dbsc-toolkit 1.2.4 → 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +51 -9
- package/dist/core/index.d.ts +3 -2
- package/dist/core/index.d.ts.map +1 -1
- package/dist/core/index.js +1 -1
- package/dist/core/index.js.map +1 -1
- package/dist/core/protocol/headers.d.ts +8 -0
- package/dist/core/protocol/headers.d.ts.map +1 -1
- package/dist/core/protocol/headers.js +41 -0
- package/dist/core/protocol/headers.js.map +1 -1
- package/dist/core/types.d.ts +14 -1
- package/dist/core/types.d.ts.map +1 -1
- package/dist/express/index.d.ts +11 -3
- package/dist/express/index.d.ts.map +1 -1
- package/dist/express/index.js +54 -10
- package/dist/express/index.js.map +1 -1
- package/dist/fastify/index.d.ts +11 -2
- package/dist/fastify/index.d.ts.map +1 -1
- package/dist/fastify/index.js +73 -20
- package/dist/fastify/index.js.map +1 -1
- package/dist/hono/index.d.ts +21 -2
- package/dist/hono/index.d.ts.map +1 -1
- package/dist/hono/index.js +92 -23
- package/dist/hono/index.js.map +1 -1
- package/dist/nextjs/index.d.ts +13 -1
- package/dist/nextjs/index.d.ts.map +1 -1
- package/dist/nextjs/index.js +88 -22
- package/dist/nextjs/index.js.map +1 -1
- package/package.json +1 -1
package/dist/nextjs/index.js
CHANGED
|
@@ -1,10 +1,13 @@
|
|
|
1
1
|
import { NextResponse } from "next/server.js";
|
|
2
|
-
import { handleRegistration, handleRefresh, issueChallenge, buildChallengeHeader, CHALLENGE_HEADER, LEGACY_CHALLENGE_HEADER, NoopRateLimiter, emit, DbscProtocolError, DbscVerificationError, } from "../core/index.js";
|
|
3
|
-
const
|
|
4
|
-
|
|
5
|
-
|
|
2
|
+
import { handleRegistration, handleRefresh, issueChallenge, buildRegistrationHeader, buildChallengeHeader, parseSessionSkippedHeader, REGISTRATION_HEADER, CHALLENGE_HEADER, LEGACY_REGISTRATION_HEADER, LEGACY_CHALLENGE_HEADER, NoopRateLimiter, emit, DbscProtocolError, DbscVerificationError, } from "../core/index.js";
|
|
3
|
+
const cookieNames = (secure) => ({
|
|
4
|
+
bound: secure ? "__Host-dbsc-session" : "dbsc-session",
|
|
5
|
+
reg: secure ? "__Host-dbsc-reg" : "dbsc-reg",
|
|
6
|
+
challenge: secure ? "__Host-dbsc-challenge" : "dbsc-challenge",
|
|
7
|
+
});
|
|
6
8
|
const DEFAULT_BOUND_TTL = 10 * 60;
|
|
7
9
|
const DEFAULT_REG_TTL = 24 * 60 * 60;
|
|
10
|
+
const DEFAULT_SESSION_TTL_MS = 24 * 60 * 60 * 1000;
|
|
8
11
|
function cookieBase(secure) {
|
|
9
12
|
return {
|
|
10
13
|
httpOnly: true,
|
|
@@ -13,14 +16,50 @@ function cookieBase(secure) {
|
|
|
13
16
|
path: "/",
|
|
14
17
|
};
|
|
15
18
|
}
|
|
19
|
+
export async function bindSession(res, sessionId, storage, opts) {
|
|
20
|
+
const secure = opts.secure ?? true;
|
|
21
|
+
const registrationPath = opts.registrationPath ?? "/dbsc/registration";
|
|
22
|
+
const regCookieTtl = opts.registrationCookieTtl ?? DEFAULT_REG_TTL * 1000;
|
|
23
|
+
const sessionTtl = opts.sessionTtl ?? DEFAULT_SESSION_TTL_MS;
|
|
24
|
+
const existing = await storage.getSession(sessionId);
|
|
25
|
+
const now = Date.now();
|
|
26
|
+
if (!existing) {
|
|
27
|
+
await storage.setSession({
|
|
28
|
+
id: sessionId,
|
|
29
|
+
userId: opts.userId,
|
|
30
|
+
tier: "none",
|
|
31
|
+
createdAt: now,
|
|
32
|
+
expiresAt: now + sessionTtl,
|
|
33
|
+
lastRefreshAt: 0,
|
|
34
|
+
});
|
|
35
|
+
}
|
|
36
|
+
const COOKIES = cookieNames(secure);
|
|
37
|
+
const challenge = await issueChallenge(sessionId, storage);
|
|
38
|
+
const regHeader = buildRegistrationHeader({
|
|
39
|
+
refreshPath: registrationPath,
|
|
40
|
+
challenge: challenge.jti,
|
|
41
|
+
cookieName: COOKIES.bound,
|
|
42
|
+
});
|
|
43
|
+
res.headers.set(REGISTRATION_HEADER, regHeader);
|
|
44
|
+
res.headers.set(LEGACY_REGISTRATION_HEADER, regHeader);
|
|
45
|
+
res.cookies.set(COOKIES.reg, sessionId, {
|
|
46
|
+
...cookieBase(secure),
|
|
47
|
+
maxAge: regCookieTtl / 1000,
|
|
48
|
+
});
|
|
49
|
+
res.cookies.set(COOKIES.challenge, challenge.jti, {
|
|
50
|
+
...cookieBase(secure),
|
|
51
|
+
maxAge: 5 * 60,
|
|
52
|
+
});
|
|
53
|
+
}
|
|
16
54
|
export function createDbscMiddleware(opts) {
|
|
17
|
-
const { storage, registrationPath = "/dbsc/registration", refreshPath = "/dbsc/refresh", boundCookieTtl = DEFAULT_BOUND_TTL * 1000, registrationCookieTtl = DEFAULT_REG_TTL * 1000, rateLimiter = new NoopRateLimiter(), onEvent, secure = true, } = opts;
|
|
55
|
+
const { storage, registrationPath = "/dbsc/registration", refreshPath = "/dbsc/refresh", boundCookieTtl = DEFAULT_BOUND_TTL * 1000, registrationCookieTtl = DEFAULT_REG_TTL * 1000, rateLimiter = new NoopRateLimiter(), onEvent, autoBind, secure = true, } = opts;
|
|
56
|
+
const COOKIES = cookieNames(secure);
|
|
18
57
|
return async function middleware(req) {
|
|
19
58
|
const url = req.nextUrl.pathname;
|
|
20
59
|
const ip = req.headers.get("x-forwarded-for") ?? "unknown";
|
|
21
60
|
if (req.method === "POST" && url === registrationPath) {
|
|
22
|
-
const sessionId = req.cookies.get(
|
|
23
|
-
const expectedJti = req.cookies.get(
|
|
61
|
+
const sessionId = req.cookies.get(COOKIES.reg)?.value;
|
|
62
|
+
const expectedJti = req.cookies.get(COOKIES.challenge)?.value;
|
|
24
63
|
if (!sessionId || !expectedJti) {
|
|
25
64
|
return NextResponse.json({ error: "missing session or challenge cookie" }, { status: 400 });
|
|
26
65
|
}
|
|
@@ -55,17 +94,17 @@ export function createDbscMiddleware(opts) {
|
|
|
55
94
|
credentials: [
|
|
56
95
|
{
|
|
57
96
|
type: "cookie",
|
|
58
|
-
name:
|
|
97
|
+
name: COOKIES.bound,
|
|
59
98
|
attributes: "Path=/; Secure; HttpOnly; SameSite=Lax",
|
|
60
99
|
},
|
|
61
100
|
],
|
|
62
101
|
};
|
|
63
102
|
const res = NextResponse.json(body, { status: 200 });
|
|
64
|
-
res.cookies.set(
|
|
103
|
+
res.cookies.set(COOKIES.bound, sessionId, {
|
|
65
104
|
...cookieBase(secure),
|
|
66
105
|
maxAge: boundCookieTtl / 1000,
|
|
67
106
|
});
|
|
68
|
-
res.cookies.delete(
|
|
107
|
+
res.cookies.delete(COOKIES.challenge);
|
|
69
108
|
return res;
|
|
70
109
|
}
|
|
71
110
|
catch (err) {
|
|
@@ -78,7 +117,7 @@ export function createDbscMiddleware(opts) {
|
|
|
78
117
|
}
|
|
79
118
|
if (req.method === "POST" && url === refreshPath) {
|
|
80
119
|
const sessionIdHeader = req.headers.get("sec-secure-session-id");
|
|
81
|
-
const sessionId = sessionIdHeader ?? req.cookies.get(
|
|
120
|
+
const sessionId = sessionIdHeader ?? req.cookies.get(COOKIES.bound)?.value;
|
|
82
121
|
if (!sessionId) {
|
|
83
122
|
return new NextResponse(null, { status: 403 });
|
|
84
123
|
}
|
|
@@ -93,19 +132,19 @@ export function createDbscMiddleware(opts) {
|
|
|
93
132
|
const res = new NextResponse(null, { status: 403 });
|
|
94
133
|
res.headers.set(CHALLENGE_HEADER, buildChallengeHeader(challenge.jti, sessionId));
|
|
95
134
|
res.headers.set(LEGACY_CHALLENGE_HEADER, buildChallengeHeader(challenge.jti, sessionId));
|
|
96
|
-
res.cookies.set(
|
|
135
|
+
res.cookies.set(COOKIES.challenge, challenge.jti, {
|
|
97
136
|
...cookieBase(secure),
|
|
98
137
|
maxAge: 5 * 60,
|
|
99
138
|
});
|
|
100
139
|
return res;
|
|
101
140
|
}
|
|
102
|
-
const expectedJti = req.cookies.get(
|
|
141
|
+
const expectedJti = req.cookies.get(COOKIES.challenge)?.value;
|
|
103
142
|
if (!expectedJti) {
|
|
104
143
|
const challenge = await issueChallenge(sessionId, storage);
|
|
105
144
|
const res = new NextResponse(null, { status: 403 });
|
|
106
145
|
res.headers.set(CHALLENGE_HEADER, buildChallengeHeader(challenge.jti, sessionId));
|
|
107
146
|
res.headers.set(LEGACY_CHALLENGE_HEADER, buildChallengeHeader(challenge.jti, sessionId));
|
|
108
|
-
res.cookies.set(
|
|
147
|
+
res.cookies.set(COOKIES.challenge, challenge.jti, {
|
|
109
148
|
...cookieBase(secure),
|
|
110
149
|
maxAge: 5 * 60,
|
|
111
150
|
});
|
|
@@ -131,17 +170,17 @@ export function createDbscMiddleware(opts) {
|
|
|
131
170
|
credentials: [
|
|
132
171
|
{
|
|
133
172
|
type: "cookie",
|
|
134
|
-
name:
|
|
173
|
+
name: COOKIES.bound,
|
|
135
174
|
attributes: "Path=/; Secure; HttpOnly; SameSite=Lax",
|
|
136
175
|
},
|
|
137
176
|
],
|
|
138
177
|
};
|
|
139
178
|
const res = NextResponse.json(body, { status: 200 });
|
|
140
|
-
res.cookies.set(
|
|
179
|
+
res.cookies.set(COOKIES.bound, sessionId, {
|
|
141
180
|
...cookieBase(secure),
|
|
142
181
|
maxAge: boundCookieTtl / 1000,
|
|
143
182
|
});
|
|
144
|
-
res.cookies.delete(
|
|
183
|
+
res.cookies.delete(COOKIES.challenge);
|
|
145
184
|
return res;
|
|
146
185
|
}
|
|
147
186
|
catch (err) {
|
|
@@ -152,21 +191,48 @@ export function createDbscMiddleware(opts) {
|
|
|
152
191
|
throw err;
|
|
153
192
|
}
|
|
154
193
|
}
|
|
194
|
+
if (autoBind && !req.cookies.get(COOKIES.bound)?.value && !req.cookies.get(COOKIES.reg)?.value) {
|
|
195
|
+
const result = await autoBind(req);
|
|
196
|
+
if (result) {
|
|
197
|
+
const res = NextResponse.next();
|
|
198
|
+
await bindSession(res, result.sessionId, storage, {
|
|
199
|
+
userId: result.userId,
|
|
200
|
+
secure,
|
|
201
|
+
registrationPath,
|
|
202
|
+
registrationCookieTtl,
|
|
203
|
+
});
|
|
204
|
+
return res;
|
|
205
|
+
}
|
|
206
|
+
}
|
|
155
207
|
return NextResponse.next();
|
|
156
208
|
};
|
|
157
209
|
}
|
|
158
210
|
export async function getDbscSession(req, storage, opts = {}) {
|
|
159
|
-
const
|
|
211
|
+
const skippedRaw = {
|
|
212
|
+
"secure-session-skipped": req.headers.get("secure-session-skipped") ?? undefined,
|
|
213
|
+
"sec-session-skipped": req.headers.get("sec-session-skipped") ?? undefined,
|
|
214
|
+
};
|
|
215
|
+
const skipped = parseSessionSkippedHeader(skippedRaw);
|
|
216
|
+
const secure = opts.secure ?? true;
|
|
217
|
+
const COOKIES = cookieNames(secure);
|
|
218
|
+
const sessionId = req.cookies.get(COOKIES.bound)?.value ?? null;
|
|
219
|
+
const revoke = async () => {
|
|
220
|
+
if (sessionId)
|
|
221
|
+
await storage.revokeSession(sessionId);
|
|
222
|
+
if (opts.res) {
|
|
223
|
+
opts.res.cookies.delete(COOKIES.bound);
|
|
224
|
+
}
|
|
225
|
+
};
|
|
160
226
|
if (!sessionId)
|
|
161
|
-
return { sessionId: null, tier: "none" };
|
|
227
|
+
return { sessionId: null, tier: "none", skipped, revoke };
|
|
162
228
|
const session = await storage.getSession(sessionId);
|
|
163
229
|
if (!session)
|
|
164
|
-
return { sessionId: null, tier: "none" };
|
|
230
|
+
return { sessionId: null, tier: "none", skipped, revoke };
|
|
165
231
|
const boundCookieTtl = opts.boundCookieTtl ?? DEFAULT_BOUND_TTL * 1000;
|
|
166
232
|
const staleAfter = session.lastRefreshAt + boundCookieTtl;
|
|
167
233
|
if (session.tier === "dbsc" && Date.now() > staleAfter) {
|
|
168
|
-
return { sessionId, tier: "none" };
|
|
234
|
+
return { sessionId, tier: "none", skipped, revoke };
|
|
169
235
|
}
|
|
170
|
-
return { sessionId, tier: session.tier };
|
|
236
|
+
return { sessionId, tier: session.tier, skipped, revoke };
|
|
171
237
|
}
|
|
172
238
|
//# sourceMappingURL=index.js.map
|
package/dist/nextjs/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nextjs/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,cAAc,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nextjs/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,eAAe,EACf,IAAI,EACJ,iBAAiB,EACjB,qBAAqB,GAKtB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc;IACtD,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU;IAC5C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB;CAC/D,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,CAAC;AAClC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACrC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAMnD,SAAS,UAAU,CAAC,MAAe;IACjC,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,QAAQ,EAAE,KAAc;QACxB,IAAI,EAAE,GAAG;KACV,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAiB,EACjB,SAAiB,EACjB,OAAuB,EACvB,IAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,oBAAoB,CAAC;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,IAAI,eAAe,GAAG,IAAI,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,sBAAsB,CAAC;IAE7D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,OAAO,CAAC,UAAU,CAAC;YACvB,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,UAAU;YAC3B,aAAa,EAAE,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,uBAAuB,CAAC;QACxC,WAAW,EAAE,gBAAgB;QAC7B,SAAS,EAAE,SAAS,CAAC,GAAG;QACxB,UAAU,EAAE,OAAO,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;IAChD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;IAEvD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE;QACtC,GAAG,UAAU,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,YAAY,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;QAChD,GAAG,UAAU,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,CAAC,GAAG,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAqB;IACxD,MAAM,EACJ,OAAO,EACP,gBAAgB,GAAG,oBAAoB,EACvC,WAAW,GAAG,eAAe,EAC7B,cAAc,GAAG,iBAAiB,GAAG,IAAI,EACzC,qBAAqB,GAAG,eAAe,GAAG,IAAI,EAC9C,WAAW,GAAG,IAAI,eAAe,EAAE,EACnC,OAAO,EACP,QAAQ,EACR,MAAM,GAAG,IAAI,GACd,GAAG,IAAI,CAAC;IAET,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,KAAK,UAAU,UAAU,CAAC,GAAgB;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC;QAE3D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;YACtD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;YAE9D,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9F,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,kBAAkB,CACtB;oBACE,SAAS;oBACT,wBAAwB,EACtB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;wBAC1C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;wBACvC,SAAS;oBACX,WAAW;iBACZ,EACD,OAAO,CACR,CAAC;gBAEF,IAAI,CAAC,OAAO,EAAE;oBACZ,IAAI,EAAE,cAAc;oBACpB,SAAS;oBACT,IAAI,EAAE,MAAM;oBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,SAAS,EAAE,OAAO;oBAClB,EAAE;iBACH,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG;oBACX,kBAAkB,EAAE,SAAS;oBAC7B,WAAW,EAAE,WAAW;oBACxB,KAAK,EAAE;wBACL,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;wBAC1B,YAAY,EAAE,IAAI;wBAClB,mBAAmB,EAAE,EAAE;qBACxB;oBACD,WAAW,EAAE;wBACX;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,OAAO,CAAC,KAAK;4BACnB,UAAU,EAAE,wCAAwC;yBACrD;qBACF;iBACF,CAAC;gBACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE;oBACxC,GAAG,UAAU,CAAC,MAAM,CAAC;oBACrB,MAAM,EAAE,cAAc,GAAG,IAAI;iBAC9B,CAAC,CAAC;gBACH,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtC,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,WAAW,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,GAAG,YAAY,qBAAqB,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;oBAC7E,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACjD,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,eAAe,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;YAE3E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,cAAc,GAClB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;gBAC1C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAE1C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC3D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;gBACzF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;oBAChD,GAAG,UAAU,CAAC,MAAM,CAAC;oBACrB,MAAM,EAAE,CAAC,GAAG,EAAE;iBACf,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC;YACb,CAAC;YAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;YAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC3D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;gBACzF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;oBAChD,GAAG,UAAU,CAAC,MAAM,CAAC;oBACrB,MAAM,EAAE,CAAC,GAAG,EAAE;iBACf,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC;YACb,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;gBAEnG,IAAI,CAAC,OAAO,EAAE;oBACZ,IAAI,EAAE,SAAS;oBACf,SAAS;oBACT,IAAI,EAAE,MAAM;oBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,EAAE;iBACH,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG;oBACX,kBAAkB,EAAE,SAAS;oBAC7B,WAAW,EAAE,WAAW;oBACxB,KAAK,EAAE;wBACL,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;wBAC1B,YAAY,EAAE,IAAI;wBAClB,mBAAmB,EAAE,EAAE;qBACxB;oBACD,WAAW,EAAE;wBACX;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,OAAO,CAAC,KAAK;4BACnB,UAAU,EAAE,wCAAwC;yBACrD;qBACF;iBACF,CAAC;gBACF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE;oBACxC,GAAG,UAAU,CAAC,MAAM,CAAC;oBACrB,MAAM,EAAE,cAAc,GAAG,IAAI;iBAC9B,CAAC,CAAC;gBACH,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtC,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,WAAW,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,GAAG,YAAY,qBAAqB,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;oBAC7E,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;gBAChC,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE;oBAChD,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM;oBACN,gBAAgB;oBAChB,qBAAqB;iBACtB,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAgB,EAChB,OAA+B,EAC/B,OAA0E,EAAE;IAE5E,MAAM,UAAU,GAAuC;QACrD,wBAAwB,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,SAAS;QAChF,qBAAqB,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS;KAC3E,CAAC;IACF,MAAM,OAAO,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAEhE,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,IAAI,SAAS;YAAE,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAExE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,iBAAiB,GAAG,IAAI,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,GAAG,cAAc,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC"}
|