raffel 0.1.2

package/dist/http/oauth2.js

@@ -0,0 +1,503 @@
+/**
+ * OAuth2 Authentication Middleware
+ *
+ * Provides OAuth2 authorization code flow support.
+ *
+ * @example
+ * import { oauth2, type OAuth2Provider } from 'raffel/http'
+ *
+ * const githubProvider: OAuth2Provider = {
+ *   name: 'github',
+ *   authorizationUrl: 'https://github.com/login/oauth/authorize',
+ *   tokenUrl: 'https://github.com/login/oauth/access_token',
+ *   clientId: process.env.GITHUB_CLIENT_ID!,
+ *   clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+ *   scopes: ['read:user', 'user:email'],
+ * }
+ *
+ * app.use('/auth/*', oauth2({
+ *   providers: [githubProvider],
+ *   callbackPath: '/auth/callback',
+ *   loginPath: '/auth/login',
+ *   sessionKey: 'oauth2',
+ *   onSuccess: async (tokens, provider, c) => {
+ *     // Fetch user info, create session, etc.
+ *     return c.redirect('/dashboard')
+ *   }
+ * }))
+ */
+// ─────────────────────────────────────────────────────────────────────────────
+// OAuth2 Middleware
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Create OAuth2 authentication middleware
+ *
+ * Handles the OAuth2 authorization code flow:
+ * 1. Login route redirects to provider's authorization URL
+ * 2. Callback route exchanges code for tokens
+ * 3. Calls onSuccess/onError based on result
+ *
+ * @param options - OAuth2 configuration
+ * @returns Middleware function
+ *
+ * @example
+ * app.use('/auth/*', oauth2({
+ *   providers: [{
+ *     name: 'google',
+ *     authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',
+ *     tokenUrl: 'https://oauth2.googleapis.com/token',
+ *     clientId: process.env.GOOGLE_CLIENT_ID!,
+ *     clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+ *     scopes: ['openid', 'profile', 'email'],
+ *   }],
+ *   onSuccess: async (tokens, provider, c) => {
+ *     const userInfo = await fetchUserInfo(tokens.accessToken)
+ *     const session = c.get('session')
+ *     session.set('user', userInfo)
+ *     return c.redirect('/dashboard')
+ *   }
+ * }))
+ */
+export function oauth2(options) {
+    const { providers, pathPrefix = '/auth', loginPath = '/login/:provider', callbackPath = '/callback/:provider', logoutPath = '/logout', sessionKey = 'oauth2', onSuccess, onError = defaultErrorHandler, getCallbackUrl, generateState = defaultGenerateState, } = options;
+    // Build provider map for quick lookup
+    const providerMap = new Map();
+    for (const provider of providers) {
+        providerMap.set(provider.name.toLowerCase(), provider);
+    }
+    // Build full paths
+    const fullLoginPath = normalizePath(`${pathPrefix}${loginPath}`);
+    const fullCallbackPath = normalizePath(`${pathPrefix}${callbackPath}`);
+    const fullLogoutPath = normalizePath(`${pathPrefix}${logoutPath}`);
+    return async (c, next) => {
+        const url = new URL(c.req.url);
+        const pathname = url.pathname;
+        // Check if this is a login request
+        const loginMatch = matchPath(pathname, fullLoginPath);
+        if (loginMatch) {
+            const providerName = loginMatch.params.provider?.toLowerCase();
+            const provider = providerName ? providerMap.get(providerName) : providers[0];
+            if (!provider) {
+                return onError({ code: 'PROVIDER_NOT_FOUND', message: `Provider not found: ${providerName}` }, null, c);
+            }
+            return handleLogin(provider, c, generateState, getCallbackUrl, fullCallbackPath, sessionKey);
+        }
+        // Check if this is a callback request
+        const callbackMatch = matchPath(pathname, fullCallbackPath);
+        if (callbackMatch) {
+            const providerName = callbackMatch.params.provider?.toLowerCase();
+            const provider = providerName ? providerMap.get(providerName) : providers[0];
+            if (!provider) {
+                return onError({ code: 'PROVIDER_NOT_FOUND', message: `Provider not found: ${providerName}` }, null, c);
+            }
+            return handleCallback(provider, c, sessionKey, getCallbackUrl, fullCallbackPath, onSuccess, onError);
+        }
+        // Check if this is a logout request
+        if (pathname === fullLogoutPath) {
+            return handleLogout(c, sessionKey);
+        }
+        // Not an OAuth route, continue
+        await next();
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Route Handlers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Handle login - redirect to provider
+ */
+async function handleLogin(provider, c, generateState, getCallbackUrl, callbackPath, sessionKey) {
+    // Generate state
+    const state = await generateState();
+    // Generate PKCE if enabled
+    let pkce;
+    if (provider.usePkce) {
+        pkce = await generatePkceChallenge();
+    }
+    // Store state (and PKCE verifier) in session or response
+    // For simplicity, encode in state parameter (signed)
+    const stateData = {
+        state,
+        provider: provider.name,
+        ...(pkce ? { codeVerifier: pkce.codeVerifier } : {}),
+    };
+    // Build callback URL
+    const callbackUrl = getCallbackUrl
+        ? getCallbackUrl(provider, c)
+        : buildCallbackUrl(c, callbackPath, provider.name);
+    // Build authorization URL
+    const authUrl = new URL(provider.authorizationUrl);
+    authUrl.searchParams.set('client_id', provider.clientId);
+    authUrl.searchParams.set('redirect_uri', callbackUrl);
+    authUrl.searchParams.set('response_type', 'code');
+    authUrl.searchParams.set('state', encodeStateData(stateData));
+    if (provider.scopes && provider.scopes.length > 0) {
+        const separator = provider.scopeSeparator ?? ' ';
+        authUrl.searchParams.set('scope', provider.scopes.join(separator));
+    }
+    if (pkce) {
+        authUrl.searchParams.set('code_challenge', pkce.codeChallenge);
+        authUrl.searchParams.set('code_challenge_method', pkce.codeChallengeMethod);
+    }
+    // Add any additional params
+    if (provider.authParams) {
+        for (const [key, value] of Object.entries(provider.authParams)) {
+            authUrl.searchParams.set(key, value);
+        }
+    }
+    // Redirect to provider
+    return c.redirect(authUrl.toString());
+}
+/**
+ * Handle callback - exchange code for tokens
+ */
+async function handleCallback(provider, c, sessionKey, getCallbackUrl, callbackPath, onSuccess, onError) {
+    const url = new URL(c.req.url);
+    // Check for error response
+    const error = url.searchParams.get('error');
+    if (error) {
+        const errorDescription = url.searchParams.get('error_description') || 'Authorization failed';
+        return onError({ code: error.toUpperCase(), message: errorDescription }, provider, c);
+    }
+    // Get authorization code
+    const code = url.searchParams.get('code');
+    if (!code) {
+        return onError({ code: 'MISSING_CODE', message: 'Authorization code not found' }, provider, c);
+    }
+    // Get and validate state
+    const stateParam = url.searchParams.get('state');
+    if (!stateParam) {
+        return onError({ code: 'MISSING_STATE', message: 'State parameter not found' }, provider, c);
+    }
+    const stateData = decodeStateData(stateParam);
+    if (!stateData || stateData.provider !== provider.name) {
+        return onError({ code: 'INVALID_STATE', message: 'Invalid state parameter' }, provider, c);
+    }
+    // Build callback URL for token exchange
+    const callbackUrl = getCallbackUrl
+        ? getCallbackUrl(provider, c)
+        : buildCallbackUrl(c, callbackPath, provider.name);
+    // Exchange code for tokens
+    try {
+        const tokenParams = new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: provider.clientId,
+            client_secret: provider.clientSecret,
+            code,
+            redirect_uri: callbackUrl,
+        });
+        // Add PKCE verifier if present
+        if (stateData.codeVerifier) {
+            tokenParams.set('code_verifier', stateData.codeVerifier);
+        }
+        const tokenResponse = await fetch(provider.tokenUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: tokenParams.toString(),
+        });
+        if (!tokenResponse.ok) {
+            const errorBody = await tokenResponse.text();
+            return onError({
+                code: 'TOKEN_EXCHANGE_FAILED',
+                message: `Token exchange failed: ${tokenResponse.status}`,
+                cause: new Error(errorBody),
+            }, provider, c);
+        }
+        const tokenData = (await tokenResponse.json());
+        // Normalize token response
+        const tokens = {
+            accessToken: tokenData.access_token || '',
+            tokenType: tokenData.token_type || 'Bearer',
+            refreshToken: tokenData.refresh_token,
+            expiresIn: tokenData.expires_in,
+            scope: tokenData.scope,
+            idToken: tokenData.id_token,
+            raw: tokenData,
+        };
+        if (!tokens.accessToken) {
+            return onError({ code: 'NO_ACCESS_TOKEN', message: 'No access token in response' }, provider, c);
+        }
+        // Call success handler
+        return onSuccess(tokens, provider, c);
+    }
+    catch (err) {
+        return onError({
+            code: 'TOKEN_EXCHANGE_ERROR',
+            message: 'Token exchange error',
+            cause: err,
+        }, provider, c);
+    }
+}
+/**
+ * Handle logout
+ */
+function handleLogout(c, sessionKey) {
+    // Clear OAuth session data
+    // Note: Actual session clearing depends on session middleware
+    return new Response(JSON.stringify({ success: true, message: 'Logged out' }), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helper Functions
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Default error handler
+ */
+function defaultErrorHandler(error, provider, c) {
+    return new Response(JSON.stringify({
+        success: false,
+        error: {
+            code: error.code,
+            message: error.message,
+            provider: provider?.name,
+        },
+    }), {
+        status: 400,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+/**
+ * Generate random state string
+ */
+async function defaultGenerateState() {
+    const bytes = new Uint8Array(32);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Generate PKCE challenge
+ */
+async function generatePkceChallenge() {
+    // Generate code verifier (43-128 characters)
+    const verifierBytes = new Uint8Array(32);
+    crypto.getRandomValues(verifierBytes);
+    const codeVerifier = base64UrlEncode(verifierBytes);
+    // Generate code challenge (SHA-256 hash of verifier)
+    const encoder = new TextEncoder();
+    const data = encoder.encode(codeVerifier);
+    const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+    const codeChallenge = base64UrlEncode(new Uint8Array(hashBuffer));
+    return {
+        codeVerifier,
+        codeChallenge,
+        codeChallengeMethod: 'S256',
+    };
+}
+/**
+ * Base64 URL encode
+ */
+function base64UrlEncode(bytes) {
+    const base64 = btoa(String.fromCharCode(...bytes));
+    return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * Encode state data to string
+ */
+function encodeStateData(data) {
+    return btoa(JSON.stringify(data));
+}
+/**
+ * Decode state data from string
+ */
+function decodeStateData(state) {
+    try {
+        return JSON.parse(atob(state));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Normalize path (remove double slashes)
+ */
+function normalizePath(path) {
+    return path.replace(/\/+/g, '/').replace(/\/$/, '');
+}
+/**
+ * Build callback URL from request
+ */
+function buildCallbackUrl(c, callbackPath, providerName) {
+    const url = new URL(c.req.url);
+    const path = callbackPath.replace(':provider', providerName);
+    return `${url.protocol}//${url.host}${path}`;
+}
+/**
+ * Simple path matching with :param support
+ */
+function matchPath(pathname, pattern) {
+    const patternParts = pattern.split('/');
+    const pathParts = pathname.split('/');
+    if (patternParts.length !== pathParts.length) {
+        return null;
+    }
+    const params = {};
+    for (let i = 0; i < patternParts.length; i++) {
+        const patternPart = patternParts[i];
+        const pathPart = pathParts[i];
+        if (patternPart.startsWith(':')) {
+            // Parameter capture
+            const paramName = patternPart.slice(1);
+            params[paramName] = pathPart;
+        }
+        else if (patternPart !== pathPart) {
+            // Literal mismatch
+            return null;
+        }
+    }
+    return { params };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Token Refresh Helper
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Refresh OAuth2 tokens
+ *
+ * @param provider - OAuth2 provider configuration
+ * @param refreshToken - Refresh token
+ * @returns New tokens
+ *
+ * @example
+ * const newTokens = await refreshOAuth2Token(provider, tokens.refreshToken!)
+ */
+export async function refreshOAuth2Token(provider, refreshToken) {
+    const tokenParams = new URLSearchParams({
+        grant_type: 'refresh_token',
+        client_id: provider.clientId,
+        client_secret: provider.clientSecret,
+        refresh_token: refreshToken,
+    });
+    const response = await fetch(provider.tokenUrl, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Accept: 'application/json',
+        },
+        body: tokenParams.toString(),
+    });
+    if (!response.ok) {
+        const errorBody = await response.text();
+        throw new Error(`Token refresh failed: ${response.status} - ${errorBody}`);
+    }
+    const tokenData = (await response.json());
+    return {
+        accessToken: tokenData.access_token || '',
+        tokenType: tokenData.token_type || 'Bearer',
+        refreshToken: tokenData.refresh_token || refreshToken,
+        expiresIn: tokenData.expires_in,
+        scope: tokenData.scope,
+        idToken: tokenData.id_token,
+        raw: tokenData,
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// User Info Helper
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Fetch user info from provider
+ *
+ * @param provider - OAuth2 provider with userInfoUrl
+ * @param accessToken - Access token
+ * @returns User info object
+ *
+ * @example
+ * const userInfo = await fetchUserInfo(provider, tokens.accessToken)
+ */
+export async function fetchOAuth2UserInfo(provider, accessToken) {
+    if (!provider.userInfoUrl) {
+        throw new Error(`Provider ${provider.name} does not have userInfoUrl configured`);
+    }
+    const response = await fetch(provider.userInfoUrl, {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            Accept: 'application/json',
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch user info: ${response.status}`);
+    }
+    return (await response.json());
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Pre-configured Providers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Create GitHub OAuth2 provider
+ */
+export function createGitHubProvider(config) {
+    return {
+        name: 'github',
+        authorizationUrl: 'https://github.com/login/oauth/authorize',
+        tokenUrl: 'https://github.com/login/oauth/access_token',
+        userInfoUrl: 'https://api.github.com/user',
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        scopes: config.scopes ?? ['read:user', 'user:email'],
+    };
+}
+/**
+ * Create Google OAuth2 provider
+ */
+export function createGoogleProvider(config) {
+    return {
+        name: 'google',
+        authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',
+        tokenUrl: 'https://oauth2.googleapis.com/token',
+        userInfoUrl: 'https://www.googleapis.com/oauth2/v3/userinfo',
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        scopes: config.scopes ?? ['openid', 'profile', 'email'],
+        authParams: {
+            access_type: 'offline',
+            prompt: 'consent',
+        },
+    };
+}
+/**
+ * Create Discord OAuth2 provider
+ */
+export function createDiscordProvider(config) {
+    return {
+        name: 'discord',
+        authorizationUrl: 'https://discord.com/api/oauth2/authorize',
+        tokenUrl: 'https://discord.com/api/oauth2/token',
+        userInfoUrl: 'https://discord.com/api/users/@me',
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        scopes: config.scopes ?? ['identify', 'email'],
+    };
+}
+/**
+ * Create Microsoft OAuth2 provider
+ */
+export function createMicrosoftProvider(config) {
+    const tenant = config.tenant ?? 'common';
+    return {
+        name: 'microsoft',
+        authorizationUrl: `https://login.microsoftonline.com/${tenant}/oauth2/v2.0/authorize`,
+        tokenUrl: `https://login.microsoftonline.com/${tenant}/oauth2/v2.0/token`,
+        userInfoUrl: 'https://graph.microsoft.com/v1.0/me',
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        scopes: config.scopes ?? ['openid', 'profile', 'email', 'User.Read'],
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Exports
+// ─────────────────────────────────────────────────────────────────────────────
+export default {
+    oauth2,
+    refreshOAuth2Token,
+    fetchOAuth2UserInfo,
+    createGitHubProvider,
+    createGoogleProvider,
+    createDiscordProvider,
+    createMicrosoftProvider,
+};
+//# sourceMappingURL=oauth2.js.map

package/dist/http/oauth2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../src/http/oauth2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAmNH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,MAAM,CACpB,OAAyB;IAEzB,MAAM,EACJ,SAAS,EACT,UAAU,GAAG,OAAO,EACpB,SAAS,GAAG,kBAAkB,EAC9B,YAAY,GAAG,qBAAqB,EACpC,UAAU,GAAG,SAAS,EACtB,UAAU,GAAG,QAAQ,EACrB,SAAS,EACT,OAAO,GAAG,mBAAmB,EAC7B,cAAc,EACd,aAAa,GAAG,oBAAoB,GACrC,GAAG,OAAO,CAAA;IAEX,sCAAsC;IACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAA;IACrD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAA;IACxD,CAAC;IAED,mBAAmB;IACnB,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC,CAAA;IAChE,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,UAAU,GAAG,YAAY,EAAE,CAAC,CAAA;IACtE,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC,CAAA;IAElE,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;QAE7B,mCAAmC;QACnC,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAA;YAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;YAE5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,YAAY,EAAE,EAAE,EAC9E,IAAI,EACJ,CAAC,CACF,CAAA;YACH,CAAC;YAED,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAA;QAC9F,CAAC;QAED,sCAAsC;QACtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;QAC3D,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAA;YACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;YAE5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,YAAY,EAAE,EAAE,EAC9E,IAAI,EACJ,CAAC,CACF,CAAA;YACH,CAAC;YAED,OAAO,cAAc,CAAC,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;QACtG,CAAC;QAED,oCAAoC;QACpC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YAChC,OAAO,YAAY,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QACpC,CAAC;QAED,+BAA+B;QAC/B,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;GAEG;AACH,KAAK,UAAU,WAAW,CACxB,QAAwB,EACxB,CAA0B,EAC1B,aAA6C,EAC7C,cAA8F,EAC9F,YAAoB,EACpB,UAAkB;IAElB,iBAAiB;IACjB,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAA;IAEnC,2BAA2B;IAC3B,IAAI,IAA+B,CAAA;IACnC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAA;IACtC,CAAC;IAED,yDAAyD;IACzD,qDAAqD;IACrD,MAAM,SAAS,GAAG;QAChB,KAAK;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAA;IAED,qBAAqB;IACrB,MAAM,WAAW,GAAG,cAAc;QAChC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;IAEpD,0BAA0B;IAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;IACrD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACjD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;IAE7D,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,IAAI,GAAG,CAAA;QAChD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QAC9D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC7E,CAAC;IAED,4BAA4B;IAC5B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;AACvC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAwB,EACxB,CAA0B,EAC1B,UAAkB,EAClB,cAA8F,EAC9F,YAAoB,EACpB,SAAwC,EACxC,OAAiD;IAEjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAE9B,2BAA2B;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,sBAAsB,CAAA;QAC5F,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EACxD,QAAQ,EACR,CAAC,CACF,CAAA;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,EAAE,EACjE,QAAQ,EACR,CAAC,CACF,CAAA;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAC/D,QAAQ,EACR,CAAC,CACF,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAC7D,QAAQ,EACR,CAAC,CACF,CAAA;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,WAAW,GAAG,cAAc;QAChC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;IAEpD,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC;YACtC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;YACpC,IAAI;YACJ,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAA;QAEF,+BAA+B;QAC/B,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;YAC3B,WAAW,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,YAAsB,CAAC,CAAA;QACpE,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;SAC7B,CAAC,CAAA;QAEF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAA;YAC5C,OAAO,OAAO,CACZ;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,0BAA0B,aAAa,CAAC,MAAM,EAAE;gBACzD,KAAK,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC;aAC5B,EACD,QAAQ,EACR,CAAC,CACF,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAA4B,CAAA;QAEzE,2BAA2B;QAC3B,MAAM,MAAM,GAAiB;YAC3B,WAAW,EAAG,SAAS,CAAC,YAAuB,IAAI,EAAE;YACrD,SAAS,EAAG,SAAS,CAAC,UAAqB,IAAI,QAAQ;YACvD,YAAY,EAAE,SAAS,CAAC,aAAmC;YAC3D,SAAS,EAAE,SAAS,CAAC,UAAgC;YACrD,KAAK,EAAE,SAAS,CAAC,KAA2B;YAC5C,OAAO,EAAE,SAAS,CAAC,QAA8B;YACjD,GAAG,EAAE,SAAS;SACf,CAAA;QAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,6BAA6B,EAAE,EACnE,QAAQ,EACR,CAAC,CACF,CAAA;QACH,CAAC;QAED,uBAAuB;QACvB,OAAO,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,OAAO,CACZ;YACE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,GAAY;SACpB,EACD,QAAQ,EACR,CAAC,CACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CACnB,CAA0B,EAC1B,UAAkB;IAElB,2BAA2B;IAC3B,8DAA8D;IAC9D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EACxD;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CACF,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,mBAAmB,CAC1B,KAAkB,EAClB,QAA+B,EAC/B,CAA0B;IAE1B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,QAAQ,EAAE,IAAI;SACzB;KACF,CAAC,EACF;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB;IAClC,6CAA6C;IAC7C,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IACxC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAA;IACrC,MAAM,YAAY,GAAG,eAAe,CAAC,aAAa,CAAC,CAAA;IAEnD,qDAAqD;IACrD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACzC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;IAEjE,OAAO;QACL,YAAY;QACZ,aAAa;QACb,mBAAmB,EAAE,MAAM;KAC5B,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAiB;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAA;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC1E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAA6B;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AACnC,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,CAA0B,EAC1B,YAAoB,EACpB,YAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC5D,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAChB,QAAgB,EAChB,OAAe;IAEf,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAErC,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAA;IAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;QAE7B,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,oBAAoB;YACpB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAA;QAC9B,CAAC;aAAM,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,mBAAmB;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAwB,EACxB,YAAoB;IAEpB,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC;QACtC,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;QACpC,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;KAC7B,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;IAEpE,OAAO;QACL,WAAW,EAAG,SAAS,CAAC,YAAuB,IAAI,EAAE;QACrD,SAAS,EAAG,SAAS,CAAC,UAAqB,IAAI,QAAQ;QACvD,YAAY,EAAG,SAAS,CAAC,aAAwB,IAAI,YAAY;QACjE,SAAS,EAAE,SAAS,CAAC,UAAgC;QACrD,KAAK,EAAE,SAAS,CAAC,KAA2B;QAC5C,OAAO,EAAE,SAAS,CAAC,QAA8B;QACjD,GAAG,EAAE,SAAS;KACf,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAwB,EACxB,WAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,uCAAuC,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;QACjD,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;AAC3D,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAIpC;IACC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,gBAAgB,EAAE,0CAA0C;QAC5D,QAAQ,EAAE,6CAA6C;QACvD,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC;KACrD,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAIpC;IACC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,gBAAgB,EAAE,8CAA8C;QAChE,QAAQ,EAAE,qCAAqC;QAC/C,WAAW,EAAE,+CAA+C;QAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;QACvD,UAAU,EAAE;YACV,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,SAAS;SAClB;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAIrC;IACC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,gBAAgB,EAAE,0CAA0C;QAC5D,QAAQ,EAAE,sCAAsC;QAChD,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;KAC/C,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAKvC;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAA;IACxC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,gBAAgB,EAAE,qCAAqC,MAAM,wBAAwB;QACrF,QAAQ,EAAE,qCAAqC,MAAM,oBAAoB;QACzE,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC;KACrE,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,eAAe;IACb,MAAM;IACN,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;CACxB,CAAA"}