@webda/core 4.0.0-beta.3 → 4.0.0-beta.5

package/lib/services/authentication.service.d.ts

@@ -1,442 +0,0 @@
-import { Counter } from "../metrics/metrics.js";
-import { Ident } from "../models/ident.model.js";
-import type { User } from "../models/user.model.js";
-import { Service } from "../services/service.js";
-import type { OperationContext } from "../contexts/operationcontext.js";
-import { type HttpMethodType } from "../contexts/httpcontext.js";
-import type { CryptoService } from "./cryptoservice.service.js";
-import type { Mailer } from "./mailer.service.js";
-import { EventWithContext } from "../events/events.js";
-import { ServiceParameters } from "./serviceparameters.js";
-import { ServiceName } from "../core/hooks.js";
-import { WebContext } from "../contexts/webcontext.js";
-import type { ModelClass, Repository } from "@webda/models";
-/**
- * Emitted when the /me route is called
- */
-export interface EventAuthenticationGetMe<T extends User = User> extends EventWithContext {
-    user: T;
-}
-/**
- * Emitted when new user registered
- */
-export interface EventAuthenticationRegister<T extends User = User> extends EventAuthenticationGetMe<T> {
-    data: any;
-    identId: string;
-}
-/**
- * Emitted when user logout
- */
-export interface EventAuthenticationLogout extends EventWithContext {
-}
-/**
- * Sent when a user update his password
- */
-export interface EventAuthenticationPasswordUpdate<T extends User = User> extends EventAuthenticationGetMe<T> {
-    password: string;
-}
-/**
- * Emitted when user login
- */
-export interface EventAuthenticationLogin<T extends User = User> extends EventWithContext {
-    userId: string;
-    user?: T;
-    identId: string;
-    ident: Ident;
-}
-/**
- * Export when a user failed to authenticate with his password
- */
-export interface EventAuthenticationLoginFailed<T extends User = User> extends EventAuthenticationGetMe<T> {
-}
-/**
- * Implement a PasswordVerifier so you can implement
- * your own rules
- */
-export interface PasswordVerifier extends Service {
-    /**
-     * If the password is not valid, send a 400 exception or
-     * return false
-     *
-     * @param password to verify
-     * @param user to verify from
-     */
-    validate(password: string, user?: User): Promise<boolean>;
-}
-/**
- * Information required to reset a password
- */
-export interface PasswordRecoveryInfos {
-    /**
-     * Links are short lived
-     */
-    expire: number;
-    /**
-     * Generated token
-     */
-    token: string;
-    /**
-     * Login to reset password fors
-     */
-    login: string;
-}
-interface PasswordRecoveryBody extends PasswordRecoveryInfos {
-    /**
-     * Password to set
-     */
-    password: string;
-}
-/**
- * Login info
- *
- * If register = true, you can add many other information
- *
- * @SchemaAdditionalProperties
- */
-interface LoginBody {
-    login: string;
-    register?: boolean;
-    token?: string;
-    email?: string;
-    password?: string;
-}
-/** Parameters for the Authentication service including identity, email, and password settings */
-export declare class AuthenticationParameters extends ServiceParameters {
-    /**
-     * Idents store for authentication identifiers
-     *
-     * @default "Webda/Ident"
-     */
-    identModel?: string;
-    /**
-     * User store for authentication users
-     *
-     * @default "Webda/User"
-     */
-    userModel?: string;
-    /**
-     * @default "/auth"
-     */
-    url?: string;
-    /**
-     * Enable the email authentication
-     */
-    email?: {
-        /**
-         * Mailer service name
-         */
-        mailer?: ServiceName;
-        /**
-         * Allow user to create their account without validating their email first
-         */
-        postValidation: boolean;
-        /**
-         * Do not even validate the email at all
-         */
-        skipEmailValidation: boolean;
-        /**
-         * Minimal delay between two password recovery or validation email
-         *
-         * @default 3600000 * 4
-         */
-        delay: number;
-        /**
-         * When a delay is added between two attempt to authenticate
-         *
-         * @default 3
-         */
-        failedLoginBeforeDelay: number;
-    };
-    password: {
-        /**
-         * Password verifier Service name
-         */
-        verifier?: ServiceName;
-        /**
-         * Regexp that password must check
-         * @default "{8,}"
-         */
-        regexp?: string;
-    };
-    /**
-     * Number of salt iteration for bcrypt.hashSync
-     */
-    salt: string;
-    /**
-     * Redirect to this page when email validation failed
-     */
-    failureRedirect: string;
-    /**
-     * Redirect to this page when email validation succeed
-     */
-    successRedirect: string;
-    /**
-     * Redirect to this page once email is validate to finish the registration process
-     */
-    registerRedirect: string;
-    /**
-     * Load parameters with defaults for authentication URLs, models, and password policy
-     * @param params - the service parameters
-     * @returns this for chaining
-     */
-    load(params?: any): this;
-}
-export type AuthenticationEvents = {
-    "Authentication.GetMe": EventAuthenticationGetMe;
-    "Authentication.Register": EventAuthenticationRegister;
-    "Authentication.PasswordUpdate": EventAuthenticationPasswordUpdate;
-    "Authentication.Logout": EventAuthenticationLogout;
-    "Authentication.Login": EventAuthenticationLogin;
-    "Authentication.LoginFailed": EventAuthenticationLoginFailed;
-    "Authentication.PasswordCreate": EventAuthenticationPasswordUpdate;
-};
-/**
- * This class is known as the Authentication module
- * It handles OAuth for several providers for now (Facebook, Google, Amazon, GitHub and Twitter)
- * It also handles email authentication with prevalidation or postvalidation of the email
- *
- * It requires two Store to work one `idents` and one `users`
- *
- * The parameters are
- * ```
- *   providerName: {
- *     clientID: '...',
- *     clientSecret: '...',
- *     scope: ''
- *   },
- *   email: {
- *	    postValidation: true|false   // If postValidation=true, account created without email verification
- *   }
- *   url: 'url' // By default /auth
- * ```
- *
- * Core authentication service handling login, registration, password recovery, and email validation
- *
- * @category CoreServices
- * @WebdaModda
- */
-declare class Authentication<T extends AuthenticationParameters = AuthenticationParameters, E extends AuthenticationEvents = AuthenticationEvents> extends Service<T, E> {
-    /**
-     * Ident model to use
-     */
-    protected identModel: Repository<ModelClass<Ident>>;
-    /**
-     * User model to use
-     */
-    protected userModel: Repository<ModelClass<User>>;
-    /**
-     * Used for hmac
-     */
-    cryptoService: CryptoService;
-    /**
-     * Password verification system
-     */
-    _passwordVerifier: PasswordVerifier;
-    /**
-     *
-     */
-    providers: Set<string>;
-    metrics: {
-        login: Counter;
-        logout: Counter;
-        loginFailed?: Counter;
-        recovery?: Counter;
-        recovered?: Counter;
-        registration?: Counter;
-    };
-    /**
-     * Get user model
-     * @returns the result
-     */
-    getUserModel(): Repository<ModelClass<User>>;
-    /**
-     * Get ident model
-     * @returns the result
-     */
-    getIdentModel(): Repository<ModelClass<Ident>>;
-    /**
-     * @ignore
-     * Setup the default routes
-     */
-    computeParameters(): void;
-    /**
-     * @override
-     */
-    initMetrics(): void;
-    /**
-     * Add a provider to the oauth scheme
-     * @param name - the name to use
-     */
-    addProvider(name: string): void;
-    /**
-     * Ensure email is enabled for all emails routes
-     * @override
-     */
-    getUrl(url: string, methods: HttpMethodType[]): string;
-    /**
-     * Send or resend an email to validate the email address
-     *
-     * @param ctx - the operation context
-     * @throws 409 if ident is linked to someone else
-     * @throws 412 if the email is already validated
-     * @throws 429 if a validation email has been sent recently
-     */
-    _sendEmailValidation(ctx: any): Promise<void>;
-    /**
-     * Return current user
-     * @param ctx - the operation context
-     */
-    _getMe(ctx: OperationContext): Promise<void>;
-    /**
-     * Handle both list of available authentication
-     * and logout with method 'DELETE'
-     *
-     * @param ctx - the operation context
-     * @returns the result
-     */
-    _listAuthentications(ctx: WebContext): Promise<void>;
-    /**
-     * Handle login via an identity provider, creating or linking the ident to a user
-     * @param ctx - the operation context
-     * @param provider - the provider name
-     * @param identId - the identity identifier
-     * @param profile - the user profile
-     * @param tokens - the authentication tokens
-     */
-    onIdentLogin(ctx: WebContext, provider: string, identId: string, profile: any, tokens?: any): Promise<void>;
-    /**
-     * Create a new User with the link ident
-     * @param ident
-     *
-    async createUserWithIdent(provider: string, identId: string, profile: any = {}) {
-      if (await this.identModel.ref(`${identId}_${provider}`).exists()) {
-        throw new Error("Ident is already known");
-      }
-      const ctx = await this._webda.newWebContext(new HttpContext("fake", "GET", "/"));
-      // Pretend we logged in with the ident
-      await this.onIdentLogin(ctx, provider, identId, profile);
-    }
-      */
-    /**
-     * Create and register a new user, emitting a registration event
-     * @param ctx - the operation context
-     * @param data - the data to process
-     * @param identId - the identity identifier
-     * @param user - the user object
-     * @returns the result
-     */
-    registerUser(ctx: WebContext, data: any, identId: string, user?: User): Promise<User>;
-    /**
-     * Generate password recovery info (token and expiry) for a user
-     * @param uuid - the unique identifier
-     * @param interval - the interval
-     * @returns the result
-     */
-    getPasswordRecoveryInfos(uuid: string | User, interval?: number): Promise<PasswordRecoveryInfos>;
-    /**
-     * Manage password recovery
-     * @param ctx - the operation context
-     */
-    _passwordRecoveryEmail(ctx: WebContext): Promise<void>;
-    /**
-     * Verify that a password meets the configured policy or custom verifier
-     * @param password - the password
-     * @param user - the user object
-     */
-    _verifyPassword(password: string, user?: User): Promise<void>;
-    /**
-     * Handle password recovery: verify token and update the user's password
-     * @param ctx - the operation context
-     */
-    _passwordRecovery(ctx: WebContext<PasswordRecoveryBody>): Promise<void>;
-    /**
-     * Callback to validate an email address
-     * @param ctx - the operation context
-     * @returns the result
-     */
-    _handleEmailCallback(ctx: WebContext): Promise<void>;
-    /**
-     * Send an email to recover the user password
-     *
-     * @param ctx - the operation context
-     * @param user - the user object
-     * @param email - the email address
-     * @returns the result
-     */
-    sendRecoveryEmail(ctx: WebContext, user: any, email: string): Promise<any>;
-    /**
-     * Send an email to validate the user email by sending a unique link to
-     * his email
-     *
-     * @param ctx - the operation context
-     * @param email - the email address
-     * @returns the result
-     */
-    sendValidationEmail(ctx: WebContext, email: string): Promise<any>;
-    /**
-     * Check the password match the stored hash
-     * @param hash generate prior by hashPassword
-     * @param password as entered by the user
-     * @param pass - the password
-     * @returns true if the condition is met
-     */
-    checkPassword(hash?: string, pass?: string): boolean;
-    /**
-     * Hash the password according to good practices
-     *
-     * @param pass to hash
-     * @returns the result string
-     */
-    hashPassword(pass: string): string;
-    /**
-     * Logout user
-     * @param ctx - the operation context
-     */
-    logout(ctx: WebContext): Promise<void>;
-    /**
-     * Login a user
-     *
-     * @param ctx - the operation context
-     * @param user - the user object
-     * @param ident - the identity object
-     * @param provider - the provider name
-     * @returns the result
-     */
-    login(ctx: WebContext, user: User | string, ident: Ident, provider: string): Promise<void>;
-    /**
-     * Get the mailer service
-     * @returns the result
-     */
-    getMailMan(): Mailer;
-    /**
-     * Handle a user login request
-     *
-     * @param ctx - the operation context
-     * @param ident - the identity object
-     */
-    protected handleLogin(ctx: WebContext<LoginBody>, ident: Ident): Promise<void>;
-    /**
-     * Handle the POST /auth/email
-     *
-     * @param ctx - the operation context
-     * @returns the result
-     */
-    _handleEmail(ctx: WebContext<LoginBody>): Promise<any>;
-    /**
-     * Generate an HMAC-based token for email address validation
-     * @param user - the user object
-     * @param email - the email address
-     * @returns the result string
-     */
-    generateEmailValidationToken(user: string, email: string): Promise<string>;
-    /**
-     * Create a new User with the link ident
-     * @param ident - the identity object
-     * @param provider - the provider name
-     * @param identId - the identity identifier
-     * @param profile - the user profile
-     */
-    createUserWithIdent(provider: string, identId: string, profile?: any): Promise<void>;
-}
-export { Authentication };
-//# sourceMappingURL=authentication.service.d.ts.map

package/lib/services/authentication.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authentication.service.d.ts","sourceRoot":"","sources":["../../src/services/authentication.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAU,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAkC,WAAW,EAAqB,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,CAAE,SAAQ,gBAAgB;IACvF,IAAI,EAAE,CAAC,CAAC;CACT;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,CAAE,SAAQ,wBAAwB,CAAC,CAAC,CAAC;IACrG,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,gBAAgB;CAAG;AAEtE;;GAEG;AACH,MAAM,WAAW,iCAAiC,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,CAAE,SAAQ,wBAAwB,CAAC,CAAC,CAAC;IAC3G,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,CAAE,SAAQ,gBAAgB;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,CAAE,SAAQ,wBAAwB,CAAC,CAAC,CAAC;CAAG;AAE7G;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,OAAO;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,oBAAqB,SAAQ,qBAAqB;IAC1D;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,UAAU,SAAS;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iGAAiG;AACjG,qBAAa,wBAAyB,SAAQ,iBAAiB;IAC7D;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACK,GAAG,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,KAAK,CAAC,EAAE;QACN;;WAEG;QACH,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB;;WAEG;QACH,cAAc,EAAE,OAAO,CAAC;QACxB;;WAEG;QACH,mBAAmB,EAAE,OAAO,CAAC;QAC7B;;;;WAIG;QACH,KAAK,EAAE,MAAM,CAAC;QACd;;;;WAIG;QACH,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE;QACR;;WAEG;QACH,QAAQ,CAAC,EAAE,WAAW,CAAC;QACvB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,IAAI,CAAC,MAAM,GAAE,GAAQ,GAAG,IAAI,CAa3B;CACF;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,sBAAsB,EAAE,wBAAwB,CAAC;IACjD,yBAAyB,EAAE,2BAA2B,CAAC;IACvD,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,uBAAuB,EAAE,yBAAyB,CAAC;IACnD,sBAAsB,EAAE,wBAAwB,CAAC;IACjD,4BAA4B,EAAE,8BAA8B,CAAC;IAC7D,+BAA+B,EAAE,iCAAiC,CAAC;CACpE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,cAAM,cAAc,CAClB,CAAC,SAAS,wBAAwB,GAAG,wBAAwB,EAC7D,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,CACrD,SAAQ,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACrB;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD;;OAEG;IAEH,aAAa,EAAE,aAAa,CAAC;IAC7B;;OAEG;IACH,iBAAiB,EAAE,gBAAgB,CAAC;IACpC;;OAEG;IACH,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAqB;IAEnC,OAAO,EAAE;QACf,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,YAAY,iCAEX;IAED;;;OAGG;IACH,aAAa,kCAEZ;IAED;;;OAGG;IACH,iBAAiB,IAAI,IAAI,CA4ExB;IAED;;OAEG;IACH,WAAW,IAAI,IAAI,CA8BlB;IAED;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,QAEvB;IAED;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,UAK5C;IAED;;;;;;;OAOG;IAsBG,oBAAoB,CAAC,GAAG,KAAA,iBA4B7B;IAED;;;OAGG;IAQG,MAAM,CAAC,GAAG,EAAE,gBAAgB,iBAUjC;IAED;;;;;;OAMG;IAqBG,oBAAoB,CAAC,GAAG,EAAE,UAAU,iBAQzC;IAED;;;;;;;OAOG;IACG,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAE,GAAe,iBA4D3G;IAED;;;;;;;;;;;;QAYI;IAEJ;;;;;;;OAOG;IACG,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1F;IAED;;;;;OAKG;IACG,wBAAwB,CAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,QAAQ,SAA8B,GACrC,OAAO,CAAC,qBAAqB,CAAC,CAiBhC;IAED;;;OAGG;IACG,sBAAsB,CAAC,GAAG,EAAE,UAAU,iBAgB3C;IAED;;;;OAIG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,iBAWlD;IAED;;;OAGG;IACG,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,oBAAoB,CAAC,iBAyB5D;IAED;;;;OAIG;IAIG,oBAAoB,CAAC,GAAG,EAAE,UAAU,iBAmDzC;IAED;;;;;;;OAOG;IACG,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,KAAA,EAAE,KAAK,EAAE,MAAM,gBAgB3D;IAED;;;;;;;OAOG;IACG,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,gBAyBvD;IAED;;;;;;OAMG;IACH,aAAa,CAAC,IAAI,GAAE,MAAW,EAAE,IAAI,GAAE,MAAW,GAAG,OAAO,CAE3D;IAED;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjC;IAED;;;OAGG;IACG,MAAM,CAAC,GAAG,EAAE,UAAU,iBAK3B;IAED;;;;;;;;OAQG;IACG,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAkB/E;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAInB;IAED;;;;;OAKG;IACH,UAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,iBAgCnE;IAED;;;;;OAKG;IACG,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,gBA2F5C;IAED;;;;;OAKG;IACG,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE/E;IAED;;;;;;OAMG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,GAAQ,iBAM7E;CACF;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}