clanka 0.6.2 → 0.7.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/CodeChunker.d.ts.map +1 -1
- package/dist/CodeChunker.js +17 -2
- package/dist/CodeChunker.js.map +1 -1
- package/dist/CodeChunker.test.js +49 -2
- package/dist/CodeChunker.test.js.map +1 -1
- package/dist/SemanticSearch.js +2 -2
- package/dist/SemanticSearch.js.map +1 -1
- package/dist/Xai.d.ts +19 -0
- package/dist/Xai.d.ts.map +1 -0
- package/dist/Xai.js +40 -0
- package/dist/Xai.js.map +1 -0
- package/dist/Xai.test.d.ts +2 -0
- package/dist/Xai.test.d.ts.map +1 -0
- package/dist/Xai.test.js +105 -0
- package/dist/Xai.test.js.map +1 -0
- package/dist/XaiAuth.d.ts +43 -0
- package/dist/XaiAuth.d.ts.map +1 -0
- package/dist/XaiAuth.js +172 -0
- package/dist/XaiAuth.js.map +1 -0
- package/dist/XaiAuth.test.d.ts +2 -0
- package/dist/XaiAuth.test.d.ts.map +1 -0
- package/dist/XaiAuth.test.js +354 -0
- package/dist/XaiAuth.test.js.map +1 -0
- package/dist/cli.js +23 -14
- package/dist/cli.js.map +1 -1
- package/dist/index.d.ts +4 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -0
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
- package/src/CodeChunker.test.ts +62 -2
- package/src/CodeChunker.ts +30 -2
- package/src/SemanticSearch.ts +2 -2
- package/src/Xai.test.ts +160 -0
- package/src/Xai.ts +57 -0
- package/src/XaiAuth.test.ts +495 -0
- package/src/XaiAuth.ts +272 -0
- package/src/cli.ts +30 -22
- package/src/index.ts +5 -0
package/dist/XaiAuth.js
ADDED
|
@@ -0,0 +1,172 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @since 1.0.0
|
|
3
|
+
*/
|
|
4
|
+
/** @effect-diagnostics schemaNumber:off */
|
|
5
|
+
import * as Context from "effect/Context";
|
|
6
|
+
import * as Effect from "effect/Effect";
|
|
7
|
+
import * as Layer from "effect/Layer";
|
|
8
|
+
import * as Option from "effect/Option";
|
|
9
|
+
import * as Schedule from "effect/Schedule";
|
|
10
|
+
import * as Schema from "effect/Schema";
|
|
11
|
+
import * as Semaphore from "effect/Semaphore";
|
|
12
|
+
import * as HttpClient from "effect/unstable/http/HttpClient";
|
|
13
|
+
import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
|
|
14
|
+
import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse";
|
|
15
|
+
import * as KeyValueStore from "effect/unstable/persistence/KeyValueStore";
|
|
16
|
+
import { DeviceCodeHandler } from "./DeviceCodeHandler.js";
|
|
17
|
+
const CLIENT_ID = "b1a00492-073a-47ea-816f-4c329264a828";
|
|
18
|
+
const ISSUER = "https://auth.x.ai";
|
|
19
|
+
const TOKEN_URL = ISSUER + "/oauth2/token";
|
|
20
|
+
const DEFAULT_TOKEN_EXPIRY_SECONDS = 3600;
|
|
21
|
+
const DEFAULT_DEVICE_EXPIRY_SECONDS = 600;
|
|
22
|
+
export class TokenData extends Schema.Class("clanka/XaiAuth/TokenData")({
|
|
23
|
+
access: Schema.String,
|
|
24
|
+
refresh: Schema.String,
|
|
25
|
+
expires: Schema.Number,
|
|
26
|
+
}) {
|
|
27
|
+
isExpired() {
|
|
28
|
+
return this.expires < Date.now() + 30_000;
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
export class XaiAuthError extends Schema.TaggedError()("XaiAuthError", {
|
|
32
|
+
reason: Schema.Literals(["DeviceFlowFailed", "RefreshFailed"]),
|
|
33
|
+
message: Schema.String,
|
|
34
|
+
cause: Schema.optional(Schema.Defect()),
|
|
35
|
+
}) {
|
|
36
|
+
}
|
|
37
|
+
const DeviceCodeResponse = Schema.Struct({
|
|
38
|
+
device_code: Schema.String,
|
|
39
|
+
user_code: Schema.String,
|
|
40
|
+
verification_uri: Schema.String,
|
|
41
|
+
expires_in: Schema.Number,
|
|
42
|
+
interval: Schema.optional(Schema.Number),
|
|
43
|
+
});
|
|
44
|
+
const TokenResponse = Schema.Struct({
|
|
45
|
+
access_token: Schema.String,
|
|
46
|
+
refresh_token: Schema.optional(Schema.String),
|
|
47
|
+
expires_in: Schema.optional(Schema.Number),
|
|
48
|
+
});
|
|
49
|
+
const TokenError = Schema.Struct({
|
|
50
|
+
error: Schema.String,
|
|
51
|
+
interval: Schema.optional(Schema.Number),
|
|
52
|
+
});
|
|
53
|
+
const PollResponse = Schema.Union([TokenResponse, TokenError]);
|
|
54
|
+
const toTokenData = (token, refresh = "") => new TokenData({
|
|
55
|
+
access: token.access_token,
|
|
56
|
+
refresh: token.refresh_token || refresh,
|
|
57
|
+
expires: Date.now() + (token.expires_in ?? DEFAULT_TOKEN_EXPIRY_SECONDS) * 1000,
|
|
58
|
+
});
|
|
59
|
+
export const toTokenStore = (store) => KeyValueStore.toSchemaStore(KeyValueStore.prefix(store, "xai.auth/"), TokenData);
|
|
60
|
+
export class XaiAuth extends Context.Service()("clanka/XaiAuth") {
|
|
61
|
+
static make = Effect.gen(function* () {
|
|
62
|
+
const verification = yield* DeviceCodeHandler;
|
|
63
|
+
const tokenStore = toTokenStore(yield* KeyValueStore.KeyValueStore);
|
|
64
|
+
const httpClient = (yield* HttpClient.HttpClient).pipe(HttpClient.mapRequest(HttpClientRequest.setHeader("User-Agent", "clanka")), HttpClient.retryTransient({
|
|
65
|
+
retryOn: "errors-and-responses",
|
|
66
|
+
times: 5,
|
|
67
|
+
schedule: Schedule.min([
|
|
68
|
+
Schedule.exponential(150),
|
|
69
|
+
Schedule.spaced(5000),
|
|
70
|
+
]),
|
|
71
|
+
}));
|
|
72
|
+
const semaphore = Semaphore.makeUnsafe(1);
|
|
73
|
+
let currentToken = yield* tokenStore.get("token").pipe(Effect.catchTag("SchemaError", () => tokenStore.remove("token").pipe(Effect.as(Option.none()))), Effect.orDie);
|
|
74
|
+
const saveToken = (token) => tokenStore.set("token", token).pipe(Effect.orDie, Effect.tap(() => Effect.sync(() => {
|
|
75
|
+
currentToken = Option.some(token);
|
|
76
|
+
})), Effect.as(token));
|
|
77
|
+
const clearToken = tokenStore.remove("token").pipe(Effect.orDie, Effect.tap(() => Effect.sync(() => {
|
|
78
|
+
currentToken = Option.none();
|
|
79
|
+
})));
|
|
80
|
+
const authenticateWithDeviceFlow = Effect.gen(function* () {
|
|
81
|
+
const response = yield* HttpClientRequest.post(ISSUER + "/oauth2/device/code").pipe(HttpClientRequest.bodyUrlParams({
|
|
82
|
+
client_id: CLIENT_ID,
|
|
83
|
+
scope: "openid profile email offline_access grok-cli:access api:access",
|
|
84
|
+
referrer: "clanka",
|
|
85
|
+
}), httpClient.execute, Effect.flatMap(HttpClientResponse.filterStatusOk));
|
|
86
|
+
const device = yield* HttpClientResponse.schemaBodyJson(DeviceCodeResponse)(response);
|
|
87
|
+
yield* verification.onCode({
|
|
88
|
+
verifyUrl: device.verification_uri,
|
|
89
|
+
deviceCode: device.user_code,
|
|
90
|
+
});
|
|
91
|
+
const request = HttpClientRequest.post(TOKEN_URL).pipe(HttpClientRequest.bodyUrlParams({
|
|
92
|
+
client_id: CLIENT_ID,
|
|
93
|
+
device_code: device.device_code,
|
|
94
|
+
grant_type: "urn:ietf:params:oauth:grant-type:device_code",
|
|
95
|
+
}));
|
|
96
|
+
let delayMs = Math.max(device.interval ?? 5, 1) * 1000;
|
|
97
|
+
const poll = Effect.gen(function* () {
|
|
98
|
+
while (true) {
|
|
99
|
+
// OAuth errors arrive as HTTP 400; decode their bodies before deciding whether to retry.
|
|
100
|
+
const response = yield* httpClient.execute(request);
|
|
101
|
+
const payload = yield* HttpClientResponse.schemaBodyJson(PollResponse)(response);
|
|
102
|
+
if ("access_token" in payload) {
|
|
103
|
+
yield* HttpClientResponse.filterStatusOk(response);
|
|
104
|
+
return toTokenData(payload);
|
|
105
|
+
}
|
|
106
|
+
if (payload.error === "slow_down") {
|
|
107
|
+
delayMs = Math.max(delayMs, (payload.interval ?? 0) * 1000) + 5000;
|
|
108
|
+
}
|
|
109
|
+
else if (payload.error !== "authorization_pending") {
|
|
110
|
+
return yield* new XaiAuthError({
|
|
111
|
+
reason: "DeviceFlowFailed",
|
|
112
|
+
message: `xAI device authorization failed: ${payload.error}`,
|
|
113
|
+
});
|
|
114
|
+
}
|
|
115
|
+
yield* Effect.sleep(delayMs + 3000);
|
|
116
|
+
}
|
|
117
|
+
});
|
|
118
|
+
return yield* poll.pipe(Effect.timeoutOrElse({
|
|
119
|
+
duration: (device.expires_in > 0
|
|
120
|
+
? device.expires_in
|
|
121
|
+
: DEFAULT_DEVICE_EXPIRY_SECONDS) * 1000,
|
|
122
|
+
orElse: () => Effect.fail(new XaiAuthError({
|
|
123
|
+
reason: "DeviceFlowFailed",
|
|
124
|
+
message: "xAI device authorization failed: expired_token",
|
|
125
|
+
})),
|
|
126
|
+
}));
|
|
127
|
+
}).pipe(Effect.mapError((cause) => cause instanceof XaiAuthError
|
|
128
|
+
? cause
|
|
129
|
+
: new XaiAuthError({
|
|
130
|
+
reason: "DeviceFlowFailed",
|
|
131
|
+
message: "Failed to authorize xAI device",
|
|
132
|
+
cause,
|
|
133
|
+
})));
|
|
134
|
+
const refreshToken = Effect.fn("XaiAuth.refreshToken")(function* (refresh) {
|
|
135
|
+
const response = yield* HttpClientRequest.post(TOKEN_URL).pipe(HttpClientRequest.bodyUrlParams({
|
|
136
|
+
client_id: CLIENT_ID,
|
|
137
|
+
grant_type: "refresh_token",
|
|
138
|
+
refresh_token: refresh,
|
|
139
|
+
}), httpClient.execute, Effect.flatMap(HttpClientResponse.filterStatusOk));
|
|
140
|
+
return toTokenData(yield* HttpClientResponse.schemaBodyJson(TokenResponse)(response), refresh);
|
|
141
|
+
}, Effect.mapError((cause) => new XaiAuthError({
|
|
142
|
+
reason: "RefreshFailed",
|
|
143
|
+
message: "Failed to refresh xAI access token",
|
|
144
|
+
cause,
|
|
145
|
+
})));
|
|
146
|
+
const authenticate = Effect.uninterruptibleMask(Effect.fnUntraced(function* (restore) {
|
|
147
|
+
return yield* saveToken(yield* restore(authenticateWithDeviceFlow));
|
|
148
|
+
}));
|
|
149
|
+
const get = Effect.uninterruptibleMask(Effect.fnUntraced(function* (restore) {
|
|
150
|
+
if (Option.isSome(currentToken)) {
|
|
151
|
+
if (!currentToken.value.isExpired())
|
|
152
|
+
return currentToken.value;
|
|
153
|
+
const refreshed = yield* restore(refreshToken(currentToken.value.refresh).pipe(Effect.option));
|
|
154
|
+
if (Option.isSome(refreshed))
|
|
155
|
+
return yield* saveToken(refreshed.value);
|
|
156
|
+
yield* clearToken;
|
|
157
|
+
}
|
|
158
|
+
return yield* saveToken(yield* restore(authenticateWithDeviceFlow));
|
|
159
|
+
}));
|
|
160
|
+
return XaiAuth.of({
|
|
161
|
+
get: semaphore.withPermit(get),
|
|
162
|
+
authenticate: semaphore.withPermit(authenticate),
|
|
163
|
+
logout: semaphore.withPermit(Effect.uninterruptible(clearToken)),
|
|
164
|
+
});
|
|
165
|
+
});
|
|
166
|
+
static layer = Layer.effect(XaiAuth, XaiAuth.make);
|
|
167
|
+
static layerClient = Layer.effect(HttpClient.HttpClient, Effect.gen(function* () {
|
|
168
|
+
const auth = yield* XaiAuth;
|
|
169
|
+
return (yield* HttpClient.HttpClient).pipe(HttpClient.mapRequestEffect((request) => auth.get.pipe(Effect.map((token) => request.pipe(HttpClientRequest.bearerToken(token.access), HttpClientRequest.setHeader("User-Agent", "clanka"))), Effect.orDie)));
|
|
170
|
+
})).pipe(Layer.provide(XaiAuth.layer));
|
|
171
|
+
}
|
|
172
|
+
//# sourceMappingURL=XaiAuth.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"XaiAuth.js","sourceRoot":"","sources":["../src/XaiAuth.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,2CAA2C;AAC3C,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAA;AAC7C,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAC7D,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAA;AAC3E,OAAO,KAAK,kBAAkB,MAAM,yCAAyC,CAAA;AAC7E,OAAO,KAAK,aAAa,MAAM,2CAA2C,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D,MAAM,SAAS,GAAG,sCAAsC,CAAA;AACxD,MAAM,MAAM,GAAG,mBAAmB,CAAA;AAClC,MAAM,SAAS,GAAG,MAAM,GAAG,eAAe,CAAA;AAC1C,MAAM,4BAA4B,GAAG,IAAI,CAAA;AACzC,MAAM,6BAA6B,GAAG,GAAG,CAAA;AAEzC,MAAM,OAAO,SAAU,SAAQ,MAAM,CAAC,KAAK,CACzC,0BAA0B,CAC3B,CAAC;IACA,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CAAC;IACA,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAClE,cAAc,EACd;IACE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;CACxC,CACF;CAAG;AAEJ,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,gBAAgB,EAAE,MAAM,CAAC,MAAM;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CACzC,CAAC,CAAA;AACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC,MAAM;IAC3B,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CAC3C,CAAC,CAAA;AACF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CACzC,CAAC,CAAA;AACF,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAA;AAC9D,MAAM,WAAW,GAAG,CAAC,KAAgC,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACrE,IAAI,SAAS,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC,YAAY;IAC1B,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;IACvC,OAAO,EACL,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,4BAA4B,CAAC,GAAG,IAAI;CACzE,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAkC,EAAE,EAAE,CACjE,aAAa,CAAC,aAAa,CACzB,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,EACxC,SAAS,CACV,CAAA;AAEH,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,OAAO,EAOzC,CAAC,gBAAgB,CAAC;IACnB,MAAM,CAAU,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAA;QAC7C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAA;QACnE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CACpD,UAAU,CAAC,UAAU,CACnB,iBAAiB,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,CACpD,EACD,UAAU,CAAC,cAAc,CAAC;YACxB,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC;gBACrB,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;gBACzB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;aACtB,CAAC;SACH,CAAC,CACH,CAAA;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzC,IAAI,YAAY,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,CAClC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAC1D,EACD,MAAM,CAAC,KAAK,CACb,CAAA;QACD,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAE,EAAE,CACrC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnC,CAAC,CAAC,CACH,EACD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CACjB,CAAA;QACH,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QAC9B,CAAC,CAAC,CACH,CACF,CAAA;QAED,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAC5C,MAAM,GAAG,qBAAqB,CAC/B,CAAC,IAAI,CACJ,iBAAiB,CAAC,aAAa,CAAC;gBAC9B,SAAS,EAAE,SAAS;gBACpB,KAAK,EACH,gEAAgE;gBAClE,QAAQ,EAAE,QAAQ;aACnB,CAAC,EACF,UAAU,CAAC,OAAO,EAClB,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAClD,CAAA;YACD,MAAM,MAAM,GACV,KAAK,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAA;YACxE,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;gBACzB,SAAS,EAAE,MAAM,CAAC,gBAAgB;gBAClC,UAAU,EAAE,MAAM,CAAC,SAAS;aAC7B,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CACpD,iBAAiB,CAAC,aAAa,CAAC;gBAC9B,SAAS,EAAE,SAAS;gBACpB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,8CAA8C;aAC3D,CAAC,CACH,CAAA;YACD,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;YACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC/B,OAAO,IAAI,EAAE,CAAC;oBACZ,yFAAyF;oBACzF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;oBACnD,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAA;oBAClE,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;wBAC9B,KAAK,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;wBAClD,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;oBAC7B,CAAC;oBACD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAClC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;oBACpE,CAAC;yBAAM,IAAI,OAAO,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;wBACrD,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;4BAC7B,MAAM,EAAE,kBAAkB;4BAC1B,OAAO,EAAE,oCAAoC,OAAO,CAAC,KAAK,EAAE;yBAC7D,CAAC,CAAA;oBACJ,CAAC;oBACD,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;gBACrC,CAAC;YACH,CAAC,CAAC,CAAA;YACF,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CACrB,MAAM,CAAC,aAAa,CAAC;gBACnB,QAAQ,EACN,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC;oBACpB,CAAC,CAAC,MAAM,CAAC,UAAU;oBACnB,CAAC,CAAC,6BAA6B,CAAC,GAAG,IAAI;gBAC3C,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;oBACf,MAAM,EAAE,kBAAkB;oBAC1B,OAAO,EAAE,gDAAgD;iBAC1D,CAAC,CACH;aACJ,CAAC,CACH,CAAA;QACH,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,KAAK,YAAY,YAAY;YAC3B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,YAAY,CAAC;gBACf,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,gCAAgC;gBACzC,KAAK;aACN,CAAC,CACP,CACF,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CACpD,QAAQ,CAAC,EAAE,OAAe;YACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAC5D,iBAAiB,CAAC,aAAa,CAAC;gBAC9B,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,OAAO;aACvB,CAAC,EACF,UAAU,CAAC,OAAO,EAClB,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAClD,CAAA;YACD,OAAO,WAAW,CAChB,KAAK,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,EACjE,OAAO,CACR,CAAA;QACH,CAAC,EACD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,YAAY,CAAC;YACf,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,oCAAoC;YAC7C,KAAK;SACN,CAAC,CACL,CACF,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAC7C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO;YAClC,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CACH,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,CACpC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO;YAClC,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE;oBAAE,OAAO,YAAY,CAAC,KAAK,CAAA;gBAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAC9B,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7D,CAAA;gBACD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;oBAAE,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;gBACtE,KAAK,CAAC,CAAC,UAAU,CAAA;YACnB,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CACH,CAAA;QACD,OAAO,OAAO,CAAC,EAAE,CAAC;YAChB,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAC9B,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;YAChD,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;SACjE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAU,WAAW,GAAG,KAAK,CAAC,MAAM,CACxC,UAAU,CAAC,UAAU,EACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAA;QAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CACxC,UAAU,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAC3C,iBAAiB,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,CACpD,CACF,EACD,MAAM,CAAC,KAAK,CACb,CACF,CACF,CAAA;IACH,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;CACrC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"XaiAuth.test.d.ts","sourceRoot":"","sources":["../src/XaiAuth.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,354 @@
|
|
|
1
|
+
import { assert, describe, it } from "@effect/vitest";
|
|
2
|
+
import * as Deferred from "effect/Deferred";
|
|
3
|
+
import * as Effect from "effect/Effect";
|
|
4
|
+
import * as Fiber from "effect/Fiber";
|
|
5
|
+
import * as Option from "effect/Option";
|
|
6
|
+
import * as TestClock from "effect/testing/TestClock";
|
|
7
|
+
import { HttpClient, HttpClientError, HttpClientResponse, } from "effect/unstable/http";
|
|
8
|
+
import * as KeyValueStore from "effect/unstable/persistence/KeyValueStore";
|
|
9
|
+
import { DeviceCodeHandler } from "./DeviceCodeHandler.js";
|
|
10
|
+
import { XaiAuth, TokenData, toTokenStore } from "./XaiAuth.js";
|
|
11
|
+
const clientId = "b1a00492-073a-47ea-816f-4c329264a828";
|
|
12
|
+
const deviceUrl = "https://auth.x.ai/oauth2/device/code";
|
|
13
|
+
const tokenUrl = "https://auth.x.ai/oauth2/token";
|
|
14
|
+
const device = {
|
|
15
|
+
device_code: "private-code",
|
|
16
|
+
user_code: "ABCD-EFGH",
|
|
17
|
+
verification_uri: "https://auth.x.ai/activate",
|
|
18
|
+
expires_in: 600,
|
|
19
|
+
interval: 1,
|
|
20
|
+
};
|
|
21
|
+
const tokens = {
|
|
22
|
+
access_token: "access",
|
|
23
|
+
refresh_token: "refresh",
|
|
24
|
+
expires_in: 3600,
|
|
25
|
+
};
|
|
26
|
+
const json = (body, status = 200) => new Response(JSON.stringify(body), {
|
|
27
|
+
status,
|
|
28
|
+
headers: { "content-type": "application/json" },
|
|
29
|
+
});
|
|
30
|
+
const body = (request) => {
|
|
31
|
+
if (request.body._tag !== "Uint8Array")
|
|
32
|
+
throw new Error("Expected encoded request body");
|
|
33
|
+
const text = new TextDecoder().decode(request.body.body);
|
|
34
|
+
return request.headers["content-type"]?.includes("application/json")
|
|
35
|
+
? JSON.parse(text)
|
|
36
|
+
: Object.fromEntries(new URLSearchParams(text));
|
|
37
|
+
};
|
|
38
|
+
const setup = Effect.fn(function* (respond) {
|
|
39
|
+
const requests = [];
|
|
40
|
+
const codes = [];
|
|
41
|
+
const client = HttpClient.make((request) => Effect.gen(function* () {
|
|
42
|
+
requests.push(request);
|
|
43
|
+
return HttpClientResponse.fromWeb(request, yield* respond(request));
|
|
44
|
+
}));
|
|
45
|
+
const auth = yield* XaiAuth.make.pipe(Effect.provideService(HttpClient.HttpClient, client), Effect.provideService(DeviceCodeHandler, {
|
|
46
|
+
onCode: (code) => Effect.sync(() => {
|
|
47
|
+
codes.push(code);
|
|
48
|
+
}),
|
|
49
|
+
}));
|
|
50
|
+
return { auth, requests, codes };
|
|
51
|
+
});
|
|
52
|
+
const seed = Effect.fn(function* (expires) {
|
|
53
|
+
const store = toTokenStore(yield* KeyValueStore.KeyValueStore);
|
|
54
|
+
yield* store
|
|
55
|
+
.set("token", new TokenData({ access: "old-access", refresh: "old-refresh", expires }))
|
|
56
|
+
.pipe(Effect.orDie);
|
|
57
|
+
});
|
|
58
|
+
describe("XaiAuth", () => {
|
|
59
|
+
for (const refresh of [false, true]) {
|
|
60
|
+
it.effect("defaults omitted token expiry to one hour during " +
|
|
61
|
+
(refresh ? "refresh" : "login"), () => Effect.gen(function* () {
|
|
62
|
+
if (refresh)
|
|
63
|
+
yield* seed(1);
|
|
64
|
+
const { auth, requests, codes } = yield* setup((request) => Effect.succeed(json(request.url === deviceUrl
|
|
65
|
+
? device
|
|
66
|
+
: {
|
|
67
|
+
access_token: tokens.access_token,
|
|
68
|
+
refresh_token: tokens.refresh_token,
|
|
69
|
+
})));
|
|
70
|
+
const before = Date.now();
|
|
71
|
+
const token = yield* auth.get;
|
|
72
|
+
assert.strictEqual(token.access, "access");
|
|
73
|
+
assert.strictEqual(token.refresh, "refresh");
|
|
74
|
+
assert.isAtLeast(token.expires, before + 3600000);
|
|
75
|
+
assert.isAtMost(token.expires, Date.now() + 3600000);
|
|
76
|
+
const stored = yield* toTokenStore(yield* KeyValueStore.KeyValueStore)
|
|
77
|
+
.get("token")
|
|
78
|
+
.pipe(Effect.orDie);
|
|
79
|
+
assert.deepStrictEqual(Option.getOrThrow(stored), token);
|
|
80
|
+
yield* auth.get;
|
|
81
|
+
assert.lengthOf(requests, refresh ? 1 : 2);
|
|
82
|
+
assert.lengthOf(codes, refresh ? 0 : 1);
|
|
83
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
84
|
+
}
|
|
85
|
+
it.effect("preserves and persists the existing refresh token when rotation is omitted", () => Effect.gen(function* () {
|
|
86
|
+
yield* seed(1);
|
|
87
|
+
const { auth, requests, codes } = yield* setup((request) => Effect.succeed(json(request.url === deviceUrl
|
|
88
|
+
? device
|
|
89
|
+
: {
|
|
90
|
+
access_token: "access",
|
|
91
|
+
expires_in: 3600,
|
|
92
|
+
})));
|
|
93
|
+
const token = yield* auth.get;
|
|
94
|
+
assert.strictEqual(token.access, "access");
|
|
95
|
+
assert.strictEqual(token.refresh, "old-refresh");
|
|
96
|
+
assert.lengthOf(requests, 1);
|
|
97
|
+
assert.strictEqual(body(requests[0]).refresh_token, "old-refresh");
|
|
98
|
+
assert.lengthOf(codes, 0);
|
|
99
|
+
const stored = yield* toTokenStore(yield* KeyValueStore.KeyValueStore)
|
|
100
|
+
.get("token")
|
|
101
|
+
.pipe(Effect.orDie);
|
|
102
|
+
assert.deepStrictEqual(Option.getOrThrow(stored), token);
|
|
103
|
+
yield* auth.get;
|
|
104
|
+
assert.lengthOf(requests, 1);
|
|
105
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
106
|
+
it.effect("accepts an initial login without a refresh token and persists an empty fallback", () => Effect.gen(function* () {
|
|
107
|
+
const { auth, requests } = yield* setup((request) => Effect.succeed(json(request.url === deviceUrl
|
|
108
|
+
? device
|
|
109
|
+
: {
|
|
110
|
+
access_token: "access",
|
|
111
|
+
expires_in: 3600,
|
|
112
|
+
})));
|
|
113
|
+
const token = yield* auth.get;
|
|
114
|
+
assert.strictEqual(token.access, "access");
|
|
115
|
+
assert.strictEqual(token.refresh, "");
|
|
116
|
+
assert.isFalse(token.isExpired());
|
|
117
|
+
const stored = yield* toTokenStore(yield* KeyValueStore.KeyValueStore)
|
|
118
|
+
.get("token")
|
|
119
|
+
.pipe(Effect.orDie);
|
|
120
|
+
assert.deepStrictEqual(Option.getOrThrow(stored), token);
|
|
121
|
+
yield* auth.get;
|
|
122
|
+
assert.lengthOf(requests, 2);
|
|
123
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
124
|
+
for (const expires of [0, -1]) {
|
|
125
|
+
it.effect("uses a fallback lifetime for device expiry " + expires, () => Effect.gen(function* () {
|
|
126
|
+
let polls = 0;
|
|
127
|
+
const { auth, requests } = yield* setup((request) => Effect.sync(() => {
|
|
128
|
+
if (request.url === deviceUrl)
|
|
129
|
+
return json({ ...device, expires_in: expires });
|
|
130
|
+
return ++polls === 1
|
|
131
|
+
? json({ error: "authorization_pending" }, 400)
|
|
132
|
+
: json(tokens);
|
|
133
|
+
}));
|
|
134
|
+
const fiber = yield* auth.get.pipe(Effect.forkChild({ startImmediately: true }));
|
|
135
|
+
yield* TestClock.adjust(4000);
|
|
136
|
+
assert.strictEqual((yield* Fiber.join(fiber)).access, "access");
|
|
137
|
+
assert.strictEqual(polls, 2);
|
|
138
|
+
assert.lengthOf(requests, 3);
|
|
139
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
140
|
+
}
|
|
141
|
+
for (const refresh of [false, true]) {
|
|
142
|
+
for (const transient of ["transport", "502"]) {
|
|
143
|
+
it.effect("recovers from transient " +
|
|
144
|
+
transient +
|
|
145
|
+
" during " +
|
|
146
|
+
(refresh ? "refresh" : "polling"), () => Effect.gen(function* () {
|
|
147
|
+
if (refresh)
|
|
148
|
+
yield* seed(1);
|
|
149
|
+
let attempts = 0;
|
|
150
|
+
const { auth, requests, codes } = yield* setup((request) => Effect.gen(function* () {
|
|
151
|
+
if (request.url === deviceUrl)
|
|
152
|
+
return json(device);
|
|
153
|
+
attempts++;
|
|
154
|
+
if (attempts === 1) {
|
|
155
|
+
if (transient === "502")
|
|
156
|
+
return new Response("Bad Gateway", { status: 502 });
|
|
157
|
+
return yield* new HttpClientError.HttpClientError({
|
|
158
|
+
reason: new HttpClientError.TransportError({
|
|
159
|
+
request,
|
|
160
|
+
cause: new Error("Connection reset"),
|
|
161
|
+
}),
|
|
162
|
+
});
|
|
163
|
+
}
|
|
164
|
+
// An OAuth 400 after recovery must still reach the polling state machine.
|
|
165
|
+
if (!refresh && attempts === 2)
|
|
166
|
+
return json({ error: "authorization_pending" }, 400);
|
|
167
|
+
return json(tokens);
|
|
168
|
+
}));
|
|
169
|
+
const fiber = yield* auth.get.pipe(Effect.forkChild({ startImmediately: true }));
|
|
170
|
+
yield* TestClock.adjust("1 minute");
|
|
171
|
+
const token = yield* Fiber.join(fiber);
|
|
172
|
+
assert.strictEqual(token.access, "access");
|
|
173
|
+
assert.strictEqual(attempts, refresh ? 2 : 3);
|
|
174
|
+
assert.lengthOf(codes, refresh ? 0 : 1);
|
|
175
|
+
assert.deepStrictEqual(requests.map((request) => request.url), refresh
|
|
176
|
+
? [tokenUrl, tokenUrl]
|
|
177
|
+
: [deviceUrl, tokenUrl, tokenUrl, tokenUrl]);
|
|
178
|
+
for (const request of requests.filter((request) => request.url === tokenUrl)) {
|
|
179
|
+
assert.strictEqual(body(request).grant_type, refresh
|
|
180
|
+
? "refresh_token"
|
|
181
|
+
: "urn:ietf:params:oauth:grant-type:device_code");
|
|
182
|
+
}
|
|
183
|
+
const stored = yield* toTokenStore(yield* KeyValueStore.KeyValueStore)
|
|
184
|
+
.get("token")
|
|
185
|
+
.pipe(Effect.orDie);
|
|
186
|
+
assert.deepStrictEqual(Option.getOrThrow(stored), token);
|
|
187
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
188
|
+
}
|
|
189
|
+
}
|
|
190
|
+
it("treats zero and near-expiry tokens as expired, unlike Copilot", () => {
|
|
191
|
+
for (const expires of [0, Date.now() - 1000, Date.now() + 1000]) {
|
|
192
|
+
assert.isTrue(new TokenData({ access: "a", refresh: "r", expires }).isExpired());
|
|
193
|
+
}
|
|
194
|
+
assert.isFalse(new TokenData({
|
|
195
|
+
access: "a",
|
|
196
|
+
refresh: "r",
|
|
197
|
+
expires: Date.now() + 3600000,
|
|
198
|
+
}).isExpired());
|
|
199
|
+
});
|
|
200
|
+
it.effect("logs in lazily, sends the public client and scope, and persists expiring credentials", () => Effect.gen(function* () {
|
|
201
|
+
const { auth, requests, codes } = yield* setup((request) => Effect.succeed(json(request.url === deviceUrl ? device : tokens)));
|
|
202
|
+
assert.lengthOf(requests, 0);
|
|
203
|
+
assert.lengthOf(codes, 0);
|
|
204
|
+
const before = Date.now();
|
|
205
|
+
const token = yield* auth.get;
|
|
206
|
+
assert.strictEqual(token.access, "access");
|
|
207
|
+
assert.strictEqual(token.refresh, "refresh");
|
|
208
|
+
assert.isAtLeast(token.expires, before + 3600000);
|
|
209
|
+
assert.isAtMost(token.expires, Date.now() + 3600000);
|
|
210
|
+
assert.deepStrictEqual(codes, [
|
|
211
|
+
{ verifyUrl: device.verification_uri, deviceCode: device.user_code },
|
|
212
|
+
]);
|
|
213
|
+
assert.deepStrictEqual(requests.map((r) => [r.method, r.url]), [
|
|
214
|
+
["POST", deviceUrl],
|
|
215
|
+
["POST", tokenUrl],
|
|
216
|
+
]);
|
|
217
|
+
assert.deepInclude(body(requests[0]), {
|
|
218
|
+
client_id: clientId,
|
|
219
|
+
scope: "openid profile email offline_access grok-cli:access api:access",
|
|
220
|
+
referrer: "clanka",
|
|
221
|
+
});
|
|
222
|
+
assert.deepInclude(body(requests[1]), {
|
|
223
|
+
client_id: clientId,
|
|
224
|
+
device_code: device.device_code,
|
|
225
|
+
grant_type: "urn:ietf:params:oauth:grant-type:device_code",
|
|
226
|
+
});
|
|
227
|
+
for (const request of requests) {
|
|
228
|
+
assert.match(request.headers["user-agent"], /clanka/i);
|
|
229
|
+
assert.notMatch(request.headers["user-agent"], /opencode/i);
|
|
230
|
+
assert.isUndefined(request.headers.authorization);
|
|
231
|
+
}
|
|
232
|
+
const kvs = yield* KeyValueStore.KeyValueStore;
|
|
233
|
+
const raw = yield* kvs.get("xai.auth/token").pipe(Effect.orDie);
|
|
234
|
+
assert.deepInclude(JSON.parse(raw), {
|
|
235
|
+
access: "access",
|
|
236
|
+
refresh: "refresh",
|
|
237
|
+
expires: token.expires,
|
|
238
|
+
});
|
|
239
|
+
assert.isUndefined(yield* kvs.get("token").pipe(Effect.orDie));
|
|
240
|
+
yield* auth.get;
|
|
241
|
+
assert.lengthOf(requests, 2);
|
|
242
|
+
yield* auth.logout;
|
|
243
|
+
assert.isUndefined(yield* kvs.get("xai.auth/token").pipe(Effect.orDie));
|
|
244
|
+
yield* auth.get;
|
|
245
|
+
assert.lengthOf(requests, 4);
|
|
246
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
247
|
+
it.effect("reuses valid persisted credentials without login or refresh", () => Effect.gen(function* () {
|
|
248
|
+
yield* seed(Date.now() + 3600000);
|
|
249
|
+
const { auth, requests, codes } = yield* setup(() => Effect.die("Unexpected HTTP request"));
|
|
250
|
+
assert.strictEqual((yield* auth.get).access, "old-access");
|
|
251
|
+
assert.lengthOf(requests, 0);
|
|
252
|
+
assert.lengthOf(codes, 0);
|
|
253
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
254
|
+
for (const expires of [0, 1]) {
|
|
255
|
+
it.effect("refreshes expired credentials (expires=" +
|
|
256
|
+
expires +
|
|
257
|
+
") and persists rotation", () => Effect.gen(function* () {
|
|
258
|
+
yield* seed(expires);
|
|
259
|
+
const { auth, requests, codes } = yield* setup(() => Effect.succeed(json(tokens)));
|
|
260
|
+
const token = yield* auth.get;
|
|
261
|
+
assert.strictEqual(token.access, "access");
|
|
262
|
+
assert.strictEqual(token.refresh, "refresh");
|
|
263
|
+
assert.isAbove(token.expires, Date.now() + 3500000);
|
|
264
|
+
assert.lengthOf(requests, 1);
|
|
265
|
+
assert.strictEqual(requests[0].url, tokenUrl);
|
|
266
|
+
assert.deepInclude(body(requests[0]), {
|
|
267
|
+
client_id: clientId,
|
|
268
|
+
grant_type: "refresh_token",
|
|
269
|
+
refresh_token: "old-refresh",
|
|
270
|
+
});
|
|
271
|
+
assert.lengthOf(codes, 0);
|
|
272
|
+
const stored = yield* toTokenStore(yield* KeyValueStore.KeyValueStore)
|
|
273
|
+
.get("token")
|
|
274
|
+
.pipe(Effect.orDie);
|
|
275
|
+
assert.deepStrictEqual(Option.getOrThrow(stored), token);
|
|
276
|
+
yield* auth.get;
|
|
277
|
+
assert.lengthOf(requests, 1);
|
|
278
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
279
|
+
}
|
|
280
|
+
it.effect("falls back to device login after a rejected refresh", () => Effect.gen(function* () {
|
|
281
|
+
yield* seed(1);
|
|
282
|
+
const { auth, requests, codes } = yield* setup((request) => Effect.succeed(json(request.url === deviceUrl
|
|
283
|
+
? device
|
|
284
|
+
: body(request).grant_type === "refresh_token"
|
|
285
|
+
? { error: "invalid_grant" }
|
|
286
|
+
: tokens, request.url === tokenUrl &&
|
|
287
|
+
body(request).grant_type === "refresh_token"
|
|
288
|
+
? 400
|
|
289
|
+
: 200)));
|
|
290
|
+
assert.strictEqual((yield* auth.get).access, "access");
|
|
291
|
+
assert.deepStrictEqual(requests.map((r) => r.url), [tokenUrl, deviceUrl, tokenUrl]);
|
|
292
|
+
assert.lengthOf(codes, 1);
|
|
293
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
294
|
+
it.effect("waits on authorization_pending and increases the delay on slow_down", () => Effect.gen(function* () {
|
|
295
|
+
let polls = 0;
|
|
296
|
+
const { auth } = yield* setup((request) => Effect.sync(() => {
|
|
297
|
+
if (request.url === deviceUrl)
|
|
298
|
+
return json(device);
|
|
299
|
+
polls++;
|
|
300
|
+
return polls === 1
|
|
301
|
+
? json({ error: "authorization_pending" }, 400)
|
|
302
|
+
: polls === 2
|
|
303
|
+
? json({ error: "slow_down", interval: 1 }, 400)
|
|
304
|
+
: json(tokens);
|
|
305
|
+
}));
|
|
306
|
+
const fiber = yield* auth.get.pipe(Effect.forkChild({ startImmediately: true }));
|
|
307
|
+
yield* TestClock.adjust(3999);
|
|
308
|
+
assert.strictEqual(polls, 1);
|
|
309
|
+
yield* TestClock.adjust(1);
|
|
310
|
+
assert.strictEqual(polls, 2);
|
|
311
|
+
yield* TestClock.adjust(8999);
|
|
312
|
+
assert.strictEqual(polls, 2);
|
|
313
|
+
yield* TestClock.adjust(1);
|
|
314
|
+
assert.strictEqual((yield* Fiber.join(fiber)).access, "access");
|
|
315
|
+
assert.strictEqual(polls, 3);
|
|
316
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
317
|
+
for (const error of ["access_denied", "expired_token"]) {
|
|
318
|
+
it.effect("stops polling on " + error + " without storing a token", () => Effect.gen(function* () {
|
|
319
|
+
const { auth, requests } = yield* setup((request) => Effect.succeed(request.url === deviceUrl ? json(device) : json({ error }, 400)));
|
|
320
|
+
const failure = yield* auth.get.pipe(Effect.flip);
|
|
321
|
+
assert.include(failure.message, error);
|
|
322
|
+
assert.lengthOf(requests, 2);
|
|
323
|
+
const stored = yield* toTokenStore(yield* KeyValueStore.KeyValueStore)
|
|
324
|
+
.get("token")
|
|
325
|
+
.pipe(Effect.orDie);
|
|
326
|
+
assert.isTrue(Option.isNone(stored));
|
|
327
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
328
|
+
}
|
|
329
|
+
for (const refresh of [false, true]) {
|
|
330
|
+
it.effect("serializes concurrent " + (refresh ? "refresh" : "login") + " requests", () => Effect.gen(function* () {
|
|
331
|
+
if (refresh)
|
|
332
|
+
yield* seed(1);
|
|
333
|
+
const started = yield* Deferred.make();
|
|
334
|
+
const release = yield* Deferred.make();
|
|
335
|
+
const { auth, requests } = yield* setup((request) => request.url === deviceUrl
|
|
336
|
+
? Effect.succeed(json(device))
|
|
337
|
+
: Effect.gen(function* () {
|
|
338
|
+
yield* Deferred.succeed(started, undefined);
|
|
339
|
+
yield* Deferred.await(release);
|
|
340
|
+
return json(tokens);
|
|
341
|
+
}));
|
|
342
|
+
const first = yield* auth.get.pipe(Effect.forkChild({ startImmediately: true }));
|
|
343
|
+
yield* Deferred.await(started);
|
|
344
|
+
const second = yield* auth.get.pipe(Effect.forkChild({ startImmediately: true }));
|
|
345
|
+
yield* Effect.yieldNow;
|
|
346
|
+
assert.lengthOf(requests, refresh ? 1 : 2);
|
|
347
|
+
yield* Deferred.succeed(release, undefined);
|
|
348
|
+
assert.strictEqual((yield* Fiber.join(first)).access, "access");
|
|
349
|
+
assert.strictEqual((yield* Fiber.join(second)).access, "access");
|
|
350
|
+
assert.lengthOf(requests, refresh ? 1 : 2);
|
|
351
|
+
}).pipe(Effect.provide(KeyValueStore.layerMemory)));
|
|
352
|
+
}
|
|
353
|
+
});
|
|
354
|
+
//# sourceMappingURL=XaiAuth.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"XaiAuth.test.js","sourceRoot":"","sources":["../src/XaiAuth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,0BAA0B,CAAA;AACrD,OAAO,EACL,UAAU,EACV,eAAe,EAEf,kBAAkB,GACnB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,aAAa,MAAM,2CAA2C,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE/D,MAAM,QAAQ,GAAG,sCAAsC,CAAA;AACvD,MAAM,SAAS,GAAG,sCAAsC,CAAA;AACxD,MAAM,QAAQ,GAAG,gCAAgC,CAAA;AACjD,MAAM,MAAM,GAAG;IACb,WAAW,EAAE,cAAc;IAC3B,SAAS,EAAE,WAAW;IACtB,gBAAgB,EAAE,4BAA4B;IAC9C,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,CAAC;CACZ,CAAA;AACD,MAAM,MAAM,GAAG;IACb,YAAY,EAAE,QAAQ;IACtB,aAAa,EAAE,SAAS;IACxB,UAAU,EAAE,IAAI;CACjB,CAAA;AACD,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;IACjC,MAAM;IACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;CAChD,CAAC,CAAA;AACJ,MAAM,IAAI,GAAG,CAAC,OAA4C,EAAE,EAAE;IAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY;QACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC;QAClE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;AACnD,CAAC,CAAA;AACD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC/B,OAE6D;IAE7D,MAAM,QAAQ,GAA+C,EAAE,CAAA;IAC/D,MAAM,KAAK,GAAqD,EAAE,CAAA;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtB,OAAO,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IACrE,CAAC,CAAC,CACH,CAAA;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CACnC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EACpD,MAAM,CAAC,cAAc,CAAC,iBAAiB,EAAE;QACvC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC,CAAC;KACL,CAAC,CACH,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAClC,CAAC,CAAC,CAAA;AACF,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAe;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAA;IAC9D,KAAK,CAAC,CAAC,KAAK;SACT,GAAG,CACF,OAAO,EACP,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CACzE;SACA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,KAAK,MAAM,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CACP,mDAAmD;YACjD,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EACjC,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,OAAO;gBAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC3B,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACzD,MAAM,CAAC,OAAO,CACZ,IAAI,CACF,OAAO,CAAC,GAAG,KAAK,SAAS;gBACvB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;iBACpC,CACN,CACF,CACF,CAAA;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;YAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC1C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;iBACnE,GAAG,CAAC,OAAO,CAAC;iBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;YACxD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;YACf,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1C,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACzC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IACH,CAAC;IAED,EAAE,CAAC,MAAM,CACP,4EAA4E,EAC5E,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACzD,MAAM,CAAC,OAAO,CACZ,IAAI,CACF,OAAO,CAAC,GAAG,KAAK,SAAS;YACvB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,YAAY,EAAE,QAAQ;gBACtB,UAAU,EAAE,IAAI;aACjB,CACN,CACF,CACF,CAAA;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAChD,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;QACnE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;aACnE,GAAG,CAAC,OAAO,CAAC;aACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QACxD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QACf,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IAED,EAAE,CAAC,MAAM,CACP,iFAAiF,EACjF,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,MAAM,CAAC,OAAO,CACZ,IAAI,CACF,OAAO,CAAC,GAAG,KAAK,SAAS;YACvB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,YAAY,EAAE,QAAQ;gBACtB,UAAU,EAAE,IAAI;aACjB,CACN,CACF,CACF,CAAA;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;aACnE,GAAG,CAAC,OAAO,CAAC;aACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QACxD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QACf,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IAED,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,6CAA6C,GAAG,OAAO,EAAE,GAAG,EAAE,CACtE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;oBAC3B,OAAO,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;gBACjD,OAAO,EAAE,KAAK,KAAK,CAAC;oBAClB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC;oBAC/C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAClB,CAAC,CAAC,CACH,CAAA;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChC,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAA;YACD,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC/D,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACnD,CAAA;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,SAAS,IAAI,CAAC,WAAW,EAAE,KAAK,CAAU,EAAE,CAAC;YACtD,EAAE,CAAC,MAAM,CACP,0BAA0B;gBACxB,SAAS;gBACT,UAAU;gBACV,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EACnC,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,IAAI,OAAO;oBAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAC3B,IAAI,QAAQ,GAAG,CAAC,CAAA;gBAChB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACzD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAClB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;wBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;oBAClD,QAAQ,EAAE,CAAA;oBACV,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;wBACnB,IAAI,SAAS,KAAK,KAAK;4BACrB,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;wBACrD,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC;4BAChD,MAAM,EAAE,IAAI,eAAe,CAAC,cAAc,CAAC;gCACzC,OAAO;gCACP,KAAK,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC;6BACrC,CAAC;yBACH,CAAC,CAAA;oBACJ,CAAC;oBACD,0EAA0E;oBAC1E,IAAI,CAAC,OAAO,IAAI,QAAQ,KAAK,CAAC;wBAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAA;oBACtD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;gBACrB,CAAC,CAAC,CACH,CAAA;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChC,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAA;gBACD,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;gBACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACtC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;gBAC1C,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBACvC,MAAM,CAAC,eAAe,CACpB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EACtC,OAAO;oBACL,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC;oBACtB,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAC9C,CAAA;gBACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,QAAQ,CACtC,EAAE,CAAC;oBACF,MAAM,CAAC,WAAW,CAChB,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,EACxB,OAAO;wBACL,CAAC,CAAC,eAAe;wBACjB,CAAC,CAAC,8CAA8C,CACnD,CAAA;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAChC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CACnC;qBACE,GAAG,CAAC,OAAO,CAAC;qBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACrB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;YAC1D,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;QACH,CAAC;IACH,CAAC;IAED,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,MAAM,CACX,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAClE,CAAA;QACH,CAAC;QACD,MAAM,CAAC,OAAO,CACZ,IAAI,SAAS,CAAC;YACZ,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC9B,CAAC,CAAC,SAAS,EAAE,CACf,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,MAAM,CACP,sFAAsF,EACtF,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACzD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAClE,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;QACjD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;QACpD,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE;YAC5B,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE;SACrE,CAAC,CAAA;QACF,MAAM,CAAC,eAAe,CACpB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EACtC;YACE,CAAC,MAAM,EAAE,SAAS,CAAC;YACnB,CAAC,MAAM,EAAE,QAAQ,CAAC;SACnB,CACF,CAAA;QACD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE;YACrC,SAAS,EAAE,QAAQ;YACnB,KAAK,EACH,gEAAgE;YAClE,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE;YACrC,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,8CAA8C;SAC3D,CAAC,CAAA;QACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAE,EAAE,SAAS,CAAC,CAAA;YACvD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAE,EAAE,WAAW,CAAC,CAAA;YAC5D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnD,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAA;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAI,CAAC,EAAE;YACnC,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAA;QACF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QACf,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC5B,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;QAClB,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACvE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;QACf,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IAED,EAAE,CAAC,MAAM,CAAC,6DAA6D,EAAE,GAAG,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;QACjC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CACtC,CAAA;QACD,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAC1D,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACnD,CAAA;IAED,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CACP,yCAAyC;YACvC,OAAO;YACP,yBAAyB,EAC3B,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACpB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAC7B,CAAA;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;YAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC1C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAC5C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;YACnD,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAC9C,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE;gBACrC,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,aAAa;aAC7B,CAAC,CAAA;YACF,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;iBACnE,GAAG,CAAC,OAAO,CAAC;iBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;YACxD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;YACf,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IACH,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,qDAAqD,EAAE,GAAG,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACzD,MAAM,CAAC,OAAO,CACZ,IAAI,CACF,OAAO,CAAC,GAAG,KAAK,SAAS;YACvB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,eAAe;gBAC5C,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE;gBAC5B,CAAC,CAAC,MAAM,EACZ,OAAO,CAAC,GAAG,KAAK,QAAQ;YACtB,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,eAAe;YAC5C,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,GAAG,CACR,CACF,CACF,CAAA;QACD,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,CAAC,eAAe,CACpB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAC1B,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACnD,CAAA;IAED,EAAE,CAAC,MAAM,CACP,qEAAqE,EACrE,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;YAClD,KAAK,EAAE,CAAA;YACP,OAAO,KAAK,KAAK,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC;gBAC/C,CAAC,CAAC,KAAK,KAAK,CAAC;oBACX,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC;oBAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpB,CAAC,CAAC,CACH,CAAA;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChC,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAA;QACD,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAC5B,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1B,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAC5B,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAC5B,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC/D,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IAED,KAAK,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,MAAM,CAAC,mBAAmB,GAAG,KAAK,GAAG,0BAA0B,EAAE,GAAG,EAAE,CACvE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,MAAM,CAAC,OAAO,CACZ,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAChE,CACF,CAAA;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACjD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;iBACnE,GAAG,CAAC,OAAO,CAAC;iBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACtC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACnD,CAAA;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CACP,wBAAwB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,WAAW,EACxE,GAAG,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,OAAO;gBAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAQ,CAAA;YAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAQ,CAAA;YAC5C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,OAAO,CAAC,GAAG,KAAK,SAAS;gBACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAClB,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;oBAC3C,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;oBAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;gBACrB,CAAC,CAAC,CACP,CAAA;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChC,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAA;YACD,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CACjC,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAA;YACD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAA;YACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1C,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAC3C,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC/D,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAChE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CACrD,CAAA;IACH,CAAC;AACH,CAAC,CAAC,CAAA"}
|