@sudoplatform/sudo-common 7.1.3 → 8.0.0

package/bin/outdated-with-suppression.sh

@@ -0,0 +1,203 @@
+#!/bin/sh
+
+set -e
+d="$(dirname "$0")"
+
+version_diff_type() {
+  v1="$1"
+  v2="$2"
+  v1_major=$(echo "$v1" | sed -E -e 's/^([^.]+)\..*/\1/')
+  v2_major=$(echo "$v2" | sed -E -e 's/^([^.]+)\..*/\1/')
+  v1_minor=$(echo "$v1" | sed -E -e 's/^([^.]+)\.([^.]+)\..*/\2/')
+  v2_minor=$(echo "$v2" | sed -E -e 's/^([^.]+)\.([^.]+)\..*/\2/')
+  if [ "${v1_major}" != "${v2_major}" ]; then echo 'major'; return 0; fi
+  if [ "${v1_minor}" != "${v2_minor}" ]; then echo 'minor'; return 0; fi
+  if [ "${v1}" != "${v2}" ]; then echo 'patch'; return 0; fi
+  echo 'equal'
+  return 0
+}
+
+suppression_from_diff_type() {
+  diff_type="$1"
+  majorSuppression="$2"
+  minorSuppression="$3"
+  patchSuppression="$4"
+
+  case "${diff_type}" in
+    major)
+      if [ -n "${majorSuppression}" ]; then
+        echo "major ${majorSuppression}"
+      elif [ -n "${minorSuppression}" ]; then
+        echo "minor ${minorSuppression}"
+      elif [ -n "${patchSuppression}" ]; then
+        echo "patch ${patchSuppression}"
+      fi
+      ;;
+    minor)
+      if [ -n "${minorSuppression}" ]; then
+        echo "minor ${minorSuppression}"
+      elif [ -n "${patchSuppression}" ]; then
+        echo "patch ${patchSuppression}"
+      fi
+      ;;
+    patch)
+      if [ -n "${patchSuppression}" ]; then
+        echo "patch ${patchSuppression}"
+      fi
+      ;;
+  esac
+}
+
+# Number of days to suppress if accepting or refreshing and cadence to run if --last specified
+cadence=30
+
+# If set, accept any outdated packages. Has the effect of refreshing existing suppressions
+# as well.
+accept=""
+
+# If set, refresh any existing suppressions
+refresh=""
+
+# If set, records/references last success in the specified directory.
+# Only run the dependency check every cadence days if a last success
+# timestamp is found
+last=""
+
+while [ -n "${1}" ]; do
+  case "${1}" in
+    --cadence)
+      if [ -z "$2" ]; then
+        echo "ERROR: --cadence requires number of days argument" 1>&2
+        exit 1
+      fi
+      shift
+      cadence="$1"
+      ;;
+    --accept) accept="1" ;;
+    --refresh) refresh="1" ;;
+    --last)
+      if [ -z "$2" ]; then
+        echo "ERROR: --last requires directory argument in which last successful run timestamp is to be store" 1>&2
+        exit 1
+      fi
+      shift
+      last="$1"
+      ;;
+    *)
+      echo "ERROR: Unrecognized argument '${1}'" 1>&2
+      exit 1
+  esac
+  shift
+done
+
+dateFromSeconds() {
+  s="$1"
+  case $(uname) in
+    Darwin)
+      date -Iseconds -r"${s}"
+      ;;
+    *)
+      date -Iseconds "-d@${s}"
+      ;;
+  esac
+}
+
+within_cadence=""
+if [ -r "${last}/last_success" ]; then
+  cadence_seconds=$((cadence * 24 * 3600))
+  now="$(date +%s)"
+  last_run="$(cat "${last}/last_success")"
+  due="$((last_run + cadence_seconds))"
+  if [ "$((due > now))" = "1" ]; then
+    echo "Last success: $(dateFromSeconds "${last_run}")"
+    echo "Now:          $(date -Iseconds)"
+    echo "Due from:     $(dateFromSeconds "${due}")"
+    within_cadence="1"
+  else
+    echo "Last success: $(dateFromSeconds "${last_run}")"
+    echo "Now:          $(date -Iseconds)"
+    echo "Due since:    $(dateFromSeconds "${due}")"
+  fi
+fi
+
+
+yarn outdated --json | jq -r -s -c 'map(select(.type == "table").data.body) | .[] | unique_by(.[0]) | .[] | .[0] + " " + .[1] + " " + .[2] + " " + .[3]' | (new=""; while read -r package_name current wanted latest; do
+  majorSuppression=$(jq ".outdatedSuppressions.major[\"${package_name}\"] | select (. != null)" package.json)
+  minorSuppression=$(jq ".outdatedSuppressions.minor[\"${package_name}\"] | select (. != null)" package.json)
+  patchSuppression=$(jq ".outdatedSuppressions[\"${package_name}\"] | select (. != null)" package.json)
+  latest_diff_type=$(version_diff_type "${current}" "${latest}")
+  wanted_diff_type=$(version_diff_type "${current}" "${wanted}")
+
+  # shellcheck disable=SC2046
+  set -- $(suppression_from_diff_type "${latest_diff_type}" "${majorSuppression}" "${minorSuppression}" "${patchSuppression}")
+  latest_suppression_type="$1"
+  latest_suppression="$2"
+
+  # shellcheck disable=SC2046
+  set -- $(suppression_from_diff_type "${wanted_diff_type}" "${majorSuppression}" "${minorSuppression}" "${patchSuppression}")
+  wanted_suppression_type="$1"
+  wanted_suppression="$2"
+
+  # If package has major update but isn't suppre
+  suppression=""
+  suppression_type=""
+  outdated_diff_type="${latest_diff_type}"
+  if [ -n "${latest_suppression_type}" ]; then
+    if [ "${wanted_diff_type}" != "equal" ]; then
+      outdated_diff_type="${wanted_diff_type}"
+      if [ -n "${wanted_suppression_type}" ]; then
+        suppression_type="${wanted_suppression_type}"
+        suppression="${wanted_suppression}"
+      else
+        # Only suppressed at major level and we have minor or patch
+        # updates available - do not suppress
+        :
+      fi
+    else
+      suppression_type="${latest_suppression_type}"
+      suppression="${latest_suppression}"
+    fi
+  fi
+
+  suppress_outdated=""
+  if [ -e "${d}/suppress-outdated" ]; then
+    suppress_outdated="${d}/suppress-outdated"
+  elif [ -e "${d}/suppress-outdated.sh" ]; then
+    suppress_outdated="${d}/suppress-outdated.sh"
+  fi
+  if [ -z "${suppress_outdated}" ]; then
+    echo "ERROR: Unable to find suppress-outdated" 1>&2
+    exit 1
+  fi
+  if [ -z "${suppression}" ]; then
+    if [ -n "${accept}" ]; then
+      echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${latest_diff_type} accepted]"
+      "${suppress_outdated}" --suppression "${cadence}" --"${latest_diff_type}" "${package_name}"
+    else
+      echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${outdated_diff_type} outdated]"
+      new=1
+    fi
+  elif [ -n "${accept}${refresh}" ]; then
+    echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${suppression_type} suppression refreshed]"
+    "${suppress_outdated}" --suppression "${cadence}" --"${suppression_type}" "${package_name}"
+  elif [ "$(date '+%s')" -gt "${suppression}" ]; then
+    echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${outdated_diff_type} suppression expired]"
+    new=1
+  else
+    echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${outdated_diff_type} suppressed]"
+  fi
+done
+
+# If we're not within cadence and there are new outdated dependencies
+# then fail
+if [ -z "${within_cadence}" -a -n "${new}" ]; then
+  exit 1
+fi
+
+# If there a no outdated dependencies and we're tracking last success then
+# refresh the last success timestamp.
+if [ -z "${new}" -a -n "${last}" ]; then
+  mkdir -p "${last}"
+  date +%s > "${last}/last_success"
+fi
+)

package/bin/suppress-audit.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+#
+# Insert a audit identifier to suppress in verification proccess.
+#
+
+auditid=$1
+PACKAGE_JSON="package.json"
+
+if [ -z $auditid ]; then
+  echo "Usage: yarn suppress-audit <audit id>"
+  exit 1
+fi
+cp $PACKAGE_JSON $PACKAGE_JSON.old
+cat $PACKAGE_JSON | jq ".auditSuppressions.\"$auditid\" = (now | floor | . + 1209600)" > $PACKAGE_JSON.staging
+mv $PACKAGE_JSON.staging $PACKAGE_JSON

package/bin/suppress-outdated.sh

@@ -0,0 +1,60 @@
+#!/bin/sh
+#
+# Insert a package name to suppress in outdated checks.
+#
+
+set -e
+
+usage() {
+  echo "Usage: suppress-outdated.sh [--suppression <number-of-days>] {--major|--minor|--patch} <package name> ..."
+}
+
+suppression=30
+if [ "$1" = "--suppression" ]; then
+  if [ -z "$2" ]; then
+    echo "ERROR: --suppression argument must specify a number of days argument" 1>&2
+    usage 1>&2
+    exit 1
+  fi
+  shift
+  suppression="$1"
+  shift
+fi
+
+case "$1" in
+  --major)
+    root=".outdatedSuppressions.major"
+    ;;
+  --minor)
+    root=".outdatedSuppressions.minor"
+    ;;
+  --patch)
+    root=".outdatedSuppressions"
+    ;;
+  *)
+    echo "suppress-outdated.sh: Unrecognized option: '$1'" 1>&2
+    usage 1>&2
+    exit 1
+    ;;
+esac
+shift
+
+if [ -z "$1" ]; then
+  echo "suppress-outdated.sh: No package names specified" 1>&2
+  usage 1>&2
+  exit 1
+fi
+
+suppression_seconds=$((suppression * 24 * 3600))
+
+PACKAGE_JSON="package.json"
+cp "$PACKAGE_JSON" "$PACKAGE_JSON.old"
+
+while [ -n "$1" ]; do
+  package_name="$1"
+
+  jq < "$PACKAGE_JSON" "${root}.\"${package_name}\" = (now | floor | . + ${suppression_seconds})" > "$PACKAGE_JSON.staging"
+  mv "$PACKAGE_JSON.staging" "$PACKAGE_JSON"
+
+  shift
+done

package/bin/yarn-audit-with-suppression.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+
+yarn audit --json --groups "dependencies devDependencies" | jq -s -c 'map(select(.type == "auditAdvisory").data.advisory) | unique_by(.id) | .[] | {id, title, module_name, vulnerable_versions, patched_versions, severity, findings}' | (new=""; while read advisory ; do
+  id=$(echo "${advisory}" | jq '.id')
+  suppression=$(jq ".auditSuppressions[\"$id\"] | select (. != null)" package.json)
+  if [ -z "$suppression" ]; then
+    echo "New advisory ${id}:"
+    echo "${advisory}" | jq .
+    new=1
+  elif [ $(date '+%s') -gt "$suppression" ]; then
+    echo "Suppression for advisory ${id} has expired. Please revisit:"
+    echo "${advisory}" | jq .
+    new=1
+  fi
+done
+if [ -n "${new}" ]; then
+  exit 1
+fi
+)

package/cjs/configurationManager/defaultConfigurationManager.d.ts

@@ -0,0 +1,123 @@
+import * as t from 'io-ts';
+/**
+ * Service compatibility information.
+ */
+export interface ServiceCompatibilityInfo {
+    /**
+     * The name of the service associated with the compatibility info. This matches one of the
+     * service name present in sudoplatformconfig.json.
+     */
+    name: string;
+    /**
+     * The version of the service config present in sudoplatformconfig.json. It defaults
+     * to 1 if not present.
+     */
+    configVersion: number;
+    /**
+     * The minimum supported service config version currently supported by the backend.
+     */
+    minSupportedVersion?: number;
+    /**
+     * Any service config version less than or equal to this version is considered deprecated
+     * and the backend may remove the support for those versions after a grace period.
+     */
+    deprecatedVersion?: number;
+    /**
+     * After this time any deprecated service config versions will no longer be compatible
+     * with the backend. It is recommended to warn the user prior to the deprecation grace.
+     */
+    deprecationGrace?: Date;
+}
+/**
+ * Result returned by `validateConfig` API if an incompatible client config is found when compared
+ * to the deployed backend services.
+ */
+export interface ValidationResult {
+    /**
+     * The list of incompatible services. The client must be upgraded to the latest
+     * version in order to use these services.
+     */
+    incompatible: ServiceCompatibilityInfo[];
+    /**
+     * The list of services that will be made incompatible with the current version of the
+     * client. The users should be warned that after the specified grace period these services will be
+     * made incompatible.
+     */
+    deprecated: ServiceCompatibilityInfo[];
+}
+/**
+ * Interface that encapsulates the APIs common to all configuration manager implementations.
+ * A configuration manager should be a singleton that holds reference to a parsed config
+ * and returns the configuration set specific to a given namespace.
+ */
+export interface ConfigurationManager {
+    /**
+     * Set config that will be parsed as JSON
+     *
+     * @param config A string representation of configuration
+     *
+     * @returns ConfigurationManager
+     */
+    setConfig(config: string): ConfigurationManager;
+    /**
+     * Get a subset of configuration by namespace
+     *
+     * @param namespace The key for the nested json object
+     *
+     * @returns Configuration set specific to a given namespace
+     *
+     * @throws {@link ConfigurationNotSetError}
+     */
+    getConfigSet(namespace?: string): string | undefined;
+    /**
+     * Decode a configuration set to a given type
+     *
+     * @param configSet Configuration set specific to a given namespace
+     * @param codec The codec to bind the configuration set to
+     *
+     * @returns Configuration as a given type
+     *
+     * @throws {@link DecodeError}
+     */
+    bind<T>(configSet: unknown, codec: t.Mixed): T;
+    /**
+     * Get a configuration by namespace and decode and validate
+     * that configuration set to a given type.  If no namespace
+     * provided, try and use the whole configuration object
+     * to bind to the given type.
+     *
+     * @param namespace The key for the nested json object or undefined
+     * @param codec The codec to bind the configuration set to
+     *
+     * @returns Configuration as a given type
+     *
+     * @throws {@link ConfigurationNotSetError}
+     * @throws {@link ConfigurationSetNotFoundError}
+     * @throws {@link DecodeError}
+     */
+    bindConfigSet<T>(codec: t.Mixed, namespace?: string): T;
+    /**
+     * Validates the client configuration (sudoplatformconfig.json) against the currently deployed set of
+     * backend services. If the client configuration is valid, i.e. the client is compatible will all deployed
+     * backend services, then the call will complete with `success` result. If any part of the client
+     * configuration is incompatible then a detailed information on the incompatible service will be
+     * returned in `failure` result. See `SudoConfigManagerError.compatibilityIssueFound` for more details.
+     *
+     * @return validation result with the details of incompatible or deprecated service configurations.
+     */
+    validateConfig(): Promise<ValidationResult>;
+}
+/**
+ * Singleton to manage configuration
+ */
+export declare class DefaultConfigurationManager implements ConfigurationManager {
+    private static instance;
+    private _config;
+    private constructor();
+    static getInstance(): DefaultConfigurationManager;
+    setConfig(config: string): DefaultConfigurationManager;
+    getConfigSet(namespace?: string): string;
+    bind<T>(configSet: unknown, codec: t.Mixed): T;
+    bindConfigSet<T>(codec: t.Mixed, namespace?: string): T;
+    validateConfig(): Promise<ValidationResult>;
+}

package/cjs/configurationManager/defaultConfigurationManager.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultConfigurationManager = void 0;
+/* eslint-disable @typescript-eslint/no-explicit-any */
+/* eslint-disable @typescript-eslint/no-unsafe-return */
+/* eslint-disable @typescript-eslint/no-unsafe-call */
+/* eslint-disable @typescript-eslint/no-unsafe-member-access */
+/* eslint-disable @typescript-eslint/no-unsafe-assignment */
+const Either_1 = require("fp-ts/lib/Either");
+const pipeable_1 = require("fp-ts/lib/pipeable");
+const PathReporter_1 = require("io-ts/lib/PathReporter");
+const error_1 = require("../errors/error");
+const client_s3_1 = require("@aws-sdk/client-s3");
+const stream_1 = require("../utils/stream");
+/**
+ * Singleton to manage configuration
+ */
+class DefaultConfigurationManager {
+    constructor() {
+        // Do Nothing.
+    }
+    static getInstance() {
+        if (!DefaultConfigurationManager.instance) {
+            DefaultConfigurationManager.instance = new DefaultConfigurationManager();
+        }
+        return DefaultConfigurationManager.instance;
+    }
+    setConfig(config) {
+        this._config = config;
+        return DefaultConfigurationManager.instance;
+    }
+    getConfigSet(namespace) {
+        if (!this._config) {
+            throw new error_1.ConfigurationNotSetError();
+        }
+        const parsed = JSON.parse(this._config);
+        const configSet = namespace ? parsed[namespace] : parsed;
+        return configSet;
+    }
+    bind(configSet, codec) {
+        // Decode and validate config
+        return (0, pipeable_1.pipe)(codec.decode(configSet), (0, Either_1.fold)((errors) => {
+            throw new error_1.DecodeError(PathReporter_1.PathReporter.report((0, Either_1.left)(errors)).join('\n'));
+        }, (v) => v));
+    }
+    bindConfigSet(codec, namespace) {
+        const configSet = this.getConfigSet(namespace);
+        if (!configSet) {
+            throw new error_1.ConfigurationSetNotFoundError(namespace);
+        }
+        return this.bind(configSet, codec);
+    }
+    async validateConfig() {
+        if (!this._config) {
+            return { incompatible: [], deprecated: [] };
+        }
+        const config = JSON.parse(this._config);
+        const region = config.identityService?.region;
+        const bucket = config.identityService?.serviceInfoBucket;
+        if (!(region && bucket)) {
+            return { incompatible: [], deprecated: [] };
+        }
+        const s3Client = new client_s3_1.S3Client({
+            region: region,
+            // We want these request to be unauthenticated
+            // so we provide a no-op signer for the requests
+            signer: { sign: (request) => Promise.resolve(request) },
+        });
+        const incompatible = [];
+        const deprecated = [];
+        const listObjectsCommand = new client_s3_1.ListObjectsCommand({
+            Bucket: bucket,
+        });
+        const objects = await s3Client.send(listObjectsCommand);
+        if (!objects.Contents?.length) {
+            return { incompatible: [], deprecated: [] };
+        }
+        const keys = objects.Contents.map((object) => object.Key);
+        // Only fetch the service info docs for the services that are present in client config
+        // to minimize the network calls.
+        const keysToFetch = keys.filter((key) => key.endsWith('.json') && config[key.replace('.json', '')]);
+        for (const key of keysToFetch) {
+            const getObject = new client_s3_1.GetObjectCommand({
+                Key: key,
+                Bucket: bucket,
+            });
+            const object = await s3Client.send(getObject);
+            if (!object.Body) {
+                throw new error_1.FatalError('No S3 object body');
+            }
+            const body = await (0, stream_1.bodyToString)(object.Body);
+            const json = JSON.parse(body);
+            const serviceName = key.replace('.json', '');
+            const serviceInfo = json[serviceName];
+            const serviceConfig = config[serviceName];
+            if (serviceInfo && serviceConfig) {
+                const currentVersion = serviceConfig.version ?? 1;
+                const deprecationGrace = serviceInfo.deprecationGrace ?? -1;
+                const compatibilityInfo = {
+                    name: serviceName,
+                    configVersion: currentVersion,
+                    minSupportedVersion: serviceInfo.minVersion,
+                    deprecatedVersion: serviceInfo.deprecated,
+                    deprecationGrace: deprecationGrace != -1 ? new Date(deprecationGrace) : undefined,
+                };
+                // If the service config in `sudoplatformconfig.json` is less than the
+                // minimum supported version then the client is incompatible.
+                if (currentVersion < (compatibilityInfo.minSupportedVersion ?? 0)) {
+                    incompatible.push(compatibilityInfo);
+                }
+                // If the service config is less than or equal to the deprecated version
+                // then it will be made incompatible after the deprecation grace.
+                if (currentVersion <= (compatibilityInfo.deprecatedVersion ?? 0)) {
+                    deprecated.push(compatibilityInfo);
+                }
+            }
+        }
+        return { incompatible, deprecated };
+    }
+}
+exports.DefaultConfigurationManager = DefaultConfigurationManager;
+//# sourceMappingURL=defaultConfigurationManager.js.map

package/cjs/configurationManager/defaultConfigurationManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultConfigurationManager.js","sourceRoot":"","sources":["../../src/configurationManager/defaultConfigurationManager.ts"],"names":[],"mappings":";;;AAAA,uDAAuD;AACvD,wDAAwD;AACxD,sDAAsD;AACtD,+DAA+D;AAC/D,4DAA4D;AAC5D,6CAA6C;AAC7C,iDAAyC;AAEzC,yDAAqD;AACrD,2CAKwB;AACxB,kDAI2B;AAC3B,4CAA8C;AAqH9C;;GAEG;AACH,MAAa,2BAA2B;IAKtC;QACE,cAAc;IAChB,CAAC;IAEM,MAAM,CAAC,WAAW;QACvB,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE;YACzC,2BAA2B,CAAC,QAAQ,GAAG,IAAI,2BAA2B,EAAE,CAAA;SACzE;QAED,OAAO,2BAA2B,CAAC,QAAQ,CAAA;IAC7C,CAAC;IAEM,SAAS,CAAC,MAAc;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QAErB,OAAO,2BAA2B,CAAC,QAAQ,CAAA;IAC7C,CAAC;IAEM,YAAY,CAAC,SAAkB;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,gCAAwB,EAAE,CAAA;SACrC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAExD,OAAO,SAAS,CAAA;IAClB,CAAC;IAEM,IAAI,CAAI,SAAkB,EAAE,KAAc;QAC/C,6BAA6B;QAC7B,OAAO,IAAA,eAAI,EACT,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EACvB,IAAA,aAAI,EACF,CAAC,MAAgB,EAAK,EAAE;YACtB,MAAM,IAAI,mBAAW,CAAC,2BAAY,CAAC,MAAM,CAAC,IAAA,aAAI,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACrE,CAAC,EACD,CAAC,CAAI,EAAK,EAAE,CAAC,CAAC,CACf,CACF,CAAA;IACH,CAAC;IAEM,aAAa,CAAI,KAAc,EAAE,SAAkB;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QAE9C,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,qCAA6B,CAAC,SAAS,CAAC,CAAA;SACnD;QAED,OAAO,IAAI,CAAC,IAAI,CAAI,SAAS,EAAE,KAAK,CAAC,CAAA;IACvC,CAAC;IAEM,KAAK,CAAC,cAAc;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;SAC5C;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,MAAM,CAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAA;QAExD,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE;YACvB,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;SAC5C;QAED,MAAM,QAAQ,GAAG,IAAI,oBAAQ,CAAC;YAC5B,MAAM,EAAE,MAAM;YACd,8CAA8C;YAC9C,gDAAgD;YAChD,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,OAAY,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;SAC7D,CAAC,CAAA;QAEF,MAAM,YAAY,GAA+B,EAAE,CAAA;QACnD,MAAM,UAAU,GAA+B,EAAE,CAAA;QAEjD,MAAM,kBAAkB,GAAG,IAAI,8BAAkB,CAAC;YAChD,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE;YAC7B,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;SAC5C;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAE9D,sFAAsF;QACtF,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAC7B,CAAC,GAAW,EAAE,EAAE,CACd,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAC5D,CAAA;QAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE;YAC7B,MAAM,SAAS,GAAG,IAAI,4BAAgB,CAAC;gBACrC,GAAG,EAAE,GAAG;gBACR,MAAM,EAAE,MAAM;aACf,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAChB,MAAM,IAAI,kBAAU,CAAC,mBAAmB,CAAC,CAAA;aAC1C;YACD,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAY,EAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YAC5C,MAAM,WAAW,GAAQ,IAAI,CAAC,WAAW,CAAC,CAAA;YAC1C,MAAM,aAAa,GAAQ,MAAM,CAAC,WAAW,CAAC,CAAA;YAC9C,IAAI,WAAW,IAAI,aAAa,EAAE;gBAChC,MAAM,cAAc,GAAW,aAAa,CAAC,OAAO,IAAI,CAAC,CAAA;gBACzD,MAAM,gBAAgB,GAAW,WAAW,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAA;gBACnE,MAAM,iBAAiB,GAA6B;oBAClD,IAAI,EAAE,WAAW;oBACjB,aAAa,EAAE,cAAc;oBAC7B,mBAAmB,EAAE,WAAW,CAAC,UAAU;oBAC3C,iBAAiB,EAAE,WAAW,CAAC,UAAU;oBACzC,gBAAgB,EACd,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;iBAClE,CAAA;gBAED,sEAAsE;gBACtE,6DAA6D;gBAC7D,IAAI,cAAc,GAAG,CAAC,iBAAiB,CAAC,mBAAmB,IAAI,CAAC,CAAC,EAAE;oBACjE,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;iBACrC;gBAED,wEAAwE;gBACxE,iEAAiE;gBACjE,IAAI,cAAc,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,IAAI,CAAC,CAAC,EAAE;oBAChE,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;iBACnC;aACF;SACF;QAED,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAA;IACrC,CAAC;CACF;AA7ID,kEA6IC"}