dotdo 0.0.1 → 0.1.0

package/dist/lib/vault/store.js

@@ -0,0 +1,411 @@
+/**
+ * WorkOS Vault-style credential storage
+ *
+ * Provides secure credential storage with:
+ * - User isolation (credentials scoped by userId)
+ * - TTL/expiration support
+ * - Encryption simulation (for testing)
+ * - OAuth token management
+ *
+ * @module lib/vault/store
+ */
+// ============================================================================
+// ENCRYPTION UTILITIES (Simulation for testing)
+// ============================================================================
+/**
+ * Simple encryption simulation for testing.
+ * In production, this would use actual encryption (e.g., WebCrypto, WorkOS Vault).
+ */
+function encrypt(value) {
+    // Base64 encode with a prefix to simulate encryption
+    return `encrypted:${Buffer.from(value).toString('base64')}`;
+}
+/**
+ * Simple decryption simulation for testing.
+ */
+function decrypt(encryptedValue) {
+    if (!encryptedValue.startsWith('encrypted:')) {
+        return encryptedValue;
+    }
+    const base64 = encryptedValue.slice('encrypted:'.length);
+    return Buffer.from(base64, 'base64').toString('utf-8');
+}
+/**
+ * Generate a random state token for OAuth
+ */
+function generateState() {
+    const array = new Uint8Array(32);
+    crypto.getRandomValues(array);
+    return Array.from(array, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Generate a PKCE code verifier
+ */
+function generateCodeVerifier() {
+    const array = new Uint8Array(32);
+    crypto.getRandomValues(array);
+    return Array.from(array, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Generate a PKCE code challenge from verifier (S256 method)
+ */
+async function generateCodeChallenge(verifier) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(verifier);
+    const hash = await crypto.subtle.digest('SHA-256', data);
+    const hashArray = Array.from(new Uint8Array(hash));
+    const base64 = btoa(String.fromCharCode(...hashArray));
+    // URL-safe base64
+    return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * Generate a mock access token
+ */
+function generateAccessToken() {
+    const array = new Uint8Array(32);
+    crypto.getRandomValues(array);
+    return `access_${Array.from(array, (byte) => byte.toString(16).padStart(2, '0')).join('')}`;
+}
+/**
+ * Generate a mock refresh token
+ */
+function generateRefreshToken() {
+    const array = new Uint8Array(32);
+    crypto.getRandomValues(array);
+    return `refresh_${Array.from(array, (byte) => byte.toString(16).padStart(2, '0')).join('')}`;
+}
+// ============================================================================
+// VAULT STORE IMPLEMENTATION
+// ============================================================================
+/**
+ * Create a vault instance for a specific user.
+ */
+function createVaultInstance(userId, storage) {
+    // Get or create user's credential map
+    const getUserCredentials = () => {
+        let userCreds = storage.credentials.get(userId);
+        if (!userCreds) {
+            userCreds = new Map();
+            storage.credentials.set(userId, userCreds);
+        }
+        return userCreds;
+    };
+    return {
+        async get(key) {
+            const userCreds = storage.credentials.get(userId);
+            if (!userCreds)
+                return null;
+            const credential = userCreds.get(key);
+            if (!credential)
+                return null;
+            // Check expiration
+            if (credential.expiresAt && credential.expiresAt.getTime() <= Date.now()) {
+                // Expired - remove and return null
+                userCreds.delete(key);
+                return null;
+            }
+            // Return decrypted credential
+            return {
+                key: credential.key,
+                value: decrypt(credential.encryptedValue),
+                metadata: credential.metadata,
+                expiresAt: credential.expiresAt,
+                createdAt: credential.createdAt,
+                updatedAt: credential.updatedAt,
+            };
+        },
+        async set(key, value, options) {
+            const userCreds = getUserCredentials();
+            const now = new Date();
+            // Check if credential already exists (for preserving createdAt)
+            const existing = userCreds.get(key);
+            const createdAt = existing?.createdAt ?? now;
+            // Calculate expiration
+            const expiresAt = options?.ttl
+                ? new Date(Date.now() + options.ttl * 1000)
+                : undefined;
+            // Encrypt the value
+            const encryptedValue = encrypt(value);
+            const storedCredential = {
+                key,
+                value: encryptedValue, // Store encrypted in the exposed value too (for raw storage check)
+                encryptedValue,
+                metadata: options?.metadata,
+                expiresAt,
+                createdAt,
+                updatedAt: now,
+            };
+            userCreds.set(key, storedCredential);
+            // Return the credential with decrypted value
+            return {
+                key,
+                value,
+                metadata: options?.metadata,
+                expiresAt,
+                createdAt,
+                updatedAt: now,
+            };
+        },
+        async delete(key) {
+            const userCreds = storage.credentials.get(userId);
+            if (!userCreds)
+                return false;
+            const existed = userCreds.has(key);
+            userCreds.delete(key);
+            return existed;
+        },
+        async list() {
+            const userCreds = storage.credentials.get(userId);
+            if (!userCreds)
+                return [];
+            const now = Date.now();
+            const keys = [];
+            // Filter out expired credentials
+            for (const [key, credential] of userCreds) {
+                if (credential.expiresAt && credential.expiresAt.getTime() <= now) {
+                    // Skip expired
+                    continue;
+                }
+                keys.push(key);
+            }
+            // Return sorted alphabetically
+            return keys.sort();
+        },
+        async has(key) {
+            const userCreds = storage.credentials.get(userId);
+            if (!userCreds)
+                return false;
+            const credential = userCreds.get(key);
+            if (!credential)
+                return false;
+            // Check expiration
+            if (credential.expiresAt && credential.expiresAt.getTime() <= Date.now()) {
+                return false;
+            }
+            return true;
+        },
+    };
+}
+// ============================================================================
+// OAUTH IMPLEMENTATION
+// ============================================================================
+/**
+ * OAuth provider URLs (mock for testing)
+ */
+const PROVIDER_AUTH_URLS = {
+    google: 'https://accounts.google.com/o/oauth2/v2/auth',
+    github: 'https://github.com/login/oauth/authorize',
+};
+/**
+ * Proactive refresh window in milliseconds (5 minutes before expiration)
+ */
+const PROACTIVE_REFRESH_WINDOW_MS = 5 * 60 * 1000;
+/**
+ * Token lifetime in milliseconds (1 hour)
+ */
+const TOKEN_LIFETIME_MS = 60 * 60 * 1000;
+/**
+ * Create OAuth instance for managing OAuth flows.
+ */
+function createOAuthInstance(storage, events) {
+    return {
+        async initiate(config) {
+            // Validate required config fields
+            if (!config.clientId || !config.redirectUri || config.scopes.length === 0) {
+                throw new Error('Invalid OAuth config: clientId, redirectUri, and scopes are required');
+            }
+            // Check for unreachable provider
+            if (config.provider === 'unreachable-provider') {
+                throw new Error('Failed to connect to OAuth provider');
+            }
+            // Generate state and code verifier for PKCE
+            const state = generateState();
+            const codeVerifier = generateCodeVerifier();
+            const codeChallenge = await generateCodeChallenge(codeVerifier);
+            // Store state for callback validation
+            // Generate a user ID for this OAuth flow
+            const userId = `user:oauth-${Date.now()}`;
+            storage.oauthStates.set(state, {
+                userId,
+                provider: config.provider,
+                codeVerifier,
+            });
+            // Store config for callback
+            storage.oauthConfigs.set(state, config);
+            // Build redirect URL
+            const authUrl = PROVIDER_AUTH_URLS[config.provider] ?? `https://${config.provider}.com/oauth/authorize`;
+            const params = new URLSearchParams({
+                client_id: config.clientId,
+                redirect_uri: config.redirectUri,
+                response_type: 'code',
+                scope: config.scopes.join(' '),
+                state,
+                code_challenge: codeChallenge,
+                code_challenge_method: 'S256',
+            });
+            return {
+                redirectUrl: `${authUrl}?${params.toString()}`,
+                state,
+                codeVerifier,
+            };
+        },
+        async callback(code, state) {
+            // Validate state
+            const stateData = storage.oauthStates.get(state);
+            if (!stateData) {
+                throw new Error('Invalid or expired OAuth state');
+            }
+            // Validate code
+            if (!code) {
+                throw new Error('Invalid authorization code');
+            }
+            // Get config
+            const config = storage.oauthConfigs.get(state);
+            if (!config) {
+                throw new Error('OAuth config not found');
+            }
+            // Check for invalid client ID (simulate provider error)
+            if (config.clientId === 'invalid-client-id') {
+                throw new Error('Invalid client credentials');
+            }
+            // Remove state (one-time use) and store in consumed states for test access
+            storage.oauthStates.delete(state);
+            storage._consumedStates.set(state, stateData);
+            // Generate tokens
+            const now = new Date();
+            const tokens = {
+                accessToken: generateAccessToken(),
+                refreshToken: generateRefreshToken(),
+                tokenType: 'Bearer',
+                expiresAt: new Date(now.getTime() + TOKEN_LIFETIME_MS),
+                scope: config.scopes.join(' '),
+            };
+            // Store tokens for the user and provider
+            const tokenKey = `${stateData.userId}:${stateData.provider}`;
+            storage.oauthTokens.set(tokenKey, tokens);
+            // Also store by provider alone for backward compatibility
+            storage.oauthTokens.set(stateData.provider, tokens);
+            return tokens;
+        },
+        async getAccessToken(userId, provider) {
+            const tokenKey = `${userId}:${provider}`;
+            let tokens = storage.oauthTokens.get(tokenKey);
+            if (!tokens) {
+                throw new Error(`No tokens found for ${provider}`);
+            }
+            const now = Date.now();
+            // Check if token is expired or about to expire
+            if (tokens.expiresAt.getTime() <= now) {
+                // Token expired - need refresh
+                if (!tokens.refreshToken) {
+                    throw new Error('Token expired and no refresh token available');
+                }
+                // Attempt refresh
+                try {
+                    tokens = await this.refreshToken(userId, provider);
+                }
+                catch {
+                    throw new Error('Token expired and refresh failed');
+                }
+            }
+            else if (tokens.expiresAt.getTime() - now <= PROACTIVE_REFRESH_WINDOW_MS) {
+                // Proactively refresh if within refresh window
+                if (tokens.refreshToken) {
+                    try {
+                        tokens = await this.refreshToken(userId, provider);
+                    }
+                    catch {
+                        // Proactive refresh failed, but token is still valid
+                    }
+                }
+            }
+            return tokens.accessToken;
+        },
+        async refreshToken(userId, provider) {
+            const tokenKey = `${userId}:${provider}`;
+            const currentTokens = storage.oauthTokens.get(tokenKey);
+            if (!currentTokens) {
+                throw new Error(`No tokens found for ${provider}`);
+            }
+            if (!currentTokens.refreshToken) {
+                // Clear tokens on failure
+                storage.oauthTokens.delete(tokenKey);
+                throw new Error('No refresh token available');
+            }
+            // Check for invalid/revoked refresh tokens
+            if (currentTokens.refreshToken === 'invalid-refresh-token' ||
+                currentTokens.refreshToken === 'invalid' ||
+                currentTokens.refreshToken === 'revoked-token') {
+                // Clear tokens on failure
+                storage.oauthTokens.delete(tokenKey);
+                throw new Error('Refresh token is invalid or revoked');
+            }
+            const oldExpiresAt = currentTokens.expiresAt;
+            const now = new Date();
+            // Generate new tokens
+            const newTokens = {
+                accessToken: generateAccessToken(),
+                refreshToken: generateRefreshToken(), // Some providers rotate refresh tokens
+                tokenType: 'Bearer',
+                expiresAt: new Date(now.getTime() + TOKEN_LIFETIME_MS),
+                scope: currentTokens.scope,
+            };
+            // Store new tokens
+            storage.oauthTokens.set(tokenKey, newTokens);
+            // Emit refresh event
+            events.push({
+                userId,
+                provider,
+                oldExpiresAt,
+                newExpiresAt: newTokens.expiresAt,
+                refreshedAt: now,
+            });
+            return newTokens;
+        },
+    };
+}
+// ============================================================================
+// FACTORY FUNCTION
+// ============================================================================
+/**
+ * Create a mock vault context for testing.
+ *
+ * This provides an in-memory implementation of the vault API that can be used
+ * in tests without requiring a real database or encryption service.
+ *
+ * @returns VaultContext with vault and oauth instances
+ *
+ * @example
+ * ```ts
+ * const $ = createMockVaultContext()
+ *
+ * // Store a credential
+ * await $.vault('user:123').set('api-key', 'sk-secret', { ttl: 3600 })
+ *
+ * // Retrieve a credential
+ * const cred = await $.vault('user:123').get('api-key')
+ *
+ * // OAuth flow
+ * const { redirectUrl, state } = await $.oauth.initiate(config)
+ * const tokens = await $.oauth.callback(code, state)
+ * ```
+ */
+export function createMockVaultContext() {
+    const storage = {
+        credentials: new Map(),
+        oauthTokens: new Map(),
+        oauthConfigs: new Map(),
+        oauthStates: new Map(),
+        _consumedStates: new Map(),
+    };
+    const events = [];
+    return {
+        vault(userId) {
+            return createVaultInstance(userId, storage);
+        },
+        oauth: createOAuthInstance(storage, events),
+        _storage: storage,
+        _events: events,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/lib/vault/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../lib/vault/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwHH,+EAA+E;AAC/E,gDAAgD;AAChD,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,qDAAqD;IACrD,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;AAC7D,CAAC;AAED;;GAEG;AACH,SAAS,OAAO,CAAC,cAAsB;IACrC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,OAAO,cAAc,CAAA;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjF,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjF,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,CAAC,CAAA;IACtD,kBAAkB;IAClB,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC1E,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,UAAU,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;AAC7F,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,WAAW,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;AAC9F,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,mBAAmB,CAC1B,MAAc,EACd,OAAyB;IAEzB,sCAAsC;IACtC,MAAM,kBAAkB,GAAG,GAAkC,EAAE;QAC7D,IAAI,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAA;YACrB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC5C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjD,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAA;YAE3B,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACrC,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAA;YAE5B,mBAAmB;YACnB,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACzE,mCAAmC;gBACnC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACrB,OAAO,IAAI,CAAA;YACb,CAAC;YAED,8BAA8B;YAC9B,OAAO;gBACL,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;gBACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC,CAAA;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,OAAyB;YAC7D,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAA;YACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YAEtB,gEAAgE;YAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACnC,MAAM,SAAS,GAAG,QAAQ,EAAE,SAAS,IAAI,GAAG,CAAA;YAE5C,uBAAuB;YACvB,MAAM,SAAS,GAAG,OAAO,EAAE,GAAG;gBAC5B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;gBAC3C,CAAC,CAAC,SAAS,CAAA;YAEb,oBAAoB;YACpB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;YAErC,MAAM,gBAAgB,GAAqB;gBACzC,GAAG;gBACH,KAAK,EAAE,cAAc,EAAE,mEAAmE;gBAC1F,cAAc;gBACd,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,SAAS;gBACT,SAAS;gBACT,SAAS,EAAE,GAAG;aACf,CAAA;YAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;YAEpC,6CAA6C;YAC7C,OAAO;gBACL,GAAG;gBACH,KAAK;gBACL,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,SAAS;gBACT,SAAS;gBACT,SAAS,EAAE,GAAG;aACf,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAW;YACtB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjD,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAA;YAE5B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAClC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACrB,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjD,IAAI,CAAC,SAAS;gBAAE,OAAO,EAAE,CAAA;YAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAa,EAAE,CAAA;YAEzB,iCAAiC;YACjC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1C,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;oBAClE,eAAe;oBACf,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC;YAED,+BAA+B;YAC/B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjD,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAA;YAE5B,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACrC,IAAI,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAA;YAE7B,mBAAmB;YACnB,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACzE,OAAO,KAAK,CAAA;YACd,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,kBAAkB,GAA2B;IACjD,MAAM,EAAE,8CAA8C;IACtD,MAAM,EAAE,0CAA0C;CACnD,CAAA;AAED;;GAEG;AACH,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAEjD;;GAEG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAExC;;GAEG;AACH,SAAS,mBAAmB,CAC1B,OAAyB,EACzB,MAA2B;IAE3B,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAmB;YAChC,kCAAkC;YAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;YACzF,CAAC;YAED,iCAAiC;YACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YAED,4CAA4C;YAC5C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAA;YAC7B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;YAC3C,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAA;YAE/D,sCAAsC;YACtC,yCAAyC;YACzC,MAAM,MAAM,GAAG,cAAc,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;YACzC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;gBAC7B,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY;aACb,CAAC,CAAA;YAEF,4BAA4B;YAC5B,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAEvC,qBAAqB;YACrB,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,WAAW,MAAM,CAAC,QAAQ,sBAAsB,CAAA;YACvG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,aAAa,EAAE,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC9B,KAAK;gBACL,cAAc,EAAE,aAAa;gBAC7B,qBAAqB,EAAE,MAAM;aAC9B,CAAC,CAAA;YAEF,OAAO;gBACL,WAAW,EAAE,GAAG,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;gBAC9C,KAAK;gBACL,YAAY;aACb,CAAA;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,KAAa;YACxC,iBAAiB;YACjB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACnD,CAAC;YAED,gBAAgB;YAChB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YAED,aAAa;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;YAC3C,CAAC;YAED,wDAAwD;YACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YAED,2EAA2E;YAC3E,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACjC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;YAE7C,kBAAkB;YAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,MAAM,MAAM,GAAgB;gBAC1B,WAAW,EAAE,mBAAmB,EAAE;gBAClC,YAAY,EAAE,oBAAoB,EAAE;gBACpC,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC;gBACtD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC/B,CAAA;YAED,yCAAyC;YACzC,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAA;YAC5D,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAEzC,0DAA0D;YAC1D,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAEnD,OAAO,MAAM,CAAA;QACf,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;YACnD,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAA;YACxC,IAAI,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAE9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAEtB,+CAA+C;YAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;gBACtC,+BAA+B;gBAC/B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;gBACjE,CAAC;gBAED,kBAAkB;gBAClB,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;gBACrD,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,2BAA2B,EAAE,CAAC;gBAC3E,+CAA+C;gBAC/C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxB,IAAI,CAAC;wBACH,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;oBACpD,CAAC;oBAAC,MAAM,CAAC;wBACP,qDAAqD;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC,WAAW,CAAA;QAC3B,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,QAAgB;YACjD,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAA;YACxC,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAEvD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;gBAChC,0BAA0B;gBAC1B,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACpC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YAED,2CAA2C;YAC3C,IACE,aAAa,CAAC,YAAY,KAAK,uBAAuB;gBACtD,aAAa,CAAC,YAAY,KAAK,SAAS;gBACxC,aAAa,CAAC,YAAY,KAAK,eAAe,EAC9C,CAAC;gBACD,0BAA0B;gBAC1B,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACpC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YAED,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAA;YAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YAEtB,sBAAsB;YACtB,MAAM,SAAS,GAAgB;gBAC7B,WAAW,EAAE,mBAAmB,EAAE;gBAClC,YAAY,EAAE,oBAAoB,EAAE,EAAE,uCAAuC;gBAC7E,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC;gBACtD,KAAK,EAAE,aAAa,CAAC,KAAK;aAC3B,CAAA;YAED,mBAAmB;YACnB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAE5C,qBAAqB;YACrB,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM;gBACN,QAAQ;gBACR,YAAY;gBACZ,YAAY,EAAE,SAAS,CAAC,SAAS;gBACjC,WAAW,EAAE,GAAG;aACjB,CAAC,CAAA;YAEF,OAAO,SAAS,CAAA;QAClB,CAAC;KACF,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAqB;QAChC,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,YAAY,EAAE,IAAI,GAAG,EAAE;QACvB,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,eAAe,EAAE,IAAI,GAAG,EAAE;KAC3B,CAAA;IAED,MAAM,MAAM,GAAwB,EAAE,CAAA;IAEtC,OAAO;QACL,KAAK,CAAC,MAAc;YAClB,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7C,CAAC;QACD,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC;QAC3C,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,MAAM;KAChB,CAAA;AACH,CAAC"}