@tinycloudlabs/sdk-core 1.0.0

package/dist/authorization/CapabilityKeyRegistry.js

@@ -0,0 +1,509 @@
+/**
+ * CapabilityKeyRegistry - Tracks keys and their capabilities for automatic key selection.
+ *
+ * The registry maintains mappings between:
+ * - Keys and their associated delegations
+ * - Capabilities (resource/action pairs) and the keys that can exercise them
+ *
+ * This enables automatic key selection when performing operations, choosing
+ * the most appropriate key based on priority and validity.
+ *
+ * @packageDocumentation
+ */
+import { ok, err, serviceError } from "@tinycloudlabs/sdk-services";
+// =============================================================================
+// Service Name
+// =============================================================================
+const SERVICE_NAME = "capability-key-registry";
+// =============================================================================
+// Error Codes
+// =============================================================================
+/**
+ * Error codes specific to CapabilityKeyRegistry operations.
+ */
+export const CapabilityKeyRegistryErrorCodes = {
+    /** Key not found in registry */
+    KEY_NOT_FOUND: "KEY_NOT_FOUND",
+    /** No key available for the requested capability */
+    NO_CAPABLE_KEY: "NO_CAPABLE_KEY",
+    /** Delegation has expired */
+    DELEGATION_EXPIRED: "DELEGATION_EXPIRED",
+    /** Delegation has been revoked */
+    DELEGATION_REVOKED: "DELEGATION_REVOKED",
+    /** Invalid delegation data */
+    INVALID_DELEGATION: "INVALID_DELEGATION",
+    /** Key already registered */
+    KEY_EXISTS: "KEY_EXISTS",
+};
+// =============================================================================
+// Implementation
+// =============================================================================
+/**
+ * CapabilityKeyRegistry - Tracks keys and their capabilities for automatic key selection.
+ *
+ * @example
+ * ```typescript
+ * const registry = new CapabilityKeyRegistry();
+ *
+ * // Register a session key with its delegations
+ * registry.registerKey(sessionKey, [rootDelegation]);
+ *
+ * // Get the best key for an operation
+ * const key = registry.getKeyForCapability(
+ *   "tinycloud://my-space/kv/data",
+ *   "tinycloud.kv/get"
+ * );
+ *
+ * if (key) {
+ *   // Use this key for the operation
+ *   console.log("Using key:", key.id);
+ * }
+ * ```
+ */
+export class CapabilityKeyRegistry {
+    constructor() {
+        /**
+         * Registry of all keys indexed by ID.
+         */
+        this.keys = new Map();
+        /**
+         * Delegation storage.
+         */
+        this.store = {
+            byKey: new Map(),
+            byCid: new Map(),
+            byCapability: new Map(),
+        };
+    }
+    // ===========================================================================
+    // Key Management
+    // ===========================================================================
+    /**
+     * Register a key with its associated delegations.
+     *
+     * @param key - Key information
+     * @param delegations - Delegations granted to this key
+     */
+    registerKey(key, delegations) {
+        // Store the key
+        this.keys.set(key.id, key);
+        // Initialize delegation storage for this key
+        if (!this.store.byKey.has(key.id)) {
+            this.store.byKey.set(key.id, []);
+        }
+        // Process each delegation
+        for (const delegation of delegations) {
+            this.addDelegation(key, delegation);
+        }
+    }
+    /**
+     * Remove a key and all its associated delegations.
+     *
+     * @param keyId - The key ID to remove
+     */
+    removeKey(keyId) {
+        // Get delegations for this key
+        const delegations = this.store.byKey.get(keyId) || [];
+        // Remove from byCid
+        for (const delegation of delegations) {
+            this.store.byCid.delete(delegation.cid);
+        }
+        // Remove from byCapability
+        for (const [capKey, entries] of this.store.byCapability) {
+            const filtered = entries.filter((entry) => !entry.keys.some((k) => k.id === keyId));
+            if (filtered.length === 0) {
+                this.store.byCapability.delete(capKey);
+            }
+            else {
+                // Remove this key from entries that have multiple keys
+                for (const entry of filtered) {
+                    entry.keys = entry.keys.filter((k) => k.id !== keyId);
+                }
+                this.store.byCapability.set(capKey, filtered.filter((e) => e.keys.length > 0));
+            }
+        }
+        // Remove from byKey
+        this.store.byKey.delete(keyId);
+        // Remove the key itself
+        this.keys.delete(keyId);
+    }
+    // ===========================================================================
+    // Capability Lookup
+    // ===========================================================================
+    /**
+     * Get a key that can exercise the specified capability.
+     *
+     * Key selection algorithm:
+     * 1. Filter keys that have the required capability
+     * 2. Check delegation validity (not expired, not revoked)
+     * 3. Sort by priority (session=0, main=1, ingested=2)
+     * 4. Return highest priority valid key
+     *
+     * @param resource - Resource URI
+     * @param action - Action to perform
+     * @returns The best matching key, or null if none available
+     */
+    getKeyForCapability(resource, action) {
+        // Find matching capabilities
+        const matchingEntries = this.findMatchingEntries(resource, action);
+        if (matchingEntries.length === 0) {
+            return null;
+        }
+        // Collect all valid keys from matching entries
+        const validKeys = [];
+        for (const entry of matchingEntries) {
+            // Check if the delegation is valid
+            if (!this.isDelegationValid(entry.delegation)) {
+                continue;
+            }
+            // Add keys from this entry
+            for (const key of entry.keys) {
+                if (!validKeys.some((k) => k.id === key.id)) {
+                    validKeys.push(key);
+                }
+            }
+        }
+        if (validKeys.length === 0) {
+            return null;
+        }
+        // Sort by priority (lower is better)
+        validKeys.sort((a, b) => a.priority - b.priority);
+        return validKeys[0];
+    }
+    /**
+     * Get all registered capabilities.
+     *
+     * @returns All capability entries in the registry
+     */
+    getAllCapabilities() {
+        const all = [];
+        for (const entries of this.store.byCapability.values()) {
+            all.push(...entries);
+        }
+        return all;
+    }
+    // ===========================================================================
+    // Delegation Tracking
+    // ===========================================================================
+    /**
+     * Get all delegations for a specific key.
+     *
+     * @param keyId - The key ID
+     * @returns Array of delegations for this key
+     */
+    getDelegationsForKey(keyId) {
+        return this.store.byKey.get(keyId) || [];
+    }
+    // ===========================================================================
+    // Ingestion
+    // ===========================================================================
+    /**
+     * Ingest a key and delegation from an external source.
+     *
+     * @param key - Key information to ingest
+     * @param delegation - Delegation to associate with the key
+     * @param options - Ingestion options
+     */
+    ingestKey(key, delegation, options) {
+        // Apply priority override if specified
+        const keyToStore = options?.priority !== undefined
+            ? { ...key, priority: options.priority }
+            : key;
+        // Store the key
+        this.keys.set(keyToStore.id, keyToStore);
+        // Initialize delegation storage
+        if (!this.store.byKey.has(keyToStore.id)) {
+            this.store.byKey.set(keyToStore.id, []);
+        }
+        // Add the delegation
+        this.addDelegation(keyToStore, delegation);
+    }
+    // ===========================================================================
+    // Validation
+    // ===========================================================================
+    /**
+     * Check if a delegation is currently valid.
+     *
+     * @param delegation - The delegation to check
+     * @returns true if valid, false if expired or revoked
+     */
+    isDelegationValid(delegation) {
+        // Check if revoked
+        if (delegation.isRevoked) {
+            return false;
+        }
+        // Check expiry
+        const now = new Date();
+        if (delegation.expiry && delegation.expiry < now) {
+            return false;
+        }
+        return true;
+    }
+    // ===========================================================================
+    // Key Access
+    // ===========================================================================
+    /**
+     * Get a key by its ID.
+     *
+     * @param keyId - The key ID
+     * @returns The key info, or undefined if not found
+     */
+    getKey(keyId) {
+        return this.keys.get(keyId);
+    }
+    /**
+     * Get all registered keys.
+     *
+     * @returns Array of all registered keys
+     */
+    getAllKeys() {
+        return Array.from(this.keys.values());
+    }
+    // ===========================================================================
+    // Clear
+    // ===========================================================================
+    /**
+     * Clear all registered keys and delegations.
+     */
+    clear() {
+        this.keys.clear();
+        this.store.byKey.clear();
+        this.store.byCid.clear();
+        this.store.byCapability.clear();
+    }
+    // ===========================================================================
+    // Revocation
+    // ===========================================================================
+    /**
+     * Revoke a delegation by CID.
+     *
+     * @param cid - The delegation CID to revoke
+     * @returns Result indicating success or failure
+     */
+    revokeDelegation(cid) {
+        const stored = this.store.byCid.get(cid);
+        if (!stored) {
+            return err(serviceError(CapabilityKeyRegistryErrorCodes.KEY_NOT_FOUND, `Delegation not found: ${cid}`, SERVICE_NAME));
+        }
+        // Mark the delegation as revoked
+        stored.delegation.isRevoked = true;
+        // Update in byKey
+        const keyDelegations = this.store.byKey.get(stored.keyId);
+        if (keyDelegations) {
+            const delegation = keyDelegations.find((d) => d.cid === cid);
+            if (delegation) {
+                delegation.isRevoked = true;
+            }
+        }
+        // Update in byCapability
+        for (const entries of this.store.byCapability.values()) {
+            for (const entry of entries) {
+                if (entry.delegation.cid === cid) {
+                    entry.delegation.isRevoked = true;
+                }
+            }
+        }
+        return ok(undefined);
+    }
+    // ===========================================================================
+    // Search
+    // ===========================================================================
+    /**
+     * Find capabilities that match a resource path pattern.
+     *
+     * @param resourcePattern - Resource pattern (supports wildcards)
+     * @param action - Optional action filter
+     * @returns Matching capability entries
+     */
+    findCapabilities(resourcePattern, action) {
+        const results = [];
+        for (const entries of this.store.byCapability.values()) {
+            for (const entry of entries) {
+                // Check action match if specified
+                if (action && entry.action !== action) {
+                    continue;
+                }
+                // Check resource pattern match
+                if (this.matchesResourcePattern(entry.resource, resourcePattern)) {
+                    results.push(entry);
+                }
+            }
+        }
+        return results;
+    }
+    // ===========================================================================
+    // Private Methods
+    // ===========================================================================
+    /**
+     * Add a delegation to the store.
+     *
+     * @param key - The key associated with this delegation
+     * @param delegation - The delegation to add
+     */
+    addDelegation(key, delegation) {
+        // Add to byKey
+        const keyDelegations = this.store.byKey.get(key.id) || [];
+        if (!keyDelegations.some((d) => d.cid === delegation.cid)) {
+            keyDelegations.push(delegation);
+            this.store.byKey.set(key.id, keyDelegations);
+        }
+        // Add to byCid
+        if (!this.store.byCid.has(delegation.cid)) {
+            this.store.byCid.set(delegation.cid, {
+                delegation,
+                parentCid: delegation.parentCid,
+                keyId: key.id,
+                storedAt: new Date(),
+            });
+        }
+        // Add to byCapability for each action
+        for (const action of delegation.actions) {
+            const capKey = this.makeCapabilityKey(delegation.path, action);
+            const entries = this.store.byCapability.get(capKey) || [];
+            // Check if we already have an entry for this exact delegation
+            const existingEntry = entries.find((e) => e.delegation.cid === delegation.cid);
+            if (existingEntry) {
+                // Add this key if not already present
+                if (!existingEntry.keys.some((k) => k.id === key.id)) {
+                    existingEntry.keys.push(key);
+                    // Re-sort by priority
+                    existingEntry.keys.sort((a, b) => a.priority - b.priority);
+                }
+            }
+            else {
+                // Create new capability entry
+                const entry = {
+                    resource: delegation.path,
+                    action,
+                    keys: [key],
+                    delegation,
+                    expiresAt: delegation.expiry,
+                };
+                entries.push(entry);
+                this.store.byCapability.set(capKey, entries);
+            }
+        }
+    }
+    /**
+     * Create a capability key for indexing.
+     *
+     * @param resource - Resource path
+     * @param action - Action
+     * @returns Combined key string
+     */
+    makeCapabilityKey(resource, action) {
+        return `${resource}|${action}`;
+    }
+    /**
+     * Find capability entries that match a resource and action.
+     *
+     * @param resource - Resource to match
+     * @param action - Action to match
+     * @returns Matching entries
+     */
+    findMatchingEntries(resource, action) {
+        const results = [];
+        // Exact match
+        const exactKey = this.makeCapabilityKey(resource, action);
+        const exactEntries = this.store.byCapability.get(exactKey);
+        if (exactEntries) {
+            results.push(...exactEntries);
+        }
+        // Wildcard matches - check all entries for patterns that match this resource
+        for (const [capKey, entries] of this.store.byCapability) {
+            if (capKey === exactKey)
+                continue; // Already handled
+            for (const entry of entries) {
+                // Check if the entry's action matches
+                if (!this.actionMatches(entry.action, action)) {
+                    continue;
+                }
+                // Check if the entry's resource pattern matches the requested resource
+                if (this.resourceMatchesPattern(resource, entry.resource)) {
+                    if (!results.some((r) => r.delegation.cid === entry.delegation.cid)) {
+                        results.push(entry);
+                    }
+                }
+            }
+        }
+        return results;
+    }
+    /**
+     * Check if an action pattern matches a specific action.
+     *
+     * @param pattern - Action pattern (may include wildcard like "tinycloud.kv/*")
+     * @param action - Specific action to check
+     * @returns true if pattern matches action
+     */
+    actionMatches(pattern, action) {
+        // Exact match
+        if (pattern === action) {
+            return true;
+        }
+        // Wildcard match (e.g., "tinycloud.kv/*" matches "tinycloud.kv/get")
+        if (pattern.endsWith("/*")) {
+            const prefix = pattern.slice(0, -2);
+            return action.startsWith(prefix + "/") || action === prefix;
+        }
+        return false;
+    }
+    /**
+     * Check if a resource matches a pattern.
+     *
+     * Patterns support:
+     * - Exact match: "/kv/data" matches "/kv/data"
+     * - Wildcard suffix: "/kv/*" matches "/kv/anything"
+     * - Double wildcard: "/kv/**" matches "/kv/any/nested/path"
+     *
+     * @param resource - The specific resource being accessed
+     * @param pattern - The pattern from the delegation
+     * @returns true if resource matches pattern
+     */
+    resourceMatchesPattern(resource, pattern) {
+        // Exact match
+        if (pattern === resource) {
+            return true;
+        }
+        // Double wildcard (**) - matches any nested path
+        if (pattern.endsWith("/**")) {
+            const prefix = pattern.slice(0, -3);
+            return resource.startsWith(prefix);
+        }
+        // Single wildcard (*) - matches one path segment
+        if (pattern.endsWith("/*")) {
+            const prefix = pattern.slice(0, -2);
+            if (!resource.startsWith(prefix)) {
+                return false;
+            }
+            const remainder = resource.slice(prefix.length);
+            // Should be a single segment (no more slashes except possibly trailing)
+            return !remainder.includes("/") || remainder === "/";
+        }
+        // Prefix match for paths ending with /
+        if (pattern.endsWith("/") && resource.startsWith(pattern)) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check if a specific resource matches a resource pattern for searching.
+     *
+     * @param entryResource - The resource from a capability entry
+     * @param searchPattern - The pattern to search for
+     * @returns true if entry resource matches search pattern
+     */
+    matchesResourcePattern(entryResource, searchPattern) {
+        // Use the same logic as resourceMatchesPattern
+        return this.resourceMatchesPattern(entryResource, searchPattern) ||
+            this.resourceMatchesPattern(searchPattern, entryResource);
+    }
+}
+/**
+ * Create a new CapabilityKeyRegistry instance.
+ *
+ * @returns A new registry instance
+ */
+export function createCapabilityKeyRegistry() {
+    return new CapabilityKeyRegistry();
+}
+//# sourceMappingURL=CapabilityKeyRegistry.js.map

package/dist/authorization/CapabilityKeyRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityKeyRegistry.js","sourceRoot":"","sources":["../../src/authorization/CapabilityKeyRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAQpE,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAE/C,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gCAAgC;IAChC,aAAa,EAAE,eAAe;IAC9B,oDAAoD;IACpD,cAAc,EAAE,gBAAgB;IAChC,6BAA6B;IAC7B,kBAAkB,EAAE,oBAAoB;IACxC,kCAAkC;IAClC,kBAAkB,EAAE,oBAAoB;IACxC,8BAA8B;IAC9B,kBAAkB,EAAE,oBAAoB;IACxC,6BAA6B;IAC7B,UAAU,EAAE,YAAY;CAChB,CAAC;AAwJX,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,qBAAqB;IAAlC;QACE;;WAEG;QACK,SAAI,GAAyB,IAAI,GAAG,EAAE,CAAC;QAE/C;;WAEG;QACK,UAAK,GAAoB;YAC/B,KAAK,EAAE,IAAI,GAAG,EAAE;YAChB,KAAK,EAAE,IAAI,GAAG,EAAE;YAChB,YAAY,EAAE,IAAI,GAAG,EAAE;SACxB,CAAC;IA8fJ,CAAC;IA5fC,8EAA8E;IAC9E,iBAAiB;IACjB,8EAA8E;IAE9E;;;;;OAKG;IACH,WAAW,CAAC,GAAY,EAAE,WAAyB;QACjD,gBAAgB;QAChB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAE3B,6CAA6C;QAC7C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAAa;QACrB,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAEtD,oBAAoB;QACpB,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,2BAA2B;QAC3B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAC5D,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,uDAAuD;gBACvD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;gBACjE,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,wBAAwB;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAE9E;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,QAAgB,EAAE,MAAc;QAClD,6BAA6B;QAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEnE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAc,EAAE,CAAC;QAEhC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,mCAAmC;YACnC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,2BAA2B;YAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACrD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qCAAqC;QACrC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEpE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,GAAG,GAAsB,EAAE,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAE9E;;;;;OAKG;IACH,oBAAoB,CAAC,KAAa;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E;;;;;;OAMG;IACH,SAAS,CACP,GAAY,EACZ,UAAsB,EACtB,OAAuB;QAEvB,uCAAuC;QACvC,MAAM,UAAU,GAAY,OAAO,EAAE,QAAQ,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YACxC,CAAC,CAAC,GAAG,CAAC;QAER,gBAAgB;QAChB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAEzC,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;;;OAKG;IACH,iBAAiB,CAAC,UAAsB;QACtC,mBAAmB;QACnB,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,eAAe;QACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;;;OAKG;IACH,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;;;OAKG;IACH,gBAAgB,CAAC,GAAW;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,GAAG,CACR,YAAY,CACV,+BAA+B,CAAC,aAAa,EAC7C,yBAAyB,GAAG,EAAE,EAC9B,YAAY,CACb,CACF,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,MAAM,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;QAEnC,kBAAkB;QAClB,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAC7D,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;oBACjC,KAAK,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,SAAS;IACT,8EAA8E;IAE9E;;;;;;OAMG;IACH,gBAAgB,CACd,eAAuB,EACvB,MAAe;QAEf,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,kCAAkC;gBAClC,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;oBACjE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;;;;OAKG;IACK,aAAa,CAAC,GAAY,EAAE,UAAsB;QACxD,eAAe;QACf,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC/C,CAAC;QAED,eAAe;QACf,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;gBACnC,UAAU;gBACV,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,QAAQ,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAE1D,8DAA8D;YAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC;YAE/E,IAAI,aAAa,EAAE,CAAC;gBAClB,sCAAsC;gBACtC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9D,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC7B,sBAAsB;oBACtB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,8BAA8B;gBAC9B,MAAM,KAAK,GAAoB;oBAC7B,QAAQ,EAAE,UAAU,CAAC,IAAI;oBACzB,MAAM;oBACN,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,UAAU;oBACV,SAAS,EAAE,UAAU,CAAC,MAAM;iBAC7B,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,QAAgB,EAAE,MAAc;QACxD,OAAO,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,QAAgB,EAChB,MAAc;QAEd,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,cAAc;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,6EAA6E;QAC7E,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACxD,IAAI,MAAM,KAAK,QAAQ;gBAAE,SAAS,CAAC,kBAAkB;YAErD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,sCAAsC;gBACtC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBAED,uEAAuE;gBACvE,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBACpE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,OAAe,EAAE,MAAc;QACnD,cAAc;QACd,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qEAAqE;QACrE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC;QAC9D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACK,sBAAsB,CAAC,QAAgB,EAAE,OAAe;QAC9D,cAAc;QACd,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iDAAiD;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,iDAAiD;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChD,wEAAwE;YACxE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,GAAG,CAAC;QACvD,CAAC;QAED,uCAAuC;QACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC5B,aAAqB,EACrB,aAAqB;QAErB,+CAA+C;QAC/C,OAAO,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,aAAa,CAAC;YACzD,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACnE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,IAAI,qBAAqB,EAAE,CAAC;AACrC,CAAC"}