@usearete/sdk 0.1.0

package/dist/ssr/vite.esm.js

@@ -0,0 +1,364 @@
+import * as ed25519 from '@noble/ed25519';
+
+/**
+ * Base64URL encoding/decoding utilities
+ */
+/**
+ * Encode Uint8Array to base64url string (RFC 4648)
+ */
+function encode(bytes) {
+    // Convert to regular base64
+    const base64 = Buffer.from(bytes).toString('base64');
+    // Convert to base64url: replace + with -, / with _, remove padding
+    return base64
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=/g, '');
+}
+/**
+ * Decode base64url string to Uint8Array
+ */
+function decode(base64url) {
+    // Convert from base64url to regular base64
+    let base64 = base64url
+        .replace(/-/g, '+')
+        .replace(/_/g, '/');
+    // Add padding if needed
+    const padding = 4 - (base64.length % 4);
+    if (padding !== 4) {
+        base64 += '='.repeat(padding);
+    }
+    return new Uint8Array(Buffer.from(base64, 'base64'));
+}
+const base64url = {
+    encode,
+    decode,
+};
+
+/**
+ * Arete Auth Server - Drop-in Endpoint Handlers
+ *
+ * These are framework-agnostic API route handlers that users can mount however they like.
+ * They handle token minting and JWKS serving directly using Ed25519 signing.
+ *
+ * @example
+ * ```typescript
+ * // app/api/arete/sessions/route.ts (Next.js App Router)
+ * import { handleSessionRequest, handleJwksRequest } from '@usearete/sdk/ssr/handlers';
+ *
+ * export async function POST(request: Request) {
+ *   const user = await getAuthenticatedUser(request);
+ *   if (!user) return new Response('Unauthorized', { status: 401 });
+ *   return handleSessionRequest({}, user.id);
+ * }
+ *
+ * export async function GET() {
+ *   return handleJwksRequest();
+ * }
+ * ```
+ */
+/**
+ * Decode base64 to Uint8Array
+ */
+function decodeBase64(base64) {
+    const binary = Buffer.from(base64, 'base64');
+    return new Uint8Array(binary);
+}
+/**
+ * Encode Uint8Array to base64url
+ */
+function encodeBase64url(bytes) {
+    return base64url.encode(bytes);
+}
+/**
+ * Generate a key ID from public key bytes
+ */
+function deriveKeyId(publicKey) {
+    // Use first 8 bytes of public key as hex for kid
+    return Array.from(publicKey.slice(0, 8))
+        .map(b => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Create JWT header for Ed25519
+ */
+function createJwtHeader(keyId) {
+    const header = {
+        alg: 'EdDSA',
+        typ: 'JWT',
+        kid: keyId,
+    };
+    return encodeBase64url(new TextEncoder().encode(JSON.stringify(header)));
+}
+/**
+ * Create JWT payload from claims
+ */
+function createJwtPayload(claims) {
+    return encodeBase64url(new TextEncoder().encode(JSON.stringify(claims)));
+}
+/**
+ * Sign data with Ed25519
+ */
+async function signEd25519(data, privateKey) {
+    const messageBytes = new TextEncoder().encode(data);
+    return await ed25519.signAsync(messageBytes, privateKey);
+}
+/**
+ * Mint a session token using Ed25519 signing
+ * `subject` must come from verified server-side auth or trusted service code.
+ */
+async function mintSessionToken(config, subject = 'anonymous', scope = 'read', origin) {
+    const signingKeyBase64 = config.signingKey || process.env.ARETE_SIGNING_KEY;
+    if (!signingKeyBase64) {
+        throw new Error('ARETE_SIGNING_KEY not set. Generate with: node -e "console.log(require(\'crypto\').randomBytes(32).toString(\'base64\'))"');
+    }
+    const privateKeyBytes = decodeBase64(signingKeyBase64);
+    if (privateKeyBytes.length !== 32) {
+        throw new Error(`Invalid signing key length: expected 32 bytes, got ${privateKeyBytes.length}. ` +
+            'Ed25519 signing key must be 32 bytes (base64-encoded).');
+    }
+    // Derive public key from private key
+    const publicKeyBytes = await ed25519.getPublicKeyAsync(privateKeyBytes);
+    const keyId = config.keyId || deriveKeyId(publicKeyBytes);
+    const issuer = config.issuer || process.env.ARETE_ISSUER || 'arete';
+    const audience = config.audience || process.env.ARETE_AUDIENCE || 'arete';
+    const ttlSeconds = config.ttlSeconds || 300;
+    const now = Math.floor(Date.now() / 1000);
+    const expiresAt = now + ttlSeconds;
+    const claims = {
+        iss: issuer,
+        sub: subject,
+        aud: audience,
+        iat: now,
+        nbf: now,
+        exp: expiresAt,
+        jti: crypto.randomUUID(),
+        scope,
+        metering_key: `meter:${subject}`,
+        key_class: 'secret',
+        limits: config.limits || {
+            max_connections: 10,
+            max_subscriptions: 100,
+            max_snapshot_rows: 1000,
+            max_messages_per_minute: 10000,
+            max_bytes_per_minute: 100 * 1024 * 1024,
+        },
+    };
+    // Add origin binding if provided
+    if (origin) {
+        claims.origin = origin;
+    }
+    // Create JWT
+    const header = createJwtHeader(keyId);
+    const payload = createJwtPayload(claims);
+    const signingInput = `${header}.${payload}`;
+    const signature = await signEd25519(signingInput, privateKeyBytes);
+    const signatureBase64 = encodeBase64url(signature);
+    const token = `${signingInput}.${signatureBase64}`;
+    return {
+        token,
+        expires_at: expiresAt,
+    };
+}
+/**
+ * Generate JWKS response from signing key
+ */
+async function generateJwks(config) {
+    const signingKeyBase64 = config.signingKey || process.env.ARETE_SIGNING_KEY;
+    const publicKeyBase64 = config.publicKey || process.env.ARETE_PUBLIC_KEY;
+    if (!signingKeyBase64 && !publicKeyBase64) {
+        return { keys: [] };
+    }
+    let publicKeyBytes;
+    if (publicKeyBase64) {
+        // Use provided public key
+        publicKeyBytes = decodeBase64(publicKeyBase64);
+        if (publicKeyBytes.length !== 32) {
+            throw new Error(`Invalid public key length: expected 32 bytes, got ${publicKeyBytes.length}`);
+        }
+    }
+    else {
+        // Derive public key from private key
+        const privateKeyBytes = decodeBase64(signingKeyBase64);
+        if (privateKeyBytes.length !== 32) {
+            throw new Error(`Invalid signing key length: expected 32 bytes, got ${privateKeyBytes.length}`);
+        }
+        publicKeyBytes = await ed25519.getPublicKeyAsync(privateKeyBytes);
+    }
+    const keyId = config.keyId ||
+        (publicKeyBase64 ? 'key-1' : deriveKeyId(publicKeyBytes));
+    return {
+        keys: [
+            {
+                kty: 'OKP',
+                crv: 'Ed25519',
+                kid: keyId,
+                use: 'sig',
+                alg: 'EdDSA',
+                x: encodeBase64url(publicKeyBytes),
+            },
+        ],
+    };
+}
+/**
+ * Framework-agnostic health check handler
+ */
+function handleHealthRequest() {
+    return new Response(JSON.stringify({
+        status: 'healthy',
+        version: '0.5.10',
+    }), {
+        status: 200,
+        headers: {
+            'Content-Type': 'application/json',
+        },
+    });
+}
+
+/**
+ * Vite SSR integration for Arete Auth
+ *
+ * Express/Connect middleware that mounts auth endpoints.
+ * `resolveSession` must derive the subject from verified server-side auth.
+ * Never trust caller-supplied headers for identity or scope.
+ *
+ * @example
+ * ```typescript
+ * // server.ts
+ * import express from 'express';
+ * import { createViteAuthMiddleware } from '@usearete/sdk/ssr/vite';
+ *
+ * const app = express();
+ *
+ * // Mount auth endpoints at /api/arete
+ * app.use('/api/arete', createViteAuthMiddleware({
+ *   resolveSession: async (req) => {
+ *     const user = await getAuthenticatedUser(req);
+ *     if (!user) return null;
+ *     return { subject: user.id };
+ *   },
+ * }));
+ *
+ * // Or mount at root
+ * app.use(createViteAuthMiddleware({
+ *   basePath: '/auth',
+ *   resolveSession: async (req) => {
+ *     const user = await getAuthenticatedUser(req);
+ *     if (!user) return null;
+ *     return { subject: user.id };
+ *   },
+ * }));
+ * ```
+ */
+/**
+ * Create Express middleware that mounts Arete auth endpoints
+ */
+function createViteAuthMiddleware(options = {}) {
+    const { basePath = '', ...config } = options;
+    // Note: In production, you'd use express.Router(), but for Vite SSR
+    // we just return a middleware function that checks the path
+    return async function middleware(req, res, next) {
+        const pathname = req.path;
+        // POST /{basePath}/sessions - Mint token
+        if (req.method === 'POST' && pathname === `${basePath}/sessions`) {
+            const origin = req.headers.origin;
+            try {
+                if (!config.resolveSession) {
+                    res.status(500).json({
+                        error: 'createViteAuthMiddleware requires resolveSession to derive the subject from authenticated server-side state',
+                    });
+                    return;
+                }
+                const session = await config.resolveSession(req, res);
+                if (!session) {
+                    res.status(401).json({
+                        error: 'Unauthorized',
+                    });
+                    return;
+                }
+                const tokenData = await mintSessionToken(config, session.subject, session.scope || 'read', origin);
+                res.json(tokenData);
+                return;
+            }
+            catch (error) {
+                res.status(500).json({
+                    error: error instanceof Error ? error.message : 'Failed to mint token',
+                });
+                return;
+            }
+        }
+        // GET /{basePath}/.well-known/jwks.json - JWKS
+        if (req.method === 'GET' && pathname === `${basePath}/.well-known/jwks.json`) {
+            try {
+                const jwks = await generateJwks(config);
+                res.json(jwks);
+                return;
+            }
+            catch (error) {
+                res.status(500).json({
+                    error: error instanceof Error ? error.message : 'Failed to generate JWKS',
+                });
+                return;
+            }
+        }
+        // GET /{basePath}/health - Health check
+        if (req.method === 'GET' && pathname === `${basePath}/health`) {
+            const response = handleHealthRequest();
+            res.status(response.status).json(await response.json());
+            return;
+        }
+        // Not an auth route, pass to next middleware
+        next();
+    };
+}
+/**
+ * Create a Vite plugin that injects the auth endpoints
+ * This is for use with Vite's configureServer hook
+ *
+ * @example
+ * ```typescript
+ * // vite.config.ts
+ * import { defineConfig } from 'vite';
+ * import { createViteAuthPlugin } from '@usearete/sdk/ssr/vite';
+ *
+ * export default defineConfig({
+ *   plugins: [
+ *     createViteAuthPlugin({
+ *       basePath: '/api/arete',
+ *       resolveSession: async (req) => {
+ *         const user = await getAuthenticatedUser(req);
+ *         if (!user) return null;
+ *         return { subject: user.id };
+ *       },
+ *     }),
+ *   ],
+ * });
+ * ```
+ */
+function createViteAuthPlugin(options = {}) {
+    return {
+        name: 'arete-auth',
+        configureServer(server) {
+            server.middlewares.use(options.basePath || '/api/arete', createViteAuthMiddleware({ ...options, basePath: '' }));
+        },
+    };
+}
+/**
+ * Helper to inject token into HTML for client-side hydration
+ */
+function injectAreteToken(html, token) {
+    if (!token)
+        return html;
+    const tokenScript = `
+    <script>
+      window.__ARETE_TOKEN__ = ${JSON.stringify(token)};
+    </script>
+  `;
+    if (html.includes('</head>')) {
+        return html.replace('</head>', `${tokenScript}</head>`);
+    }
+    return html.replace('<body>', `<body>${tokenScript}`);
+}
+
+export { createViteAuthMiddleware, createViteAuthPlugin, injectAreteToken };
+//# sourceMappingURL=vite.esm.js.map

package/dist/ssr/vite.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite.esm.js","sources":["../../src/ssr/utils.ts","../../src/ssr/handlers.ts","../../src/ssr/vite.ts"],"sourcesContent":[null,null,null],"names":[],"mappings":";;AAAA;;AAEG;AAEH;;AAEG;AACG,SAAU,MAAM,CAAC,KAAiB,EAAA;;AAEtC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;;AAErD,IAAA,OAAO,MAAM;AACV,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED;;AAEG;AACG,SAAU,MAAM,CAAC,SAAiB,EAAA;;IAEtC,IAAI,MAAM,GAAG,SAAS;AACnB,SAAA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAClB,SAAA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;;IAGtB,MAAM,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxC,IAAA,IAAI,OAAO,KAAK,CAAC,EAAE;AACjB,QAAA,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KAC/B;AAED,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC;AAEM,MAAM,SAAS,GAAG;IACvB,MAAM;IACN,MAAM;CACP;;ACtCD;;;;;;;;;;;;;;;;;;;;;AAqBG;AAoGH;;AAEG;AACH,SAAS,YAAY,CAAC,MAAc,EAAA;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC7C,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;AAEG;AACH,SAAS,eAAe,CAAC,KAAiB,EAAA;AACxC,IAAA,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;AAEG;AACH,SAAS,WAAW,CAAC,SAAqB,EAAA;;AAExC,IAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrC,SAAA,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;AAEG;AACH,SAAS,eAAe,CAAC,KAAa,EAAA;AACpC,IAAA,MAAM,MAAM,GAAG;AACb,QAAA,GAAG,EAAE,OAAO;AACZ,QAAA,GAAG,EAAE,KAAK;AACV,QAAA,GAAG,EAAE,KAAK;KACX,CAAC;AACF,IAAA,OAAO,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;AAEG;AACH,SAAS,gBAAgB,CAAC,MAAqB,EAAA;AAC7C,IAAA,OAAO,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;AAEG;AACH,eAAe,WAAW,CACxB,IAAY,EACZ,UAAsB,EAAA;IAEtB,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED;;;AAGG;AACI,eAAe,gBAAgB,CACpC,MAAyB,EACzB,OAAA,GAAkB,WAAW,EAC7B,KAAgB,GAAA,MAAM,EACtB,MAAe,EAAA;IAEf,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC5E,IAAI,CAAC,gBAAgB,EAAE;AACrB,QAAA,MAAM,IAAI,KAAK,CACb,2HAA2H,CAC5H,CAAC;KACH;AAED,IAAA,MAAM,eAAe,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AACvD,IAAA,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE;AACjC,QAAA,MAAM,IAAI,KAAK,CACb,sDAAsD,eAAe,CAAC,MAAM,CAAI,EAAA,CAAA;AAChF,YAAA,wDAAwD,CACzD,CAAC;KACH;;IAGD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;AAE1D,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC;AACpE,IAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;AAC1E,IAAA,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;AAE5C,IAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC1C,IAAA,MAAM,SAAS,GAAG,GAAG,GAAG,UAAU,CAAC;AAEnC,IAAA,MAAM,MAAM,GAAkB;AAC5B,QAAA,GAAG,EAAE,MAAM;AACX,QAAA,GAAG,EAAE,OAAO;AACZ,QAAA,GAAG,EAAE,QAAQ;AACb,QAAA,GAAG,EAAE,GAAG;AACR,QAAA,GAAG,EAAE,GAAG;AACR,QAAA,GAAG,EAAE,SAAS;AACd,QAAA,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;QACxB,KAAK;QACL,YAAY,EAAE,CAAS,MAAA,EAAA,OAAO,CAAE,CAAA;AAChC,QAAA,SAAS,EAAE,QAAQ;AACnB,QAAA,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI;AACvB,YAAA,eAAe,EAAE,EAAE;AACnB,YAAA,iBAAiB,EAAE,GAAG;AACtB,YAAA,iBAAiB,EAAE,IAAI;AACvB,YAAA,uBAAuB,EAAE,KAAK;AAC9B,YAAA,oBAAoB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;AACxC,SAAA;KACF,CAAC;;IAGF,IAAI,MAAM,EAAE;AACV,QAAA,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;KACxB;;AAGD,IAAA,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;AACtC,IAAA,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzC,IAAA,MAAM,YAAY,GAAG,CAAA,EAAG,MAAM,CAAI,CAAA,EAAA,OAAO,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AACnE,IAAA,MAAM,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;AAEnD,IAAA,MAAM,KAAK,GAAG,CAAA,EAAG,YAAY,CAAI,CAAA,EAAA,eAAe,EAAE,CAAC;IAEnD,OAAO;QACL,KAAK;AACL,QAAA,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED;;AAEG;AACI,eAAe,YAAY,CAAC,MAAyB,EAAA;IAC1D,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC5E,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAEzE,IAAA,IAAI,CAAC,gBAAgB,IAAI,CAAC,eAAe,EAAE;AACzC,QAAA,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;KACrB;AAED,IAAA,IAAI,cAA0B,CAAC;IAE/B,IAAI,eAAe,EAAE;;AAEnB,QAAA,cAAc,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAC/C,QAAA,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CACb,CAAA,kDAAA,EAAqD,cAAc,CAAC,MAAM,CAAE,CAAA,CAC7E,CAAC;SACH;KACF;SAAM;;AAEL,QAAA,MAAM,eAAe,GAAG,YAAY,CAAC,gBAAiB,CAAC,CAAC;AACxD,QAAA,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE;YACjC,MAAM,IAAI,KAAK,CACb,CAAA,mDAAA,EAAsD,eAAe,CAAC,MAAM,CAAE,CAAA,CAC/E,CAAC;SACH;QACD,cAAc,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;KACnE;AAED,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;AACxB,SAAC,eAAe,GAAG,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;IAE5D,OAAO;AACL,QAAA,IAAI,EAAE;AACJ,YAAA;AACE,gBAAA,GAAG,EAAE,KAAK;AACV,gBAAA,GAAG,EAAE,SAAS;AACd,gBAAA,GAAG,EAAE,KAAK;AACV,gBAAA,GAAG,EAAE,KAAK;AACV,gBAAA,GAAG,EAAE,OAAO;AACZ,gBAAA,CAAC,EAAE,eAAe,CAAC,cAAc,CAAC;AACnC,aAAA;AACF,SAAA;KACF,CAAC;AACJ,CAAC;AAiED;;AAEG;SACa,mBAAmB,GAAA;AACjC,IAAA,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;AACb,QAAA,MAAM,EAAE,SAAS;AACjB,QAAA,OAAO,EAAE,QAAQ;AAClB,KAAA,CAAC,EACF;AACE,QAAA,MAAM,EAAE,GAAG;AACX,QAAA,OAAO,EAAE;AACP,YAAA,cAAc,EAAE,kBAAkB;AACnC,SAAA;AACF,KAAA,CACF,CAAC;AACJ;;AC5XA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCG;AA2BH;;AAEG;AACa,SAAA,wBAAwB,CAAC,OAAA,GAAqC,EAAE,EAAA;IAC9E,MAAM,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;;;IAI7C,OAAO,eAAe,UAAU,CAAC,GAAY,EAAE,GAAa,EAAE,IAAgB,EAAA;AAC5E,QAAA,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;;AAG1B,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,CAAG,EAAA,QAAQ,CAAW,SAAA,CAAA,EAAE;AAChE,YAAA,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAA4B,CAAC;AAExD,YAAA,IAAI;AACF,gBAAA,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;AAC1B,oBAAA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACnB,wBAAA,KAAK,EAAE,6GAA6G;AACrH,qBAAA,CAAC,CAAC;oBACH,OAAO;iBACR;gBAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACtD,IAAI,CAAC,OAAO,EAAE;AACZ,oBAAA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACnB,wBAAA,KAAK,EAAE,cAAc;AACtB,qBAAA,CAAC,CAAC;oBACH,OAAO;iBACR;AAED,gBAAA,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;AACnG,gBAAA,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpB,OAAO;aACR;YAAC,OAAO,KAAK,EAAE;AACd,gBAAA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACnB,oBAAA,KAAK,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,sBAAsB;AACvE,iBAAA,CAAC,CAAC;gBACH,OAAO;aACR;SACF;;AAGD,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,CAAG,EAAA,QAAQ,CAAwB,sBAAA,CAAA,EAAE;AAC5E,YAAA,IAAI;AACF,gBAAA,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;AACxC,gBAAA,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,OAAO;aACR;YAAC,OAAO,KAAK,EAAE;AACd,gBAAA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACnB,oBAAA,KAAK,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,yBAAyB;AAC1E,iBAAA,CAAC,CAAC;gBACH,OAAO;aACR;SACF;;AAGD,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,CAAG,EAAA,QAAQ,CAAS,OAAA,CAAA,EAAE;AAC7D,YAAA,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;AACvC,YAAA,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,OAAO;SACR;;AAGD,QAAA,IAAI,EAAE,CAAC;AACT,KAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACa,SAAA,oBAAoB,CAAC,OAAA,GAAqC,EAAE,EAAA;IAC1E,OAAO;AACL,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,eAAe,CAAC,MAA6E,EAAA;YAC3F,MAAM,CAAC,WAAW,CAAC,GAAG,CACpB,OAAO,CAAC,QAAQ,IAAI,YAAY,EAChC,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CACvD,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED;;AAEG;AACa,SAAA,gBAAgB,CAC9B,IAAY,EACZ,KAAyB,EAAA;AAEzB,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,IAAI,CAAC;AAExB,IAAA,MAAM,WAAW,GAAG,CAAA;;AAEW,+BAAA,EAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;;GAEnD,CAAC;AAEF,IAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAG,EAAA,WAAW,CAAS,OAAA,CAAA,CAAC,CAAC;KACzD;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAS,MAAA,EAAA,WAAW,CAAE,CAAA,CAAC,CAAC;AACxD;;;;"}