digitaltwin-core 0.14.2 → 1.0.0

package/dist/auth/user_service.js

@@ -0,0 +1,237 @@
+import { AuthConfig } from './auth_config.js';
+/**
+ * Service for managing users in the Digital Twin framework.
+ *
+ * This service handles the complete user lifecycle in a Digital Twin application
+ * with Keycloak authentication via Apache APISIX. It manages a normalized database
+ * schema with three tables:
+ *
+ * - `users`: Core user records linked to Keycloak IDs
+ * - `roles`: Master list of available roles
+ * - `user_roles`: Many-to-many relationship between users and roles
+ *
+ * Key features:
+ * - Automatic user creation on first authentication
+ * - Role synchronization with Keycloak
+ * - Optimized queries with proper indexing
+ * - Transaction-safe role updates
+ *
+ * @example
+ * ```typescript
+ * // Initialize in your Digital Twin engine
+ * const userService = new UserService(databaseAdapter)
+ * await userService.initializeTables()
+ *
+ * // Use in AssetsManager handlers
+ * const authUser = ApisixAuthParser.parseAuthHeaders(req.headers)
+ * const userRecord = await userService.findOrCreateUser(authUser!)
+ *
+ * // Link assets to users
+ * await this.uploadAsset({
+ *   description: 'My file',
+ *   source: 'upload',
+ *   owner_id: userRecord.id!.toString(),
+ *   filename: 'document.pdf',
+ *   file: buffer
+ * })
+ * ```
+ */
+export class UserService {
+    constructor(db) {
+        this.usersTable = 'users';
+        this.rolesTable = 'roles';
+        this.userRolesTable = 'user_roles';
+        this.db = db;
+    }
+    /**
+     * Ensures all user-related tables exist in the database
+     */
+    async initializeTables() {
+        const knex = this.getKnex();
+        // 1. Create roles table
+        if (!(await knex.schema.hasTable(this.rolesTable))) {
+            await knex.schema.createTable(this.rolesTable, table => {
+                table.increments('id').primary();
+                table.string('name', 100).notNullable().unique();
+                table.timestamp('created_at').defaultTo(knex.fn.now());
+                // Index pour les recherches par nom de rôle
+                table.index('name', 'roles_idx_name');
+            });
+        }
+        // 2. Create users table
+        if (!(await knex.schema.hasTable(this.usersTable))) {
+            await knex.schema.createTable(this.usersTable, table => {
+                table.increments('id').primary();
+                table.string('keycloak_id', 255).notNullable().unique();
+                table.timestamp('created_at').defaultTo(knex.fn.now());
+                table.timestamp('updated_at').defaultTo(knex.fn.now());
+                // Index principal pour les lookups par keycloak_id
+                table.index('keycloak_id', 'users_idx_keycloak_id');
+                table.index('created_at', 'users_idx_created_at');
+            });
+        }
+        // 3. Create user_roles junction table
+        if (!(await knex.schema.hasTable(this.userRolesTable))) {
+            await knex.schema.createTable(this.userRolesTable, table => {
+                table.integer('user_id').unsigned().notNullable();
+                table.integer('role_id').unsigned().notNullable();
+                table.timestamp('created_at').defaultTo(knex.fn.now());
+                // Clé primaire composite
+                table.primary(['user_id', 'role_id']);
+                // Clés étrangères
+                table.foreign('user_id').references('id').inTable(this.usersTable).onDelete('CASCADE');
+                table.foreign('role_id').references('id').inTable(this.rolesTable).onDelete('CASCADE');
+                // Index pour les requêtes inverses (quels utilisateurs ont ce rôle)
+                table.index('role_id', 'user_roles_idx_role_id');
+                table.index('user_id', 'user_roles_idx_user_id');
+            });
+        }
+    }
+    /**
+     * Finds or creates a user and synchronizes their roles.
+     *
+     * When authentication is disabled, returns a mock user record
+     * without touching the database.
+     */
+    async findOrCreateUser(authUser) {
+        // If authentication is disabled, return a mock user record
+        if (AuthConfig.isAuthDisabled()) {
+            return {
+                id: 1, // Use a consistent ID for anonymous user
+                keycloak_id: authUser.id,
+                roles: authUser.roles,
+                created_at: new Date(),
+                updated_at: new Date()
+            };
+        }
+        // 1. Find or create user
+        let userRecord = await this.findUserByKeycloakId(authUser.id);
+        if (!userRecord) {
+            userRecord = await this.createUser(authUser);
+        }
+        if (!userRecord.id) {
+            throw new Error('User record does not have an ID after creation/retrieval');
+        }
+        // 2. Synchronize roles
+        await this.syncUserRoles(userRecord.id, authUser.roles);
+        // 3. Return user with current roles
+        return (await this.getUserWithRoles(userRecord.id)) || userRecord;
+    }
+    /**
+     * Gets a user by their database ID
+     */
+    async getUserById(id) {
+        return await this.getUserWithRoles(id);
+    }
+    /**
+     * Gets a user by their Keycloak ID with roles
+     */
+    async getUserByKeycloakId(keycloakId) {
+        const knex = this.getKnex();
+        const userRow = (await knex(this.usersTable).where('keycloak_id', keycloakId).first());
+        if (!userRow)
+            return undefined;
+        return await this.getUserWithRoles(userRow.id);
+    }
+    /**
+     * Gets the underlying Knex instance from the database adapter
+     */
+    getKnex() {
+        if ('getKnex' in this.db && typeof this.db.getKnex === 'function') {
+            return this.db.getKnex();
+        }
+        throw new Error('Cannot access Knex instance from DatabaseAdapter');
+    }
+    /**
+     * Finds a user by their Keycloak ID
+     */
+    async findUserByKeycloakId(keycloakId) {
+        const knex = this.getKnex();
+        const row = await knex(this.usersTable).where('keycloak_id', keycloakId).first();
+        if (!row)
+            return undefined;
+        return {
+            id: row.id,
+            keycloak_id: row.keycloak_id,
+            roles: [], // Will be populated by getUserWithRoles
+            created_at: new Date(row.created_at),
+            updated_at: new Date(row.updated_at)
+        };
+    }
+    /**
+     * Creates a new user record
+     */
+    async createUser(authUser) {
+        const knex = this.getKnex();
+        const now = new Date();
+        const userData = {
+            keycloak_id: authUser.id,
+            created_at: now,
+            updated_at: now
+        };
+        const insertResult = await knex(this.usersTable).insert(userData).returning('id');
+        const insertedId = insertResult[0];
+        const id = typeof insertedId === 'object' ? insertedId.id : insertedId;
+        return {
+            id,
+            keycloak_id: authUser.id,
+            roles: [],
+            created_at: now,
+            updated_at: now
+        };
+    }
+    /**
+     * Synchronizes user roles with what's provided by Keycloak
+     */
+    async syncUserRoles(userId, newRoles) {
+        const knex = this.getKnex();
+        // Transaction pour assurer la cohérence
+        await knex.transaction(async (trx) => {
+            // 1. Ensure all roles exist in roles table
+            for (const roleName of newRoles) {
+                await trx(this.rolesTable).insert({ name: roleName }).onConflict('name').ignore(); // Si le rôle existe déjà, on l'ignore
+            }
+            // 2. Get role IDs
+            const roleRows = (await trx(this.rolesTable).select('id', 'name').whereIn('name', newRoles));
+            const roleIds = roleRows.map(r => r.id);
+            // 3. Remove old role associations
+            await trx(this.userRolesTable).where('user_id', userId).delete();
+            // 4. Add new role associations
+            if (roleIds.length > 0) {
+                const userRoleData = roleIds.map((roleId) => ({
+                    user_id: userId,
+                    role_id: roleId
+                }));
+                await trx(this.userRolesTable).insert(userRoleData);
+            }
+            // 5. Update user's updated_at timestamp
+            await trx(this.usersTable).where('id', userId).update({ updated_at: new Date() });
+        });
+    }
+    /**
+     * Gets a user with their roles populated
+     */
+    async getUserWithRoles(userId) {
+        const knex = this.getKnex();
+        // Join query to get user + roles
+        const result = (await knex(this.usersTable)
+            .leftJoin(this.userRolesTable, `${this.usersTable}.id`, `${this.userRolesTable}.user_id`)
+            .leftJoin(this.rolesTable, `${this.userRolesTable}.role_id`, `${this.rolesTable}.id`)
+            .select(`${this.usersTable}.id`, `${this.usersTable}.keycloak_id`, `${this.usersTable}.created_at`, `${this.usersTable}.updated_at`, `${this.rolesTable}.name as role_name`)
+            .where(`${this.usersTable}.id`, userId));
+        if (result.length === 0)
+            return undefined;
+        const userRow = result[0];
+        const roles = result
+            .filter((row) => row.role_name !== null)
+            .map(row => row.role_name);
+        return {
+            id: userRow.id,
+            keycloak_id: userRow.keycloak_id,
+            roles: roles,
+            created_at: new Date(userRow.created_at),
+            updated_at: new Date(userRow.updated_at)
+        };
+    }
+}
+//# sourceMappingURL=user_service.js.map

package/dist/auth/user_service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user_service.js","sourceRoot":"","sources":["../../src/auth/user_service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,OAAO,WAAW;IAMpB,YAAY,EAAmB;QAJd,eAAU,GAAG,OAAO,CAAA;QACpB,eAAU,GAAG,OAAO,CAAA;QACpB,mBAAc,GAAG,YAAY,CAAA;QAG1C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAE3B,wBAAwB;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE;gBACnD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;gBAChC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAA;gBAChD,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;gBAEtD,4CAA4C;gBAC5C,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;YACzC,CAAC,CAAC,CAAA;QACN,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE;gBACnD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;gBAChC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAA;gBACvD,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;gBACtD,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;gBAEtD,mDAAmD;gBACnD,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAA;gBACnD,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAA;YACrD,CAAC,CAAC,CAAA;QACN,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE;gBACvD,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAA;gBACjD,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAA;gBACjD,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;gBAEtD,yBAAyB;gBACzB,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;gBAErC,kBAAkB;gBAClB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;gBACtF,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;gBAEtF,oEAAoE;gBACpE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;gBAChD,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;YACpD,CAAC,CAAC,CAAA;QACN,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAA2B;QAC9C,2DAA2D;QAC3D,IAAI,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;YAC9B,OAAO;gBACH,EAAE,EAAE,CAAC,EAAE,yCAAyC;gBAChD,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE;gBACtB,UAAU,EAAE,IAAI,IAAI,EAAE;aACzB,CAAA;QACL,CAAC;QAED,yBAAyB;QACzB,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAE7D,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAC/E,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEvD,oCAAoC;QACpC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAA;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU;QACxB,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAE3B,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,CAEtE,CAAA;QAEf,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAE9B,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAClD,CAAC;IAED;;OAEG;IACK,OAAO;QACX,IAAI,SAAS,IAAI,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAChE,OAAQ,IAAI,CAAC,EAAU,CAAC,OAAO,EAAE,CAAA;QACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACvE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAE3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,CAAA;QAEhF,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAA;QAE1B,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,EAAE,EAAE,wCAAwC;YACnD,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACpC,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACvC,CAAA;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CAAC,QAA2B;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QAEtB,MAAM,QAAQ,GAAG;YACb,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAClB,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,EAAE,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAE,UAA6B,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAA;QAE1F,OAAO;YACH,EAAE;YACF,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,QAAkB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAE3B,wCAAwC;QACxC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;YAC/B,2CAA2C;YAC3C,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,sCAAsC;YAC5H,CAAC;YAED,kBAAkB;YAClB,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAGxF,CAAA;YAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAEvC,kCAAkC;YAClC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA;YAEhE,+BAA+B;YAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;oBAClD,OAAO,EAAE,MAAM;oBACf,OAAO,EAAE,MAAM;iBAClB,CAAC,CAAC,CAAA;gBAEH,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YACvD,CAAC;YAED,wCAAwC;YACxC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;QACrF,CAAC,CAAC,CAAA;IACN,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAE3B,iCAAiC;QACjC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACtC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,UAAU,KAAK,EAAE,GAAG,IAAI,CAAC,cAAc,UAAU,CAAC;aACxF,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,cAAc,UAAU,EAAE,GAAG,IAAI,CAAC,UAAU,KAAK,CAAC;aACpF,MAAM,CACH,GAAG,IAAI,CAAC,UAAU,KAAK,EACvB,GAAG,IAAI,CAAC,UAAU,cAAc,EAChC,GAAG,IAAI,CAAC,UAAU,aAAa,EAC/B,GAAG,IAAI,CAAC,UAAU,aAAa,EAC/B,GAAG,IAAI,CAAC,UAAU,oBAAoB,CACzC;aACA,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,EAAE,MAAM,CAAC,CAMxC,CAAA;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,KAAK,GAAG,MAAM;aACf,MAAM,CAAC,CAAC,GAAG,EAA6C,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC;aAClF,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAE9B,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;SAC3C,CAAA;IACL,CAAC;CACJ"}