@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/security/authentications/controllers/auth-method-management-controller.backend.service.js

@@ -0,0 +1,215 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import 'reflect-metadata';
+import { injectable, inject } from 'inversify';
+import { z } from 'zod';
+import { AbstractControllerBackendService } from '../../../base-classes/services/controllers/abstract-controller.backend.service.js';
+import { LoggerService } from '../../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../../errors/services/error-builder.backend.service.js';
+import { ErrorHandlerService } from '../../../errors/services/error-handler.backend.service.js';
+import { AuthJwtGuardBackendService } from '../../../security/jwt/services/auth-jwt-guard.backend.service.js';
+import { AuthMethodManagementBackendService } from '../../../security/authentications/services/auth-methods/auth-method-management.backend.service.js';
+import { RateLimitBackendService } from '../../../errors/services/rate-limit.backend.service.js';
+import { AuthExecutionContextFactoryBackendService } from '../../../security/authentications/services/auth-execution-context-factory.backend.service.js';
+import { AuthControllerUtils } from '../../../security/authentications/services/utils/auth-controller.utils.js';
+import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
+import { AUTH_OPERATION } from '../../../security/authentications/models/auth-constants.backend.js';
+import { ErrorType, isWildoBackendError, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey, AuthMethod, WildoHeaderKeys, } from '@wildo-ai/saas-models';
+let AuthMethodManagementControllerBackendService = class AuthMethodManagementControllerBackendService extends AbstractControllerBackendService {
+    authJwtGuard;
+    methodManagementService;
+    rateLimitService;
+    authEcFactory;
+    constructor(logger, errorBuilder, errorHandler, authJwtGuard, methodManagementService, rateLimitService, authEcFactory) {
+        super(logger, errorBuilder, errorHandler, 'AuthMethodManagementController');
+        this.authJwtGuard = authJwtGuard;
+        this.methodManagementService = methodManagementService;
+        this.rateLimitService = rateLimitService;
+        this.authEcFactory = authEcFactory;
+    }
+    setupRoutes() {
+        this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_CHANGE], this.asyncHandler(this.handlePasswordChange.bind(this)));
+        this.logRouteRegistration('POST', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_CHANGE], 'Change password (requires current password)');
+        this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_SET], this.asyncHandler(this.handlePasswordSet.bind(this)));
+        this.logRouteRegistration('POST', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_PASSWORD_SET], 'Set password (passwordless users only)');
+        this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_TOTP_DISABLE], this.asyncHandler(this.handleTotpDisable.bind(this)));
+        this.logRouteRegistration('POST', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_MFA_TOTP_DISABLE], 'Disable TOTP MFA');
+        this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_METHODS_MINE], this.asyncHandler(this.handleGetMyMethods.bind(this)));
+        this.logRouteRegistration('GET', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_METHODS_MINE], 'Get enrolled auth methods');
+        this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTITY_LINKS_LIST], this.asyncHandler(this.handleGetIdentityLinks.bind(this)));
+        this.logRouteRegistration('GET', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTITY_LINKS_LIST], 'List identity links');
+        this.router.delete(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTITY_LINKS_UNLINK], this.asyncHandler(this.handleUnlinkIdentityLink.bind(this)));
+        this.logRouteRegistration('DELETE', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_IDENTITY_LINKS_UNLINK], 'Unlink identity link');
+        this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REAUTH], this.asyncHandler(this.handleReauth.bind(this)));
+        this.logRouteRegistration('POST', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_REAUTH], 'Re-authenticate for sensitive operations');
+    }
+    async handlePasswordChange(req, res) {
+        try {
+            const ipAddress = AuthControllerUtils.getClientIpFromRequest(req);
+            await this.rateLimitService.checkRateLimit(`auth:password_change:ip:${ipAddress}`, 5, 60);
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const { currentPassword, newPassword } = z.object({
+                currentPassword: z.string().min(1),
+                newPassword: z.string().min(1),
+            }).parse(req.body);
+            const userAgent = req.headers[WildoHeaderKeys.USER_AGENT] || 'unknown';
+            await this.methodManagementService.changePassword(ec, userId, currentPassword, newPassword, ipAddress, userAgent);
+            this.jsonSuccess(res, { changed: true });
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.PASSWORD_CHANGE },
+            });
+        }
+    }
+    async handlePasswordSet(req, res) {
+        try {
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const { newPassword } = z.object({
+                newPassword: z.string().min(1),
+            }).parse(req.body);
+            const ipAddress = AuthControllerUtils.getClientIpFromRequest(req);
+            const userAgent = req.headers[WildoHeaderKeys.USER_AGENT] || 'unknown';
+            await this.methodManagementService.setPassword(ec, userId, newPassword, ipAddress, userAgent);
+            this.jsonSuccess(res, { set: true });
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.PASSWORD_SET },
+            });
+        }
+    }
+    async handleTotpDisable(req, res) {
+        try {
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const reAuthToken = req.headers[WildoHeaderKeys.REAUTH_TOKEN];
+            const ipAddress = AuthControllerUtils.getClientIpFromRequest(req);
+            const userAgent = req.headers[WildoHeaderKeys.USER_AGENT] || 'unknown';
+            await this.methodManagementService.disableTotp(ec, userId, reAuthToken, ipAddress, userAgent);
+            this.jsonSuccess(res, { disabled: true });
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.TOTP_DISABLE },
+            });
+        }
+    }
+    async handleGetMyMethods(req, res) {
+        try {
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const result = await this.methodManagementService.getMyMethods(ec, userId);
+            this.jsonSuccess(res, result);
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.GET_MY_METHODS },
+            });
+        }
+    }
+    async handleGetIdentityLinks(req, res) {
+        try {
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const result = await this.methodManagementService.getIdentityLinks(ec, userId);
+            this.jsonSuccess(res, result);
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.GET_IDENTITY_LINKS },
+            });
+        }
+    }
+    async handleUnlinkIdentityLink(req, res) {
+        try {
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const linkId = req.params.linkId;
+            if (!linkId) {
+                throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
+                    context: { reason: 'linkId parameter is required' },
+                });
+            }
+            const ipAddress = AuthControllerUtils.getClientIpFromRequest(req);
+            const userAgent = req.headers[WildoHeaderKeys.USER_AGENT] || 'unknown';
+            await this.methodManagementService.unlinkIdentityLink(ec, userId, linkId, ipAddress, userAgent);
+            this.jsonSuccess(res, { unlinked: true });
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.UNLINK_IDENTITY_LINK },
+            });
+        }
+    }
+    async handleReauth(req, res) {
+        try {
+            const ipAddress = AuthControllerUtils.getClientIpFromRequest(req);
+            await this.rateLimitService.checkRateLimit(`auth:reauth:ip:${ipAddress}`, 5, 60);
+            const { userId, ec } = await this._extractUserAndCreateEc(req);
+            const { method, password, passkeyResponse } = z.object({
+                method: z.enum([AuthMethod.PASSWORD, AuthMethod.PASSKEY]),
+                password: z.string().optional(),
+                passkeyResponse: z.record(z.string(), z.unknown()).optional(),
+            }).parse(req.body);
+            const userAgent = req.headers[WildoHeaderKeys.USER_AGENT] || 'unknown';
+            const result = await this.methodManagementService.reAuthenticate(ec, userId, method, password, passkeyResponse, ipAddress, userAgent);
+            this.jsonSuccess(res, result);
+        }
+        catch (error) {
+            if (isWildoBackendError(error))
+                throw error;
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: { operation: AUTH_OPERATION.REAUTH },
+            });
+        }
+    }
+    /**
+     * Extract authenticated user from JWT, then create an attributed EC for the operation.
+     * Uses a pre-auth EC for JWT validation (minimal privilege), then creates an
+     * authenticated EC with the extracted userId for the actual service calls.
+     */
+    async _extractUserAndCreateEc(req) {
+        const guardEc = await this.authEcFactory.createForPreAuthOperation(this.authEcFactory.getUsersReadOperationPath());
+        const { userId } = await this.authJwtGuard.extractAuthenticatedUser(guardEc, req);
+        const ec = await this.authEcFactory.createForAuthenticatedAuthOperation(userId, this.authEcFactory.getUsersReadOperationPath());
+        return { userId, ec };
+    }
+};
+AuthMethodManagementControllerBackendService = __decorate([
+    injectable(),
+    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
+    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
+    __param(2, inject(SAAS_SERVICE_TYPES.ErrorHandlerService)),
+    __param(3, inject(SAAS_SERVICE_TYPES.AuthJwtGuardService)),
+    __param(4, inject(SAAS_SERVICE_TYPES.AuthMethodManagementService)),
+    __param(5, inject(SAAS_SERVICE_TYPES.RateLimitBackendService)),
+    __param(6, inject(SAAS_SERVICE_TYPES.AuthExecutionContextFactory)),
+    __metadata("design:paramtypes", [LoggerService,
+        ErrorBuilderBackendService,
+        ErrorHandlerService,
+        AuthJwtGuardBackendService,
+        AuthMethodManagementBackendService,
+        RateLimitBackendService,
+        AuthExecutionContextFactoryBackendService])
+], AuthMethodManagementControllerBackendService);
+export { AuthMethodManagementControllerBackendService };
+//# sourceMappingURL=auth-method-management-controller.backend.service.js.map

package/dist/esm/security/authentications/controllers/auth-method-management-controller.backend.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-management-controller.backend.service.js","sourceRoot":"","sources":["../../../../../src/security/authentications/controllers/auth-method-management-controller.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yEAAyE,CAAC;AACrH,OAAO,EAAE,kCAAkC,EAAE,MAAM,0GAA0G,CAAC;AAC9J,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AACxG,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,mBAAmB,EAAE,MAAM,kFAAkF,CAAC;AACvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,2EAA2E,CAAC;AAC3G,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,6BAA6B,EAC7B,wBAAwB,EACxB,UAAU,EACV,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAIxB,IAAM,4CAA4C,GAAlD,MAAM,4CAA6C,SAAQ,gCAAgC;IAC/E,YAAY,CAA6B;IACzC,uBAAuB,CAAqC;IAC5D,gBAAgB,CAA0B;IAC1C,aAAa,CAA4C;IAE1E,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACjC,YAAwC,EAChC,uBAA2D,EAC/D,gBAAyC,EACrC,aAAwD;QAEhH,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,gCAAgC,CAAC,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAES,WAAW;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxJ,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,EAAE,6CAA6C,CAAC,CAAC;QAE/J,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClJ,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,wCAAwC,CAAC,CAAC;QAEvJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtJ,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAErI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClJ,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAEzI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7J,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1I,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpK,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAEhJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvI,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,0CAA0C,CAAC,CAAC;IACrJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa;QAC5D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,2BAA2B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1F,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;gBAChD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aAC/B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAY,IAAI,SAAS,CAAC;YACnF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAClH,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,eAAe,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY,EAAE,GAAa;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;gBAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aAC/B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,SAAS,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAY,IAAI,SAAS,CAAC;YACnF,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9F,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY,EAAE,GAAa;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,YAAY,CAAuB,CAAC;YACpF,MAAM,SAAS,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAY,IAAI,SAAS,CAAC;YACnF,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9F,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAY,EAAE,GAAa;QAC1D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,cAAc,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,GAAY,EAAE,GAAa;QAC9D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/E,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,kBAAkB,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,GAAY,EAAE,GAAa;QAChE,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAA4B,CAAC;YACvD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;oBAClE,OAAO,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAY,IAAI,SAAS,CAAC;YACnF,MAAM,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAChG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,oBAAoB,EAAE;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa;QACpD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,kBAAkB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACjF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;gBACrD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC/B,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;aAC9D,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAY,IAAI,SAAS,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YACtI,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,uBAAuB,CAAC,GAAY;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,IAAI,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mCAAmC,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC,CAAC;QAChI,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxB,CAAC;CACF,CAAA;AAlLY,4CAA4C;IADxD,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;qCANZ,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QACnB,0BAA0B;QACP,kCAAkC;QAC7C,uBAAuB;QACtB,yCAAyC;GAbvG,4CAA4C,CAkLxD"}