@starklabs/forge 1.3.25-cors.0 → 2.0.0

package/dist/config/Duration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Duration.js","sourceRoot":"","sources":["../../src/config/Duration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAOnE,MAAM,OAAO,GAAiC;IAC5C,EAAE,EAAE,CAAC;IACL,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,WAAW;IACd,EAAE,EAAE,aAAa,EAAE,UAAU;IAC7B,CAAC,EAAE,cAAc,EAAE,WAAW;CAC/B,CAAC;AAEF,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,OAAO,QAAQ;IACkB,YAAY;IAAjD,YAAqC,YAAoB;4BAApB,YAAY;IAAW,CAAC;IAE7D,MAAM,CAAC,IAAI,CAAC,EAAU;QACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,qBAAqB,EAAE,EAAE;gBAClC,IAAI,EAAE,SAAS,CAAC,mBAAmB;aACpC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAgD;QAC3D,IAAI,KAAK,YAAY,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,qBAAqB,KAAK,IAAI;gBACvC,IAAI,EAAE,qEAAqE;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC/B,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAoB,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,kEAAkE;IAClE,OAAO,CAAC,IAAI,GAAkB,IAAI,CAAC,GAAG,EAAE;QACtC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9D,OAAO,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/config/ForgeConfig.d.ts

@@ -0,0 +1,131 @@
+import type { Collection } from "../types/Collection.js";
+import type { CommonEmailPlaceholders } from "../types/email/static-config.type.js";
+import { type OAuthProviderEntry } from "../oauth/OAuthProviderFactory.js";
+import type { OAuthProfile } from "../oauth/OAuthProvider.js";
+import { Duration } from "./Duration.js";
+import type { AccountConfig, AccountLinking, AdminConfig, AuthConfig, AuthFieldNames, CookieOptions, CorsConfig, ForgeOptions } from "./ForgeOptions.js";
+export interface ResolvedOAuthConfig {
+    providers: readonly OAuthProviderEntry[];
+    successRedirect: string | undefined;
+    failureRedirect: string | undefined;
+    accountLinking: AccountLinking;
+    stateAge: Duration;
+    userFromProfile: ((profile: OAuthProfile) => Record<string, unknown>) | undefined;
+}
+export interface ResolvedMagicLinkConfig {
+    url: string;
+    expiresIn: Duration;
+    resendCooldown: Duration;
+    allowSignup: boolean;
+    sameDevice: boolean;
+    accountLinking: AccountLinking;
+}
+export interface ResolvedMfaConfig {
+    issuer: string;
+    challengeAge: Duration;
+    maxAttempts: number;
+    lockoutDuration: Duration;
+    recoveryCodes: number;
+    window: number;
+}
+/** Auth configuration after defaults were applied and durations parsed. */
+export interface ResolvedAuthConfig {
+    mode: "builtin" | "manual";
+    returnAccessToken: boolean;
+    returnRefreshToken: boolean;
+    rotateRefreshToken: boolean;
+    refreshTokenRotationInterval: Duration;
+    refreshReuseGracePeriod: Duration;
+    verifyAccessUser: boolean;
+    fields: AuthFieldNames;
+    mongooseConfig: AuthConfig["mongooseConfig"];
+    accessTokenName: string;
+    refreshTokenName: string;
+    accessTokenAge: Duration;
+    refreshTokenAge: Duration;
+    signupMode: "credentials" | "otp";
+    loginMode: "credentials" | "otp";
+    otp: {
+        expiresIn: Duration;
+        maxAttempts: number;
+        resendCooldown: Duration;
+        maxResends: number;
+        verifiedWindow: Duration;
+    };
+    cookie: Required<Pick<CookieOptions, "sameSite" | "secure" | "path">> & {
+        domain?: string;
+    };
+    oauth: ResolvedOAuthConfig | undefined;
+    magicLink: ResolvedMagicLinkConfig | undefined;
+    mfa: ResolvedMfaConfig | undefined;
+}
+/**
+ * Validated, immutable framework configuration.
+ *
+ * 1.x kept configuration in module-level globals and called `process.exit(1)`
+ * on bad input. Here the configuration is a value that is passed around, and
+ * every problem is reported at once through a {@link ConfigurationError}.
+ */
+export declare class ForgeConfig {
+    readonly env: string;
+    readonly isProduction: boolean;
+    readonly isTest: boolean;
+    readonly port: number;
+    readonly apiVersion: number;
+    readonly apiPrefix: string;
+    readonly backendURL: string;
+    readonly frontendOrigins: readonly string[];
+    readonly corsConfig: CorsConfig | undefined;
+    readonly trustProxy: boolean | number | string;
+    readonly logRequests: boolean;
+    readonly exposeErrorDetails: boolean;
+    readonly bodyLimit: string;
+    readonly isOffline: boolean;
+    readonly mongoDBURI: string | undefined;
+    readonly databaseName: string;
+    readonly jwtSecret: string | undefined;
+    readonly masterKey: string | undefined;
+    readonly adminRoles: readonly string[];
+    readonly protectedFields: readonly string[];
+    readonly rateLimit: {
+        window: Duration;
+        max: number;
+        message: string;
+        authMax: number;
+        store: ForgeOptionsStore;
+    };
+    readonly systemEmailSender: string | undefined;
+    readonly resendAPIKey: string | undefined;
+    readonly cloudinary: {
+        apiKey?: string;
+        apiSecret?: string;
+        cloudName?: string;
+        folder: string;
+    };
+    readonly upload: {
+        maxFileSize: number;
+        maxFiles: number;
+    };
+    readonly pagination: {
+        defaultSize: number;
+        maxSize: number;
+    };
+    readonly auth: ResolvedAuthConfig;
+    readonly admin: AdminConfig;
+    readonly account: AccountConfig;
+    readonly email: CommonEmailPlaceholders | undefined;
+    readonly collections: readonly Collection[];
+    /** Non-fatal problems found while validating (printed at start-up). */
+    readonly warnings: readonly string[];
+    constructor(options?: ForgeOptions);
+    /** Alias kept so code can read `config.apiPrefix` or build a path from it. */
+    path(...segments: string[]): string;
+    private parseDuration;
+    private resolveAuth;
+    private resolveMagicLink;
+    private resolveMfa;
+    private resolveOAuth;
+}
+type ForgeOptionsStore = NonNullable<ForgeOptions["rateLimitStore"]> | undefined;
+export {};
+//# sourceMappingURL=ForgeConfig.d.ts.map

package/dist/config/ForgeConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForgeConfig.d.ts","sourceRoot":"","sources":["../../src/config/ForgeConfig.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EAGd,WAAW,EACX,UAAU,EACV,cAAc,EACd,aAAa,EACb,UAAU,EACV,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAO3B,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;CACnF;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,QAAQ,CAAC;IACpB,cAAc,EAAE,QAAQ,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,QAAQ,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,QAAQ,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,4BAA4B,EAAE,QAAQ,CAAC;IACvC,uBAAuB,EAAE,QAAQ,CAAC;IAClC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,QAAQ,CAAC;IACzB,eAAe,EAAE,QAAQ,CAAC;IAC1B,UAAU,EAAE,aAAa,GAAG,KAAK,CAAC;IAClC,SAAS,EAAE,aAAa,GAAG,KAAK,CAAC;IACjC,GAAG,EAAE;QACH,SAAS,EAAE,QAAQ,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,QAAQ,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC;KAC1B,CAAC;IACF,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACvC,SAAS,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC/C,GAAG,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;GAMG;AACH,qBAAa,WAAW;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAE5C,QAAQ,CAAC,SAAS,EAAE;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAElH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,QAAQ,CAAC,UAAU,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACjG,QAAQ,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAE9D,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAE5C,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,YAAY,OAAO,GAAE,YAAiB,EAmLrC;IAED,8EAA8E;IAC9E,IAAI,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAElC;IAED,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,WAAW;IAoGnB,OAAO,CAAC,gBAAgB;IAkCxB,OAAO,CAAC,UAAU;IAwBlB,OAAO,CAAC,YAAY;CA8CrB;AAED,KAAK,iBAAiB,GAAG,WAAW,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,GAAG,SAAS,CAAC"}

package/dist/config/ForgeConfig.js

@@ -0,0 +1,425 @@
+import { ConfigurationError } from "../errors/index.js";
+import { OAuthProviderFactory } from "../oauth/OAuthProviderFactory.js";
+import { Duration } from "./Duration.js";
+const SENDER_PATTERN = /^\s*[^<>]+?\s*<\s*[^<>\s@]+@[^<>\s@]+\.[^<>\s@]+\s*>\s*$/;
+const MIN_SECRET_LENGTH = 32;
+/** A cookie `Domain`: a host name, optionally with a leading dot. No scheme, port or path. */
+const COOKIE_DOMAIN = /^\.?[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)*$/;
+/**
+ * Validated, immutable framework configuration.
+ *
+ * 1.x kept configuration in module-level globals and called `process.exit(1)`
+ * on bad input. Here the configuration is a value that is passed around, and
+ * every problem is reported at once through a {@link ConfigurationError}.
+ */
+export class ForgeConfig {
+    env;
+    isProduction;
+    isTest;
+    port;
+    apiVersion;
+    apiPrefix;
+    backendURL;
+    frontendOrigins;
+    corsConfig;
+    trustProxy;
+    logRequests;
+    exposeErrorDetails;
+    bodyLimit;
+    isOffline;
+    mongoDBURI;
+    databaseName;
+    jwtSecret;
+    masterKey;
+    adminRoles;
+    protectedFields;
+    rateLimit;
+    systemEmailSender;
+    resendAPIKey;
+    cloudinary;
+    upload;
+    pagination;
+    auth;
+    admin;
+    account;
+    email;
+    collections;
+    /** Non-fatal problems found while validating (printed at start-up). */
+    warnings;
+    constructor(options = {}) {
+        const problems = [];
+        const warnings = [];
+        this.env = options.ENV ?? "development";
+        this.isProduction = this.env === "production";
+        this.isTest = this.env === "test";
+        this.port = options.port ?? 5000;
+        if (!Number.isInteger(this.port) || this.port < 0 || this.port > 65535) {
+            problems.push(`port must be an integer between 0 and 65535 (received ${String(options.port)}).`);
+        }
+        this.apiVersion = options.apiVersion ?? 1;
+        if (!Number.isInteger(this.apiVersion) || this.apiVersion < 1) {
+            problems.push("apiVersion must be a positive integer.");
+        }
+        this.apiPrefix = `/api/v${this.apiVersion}`;
+        this.backendURL = options.backendURL ?? `http://localhost:${this.port}${this.apiPrefix}`;
+        this.frontendOrigins = [
+            ...(options.frontendURL ? [options.frontendURL] : []),
+            ...(options.frontendURLs ?? []),
+        ];
+        this.corsConfig = options.corsConfig;
+        this.trustProxy = options.trustProxy ?? false;
+        this.logRequests = options.logRequests ?? !this.isTest;
+        this.exposeErrorDetails = options.exposeErrorDetails ?? !this.isProduction;
+        this.bodyLimit = options.bodyLimit ?? "100kb";
+        // Database
+        this.isOffline = options.isOffline ?? !this.isProduction;
+        this.mongoDBURI = options.mongoDBURI;
+        this.databaseName = options.databaseName ?? "starkForge";
+        if (this.isProduction && this.isOffline) {
+            problems.push("isOffline cannot be true in production: it prints one-time codes to the console and targets a local database.");
+        }
+        if (!this.isOffline && !this.mongoDBURI) {
+            problems.push("mongoDBURI is required when isOffline is false.");
+        }
+        // Security
+        this.jwtSecret = options.jwtSecret;
+        this.masterKey = options.masterKey;
+        this.adminRoles = Object.freeze([...(options.adminRoles ?? ["admin"])]);
+        this.protectedFields = Object.freeze([...(options.protectedFields ?? ["role"])]);
+        if (this.adminRoles.length === 0)
+            problems.push("adminRoles must contain at least one role.");
+        if (this.masterKey !== undefined && Buffer.from(this.masterKey, "base64").length !== 32) {
+            problems.push("masterKey must be a base64 encoded 32-byte key. Generate one with generateMasterKey().");
+        }
+        // Rate limiting
+        const max = options.maxReqLimit ?? 100;
+        if (!Number.isFinite(max) || max <= 0)
+            problems.push("maxReqLimit must be a positive number.");
+        const authMax = options.authMaxReqLimit ?? 20;
+        if (!Number.isFinite(authMax) || authMax <= 0)
+            problems.push("authMaxReqLimit must be a positive number.");
+        this.rateLimit = {
+            window: this.parseDuration(options.rateLimitDuration ?? "15m", "rateLimitDuration", problems),
+            max: Math.min(max, Number.MAX_SAFE_INTEGER),
+            message: options.rateLimitMsg ?? "Too many requests, please try again later.",
+            authMax: Math.min(authMax, Number.MAX_SAFE_INTEGER),
+            store: options.rateLimitStore,
+        };
+        // E-mail
+        this.systemEmailSender = options.systemEmailSender;
+        this.resendAPIKey = options.resendAPIKey;
+        if (this.systemEmailSender && !SENDER_PATTERN.test(this.systemEmailSender)) {
+            problems.push("systemEmailSender must look like 'Starklabs <noreply@starklabs.com>'.");
+        }
+        // Uploads / pagination
+        this.cloudinary = {
+            ...(options.cloudinaryAPIKey ? { apiKey: options.cloudinaryAPIKey } : {}),
+            ...(options.cloudinaryAPISecret ? { apiSecret: options.cloudinaryAPISecret } : {}),
+            ...(options.cloudinaryCloudName ? { cloudName: options.cloudinaryCloudName } : {}),
+            folder: options.cloudinaryFolderName ?? "starkForge",
+        };
+        this.upload = {
+            maxFileSize: options.uploadMaxFileSize ?? 5 * 1024 * 1024,
+            maxFiles: options.uploadMaxFiles ?? 10,
+        };
+        this.pagination = {
+            defaultSize: options.defaultPageSize ?? 50,
+            maxSize: options.maxPageSize ?? 100,
+        };
+        if (this.pagination.defaultSize > this.pagination.maxSize) {
+            problems.push("defaultPageSize cannot be larger than maxPageSize.");
+        }
+        // Built-in features
+        const builtin = options.builtinConfig ?? {};
+        this.admin = builtin.admin ?? { mode: "manual" };
+        this.account = builtin.account ?? { mode: "manual" };
+        this.email = builtin.email;
+        this.collections = Object.freeze([...(options.collections ?? [])]);
+        this.auth = this.resolveAuth(builtin.auth ?? { mode: "manual" }, problems, warnings, options.domain);
+        for (const feature of ["account", "admin"]) {
+            if (this[feature].mode === "builtin" && this.auth.mode !== "builtin") {
+                problems.push(`builtinConfig.${feature} is 'builtin', which needs builtinConfig.auth in 'builtin' mode (it works on the user model).`);
+            }
+        }
+        const needsJwt = this.auth.mode === "builtin" ||
+            this.auth.oauth !== undefined ||
+            this.auth.mfa !== undefined ||
+            this.account.mode === "builtin" ||
+            this.collections.some((c) => c.type === "auth" || c.type === "account");
+        if (needsJwt) {
+            if (!this.jwtSecret) {
+                problems.push("jwtSecret is required for authentication. Generate one with generateJWTSecret().");
+            }
+            else if (this.jwtSecret.length < MIN_SECRET_LENGTH) {
+                problems.push(`jwtSecret must be at least ${MIN_SECRET_LENGTH} characters long.`);
+            }
+        }
+        if (!needsJwt) {
+            const locked = this.collections
+                .filter((c) => c.type === "crud" && c.routes.some((r) => (r.auth ?? "authenticated") !== "public"))
+                .map((c) => `'${c.route}'`);
+            if (locked.length > 0) {
+                warnings.push(`Collections ${locked.join(", ")} have routes that require sign-in, but no authentication is configured, so those routes reject every request. Set builtinConfig.auth (and jwtSecret), or mark the routes auth: "public".`);
+            }
+        }
+        const usesOtp = this.auth.signupMode === "otp" || this.auth.loginMode === "otp";
+        if (this.auth.mode === "builtin" && usesOtp && !this.isOffline) {
+            if (!this.resendAPIKey)
+                problems.push("resendAPIKey is required for OTP authentication when isOffline is false.");
+            if (!this.systemEmailSender)
+                problems.push("systemEmailSender is required for OTP authentication when isOffline is false.");
+        }
+        const usesEncryption = this.collections.some((c) => c.routes.some((r) => (r.encryptedFields?.length ?? 0) > 0 || (r.decryptedFields?.length ?? 0) > 0));
+        if (usesEncryption && !this.masterKey) {
+            problems.push("masterKey is required because a route uses encryptedFields or decryptedFields. Generate one with generateMasterKey().");
+        }
+        const usesCloudinary = this.collections.some((c) => c.routes.some((r) => r.files?.some((f) => (f.provider ?? "cloudinary") === "cloudinary")));
+        if (usesCloudinary) {
+            const { apiKey, apiSecret, cloudName } = this.cloudinary;
+            if (!apiKey || !apiSecret || !cloudName) {
+                problems.push("cloudinaryAPIKey, cloudinaryAPISecret and cloudinaryCloudName are required when a route accepts file uploads.");
+            }
+        }
+        if (this.corsConfig?.origin === "*" && this.corsConfig.credentials) {
+            warnings.push("corsConfig: origin '*' together with credentials is unsafe. List your front-end origins explicitly.");
+        }
+        // The placeholders only matter when real e-mail goes out: built-in sign-in sends codes and links, an emailAction sends templates.
+        // Offline, nothing is delivered (the console provider logs only the recipient and the subject), so the warning would be noise.
+        const sendsEmail = !this.isOffline &&
+            (this.auth.mode === "builtin" ||
+                this.collections.some((c) => c.routes.some((r) => [...(r.actions?.before ?? []), ...(r.actions?.after ?? [])].some((a) => typeof a === "object" && a !== null && "emailAction" in a))));
+        if (!this.email && sendsEmail) {
+            warnings.push("builtinConfig.email was not provided: e-mail templates may contain undefined values.");
+        }
+        if (this.admin.mode === "builtin") {
+            warnings.push("builtinConfig.admin is deprecated: GET /account/role returns the role of any signed-in user (admins included). GET /admin/check keeps working for now.");
+        }
+        if (problems.length > 0) {
+            throw new ConfigurationError({
+                message: `Invalid Forge configuration:\n - ${problems.join("\n - ")}`,
+                details: { problems },
+                hint: "Fix the listed options in new Forge({...}).",
+            });
+        }
+        this.warnings = Object.freeze(warnings);
+    }
+    /** Alias kept so code can read `config.apiPrefix` or build a path from it. */
+    path(...segments) {
+        return [this.apiPrefix, ...segments.map((s) => s.replace(/^\/+|\/+$/g, ""))].filter(Boolean).join("/");
+    }
+    parseDuration(value, name, problems) {
+        try {
+            return Duration.parse(value);
+        }
+        catch {
+            problems.push(`${name} "${value}" is not a valid duration (examples: "30s", "15m", "1d").`);
+            return Duration.ofMs(0);
+        }
+    }
+    resolveAuth(auth, problems, warnings, legacyDomain) {
+        const otp = auth.otp ?? {};
+        const cookie = auth.cookie ?? {};
+        const fields = {
+            email: auth.fieldsObj?.email ?? "email",
+            password: auth.fieldsObj?.password ?? "password",
+            otp: auth.fieldsObj?.otp ?? "otp",
+            purpose: auth.fieldsObj?.purpose ?? "purpose",
+        };
+        if (auth.mode === "builtin") {
+            const placeholder = (key, value) => {
+                if (typeof value === "string" && value.startsWith("[")) {
+                    problems.push(`auth.${key} "${value}" is just a placeholder. Use a real value.`);
+                }
+            };
+            Object.entries(fields).forEach(([k, v]) => placeholder(`fieldsObj.${k}`, v));
+            if (!auth.mongooseConfig) {
+                problems.push("auth.mongooseConfig is required when auth.mode is 'builtin'.");
+            }
+            else {
+                placeholder("mongooseConfig.model", auth.mongooseConfig.model);
+                if (!auth.mongooseConfig.model)
+                    problems.push("auth.mongooseConfig.model is required.");
+                if (!auth.mongooseConfig.schema)
+                    problems.push("auth.mongooseConfig.schema is required.");
+                for (const key of [fields.email, fields.password]) {
+                    if (auth.mongooseConfig.schema && !(key in auth.mongooseConfig.schema)) {
+                        problems.push(`auth.mongooseConfig.schema must define the '${key}' field.`);
+                    }
+                }
+            }
+        }
+        // 1.x configured the cookie domain with the top-level `domain` option, and only applied it in production.
+        const legacy = !cookie.domain ? legacyDomain : undefined;
+        const cookieDomain = cookie.domain ?? (this.isProduction ? legacy : undefined);
+        if (legacy) {
+            warnings.push(this.isProduction
+                ? "domain is deprecated: set builtinConfig.auth.cookie.domain instead. It is used as the Domain attribute of the auth cookies."
+                : "domain is deprecated and, as in 1.x, only applies in production: set builtinConfig.auth.cookie.domain instead.");
+        }
+        const checkedDomain = cookie.domain ?? legacyDomain;
+        if (checkedDomain !== undefined && !COOKIE_DOMAIN.test(checkedDomain)) {
+            problems.push(`auth.cookie.domain "${checkedDomain}" must be a host name such as "example.com" or ".example.com" (no scheme, port or path).`);
+        }
+        const sameSite = cookie.sameSite ?? (this.isProduction ? "none" : "lax");
+        const secure = cookie.secure ?? this.isProduction;
+        if (sameSite === "none" && !secure) {
+            problems.push("auth.cookie: sameSite 'none' requires secure cookies (HTTPS).");
+        }
+        if (this.isProduction && !secure) {
+            warnings.push("auth.cookie.secure is false in production. Cookies will be sent over plain HTTP.");
+        }
+        const parse = (v, fallback, name) => this.parseDuration(v ?? fallback, name, problems);
+        const maxAttempts = otp.maxAttempts ?? 5;
+        const maxResends = otp.maxResends ?? 5;
+        if (!Number.isInteger(maxAttempts) || maxAttempts < 1)
+            problems.push("auth.otp.maxAttempts must be a positive integer.");
+        if (!Number.isInteger(maxResends) || maxResends < 0)
+            problems.push("auth.otp.maxResends must be zero or a positive integer.");
+        const oauth = this.resolveOAuth(auth, problems);
+        return {
+            mode: auth.mode,
+            returnAccessToken: auth.returnAccessToken ?? false,
+            returnRefreshToken: auth.returnRefreshToken ?? false,
+            rotateRefreshToken: auth.rotateRefreshToken ?? true,
+            refreshTokenRotationInterval: parse(auth.refreshTokenRotationInterval, "0s", "auth.refreshTokenRotationInterval"),
+            refreshReuseGracePeriod: parse(auth.refreshReuseGracePeriod, "10s", "auth.refreshReuseGracePeriod"),
+            verifyAccessUser: auth.verifyAccessUser ?? true,
+            fields,
+            mongooseConfig: auth.mongooseConfig,
+            accessTokenName: auth.accessTokenName ?? "accessToken",
+            refreshTokenName: auth.refreshTokenName ?? "refreshToken",
+            accessTokenAge: parse(auth.accessTokenAge, "10m", "auth.accessTokenAge"),
+            refreshTokenAge: parse(auth.refreshTokenAge, "30d", "auth.refreshTokenAge"),
+            signupMode: auth.signupMode ?? "otp",
+            loginMode: auth.loginMode ?? "otp",
+            otp: {
+                expiresIn: parse(otp.expiresIn, "5m", "auth.otp.expiresIn"),
+                maxAttempts,
+                resendCooldown: parse(otp.resendCooldown, "60s", "auth.otp.resendCooldown"),
+                maxResends,
+                verifiedWindow: parse(otp.verifiedWindow, "10m", "auth.otp.verifiedWindow"),
+            },
+            cookie: {
+                sameSite,
+                secure,
+                path: cookie.path ?? "/",
+                ...(cookieDomain ? { domain: cookieDomain } : {}),
+            },
+            oauth,
+            magicLink: this.resolveMagicLink(auth.magicLink, problems),
+            mfa: this.resolveMfa(auth.mfa, problems),
+        };
+    }
+    resolveMagicLink(options, problems) {
+        if (!options)
+            return undefined;
+        // The link is built from this URL and e-mailed, so it must point at one of our own front-ends.
+        const origins = new Set(this.frontendOrigins.map((o) => o.replace(/\/+$/, "")));
+        try {
+            const url = new URL(options.url);
+            if (!["http:", "https:"].includes(url.protocol))
+                throw new Error("protocol");
+            if (!origins.has(url.origin)) {
+                problems.push(`auth.magicLink.url "${options.url}" is not on a configured front-end. Add its origin to frontendURL / frontendURLs.`);
+            }
+        }
+        catch {
+            problems.push("auth.magicLink.url must be an absolute http(s) URL (the front-end page that receives the token).");
+        }
+        const accountLinking = options.accountLinking ?? "auto";
+        if (!["auto", "always", "never"].includes(accountLinking))
+            problems.push("auth.magicLink.accountLinking must be 'auto', 'always' or 'never'.");
+        // Links are delivered by e-mail, so a real mail provider is needed outside offline mode.
+        if (!this.isOffline) {
+            if (!this.resendAPIKey)
+                problems.push("resendAPIKey is required for magic links when isOffline is false.");
+            if (!this.systemEmailSender)
+                problems.push("systemEmailSender is required for magic links when isOffline is false.");
+        }
+        return {
+            url: options.url,
+            expiresIn: this.parseDuration(options.expiresIn ?? "15m", "auth.magicLink.expiresIn", problems),
+            resendCooldown: this.parseDuration(options.resendCooldown ?? "60s", "auth.magicLink.resendCooldown", problems),
+            allowSignup: options.allowSignup ?? true,
+            sameDevice: options.sameDevice ?? true,
+            accountLinking,
+        };
+    }
+    resolveMfa(options, problems) {
+        if (!options)
+            return undefined;
+        if (typeof options.issuer !== "string" || options.issuer.trim() === "")
+            problems.push("auth.mfa.issuer is required (it is shown in the authenticator app).");
+        // The TOTP secret has to be readable again to check codes, so it is encrypted (not hashed) with the master key.
+        if (!this.masterKey)
+            problems.push("masterKey is required for auth.mfa: authenticator secrets are encrypted at rest. Generate one with generateMasterKey().");
+        const maxAttempts = options.maxAttempts ?? 5;
+        const recoveryCodes = options.recoveryCodes ?? 10;
+        const window = options.window ?? 1;
+        if (!Number.isInteger(maxAttempts) || maxAttempts < 1)
+            problems.push("auth.mfa.maxAttempts must be a positive integer.");
+        if (!Number.isInteger(recoveryCodes) || recoveryCodes < 1 || recoveryCodes > 50)
+            problems.push("auth.mfa.recoveryCodes must be between 1 and 50.");
+        if (!Number.isInteger(window) || window < 0 || window > 5)
+            problems.push("auth.mfa.window must be between 0 and 5.");
+        return {
+            issuer: options.issuer?.trim() ?? "",
+            challengeAge: this.parseDuration(options.challengeAge ?? "5m", "auth.mfa.challengeAge", problems),
+            maxAttempts,
+            lockoutDuration: this.parseDuration(options.lockoutDuration ?? "5m", "auth.mfa.lockoutDuration", problems),
+            recoveryCodes,
+            window,
+        };
+    }
+    resolveOAuth(auth, problems) {
+        const oauth = auth.oauth;
+        if (!oauth)
+            return undefined;
+        if (!Array.isArray(oauth.providers) || oauth.providers.length === 0) {
+            problems.push("auth.oauth.providers must list at least one provider.");
+        }
+        const seen = new Set();
+        for (const entry of oauth.providers ?? []) {
+            const name = OAuthProviderFactory.nameOf(entry);
+            if (seen.has(name))
+                problems.push(`auth.oauth.providers lists '${name}' twice.`);
+            seen.add(name);
+            if (!("buildAuthorizationUrl" in entry)) {
+                if (!entry.clientId)
+                    problems.push(`auth.oauth.providers['${name}'].clientId is required.`);
+                if (!entry.clientSecret)
+                    problems.push(`auth.oauth.providers['${name}'].clientSecret is required.`);
+            }
+        }
+        // Redirect targets must be one of the configured front-ends, otherwise the callback is an open redirect.
+        const origins = new Set(this.frontendOrigins.map((o) => o.replace(/\/+$/, "")));
+        for (const key of ["successRedirect", "failureRedirect"]) {
+            const value = oauth[key];
+            if (value === undefined)
+                continue;
+            try {
+                const url = new URL(value);
+                if (!["http:", "https:"].includes(url.protocol))
+                    throw new Error("protocol");
+                if (!origins.has(url.origin)) {
+                    problems.push(`auth.oauth.${key} "${value}" is not on a configured front-end. Add its origin to frontendURL / frontendURLs.`);
+                }
+            }
+            catch {
+                problems.push(`auth.oauth.${key} must be an absolute http(s) URL.`);
+            }
+        }
+        const accountLinking = oauth.accountLinking ?? "auto";
+        if (!["auto", "always", "never"].includes(accountLinking))
+            problems.push("auth.oauth.accountLinking must be 'auto', 'always' or 'never'.");
+        return {
+            providers: Object.freeze([...(oauth.providers ?? [])]),
+            successRedirect: oauth.successRedirect,
+            failureRedirect: oauth.failureRedirect,
+            accountLinking,
+            stateAge: this.parseDuration(oauth.stateAge ?? "10m", "auth.oauth.stateAge", problems),
+            userFromProfile: oauth.userFromProfile,
+        };
+    }
+}
+//# sourceMappingURL=ForgeConfig.js.map

package/dist/config/ForgeConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForgeConfig.js","sourceRoot":"","sources":["../../src/config/ForgeConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,oBAAoB,EAA2B,MAAM,kCAAkC,CAAC;AAEjG,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAezC,MAAM,cAAc,GAAG,0DAA0D,CAAC;AAClF,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,8FAA8F;AAC9F,MAAM,aAAa,GAAG,8FAA8F,CAAC;AA2DrH;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACb,GAAG,CAAS;IACZ,YAAY,CAAU;IACtB,MAAM,CAAU;IAChB,IAAI,CAAS;IACb,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,eAAe,CAAoB;IACnC,UAAU,CAAyB;IACnC,UAAU,CAA4B;IACtC,WAAW,CAAU;IACrB,kBAAkB,CAAU;IAC5B,SAAS,CAAS;IAElB,SAAS,CAAU;IACnB,UAAU,CAAqB;IAC/B,YAAY,CAAS;IAErB,SAAS,CAAqB;IAC9B,SAAS,CAAqB;IAC9B,UAAU,CAAoB;IAC9B,eAAe,CAAoB;IAEnC,SAAS,CAAgG;IAEzG,iBAAiB,CAAqB;IACtC,YAAY,CAAqB;IAEjC,UAAU,CAA8E;IACxF,MAAM,CAA4C;IAClD,UAAU,CAA2C;IAErD,IAAI,CAAqB;IACzB,KAAK,CAAc;IACnB,OAAO,CAAgB;IACvB,KAAK,CAAsC;IAC3C,WAAW,CAAwB;IAE5C,uEAAuE;IAC9D,QAAQ,CAAoB;IAErC,YAAY,OAAO,GAAiB,EAAE;QACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC;QAElC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC,yDAAyD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnG,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEzF,IAAI,CAAC,eAAe,GAAG;YACrB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;SAChC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACvD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAE9C,WAAW;QACX,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC;QACzD,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;QACjI,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QACnE,CAAC;QAED,WAAW;QACX,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC9F,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxF,QAAQ,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QAC1G,CAAC;QAED,gBAAgB;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3G,IAAI,CAAC,SAAS,GAAG;YACf,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,IAAI,KAAK,EAAE,mBAAmB,EAAE,QAAQ,CAAC;YAC7F,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC;YAC3C,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,4CAA4C;YAC7E,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;YACnD,KAAK,EAAE,OAAO,CAAC,cAAc;SAC9B,CAAC;QAEF,SAAS;QACT,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACzF,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,UAAU,GAAG;YAChB,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,EAAE,OAAO,CAAC,oBAAoB,IAAI,YAAY;SACrD,CAAC;QACF,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,OAAO,CAAC,iBAAiB,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;YACzD,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;SACvC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG;YAChB,WAAW,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;YAC1C,OAAO,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;SACpC,CAAC;QACF,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACtE,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrG,KAAK,MAAM,OAAO,IAAI,CAAC,SAAS,EAAE,OAAO,CAAU,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,OAAO,+FAA+F,CAAC,CAAC;YACzI,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS;YAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;YACpG,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC,8BAA8B,iBAAiB,mBAAmB,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW;iBAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC;iBAClG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CACX,eAAe,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,0LAA0L,CAC3N,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QAChF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,QAAQ,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YAClH,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAAE,QAAQ,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;QAC9H,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CACnG,CAAC;QACF,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,uHAAuH,CAAC,CAAC;QACzI,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,YAAY,CAAC,KAAK,YAAY,CAAC,CAAC,CAC1F,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;YACzD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;YACjI,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;QACvH,CAAC;QACD,kIAAkI;QAClI,+HAA+H;QAC/H,MAAM,UAAU,GACd,CAAC,IAAI,CAAC,SAAS;YACf,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBAC3B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAClB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,aAAa,IAAI,CAAC,CAAC,CACnI,CACF,CAAC,CAAC;QACP,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,wJAAwJ,CAAC,CAAC;QAC1K,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,oCAAoC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBACrE,OAAO,EAAE,EAAE,QAAQ,EAAE;gBACrB,IAAI,EAAE,6CAA6C;aACpD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,GAAG,QAAkB;QACxB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzG,CAAC;IAEO,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,QAAkB;QACnE,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,2DAA2D,CAAC,CAAC;YAC5F,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,IAAgB,EAAE,QAAkB,EAAE,QAAkB,EAAE,YAAqB;QACjG,MAAM,GAAG,GAAe,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAmB;YAC7B,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,OAAO;YACvC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,UAAU;YAChD,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK;YACjC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,SAAS;SAC9C,CAAC;QAEF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;gBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,KAAK,4CAA4C,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,sBAAsB,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK;oBAAE,QAAQ,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBACxF,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;oBAAE,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBAC1F,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClD,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;wBACvE,QAAQ,CAAC,IAAI,CAAC,+CAA+C,GAAG,UAAU,CAAC,CAAC;oBAC9E,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,0GAA0G;QAC1G,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,YAAY;gBACf,CAAC,CAAC,6HAA6H;gBAC/H,CAAC,CAAC,gHAAgH,CACrH,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC;QACpD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,aAAa,0FAA0F,CAAC,CAAC;QAChJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC;QAClD,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE,CACtE,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEpD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACzH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QAE9H,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEhD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,KAAK;YAClD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,KAAK;YACpD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI;YACnD,4BAA4B,EAAE,KAAK,CAAC,IAAI,CAAC,4BAA4B,EAAE,IAAI,EAAE,mCAAmC,CAAC;YACjH,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,8BAA8B,CAAC;YACnG,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;YAC/C,MAAM;YACN,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,aAAa;YACtD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,cAAc;YACzD,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,qBAAqB,CAAC;YACxE,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,sBAAsB,CAAC;YAC3E,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;YAClC,GAAG,EAAE;gBACH,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,CAAC;gBAC3D,WAAW;gBACX,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,yBAAyB,CAAC;gBAC3E,UAAU;gBACV,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,yBAAyB,CAAC;aAC5E;YACD,MAAM,EAAE;gBACN,QAAQ;gBACR,MAAM;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG;gBACxB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD;YACD,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;YAC1D,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,OAAqC,EAAE,QAAkB;QAChF,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,+FAA+F;QAC/F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,GAAG,mFAAmF,CAAC,CAAC;YACvI,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;QACpH,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;QACxD,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAE/I,yFAAyF;QACzF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,QAAQ,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YAC3G,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAAE,QAAQ,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACvH,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,EAAE,0BAA0B,EAAE,QAAQ,CAAC;YAC/F,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,EAAE,+BAA+B,EAAE,QAAQ,CAAC;YAC9G,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;YACtC,cAAc;SACf,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,OAA+B,EAAE,QAAkB;QACpE,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QAC7J,gHAAgH;QAChH,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,yHAAyH,CAAC,CAAC;QAE9J,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACzH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACnJ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAErH,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;YACpC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,uBAAuB,EAAE,QAAQ,CAAC;YACjG,WAAW;YACX,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,EAAE,0BAA0B,EAAE,QAAQ,CAAC;YAC1G,aAAa;YACb,MAAM;SACP,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,IAAgB,EAAE,QAAkB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,IAAI,UAAU,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,CAAC,CAAC,uBAAuB,IAAI,KAAK,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,IAAI,0BAA0B,CAAC,CAAC;gBAC5F,IAAI,CAAC,KAAK,CAAC,YAAY;oBAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,IAAI,8BAA8B,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;QAED,yGAAyG;QACzG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAU,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,KAAK,KAAK,mFAAmF,CAAC,CAAC;gBAChI,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,mCAAmC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC;QACtD,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAE3I,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;YACtD,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc;YACd,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,qBAAqB,EAAE,QAAQ,CAAC;YACtF,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC;IACJ,CAAC;CACF"}