ribaunt 0.2.4 → 0.2.6

package/README.md

@@ -15,7 +15,7 @@ Ribaunt is a stateless proof-of-work CAPTCHA library for Node.js and modern brow
 - Stateless challenge tokens signed with your `RIBAUNT_SECRET`
 - Browser widget for plain HTML apps
 - React and Next.js-friendly wrapper via `ribaunt/widget-react`
-- Server helpers for creating, solving, and verifying PoW challenges
+- Server helpers for creating, solving, and verifying PoW challenges — `sha256` default with opt-in `argon2id` memory-hard
 - Programmable risk engine (`assess()`) with caller-supplied signals, pluggable scorers, and `allow`/`challenge`/`block` policy
 - Default process-local replay protection with support for remote replay stores
 - CSS custom properties for theming
@@ -146,7 +146,7 @@ const challenges = await createChallenge(5, 4, 120);
 
 | Parameter | Default | Description |
 | --- | --- | --- |
-| `difficulty` | `5` | Number of leading zeros required in the SHA-256 hash. Higher values increase solve time. |
+| `difficulty` | `5` | Number of leading zeros required in the hash. Higher values increase solve time (SHA-256 `1..64`, Argon2id `1..8`). |
 | `amount` | `4` | Number of challenges to create. |
 | `ttlSeconds` | `30` | Challenge token lifetime in seconds. |
 
@@ -174,24 +174,27 @@ const challenges = await createChallenge({
 For machine-to-machine checks, benchmark the Node client and send the same calibration shape:
 
 ```ts
-import { calibrateNode } from 'ribaunt';
+import { calibrateNode } from 'ribaunt';             // SHA-256
+import { calibrateArgonNode } from 'ribaunt';        // Argon2id (memory-hard, ~6ms/hash)
 
 const calibration = calibrateNode();
+const argonCalibration = await calibrateArgonNode();
 ```
 
 Browser calibration is also available from the widget entry point:
 
 ```ts
-import { calibrateBrowser } from 'ribaunt/widget';
+import { calibrateBrowser, calibrateArgonBrowser } from 'ribaunt/widget';
 
 const calibration = await calibrateBrowser();
+const argonCalibration = await calibrateArgonBrowser();
 ```
 
-Both environments expose `calibrateClient` as a cross-environment alias:
+Both environments expose `calibrateClient` / `calibrateArgonClient` as cross-environment aliases:
 
 ```ts
-import { calibrateClient } from 'ribaunt';       // Node
-import { calibrateClient } from 'ribaunt/widget'; // browser
+import { calibrateClient, calibrateArgonClient } from 'ribaunt';       // Node
+import { calibrateClient, calibrateArgonClient } from 'ribaunt/widget'; // browser
 ```
 
 ### `selectWorkload(options)`
@@ -207,7 +210,16 @@ const workload = selectWorkload({
   minDifficulty: 3,
   maxDifficulty: 6,
 });
- // { difficulty: 3, amount: 5, estimatedAttempts: 20480 }
+ // { difficulty: 3, amount: 5, estimatedAttempts: 20480, algorithm: 'sha256' }
+
+// Argon2id — profile abstracts m/t/p, workload stays device-aware:
+const argonWorkload = selectWorkload({
+  algorithm: 'argon2id',
+  argonProfile: 'mobile', // 'mobile' | 'standard' → {m:8192,t:1,p:1} (high gated)
+  calibration: await calibrateArgonNode(),
+  targetDurationMs: 750,
+});
+// { difficulty: 1, amount: 5, estimatedAttempts: 80, algorithm:'argon2id', argon:{m:8192,t:1,p:1} }
 ```
 
 ### `assess(options)` — Risk Engine
@@ -322,15 +334,45 @@ const result = await verifySolution(tokens, solutions, { onEvent });
 
 `verify-failure` events carry the same `reason` values as `VerifySolutionResult` (`invalid-token`, `expired-token`, `invalid-solution`, `context-mismatch`, `replay-detected`, `replay-store-unavailable`, `configuration-error`). Add aggregation over Windows, StatsD, or Prometheus yourself — Ribaunt only emits raw events.
 
-### `solveChallenge(token, options?)`
+### `solveChallenge(token, options?)` / `solveChallengeAsync(token, options?)`
 
-Solves challenges synchronously. This is mainly useful for tests and debugging.
+`solveChallenge` solves SHA-256 challenges synchronously. This is mainly useful for tests and debugging. For `argon2id` (or mixed batches) use the async variant — it auto-detects `payload.alg` per token:
 
 ```ts
-const solutions = solveChallenge(challenges, {
+const solutions = solveChallenge(challenges, { // sha256 only, returns undefined for argon
   maxDurationMs: 2000,
   maxIterations: 500_000,
 });
+const solutions2 = await solveChallengeAsync(challenges); // sha256 and argon2id
+```
+
+Browser entry points expose the same auto-detecting `solveChallenge` / `solveSingleChallenge` via `ribaunt/widget` (Web Crypto for SHA, `hash-wasm` `argon2id` for Argon) and `calibrateArgonBrowser`. Worker mode auto-selects `backend: 'argon2id'` for Argon tokens.
+
+### Proof-of-Work Algorithm — `argon2id` opt-in
+
+Default remains `sha256` (microsecond hashes, cheap verify). Opt in to memory-hard Argon2id for higher attacker cost:
+
+```ts
+const challenges = await createChallenge({
+  algorithm: 'argon2id',
+  argonProfile: 'mobile', // 'mobile' | 'standard' → {m:8192,t:1,p:1,hashLen:32} (HARD_MAX m=32768 t=3)
+  difficulty: 'auto',
+  calibration: await calibrateArgonNode(), // must match algorithm (sha cal ≠ argon cal)
+  targetDurationMs: 750,
+  minDifficulty: 1, maxDifficulty: 2, // argon caps at 8, defaults 1..2 (sha 3..6)
+});
+ // tokens carry {alg:'argon2id',m,t,p,hashLen} and verify auto-dispatches
+await verifySolution(tokens, await solveChallengeAsync(tokens));
+```
+
+`HARD_MAX` (`m=32768 t=3 p=1`) is library-enforced. `argonProfile` abstracts `m/t/p` so developers never pass raw memory params — the adaptive engine keeps it device-aware via `riskScore` + `calibration`. `assess({workload:{algorithm:'argon2id', argonProfile:'mobile'}})` threads the profile through. Demo: `demo/argon.html` (`pnpm demo` → `http://localhost:3000/argon.html`, `Network` shows real `/api/challenge/argon` when server is running, otherwise mock fallback).
+
+**Performance (measured via `bench/memory-hard-server.ts` `hash-wasm@4.12.0`):** Argon mobile `~6ms/hash` Node, `~12ms` browser; `difficulty:1` ≈ `16` avg attempts → `~400ms` browser, `difficulty:2` → `256` avg → `~3s` (× `amount`). Use `difficulty:'auto'` with `calibrateArgonBrowser` for `~750ms` target. `high` profile is gated (Stage D).
+
+```ts
+// Risk-aware Argon
+const a = await assess({ signals:{requestVelocity:120}, workload:{algorithm:'argon2id', argonProfile:'mobile'} });
+if (a.action==='challenge') await createChallenge({...a.workload, algorithm:'argon2id'});
 ```
 
 ## Widget Configuration

package/dist/cjs/index.d.ts

@@ -2,6 +2,20 @@ import { DEFAULT_RISK_THRESHOLDS } from './risk.js';
 import type { AssessOptions, RiskAssessment } from './risk.js';
 export type { AssessOptions, AssessWorkloadOptions, RiskAssessment, RiskScorer, RiskSignals, RiskThresholds } from './risk.js';
 export { DEFAULT_RISK_THRESHOLDS };
+export type PowAlgorithm = 'sha256' | 'argon2id';
+export type ArgonProfile = 'mobile' | 'standard';
+export declare const HARD_MAX: {
+    readonly m: number;
+    readonly t: 3;
+    readonly p: 1;
+    readonly hashLen: 32;
+};
+export declare const ARGON_PROFILES: Record<ArgonProfile, {
+    m: number;
+    t: number;
+    p: number;
+    hashLen: number;
+}>;
 export type ChallengeToken = string;
 export interface ChallengeSolution {
     nonce: string;
@@ -21,11 +35,20 @@ export interface AdaptiveWorkloadOptions extends WorkloadBounds {
     riskScore?: number;
     targetDurationMs?: number;
     calibration?: ClientCalibration;
+    algorithm?: PowAlgorithm;
+    argonProfile?: ArgonProfile;
 }
 export interface Workload {
     difficulty: number;
     amount: number;
     estimatedAttempts: number;
+    algorithm: PowAlgorithm;
+    argon?: {
+        m: number;
+        t: number;
+        p: number;
+        hashLen: number;
+    };
 }
 export interface ChallengeOptions {
     difficulty?: number | 'auto';
@@ -42,6 +65,8 @@ export interface ChallengeOptions {
     maxAmount?: number;
     rateLimiter?: RateLimiter;
     onEvent?: (event: RibauntEvent) => void;
+    algorithm?: PowAlgorithm;
+    argonProfile?: ArgonProfile;
 }
 export interface ReplayStore {
     consume(jti: string, expiresAt: number): Promise<boolean>;
@@ -75,6 +100,7 @@ export type RibauntEvent = {
     type: 'challenge-issued';
     difficulty: number;
     amount: number;
+    algorithm?: PowAlgorithm;
 } | {
     type: 'verify-success';
 } | {
@@ -101,6 +127,8 @@ export declare class LocalReplayStore implements ReplayStore {
 }
 /**
  * Selects bounded proof-of-work using a server-owned risk floor and untrusted timing calibration.
+ * For `algorithm:'argon2id'` difficulty is capped to the argon max (default 2) and the returned
+ * workload carries `argon:{m,t,p}` derived from `argonProfile` so the device can comfortably solve it.
  */
 export declare function selectWorkload(options?: AdaptiveWorkloadOptions): Workload;
 /**
@@ -122,11 +150,86 @@ export declare function selectWorkload(options?: AdaptiveWorkloadOptions): Workl
  *     -> if challenge, delegate to existing selectWorkload() with riskScore
  */
 export declare function assess(options: AssessOptions): Promise<RiskAssessment>;
+/**
+ * Measures SHA-256 hashing speed on Node.js to calibrate adaptive workload selection.
+ * Runs a small benchmark to estimate device performance.
+ *
+ * @param iterations - Number of SHA-256 hashes to run (default: 128)
+ * @returns Calibration object with iterations and measured duration
+ */
 export declare function calibrateNode(iterations?: number): ClientCalibration;
+/**
+ * Alias for calibrateNode - measures device hashing speed for adaptive workload.
+ */
 export declare const calibrateClient: typeof calibrateNode;
+/**
+ * Calibrate Argon2id on Node — measures device speed for the memory-hard algorithm.
+ * Uses a smaller iteration default (16) because each hash is ~6ms (mobile) vs microseconds for SHA.
+ * The returned shape is identical to `calibrateNode()` so `selectWorkload({calibration, algorithm:'argon2id'})` can consume it.
+ * Keep SHA `calibrateNode()` for `algorithm:'sha256'` — mismatched calibration will over/under-estimate.
+ */
+export declare function calibrateArgonNode(iterations?: number): Promise<ClientCalibration>;
+/**
+ * Alias for calibrateArgonNode - measures Argon2id performance for adaptive workload.
+ */
+export declare const calibrateArgonClient: typeof calibrateArgonNode;
+/**
+ * Resets Argon2id module cache for testing purposes.
+ * Should not be called in production code.
+ */
+export declare function __resetArgonForTesting(): void;
+/**
+ * Creates cryptographically-signed challenge tokens for proof-of-work verification.
+ *
+ * Supports two call signatures:
+ * 1. `createChallenge(difficulty, amount, ttlSeconds)` - simple numeric params
+ * 2. `createChallenge(options)` - full options object with adaptive workload, rate limiting, etc.
+ *
+ * When `difficulty: 'auto'` is used, workload is selected based on risk score and calibration.
+ * Supports both SHA-256 and Argon2id algorithms (via `algorithm` option).
+ *
+ * @param difficultyOrOptions - Difficulty level (1-64) or options object
+ * @param amount - Number of challenges to create (default: 4)
+ * @param ttlSeconds - Token expiration in seconds (default: 30)
+ * @returns Array of signed challenge tokens
+ */
 export declare function createChallenge(difficulty?: number, amount?: number, ttlSeconds?: number): Promise<ChallengeToken[]>;
 export declare function createChallenge(options: ChallengeOptions): Promise<ChallengeToken[]>;
+/**
+ * Solves SHA-256 proof-of-work challenge(s) synchronously on Node.js.
+ * Does not support Argon2id challenges (use solveChallengeAsync for those).
+ *
+ * @param token - Single challenge token or array of tokens
+ * @param options - Optional constraints (maxIterations, maxDurationMs)
+ * @returns Solution(s) with nonce and hash, or undefined if unsolvable
+ */
 export declare function solveChallenge(token: ChallengeToken, options?: SolveChallengeOptions): ChallengeSolution | undefined;
 export declare function solveChallenge(token: ChallengeToken[], options?: SolveChallengeOptions): ChallengeSolution[] | undefined;
+/**
+ * Solves proof-of-work challenge(s) asynchronously on Node.js.
+ * Supports both SHA-256 and Argon2id challenges.
+ *
+ * @param token - Single challenge token or array of tokens
+ * @param options - Optional constraints (maxIterations, maxDurationMs)
+ * @returns Promise resolving to solution(s) with nonce and hash, or undefined if unsolvable
+ */
+export declare function solveChallengeAsync(token: ChallengeToken, options?: SolveChallengeOptions): Promise<ChallengeSolution | undefined>;
+export declare function solveChallengeAsync(token: ChallengeToken[], options?: SolveChallengeOptions): Promise<ChallengeSolution[] | undefined>;
+/**
+ * Verifies that a proof-of-work solution correctly solves the challenge token(s).
+ *
+ * Validation steps:
+ * 1. JWT signature and expiration check
+ * 2. Hash verification (recomputed hash matches difficulty)
+ * 3. Context binding check (if context was provided)
+ * 4. Replay prevention (via ReplayStore if configured)
+ *
+ * Supports batch verification with atomic replay detection.
+ *
+ * @param token - Challenge token(s) to verify
+ * @param nonce - Solution nonce(s) or ChallengeSolution object(s)
+ * @param options - Verification options (replay prevention, context, rate limiting)
+ * @returns Result indicating validity or specific failure reason
+ */
 export declare function verifySolution(token: ChallengeToken | ChallengeToken[], nonce: number | string | Array<number | string> | ChallengeSolution | ChallengeSolution[], options?: VerifySolutionOptions): Promise<VerifySolutionResult>;
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,EAIxB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EACV,aAAa,EAEb,cAAc,EAIf,MAAM,WAAW,CAAC;AAGnB,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC/H,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAUnC,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,QAAQ,CAAC,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,WAAW,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,kBAAkB;gBAEnB,OAAO,SAAwB;CAI5C;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IAC7C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;CACzC;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,0BAA0B,GAC1B,qBAAqB,CAAC;AAE1B,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,UAAU,CAA6B;IAEzC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAatE,OAAO,CAAC,OAAO;CAMhB;AAkGD;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,GAAE,uBAA4B,GAAG,QAAQ,CAuB9E;AAyDD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CA2D5E;AAED,wBAAgB,aAAa,CAAC,UAAU,SAAM,GAAG,iBAAiB,CAejE;AAED,eAAO,MAAM,eAAe,sBAAgB,CAAC;AAsD7C,wBAAsB,eAAe,CACnC,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAC7B,wBAAsB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AA4E5F,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,iBAAiB,GAAG,SAAS,CAAC;AACtH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;AA4E1H,wBAAsB,cAAc,CAClC,KAAK,EAAE,cAAc,GAAG,cAAc,EAAE,EACxC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,iBAAiB,GAAG,iBAAiB,EAAE,EACzF,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA0F/B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,EAIxB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EACV,aAAa,EAEb,cAAc,EAIf,MAAM,WAAW,CAAC;AAGnB,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC/H,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAEnC,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEjD,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAGrG,CAAC;AAeF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,QAAQ,CAAC,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,WAAW,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,kBAAkB;gBAEnB,OAAO,SAAwB;CAI5C;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IAC7C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;CACzC;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,0BAA0B,GAC1B,qBAAqB,CAAC;AAE1B,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,YAAY,CAAA;CAAE,GAC1F;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,UAAU,CAA6B;IAEzC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIzD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAatE,OAAO,CAAC,OAAO;CAMhB;AAiMD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,GAAE,uBAA4B,GAAG,QAAQ,CA4C9E;AA4ED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CA2D5E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,UAAU,SAAM,GAAG,iBAAiB,CAejE;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,sBAAgB,CAAC;AA2B7C;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,UAAU,SAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAepF;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,2BAAqB,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAI7C;AAuED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,eAAe,CACnC,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAC7B,wBAAsB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAsH5F;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,iBAAiB,GAAG,SAAS,CAAC;AACtH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;AA4D1H;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;AAC1I,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,EAAE,GAAG,SAAS,CAAC,CAAC;AA4E9I;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,cAAc,GAAG,cAAc,EAAE,EACxC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,iBAAiB,GAAG,iBAAiB,EAAE,EACzF,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA0G/B"}