@workos-inc/node 10.10.0 → 10.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/{factory-2nVUxmEk.mjs → factory-AQv-AfDk.mjs} +236 -27
- package/lib/factory-AQv-AfDk.mjs.map +1 -0
- package/lib/{factory-vzr4nni7.d.cts → factory-CCkRzS83.d.cts} +1258 -1103
- package/lib/{factory-vzr4nni7.d.mts → factory-CCkRzS83.d.mts} +1258 -1103
- package/lib/{factory-CrK6SPfn.cjs → factory-CQfrl-3d.cjs} +241 -26
- package/lib/factory-CQfrl-3d.cjs.map +1 -0
- package/lib/index.cjs +9 -4
- package/lib/index.cjs.map +1 -1
- package/lib/index.d.cts +39 -39
- package/lib/index.d.mts +39 -39
- package/lib/index.mjs +9 -5
- package/lib/index.mjs.map +1 -1
- package/lib/index.worker.cjs +4 -2
- package/lib/index.worker.cjs.map +1 -1
- package/lib/index.worker.d.cts +2 -2
- package/lib/index.worker.d.mts +2 -2
- package/lib/index.worker.mjs +4 -3
- package/lib/index.worker.mjs.map +1 -1
- package/lib/{webapi-BgpV54gi.mjs → webapi-BlhUk1KL.mjs} +1415 -1734
- package/lib/webapi-BlhUk1KL.mjs.map +1 -0
- package/lib/{webapi-BzGFatFp.cjs → webapi-D3QZrB15.cjs} +1415 -1734
- package/lib/webapi-D3QZrB15.cjs.map +1 -0
- package/package.json +3 -3
- package/lib/factory-2nVUxmEk.mjs.map +0 -1
- package/lib/factory-CrK6SPfn.cjs.map +0 -1
- package/lib/webapi-BgpV54gi.mjs.map +0 -1
- package/lib/webapi-BzGFatFp.cjs.map +0 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"webapi-BlhUk1KL.mjs","names":["encode","encode","jwk.isJWK","jwk.isSecretJWK","jwk.isPrivateJWK","jwk.isPublicJWK","invalidKeyInput","encode","b64u","encode","b64u","encode","#plaintext","#keyManagementParameters","#protectedHeader","#sharedUnprotectedHeader","#unprotectedHeader","#aad","#cek","#iv","#parent","#plaintext","#recipients","#protectedHeader","#unprotectedHeader","#aad","b64u","encode","#payload","#flattened","b64u","encode","#payload","#protectedHeader","#unprotectedHeader","#flattened","#protectedHeader","#parent","#payload","#signatures","#jwt","#protectedHeader","#jwt","#protectedHeader","#keyManagementParameters","#cek","#iv","#replicateIssuerAsHeader","#replicateSubjectAsHeader","#replicateAudienceAsHeader","b64u","exportPublic","exportPrivate","encode","b64u","#jwks","#cached","#url","#timeoutDuration","#cooldownDuration","#cacheMaxAge","#headers","#customFetch","#cache","#jwksTimestamp","#local","#pendingFetch","#validFor","#jwt","b64u.encode","b64u.decode","decodeBase64URL","b64u"],"sources":["../node_modules/jose/dist/webapi/lib/buffer_utils.js","../node_modules/jose/dist/webapi/lib/crypto_key.js","../node_modules/jose/dist/webapi/lib/invalid_key_input.js","../node_modules/jose/dist/webapi/util/errors.js","../node_modules/jose/dist/webapi/lib/is_key_like.js","../node_modules/jose/dist/webapi/lib/content_encryption.js","../node_modules/jose/dist/webapi/lib/base64.js","../node_modules/jose/dist/webapi/util/base64url.js","../node_modules/jose/dist/webapi/lib/type_checks.js","../node_modules/jose/dist/webapi/lib/helpers.js","../node_modules/jose/dist/webapi/lib/jwk_to_key.js","../node_modules/jose/dist/webapi/lib/key.js","../node_modules/jose/dist/webapi/lib/key_descriptor.js","../node_modules/jose/dist/webapi/lib/jwe_algorithms.js","../node_modules/jose/dist/webapi/lib/key_management.js","../node_modules/jose/dist/webapi/lib/options.js","../node_modules/jose/dist/webapi/lib/deflate.js","../node_modules/jose/dist/webapi/lib/jwe_decrypt.js","../node_modules/jose/dist/webapi/jwe/compact/decrypt.js","../node_modules/jose/dist/webapi/jwe/flattened/decrypt.js","../node_modules/jose/dist/webapi/jwe/general/decrypt.js","../node_modules/jose/dist/webapi/lib/jwe_encrypt.js","../node_modules/jose/dist/webapi/jwe/flattened/encrypt.js","../node_modules/jose/dist/webapi/jwe/general/encrypt.js","../node_modules/jose/dist/webapi/lib/signing.js","../node_modules/jose/dist/webapi/lib/jws_algorithms.js","../node_modules/jose/dist/webapi/lib/jws_verify.js","../node_modules/jose/dist/webapi/jws/compact/verify.js","../node_modules/jose/dist/webapi/jws/flattened/verify.js","../node_modules/jose/dist/webapi/jws/general/verify.js","../node_modules/jose/dist/webapi/lib/jwt_claims_set.js","../node_modules/jose/dist/webapi/jwt/verify.js","../node_modules/jose/dist/webapi/jwt/decrypt.js","../node_modules/jose/dist/webapi/jwe/compact/encrypt.js","../node_modules/jose/dist/webapi/lib/jws_sign.js","../node_modules/jose/dist/webapi/jws/flattened/sign.js","../node_modules/jose/dist/webapi/jws/compact/sign.js","../node_modules/jose/dist/webapi/jws/general/sign.js","../node_modules/jose/dist/webapi/jwt/sign.js","../node_modules/jose/dist/webapi/jwt/encrypt.js","../node_modules/jose/dist/webapi/lib/key_algorithm.js","../node_modules/jose/dist/webapi/lib/asn1.js","../node_modules/jose/dist/webapi/key/export.js","../node_modules/jose/dist/webapi/jwk/thumbprint.js","../node_modules/jose/dist/webapi/jwk/embedded.js","../node_modules/jose/dist/webapi/jwks/local.js","../node_modules/jose/dist/webapi/jwks/remote.js","../node_modules/jose/dist/webapi/jwt/unsecured.js","../node_modules/jose/dist/webapi/key/import.js","../node_modules/jose/dist/webapi/util/decode_protected_header.js","../node_modules/jose/dist/webapi/util/decode_jwt.js","../node_modules/jose/dist/webapi/key/generate_key_pair.js","../node_modules/jose/dist/webapi/key/generate_secret.js","../node_modules/jose/dist/webapi/index.js"],"sourcesContent":["export const encoder = new TextEncoder();\nexport const decoder = new TextDecoder();\nexport const strictDecoder = new TextDecoder('utf-8', { fatal: true });\nconst MAX_INT32 = 2 ** 32;\nexport function concat(...buffers) {\n const size = buffers.reduce((acc, { length }) => acc + length, 0);\n const buf = new Uint8Array(size);\n let i = 0;\n for (const buffer of buffers) {\n buf.set(buffer, i);\n i += buffer.length;\n }\n return buf;\n}\nfunction writeUInt32BE(buf, value, offset) {\n if (value < 0 || value >= MAX_INT32) {\n throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);\n }\n buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);\n}\nexport function uint64be(value) {\n const high = Math.floor(value / MAX_INT32);\n const low = value % MAX_INT32;\n const buf = new Uint8Array(8);\n writeUInt32BE(buf, high, 0);\n writeUInt32BE(buf, low, 4);\n return buf;\n}\nexport function uint32be(value) {\n const buf = new Uint8Array(4);\n writeUInt32BE(buf, value);\n return buf;\n}\nexport function encode(string) {\n const bytes = new Uint8Array(string.length);\n for (let i = 0; i < string.length; i++) {\n const code = string.charCodeAt(i);\n if (code > 127) {\n throw new TypeError('non-ASCII string encountered in encode()');\n }\n bytes[i] = code;\n }\n return bytes;\n}\n","const unusable = (name, prop = 'algorithm.name') => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);\nexport function checkUsage(key, usage) {\n if (usage && !key.usages.includes(usage)) {\n throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);\n }\n}\nexport function checkModulusLength(alg, key) {\n const { modulusLength } = key.algorithm;\n if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);\n }\n}\nexport function checkCryptoKey(key, expected, usage) {\n const algorithm = key.algorithm;\n if (algorithm.name !== expected.name) {\n throw unusable(expected.name);\n }\n if (expected.hash && algorithm.hash?.name !== expected.hash) {\n throw unusable(expected.hash, 'algorithm.hash');\n }\n if (expected.namedCurve && algorithm.namedCurve !== expected.namedCurve) {\n throw unusable(expected.namedCurve, 'algorithm.namedCurve');\n }\n if (expected.length !== undefined && algorithm.length !== expected.length) {\n throw unusable(expected.length, 'algorithm.length');\n }\n checkUsage(key, usage);\n}\n","function message(msg, actual, ...types) {\n if (types.length > 2) {\n const last = types.pop();\n msg += `one of type ${types.join(', ')}, or ${last}.`;\n }\n else if (types.length === 2) {\n msg += `one of type ${types[0]} or ${types[1]}.`;\n }\n else {\n msg += `of type ${types[0]}.`;\n }\n if (actual == null) {\n msg += ` Received ${actual}`;\n }\n else if (typeof actual === 'function' && actual.name) {\n msg += ` Received function ${actual.name}`;\n }\n else if (typeof actual === 'object' && actual != null) {\n if (actual.constructor?.name) {\n msg += ` Received an instance of ${actual.constructor.name}`;\n }\n }\n return msg;\n}\nexport const invalidKeyInput = (actual, ...types) => message('Key must be ', actual, ...types);\nexport const withAlg = (alg, actual, ...types) => message(`Key for the ${alg} algorithm must be `, actual, ...types);\n","export class JOSEError extends Error {\n static code = 'ERR_JOSE_GENERIC';\n code = 'ERR_JOSE_GENERIC';\n constructor(message, options) {\n super(message, options);\n this.name = this.constructor.name;\n Error.captureStackTrace?.(this, this.constructor);\n }\n}\nexport class JWTClaimValidationFailed extends JOSEError {\n static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';\n claim;\n reason;\n payload;\n constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n super(message, { cause: { claim, reason, payload } });\n this.claim = claim;\n this.reason = reason;\n this.payload = payload;\n }\n}\nexport class JWTExpired extends JOSEError {\n static code = 'ERR_JWT_EXPIRED';\n code = 'ERR_JWT_EXPIRED';\n claim;\n reason;\n payload;\n constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {\n super(message, { cause: { claim, reason, payload } });\n this.claim = claim;\n this.reason = reason;\n this.payload = payload;\n }\n}\nexport class JOSEAlgNotAllowed extends JOSEError {\n static code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n code = 'ERR_JOSE_ALG_NOT_ALLOWED';\n}\nexport class JOSENotSupported extends JOSEError {\n static code = 'ERR_JOSE_NOT_SUPPORTED';\n code = 'ERR_JOSE_NOT_SUPPORTED';\n}\nexport class JWEDecryptionFailed extends JOSEError {\n static code = 'ERR_JWE_DECRYPTION_FAILED';\n code = 'ERR_JWE_DECRYPTION_FAILED';\n constructor(message = 'decryption operation failed', options) {\n super(message, options);\n }\n}\nexport class JWEInvalid extends JOSEError {\n static code = 'ERR_JWE_INVALID';\n code = 'ERR_JWE_INVALID';\n}\nexport class JWSInvalid extends JOSEError {\n static code = 'ERR_JWS_INVALID';\n code = 'ERR_JWS_INVALID';\n}\nexport class JWTInvalid extends JOSEError {\n static code = 'ERR_JWT_INVALID';\n code = 'ERR_JWT_INVALID';\n}\nexport class JWKInvalid extends JOSEError {\n static code = 'ERR_JWK_INVALID';\n code = 'ERR_JWK_INVALID';\n}\nexport class JWKSInvalid extends JOSEError {\n static code = 'ERR_JWKS_INVALID';\n code = 'ERR_JWKS_INVALID';\n}\nexport class JWKSNoMatchingKey extends JOSEError {\n static code = 'ERR_JWKS_NO_MATCHING_KEY';\n code = 'ERR_JWKS_NO_MATCHING_KEY';\n constructor(message = 'no applicable key found in the JSON Web Key Set', options) {\n super(message, options);\n }\n}\nexport class JWKSMultipleMatchingKeys extends JOSEError {\n [Symbol.asyncIterator] = async function* () { };\n static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';\n constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {\n super(message, options);\n }\n}\nexport class JWKSTimeout extends JOSEError {\n static code = 'ERR_JWKS_TIMEOUT';\n code = 'ERR_JWKS_TIMEOUT';\n constructor(message = 'request timed out', options) {\n super(message, options);\n }\n}\nexport class JWSSignatureVerificationFailed extends JOSEError {\n static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';\n constructor(message = 'signature verification failed', options) {\n super(message, options);\n }\n}\n","export function assertCryptoKey(key) {\n if (!isCryptoKey(key)) {\n throw new Error('CryptoKey instance expected');\n }\n}\nexport const isCryptoKey = (key) => {\n if (key?.[Symbol.toStringTag] === 'CryptoKey')\n return true;\n try {\n return key instanceof CryptoKey;\n }\n catch {\n return false;\n }\n};\nexport const isKeyObject = (key) => key?.[Symbol.toStringTag] === 'KeyObject';\nexport const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);\n","import { concat, uint64be } from './buffer_utils.js';\nimport { checkCryptoKey } from './crypto_key.js';\nimport { invalidKeyInput } from './invalid_key_input.js';\nimport { JWEDecryptionFailed, JWEInvalid } from '../util/errors.js';\nimport { isCryptoKey } from './is_key_like.js';\nexport const generateCek = (enc) => crypto.getRandomValues(new Uint8Array(enc.cekBits >> 3));\nfunction checkCekLength(cek, expected) {\n const actual = cek.byteLength << 3;\n if (actual !== expected) {\n throw new JWEInvalid(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`);\n }\n}\nexport const generateIv = (enc) => crypto.getRandomValues(new Uint8Array(enc.ivBits >> 3));\nexport function checkIvLength(enc, iv) {\n if (iv.length << 3 !== enc.ivBits) {\n throw new JWEInvalid('Invalid Initialization Vector length');\n }\n}\nasync function cbcKeySetup(enc, cek, usage) {\n if (!(cek instanceof Uint8Array)) {\n throw new TypeError(invalidKeyInput(cek, 'Uint8Array'));\n }\n const keySize = enc.cekBits >> 1;\n const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, [usage]);\n const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), {\n hash: `SHA-${keySize << 1}`,\n name: 'HMAC',\n }, false, ['sign']);\n return [encKey, macKey, keySize];\n}\nasync function cbcHmacTag(macKey, macData, keySize) {\n return new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));\n}\nasync function cbcEncrypt(enc, plaintext, cek, iv, aad) {\n const [encKey, macKey, keySize] = await cbcKeySetup(enc, cek, 'encrypt');\n const ciphertext = new Uint8Array(await crypto.subtle.encrypt({\n iv: iv,\n name: 'AES-CBC',\n }, encKey, plaintext));\n const macData = concat(aad, iv, ciphertext, uint64be(aad.length * 8));\n const tag = await cbcHmacTag(macKey, macData, keySize);\n return { ciphertext, tag, iv };\n}\nasync function timingSafeEqual(a, b) {\n const algorithm = { name: 'HMAC', hash: 'SHA-256' };\n const key = (await crypto.subtle.generateKey(algorithm, false, ['sign', 'verify']));\n const aHmac = await crypto.subtle.sign(algorithm, key, a);\n return crypto.subtle.verify(algorithm, key, aHmac, b);\n}\nasync function cbcDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n const [encKey, macKey, keySize] = await cbcKeySetup(enc, cek, 'decrypt');\n const macData = concat(aad, iv, ciphertext, uint64be(aad.length * 8));\n const expectedTag = await cbcHmacTag(macKey, macData, keySize);\n let macCheckPassed;\n try {\n macCheckPassed = await timingSafeEqual(tag, expectedTag);\n }\n catch {\n }\n if (!macCheckPassed) {\n throw new JWEDecryptionFailed();\n }\n let plaintext;\n try {\n plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv: iv, name: 'AES-CBC' }, encKey, ciphertext));\n }\n catch {\n }\n if (!plaintext) {\n throw new JWEDecryptionFailed();\n }\n return plaintext;\n}\nasync function gcmEncrypt(enc, plaintext, cek, iv, aad) {\n const encKey = cek instanceof Uint8Array\n ? await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, [\n 'encrypt',\n ])\n : (checkCryptoKey(cek, enc.subtle, 'encrypt'), cek);\n const encrypted = new Uint8Array(await crypto.subtle.encrypt({\n additionalData: aad,\n iv: iv,\n name: 'AES-GCM',\n tagLength: 128,\n }, encKey, plaintext));\n const tag = encrypted.slice(-16);\n const ciphertext = encrypted.slice(0, -16);\n return { ciphertext, tag, iv };\n}\nasync function gcmDecrypt(enc, cek, ciphertext, iv, tag, aad) {\n const encKey = cek instanceof Uint8Array\n ? await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, [\n 'decrypt',\n ])\n : (checkCryptoKey(cek, enc.subtle, 'decrypt'), cek);\n try {\n return new Uint8Array(await crypto.subtle.decrypt({\n additionalData: aad,\n iv: iv,\n name: 'AES-GCM',\n tagLength: 128,\n }, encKey, concat(ciphertext, tag)));\n }\n catch {\n throw new JWEDecryptionFailed();\n }\n}\nexport async function encrypt(enc, plaintext, cek, iv, aad) {\n if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {\n throw new TypeError(invalidKeyInput(cek, 'CryptoKey', 'KeyObject', 'Uint8Array', 'JSON Web Key'));\n }\n if (iv) {\n checkIvLength(enc, iv);\n }\n else {\n iv = generateIv(enc);\n }\n if (cek instanceof Uint8Array) {\n checkCekLength(cek, enc.cekBits);\n }\n return enc.cbc\n ? cbcEncrypt(enc, plaintext, cek, iv, aad)\n : gcmEncrypt(enc, plaintext, cek, iv, aad);\n}\nexport async function decrypt(enc, cek, ciphertext, iv, tag, aad) {\n if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {\n throw new TypeError(invalidKeyInput(cek, 'CryptoKey', 'KeyObject', 'Uint8Array', 'JSON Web Key'));\n }\n if (!iv) {\n throw new JWEInvalid('JWE Initialization Vector missing');\n }\n if (!tag) {\n throw new JWEInvalid('JWE Authentication Tag missing');\n }\n checkIvLength(enc, iv);\n if (cek instanceof Uint8Array) {\n checkCekLength(cek, enc.cekBits);\n }\n return enc.cbc\n ? cbcDecrypt(enc, cek, ciphertext, iv, tag, aad)\n : gcmDecrypt(enc, cek, ciphertext, iv, tag, aad);\n}\n","export function encodeBase64(input) {\n if (Uint8Array.prototype.toBase64) {\n return input.toBase64();\n }\n const CHUNK_SIZE = 0x8000;\n const arr = [];\n for (let i = 0; i < input.length; i += CHUNK_SIZE) {\n arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));\n }\n return btoa(arr.join(''));\n}\nexport function decodeBase64(encoded) {\n if (Uint8Array.fromBase64) {\n return Uint8Array.fromBase64(encoded);\n }\n const binary = atob(encoded);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return bytes;\n}\n","import { encoder, decoder } from '../lib/buffer_utils.js';\nimport { encodeBase64, decodeBase64 } from '../lib/base64.js';\nconst invalid = 'The input to be decoded is not correctly encoded.';\nexport function decode(input) {\n if (Uint8Array.fromBase64) {\n try {\n return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {\n alphabet: 'base64url',\n });\n }\n catch (cause) {\n throw new TypeError(invalid, { cause });\n }\n }\n let encoded = input;\n if (encoded instanceof Uint8Array) {\n encoded = decoder.decode(encoded);\n }\n if (encoded.includes('+') || encoded.includes('/')) {\n throw new TypeError(invalid);\n }\n encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');\n try {\n return decodeBase64(encoded);\n }\n catch {\n throw new TypeError(invalid);\n }\n}\nexport function encode(input) {\n let unencoded = input;\n if (typeof unencoded === 'string') {\n unencoded = encoder.encode(unencoded);\n }\n if (Uint8Array.prototype.toBase64) {\n return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });\n }\n return encodeBase64(unencoded).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n","export function isObject(input) {\n if (typeof input !== 'object' ||\n input === null ||\n Object.prototype.toString.call(input) !== '[object Object]') {\n return false;\n }\n const prototype = Object.getPrototypeOf(input);\n if (prototype === null) {\n return true;\n }\n let proto = prototype;\n while (Object.getPrototypeOf(proto) !== null) {\n proto = Object.getPrototypeOf(proto);\n }\n return prototype === proto;\n}\nexport function isDisjoint(...headers) {\n const parameters = new Set();\n for (const header of headers) {\n if (!header)\n continue;\n for (const parameter of Object.keys(header)) {\n if (parameters.has(parameter)) {\n return false;\n }\n parameters.add(parameter);\n }\n }\n return true;\n}\nexport const isJWK = (key) => isObject(key) && typeof key.kty === 'string';\nexport const isPrivateJWK = (key) => key.kty !== 'oct' &&\n ((key.kty === 'AKP' && typeof key.priv === 'string') || typeof key.d === 'string');\nexport const isPublicJWK = (key) => key.kty !== 'oct' && key.d === undefined && key.priv === undefined;\nexport const isSecretJWK = (key) => key.kty === 'oct' && typeof key.k === 'string';\n","import { decode } from '../util/base64url.js';\nimport { encode, strictDecoder } from './buffer_utils.js';\nimport { isObject } from './type_checks.js';\nexport const unprotected = Symbol();\nexport function assertNotSet(value, name) {\n if (value) {\n throw new TypeError(`${name} can only be called once`);\n }\n}\nexport function decodeBase64url(value, label, ErrorClass) {\n try {\n return decode(value);\n }\n catch {\n throw new ErrorClass(`Failed to base64url decode the ${label}`);\n }\n}\nexport function encodeBase64url(value, label, ErrorClass) {\n try {\n return encode(value);\n }\n catch {\n throw new ErrorClass(`The ${label} is not a valid base64url string`);\n }\n}\nexport async function digest(algorithm, data) {\n const subtleDigest = `SHA-${algorithm.slice(-3)}`;\n return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));\n}\nexport function parseJoseHeader(b64, ErrorClass, message) {\n let parsed;\n try {\n parsed = JSON.parse(strictDecoder.decode(decode(b64)));\n }\n catch {\n throw new ErrorClass(message);\n }\n if (!isObject(parsed)) {\n throw new ErrorClass(message);\n }\n return parsed;\n}\n","import { JOSENotSupported } from '../util/errors.js';\nexport async function jwkToKey(entry, jwk) {\n if (jwk.kty === 'RSA' && 'oth' in jwk && jwk.oth !== undefined) {\n throw new JOSENotSupported('RSA JWK \"oth\" (Other Primes Info) Parameter value is not supported');\n }\n if (!entry.kty.includes(jwk.kty)) {\n throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n }\n const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle;\n const isPrivate = !!(jwk.d || jwk.priv);\n const keyData = { ...jwk };\n if (keyData.kty !== 'AKP') {\n delete keyData.alg;\n }\n delete keyData.use;\n return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);\n}\n","import { withAlg as invalidKeyInput } from './invalid_key_input.js';\nimport { isKeyLike, isCryptoKey } from './is_key_like.js';\nimport * as jwk from './type_checks.js';\nimport { decode } from '../util/base64url.js';\nimport { jwkToKey } from './jwk_to_key.js';\nconst tag = (key) => key[Symbol.toStringTag];\nconst jwkMatchesOp = (entry, key, usage) => {\n const { alg } = entry;\n if (key.use !== undefined) {\n const expected = usage === 'sign' || usage === 'verify' ? 'sig' : 'enc';\n if (key.use !== expected) {\n throw new TypeError(`Invalid key for this operation, its \"use\" must be \"${expected}\" when present`);\n }\n }\n if (key.alg !== undefined && key.alg !== alg) {\n throw new TypeError(`Invalid key for this operation, its \"alg\" must be \"${alg}\" when present`);\n }\n if (Array.isArray(key.key_ops)) {\n const expectedKeyOp = usage === 'encrypt' || usage === 'decrypt' ? entry.ops?.[usage === 'encrypt' ? 0 : 1] : usage;\n if (expectedKeyOp && !key.key_ops.includes(expectedKeyOp)) {\n throw new TypeError(`Invalid key for this operation, its \"key_ops\" must include \"${expectedKeyOp}\" when present`);\n }\n }\n};\nexport function checkKeyType(entry, key, usage) {\n const { alg, secret } = entry;\n const privateKey = usage === 'decrypt' || usage === 'sign';\n if (secret && key instanceof Uint8Array)\n return [BYTES, key];\n if (jwk.isJWK(key)) {\n if (secret ? !jwk.isSecretJWK(key) : !(privateKey ? jwk.isPrivateJWK(key) : jwk.isPublicJWK(key))) {\n throw new TypeError(secret\n ? `JSON Web Key for symmetric algorithms must have JWK \"kty\" (Key Type) equal to \"oct\" and the JWK \"k\" (Key Value) present`\n : `JSON Web Key for this operation must be a ${privateKey ? 'private' : 'public'} JWK`);\n }\n jwkMatchesOp(entry, key, usage);\n return [JWK, key];\n }\n if (!isKeyLike(key)) {\n throw new TypeError(secret\n ? invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key', 'Uint8Array')\n : invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n }\n if (secret) {\n if (key.type !== 'secret') {\n throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type \"secret\"`);\n }\n }\n else {\n if (key.type === 'secret') {\n throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type \"secret\"`);\n }\n const expectedType = privateKey ? 'private' : 'public';\n if ((key.type === 'public' || key.type === 'private') && key.type !== expectedType) {\n const operation = usage === 'sign'\n ? 'signing'\n : usage === 'verify'\n ? 'verifying'\n : `${usage.slice(0, -1)}tion`;\n throw new TypeError(`${tag(key)} instances for asymmetric algorithm ${operation} must be of type \"${expectedType}\"`);\n }\n }\n return isCryptoKey(key) ? [CRYPTO, key] : [KEYOBJECT, key];\n}\nconst BYTES = 0;\nconst CRYPTO = 1;\nconst KEYOBJECT = 2;\nconst JWK = 3;\nlet cache;\nconst nist = {\n __proto__: null,\n prime256v1: 'P-256',\n secp384r1: 'P-384',\n secp521r1: 'P-521',\n};\nfunction cached(key, alg, value) {\n cache ||= new WeakMap();\n const entry = cache.get(key);\n if (value) {\n if (entry) {\n entry[alg] = value;\n }\n else {\n cache.set(key, { __proto__: null, [alg]: value });\n }\n }\n return value ?? entry?.[alg];\n}\nconst handleJWK = async (key, jwk, entry) => cached(key, entry.alg) ??\n cached(key, entry.alg, await jwkToKey(entry, { ...jwk, alg: entry.alg }));\nconst handleKeyObject = (keyObject, entry) => {\n const hit = cached(keyObject, entry.alg);\n if (hit)\n return hit;\n const isPublic = keyObject.type === 'public';\n const usages = entry.usages[isPublic ? 0 : 1];\n const { asymmetricKeyType } = keyObject;\n const crv = nist[keyObject.asymmetricKeyDetails?.namedCurve];\n const params = entry.resolve?.({ crv, asymmetricKeyType }) ?? entry.subtle;\n return cached(keyObject, entry.alg, keyObject.toCryptoKey(params, isPublic, usages));\n};\nexport async function prepareKey(entry, key, usage) {\n const tagged = checkKeyType(entry, key, usage);\n switch (tagged[0]) {\n case BYTES:\n case CRYPTO:\n return tagged[1];\n case JWK: {\n const key = tagged[1];\n if (key.k) {\n return decode(key.k);\n }\n if (!Object.isFrozen(key)) {\n const { key_ops } = key;\n if (Array.isArray(key_ops))\n Object.freeze(key_ops);\n Object.freeze(key);\n }\n return handleJWK(key, key, entry);\n }\n case KEYOBJECT: {\n const keyObject = tagged[1];\n if (keyObject.type === 'secret') {\n return keyObject.export();\n }\n if ('toCryptoKey' in keyObject && typeof keyObject.toCryptoKey === 'function') {\n return handleKeyObject(keyObject, entry);\n }\n return handleJWK(keyObject, keyObject.export({ format: 'jwk' }), entry);\n }\n }\n}\n","export function table(entries) {\n const out = { __proto__: null };\n for (const alg in entries) {\n out[alg] = { ...entries[alg], alg };\n }\n return out;\n}\n","import { JOSENotSupported } from '../util/errors.js';\nimport { table } from './key_descriptor.js';\nconst wrap = [\n ['encrypt', 'wrapKey'],\n ['decrypt', 'unwrapKey'],\n];\nconst derive = [[], ['deriveBits']];\nconst none = [[], []];\nfunction rsaes(bits) {\n return {\n kty: ['RSA'],\n subtle: { name: 'RSA-OAEP', hash: `SHA-${bits}` },\n usages: wrap,\n ops: ['wrapKey', 'unwrapKey'],\n };\n}\nfunction ecdh() {\n return {\n kty: ['EC', 'OKP'],\n subtle: { name: 'ECDH' },\n resolve: ({ kty, crv, asymmetricKeyType }) => {\n if (crv === 'X25519' || asymmetricKeyType === 'x25519') {\n return { name: 'X25519' };\n }\n if (kty === 'OKP') {\n throw new JOSENotSupported('Invalid or unsupported JWK \"alg\" (Algorithm) Parameter value');\n }\n return { name: 'ECDH', namedCurve: crv };\n },\n usages: derive,\n ops: [undefined, 'deriveBits'],\n };\n}\nfunction aeskw(bits, gcm = false) {\n return {\n kty: ['oct'],\n secret: true,\n subtle: { name: gcm ? 'AES-GCM' : 'AES-KW', length: bits },\n usages: none,\n ops: gcm ? ['encrypt', 'decrypt'] : ['wrapKey', 'unwrapKey'],\n };\n}\nfunction pbes2() {\n return {\n kty: ['oct'],\n secret: true,\n subtle: { name: 'PBKDF2' },\n usages: none,\n ops: ['deriveBits', 'deriveBits'],\n };\n}\nexport const JWE = table({\n dir: {\n kty: ['oct'],\n secret: true,\n subtle: { name: 'AES-GCM' },\n usages: none,\n ops: ['encrypt', 'decrypt'],\n },\n 'RSA-OAEP': rsaes(1),\n 'RSA-OAEP-256': rsaes(256),\n 'RSA-OAEP-384': rsaes(384),\n 'RSA-OAEP-512': rsaes(512),\n 'ECDH-ES': ecdh(),\n 'ECDH-ES+A128KW': ecdh(),\n 'ECDH-ES+A192KW': ecdh(),\n 'ECDH-ES+A256KW': ecdh(),\n A128KW: aeskw(128),\n A192KW: aeskw(192),\n A256KW: aeskw(256),\n A128GCMKW: aeskw(128, true),\n A192GCMKW: aeskw(192, true),\n A256GCMKW: aeskw(256, true),\n 'PBES2-HS256+A128KW': pbes2(),\n 'PBES2-HS384+A192KW': pbes2(),\n 'PBES2-HS512+A256KW': pbes2(),\n});\nconst contentOps = ['encrypt', 'decrypt'];\nfunction contentEncryption(bits, cbc = false) {\n return {\n kty: ['oct'],\n secret: true,\n subtle: { name: cbc ? 'AES-CBC' : 'AES-GCM', length: bits },\n usages: none,\n ops: contentOps,\n cekBits: bits,\n ivBits: cbc ? 128 : 96,\n cbc,\n };\n}\nconst ENC = table({\n A128GCM: contentEncryption(128),\n A192GCM: contentEncryption(192),\n A256GCM: contentEncryption(256),\n 'A128CBC-HS256': contentEncryption(256, true),\n 'A192CBC-HS384': contentEncryption(384, true),\n 'A256CBC-HS512': contentEncryption(512, true),\n});\nfunction unsupported(parameter, name) {\n throw new JOSENotSupported(`Invalid or unsupported \"${parameter}\" (JWE ${name}) header value`);\n}\nexport function jweAlgorithm(alg) {\n return (typeof alg === 'string' ? JWE[alg] : undefined) ?? unsupported('alg', 'Algorithm');\n}\nexport function jweEncryption(enc) {\n return ((typeof enc === 'string' ? ENC[enc] : undefined) ?? unsupported('enc', 'Encryption Algorithm'));\n}\n","import { encode as b64u } from '../util/base64url.js';\nimport { prepareKey } from './key.js';\nimport { jwkToKey } from './jwk_to_key.js';\nimport { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';\nimport { JOSENotSupported, JWEInvalid } from '../util/errors.js';\nimport { decodeBase64url, digest } from './helpers.js';\nimport { generateCek, encrypt, decrypt } from './content_encryption.js';\nimport { isObject } from './type_checks.js';\nimport { checkCryptoKey, checkModulusLength, checkUsage } from './crypto_key.js';\nimport { concat, encode, uint32be } from './buffer_utils.js';\nimport { assertCryptoKey } from './is_key_like.js';\nfunction checkEcdhCryptoKey(key, usage) {\n if (key.algorithm.name !== 'ECDH' && key.algorithm.name !== 'X25519') {\n throw new TypeError('CryptoKey does not support this operation, its algorithm.name must be ECDH or X25519');\n }\n checkUsage(key, usage);\n}\nasync function aeskwCryptoKey(key, alg, usage) {\n const expected = jweAlgorithm(alg).subtle;\n const cryptoKey = key instanceof Uint8Array\n ? await crypto.subtle.importKey('raw', key, 'AES-KW', true, [\n usage,\n ])\n : key;\n checkCryptoKey(cryptoKey, expected, usage);\n return cryptoKey;\n}\nasync function aeskwWrap(alg, key, cek) {\n const cryptoKey = await aeskwCryptoKey(key, alg, 'wrapKey');\n const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, { hash: 'SHA-256', name: 'HMAC' }, true, ['sign']);\n return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, cryptoKey, 'AES-KW'));\n}\nasync function aeskwUnwrap(alg, key, encryptedKey) {\n const cryptoKey = await aeskwCryptoKey(key, alg, 'unwrapKey');\n const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, cryptoKey, 'AES-KW', { hash: 'SHA-256', name: 'HMAC' }, true, ['sign']);\n return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek));\n}\nfunction checkRsaKey(alg, key, usage) {\n checkCryptoKey(key, jweAlgorithm(alg).subtle, usage);\n checkModulusLength(alg, key);\n}\nfunction pbes2CryptoKey(key, alg) {\n if (key instanceof Uint8Array) {\n return crypto.subtle.importKey('raw', key, 'PBKDF2', false, [\n 'deriveBits',\n ]);\n }\n checkCryptoKey(key, jweAlgorithm(alg).subtle, 'deriveBits');\n return key;\n}\nasync function deriveKey(p2s, alg, p2c, key) {\n if (!(p2s instanceof Uint8Array) || p2s.length < 8) {\n throw new JWEInvalid('PBES2 Salt Input must be 8 or more octets');\n }\n if (!Number.isSafeInteger(p2c) || Math.sign(p2c) !== 1) {\n throw new JWEInvalid('PBES2 Count Input must be a positive integer');\n }\n const salt = concat(encode(alg), Uint8Array.of(0), p2s);\n const keylen = parseInt(alg.slice(13, 16), 10);\n const subtleAlg = {\n hash: `SHA-${alg.slice(8, 11)}`,\n iterations: p2c,\n name: 'PBKDF2',\n salt,\n };\n const cryptoKey = await pbes2CryptoKey(key, alg);\n return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg, cryptoKey, keylen));\n}\nfunction lengthAndInput(input) {\n return concat(uint32be(input.length), input);\n}\nasync function concatKdf(Z, L, OtherInfo) {\n const dkLen = L >> 3;\n const hashLen = 32;\n const reps = Math.ceil(dkLen / hashLen);\n const dk = new Uint8Array(reps * hashLen);\n for (let i = 1; i <= reps; i++) {\n const hashResult = await digest('sha256', concat(uint32be(i), Z, OtherInfo));\n dk.set(hashResult, (i - 1) * hashLen);\n }\n return dk.slice(0, dkLen);\n}\nasync function ecdhesDeriveKey(publicKey, privateKey, algorithm, keyLength, apu = new Uint8Array(), apv = new Uint8Array()) {\n checkEcdhCryptoKey(publicKey);\n checkEcdhCryptoKey(privateKey, 'deriveBits');\n const otherInfo = concat(lengthAndInput(encode(algorithm)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyLength));\n const Z = new Uint8Array(await crypto.subtle.deriveBits({\n name: publicKey.algorithm.name,\n public: publicKey,\n }, privateKey, publicKey.algorithm.name === 'X25519'\n ? 256\n : Math.ceil(parseInt(publicKey.algorithm.namedCurve.slice(-3), 10) / 8) << 3));\n return concatKdf(Z, keyLength, otherInfo);\n}\nfunction assertEcdhKey(key) {\n assertCryptoKey(key);\n const curve = key.algorithm.namedCurve;\n if (curve !== 'P-256' &&\n curve !== 'P-384' &&\n curve !== 'P-521' &&\n key.algorithm.name !== 'X25519') {\n throw new JOSENotSupported('ECDH with the provided key is not allowed or not supported by your javascript runtime');\n }\n}\nfunction assertEncryptedKey(encryptedKey) {\n if (encryptedKey === undefined)\n throw new JWEInvalid('JWE Encrypted Key missing');\n}\nfunction assertNoEncryptedKey(encryptedKey) {\n if (encryptedKey !== undefined)\n throw new JWEInvalid('Encountered unexpected JWE Encrypted Key');\n}\nexport async function decryptKeyManagement(alg, enc, key, encryptedKey, joseHeader, options) {\n const entry = jweAlgorithm(alg);\n if (alg === 'dir') {\n assertNoEncryptedKey(encryptedKey);\n return key;\n }\n switch (entry.subtle.name) {\n case 'ECDH': {\n if (alg === 'ECDH-ES')\n assertNoEncryptedKey(encryptedKey);\n if (!isObject(joseHeader.epk))\n throw new JWEInvalid(`JOSE Header \"epk\" (Ephemeral Public Key) missing or invalid`);\n assertEcdhKey(key);\n const epk = await jwkToKey(entry, joseHeader.epk);\n let partyUInfo;\n let partyVInfo;\n if (joseHeader.apu !== undefined) {\n if (typeof joseHeader.apu !== 'string')\n throw new JWEInvalid(`JOSE Header \"apu\" (Agreement PartyUInfo) invalid`);\n partyUInfo = decodeBase64url(joseHeader.apu, 'apu', JWEInvalid);\n }\n if (joseHeader.apv !== undefined) {\n if (typeof joseHeader.apv !== 'string')\n throw new JWEInvalid(`JOSE Header \"apv\" (Agreement PartyVInfo) invalid`);\n partyVInfo = decodeBase64url(joseHeader.apv, 'apv', JWEInvalid);\n }\n const sharedSecret = await ecdhesDeriveKey(epk, key, alg === 'ECDH-ES' ? enc.alg : alg, alg === 'ECDH-ES' ? enc.cekBits : parseInt(alg.slice(-5, -2), 10), partyUInfo, partyVInfo);\n if (alg === 'ECDH-ES')\n return sharedSecret;\n assertEncryptedKey(encryptedKey);\n return aeskwUnwrap(alg.slice(-6), sharedSecret, encryptedKey);\n }\n case 'RSA-OAEP': {\n assertEncryptedKey(encryptedKey);\n assertCryptoKey(key);\n checkRsaKey(alg, key, 'decrypt');\n return new Uint8Array(await crypto.subtle.decrypt('RSA-OAEP', key, encryptedKey));\n }\n case 'PBKDF2': {\n assertEncryptedKey(encryptedKey);\n if (typeof joseHeader.p2c !== 'number')\n throw new JWEInvalid(`JOSE Header \"p2c\" (PBES2 Count) missing or invalid`);\n const p2cLimit = options?.maxPBES2Count || 10_000;\n if (joseHeader.p2c > p2cLimit)\n throw new JWEInvalid(`JOSE Header \"p2c\" (PBES2 Count) out is of acceptable bounds`);\n if (typeof joseHeader.p2s !== 'string')\n throw new JWEInvalid(`JOSE Header \"p2s\" (PBES2 Salt) missing or invalid`);\n const p2s = decodeBase64url(joseHeader.p2s, 'p2s', JWEInvalid);\n const derived = await deriveKey(p2s, alg, joseHeader.p2c, key);\n return aeskwUnwrap(alg.slice(-6), derived, encryptedKey);\n }\n case 'AES-KW': {\n assertEncryptedKey(encryptedKey);\n return aeskwUnwrap(alg, key, encryptedKey);\n }\n case 'AES-GCM': {\n assertEncryptedKey(encryptedKey);\n if (typeof joseHeader.iv !== 'string')\n throw new JWEInvalid(`JOSE Header \"iv\" (Initialization Vector) missing or invalid`);\n if (typeof joseHeader.tag !== 'string')\n throw new JWEInvalid(`JOSE Header \"tag\" (Authentication Tag) missing or invalid`);\n let iv;\n iv = decodeBase64url(joseHeader.iv, 'iv', JWEInvalid);\n let tag;\n tag = decodeBase64url(joseHeader.tag, 'tag', JWEInvalid);\n return decrypt(jweEncryption(alg.slice(0, -2)), key, encryptedKey, iv, tag, new Uint8Array());\n }\n }\n}\nexport async function encryptKeyManagement(alg, enc, key, providedCek, providedParameters = {}) {\n let encryptedKey;\n let parameters;\n let cek;\n const entry = jweAlgorithm(alg);\n if (alg === 'dir')\n return [key, undefined, undefined];\n switch (entry.subtle.name) {\n case 'ECDH': {\n assertEcdhKey(key);\n const { apu, apv } = providedParameters;\n let ephemeralKey;\n if (providedParameters.epk) {\n ephemeralKey = (await prepareKey(entry, providedParameters.epk, 'decrypt'));\n }\n else {\n ephemeralKey = (await crypto.subtle.generateKey(key.algorithm, true, ['deriveBits'])).privateKey;\n }\n const subtle = crypto.subtle;\n let exportableEpk = ephemeralKey;\n if (!exportableEpk.extractable) {\n if (typeof subtle.getPublicKey !== 'function') {\n throw new TypeError('CryptoKey for \"epk\" must be extractable');\n }\n exportableEpk = await subtle.getPublicKey(ephemeralKey, []);\n }\n const { x, y, crv, kty } = (await subtle.exportKey('jwk', exportableEpk));\n const sharedSecret = await ecdhesDeriveKey(key, ephemeralKey, alg === 'ECDH-ES' ? enc.alg : alg, alg === 'ECDH-ES' ? enc.cekBits : parseInt(alg.slice(-5, -2), 10), apu, apv);\n parameters = { epk: { x, crv, kty } };\n if (kty === 'EC')\n parameters.epk.y = y;\n if (apu)\n parameters.apu = b64u(apu);\n if (apv)\n parameters.apv = b64u(apv);\n if (alg === 'ECDH-ES') {\n cek = sharedSecret;\n break;\n }\n cek = providedCek || generateCek(enc);\n const kwAlg = alg.slice(-6);\n encryptedKey = await aeskwWrap(kwAlg, sharedSecret, cek);\n break;\n }\n case 'RSA-OAEP': {\n cek = providedCek || generateCek(enc);\n assertCryptoKey(key);\n checkRsaKey(alg, key, 'encrypt');\n encryptedKey = new Uint8Array(await crypto.subtle.encrypt('RSA-OAEP', key, cek));\n break;\n }\n case 'PBKDF2': {\n cek = providedCek || generateCek(enc);\n const { p2c = 2048, p2s = crypto.getRandomValues(new Uint8Array(16)) } = providedParameters;\n const derived = await deriveKey(p2s, alg, p2c, key);\n encryptedKey = await aeskwWrap(alg.slice(-6), derived, cek);\n parameters = { p2c, p2s: b64u(p2s) };\n break;\n }\n case 'AES-KW': {\n cek = providedCek || generateCek(enc);\n encryptedKey = await aeskwWrap(alg, key, cek);\n break;\n }\n case 'AES-GCM': {\n cek = providedCek || generateCek(enc);\n const { iv } = providedParameters;\n const wrapped = await encrypt(jweEncryption(alg.slice(0, -2)), cek, key, iv, new Uint8Array());\n encryptedKey = wrapped.ciphertext;\n parameters = { iv: b64u(wrapped.iv), tag: b64u(wrapped.tag) };\n break;\n }\n }\n return [cek, encryptedKey, parameters];\n}\n","import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';\nexport const JWS_RECOGNIZED = { __proto__: null, b64: true };\nexport const JWE_RECOGNIZED = { __proto__: null };\nexport function validateAlgorithms(option, algorithms) {\n if (algorithms !== undefined &&\n (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {\n throw new TypeError(`\"${option}\" option must be an array of strings`);\n }\n if (!algorithms) {\n return undefined;\n }\n return new Set(algorithms);\n}\nexport function validateCritDuplicates(Err, protectedHeader) {\n const { crit } = protectedHeader ?? {};\n if (Array.isArray(crit) && new Set(crit).size !== crit.length) {\n throw new Err('\"crit\" (Critical) Header Parameter MUST NOT contain duplicate values');\n }\n}\nexport function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {\n if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {\n throw new Err('\"crit\" (Critical) Header Parameter MUST be integrity protected');\n }\n if (!protectedHeader || protectedHeader.crit === undefined) {\n return [];\n }\n if (!Array.isArray(protectedHeader.crit) ||\n protectedHeader.crit.length === 0 ||\n protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {\n throw new Err('\"crit\" (Critical) Header Parameter MUST be an array of non-empty strings when present');\n }\n const recognized = recognizedOption === undefined\n ? recognizedDefault\n : { __proto__: null, ...recognizedOption, ...recognizedDefault };\n for (const parameter of protectedHeader.crit) {\n if (!(parameter in recognized)) {\n throw new JOSENotSupported(`Extension Header Parameter \"${parameter}\" is not recognized`);\n }\n if (!Object.hasOwn(joseHeader, parameter) || joseHeader[parameter] === undefined) {\n throw new Err(`Extension Header Parameter \"${parameter}\" is missing`);\n }\n if (recognized[parameter] &&\n (!Object.hasOwn(protectedHeader, parameter) || protectedHeader[parameter] === undefined)) {\n throw new Err(`Extension Header Parameter \"${parameter}\" MUST be integrity protected`);\n }\n }\n return protectedHeader.crit;\n}\n","import { JOSENotSupported, JWEInvalid } from '../util/errors.js';\nimport { concat } from './buffer_utils.js';\nfunction supported(name) {\n if (typeof globalThis[name] === 'undefined') {\n throw new JOSENotSupported(`JWE \"zip\" (Compression Algorithm) Header Parameter requires the ${name} API.`);\n }\n}\nexport async function compress(input) {\n supported('CompressionStream');\n const cs = new CompressionStream('deflate-raw');\n const writer = cs.writable.getWriter();\n writer.write(input).catch(() => { });\n writer.close().catch(() => { });\n const chunks = [];\n const reader = cs.readable.getReader();\n for (;;) {\n const { value, done } = await reader.read();\n if (done)\n break;\n chunks.push(value);\n }\n return concat(...chunks);\n}\nexport async function decompress(input, maxLength) {\n supported('DecompressionStream');\n const ds = new DecompressionStream('deflate-raw');\n const writer = ds.writable.getWriter();\n writer.write(input).catch(() => { });\n writer.close().catch(() => { });\n const chunks = [];\n let length = 0;\n const reader = ds.readable.getReader();\n for (;;) {\n const { value, done } = await reader.read();\n if (done)\n break;\n chunks.push(value);\n length += value.byteLength;\n if (maxLength !== Infinity && length > maxLength) {\n throw new JWEInvalid('Decompressed plaintext exceeded the configured limit');\n }\n }\n return concat(...chunks);\n}\n","import { decrypt, generateCek } from './content_encryption.js';\nimport { decodeBase64url, encodeBase64url, parseJoseHeader } from './helpers.js';\nimport { JOSEAlgNotAllowed, JOSENotSupported, JWEInvalid } from '../util/errors.js';\nimport { isDisjoint, isObject } from './type_checks.js';\nimport { decryptKeyManagement } from './key_management.js';\nimport { concat, decoder, encode } from './buffer_utils.js';\nimport { validateCrit, validateAlgorithms, JWE_RECOGNIZED } from './options.js';\nimport { prepareKey } from './key.js';\nimport { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';\nimport { decompress } from './deflate.js';\nexport function checkShared(jwe) {\n const { ciphertext, protected: encodedProtected, unprotected } = jwe;\n if (jwe.iv !== undefined && typeof jwe.iv !== 'string') {\n throw new JWEInvalid('JWE Initialization Vector incorrect type');\n }\n if (typeof ciphertext !== 'string') {\n throw new JWEInvalid('JWE Ciphertext missing or incorrect type');\n }\n if (jwe.tag !== undefined && typeof jwe.tag !== 'string') {\n throw new JWEInvalid('JWE Authentication Tag incorrect type');\n }\n if (encodedProtected !== undefined && typeof encodedProtected !== 'string') {\n throw new JWEInvalid('JWE Protected Header incorrect type');\n }\n if (jwe.aad !== undefined && typeof jwe.aad !== 'string') {\n throw new JWEInvalid('JWE AAD incorrect type');\n }\n if (unprotected !== undefined && !isObject(unprotected)) {\n throw new JWEInvalid('JWE Shared Unprotected Header incorrect type');\n }\n}\nexport function checkRecipient(jwe) {\n const { encrypted_key: encryptedKey, header } = jwe;\n if (encryptedKey !== undefined && typeof encryptedKey !== 'string') {\n throw new JWEInvalid('JWE Encrypted Key incorrect type');\n }\n if (header !== undefined && !isObject(header)) {\n throw new JWEInvalid('JWE Per-Recipient Unprotected Header incorrect type');\n }\n if (jwe.protected === undefined && header === undefined && jwe.unprotected === undefined) {\n throw new JWEInvalid('JOSE Header missing');\n }\n}\nexport function shareJWE(jwe) {\n const { protected: encodedProtected, ciphertext, iv, tag, aad } = jwe;\n let parsedProt;\n if (encodedProtected) {\n parsedProt = parseJoseHeader(encodedProtected, JWEInvalid, 'JWE Protected Header is invalid');\n }\n const protectedHeader = encodedProtected !== undefined ? encode(encodedProtected) : new Uint8Array();\n return [\n parsedProt,\n decodeBase64url(ciphertext, 'ciphertext', JWEInvalid),\n iv !== undefined ? decodeBase64url(iv, 'iv', JWEInvalid) : undefined,\n tag !== undefined ? decodeBase64url(tag, 'tag', JWEInvalid) : undefined,\n aad !== undefined\n ? concat(protectedHeader, encode('.'), encodeBase64url(aad, 'aad', JWEInvalid))\n : protectedHeader,\n ];\n}\nexport function decryptResult(jwe, decrypted) {\n const [plaintext, parsedProt, key, resolvedKey] = decrypted;\n const { protected: encodedProtected, aad, unprotected, header } = jwe;\n const result = { plaintext };\n if (encodedProtected !== undefined) {\n result.protectedHeader = parsedProt;\n }\n if (aad !== undefined) {\n result.additionalAuthenticatedData = decodeBase64url(aad, 'aad', JWEInvalid);\n }\n if (unprotected !== undefined) {\n result.sharedUnprotectedHeader = unprotected;\n }\n if (header !== undefined) {\n result.unprotectedHeader = header;\n }\n if (resolvedKey) {\n return { ...result, key };\n }\n return result;\n}\nexport function prepareDecrypt(options) {\n return [\n options && validateAlgorithms('keyManagementAlgorithms', options.keyManagementAlgorithms),\n options &&\n validateAlgorithms('contentEncryptionAlgorithms', options.contentEncryptionAlgorithms),\n options,\n ];\n}\nexport async function decryptRecipient(jwe, token, shared, key) {\n const [keyManagementAlgorithms, contentEncryptionAlgorithms, options] = shared;\n const [parsedProt, ciphertext, iv, tag, additionalData] = token;\n const { encrypted_key: encodedKey, header, unprotected } = jwe;\n let joseHeader;\n if (header !== undefined || unprotected !== undefined) {\n if (!isDisjoint(parsedProt, header, unprotected)) {\n throw new JWEInvalid('JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint');\n }\n joseHeader = { ...parsedProt, ...header, ...unprotected };\n }\n else {\n joseHeader = parsedProt ?? {};\n }\n validateCrit(JWEInvalid, JWE_RECOGNIZED, options?.crit, parsedProt, joseHeader);\n if (joseHeader.zip !== undefined && joseHeader.zip !== 'DEF') {\n throw new JOSENotSupported('Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value.');\n }\n if (joseHeader.zip !== undefined && !parsedProt?.zip) {\n throw new JWEInvalid('JWE \"zip\" (Compression Algorithm) Header Parameter MUST be in a protected header.');\n }\n const { alg, enc } = joseHeader;\n if (typeof alg !== 'string' || !alg) {\n throw new JWEInvalid('missing JWE Algorithm (alg) in JWE Header');\n }\n if (typeof enc !== 'string' || !enc) {\n throw new JWEInvalid('missing JWE Encryption Algorithm (enc) in JWE Header');\n }\n if ((keyManagementAlgorithms && !keyManagementAlgorithms.has(alg)) ||\n (!keyManagementAlgorithms && alg.startsWith('PBES2'))) {\n throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n }\n if (contentEncryptionAlgorithms && !contentEncryptionAlgorithms.has(enc)) {\n throw new JOSEAlgNotAllowed('\"enc\" (Encryption Algorithm) Header Parameter value not allowed');\n }\n const encEntry = jweEncryption(enc);\n let encryptedKey;\n if (encodedKey !== undefined) {\n encryptedKey = decodeBase64url(encodedKey, 'encrypted_key', JWEInvalid);\n }\n let resolvedKey = false;\n if (typeof key === 'function') {\n key = await key(parsedProt, jwe);\n resolvedKey = true;\n }\n const algEntry = jweAlgorithm(alg);\n const k = await prepareKey(alg === 'dir' ? encEntry : algEntry, key, 'decrypt');\n let cek;\n try {\n cek = await decryptKeyManagement(alg, encEntry, k, encryptedKey, joseHeader, options);\n }\n catch (err) {\n if (err instanceof TypeError || err instanceof JWEInvalid || err instanceof JOSENotSupported) {\n throw err;\n }\n cek = generateCek(encEntry);\n }\n let plaintext = await decrypt(encEntry, cek, ciphertext, iv, tag, additionalData);\n if (joseHeader.zip === 'DEF') {\n const maxDecompressedLength = options?.maxDecompressedLength ?? 250_000;\n if (maxDecompressedLength === 0) {\n throw new JOSENotSupported('JWE \"zip\" (Compression Algorithm) Header Parameter is not supported.');\n }\n if (maxDecompressedLength !== Infinity &&\n (!Number.isSafeInteger(maxDecompressedLength) || maxDecompressedLength < 1)) {\n throw new TypeError('maxDecompressedLength must be 0, a positive safe integer, or Infinity');\n }\n plaintext = await decompress(plaintext, maxDecompressedLength).catch((cause) => {\n if (cause instanceof JWEInvalid)\n throw cause;\n throw new JWEInvalid('Failed to decompress plaintext', { cause });\n });\n }\n return [plaintext, parsedProt, k, resolvedKey];\n}\nexport async function decryptJWE(jwe, shared, key) {\n return decryptRecipient(jwe, shareJWE(jwe), shared, key);\n}\nexport async function decryptCompact(jwe, shared, key) {\n if (jwe instanceof Uint8Array) {\n jwe = decoder.decode(jwe);\n }\n if (typeof jwe !== 'string') {\n throw new JWEInvalid('Compact JWE must be a string or Uint8Array');\n }\n const { 0: protectedHeader, 1: encryptedKey, 2: iv, 3: ciphertext, 4: tag, length, } = jwe.split('.');\n if (length !== 5) {\n throw new JWEInvalid('Invalid Compact JWE');\n }\n return decryptJWE({\n ciphertext,\n iv: iv || undefined,\n protected: protectedHeader,\n tag: tag || undefined,\n encrypted_key: encryptedKey || undefined,\n }, shared, key);\n}\n","import { prepareDecrypt, decryptCompact } from '../../lib/jwe_decrypt.js';\nexport async function compactDecrypt(jwe, key, options) {\n const decrypted = await decryptCompact(jwe, prepareDecrypt(options), key);\n const result = { plaintext: decrypted[0], protectedHeader: decrypted[1] };\n if (typeof key === 'function') {\n return { ...result, key: decrypted[2] };\n }\n return result;\n}\n","import { JWEInvalid } from '../../util/errors.js';\nimport { isObject } from '../../lib/type_checks.js';\nimport { prepareDecrypt, decryptJWE, decryptResult, checkShared, checkRecipient, } from '../../lib/jwe_decrypt.js';\nexport async function flattenedDecrypt(jwe, key, options) {\n if (!isObject(jwe)) {\n throw new JWEInvalid('Flattened JWE must be an object');\n }\n checkShared(jwe);\n checkRecipient(jwe);\n return decryptResult(jwe, await decryptJWE(jwe, prepareDecrypt(options), key));\n}\n","import { prepareDecrypt, shareJWE, decryptRecipient, decryptResult, checkShared, checkRecipient, } from '../../lib/jwe_decrypt.js';\nimport { JWEDecryptionFailed, JWEInvalid } from '../../util/errors.js';\nimport { isObject } from '../../lib/type_checks.js';\nexport async function generalDecrypt(jwe, key, options) {\n if (!isObject(jwe)) {\n throw new JWEInvalid('General JWE must be an object');\n }\n if (!Array.isArray(jwe.recipients) || !jwe.recipients.every(isObject)) {\n throw new JWEInvalid('JWE Recipients missing or incorrect type');\n }\n if (!jwe.recipients.length) {\n throw new JWEInvalid('JWE Recipients has no members');\n }\n let shared;\n let token;\n try {\n checkShared(jwe);\n shared = prepareDecrypt(options);\n token = shareJWE(jwe);\n }\n catch {\n throw new JWEDecryptionFailed();\n }\n if (jwe.recipients.length > 1) {\n for (const { header } of jwe.recipients) {\n const alg = token[0]?.alg ?? header?.alg ?? jwe.unprotected?.alg;\n if (alg === 'dir' || alg === 'ECDH-ES') {\n throw new JWEInvalid(`\"${alg}\" alg may only have a single recipient`);\n }\n }\n }\n for (const recipient of jwe.recipients) {\n try {\n const flattened = {\n aad: jwe.aad,\n ciphertext: jwe.ciphertext,\n encrypted_key: recipient.encrypted_key,\n header: recipient.header,\n iv: jwe.iv,\n protected: jwe.protected,\n tag: jwe.tag,\n unprotected: jwe.unprotected,\n };\n checkRecipient(flattened);\n return decryptResult(flattened, await decryptRecipient(flattened, token, shared, key));\n }\n catch {\n }\n }\n throw new JWEDecryptionFailed();\n}\n","import { encode as b64u } from '../util/base64url.js';\nimport { encrypt } from './content_encryption.js';\nimport { encryptKeyManagement } from './key_management.js';\nimport { JOSENotSupported, JWEInvalid } from '../util/errors.js';\nimport { isDisjoint } from './type_checks.js';\nimport { concat, encode } from './buffer_utils.js';\nimport { validateCrit, JWE_RECOGNIZED } from './options.js';\nimport { prepareKey } from './key.js';\nimport { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';\nimport { compress } from './deflate.js';\nexport function checkEncryptHeaders(input) {\n const [, protectedHeader, unprotectedHeader, sharedUnprotectedHeader, , , , , crit] = input;\n if (!isDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader)) {\n throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');\n }\n const joseHeader = {\n ...protectedHeader,\n ...unprotectedHeader,\n ...sharedUnprotectedHeader,\n };\n validateCrit(JWEInvalid, JWE_RECOGNIZED, crit, protectedHeader, joseHeader);\n if (joseHeader.zip !== undefined && joseHeader.zip !== 'DEF') {\n throw new JOSENotSupported('Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value.');\n }\n if (joseHeader.zip !== undefined && !protectedHeader?.zip) {\n throw new JWEInvalid('JWE \"zip\" (Compression Algorithm) Header Parameter MUST be in a protected header.');\n }\n const { alg, enc } = joseHeader;\n if (typeof alg !== 'string' || !alg) {\n throw new JWEInvalid('JWE \"alg\" (Algorithm) Header Parameter missing or invalid');\n }\n if (typeof enc !== 'string' || !enc) {\n throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter missing or invalid');\n }\n return [joseHeader, alg, enc, jweEncryption(enc)];\n}\nexport async function encryptJWE(input, checked, key) {\n const [joseHeader, alg, , encEntry] = checked;\n const [inputPlaintext, inputProtectedHeader, inputUnprotectedHeader, sharedUnprotectedHeader, aad, providedCek, inputIv, keyManagementParameters, , unprotectedParameters,] = input;\n let protectedHeader = inputProtectedHeader;\n let unprotectedHeader = inputUnprotectedHeader;\n if (providedCek && (alg === 'dir' || alg === 'ECDH-ES')) {\n throw new TypeError(`setContentEncryptionKey cannot be called with JWE \"alg\" (Algorithm) Header ${alg}`);\n }\n const algEntry = jweAlgorithm(alg);\n const k = await prepareKey(alg === 'dir' ? encEntry : algEntry, key, 'encrypt');\n const [cek, encryptedKey, parameters] = await encryptKeyManagement(alg, encEntry, k, providedCek, keyManagementParameters);\n if (parameters) {\n if (unprotectedParameters) {\n unprotectedHeader = unprotectedHeader ? { ...unprotectedHeader, ...parameters } : parameters;\n }\n else {\n protectedHeader = protectedHeader ? { ...protectedHeader, ...parameters } : parameters;\n }\n }\n let protectedHeaderS;\n let protectedHeaderB;\n if (protectedHeader) {\n protectedHeaderS = b64u(JSON.stringify(protectedHeader));\n protectedHeaderB = encode(protectedHeaderS);\n }\n else {\n protectedHeaderS = '';\n protectedHeaderB = new Uint8Array();\n }\n let additionalData;\n let aadMember;\n if (aad?.byteLength) {\n aadMember = b64u(aad);\n additionalData = concat(protectedHeaderB, encode('.'), encode(aadMember));\n }\n else {\n additionalData = protectedHeaderB;\n }\n let plaintext = inputPlaintext;\n if (joseHeader.zip === 'DEF') {\n plaintext = await compress(plaintext).catch((cause) => {\n throw new JWEInvalid('Failed to compress plaintext', { cause });\n });\n }\n const { ciphertext, tag, iv } = await encrypt(encEntry, plaintext, cek, inputIv, additionalData);\n const jwe = {\n ciphertext: b64u(ciphertext),\n };\n if (iv) {\n jwe.iv = b64u(iv);\n }\n if (tag) {\n jwe.tag = b64u(tag);\n }\n if (encryptedKey) {\n jwe.encrypted_key = b64u(encryptedKey);\n }\n if (aadMember) {\n jwe.aad = aadMember;\n }\n if (protectedHeader) {\n jwe.protected = protectedHeaderS;\n }\n if (sharedUnprotectedHeader) {\n jwe.unprotected = sharedUnprotectedHeader;\n }\n if (unprotectedHeader) {\n jwe.header = unprotectedHeader;\n }\n return jwe;\n}\nexport async function createJWE(input, key) {\n return encryptJWE(input, checkEncryptHeaders(input), key);\n}\n","import { unprotected, assertNotSet } from '../../lib/helpers.js';\nimport { JWEInvalid } from '../../util/errors.js';\nimport { createJWE } from '../../lib/jwe_encrypt.js';\nimport { validateCritDuplicates } from '../../lib/options.js';\nexport class FlattenedEncrypt {\n #plaintext;\n #protectedHeader;\n #sharedUnprotectedHeader;\n #unprotectedHeader;\n #aad;\n #cek;\n #iv;\n #keyManagementParameters;\n constructor(plaintext) {\n if (!(plaintext instanceof Uint8Array)) {\n throw new TypeError('plaintext must be an instance of Uint8Array');\n }\n this.#plaintext = plaintext;\n }\n setKeyManagementParameters(parameters) {\n assertNotSet(this.#keyManagementParameters, 'setKeyManagementParameters');\n this.#keyManagementParameters = parameters;\n return this;\n }\n setProtectedHeader(protectedHeader) {\n assertNotSet(this.#protectedHeader, 'setProtectedHeader');\n this.#protectedHeader = protectedHeader;\n return this;\n }\n setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n assertNotSet(this.#sharedUnprotectedHeader, 'setSharedUnprotectedHeader');\n this.#sharedUnprotectedHeader = sharedUnprotectedHeader;\n return this;\n }\n setUnprotectedHeader(unprotectedHeader) {\n assertNotSet(this.#unprotectedHeader, 'setUnprotectedHeader');\n this.#unprotectedHeader = unprotectedHeader;\n return this;\n }\n setAdditionalAuthenticatedData(aad) {\n this.#aad = aad;\n return this;\n }\n setContentEncryptionKey(cek) {\n assertNotSet(this.#cek, 'setContentEncryptionKey');\n this.#cek = cek;\n return this;\n }\n setInitializationVector(iv) {\n assertNotSet(this.#iv, 'setInitializationVector');\n this.#iv = iv;\n return this;\n }\n async encrypt(key, options) {\n if (!this.#protectedHeader && !this.#unprotectedHeader && !this.#sharedUnprotectedHeader) {\n throw new JWEInvalid('either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()');\n }\n validateCritDuplicates(JWEInvalid, this.#protectedHeader);\n return createJWE([\n this.#plaintext,\n this.#protectedHeader,\n this.#unprotectedHeader,\n this.#sharedUnprotectedHeader,\n this.#aad,\n this.#cek,\n this.#iv,\n this.#keyManagementParameters,\n options?.crit,\n options ? unprotected in options : false,\n ], key);\n }\n}\n","import { FlattenedEncrypt } from '../flattened/encrypt.js';\nimport { assertNotSet } from '../../lib/helpers.js';\nimport { JWEInvalid } from '../../util/errors.js';\nimport { generateCek } from '../../lib/content_encryption.js';\nimport { encryptKeyManagement } from '../../lib/key_management.js';\nimport { encode as b64u } from '../../util/base64url.js';\nimport { validateCritDuplicates } from '../../lib/options.js';\nimport { checkEncryptHeaders, encryptJWE } from '../../lib/jwe_encrypt.js';\nimport { prepareKey } from '../../lib/key.js';\nimport { jweAlgorithm } from '../../lib/jwe_algorithms.js';\nclass IndividualRecipient {\n #parent;\n state;\n constructor(enc, key, crit) {\n this.#parent = enc;\n this.state = [undefined, undefined, key, crit];\n }\n setUnprotectedHeader(unprotectedHeader) {\n assertNotSet(this.state[0], 'setUnprotectedHeader');\n this.state[0] = unprotectedHeader;\n return this;\n }\n setKeyManagementParameters(parameters) {\n assertNotSet(this.state[1], 'setKeyManagementParameters');\n this.state[1] = parameters;\n return this;\n }\n addRecipient(...args) {\n return this.#parent.addRecipient(...args);\n }\n encrypt(...args) {\n return this.#parent.encrypt(...args);\n }\n done() {\n return this.#parent;\n }\n}\nfunction copyOptionalMembers(flattened, jwe, recipient) {\n const { aad, protected: protectedHeader, unprotected, header } = flattened;\n if (aad)\n jwe.aad = aad;\n if (protectedHeader)\n jwe.protected = protectedHeader;\n if (unprotected)\n jwe.unprotected = unprotected;\n if (header)\n recipient.header = header;\n}\nexport class GeneralEncrypt {\n #plaintext;\n #recipients = [];\n #protectedHeader;\n #unprotectedHeader;\n #aad;\n constructor(plaintext) {\n this.#plaintext = plaintext;\n }\n addRecipient(key, options) {\n const recipient = new IndividualRecipient(this, key, options?.crit);\n this.#recipients.push(recipient);\n return recipient;\n }\n setProtectedHeader(protectedHeader) {\n assertNotSet(this.#protectedHeader, 'setProtectedHeader');\n this.#protectedHeader = protectedHeader;\n return this;\n }\n setSharedUnprotectedHeader(sharedUnprotectedHeader) {\n assertNotSet(this.#unprotectedHeader, 'setSharedUnprotectedHeader');\n this.#unprotectedHeader = sharedUnprotectedHeader;\n return this;\n }\n setAdditionalAuthenticatedData(aad) {\n this.#aad = aad;\n return this;\n }\n async encrypt() {\n if (!this.#recipients.length) {\n throw new JWEInvalid('at least one recipient must be added');\n }\n if (!(this.#plaintext instanceof Uint8Array)) {\n throw new TypeError('plaintext must be an instance of Uint8Array');\n }\n if (this.#recipients.length === 1) {\n const [recipient] = this.#recipients;\n const [unprotectedHeader, keyManagementParameters, key, crit] = recipient.state;\n const flattened = await new FlattenedEncrypt(this.#plaintext)\n .setAdditionalAuthenticatedData(this.#aad)\n .setProtectedHeader(this.#protectedHeader)\n .setSharedUnprotectedHeader(this.#unprotectedHeader)\n .setUnprotectedHeader(unprotectedHeader)\n .setKeyManagementParameters(keyManagementParameters)\n .encrypt(key, { crit });\n const jwe = {\n ciphertext: flattened.ciphertext,\n iv: flattened.iv,\n recipients: [{}],\n tag: flattened.tag,\n };\n if (flattened.encrypted_key)\n jwe.recipients[0].encrypted_key = flattened.encrypted_key;\n copyOptionalMembers(flattened, jwe, jwe.recipients[0]);\n return jwe;\n }\n validateCritDuplicates(JWEInvalid, this.#protectedHeader);\n let enc;\n const inputs = [];\n const checked = [];\n for (let i = 0; i < this.#recipients.length; i++) {\n const recipient = this.#recipients[i];\n const [unprotectedHeader, keyManagementParameters, , crit] = recipient.state;\n const input = [\n this.#plaintext,\n this.#protectedHeader,\n unprotectedHeader,\n this.#unprotectedHeader,\n this.#aad,\n undefined,\n undefined,\n keyManagementParameters,\n crit,\n true,\n ];\n const headers = checkEncryptHeaders(input);\n inputs.push(input);\n checked.push(headers);\n if (headers[1] === 'dir' || headers[1] === 'ECDH-ES') {\n throw new JWEInvalid(`\"${headers[1]}\" alg may only have a single recipient`);\n }\n if (!enc) {\n enc = headers[2];\n }\n else if (enc !== headers[2]) {\n throw new JWEInvalid('JWE \"enc\" (Encryption Algorithm) Header Parameter must be the same for all recipients');\n }\n }\n const cek = generateCek(checked[0][3]);\n const jwe = {\n ciphertext: '',\n recipients: [],\n };\n for (let i = 0; i < this.#recipients.length; i++) {\n const recipient = this.#recipients[i];\n const [unprotectedHeader, keyManagementParameters, key] = recipient.state;\n const target = {};\n jwe.recipients.push(target);\n if (i === 0) {\n inputs[0][5] = cek;\n const flattened = await encryptJWE(inputs[0], checked[0], key);\n jwe.ciphertext = flattened.ciphertext;\n jwe.iv = flattened.iv;\n jwe.tag = flattened.tag;\n target.encrypted_key = flattened.encrypted_key;\n copyOptionalMembers(flattened, jwe, target);\n continue;\n }\n const [, alg, , encEntry] = checked[i];\n const k = await prepareKey(jweAlgorithm(alg), key, 'encrypt');\n const [, encryptedKey, parameters] = await encryptKeyManagement(alg, encEntry, k, cek, keyManagementParameters);\n target.encrypted_key = b64u(encryptedKey);\n if (unprotectedHeader || parameters)\n target.header = { ...unprotectedHeader, ...parameters };\n }\n return jwe;\n }\n}\n","import { checkCryptoKey, checkModulusLength } from './crypto_key.js';\nasync function getSigKey(entry, key, usage) {\n if (key instanceof Uint8Array) {\n return crypto.subtle.importKey('raw', key, entry.subtle, false, [\n usage,\n ]);\n }\n checkCryptoKey(key, entry.subtle, usage);\n if (entry.minRsaBits)\n checkModulusLength(entry.alg, key);\n return key;\n}\nexport async function sign(entry, key, data) {\n const cryptoKey = await getSigKey(entry, key, 'sign');\n const signature = await crypto.subtle.sign(entry.signing, cryptoKey, data);\n return new Uint8Array(signature);\n}\nexport async function verify(entry, key, signature, data) {\n const cryptoKey = await getSigKey(entry, key, 'verify');\n try {\n return await crypto.subtle.verify(entry.signing, cryptoKey, signature, data);\n }\n catch {\n return false;\n }\n}\n","import { JOSENotSupported } from '../util/errors.js';\nimport { table } from './key_descriptor.js';\nconst sig = [['verify'], ['sign']];\nfunction hmac(bits) {\n const subtle = { name: 'HMAC', hash: `SHA-${bits}` };\n return { kty: ['oct'], secret: true, subtle, signing: subtle, usages: sig };\n}\nfunction rsa(bits, saltLength) {\n const name = saltLength ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5';\n const subtle = { name, hash: `SHA-${bits}` };\n return {\n kty: ['RSA'],\n subtle,\n signing: saltLength ? { ...subtle, saltLength } : subtle,\n usages: sig,\n minRsaBits: 2048,\n };\n}\nfunction ecdsa(crv, bits) {\n return {\n kty: ['EC'],\n crv,\n subtle: { name: 'ECDSA', namedCurve: crv },\n signing: { name: 'ECDSA', hash: `SHA-${bits}` },\n usages: sig,\n };\n}\nfunction eddsa() {\n const subtle = { name: 'Ed25519' };\n return {\n kty: ['OKP'],\n crv: 'Ed25519',\n subtle,\n signing: subtle,\n usages: sig,\n };\n}\nfunction mldsa(bits) {\n const name = `ML-DSA-${bits}`;\n const subtle = { name };\n return {\n kty: ['AKP'],\n subtle,\n signing: subtle,\n usages: sig,\n };\n}\nexport const JWS = table({\n HS256: hmac(256),\n HS384: hmac(384),\n HS512: hmac(512),\n RS256: rsa(256),\n RS384: rsa(384),\n RS512: rsa(512),\n PS256: rsa(256, 32),\n PS384: rsa(384, 48),\n PS512: rsa(512, 64),\n ES256: ecdsa('P-256', 256),\n ES384: ecdsa('P-384', 384),\n ES512: ecdsa('P-521', 512),\n EdDSA: eddsa(),\n Ed25519: eddsa(),\n 'ML-DSA-44': mldsa(44),\n 'ML-DSA-65': mldsa(65),\n 'ML-DSA-87': mldsa(87),\n});\nexport function jwsAlgorithm(alg) {\n const entry = typeof alg === 'string' ? JWS[alg] : undefined;\n if (!entry) {\n throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);\n }\n return entry;\n}\n","import { verify } from './signing.js';\nimport { jwsAlgorithm } from './jws_algorithms.js';\nimport { JOSEAlgNotAllowed, JWSInvalid, JWSSignatureVerificationFailed } from '../util/errors.js';\nimport { concat, decoder, encoder, encode } from './buffer_utils.js';\nimport { decodeBase64url, encodeBase64url, parseJoseHeader } from './helpers.js';\nimport { isDisjoint } from './type_checks.js';\nimport { validateCrit, validateAlgorithms, JWS_RECOGNIZED } from './options.js';\nimport { prepareKey } from './key.js';\nexport function verifyResult(jws, verified) {\n const [payload, parsedProt, , key, resolvedKey] = verified;\n const result = { payload };\n if (jws.protected !== undefined) {\n result.protectedHeader = parsedProt;\n }\n if (jws.header !== undefined) {\n result.unprotectedHeader = jws.header;\n }\n if (resolvedKey) {\n return { ...result, key };\n }\n return result;\n}\nexport function prepareVerify(options) {\n return [options && validateAlgorithms('algorithms', options.algorithms), options?.crit];\n}\nexport async function verifySignature(jws, shared, key) {\n const { protected: encodedProtected, header, payload: inputPayload } = jws;\n let parsedProt = {};\n if (encodedProtected) {\n parsedProt = parseJoseHeader(encodedProtected, JWSInvalid, 'JWS Protected Header is invalid');\n }\n let joseHeader;\n if (header !== undefined) {\n if (!isDisjoint(parsedProt, header)) {\n throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n }\n joseHeader = { ...parsedProt, ...header };\n }\n else {\n joseHeader = parsedProt;\n }\n const extensions = validateCrit(JWSInvalid, JWS_RECOGNIZED, shared[1], parsedProt, joseHeader);\n let b64 = true;\n if (extensions.includes('b64')) {\n b64 = parsedProt.b64;\n if (typeof b64 !== 'boolean') {\n throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n }\n }\n const { alg } = joseHeader;\n if (typeof alg !== 'string' || !alg) {\n throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n }\n if (shared[0] && !shared[0].has(alg)) {\n throw new JOSEAlgNotAllowed('\"alg\" (Algorithm) Header Parameter value not allowed');\n }\n if (b64) {\n if (typeof inputPayload !== 'string') {\n throw new JWSInvalid('JWS Payload must be a string');\n }\n }\n else if (typeof inputPayload !== 'string' && !(inputPayload instanceof Uint8Array)) {\n throw new JWSInvalid('JWS Payload must be a string or an Uint8Array instance');\n }\n let resolvedKey = false;\n if (typeof key === 'function') {\n key = await key(parsedProt, jws);\n resolvedKey = true;\n }\n const entry = jwsAlgorithm(alg);\n const data = concat(encodedProtected !== undefined ? encode(encodedProtected) : new Uint8Array(), encode('.'), typeof inputPayload === 'string'\n ? b64\n ?\n (shared[2] ??= encodeBase64url(inputPayload, 'payload', JWSInvalid))\n : encoder.encode(inputPayload)\n : inputPayload);\n const signature = decodeBase64url(jws.signature, 'signature', JWSInvalid);\n const k = await prepareKey(entry, key, 'verify');\n const verified = await verify(entry, k, signature, data);\n if (!verified) {\n throw new JWSSignatureVerificationFailed();\n }\n let payload;\n if (b64) {\n payload = decodeBase64url(inputPayload, 'payload', JWSInvalid);\n }\n else if (typeof inputPayload === 'string') {\n payload = encoder.encode(inputPayload);\n }\n else {\n payload = inputPayload;\n }\n return [payload, parsedProt, b64, k, resolvedKey];\n}\nexport async function verifyCompact(jws, shared, key) {\n if (jws instanceof Uint8Array) {\n jws = decoder.decode(jws);\n }\n if (typeof jws !== 'string') {\n throw new JWSInvalid('Compact JWS must be a string or Uint8Array');\n }\n const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split('.');\n if (length !== 3) {\n throw new JWSInvalid('Invalid Compact JWS');\n }\n return verifySignature({ payload, protected: protectedHeader, signature }, shared, key);\n}\n","import { prepareVerify, verifyCompact } from '../../lib/jws_verify.js';\nexport async function compactVerify(jws, key, options) {\n const verified = await verifyCompact(jws, prepareVerify(options), key);\n const result = { payload: verified[0], protectedHeader: verified[1] };\n if (typeof key === 'function') {\n return { ...result, key: verified[3] };\n }\n return result;\n}\n","import { JWSInvalid } from '../../util/errors.js';\nimport { isObject } from '../../lib/type_checks.js';\nimport { prepareVerify, verifySignature, verifyResult } from '../../lib/jws_verify.js';\nexport async function flattenedVerify(jws, key, options) {\n if (!isObject(jws)) {\n throw new JWSInvalid('Flattened JWS must be an object');\n }\n if (jws.protected === undefined && jws.header === undefined) {\n throw new JWSInvalid('Flattened JWS must have either of the \"protected\" or \"header\" members');\n }\n if (jws.protected !== undefined && typeof jws.protected !== 'string') {\n throw new JWSInvalid('JWS Protected Header incorrect type');\n }\n if (jws.payload === undefined) {\n throw new JWSInvalid('JWS Payload missing');\n }\n if (typeof jws.signature !== 'string') {\n throw new JWSInvalid('JWS Signature missing or incorrect type');\n }\n if (jws.header !== undefined && !isObject(jws.header)) {\n throw new JWSInvalid('JWS Unprotected Header incorrect type');\n }\n return verifyResult(jws, await verifySignature(jws, prepareVerify(options), key));\n}\n","import { prepareVerify, verifySignature, verifyResult } from '../../lib/jws_verify.js';\nimport { JWSInvalid, JWSSignatureVerificationFailed } from '../../util/errors.js';\nimport { isObject } from '../../lib/type_checks.js';\nexport async function generalVerify(jws, key, options) {\n if (!isObject(jws)) {\n throw new JWSInvalid('General JWS must be an object');\n }\n const { signatures, payload } = jws;\n if (!Array.isArray(signatures) || !signatures.every(isObject)) {\n throw new JWSInvalid('JWS Signatures missing or incorrect type');\n }\n let shared;\n try {\n if (payload === undefined)\n throw new Error();\n shared = prepareVerify(options);\n }\n catch {\n throw new JWSSignatureVerificationFailed();\n }\n for (const signature of signatures) {\n try {\n const { protected: encodedProtected, header, signature: encodedSignature } = signature;\n if (encodedProtected === undefined && header === undefined)\n throw new Error();\n if (encodedProtected !== undefined && typeof encodedProtected !== 'string') {\n throw new Error();\n }\n if (typeof encodedSignature !== 'string')\n throw new Error();\n if (header !== undefined && !isObject(header))\n throw new Error();\n return verifyResult(signature, await verifySignature({\n header,\n payload,\n protected: encodedProtected,\n signature: encodedSignature,\n }, shared, key));\n }\n catch {\n }\n }\n throw new JWSSignatureVerificationFailed();\n}\n","import { JWTClaimValidationFailed, JWTExpired, JWTInvalid } from '../util/errors.js';\nimport { encoder, strictDecoder } from './buffer_utils.js';\nimport { isObject } from './type_checks.js';\nconst epoch = (date) => Math.floor(date.getTime() / 1000);\nconst multipliers = {\n s: 1,\n m: 60,\n h: 3600,\n d: 86400,\n w: 604800,\n y: 31557600,\n};\nconst REGEX = /^(\\+|\\-)? ?(\\d+|\\d+\\.\\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;\nconst checkFailed = 'check_failed';\nexport function secs(str) {\n const matched = REGEX.exec(str);\n if (!matched || (matched[4] && matched[1])) {\n throw new TypeError('Invalid time period format');\n }\n const value = parseFloat(matched[2]);\n const numericDate = Math.round(value * multipliers[matched[3][0].toLowerCase()]);\n if (matched[1] === '-' || matched[4] === 'ago') {\n return -numericDate;\n }\n return numericDate;\n}\nfunction validateInput(label, input) {\n if (!Number.isFinite(input)) {\n throw new TypeError(`Invalid ${label} input`);\n }\n return input;\n}\nfunction numericDate(value, label) {\n if (typeof value === 'number')\n return validateInput(label, value);\n if (value instanceof Date)\n return validateInput(label, epoch(value));\n return epoch(new Date()) + secs(value);\n}\nconst normalizeTyp = (value) => {\n if (value.includes('/')) {\n return value.toLowerCase();\n }\n return `application/${value.toLowerCase()}`;\n};\nconst checkAudiencePresence = (audPayload, audOption) => {\n if (typeof audPayload === 'string') {\n return audOption.includes(audPayload);\n }\n if (Array.isArray(audPayload)) {\n return audOption.some((aud) => audPayload.includes(aud));\n }\n return false;\n};\nfunction validateNumericDate(payload, claim, required = false) {\n const value = payload[claim];\n if (value === undefined && !required)\n return undefined;\n if (typeof value !== 'number') {\n throw new JWTClaimValidationFailed(`\"${claim}\" claim must be a number`, payload, claim, 'invalid');\n }\n return value;\n}\nfunction unexpectedClaim(payload, claim) {\n throw new JWTClaimValidationFailed(`unexpected \"${claim}\" claim value`, payload, claim, checkFailed);\n}\nexport function validateClaimsSet(protectedHeader, encodedPayload, options = {}) {\n let payload;\n try {\n payload = JSON.parse(strictDecoder.decode(encodedPayload));\n }\n catch {\n }\n if (!isObject(payload)) {\n throw new JWTInvalid('JWT Claims Set must be a top-level JSON object');\n }\n const { typ } = options;\n if (typ &&\n (typeof protectedHeader.typ !== 'string' ||\n normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ))) {\n throw new JWTClaimValidationFailed('unexpected \"typ\" JWT header value', payload, 'typ', checkFailed);\n }\n const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options;\n const presenceCheck = [...requiredClaims];\n if (maxTokenAge !== undefined)\n presenceCheck.push('iat');\n if (audience !== undefined)\n presenceCheck.push('aud');\n if (subject !== undefined)\n presenceCheck.push('sub');\n if (issuer !== undefined)\n presenceCheck.push('iss');\n for (const claim of new Set(presenceCheck.reverse())) {\n if (!Object.hasOwn(payload, claim)) {\n throw new JWTClaimValidationFailed(`missing required \"${claim}\" claim`, payload, claim, 'missing');\n }\n }\n if (issuer !== undefined &&\n !(Array.isArray(issuer) ? issuer : [issuer]).includes(payload.iss)) {\n unexpectedClaim(payload, 'iss');\n }\n if (subject !== undefined && payload.sub !== subject) {\n unexpectedClaim(payload, 'sub');\n }\n if (audience !== undefined &&\n !checkAudiencePresence(payload.aud, typeof audience === 'string' ? [audience] : audience)) {\n unexpectedClaim(payload, 'aud');\n }\n const { clockTolerance } = options;\n let tolerance = 0;\n if (typeof clockTolerance === 'string') {\n tolerance = secs(clockTolerance);\n }\n else if (clockTolerance !== undefined) {\n if (typeof clockTolerance !== 'number') {\n throw new TypeError('Invalid clockTolerance option type');\n }\n tolerance = clockTolerance;\n }\n validateInput('clockTolerance option', tolerance);\n const { currentDate } = options;\n const now = validateInput('currentDate option', epoch(currentDate || new Date()));\n const iat = validateNumericDate(payload, 'iat', maxTokenAge !== undefined);\n const nbf = validateNumericDate(payload, 'nbf');\n if (nbf !== undefined) {\n if (nbf > now + tolerance) {\n throw new JWTClaimValidationFailed('\"nbf\" claim timestamp check failed', payload, 'nbf', checkFailed);\n }\n }\n const exp = validateNumericDate(payload, 'exp');\n if (exp !== undefined) {\n if (exp <= now - tolerance) {\n throw new JWTExpired('\"exp\" claim timestamp check failed', payload, 'exp', checkFailed);\n }\n }\n if (maxTokenAge !== undefined) {\n const age = now - iat;\n const max = typeof maxTokenAge === 'number' ? maxTokenAge : secs(maxTokenAge);\n if (age - tolerance > max) {\n throw new JWTExpired('\"iat\" claim timestamp check failed (too far in the past)', payload, 'iat', checkFailed);\n }\n if (age < 0 - tolerance) {\n throw new JWTClaimValidationFailed('\"iat\" claim timestamp check failed (it should be in the past)', payload, 'iat', checkFailed);\n }\n }\n return payload;\n}\nexport class JWTClaimsBuilder {\n #payload;\n constructor(payload) {\n if (!isObject(payload)) {\n throw new TypeError('JWT Claims Set MUST be an object');\n }\n this.#payload = structuredClone(payload);\n }\n data() {\n return encoder.encode(JSON.stringify(this.#payload));\n }\n get iss() {\n return this.#payload.iss;\n }\n set iss(value) {\n this.#payload.iss = value;\n }\n get sub() {\n return this.#payload.sub;\n }\n set sub(value) {\n this.#payload.sub = value;\n }\n get aud() {\n return this.#payload.aud;\n }\n set aud(value) {\n this.#payload.aud = value;\n }\n set jti(value) {\n this.#payload.jti = value;\n }\n set nbf(value) {\n this.#payload.nbf = numericDate(value, 'setNotBefore');\n }\n set exp(value) {\n this.#payload.exp = numericDate(value, 'setExpirationTime');\n }\n set iat(value) {\n if (value === undefined) {\n this.#payload.iat = epoch(new Date());\n }\n else if (typeof value === 'string') {\n this.#payload.iat = validateInput('setIssuedAt', epoch(new Date()) + secs(value));\n }\n else {\n this.#payload.iat = numericDate(value, 'setIssuedAt');\n }\n }\n}\n","import { prepareVerify, verifyCompact } from '../lib/jws_verify.js';\nimport { validateClaimsSet } from '../lib/jwt_claims_set.js';\nimport { JWTInvalid } from '../util/errors.js';\nexport async function jwtVerify(jwt, key, options) {\n const verified = await verifyCompact(jwt, prepareVerify(options), key);\n if (!verified[2]) {\n throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n }\n const payload = validateClaimsSet(verified[1], verified[0], options);\n const result = { payload, protectedHeader: verified[1] };\n if (typeof key === 'function') {\n return { ...result, key: verified[3] };\n }\n return result;\n}\n","import { prepareDecrypt, decryptCompact } from '../lib/jwe_decrypt.js';\nimport { validateClaimsSet } from '../lib/jwt_claims_set.js';\nimport { JWTClaimValidationFailed } from '../util/errors.js';\nexport async function jwtDecrypt(jwt, key, options) {\n const decrypted = await decryptCompact(jwt, prepareDecrypt(options), key);\n const protectedHeader = decrypted[1];\n const payload = validateClaimsSet(protectedHeader, decrypted[0], options);\n if (protectedHeader.iss !== undefined && protectedHeader.iss !== payload.iss) {\n throw new JWTClaimValidationFailed('replicated \"iss\" claim header parameter mismatch', payload, 'iss', 'mismatch');\n }\n if (protectedHeader.sub !== undefined && protectedHeader.sub !== payload.sub) {\n throw new JWTClaimValidationFailed('replicated \"sub\" claim header parameter mismatch', payload, 'sub', 'mismatch');\n }\n if (protectedHeader.aud !== undefined &&\n JSON.stringify(protectedHeader.aud) !== JSON.stringify(payload.aud)) {\n throw new JWTClaimValidationFailed('replicated \"aud\" claim header parameter mismatch', payload, 'aud', 'mismatch');\n }\n const result = { payload, protectedHeader };\n if (typeof key === 'function') {\n return { ...result, key: decrypted[2] };\n }\n return result;\n}\n","import { FlattenedEncrypt } from '../flattened/encrypt.js';\nexport class CompactEncrypt {\n #flattened;\n constructor(plaintext) {\n this.#flattened = new FlattenedEncrypt(plaintext);\n }\n setContentEncryptionKey(cek) {\n this.#flattened.setContentEncryptionKey(cek);\n return this;\n }\n setInitializationVector(iv) {\n this.#flattened.setInitializationVector(iv);\n return this;\n }\n setProtectedHeader(protectedHeader) {\n this.#flattened.setProtectedHeader(protectedHeader);\n return this;\n }\n setKeyManagementParameters(parameters) {\n this.#flattened.setKeyManagementParameters(parameters);\n return this;\n }\n async encrypt(key, options) {\n const jwe = await this.#flattened.encrypt(key, options);\n return [jwe.protected, jwe.encrypted_key, jwe.iv, jwe.ciphertext, jwe.tag].join('.');\n }\n}\n","import { encode as b64u } from '../util/base64url.js';\nimport { sign } from './signing.js';\nimport { jwsAlgorithm } from './jws_algorithms.js';\nimport { isDisjoint } from './type_checks.js';\nimport { JWSInvalid } from '../util/errors.js';\nimport { concat, encode } from './buffer_utils.js';\nimport { validateCrit, validateCritDuplicates, JWS_RECOGNIZED } from './options.js';\nimport { prepareKey } from './key.js';\nexport function unencodedPayload(protectedHeader) {\n return (protectedHeader?.b64 === false &&\n Array.isArray(protectedHeader.crit) &&\n protectedHeader.crit.includes('b64'));\n}\nexport async function createSignature(input, key) {\n const { protectedHeader, unprotectedHeader } = input;\n if (!protectedHeader && !unprotectedHeader) {\n throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');\n }\n if (!isDisjoint(protectedHeader, unprotectedHeader)) {\n throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');\n }\n const joseHeader = { ...protectedHeader, ...unprotectedHeader };\n validateCritDuplicates(JWSInvalid, protectedHeader);\n const extensions = validateCrit(JWSInvalid, JWS_RECOGNIZED, input.crit, protectedHeader, joseHeader);\n let b64 = true;\n if (extensions.includes('b64')) {\n b64 = protectedHeader.b64;\n if (typeof b64 !== 'boolean') {\n throw new JWSInvalid('The \"b64\" (base64url-encode payload) Header Parameter must be a boolean');\n }\n }\n const { alg } = joseHeader;\n if (typeof alg !== 'string' || !alg) {\n throw new JWSInvalid('JWS \"alg\" (Algorithm) Header Parameter missing or invalid');\n }\n const entry = jwsAlgorithm(alg);\n let payloadS;\n let payloadB;\n if (b64) {\n const encoded = (input.encoded ??= []);\n encoded[0] ??= b64u(input.payload);\n encoded[1] ??= encode(encoded[0]);\n payloadS = encoded[0];\n payloadB = encoded[1];\n }\n else {\n payloadB = input.payload;\n payloadS = '';\n }\n let protectedHeaderString;\n let protectedHeaderBytes;\n if (protectedHeader) {\n protectedHeaderString = b64u(JSON.stringify(protectedHeader));\n protectedHeaderBytes = encode(protectedHeaderString);\n }\n else {\n protectedHeaderString = '';\n protectedHeaderBytes = new Uint8Array();\n }\n const data = concat(protectedHeaderBytes, encode('.'), payloadB);\n const k = await prepareKey(entry, key, 'sign');\n const signature = await sign(entry, k, data);\n const jws = {\n signature: b64u(signature),\n payload: payloadS,\n };\n if (protectedHeader) {\n jws.protected = protectedHeaderString;\n }\n if (unprotectedHeader) {\n jws.header = unprotectedHeader;\n }\n return jws;\n}\n","import { createSignature } from '../../lib/jws_sign.js';\nimport { assertNotSet } from '../../lib/helpers.js';\nexport class FlattenedSign {\n #payload;\n #protectedHeader;\n #unprotectedHeader;\n constructor(payload) {\n if (!(payload instanceof Uint8Array)) {\n throw new TypeError('payload must be an instance of Uint8Array');\n }\n this.#payload = payload;\n }\n setProtectedHeader(protectedHeader) {\n assertNotSet(this.#protectedHeader, 'setProtectedHeader');\n this.#protectedHeader = protectedHeader;\n return this;\n }\n setUnprotectedHeader(unprotectedHeader) {\n assertNotSet(this.#unprotectedHeader, 'setUnprotectedHeader');\n this.#unprotectedHeader = unprotectedHeader;\n return this;\n }\n async sign(key, options) {\n return createSignature({\n payload: this.#payload,\n protectedHeader: this.#protectedHeader,\n unprotectedHeader: this.#unprotectedHeader,\n crit: options?.crit,\n }, key);\n }\n}\n","import { FlattenedSign } from '../flattened/sign.js';\nimport { unencodedPayload } from '../../lib/jws_sign.js';\nexport class CompactSign {\n #flattened;\n #protectedHeader;\n constructor(payload) {\n this.#flattened = new FlattenedSign(payload);\n }\n setProtectedHeader(protectedHeader) {\n this.#flattened.setProtectedHeader(protectedHeader);\n this.#protectedHeader = protectedHeader;\n return this;\n }\n async sign(key, options) {\n if (unencodedPayload(this.#protectedHeader)) {\n throw new TypeError('use the flattened module for creating JWS with b64: false');\n }\n const jws = await this.#flattened.sign(key, options);\n return `${jws.protected}.${jws.payload}.${jws.signature}`;\n }\n}\n","import { createSignature } from '../../lib/jws_sign.js';\nimport { JWSInvalid } from '../../util/errors.js';\nimport { assertNotSet } from '../../lib/helpers.js';\nclass IndividualSignature {\n #parent;\n state;\n constructor(sig, key, options) {\n this.#parent = sig;\n this.state = [undefined, undefined, key, options?.crit];\n }\n setProtectedHeader(protectedHeader) {\n assertNotSet(this.state[0], 'setProtectedHeader');\n this.state[0] = protectedHeader;\n return this;\n }\n setUnprotectedHeader(unprotectedHeader) {\n assertNotSet(this.state[1], 'setUnprotectedHeader');\n this.state[1] = unprotectedHeader;\n return this;\n }\n addSignature(...args) {\n return this.#parent.addSignature(...args);\n }\n sign(...args) {\n return this.#parent.sign(...args);\n }\n done() {\n return this.#parent;\n }\n}\nexport class GeneralSign {\n #payload;\n #signatures = [];\n constructor(payload) {\n this.#payload = payload;\n }\n addSignature(key, options) {\n const signature = new IndividualSignature(this, key, options);\n this.#signatures.push(signature);\n return signature;\n }\n async sign() {\n if (!this.#signatures.length) {\n throw new JWSInvalid('at least one signature must be added');\n }\n if (!(this.#payload instanceof Uint8Array)) {\n throw new TypeError('payload must be an instance of Uint8Array');\n }\n const jws = {\n signatures: [],\n payload: '',\n };\n const encoded = [];\n for (let i = 0; i < this.#signatures.length; i++) {\n const signature = this.#signatures[i];\n const [protectedHeader, unprotectedHeader, key, crit] = signature.state;\n const { payload, ...rest } = await createSignature({\n payload: this.#payload,\n protectedHeader,\n unprotectedHeader,\n crit,\n encoded,\n }, key);\n if (i === 0) {\n jws.payload = payload;\n }\n else if (jws.payload !== payload) {\n throw new JWSInvalid('inconsistent use of JWS Unencoded Payload (RFC7797)');\n }\n jws.signatures.push(rest);\n }\n return jws;\n }\n}\n","import { CompactSign } from '../jws/compact/sign.js';\nimport { unencodedPayload } from '../lib/jws_sign.js';\nimport { JWTInvalid } from '../util/errors.js';\nimport { JWTClaimsBuilder } from '../lib/jwt_claims_set.js';\nexport class SignJWT {\n #protectedHeader;\n #jwt;\n constructor(payload = {}) {\n this.#jwt = new JWTClaimsBuilder(payload);\n }\n setIssuer(issuer) {\n this.#jwt.iss = issuer;\n return this;\n }\n setSubject(subject) {\n this.#jwt.sub = subject;\n return this;\n }\n setAudience(audience) {\n this.#jwt.aud = audience;\n return this;\n }\n setJti(jwtId) {\n this.#jwt.jti = jwtId;\n return this;\n }\n setNotBefore(input) {\n this.#jwt.nbf = input;\n return this;\n }\n setExpirationTime(input) {\n this.#jwt.exp = input;\n return this;\n }\n setIssuedAt(input) {\n this.#jwt.iat = input;\n return this;\n }\n setProtectedHeader(protectedHeader) {\n this.#protectedHeader = protectedHeader;\n return this;\n }\n async sign(key, options) {\n const sig = new CompactSign(this.#jwt.data());\n sig.setProtectedHeader(this.#protectedHeader);\n if (unencodedPayload(this.#protectedHeader)) {\n throw new JWTInvalid('JWTs MUST NOT use unencoded payload');\n }\n return sig.sign(key, options);\n }\n}\n","import { CompactEncrypt } from '../jwe/compact/encrypt.js';\nimport { JWTClaimsBuilder } from '../lib/jwt_claims_set.js';\nimport { assertNotSet } from '../lib/helpers.js';\nexport class EncryptJWT {\n #cek;\n #iv;\n #keyManagementParameters;\n #protectedHeader;\n #replicateIssuerAsHeader;\n #replicateSubjectAsHeader;\n #replicateAudienceAsHeader;\n #jwt;\n constructor(payload = {}) {\n this.#jwt = new JWTClaimsBuilder(payload);\n }\n setIssuer(issuer) {\n this.#jwt.iss = issuer;\n return this;\n }\n setSubject(subject) {\n this.#jwt.sub = subject;\n return this;\n }\n setAudience(audience) {\n this.#jwt.aud = audience;\n return this;\n }\n setJti(jwtId) {\n this.#jwt.jti = jwtId;\n return this;\n }\n setNotBefore(input) {\n this.#jwt.nbf = input;\n return this;\n }\n setExpirationTime(input) {\n this.#jwt.exp = input;\n return this;\n }\n setIssuedAt(input) {\n this.#jwt.iat = input;\n return this;\n }\n setProtectedHeader(protectedHeader) {\n assertNotSet(this.#protectedHeader, 'setProtectedHeader');\n this.#protectedHeader = protectedHeader;\n return this;\n }\n setKeyManagementParameters(parameters) {\n assertNotSet(this.#keyManagementParameters, 'setKeyManagementParameters');\n this.#keyManagementParameters = parameters;\n return this;\n }\n setContentEncryptionKey(cek) {\n assertNotSet(this.#cek, 'setContentEncryptionKey');\n this.#cek = cek;\n return this;\n }\n setInitializationVector(iv) {\n assertNotSet(this.#iv, 'setInitializationVector');\n this.#iv = iv;\n return this;\n }\n replicateIssuerAsHeader() {\n this.#replicateIssuerAsHeader = true;\n return this;\n }\n replicateSubjectAsHeader() {\n this.#replicateSubjectAsHeader = true;\n return this;\n }\n replicateAudienceAsHeader() {\n this.#replicateAudienceAsHeader = true;\n return this;\n }\n async encrypt(key, options) {\n const enc = new CompactEncrypt(this.#jwt.data());\n if (this.#protectedHeader &&\n (this.#replicateIssuerAsHeader ||\n this.#replicateSubjectAsHeader ||\n this.#replicateAudienceAsHeader)) {\n this.#protectedHeader = {\n ...this.#protectedHeader,\n iss: this.#replicateIssuerAsHeader ? this.#jwt.iss : undefined,\n sub: this.#replicateSubjectAsHeader ? this.#jwt.sub : undefined,\n aud: this.#replicateAudienceAsHeader ? this.#jwt.aud : undefined,\n };\n }\n enc.setProtectedHeader(this.#protectedHeader);\n if (this.#iv) {\n enc.setInitializationVector(this.#iv);\n }\n if (this.#cek) {\n enc.setContentEncryptionKey(this.#cek);\n }\n if (this.#keyManagementParameters) {\n enc.setKeyManagementParameters(this.#keyManagementParameters);\n }\n return enc.encrypt(key, options);\n }\n}\n","import { JOSENotSupported } from '../util/errors.js';\nimport { JWS } from './jws_algorithms.js';\nimport { JWE } from './jwe_algorithms.js';\nexport const algArgument = '\"alg\" (Algorithm)';\nexport function unsupportedAlg(source = 'JWK \"alg\" (Algorithm) Parameter') {\n throw new JOSENotSupported(`Invalid or unsupported ${source} value`);\n}\nexport function keyAlgorithm(alg, source) {\n return (typeof alg === 'string' ? (JWS[alg] ?? JWE[alg]) : undefined) ?? unsupportedAlg(source);\n}\n","import { invalidKeyInput } from './invalid_key_input.js';\nimport { encodeBase64, decodeBase64 } from '../lib/base64.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { keyAlgorithm, unsupportedAlg, algArgument } from './key_algorithm.js';\nimport { isCryptoKey, isKeyObject } from './is_key_like.js';\nconst formatPEM = (b64, descriptor) => {\n const newlined = (b64.match(/.{1,64}/g) || []).join('\\n');\n return `-----BEGIN ${descriptor}-----\\n${newlined}\\n-----END ${descriptor}-----`;\n};\nconst genericExport = async (keyType, keyFormat, key) => {\n if (isKeyObject(key)) {\n if (key.type !== keyType) {\n throw new TypeError(`key is not a ${keyType} key`);\n }\n return key.export({ format: 'pem', type: keyFormat });\n }\n if (!isCryptoKey(key)) {\n throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject'));\n }\n if (!key.extractable) {\n throw new TypeError('CryptoKey is not extractable');\n }\n if (key.type !== keyType) {\n throw new TypeError(`key is not a ${keyType} key`);\n }\n return formatPEM(encodeBase64(new Uint8Array(await crypto.subtle.exportKey(keyFormat, key))), `${keyType.toUpperCase()} KEY`);\n};\nexport const toSPKI = (key) => genericExport('public', 'spki', key);\nexport const toPKCS8 = (key) => genericExport('private', 'pkcs8', key);\nconst bytesEqual = (a, b) => {\n if (a.byteLength !== b.length)\n return false;\n for (let i = 0; i < a.byteLength; i++) {\n if (a[i] !== b[i])\n return false;\n }\n return true;\n};\nconst createASN1State = (data) => ({ data, pos: 0 });\nconst readByte = (state) => {\n const byte = state.data[state.pos++];\n if (byte === undefined) {\n throw new Error('Unexpected end of ASN.1 input');\n }\n return byte;\n};\nconst parseLength = (state) => {\n const first = readByte(state);\n if (first & 0x80) {\n const lengthOfLen = first & 0x7f;\n let length = 0;\n for (let i = 0; i < lengthOfLen; i++) {\n length = (length << 8) | readByte(state);\n }\n return length;\n }\n return first;\n};\nconst skipElement = (state, count = 1) => {\n while (count-- > 0) {\n state.pos++;\n const length = parseLength(state);\n state.pos += length;\n }\n};\nconst expectTag = (state, expectedTag, errorMessage) => {\n if (readByte(state) !== expectedTag) {\n throw new Error(errorMessage);\n }\n};\nconst getSubarray = (state, length) => {\n if (length < 0 || state.pos + length > state.data.length) {\n throw new Error('Unexpected end of ASN.1 input');\n }\n const result = state.data.subarray(state.pos, state.pos + length);\n state.pos += length;\n return result;\n};\nconst parseAlgorithmOID = (state) => {\n expectTag(state, 0x06, 'Expected algorithm OID');\n const oidLen = parseLength(state);\n return getSubarray(state, oidLen);\n};\nfunction parseKeyHeader(state, keyFormat) {\n expectTag(state, 0x30, `Invalid ${keyFormat === 'spki' ? 'SPKI' : 'PKCS#8'} structure`);\n parseLength(state);\n if (keyFormat === 'pkcs8') {\n expectTag(state, 0x02, 'Expected version field');\n const length = parseLength(state);\n state.pos += length;\n }\n expectTag(state, 0x30, 'Expected algorithm identifier');\n parseLength(state);\n}\nconst parseECAlgorithmIdentifier = (state) => {\n const algOid = parseAlgorithmOID(state);\n if (bytesEqual(algOid, [0x2b, 0x65, 0x6e])) {\n return 'X25519';\n }\n if (!bytesEqual(algOid, [0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01])) {\n throw new Error('Unsupported key algorithm');\n }\n expectTag(state, 0x06, 'Expected curve OID');\n const curveOidLen = parseLength(state);\n const curveOid = getSubarray(state, curveOidLen);\n if (bytesEqual(curveOid, [0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07]))\n return 'P-256';\n if (bytesEqual(curveOid, [0x2b, 0x81, 0x04, 0x00, 0x22]))\n return 'P-384';\n if (bytesEqual(curveOid, [0x2b, 0x81, 0x04, 0x00, 0x23]))\n return 'P-521';\n throw new Error('Unsupported named curve');\n};\nconst genericImport = async (keyFormat, keyData, alg, options) => {\n const entry = keyAlgorithm(alg, algArgument);\n if (entry.secret) {\n unsupportedAlg(algArgument);\n }\n const isPublic = keyFormat === 'spki';\n let algorithm;\n if (entry.resolve) {\n try {\n const state = createASN1State(keyData);\n parseKeyHeader(state, keyFormat);\n algorithm = entry.resolve({ crv: parseECAlgorithmIdentifier(state) });\n }\n catch {\n throw new JOSENotSupported('Invalid or unsupported key format');\n }\n }\n else {\n algorithm = entry.subtle;\n }\n return crypto.subtle.importKey(keyFormat, keyData, algorithm, options?.extractable ?? isPublic, entry.usages[isPublic ? 0 : 1]);\n};\nconst processPEMData = (pem, pattern) => {\n return decodeBase64(pem.replace(pattern, ''));\n};\nexport const fromPKCS8 = (pem, alg, options) => {\n const keyData = processPEMData(pem, /(?:-----(?:BEGIN|END) PRIVATE KEY-----|\\s)/g);\n return genericImport('pkcs8', keyData, alg, options);\n};\nexport const fromSPKI = (pem, alg, options) => {\n const keyData = processPEMData(pem, /(?:-----(?:BEGIN|END) PUBLIC KEY-----|\\s)/g);\n return genericImport('spki', keyData, alg, options);\n};\nfunction spkiFromX509(buf) {\n const state = createASN1State(buf);\n expectTag(state, 0x30, 'Invalid certificate structure');\n parseLength(state);\n expectTag(state, 0x30, 'Invalid tbsCertificate structure');\n parseLength(state);\n if (buf[state.pos] === 0xa0) {\n skipElement(state, 6);\n }\n else {\n skipElement(state, 5);\n }\n const spkiStart = state.pos;\n expectTag(state, 0x30, 'Invalid SPKI structure');\n const spkiContentLen = parseLength(state);\n return buf.subarray(spkiStart, spkiStart + spkiContentLen + (state.pos - spkiStart));\n}\nexport const fromX509 = (pem, alg, options) => {\n let spki;\n try {\n const certificate = processPEMData(pem, /(?:-----(?:BEGIN|END) CERTIFICATE-----|\\s)/g);\n spki = spkiFromX509(certificate);\n }\n catch (cause) {\n throw new TypeError('Failed to parse the X.509 certificate', { cause });\n }\n return genericImport('spki', spki, alg, options);\n};\n","import { toSPKI as exportPublic, toPKCS8 as exportPrivate } from '../lib/asn1.js';\nimport { invalidKeyInput } from '../lib/invalid_key_input.js';\nimport { encode as b64u } from '../util/base64url.js';\nimport { isCryptoKey, isKeyObject } from '../lib/is_key_like.js';\nfunction omitUndefinedProperties(jwk) {\n return Object.fromEntries(Object.entries(jwk).filter(([, value]) => value !== undefined));\n}\nasync function keyToJWK(key) {\n if (isKeyObject(key)) {\n if (key.type === 'secret') {\n key = key.export();\n }\n else {\n return key.export({ format: 'jwk' });\n }\n }\n if (key instanceof Uint8Array) {\n return {\n kty: 'oct',\n k: b64u(key),\n };\n }\n if (!isCryptoKey(key)) {\n throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject', 'Uint8Array'));\n }\n if (!key.extractable) {\n throw new TypeError('non-extractable CryptoKey cannot be exported as a JWK');\n }\n const { ext, key_ops, alg, use, ...jwk } = omitUndefinedProperties(await crypto.subtle.exportKey('jwk', key));\n if (jwk.kty === 'AKP') {\n ;\n jwk.alg = alg;\n }\n return jwk;\n}\nexport function exportSPKI(key) {\n return exportPublic(key);\n}\nexport function exportPKCS8(key) {\n return exportPrivate(key);\n}\nexport function exportJWK(key) {\n return keyToJWK(key);\n}\n","import { digest } from '../lib/helpers.js';\nimport { encode as b64u } from '../util/base64url.js';\nimport { JOSENotSupported, JWKInvalid } from '../util/errors.js';\nimport { encode } from '../lib/buffer_utils.js';\nimport { isKeyLike } from '../lib/is_key_like.js';\nimport { isJWK } from '../lib/type_checks.js';\nimport { exportJWK } from '../key/export.js';\nimport { invalidKeyInput } from '../lib/invalid_key_input.js';\nconst check = (value, description) => {\n if (typeof value !== 'string' || !value) {\n throw new JWKInvalid(`${description} missing or invalid`);\n }\n};\nexport async function calculateJwkThumbprint(key, digestAlgorithm) {\n let jwk;\n if (isJWK(key)) {\n jwk = key;\n }\n else if (isKeyLike(key)) {\n jwk = await exportJWK(key);\n }\n else {\n throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));\n }\n digestAlgorithm ??= 'sha256';\n if (digestAlgorithm !== 'sha256' &&\n digestAlgorithm !== 'sha384' &&\n digestAlgorithm !== 'sha512') {\n throw new TypeError('digestAlgorithm must one of \"sha256\", \"sha384\", or \"sha512\"');\n }\n let components;\n switch (jwk.kty) {\n case 'AKP':\n check(jwk.alg, '\"alg\" (Algorithm) Parameter');\n check(jwk.pub, '\"pub\" (Public key) Parameter');\n components = { alg: jwk.alg, kty: jwk.kty, pub: jwk.pub };\n break;\n case 'EC':\n check(jwk.crv, '\"crv\" (Curve) Parameter');\n check(jwk.x, '\"x\" (X Coordinate) Parameter');\n check(jwk.y, '\"y\" (Y Coordinate) Parameter');\n components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };\n break;\n case 'OKP':\n check(jwk.crv, '\"crv\" (Subtype of Key Pair) Parameter');\n check(jwk.x, '\"x\" (Public Key) Parameter');\n components = { crv: jwk.crv, kty: jwk.kty, x: jwk.x };\n break;\n case 'RSA':\n check(jwk.e, '\"e\" (Exponent) Parameter');\n check(jwk.n, '\"n\" (Modulus) Parameter');\n components = { e: jwk.e, kty: jwk.kty, n: jwk.n };\n break;\n case 'oct':\n check(jwk.k, '\"k\" (Key Value) Parameter');\n components = { k: jwk.k, kty: jwk.kty };\n break;\n default:\n throw new JOSENotSupported('\"kty\" (Key Type) Parameter missing or unsupported');\n }\n const data = encode(JSON.stringify(components));\n return b64u(await digest(digestAlgorithm, data));\n}\nexport async function calculateJwkThumbprintUri(key, digestAlgorithm) {\n digestAlgorithm ??= 'sha256';\n const thumbprint = await calculateJwkThumbprint(key, digestAlgorithm);\n return `urn:ietf:params:oauth:jwk-thumbprint:sha-${digestAlgorithm.slice(-3)}:${thumbprint}`;\n}\n","import { jwkToKey } from '../lib/jwk_to_key.js';\nimport { jwsAlgorithm } from '../lib/jws_algorithms.js';\nimport { isObject } from '../lib/type_checks.js';\nimport { JWSInvalid } from '../util/errors.js';\nexport async function EmbeddedJWK(protectedHeader, token) {\n const joseHeader = {\n ...protectedHeader,\n ...token?.header,\n };\n if (!isObject(joseHeader.jwk)) {\n throw new JWSInvalid('\"jwk\" (JSON Web Key) Header Parameter must be a JSON object');\n }\n const entry = jwsAlgorithm(joseHeader.alg);\n const key = await jwkToKey(entry, { ...joseHeader.jwk, ext: true });\n if (key.type !== 'public') {\n throw new JWSInvalid('\"jwk\" (JSON Web Key) Header Parameter must be a public key');\n }\n return key;\n}\n","import { jwkToKey } from '../lib/jwk_to_key.js';\nimport { JWS } from '../lib/jws_algorithms.js';\nimport { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';\nimport { isObject } from '../lib/type_checks.js';\nfunction signatureAlgorithm(alg) {\n const entry = typeof alg === 'string' ? JWS[alg] : undefined;\n if (!entry || entry.secret) {\n throw new JOSENotSupported('Unsupported \"alg\" value for a JSON Web Key Set');\n }\n return entry;\n}\nfunction isJWKSLike(jwks) {\n if (!jwks || typeof jwks !== 'object') {\n return false;\n }\n const { keys } = jwks;\n return Array.isArray(keys) && keys.every((isObject));\n}\nclass LocalJWKSetImpl {\n #jwks;\n #cached = new WeakMap();\n constructor(jwks) {\n if (!isJWKSLike(jwks)) {\n throw new JWKSInvalid('JSON Web Key Set malformed');\n }\n this.#jwks = structuredClone(jwks);\n }\n jwks() {\n return this.#jwks;\n }\n async getKey(protectedHeader, token) {\n const { alg, kid } = { ...protectedHeader, ...token?.header };\n const entry = signatureAlgorithm(alg);\n const candidates = this.#jwks.keys.filter((jwk) => entry.kty.includes(jwk.kty) &&\n (typeof kid !== 'string' || kid === jwk.kid) &&\n (!(typeof jwk.alg === 'string' || jwk.kty === 'AKP') || alg === jwk.alg) &&\n (typeof jwk.use !== 'string' || jwk.use === 'sig') &&\n (!Array.isArray(jwk.key_ops) || jwk.key_ops.includes('verify')) &&\n (!entry.crv || jwk.crv === entry.crv));\n const { 0: jwk, length } = candidates;\n if (length === 0) {\n throw new JWKSNoMatchingKey();\n }\n if (length !== 1) {\n const error = new JWKSMultipleMatchingKeys();\n const _cached = this.#cached;\n error[Symbol.asyncIterator] = async function* () {\n for (const jwk of candidates) {\n try {\n yield await importWithAlgCache(_cached, jwk, entry);\n }\n catch { }\n }\n };\n throw error;\n }\n return importWithAlgCache(this.#cached, jwk, entry);\n }\n}\nasync function importWithAlgCache(cache, jwk, entry) {\n const cached = cache.get(jwk) || cache.set(jwk, { __proto__: null }).get(jwk);\n if (cached[entry.alg] === undefined) {\n const key = await jwkToKey(entry, { ...jwk, alg: entry.alg, ext: true });\n if (key.type !== 'public') {\n throw new JWKSInvalid('JSON Web Key Set members must be public keys');\n }\n cached[entry.alg] = key;\n }\n return cached[entry.alg];\n}\nexport function createLocalJWKSet(jwks) {\n const set = new LocalJWKSetImpl(jwks);\n const localJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n Object.defineProperty(localJWKSet, 'jwks', {\n value: () => structuredClone(set.jwks()),\n });\n return localJWKSet;\n}\n","import { JOSEError, JWKSNoMatchingKey, JWKSTimeout } from '../util/errors.js';\nimport { createLocalJWKSet } from './local.js';\nimport { isObject } from '../lib/type_checks.js';\nfunction isCloudflareWorkers() {\n return (typeof WebSocketPair !== 'undefined' ||\n (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') ||\n (typeof EdgeRuntime !== 'undefined' && EdgeRuntime === 'vercel'));\n}\nlet USER_AGENT;\nif (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {\n const NAME = 'jose';\n const VERSION = 'v6.2.8';\n USER_AGENT = `${NAME}/${VERSION}`;\n}\nexport const customFetch = Symbol();\nasync function fetchJwks(url, headers, signal, fetchImpl = fetch) {\n const response = await fetchImpl(url, {\n method: 'GET',\n signal,\n redirect: 'manual',\n headers,\n }).catch((err) => {\n if (err.name === 'TimeoutError') {\n throw new JWKSTimeout();\n }\n throw err;\n });\n if (response.status !== 200) {\n throw new JOSEError('Expected 200 OK from the JSON Web Key Set HTTP response');\n }\n try {\n return await response.json();\n }\n catch {\n throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');\n }\n}\nexport const jwksCache = Symbol();\nfunction isFreshJwksCache(input, cacheMaxAge) {\n if (typeof input !== 'object' || input === null) {\n return false;\n }\n if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {\n return false;\n }\n if (!('jwks' in input) ||\n !isObject(input.jwks) ||\n !Array.isArray(input.jwks.keys) ||\n !Array.prototype.every.call(input.jwks.keys, isObject)) {\n return false;\n }\n return true;\n}\nclass RemoteJWKSetImpl {\n #url;\n #timeoutDuration;\n #cooldownDuration;\n #cacheMaxAge;\n #jwksTimestamp;\n #pendingFetch;\n #headers;\n #customFetch;\n #local;\n #cache;\n constructor(url, options) {\n if (!(url instanceof URL)) {\n throw new TypeError('url must be an instance of URL');\n }\n this.#url = new URL(url.href);\n const opts = options ?? {};\n this.#timeoutDuration = typeof opts.timeoutDuration === 'number' ? opts.timeoutDuration : 5000;\n this.#cooldownDuration =\n typeof opts.cooldownDuration === 'number' ? opts.cooldownDuration : 30000;\n this.#cacheMaxAge = typeof opts.cacheMaxAge === 'number' ? opts.cacheMaxAge : 600000;\n this.#headers = new Headers(opts.headers);\n if (USER_AGENT && !this.#headers.has('User-Agent')) {\n this.#headers.set('User-Agent', USER_AGENT);\n }\n if (!this.#headers.has('accept')) {\n this.#headers.set('accept', 'application/json');\n this.#headers.append('accept', 'application/jwk-set+json');\n }\n this.#customFetch = opts[customFetch];\n const cache = opts[jwksCache];\n if (cache !== undefined) {\n this.#cache = cache;\n if (isFreshJwksCache(cache, this.#cacheMaxAge)) {\n this.#jwksTimestamp = this.#cache.uat;\n this.#local = createLocalJWKSet(this.#cache.jwks);\n }\n }\n }\n pendingFetch() {\n return !!this.#pendingFetch;\n }\n #validFor(duration) {\n return typeof this.#jwksTimestamp === 'number' && Date.now() < this.#jwksTimestamp + duration;\n }\n coolingDown() {\n return this.#validFor(this.#cooldownDuration);\n }\n fresh() {\n return this.#validFor(this.#cacheMaxAge);\n }\n jwks() {\n return this.#local?.jwks();\n }\n async getKey(protectedHeader, token) {\n if (!this.#local || !this.fresh()) {\n await this.reload();\n }\n try {\n return await this.#local(protectedHeader, token);\n }\n catch (err) {\n if (err instanceof JWKSNoMatchingKey) {\n if (this.coolingDown() === false) {\n await this.reload();\n return this.#local(protectedHeader, token);\n }\n }\n throw err;\n }\n }\n async reload() {\n if (this.#pendingFetch && isCloudflareWorkers()) {\n this.#pendingFetch = undefined;\n }\n this.#pendingFetch ||= fetchJwks(this.#url.href, this.#headers, AbortSignal.timeout(this.#timeoutDuration), this.#customFetch)\n .then((json) => {\n this.#local = createLocalJWKSet(json);\n if (this.#cache) {\n this.#cache.uat = Date.now();\n this.#cache.jwks = json;\n }\n this.#jwksTimestamp = Date.now();\n })\n .finally(() => {\n this.#pendingFetch = undefined;\n });\n await this.#pendingFetch;\n }\n}\nexport function createRemoteJWKSet(url, options) {\n const set = new RemoteJWKSetImpl(url, options);\n const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);\n Object.defineProperties(remoteJWKSet, {\n coolingDown: {\n get: () => set.coolingDown(),\n enumerable: true,\n },\n fresh: {\n get: () => set.fresh(),\n enumerable: true,\n },\n reload: {\n value: () => set.reload(),\n enumerable: true,\n },\n reloading: {\n get: () => set.pendingFetch(),\n enumerable: true,\n },\n jwks: {\n value: () => set.jwks(),\n enumerable: true,\n },\n });\n return remoteJWKSet;\n}\n","import * as b64u from '../util/base64url.js';\nimport { strictDecoder } from '../lib/buffer_utils.js';\nimport { decodeBase64url } from '../lib/helpers.js';\nimport { JWTInvalid } from '../util/errors.js';\nimport { validateClaimsSet, JWTClaimsBuilder } from '../lib/jwt_claims_set.js';\nexport class UnsecuredJWT {\n #jwt;\n constructor(payload = {}) {\n this.#jwt = new JWTClaimsBuilder(payload);\n }\n encode() {\n const header = b64u.encode(JSON.stringify({ alg: 'none' }));\n const payload = b64u.encode(this.#jwt.data());\n return `${header}.${payload}.`;\n }\n setIssuer(issuer) {\n this.#jwt.iss = issuer;\n return this;\n }\n setSubject(subject) {\n this.#jwt.sub = subject;\n return this;\n }\n setAudience(audience) {\n this.#jwt.aud = audience;\n return this;\n }\n setJti(jwtId) {\n this.#jwt.jti = jwtId;\n return this;\n }\n setNotBefore(input) {\n this.#jwt.nbf = input;\n return this;\n }\n setExpirationTime(input) {\n this.#jwt.exp = input;\n return this;\n }\n setIssuedAt(input) {\n this.#jwt.iat = input;\n return this;\n }\n static decode(jwt, options) {\n if (typeof jwt !== 'string') {\n throw new JWTInvalid('Unsecured JWT must be a string');\n }\n const { 0: encodedHeader, 1: encodedPayload, 2: signature, length } = jwt.split('.');\n if (length !== 3 || signature !== '') {\n throw new JWTInvalid('Invalid Unsecured JWT');\n }\n let header;\n try {\n header = JSON.parse(strictDecoder.decode(b64u.decode(encodedHeader)));\n if (header.alg !== 'none')\n throw new Error();\n }\n catch {\n throw new JWTInvalid('Invalid Unsecured JWT');\n }\n const payload = validateClaimsSet(header, decodeBase64url(encodedPayload, 'payload', JWTInvalid), options);\n return { payload, header };\n }\n}\n","import { decode as decodeBase64URL } from '../util/base64url.js';\nimport { fromSPKI, fromPKCS8, fromX509 } from '../lib/asn1.js';\nimport { jwkToKey } from '../lib/jwk_to_key.js';\nimport { keyAlgorithm } from '../lib/key_algorithm.js';\nimport { JOSENotSupported } from '../util/errors.js';\nimport { isObject } from '../lib/type_checks.js';\nexport async function importSPKI(spki, alg, options) {\n if (typeof spki !== 'string' || spki.indexOf('-----BEGIN PUBLIC KEY-----') !== 0) {\n throw new TypeError('\"spki\" must be SPKI formatted string');\n }\n return fromSPKI(spki, alg, options);\n}\nexport async function importX509(x509, alg, options) {\n if (typeof x509 !== 'string' || x509.indexOf('-----BEGIN CERTIFICATE-----') !== 0) {\n throw new TypeError('\"x509\" must be X.509 formatted string');\n }\n return fromX509(x509, alg, options);\n}\nexport async function importPKCS8(pkcs8, alg, options) {\n if (typeof pkcs8 !== 'string' || pkcs8.indexOf('-----BEGIN PRIVATE KEY-----') !== 0) {\n throw new TypeError('\"pkcs8\" must be PKCS#8 formatted string');\n }\n return fromPKCS8(pkcs8, alg, options);\n}\nexport async function importJWK(jwk, alg, options) {\n if (!isObject(jwk)) {\n throw new TypeError('JWK must be an object');\n }\n alg ??= jwk.alg;\n const ext = options?.extractable ?? jwk.ext;\n if (jwk.kty !== 'oct' && !alg) {\n throw new TypeError('\"alg\" argument is required when \"jwk.alg\" is not present');\n }\n switch (jwk.kty) {\n case 'oct':\n if (typeof jwk.k !== 'string' || !jwk.k) {\n throw new TypeError('missing \"k\" (Key Value) Parameter value');\n }\n return decodeBase64URL(jwk.k);\n case 'RSA':\n return jwkToKey(keyAlgorithm(alg), { ...jwk, alg, ext });\n case 'AKP': {\n if (typeof jwk.alg !== 'string' || !jwk.alg) {\n throw new TypeError('missing \"alg\" (Algorithm) Parameter value');\n }\n if (alg !== undefined && alg !== jwk.alg) {\n throw new TypeError('JWK alg and alg option value mismatch');\n }\n return jwkToKey(keyAlgorithm(jwk.alg), { ...jwk, ext });\n }\n case 'EC':\n case 'OKP':\n return jwkToKey(keyAlgorithm(alg), { ...jwk, alg, ext });\n default:\n throw new JOSENotSupported('Unsupported \"kty\" (Key Type) Parameter value');\n }\n}\n","import { parseJoseHeader } from '../lib/helpers.js';\nexport function decodeProtectedHeader(token) {\n let protectedB64u;\n if (typeof token === 'string') {\n const parts = token.split('.');\n if (parts.length === 3 || parts.length === 5) {\n ;\n [protectedB64u] = parts;\n }\n }\n else if (typeof token === 'object' && token) {\n if ('protected' in token) {\n protectedB64u = token.protected;\n }\n else {\n throw new TypeError('Token does not contain a Protected Header');\n }\n }\n const invalid = 'Invalid Token or Protected Header formatting';\n if (typeof protectedB64u !== 'string' || !protectedB64u) {\n throw new TypeError(invalid);\n }\n return parseJoseHeader(protectedB64u, TypeError, invalid);\n}\n","import { decode as b64u } from './base64url.js';\nimport { strictDecoder } from '../lib/buffer_utils.js';\nimport { isObject } from '../lib/type_checks.js';\nimport { JWTInvalid } from './errors.js';\nexport function decodeJwt(jwt) {\n if (typeof jwt !== 'string')\n throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');\n const { 1: payload, length } = jwt.split('.');\n if (length === 5)\n throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');\n if (length !== 3)\n throw new JWTInvalid('Invalid JWT');\n if (!payload)\n throw new JWTInvalid('JWTs must contain a payload');\n let decoded;\n try {\n decoded = b64u(payload);\n }\n catch {\n throw new JWTInvalid('Failed to base64url decode the payload');\n }\n let result;\n try {\n result = JSON.parse(strictDecoder.decode(decoded));\n }\n catch {\n throw new JWTInvalid('Failed to parse the decoded payload as JSON');\n }\n if (!isObject(result))\n throw new JWTInvalid('Invalid JWT Claims Set');\n return result;\n}\n","import { JOSENotSupported } from '../util/errors.js';\nimport { keyAlgorithm, unsupportedAlg, algArgument } from '../lib/key_algorithm.js';\nfunction getModulusLengthOption(options) {\n const modulusLength = options?.modulusLength ?? 2048;\n if (typeof modulusLength !== 'number' || modulusLength < 2048) {\n throw new JOSENotSupported('Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used');\n }\n return modulusLength;\n}\nexport async function generateKeyPair(alg, options) {\n const entry = keyAlgorithm(alg, algArgument);\n if (entry.secret) {\n unsupportedAlg(algArgument);\n }\n let algorithm;\n if (entry.resolve) {\n const crv = options?.crv ?? 'P-256';\n switch (crv) {\n case 'P-256':\n case 'P-384':\n case 'P-521':\n algorithm = { name: 'ECDH', namedCurve: crv };\n break;\n case 'X25519':\n algorithm = { name: 'X25519' };\n break;\n default:\n throw new JOSENotSupported('Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, and X25519');\n }\n }\n else {\n if (entry.crv !== undefined && options?.crv !== undefined && options.crv !== entry.crv) {\n throw new JOSENotSupported(`Invalid or unsupported crv option provided, the only supported value for ${alg} is ${entry.crv}`);\n }\n algorithm =\n entry.kty[0] === 'RSA'\n ? {\n ...entry.subtle,\n publicExponent: Uint8Array.of(0x01, 0x00, 0x01),\n modulusLength: getModulusLengthOption(options),\n }\n : entry.subtle;\n }\n return crypto.subtle.generateKey(algorithm, options?.extractable ?? false, [\n ...entry.usages[1],\n ...entry.usages[0],\n ]);\n}\n","import { unsupportedAlg, algArgument } from '../lib/key_algorithm.js';\nexport async function generateSecret(alg, options) {\n let length;\n let algorithm;\n let keyUsages;\n switch (alg) {\n case 'HS256':\n case 'HS384':\n case 'HS512':\n length = parseInt(alg.slice(-3), 10);\n algorithm = { name: 'HMAC', hash: `SHA-${length}`, length };\n keyUsages = ['sign', 'verify'];\n break;\n case 'A128CBC-HS256':\n case 'A192CBC-HS384':\n case 'A256CBC-HS512':\n length = parseInt(alg.slice(-3), 10);\n return crypto.getRandomValues(new Uint8Array(length >> 3));\n case 'A128KW':\n case 'A192KW':\n case 'A256KW':\n length = parseInt(alg.slice(1, 4), 10);\n algorithm = { name: 'AES-KW', length };\n keyUsages = ['wrapKey', 'unwrapKey'];\n break;\n case 'A128GCMKW':\n case 'A192GCMKW':\n case 'A256GCMKW':\n case 'A128GCM':\n case 'A192GCM':\n case 'A256GCM':\n length = parseInt(alg.slice(1, 4), 10);\n algorithm = { name: 'AES-GCM', length };\n keyUsages = ['encrypt', 'decrypt'];\n break;\n default:\n unsupportedAlg(algArgument);\n }\n return crypto.subtle.generateKey(algorithm, options?.extractable ?? false, keyUsages);\n}\n","export { compactDecrypt } from './jwe/compact/decrypt.js';\nexport { flattenedDecrypt } from './jwe/flattened/decrypt.js';\nexport { generalDecrypt } from './jwe/general/decrypt.js';\nexport { GeneralEncrypt } from './jwe/general/encrypt.js';\nexport { compactVerify } from './jws/compact/verify.js';\nexport { flattenedVerify } from './jws/flattened/verify.js';\nexport { generalVerify } from './jws/general/verify.js';\nexport { jwtVerify } from './jwt/verify.js';\nexport { jwtDecrypt } from './jwt/decrypt.js';\nexport { CompactEncrypt } from './jwe/compact/encrypt.js';\nexport { FlattenedEncrypt } from './jwe/flattened/encrypt.js';\nexport { CompactSign } from './jws/compact/sign.js';\nexport { FlattenedSign } from './jws/flattened/sign.js';\nexport { GeneralSign } from './jws/general/sign.js';\nexport { SignJWT } from './jwt/sign.js';\nexport { EncryptJWT } from './jwt/encrypt.js';\nexport { calculateJwkThumbprint, calculateJwkThumbprintUri } from './jwk/thumbprint.js';\nexport { EmbeddedJWK } from './jwk/embedded.js';\nexport { createLocalJWKSet } from './jwks/local.js';\nexport { createRemoteJWKSet, jwksCache, customFetch } from './jwks/remote.js';\nexport { UnsecuredJWT } from './jwt/unsecured.js';\nexport { exportPKCS8, exportSPKI, exportJWK } from './key/export.js';\nexport { importSPKI, importPKCS8, importX509, importJWK } from './key/import.js';\nexport { decodeProtectedHeader } from './util/decode_protected_header.js';\nexport { decodeJwt } from './util/decode_jwt.js';\nimport * as errors from './util/errors.js';\nexport { errors };\nexport { generateKeyPair } from './key/generate_key_pair.js';\nexport { generateSecret } from './key/generate_secret.js';\nimport * as base64url from './util/base64url.js';\nexport { base64url };\nexport const cryptoRuntime = 'WebCryptoAPI';\n"],"x_google_ignoreList":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53],"mappings":";;;;;;;;;;;;;AAAA,MAAa,UAAU,IAAI,YAAY;AACvC,MAAa,UAAU,IAAI,YAAY;AACvC,MAAa,gBAAgB,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;AACrE,MAAM,YAAY,KAAK;AACvB,SAAgB,OAAO,GAAG,SAAS;CAC/B,MAAM,OAAO,QAAQ,QAAQ,KAAK,EAAE,aAAa,MAAM,QAAQ,CAAC;CAChE,MAAM,MAAM,IAAI,WAAW,IAAI;CAC/B,IAAI,IAAI;CACR,KAAK,MAAM,UAAU,SAAS;EAC1B,IAAI,IAAI,QAAQ,CAAC;EACjB,KAAK,OAAO;CAChB;CACA,OAAO;AACX;AACA,SAAS,cAAc,KAAK,OAAO,QAAQ;CACvC,IAAI,QAAQ,KAAK,SAAS,WACtB,MAAM,IAAI,WAAW,6BAA6B,YAAY,EAAE,aAAa,OAAO;CAExF,IAAI,IAAI;EAAC,UAAU;EAAI,UAAU;EAAI,UAAU;EAAG,QAAQ;CAAI,GAAG,MAAM;AAC3E;AACA,SAAgB,SAAS,OAAO;CAC5B,MAAM,OAAO,KAAK,MAAM,QAAQ,SAAS;CACzC,MAAM,MAAM,QAAQ;CACpB,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,cAAc,KAAK,MAAM,CAAC;CAC1B,cAAc,KAAK,KAAK,CAAC;CACzB,OAAO;AACX;AACA,SAAgB,SAAS,OAAO;CAC5B,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,cAAc,KAAK,KAAK;CACxB,OAAO;AACX;AACA,SAAgBA,SAAO,QAAQ;CAC3B,MAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;CAC1C,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;EACpC,MAAM,OAAO,OAAO,WAAW,CAAC;EAChC,IAAI,OAAO,KACP,MAAM,IAAI,UAAU,0CAA0C;EAElE,MAAM,KAAK;CACf;CACA,OAAO;AACX;;;AC3CA,MAAM,YAAY,MAAM,OAAO,qCAAqB,IAAI,UAAU,kDAAkD,KAAK,WAAW,MAAM;AAC1I,SAAgB,WAAW,KAAK,OAAO;CACnC,IAAI,SAAS,CAAC,IAAI,OAAO,SAAS,KAAK,GACnC,MAAM,IAAI,UAAU,sEAAsE,MAAM,EAAE;AAE1G;AACA,SAAgB,mBAAmB,KAAK,KAAK;CACzC,MAAM,EAAE,kBAAkB,IAAI;CAC9B,IAAI,OAAO,kBAAkB,YAAY,gBAAgB,MACrD,MAAM,IAAI,UAAU,GAAG,IAAI,sDAAsD;AAEzF;AACA,SAAgB,eAAe,KAAK,UAAU,OAAO;CACjD,MAAM,YAAY,IAAI;CACtB,IAAI,UAAU,SAAS,SAAS,MAC5B,MAAM,SAAS,SAAS,IAAI;CAEhC,IAAI,SAAS,QAAQ,UAAU,MAAM,SAAS,SAAS,MACnD,MAAM,SAAS,SAAS,MAAM,gBAAgB;CAElD,IAAI,SAAS,cAAc,UAAU,eAAe,SAAS,YACzD,MAAM,SAAS,SAAS,YAAY,sBAAsB;CAE9D,IAAI,SAAS,WAAW,KAAA,KAAa,UAAU,WAAW,SAAS,QAC/D,MAAM,SAAS,SAAS,QAAQ,kBAAkB;CAEtD,WAAW,KAAK,KAAK;AACzB;;;AC3BA,SAAS,QAAQ,KAAK,QAAQ,GAAG,OAAO;CACpC,IAAI,MAAM,SAAS,GAAG;EAClB,MAAM,OAAO,MAAM,IAAI;EACvB,OAAO,eAAe,MAAM,KAAK,IAAI,EAAE,OAAO,KAAK;CACvD,OACK,IAAI,MAAM,WAAW,GACtB,OAAO,eAAe,MAAM,GAAG,MAAM,MAAM,GAAG;MAG9C,OAAO,WAAW,MAAM,GAAG;CAE/B,IAAI,UAAU,MACV,OAAO,aAAa;MAEnB,IAAI,OAAO,WAAW,cAAc,OAAO,MAC5C,OAAO,sBAAsB,OAAO;MAEnC,IAAI,OAAO,WAAW,YAAY,UAAU,MACzC;MAAA,OAAO,aAAa,MACpB,OAAO,4BAA4B,OAAO,YAAY;CAAA;CAG9D,OAAO;AACX;AACA,MAAa,mBAAmB,QAAQ,GAAG,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,KAAK;AAC7F,MAAa,WAAW,KAAK,QAAQ,GAAG,UAAU,QAAQ,eAAe,IAAI,sBAAsB,QAAQ,GAAG,KAAK;;;;;;;;;;;;;;;;;;;;ACzBnH,IAAa,YAAb,cAA+B,MAAM;CACjC,OAAO,OAAO;CACd,OAAO;CACP,YAAY,SAAS,SAAS;EAC1B,MAAM,SAAS,OAAO;EACtB,KAAK,OAAO,KAAK,YAAY;EAC7B,MAAM,oBAAoB,MAAM,KAAK,WAAW;CACpD;AACJ;AACA,IAAa,2BAAb,cAA8C,UAAU;CACpD,OAAO,OAAO;CACd,OAAO;CACP;CACA;CACA;CACA,YAAY,SAAS,SAAS,QAAQ,eAAe,SAAS,eAAe;EACzE,MAAM,SAAS,EAAE,OAAO;GAAE;GAAO;GAAQ;EAAQ,EAAE,CAAC;EACpD,KAAK,QAAQ;EACb,KAAK,SAAS;EACd,KAAK,UAAU;CACnB;AACJ;AACA,IAAa,aAAb,cAAgC,UAAU;CACtC,OAAO,OAAO;CACd,OAAO;CACP;CACA;CACA;CACA,YAAY,SAAS,SAAS,QAAQ,eAAe,SAAS,eAAe;EACzE,MAAM,SAAS,EAAE,OAAO;GAAE;GAAO;GAAQ;EAAQ,EAAE,CAAC;EACpD,KAAK,QAAQ;EACb,KAAK,SAAS;EACd,KAAK,UAAU;CACnB;AACJ;AACA,IAAa,oBAAb,cAAuC,UAAU;CAC7C,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,mBAAb,cAAsC,UAAU;CAC5C,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,sBAAb,cAAyC,UAAU;CAC/C,OAAO,OAAO;CACd,OAAO;CACP,YAAY,UAAU,+BAA+B,SAAS;EAC1D,MAAM,SAAS,OAAO;CAC1B;AACJ;AACA,IAAa,aAAb,cAAgC,UAAU;CACtC,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,aAAb,cAAgC,UAAU;CACtC,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,aAAb,cAAgC,UAAU;CACtC,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,aAAb,cAAgC,UAAU;CACtC,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,cAAb,cAAiC,UAAU;CACvC,OAAO,OAAO;CACd,OAAO;AACX;AACA,IAAa,oBAAb,cAAuC,UAAU;CAC7C,OAAO,OAAO;CACd,OAAO;CACP,YAAY,UAAU,mDAAmD,SAAS;EAC9E,MAAM,SAAS,OAAO;CAC1B;AACJ;AACA,IAAa,2BAAb,cAA8C,UAAU;CACpD,CAAC,OAAO,iBAAiB,mBAAmB,CAAE;CAC9C,OAAO,OAAO;CACd,OAAO;CACP,YAAY,UAAU,wDAAwD,SAAS;EACnF,MAAM,SAAS,OAAO;CAC1B;AACJ;AACA,IAAa,cAAb,cAAiC,UAAU;CACvC,OAAO,OAAO;CACd,OAAO;CACP,YAAY,UAAU,qBAAqB,SAAS;EAChD,MAAM,SAAS,OAAO;CAC1B;AACJ;AACA,IAAa,iCAAb,cAAoD,UAAU;CAC1D,OAAO,OAAO;CACd,OAAO;CACP,YAAY,UAAU,iCAAiC,SAAS;EAC5D,MAAM,SAAS,OAAO;CAC1B;AACJ;;;AClGA,SAAgB,gBAAgB,KAAK;CACjC,IAAI,CAAC,YAAY,GAAG,GAChB,MAAM,IAAI,MAAM,6BAA6B;AAErD;AACA,MAAa,eAAe,QAAQ;CAChC,IAAI,MAAM,OAAO,iBAAiB,aAC9B,OAAO;CACX,IAAI;EACA,OAAO,eAAe;CAC1B,QACM;EACF,OAAO;CACX;AACJ;AACA,MAAa,eAAe,QAAQ,MAAM,OAAO,iBAAiB;AAClE,MAAa,aAAa,QAAQ,YAAY,GAAG,KAAK,YAAY,GAAG;;;ACXrE,MAAa,eAAe,QAAQ,OAAO,gBAAgB,IAAI,WAAW,IAAI,WAAW,CAAC,CAAC;AAC3F,SAAS,eAAe,KAAK,UAAU;CACnC,MAAM,SAAS,IAAI,cAAc;CACjC,IAAI,WAAW,UACX,MAAM,IAAI,WAAW,mDAAmD,SAAS,aAAa,OAAO,MAAM;AAEnH;AACA,MAAa,cAAc,QAAQ,OAAO,gBAAgB,IAAI,WAAW,IAAI,UAAU,CAAC,CAAC;AACzF,SAAgB,cAAc,KAAK,IAAI;CACnC,IAAI,GAAG,UAAU,MAAM,IAAI,QACvB,MAAM,IAAI,WAAW,sCAAsC;AAEnE;AACA,eAAe,YAAY,KAAK,KAAK,OAAO;CACxC,IAAI,EAAE,eAAe,aACjB,MAAM,IAAI,UAAU,gBAAgB,KAAK,YAAY,CAAC;CAE1D,MAAM,UAAU,IAAI,WAAW;CAM/B,OAAO;EAAC,MALa,OAAO,OAAO,UAAU,OAAO,IAAI,SAAS,WAAW,CAAC,GAAG,WAAW,OAAO,CAAC,KAAK,CAAC;EAKzF,MAJK,OAAO,OAAO,UAAU,OAAO,IAAI,SAAS,GAAG,WAAW,CAAC,GAAG;GAC/E,MAAM,OAAO,WAAW;GACxB,MAAM;EACV,GAAG,OAAO,CAAC,MAAM,CAAC;EACM;CAAO;AACnC;AACA,eAAe,WAAW,QAAQ,SAAS,SAAS;CAChD,OAAO,IAAI,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,OAAO,EAAA,CAAG,MAAM,GAAG,WAAW,CAAC,CAAC;AACpG;AACA,eAAe,WAAW,KAAK,WAAW,KAAK,IAAI,KAAK;CACpD,MAAM,CAAC,QAAQ,QAAQ,WAAW,MAAM,YAAY,KAAK,KAAK,SAAS;CACvE,MAAM,aAAa,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;EACtD;EACJ,MAAM;CACV,GAAG,QAAQ,SAAS,CAAC;CAGrB,OAAO;EAAE;EAAY,KAAA,MADH,WAAW,QADb,OAAO,KAAK,IAAI,YAAY,SAAS,IAAI,SAAS,CAAC,CACxB,GAAG,OAAO;EAC3B;CAAG;AACjC;AACA,eAAe,gBAAgB,GAAG,GAAG;CACjC,MAAM,YAAY;EAAE,MAAM;EAAQ,MAAM;CAAU;CAClD,MAAM,MAAO,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO,CAAC,QAAQ,QAAQ,CAAC;CACjF,MAAM,QAAQ,MAAM,OAAO,OAAO,KAAK,WAAW,KAAK,CAAC;CACxD,OAAO,OAAO,OAAO,OAAO,WAAW,KAAK,OAAO,CAAC;AACxD;AACA,eAAe,WAAW,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK;CAC1D,MAAM,CAAC,QAAQ,QAAQ,WAAW,MAAM,YAAY,KAAK,KAAK,SAAS;CAEvE,MAAM,cAAc,MAAM,WAAW,QADrB,OAAO,KAAK,IAAI,YAAY,SAAS,IAAI,SAAS,CAAC,CAChB,GAAG,OAAO;CAC7D,IAAI;CACJ,IAAI;EACA,iBAAiB,MAAM,gBAAgB,KAAK,WAAW;CAC3D,QACM,CACN;CACA,IAAI,CAAC,gBACD,MAAM,IAAI,oBAAoB;CAElC,IAAI;CACJ,IAAI;EACA,YAAY,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;GAAM;GAAI,MAAM;EAAU,GAAG,QAAQ,UAAU,CAAC;CAC3G,QACM,CACN;CACA,IAAI,CAAC,WACD,MAAM,IAAI,oBAAoB;CAElC,OAAO;AACX;AACA,eAAe,WAAW,KAAK,WAAW,KAAK,IAAI,KAAK;CACpD,MAAM,SAAS,eAAe,aACxB,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,WAAW,OAAO,CAC1D,SACJ,CAAC,KACE,eAAe,KAAK,IAAI,QAAQ,SAAS,GAAG;CACnD,MAAM,YAAY,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;EACzD,gBAAgB;EACZ;EACJ,MAAM;EACN,WAAW;CACf,GAAG,QAAQ,SAAS,CAAC;CACrB,MAAM,MAAM,UAAU,MAAM,GAAG;CAE/B,OAAO;EAAE,YADU,UAAU,MAAM,GAAG,GACpB;EAAG;EAAK;CAAG;AACjC;AACA,eAAe,WAAW,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK;CAC1D,MAAM,SAAS,eAAe,aACxB,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,WAAW,OAAO,CAC1D,SACJ,CAAC,KACE,eAAe,KAAK,IAAI,QAAQ,SAAS,GAAG;CACnD,IAAI;EACA,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;GAC9C,gBAAgB;GACZ;GACJ,MAAM;GACN,WAAW;EACf,GAAG,QAAQ,OAAO,YAAY,GAAG,CAAC,CAAC;CACvC,QACM;EACF,MAAM,IAAI,oBAAoB;CAClC;AACJ;AACA,eAAsB,QAAQ,KAAK,WAAW,KAAK,IAAI,KAAK;CACxD,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,eAAe,aACtC,MAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,aAAa,cAAc,cAAc,CAAC;CAEpG,IAAI,IACA,cAAc,KAAK,EAAE;MAGrB,KAAK,WAAW,GAAG;CAEvB,IAAI,eAAe,YACf,eAAe,KAAK,IAAI,OAAO;CAEnC,OAAO,IAAI,MACL,WAAW,KAAK,WAAW,KAAK,IAAI,GAAG,IACvC,WAAW,KAAK,WAAW,KAAK,IAAI,GAAG;AACjD;AACA,eAAsB,QAAQ,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK;CAC9D,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,eAAe,aACtC,MAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,aAAa,cAAc,cAAc,CAAC;CAEpG,IAAI,CAAC,IACD,MAAM,IAAI,WAAW,mCAAmC;CAE5D,IAAI,CAAC,KACD,MAAM,IAAI,WAAW,gCAAgC;CAEzD,cAAc,KAAK,EAAE;CACrB,IAAI,eAAe,YACf,eAAe,KAAK,IAAI,OAAO;CAEnC,OAAO,IAAI,MACL,WAAW,KAAK,KAAK,YAAY,IAAI,KAAK,GAAG,IAC7C,WAAW,KAAK,KAAK,YAAY,IAAI,KAAK,GAAG;AACvD;;;AC7IA,SAAgB,aAAa,OAAO;CAChC,IAAI,WAAW,UAAU,UACrB,OAAO,MAAM,SAAS;CAE1B,MAAM,aAAa;CACnB,MAAM,MAAM,CAAC;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,YACnC,IAAI,KAAK,OAAO,aAAa,MAAM,MAAM,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC;CAE/E,OAAO,KAAK,IAAI,KAAK,EAAE,CAAC;AAC5B;AACA,SAAgB,aAAa,SAAS;CAClC,IAAI,WAAW,YACX,OAAO,WAAW,WAAW,OAAO;CAExC,MAAM,SAAS,KAAK,OAAO;CAC3B,MAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;CAC1C,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAC/B,MAAM,KAAK,OAAO,WAAW,CAAC;CAElC,OAAO;AACX;;;;;;;ACnBA,MAAM,UAAU;AAChB,SAAgB,OAAO,OAAO;CAC1B,IAAI,WAAW,YACX,IAAI;EACA,OAAO,WAAW,WAAW,OAAO,UAAU,WAAW,QAAQ,QAAQ,OAAO,KAAK,GAAG,EACpF,UAAU,YACd,CAAC;CACL,SACO,OAAO;EACV,MAAM,IAAI,UAAU,SAAS,EAAE,MAAM,CAAC;CAC1C;CAEJ,IAAI,UAAU;CACd,IAAI,mBAAmB,YACnB,UAAU,QAAQ,OAAO,OAAO;CAEpC,IAAI,QAAQ,SAAS,GAAG,KAAK,QAAQ,SAAS,GAAG,GAC7C,MAAM,IAAI,UAAU,OAAO;CAE/B,UAAU,QAAQ,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CACtD,IAAI;EACA,OAAO,aAAa,OAAO;CAC/B,QACM;EACF,MAAM,IAAI,UAAU,OAAO;CAC/B;AACJ;AACA,SAAgB,OAAO,OAAO;CAC1B,IAAI,YAAY;CAChB,IAAI,OAAO,cAAc,UACrB,YAAY,QAAQ,OAAO,SAAS;CAExC,IAAI,WAAW,UAAU,UACrB,OAAO,UAAU,SAAS;EAAE,UAAU;EAAa,aAAa;CAAK,CAAC;CAE1E,OAAO,aAAa,SAAS,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GAAG;AAC3F;;;ACtCA,SAAgB,SAAS,OAAO;CAC5B,IAAI,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,UAAU,SAAS,KAAK,KAAK,MAAM,mBAC1C,OAAO;CAEX,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,MACd,OAAO;CAEX,IAAI,QAAQ;CACZ,OAAO,OAAO,eAAe,KAAK,MAAM,MACpC,QAAQ,OAAO,eAAe,KAAK;CAEvC,OAAO,cAAc;AACzB;AACA,SAAgB,WAAW,GAAG,SAAS;CACnC,MAAM,6BAAa,IAAI,IAAI;CAC3B,KAAK,MAAM,UAAU,SAAS;EAC1B,IAAI,CAAC,QACD;EACJ,KAAK,MAAM,aAAa,OAAO,KAAK,MAAM,GAAG;GACzC,IAAI,WAAW,IAAI,SAAS,GACxB,OAAO;GAEX,WAAW,IAAI,SAAS;EAC5B;CACJ;CACA,OAAO;AACX;AACA,MAAa,SAAS,QAAQ,SAAS,GAAG,KAAK,OAAO,IAAI,QAAQ;AAClE,MAAa,gBAAgB,QAAQ,IAAI,QAAQ,UAC3C,IAAI,QAAQ,SAAS,OAAO,IAAI,SAAS,YAAa,OAAO,IAAI,MAAM;AAC7E,MAAa,eAAe,QAAQ,IAAI,QAAQ,SAAS,IAAI,MAAM,KAAA,KAAa,IAAI,SAAS,KAAA;AAC7F,MAAa,eAAe,QAAQ,IAAI,QAAQ,SAAS,OAAO,IAAI,MAAM;;;AC/B1E,MAAa,cAAc,OAAO;AAClC,SAAgB,aAAa,OAAO,MAAM;CACtC,IAAI,OACA,MAAM,IAAI,UAAU,GAAG,KAAK,yBAAyB;AAE7D;AACA,SAAgB,gBAAgB,OAAO,OAAO,YAAY;CACtD,IAAI;EACA,OAAO,OAAO,KAAK;CACvB,QACM;EACF,MAAM,IAAI,WAAW,kCAAkC,OAAO;CAClE;AACJ;AACA,SAAgB,gBAAgB,OAAO,OAAO,YAAY;CACtD,IAAI;EACA,OAAOC,SAAO,KAAK;CACvB,QACM;EACF,MAAM,IAAI,WAAW,OAAO,MAAM,iCAAiC;CACvE;AACJ;AACA,eAAsB,OAAO,WAAW,MAAM;CAC1C,MAAM,eAAe,OAAO,UAAU,MAAM,EAAE;CAC9C,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,cAAc,IAAI,CAAC;AACxE;AACA,SAAgB,gBAAgB,KAAK,YAAY,SAAS;CACtD,IAAI;CACJ,IAAI;EACA,SAAS,KAAK,MAAM,cAAc,OAAO,OAAO,GAAG,CAAC,CAAC;CACzD,QACM;EACF,MAAM,IAAI,WAAW,OAAO;CAChC;CACA,IAAI,CAAC,SAAS,MAAM,GAChB,MAAM,IAAI,WAAW,OAAO;CAEhC,OAAO;AACX;;;ACxCA,eAAsB,SAAS,OAAO,KAAK;CACvC,IAAI,IAAI,QAAQ,SAAS,SAAS,OAAO,IAAI,QAAQ,KAAA,GACjD,MAAM,IAAI,iBAAiB,sEAAoE;CAEnG,IAAI,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,GAC3B,MAAM,IAAI,iBAAiB,gEAA8D;CAE7F,MAAM,YAAY,MAAM,UAAU;EAAE,KAAK,IAAI;EAAK,KAAK,IAAI;CAAI,CAAC,KAAK,MAAM;CAC3E,MAAM,YAAY,CAAC,EAAE,IAAI,KAAK,IAAI;CAClC,MAAM,UAAU,EAAE,GAAG,IAAI;CACzB,IAAI,QAAQ,QAAQ,OAChB,OAAO,QAAQ;CAEnB,OAAO,QAAQ;CACf,OAAO,OAAO,OAAO,UAAU,OAAO,SAAS,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,WAAW,MAAM,OAAO,YAAY,IAAI,EAAE;AACnI;;;ACXA,MAAM,OAAO,QAAQ,IAAI,OAAO;AAChC,MAAM,gBAAgB,OAAO,KAAK,UAAU;CACxC,MAAM,EAAE,QAAQ;CAChB,IAAI,IAAI,QAAQ,KAAA,GAAW;EACvB,MAAM,WAAW,UAAU,UAAU,UAAU,WAAW,QAAQ;EAClE,IAAI,IAAI,QAAQ,UACZ,MAAM,IAAI,UAAU,sDAAsD,SAAS,eAAe;CAE1G;CACA,IAAI,IAAI,QAAQ,KAAA,KAAa,IAAI,QAAQ,KACrC,MAAM,IAAI,UAAU,sDAAsD,IAAI,eAAe;CAEjG,IAAI,MAAM,QAAQ,IAAI,OAAO,GAAG;EAC5B,MAAM,gBAAgB,UAAU,aAAa,UAAU,YAAY,MAAM,MAAM,UAAU,YAAY,IAAI,KAAK;EAC9G,IAAI,iBAAiB,CAAC,IAAI,QAAQ,SAAS,aAAa,GACpD,MAAM,IAAI,UAAU,+DAA+D,cAAc,eAAe;CAExH;AACJ;AACA,SAAgB,aAAa,OAAO,KAAK,OAAO;CAC5C,MAAM,EAAE,KAAK,WAAW;CACxB,MAAM,aAAa,UAAU,aAAa,UAAU;CACpD,IAAI,UAAU,eAAe,YACzB,OAAO,CAAC,OAAO,GAAG;CACtB,IAAIC,MAAU,GAAG,GAAG;EAChB,IAAI,SAAS,CAACC,YAAgB,GAAG,IAAI,EAAE,aAAaC,aAAiB,GAAG,IAAIC,YAAgB,GAAG,IAC3F,MAAM,IAAI,UAAU,SACd,4HACA,6CAA6C,aAAa,YAAY,SAAS,KAAK;EAE9F,aAAa,OAAO,KAAK,KAAK;EAC9B,OAAO,CAAC,KAAK,GAAG;CACpB;CACA,IAAI,CAAC,UAAU,GAAG,GACd,MAAM,IAAI,UAAU,SACdC,QAAgB,KAAK,KAAK,aAAa,aAAa,gBAAgB,YAAY,IAChFA,QAAgB,KAAK,KAAK,aAAa,aAAa,cAAc,CAAC;CAE7E,IAAI,QACI;MAAA,IAAI,SAAS,UACb,MAAM,IAAI,UAAU,GAAG,IAAI,GAAG,EAAE,6DAA6D;CAAA,OAGhG;EACD,IAAI,IAAI,SAAS,UACb,MAAM,IAAI,UAAU,GAAG,IAAI,GAAG,EAAE,kEAAkE;EAEtG,MAAM,eAAe,aAAa,YAAY;EAC9C,KAAK,IAAI,SAAS,YAAY,IAAI,SAAS,cAAc,IAAI,SAAS,cAAc;GAChF,MAAM,YAAY,UAAU,SACtB,YACA,UAAU,WACN,cACA,GAAG,MAAM,MAAM,GAAG,EAAE,EAAE;GAChC,MAAM,IAAI,UAAU,GAAG,IAAI,GAAG,EAAE,sCAAsC,UAAU,oBAAoB,aAAa,EAAE;EACvH;CACJ;CACA,OAAO,YAAY,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,GAAG;AAC7D;AACA,MAAM,QAAQ;AACd,MAAM,SAAS;AACf,MAAM,YAAY;AAClB,MAAM,MAAM;AACZ,IAAI;AACJ,MAAM,OAAO;CACT,WAAW;CACX,YAAY;CACZ,WAAW;CACX,WAAW;AACf;AACA,SAAS,OAAO,KAAK,KAAK,OAAO;CAC7B,0BAAU,IAAI,QAAQ;CACtB,MAAM,QAAQ,MAAM,IAAI,GAAG;CAC3B,IAAI,OAAO;EACP,IAAI,OACA,MAAM,OAAO;OAGb,MAAM,IAAI,KAAK;GAAE,WAAW;IAAO,MAAM;EAAM,CAAC;CAExD;CACA,OAAO,SAAS,QAAQ;AAC5B;AACA,MAAM,YAAY,OAAO,KAAK,KAAK,UAAU,OAAO,KAAK,MAAM,GAAG,KAC9D,OAAO,KAAK,MAAM,KAAK,MAAM,SAAS,OAAO;CAAE,GAAG;CAAK,KAAK,MAAM;AAAI,CAAC,CAAC;AAC5E,MAAM,mBAAmB,WAAW,UAAU;CAC1C,MAAM,MAAM,OAAO,WAAW,MAAM,GAAG;CACvC,IAAI,KACA,OAAO;CACX,MAAM,WAAW,UAAU,SAAS;CACpC,MAAM,SAAS,MAAM,OAAO,WAAW,IAAI;CAC3C,MAAM,EAAE,sBAAsB;CAC9B,MAAM,MAAM,KAAK,UAAU,sBAAsB;CACjD,MAAM,SAAS,MAAM,UAAU;EAAE;EAAK;CAAkB,CAAC,KAAK,MAAM;CACpE,OAAO,OAAO,WAAW,MAAM,KAAK,UAAU,YAAY,QAAQ,UAAU,MAAM,CAAC;AACvF;AACA,eAAsB,WAAW,OAAO,KAAK,OAAO;CAChD,MAAM,SAAS,aAAa,OAAO,KAAK,KAAK;CAC7C,QAAQ,OAAO,IAAf;EACI,KAAK;EACL,KAAK,QACD,OAAO,OAAO;EAClB,KAAK,KAAK;GACN,MAAM,MAAM,OAAO;GACnB,IAAI,IAAI,GACJ,OAAO,OAAO,IAAI,CAAC;GAEvB,IAAI,CAAC,OAAO,SAAS,GAAG,GAAG;IACvB,MAAM,EAAE,YAAY;IACpB,IAAI,MAAM,QAAQ,OAAO,GACrB,OAAO,OAAO,OAAO;IACzB,OAAO,OAAO,GAAG;GACrB;GACA,OAAO,UAAU,KAAK,KAAK,KAAK;EACpC;EACA,KAAK,WAAW;GACZ,MAAM,YAAY,OAAO;GACzB,IAAI,UAAU,SAAS,UACnB,OAAO,UAAU,OAAO;GAE5B,IAAI,iBAAiB,aAAa,OAAO,UAAU,gBAAgB,YAC/D,OAAO,gBAAgB,WAAW,KAAK;GAE3C,OAAO,UAAU,WAAW,UAAU,OAAO,EAAE,QAAQ,MAAM,CAAC,GAAG,KAAK;EAC1E;CACJ;AACJ;;;ACnIA,SAAgB,MAAM,SAAS;CAC3B,MAAM,MAAM,EAAE,WAAW,KAAK;CAC9B,KAAK,MAAM,OAAO,SACd,IAAI,OAAO;EAAE,GAAG,QAAQ;EAAM;CAAI;CAEtC,OAAO;AACX;;;ACJA,MAAM,OAAO,CACT,CAAC,WAAW,SAAS,GACrB,CAAC,WAAW,WAAW,CAC3B;AACA,MAAM,SAAS,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;AAClC,MAAM,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;AACpB,SAAS,MAAM,MAAM;CACjB,OAAO;EACH,KAAK,CAAC,KAAK;EACX,QAAQ;GAAE,MAAM;GAAY,MAAM,OAAO;EAAO;EAChD,QAAQ;EACR,KAAK,CAAC,WAAW,WAAW;CAChC;AACJ;AACA,SAAS,OAAO;CACZ,OAAO;EACH,KAAK,CAAC,MAAM,KAAK;EACjB,QAAQ,EAAE,MAAM,OAAO;EACvB,UAAU,EAAE,KAAK,KAAK,wBAAwB;GAC1C,IAAI,QAAQ,YAAY,sBAAsB,UAC1C,OAAO,EAAE,MAAM,SAAS;GAE5B,IAAI,QAAQ,OACR,MAAM,IAAI,iBAAiB,gEAA8D;GAE7F,OAAO;IAAE,MAAM;IAAQ,YAAY;GAAI;EAC3C;EACA,QAAQ;EACR,KAAK,CAAC,KAAA,GAAW,YAAY;CACjC;AACJ;AACA,SAAS,MAAM,MAAM,MAAM,OAAO;CAC9B,OAAO;EACH,KAAK,CAAC,KAAK;EACX,QAAQ;EACR,QAAQ;GAAE,MAAM,MAAM,YAAY;GAAU,QAAQ;EAAK;EACzD,QAAQ;EACR,KAAK,MAAM,CAAC,WAAW,SAAS,IAAI,CAAC,WAAW,WAAW;CAC/D;AACJ;AACA,SAAS,QAAQ;CACb,OAAO;EACH,KAAK,CAAC,KAAK;EACX,QAAQ;EACR,QAAQ,EAAE,MAAM,SAAS;EACzB,QAAQ;EACR,KAAK,CAAC,cAAc,YAAY;CACpC;AACJ;AACA,MAAa,MAAM,MAAM;CACrB,KAAK;EACD,KAAK,CAAC,KAAK;EACX,QAAQ;EACR,QAAQ,EAAE,MAAM,UAAU;EAC1B,QAAQ;EACR,KAAK,CAAC,WAAW,SAAS;CAC9B;CACA,YAAY,MAAM,CAAC;CACnB,gBAAgB,MAAM,GAAG;CACzB,gBAAgB,MAAM,GAAG;CACzB,gBAAgB,MAAM,GAAG;CACzB,WAAW,KAAK;CAChB,kBAAkB,KAAK;CACvB,kBAAkB,KAAK;CACvB,kBAAkB,KAAK;CACvB,QAAQ,MAAM,GAAG;CACjB,QAAQ,MAAM,GAAG;CACjB,QAAQ,MAAM,GAAG;CACjB,WAAW,MAAM,KAAK,IAAI;CAC1B,WAAW,MAAM,KAAK,IAAI;CAC1B,WAAW,MAAM,KAAK,IAAI;CAC1B,sBAAsB,MAAM;CAC5B,sBAAsB,MAAM;CAC5B,sBAAsB,MAAM;AAChC,CAAC;AACD,MAAM,aAAa,CAAC,WAAW,SAAS;AACxC,SAAS,kBAAkB,MAAM,MAAM,OAAO;CAC1C,OAAO;EACH,KAAK,CAAC,KAAK;EACX,QAAQ;EACR,QAAQ;GAAE,MAAM,MAAM,YAAY;GAAW,QAAQ;EAAK;EAC1D,QAAQ;EACR,KAAK;EACL,SAAS;EACT,QAAQ,MAAM,MAAM;EACpB;CACJ;AACJ;AACA,MAAM,MAAM,MAAM;CACd,SAAS,kBAAkB,GAAG;CAC9B,SAAS,kBAAkB,GAAG;CAC9B,SAAS,kBAAkB,GAAG;CAC9B,iBAAiB,kBAAkB,KAAK,IAAI;CAC5C,iBAAiB,kBAAkB,KAAK,IAAI;CAC5C,iBAAiB,kBAAkB,KAAK,IAAI;AAChD,CAAC;AACD,SAAS,YAAY,WAAW,MAAM;CAClC,MAAM,IAAI,iBAAiB,2BAA2B,UAAU,SAAS,KAAK,eAAe;AACjG;AACA,SAAgB,aAAa,KAAK;CAC9B,QAAQ,OAAO,QAAQ,WAAW,IAAI,OAAO,KAAA,MAAc,YAAY,OAAO,WAAW;AAC7F;AACA,SAAgB,cAAc,KAAK;CAC/B,QAAS,OAAO,QAAQ,WAAW,IAAI,OAAO,KAAA,MAAc,YAAY,OAAO,sBAAsB;AACzG;;;AC/FA,SAAS,mBAAmB,KAAK,OAAO;CACpC,IAAI,IAAI,UAAU,SAAS,UAAU,IAAI,UAAU,SAAS,UACxD,MAAM,IAAI,UAAU,sFAAsF;CAE9G,WAAW,KAAK,KAAK;AACzB;AACA,eAAe,eAAe,KAAK,KAAK,OAAO;CAC3C,MAAM,WAAW,aAAa,GAAG,CAAC,CAAC;CACnC,MAAM,YAAY,eAAe,aAC3B,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,UAAU,MAAM,CACxD,KACJ,CAAC,IACC;CACN,eAAe,WAAW,UAAU,KAAK;CACzC,OAAO;AACX;AACA,eAAe,UAAU,KAAK,KAAK,KAAK;CACpC,MAAM,YAAY,MAAM,eAAe,KAAK,KAAK,SAAS;CAC1D,MAAM,eAAe,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK;EAAE,MAAM;EAAW,MAAM;CAAO,GAAG,MAAM,CAAC,MAAM,CAAC;CAChH,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ,OAAO,cAAc,WAAW,QAAQ,CAAC;AAC/F;AACA,eAAe,YAAY,KAAK,KAAK,cAAc;CAC/C,MAAM,YAAY,MAAM,eAAe,KAAK,KAAK,WAAW;CAC5D,MAAM,eAAe,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,WAAW,UAAU;EAAE,MAAM;EAAW,MAAM;CAAO,GAAG,MAAM,CAAC,MAAM,CAAC;CAC9I,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,YAAY,CAAC;AAC5E;AACA,SAAS,YAAY,KAAK,KAAK,OAAO;CAClC,eAAe,KAAK,aAAa,GAAG,CAAC,CAAC,QAAQ,KAAK;CACnD,mBAAmB,KAAK,GAAG;AAC/B;AACA,SAAS,eAAe,KAAK,KAAK;CAC9B,IAAI,eAAe,YACf,OAAO,OAAO,OAAO,UAAU,OAAO,KAAK,UAAU,OAAO,CACxD,YACJ,CAAC;CAEL,eAAe,KAAK,aAAa,GAAG,CAAC,CAAC,QAAQ,YAAY;CAC1D,OAAO;AACX;AACA,eAAe,UAAU,KAAK,KAAK,KAAK,KAAK;CACzC,IAAI,EAAE,eAAe,eAAe,IAAI,SAAS,GAC7C,MAAM,IAAI,WAAW,2CAA2C;CAEpE,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,KAAK,KAAK,GAAG,MAAM,GACjD,MAAM,IAAI,WAAW,8CAA8C;CAEvE,MAAM,OAAO,OAAOC,SAAO,GAAG,GAAG,WAAW,GAAG,CAAC,GAAG,GAAG;CACtD,MAAM,SAAS,SAAS,IAAI,MAAM,IAAI,EAAE,GAAG,EAAE;CAC7C,MAAM,YAAY;EACd,MAAM,OAAO,IAAI,MAAM,GAAG,EAAE;EAC5B,YAAY;EACZ,MAAM;EACN;CACJ;CACA,MAAM,YAAY,MAAM,eAAe,KAAK,GAAG;CAC/C,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,WAAW,WAAW,WAAW,MAAM,CAAC;AACtF;AACA,SAAS,eAAe,OAAO;CAC3B,OAAO,OAAO,SAAS,MAAM,MAAM,GAAG,KAAK;AAC/C;AACA,eAAe,UAAU,GAAG,GAAG,WAAW;CACtC,MAAM,QAAQ,KAAK;CACnB,MAAM,UAAU;CAChB,MAAM,OAAO,KAAK,KAAK,QAAQ,OAAO;CACtC,MAAM,KAAK,IAAI,WAAW,OAAO,OAAO;CACxC,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,KAAK;EAC5B,MAAM,aAAa,MAAM,OAAO,UAAU,OAAO,SAAS,CAAC,GAAG,GAAG,SAAS,CAAC;EAC3E,GAAG,IAAI,aAAa,IAAI,KAAK,OAAO;CACxC;CACA,OAAO,GAAG,MAAM,GAAG,KAAK;AAC5B;AACA,eAAe,gBAAgB,WAAW,YAAY,WAAW,WAAW,sBAAM,IAAI,WAAW,GAAG,sBAAM,IAAI,WAAW,GAAG;CACxH,mBAAmB,SAAS;CAC5B,mBAAmB,YAAY,YAAY;CAC3C,MAAM,YAAY,OAAO,eAAeA,SAAO,SAAS,CAAC,GAAG,eAAe,GAAG,GAAG,eAAe,GAAG,GAAG,SAAS,SAAS,CAAC;CAOzH,OAAO,UAAU,IANH,WAAW,MAAM,OAAO,OAAO,WAAW;EACpD,MAAM,UAAU,UAAU;EAC1B,QAAQ;CACZ,GAAG,YAAY,UAAU,UAAU,SAAS,WACtC,MACA,KAAK,KAAK,SAAS,UAAU,UAAU,WAAW,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAC/D,GAAG,WAAW,SAAS;AAC5C;AACA,SAAS,cAAc,KAAK;CACxB,gBAAgB,GAAG;CACnB,MAAM,QAAQ,IAAI,UAAU;CAC5B,IAAI,UAAU,WACV,UAAU,WACV,UAAU,WACV,IAAI,UAAU,SAAS,UACvB,MAAM,IAAI,iBAAiB,uFAAuF;AAE1H;AACA,SAAS,mBAAmB,cAAc;CACtC,IAAI,iBAAiB,KAAA,GACjB,MAAM,IAAI,WAAW,2BAA2B;AACxD;AACA,SAAS,qBAAqB,cAAc;CACxC,IAAI,iBAAiB,KAAA,GACjB,MAAM,IAAI,WAAW,0CAA0C;AACvE;AACA,eAAsB,qBAAqB,KAAK,KAAK,KAAK,cAAc,YAAY,SAAS;CACzF,MAAM,QAAQ,aAAa,GAAG;CAC9B,IAAI,QAAQ,OAAO;EACf,qBAAqB,YAAY;EACjC,OAAO;CACX;CACA,QAAQ,MAAM,OAAO,MAArB;EACI,KAAK,QAAQ;GACT,IAAI,QAAQ,WACR,qBAAqB,YAAY;GACrC,IAAI,CAAC,SAAS,WAAW,GAAG,GACxB,MAAM,IAAI,WAAW,6DAA6D;GACtF,cAAc,GAAG;GACjB,MAAM,MAAM,MAAM,SAAS,OAAO,WAAW,GAAG;GAChD,IAAI;GACJ,IAAI;GACJ,IAAI,WAAW,QAAQ,KAAA,GAAW;IAC9B,IAAI,OAAO,WAAW,QAAQ,UAC1B,MAAM,IAAI,WAAW,kDAAkD;IAC3E,aAAa,gBAAgB,WAAW,KAAK,OAAO,UAAU;GAClE;GACA,IAAI,WAAW,QAAQ,KAAA,GAAW;IAC9B,IAAI,OAAO,WAAW,QAAQ,UAC1B,MAAM,IAAI,WAAW,kDAAkD;IAC3E,aAAa,gBAAgB,WAAW,KAAK,OAAO,UAAU;GAClE;GACA,MAAM,eAAe,MAAM,gBAAgB,KAAK,KAAK,QAAQ,YAAY,IAAI,MAAM,KAAK,QAAQ,YAAY,IAAI,UAAU,SAAS,IAAI,MAAM,IAAI,EAAE,GAAG,EAAE,GAAG,YAAY,UAAU;GACjL,IAAI,QAAQ,WACR,OAAO;GACX,mBAAmB,YAAY;GAC/B,OAAO,YAAY,IAAI,MAAM,EAAE,GAAG,cAAc,YAAY;EAChE;EACA,KAAK;GACD,mBAAmB,YAAY;GAC/B,gBAAgB,GAAG;GACnB,YAAY,KAAK,KAAK,SAAS;GAC/B,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ,YAAY,KAAK,YAAY,CAAC;EAEpF,KAAK,UAAU;GACX,mBAAmB,YAAY;GAC/B,IAAI,OAAO,WAAW,QAAQ,UAC1B,MAAM,IAAI,WAAW,oDAAoD;GAC7E,MAAM,WAAW,SAAS,iBAAiB;GAC3C,IAAI,WAAW,MAAM,UACjB,MAAM,IAAI,WAAW,6DAA6D;GACtF,IAAI,OAAO,WAAW,QAAQ,UAC1B,MAAM,IAAI,WAAW,mDAAmD;GAE5E,MAAM,UAAU,MAAM,UADV,gBAAgB,WAAW,KAAK,OAAO,UACjB,GAAG,KAAK,WAAW,KAAK,GAAG;GAC7D,OAAO,YAAY,IAAI,MAAM,EAAE,GAAG,SAAS,YAAY;EAC3D;EACA,KAAK;GACD,mBAAmB,YAAY;GAC/B,OAAO,YAAY,KAAK,KAAK,YAAY;EAE7C,KAAK,WAAW;GACZ,mBAAmB,YAAY;GAC/B,IAAI,OAAO,WAAW,OAAO,UACzB,MAAM,IAAI,WAAW,6DAA6D;GACtF,IAAI,OAAO,WAAW,QAAQ,UAC1B,MAAM,IAAI,WAAW,2DAA2D;GACpF,IAAI;GACJ,KAAK,gBAAgB,WAAW,IAAI,MAAM,UAAU;GACpD,IAAI;GACJ,MAAM,gBAAgB,WAAW,KAAK,OAAO,UAAU;GACvD,OAAO,QAAQ,cAAc,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,cAAc,IAAI,qBAAK,IAAI,WAAW,CAAC;EAChG;CACJ;AACJ;AACA,eAAsB,qBAAqB,KAAK,KAAK,KAAK,aAAa,qBAAqB,CAAC,GAAG;CAC5F,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,QAAQ,aAAa,GAAG;CAC9B,IAAI,QAAQ,OACR,OAAO;EAAC;EAAK,KAAA;EAAW,KAAA;CAAS;CACrC,QAAQ,MAAM,OAAO,MAArB;EACI,KAAK,QAAQ;GACT,cAAc,GAAG;GACjB,MAAM,EAAE,KAAK,QAAQ;GACrB,IAAI;GACJ,IAAI,mBAAmB,KACnB,eAAgB,MAAM,WAAW,OAAO,mBAAmB,KAAK,SAAS;QAGzE,gBAAgB,MAAM,OAAO,OAAO,YAAY,IAAI,WAAW,MAAM,CAAC,YAAY,CAAC,EAAA,CAAG;GAE1F,MAAM,SAAS,OAAO;GACtB,IAAI,gBAAgB;GACpB,IAAI,CAAC,cAAc,aAAa;IAC5B,IAAI,OAAO,OAAO,iBAAiB,YAC/B,MAAM,IAAI,UAAU,2CAAyC;IAEjE,gBAAgB,MAAM,OAAO,aAAa,cAAc,CAAC,CAAC;GAC9D;GACA,MAAM,EAAE,GAAG,GAAG,KAAK,QAAS,MAAM,OAAO,UAAU,OAAO,aAAa;GACvE,MAAM,eAAe,MAAM,gBAAgB,KAAK,cAAc,QAAQ,YAAY,IAAI,MAAM,KAAK,QAAQ,YAAY,IAAI,UAAU,SAAS,IAAI,MAAM,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,GAAG;GAC5K,aAAa,EAAE,KAAK;IAAE;IAAG;IAAK;GAAI,EAAE;GACpC,IAAI,QAAQ,MACR,WAAW,IAAI,IAAI;GACvB,IAAI,KACA,WAAW,MAAMC,OAAK,GAAG;GAC7B,IAAI,KACA,WAAW,MAAMA,OAAK,GAAG;GAC7B,IAAI,QAAQ,WAAW;IACnB,MAAM;IACN;GACJ;GACA,MAAM,eAAe,YAAY,GAAG;GAEpC,eAAe,MAAM,UADP,IAAI,MAAM,EACW,GAAG,cAAc,GAAG;GACvD;EACJ;EACA,KAAK;GACD,MAAM,eAAe,YAAY,GAAG;GACpC,gBAAgB,GAAG;GACnB,YAAY,KAAK,KAAK,SAAS;GAC/B,eAAe,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ,YAAY,KAAK,GAAG,CAAC;GAC/E;EAEJ,KAAK,UAAU;GACX,MAAM,eAAe,YAAY,GAAG;GACpC,MAAM,EAAE,MAAM,MAAM,MAAM,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC,MAAM;GACzE,MAAM,UAAU,MAAM,UAAU,KAAK,KAAK,KAAK,GAAG;GAClD,eAAe,MAAM,UAAU,IAAI,MAAM,EAAE,GAAG,SAAS,GAAG;GAC1D,aAAa;IAAE;IAAK,KAAKA,OAAK,GAAG;GAAE;GACnC;EACJ;EACA,KAAK;GACD,MAAM,eAAe,YAAY,GAAG;GACpC,eAAe,MAAM,UAAU,KAAK,KAAK,GAAG;GAC5C;EAEJ,KAAK,WAAW;GACZ,MAAM,eAAe,YAAY,GAAG;GACpC,MAAM,EAAE,OAAO;GACf,MAAM,UAAU,MAAM,QAAQ,cAAc,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK,oBAAI,IAAI,WAAW,CAAC;GAC7F,eAAe,QAAQ;GACvB,aAAa;IAAE,IAAIA,OAAK,QAAQ,EAAE;IAAG,KAAKA,OAAK,QAAQ,GAAG;GAAE;GAC5D;EACJ;CACJ;CACA,OAAO;EAAC;EAAK;EAAc;CAAU;AACzC;;;AC9PA,MAAa,iBAAiB;CAAE,WAAW;CAAM,KAAK;AAAK;AAC3D,MAAa,iBAAiB,EAAE,WAAW,KAAK;AAChD,SAAgB,mBAAmB,QAAQ,YAAY;CACnD,IAAI,eAAe,KAAA,MACd,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,MAAM,MAAM,OAAO,MAAM,QAAQ,IAC3E,MAAM,IAAI,UAAU,IAAI,OAAO,qCAAqC;CAExE,IAAI,CAAC,YACD;CAEJ,OAAO,IAAI,IAAI,UAAU;AAC7B;AACA,SAAgB,uBAAuB,KAAK,iBAAiB;CACzD,MAAM,EAAE,SAAS,mBAAmB,CAAC;CACrC,IAAI,MAAM,QAAQ,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,QACnD,MAAM,IAAI,IAAI,wEAAsE;AAE5F;AACA,SAAgB,aAAa,KAAK,mBAAmB,kBAAkB,iBAAiB,YAAY;CAChG,IAAI,WAAW,SAAS,KAAA,KAAa,iBAAiB,SAAS,KAAA,GAC3D,MAAM,IAAI,IAAI,kEAAgE;CAElF,IAAI,CAAC,mBAAmB,gBAAgB,SAAS,KAAA,GAC7C,OAAO,CAAC;CAEZ,IAAI,CAAC,MAAM,QAAQ,gBAAgB,IAAI,KACnC,gBAAgB,KAAK,WAAW,KAChC,gBAAgB,KAAK,MAAM,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,CAAC,GACpF,MAAM,IAAI,IAAI,yFAAuF;CAEzG,MAAM,aAAa,qBAAqB,KAAA,IAClC,oBACA;EAAE,WAAW;EAAM,GAAG;EAAkB,GAAG;CAAkB;CACnE,KAAK,MAAM,aAAa,gBAAgB,MAAM;EAC1C,IAAI,EAAE,aAAa,aACf,MAAM,IAAI,iBAAiB,+BAA+B,UAAU,oBAAoB;EAE5F,IAAI,CAAC,OAAO,OAAO,YAAY,SAAS,KAAK,WAAW,eAAe,KAAA,GACnE,MAAM,IAAI,IAAI,+BAA+B,UAAU,aAAa;EAExE,IAAI,WAAW,eACV,CAAC,OAAO,OAAO,iBAAiB,SAAS,KAAK,gBAAgB,eAAe,KAAA,IAC9E,MAAM,IAAI,IAAI,+BAA+B,UAAU,8BAA8B;CAE7F;CACA,OAAO,gBAAgB;AAC3B;;;AC7CA,SAAS,UAAU,MAAM;CACrB,IAAI,OAAO,WAAW,UAAU,aAC5B,MAAM,IAAI,iBAAiB,mEAAmE,KAAK,MAAM;AAEjH;AACA,eAAsB,SAAS,OAAO;CAClC,UAAU,mBAAmB;CAC7B,MAAM,KAAK,IAAI,kBAAkB,aAAa;CAC9C,MAAM,SAAS,GAAG,SAAS,UAAU;CACrC,OAAO,MAAM,KAAK,CAAC,CAAC,YAAY,CAAE,CAAC;CACnC,OAAO,MAAM,CAAC,CAAC,YAAY,CAAE,CAAC;CAC9B,MAAM,SAAS,CAAC;CAChB,MAAM,SAAS,GAAG,SAAS,UAAU;CACrC,SAAS;EACL,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;EAC1C,IAAI,MACA;EACJ,OAAO,KAAK,KAAK;CACrB;CACA,OAAO,OAAO,GAAG,MAAM;AAC3B;AACA,eAAsB,WAAW,OAAO,WAAW;CAC/C,UAAU,qBAAqB;CAC/B,MAAM,KAAK,IAAI,oBAAoB,aAAa;CAChD,MAAM,SAAS,GAAG,SAAS,UAAU;CACrC,OAAO,MAAM,KAAK,CAAC,CAAC,YAAY,CAAE,CAAC;CACnC,OAAO,MAAM,CAAC,CAAC,YAAY,CAAE,CAAC;CAC9B,MAAM,SAAS,CAAC;CAChB,IAAI,SAAS;CACb,MAAM,SAAS,GAAG,SAAS,UAAU;CACrC,SAAS;EACL,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;EAC1C,IAAI,MACA;EACJ,OAAO,KAAK,KAAK;EACjB,UAAU,MAAM;EAChB,IAAI,cAAc,YAAY,SAAS,WACnC,MAAM,IAAI,WAAW,sDAAsD;CAEnF;CACA,OAAO,OAAO,GAAG,MAAM;AAC3B;;;ACjCA,SAAgB,YAAY,KAAK;CAC7B,MAAM,EAAE,YAAY,WAAW,kBAAkB,gBAAgB;CACjE,IAAI,IAAI,OAAO,KAAA,KAAa,OAAO,IAAI,OAAO,UAC1C,MAAM,IAAI,WAAW,0CAA0C;CAEnE,IAAI,OAAO,eAAe,UACtB,MAAM,IAAI,WAAW,0CAA0C;CAEnE,IAAI,IAAI,QAAQ,KAAA,KAAa,OAAO,IAAI,QAAQ,UAC5C,MAAM,IAAI,WAAW,uCAAuC;CAEhE,IAAI,qBAAqB,KAAA,KAAa,OAAO,qBAAqB,UAC9D,MAAM,IAAI,WAAW,qCAAqC;CAE9D,IAAI,IAAI,QAAQ,KAAA,KAAa,OAAO,IAAI,QAAQ,UAC5C,MAAM,IAAI,WAAW,wBAAwB;CAEjD,IAAI,gBAAgB,KAAA,KAAa,CAAC,SAAS,WAAW,GAClD,MAAM,IAAI,WAAW,8CAA8C;AAE3E;AACA,SAAgB,eAAe,KAAK;CAChC,MAAM,EAAE,eAAe,cAAc,WAAW;CAChD,IAAI,iBAAiB,KAAA,KAAa,OAAO,iBAAiB,UACtD,MAAM,IAAI,WAAW,kCAAkC;CAE3D,IAAI,WAAW,KAAA,KAAa,CAAC,SAAS,MAAM,GACxC,MAAM,IAAI,WAAW,qDAAqD;CAE9E,IAAI,IAAI,cAAc,KAAA,KAAa,WAAW,KAAA,KAAa,IAAI,gBAAgB,KAAA,GAC3E,MAAM,IAAI,WAAW,qBAAqB;AAElD;AACA,SAAgB,SAAS,KAAK;CAC1B,MAAM,EAAE,WAAW,kBAAkB,YAAY,IAAI,KAAK,QAAQ;CAClE,IAAI;CACJ,IAAI,kBACA,aAAa,gBAAgB,kBAAkB,YAAY,iCAAiC;CAEhG,MAAM,kBAAkB,qBAAqB,KAAA,IAAYC,SAAO,gBAAgB,oBAAI,IAAI,WAAW;CACnG,OAAO;EACH;EACA,gBAAgB,YAAY,cAAc,UAAU;EACpD,OAAO,KAAA,IAAY,gBAAgB,IAAI,MAAM,UAAU,IAAI,KAAA;EAC3D,QAAQ,KAAA,IAAY,gBAAgB,KAAK,OAAO,UAAU,IAAI,KAAA;EAC9D,QAAQ,KAAA,IACF,OAAO,iBAAiBA,SAAO,GAAG,GAAG,gBAAgB,KAAK,OAAO,UAAU,CAAC,IAC5E;CACV;AACJ;AACA,SAAgB,cAAc,KAAK,WAAW;CAC1C,MAAM,CAAC,WAAW,YAAY,KAAK,eAAe;CAClD,MAAM,EAAE,WAAW,kBAAkB,KAAK,aAAa,WAAW;CAClE,MAAM,SAAS,EAAE,UAAU;CAC3B,IAAI,qBAAqB,KAAA,GACrB,OAAO,kBAAkB;CAE7B,IAAI,QAAQ,KAAA,GACR,OAAO,8BAA8B,gBAAgB,KAAK,OAAO,UAAU;CAE/E,IAAI,gBAAgB,KAAA,GAChB,OAAO,0BAA0B;CAErC,IAAI,WAAW,KAAA,GACX,OAAO,oBAAoB;CAE/B,IAAI,aACA,OAAO;EAAE,GAAG;EAAQ;CAAI;CAE5B,OAAO;AACX;AACA,SAAgB,eAAe,SAAS;CACpC,OAAO;EACH,WAAW,mBAAmB,2BAA2B,QAAQ,uBAAuB;EACxF,WACI,mBAAmB,+BAA+B,QAAQ,2BAA2B;EACzF;CACJ;AACJ;AACA,eAAsB,iBAAiB,KAAK,OAAO,QAAQ,KAAK;CAC5D,MAAM,CAAC,yBAAyB,6BAA6B,WAAW;CACxE,MAAM,CAAC,YAAY,YAAY,IAAI,KAAK,kBAAkB;CAC1D,MAAM,EAAE,eAAe,YAAY,QAAQ,gBAAgB;CAC3D,IAAI;CACJ,IAAI,WAAW,KAAA,KAAa,gBAAgB,KAAA,GAAW;EACnD,IAAI,CAAC,WAAW,YAAY,QAAQ,WAAW,GAC3C,MAAM,IAAI,WAAW,kHAAkH;EAE3I,aAAa;GAAE,GAAG;GAAY,GAAG;GAAQ,GAAG;EAAY;CAC5D,OAEI,aAAa,cAAc,CAAC;CAEhC,aAAa,YAAY,gBAAgB,SAAS,MAAM,YAAY,UAAU;CAC9E,IAAI,WAAW,QAAQ,KAAA,KAAa,WAAW,QAAQ,OACnD,MAAM,IAAI,iBAAiB,yEAAuE;CAEtG,IAAI,WAAW,QAAQ,KAAA,KAAa,CAAC,YAAY,KAC7C,MAAM,IAAI,WAAW,qFAAmF;CAE5G,MAAM,EAAE,KAAK,QAAQ;CACrB,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC5B,MAAM,IAAI,WAAW,2CAA2C;CAEpE,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC5B,MAAM,IAAI,WAAW,sDAAsD;CAE/E,IAAK,2BAA2B,CAAC,wBAAwB,IAAI,GAAG,KAC3D,CAAC,2BAA2B,IAAI,WAAW,OAAO,GACnD,MAAM,IAAI,kBAAkB,wDAAsD;CAEtF,IAAI,+BAA+B,CAAC,4BAA4B,IAAI,GAAG,GACnE,MAAM,IAAI,kBAAkB,mEAAiE;CAEjG,MAAM,WAAW,cAAc,GAAG;CAClC,IAAI;CACJ,IAAI,eAAe,KAAA,GACf,eAAe,gBAAgB,YAAY,iBAAiB,UAAU;CAE1E,IAAI,cAAc;CAClB,IAAI,OAAO,QAAQ,YAAY;EAC3B,MAAM,MAAM,IAAI,YAAY,GAAG;EAC/B,cAAc;CAClB;CACA,MAAM,WAAW,aAAa,GAAG;CACjC,MAAM,IAAI,MAAM,WAAW,QAAQ,QAAQ,WAAW,UAAU,KAAK,SAAS;CAC9E,IAAI;CACJ,IAAI;EACA,MAAM,MAAM,qBAAqB,KAAK,UAAU,GAAG,cAAc,YAAY,OAAO;CACxF,SACO,KAAK;EACR,IAAI,eAAe,aAAa,eAAe,cAAc,eAAe,kBACxE,MAAM;EAEV,MAAM,YAAY,QAAQ;CAC9B;CACA,IAAI,YAAY,MAAM,QAAQ,UAAU,KAAK,YAAY,IAAI,KAAK,cAAc;CAChF,IAAI,WAAW,QAAQ,OAAO;EAC1B,MAAM,wBAAwB,SAAS,yBAAyB;EAChE,IAAI,0BAA0B,GAC1B,MAAM,IAAI,iBAAiB,wEAAsE;EAErG,IAAI,0BAA0B,aACzB,CAAC,OAAO,cAAc,qBAAqB,KAAK,wBAAwB,IACzE,MAAM,IAAI,UAAU,uEAAuE;EAE/F,YAAY,MAAM,WAAW,WAAW,qBAAqB,CAAC,CAAC,OAAO,UAAU;GAC5E,IAAI,iBAAiB,YACjB,MAAM;GACV,MAAM,IAAI,WAAW,kCAAkC,EAAE,MAAM,CAAC;EACpE,CAAC;CACL;CACA,OAAO;EAAC;EAAW;EAAY;EAAG;CAAW;AACjD;AACA,eAAsB,WAAW,KAAK,QAAQ,KAAK;CAC/C,OAAO,iBAAiB,KAAK,SAAS,GAAG,GAAG,QAAQ,GAAG;AAC3D;AACA,eAAsB,eAAe,KAAK,QAAQ,KAAK;CACnD,IAAI,eAAe,YACf,MAAM,QAAQ,OAAO,GAAG;CAE5B,IAAI,OAAO,QAAQ,UACf,MAAM,IAAI,WAAW,4CAA4C;CAErE,MAAM,EAAE,GAAG,iBAAiB,GAAG,cAAc,GAAG,IAAI,GAAG,YAAY,GAAG,KAAK,WAAY,IAAI,MAAM,GAAG;CACpG,IAAI,WAAW,GACX,MAAM,IAAI,WAAW,qBAAqB;CAE9C,OAAO,WAAW;EACd;EACA,IAAI,MAAM,KAAA;EACV,WAAW;EACX,KAAK,OAAO,KAAA;EACZ,eAAe,gBAAgB,KAAA;CACnC,GAAG,QAAQ,GAAG;AAClB;;;ACxLA,eAAsB,eAAe,KAAK,KAAK,SAAS;CACpD,MAAM,YAAY,MAAM,eAAe,KAAK,eAAe,OAAO,GAAG,GAAG;CACxE,MAAM,SAAS;EAAE,WAAW,UAAU;EAAI,iBAAiB,UAAU;CAAG;CACxE,IAAI,OAAO,QAAQ,YACf,OAAO;EAAE,GAAG;EAAQ,KAAK,UAAU;CAAG;CAE1C,OAAO;AACX;;;ACLA,eAAsB,iBAAiB,KAAK,KAAK,SAAS;CACtD,IAAI,CAAC,SAAS,GAAG,GACb,MAAM,IAAI,WAAW,iCAAiC;CAE1D,YAAY,GAAG;CACf,eAAe,GAAG;CAClB,OAAO,cAAc,KAAK,MAAM,WAAW,KAAK,eAAe,OAAO,GAAG,GAAG,CAAC;AACjF;;;ACPA,eAAsB,eAAe,KAAK,KAAK,SAAS;CACpD,IAAI,CAAC,SAAS,GAAG,GACb,MAAM,IAAI,WAAW,+BAA+B;CAExD,IAAI,CAAC,MAAM,QAAQ,IAAI,UAAU,KAAK,CAAC,IAAI,WAAW,MAAM,QAAQ,GAChE,MAAM,IAAI,WAAW,0CAA0C;CAEnE,IAAI,CAAC,IAAI,WAAW,QAChB,MAAM,IAAI,WAAW,+BAA+B;CAExD,IAAI;CACJ,IAAI;CACJ,IAAI;EACA,YAAY,GAAG;EACf,SAAS,eAAe,OAAO;EAC/B,QAAQ,SAAS,GAAG;CACxB,QACM;EACF,MAAM,IAAI,oBAAoB;CAClC;CACA,IAAI,IAAI,WAAW,SAAS,GACxB,KAAK,MAAM,EAAE,YAAY,IAAI,YAAY;EACrC,MAAM,MAAM,MAAM,EAAE,EAAE,OAAO,QAAQ,OAAO,IAAI,aAAa;EAC7D,IAAI,QAAQ,SAAS,QAAQ,WACzB,MAAM,IAAI,WAAW,IAAI,IAAI,uCAAuC;CAE5E;CAEJ,KAAK,MAAM,aAAa,IAAI,YACxB,IAAI;EACA,MAAM,YAAY;GACd,KAAK,IAAI;GACT,YAAY,IAAI;GAChB,eAAe,UAAU;GACzB,QAAQ,UAAU;GAClB,IAAI,IAAI;GACR,WAAW,IAAI;GACf,KAAK,IAAI;GACT,aAAa,IAAI;EACrB;EACA,eAAe,SAAS;EACxB,OAAO,cAAc,WAAW,MAAM,iBAAiB,WAAW,OAAO,QAAQ,GAAG,CAAC;CACzF,QACM,CACN;CAEJ,MAAM,IAAI,oBAAoB;AAClC;;;ACxCA,SAAgB,oBAAoB,OAAO;CACvC,MAAM,GAAG,iBAAiB,mBAAmB,iCAAiC,QAAQ;CACtF,IAAI,CAAC,WAAW,iBAAiB,mBAAmB,uBAAuB,GACvE,MAAM,IAAI,WAAW,qGAAqG;CAE9H,MAAM,aAAa;EACf,GAAG;EACH,GAAG;EACH,GAAG;CACP;CACA,aAAa,YAAY,gBAAgB,MAAM,iBAAiB,UAAU;CAC1E,IAAI,WAAW,QAAQ,KAAA,KAAa,WAAW,QAAQ,OACnD,MAAM,IAAI,iBAAiB,yEAAuE;CAEtG,IAAI,WAAW,QAAQ,KAAA,KAAa,CAAC,iBAAiB,KAClD,MAAM,IAAI,WAAW,qFAAmF;CAE5G,MAAM,EAAE,KAAK,QAAQ;CACrB,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC5B,MAAM,IAAI,WAAW,6DAA2D;CAEpF,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC5B,MAAM,IAAI,WAAW,wEAAsE;CAE/F,OAAO;EAAC;EAAY;EAAK;EAAK,cAAc,GAAG;CAAC;AACpD;AACA,eAAsB,WAAW,OAAO,SAAS,KAAK;CAClD,MAAM,CAAC,YAAY,OAAO,YAAY;CACtC,MAAM,CAAC,gBAAgB,sBAAsB,wBAAwB,yBAAyB,KAAK,aAAa,SAAS,2BAA2B,yBAA0B;CAC9K,IAAI,kBAAkB;CACtB,IAAI,oBAAoB;CACxB,IAAI,gBAAgB,QAAQ,SAAS,QAAQ,YACzC,MAAM,IAAI,UAAU,8EAA8E,KAAK;CAE3G,MAAM,WAAW,aAAa,GAAG;CAEjC,MAAM,CAAC,KAAK,cAAc,cAAc,MAAM,qBAAqB,KAAK,UAAU,MADlE,WAAW,QAAQ,QAAQ,WAAW,UAAU,KAAK,SAAS,GACO,aAAa,uBAAuB;CACzH,IAAI,YAAY;EACZ,IAAI,uBACA,oBAAoB,oBAAoB;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;OAGlF,kBAAkB,kBAAkB;GAAE,GAAG;GAAiB,GAAG;EAAW,IAAI;CAEpF;CACA,IAAI;CACJ,IAAI;CACJ,IAAI,iBAAiB;EACjB,mBAAmBC,OAAK,KAAK,UAAU,eAAe,CAAC;EACvD,mBAAmBC,SAAO,gBAAgB;CAC9C,OACK;EACD,mBAAmB;EACnB,mCAAmB,IAAI,WAAW;CACtC;CACA,IAAI;CACJ,IAAI;CACJ,IAAI,KAAK,YAAY;EACjB,YAAYD,OAAK,GAAG;EACpB,iBAAiB,OAAO,kBAAkBC,SAAO,GAAG,GAAGA,SAAO,SAAS,CAAC;CAC5E,OAEI,iBAAiB;CAErB,IAAI,YAAY;CAChB,IAAI,WAAW,QAAQ,OACnB,YAAY,MAAM,SAAS,SAAS,CAAC,CAAC,OAAO,UAAU;EACnD,MAAM,IAAI,WAAW,gCAAgC,EAAE,MAAM,CAAC;CAClE,CAAC;CAEL,MAAM,EAAE,YAAY,KAAK,OAAO,MAAM,QAAQ,UAAU,WAAW,KAAK,SAAS,cAAc;CAC/F,MAAM,MAAM,EACR,YAAYD,OAAK,UAAU,EAC/B;CACA,IAAI,IACA,IAAI,KAAKA,OAAK,EAAE;CAEpB,IAAI,KACA,IAAI,MAAMA,OAAK,GAAG;CAEtB,IAAI,cACA,IAAI,gBAAgBA,OAAK,YAAY;CAEzC,IAAI,WACA,IAAI,MAAM;CAEd,IAAI,iBACA,IAAI,YAAY;CAEpB,IAAI,yBACA,IAAI,cAAc;CAEtB,IAAI,mBACA,IAAI,SAAS;CAEjB,OAAO;AACX;AACA,eAAsB,UAAU,OAAO,KAAK;CACxC,OAAO,WAAW,OAAO,oBAAoB,KAAK,GAAG,GAAG;AAC5D;;;ACzGA,IAAa,mBAAb,MAA8B;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,YAAY,WAAW;EACnB,IAAI,EAAE,qBAAqB,aACvB,MAAM,IAAI,UAAU,6CAA6C;EAErE,KAAKE,aAAa;CACtB;CACA,2BAA2B,YAAY;EACnC,aAAa,KAAKC,0BAA0B,4BAA4B;EACxE,KAAKA,2BAA2B;EAChC,OAAO;CACX;CACA,mBAAmB,iBAAiB;EAChC,aAAa,KAAKC,kBAAkB,oBAAoB;EACxD,KAAKA,mBAAmB;EACxB,OAAO;CACX;CACA,2BAA2B,yBAAyB;EAChD,aAAa,KAAKC,0BAA0B,4BAA4B;EACxE,KAAKA,2BAA2B;EAChC,OAAO;CACX;CACA,qBAAqB,mBAAmB;EACpC,aAAa,KAAKC,oBAAoB,sBAAsB;EAC5D,KAAKA,qBAAqB;EAC1B,OAAO;CACX;CACA,+BAA+B,KAAK;EAChC,KAAKC,OAAO;EACZ,OAAO;CACX;CACA,wBAAwB,KAAK;EACzB,aAAa,KAAKC,MAAM,yBAAyB;EACjD,KAAKA,OAAO;EACZ,OAAO;CACX;CACA,wBAAwB,IAAI;EACxB,aAAa,KAAKC,KAAK,yBAAyB;EAChD,KAAKA,MAAM;EACX,OAAO;CACX;CACA,MAAM,QAAQ,KAAK,SAAS;EACxB,IAAI,CAAC,KAAKL,oBAAoB,CAAC,KAAKE,sBAAsB,CAAC,KAAKD,0BAC5D,MAAM,IAAI,WAAW,8GAA8G;EAEvI,uBAAuB,YAAY,KAAKD,gBAAgB;EACxD,OAAO,UAAU;GACb,KAAKF;GACL,KAAKE;GACL,KAAKE;GACL,KAAKD;GACL,KAAKE;GACL,KAAKC;GACL,KAAKC;GACL,KAAKN;GACL,SAAS;GACT,UAAU,eAAe,UAAU;EACvC,GAAG,GAAG;CACV;AACJ;;;AC7DA,IAAM,sBAAN,MAA0B;CACtB;CACA;CACA,YAAY,KAAK,KAAK,MAAM;EACxB,KAAKO,UAAU;EACf,KAAK,QAAQ;GAAC,KAAA;GAAW,KAAA;GAAW;GAAK;EAAI;CACjD;CACA,qBAAqB,mBAAmB;EACpC,aAAa,KAAK,MAAM,IAAI,sBAAsB;EAClD,KAAK,MAAM,KAAK;EAChB,OAAO;CACX;CACA,2BAA2B,YAAY;EACnC,aAAa,KAAK,MAAM,IAAI,4BAA4B;EACxD,KAAK,MAAM,KAAK;EAChB,OAAO;CACX;CACA,aAAa,GAAG,MAAM;EAClB,OAAO,KAAKA,QAAQ,aAAa,GAAG,IAAI;CAC5C;CACA,QAAQ,GAAG,MAAM;EACb,OAAO,KAAKA,QAAQ,QAAQ,GAAG,IAAI;CACvC;CACA,OAAO;EACH,OAAO,KAAKA;CAChB;AACJ;AACA,SAAS,oBAAoB,WAAW,KAAK,WAAW;CACpD,MAAM,EAAE,KAAK,WAAW,iBAAiB,aAAa,WAAW;CACjE,IAAI,KACA,IAAI,MAAM;CACd,IAAI,iBACA,IAAI,YAAY;CACpB,IAAI,aACA,IAAI,cAAc;CACtB,IAAI,QACA,UAAU,SAAS;AAC3B;AACA,IAAa,iBAAb,MAA4B;CACxB;CACA,cAAc,CAAC;CACf;CACA;CACA;CACA,YAAY,WAAW;EACnB,KAAKC,aAAa;CACtB;CACA,aAAa,KAAK,SAAS;EACvB,MAAM,YAAY,IAAI,oBAAoB,MAAM,KAAK,SAAS,IAAI;EAClE,KAAKC,YAAY,KAAK,SAAS;EAC/B,OAAO;CACX;CACA,mBAAmB,iBAAiB;EAChC,aAAa,KAAKC,kBAAkB,oBAAoB;EACxD,KAAKA,mBAAmB;EACxB,OAAO;CACX;CACA,2BAA2B,yBAAyB;EAChD,aAAa,KAAKC,oBAAoB,4BAA4B;EAClE,KAAKA,qBAAqB;EAC1B,OAAO;CACX;CACA,+BAA+B,KAAK;EAChC,KAAKC,OAAO;EACZ,OAAO;CACX;CACA,MAAM,UAAU;EACZ,IAAI,CAAC,KAAKH,YAAY,QAClB,MAAM,IAAI,WAAW,sCAAsC;EAE/D,IAAI,EAAE,KAAKD,sBAAsB,aAC7B,MAAM,IAAI,UAAU,6CAA6C;EAErE,IAAI,KAAKC,YAAY,WAAW,GAAG;GAC/B,MAAM,CAAC,aAAa,KAAKA;GACzB,MAAM,CAAC,mBAAmB,yBAAyB,KAAK,QAAQ,UAAU;GAC1E,MAAM,YAAY,MAAM,IAAI,iBAAiB,KAAKD,UAAU,CAAC,CACxD,+BAA+B,KAAKI,IAAI,CAAC,CACzC,mBAAmB,KAAKF,gBAAgB,CAAC,CACzC,2BAA2B,KAAKC,kBAAkB,CAAC,CACnD,qBAAqB,iBAAiB,CAAC,CACvC,2BAA2B,uBAAuB,CAAC,CACnD,QAAQ,KAAK,EAAE,KAAK,CAAC;GAC1B,MAAM,MAAM;IACR,YAAY,UAAU;IACtB,IAAI,UAAU;IACd,YAAY,CAAC,CAAC,CAAC;IACf,KAAK,UAAU;GACnB;GACA,IAAI,UAAU,eACV,IAAI,WAAW,EAAE,CAAC,gBAAgB,UAAU;GAChD,oBAAoB,WAAW,KAAK,IAAI,WAAW,EAAE;GACrD,OAAO;EACX;EACA,uBAAuB,YAAY,KAAKD,gBAAgB;EACxD,IAAI;EACJ,MAAM,SAAS,CAAC;EAChB,MAAM,UAAU,CAAC;EACjB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAKD,YAAY,QAAQ,KAAK;GAE9C,MAAM,CAAC,mBAAmB,2BAA2B,QADnC,KAAKA,YAAY,EACmC,CAAC;GACvE,MAAM,QAAQ;IACV,KAAKD;IACL,KAAKE;IACL;IACA,KAAKC;IACL,KAAKC;IACL,KAAA;IACA,KAAA;IACA;IACA;IACA;GACJ;GACA,MAAM,UAAU,oBAAoB,KAAK;GACzC,OAAO,KAAK,KAAK;GACjB,QAAQ,KAAK,OAAO;GACpB,IAAI,QAAQ,OAAO,SAAS,QAAQ,OAAO,WACvC,MAAM,IAAI,WAAW,IAAI,QAAQ,GAAG,uCAAuC;GAE/E,IAAI,CAAC,KACD,MAAM,QAAQ;QAEb,IAAI,QAAQ,QAAQ,IACrB,MAAM,IAAI,WAAW,yFAAuF;EAEpH;EACA,MAAM,MAAM,YAAY,QAAQ,EAAE,CAAC,EAAE;EACrC,MAAM,MAAM;GACR,YAAY;GACZ,YAAY,CAAC;EACjB;EACA,KAAK,IAAI,IAAI,GAAG,IAAI,KAAKH,YAAY,QAAQ,KAAK;GAE9C,MAAM,CAAC,mBAAmB,yBAAyB,OADjC,KAAKA,YAAY,EACgC,CAAC;GACpE,MAAM,SAAS,CAAC;GAChB,IAAI,WAAW,KAAK,MAAM;GAC1B,IAAI,MAAM,GAAG;IACT,OAAO,EAAE,CAAC,KAAK;IACf,MAAM,YAAY,MAAM,WAAW,OAAO,IAAI,QAAQ,IAAI,GAAG;IAC7D,IAAI,aAAa,UAAU;IAC3B,IAAI,KAAK,UAAU;IACnB,IAAI,MAAM,UAAU;IACpB,OAAO,gBAAgB,UAAU;IACjC,oBAAoB,WAAW,KAAK,MAAM;IAC1C;GACJ;GACA,MAAM,GAAG,OAAO,YAAY,QAAQ;GAEpC,MAAM,GAAG,cAAc,cAAc,MAAM,qBAAqB,KAAK,UAAU,MAD/D,WAAW,aAAa,GAAG,GAAG,KAAK,SAAS,GACsB,KAAK,uBAAuB;GAC9G,OAAO,gBAAgBI,OAAK,YAAY;GACxC,IAAI,qBAAqB,YACrB,OAAO,SAAS;IAAE,GAAG;IAAmB,GAAG;GAAW;EAC9D;EACA,OAAO;CACX;AACJ;;;ACpKA,eAAe,UAAU,OAAO,KAAK,OAAO;CACxC,IAAI,eAAe,YACf,OAAO,OAAO,OAAO,UAAU,OAAO,KAAK,MAAM,QAAQ,OAAO,CAC5D,KACJ,CAAC;CAEL,eAAe,KAAK,MAAM,QAAQ,KAAK;CACvC,IAAI,MAAM,YACN,mBAAmB,MAAM,KAAK,GAAG;CACrC,OAAO;AACX;AACA,eAAsB,KAAK,OAAO,KAAK,MAAM;CACzC,MAAM,YAAY,MAAM,UAAU,OAAO,KAAK,MAAM;CACpD,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,MAAM,SAAS,WAAW,IAAI;CACzE,OAAO,IAAI,WAAW,SAAS;AACnC;AACA,eAAsB,OAAO,OAAO,KAAK,WAAW,MAAM;CACtD,MAAM,YAAY,MAAM,UAAU,OAAO,KAAK,QAAQ;CACtD,IAAI;EACA,OAAO,MAAM,OAAO,OAAO,OAAO,MAAM,SAAS,WAAW,WAAW,IAAI;CAC/E,QACM;EACF,OAAO;CACX;AACJ;;;ACvBA,MAAM,MAAM,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC;AACjC,SAAS,KAAK,MAAM;CAChB,MAAM,SAAS;EAAE,MAAM;EAAQ,MAAM,OAAO;CAAO;CACnD,OAAO;EAAE,KAAK,CAAC,KAAK;EAAG,QAAQ;EAAM;EAAQ,SAAS;EAAQ,QAAQ;CAAI;AAC9E;AACA,SAAS,IAAI,MAAM,YAAY;CAE3B,MAAM,SAAS;EAAE,MADJ,aAAa,YAAY;EACf,MAAM,OAAO;CAAO;CAC3C,OAAO;EACH,KAAK,CAAC,KAAK;EACX;EACA,SAAS,aAAa;GAAE,GAAG;GAAQ;EAAW,IAAI;EAClD,QAAQ;EACR,YAAY;CAChB;AACJ;AACA,SAAS,MAAM,KAAK,MAAM;CACtB,OAAO;EACH,KAAK,CAAC,IAAI;EACV;EACA,QAAQ;GAAE,MAAM;GAAS,YAAY;EAAI;EACzC,SAAS;GAAE,MAAM;GAAS,MAAM,OAAO;EAAO;EAC9C,QAAQ;CACZ;AACJ;AACA,SAAS,QAAQ;CACb,MAAM,SAAS,EAAE,MAAM,UAAU;CACjC,OAAO;EACH,KAAK,CAAC,KAAK;EACX,KAAK;EACL;EACA,SAAS;EACT,QAAQ;CACZ;AACJ;AACA,SAAS,MAAM,MAAM;CAEjB,MAAM,SAAS,EAAE,MAAA,UADM,OACD;CACtB,OAAO;EACH,KAAK,CAAC,KAAK;EACX;EACA,SAAS;EACT,QAAQ;CACZ;AACJ;AACA,MAAa,MAAM,MAAM;CACrB,OAAO,KAAK,GAAG;CACf,OAAO,KAAK,GAAG;CACf,OAAO,KAAK,GAAG;CACf,OAAO,IAAI,GAAG;CACd,OAAO,IAAI,GAAG;CACd,OAAO,IAAI,GAAG;CACd,OAAO,IAAI,KAAK,EAAE;CAClB,OAAO,IAAI,KAAK,EAAE;CAClB,OAAO,IAAI,KAAK,EAAE;CAClB,OAAO,MAAM,SAAS,GAAG;CACzB,OAAO,MAAM,SAAS,GAAG;CACzB,OAAO,MAAM,SAAS,GAAG;CACzB,OAAO,MAAM;CACb,SAAS,MAAM;CACf,aAAa,MAAM,EAAE;CACrB,aAAa,MAAM,EAAE;CACrB,aAAa,MAAM,EAAE;AACzB,CAAC;AACD,SAAgB,aAAa,KAAK;CAC9B,MAAM,QAAQ,OAAO,QAAQ,WAAW,IAAI,OAAO,KAAA;CACnD,IAAI,CAAC,OACD,MAAM,IAAI,iBAAiB,OAAO,IAAI,4DAA4D;CAEtG,OAAO;AACX;;;AChEA,SAAgB,aAAa,KAAK,UAAU;CACxC,MAAM,CAAC,SAAS,cAAc,KAAK,eAAe;CAClD,MAAM,SAAS,EAAE,QAAQ;CACzB,IAAI,IAAI,cAAc,KAAA,GAClB,OAAO,kBAAkB;CAE7B,IAAI,IAAI,WAAW,KAAA,GACf,OAAO,oBAAoB,IAAI;CAEnC,IAAI,aACA,OAAO;EAAE,GAAG;EAAQ;CAAI;CAE5B,OAAO;AACX;AACA,SAAgB,cAAc,SAAS;CACnC,OAAO,CAAC,WAAW,mBAAmB,cAAc,QAAQ,UAAU,GAAG,SAAS,IAAI;AAC1F;AACA,eAAsB,gBAAgB,KAAK,QAAQ,KAAK;CACpD,MAAM,EAAE,WAAW,kBAAkB,QAAQ,SAAS,iBAAiB;CACvE,IAAI,aAAa,CAAC;CAClB,IAAI,kBACA,aAAa,gBAAgB,kBAAkB,YAAY,iCAAiC;CAEhG,IAAI;CACJ,IAAI,WAAW,KAAA,GAAW;EACtB,IAAI,CAAC,WAAW,YAAY,MAAM,GAC9B,MAAM,IAAI,WAAW,2EAA2E;EAEpG,aAAa;GAAE,GAAG;GAAY,GAAG;EAAO;CAC5C,OAEI,aAAa;CAEjB,MAAM,aAAa,aAAa,YAAY,gBAAgB,OAAO,IAAI,YAAY,UAAU;CAC7F,IAAI,MAAM;CACV,IAAI,WAAW,SAAS,KAAK,GAAG;EAC5B,MAAM,WAAW;EACjB,IAAI,OAAO,QAAQ,WACf,MAAM,IAAI,WAAW,2EAAyE;CAEtG;CACA,MAAM,EAAE,QAAQ;CAChB,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC5B,MAAM,IAAI,WAAW,6DAA2D;CAEpF,IAAI,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,GAAG,GAC/B,MAAM,IAAI,kBAAkB,wDAAsD;CAEtF,IAAI,KACI;MAAA,OAAO,iBAAiB,UACxB,MAAM,IAAI,WAAW,8BAA8B;CAAA,OAGtD,IAAI,OAAO,iBAAiB,YAAY,EAAE,wBAAwB,aACnE,MAAM,IAAI,WAAW,wDAAwD;CAEjF,IAAI,cAAc;CAClB,IAAI,OAAO,QAAQ,YAAY;EAC3B,MAAM,MAAM,IAAI,YAAY,GAAG;EAC/B,cAAc;CAClB;CACA,MAAM,QAAQ,aAAa,GAAG;CAC9B,MAAM,OAAO,OAAO,qBAAqB,KAAA,IAAYC,SAAO,gBAAgB,oBAAI,IAAI,WAAW,GAAGA,SAAO,GAAG,GAAG,OAAO,iBAAiB,WACjI,MAEO,OAAO,OAAO,gBAAgB,cAAc,WAAW,UAAU,IACpE,QAAQ,OAAO,YAAY,IAC/B,YAAY;CAClB,MAAM,YAAY,gBAAgB,IAAI,WAAW,aAAa,UAAU;CACxE,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,QAAQ;CAE/C,IAAI,CAAC,MADkB,OAAO,OAAO,GAAG,WAAW,IAAI,GAEnD,MAAM,IAAI,+BAA+B;CAE7C,IAAI;CACJ,IAAI,KACA,UAAU,gBAAgB,cAAc,WAAW,UAAU;MAE5D,IAAI,OAAO,iBAAiB,UAC7B,UAAU,QAAQ,OAAO,YAAY;MAGrC,UAAU;CAEd,OAAO;EAAC;EAAS;EAAY;EAAK;EAAG;CAAW;AACpD;AACA,eAAsB,cAAc,KAAK,QAAQ,KAAK;CAClD,IAAI,eAAe,YACf,MAAM,QAAQ,OAAO,GAAG;CAE5B,IAAI,OAAO,QAAQ,UACf,MAAM,IAAI,WAAW,4CAA4C;CAErE,MAAM,EAAE,GAAG,iBAAiB,GAAG,SAAS,GAAG,WAAW,WAAW,IAAI,MAAM,GAAG;CAC9E,IAAI,WAAW,GACX,MAAM,IAAI,WAAW,qBAAqB;CAE9C,OAAO,gBAAgB;EAAE;EAAS,WAAW;EAAiB;CAAU,GAAG,QAAQ,GAAG;AAC1F;;;ACzGA,eAAsB,cAAc,KAAK,KAAK,SAAS;CACnD,MAAM,WAAW,MAAM,cAAc,KAAK,cAAc,OAAO,GAAG,GAAG;CACrE,MAAM,SAAS;EAAE,SAAS,SAAS;EAAI,iBAAiB,SAAS;CAAG;CACpE,IAAI,OAAO,QAAQ,YACf,OAAO;EAAE,GAAG;EAAQ,KAAK,SAAS;CAAG;CAEzC,OAAO;AACX;;;ACLA,eAAsB,gBAAgB,KAAK,KAAK,SAAS;CACrD,IAAI,CAAC,SAAS,GAAG,GACb,MAAM,IAAI,WAAW,iCAAiC;CAE1D,IAAI,IAAI,cAAc,KAAA,KAAa,IAAI,WAAW,KAAA,GAC9C,MAAM,IAAI,WAAW,2EAAuE;CAEhG,IAAI,IAAI,cAAc,KAAA,KAAa,OAAO,IAAI,cAAc,UACxD,MAAM,IAAI,WAAW,qCAAqC;CAE9D,IAAI,IAAI,YAAY,KAAA,GAChB,MAAM,IAAI,WAAW,qBAAqB;CAE9C,IAAI,OAAO,IAAI,cAAc,UACzB,MAAM,IAAI,WAAW,yCAAyC;CAElE,IAAI,IAAI,WAAW,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,GAChD,MAAM,IAAI,WAAW,uCAAuC;CAEhE,OAAO,aAAa,KAAK,MAAM,gBAAgB,KAAK,cAAc,OAAO,GAAG,GAAG,CAAC;AACpF;;;ACpBA,eAAsB,cAAc,KAAK,KAAK,SAAS;CACnD,IAAI,CAAC,SAAS,GAAG,GACb,MAAM,IAAI,WAAW,+BAA+B;CAExD,MAAM,EAAE,YAAY,YAAY;CAChC,IAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,CAAC,WAAW,MAAM,QAAQ,GACxD,MAAM,IAAI,WAAW,0CAA0C;CAEnE,IAAI;CACJ,IAAI;EACA,IAAI,YAAY,KAAA,GACZ,MAAM,IAAI,MAAM;EACpB,SAAS,cAAc,OAAO;CAClC,QACM;EACF,MAAM,IAAI,+BAA+B;CAC7C;CACA,KAAK,MAAM,aAAa,YACpB,IAAI;EACA,MAAM,EAAE,WAAW,kBAAkB,QAAQ,WAAW,qBAAqB;EAC7E,IAAI,qBAAqB,KAAA,KAAa,WAAW,KAAA,GAC7C,MAAM,IAAI,MAAM;EACpB,IAAI,qBAAqB,KAAA,KAAa,OAAO,qBAAqB,UAC9D,MAAM,IAAI,MAAM;EAEpB,IAAI,OAAO,qBAAqB,UAC5B,MAAM,IAAI,MAAM;EACpB,IAAI,WAAW,KAAA,KAAa,CAAC,SAAS,MAAM,GACxC,MAAM,IAAI,MAAM;EACpB,OAAO,aAAa,WAAW,MAAM,gBAAgB;GACjD;GACA;GACA,WAAW;GACX,WAAW;EACf,GAAG,QAAQ,GAAG,CAAC;CACnB,QACM,CACN;CAEJ,MAAM,IAAI,+BAA+B;AAC7C;;;ACxCA,MAAM,SAAS,SAAS,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAI;AACxD,MAAM,cAAc;CAChB,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;AACP;AACA,MAAM,QAAQ;AACd,MAAM,cAAc;AACpB,SAAgB,KAAK,KAAK;CACtB,MAAM,UAAU,MAAM,KAAK,GAAG;CAC9B,IAAI,CAAC,WAAY,QAAQ,MAAM,QAAQ,IACnC,MAAM,IAAI,UAAU,4BAA4B;CAEpD,MAAM,QAAQ,WAAW,QAAQ,EAAE;CACnC,MAAM,cAAc,KAAK,MAAM,QAAQ,YAAY,QAAQ,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE;CAC/E,IAAI,QAAQ,OAAO,OAAO,QAAQ,OAAO,OACrC,OAAO,CAAC;CAEZ,OAAO;AACX;AACA,SAAS,cAAc,OAAO,OAAO;CACjC,IAAI,CAAC,OAAO,SAAS,KAAK,GACtB,MAAM,IAAI,UAAU,WAAW,MAAM,OAAO;CAEhD,OAAO;AACX;AACA,SAAS,YAAY,OAAO,OAAO;CAC/B,IAAI,OAAO,UAAU,UACjB,OAAO,cAAc,OAAO,KAAK;CACrC,IAAI,iBAAiB,MACjB,OAAO,cAAc,OAAO,MAAM,KAAK,CAAC;CAC5C,OAAO,sBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;AACzC;AACA,MAAM,gBAAgB,UAAU;CAC5B,IAAI,MAAM,SAAS,GAAG,GAClB,OAAO,MAAM,YAAY;CAE7B,OAAO,eAAe,MAAM,YAAY;AAC5C;AACA,MAAM,yBAAyB,YAAY,cAAc;CACrD,IAAI,OAAO,eAAe,UACtB,OAAO,UAAU,SAAS,UAAU;CAExC,IAAI,MAAM,QAAQ,UAAU,GACxB,OAAO,UAAU,MAAM,QAAQ,WAAW,SAAS,GAAG,CAAC;CAE3D,OAAO;AACX;AACA,SAAS,oBAAoB,SAAS,OAAO,WAAW,OAAO;CAC3D,MAAM,QAAQ,QAAQ;CACtB,IAAI,UAAU,KAAA,KAAa,CAAC,UACxB,OAAO,KAAA;CACX,IAAI,OAAO,UAAU,UACjB,MAAM,IAAI,yBAAyB,IAAI,MAAM,2BAA2B,SAAS,OAAO,SAAS;CAErG,OAAO;AACX;AACA,SAAS,gBAAgB,SAAS,OAAO;CACrC,MAAM,IAAI,yBAAyB,eAAe,MAAM,gBAAgB,SAAS,OAAO,WAAW;AACvG;AACA,SAAgB,kBAAkB,iBAAiB,gBAAgB,UAAU,CAAC,GAAG;CAC7E,IAAI;CACJ,IAAI;EACA,UAAU,KAAK,MAAM,cAAc,OAAO,cAAc,CAAC;CAC7D,QACM,CACN;CACA,IAAI,CAAC,SAAS,OAAO,GACjB,MAAM,IAAI,WAAW,gDAAgD;CAEzE,MAAM,EAAE,QAAQ;CAChB,IAAI,QACC,OAAO,gBAAgB,QAAQ,YAC5B,aAAa,gBAAgB,GAAG,MAAM,aAAa,GAAG,IAC1D,MAAM,IAAI,yBAAyB,uCAAqC,SAAS,OAAO,WAAW;CAEvG,MAAM,EAAE,iBAAiB,CAAC,GAAG,QAAQ,SAAS,UAAU,gBAAgB;CACxE,MAAM,gBAAgB,CAAC,GAAG,cAAc;CACxC,IAAI,gBAAgB,KAAA,GAChB,cAAc,KAAK,KAAK;CAC5B,IAAI,aAAa,KAAA,GACb,cAAc,KAAK,KAAK;CAC5B,IAAI,YAAY,KAAA,GACZ,cAAc,KAAK,KAAK;CAC5B,IAAI,WAAW,KAAA,GACX,cAAc,KAAK,KAAK;CAC5B,KAAK,MAAM,SAAS,IAAI,IAAI,cAAc,QAAQ,CAAC,GAC/C,IAAI,CAAC,OAAO,OAAO,SAAS,KAAK,GAC7B,MAAM,IAAI,yBAAyB,qBAAqB,MAAM,UAAU,SAAS,OAAO,SAAS;CAGzG,IAAI,WAAW,KAAA,KACX,EAAE,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM,EAAA,CAAG,SAAS,QAAQ,GAAG,GACjE,gBAAgB,SAAS,KAAK;CAElC,IAAI,YAAY,KAAA,KAAa,QAAQ,QAAQ,SACzC,gBAAgB,SAAS,KAAK;CAElC,IAAI,aAAa,KAAA,KACb,CAAC,sBAAsB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI,QAAQ,GACxF,gBAAgB,SAAS,KAAK;CAElC,MAAM,EAAE,mBAAmB;CAC3B,IAAI,YAAY;CAChB,IAAI,OAAO,mBAAmB,UAC1B,YAAY,KAAK,cAAc;MAE9B,IAAI,mBAAmB,KAAA,GAAW;EACnC,IAAI,OAAO,mBAAmB,UAC1B,MAAM,IAAI,UAAU,oCAAoC;EAE5D,YAAY;CAChB;CACA,cAAc,yBAAyB,SAAS;CAChD,MAAM,EAAE,gBAAgB;CACxB,MAAM,MAAM,cAAc,sBAAsB,MAAM,+BAAe,IAAI,KAAK,CAAC,CAAC;CAChF,MAAM,MAAM,oBAAoB,SAAS,OAAO,gBAAgB,KAAA,CAAS;CACzE,MAAM,MAAM,oBAAoB,SAAS,KAAK;CAC9C,IAAI,QAAQ,KAAA,GACJ;MAAA,MAAM,MAAM,WACZ,MAAM,IAAI,yBAAyB,wCAAsC,SAAS,OAAO,WAAW;CAAA;CAG5G,MAAM,MAAM,oBAAoB,SAAS,KAAK;CAC9C,IAAI,QAAQ,KAAA,GACJ;MAAA,OAAO,MAAM,WACb,MAAM,IAAI,WAAW,wCAAsC,SAAS,OAAO,WAAW;CAAA;CAG9F,IAAI,gBAAgB,KAAA,GAAW;EAC3B,MAAM,MAAM,MAAM;EAClB,MAAM,MAAM,OAAO,gBAAgB,WAAW,cAAc,KAAK,WAAW;EAC5E,IAAI,MAAM,YAAY,KAClB,MAAM,IAAI,WAAW,8DAA4D,SAAS,OAAO,WAAW;EAEhH,IAAI,MAAM,IAAI,WACV,MAAM,IAAI,yBAAyB,mEAAiE,SAAS,OAAO,WAAW;CAEvI;CACA,OAAO;AACX;AACA,IAAa,mBAAb,MAA8B;CAC1B;CACA,YAAY,SAAS;EACjB,IAAI,CAAC,SAAS,OAAO,GACjB,MAAM,IAAI,UAAU,kCAAkC;EAE1D,KAAKC,WAAW,gBAAgB,OAAO;CAC3C;CACA,OAAO;EACH,OAAO,QAAQ,OAAO,KAAK,UAAU,KAAKA,QAAQ,CAAC;CACvD;CACA,IAAI,MAAM;EACN,OAAO,KAAKA,SAAS;CACzB;CACA,IAAI,IAAI,OAAO;EACX,KAAKA,SAAS,MAAM;CACxB;CACA,IAAI,MAAM;EACN,OAAO,KAAKA,SAAS;CACzB;CACA,IAAI,IAAI,OAAO;EACX,KAAKA,SAAS,MAAM;CACxB;CACA,IAAI,MAAM;EACN,OAAO,KAAKA,SAAS;CACzB;CACA,IAAI,IAAI,OAAO;EACX,KAAKA,SAAS,MAAM;CACxB;CACA,IAAI,IAAI,OAAO;EACX,KAAKA,SAAS,MAAM;CACxB;CACA,IAAI,IAAI,OAAO;EACX,KAAKA,SAAS,MAAM,YAAY,OAAO,cAAc;CACzD;CACA,IAAI,IAAI,OAAO;EACX,KAAKA,SAAS,MAAM,YAAY,OAAO,mBAAmB;CAC9D;CACA,IAAI,IAAI,OAAO;EACX,IAAI,UAAU,KAAA,GACV,KAAKA,SAAS,MAAM,sBAAM,IAAI,KAAK,CAAC;OAEnC,IAAI,OAAO,UAAU,UACtB,KAAKA,SAAS,MAAM,cAAc,eAAe,sBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;OAGhF,KAAKA,SAAS,MAAM,YAAY,OAAO,aAAa;CAE5D;AACJ;;;ACjMA,eAAsB,UAAU,KAAK,KAAK,SAAS;CAC/C,MAAM,WAAW,MAAM,cAAc,KAAK,cAAc,OAAO,GAAG,GAAG;CACrE,IAAI,CAAC,SAAS,IACV,MAAM,IAAI,WAAW,qCAAqC;CAG9D,MAAM,SAAS;EAAE,SADD,kBAAkB,SAAS,IAAI,SAAS,IAAI,OACrC;EAAG,iBAAiB,SAAS;CAAG;CACvD,IAAI,OAAO,QAAQ,YACf,OAAO;EAAE,GAAG;EAAQ,KAAK,SAAS;CAAG;CAEzC,OAAO;AACX;;;ACXA,eAAsB,WAAW,KAAK,KAAK,SAAS;CAChD,MAAM,YAAY,MAAM,eAAe,KAAK,eAAe,OAAO,GAAG,GAAG;CACxE,MAAM,kBAAkB,UAAU;CAClC,MAAM,UAAU,kBAAkB,iBAAiB,UAAU,IAAI,OAAO;CACxE,IAAI,gBAAgB,QAAQ,KAAA,KAAa,gBAAgB,QAAQ,QAAQ,KACrE,MAAM,IAAI,yBAAyB,sDAAoD,SAAS,OAAO,UAAU;CAErH,IAAI,gBAAgB,QAAQ,KAAA,KAAa,gBAAgB,QAAQ,QAAQ,KACrE,MAAM,IAAI,yBAAyB,sDAAoD,SAAS,OAAO,UAAU;CAErH,IAAI,gBAAgB,QAAQ,KAAA,KACxB,KAAK,UAAU,gBAAgB,GAAG,MAAM,KAAK,UAAU,QAAQ,GAAG,GAClE,MAAM,IAAI,yBAAyB,sDAAoD,SAAS,OAAO,UAAU;CAErH,MAAM,SAAS;EAAE;EAAS;CAAgB;CAC1C,IAAI,OAAO,QAAQ,YACf,OAAO;EAAE,GAAG;EAAQ,KAAK,UAAU;CAAG;CAE1C,OAAO;AACX;;;ACrBA,IAAa,iBAAb,MAA4B;CACxB;CACA,YAAY,WAAW;EACnB,KAAKC,aAAa,IAAI,iBAAiB,SAAS;CACpD;CACA,wBAAwB,KAAK;EACzB,KAAKA,WAAW,wBAAwB,GAAG;EAC3C,OAAO;CACX;CACA,wBAAwB,IAAI;EACxB,KAAKA,WAAW,wBAAwB,EAAE;EAC1C,OAAO;CACX;CACA,mBAAmB,iBAAiB;EAChC,KAAKA,WAAW,mBAAmB,eAAe;EAClD,OAAO;CACX;CACA,2BAA2B,YAAY;EACnC,KAAKA,WAAW,2BAA2B,UAAU;EACrD,OAAO;CACX;CACA,MAAM,QAAQ,KAAK,SAAS;EACxB,MAAM,MAAM,MAAM,KAAKA,WAAW,QAAQ,KAAK,OAAO;EACtD,OAAO;GAAC,IAAI;GAAW,IAAI;GAAe,IAAI;GAAI,IAAI;GAAY,IAAI;EAAG,CAAC,CAAC,KAAK,GAAG;CACvF;AACJ;;;AClBA,SAAgB,iBAAiB,iBAAiB;CAC9C,OAAQ,iBAAiB,QAAQ,SAC7B,MAAM,QAAQ,gBAAgB,IAAI,KAClC,gBAAgB,KAAK,SAAS,KAAK;AAC3C;AACA,eAAsB,gBAAgB,OAAO,KAAK;CAC9C,MAAM,EAAE,iBAAiB,sBAAsB;CAC/C,IAAI,CAAC,mBAAmB,CAAC,mBACrB,MAAM,IAAI,WAAW,iFAAiF;CAE1G,IAAI,CAAC,WAAW,iBAAiB,iBAAiB,GAC9C,MAAM,IAAI,WAAW,2EAA2E;CAEpG,MAAM,aAAa;EAAE,GAAG;EAAiB,GAAG;CAAkB;CAC9D,uBAAuB,YAAY,eAAe;CAClD,MAAM,aAAa,aAAa,YAAY,gBAAgB,MAAM,MAAM,iBAAiB,UAAU;CACnG,IAAI,MAAM;CACV,IAAI,WAAW,SAAS,KAAK,GAAG;EAC5B,MAAM,gBAAgB;EACtB,IAAI,OAAO,QAAQ,WACf,MAAM,IAAI,WAAW,2EAAyE;CAEtG;CACA,MAAM,EAAE,QAAQ;CAChB,IAAI,OAAO,QAAQ,YAAY,CAAC,KAC5B,MAAM,IAAI,WAAW,6DAA2D;CAEpF,MAAM,QAAQ,aAAa,GAAG;CAC9B,IAAI;CACJ,IAAI;CACJ,IAAI,KAAK;EACL,MAAM,UAAW,MAAM,YAAY,CAAC;EACpC,QAAQ,OAAOC,OAAK,MAAM,OAAO;EACjC,QAAQ,OAAOC,SAAO,QAAQ,EAAE;EAChC,WAAW,QAAQ;EACnB,WAAW,QAAQ;CACvB,OACK;EACD,WAAW,MAAM;EACjB,WAAW;CACf;CACA,IAAI;CACJ,IAAI;CACJ,IAAI,iBAAiB;EACjB,wBAAwBD,OAAK,KAAK,UAAU,eAAe,CAAC;EAC5D,uBAAuBC,SAAO,qBAAqB;CACvD,OACK;EACD,wBAAwB;EACxB,uCAAuB,IAAI,WAAW;CAC1C;CACA,MAAM,OAAO,OAAO,sBAAsBA,SAAO,GAAG,GAAG,QAAQ;CAG/D,MAAM,MAAM;EACR,WAAWD,OAAK,MAFI,KAAK,OAAO,MADpB,WAAW,OAAO,KAAK,MAAM,GACN,IAAI,CAEd;EACzB,SAAS;CACb;CACA,IAAI,iBACA,IAAI,YAAY;CAEpB,IAAI,mBACA,IAAI,SAAS;CAEjB,OAAO;AACX;;;ACvEA,IAAa,gBAAb,MAA2B;CACvB;CACA;CACA;CACA,YAAY,SAAS;EACjB,IAAI,EAAE,mBAAmB,aACrB,MAAM,IAAI,UAAU,2CAA2C;EAEnE,KAAKE,WAAW;CACpB;CACA,mBAAmB,iBAAiB;EAChC,aAAa,KAAKC,kBAAkB,oBAAoB;EACxD,KAAKA,mBAAmB;EACxB,OAAO;CACX;CACA,qBAAqB,mBAAmB;EACpC,aAAa,KAAKC,oBAAoB,sBAAsB;EAC5D,KAAKA,qBAAqB;EAC1B,OAAO;CACX;CACA,MAAM,KAAK,KAAK,SAAS;EACrB,OAAO,gBAAgB;GACnB,SAAS,KAAKF;GACd,iBAAiB,KAAKC;GACtB,mBAAmB,KAAKC;GACxB,MAAM,SAAS;EACnB,GAAG,GAAG;CACV;AACJ;;;AC5BA,IAAa,cAAb,MAAyB;CACrB;CACA;CACA,YAAY,SAAS;EACjB,KAAKC,aAAa,IAAI,cAAc,OAAO;CAC/C;CACA,mBAAmB,iBAAiB;EAChC,KAAKA,WAAW,mBAAmB,eAAe;EAClD,KAAKC,mBAAmB;EACxB,OAAO;CACX;CACA,MAAM,KAAK,KAAK,SAAS;EACrB,IAAI,iBAAiB,KAAKA,gBAAgB,GACtC,MAAM,IAAI,UAAU,2DAA2D;EAEnF,MAAM,MAAM,MAAM,KAAKD,WAAW,KAAK,KAAK,OAAO;EACnD,OAAO,GAAG,IAAI,UAAU,GAAG,IAAI,QAAQ,GAAG,IAAI;CAClD;AACJ;;;ACjBA,IAAM,sBAAN,MAA0B;CACtB;CACA;CACA,YAAY,KAAK,KAAK,SAAS;EAC3B,KAAKE,UAAU;EACf,KAAK,QAAQ;GAAC,KAAA;GAAW,KAAA;GAAW;GAAK,SAAS;EAAI;CAC1D;CACA,mBAAmB,iBAAiB;EAChC,aAAa,KAAK,MAAM,IAAI,oBAAoB;EAChD,KAAK,MAAM,KAAK;EAChB,OAAO;CACX;CACA,qBAAqB,mBAAmB;EACpC,aAAa,KAAK,MAAM,IAAI,sBAAsB;EAClD,KAAK,MAAM,KAAK;EAChB,OAAO;CACX;CACA,aAAa,GAAG,MAAM;EAClB,OAAO,KAAKA,QAAQ,aAAa,GAAG,IAAI;CAC5C;CACA,KAAK,GAAG,MAAM;EACV,OAAO,KAAKA,QAAQ,KAAK,GAAG,IAAI;CACpC;CACA,OAAO;EACH,OAAO,KAAKA;CAChB;AACJ;AACA,IAAa,cAAb,MAAyB;CACrB;CACA,cAAc,CAAC;CACf,YAAY,SAAS;EACjB,KAAKC,WAAW;CACpB;CACA,aAAa,KAAK,SAAS;EACvB,MAAM,YAAY,IAAI,oBAAoB,MAAM,KAAK,OAAO;EAC5D,KAAKC,YAAY,KAAK,SAAS;EAC/B,OAAO;CACX;CACA,MAAM,OAAO;EACT,IAAI,CAAC,KAAKA,YAAY,QAClB,MAAM,IAAI,WAAW,sCAAsC;EAE/D,IAAI,EAAE,KAAKD,oBAAoB,aAC3B,MAAM,IAAI,UAAU,2CAA2C;EAEnE,MAAM,MAAM;GACR,YAAY,CAAC;GACb,SAAS;EACb;EACA,MAAM,UAAU,CAAC;EACjB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAKC,YAAY,QAAQ,KAAK;GAE9C,MAAM,CAAC,iBAAiB,mBAAmB,KAAK,QAD9B,KAAKA,YAAY,EAC8B,CAAC;GAClE,MAAM,EAAE,SAAS,GAAG,SAAS,MAAM,gBAAgB;IAC/C,SAAS,KAAKD;IACd;IACA;IACA;IACA;GACJ,GAAG,GAAG;GACN,IAAI,MAAM,GACN,IAAI,UAAU;QAEb,IAAI,IAAI,YAAY,SACrB,MAAM,IAAI,WAAW,qDAAqD;GAE9E,IAAI,WAAW,KAAK,IAAI;EAC5B;EACA,OAAO;CACX;AACJ;;;ACrEA,IAAa,UAAb,MAAqB;CACjB;CACA;CACA,YAAY,UAAU,CAAC,GAAG;EACtB,KAAKE,OAAO,IAAI,iBAAiB,OAAO;CAC5C;CACA,UAAU,QAAQ;EACd,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,WAAW,SAAS;EAChB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,YAAY,UAAU;EAClB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,OAAO,OAAO;EACV,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,aAAa,OAAO;EAChB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,kBAAkB,OAAO;EACrB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,YAAY,OAAO;EACf,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,mBAAmB,iBAAiB;EAChC,KAAKC,mBAAmB;EACxB,OAAO;CACX;CACA,MAAM,KAAK,KAAK,SAAS;EACrB,MAAM,MAAM,IAAI,YAAY,KAAKD,KAAK,KAAK,CAAC;EAC5C,IAAI,mBAAmB,KAAKC,gBAAgB;EAC5C,IAAI,iBAAiB,KAAKA,gBAAgB,GACtC,MAAM,IAAI,WAAW,qCAAqC;EAE9D,OAAO,IAAI,KAAK,KAAK,OAAO;CAChC;AACJ;;;AC/CA,IAAa,aAAb,MAAwB;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,YAAY,UAAU,CAAC,GAAG;EACtB,KAAKC,OAAO,IAAI,iBAAiB,OAAO;CAC5C;CACA,UAAU,QAAQ;EACd,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,WAAW,SAAS;EAChB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,YAAY,UAAU;EAClB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,OAAO,OAAO;EACV,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,aAAa,OAAO;EAChB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,kBAAkB,OAAO;EACrB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,YAAY,OAAO;EACf,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,mBAAmB,iBAAiB;EAChC,aAAa,KAAKC,kBAAkB,oBAAoB;EACxD,KAAKA,mBAAmB;EACxB,OAAO;CACX;CACA,2BAA2B,YAAY;EACnC,aAAa,KAAKC,0BAA0B,4BAA4B;EACxE,KAAKA,2BAA2B;EAChC,OAAO;CACX;CACA,wBAAwB,KAAK;EACzB,aAAa,KAAKC,MAAM,yBAAyB;EACjD,KAAKA,OAAO;EACZ,OAAO;CACX;CACA,wBAAwB,IAAI;EACxB,aAAa,KAAKC,KAAK,yBAAyB;EAChD,KAAKA,MAAM;EACX,OAAO;CACX;CACA,0BAA0B;EACtB,KAAKC,2BAA2B;EAChC,OAAO;CACX;CACA,2BAA2B;EACvB,KAAKC,4BAA4B;EACjC,OAAO;CACX;CACA,4BAA4B;EACxB,KAAKC,6BAA6B;EAClC,OAAO;CACX;CACA,MAAM,QAAQ,KAAK,SAAS;EACxB,MAAM,MAAM,IAAI,eAAe,KAAKP,KAAK,KAAK,CAAC;EAC/C,IAAI,KAAKC,qBACJ,KAAKI,4BACF,KAAKC,6BACL,KAAKC,6BACT,KAAKN,mBAAmB;GACpB,GAAG,KAAKA;GACR,KAAK,KAAKI,2BAA2B,KAAKL,KAAK,MAAM,KAAA;GACrD,KAAK,KAAKM,4BAA4B,KAAKN,KAAK,MAAM,KAAA;GACtD,KAAK,KAAKO,6BAA6B,KAAKP,KAAK,MAAM,KAAA;EAC3D;EAEJ,IAAI,mBAAmB,KAAKC,gBAAgB;EAC5C,IAAI,KAAKG,KACL,IAAI,wBAAwB,KAAKA,GAAG;EAExC,IAAI,KAAKD,MACL,IAAI,wBAAwB,KAAKA,IAAI;EAEzC,IAAI,KAAKD,0BACL,IAAI,2BAA2B,KAAKA,wBAAwB;EAEhE,OAAO,IAAI,QAAQ,KAAK,OAAO;CACnC;AACJ;;;ACjGA,MAAa,cAAc;AAC3B,SAAgB,eAAe,SAAS,qCAAmC;CACvE,MAAM,IAAI,iBAAiB,0BAA0B,OAAO,OAAO;AACvE;AACA,SAAgB,aAAa,KAAK,QAAQ;CACtC,QAAQ,OAAO,QAAQ,WAAY,IAAI,QAAQ,IAAI,OAAQ,KAAA,MAAc,eAAe,MAAM;AAClG;;;ACJA,MAAM,aAAa,KAAK,eAAe;CAEnC,OAAO,cAAc,WAAW,UADd,IAAI,MAAM,UAAU,KAAK,CAAC,EAAA,CAAG,KAAK,IACJ,EAAE,aAAa,WAAW;AAC9E;AACA,MAAM,gBAAgB,OAAO,SAAS,WAAW,QAAQ;CACrD,IAAI,YAAY,GAAG,GAAG;EAClB,IAAI,IAAI,SAAS,SACb,MAAM,IAAI,UAAU,gBAAgB,QAAQ,KAAK;EAErD,OAAO,IAAI,OAAO;GAAE,QAAQ;GAAO,MAAM;EAAU,CAAC;CACxD;CACA,IAAI,CAAC,YAAY,GAAG,GAChB,MAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,WAAW,CAAC;CAEtE,IAAI,CAAC,IAAI,aACL,MAAM,IAAI,UAAU,8BAA8B;CAEtD,IAAI,IAAI,SAAS,SACb,MAAM,IAAI,UAAU,gBAAgB,QAAQ,KAAK;CAErD,OAAO,UAAU,aAAa,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,WAAW,GAAG,CAAC,CAAC,GAAG,GAAG,QAAQ,YAAY,EAAE,KAAK;AAChI;AACA,MAAa,UAAU,QAAQ,cAAc,UAAU,QAAQ,GAAG;AAClE,MAAa,WAAW,QAAQ,cAAc,WAAW,SAAS,GAAG;AACrE,MAAM,cAAc,GAAG,MAAM;CACzB,IAAI,EAAE,eAAe,EAAE,QACnB,OAAO;CACX,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,YAAY,KAC9B,IAAI,EAAE,OAAO,EAAE,IACX,OAAO;CAEf,OAAO;AACX;AACA,MAAM,mBAAmB,UAAU;CAAE;CAAM,KAAK;AAAE;AAClD,MAAM,YAAY,UAAU;CACxB,MAAM,OAAO,MAAM,KAAK,MAAM;CAC9B,IAAI,SAAS,KAAA,GACT,MAAM,IAAI,MAAM,+BAA+B;CAEnD,OAAO;AACX;AACA,MAAM,eAAe,UAAU;CAC3B,MAAM,QAAQ,SAAS,KAAK;CAC5B,IAAI,QAAQ,KAAM;EACd,MAAM,cAAc,QAAQ;EAC5B,IAAI,SAAS;EACb,KAAK,IAAI,IAAI,GAAG,IAAI,aAAa,KAC7B,SAAU,UAAU,IAAK,SAAS,KAAK;EAE3C,OAAO;CACX;CACA,OAAO;AACX;AACA,MAAM,eAAe,OAAO,QAAQ,MAAM;CACtC,OAAO,UAAU,GAAG;EAChB,MAAM;EACN,MAAM,SAAS,YAAY,KAAK;EAChC,MAAM,OAAO;CACjB;AACJ;AACA,MAAM,aAAa,OAAO,aAAa,iBAAiB;CACpD,IAAI,SAAS,KAAK,MAAM,aACpB,MAAM,IAAI,MAAM,YAAY;AAEpC;AACA,MAAM,eAAe,OAAO,WAAW;CACnC,IAAI,SAAS,KAAK,MAAM,MAAM,SAAS,MAAM,KAAK,QAC9C,MAAM,IAAI,MAAM,+BAA+B;CAEnD,MAAM,SAAS,MAAM,KAAK,SAAS,MAAM,KAAK,MAAM,MAAM,MAAM;CAChE,MAAM,OAAO;CACb,OAAO;AACX;AACA,MAAM,qBAAqB,UAAU;CACjC,UAAU,OAAO,GAAM,wBAAwB;CAC/C,MAAM,SAAS,YAAY,KAAK;CAChC,OAAO,YAAY,OAAO,MAAM;AACpC;AACA,SAAS,eAAe,OAAO,WAAW;CACtC,UAAU,OAAO,IAAM,WAAW,cAAc,SAAS,SAAS,SAAS,WAAW;CACtF,YAAY,KAAK;CACjB,IAAI,cAAc,SAAS;EACvB,UAAU,OAAO,GAAM,wBAAwB;EAC/C,MAAM,SAAS,YAAY,KAAK;EAChC,MAAM,OAAO;CACjB;CACA,UAAU,OAAO,IAAM,+BAA+B;CACtD,YAAY,KAAK;AACrB;AACA,MAAM,8BAA8B,UAAU;CAC1C,MAAM,SAAS,kBAAkB,KAAK;CACtC,IAAI,WAAW,QAAQ;EAAC;EAAM;EAAM;CAAI,CAAC,GACrC,OAAO;CAEX,IAAI,CAAC,WAAW,QAAQ;EAAC;EAAM;EAAM;EAAM;EAAM;EAAM;EAAM;CAAI,CAAC,GAC9D,MAAM,IAAI,MAAM,2BAA2B;CAE/C,UAAU,OAAO,GAAM,oBAAoB;CAC3C,MAAM,cAAc,YAAY,KAAK;CACrC,MAAM,WAAW,YAAY,OAAO,WAAW;CAC/C,IAAI,WAAW,UAAU;EAAC;EAAM;EAAM;EAAM;EAAM;EAAM;EAAM;EAAM;CAAI,CAAC,GACrE,OAAO;CACX,IAAI,WAAW,UAAU;EAAC;EAAM;EAAM;EAAM;EAAM;CAAI,CAAC,GACnD,OAAO;CACX,IAAI,WAAW,UAAU;EAAC;EAAM;EAAM;EAAM;EAAM;CAAI,CAAC,GACnD,OAAO;CACX,MAAM,IAAI,MAAM,yBAAyB;AAC7C;AACA,MAAM,gBAAgB,OAAO,WAAW,SAAS,KAAK,YAAY;CAC9D,MAAM,QAAQ,aAAa,KAAK,WAAW;CAC3C,IAAI,MAAM,QACN,eAAe,WAAW;CAE9B,MAAM,WAAW,cAAc;CAC/B,IAAI;CACJ,IAAI,MAAM,SACN,IAAI;EACA,MAAM,QAAQ,gBAAgB,OAAO;EACrC,eAAe,OAAO,SAAS;EAC/B,YAAY,MAAM,QAAQ,EAAE,KAAK,2BAA2B,KAAK,EAAE,CAAC;CACxE,QACM;EACF,MAAM,IAAI,iBAAiB,mCAAmC;CAClE;MAGA,YAAY,MAAM;CAEtB,OAAO,OAAO,OAAO,UAAU,WAAW,SAAS,WAAW,SAAS,eAAe,UAAU,MAAM,OAAO,WAAW,IAAI,EAAE;AAClI;AACA,MAAM,kBAAkB,KAAK,YAAY;CACrC,OAAO,aAAa,IAAI,QAAQ,SAAS,EAAE,CAAC;AAChD;AACA,MAAa,aAAa,KAAK,KAAK,YAAY;CAC5C,MAAM,UAAU,eAAe,KAAK,6CAA6C;CACjF,OAAO,cAAc,SAAS,SAAS,KAAK,OAAO;AACvD;AACA,MAAa,YAAY,KAAK,KAAK,YAAY;CAC3C,MAAM,UAAU,eAAe,KAAK,4CAA4C;CAChF,OAAO,cAAc,QAAQ,SAAS,KAAK,OAAO;AACtD;AACA,SAAS,aAAa,KAAK;CACvB,MAAM,QAAQ,gBAAgB,GAAG;CACjC,UAAU,OAAO,IAAM,+BAA+B;CACtD,YAAY,KAAK;CACjB,UAAU,OAAO,IAAM,kCAAkC;CACzD,YAAY,KAAK;CACjB,IAAI,IAAI,MAAM,SAAS,KACnB,YAAY,OAAO,CAAC;MAGpB,YAAY,OAAO,CAAC;CAExB,MAAM,YAAY,MAAM;CACxB,UAAU,OAAO,IAAM,wBAAwB;CAC/C,MAAM,iBAAiB,YAAY,KAAK;CACxC,OAAO,IAAI,SAAS,WAAW,YAAY,kBAAkB,MAAM,MAAM,UAAU;AACvF;AACA,MAAa,YAAY,KAAK,KAAK,YAAY;CAC3C,IAAI;CACJ,IAAI;EAEA,OAAO,aADa,eAAe,KAAK,6CACV,CAAC;CACnC,SACO,OAAO;EACV,MAAM,IAAI,UAAU,yCAAyC,EAAE,MAAM,CAAC;CAC1E;CACA,OAAO,cAAc,QAAQ,MAAM,KAAK,OAAO;AACnD;;;ACzKA,SAAS,wBAAwB,KAAK;CAClC,OAAO,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAAC;AAC5F;AACA,eAAe,SAAS,KAAK;CACzB,IAAI,YAAY,GAAG,GAAG;EAClB,IAAI,IAAI,SAAS,UACb,MAAM,IAAI,OAAO;OAGjB,OAAO,IAAI,OAAO,EAAE,QAAQ,MAAM,CAAC;CAE3C;CACA,IAAI,eAAe,YACf,OAAO;EACH,KAAK;EACL,GAAGM,OAAK,GAAG;CACf;CAEJ,IAAI,CAAC,YAAY,GAAG,GAChB,MAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,aAAa,YAAY,CAAC;CAEpF,IAAI,CAAC,IAAI,aACL,MAAM,IAAI,UAAU,uDAAuD;CAE/E,MAAM,EAAE,KAAK,SAAS,KAAK,KAAK,GAAG,QAAQ,wBAAwB,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG,CAAC;CAC5G,IAAI,IAAI,QAAQ,OAEZ,IAAI,MAAM;CAEd,OAAO;AACX;AACA,SAAgB,WAAW,KAAK;CAC5B,OAAOC,OAAa,GAAG;AAC3B;AACA,SAAgB,YAAY,KAAK;CAC7B,OAAOC,QAAc,GAAG;AAC5B;AACA,SAAgB,UAAU,KAAK;CAC3B,OAAO,SAAS,GAAG;AACvB;;;ACnCA,MAAM,SAAS,OAAO,gBAAgB;CAClC,IAAI,OAAO,UAAU,YAAY,CAAC,OAC9B,MAAM,IAAI,WAAW,GAAG,YAAY,oBAAoB;AAEhE;AACA,eAAsB,uBAAuB,KAAK,iBAAiB;CAC/D,IAAI;CACJ,IAAI,MAAM,GAAG,GACT,MAAM;MAEL,IAAI,UAAU,GAAG,GAClB,MAAM,MAAM,UAAU,GAAG;MAGzB,MAAM,IAAI,UAAU,gBAAgB,KAAK,aAAa,aAAa,cAAc,CAAC;CAEtF,oBAAoB;CACpB,IAAI,oBAAoB,YACpB,oBAAoB,YACpB,oBAAoB,UACpB,MAAM,IAAI,UAAU,mEAA6D;CAErF,IAAI;CACJ,QAAQ,IAAI,KAAZ;EACI,KAAK;GACD,MAAM,IAAI,KAAK,+BAA6B;GAC5C,MAAM,IAAI,KAAK,gCAA8B;GAC7C,aAAa;IAAE,KAAK,IAAI;IAAK,KAAK,IAAI;IAAK,KAAK,IAAI;GAAI;GACxD;EACJ,KAAK;GACD,MAAM,IAAI,KAAK,2BAAyB;GACxC,MAAM,IAAI,GAAG,gCAA8B;GAC3C,MAAM,IAAI,GAAG,gCAA8B;GAC3C,aAAa;IAAE,KAAK,IAAI;IAAK,KAAK,IAAI;IAAK,GAAG,IAAI;IAAG,GAAG,IAAI;GAAE;GAC9D;EACJ,KAAK;GACD,MAAM,IAAI,KAAK,yCAAuC;GACtD,MAAM,IAAI,GAAG,8BAA4B;GACzC,aAAa;IAAE,KAAK,IAAI;IAAK,KAAK,IAAI;IAAK,GAAG,IAAI;GAAE;GACpD;EACJ,KAAK;GACD,MAAM,IAAI,GAAG,4BAA0B;GACvC,MAAM,IAAI,GAAG,2BAAyB;GACtC,aAAa;IAAE,GAAG,IAAI;IAAG,KAAK,IAAI;IAAK,GAAG,IAAI;GAAE;GAChD;EACJ,KAAK;GACD,MAAM,IAAI,GAAG,6BAA2B;GACxC,aAAa;IAAE,GAAG,IAAI;IAAG,KAAK,IAAI;GAAI;GACtC;EACJ,SACI,MAAM,IAAI,iBAAiB,qDAAmD;CACtF;CACA,MAAM,OAAOC,SAAO,KAAK,UAAU,UAAU,CAAC;CAC9C,OAAOC,OAAK,MAAM,OAAO,iBAAiB,IAAI,CAAC;AACnD;AACA,eAAsB,0BAA0B,KAAK,iBAAiB;CAClE,oBAAoB;CACpB,MAAM,aAAa,MAAM,uBAAuB,KAAK,eAAe;CACpE,OAAO,4CAA4C,gBAAgB,MAAM,EAAE,EAAE,GAAG;AACpF;;;AC/DA,eAAsB,YAAY,iBAAiB,OAAO;CACtD,MAAM,aAAa;EACf,GAAG;EACH,GAAG,OAAO;CACd;CACA,IAAI,CAAC,SAAS,WAAW,GAAG,GACxB,MAAM,IAAI,WAAW,+DAA6D;CAGtF,MAAM,MAAM,MAAM,SADJ,aAAa,WAAW,GACX,GAAO;EAAE,GAAG,WAAW;EAAK,KAAK;CAAK,CAAC;CAClE,IAAI,IAAI,SAAS,UACb,MAAM,IAAI,WAAW,8DAA4D;CAErF,OAAO;AACX;;;ACdA,SAAS,mBAAmB,KAAK;CAC7B,MAAM,QAAQ,OAAO,QAAQ,WAAW,IAAI,OAAO,KAAA;CACnD,IAAI,CAAC,SAAS,MAAM,QAChB,MAAM,IAAI,iBAAiB,kDAAgD;CAE/E,OAAO;AACX;AACA,SAAS,WAAW,MAAM;CACtB,IAAI,CAAC,QAAQ,OAAO,SAAS,UACzB,OAAO;CAEX,MAAM,EAAE,SAAS;CACjB,OAAO,MAAM,QAAQ,IAAI,KAAK,KAAK,MAAO,QAAS;AACvD;AACA,IAAM,kBAAN,MAAsB;CAClB;CACA,0BAAU,IAAI,QAAQ;CACtB,YAAY,MAAM;EACd,IAAI,CAAC,WAAW,IAAI,GAChB,MAAM,IAAI,YAAY,4BAA4B;EAEtD,KAAKC,QAAQ,gBAAgB,IAAI;CACrC;CACA,OAAO;EACH,OAAO,KAAKA;CAChB;CACA,MAAM,OAAO,iBAAiB,OAAO;EACjC,MAAM,EAAE,KAAK,QAAQ;GAAE,GAAG;GAAiB,GAAG,OAAO;EAAO;EAC5D,MAAM,QAAQ,mBAAmB,GAAG;EACpC,MAAM,aAAa,KAAKA,MAAM,KAAK,QAAQ,QAAQ,MAAM,IAAI,SAAS,IAAI,GAAG,MACxE,OAAO,QAAQ,YAAY,QAAQ,IAAI,SACvC,EAAE,OAAO,IAAI,QAAQ,YAAY,IAAI,QAAQ,UAAU,QAAQ,IAAI,SACnE,OAAO,IAAI,QAAQ,YAAY,IAAI,QAAQ,WAC3C,CAAC,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,SAAS,QAAQ,OAC5D,CAAC,MAAM,OAAO,IAAI,QAAQ,MAAM,IAAI;EACzC,MAAM,EAAE,GAAG,KAAK,WAAW;EAC3B,IAAI,WAAW,GACX,MAAM,IAAI,kBAAkB;EAEhC,IAAI,WAAW,GAAG;GACd,MAAM,QAAQ,IAAI,yBAAyB;GAC3C,MAAM,UAAU,KAAKC;GACrB,MAAM,OAAO,iBAAiB,mBAAmB;IAC7C,KAAK,MAAM,OAAO,YACd,IAAI;KACA,MAAM,MAAM,mBAAmB,SAAS,KAAK,KAAK;IACtD,QACM,CAAE;GAEhB;GACA,MAAM;EACV;EACA,OAAO,mBAAmB,KAAKA,SAAS,KAAK,KAAK;CACtD;AACJ;AACA,eAAe,mBAAmB,OAAO,KAAK,OAAO;CACjD,MAAM,SAAS,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG;CAC5E,IAAI,OAAO,MAAM,SAAS,KAAA,GAAW;EACjC,MAAM,MAAM,MAAM,SAAS,OAAO;GAAE,GAAG;GAAK,KAAK,MAAM;GAAK,KAAK;EAAK,CAAC;EACvE,IAAI,IAAI,SAAS,UACb,MAAM,IAAI,YAAY,8CAA8C;EAExE,OAAO,MAAM,OAAO;CACxB;CACA,OAAO,OAAO,MAAM;AACxB;AACA,SAAgB,kBAAkB,MAAM;CACpC,MAAM,MAAM,IAAI,gBAAgB,IAAI;CACpC,MAAM,cAAc,OAAO,iBAAiB,UAAU,IAAI,OAAO,iBAAiB,KAAK;CACvF,OAAO,eAAe,aAAa,QAAQ,EACvC,aAAa,gBAAgB,IAAI,KAAK,CAAC,EAC3C,CAAC;CACD,OAAO;AACX;;;AC1EA,SAAS,sBAAsB;CAC3B,OAAQ,OAAO,kBAAkB,eAC5B,OAAO,cAAc,eAAe,UAAU,cAAc,wBAC5D,OAAO,gBAAgB,eAAe,gBAAgB;AAC/D;AACA,IAAI;AACJ,IAAI,OAAO,cAAc,eAAe,CAAC,UAAU,WAAW,aAAa,cAAc,GAGrF,aAAa;AAEjB,MAAa,cAAc,OAAO;AAClC,eAAe,UAAU,KAAK,SAAS,QAAQ,YAAY,OAAO;CAC9D,MAAM,WAAW,MAAM,UAAU,KAAK;EAClC,QAAQ;EACR;EACA,UAAU;EACV;CACJ,CAAC,CAAC,CAAC,OAAO,QAAQ;EACd,IAAI,IAAI,SAAS,gBACb,MAAM,IAAI,YAAY;EAE1B,MAAM;CACV,CAAC;CACD,IAAI,SAAS,WAAW,KACpB,MAAM,IAAI,UAAU,yDAAyD;CAEjF,IAAI;EACA,OAAO,MAAM,SAAS,KAAK;CAC/B,QACM;EACF,MAAM,IAAI,UAAU,4DAA4D;CACpF;AACJ;AACA,MAAa,YAAY,OAAO;AAChC,SAAS,iBAAiB,OAAO,aAAa;CAC1C,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,OAAO;CAEX,IAAI,EAAE,SAAS,UAAU,OAAO,MAAM,QAAQ,YAAY,KAAK,IAAI,IAAI,MAAM,OAAO,aAChF,OAAO;CAEX,IAAI,EAAE,UAAU,UACZ,CAAC,SAAS,MAAM,IAAI,KACpB,CAAC,MAAM,QAAQ,MAAM,KAAK,IAAI,KAC9B,CAAC,MAAM,UAAU,MAAM,KAAK,MAAM,KAAK,MAAM,QAAQ,GACrD,OAAO;CAEX,OAAO;AACX;AACA,IAAM,mBAAN,MAAuB;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,YAAY,KAAK,SAAS;EACtB,IAAI,EAAE,eAAe,MACjB,MAAM,IAAI,UAAU,gCAAgC;EAExD,KAAKC,OAAO,IAAI,IAAI,IAAI,IAAI;EAC5B,MAAM,OAAO,WAAW,CAAC;EACzB,KAAKC,mBAAmB,OAAO,KAAK,oBAAoB,WAAW,KAAK,kBAAkB;EAC1F,KAAKC,oBACD,OAAO,KAAK,qBAAqB,WAAW,KAAK,mBAAmB;EACxE,KAAKC,eAAe,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;EAC9E,KAAKC,WAAW,IAAI,QAAQ,KAAK,OAAO;EACxC,IAAI,cAAc,CAAC,KAAKA,SAAS,IAAI,YAAY,GAC7C,KAAKA,SAAS,IAAI,cAAc,UAAU;EAE9C,IAAI,CAAC,KAAKA,SAAS,IAAI,QAAQ,GAAG;GAC9B,KAAKA,SAAS,IAAI,UAAU,kBAAkB;GAC9C,KAAKA,SAAS,OAAO,UAAU,0BAA0B;EAC7D;EACA,KAAKC,eAAe,KAAK;EACzB,MAAM,QAAQ,KAAK;EACnB,IAAI,UAAU,KAAA,GAAW;GACrB,KAAKC,SAAS;GACd,IAAI,iBAAiB,OAAO,KAAKH,YAAY,GAAG;IAC5C,KAAKI,iBAAiB,KAAKD,OAAO;IAClC,KAAKE,SAAS,kBAAkB,KAAKF,OAAO,IAAI;GACpD;EACJ;CACJ;CACA,eAAe;EACX,OAAO,CAAC,CAAC,KAAKG;CAClB;CACA,UAAU,UAAU;EAChB,OAAO,OAAO,KAAKF,mBAAmB,YAAY,KAAK,IAAI,IAAI,KAAKA,iBAAiB;CACzF;CACA,cAAc;EACV,OAAO,KAAKG,UAAU,KAAKR,iBAAiB;CAChD;CACA,QAAQ;EACJ,OAAO,KAAKQ,UAAU,KAAKP,YAAY;CAC3C;CACA,OAAO;EACH,OAAO,KAAKK,QAAQ,KAAK;CAC7B;CACA,MAAM,OAAO,iBAAiB,OAAO;EACjC,IAAI,CAAC,KAAKA,UAAU,CAAC,KAAK,MAAM,GAC5B,MAAM,KAAK,OAAO;EAEtB,IAAI;GACA,OAAO,MAAM,KAAKA,OAAO,iBAAiB,KAAK;EACnD,SACO,KAAK;GACR,IAAI,eAAe,mBACX;QAAA,KAAK,YAAY,MAAM,OAAO;KAC9B,MAAM,KAAK,OAAO;KAClB,OAAO,KAAKA,OAAO,iBAAiB,KAAK;IAC7C;;GAEJ,MAAM;EACV;CACJ;CACA,MAAM,SAAS;EACX,IAAI,KAAKC,iBAAiB,oBAAoB,GAC1C,KAAKA,gBAAgB,KAAA;EAEzB,KAAKA,kBAAkB,UAAU,KAAKT,KAAK,MAAM,KAAKI,UAAU,YAAY,QAAQ,KAAKH,gBAAgB,GAAG,KAAKI,YAAY,CAAC,CACzH,MAAM,SAAS;GAChB,KAAKG,SAAS,kBAAkB,IAAI;GACpC,IAAI,KAAKF,QAAQ;IACb,KAAKA,OAAO,MAAM,KAAK,IAAI;IAC3B,KAAKA,OAAO,OAAO;GACvB;GACA,KAAKC,iBAAiB,KAAK,IAAI;EACnC,CAAC,CAAC,CACG,cAAc;GACf,KAAKE,gBAAgB,KAAA;EACzB,CAAC;EACD,MAAM,KAAKA;CACf;AACJ;AACA,SAAgB,mBAAmB,KAAK,SAAS;CAC7C,MAAM,MAAM,IAAI,iBAAiB,KAAK,OAAO;CAC7C,MAAM,eAAe,OAAO,iBAAiB,UAAU,IAAI,OAAO,iBAAiB,KAAK;CACxF,OAAO,iBAAiB,cAAc;EAClC,aAAa;GACT,WAAW,IAAI,YAAY;GAC3B,YAAY;EAChB;EACA,OAAO;GACH,WAAW,IAAI,MAAM;GACrB,YAAY;EAChB;EACA,QAAQ;GACJ,aAAa,IAAI,OAAO;GACxB,YAAY;EAChB;EACA,WAAW;GACP,WAAW,IAAI,aAAa;GAC5B,YAAY;EAChB;EACA,MAAM;GACF,aAAa,IAAI,KAAK;GACtB,YAAY;EAChB;CACJ,CAAC;CACD,OAAO;AACX;;;ACpKA,IAAa,eAAb,MAA0B;CACtB;CACA,YAAY,UAAU,CAAC,GAAG;EACtB,KAAKE,OAAO,IAAI,iBAAiB,OAAO;CAC5C;CACA,SAAS;EAGL,OAAO,GAFQC,OAAY,KAAK,UAAU,EAAE,KAAK,OAAO,CAAC,CAE1C,EAAE,GADDA,OAAY,KAAKD,KAAK,KAAK,CACjB,EAAE;CAChC;CACA,UAAU,QAAQ;EACd,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,WAAW,SAAS;EAChB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,YAAY,UAAU;EAClB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,OAAO,OAAO;EACV,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,aAAa,OAAO;EAChB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,kBAAkB,OAAO;EACrB,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,YAAY,OAAO;EACf,KAAKA,KAAK,MAAM;EAChB,OAAO;CACX;CACA,OAAO,OAAO,KAAK,SAAS;EACxB,IAAI,OAAO,QAAQ,UACf,MAAM,IAAI,WAAW,gCAAgC;EAEzD,MAAM,EAAE,GAAG,eAAe,GAAG,gBAAgB,GAAG,WAAW,WAAW,IAAI,MAAM,GAAG;EACnF,IAAI,WAAW,KAAK,cAAc,IAC9B,MAAM,IAAI,WAAW,uBAAuB;EAEhD,IAAI;EACJ,IAAI;GACA,SAAS,KAAK,MAAM,cAAc,OAAOE,OAAY,aAAa,CAAC,CAAC;GACpE,IAAI,OAAO,QAAQ,QACf,MAAM,IAAI,MAAM;EACxB,QACM;GACF,MAAM,IAAI,WAAW,uBAAuB;EAChD;EAEA,OAAO;GAAE,SADO,kBAAkB,QAAQ,gBAAgB,gBAAgB,WAAW,UAAU,GAAG,OACnF;GAAG;EAAO;CAC7B;AACJ;;;ACzDA,eAAsB,WAAW,MAAM,KAAK,SAAS;CACjD,IAAI,OAAO,SAAS,YAAY,KAAK,QAAQ,4BAA4B,MAAM,GAC3E,MAAM,IAAI,UAAU,wCAAsC;CAE9D,OAAO,SAAS,MAAM,KAAK,OAAO;AACtC;AACA,eAAsB,WAAW,MAAM,KAAK,SAAS;CACjD,IAAI,OAAO,SAAS,YAAY,KAAK,QAAQ,6BAA6B,MAAM,GAC5E,MAAM,IAAI,UAAU,yCAAuC;CAE/D,OAAO,SAAS,MAAM,KAAK,OAAO;AACtC;AACA,eAAsB,YAAY,OAAO,KAAK,SAAS;CACnD,IAAI,OAAO,UAAU,YAAY,MAAM,QAAQ,6BAA6B,MAAM,GAC9E,MAAM,IAAI,UAAU,2CAAyC;CAEjE,OAAO,UAAU,OAAO,KAAK,OAAO;AACxC;AACA,eAAsB,UAAU,KAAK,KAAK,SAAS;CAC/C,IAAI,CAAC,SAAS,GAAG,GACb,MAAM,IAAI,UAAU,uBAAuB;CAE/C,QAAQ,IAAI;CACZ,MAAM,MAAM,SAAS,eAAe,IAAI;CACxC,IAAI,IAAI,QAAQ,SAAS,CAAC,KACtB,MAAM,IAAI,UAAU,8DAA0D;CAElF,QAAQ,IAAI,KAAZ;EACI,KAAK;GACD,IAAI,OAAO,IAAI,MAAM,YAAY,CAAC,IAAI,GAClC,MAAM,IAAI,UAAU,2CAAyC;GAEjE,OAAOC,OAAgB,IAAI,CAAC;EAChC,KAAK,OACD,OAAO,SAAS,aAAa,GAAG,GAAG;GAAE,GAAG;GAAK;GAAK;EAAI,CAAC;EAC3D,KAAK;GACD,IAAI,OAAO,IAAI,QAAQ,YAAY,CAAC,IAAI,KACpC,MAAM,IAAI,UAAU,6CAA2C;GAEnE,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,KACjC,MAAM,IAAI,UAAU,uCAAuC;GAE/D,OAAO,SAAS,aAAa,IAAI,GAAG,GAAG;IAAE,GAAG;IAAK;GAAI,CAAC;EAE1D,KAAK;EACL,KAAK,OACD,OAAO,SAAS,aAAa,GAAG,GAAG;GAAE,GAAG;GAAK;GAAK;EAAI,CAAC;EAC3D,SACI,MAAM,IAAI,iBAAiB,gDAA8C;CACjF;AACJ;;;ACvDA,SAAgB,sBAAsB,OAAO;CACzC,IAAI;CACJ,IAAI,OAAO,UAAU,UAAU;EAC3B,MAAM,QAAQ,MAAM,MAAM,GAAG;EAC7B,IAAI,MAAM,WAAW,KAAK,MAAM,WAAW,GAEvC,CAAC,iBAAiB;CAE1B,OACK,IAAI,OAAO,UAAU,YAAY,OAAO;EACzC,IAAI,eAAe,OACf,gBAAgB,MAAM;OAGtB,MAAM,IAAI,UAAU,2CAA2C;CAEvE;CACA,MAAM,UAAU;CAChB,IAAI,OAAO,kBAAkB,YAAY,CAAC,eACtC,MAAM,IAAI,UAAU,OAAO;CAE/B,OAAO,gBAAgB,eAAe,WAAW,OAAO;AAC5D;;;ACnBA,SAAgB,UAAU,KAAK;CAC3B,IAAI,OAAO,QAAQ,UACf,MAAM,IAAI,WAAW,+DAA+D;CACxF,MAAM,EAAE,GAAG,SAAS,WAAW,IAAI,MAAM,GAAG;CAC5C,IAAI,WAAW,GACX,MAAM,IAAI,WAAW,0DAA0D;CACnF,IAAI,WAAW,GACX,MAAM,IAAI,WAAW,aAAa;CACtC,IAAI,CAAC,SACD,MAAM,IAAI,WAAW,6BAA6B;CACtD,IAAI;CACJ,IAAI;EACA,UAAUC,OAAK,OAAO;CAC1B,QACM;EACF,MAAM,IAAI,WAAW,wCAAwC;CACjE;CACA,IAAI;CACJ,IAAI;EACA,SAAS,KAAK,MAAM,cAAc,OAAO,OAAO,CAAC;CACrD,QACM;EACF,MAAM,IAAI,WAAW,6CAA6C;CACtE;CACA,IAAI,CAAC,SAAS,MAAM,GAChB,MAAM,IAAI,WAAW,wBAAwB;CACjD,OAAO;AACX;;;AC7BA,SAAS,uBAAuB,SAAS;CACrC,MAAM,gBAAgB,SAAS,iBAAiB;CAChD,IAAI,OAAO,kBAAkB,YAAY,gBAAgB,MACrD,MAAM,IAAI,iBAAiB,6FAA6F;CAE5H,OAAO;AACX;AACA,eAAsB,gBAAgB,KAAK,SAAS;CAChD,MAAM,QAAQ,aAAa,KAAK,WAAW;CAC3C,IAAI,MAAM,QACN,eAAe,WAAW;CAE9B,IAAI;CACJ,IAAI,MAAM,SAAS;EACf,MAAM,MAAM,SAAS,OAAO;EAC5B,QAAQ,KAAR;GACI,KAAK;GACL,KAAK;GACL,KAAK;IACD,YAAY;KAAE,MAAM;KAAQ,YAAY;IAAI;IAC5C;GACJ,KAAK;IACD,YAAY,EAAE,MAAM,SAAS;IAC7B;GACJ,SACI,MAAM,IAAI,iBAAiB,kGAAkG;EACrI;CACJ,OACK;EACD,IAAI,MAAM,QAAQ,KAAA,KAAa,SAAS,QAAQ,KAAA,KAAa,QAAQ,QAAQ,MAAM,KAC/E,MAAM,IAAI,iBAAiB,4EAA4E,IAAI,MAAM,MAAM,KAAK;EAEhI,YACI,MAAM,IAAI,OAAO,QACX;GACE,GAAG,MAAM;GACT,gBAAgB,WAAW,GAAG,GAAM,GAAM,CAAI;GAC9C,eAAe,uBAAuB,OAAO;EACjD,IACE,MAAM;CACpB;CACA,OAAO,OAAO,OAAO,YAAY,WAAW,SAAS,eAAe,OAAO,CACvE,GAAG,MAAM,OAAO,IAChB,GAAG,MAAM,OAAO,EACpB,CAAC;AACL;;;AC9CA,eAAsB,eAAe,KAAK,SAAS;CAC/C,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,QAAQ,KAAR;EACI,KAAK;EACL,KAAK;EACL,KAAK;GACD,SAAS,SAAS,IAAI,MAAM,EAAE,GAAG,EAAE;GACnC,YAAY;IAAE,MAAM;IAAQ,MAAM,OAAO;IAAU;GAAO;GAC1D,YAAY,CAAC,QAAQ,QAAQ;GAC7B;EACJ,KAAK;EACL,KAAK;EACL,KAAK;GACD,SAAS,SAAS,IAAI,MAAM,EAAE,GAAG,EAAE;GACnC,OAAO,OAAO,gBAAgB,IAAI,WAAW,UAAU,CAAC,CAAC;EAC7D,KAAK;EACL,KAAK;EACL,KAAK;GACD,SAAS,SAAS,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE;GACrC,YAAY;IAAE,MAAM;IAAU;GAAO;GACrC,YAAY,CAAC,WAAW,WAAW;GACnC;EACJ,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;GACD,SAAS,SAAS,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE;GACrC,YAAY;IAAE,MAAM;IAAW;GAAO;GACtC,YAAY,CAAC,WAAW,SAAS;GACjC;EACJ,SACI,eAAe,WAAW;CAClC;CACA,OAAO,OAAO,OAAO,YAAY,WAAW,SAAS,eAAe,OAAO,SAAS;AACxF;;;ACRA,MAAa,gBAAgB"}
|