dotdo 0.0.1 → 0.1.0

package/dist/workflows/context/vault.js

@@ -0,0 +1,360 @@
+/**
+ * Vault Context API for $.vault() and $.vaults
+ *
+ * Provides a workflow context API for credential/secret management with support for:
+ * - $.vault(provider).getToken() - Get access token for provider
+ * - $.vault(provider).getCredentials() - Get full credentials object
+ * - $.vault(provider).isConnected() - Check if provider is connected
+ * - $.vault(provider).disconnect() - Remove provider connection
+ * - $.vault(provider).refresh() - Force token refresh
+ * - $.vaults.list() - List connected providers
+ * - $.vaults.connect(provider, config) - Initiate OAuth or API key connection
+ * - $.vaults.getCallback(provider) - Handle OAuth callback
+ *
+ * @module workflows/context/vault
+ */
+// ============================================================================
+// CONSTANTS
+// ============================================================================
+/**
+ * Default OAuth state expiration time (5 minutes in milliseconds)
+ */
+const OAUTH_STATE_EXPIRATION_MS = 5 * 60 * 1000;
+// ============================================================================
+// HELPER FUNCTIONS
+// ============================================================================
+/**
+ * Check if OAuth credentials are expired
+ */
+function isTokenExpired(creds) {
+    // API keys don't expire
+    if (creds.tokenType === 'api_key') {
+        return false;
+    }
+    // No expiration = not expired
+    if (!creds.expiresAt) {
+        return false;
+    }
+    // Compare with current time (expired if expiresAt <= now)
+    return creds.expiresAt.getTime() <= Date.now();
+}
+/**
+ * Check if credentials are valid and connected
+ */
+function isCredentialConnected(creds) {
+    if (!creds) {
+        return false;
+    }
+    // Check if explicitly disconnected
+    if (creds.status === 'disconnected') {
+        return false;
+    }
+    // Check if token is expired
+    if (isTokenExpired(creds)) {
+        return false;
+    }
+    // Check if we have a token or API key
+    if (creds.tokenType === 'api_key') {
+        return !!creds.apiKey;
+    }
+    return !!creds.accessToken;
+}
+/**
+ * Create a deep copy of credentials
+ */
+function cloneCredentials(creds) {
+    return {
+        ...creds,
+        expiresAt: creds.expiresAt ? new Date(creds.expiresAt.getTime()) : undefined,
+        createdAt: new Date(creds.createdAt.getTime()),
+        updatedAt: new Date(creds.updatedAt.getTime()),
+        metadata: creds.metadata ? { ...creds.metadata } : undefined,
+    };
+}
+/**
+ * Generate a random state string for CSRF protection
+ */
+function generateState() {
+    const array = new Uint8Array(32);
+    crypto.getRandomValues(array);
+    return Array.from(array, (b) => b.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Build OAuth authorization URL
+ * Note: We use manual URL construction for scope to avoid over-encoding
+ * characters like ':' which are valid in OAuth scopes (e.g., 'read:org')
+ */
+function buildAuthorizationUrl(config, redirectUri, state, scopes) {
+    const url = new URL(config.authorizationUrl);
+    url.searchParams.set('client_id', config.clientId);
+    url.searchParams.set('redirect_uri', redirectUri);
+    url.searchParams.set('state', state);
+    url.searchParams.set('response_type', 'code');
+    // Merge scopes: use provided scopes or fall back to config scopes
+    const allScopes = scopes ?? config.scopes;
+    if (allScopes && allScopes.length > 0) {
+        url.searchParams.set('scope', allScopes.join(' '));
+    }
+    // Add additional params if configured
+    if (config.additionalParams) {
+        for (const [key, value] of Object.entries(config.additionalParams)) {
+            url.searchParams.set(key, value);
+        }
+    }
+    // Decode the URL to preserve characters like ':' in scope names
+    // (e.g., 'read:org' should appear as-is, not as 'read%3Aorg')
+    return decodeURIComponent(url.toString());
+}
+// ============================================================================
+// CONTEXT FACTORY
+// ============================================================================
+/**
+ * Creates a mock workflow context ($) with vault support for testing
+ *
+ * This factory creates a context object with:
+ * - $.vault(provider) - Returns a VaultContextInstance for per-provider operations
+ * - $.vaults - Collection-level operations (list, connect, getCallback)
+ * - $._storage - Internal storage for test setup
+ * - $._providerConfigs - Provider configurations for OAuth/API key
+ * - $._mockTokenExchange - Mock token exchange responses for testing
+ * - $._mockRefresh - Mock refresh responses for testing
+ *
+ * @returns A VaultContext object with vault API methods
+ */
+export function createMockContext() {
+    // Internal storage
+    const storage = {
+        credentials: new Map(),
+        pendingOAuth: new Map(),
+    };
+    // Provider configurations
+    const providerConfigs = new Map();
+    // Mock responses for testing
+    const mockTokenExchange = new Map();
+    const mockRefresh = new Map();
+    /**
+     * Create a VaultContextInstance for a specific provider
+     */
+    function createVaultInstance(provider) {
+        return {
+            /**
+             * Get access token for this provider
+             * Returns null if not connected or token is expired
+             */
+            async getToken() {
+                const creds = storage.credentials.get(provider);
+                if (!isCredentialConnected(creds)) {
+                    return null;
+                }
+                // For API key providers, return the API key
+                if (creds.tokenType === 'api_key') {
+                    return creds.apiKey ?? null;
+                }
+                return creds.accessToken ?? null;
+            },
+            /**
+             * Get full credentials object for this provider
+             * Returns a snapshot (deep copy) to prevent mutations
+             */
+            async getCredentials() {
+                const creds = storage.credentials.get(provider);
+                if (!creds) {
+                    return null;
+                }
+                // Return a deep copy to prevent mutations
+                return cloneCredentials(creds);
+            },
+            /**
+             * Check if this provider is connected with valid credentials
+             */
+            async isConnected() {
+                const creds = storage.credentials.get(provider);
+                return isCredentialConnected(creds);
+            },
+            /**
+             * Disconnect this provider (remove credentials)
+             */
+            async disconnect() {
+                storage.credentials.delete(provider);
+            },
+            /**
+             * Force token refresh for this provider
+             * Throws if not connected, no refresh token, or API key provider
+             */
+            async refresh() {
+                const creds = storage.credentials.get(provider);
+                if (!creds) {
+                    throw new Error(`Provider '${provider}' is not connected`);
+                }
+                // API key providers can't be refreshed
+                if (creds.tokenType === 'api_key') {
+                    throw new Error(`Provider '${provider}' uses API key authentication and cannot be refreshed`);
+                }
+                // Check for refresh token
+                if (!creds.refreshToken) {
+                    throw new Error(`Provider '${provider}' has no refresh token`);
+                }
+                // Get mock refresh response
+                const mockResponse = mockRefresh.get(provider);
+                if (!mockResponse) {
+                    throw new Error(`No mock refresh response configured for '${provider}'`);
+                }
+                // Update credentials with refreshed token
+                const now = new Date();
+                creds.accessToken = mockResponse.accessToken;
+                creds.expiresAt = new Date(now.getTime() + mockResponse.expiresIn * 1000);
+                creds.updatedAt = now;
+                storage.credentials.set(provider, creds);
+            },
+        };
+    }
+    /**
+     * Vaults collection API
+     */
+    const vaultsCollection = {
+        /**
+         * List all connected providers with valid credentials
+         */
+        async list() {
+            const connected = [];
+            for (const [provider, creds] of storage.credentials.entries()) {
+                if (isCredentialConnected(creds)) {
+                    connected.push(provider);
+                }
+            }
+            return connected;
+        },
+        /**
+         * Initiate OAuth connection or store API key
+         */
+        async connect(provider, config) {
+            const providerConfig = providerConfigs.get(provider);
+            if (!providerConfig) {
+                throw new Error(`Provider '${provider}' is not configured`);
+            }
+            // Handle API key providers
+            if (providerConfig.type === 'api_key') {
+                if (!config.apiKey) {
+                    throw new Error(`API key is required for provider '${provider}'`);
+                }
+                // Validate key if validator is provided
+                if (providerConfig.validateKey && !providerConfig.validateKey(config.apiKey)) {
+                    throw new Error(`Invalid API key format for provider '${provider}'`);
+                }
+                // Extract metadata if extractor is provided
+                const metadata = providerConfig.extractMetadata
+                    ? providerConfig.extractMetadata(config.apiKey)
+                    : undefined;
+                // Store credentials
+                const now = new Date();
+                storage.credentials.set(provider, {
+                    provider,
+                    apiKey: config.apiKey,
+                    tokenType: 'api_key',
+                    createdAt: now,
+                    updatedAt: now,
+                    metadata,
+                });
+                return { connected: true };
+            }
+            // Handle OAuth providers
+            if (!config.redirectUri) {
+                throw new Error(`redirectUri is required for OAuth provider '${provider}'`);
+            }
+            // Generate state for CSRF protection
+            const state = generateState();
+            // Build authorization URL
+            const authorizationUrl = buildAuthorizationUrl(providerConfig, config.redirectUri, state, config.scopes);
+            // Store pending OAuth state
+            const now = new Date();
+            storage.pendingOAuth.set(state, {
+                provider,
+                redirectUri: config.redirectUri,
+                createdAt: now,
+                expiresAt: new Date(now.getTime() + OAUTH_STATE_EXPIRATION_MS),
+            });
+            return {
+                authorizationUrl,
+                state,
+            };
+        },
+        /**
+         * Handle OAuth callback and exchange code for tokens
+         */
+        async getCallback(provider, params) {
+            // Check for OAuth error
+            if (params.error) {
+                throw new Error(`OAuth error: ${params.error}${params.error_description ? ` - ${params.error_description}` : ''}`);
+            }
+            // Validate state
+            if (!params.state) {
+                throw new Error('Invalid OAuth callback: missing state parameter');
+            }
+            const pendingOAuth = storage.pendingOAuth.get(params.state);
+            if (!pendingOAuth) {
+                throw new Error('Invalid OAuth callback: state not found');
+            }
+            // Check state expiration
+            if (pendingOAuth.expiresAt && pendingOAuth.expiresAt.getTime() < Date.now()) {
+                storage.pendingOAuth.delete(params.state);
+                throw new Error('OAuth state expired');
+            }
+            // Verify provider matches
+            if (pendingOAuth.provider !== provider) {
+                throw new Error(`OAuth state mismatch: expected ${pendingOAuth.provider}, got ${provider}`);
+            }
+            // Get provider config
+            const providerConfig = providerConfigs.get(provider);
+            if (!providerConfig || providerConfig.type !== 'oauth') {
+                throw new Error(`Provider '${provider}' is not configured for OAuth`);
+            }
+            // Get mock token exchange response
+            const mockResponse = mockTokenExchange.get(provider);
+            if (!mockResponse) {
+                throw new Error(`No mock token exchange response configured for '${provider}'`);
+            }
+            // Parse token response (use custom parser if provided)
+            let accessToken;
+            let tokenType;
+            let expiresIn;
+            let refreshToken;
+            if (providerConfig.parseTokenResponse) {
+                const parsed = providerConfig.parseTokenResponse(mockResponse);
+                accessToken = parsed.accessToken;
+                tokenType = parsed.tokenType;
+                expiresIn = parsed.expiresIn;
+                refreshToken = parsed.refreshToken;
+            }
+            else {
+                accessToken = mockResponse.access_token;
+                tokenType = mockResponse.token_type ?? 'bearer';
+                expiresIn = mockResponse.expires_in;
+                refreshToken = mockResponse.refresh_token;
+            }
+            // Store credentials
+            const now = new Date();
+            storage.credentials.set(provider, {
+                provider,
+                accessToken,
+                refreshToken,
+                tokenType: 'bearer',
+                scope: mockResponse.scope,
+                expiresAt: expiresIn ? new Date(now.getTime() + expiresIn * 1000) : undefined,
+                createdAt: now,
+                updatedAt: now,
+            });
+            // Clean up pending OAuth state
+            storage.pendingOAuth.delete(params.state);
+            return { success: true };
+        },
+    };
+    return {
+        vault: createVaultInstance,
+        vaults: vaultsCollection,
+        _storage: storage,
+        _providerConfigs: providerConfigs,
+        _mockTokenExchange: mockTokenExchange,
+        _mockRefresh: mockRefresh,
+    };
+}
+//# sourceMappingURL=vault.js.map

package/dist/workflows/context/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../workflows/context/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoKH,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;GAEG;AACH,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAE/C,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,cAAc,CAAC,KAAuB;IAC7C,wBAAwB;IACxB,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,0DAA0D;IAC1D,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,KAAmC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,4BAA4B;IAC5B,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;IACvB,CAAC;IAED,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,CAAA;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5E,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,MAAmB,EACnB,WAAmB,EACnB,KAAa,EACb,MAAiB;IAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAE5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IAE7C,kEAAkE;IAClE,MAAM,SAAS,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,CAAA;IACzC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,CAAC;IAED,sCAAsC;IACtC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,8DAA8D;IAC9D,OAAO,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB;IAC/B,mBAAmB;IACnB,MAAM,OAAO,GAAgB;QAC3B,WAAW,EAAE,IAAI,GAAG,EAA4B;QAChD,YAAY,EAAE,IAAI,GAAG,EAAwB;KAC9C,CAAA;IAED,0BAA0B;IAC1B,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAA;IAEzD,6BAA6B;IAC7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAA;IAElD;;OAEG;IACH,SAAS,mBAAmB,CAAC,QAAgB;QAC3C,OAAO;YACL;;;eAGG;YACH,KAAK,CAAC,QAAQ;gBACZ,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAE/C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClC,OAAO,IAAI,CAAA;gBACb,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,KAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACnC,OAAO,KAAM,CAAC,MAAM,IAAI,IAAI,CAAA;gBAC9B,CAAC;gBAED,OAAO,KAAM,CAAC,WAAW,IAAI,IAAI,CAAA;YACnC,CAAC;YAED;;;eAGG;YACH,KAAK,CAAC,cAAc;gBAClB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,IAAI,CAAA;gBACb,CAAC;gBAED,0CAA0C;gBAC1C,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAA;YAChC,CAAC;YAED;;eAEG;YACH,KAAK,CAAC,WAAW;gBACf,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC/C,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACrC,CAAC;YAED;;eAEG;YACH,KAAK,CAAC,UAAU;gBACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACtC,CAAC;YAED;;;eAGG;YACH,KAAK,CAAC,OAAO;gBACX,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,oBAAoB,CAAC,CAAA;gBAC5D,CAAC;gBAED,uCAAuC;gBACvC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,uDAAuD,CAAC,CAAA;gBAC/F,CAAC;gBAED,0BAA0B;gBAC1B,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,wBAAwB,CAAC,CAAA;gBAChE,CAAC;gBAED,4BAA4B;gBAC5B,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,GAAG,CAAC,CAAA;gBAC1E,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;gBACtB,KAAK,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAA;gBAC5C,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;gBACzE,KAAK,CAAC,SAAS,GAAG,GAAG,CAAA;gBAErB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAC1C,CAAC;SACF,CAAA;IACH,CAAC;IAED;;OAEG;IACH,MAAM,gBAAgB,GAAqB;QACzC;;WAEG;QACH,KAAK,CAAC,IAAI;YACR,MAAM,SAAS,GAAa,EAAE,CAAA;YAE9B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9D,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAC1B,CAAC;YACH,CAAC;YAED,OAAO,SAAS,CAAA;QAClB,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,MAAqB;YACnD,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAEpD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,qBAAqB,CAAC,CAAA;YAC7D,CAAC;YAED,2BAA2B;YAC3B,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,GAAG,CAAC,CAAA;gBACnE,CAAC;gBAED,wCAAwC;gBACxC,IAAI,cAAc,CAAC,WAAW,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAA;gBACtE,CAAC;gBAED,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,eAAe;oBAC7C,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC/C,CAAC,CAAC,SAAS,CAAA;gBAEb,oBAAoB;gBACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;gBACtB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE;oBAChC,QAAQ;oBACR,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS,EAAE,SAAS;oBACpB,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;oBACd,QAAQ;iBACT,CAAC,CAAA;gBAEF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YAC5B,CAAC;YAED,yBAAyB;YACzB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,QAAQ,GAAG,CAAC,CAAA;YAC7E,CAAC;YAED,qCAAqC;YACrC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAA;YAE7B,0BAA0B;YAC1B,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,cAAc,EACd,MAAM,CAAC,WAAW,EAClB,KAAK,EACL,MAAM,CAAC,MAAM,CACd,CAAA;YAED,4BAA4B;YAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE;gBAC9B,QAAQ;gBACR,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC;aAC/D,CAAC,CAAA;YAEF,OAAO;gBACL,gBAAgB;gBAChB,KAAK;aACN,CAAA;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,MAAsB;YACxD,wBAAwB;YACxB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACpH,CAAC;YAED,iBAAiB;YACjB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;YACpE,CAAC;YAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAE3D,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;YAC5D,CAAC;YAED,yBAAyB;YACzB,IAAI,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC5E,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACzC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;YACxC,CAAC;YAED,0BAA0B;YAC1B,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,CAAC,QAAQ,SAAS,QAAQ,EAAE,CAAC,CAAA;YAC7F,CAAC;YAED,sBAAsB;YACtB,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAEpD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,+BAA+B,CAAC,CAAA;YACvE,CAAC;YAED,mCAAmC;YACnC,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACpD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,GAAG,CAAC,CAAA;YACjF,CAAC;YAED,uDAAuD;YACvD,IAAI,WAAmB,CAAA;YACvB,IAAI,SAAiB,CAAA;YACrB,IAAI,SAA6B,CAAA;YACjC,IAAI,YAAgC,CAAA;YAEpC,IAAI,cAAc,CAAC,kBAAkB,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,cAAc,CAAC,kBAAkB,CAAC,YAAuC,CAAC,CAAA;gBACzF,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;gBAChC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;gBAC5B,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;gBAC5B,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;YACpC,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,YAAY,CAAC,YAAa,CAAA;gBACxC,SAAS,GAAG,YAAY,CAAC,UAAU,IAAI,QAAQ,CAAA;gBAC/C,SAAS,GAAG,YAAY,CAAC,UAAU,CAAA;gBACnC,YAAY,GAAG,YAAY,CAAC,aAAa,CAAA;YAC3C,CAAC;YAED,oBAAoB;YACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAChC,QAAQ;gBACR,WAAW;gBACX,YAAY;gBACZ,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7E,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAA;YAEF,+BAA+B;YAC/B,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAEzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;IAED,OAAO;QACL,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,eAAe;QACjC,kBAAkB,EAAE,iBAAiB;QACrC,YAAY,EAAE,WAAW;KAC1B,CAAA;AACH,CAAC"}