mindoodb 0.0.1

package/dist/core/keys/KeyBag.js

@@ -0,0 +1,401 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyBag = void 0;
+/**
+ * The KeyBag is used to store encryption keys that the current user has access to
+ * in order to decrypt document changes stored in the AppendOnlyStore.
+ * Supports key rotation by storing multiple versions per keyId (newest first).
+ */
+class KeyBag {
+    /**
+     * Creates a new KeyBag instance.
+     *
+     * @param userEncryptionKey The encrypted user encryption key
+     * @param userEncryptionKeyPassword The password to decrypt the user encryption key
+     * @param cryptoAdapter The crypto adapter to use for encryption and decryption
+     */
+    constructor(userEncryptionKey, userEncryptionKeyPassword, cryptoAdapter) {
+        this.keys = new Map();
+        this.userEncryptionKey = userEncryptionKey;
+        this.userEncryptionKeyPassword = userEncryptionKeyPassword;
+        this.cryptoAdapter = cryptoAdapter;
+    }
+    /**
+     * Reads a key from the key bag.
+     * Returns the newest key (based on createdAt) or the first key if no timestamps are available.
+     *
+     * @param keyId The ID of the key to read
+     * @return The exported key, or null if not found
+     */
+    async get(keyId) {
+        const keyEntries = this.keys.get(keyId);
+        if (!keyEntries || keyEntries.length === 0) {
+            return null;
+        }
+        // Sort by createdAt (newest first), then return the first one
+        const sorted = [...keyEntries].sort((a, b) => {
+            const aTime = a.createdAt ?? 0;
+            const bTime = b.createdAt ?? 0;
+            return bTime - aTime; // Descending order (newest first)
+        });
+        return sorted[0].key;
+    }
+    /**
+     * Gets all keys for a given keyId, sorted by createdAt (newest first).
+     * Useful for trying multiple keys during decryption (key rotation support).
+     *
+     * @param keyId The ID of the keys to read
+     * @return Array of keys sorted by createdAt (newest first), or empty array if not found
+     */
+    async getAllKeys(keyId) {
+        const keyEntries = this.keys.get(keyId);
+        if (!keyEntries || keyEntries.length === 0) {
+            return [];
+        }
+        // Sort by createdAt (newest first)
+        const sorted = [...keyEntries].sort((a, b) => {
+            const aTime = a.createdAt ?? 0;
+            const bTime = b.createdAt ?? 0;
+            return bTime - aTime; // Descending order (newest first)
+        });
+        return sorted.map(entry => entry.key);
+    }
+    /**
+     * Sets a key in the key bag.
+     * Adds the key to the array of keys for this keyId (supports key rotation).
+     *
+     * @param keyId The ID of the key
+     * @param key The key bytes
+     * @param createdAt Optional creation timestamp (milliseconds since Unix epoch)
+     */
+    async set(keyId, key, createdAt) {
+        const keyEntries = this.keys.get(keyId) || [];
+        keyEntries.push({ key, createdAt });
+        this.keys.set(keyId, keyEntries);
+    }
+    /**
+     * Decrypts an encrypted private key with the given password and imports it into the key bag.
+     * Adds the key to the array of keys for this keyId (supports key rotation).
+     *
+     * @param keyId The ID to store the decrypted key under
+     * @param key The encrypted private key to decrypt
+     * @param password The password to decrypt the key
+     * @param saltString Optional salt string for key derivation. Defaults to "default".
+     *                   Use "default" for keys created by createSymmetricEncryptedPrivateKey.
+     *                   Keys exported via encryptAndExportKey use keyId as salt, so pass keyId explicitly.
+     * @return A promise that resolves when the key is decrypted and stored
+     */
+    async decryptAndImportKey(keyId, key, password, saltString) {
+        const salt = saltString ?? "default";
+        const decryptedKeyBytes = await this.decryptPrivateKey(key, password, salt);
+        const keyEntries = this.keys.get(keyId) || [];
+        keyEntries.push({
+            key: new Uint8Array(decryptedKeyBytes),
+            createdAt: key.createdAt
+        });
+        this.keys.set(keyId, keyEntries);
+    }
+    /**
+     * Encrypts a key from the key bag with the given password and exports it as an EncryptedPrivateKey.
+     * Returns the newest key (based on createdAt) or the first key if no timestamps are available.
+     *
+     * @param keyId The ID of the key to encrypt and export
+     * @param password The password to encrypt the key with
+     * @return A promise that resolves to the encrypted private key, or null if the key is not found
+     */
+    async encryptAndExportKey(keyId, password) {
+        const key = await this.get(keyId);
+        if (!key) {
+            return null;
+        }
+        // Get the createdAt timestamp from the newest key entry
+        const keyEntries = this.keys.get(keyId);
+        if (!keyEntries || keyEntries.length === 0) {
+            return null;
+        }
+        // Sort by createdAt (newest first) to get the timestamp
+        const sorted = [...keyEntries].sort((a, b) => {
+            const aTime = a.createdAt ?? 0;
+            const bTime = b.createdAt ?? 0;
+            return bTime - aTime; // Descending order (newest first)
+        });
+        const createdAt = sorted[0].createdAt;
+        // Encrypt the key using the same pattern as decryptPrivateKey
+        const encryptedKey = await this.encryptPrivateKey(key, password, keyId);
+        // Include the createdAt timestamp if available
+        if (createdAt !== undefined) {
+            encryptedKey.createdAt = createdAt;
+        }
+        return encryptedKey;
+    }
+    /**
+     * Deletes all keys for a given keyId from the key bag.
+     *
+     * @param keyId The ID of the keys to delete
+     * @return A promise that resolves when the keys are deleted
+     */
+    async deleteKey(keyId) {
+        this.keys.delete(keyId);
+    }
+    /**
+     * Lists all key IDs in the key bag.
+     *
+     * @return A promise that resolves to an array of key IDs
+     */
+    async listKeys() {
+        return Array.from(this.keys.keys());
+    }
+    /**
+     * Save the key bag to a binary data blob, encrypted with the user encryption key.
+     *
+     * @return A promise that resolves to the encrypted binary data (Uint8Array)
+     */
+    async save() {
+        console.log(`[KeyBag] Saving key bag with ${this.keys.size} keys`);
+        // Serialize the map to JSON and convert to Uint8Array
+        // Convert Uint8Array values to base64 strings for JSON serialization
+        // Support multiple keys per keyId with createdAt timestamps
+        const mapArray = Array.from(this.keys.entries()).map(([keyId, keyEntries]) => [
+            keyId,
+            keyEntries.map(entry => ({
+                key: this.uint8ArrayToBase64(entry.key),
+                createdAt: entry.createdAt
+            }))
+        ]);
+        const jsonString = JSON.stringify(mapArray);
+        const plaintext = new TextEncoder().encode(jsonString);
+        const subtle = this.cryptoAdapter.getSubtle();
+        // Bind getRandomValues to maintain 'this' context
+        const randomValues = this.cryptoAdapter.getRandomValues.bind(this.cryptoAdapter);
+        // Derive an AES-GCM key using PBKDF2 with the user encryption key's salt
+        // Use the salt from the user encryption key as part of the key derivation
+        const userKeySaltBytes = this.base64ToUint8Array(this.userEncryptionKey.salt);
+        // Combine with a fixed string to differentiate from other key derivations
+        const saltStringBytes = new TextEncoder().encode("key-bag-encryption");
+        const combinedSalt = new Uint8Array(userKeySaltBytes.length + saltStringBytes.length);
+        combinedSalt.set(userKeySaltBytes);
+        combinedSalt.set(saltStringBytes, userKeySaltBytes.length);
+        // Use the user's password as input for PBKDF2
+        const passwordInput = new TextEncoder().encode(`${this.userEncryptionKeyPassword}:key-bag-encryption`);
+        const passwordKey = await subtle.importKey("raw", passwordInput, "PBKDF2", false, ["deriveKey"]);
+        // Derive AES-GCM key using PBKDF2
+        const derivedKey = await subtle.deriveKey({
+            name: "PBKDF2",
+            salt: combinedSalt,
+            iterations: 310000, // OWASP-recommended PBKDF2 iterations for PBKDF2-SHA256
+            hash: "SHA-256",
+        }, passwordKey, {
+            name: "AES-GCM",
+            length: 256,
+        }, false, ["encrypt"]);
+        // Generate IV for AES-GCM
+        const ivArray = new Uint8Array(12); // 12 bytes for AES-GCM
+        randomValues(ivArray);
+        const iv = new Uint8Array(ivArray);
+        // Encrypt the plaintext
+        const encrypted = await subtle.encrypt({
+            name: "AES-GCM",
+            iv: iv,
+            tagLength: 128,
+        }, derivedKey, plaintext.buffer);
+        // Extract ciphertext and tag
+        const encryptedArray = new Uint8Array(encrypted);
+        const tagLength = 16; // 128 bits = 16 bytes
+        const ciphertext = encryptedArray.slice(0, encryptedArray.length - tagLength);
+        const tag = encryptedArray.slice(encryptedArray.length - tagLength);
+        // Combine IV + tag + ciphertext
+        // Format: IV (12 bytes) + tag (16 bytes) + ciphertext (variable)
+        const result = new Uint8Array(12 + 16 + ciphertext.length);
+        result.set(iv, 0);
+        result.set(tag, 12);
+        result.set(ciphertext, 12 + 16);
+        console.log(`[KeyBag] Saved key bag (${plaintext.length} -> ${result.length} bytes)`);
+        return result;
+    }
+    /**
+     * Load the key bag from a binary data blob, decrypted with the user encryption key.
+     *
+     * @param encryptedData The encrypted binary data to load (Uint8Array)
+     * @return A promise that resolves when the keys are loaded
+     */
+    async load(encryptedData) {
+        console.log(`[KeyBag] Loading key bag`);
+        if (encryptedData.length < 28) {
+            throw new Error("Encrypted data too short (missing IV and tag)");
+        }
+        // Extract IV, tag, and ciphertext
+        const iv = encryptedData.slice(0, 12);
+        const tag = encryptedData.slice(12, 28);
+        const ciphertext = encryptedData.slice(28);
+        const subtle = this.cryptoAdapter.getSubtle();
+        // Derive the same AES-GCM key (same process as encryption)
+        const userKeySaltBytes = this.base64ToUint8Array(this.userEncryptionKey.salt);
+        // Combine with the same fixed string as encryption
+        const saltStringBytes = new TextEncoder().encode("key-bag-encryption");
+        const combinedSalt = new Uint8Array(userKeySaltBytes.length + saltStringBytes.length);
+        combinedSalt.set(userKeySaltBytes);
+        combinedSalt.set(saltStringBytes, userKeySaltBytes.length);
+        // Use the user's password as input for PBKDF2 (same as encryption)
+        const passwordInput = new TextEncoder().encode(`${this.userEncryptionKeyPassword}:key-bag-encryption`);
+        const passwordKey = await subtle.importKey("raw", passwordInput, "PBKDF2", false, ["deriveKey"]);
+        // Derive AES-GCM key using PBKDF2 (same parameters as encryption)
+        const derivedKey = await subtle.deriveKey({
+            name: "PBKDF2",
+            salt: combinedSalt,
+            iterations: 310000, // OWASP-recommended PBKDF2 iterations for PBKDF2-SHA256
+            hash: "SHA-256",
+        }, passwordKey, {
+            name: "AES-GCM",
+            length: 256,
+        }, false, ["decrypt"]);
+        // Combine ciphertext and tag
+        const encryptedDataWithTag = new Uint8Array(ciphertext.length + tag.length);
+        encryptedDataWithTag.set(ciphertext);
+        encryptedDataWithTag.set(tag, ciphertext.length);
+        // Decrypt
+        const decrypted = await subtle.decrypt({
+            name: "AES-GCM",
+            iv: iv,
+            tagLength: 128,
+        }, derivedKey, encryptedDataWithTag.buffer);
+        // Deserialize JSON to map
+        const decryptedArray = new Uint8Array(decrypted);
+        const jsonString = new TextDecoder().decode(decryptedArray);
+        const mapArray = JSON.parse(jsonString);
+        // Convert base64 strings back to Uint8Array arrays
+        // Support multiple keys per keyId with createdAt timestamps
+        this.keys = new Map(mapArray.map(([keyId, keyEntries]) => [
+            keyId,
+            keyEntries.map(entry => ({
+                key: this.base64ToUint8Array(entry.key),
+                createdAt: entry.createdAt
+            }))
+        ]));
+        console.log(`[KeyBag] Loaded key bag (${encryptedData.length} -> ${this.keys.size} keys)`);
+    }
+    /**
+     * Internal method to decrypt a private key using password-based key derivation.
+     *
+     * @param encryptedKey The encrypted private key
+     * @param password The password to decrypt the key
+     * @param saltString The salt string for key derivation (e.g., keyId)
+     * @returns The decrypted private key as ArrayBuffer
+     */
+    async decryptPrivateKey(encryptedKey, password, saltString) {
+        const subtle = this.cryptoAdapter.getSubtle();
+        // Decode base64 strings
+        const ciphertext = this.base64ToUint8Array(encryptedKey.ciphertext);
+        const iv = this.base64ToUint8Array(encryptedKey.iv);
+        const tag = this.base64ToUint8Array(encryptedKey.tag);
+        const saltBytes = this.base64ToUint8Array(encryptedKey.salt);
+        // Derive key from password using PBKDF2
+        // Combine the stored salt bytes with the salt string for additional security
+        const saltStringBytes = new TextEncoder().encode(saltString);
+        const combinedSalt = new Uint8Array(saltBytes.length + saltStringBytes.length);
+        combinedSalt.set(saltBytes);
+        combinedSalt.set(saltStringBytes, saltBytes.length);
+        const passwordKey = await subtle.importKey("raw", new TextEncoder().encode(password), "PBKDF2", false, ["deriveBits", "deriveKey"]);
+        const derivedKey = await subtle.deriveKey({
+            name: "PBKDF2",
+            salt: combinedSalt,
+            iterations: encryptedKey.iterations,
+            hash: "SHA-256",
+        }, passwordKey, {
+            name: "AES-GCM",
+            length: 256,
+        }, false, ["decrypt"]);
+        // Combine ciphertext and tag (GCM authentication tag is separate)
+        const encryptedData = new Uint8Array(ciphertext.length + tag.length);
+        encryptedData.set(ciphertext);
+        encryptedData.set(tag, ciphertext.length);
+        // Decrypt the private key
+        const decrypted = await subtle.decrypt({
+            name: "AES-GCM",
+            iv: iv,
+            tagLength: 128,
+        }, derivedKey, encryptedData.buffer);
+        return decrypted;
+    }
+    /**
+     * Internal method to encrypt a private key using password-based key derivation.
+     * This is the reverse of decryptPrivateKey().
+     *
+     * @param privateKeyBytes The private key bytes to encrypt
+     * @param password The password to encrypt the key with
+     * @param saltString The salt string for key derivation (e.g., keyId)
+     * @returns The encrypted private key
+     */
+    async encryptPrivateKey(privateKeyBytes, password, saltString) {
+        const subtle = this.cryptoAdapter.getSubtle();
+        // Bind getRandomValues to maintain 'this' context
+        const randomValues = this.cryptoAdapter.getRandomValues.bind(this.cryptoAdapter);
+        // Generate random salt and IV
+        const saltArray = new Uint8Array(16); // 16 bytes salt
+        randomValues(saltArray);
+        const salt = new Uint8Array(saltArray);
+        const ivArray = new Uint8Array(12); // 12 bytes for AES-GCM
+        randomValues(ivArray);
+        const iv = new Uint8Array(ivArray);
+        // Combine salt with saltString for key derivation (same as decryption)
+        const saltStringBytes = new TextEncoder().encode(saltString);
+        const combinedSalt = new Uint8Array(salt.length + saltStringBytes.length);
+        combinedSalt.set(salt);
+        combinedSalt.set(saltStringBytes, salt.length);
+        // Derive encryption key from password using PBKDF2
+        const passwordKey = await subtle.importKey("raw", new TextEncoder().encode(password), "PBKDF2", false, ["deriveBits", "deriveKey"]);
+        const iterations = 310000; // OWASP-recommended PBKDF2 iterations for PBKDF2-SHA256
+        const derivedKey = await subtle.deriveKey({
+            name: "PBKDF2",
+            salt: combinedSalt,
+            iterations: iterations,
+            hash: "SHA-256",
+        }, passwordKey, {
+            name: "AES-GCM",
+            length: 256,
+        }, false, ["encrypt"]);
+        // Encrypt the private key
+        const encrypted = await subtle.encrypt({
+            name: "AES-GCM",
+            iv: iv,
+            tagLength: 128,
+        }, derivedKey, privateKeyBytes.buffer);
+        // Extract ciphertext and tag from encrypted data
+        // AES-GCM appends the tag at the end
+        const encryptedArray = new Uint8Array(encrypted);
+        const tagLength = 16; // 128 bits = 16 bytes
+        const ciphertext = encryptedArray.slice(0, encryptedArray.length - tagLength);
+        const tag = encryptedArray.slice(encryptedArray.length - tagLength);
+        // Create encrypted key structure
+        const encryptedKey = {
+            ciphertext: this.uint8ArrayToBase64(ciphertext),
+            iv: this.uint8ArrayToBase64(iv),
+            tag: this.uint8ArrayToBase64(tag),
+            salt: this.uint8ArrayToBase64(salt),
+            iterations: iterations,
+        };
+        return encryptedKey;
+    }
+    /**
+     * Helper method to convert base64 string to Uint8Array
+     */
+    base64ToUint8Array(base64) {
+        const binary = atob(base64);
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes;
+    }
+    /**
+     * Helper method to convert Uint8Array to base64 string
+     */
+    uint8ArrayToBase64(bytes) {
+        let binary = "";
+        for (let i = 0; i < bytes.length; i++) {
+            binary += String.fromCharCode(bytes[i]);
+        }
+        return btoa(binary);
+    }
+}
+exports.KeyBag = KeyBag;
+//# sourceMappingURL=KeyBag.js.map

package/dist/core/keys/KeyBag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeyBag.js","sourceRoot":"","sources":["../../../src/core/keys/KeyBag.ts"],"names":[],"mappings":";;;AAWA;;;;GAIG;AACH,MAAa,MAAM;IAMjB;;;;;;OAMG;IACH,YAAY,iBAAsC,EAAE,yBAAiC,EAAE,aAA4B;QAV3G,SAAI,GAA4B,IAAI,GAAG,EAAE,CAAC;QAWhD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8DAA8D;QAC9D,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAC/B,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,kCAAkC;QAC1D,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,mCAAmC;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAC/B,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,kCAAkC;QAC1D,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAe,EAAE,SAAkB;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,mBAAmB,CAAC,KAAa,EAAE,GAAwB,EAAE,QAAgB,EAAE,UAAmB;QACtG,MAAM,IAAI,GAAG,UAAU,IAAI,SAAS,CAAC;QACrC,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,IAAI,UAAU,CAAC,iBAAiB,CAAC;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CAAC,KAAa,EAAE,QAAgB;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YAC/B,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,kCAAkC;QAC1D,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtC,8DAA8D;QAC9D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAExE,+CAA+C;QAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,YAAY,CAAC,SAAS,GAAG,SAAS,CAAC;QACrC,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QAEnE,sDAAsD;QACtD,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,QAAQ,GAA8D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACvI,KAAK;YACL,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvB,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAC9C,kDAAkD;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEjF,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE9E,0EAA0E;QAC1E,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACtF,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE3D,8CAA8C;QAC9C,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,yBAAyB,qBAAqB,CAAC,CAAC;QAEvG,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,aAAa,EACb,QAAQ,EACR,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;QAEF,kCAAkC;QAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,MAAM,EAAE,wDAAwD;YAC5E,IAAI,EAAE,SAAS;SAChB,EACD,WAAW,EACX;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG;SACZ,EACD,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;QAC3D,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;QAEnC,wBAAwB;QACxB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,EAAE;YACN,SAAS,EAAE,GAAG;SACf,EACD,UAAU,EACV,SAAS,CAAC,MAAqB,CAChC,CAAC;QAEF,6BAA6B;QAC7B,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,sBAAsB;QAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAEpE,gCAAgC;QAChC,iEAAiE;QACjE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEhC,OAAO,CAAC,GAAG,CAAC,2BAA2B,SAAS,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,aAAyB;QAClC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAExC,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,kCAAkC;QAClC,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAE9C,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE9E,mDAAmD;QACnD,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACtF,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE3D,mEAAmE;QACnE,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,yBAAyB,qBAAqB,CAAC,CAAC;QAEvG,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,aAAa,EACb,QAAQ,EACR,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;QAEF,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,MAAM,EAAE,wDAAwD;YAC5E,IAAI,EAAE,SAAS;SAChB,EACD,WAAW,EACX;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG;SACZ,EACD,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,6BAA6B;QAC7B,MAAM,oBAAoB,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5E,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAEjD,UAAU;QACV,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,EAAE;YACN,SAAS,EAAE,GAAG;SACf,EACD,UAAU,EACV,oBAAoB,CAAC,MAAqB,CAC3C,CAAC;QAEF,0BAA0B;QAC1B,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAA8D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEnG,mDAAmD;QACnD,4DAA4D;QAC5D,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CACjB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACpC,KAAK;YACL,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvB,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;SACJ,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,4BAA4B,aAAa,CAAC,MAAM,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC7F,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,iBAAiB,CAC7B,YAAiC,EACjC,QAAgB,EAChB,UAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAE9C,wBAAwB;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAE7D,wCAAwC;QACxC,6EAA6E;QAC7E,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/E,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5B,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,QAAQ,EACR,KAAK,EACL,CAAC,YAAY,EAAE,WAAW,CAAC,CAC5B,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,IAAI,EAAE,SAAS;SAChB,EACD,WAAW,EACX;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG;SACZ,EACD,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,kEAAkE;QAClE,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACrE,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAE1C,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,EAAkB;YACtB,SAAS,EAAE,GAAG;SACf,EACD,UAAU,EACV,aAAa,CAAC,MAAqB,CACpC,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,iBAAiB,CAC7B,eAA2B,EAC3B,QAAgB,EAChB,UAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAC9C,kDAAkD;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEjF,8BAA8B;QAC9B,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB;QACtD,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;QAC3D,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;QAEnC,uEAAuE;QACvE,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1E,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/C,mDAAmD;QACnD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,QAAQ,EACR,KAAK,EACL,CAAC,YAAY,EAAE,WAAW,CAAC,CAC5B,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,wDAAwD;QACnF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE,SAAS;SAChB,EACD,WAAW,EACX;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG;SACZ,EACD,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,EAAE;YACN,SAAS,EAAE,GAAG;SACf,EACD,UAAU,EACV,eAAe,CAAC,MAAqB,CACtC,CAAC;QAEF,iDAAiD;QACjD,qCAAqC;QACrC,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,sBAAsB;QAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAEpE,iCAAiC;QACjC,MAAM,YAAY,GAAwB;YACxC,UAAU,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;YAC/C,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YACjC,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACnC,UAAU,EAAE,UAAU;SACvB,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,KAAiB;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;CACF;AAphBD,wBAohBC"}