npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.0.1 - Mend

@wildo-ai/saas-backend-lib 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1747) hide show

package/dist/esm/security/authentications/services/auth-methods/oauth2-connection-resolver.backend.service.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"oauth2-connection-resolver.backend.service.js","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/auth-methods/oauth2-connection-resolver.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;;;;;;AAEH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,oCAAoC,EAAE,MAAM,2GAA2G,CAAC;AACjK,OAAO,EAAE,2BAA2B,EAAE,MAAM,kGAAkG,CAAC;AAC/I,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,gBAAgB,EAChB,aAAa,EACb,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,2EAA2E,CAAC;AACxG,OAAO,EAAE,gBAAgB,GAAG,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAQ9F,OAAO,GAAG,MAAM,cAAc,CAAC;AAgB/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8C,CAAC;AAC7E,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAEzD,SAAS,kCAAkC,CACzC,WAAmB,EACnB,QAAgB,EAChB,MAAmC;IAEnC,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,GAAG,CAAC;IACpB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QAC5C,SAAS,EAAE,MAAM,CAAC,SAA0B;QAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,QAAQ;QACxB,SAAS,EAAE,MAAM,CAAC,kBAAkB;KACrC,CAAC,CAAC;IAEH,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AAEI,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IAIK;IACU;IACG;IACa;IACI;IAChB;IACU;IAT7D,QAAQ,CAA+D;IAExF,YACsD,MAAqB,EACX,gBAAyC,EACtC,YAAwC,EAC3B,yBAAkE,EAC9D,gBAAsD,EACtE,aAA0C,EAChC,uBAA8D;QANtF,WAAM,GAAN,MAAM,CAAe;QACX,qBAAgB,GAAhB,gBAAgB,CAAyB;QACtC,iBAAY,GAAZ,YAAY,CAA4B;QAC3B,8BAAyB,GAAzB,yBAAyB,CAAyC;QAC9D,qBAAgB,GAAhB,gBAAgB,CAAsC;QACtE,kBAAa,GAAb,aAAa,CAA6B;QAChC,4BAAuB,GAAvB,uBAAuB,CAAuC;QAE1I,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,kEAAkE;IAClE,+BAA+B;IAC/B,kEAAkE;IAElE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,KAAK,CAAC,uBAAuB,CAClC,WAAmB,EACnB,OAAqF;QAErF,IAAI,CAAC,QAAQ,CAAC,6BAA6B,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzF,iCAAiC;QACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE;gBACjE,sBAAsB,EAAE,2BAA2B,CAAC,SAAS;gBAC7D,OAAO,EAAE,EAAE,OAAO,EAAE,oBAAoB,WAAW,kCAAkC,EAAE;aACxF,CAAC,CAAC;QACL,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sCAAsC,CAAC,UAAU,CACpE,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,WAAW,wCAAwC,EAAE;aACvF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,oBAA2C,CAAC;QACvE,MAAM,SAAS,GAAG,MAAM,EAAE,gBAAgB,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,WAAW,+CAA+C,EAAE;aAC9F,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC/C,MAAM,iBAAiB,GAAG,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,WAAW,uCAAuC,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;QAED,kEAAkE;QAClE,MAAM,eAAe,GAAG,SAAS,CAAC,+BAA+B,EAAE,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,eAAe,EAAE,CAAC,sCAAsC,CAAC,UAAU,CAAoC,CAAC;QAE/H,IAAI,QAAQ,GAAG,cAAc,EAAE,UAAU,EAAE,QAAQ;eAC9C,cAAc,EAAE,QAAQ;eACxB,SAAS,EAAE,QAAQ,CAAC;QAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,yCAAyC,WAAW,GAAG,EAAE;aAC9E,CAAC,CAAC;QACL,CAAC;QAED,qEAAqE;QACrE,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,SAAS,IAAI,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;QACzF,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,GAAG,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAC7D,WAAW,EACX,sCAAsC,CAAC,UAAU,EACjD,SAAS,CACV,IAAI,EAAE,CAAC;QACV,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,0DAA0D,WAAW,2BAA2B,SAAS,IAAI,EAAE;aACpI,CAAC,CAAC;QACL,CAAC;QAED,oDAAoD;QACpD,oFAAoF;QACpF,0EAA0E;QAC1E,EAAE;QACF,iFAAiF;QACjF,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,sBAA0C,CAAC;QAC/C,IAAI,uBAA2C,CAAC;QAChD,IAAI,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,YAAY,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBACpG,MAAM,SAAS,GAAG,SAAS,EAAE,yBAAyB,CAAC;gBACvD,MAAM,QAAQ,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;gBACrE,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;oBAC7B,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;oBACrC,sBAAsB,GAAG,QAAQ,CAAC,cAAc,CAAC;oBACjD,uBAAuB,GAAG,QAAQ,CAAC,eAAe,CAAC;oBACnD,IAAI,CAAC,QAAQ,CAAC,+CAA+C,EAAE;wBAC7D,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;qBACjD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,gEAAgE,EAAE;oBAC9E,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;iBACjD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,mFAAmF;QACnF,oFAAoF;QACpF,qCAAqC;QACrC,EAAE;QACF,qFAAqF;QACrF,8EAA8E;QAC9E,0EAA0E;QAC1E,kFAAkF;QAClF,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC;QAC9C,IAAI,UAAU,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,UAAU,CAAC,qBAA+B,CAAC;YAC7D,MAAM,QAAQ,GAAG,UAAU,CAAC,oBAA8B,CAAC;YAC3D,MAAM,kBAAkB,GAAG,UAAU,CAAC,8BAAwC,CAAC;YAE/E,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;oBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;oBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,WAAW,kJAAkJ,EAAE;iBACjM,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAI,UAAU,CAAC,eAA0B,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC;YACnG,MAAM,QAAQ,GAAI,UAAU,CAAC,cAAyB,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,SAAS,CAAC;YAChG,MAAM,MAAM,GAAG,uBAAuB,IAAI,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CACxF,WAAW,EACX,sCAAsC,CAAC,UAAU,EACjD,SAAS,CACV,CAAC;YACF,MAAM,KAAK,GAAG,sBAAsB,IAAI,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CACtF,WAAW,EACX,sCAAsC,CAAC,UAAU,EACjD,QAAQ,CACT,CAAC;YAEF,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9F,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;oBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;oBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,WAAW,yDAAyD,OAAO,EAAE,EAAE;iBACjH,CAAC,CAAC;YACL,CAAC;YAED,YAAY,GAAG,kCAAkC,CAC/C,WAAW,EACX,QAAQ,EACR,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAC/F,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,oCAAoC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,wEAAwE;QACxE,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;QAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,6FAA6F,EAAE;aACpH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,SAAS,gCAAgC,WAAW,EAAE,CAAC;QAE9E,mCAAmC;QACnC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;QAEhD,6BAA6B;QAC7B,MAAM,uBAAuB,GAAG,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;QAEzG,0DAA0D;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAEzE,kBAAkB;QAClB,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QAErF,cAAc;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAExD,6DAA6D;QAC7D,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;QAC5D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAErE,kBAAkB;QAClB,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QAE1F,mBAAmB;QACnB,MAAM,eAAe,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,gBAAgB,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;QAE3E,0CAA0C;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,MAA4B;eACjD,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpH,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAElC,MAAM,UAAU,GAA6B;YAC3C,MAAM,EAAE,WAAW,CAAC,IAAI;YACxB,cAAc,EAAE,QAAQ;YACxB,WAAW;YACX,WAAW,EAAE,iBAAiB,CAAC,WAAW,IAAI,SAAS,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YAC3F,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW;YACX,MAAM;YACN,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,uBAAuB;YACvB,MAAM;YACN,UAAU;YACV,YAAY;YACZ,cAAc;YACd,cAAc;YACd,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YACtF,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YACzF,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;YAClG,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;YAC1C,WAAW;YACX,cAAc,EAAE,QAAQ;YACxB,YAAY;YACZ,cAAc;YACd,UAAU;YACV,UAAU,EAAE,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,6CAA6C;IAC7C,kEAAkE;IAElE;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,2BAA2B,CACtC,EAAyB,EACzB,SAAwB,EACxB,OAAe,EACf,YAAoB;QAEpB,IAAI,CAAC,QAAQ,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvF,qDAAqD;QACrD,MAAM,gBAAgB,GAAG,SAAS,KAAK,aAAa,CAAC,YAAY;YAC/D,CAAC,CAAC,gBAAgB,CAAC,4BAA4B;YAC/C,CAAC,CAAC,gBAAgB,CAAC,2BAA2B,CAAC;QAEjD,MAAM,WAAW,GAAG,SAAS,KAAK,aAAa,CAAC,YAAY;YAC1D,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE;YAC7B,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAoB,gBAAgB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;QAE9I,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE;gBACjE,sBAAsB,EAAE,2BAA2B,CAAC,SAAS;gBAC7D,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,YAAY,8BAA8B,SAAS,KAAK,OAAO,GAAG,EAAE;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,+FAA+F;QAC/F,IAAI,aAAa,CAAC,QAAQ,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,yHAAyH,EAAE;aAChJ,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,YAAY,yDAAyD,EAAE;aAC/G,CAAC,CAAC;QACL,CAAC;QAED,yEAAyE;QACzE,MAAM,UAAU,GAAwB;YACtC,GAAG,aAAa,CAAC,IAAI;YACrB,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;YACpD,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,YAAY,EAAE,aAAa,CAAC,YAAY;SACzC,CAAC;QAEF,6CAA6C;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,QAAQ,CAAC;QACzD,IAAI,gBAAwB,CAAC;QAC7B,IAAI,QAAgB,CAAC;QACrB,IAAI,WAA+B,CAAC;QACpC,IAAI,OAA2B,CAAC;QAChC,IAAI,kBAAsC,CAAC;QAC3C,IAAI,MAA0B,CAAC;QAC/B,IAAI,MAAgB,CAAC;QACrB,IAAI,eAAmD,CAAC;QACxD,IAAI,UAAU,GAA4B,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEjI,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,UAAU;gBACb,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE;oBACpH,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC1D,MAAM;YAER,KAAK,WAAW;gBACd,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE;oBACvF,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC/C,MAAM;YAER,KAAK,QAAQ,CAAC;YACd;gBACE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE;oBACvF,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACtC,MAAM;QACV,CAAC;QAED,uCAAuC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;QAC/F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,6FAA6F,EAAE;aACpH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,UAAU,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;QACvE,MAAM,WAAW,GAAG,GAAG,SAAS,gCAAgC,WAAW,EAAE,CAAC;QAE9E,sDAAsD;QACtD,MAAM,cAAc,GAAG,IAAI,CAAC,6BAA6B,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAEpF,yBAAyB;QACzB,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,OAAO,CAAC;QAExD,uCAAuC;QACvC,MAAM,UAAU,GAA6B;YAC3C,MAAM,EAAE,WAAW,CAAC,IAAI;YACxB,cAAc,EAAE,YAAY;YAC5B,WAAW;YACX,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,gBAAgB;YAChB,QAAQ;YACR,WAAW;YACX,WAAW;YACX,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,uBAAuB,EAAE,oBAAoB;YAC7C,MAAM;YACN,UAAU;YACV,YAAY,EAAE,YAAkD;YAChE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACrD,cAAc;YACd,eAAe;YACf,YAAY,EAAE;gBACZ,cAAc,EAAE,OAAO;gBACvB,SAAS;gBACT,OAAO;gBACP,YAAY;gBACZ,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,YAAY,EAAE,UAAU,CAAC,YAAY;aACtC;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,gCAAgC,EAAE;YAC9C,SAAS;YACT,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,WAAW;YACX,cAAc,EAAE,CAAC,CAAC,WAAW;SAC9B,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,mCAAmC;IACnC,kEAAkE;IAElE;;;OAGG;IACK,KAAK,CAAC,mBAAmB,CAC/B,UAA+B,EAC/B,iBAA0C;QAO1C,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACzD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,mDAAmD,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE;gBACjE,sBAAsB,EAAE,2BAA2B,CAAC,SAAS;gBAC7D,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,kBAAkB,kCAAkC,EAAE;aACxF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sCAAsC,CAAC,UAAU,CAClE,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,kBAAkB,wCAAwC,EAAE;aAC9F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,oBAA2C,CAAC;QACvE,MAAM,SAAS,GAAG,MAAM,EAAE,gBAAgB,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,kBAAkB,+CAA+C,EAAE;aACrG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC;QAClD,MAAM,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAE7D,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACpG,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW;YACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,iBAAiB,CAAC;YACjF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO;YAC/B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAC7E,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,oBAAoB,GAAG,SAAS,CAAC,YAAY,CAAC;QACpD,MAAM,kBAAkB,GAAG,SAAS,CAAC,CAAC,8CAA8C;QAEpF,6CAA6C;QAC7C,MAAM,MAAM,GAAG,oBAAoB;YACjC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACnC,oBAAoB,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,EACrE,iBAAiB,CAClB;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,gDAAgD;QAChD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACxF,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAEvF,8CAA8C;QAC9C,IAAI,eAAmD,CAAC;QACxD,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC9B,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,SAAS,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC3G,CAAC;QAED,kCAAkC;QAClC,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,mBAAmB,KAAK,OAAO,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAEvJ,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;IAC/H,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAChC,UAA+B;QAM/B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAErE,OAAO;YACL,gBAAgB,EAAE,GAAG,CAAC,sBAAsB;YAC5C,QAAQ,EAAE,GAAG,CAAC,cAAc;YAC5B,WAAW,EAAE,GAAG,CAAC,iBAAiB;YAClC,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;YAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,UAA+B;QAM/B,IAAI,CAAC,UAAU,CAAC,qBAAqB,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YACnE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;gBACrF,OAAO,EAAE,EAAE,OAAO,EAAE,sEAAsE,EAAE;aAC7F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAErE,OAAO;YACL,gBAAgB,EAAE,UAAU,CAAC,qBAAqB;YAClD,QAAQ,EAAE,UAAU,CAAC,aAAa;YAClC,WAAW,EAAE,UAAU,CAAC,gBAAgB;YACxC,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;YACjD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,6BAA6B,CAAC,aAAkC;QACtE,MAAM,CAAC,GAAG,aAAa,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,SAAS;YAChB,aAAa,EAAE,gBAAgB;YAC/B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,6CAA6C;IAC7C,kEAAkE;IAElE;;;;;;;;;OASG;IACI,KAAK,CAAC,iBAAiB,CAC5B,EAAyB,EACzB,SAAwB,EACxB,OAAe,EACf,WAAmB;QAEnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,CAAE,SAAiB,EAAE,0BAA0B,EAAE,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,YAAY,GAAI,SAAiB,CAAC,0BAA0B,CAAC;QAEnE,oEAAoE;QACpE,IAAI,YAAY,CAAC,wBAAwB,IAAI,YAAY,CAAC,0BAA0B,EAAE,CAAC;YACrF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QACjF,CAAC;QAED,IAAI,YAAY,CAAC,gBAAgB,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAC9E,CAAC;QAED,IAAI,YAAY,CAAC,gBAAgB,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAC1B,EAAyB,EACzB,SAAwB,EACxB,OAAe,EACf,YAAsB;QAEtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9B,CAAC,CAAC,CACH,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,kEAAkE;IAClE,2CAA2C;IAC3C,kEAAkE;IAElE;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,gBAAgB,CAC3B,EAAyB,EACzB,aAAuC;QAEvC,yEAAyE;QACzE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,cAAc,CAAC;QACtE,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEhG,IAAI,aAAa,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;oBAClE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;oBAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,uEAAuE,EAAE;iBAC9F,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,2BAA2B,CACrC,EAAE,EACF,SAAS,IAAI,aAAa,CAAC,YAAY,EACvC,OAAO,EACP,aAAa,CAAC,YAAY,CAC3B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACvE,EAAE;YACF,SAAS,EAAE,SAAS,IAAI,aAAa,CAAC,YAAY;YAClD,OAAO;SACR,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,CAAC;IAED,kEAAkE;IAClE,kBAAkB;IAClB,kEAAkE;IAE1D,8BAA8B,CACpC,MAAe;QAEf,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,qBAAqB;gBACxB,OAAO,qBAAqB,CAAC;YAC/B,KAAK,MAAM;gBACT,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,oBAAoB,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,eAAwC;QAExC,MAAM,IAAI,GAAG,eAAe,EAAE,aAAa,CAAC;QAC5C,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,WAAW,CAAC;QAC7C,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,qBAAqB,CAC3B,UAAmC,EACnC,WAAoB;QAEpB,IAAI,UAAU,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC;QAChE,IAAI,UAAU,CAAC,cAAc,KAAK,eAAe;YAAE,OAAO,eAAe,CAAC;QAC1E,IAAI,WAAW;YAAE,OAAO,UAAU,CAAC;QACnC,OAAO,UAAU,CAAC,CAAC,0CAA0C;IAC/D,CAAC;IAEO,iBAAiB,CACvB,YAAqC;QAErC,IAAI,CAAC,YAAY,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,mBAAyC,CAAC;QACzE,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO,MAAM,CAAC,CAAC,yCAAyC;IAC1D,CAAC;IAEO,mBAAmB,CACzB,kBAA2C,EAC3C,UAAoC;QAEpC,MAAM,OAAO,GAAG,kBAAkB,IAAI,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,KAAK;YACvB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACjC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,gBAAgB;YACxD,6EAA6E;YAC7E,SAAS,EAAE,UAAU,EAAE,cAAoC;YAC3D,QAAQ,EAAE,UAAU,EAAE,aAAmC;SAC1D,CAAC;IACJ,CAAC;CAEF,CAAA;AAtyBY,sCAAsC;IADlD,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAC3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAA;IAC/D,WAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAC/C,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;qCANE,aAAa;QACO,uBAAuB;QACxB,0BAA0B;QACA,uCAAuC;QAC5C,oCAAoC;QACvD,2BAA2B;GATnG,sCAAsC,CAsyBlD"}

package/dist/esm/security/authentications/services/auth-methods/saml-assertion-validator.backend.service.d.ts ADDED Viewed

@@ -0,0 +1,224 @@
+/**
+ * SAML Assertion Validator — Post-Signature Security Validation Chain
+ *
+ * Runs AFTER samlify's `sp.parseLoginResponse()` does initial signature
+ * verification. Performs additional structural, temporal, and identity
+ * validations that samlify doesn't cover.
+ *
+ * This is the most security-critical service in the entire SAML engine.
+ * Every check maps to a Security Checklist item (SC-*) and/or edge case (E*).
+ *
+ * Validation chain (ordered):
+ *   1.  Response structure: exactly 1 assertion (SC-13, E2)
+ *   2.  Response Destination matches ACS URL (SC-41)
+ *   3.  Signature algorithm — reject SHA-1 (SC-1)
+ *   3b. Multiple SignedInfo nodes per Signature — reject (SC-5)
+ *   4.  Transform restriction — reject XSLT/XPath (SC-6, E25)
+ *   5.  Audience restriction matches SP Entity ID (SC-7, E3)
+ *   6.  Timestamp validation with clock drift (SC-8, E4)
+ *   7.  InResponseTo validation (SC-9, E5, E6)
+ *   8.  Assertion replay via ReplayGuard (SC-10, E7)
+ *   9.  SubjectConfirmation Recipient + NotOnOrAfter (SC-11, SC-12)
+ *  10.  NameID extraction + comment stripping (SC-21, E23)
+ *  11.  NameID validation — reject empty/whitespace (SC-22, E26)
+ *  12.  NameID format — handle transient (SC-24, E29)
+ *  13.  Certificate expiry check/warning (SC-15, E8)
+ */
+import 'reflect-metadata';
+import { LoggerService } from '../../../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../../../errors/services/error-builder.backend.service.js';
+import { AuditLogsBackendService } from '../../../../compliance/audit-trails/services/audit-logs.backend.service.js';
+import { RedisService } from '../../../../databases/services/redis.service.js';
+import { SAMLReplayGuardBackendService } from './saml-replay-guard.backend.service.js';
+import { SAMLMetadataBackendService } from './saml-metadata.backend.service.js';
+import type { SAMLResolvedConnection, SAMLAssertionData, SAMLStateMetadata } from '../../../../security/authentications/models/saml-authentication.backend.schemas.js';
+/**
+ * Shape of samlify's `sp.parseLoginResponse()` result.
+ *
+ * Defined locally because samlify doesn't export a TypeScript type for this
+ * (it's a CJS library). Field names match samlify's `extractor.loginResponseFields`.
+ */
+export interface SamlifyParsedResponse {
+    samlContent: string;
+    extract: {
+        conditions?: {
+            notBefore?: string;
+            notOnOrAfter?: string;
+        };
+        response?: {
+            id?: string;
+            issueInstant?: string;
+            destination?: string;
+            inResponseTo?: string;
+        };
+        audience?: string;
+        issuer?: string;
+        nameID?: string;
+        sessionIndex?: {
+            authnInstant?: string;
+            sessionNotOnOrAfter?: string;
+            sessionIndex?: string;
+        };
+        attributes?: Record<string, string | string[]>;
+    };
+}
+export declare class SAMLAssertionValidatorBackendService {
+    private readonly replayGuard;
+    private readonly metadataService;
+    private readonly errorBuilder;
+    private readonly logger;
+    private readonly auditLogsService;
+    private readonly redisService;
+    private readonly logDebug;
+    constructor(replayGuard: SAMLReplayGuardBackendService, metadataService: SAMLMetadataBackendService, errorBuilder: ErrorBuilderBackendService, logger: LoggerService, auditLogsService: AuditLogsBackendService, redisService: RedisService);
+    /**
+     * Validate a parsed SAML response and extract assertion data.
+     *
+     * Runs the full validation chain AFTER samlify's signature verification.
+     * Throws typed errors on any validation failure. Returns `SAMLAssertionData` on success.
+     *
+     * @param parsedResponse  samlify's `sp.parseLoginResponse()` result
+     * @param connection      Resolved SAML connection config
+     * @param spEntityId      Our SP Entity ID for this scope
+     * @param acsUrl          Our ACS URL (for Destination + Recipient checks)
+     * @param stateMetadata   Present for SP-initiated flows (carries requestId for InResponseTo).
+     *                        Absent for IdP-initiated flows.
+     */
+    validateAssertion(parsedResponse: SamlifyParsedResponse, connection: SAMLResolvedConnection, spEntityId: string, acsUrl: string, stateMetadata?: SAMLStateMetadata): Promise<SAMLAssertionData>;
+    /**
+     * Step 1 — Exactly one `<Assertion>` element.
+     *
+     * Multiple assertions enable injection attacks (E2). Zero assertions
+     * means the response carries no identity claim.
+     */
+    private validateAssertionCount;
+    /**
+     * Step 2 — `<Response Destination>` must match our ACS URL.
+     *
+     * Prevents response forwarding across environments (SC-41).
+     * Distinct from `SubjectConfirmationData.Recipient` (SC-11).
+     */
+    private validateDestination;
+    /**
+     * Step 3 — Reject SHA-1 signature algorithms (SC-1).
+     *
+     * Inspects `<ds:SignatureMethod Algorithm="...">` in the verified XML.
+     * samlify verifies signatures using pinned certs but does not reject
+     * weak algorithms — we enforce this as a post-verification check.
+     */
+    private validateSignatureAlgorithm;
+    /**
+     * Step 4 — Reject disallowed signature transforms (SC-6, E25).
+     *
+     * Only enveloped-signature and exclusive/inclusive canonicalization are
+     * permitted. XSLT and XPath transforms enable code execution attacks.
+     */
+    private validateTransforms;
+    /**
+     * Step 3b — Reject multiple `<SignedInfo>` nodes within a single `<Signature>` (SC-5).
+     *
+     * CVE-2021-39171 root cause: unlimited signature processing. A single
+     * `<Signature>` must contain exactly one `<SignedInfo>`. Multiple nodes
+     * could confuse the verifier into checking the wrong reference.
+     */
+    private validateSignedInfoCount;
+    /**
+     * Step 5 — Audience restriction must match our SP Entity ID (SC-7, E3).
+     *
+     * samlify extracts the audience value but does not validate it against
+     * our entity ID.
+     */
+    private validateAudience;
+    /**
+     * Step 6 — Validate NotBefore / NotOnOrAfter with clock drift (SC-8, E4).
+     *
+     * samlify also checks this, but we re-validate with our exact drift config
+     * as defense-in-depth.
+     *
+     * Rules:
+     * - `now >= NotBefore - drift`   (server may be behind IdP)
+     * - `now <  NotOnOrAfter + drift` (server may be ahead of IdP)
+     */
+    private validateTimestamps;
+    /**
+     * Step 7 — InResponseTo validation (SC-9, E5, E6).
+     *
+     * SP-initiated:  InResponseTo MUST be present and match the stored AuthnRequest ID.
+     * IdP-initiated: InResponseTo MUST be absent.
+     */
+    private validateInResponseTo;
+    /**
+     * Step 8 — Assertion replay detection (SC-10, E7).
+     *
+     * Uses `SAMLReplayGuardBackendService` to atomically check-and-mark
+     * the assertion ID in Redis. TTL covers the assertion validity window
+     * plus clock drift, with a 5-minute floor.
+     */
+    private checkReplay;
+    /**
+     * Step 9 — SubjectConfirmation validation (SC-11, SC-12).
+     *
+     * Checks `<SubjectConfirmationData>`:
+     * - `Recipient` must match our ACS URL (SC-11)
+     * - `NotOnOrAfter` must not be in the past (SC-12)
+     * - `InResponseTo` must match stored request ID if SP-initiated
+     *
+     * At least one SubjectConfirmationData must pass all checks.
+     */
+    private validateSubjectConfirmation;
+    /**
+     * Step 11 — Reject empty or whitespace-only NameID (SC-22, E26).
+     */
+    private validateNameId;
+    /**
+     * Step 12 — Handle transient NameID format (SC-24, E29).
+     *
+     * Transient NameIDs change on every login and cannot be used for identity
+     * linking. A persistent attribute mapping (e.g., objectGUID → persistentId)
+     * must be configured in the connection.
+     */
+    private validateNameIdFormat;
+    /**
+     * Step 13 — Certificate expiry check (SC-15, E8).
+     *
+     * - Expired cert: reject only if ALL configured certs are expired (supports
+     *   rotation where old cert expires while new cert is valid).
+     * - Expiring soon (≤30 days): warn + emit SAML_CERT_EXPIRING audit event (rate-limited).
+     * - ≤7 days: error-level log.
+     */
+    private checkCertificateExpiry;
+    /**
+     * Emit SAML_CERT_EXPIRING audit event, rate-limited to once per hour per connection.
+     * Uses incrementRateLimit (CORE-9) — count > 1 means already warned.
+     */
+    private _emitCertExpiryAuditRateLimited;
+    /**
+     * Parse raw SAML XML using @xmldom/xmldom (transitive dep of samlify).
+     */
+    private parseXml;
+    /**
+     * Namespace-agnostic element search by local name.
+     * Uses `getElementsByTagNameNS('*', localName)` to match elements
+     * regardless of namespace prefix (saml:, saml2:, or unprefixed).
+     */
+    private getElementsByLocalName;
+    /**
+     * Extract the `ID` attribute from the `<Assertion>` element.
+     * Required for replay detection (SC-10).
+     */
+    private extractAssertionId;
+    /**
+     * Extract the `Format` attribute from `<NameID>` within the assertion.
+     * Returns empty string if not present (treated as unspecified format).
+     */
+    private extractNameIdFormat;
+    /**
+     * Strip XML comments from a value (SC-21, E23).
+     *
+     * Prevents comment injection attacks where `admin<!-- -->@evil.com`
+     * could be misinterpreted before/after comment removal.
+     */
+    private stripXmlComments;
+    private buildAuthError;
+}
+//# sourceMappingURL=saml-assertion-validator.backend.service.d.ts.map

package/dist/esm/security/authentications/services/auth-methods/saml-assertion-validator.backend.service.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"saml-assertion-validator.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/security/authentications/services/auth-methods/saml-assertion-validator.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,kBAAkB,CAAC;AAG1B,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AACzH,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AAGnF,OAAO,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,wFAAwF,CAAC;AA8B3K;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,UAAU,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3D,QAAQ,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/F,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,CAAC;YAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9F,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;KAChD,CAAC;CACH;AAMD,qBACa,oCAAoC;IAIM,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACb,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY;IARxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+D;gBAGlB,WAAW,EAAE,6BAA6B,EAC7C,eAAe,EAAE,0BAA0B,EAC3C,YAAY,EAAE,0BAA0B,EACrD,MAAM,EAAE,aAAa,EACX,gBAAgB,EAAE,uBAAuB,EAC7C,YAAY,EAAE,YAAY;IAMtF;;;;;;;;;;;;OAYG;IACU,iBAAiB,CAC5B,cAAc,EAAE,qBAAqB,EACrC,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,iBAAiB,GAChC,OAAO,CAAC,iBAAiB,CAAC;IA4F7B;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAoB9B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAqB3B;;;;;;OAMG;IACH,OAAO,CAAC,0BAA0B;IAclC;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAiB/B;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAqBxB;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA6C1B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;;;;;OAMG;YACW,WAAW;IAyCzB;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IAqDnC;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;IAkE9B;;;OAGG;YACW,+BAA+B;IAmC7C;;OAEG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAQ3B;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,cAAc;CAUvB"}