plugin-data-source-mssql 2.0.11 → 2.0.12

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/dist-browser/response/ResponseHandler.mjs

@@ -0,0 +1,366 @@
+/*! @azure/msal-common v16.6.1 2026-05-11 */
+'use strict';
+import { updateAccountTenantProfileData, buildTenantProfile } from '../account/AccountInfo.mjs';
+import { extractTokenClaims, checkMaxAge, isKmsi } from '../account/AuthToken.mjs';
+import { getTenantIdFromIdTokenClaims } from '../account/TokenClaims.mjs';
+import { TokenCacheContext } from '../cache/persistence/TokenCacheContext.mjs';
+import { generateHomeAccountId, getAccountInfo, createAccountEntity } from '../cache/utils/AccountEntityUtils.mjs';
+import { createIdTokenEntity, createAccessTokenEntity, createRefreshTokenEntity } from '../cache/utils/CacheHelpers.mjs';
+import { PopTokenGenerator } from '../crypto/PopTokenGenerator.mjs';
+import { createClientAuthError } from '../error/ClientAuthError.mjs';
+import { isInteractionRequiredError, InteractionRequiredAuthError } from '../error/InteractionRequiredAuthError.mjs';
+import { ServerError } from '../error/ServerError.mjs';
+import { ScopeSet } from '../request/ScopeSet.mjs';
+import { NOT_AVAILABLE, HTTP_SERVER_ERROR_RANGE_START, HTTP_SERVER_ERROR_RANGE_END, HTTP_CLIENT_ERROR_RANGE_START, HTTP_CLIENT_ERROR_RANGE_END, AuthenticationScheme, THE_FAMILY_ID } from '../utils/Constants.mjs';
+import { parseRequestState } from '../utils/ProtocolUtils.mjs';
+import { toDateFromSeconds } from '../utils/TimeUtils.mjs';
+import { nonceMismatch, authTimeNotFound, invalidCacheEnvironment, keyIdMissing } from '../error/ClientAuthErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Class that handles response parsing.
+ * @internal
+ */
+class ResponseHandler {
+    constructor(clientId, cacheStorage, cryptoObj, logger, performanceClient, serializableCache, persistencePlugin) {
+        this.clientId = clientId;
+        this.cacheStorage = cacheStorage;
+        this.cryptoObj = cryptoObj;
+        this.logger = logger;
+        this.performanceClient = performanceClient;
+        this.serializableCache = serializableCache;
+        this.persistencePlugin = persistencePlugin;
+    }
+    /**
+     * Function which validates server authorization token response.
+     * @param serverResponse
+     * @param correlationId
+     * @param refreshAccessToken
+     */
+    validateTokenResponse(serverResponse, correlationId, refreshAccessToken) {
+        // Check for error
+        if (serverResponse.error ||
+            serverResponse.error_description ||
+            serverResponse.suberror) {
+            const errString = `Error(s): ${serverResponse.error_codes || NOT_AVAILABLE} - Timestamp: ${serverResponse.timestamp || NOT_AVAILABLE} - Description: ${serverResponse.error_description || NOT_AVAILABLE} - Correlation ID: ${serverResponse.correlation_id || NOT_AVAILABLE} - Trace ID: ${serverResponse.trace_id || NOT_AVAILABLE}`;
+            const serverErrorNo = serverResponse.error_codes?.length
+                ? serverResponse.error_codes[0]
+                : undefined;
+            const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror, serverErrorNo, serverResponse.status);
+            // check if 500 error
+            if (refreshAccessToken &&
+                serverResponse.status &&
+                serverResponse.status >=
+                    HTTP_SERVER_ERROR_RANGE_START &&
+                serverResponse.status <= HTTP_SERVER_ERROR_RANGE_END) {
+                this.logger.warning("16ks7j", correlationId);
+                // don't throw an exception, but alert the user via a log that the token was unable to be refreshed
+                return;
+                // check if 400 error
+            }
+            else if (refreshAccessToken &&
+                serverResponse.status &&
+                serverResponse.status >=
+                    HTTP_CLIENT_ERROR_RANGE_START &&
+                serverResponse.status <= HTTP_CLIENT_ERROR_RANGE_END) {
+                this.logger.warning("0g61x3", correlationId);
+                // don't throw an exception, but alert the user via a log that the token was unable to be refreshed
+                return;
+            }
+            if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
+                throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "", serverErrorNo);
+            }
+            throw serverError;
+        }
+    }
+    /**
+     * Returns a constructed token response based on given string. Also manages the cache updates and cleanups.
+     * @param serverTokenResponse
+     * @param authority
+     */
+    async handleServerTokenResponse(serverTokenResponse, authority, reqTimestamp, request, apiId, authCodePayload, userAssertionHash, handlingRefreshTokenResponse, forceCacheRefreshTokenResponse, serverRequestId) {
+        // create an idToken object (not entity)
+        let idTokenClaims;
+        if (serverTokenResponse.id_token) {
+            idTokenClaims = extractTokenClaims(serverTokenResponse.id_token || "", this.cryptoObj.base64Decode);
+            // token nonce check (TODO: Add a warning if no nonce is given?)
+            if (authCodePayload && authCodePayload.nonce) {
+                if (idTokenClaims.nonce !== authCodePayload.nonce) {
+                    throw createClientAuthError(nonceMismatch);
+                }
+            }
+            // token max_age check
+            if (request.maxAge || request.maxAge === 0) {
+                const authTime = idTokenClaims.auth_time;
+                if (!authTime) {
+                    throw createClientAuthError(authTimeNotFound);
+                }
+                checkMaxAge(authTime, request.maxAge);
+            }
+        }
+        // generate homeAccountId
+        this.homeAccountIdentifier = generateHomeAccountId(serverTokenResponse.client_info || "", authority.authorityType, this.logger, this.cryptoObj, request.correlationId, idTokenClaims);
+        // save the response tokens
+        let requestStateObj;
+        if (!!authCodePayload && !!authCodePayload.state) {
+            requestStateObj = parseRequestState(this.cryptoObj.base64Decode, authCodePayload.state);
+        }
+        // Add keyId from request to serverTokenResponse if defined
+        serverTokenResponse.key_id =
+            serverTokenResponse.key_id || request.sshKid || undefined;
+        const cacheRecord = this.generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenClaims, userAssertionHash, authCodePayload);
+        let cacheContext;
+        try {
+            if (this.persistencePlugin && this.serializableCache) {
+                this.logger.verbose("0jbz5k", request.correlationId);
+                cacheContext = new TokenCacheContext(this.serializableCache, true);
+                await this.persistencePlugin.beforeCacheAccess(cacheContext);
+            }
+            /*
+             * When saving a refreshed tokens to the cache, it is expected that the account that was used is present in the cache.
+             * If not present, we should return null, as it's the case that another application called removeAccount in between
+             * the calls to getAllAccounts and acquireTokenSilent. We should not overwrite that removal, unless explicitly flagged by
+             * the developer, as in the case of refresh token flow used in ADAL Node to MSAL Node migration.
+             */
+            if (handlingRefreshTokenResponse &&
+                !forceCacheRefreshTokenResponse &&
+                cacheRecord.account) {
+                const cachedAccounts = this.cacheStorage.getAllAccounts({
+                    homeAccountId: cacheRecord.account.homeAccountId,
+                    environment: cacheRecord.account.environment,
+                }, request.correlationId);
+                if (cachedAccounts.length < 1) {
+                    this.logger.warning("1gmt66", request.correlationId);
+                    this.performanceClient?.addFields({
+                        acntLoggedOut: true,
+                    }, request.correlationId);
+                    return await ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, this.performanceClient, idTokenClaims, requestStateObj, undefined, serverRequestId);
+                }
+            }
+            await this.cacheStorage.saveCacheRecord(cacheRecord, request.correlationId, isKmsi(idTokenClaims || {}), apiId, request.storeInCache);
+        }
+        finally {
+            if (this.persistencePlugin &&
+                this.serializableCache &&
+                cacheContext) {
+                this.logger.verbose("1bh17u", request.correlationId);
+                await this.persistencePlugin.afterCacheAccess(cacheContext);
+            }
+        }
+        return ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, this.performanceClient, idTokenClaims, requestStateObj, serverTokenResponse, serverRequestId);
+    }
+    /**
+     * Generates CacheRecord
+     * @param serverTokenResponse
+     * @param idTokenObj
+     * @param authority
+     */
+    generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenClaims, userAssertionHash, authCodePayload) {
+        const env = authority.getPreferredCache();
+        if (!env) {
+            throw createClientAuthError(invalidCacheEnvironment);
+        }
+        const claimsTenantId = getTenantIdFromIdTokenClaims(idTokenClaims);
+        // IdToken: non AAD scenarios can have empty realm
+        let cachedIdToken;
+        let cachedAccount;
+        if (serverTokenResponse.id_token && !!idTokenClaims) {
+            cachedIdToken = createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token, this.clientId, claimsTenantId || "");
+            cachedAccount = buildAccountToCache(this.cacheStorage, authority, this.homeAccountIdentifier, this.cryptoObj.base64Decode, request.correlationId, idTokenClaims, serverTokenResponse.client_info, env, claimsTenantId, authCodePayload, undefined, // nativeAccountId
+            this.logger, this.performanceClient);
+        }
+        // AccessToken
+        let cachedAccessToken = null;
+        if (serverTokenResponse.access_token) {
+            // If scopes not returned in server response, use request scopes
+            const responseScopes = serverTokenResponse.scope
+                ? ScopeSet.fromString(serverTokenResponse.scope)
+                : new ScopeSet(request.scopes || []);
+            /*
+             * Use timestamp calculated before request
+             * Server may return timestamps as strings, parse to numbers if so.
+             */
+            const expiresIn = (typeof serverTokenResponse.expires_in === "string"
+                ? parseInt(serverTokenResponse.expires_in, 10)
+                : serverTokenResponse.expires_in) || 0;
+            const extExpiresIn = (typeof serverTokenResponse.ext_expires_in === "string"
+                ? parseInt(serverTokenResponse.ext_expires_in, 10)
+                : serverTokenResponse.ext_expires_in) || 0;
+            const refreshIn = (typeof serverTokenResponse.refresh_in === "string"
+                ? parseInt(serverTokenResponse.refresh_in, 10)
+                : serverTokenResponse.refresh_in) || undefined;
+            const tokenExpirationSeconds = reqTimestamp + expiresIn;
+            const extendedTokenExpirationSeconds = tokenExpirationSeconds + extExpiresIn;
+            const refreshOnSeconds = refreshIn && refreshIn > 0
+                ? reqTimestamp + refreshIn
+                : undefined;
+            // non AAD scenarios can have empty realm
+            cachedAccessToken = createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token, this.clientId, claimsTenantId || authority.tenant || "", responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj.base64Decode, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id);
+            // Set resource (to be used for MCP scenarios)
+            const resource = request.resource || null;
+            if (resource) {
+                cachedAccessToken.resource = resource;
+            }
+        }
+        // refreshToken
+        let cachedRefreshToken = null;
+        if (serverTokenResponse.refresh_token) {
+            let rtExpiresOn;
+            if (serverTokenResponse.refresh_token_expires_in) {
+                const rtExpiresIn = typeof serverTokenResponse.refresh_token_expires_in ===
+                    "string"
+                    ? parseInt(serverTokenResponse.refresh_token_expires_in, 10)
+                    : serverTokenResponse.refresh_token_expires_in;
+                rtExpiresOn = reqTimestamp + rtExpiresIn;
+                this.performanceClient?.addFields({ ntwkRtExpiresOnSeconds: rtExpiresOn }, request.correlationId);
+            }
+            cachedRefreshToken = createRefreshTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.refresh_token, this.clientId, serverTokenResponse.foci, userAssertionHash, rtExpiresOn);
+        }
+        // appMetadata
+        let cachedAppMetadata = null;
+        if (serverTokenResponse.foci) {
+            cachedAppMetadata = {
+                clientId: this.clientId,
+                environment: env,
+                familyId: serverTokenResponse.foci,
+            };
+        }
+        return {
+            account: cachedAccount,
+            idToken: cachedIdToken,
+            accessToken: cachedAccessToken,
+            refreshToken: cachedRefreshToken,
+            appMetadata: cachedAppMetadata,
+        };
+    }
+    /**
+     * Creates an @AuthenticationResult from @CacheRecord , @IdToken , and a boolean that states whether or not the result is from cache.
+     *
+     * Optionally takes a state string that is set as-is in the response.
+     *
+     * @param cacheRecord
+     * @param idTokenObj
+     * @param fromTokenCache
+     * @param stateString
+     */
+    static async generateAuthenticationResult(cryptoObj, authority, cacheRecord, fromTokenCache, request, performanceClient, idTokenClaims, requestState, serverTokenResponse, requestId) {
+        let accessToken = "";
+        let responseScopes = [];
+        let expiresOn = null;
+        let extExpiresOn;
+        let refreshOn;
+        let familyId = "";
+        if (cacheRecord.accessToken) {
+            /*
+             * if the request object has `popKid` property, `signPopToken` will be set to false and
+             * the token will be returned unsigned
+             */
+            if (cacheRecord.accessToken.tokenType ===
+                AuthenticationScheme.POP &&
+                !request.popKid) {
+                const popTokenGenerator = new PopTokenGenerator(cryptoObj, performanceClient);
+                const { secret, keyId } = cacheRecord.accessToken;
+                if (!keyId) {
+                    throw createClientAuthError(keyIdMissing);
+                }
+                accessToken = await popTokenGenerator.signPopToken(secret, keyId, request);
+            }
+            else {
+                accessToken = cacheRecord.accessToken.secret;
+            }
+            responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();
+            // Access token expiresOn cached in seconds, converting to Date for AuthenticationResult
+            expiresOn = toDateFromSeconds(cacheRecord.accessToken.expiresOn);
+            extExpiresOn = toDateFromSeconds(cacheRecord.accessToken.extendedExpiresOn);
+            if (cacheRecord.accessToken.refreshOn) {
+                refreshOn = toDateFromSeconds(cacheRecord.accessToken.refreshOn);
+            }
+        }
+        if (cacheRecord.appMetadata) {
+            familyId =
+                cacheRecord.appMetadata.familyId === THE_FAMILY_ID
+                    ? THE_FAMILY_ID
+                    : "";
+        }
+        const uid = idTokenClaims?.oid || idTokenClaims?.sub || "";
+        const tid = idTokenClaims?.tid || "";
+        // for hybrid + native bridge enablement, send back the native account Id
+        if (serverTokenResponse?.spa_accountid && !!cacheRecord.account) {
+            cacheRecord.account.nativeAccountId =
+                serverTokenResponse?.spa_accountid;
+        }
+        const accountInfo = cacheRecord.account
+            ? updateAccountTenantProfileData(getAccountInfo(cacheRecord.account), undefined, // tenantProfile optional
+            idTokenClaims, cacheRecord.idToken?.secret)
+            : null;
+        return {
+            authority: authority.canonicalAuthority,
+            uniqueId: uid,
+            tenantId: tid,
+            scopes: responseScopes,
+            account: accountInfo,
+            idToken: cacheRecord?.idToken?.secret || "",
+            idTokenClaims: idTokenClaims || {},
+            accessToken: accessToken,
+            fromCache: fromTokenCache,
+            expiresOn: expiresOn,
+            extExpiresOn: extExpiresOn,
+            refreshOn: refreshOn,
+            correlationId: request.correlationId,
+            requestId: requestId || "",
+            familyId: familyId,
+            tokenType: cacheRecord.accessToken?.tokenType || "",
+            state: requestState ? requestState.userRequestState : "",
+            cloudGraphHostName: cacheRecord.account?.cloudGraphHostName || "",
+            msGraphHost: cacheRecord.account?.msGraphHost || "",
+            code: serverTokenResponse?.spa_code,
+            fromPlatformBroker: false,
+        };
+    }
+}
+function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decode, correlationId, idTokenClaims, clientInfo, environment, claimsTenantId, authCodePayload, nativeAccountId, logger, performanceClient) {
+    logger?.verbose("09jz0t", correlationId);
+    /*
+     * Check if base account is already cached. Filter by homeAccountId (identifies
+     * the user's home identity) and environment (identifies the cloud) — the two
+     * tenant-agnostic properties that uniquely locate a base AccountEntity.
+     */
+    const accountEnvironment = environment || authority.getPreferredCache();
+    const matchedAccounts = cacheStorage.getAccountsFilteredBy({ homeAccountId, environment: accountEnvironment }, correlationId);
+    performanceClient?.addFields({ cacheMatchedAccounts: matchedAccounts.length }, correlationId);
+    if (matchedAccounts.length > 1) {
+        /*
+         * Base accounts are expected to be unique for a given homeAccountId in normal cache usage.
+         * If multiple matches exist, ignore the cache hit rather than arbitrarily choosing one.
+         */
+        logger?.warning("0x7ad1", correlationId);
+    }
+    const cachedAccount = matchedAccounts.length === 1 ? matchedAccounts[0] : null;
+    const baseAccount = cachedAccount ||
+        createAccountEntity({
+            homeAccountId,
+            idTokenClaims,
+            clientInfo,
+            environment,
+            cloudGraphHostName: authCodePayload?.cloud_graph_host_name,
+            msGraphHost: authCodePayload?.msgraph_host,
+            nativeAccountId: nativeAccountId,
+        }, authority, base64Decode);
+    const tenantProfiles = baseAccount.tenantProfiles || [];
+    const tenantId = claimsTenantId || baseAccount.realm;
+    if (tenantId &&
+        !tenantProfiles.find((tenantProfile) => {
+            return tenantProfile.tenantId === tenantId;
+        })) {
+        const newTenantProfile = buildTenantProfile(homeAccountId, baseAccount.localAccountId, tenantId, idTokenClaims);
+        tenantProfiles.push(newTenantProfile);
+    }
+    baseAccount.tenantProfiles = tenantProfiles;
+    return baseAccount;
+}
+
+export { ResponseHandler, buildAccountToCache };
+//# sourceMappingURL=ResponseHandler.mjs.map

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/dist-browser/response/ResponseHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseHandler.mjs","sources":["../../src/response/ResponseHandler.ts"],"sourcesContent":[null],"names":["Constants.NOT_AVAILABLE","Constants.HTTP_SERVER_ERROR_RANGE_START","Constants.HTTP_SERVER_ERROR_RANGE_END","Constants.HTTP_CLIENT_ERROR_RANGE_START","Constants.HTTP_CLIENT_ERROR_RANGE_END","ClientAuthErrorCodes.nonceMismatch","ClientAuthErrorCodes.authTimeNotFound","AccountEntityUtils.generateHomeAccountId","ProtocolUtils.parseRequestState","ClientAuthErrorCodes.invalidCacheEnvironment","CacheHelpers.createIdTokenEntity","CacheHelpers.createAccessTokenEntity","CacheHelpers.createRefreshTokenEntity","Constants.AuthenticationScheme","ClientAuthErrorCodes.keyIdMissing","TimeUtils.toDateFromSeconds","Constants.THE_FAMILY_ID","AccountEntityUtils.getAccountInfo","AccountEntityUtils.createAccountEntity"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;;;AAGG;AAoDH;;;AAGG;MACU,eAAe,CAAA;AAUxB,IAAA,WAAA,CACI,QAAgB,EAChB,YAA0B,EAC1B,SAAkB,EAClB,MAAc,EACd,iBAAqC,EACrC,iBAAiD,EACjD,iBAAsC,EAAA;AAEtC,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;AACzB,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;AACjC,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;AAC3B,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACrB,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;AAC3C,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;AAC3C,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;KAC9C;AAED;;;;;AAKG;AACH,IAAA,qBAAqB,CACjB,cAAgD,EAChD,aAAqB,EACrB,kBAA4B,EAAA;;QAG5B,IACI,cAAc,CAAC,KAAK;AACpB,YAAA,cAAc,CAAC,iBAAiB;YAChC,cAAc,CAAC,QAAQ,EACzB;AACE,YAAA,MAAM,SAAS,GAAG,CAAA,UAAA,EACd,cAAc,CAAC,WAAW,IAAIA,aAClC,CACI,cAAA,EAAA,cAAc,CAAC,SAAS,IAAIA,aAChC,mBACI,cAAc,CAAC,iBAAiB,IAAIA,aACxC,CAAA,mBAAA,EACI,cAAc,CAAC,cAAc,IAAIA,aACrC,CACI,aAAA,EAAA,cAAc,CAAC,QAAQ,IAAIA,aAC/B,EAAE,CAAC;AACH,YAAA,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM;AACpD,kBAAE,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;kBAC7B,SAAS,CAAC;YAChB,MAAM,WAAW,GAAG,IAAI,WAAW,CAC/B,cAAc,CAAC,KAAK,EACpB,SAAS,EACT,cAAc,CAAC,QAAQ,EACvB,aAAa,EACb,cAAc,CAAC,MAAM,CACxB,CAAC;;AAGF,YAAA,IACI,kBAAkB;AAClB,gBAAA,cAAc,CAAC,MAAM;AACrB,gBAAA,cAAc,CAAC,MAAM;AACjB,oBAAAC,6BAAuC;AAC3C,gBAAA,cAAc,CAAC,MAAM,IAAIC,2BAAqC,EAChE;gBACE,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAA6H,EAAA,aAAA,CAAA,CAAA;;gBAKjI,OAAO;;AAEV,aAAA;AAAM,iBAAA,IACH,kBAAkB;AAClB,gBAAA,cAAc,CAAC,MAAM;AACrB,gBAAA,cAAc,CAAC,MAAM;AACjB,oBAAAC,6BAAuC;AAC3C,gBAAA,cAAc,CAAC,MAAM,IAAIC,2BAAqC,EAChE;gBACE,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAsH,EAAA,aAAA,CAAA,CAAA;;gBAK1H,OAAO;AACV,aAAA;AAED,YAAA,IACI,0BAA0B,CACtB,cAAc,CAAC,KAAK,EACpB,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,QAAQ,CAC1B,EACH;AACE,gBAAA,MAAM,IAAI,4BAA4B,CAClC,cAAc,CAAC,KAAK,EACpB,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,QAAQ,EACvB,cAAc,CAAC,SAAS,IAAI,EAAE,EAC9B,cAAc,CAAC,QAAQ,IAAI,EAAE,EAC7B,cAAc,CAAC,cAAc,IAAI,EAAE,EACnC,cAAc,CAAC,MAAM,IAAI,EAAE,EAC3B,aAAa,CAChB,CAAC;AACL,aAAA;AAED,YAAA,MAAM,WAAW,CAAC;AACrB,SAAA;KACJ;AAED;;;;AAIG;IACH,MAAM,yBAAyB,CAC3B,mBAAqD,EACrD,SAAoB,EACpB,YAAoB,EACpB,OAAwB,EACxB,KAAa,EACb,eAA0C,EAC1C,iBAA0B,EAC1B,4BAAsC,EACtC,8BAAwC,EACxC,eAAwB,EAAA;;AAGxB,QAAA,IAAI,aAAsC,CAAC;QAC3C,IAAI,mBAAmB,CAAC,QAAQ,EAAE;AAC9B,YAAA,aAAa,GAAG,kBAAkB,CAC9B,mBAAmB,CAAC,QAAQ,IAAI,EAAE,EAClC,IAAI,CAAC,SAAS,CAAC,YAAY,CAC9B,CAAC;;AAGF,YAAA,IAAI,eAAe,IAAI,eAAe,CAAC,KAAK,EAAE;AAC1C,gBAAA,IAAI,aAAa,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,EAAE;AAC/C,oBAAA,MAAM,qBAAqB,CACvBC,aAAkC,CACrC,CAAC;AACL,iBAAA;AACJ,aAAA;;YAGD,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AACxC,gBAAA,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC;gBACzC,IAAI,CAAC,QAAQ,EAAE;AACX,oBAAA,MAAM,qBAAqB,CACvBC,gBAAqC,CACxC,CAAC;AACL,iBAAA;AAED,gBAAA,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACzC,aAAA;AACJ,SAAA;;AAGD,QAAA,IAAI,CAAC,qBAAqB,GAAGC,qBAAwC,CACjE,mBAAmB,CAAC,WAAW,IAAI,EAAE,EACrC,SAAS,CAAC,aAAa,EACvB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,aAAa,EACrB,aAAa,CAChB,CAAC;;AAGF,QAAA,IAAI,eAA+C,CAAC;QACpD,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE;AAC9C,YAAA,eAAe,GAAGC,iBAA+B,CAC7C,IAAI,CAAC,SAAS,CAAC,YAAY,EAC3B,eAAe,CAAC,KAAK,CACxB,CAAC;AACL,SAAA;;AAGD,QAAA,mBAAmB,CAAC,MAAM;YACtB,mBAAmB,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC;QAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CACxC,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,eAAe,CAClB,CAAC;AACF,QAAA,IAAI,YAAY,CAAC;QACjB,IAAI;AACA,YAAA,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB,EAAE;gBAClD,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAgD,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA;gBAGpD,YAAY,GAAG,IAAI,iBAAiB,CAChC,IAAI,CAAC,iBAAiB,EACtB,IAAI,CACP,CAAC;gBACF,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAChE,aAAA;AACD;;;;;AAKG;AACH,YAAA,IACI,4BAA4B;AAC5B,gBAAA,CAAC,8BAA8B;gBAC/B,WAAW,CAAC,OAAO,EACrB;AACE,gBAAA,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CACnD;AACI,oBAAA,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa;AAChD,oBAAA,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW;AAC/C,iBAAA,EACD,OAAO,CAAC,aAAa,CACxB,CAAC;AAEF,gBAAA,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;oBAC3B,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAqG,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA;AAGzG,oBAAA,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAC7B;AACI,wBAAA,aAAa,EAAE,IAAI;AACtB,qBAAA,EACD,OAAO,CAAC,aAAa,CACxB,CAAC;AACF,oBAAA,OAAO,MAAM,eAAe,CAAC,4BAA4B,CACrD,IAAI,CAAC,SAAS,EACd,SAAS,EACT,WAAW,EACX,KAAK,EACL,OAAO,EACP,IAAI,CAAC,iBAAiB,EACtB,aAAa,EACb,eAAe,EACf,SAAS,EACT,eAAe,CAClB,CAAC;AACL,iBAAA;AACJ,aAAA;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CACnC,WAAW,EACX,OAAO,CAAC,aAAa,EACrB,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAC3B,KAAK,EACL,OAAO,CAAC,YAAY,CACvB,CAAC;AACL,SAAA;AAAS,gBAAA;YACN,IACI,IAAI,CAAC,iBAAiB;AACtB,gBAAA,IAAI,CAAC,iBAAiB;AACtB,gBAAA,YAAY,EACd;gBACE,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAA+C,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA;gBAGnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;AAC/D,aAAA;AACJ,SAAA;AAED,QAAA,OAAO,eAAe,CAAC,4BAA4B,CAC/C,IAAI,CAAC,SAAS,EACd,SAAS,EACT,WAAW,EACX,KAAK,EACL,OAAO,EACP,IAAI,CAAC,iBAAiB,EACtB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,eAAe,CAClB,CAAC;KACL;AAED;;;;;AAKG;AACK,IAAA,mBAAmB,CACvB,mBAAqD,EACrD,SAAoB,EACpB,YAAoB,EACpB,OAAwB,EACxB,aAA2B,EAC3B,iBAA0B,EAC1B,eAA0C,EAAA;AAE1C,QAAA,MAAM,GAAG,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,EAAE;AACN,YAAA,MAAM,qBAAqB,CACvBC,uBAA4C,CAC/C,CAAC;AACL,SAAA;AAED,QAAA,MAAM,cAAc,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;;AAGnE,QAAA,IAAI,aAAwC,CAAC;AAC7C,QAAA,IAAI,aAAwC,CAAC;AAC7C,QAAA,IAAI,mBAAmB,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,EAAE;YACjD,aAAa,GAAGC,mBAAgC,CAC5C,IAAI,CAAC,qBAAqB,EAC1B,GAAG,EACH,mBAAmB,CAAC,QAAQ,EAC5B,IAAI,CAAC,QAAQ,EACb,cAAc,IAAI,EAAE,CACvB,CAAC;AAEF,YAAA,aAAa,GAAG,mBAAmB,CAC/B,IAAI,CAAC,YAAY,EACjB,SAAS,EACT,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,SAAS,CAAC,YAAY,EAC3B,OAAO,CAAC,aAAa,EACrB,aAAa,EACb,mBAAmB,CAAC,WAAW,EAC/B,GAAG,EACH,cAAc,EACd,eAAe,EACf,SAAS;AACT,YAAA,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,CACzB,CAAC;AACL,SAAA;;QAGD,IAAI,iBAAiB,GAA6B,IAAI,CAAC;QACvD,IAAI,mBAAmB,CAAC,YAAY,EAAE;;AAElC,YAAA,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK;kBAC1C,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC;kBAC9C,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAEzC;;;AAGG;YACH,MAAM,SAAS,GACX,CAAC,OAAO,mBAAmB,CAAC,UAAU,KAAK,QAAQ;kBAC7C,QAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,CAAC;AAC9C,kBAAE,mBAAmB,CAAC,UAAU,KAAK,CAAC,CAAC;YAC/C,MAAM,YAAY,GACd,CAAC,OAAO,mBAAmB,CAAC,cAAc,KAAK,QAAQ;kBACjD,QAAQ,CAAC,mBAAmB,CAAC,cAAc,EAAE,EAAE,CAAC;AAClD,kBAAE,mBAAmB,CAAC,cAAc,KAAK,CAAC,CAAC;YACnD,MAAM,SAAS,GACX,CAAC,OAAO,mBAAmB,CAAC,UAAU,KAAK,QAAQ;kBAC7C,QAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,CAAC;AAC9C,kBAAE,mBAAmB,CAAC,UAAU,KAAK,SAAS,CAAC;AACvD,YAAA,MAAM,sBAAsB,GAAG,YAAY,GAAG,SAAS,CAAC;AACxD,YAAA,MAAM,8BAA8B,GAChC,sBAAsB,GAAG,YAAY,CAAC;AAC1C,YAAA,MAAM,gBAAgB,GAClB,SAAS,IAAI,SAAS,GAAG,CAAC;kBACpB,YAAY,GAAG,SAAS;kBACxB,SAAS,CAAC;;YAGpB,iBAAiB,GAAGC,uBAAoC,CACpD,IAAI,CAAC,qBAAqB,EAC1B,GAAG,EACH,mBAAmB,CAAC,YAAY,EAChC,IAAI,CAAC,QAAQ,EACb,cAAc,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,EACxC,cAAc,CAAC,WAAW,EAAE,EAC5B,sBAAsB,EACtB,8BAA8B,EAC9B,IAAI,CAAC,SAAS,CAAC,YAAY,EAC3B,gBAAgB,EAChB,mBAAmB,CAAC,UAAU,EAC9B,iBAAiB,EACjB,mBAAmB,CAAC,MAAM,CAC7B,CAAC;;AAEF,YAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;AAC1C,YAAA,IAAI,QAAQ,EAAE;AACV,gBAAA,iBAAiB,CAAC,QAAQ,GAAG,QAAQ,CAAC;AACzC,aAAA;AACJ,SAAA;;QAGD,IAAI,kBAAkB,GAA8B,IAAI,CAAC;QACzD,IAAI,mBAAmB,CAAC,aAAa,EAAE;AACnC,YAAA,IAAI,WAA+B,CAAC;YACpC,IAAI,mBAAmB,CAAC,wBAAwB,EAAE;AAC9C,gBAAA,MAAM,WAAW,GACb,OAAO,mBAAmB,CAAC,wBAAwB;oBACnD,QAAQ;sBACF,QAAQ,CACJ,mBAAmB,CAAC,wBAAwB,EAC5C,EAAE,CACL;AACH,sBAAE,mBAAmB,CAAC,wBAAwB,CAAC;AACvD,gBAAA,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;AAEzC,gBAAA,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAC7B,EAAE,sBAAsB,EAAE,WAAW,EAAE,EACvC,OAAO,CAAC,aAAa,CACxB,CAAC;AACL,aAAA;YACD,kBAAkB,GAAGC,wBAAqC,CACtD,IAAI,CAAC,qBAAqB,EAC1B,GAAG,EACH,mBAAmB,CAAC,aAAa,EACjC,IAAI,CAAC,QAAQ,EACb,mBAAmB,CAAC,IAAI,EACxB,iBAAiB,EACjB,WAAW,CACd,CAAC;AACL,SAAA;;QAGD,IAAI,iBAAiB,GAA6B,IAAI,CAAC;QACvD,IAAI,mBAAmB,CAAC,IAAI,EAAE;AAC1B,YAAA,iBAAiB,GAAG;gBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;AACvB,gBAAA,WAAW,EAAE,GAAG;gBAChB,QAAQ,EAAE,mBAAmB,CAAC,IAAI;aACrC,CAAC;AACL,SAAA;QAED,OAAO;AACH,YAAA,OAAO,EAAE,aAAa;AACtB,YAAA,OAAO,EAAE,aAAa;AACtB,YAAA,WAAW,EAAE,iBAAiB;AAC9B,YAAA,YAAY,EAAE,kBAAkB;AAChC,YAAA,WAAW,EAAE,iBAAiB;SACjC,CAAC;KACL;AAED;;;;;;;;;AASG;IACH,aAAa,4BAA4B,CACrC,SAAkB,EAClB,SAAoB,EACpB,WAAwB,EACxB,cAAuB,EACvB,OAAwB,EACxB,iBAAqC,EACrC,aAA2B,EAC3B,YAAiC,EACjC,mBAAsD,EACtD,SAAkB,EAAA;QAElB,IAAI,WAAW,GAAW,EAAE,CAAC;QAC7B,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,SAAS,GAAgB,IAAI,CAAC;AAClC,QAAA,IAAI,YAA8B,CAAC;AACnC,QAAA,IAAI,SAA2B,CAAC;QAChC,IAAI,QAAQ,GAAW,EAAE,CAAC;QAE1B,IAAI,WAAW,CAAC,WAAW,EAAE;AACzB;;;AAGG;AACH,YAAA,IACI,WAAW,CAAC,WAAW,CAAC,SAAS;gBAC7BC,oBAA8B,CAAC,GAAG;gBACtC,CAAC,OAAO,CAAC,MAAM,EACjB;gBACE,MAAM,iBAAiB,GACnB,IAAI,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBACxD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC;gBAElD,IAAI,CAAC,KAAK,EAAE;AACR,oBAAA,MAAM,qBAAqB,CACvBC,YAAiC,CACpC,CAAC;AACL,iBAAA;AAED,gBAAA,WAAW,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAC9C,MAAM,EACN,KAAK,EACL,OAAO,CACV,CAAC;AACL,aAAA;AAAM,iBAAA;AACH,gBAAA,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC;AAChD,aAAA;AACD,YAAA,cAAc,GAAG,QAAQ,CAAC,UAAU,CAChC,WAAW,CAAC,WAAW,CAAC,MAAM,CACjC,CAAC,OAAO,EAAE,CAAC;;YAEZ,SAAS,GAAGC,iBAA2B,CACnC,WAAW,CAAC,WAAW,CAAC,SAAS,CACpC,CAAC;YACF,YAAY,GAAGA,iBAA2B,CACtC,WAAW,CAAC,WAAW,CAAC,iBAAiB,CAC5C,CAAC;AACF,YAAA,IAAI,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE;gBACnC,SAAS,GAAGA,iBAA2B,CACnC,WAAW,CAAC,WAAW,CAAC,SAAS,CACpC,CAAC;AACL,aAAA;AACJ,SAAA;QAED,IAAI,WAAW,CAAC,WAAW,EAAE;YACzB,QAAQ;AACJ,gBAAA,WAAW,CAAC,WAAW,CAAC,QAAQ,KAAKC,aAAuB;sBACtDA,aAAuB;sBACvB,EAAE,CAAC;AAChB,SAAA;QACD,MAAM,GAAG,GAAG,aAAa,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC;AAC3D,QAAA,MAAM,GAAG,GAAG,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC;;QAGrC,IAAI,mBAAmB,EAAE,aAAa,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE;YAC7D,WAAW,CAAC,OAAO,CAAC,eAAe;gBAC/B,mBAAmB,EAAE,aAAa,CAAC;AAC1C,SAAA;AAED,QAAA,MAAM,WAAW,GAAuB,WAAW,CAAC,OAAO;AACvD,cAAE,8BAA8B,CAC1BC,cAAiC,CAAC,WAAW,CAAC,OAAO,CAAC,EACtD,SAAS;AACT,YAAA,aAAa,EACb,WAAW,CAAC,OAAO,EAAE,MAAM,CAC9B;cACD,IAAI,CAAC;QAEX,OAAO;YACH,SAAS,EAAE,SAAS,CAAC,kBAAkB;AACvC,YAAA,QAAQ,EAAE,GAAG;AACb,YAAA,QAAQ,EAAE,GAAG;AACb,YAAA,MAAM,EAAE,cAAc;AACtB,YAAA,OAAO,EAAE,WAAW;AACpB,YAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE;YAC3C,aAAa,EAAE,aAAa,IAAI,EAAE;AAClC,YAAA,WAAW,EAAE,WAAW;AACxB,YAAA,SAAS,EAAE,cAAc;AACzB,YAAA,SAAS,EAAE,SAAS;AACpB,YAAA,YAAY,EAAE,YAAY;AAC1B,YAAA,SAAS,EAAE,SAAS;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,SAAS,IAAI,EAAE;AAC1B,YAAA,QAAQ,EAAE,QAAQ;AAClB,YAAA,SAAS,EAAE,WAAW,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE;YACnD,KAAK,EAAE,YAAY,GAAG,YAAY,CAAC,gBAAgB,GAAG,EAAE;AACxD,YAAA,kBAAkB,EAAE,WAAW,CAAC,OAAO,EAAE,kBAAkB,IAAI,EAAE;AACjE,YAAA,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE;YACnD,IAAI,EAAE,mBAAmB,EAAE,QAAQ;AACnC,YAAA,kBAAkB,EAAE,KAAK;SAC5B,CAAC;KACL;AACJ,CAAA;AAEK,SAAU,mBAAmB,CAC/B,YAA0B,EAC1B,SAAoB,EACpB,aAAqB,EACrB,YAAuC,EACvC,aAAqB,EACrB,aAA2B,EAC3B,UAAmB,EACnB,WAAoB,EACpB,cAA8B,EAC9B,eAA0C,EAC1C,eAAwB,EACxB,MAAe,EACf,iBAAsC,EAAA;AAEtC,IAAA,MAAM,EAAE,OAAO,CAAC,yBAAyB;AAEzC;;;;AAIG;IACH,MAAM,kBAAkB,GAAG,WAAW,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;AACxE,IAAA,MAAM,eAAe,GAAG,YAAY,CAAC,qBAAqB,CACtD,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAClD,aAAa,CAChB,CAAC;AACF,IAAA,iBAAiB,EAAE,SAAS,CACxB,EAAE,oBAAoB,EAAE,eAAe,CAAC,MAAM,EAAE,EAChD,aAAa,CAChB,CAAC;AAEF,IAAA,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE;AAC5B;;;AAGG;AACH,QAAA,MAAM,EAAE,OAAO,CACX;AAGP,KAAA;AAED,IAAA,MAAM,aAAa,GACf,eAAe,CAAC,MAAM,KAAK,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAE7D,MAAM,WAAW,GACb,aAAa;QACbC,mBAAsC,CAClC;YACI,aAAa;YACb,aAAa;YACb,UAAU;YACV,WAAW;YACX,kBAAkB,EAAE,eAAe,EAAE,qBAAqB;YAC1D,WAAW,EAAE,eAAe,EAAE,YAAY;AAC1C,YAAA,eAAe,EAAE,eAAe;AACnC,SAAA,EACD,SAAS,EACT,YAAY,CACf,CAAC;AAEN,IAAA,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,IAAI,EAAE,CAAC;AACxD,IAAA,MAAM,QAAQ,GAAG,cAAc,IAAI,WAAW,CAAC,KAAK,CAAC;AACrD,IAAA,IACI,QAAQ;AACR,QAAA,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,aAAa,KAAI;AACnC,YAAA,OAAO,aAAa,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC/C,SAAC,CAAC,EACJ;AACE,QAAA,MAAM,gBAAgB,GAAG,kBAAkB,CACvC,aAAa,EACb,WAAW,CAAC,cAAc,EAC1B,QAAQ,EACR,aAAa,CAChB,CAAC;AACF,QAAA,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACzC,KAAA;AACD,IAAA,WAAW,CAAC,cAAc,GAAG,cAAc,CAAC;AAE5C,IAAA,OAAO,WAAW,CAAC;AACvB;;;;"}