@vorionsys/platform-core 0.1.0

package/dist/auth/piv-cac/pkcs11-provider.js

@@ -0,0 +1,535 @@
+/**
+ * PKCS#11 Smart Card Provider
+ *
+ * Interface for PKCS#11 smart card communication.
+ * Provides card reader management, certificate extraction,
+ * and cryptographic operations.
+ *
+ * Features:
+ * - Smart card reader enumeration
+ * - Card presence monitoring
+ * - Certificate extraction from PIV slots
+ * - PIN verification
+ * - Digital signature operations
+ *
+ * @packageDocumentation
+ */
+import { EventEmitter } from 'events';
+import { createLogger } from '../../common/logger.js';
+import { CardEventType, PIVErrorCode, } from './types.js';
+const logger = createLogger({ component: 'piv-pkcs11-provider' });
+// =============================================================================
+// Constants
+// =============================================================================
+/** PIV slot IDs */
+export const PIV_SLOTS = {
+    /** PIV Authentication (9A) */
+    PIV_AUTHENTICATION: 0x9a,
+    /** Card Authentication (9E) */
+    CARD_AUTHENTICATION: 0x9e,
+    /** Digital Signature (9C) */
+    DIGITAL_SIGNATURE: 0x9c,
+    /** Key Management (9D) */
+    KEY_MANAGEMENT: 0x9d,
+};
+/** PKCS#11 return values */
+const CKR = {
+    OK: 0x00000000,
+    CANCEL: 0x00000001,
+    SLOT_ID_INVALID: 0x00000003,
+    TOKEN_NOT_PRESENT: 0x000000e0,
+    TOKEN_NOT_RECOGNIZED: 0x000000e1,
+    PIN_INCORRECT: 0x000000a0,
+    PIN_LOCKED: 0x000000a4,
+    USER_NOT_LOGGED_IN: 0x00000101,
+};
+/** Default PKCS#11 configuration */
+const DEFAULT_PKCS11_CONFIG = {
+    libraryPath: '/usr/lib/opensc-pkcs11.so', // OpenSC default
+    initializeToken: false,
+    pollingInterval: 1000,
+};
+// =============================================================================
+// Error Classes
+// =============================================================================
+/**
+ * PKCS#11 error
+ */
+export class PKCS11Error extends Error {
+    code;
+    pkcs11Code;
+    details;
+    constructor(message, code = PIVErrorCode.PKCS11_ERROR, pkcs11Code, details) {
+        super(message);
+        this.code = code;
+        this.pkcs11Code = pkcs11Code;
+        this.details = details;
+        this.name = 'PKCS11Error';
+    }
+}
+/**
+ * Library not found error
+ */
+export class LibraryNotFoundError extends PKCS11Error {
+    constructor(libraryPath) {
+        super(`PKCS#11 library not found: ${libraryPath}`, PIVErrorCode.PKCS11_ERROR, undefined, { libraryPath });
+        this.name = 'LibraryNotFoundError';
+    }
+}
+/**
+ * PIN error
+ */
+export class PINError extends PKCS11Error {
+    constructor(message, code) {
+        super(message, code);
+        this.name = 'PINError';
+    }
+}
+/**
+ * Card not present error
+ */
+export class CardNotPresentError extends PKCS11Error {
+    constructor(slotId) {
+        super('Card not present in reader', PIVErrorCode.CARD_REMOVED, undefined, { slotId });
+        this.name = 'CardNotPresentError';
+    }
+}
+// =============================================================================
+// PKCS#11 Provider
+// =============================================================================
+/**
+ * PKCS#11 smart card provider
+ *
+ * NOTE: This is an interface/abstraction layer. The actual PKCS#11
+ * implementation requires native bindings (e.g., node-pkcs11 or graphene-pk11).
+ * This code provides the API contract and mock implementation for testing.
+ */
+export class PKCS11Provider extends EventEmitter {
+    config;
+    initialized = false;
+    readers = new Map();
+    pollingTimer;
+    // PKCS#11 module instance (would be from native binding)
+    pkcs11;
+    constructor(config = {}) {
+        super();
+        this.config = { ...DEFAULT_PKCS11_CONFIG, ...config };
+    }
+    /**
+     * Initialize PKCS#11 library
+     */
+    async initialize() {
+        if (this.initialized) {
+            return;
+        }
+        try {
+            logger.info({ libraryPath: this.config.libraryPath }, 'Initializing PKCS#11 library');
+            // In a real implementation, this would load the native PKCS#11 library
+            // using a package like 'graphene-pk11' or 'pkcs11js'
+            //
+            // Example with graphene-pk11:
+            // const graphene = require('graphene-pk11');
+            // const Module = graphene.Module;
+            // const mod = Module.load(this.config.libraryPath);
+            // mod.initialize();
+            // this.pkcs11 = mod;
+            // For now, simulate initialization
+            await this.simulateInitialization();
+            this.initialized = true;
+            // Start polling for card changes
+            this.startPolling();
+            logger.info('PKCS#11 library initialized');
+            this.emit('initialized');
+        }
+        catch (error) {
+            logger.error({ error }, 'Failed to initialize PKCS#11 library');
+            throw new LibraryNotFoundError(this.config.libraryPath);
+        }
+    }
+    /**
+     * Simulate PKCS#11 initialization for testing/development
+     */
+    async simulateInitialization() {
+        // Simulate finding a reader
+        const mockReader = {
+            slotId: 0,
+            name: 'Simulated Smart Card Reader',
+            cardPresent: false,
+            manufacturer: 'Vorion',
+        };
+        this.readers.set(0, mockReader);
+    }
+    /**
+     * Finalize and cleanup
+     */
+    async finalize() {
+        if (!this.initialized) {
+            return;
+        }
+        this.stopPolling();
+        // In a real implementation:
+        // this.pkcs11?.finalize();
+        this.readers.clear();
+        this.initialized = false;
+        logger.info('PKCS#11 library finalized');
+    }
+    /**
+     * Get available readers
+     */
+    getReaders() {
+        this.ensureInitialized();
+        return Array.from(this.readers.values());
+    }
+    /**
+     * Get reader by slot ID
+     */
+    getReader(slotId) {
+        this.ensureInitialized();
+        return this.readers.get(slotId);
+    }
+    /**
+     * Check if card is present in reader
+     */
+    isCardPresent(slotId) {
+        const reader = this.readers.get(slotId);
+        return reader?.cardPresent ?? false;
+    }
+    /**
+     * Get token info from card
+     */
+    async getTokenInfo(slotId) {
+        this.ensureInitialized();
+        this.ensureCardPresent(slotId);
+        // In a real implementation:
+        // const slot = this.pkcs11.getSlots()[slotId];
+        // const token = slot.getToken();
+        // return {
+        //   label: token.label,
+        //   manufacturer: token.manufacturerID,
+        //   ...
+        // };
+        // Mock implementation
+        return {
+            label: 'PIV Card',
+            manufacturer: 'US Government',
+            model: 'PIV-II',
+            serialNumber: '00000000',
+            totalPublicMemory: 0,
+            freePublicMemory: 0,
+            totalPrivateMemory: 0,
+            freePrivateMemory: 0,
+            initialized: true,
+            pinRequired: true,
+        };
+    }
+    /**
+     * Get certificates from card
+     */
+    async getCertificates(slotId, pin) {
+        this.ensureInitialized();
+        this.ensureCardPresent(slotId);
+        const certificates = [];
+        // In a real implementation:
+        // 1. Open session
+        // 2. Login with PIN if required
+        // 3. Find certificate objects
+        // 4. Extract certificate data
+        // 5. Close session
+        // Example with graphene-pk11:
+        // const slot = this.pkcs11.getSlots()[slotId];
+        // const session = slot.open(graphene.SessionFlag.RW_SESSION);
+        // if (pin) session.login(pin, graphene.UserType.USER);
+        //
+        // const certs = session.find({ class: graphene.ObjectClass.CERTIFICATE });
+        // for (const cert of certs) {
+        //   const value = cert.getAttribute(graphene.CKA_VALUE);
+        //   // Parse certificate
+        // }
+        // session.close();
+        // Mock implementation - return empty array
+        // Real implementation would extract PIV certificates from card
+        logger.debug({ slotId, pin: pin ? '[REDACTED]' : undefined }, 'Getting certificates from card');
+        return certificates;
+    }
+    /**
+     * Get authentication certificate (slot 9A)
+     */
+    async getAuthenticationCertificate(slotId, pin) {
+        const certs = await this.getCertificates(slotId, pin);
+        return certs.find((c) => c.slot === PIV_SLOTS.PIV_AUTHENTICATION);
+    }
+    /**
+     * Verify PIN
+     */
+    async verifyPIN(slotId, pin) {
+        this.ensureInitialized();
+        this.ensureCardPresent(slotId);
+        // In a real implementation:
+        // const slot = this.pkcs11.getSlots()[slotId];
+        // const session = slot.open();
+        // try {
+        //   session.login(pin, UserType.USER);
+        //   return true;
+        // } catch (error) {
+        //   if (error.code === CKR.PIN_INCORRECT) return false;
+        //   if (error.code === CKR.PIN_LOCKED) throw new PINError(...);
+        //   throw error;
+        // } finally {
+        //   session.close();
+        // }
+        logger.debug({ slotId }, 'Verifying PIN');
+        // Mock implementation
+        return pin.length >= 4;
+    }
+    /**
+     * Sign data using card's private key
+     */
+    async sign(request) {
+        this.ensureInitialized();
+        this.ensureCardPresent(request.slotId);
+        // In a real implementation:
+        // 1. Open session
+        // 2. Login with PIN
+        // 3. Find private key by ID
+        // 4. Set mechanism
+        // 5. Sign data
+        // 6. Return signature
+        // 7. Close session
+        logger.debug({
+            slotId: request.slotId,
+            mechanism: request.mechanism,
+            dataLength: request.data.length,
+        }, 'Signing data with smart card');
+        // Mock implementation - return empty signature
+        throw new PKCS11Error('Sign operation requires PKCS#11 native bindings', PIVErrorCode.PKCS11_ERROR);
+    }
+    /**
+     * Challenge-response authentication
+     */
+    async challengeResponse(slotId, challenge, pin) {
+        this.ensureInitialized();
+        this.ensureCardPresent(slotId);
+        // Get authentication certificate
+        const cert = await this.getAuthenticationCertificate(slotId, pin);
+        if (!cert) {
+            throw new PKCS11Error('No authentication certificate found on card', PIVErrorCode.PKCS11_ERROR);
+        }
+        // Sign challenge
+        return this.sign({
+            slotId,
+            keyId: cert.id,
+            data: challenge,
+            mechanism: 'rsa-pkcs',
+            pin,
+        });
+    }
+    /**
+     * Get card ATR (Answer To Reset)
+     */
+    async getATR(slotId) {
+        this.ensureInitialized();
+        this.ensureCardPresent(slotId);
+        // In a real implementation:
+        // const slot = this.pkcs11.getSlots()[slotId];
+        // return slot.getATR().toString('hex');
+        const reader = this.readers.get(slotId);
+        return reader?.atr;
+    }
+    /**
+     * Start polling for card changes
+     */
+    startPolling() {
+        if (this.pollingTimer) {
+            return;
+        }
+        this.pollingTimer = setInterval(async () => {
+            try {
+                await this.pollReaders();
+            }
+            catch (error) {
+                logger.error({ error }, 'Error polling readers');
+                this.emit('error', error instanceof Error ? error : new Error(String(error)));
+            }
+        }, this.config.pollingInterval);
+    }
+    /**
+     * Stop polling
+     */
+    stopPolling() {
+        if (this.pollingTimer) {
+            clearInterval(this.pollingTimer);
+            this.pollingTimer = undefined;
+        }
+    }
+    /**
+     * Poll readers for changes
+     */
+    async pollReaders() {
+        // In a real implementation, check each slot for card presence changes
+        // and emit appropriate events
+        for (const [slotId, reader] of this.readers) {
+            // Check if card state changed
+            // const newState = this.pkcs11.getSlotInfo(slotId);
+            // if (newState.flags.tokenPresent !== reader.cardPresent) {
+            //   ...
+            // }
+        }
+    }
+    /**
+     * Simulate card insertion (for testing)
+     */
+    simulateCardInsert(slotId, atr) {
+        const reader = this.readers.get(slotId);
+        if (!reader)
+            return;
+        reader.cardPresent = true;
+        reader.atr = atr || '3B8F8001804F0CA0000003060300030000000068';
+        const event = {
+            type: CardEventType.CARD_INSERTED,
+            readerName: reader.name,
+            timestamp: new Date(),
+            atr: reader.atr,
+        };
+        logger.info({ slotId, readerName: reader.name, atr: reader.atr }, 'Card inserted');
+        this.emit('cardInserted', event);
+    }
+    /**
+     * Simulate card removal (for testing)
+     */
+    simulateCardRemove(slotId) {
+        const reader = this.readers.get(slotId);
+        if (!reader)
+            return;
+        const atr = reader.atr;
+        reader.cardPresent = false;
+        reader.atr = undefined;
+        const event = {
+            type: CardEventType.CARD_REMOVED,
+            readerName: reader.name,
+            timestamp: new Date(),
+            atr,
+        };
+        logger.info({ slotId, readerName: reader.name }, 'Card removed');
+        this.emit('cardRemoved', event);
+    }
+    /**
+     * Ensure library is initialized
+     */
+    ensureInitialized() {
+        if (!this.initialized) {
+            throw new PKCS11Error('PKCS#11 library not initialized', PIVErrorCode.PKCS11_ERROR);
+        }
+    }
+    /**
+     * Ensure card is present
+     */
+    ensureCardPresent(slotId) {
+        if (!this.isCardPresent(slotId)) {
+            throw new CardNotPresentError(slotId);
+        }
+    }
+    /**
+     * Get configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * Check if initialized
+     */
+    isInitialized() {
+        return this.initialized;
+    }
+}
+// =============================================================================
+// Singleton and Factory
+// =============================================================================
+let defaultProvider = null;
+/**
+ * Get the default PKCS#11 provider
+ */
+export function getPKCS11Provider(config) {
+    if (!defaultProvider || config) {
+        defaultProvider = new PKCS11Provider(config);
+    }
+    return defaultProvider;
+}
+/**
+ * Create a new PKCS#11 provider
+ */
+export function createPKCS11Provider(config = {}) {
+    return new PKCS11Provider(config);
+}
+/**
+ * Reset the default provider (for testing)
+ */
+export async function resetPKCS11Provider() {
+    if (defaultProvider) {
+        await defaultProvider.finalize();
+        defaultProvider = null;
+    }
+}
+// =============================================================================
+// Platform-specific library paths
+// =============================================================================
+/**
+ * Common PKCS#11 library paths by platform
+ */
+export const PKCS11_LIBRARY_PATHS = {
+    /** OpenSC on Linux */
+    openscLinux: '/usr/lib/opensc-pkcs11.so',
+    /** OpenSC on macOS */
+    openscMac: '/usr/local/lib/opensc-pkcs11.so',
+    /** OpenSC on macOS (Homebrew) */
+    openscMacBrew: '/opt/homebrew/lib/opensc-pkcs11.so',
+    /** OpenSC on Windows */
+    openscWindows: 'C:\\Program Files\\OpenSC Project\\OpenSC\\pkcs11\\opensc-pkcs11.dll',
+    /** CoolKey on Linux */
+    coolkey: '/usr/lib64/pkcs11/libcoolkeypk11.so',
+    /** YubiKey */
+    yubikey: '/usr/lib/x86_64-linux-gnu/libykcs11.so',
+    /** SafeNet on Windows */
+    safenet: 'C:\\Program Files\\SafeNet\\Authentication\\SAC\\x64\\sac10x.dll',
+    /** Gemalto on Windows */
+    gemalto: 'C:\\Windows\\System32\\gclib.dll',
+};
+/**
+ * Detect available PKCS#11 library
+ */
+export async function detectPKCS11Library() {
+    const { existsSync } = await import('fs');
+    const platform = process.platform;
+    let paths;
+    switch (platform) {
+        case 'linux':
+            paths = [
+                PKCS11_LIBRARY_PATHS.openscLinux,
+                PKCS11_LIBRARY_PATHS.coolkey,
+                PKCS11_LIBRARY_PATHS.yubikey,
+            ];
+            break;
+        case 'darwin':
+            paths = [
+                PKCS11_LIBRARY_PATHS.openscMacBrew,
+                PKCS11_LIBRARY_PATHS.openscMac,
+            ];
+            break;
+        case 'win32':
+            paths = [
+                PKCS11_LIBRARY_PATHS.openscWindows,
+                PKCS11_LIBRARY_PATHS.safenet,
+                PKCS11_LIBRARY_PATHS.gemalto,
+            ];
+            break;
+        default:
+            paths = [];
+    }
+    for (const path of paths) {
+        if (existsSync(path)) {
+            logger.info({ libraryPath: path }, 'Detected PKCS#11 library');
+            return path;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=pkcs11-provider.js.map

package/dist/auth/piv-cac/pkcs11-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkcs11-provider.js","sourceRoot":"","sources":["../../../src/auth/piv-cac/pkcs11-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAIL,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAElE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,mBAAmB;AACnB,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,8BAA8B;IAC9B,kBAAkB,EAAE,IAAI;IACxB,+BAA+B;IAC/B,mBAAmB,EAAE,IAAI;IACzB,6BAA6B;IAC7B,iBAAiB,EAAE,IAAI;IACvB,0BAA0B;IAC1B,cAAc,EAAE,IAAI;CACZ,CAAC;AAEX,4BAA4B;AAC5B,MAAM,GAAG,GAAG;IACV,EAAE,EAAE,UAAU;IACd,MAAM,EAAE,UAAU;IAClB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,UAAU;IAC7B,oBAAoB,EAAE,UAAU;IAChC,aAAa,EAAE,UAAU;IACzB,UAAU,EAAE,UAAU;IACtB,kBAAkB,EAAE,UAAU;CACtB,CAAC;AAEX,oCAAoC;AACpC,MAAM,qBAAqB,GAAiB;IAC1C,WAAW,EAAE,2BAA2B,EAAE,iBAAiB;IAC3D,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,IAAI;CACtB,CAAC;AA8FF,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB;IACA;IACA;IAJlB,YACE,OAAe,EACC,OAAqB,YAAY,CAAC,YAAY,EAC9C,UAAmB,EACnB,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAA0C;QAC9C,eAAU,GAAV,UAAU,CAAS;QACnB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,WAAW;IACnD,YAAY,WAAmB;QAC7B,KAAK,CACH,8BAA8B,WAAW,EAAE,EAC3C,YAAY,CAAC,YAAY,EACzB,SAAS,EACT,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,WAAW;IACvC,YAAY,OAAe,EAAE,IAAkB;QAC7C,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,WAAW;IAClD,YAAY,MAAc;QACxB,KAAK,CAAC,4BAA4B,EAAE,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IACtC,MAAM,CAAe;IACrB,WAAW,GAAY,KAAK,CAAC;IAC7B,OAAO,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC7C,YAAY,CAAkB;IAEtC,yDAAyD;IACjD,MAAM,CAAW;IAEzB,YAAY,SAAgC,EAAE;QAC5C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAEtF,uEAAuE;YACvE,qDAAqD;YACrD,EAAE;YACF,8BAA8B;YAC9B,6CAA6C;YAC7C,kCAAkC;YAClC,oDAAoD;YACpD,oBAAoB;YACpB,qBAAqB;YAErB,mCAAmC;YACnC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAEpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAExB,iCAAiC;YACjC,IAAI,CAAC,YAAY,EAAE,CAAC;YAEpB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;YAChE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,4BAA4B;QAC5B,MAAM,UAAU,GAAe;YAC7B,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,6BAA6B;YACnC,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,QAAQ;SACvB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,4BAA4B;QAC5B,2BAA2B;QAE3B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAEzB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAc;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,4BAA4B;QAC5B,+CAA+C;QAC/C,iCAAiC;QACjC,WAAW;QACX,wBAAwB;QACxB,wCAAwC;QACxC,QAAQ;QACR,KAAK;QAEL,sBAAsB;QACtB,OAAO;YACL,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,eAAe;YAC7B,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,UAAU;YACxB,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,CAAC;YACnB,kBAAkB,EAAE,CAAC;YACrB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,GAAY;QAChD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,YAAY,GAA2B,EAAE,CAAC;QAEhD,4BAA4B;QAC5B,kBAAkB;QAClB,gCAAgC;QAChC,8BAA8B;QAC9B,8BAA8B;QAC9B,mBAAmB;QAEnB,8BAA8B;QAC9B,+CAA+C;QAC/C,8DAA8D;QAC9D,uDAAuD;QACvD,EAAE;QACF,2EAA2E;QAC3E,8BAA8B;QAC9B,yDAAyD;QACzD,yBAAyB;QACzB,IAAI;QACJ,mBAAmB;QAEnB,2CAA2C;QAC3C,+DAA+D;QAE/D,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAEhG,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,4BAA4B,CAChC,MAAc,EACd,GAAY;QAEZ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,GAAW;QACzC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,4BAA4B;QAC5B,+CAA+C;QAC/C,+BAA+B;QAC/B,QAAQ;QACR,uCAAuC;QACvC,iBAAiB;QACjB,oBAAoB;QACpB,wDAAwD;QACxD,gEAAgE;QAChE,iBAAiB;QACjB,cAAc;QACd,qBAAqB;QACrB,IAAI;QAEJ,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QAE1C,sBAAsB;QACtB,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAoB;QAC7B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEvC,4BAA4B;QAC5B,kBAAkB;QAClB,oBAAoB;QACpB,4BAA4B;QAC5B,mBAAmB;QACnB,eAAe;QACf,sBAAsB;QACtB,mBAAmB;QAEnB,MAAM,CAAC,KAAK,CACV;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;SAChC,EACD,8BAA8B,CAC/B,CAAC;QAEF,+CAA+C;QAC/C,MAAM,IAAI,WAAW,CACnB,iDAAiD,EACjD,YAAY,CAAC,YAAY,CAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAAc,EACd,SAAiB,EACjB,GAAY;QAEZ,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,iCAAiC;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,WAAW,CACnB,6CAA6C,EAC7C,YAAY,CAAC,YAAY,CAC1B,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC;YACf,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,EAAE;YACd,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,UAAU;YACrB,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,4BAA4B;QAC5B,+CAA+C;QAC/C,wCAAwC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,EAAE,GAAG,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACzC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,sEAAsE;QACtE,8BAA8B;QAE9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,8BAA8B;YAC9B,oDAAoD;YACpD,4DAA4D;YAC5D,QAAQ;YACR,IAAI;QACN,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAc,EAAE,GAAY;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,0CAA0C,CAAC;QAE/D,MAAM,KAAK,GAAc;YACvB,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAc;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC;QAEvB,MAAM,KAAK,GAAc;YACvB,IAAI,EAAE,aAAa,CAAC,YAAY;YAChC,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,GAAG;SACJ,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,iCAAiC,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAAc;QACtC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,IAAI,eAAe,GAA0B,IAAI,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,IAAI,CAAC,eAAe,IAAI,MAAM,EAAE,CAAC;QAC/B,eAAe,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAgC,EAAE;IACrE,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,eAAe,CAAC,QAAQ,EAAE,CAAC;QACjC,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,sBAAsB;IACtB,WAAW,EAAE,2BAA2B;IACxC,sBAAsB;IACtB,SAAS,EAAE,iCAAiC;IAC5C,iCAAiC;IACjC,aAAa,EAAE,oCAAoC;IACnD,wBAAwB;IACxB,aAAa,EAAE,sEAAsE;IACrF,uBAAuB;IACvB,OAAO,EAAE,qCAAqC;IAC9C,cAAc;IACd,OAAO,EAAE,wCAAwC;IACjD,yBAAyB;IACzB,OAAO,EAAE,kEAAkE;IAC3E,yBAAyB;IACzB,OAAO,EAAE,kCAAkC;CACnC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,IAAI,KAAe,CAAC;IAEpB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,KAAK,GAAG;gBACN,oBAAoB,CAAC,WAAW;gBAChC,oBAAoB,CAAC,OAAO;gBAC5B,oBAAoB,CAAC,OAAO;aAC7B,CAAC;YACF,MAAM;QAER,KAAK,QAAQ;YACX,KAAK,GAAG;gBACN,oBAAoB,CAAC,aAAa;gBAClC,oBAAoB,CAAC,SAAS;aAC/B,CAAC;YACF,MAAM;QAER,KAAK,OAAO;YACV,KAAK,GAAG;gBACN,oBAAoB,CAAC,aAAa;gBAClC,oBAAoB,CAAC,OAAO;gBAC5B,oBAAoB,CAAC,OAAO;aAC7B,CAAC;YACF,MAAM;QAER;YACE,KAAK,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}