAA,CAAAW,MAAA,QAAAX,SAAA,QAAAG,SAAA,GAAAH,SAAA,MAAG,KAAK;IAChC,OAAOa,SAAS,CAAC;MAAEC,gBAAgB;MAAER,KAAK,EAAE,IAAI,CAACA;IAAM,CAAC,CAAC;EAC3D;AACF;AAACS,OAAA,CAAA/C,OAAA,GAAAoC,eAAA;AAED,IAAMY,mBAAmB,GAAG,eAAe;AAC3C,IAAMC,mBAAmB,GAAG,sCAAsC;AAElE,IAAMC,mBAAmB,GAAG,8BAA8B;AAC1D,IAAMC,sBAAsB,GAAG,iBAAiB;AAChD,IAAMC,oBAAoB,GAAG,+BAA+B;AAE5D,IAAIC,aAAa,GAAG,gBAAgB;;AAEpC;AACA;AACA;AACA;AACA;AAJA,SAKeC,mBAAmBA,CAAAC,EAAA;EAAA,OAAAC,oBAAA,CAAAvB,KAAA,OAAAD,SAAA;AAAA;AAQlC;AACA;AACA;AACA;AACA;AACA;AALA,SAAAwB,qBAAA;EAAAA,oBAAA,GAAA5B,iBAAA,CARA,WAAmCU,KAAY,EAAE;IAC/C,IAAMmB,IAAI,SAAS,IAAAC,4BAAa,EAAC;MAAEpB;IAAM,CAAC,CAAC;IAC3C,IAAAqB,qBAAY,qDAAAC,MAAA,CACyCH,IAAI,CAACI,UAAU,CACpE,CAAC;IACD,OAAOJ,IAAI,CAACI,UAAU;EACxB,CAAC;EAAA,OAAAL,oBAAA,CAAAvB,KAAA,OAAAD,SAAA;AAAA;AAQD,SAAS8B,iBAAiBA,CAACC,OAAO,EAAEzB,KAAY,EAAE;EAChD,IAAAqB,qBAAY,4CAA2C,CAAC;EACxD;EACA,IAAI,WAAW,IAAII,OAAO,EAAE;IAC1B,KAAK,IAAMC,QAAQ,IAAID,OAAO,CAACE,SAAS,EAAE;MACxC;MACA,IAAID,QAAQ,CAACE,IAAI,KAAK,mBAAmB,EAAE;QACzC,IAAAP,qBAAY,mFAEZ,CAAC;QACD,IAAIQ,SAAS,GAAG,KAAK;QACrB,KAAK,IAAM5C,KAAK,IAAIyC,QAAQ,CAACI,MAAM,CAAC,CAAC,CAAC,CAAC7C,KAAK,EAAE;UAC5C,IAAAoC,qBAAY,KAAAC,MAAA,CAAIrC,KAAK,CAAC8C,QAAQ,CAAE,CAAC;UACjC,IAAI9C,KAAK,CAAC8C,QAAQ,KAAK,qBAAqB,EAAE;YAC5CF,SAAS,GAAG,IAAI;UAClB;QACF;QACA,IAAIA,SAAS,EAAE;UACb,IAAAR,qBAAY,sBAAqB,CAAC;UAClCK,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAG,qBAAqB;QACjD,CAAC,MAAM;UACL,IAAAoC,qBAAY,0BAAyB,CAAC;QACxC;MACF;MACA,IAAIK,QAAQ,CAACE,IAAI,KAAK,qBAAqB,EAAE;QAC3C,IAAIF,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,CAACgD,QAAQ,CAAC,MAAM,CAAC,EAAE;UAC5C;UACAP,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAG,MAAM;UAChC;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;QACF;;QACA,IAAIyC,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,CAACgD,QAAQ,CAAC,iBAAiB,CAAC,EAAE;UACvD;UACA,IAAAZ,qBAAY,uFAEZ,CAAC;UACD,OAAO;YACLa,QAAQ,EAAE,KAAK;YACfC,OAAO,EAAE,IAAI;YACbC,MAAM,EAAE,UAAU;YAClBC,SAAS,EAAE,KAAK;YAChBZ;UACF,CAAC;QACH;MACF;MACA,IAAIC,QAAQ,CAACE,IAAI,KAAK,cAAc,EAAE;QACpC,IAAIF,QAAQ,CAACI,MAAM,CAAC,CAAC,CAAC,CAAC7C,KAAK,CAACgD,QAAQ,CAAC,MAAM,CAAC,EAAE;UAC7C;UACA,IAAAZ,qBAAY,oEAEZ,CAAC;UACD,IAAAiB,qBAAY,EAAC,8CAA8C,CAAC;UAC5D,IAAMC,IAAI,GAAGC,qBAAY,CAACC,QAAQ,IAAAnB,MAAA,CAAII,QAAQ,CAACI,MAAM,CAAC,CAAC,CAAC,CAAC7C,KAAK,OAAI,CAAC;UACnEyC,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAGsD,IAAI;UAC9B,IAAAlB,qBAAY,uFAEZ,CAAC;UACD,OAAO;YACLa,QAAQ,EAAE,IAAI;YACdC,OAAO,EAAE,IAAI;YACbC,MAAM,EAAE,MAAM;YACdC,SAAS,EAAE,IAAI;YACfZ;UACF,CAAC;QACH,CAAC,MAAM;UACL;UACAC,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAGe,KAAK,CAAC0C,WAAW,CAAC,CAAC;QAC/C;MACF;MACA,IAAIhB,QAAQ,CAACE,IAAI,KAAK,kBAAkB,EAAE;QACxC;QACAF,QAAQ,CAACM,KAAK,CAAC,CAAC,CAAC,CAAC/C,KAAK,GAAGe,KAAK,CAAC2C,WAAW,CAAC,CAAC;MAC/C;IACF;IACA,IAAAtB,qBAAY,0DAAyD,CAAC;IACtE;IACA,OAAO;MACLa,QAAQ,EAAE,IAAI;MACdC,OAAO,EAAE,KAAK;MACdC,MAAM,EAAE,MAAM;MACdC,SAAS,EAAE,IAAI;MACfZ;IACF,CAAC;EACH;EACA,IAAAJ,qBAAY,0DAAyD,CAAC;EACtE;EACA,OAAO;IACLa,QAAQ,EAAE,KAAK;IACfC,OAAO,EAAE,KAAK;IACdC,MAAM,EAAE,MAAM;IACdC,SAAS,EAAE,IAAI;IACfZ;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA,SAASmB,qBAAqBA,CAAC5C,KAAY,EAAE;EAC3C,IACE,CAACA,KAAK,CAAC6C,QAAQ,CAAC,CAAC,IACjB7C,KAAK,CAAC6C,QAAQ,CAAC,CAAC,KAAKtG,YAAY,CAACuG,iBAAiB,EACnD;IACA9C,KAAK,CAAC+C,QAAQ,CACZxG,YAAY,CAACyG,yBAAyB,CAAChD,KAAK,CAACiD,iBAAiB,CAAC,CAAC,CAClE,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AAJA,SAKeC,uBAAuBA,CAAAC,GAAA;EAAA,OAAAC,wBAAA,CAAAzD,KAAA,OAAAD,SAAA;AAAA;AAmEtC;AACA;AACA;AACA;AACA;AAJA,SAAA0D,yBAAA;EAAAA,wBAAA,GAAA9D,iBAAA,CAnEA,WAAuCU,KAAY,EAAmB;IACpE,IAAMqD,WAAW,GAAGrD,KAAK,CAACsD,cAAc,CAAC,CAAC;;IAE1C;IACA,IAAItD,KAAK,CAACuD,0BAA0B,CAAC,CAAC,EACpC,OAAOhH,YAAY,CAACiH,yBAAyB;IAE/C,IAAMC,YAAY,GAAG,gBAAgB;IACrC,IAAMC,gBAAgB,GAAG,cAAc;IAEvC,IAAMC,QAAQ,GAAG,IAAAC,qBAAe,EAAC,IAAAC,mBAAW,EAAC,EAAE,CAAC,CAAC;IACjD,IAAMC,SAAS,GAAG,IAAAF,qBAAe,EAC/B,IAAAG,kBAAU,EAAC,QAAQ,CAAC,CAACC,MAAM,CAACL,QAAQ,CAAC,CAACM,MAAM,CAAC,CAC/C,CAAC;IACD,IAAMC,eAAe,GAAG,MAAM;IAC9B,IAAMC,WAAW,GAAGC,YAAG,CAACzF,OAAO,CAACqB,KAAK,CAACqE,OAAO,CAAC,CAAC,EAAE1D,mBAAmB,CAAC;IAErE,IAAM2D,MAAM,GAAG;MACbC,YAAY,EAAE,CAAC;MACfC,OAAO,EAAE;QACP,CAACxE,KAAK,CAACyE,aAAa,CAAC,CAAC,GAAGzE,KAAK,CAACsD,cAAc,CAAC;MAChD;IACF,CAAC;IACD,IAAIoB,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,aAAA7C,MAAA,CAAUV,mBAAmB,oCAAAU,MAAA,CAAiCmC,YAAY,YAAAnC,MAAA,CAAS+B,WAAW,qCAAA/B,MAAA,CAAkCwC,SAAS,6BAAAxC,MAAA,CAA0B4C,eAAe,CAAE;IAElO,IAAIS,cAAc,GAAGpI,YAAY,CAACqI,2BAA2B;IAC7D,IAAI;MACF,MAAM,IAAAC,wBAAS,EAAC;QACdC,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;QAC1BlD,IAAI,EAAEuD,YAAY;QAClBJ,MAAM;QACNtE;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,OAAO+E,CAAC,EAAE;MAAA,IAAAC,WAAA,EAAAC,mBAAA,EAAAC,qBAAA;MACV;MACA,IACE,EAAAF,WAAA,GAAAD,CAAC,CAACI,QAAQ,cAAAH,WAAA,uBAAVA,WAAA,CAAYI,MAAM,MAAK,GAAG,IAC1B,EAAAH,mBAAA,GAAAF,CAAC,CAACI,QAAQ,CAACX,OAAO,cAAAS,mBAAA,wBAAAC,qBAAA,GAAlBD,mBAAA,CAAoBI,QAAQ,cAAAH,qBAAA,uBAA5BA,qBAAA,CAA8BI,OAAO,CAAC,OAAO,CAAC,IAAG,CAAC,CAAC,EACnD;QACA,IAAAC,uBAAc,EAAC,2BAA2B,YAAY,CAAC,eAAe,CAAC;QACvEZ,cAAc,GAAGpI,YAAY,CAACiH,yBAAyB;MACzD,CAAC,MAAM;QACL,IAAI;UACFkB,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,aAAA7C,MAAA,CAAUT,sBAAsB,oCAAAS,MAAA,CAAiCoC,gBAAgB,YAAApC,MAAA,CAAStB,KAAK,CAACsD,cAAc,CAAC,CAAC,qCAAAhC,MAAA,CAAkCwC,SAAS,6BAAAxC,MAAA,CAA0B4C,eAAe,CAAE;UAChP,MAAM,IAAAW,wBAAS,EAAC;YACdC,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;YAC1BlD,IAAI,EAAEuD,YAAY;YAClBJ,MAAM;YACNtE;UACF,CAAC,CAAC;QACJ,CAAC,CAAC,OAAOwF,EAAE,EAAE;UAAA,IAAAC,YAAA,EAAAC,oBAAA,EAAAC,qBAAA;UACX,IACE,EAAAF,YAAA,GAAAD,EAAE,CAACL,QAAQ,cAAAM,YAAA,uBAAXA,YAAA,CAAaL,MAAM,MAAK,GAAG,IAC3B,EAAAM,oBAAA,GAAAF,EAAE,CAACL,QAAQ,CAACX,OAAO,cAAAkB,oBAAA,wBAAAC,qBAAA,GAAnBD,oBAAA,CAAqBL,QAAQ,cAAAM,qBAAA,uBAA7BA,qBAAA,CAA+BL,OAAO,CAAC,OAAO,CAAC,IAAG,CAAC,CAAC,EACpD;YACAvE,aAAa,GAAG2C,gBAAgB;YAChC,IAAA6B,uBAAc,EAAC,sBAAsB,YAAY,CAAC,eAAe,CAAC;YAClEZ,cAAc,GAAGpI,YAAY,CAACqJ,4BAA4B;UAC5D,CAAC,MAAM;YACL,IAAAL,uBAAc,EAAC,qBAAqB,YAAY,CAAC,eAAe,CAAC;UACnE;QACF;MACF;IACF;IACA,OAAOZ,cAAc;EACvB,CAAC;EAAA,OAAAvB,wBAAA,CAAAzD,KAAA,OAAAD,SAAA;AAAA;AAOD,SAASmG,kBAAkBA,CAACC,WAAW,EAAE;EACvC,IAAI,SAAS,IAAIA,WAAW,EAAE;IAC5B,IAAMC,aAAa,GAAGD,WAAW,CAACE,OAAO;IACzC,IAAMC,EAAE,GAAG,8BAA8B;IACzC,IAAMD,OAAO,GAAGD,aAAa,CAACG,KAAK,CAACD,EAAE,CAAC;IACvC,OAAOD,OAAO,CAAC,CAAC,CAAC;EACnB;EACA,MAAM,IAAIG,KAAK,CAAC,2DAA2D,CAAC;AAC9E;;AAEA;AACA;AACA;AACA;AACA;AAJA,SAKeC,YAAYA,CAAAC,GAAA;EAAA,OAAAC,aAAA,CAAA3G,KAAA,OAAAD,SAAA;AAAA;AAqC3B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPA,SAAA4G,cAAA;EAAAA,aAAA,GAAAhH,iBAAA,CArCA,WAA4BU,KAAY,EAAmB;IACzD,IAAAqB,qBAAY,uCAAsC,CAAC;IACnD,IAAMiD,MAAM,GAAG;MACbE,OAAO,EAAE;QACP,mBAAmB,EAAExE,KAAK,CAAC0C,WAAW,CAAC,CAAC;QACxC,mBAAmB,EAAE1C,KAAK,CAAC2C,WAAW,CAAC;MACzC;IACF,CAAC;IACD,IAAIwC,QAAQ,SAAS,IAAAoB,qBAAI,EAAC;MAAEC,IAAI,EAAE,CAAC,CAAC;MAAElC,MAAM;MAAEtE;IAAM,CAAC,CAAC;IAEtD,IAAIyG,OAAO,GAAG,IAAI;IAClB,IAAIC,KAAK,GAAG,CAAC;IACb,IAAMC,QAAQ,GAAG,CAAC;IAClB,GAAG;MACDF,OAAO,GAAGjF,iBAAiB,CAAC2D,QAAQ,EAAEnF,KAAK,CAAC;;MAE5C;MACA,IAAI,CAACyG,OAAO,CAACpE,SAAS,EAAE;QACtB,MAAM,IAAI8D,KAAK,4BAAA7E,MAAA,CAA4BmF,OAAO,CAACrE,MAAM,CAAE,CAAC;MAC9D;MAEA,IAAIqE,OAAO,CAACvE,QAAQ,EAAE;QACpBwE,KAAK,EAAE;QACPvB,QAAQ,SAAS,IAAAoB,qBAAI,EAAC;UAAEC,IAAI,EAAEC,OAAO,CAAChF,OAAO;UAAEzB;QAAM,CAAC,CAAC;MACzD;MAEA,IAAI,SAAS,IAAImF,QAAQ,EAAE;QACzB,IAAA9D,qBAAY,gDAAAC,MAAA,CACoC6D,QAAQ,CAAC,SAAS,CAAC,MACnE,CAAC;QACD,OAAOA,QAAQ,CAAC,SAAS,CAAC;MAC5B;IACF,CAAC,QAAQsB,OAAO,CAACvE,QAAQ,IAAIwE,KAAK,GAAGC,QAAQ;IAC7C,IAAAtF,qBAAY,kDAAiD,CAAC;IAC9D,OAAO,IAAI;EACb,CAAC;EAAA,OAAAiF,aAAA,CAAA3G,KAAA,OAAAD,SAAA;AAAA;AAAA,SAUckH,WAAWA,CAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;EAAA,OAAAC,YAAA,CAAAtH,KAAA,OAAAD,SAAA;AAAA;AAoD1B;AACA;AACA;AACA;AACA;AAJA,SAAAuH,aAAA;EAAAA,YAAA,GAAA3H,iBAAA,CApDA,WACE6E,WAAmB,EACnB+C,aAAqB,EACrBC,mBAA2B,EAC3BnH,KAAY,EACZ;IACA,IAAI;MAAA,IAAAoH,iBAAA;MACF,IAAM1C,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,aAAA7C,MAAA,CAC9CtB,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KAAK1G,YAAY,CAACiH,yBAAyB,GAChE5C,mBAAmB,GACnBC,sBAAsB,oCAAAS,MAAA,CACKP,aAAa,YAAAO,MAAA,CAAStB,KAAK,CAACsD,cAAc,CAAC,CAAC,qCAAAhC,MAAA,CAAkC4F,aAAa,6BAAA5F,MAAA,CAA0B6F,mBAAmB,CAAE;MAC3K,IAAM7C,MAAM,GAAG;QACbE,OAAO,EAAE;UACP,cAAc,EAAE;QAClB,CAAC;QACDD,YAAY,EAAE;MAChB,CAAC;MACD,IAAIY,QAAQ,GAAGtF,SAAS;MACxB,IAAI;QACFsF,QAAQ,SAAS,IAAAN,wBAAS,EAAC;UACzBC,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;UAC1BlD,IAAI,EAAEuD,YAAY;UAClBJ,MAAM;UACNtE;QACF,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOd,KAAK,EAAE;QACdiG,QAAQ,GAAGjG,KAAK,CAACiG,QAAQ;MAC3B;MACA,IAAIA,QAAQ,CAACC,MAAM,GAAG,GAAG,IAAID,QAAQ,CAACC,MAAM,GAAG,GAAG,EAAE;QAClD,IAAA9C,qBAAY,EAAC,yBAAyB,EAAE,OAAO,CAAC;QAChD,IAAAA,qBAAY,EACV,8DAA8D,EAC9D,OACF,CAAC;QACD,OAAO,IAAI;MACb;MACA,IAAM+E,mBAAmB,IAAAD,iBAAA,GAAGjC,QAAQ,CAACX,OAAO,cAAA4C,iBAAA,uBAAhBA,iBAAA,CAAkB/B,QAAQ;MACtD,IAAMiC,WAAW,GAAGlD,YAAG,CAACmD,KAAK,CAACF,mBAAmB,EAAE,IAAI,CAAC,CAACG,KAAK;MAC9D,IAAI,MAAM,IAAIF,WAAW,EAAE;QACzB,OAAOA,WAAW,CAAC/E,IAAI;MACzB;MACA,IAAAD,qBAAY,EAAC,qBAAqB,EAAE,OAAO,CAAC;MAC5C,OAAO,IAAI;IACb,CAAC,CAAC,OAAOpD,KAAK,EAAE;MAAA,IAAAuI,eAAA;MACd,IAAAnF,qBAAY,+BAAAhB,MAAA,CAA8BpC,KAAK,CAACwI,OAAO,GAAI,OAAO,CAAC;MACnE,IAAApF,qBAAY,GAAAmF,eAAA,GAACvI,KAAK,CAACiG,QAAQ,cAAAsC,eAAA,uBAAdA,eAAA,CAAgBtG,IAAI,EAAE,OAAO,CAAC;MAC3C,IAAAE,qBAAY,EAACnC,KAAK,CAACyI,KAAK,CAAC;MACzB,OAAO,IAAI;IACb;EACF,CAAC;EAAA,OAAAV,YAAA,CAAAtH,KAAA,OAAAD,SAAA;AAAA;AAAA,SAOckI,qBAAqBA,CAAAC,GAAA;EAAA,OAAAC,sBAAA,CAAAnI,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAAoI,uBAAA;EAAAA,sBAAA,GAAAxI,iBAAA,CAApC,WAAqCU,KAAY,EAA0B;IACzE,IAAAqB,qBAAY,gDAA+C,CAAC;IAC5D,IAAI;MACF,IAAMsC,QAAQ,GAAG,IAAAC,qBAAe,EAAC,IAAAC,mBAAW,EAAC,EAAE,CAAC,CAAC;MACjD,IAAMC,SAAS,GAAG,IAAAF,qBAAe,EAC/B,IAAAG,kBAAU,EAAC,QAAQ,CAAC,CAACC,MAAM,CAACL,QAAQ,CAAC,CAACM,MAAM,CAAC,CAC/C,CAAC;MACD,IAAMC,eAAe,GAAG,MAAM;MAC9B,IAAMC,WAAW,GAAGC,YAAG,CAACzF,OAAO,CAACqB,KAAK,CAACqE,OAAO,CAAC,CAAC,EAAE1D,mBAAmB,CAAC;MACrE,IAAMoH,QAAQ,SAASnB,WAAW,CAChCzC,WAAW,EACXL,SAAS,EACTI,eAAe,EACflE,KACF,CAAC;MACD,IAAI+H,QAAQ,IAAI,IAAI,EAAE;QACpB,IAAAzF,qBAAY,EAAC,yBAAyB,EAAE,OAAO,CAAC;QAChD,OAAO,IAAI;MACb;MACA,IAAI6C,QAAQ,GAAG,IAAI;MACnB,IAAInF,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KAAK1G,YAAY,CAACiH,yBAAyB,EAAE;QACxE,IAAMc,MAAM,GAAG;UACb0D,IAAI,EAAE;YACJC,QAAQ,EAAElH,aAAa;YACvBmH,QAAQ,EAAExH;UACZ;QACF,CAAC;QACD,IAAMgE,YAAY,mBAAApD,MAAA,CAAmB6C,WAAW,0CAAA7C,MAAA,CAAuCyG,QAAQ,qBAAAzG,MAAA,CAAkBqC,QAAQ,CAAE;QAC3HwB,QAAQ,SAAS,IAAAgD,0BAAW,EAAC;UAC3BrD,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;UAC1BlD,IAAI,EAAEuD,YAAY;UAClBJ,MAAM;UACNtE;QACF,CAAC,CAAC;MACJ,CAAC,MAAM;QACL,IAAM0E,aAAY,gBAAApD,MAAA,CAAgBP,aAAa,oBAAAO,MAAA,CAAiB6C,WAAW,0CAAA7C,MAAA,CAAuCyG,QAAQ,qBAAAzG,MAAA,CAAkBqC,QAAQ,CAAE;QACtJwB,QAAQ,SAAS,IAAAgD,0BAAW,EAAC;UAC3BrD,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;UAC1BlD,IAAI,EAAEuD,aAAY;UAClBJ,MAAM,EAAE,CAAC,CAAC;UACVtE;QACF,CAAC,CAAC;MACJ;MACA,IAAI,cAAc,IAAImF,QAAQ,CAAChE,IAAI,EAAE;QACnC,IAAAE,qBAAY,yDAAwD,CAAC;QACrE,OAAO8D,QAAQ,CAAChE,IAAI,CAACiH,YAAY;MACnC;MACA,IAAA9F,qBAAY,EAAC,8BAA8B,EAAE,OAAO,CAAC;IACvD,CAAC,CAAC,OAAOpD,KAAK,EAAE;MAAA,IAAAmJ,gBAAA;MACd,IAAAhH,qBAAY,0CAAAC,MAAA,CAAyCpC,KAAK,CAAE,CAAC;MAC7D,IAAAmC,qBAAY,GAAAgH,gBAAA,GAACnJ,KAAK,CAACiG,QAAQ,cAAAkD,gBAAA,uBAAdA,gBAAA,CAAgBlH,IAAI,CAAC;IACpC;IACA,IAAAE,qBAAY,4DAA2D,CAAC;IACxE,OAAO,IAAI;EACb,CAAC;EAAA,OAAAyG,sBAAA,CAAAnI,KAAA,OAAAD,SAAA;AAAA;AAED,SAAS4I,aAAaA,CAACC,gBAAwB,EAAEC,IAAY,EAAE;EAC7D,IAAMC,CAAC,GAAG,IAAAC,kBAAQ,EAACF,IAAI,CAAC;EACxB,IAAMG,GAAG,MAAArH,MAAA,CAAMmH,CAAC,CAACG,MAAM,OAAAtH,MAAA,CACrBmH,CAAC,CAACI,IAAI,GAAGJ,CAAC,CAACI,IAAI,GAAGJ,CAAC,CAACK,QAAQ,KAAK,OAAO,GAAG,KAAK,GAAG,IAAI,EAAAxH,MAAA,CACtDmH,CAAC,CAACM,QAAQ,yBAAsB;;EAEnC;EACA,IAAMC,GAAG,GAAGC,IAAI,CAACC,KAAK,CAAC,IAAIC,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC;;EAEzD;EACA,IAAMC,GAAG,GAAG,IAAAC,QAAE,EAAC,CAAC;EAEhB,IAAMC,GAAG,GAAGhB,gBAAgB;EAC5B,IAAMiB,GAAG,GAAGjB,gBAAgB;;EAE5B;EACA,IAAM9G,OAAO,GAAG;IAAE8H,GAAG;IAAEC,GAAG;IAAEb,GAAG;IAAEK,GAAG;IAAEK;EAAI,CAAC;EAE3C,OAAO5H,OAAO;AAChB;;AAEA;AACA;AACA;AACA;AACA;AAJA,SAKsBxB,+BAA+BA,CAAAwJ,GAAA;EAAA,OAAAC,gCAAA,CAAA/J,KAAA,OAAAD,SAAA;AAAA;AAsCrD;AACA;AACA;AACA;AAHA,SAAAgK,iCAAA;EAAAA,gCAAA,GAAApK,iBAAA,CAtCO,WAAAqK,IAAA,EAQoB;IAAA,IAR2B;MACpDvJ,IAAI,GAAGP,SAAS;MAChBS,KAAK,GAAGT,SAAS;MACjBG;IAKF,CAAC,GAAA2J,IAAA;IACCvJ,IAAI,GAAGA,IAAI,GAAGA,IAAI,GAAGJ,KAAK,CAAC4J,mBAAmB,CAAC,CAAC;IAChDtJ,KAAK,GAAGA,KAAK,GAAGA,KAAK,GAAGN,KAAK,CAAC6J,oBAAoB,CAAC,CAAC;IACpD,IAAAxI,qBAAY,0DAAyD,CAAC;IACtE,IAAMI,OAAO,GAAG6G,aAAa,CAAClI,IAAI,EAAEJ,KAAK,CAACqE,OAAO,CAAC,CAAC,CAAC;IACpD,IAAAhD,qBAAY,6DAA4D,CAAC;IACzE,IAAAA,qBAAY,EAACI,OAAO,CAAC;IACrB,IAAMqI,GAAG,SAAS,IAAAC,6BAAoB,EAACtI,OAAO,EAAEnB,KAAK,CAAC;IACtD,IAAAe,qBAAY,yDAAwD,CAAC;IACrE,IAAAA,qBAAY,EAACyI,GAAG,CAAC;IACjB,IAAMpF,YAAY,gBAAApD,MAAA,CAAgBwI,GAAG,8FAAAxI,MAAA,CAA2FR,oBAAoB,CAAE;IACtJ,IAAMqE,QAAQ,SAAS,IAAAgD,0BAAW,EAAC;MACjCrD,SAAS,EAAE9E,KAAK,CAACqE,OAAO,CAAC,CAAC;MAC1BlD,IAAI,EAAEuD,YAAY;MAClBJ,MAAM,EAAE,CAAC,CAAC;MACVtE;IACF,CAAC,CAAC;IACF,IAAI,cAAc,IAAImF,QAAQ,CAAChE,IAAI,EAAE;MACnC,IAAAE,qBAAY,2DAA0D,CAAC;MACvE,IAAAA,qBAAY,EAAC8D,QAAQ,CAAChE,IAAI,CAACiH,YAAY,CAAC;MACxC,IAAA/G,qBAAY,wDAAuD,CAAC;MACpE,OAAO8D,QAAQ,CAAChE,IAAI,CAACiH,YAAY;IACnC;IACA,IAAA/G,qBAAY,iFAEZ,CAAC;IACD,IAAAA,qBAAY,wDAAuD,CAAC;IACpE,OAAO,IAAI;EACb,CAAC;EAAA,OAAAqI,gCAAA,CAAA/J,KAAA,OAAAD,SAAA;AAAA;AAAA,SAMcsK,gDAAgDA,CAAAC,IAAA;EAAA,OAAAC,iDAAA,CAAAvK,KAAA,OAAAD,SAAA;AAAA;AA0B/D;AACA;AACA;AACA;AACA;AAJA,SAAAwK,kDAAA;EAAAA,iDAAA,GAAA5K,iBAAA,CA1BA,WACEU,KAAY,EACG;IACf,IAAAqB,qBAAY,2EAEZ,CAAC;IACD,IAAI,CAACrB,KAAK,CAACiD,iBAAiB,CAAC,CAAC,EAAE;MAC9BjD,KAAK,CAACmK,iBAAiB,OAAOjH,uBAAuB,CAAClD,KAAK,CAAC,CAAC;IAC/D;IACA4C,qBAAqB,CAAC5C,KAAK,CAAC;IAC5B,IAAAqB,qBAAY,6EAAAC,MAAA,CACiEtB,KAAK,CAAC6C,QAAQ,CAAC,CAAC,aAAAvB,MAAA,CAAUtB,KAAK,CAACiD,iBAAiB,CAAC,CAAC,CAChI,CAAC;IAED,IAAM6C,WAAW,SAAS,IAAAsE,mCAAoB,EAAC;MAAEpK;IAAM,CAAC,CAAC;;IAEzD;IACA,IAAAqB,qBAAY,mBAAAC,MAAA,CAAkBwE,WAAW,CAACuE,WAAW,CAAE,CAAC;IAExD,IAAMrE,OAAO,SAASH,kBAAkB,CAACC,WAAW,CAAC;IACrD9F,KAAK,CAACsK,YAAY,CAACtE,OAAO,CAAC;IAC3B,IAAA3E,qBAAY,yEAEZ,CAAC;EACH,CAAC;EAAA,OAAA6I,iDAAA,CAAAvK,KAAA,OAAAD,SAAA;AAAA;AAAA,SAOc6K,kBAAkBA,CAAAC,IAAA;EAAA,OAAAC,mBAAA,CAAA9K,KAAA,OAAAD,SAAA;AAAA;AAkBjC;AACA;AACA;AACA;AACA;AACA;AALA,SAAA+K,oBAAA;EAAAA,mBAAA,GAAAnL,iBAAA,CAlBA,WAAkCU,KAAY,EAAmB;IAC/D,IAAI0K,aAAa,WAAApJ,MAAA,CAAWtB,KAAK,CAAC0C,WAAW,CAAC,CAAC,CAAE;IACjD,IAAI1C,KAAK,CAACuD,0BAA0B,CAAC,CAAC,EAAE;MACtC,IAAI;QACF,IAAMoH,IAAI,GAAG,OACL,IAAAC,oCAAiB,EAAC;UACtBrC,gBAAgB,EAAEvI,KAAK,CAAC4J,mBAAmB,CAAC,CAAC;UAC7C5J;QACF,CAAC,CAAC,EACF2K,IAAI;QACND,aAAa,sBAAApJ,MAAA,CAAsBqJ,IAAI,QAAArJ,MAAA,CAAKtB,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,MAAG;MAC5E,CAAC,CAAC,OAAO1K,KAAK,EAAE;QACdwL,aAAa,sBAAApJ,MAAA,CAAsBtB,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,CAAE;MAClE;IACF;IACA,OAAOc,aAAa;EACtB,CAAC;EAAA,OAAAD,mBAAA,CAAA9K,KAAA,OAAAD,SAAA;AAAA;AAAA,SAQqBa,SAASA,CAAAsK,IAAA;EAAA,OAAAC,UAAA,CAAAnL,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAAoL,WAAA;EAAAA,UAAA,GAAAxL,iBAAA,CAAxB,WAAAyL,KAAA,EAMc;IAAA,IANW;MAC9BvK,gBAAgB,GAAG,KAAK;MACxBR;IAIF,CAAC,GAAA+K,KAAA;IACC,IAAA1J,qBAAY,oCAAmC,CAAC;IAChD,IAAI,CAACrB,KAAK,CAACqE,OAAO,CAAC,CAAC,EAAE;MACpB,IAAA/B,qBAAY,4DAEV,OACF,CAAC;MACD,OAAO,KAAK;IACd;IACA,IAAI;MACF;MACA,IACEtC,KAAK,CAAC0C,WAAW,CAAC,CAAC,IAAI,IAAI,IAC3B1C,KAAK,CAAC2C,WAAW,CAAC,CAAC,IAAI,IAAI,IAC3B,CAAC3C,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,IAC5B,CAAC5J,KAAK,CAAC6J,oBAAoB,CAAC,CAAC,EAC7B;QACA,IAAMmB,IAAI,SAAS,IAAAC,0CAAoB,EAAC;UAAEjL;QAAM,CAAC,CAAC;QAClD,IAAIgL,IAAI,EAAE;UACRhL,KAAK,CAACkL,OAAO,CAACF,IAAI,CAACG,MAAM,CAAC;UAC1BnL,KAAK,CAACoL,WAAW,CAACJ,IAAI,CAAC/C,QAAQ,CAAC;UAChCjI,KAAK,CAACqL,WAAW,CAACL,IAAI,CAAC9C,QAAQ,CAAC;UAChClI,KAAK,CAACsL,wBAAwB,CAACN,IAAI,CAACO,qBAAqB,CAAC;UAC1DvL,KAAK,CAACwL,gCAAgC,CACpCR,IAAI,CAACS,6BACP,CAAC;UACDzL,KAAK,CAAC0L,mBAAmB,CAACV,IAAI,CAACW,SAAS,CAAC;UACzC3L,KAAK,CAAC4L,oBAAoB,CAACZ,IAAI,CAACa,UAAU,CAAC;QAC7C,CAAC,MAAM;UACL,OAAO,KAAK;QACd;MACF;;MAEA;MACA,IAAI,CAAC,IAAAC,oBAAU,EAAC9L,KAAK,CAACqE,OAAO,CAAC,CAAC,CAAC,EAAE;QAChC,IAAM2G,KAAI,SAAS,IAAAC,0CAAoB,EAAC;UAAEjL;QAAM,CAAC,CAAC;QAClD,IAAIgL,KAAI,EAAE;UACRhL,KAAK,CAACkL,OAAO,CAACF,KAAI,CAACG,MAAM,CAAC;QAC5B,CAAC,MAAM;UACL,OAAO,KAAK;QACd;MACF;;MAEA;MACAnL,KAAK,CAAC+L,aAAa,OAAO/K,mBAAmB,CAAChB,KAAK,CAAC,CAAC;;MAErD;MACA,IACE,CAACQ,gBAAgB,IACjBR,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,IAC3B5J,KAAK,CAAC6J,oBAAoB,CAAC,CAAC,EAC5B;QACA,IAAAxI,qBAAY,oEAAAC,MAAA,CACwDtB,KAAK,CAAC4J,mBAAmB,CAAC,CAAC,CAC/F,CAAC;QACD,IAAI;UACF,IAAMoC,KAAK,SAAS/L,+BAA+B,CAAC;YAAED;UAAM,CAAC,CAAC;UAC9DA,KAAK,CAACiM,cAAc,CAACD,KAAK,CAAC;UAC3BhM,KAAK,CAACkM,0BAA0B,CAAC,IAAI,CAAC;UACtC,MAAMlC,gDAAgD,CAAChK,KAAK,CAAC;QAC/D,CAAC,CAAC,OAAOmM,KAAK,EAAE;UAAA,IAAAC,eAAA,EAAAC,gBAAA,EAAAC,qBAAA,EAAAC,gBAAA,EAAAC,qBAAA;UACd,IAAAnL,qBAAY,EAAC,EAAA+K,eAAA,GAAAD,KAAK,CAAChH,QAAQ,cAAAiH,eAAA,uBAAdA,eAAA,CAAgBjL,IAAI,KAAIgL,KAAK,CAAC;UAC3C,IAAA9K,qBAAY,EAACrB,KAAK,CAAC;UACnB,MAAM,IAAImG,KAAK,iCAAA7E,MAAA,CAEX,EAAA+K,gBAAA,GAAAF,KAAK,CAAChH,QAAQ,cAAAkH,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgBlL,IAAI,cAAAmL,qBAAA,uBAApBA,qBAAA,CAAsBG,iBAAiB,OAAAF,gBAAA,GACvCJ,KAAK,CAAChH,QAAQ,cAAAoH,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgBpL,IAAI,cAAAqL,qBAAA,uBAApBA,qBAAA,CAAsB9E,OAAO,KAC7ByE,KAAK,CAET,CAAC;QACH;MACF;MACA;MAAA,KACK,IAAInM,KAAK,CAAC0C,WAAW,CAAC,CAAC,IAAI1C,KAAK,CAAC2C,WAAW,CAAC,CAAC,EAAE;QACnD,IAAAtB,qBAAY,iEAAAC,MAAA,CACqDtB,KAAK,CAAC0C,WAAW,CAAC,CAAC,CACpF,CAAC;QACD,IAAMsJ,MAAK,SAAS5F,YAAY,CAACpG,KAAK,CAAC;QACvC,IAAIgM,MAAK,EAAEhM,KAAK,CAAC0M,cAAc,CAACV,MAAK,CAAC;QACtC,MAAMhC,gDAAgD,CAAChK,KAAK,CAAC;QAC7D,IACEA,KAAK,CAACsD,cAAc,CAAC,CAAC,IACtB,CAACtD,KAAK,CAAC2M,cAAc,CAAC,CAAC,KACtB3M,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KAAK1G,YAAY,CAACiH,yBAAyB,IACnExD,KAAK,CAACiD,iBAAiB,CAAC,CAAC,KACvB1G,YAAY,CAACqJ,4BAA4B,CAAC,EAC9C;UACA,IAAMuC,YAAW,SAASP,qBAAqB,CAAC5H,KAAK,CAAC;UACtD,IAAImI,YAAW,EAAEnI,KAAK,CAACiM,cAAc,CAAC9D,YAAW,CAAC;QACpD;MACF;MACA;MAAA,KACK;QACH,IAAA7F,qBAAY,mCAAkC,OAAO,CAAC;QACtD,OAAO,KAAK;MACd;MACA,IACEtC,KAAK,CAACsD,cAAc,CAAC,CAAC,IACrBtD,KAAK,CAACuD,0BAA0B,CAAC,CAAC,IAAIvD,KAAK,CAAC2M,cAAc,CAAC,CAAE,EAC9D;QACA;QACA,IAAArK,qBAAY,kBAAAhB,MAAA,CACMtB,KAAK,CAACqE,OAAO,CAAC,CAAC,QAAA/C,MAAA,CAC7BtB,KAAK,CAAC6C,QAAQ,CAAC,CAAC,GAAG7C,KAAK,CAAC6C,QAAQ,CAAC,CAAC,GAAG,MAAM,WAAAvB,MAAA,OAChCiJ,kBAAkB,CAACvK,KAAK,CAAC,GACvC,MACF,CAAC;QACD,IAAAqB,qBAAY,8CAA6C,CAAC;QAC1D,OAAO,IAAI;MACb;IACF,CAAC,CAAC,OAAOnC,KAAK,EAAE;MAAA,IAAA0N,gBAAA,EAAAC,qBAAA,EAAAC,gBAAA,EAAAC,qBAAA,EAAAC,gBAAA;MACd;MACA,IAAA1K,qBAAY,EAACpD,KAAK,CAACwI,OAAO,EAAE,OAAO,CAAC;MACpC;MACA,IAAApF,qBAAY,GAAAsK,gBAAA,GAAC1N,KAAK,CAACiG,QAAQ,cAAAyH,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgBzL,IAAI,cAAA0L,qBAAA,uBAApBA,qBAAA,CAAsBnF,OAAO,EAAE,OAAO,CAAC;MACpD;MACA,IAAApF,qBAAY,GAAAwK,gBAAA,GAAC5N,KAAK,CAACiG,QAAQ,cAAA2H,gBAAA,wBAAAC,qBAAA,GAAdD,gBAAA,CAAgB3L,IAAI,cAAA4L,qBAAA,uBAApBA,qBAAA,CAAsBN,iBAAiB,EAAE,OAAO,CAAC;MAC9D;MACA,IAAApL,qBAAY,GAAA2L,gBAAA,GAAC9N,KAAK,CAACiG,QAAQ,cAAA6H,gBAAA,uBAAdA,gBAAA,CAAgB7L,IAAI,CAAC;MAClC;MACA,IAAAE,qBAAY,EAACnC,KAAK,CAACyI,KAAK,IAAI,IAAIxB,KAAK,CAAC,CAAC,CAACwB,KAAK,CAAC;IAChD;IACA,IAAAtG,qBAAY,iDAAgD,CAAC;IAC7D,OAAO,KAAK;EACd,CAAC;EAAA,OAAAyJ,UAAA,CAAAnL,KAAA,OAAAD,SAAA;AAAA"}