@vorionsys/security 1.0.0

package/dist/security/webauthn/store.js

@@ -0,0 +1,505 @@
+/**
+ * WebAuthn Credential Storage Layer
+ *
+ * In-memory store implementation for WebAuthn credential management
+ * with Redis-backed challenge storage for multi-instance deployments.
+ *
+ * Features:
+ * - CRUD operations for credentials
+ * - Lookup by credentialId and userId
+ * - Redis-backed challenge storage with automatic TTL expiration
+ * - Proper key prefixing: `webauthn:challenge:{userId}`
+ * - Singleton pattern with reset for testing
+ * - Graceful fallback to in-memory when Redis unavailable
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../../common/logger.js';
+import { getRedisStateProvider, } from '../distributed-state.js';
+const logger = createLogger({ component: 'webauthn-store' });
+/** Redis key prefix for WebAuthn challenges */
+const REDIS_CHALLENGE_PREFIX = 'webauthn:challenge:';
+// =============================================================================
+// IN-MEMORY STORE IMPLEMENTATION
+// =============================================================================
+/**
+ * In-memory implementation of WebAuthn credential store.
+ *
+ * NOTE: This is suitable for development and testing only.
+ * Production deployments should use a database.
+ */
+export class InMemoryWebAuthnStore {
+    /** Credentials indexed by internal ID */
+    credentialsById = new Map();
+    /** Credentials indexed by WebAuthn credential ID */
+    credentialsByCredentialId = new Map();
+    /** Credentials indexed by user ID (one user can have multiple credentials) */
+    credentialsByUserId = new Map();
+    /** Challenge storage with TTL */
+    challenges = new Map();
+    /** Cleanup interval handle */
+    cleanupInterval = null;
+    constructor() {
+        this.startCleanup();
+    }
+    // ===========================================================================
+    // CREDENTIAL OPERATIONS
+    // ===========================================================================
+    /**
+     * Create a new credential
+     */
+    async createCredential(credential) {
+        // Check for duplicate credential ID
+        if (this.credentialsByCredentialId.has(credential.credentialId)) {
+            throw new Error(`Credential with ID ${credential.credentialId} already exists`);
+        }
+        // Store credential
+        this.credentialsById.set(credential.id, credential);
+        this.credentialsByCredentialId.set(credential.credentialId, credential);
+        // Add to user's credential set
+        let userCredentials = this.credentialsByUserId.get(credential.userId);
+        if (!userCredentials) {
+            userCredentials = new Set();
+            this.credentialsByUserId.set(credential.userId, userCredentials);
+        }
+        userCredentials.add(credential.id);
+        logger.info({
+            credentialId: credential.id,
+            userId: credential.userId,
+            name: credential.name,
+        }, 'WebAuthn credential created in store');
+        return credential;
+    }
+    /**
+     * Get a credential by its internal ID
+     */
+    async getCredentialById(id) {
+        return this.credentialsById.get(id) ?? null;
+    }
+    /**
+     * Get a credential by its WebAuthn credential ID
+     */
+    async getCredentialByCredentialId(credentialId) {
+        return this.credentialsByCredentialId.get(credentialId) ?? null;
+    }
+    /**
+     * Get all credentials for a user
+     */
+    async getCredentialsByUserId(userId) {
+        const credentialIds = this.credentialsByUserId.get(userId);
+        if (!credentialIds || credentialIds.size === 0) {
+            return [];
+        }
+        const credentials = [];
+        const idArray = Array.from(credentialIds);
+        for (let i = 0; i < idArray.length; i++) {
+            const credential = this.credentialsById.get(idArray[i]);
+            if (credential) {
+                credentials.push(credential);
+            }
+        }
+        // Sort by creation date (newest first)
+        credentials.sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime());
+        return credentials;
+    }
+    /**
+     * Update a credential
+     */
+    async updateCredential(id, updates) {
+        const existing = this.credentialsById.get(id);
+        if (!existing) {
+            return null;
+        }
+        // Merge updates (preserve immutable fields)
+        const updated = {
+            ...existing,
+            ...updates,
+            // Immutable fields
+            id: existing.id,
+            credentialId: existing.credentialId,
+            publicKey: existing.publicKey,
+            userId: existing.userId,
+            createdAt: existing.createdAt,
+        };
+        // Update all indexes
+        this.credentialsById.set(id, updated);
+        this.credentialsByCredentialId.set(updated.credentialId, updated);
+        logger.debug({ credentialId: id, updates: Object.keys(updates) }, 'WebAuthn credential updated');
+        return updated;
+    }
+    /**
+     * Delete a credential
+     */
+    async deleteCredential(id) {
+        const credential = this.credentialsById.get(id);
+        if (!credential) {
+            return false;
+        }
+        // Remove from all indexes
+        this.credentialsById.delete(id);
+        this.credentialsByCredentialId.delete(credential.credentialId);
+        const userCredentials = this.credentialsByUserId.get(credential.userId);
+        if (userCredentials) {
+            userCredentials.delete(id);
+            if (userCredentials.size === 0) {
+                this.credentialsByUserId.delete(credential.userId);
+            }
+        }
+        logger.info({ credentialId: id, userId: credential.userId, name: credential.name }, 'WebAuthn credential deleted from store');
+        return true;
+    }
+    /**
+     * Delete all credentials for a user
+     */
+    async deleteCredentialsByUserId(userId) {
+        const credentialIds = this.credentialsByUserId.get(userId);
+        if (!credentialIds || credentialIds.size === 0) {
+            return 0;
+        }
+        let deletedCount = 0;
+        const idArray = Array.from(credentialIds);
+        for (let i = 0; i < idArray.length; i++) {
+            const id = idArray[i];
+            const credential = this.credentialsById.get(id);
+            if (credential) {
+                this.credentialsById.delete(id);
+                this.credentialsByCredentialId.delete(credential.credentialId);
+                deletedCount++;
+            }
+        }
+        this.credentialsByUserId.delete(userId);
+        logger.info({ userId, deletedCount }, 'All WebAuthn credentials deleted for user');
+        return deletedCount;
+    }
+    /**
+     * Count credentials for a user
+     */
+    async countCredentialsByUserId(userId) {
+        const credentialIds = this.credentialsByUserId.get(userId);
+        return credentialIds?.size ?? 0;
+    }
+    // ===========================================================================
+    // CHALLENGE OPERATIONS
+    // ===========================================================================
+    /**
+     * Store a challenge
+     */
+    async setChallenge(key, entry) {
+        this.challenges.set(key, entry);
+        logger.debug({ key, type: entry.type, userId: entry.userId }, 'WebAuthn challenge stored');
+    }
+    /**
+     * Get and delete a challenge (one-time use)
+     */
+    async getChallenge(key) {
+        const entry = this.challenges.get(key);
+        if (!entry) {
+            return null;
+        }
+        // Delete after retrieval (one-time use)
+        this.challenges.delete(key);
+        // Check expiration
+        if (Date.now() > entry.expiresAt) {
+            logger.warn({ key, type: entry.type }, 'WebAuthn challenge expired');
+            return null;
+        }
+        logger.debug({ key, type: entry.type }, 'WebAuthn challenge retrieved');
+        return entry;
+    }
+    /**
+     * Delete a challenge
+     */
+    async deleteChallenge(key) {
+        return this.challenges.delete(key);
+    }
+    // ===========================================================================
+    // MAINTENANCE
+    // ===========================================================================
+    /**
+     * Start periodic cleanup of expired challenges
+     */
+    startCleanup() {
+        // Clean up every minute
+        this.cleanupInterval = setInterval(() => {
+            const now = Date.now();
+            let expiredCount = 0;
+            const entries = Array.from(this.challenges.entries());
+            for (let i = 0; i < entries.length; i++) {
+                const [key, entry] = entries[i];
+                if (now > entry.expiresAt) {
+                    this.challenges.delete(key);
+                    expiredCount++;
+                }
+            }
+            if (expiredCount > 0) {
+                logger.debug({ expiredCount }, 'Expired WebAuthn challenges cleaned up');
+            }
+        }, 60000);
+        // Don't prevent process exit
+        this.cleanupInterval.unref();
+    }
+    /**
+     * Stop the cleanup interval
+     */
+    stop() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+    /**
+     * Reset the store (for testing)
+     */
+    reset() {
+        this.credentialsById.clear();
+        this.credentialsByCredentialId.clear();
+        this.credentialsByUserId.clear();
+        this.challenges.clear();
+        logger.info('WebAuthn store reset');
+    }
+    /**
+     * Get store statistics
+     */
+    getStats() {
+        const credentialsByUser = {};
+        const entries = Array.from(this.credentialsByUserId.entries());
+        for (let i = 0; i < entries.length; i++) {
+            const [userId, credentialIds] = entries[i];
+            credentialsByUser[userId] = credentialIds.size;
+        }
+        return {
+            totalCredentials: this.credentialsById.size,
+            totalUsers: this.credentialsByUserId.size,
+            pendingChallenges: this.challenges.size,
+            credentialsByUser,
+        };
+    }
+}
+// =============================================================================
+// REDIS-BACKED STORE IMPLEMENTATION
+// =============================================================================
+/**
+ * WebAuthn store with Redis-backed challenge storage.
+ *
+ * Uses Redis for challenge storage to support multi-instance deployments.
+ * Challenges are stored with proper TTL and automatically expire.
+ * Falls back to in-memory storage if Redis is unavailable.
+ *
+ * Key format: `webauthn:challenge:{userId}:{type}`
+ */
+export class RedisWebAuthnStore {
+    stateProvider;
+    fallback;
+    useRedis = true;
+    constructor(stateProvider) {
+        this.stateProvider = stateProvider ?? getRedisStateProvider({
+            keyPrefix: 'vorion:security:',
+        });
+        this.fallback = new InMemoryWebAuthnStore();
+        // Check Redis health
+        this.checkRedisHealth();
+    }
+    async checkRedisHealth() {
+        try {
+            const health = await this.stateProvider.getHealthStatus();
+            this.useRedis = health.healthy;
+            if (!health.healthy) {
+                logger.warn({ error: health.error }, 'Redis unavailable for WebAuthn challenges, using in-memory fallback');
+            }
+        }
+        catch (error) {
+            logger.warn({ error }, 'Redis health check failed, using in-memory fallback');
+            this.useRedis = false;
+        }
+    }
+    // ===========================================================================
+    // CREDENTIAL OPERATIONS (delegated to fallback - use database in production)
+    // ===========================================================================
+    async createCredential(credential) {
+        return this.fallback.createCredential(credential);
+    }
+    async getCredentialById(id) {
+        return this.fallback.getCredentialById(id);
+    }
+    async getCredentialByCredentialId(credentialId) {
+        return this.fallback.getCredentialByCredentialId(credentialId);
+    }
+    async getCredentialsByUserId(userId) {
+        return this.fallback.getCredentialsByUserId(userId);
+    }
+    async updateCredential(id, updates) {
+        return this.fallback.updateCredential(id, updates);
+    }
+    async deleteCredential(id) {
+        return this.fallback.deleteCredential(id);
+    }
+    async deleteCredentialsByUserId(userId) {
+        return this.fallback.deleteCredentialsByUserId(userId);
+    }
+    async countCredentialsByUserId(userId) {
+        return this.fallback.countCredentialsByUserId(userId);
+    }
+    // ===========================================================================
+    // CHALLENGE OPERATIONS (Redis-backed)
+    // ===========================================================================
+    /**
+     * Store a challenge in Redis with automatic TTL expiration
+     *
+     * Key format: `webauthn:challenge:{key}`
+     */
+    async setChallenge(key, entry) {
+        if (!this.useRedis) {
+            return this.fallback.setChallenge(key, entry);
+        }
+        try {
+            const redisKey = `${REDIS_CHALLENGE_PREFIX}${key}`;
+            const ttlSeconds = Math.max(1, Math.ceil((entry.expiresAt - Date.now()) / 1000));
+            await this.stateProvider.set(redisKey, JSON.stringify({
+                ...entry,
+                createdAt: entry.createdAt.toISOString(),
+            }), ttlSeconds);
+            logger.debug({ key: redisKey, type: entry.type, userId: entry.userId, ttlSeconds }, 'WebAuthn challenge stored in Redis');
+        }
+        catch (error) {
+            logger.warn({ error, key }, 'Failed to store challenge in Redis, using fallback');
+            this.useRedis = false;
+            await this.fallback.setChallenge(key, entry);
+        }
+    }
+    /**
+     * Get and delete a challenge from Redis (one-time use)
+     *
+     * Uses GET + DELETE to ensure the challenge is consumed atomically.
+     * Redis TTL handles automatic expiration.
+     */
+    async getChallenge(key) {
+        if (!this.useRedis) {
+            return this.fallback.getChallenge(key);
+        }
+        try {
+            const redisKey = `${REDIS_CHALLENGE_PREFIX}${key}`;
+            const data = await this.stateProvider.get(redisKey);
+            if (!data) {
+                return null;
+            }
+            // Delete immediately after retrieval (one-time use)
+            await this.stateProvider.delete(redisKey);
+            const parsed = JSON.parse(data);
+            const entry = {
+                ...parsed,
+                createdAt: new Date(parsed.createdAt),
+            };
+            // Double-check expiration (belt and suspenders with Redis TTL)
+            if (Date.now() > entry.expiresAt) {
+                logger.warn({ key, type: entry.type }, 'WebAuthn challenge expired');
+                return null;
+            }
+            logger.debug({ key: redisKey, type: entry.type }, 'WebAuthn challenge retrieved from Redis');
+            return entry;
+        }
+        catch (error) {
+            logger.warn({ error, key }, 'Failed to get challenge from Redis, using fallback');
+            return this.fallback.getChallenge(key);
+        }
+    }
+    /**
+     * Delete a challenge from Redis
+     */
+    async deleteChallenge(key) {
+        if (!this.useRedis) {
+            return this.fallback.deleteChallenge(key);
+        }
+        try {
+            const redisKey = `${REDIS_CHALLENGE_PREFIX}${key}`;
+            return await this.stateProvider.delete(redisKey);
+        }
+        catch (error) {
+            logger.warn({ error, key }, 'Failed to delete challenge from Redis');
+            return this.fallback.deleteChallenge(key);
+        }
+    }
+    // ===========================================================================
+    // MAINTENANCE
+    // ===========================================================================
+    /**
+     * Reset the store (for testing)
+     */
+    reset() {
+        this.fallback.reset();
+        logger.info('Redis WebAuthn store reset');
+    }
+    /**
+     * Stop the store
+     */
+    stop() {
+        this.fallback.stop();
+    }
+    /**
+     * Get store statistics
+     */
+    getStats() {
+        const fallbackStats = this.fallback.getStats();
+        return {
+            ...fallbackStats,
+            usingRedis: this.useRedis,
+        };
+    }
+    /**
+     * Check if Redis is being used for challenges
+     */
+    isUsingRedis() {
+        return this.useRedis;
+    }
+}
+// =============================================================================
+// SINGLETON
+// =============================================================================
+let store = null;
+let useRedisStore = false;
+/**
+ * Enable Redis-backed WebAuthn store
+ * Call this before first getWebAuthnStore() call to use Redis for challenges
+ */
+export function enableRedisWebAuthnStore() {
+    useRedisStore = true;
+}
+/**
+ * Get the WebAuthn store singleton
+ */
+export function getWebAuthnStore() {
+    if (!store) {
+        if (useRedisStore) {
+            store = new RedisWebAuthnStore();
+            logger.info('Redis WebAuthn store initialized');
+        }
+        else {
+            store = new InMemoryWebAuthnStore();
+            logger.info('In-memory WebAuthn store initialized');
+        }
+    }
+    return store;
+}
+/**
+ * Create a new WebAuthn store instance (for testing)
+ */
+export function createWebAuthnStore() {
+    return new InMemoryWebAuthnStore();
+}
+/**
+ * Create a new Redis WebAuthn store instance
+ */
+export function createRedisWebAuthnStore(stateProvider) {
+    return new RedisWebAuthnStore(stateProvider);
+}
+/**
+ * Reset the WebAuthn store singleton (for testing)
+ */
+export function resetWebAuthnStore() {
+    if (store) {
+        store.reset();
+        store = null;
+    }
+    useRedisStore = false;
+    logger.info('WebAuthn store singleton reset');
+}
+//# sourceMappingURL=store.js.map

package/dist/security/webauthn/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/security/webauthn/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAE7D,+CAA+C;AAC/C,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAyErD,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IAChC,yCAAyC;IACjC,eAAe,GAAoC,IAAI,GAAG,EAAE,CAAC;IAErE,oDAAoD;IAC5C,yBAAyB,GAAoC,IAAI,GAAG,EAAE,CAAC;IAE/E,8EAA8E;IACtE,mBAAmB,GAA6B,IAAI,GAAG,EAAE,CAAC;IAElE,iCAAiC;IACzB,UAAU,GAAgC,IAAI,GAAG,EAAE,CAAC;IAE5D,8BAA8B;IACtB,eAAe,GAA0B,IAAI,CAAC;IAEtD;QACE,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAA8B;QACnD,oCAAoC;QACpC,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,CAAC,YAAY,iBAAiB,CAAC,CAAC;QAClF,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAExE,+BAA+B;QAC/B,IAAI,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACnE,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAEnC,MAAM,CAAC,IAAI,CACT;YACE,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,IAAI,EAAE,UAAU,CAAC,IAAI;SACtB,EACD,sCAAsC,CACvC,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAAC,YAAoB;QACpD,OAAO,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACzC,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,WAAW,GAAyB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAE1E,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,EAAU,EACV,OAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4CAA4C;QAC5C,MAAM,OAAO,GAAuB;YAClC,GAAG,QAAQ;YACX,GAAG,OAAO;YACV,mBAAmB;YACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;QAEF,qBAAqB;QACrB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAEjG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE/D,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,eAAe,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EACtE,wCAAwC,CACzC,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,MAAc;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAC/D,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,YAAY,EAAE,EACxB,2CAA2C,CAC5C,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,MAAc;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,aAAa,EAAE,IAAI,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAqB;QACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC/C,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5B,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E;;OAEG;IACK,YAAY;QAClB,wBAAwB;QACxB,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,YAAY,GAAG,CAAC,CAAC;YAErB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;oBAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC5B,YAAY,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;YAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,6BAA6B;QAC7B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,MAAM,iBAAiB,GAA2B,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3C,iBAAiB,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;QACjD,CAAC;QAED,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;YAC3C,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI;YACzC,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YACvC,iBAAiB;SAClB,CAAC;IACJ,CAAC;CACF;AAED,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IACZ,aAAa,CAAqB;IAClC,QAAQ,CAAwB;IACzC,QAAQ,GAAY,IAAI,CAAC;IAEjC,YAAY,aAAkC;QAC5C,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,qBAAqB,CAAC;YAC1D,SAAS,EAAE,kBAAkB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAE5C,qBAAqB;QACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;YAE/B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EACvB,qEAAqE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,qDAAqD,CAAC,CAAC;YAC9E,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CAAC,UAA8B;QACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,YAAoB;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,EAAU,EACV,OAAoC;QAEpC,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAAc;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAAc;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,8EAA8E;IAC9E,sCAAsC;IACtC,8EAA8E;IAE9E;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAqB;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAEjF,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAC1B,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC;gBACb,GAAG,KAAK;gBACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;aACzC,CAAC,EACF,UAAU,CACX,CAAC;YAEF,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,EACrE,oCAAoC,CACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,oDAAoD,CAAC,CAAC;YAClF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEpD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YAED,oDAAoD;YACpD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,KAAK,GAAmB;gBAC5B,GAAG,MAAM;gBACT,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;aACtC,CAAC;YAEF,+DAA+D;YAC/D,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,oDAAoD,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC;YACnD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ;QAON,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/C,OAAO;YACL,GAAG,aAAa;YAChB,UAAU,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,IAAI,KAAK,GAA0B,IAAI,CAAC;AACxC,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,IAAI,qBAAqB,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,qBAAqB,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,aAAkC;IACzE,OAAO,IAAI,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,aAAa,GAAG,KAAK,CAAC;IACtB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;AAChD,CAAC"}