samlify 2.11.0 → 2.13.0

package/build/src/binding-post.js

@@ -1,9 +1,11 @@
 "use strict";
 /**
-* @file binding-post.ts
-* @author tngan
-* @desc Binding-level API, declare the functions using POST binding
-*/
+ * @file binding-post.ts
+ * @author tngan
+ * @desc Binding-level API for SAML HTTP-POST. Builds base64 login/logout
+ * request and response payloads that callers embed in an auto-submitting
+ * HTML form.
+ */
 var __assign = (this && this.__assign) || function () {
     __assign = Object.assign || function(t) {
         for (var s, i = 1, n = arguments.length; i < n; i++) {
@@ -93,81 +95,115 @@ var libsaml_1 = __importDefault(require("./libsaml"));
 var utility_1 = __importStar(require("./utility"));
 var binding = urn_1.wording.binding;
 /**
-* @desc Generate a base64 encoded login request
-* @param  {string} referenceTagXPath           reference uri
-* @param  {object} entity                      object includes both idp and sp
-* @param  {function} customTagReplacement     used when developers have their own login response template
-*/
-function base64LoginRequest(referenceTagXPath, entity, customTagReplacement) {
+ * Generate a base64-encoded AuthnRequest for the HTTP-POST binding.
+ *
+ * @param referenceTagXPath XPath used when signing the request
+ * @param entity `{ idp, sp }` handles
+ * @param customTagReplacement optional custom template transformer
+ * @param forceAuthn per-request `ForceAuthn` flag (saml-core §3.4.1)
+ * @param assertionConsumerServiceIndex per-request ACS index (saml-core §3.4.1).
+ *   Mutually exclusive with `AssertionConsumerServiceURL` / `ProtocolBinding`;
+ *   when supplied, both of those attributes are dropped from the rendered XML.
+ * @returns id / base64-XML pair
+ */
+function base64LoginRequest(referenceTagXPath, entity, customTagReplacement, forceAuthn, assertionConsumerServiceIndex) {
+    var _a, _b;
     var metadata = { idp: entity.idp.entityMeta, sp: entity.sp.entityMeta };
     var spSetting = entity.sp.entitySetting;
     var id = '';
-    if (metadata && metadata.idp && metadata.sp) {
-        var base = metadata.idp.getSingleSignOnService(binding.post);
-        var rawSamlRequest = void 0;
-        if (spSetting.loginRequestTemplate && customTagReplacement) {
-            var info = customTagReplacement(spSetting.loginRequestTemplate.context);
-            id = (0, utility_1.get)(info, 'id', null);
-            rawSamlRequest = (0, utility_1.get)(info, 'context', null);
-        }
-        else {
-            var nameIDFormat = spSetting.nameIDFormat;
-            var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-            id = spSetting.generateID();
-            rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginRequestTemplate.context, {
-                ID: id,
-                Destination: base,
-                Issuer: metadata.sp.getEntityID(),
-                IssueInstant: new Date().toISOString(),
-                AssertionConsumerServiceURL: metadata.sp.getAssertionConsumerService(binding.post),
-                EntityID: metadata.sp.getEntityID(),
-                AllowCreate: spSetting.allowCreate,
-                NameIDFormat: selectedNameIDFormat
-            });
-        }
-        if (metadata.idp.isWantAuthnRequestsSigned()) {
-            var privateKey = spSetting.privateKey, privateKeyPass = spSetting.privateKeyPass, signatureAlgorithm = spSetting.requestSignatureAlgorithm, transformationAlgorithms = spSetting.transformationAlgorithms;
-            return {
-                id: id,
-                context: libsaml_1.default.constructSAMLSignature({
-                    referenceTagXPath: referenceTagXPath,
-                    privateKey: privateKey,
-                    privateKeyPass: privateKeyPass,
-                    signatureAlgorithm: signatureAlgorithm,
-                    transformationAlgorithms: transformationAlgorithms,
-                    rawSamlMessage: rawSamlRequest,
-                    signingCert: metadata.sp.getX509Certificate('signing'),
-                    signatureConfig: spSetting.signatureConfig || {
-                        prefix: 'ds',
-                        location: { reference: "/*[local-name(.)='AuthnRequest']/*[local-name(.)='Issuer']", action: 'after' },
-                    }
-                }),
-            };
-        }
-        // No need to embeded XML signature
+    /* v8 ignore start */
+    if (!metadata.idp || !metadata.sp) {
+        throw new Error('ERR_GENERATE_POST_LOGIN_REQUEST_MISSING_METADATA');
+    }
+    /* v8 ignore stop */
+    var base = metadata.idp.getSingleSignOnService(binding.post);
+    var rawSamlRequest;
+    if (customTagReplacement) {
+        // saml-bindings §3.5 — the AuthnRequest template is informative, not
+        // normative. Honour the callback regardless of whether the caller
+        // supplied a custom template (closes #549). Pass the user-supplied
+        // template when present; otherwise the library default.
+        var templateContext = (_b = (_a = spSetting.loginRequestTemplate) === null || _a === void 0 ? void 0 : _a.context) !== null && _b !== void 0 ? _b : libsaml_1.default.defaultLoginRequestTemplate.context;
+        var info = customTagReplacement(templateContext);
+        id = (0, utility_1.get)(info, 'id');
+        rawSamlRequest = (0, utility_1.get)(info, 'context');
+    }
+    else {
+        var nameIDFormat = spSetting.nameIDFormat;
+        var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
+        id = spSetting.generateID();
+        // saml-core §3.4.1 — `AssertionConsumerServiceIndex` is mutually
+        // exclusive with `AssertionConsumerServiceURL` / `ProtocolBinding`.
+        // When the caller supplies the index we set the URL+ProtocolBinding
+        // tags to undefined so `replaceTagsByValue` drops both attributes
+        // from the rendered XML (closes #437).
+        var useAcsIndex = assertionConsumerServiceIndex !== undefined;
+        var tags = {
+            ID: id,
+            Destination: base,
+            Issuer: metadata.sp.getEntityID(),
+            IssueInstant: new Date().toISOString(),
+            ProtocolBinding: useAcsIndex
+                ? undefined
+                : 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
+            AssertionConsumerServiceURL: useAcsIndex
+                ? undefined
+                : metadata.sp.getAssertionConsumerService(binding.post),
+            AssertionConsumerServiceIndex: assertionConsumerServiceIndex,
+            EntityID: metadata.sp.getEntityID(),
+            AllowCreate: spSetting.allowCreate,
+            NameIDFormat: selectedNameIDFormat,
+            // saml-core §3.4.1 — `replaceTagsByValue` drops the attribute when
+            // `forceAuthn` is undefined, matching `use="optional"`.
+            ForceAuthn: forceAuthn,
+        };
+        rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginRequestTemplate.context, tags);
+    }
+    if (metadata.idp.isWantAuthnRequestsSigned()) {
+        var privateKey = spSetting.privateKey, privateKeyPass = spSetting.privateKeyPass, signatureAlgorithm = spSetting.requestSignatureAlgorithm, transformationAlgorithms = spSetting.transformationAlgorithms;
         return {
             id: id,
-            context: utility_1.default.base64Encode(rawSamlRequest),
+            context: libsaml_1.default.constructSAMLSignature({
+                referenceTagXPath: referenceTagXPath,
+                privateKey: privateKey,
+                privateKeyPass: privateKeyPass,
+                signatureAlgorithm: signatureAlgorithm,
+                transformationAlgorithms: transformationAlgorithms,
+                rawSamlMessage: rawSamlRequest,
+                signingCert: metadata.sp.getX509Certificate('signing'),
+                signatureConfig: spSetting.signatureConfig || {
+                    prefix: 'ds',
+                    location: { reference: "/*[local-name(.)='AuthnRequest']/*[local-name(.)='Issuer']", action: 'after' },
+                },
+            }),
         };
     }
-    throw new Error('ERR_GENERATE_POST_LOGIN_REQUEST_MISSING_METADATA');
+    return {
+        id: id,
+        context: utility_1.default.base64Encode(rawSamlRequest),
+    };
 }
 /**
-* @desc Generate a base64 encoded login response
-* @param  {object} requestInfo                 corresponding request, used to obtain the id
-* @param  {object} entity                      object includes both idp and sp
-* @param  {object} user                        current logged user (e.g. req.user)
-* @param  {function} customTagReplacement     used when developers have their own login response template
-* @param  {boolean}  encryptThenSign           whether or not to encrypt then sign first (if signing). Defaults to sign-then-encrypt
-*/
+ * Generate a base64-encoded login response for the HTTP-POST binding.
+ * Supports the sign-then-encrypt and encrypt-then-sign pipelines based on
+ * `encryptThenSign`.
+ *
+ * @param requestInfo parsed login request used to link `InResponseTo`
+ * @param entity `{ idp, sp }` handles
+ * @param user authenticated user
+ * @param customTagReplacement optional custom template transformer
+ * @param encryptThenSign when true, encrypt the assertion first then sign
+ * @returns id / base64-XML pair
+ */
 function base64LoginResponse() {
     return __awaiter(this, arguments, void 0, function (requestInfo, entity, user, customTagReplacement, encryptThenSign) {
-        var idpSetting, spSetting, id, metadata, nameIDFormat, selectedNameIDFormat, base, rawSamlResponse, nowTime, spEntityID, fiveMinutesLaterTime, fiveMinutesLater, now, acl, tvalue, template, privateKey, privateKeyPass, signatureAlgorithm, config, context;
+        var idpSetting, spSetting, id, metadata, nameIDFormat, selectedNameIDFormat, base, rawSamlResponse, nowTime, spEntityID, fiveMinutesLaterTime, fiveMinutesLater, now, acl, tvalue, templateContext, template, baseTemplate, privateKey, privateKeyPass, signatureAlgorithm, config, context;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j;
         if (requestInfo === void 0) { requestInfo = {}; }
         if (user === void 0) { user = {}; }
         if (encryptThenSign === void 0) { encryptThenSign = false; }
-        return __generator(this, function (_a) {
-            switch (_a.label) {
+        return __generator(this, function (_k) {
+            switch (_k.label) {
                 case 0:
                     idpSetting = entity.idp.entitySetting;
                     spSetting = entity.sp.entitySetting;
@@ -178,9 +214,11 @@ function base64LoginResponse() {
                     };
                     nameIDFormat = idpSetting.nameIDFormat;
                     selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
-                    if (!(metadata && metadata.idp && metadata.sp)) return [3 /*break*/, 3];
+                    /* v8 ignore start */
+                    if (!metadata.idp || !metadata.sp) {
+                        throw new Error('ERR_GENERATE_POST_LOGIN_RESPONSE_MISSING_METADATA');
+                    }
                     base = metadata.sp.getAssertionConsumerService(binding.post);
-                    rawSamlResponse = void 0;
                     nowTime = new Date();
                     spEntityID = metadata.sp.getEntityID();
                     fiveMinutesLaterTime = new Date(nowTime.getTime());
@@ -199,7 +237,6 @@ function base64LoginResponse() {
                         IssueInstant: now,
                         AssertionConsumerServiceURL: acl,
                         StatusCode: urn_1.StatusCode.Success,
-                        // can be customized
                         ConditionsNotBefore: now,
                         ConditionsNotOnOrAfter: fiveMinutesLater,
                         SubjectConfirmationDataNotOnOrAfter: fiveMinutesLater,
@@ -209,15 +246,17 @@ function base64LoginResponse() {
                         AuthnStatement: '',
                         AttributeStatement: '',
                     };
-                    if (idpSetting.loginResponseTemplate && customTagReplacement) {
-                        template = customTagReplacement(idpSetting.loginResponseTemplate.context);
-                        rawSamlResponse = (0, utility_1.get)(template, 'context', null);
+                    if (customTagReplacement) {
+                        templateContext = (_e = (_b = (_a = idpSetting.loginResponseTemplate) === null || _a === void 0 ? void 0 : _a.context) !== null && _b !== void 0 ? _b : (_d = (_c = idpSetting.tagPrefixedDefaults) === null || _c === void 0 ? void 0 : _c.loginResponseTemplate) === null || _d === void 0 ? void 0 : _d.context) !== null && _e !== void 0 ? _e : libsaml_1.default.defaultLoginResponseTemplate.context;
+                        template = customTagReplacement(templateContext);
+                        rawSamlResponse = (0, utility_1.get)(template, 'context');
                     }
                     else {
-                        if (requestInfo !== null) {
+                        if (requestInfo !== null && ((_f = requestInfo.extract) === null || _f === void 0 ? void 0 : _f.request)) {
                             tvalue.InResponseTo = requestInfo.extract.request.id;
                         }
-                        rawSamlResponse = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLoginResponseTemplate.context, tvalue);
+                        baseTemplate = (_j = (_h = (_g = idpSetting.tagPrefixedDefaults) === null || _g === void 0 ? void 0 : _g.loginResponseTemplate) === null || _h === void 0 ? void 0 : _h.context) !== null && _j !== void 0 ? _j : libsaml_1.default.defaultLoginResponseTemplate.context;
+                        rawSamlResponse = libsaml_1.default.replaceTagsByValue(baseTemplate, tvalue);
                     }
                     privateKey = idpSetting.privateKey, privateKeyPass = idpSetting.privateKeyPass, signatureAlgorithm = idpSetting.requestSignatureAlgorithm;
                     config = {
@@ -227,18 +266,14 @@ function base64LoginResponse() {
                         signingCert: metadata.idp.getX509Certificate('signing'),
                         isBase64Output: false,
                     };
-                    // step: sign assertion ? -> encrypted ? -> sign message ?
+                    // Order: sign assertion (if SP wants) → encrypt (if IdP wants) → sign message (if needed).
                     if (metadata.sp.isWantAssertionsSigned()) {
-                        // console.debug('sp wants assertion signed');
                         rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), { rawSamlMessage: rawSamlResponse, transformationAlgorithms: spSetting.transformationAlgorithms, referenceTagXPath: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']", signatureConfig: {
                                 prefix: 'ds',
                                 location: { reference: "/*[local-name(.)='Response']/*[local-name(.)='Assertion']/*[local-name(.)='Issuer']", action: 'after' },
                             } }));
                     }
-                    // console.debug('after assertion signed', rawSamlResponse);
-                    // SAML response must be signed sign message first, then encrypt
                     if (!encryptThenSign && (spSetting.wantMessageSigned || !metadata.sp.isWantAssertionsSigned())) {
-                        // console.debug('sign then encrypt and sign entire message');
                         rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), { rawSamlMessage: rawSamlResponse, isMessageSigned: true, transformationAlgorithms: spSetting.transformationAlgorithms, signatureConfig: spSetting.signatureConfig || {
                                 prefix: 'ds',
                                 location: { reference: "/*[local-name(.)='Response']/*[local-name(.)='Issuer']", action: 'after' },
@@ -247,17 +282,15 @@ function base64LoginResponse() {
                     if (!idpSetting.isAssertionEncrypted) return [3 /*break*/, 2];
                     return [4 /*yield*/, libsaml_1.default.encryptAssertion(entity.idp, entity.sp, rawSamlResponse)];
                 case 1:
-                    context = _a.sent();
+                    context = _k.sent();
                     if (encryptThenSign) {
-                        //need to decode it
                         rawSamlResponse = utility_1.default.base64Decode(context);
                     }
                     else {
                         return [2 /*return*/, Promise.resolve({ id: id, context: context })];
                     }
-                    _a.label = 2;
+                    _k.label = 2;
                 case 2:
-                    //sign after encrypting
                     if (encryptThenSign && (spSetting.wantMessageSigned || !metadata.sp.isWantAssertionsSigned())) {
                         rawSamlResponse = libsaml_1.default.constructSAMLSignature(__assign(__assign({}, config), { rawSamlMessage: rawSamlResponse, isMessageSigned: true, transformationAlgorithms: spSetting.transformationAlgorithms, signatureConfig: spSetting.signatureConfig || {
                                 prefix: 'ds',
@@ -268,134 +301,155 @@ function base64LoginResponse() {
                             id: id,
                             context: utility_1.default.base64Encode(rawSamlResponse),
                         })];
-                case 3: throw new Error('ERR_GENERATE_POST_LOGIN_RESPONSE_MISSING_METADATA');
             }
         });
     });
 }
 /**
-* @desc Generate a base64 encoded logout request
-* @param  {object} user                         current logged user (e.g. req.user)
-* @param  {string} referenceTagXPath            reference uri
-* @param  {object} entity                       object includes both idp and sp
-* @param  {function} customTagReplacement      used when developers have their own login response template
-* @return {string} base64 encoded request
-*/
+ * Generate a base64-encoded LogoutRequest for the HTTP-POST binding.
+ *
+ * @param user currently authenticated user
+ * @param referenceTagXPath XPath used when signing the request
+ * @param entity `{ init, target }` handles
+ * @param customTagReplacement optional custom template transformer
+ * @returns id / base64-XML pair
+ */
 function base64LogoutRequest(user, referenceTagXPath, entity, customTagReplacement) {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
     var metadata = { init: entity.init.entityMeta, target: entity.target.entityMeta };
     var initSetting = entity.init.entitySetting;
     var nameIDFormat = initSetting.nameIDFormat;
     var selectedNameIDFormat = Array.isArray(nameIDFormat) ? nameIDFormat[0] : nameIDFormat;
     var id = '';
-    if (metadata && metadata.init && metadata.target) {
-        var rawSamlRequest = void 0;
-        if (initSetting.logoutRequestTemplate && customTagReplacement) {
-            var template = customTagReplacement(initSetting.logoutRequestTemplate.context);
-            id = (0, utility_1.get)(template, 'id', null);
-            rawSamlRequest = (0, utility_1.get)(template, 'context', null);
-        }
-        else {
-            id = initSetting.generateID();
-            var tvalue = {
-                ID: id,
-                Destination: metadata.target.getSingleLogoutService(binding.post),
-                Issuer: metadata.init.getEntityID(),
-                IssueInstant: new Date().toISOString(),
-                EntityID: metadata.init.getEntityID(),
-                NameIDFormat: selectedNameIDFormat,
-                NameID: user.logoutNameID,
-            };
-            rawSamlRequest = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLogoutRequestTemplate.context, tvalue);
-        }
-        if (entity.target.entitySetting.wantLogoutRequestSigned) {
-            // Need to embeded XML signature
-            var privateKey = initSetting.privateKey, privateKeyPass = initSetting.privateKeyPass, signatureAlgorithm = initSetting.requestSignatureAlgorithm, transformationAlgorithms = initSetting.transformationAlgorithms;
-            return {
-                id: id,
-                context: libsaml_1.default.constructSAMLSignature({
-                    referenceTagXPath: referenceTagXPath,
-                    privateKey: privateKey,
-                    privateKeyPass: privateKeyPass,
-                    signatureAlgorithm: signatureAlgorithm,
-                    transformationAlgorithms: transformationAlgorithms,
-                    rawSamlMessage: rawSamlRequest,
-                    signingCert: metadata.init.getX509Certificate('signing'),
-                    signatureConfig: initSetting.signatureConfig || {
-                        prefix: 'ds',
-                        location: { reference: "/*[local-name(.)='LogoutRequest']/*[local-name(.)='Issuer']", action: 'after' },
-                    }
-                }),
-            };
-        }
+    /* v8 ignore start */
+    if (!metadata.init || !metadata.target) {
+        throw new Error('ERR_GENERATE_POST_LOGOUT_REQUEST_MISSING_METADATA');
+    }
+    /* v8 ignore stop */
+    var rawSamlRequest;
+    if (customTagReplacement) {
+        // saml-bindings §3.5 — honour the callback even when the caller did
+        // not override `logoutRequestTemplate` (closes #549). Prefer the
+        // user-supplied template, then the tag-prefixed default (closes #388),
+        // and finally the library default.
+        var templateContext = (_e = (_b = (_a = initSetting.logoutRequestTemplate) === null || _a === void 0 ? void 0 : _a.context) !== null && _b !== void 0 ? _b : (_d = (_c = initSetting.tagPrefixedDefaults) === null || _c === void 0 ? void 0 : _c.logoutRequestTemplate) === null || _d === void 0 ? void 0 : _d.context) !== null && _e !== void 0 ? _e : libsaml_1.default.defaultLogoutRequestTemplate.context;
+        var template = customTagReplacement(templateContext);
+        id = (0, utility_1.get)(template, 'id');
+        rawSamlRequest = (0, utility_1.get)(template, 'context');
+    }
+    else {
+        id = initSetting.generateID();
+        var tvalue = {
+            ID: id,
+            Destination: metadata.target.getSingleLogoutService(binding.post),
+            Issuer: metadata.init.getEntityID(),
+            IssueInstant: new Date().toISOString(),
+            EntityID: metadata.init.getEntityID(),
+            NameIDFormat: selectedNameIDFormat,
+            NameID: user.logoutNameID,
+            // saml-core §3.7.1 — SessionIndex is optional; replaceTagsByValue
+            // drops the element when undefined (closes #470).
+            SessionIndex: user.sessionIndex,
+        };
+        var baseTemplate = (_h = (_g = (_f = initSetting.tagPrefixedDefaults) === null || _f === void 0 ? void 0 : _f.logoutRequestTemplate) === null || _g === void 0 ? void 0 : _g.context) !== null && _h !== void 0 ? _h : libsaml_1.default.defaultLogoutRequestTemplate.context;
+        rawSamlRequest = libsaml_1.default.replaceTagsByValue(baseTemplate, tvalue);
+    }
+    if (entity.target.entitySetting.wantLogoutRequestSigned) {
+        var privateKey = initSetting.privateKey, privateKeyPass = initSetting.privateKeyPass, signatureAlgorithm = initSetting.requestSignatureAlgorithm, transformationAlgorithms = initSetting.transformationAlgorithms;
         return {
             id: id,
-            context: utility_1.default.base64Encode(rawSamlRequest),
+            context: libsaml_1.default.constructSAMLSignature({
+                referenceTagXPath: referenceTagXPath,
+                privateKey: privateKey,
+                privateKeyPass: privateKeyPass,
+                signatureAlgorithm: signatureAlgorithm,
+                transformationAlgorithms: transformationAlgorithms,
+                rawSamlMessage: rawSamlRequest,
+                signingCert: metadata.init.getX509Certificate('signing'),
+                signatureConfig: initSetting.signatureConfig || {
+                    prefix: 'ds',
+                    location: { reference: "/*[local-name(.)='LogoutRequest']/*[local-name(.)='Issuer']", action: 'after' },
+                },
+            }),
         };
     }
-    throw new Error('ERR_GENERATE_POST_LOGOUT_REQUEST_MISSING_METADATA');
+    return {
+        id: id,
+        context: utility_1.default.base64Encode(rawSamlRequest),
+    };
 }
 /**
-* @desc Generate a base64 encoded logout response
-* @param  {object} requestInfo                 corresponding request, used to obtain the id
-* @param  {string} referenceTagXPath           reference uri
-* @param  {object} entity                      object includes both idp and sp
-* @param  {function} customTagReplacement     used when developers have their own login response template
-*/
+ * Generate a base64-encoded LogoutResponse for the HTTP-POST binding.
+ *
+ * @param requestInfo parsed request used to link `InResponseTo`
+ * @param entity `{ init, target }` handles
+ * @param customTagReplacement optional custom template transformer
+ * @returns id / base64-XML pair
+ */
 function base64LogoutResponse(requestInfo, entity, customTagReplacement) {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
     var metadata = {
         init: entity.init.entityMeta,
         target: entity.target.entityMeta,
     };
     var id = '';
     var initSetting = entity.init.entitySetting;
-    if (metadata && metadata.init && metadata.target) {
-        var rawSamlResponse = void 0;
-        if (initSetting.logoutResponseTemplate) {
-            var template = customTagReplacement(initSetting.logoutResponseTemplate.context);
-            id = template.id;
-            rawSamlResponse = template.context;
-        }
-        else {
-            id = initSetting.generateID();
-            var tvalue = {
-                ID: id,
-                Destination: metadata.target.getSingleLogoutService(binding.post),
-                EntityID: metadata.init.getEntityID(),
-                Issuer: metadata.init.getEntityID(),
-                IssueInstant: new Date().toISOString(),
-                StatusCode: urn_1.StatusCode.Success,
-                InResponseTo: (0, utility_1.get)(requestInfo, 'extract.request.id', null)
-            };
-            rawSamlResponse = libsaml_1.default.replaceTagsByValue(libsaml_1.default.defaultLogoutResponseTemplate.context, tvalue);
-        }
-        if (entity.target.entitySetting.wantLogoutResponseSigned) {
-            var privateKey = initSetting.privateKey, privateKeyPass = initSetting.privateKeyPass, signatureAlgorithm = initSetting.requestSignatureAlgorithm, transformationAlgorithms = initSetting.transformationAlgorithms;
-            return {
-                id: id,
-                context: libsaml_1.default.constructSAMLSignature({
-                    isMessageSigned: true,
-                    transformationAlgorithms: transformationAlgorithms,
-                    privateKey: privateKey,
-                    privateKeyPass: privateKeyPass,
-                    signatureAlgorithm: signatureAlgorithm,
-                    rawSamlMessage: rawSamlResponse,
-                    signingCert: metadata.init.getX509Certificate('signing'),
-                    signatureConfig: {
-                        prefix: 'ds',
-                        location: {
-                            reference: "/*[local-name(.)='LogoutResponse']/*[local-name(.)='Issuer']",
-                            action: 'after'
-                        }
-                    }
-                }),
-            };
-        }
+    /* v8 ignore start */
+    if (!metadata.init || !metadata.target) {
+        throw new Error('ERR_GENERATE_POST_LOGOUT_RESPONSE_MISSING_METADATA');
+    }
+    /* v8 ignore stop */
+    var rawSamlResponse;
+    if (customTagReplacement) {
+        // saml-bindings §3.5 — honour the callback even when the caller did
+        // not override `logoutResponseTemplate` (closes #549). Prefer the
+        // user-supplied template, then the tag-prefixed default (closes #388),
+        // and finally the library default.
+        var templateContext = (_e = (_b = (_a = initSetting.logoutResponseTemplate) === null || _a === void 0 ? void 0 : _a.context) !== null && _b !== void 0 ? _b : (_d = (_c = initSetting.tagPrefixedDefaults) === null || _c === void 0 ? void 0 : _c.logoutResponseTemplate) === null || _d === void 0 ? void 0 : _d.context) !== null && _e !== void 0 ? _e : libsaml_1.default.defaultLogoutResponseTemplate.context;
+        var template = customTagReplacement(templateContext);
+        id = template.id;
+        rawSamlResponse = template.context;
+    }
+    else {
+        id = initSetting.generateID();
+        var tvalue = {
+            ID: id,
+            Destination: metadata.target.getSingleLogoutService(binding.post),
+            EntityID: metadata.init.getEntityID(),
+            Issuer: metadata.init.getEntityID(),
+            IssueInstant: new Date().toISOString(),
+            StatusCode: urn_1.StatusCode.Success,
+            InResponseTo: (0, utility_1.get)(requestInfo, 'extract.request.id'),
+        };
+        var baseTemplate = (_h = (_g = (_f = initSetting.tagPrefixedDefaults) === null || _f === void 0 ? void 0 : _f.logoutResponseTemplate) === null || _g === void 0 ? void 0 : _g.context) !== null && _h !== void 0 ? _h : libsaml_1.default.defaultLogoutResponseTemplate.context;
+        rawSamlResponse = libsaml_1.default.replaceTagsByValue(baseTemplate, tvalue);
+    }
+    if (entity.target.entitySetting.wantLogoutResponseSigned) {
+        var privateKey = initSetting.privateKey, privateKeyPass = initSetting.privateKeyPass, signatureAlgorithm = initSetting.requestSignatureAlgorithm, transformationAlgorithms = initSetting.transformationAlgorithms;
         return {
             id: id,
-            context: utility_1.default.base64Encode(rawSamlResponse),
+            context: libsaml_1.default.constructSAMLSignature({
+                isMessageSigned: true,
+                transformationAlgorithms: transformationAlgorithms,
+                privateKey: privateKey,
+                privateKeyPass: privateKeyPass,
+                signatureAlgorithm: signatureAlgorithm,
+                rawSamlMessage: rawSamlResponse,
+                signingCert: metadata.init.getX509Certificate('signing'),
+                signatureConfig: {
+                    prefix: 'ds',
+                    location: {
+                        reference: "/*[local-name(.)='LogoutResponse']/*[local-name(.)='Issuer']",
+                        action: 'after',
+                    },
+                },
+            }),
         };
     }
-    throw new Error('ERR_GENERATE_POST_LOGOUT_RESPONSE_MISSING_METADATA');
+    return {
+        id: id,
+        context: utility_1.default.base64Encode(rawSamlResponse),
+    };
 }
 var postBinding = {
     base64LoginRequest: base64LoginRequest,

package/build/src/binding-post.js.map

@@ -1 +1 @@
-{"version":3,"file":"binding-post.js","sourceRoot":"","sources":["../../src/binding-post.ts"],"names":[],"mappings":";AAAA;;;;EAIE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEF,6BAAuD;AAEvD,sDAAgC;AAChC,mDAAyC;AAEzC,IAAM,OAAO,GAAG,aAAO,CAAC,OAAO,CAAC;AAEhC;;;;;EAKE;AACF,SAAS,kBAAkB,CAAC,iBAAyB,EAAE,MAAW,EAAE,oBAA2D;IAC7H,IAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;IAC1E,IAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC;IAC1C,IAAI,EAAE,GAAW,EAAE,CAAC;IAEpB,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,cAAc,SAAQ,CAAC;QAC3B,IAAI,SAAS,CAAC,oBAAoB,IAAI,oBAAoB,EAAE,CAAC;YAC3D,IAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC1E,EAAE,GAAG,IAAA,aAAG,EAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3B,cAAc,GAAG,IAAA,aAAG,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YAC5C,IAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YAC1F,EAAE,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YAC5B,cAAc,GAAG,iBAAO,CAAC,kBAAkB,CAAC,iBAAO,CAAC,2BAA2B,CAAC,OAAO,EAAE;gBACvF,EAAE,EAAE,EAAE;gBACN,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE;gBACjC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,2BAA2B,EAAE,QAAQ,CAAC,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClF,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE;gBACnC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,oBAAoB;aAC5B,CAAC,CAAC;QACZ,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,CAAC;YACrC,IAAA,UAAU,GAA8F,SAAS,WAAvG,EAAE,cAAc,GAA8E,SAAS,eAAvF,EAA6B,kBAAkB,GAA+B,SAAS,0BAAxC,EAAE,wBAAwB,GAAK,SAAS,yBAAd,CAAe;YAC1H,OAAO;gBACL,EAAE,IAAA;gBACF,OAAO,EAAE,iBAAO,CAAC,sBAAsB,CAAC;oBACtC,iBAAiB,mBAAA;oBACjB,UAAU,YAAA;oBACV,cAAc,gBAAA;oBACd,kBAAkB,oBAAA;oBAClB,wBAAwB,0BAAA;oBACxB,cAAc,EAAE,cAAc;oBAC9B,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC;oBACtD,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI;wBAC5C,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,4DAA4D,EAAE,MAAM,EAAE,OAAO,EAAE;qBACvG;iBACF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,mCAAmC;QACnC,OAAO;YACL,EAAE,IAAA;YACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,cAAc,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;AACtE,CAAC;AACD;;;;;;;EAOE;AACF,SAAe,mBAAmB;wDAAC,WAAqB,EAAE,MAAW,EAAE,IAAc,EAAE,oBAA2D,EAAE,eAAgC;;QAAjJ,4BAAA,EAAA,gBAAqB;QAAe,qBAAA,EAAA,SAAc;QAA+D,gCAAA,EAAA,uBAAgC;;;;oBAC5K,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;oBACtC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC;oBACpC,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;oBAC7B,QAAQ,GAAG;wBACf,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU;wBAC1B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU;qBACzB,CAAC;oBACI,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;oBACvC,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;yBACtF,CAAA,QAAQ,IAAI,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAA,EAAvC,wBAAuC;oBACnC,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC/D,eAAe,SAAQ,CAAC;oBACtB,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;oBACrB,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;oBACvC,oBAAoB,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;oBACzD,oBAAoB,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;oBACjE,gBAAgB,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBACtD,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC5B,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5D,MAAM,GAAQ;wBAClB,EAAE,EAAE,EAAE;wBACN,WAAW,EAAE,UAAU,CAAC,UAAU,EAAE;wBACpC,WAAW,EAAE,IAAI;wBACjB,QAAQ,EAAE,UAAU;wBACpB,QAAQ,EAAE,UAAU;wBACpB,gBAAgB,EAAE,GAAG;wBACrB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;wBAClC,YAAY,EAAE,GAAG;wBACjB,2BAA2B,EAAE,GAAG;wBAChC,UAAU,EAAE,gBAAU,CAAC,OAAO;wBAC9B,oBAAoB;wBACpB,mBAAmB,EAAE,GAAG;wBACxB,sBAAsB,EAAE,gBAAgB;wBACxC,mCAAmC,EAAE,gBAAgB;wBACrD,YAAY,EAAE,oBAAoB;wBAClC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;wBACxB,YAAY,EAAE,IAAA,aAAG,EAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,CAAC;wBACxD,cAAc,EAAE,EAAE;wBAClB,kBAAkB,EAAE,EAAE;qBACvB,CAAC;oBACF,IAAI,UAAU,CAAC,qBAAqB,IAAI,oBAAoB,EAAE,CAAC;wBACvD,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;wBAChF,eAAe,GAAG,IAAA,aAAG,EAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;oBACnD,CAAC;yBAAM,CAAC;wBACN,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;4BACzB,MAAM,CAAC,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvD,CAAC;wBACD,eAAe,GAAG,iBAAO,CAAC,kBAAkB,CAAC,iBAAO,CAAC,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACrG,CAAC;oBACO,UAAU,GAAoE,UAAU,WAA9E,EAAE,cAAc,GAAoD,UAAU,eAA9D,EAA6B,kBAAkB,GAAK,UAAU,0BAAf,CAAgB;oBAC3F,MAAM,GAAG;wBACb,UAAU,YAAA;wBACV,cAAc,gBAAA;wBACd,kBAAkB,oBAAA;wBAClB,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAC;wBACvD,cAAc,EAAE,KAAK;qBACtB,CAAC;oBACF,0DAA0D;oBAC1D,IAAI,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,EAAE,CAAC;wBACzC,8CAA8C;wBAC9C,eAAe,GAAG,iBAAO,CAAC,sBAAsB,uBAC3C,MAAM,KACT,cAAc,EAAE,eAAe,EAC/B,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAC5D,iBAAiB,EAAE,2DAA2D,EAC9E,eAAe,EAAE;gCACf,MAAM,EAAE,IAAI;gCACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,qFAAqF,EAAE,MAAM,EAAE,OAAO,EAAE;6BAChI,IACD,CAAC;oBACL,CAAC;oBAED,4DAA4D;oBAE5D,gEAAgE;oBAChE,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;wBAC/F,8DAA8D;wBAC9D,eAAe,GAAG,iBAAO,CAAC,sBAAsB,uBAC3C,MAAM,KACT,cAAc,EAAE,eAAe,EAC/B,eAAe,EAAE,IAAI,EACrB,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAC5D,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI;gCAC5C,MAAM,EAAE,IAAI;gCACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,wDAAwD,EAAE,MAAM,EAAE,OAAO,EAAE;6BACnG,IACD,CAAC;oBACL,CAAC;yBAIG,UAAU,CAAC,oBAAoB,EAA/B,wBAA+B;oBAEjB,qBAAM,iBAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC,EAAA;;oBAAhF,OAAO,GAAG,SAAsE;oBACtF,IAAI,eAAe,EAAE,CAAC;wBACpB,mBAAmB;wBACnB,eAAe,GAAG,iBAAO,CAAC,YAAY,CAAC,OAAO,CAAW,CAAC;oBAC5D,CAAC;yBAAM,CAAC;wBACN,sBAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAA,EAAE,OAAO,SAAA,EAAE,CAAC,EAAC;oBAC1C,CAAC;;;oBAGH,uBAAuB;oBACvB,IAAI,eAAe,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;wBAC9F,eAAe,GAAG,iBAAO,CAAC,sBAAsB,uBAC3C,MAAM,KACT,cAAc,EAAE,eAAe,EAC/B,eAAe,EAAE,IAAI,EACrB,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAC5D,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI;gCAC5C,MAAM,EAAE,IAAI;gCACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,wDAAwD,EAAE,MAAM,EAAE,OAAO,EAAE;6BACnG,IACD,CAAC;oBACL,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC;4BACrB,EAAE,IAAA;4BACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,eAAe,CAAC;yBAC/C,CAAC,EAAC;wBAGL,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;;;;CACtE;AACD;;;;;;;EAOE;AACF,SAAS,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,oBAA2D;IACvH,IAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpF,IAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;IAC9C,IAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAC9C,IAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAAE,IAAI,EAAE,GAAW,EAAE,CAAC;IAChH,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjD,IAAI,cAAc,SAAQ,CAAC;QAC3B,IAAI,WAAW,CAAC,qBAAqB,IAAI,oBAAoB,EAAE,CAAC;YAC9D,IAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACjF,EAAE,GAAG,IAAA,aAAG,EAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,cAAc,GAAG,IAAA,aAAG,EAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAM,MAAM,GAAQ;gBAClB,EAAE,EAAE,EAAE;gBACN,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;gBACrC,YAAY,EAAE,oBAAoB;gBAClC,MAAM,EAAE,IAAI,CAAC,YAAY;aAC1B,CAAC;YACF,cAAc,GAAG,iBAAO,CAAC,kBAAkB,CAAC,iBAAO,CAAC,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC;YACxD,gCAAgC;YACxB,IAAA,UAAU,GAA+F,WAAW,WAA1G,EAAE,cAAc,GAA+E,WAAW,eAA1F,EAA6B,kBAAkB,GAAgC,WAAW,0BAA3C,EAAE,wBAAwB,GAAM,WAAW,yBAAjB,CAAkB;YAC7H,OAAO;gBACL,EAAE,IAAA;gBACF,OAAO,EAAE,iBAAO,CAAC,sBAAsB,CAAC;oBACtC,iBAAiB,mBAAA;oBACjB,UAAU,YAAA;oBACV,cAAc,gBAAA;oBACd,kBAAkB,oBAAA;oBAClB,wBAAwB,0BAAA;oBACxB,cAAc,EAAE,cAAc;oBAC9B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;oBACxD,eAAe,EAAE,WAAW,CAAC,eAAe,IAAI;wBAC9C,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,6DAA6D,EAAE,MAAM,EAAE,OAAO,EAAE;qBACxG;iBACF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,IAAA;YACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,cAAc,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AACD;;;;;;EAME;AACF,SAAS,oBAAoB,CAAC,WAAgB,EAAE,MAAW,EAAE,oBAA0D;IACrH,IAAM,QAAQ,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;KACjC,CAAC;IACF,IAAI,EAAE,GAAW,EAAE,CAAC;IACpB,IAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;IAC9C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjD,IAAI,eAAe,SAAA,CAAC;QACpB,IAAI,WAAW,CAAC,sBAAsB,EAAE,CAAC;YACvC,IAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAClF,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;YACjB,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAM,MAAM,GAAQ;gBAClB,EAAE,EAAE,EAAE;gBACN,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,UAAU,EAAE,gBAAU,CAAC,OAAO;gBAC9B,YAAY,EAAE,IAAA,aAAG,EAAC,WAAW,EAAE,oBAAoB,EAAE,IAAI,CAAC;aAC3D,CAAC;YACF,eAAe,GAAG,iBAAO,CAAC,kBAAkB,CAAC,iBAAO,CAAC,6BAA6B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,wBAAwB,EAAE,CAAC;YACjD,IAAA,UAAU,GAA8F,WAAW,WAAzG,EAAE,cAAc,GAA8E,WAAW,eAAzF,EAA6B,kBAAkB,GAA+B,WAAW,0BAA1C,EAAE,wBAAwB,GAAK,WAAW,yBAAhB,CAAiB;YAC5H,OAAO;gBACL,EAAE,IAAA;gBACF,OAAO,EAAE,iBAAO,CAAC,sBAAsB,CAAC;oBACtC,eAAe,EAAE,IAAI;oBACrB,wBAAwB,EAAE,wBAAwB;oBAClD,UAAU,YAAA;oBACV,cAAc,gBAAA;oBACd,kBAAkB,oBAAA;oBAClB,cAAc,EAAE,eAAe;oBAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;oBACxD,eAAe,EAAE;wBACf,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE;4BACR,SAAS,EAAE,8DAA8D;4BACzE,MAAM,EAAE,OAAO;yBAChB;qBACF;iBACF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,IAAA;YACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,eAAe,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACxE,CAAC;AAED,IAAM,WAAW,GAAG;IAClB,kBAAkB,oBAAA;IAClB,mBAAmB,qBAAA;IACnB,mBAAmB,qBAAA;IACnB,oBAAoB,sBAAA;CACrB,CAAC;AAEF,kBAAe,WAAW,CAAC"}
+{"version":3,"file":"binding-post.js","sourceRoot":"","sources":["../../src/binding-post.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,6BAA4C;AAU5C,sDAAgC;AAChC,mDAAyC;AAEzC,IAAM,OAAO,GAAG,aAAO,CAAC,OAAO,CAAC;AAchC;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,iBAAyB,EACzB,MAAqB,EACrB,oBAA2D,EAC3D,UAAoB,EACpB,6BAAsC;;IAEtC,IAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;IAC1E,IAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC;IAC1C,IAAI,EAAE,GAAG,EAAE,CAAC;IAEZ,qBAAqB;IACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,oBAAoB;IAEpB,IAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,cAAsB,CAAC;IAC3B,IAAI,oBAAoB,EAAE,CAAC;QACzB,qEAAqE;QACrE,kEAAkE;QAClE,mEAAmE;QACnE,wDAAwD;QACxD,IAAM,eAAe,GAAG,MAAA,MAAA,SAAS,CAAC,oBAAoB,0CAAE,OAAO,mCAC1D,iBAAO,CAAC,2BAA2B,CAAC,OAAO,CAAC;QACjD,IAAM,IAAI,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;QACnD,EAAE,GAAG,IAAA,aAAG,EAAS,IAA0C,EAAE,IAAI,CAAW,CAAC;QAC7E,cAAc,GAAG,IAAA,aAAG,EAAS,IAA0C,EAAE,SAAS,CAAW,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,IAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;QAC5C,IAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC1F,EAAE,GAAG,SAAS,CAAC,UAAW,EAAE,CAAC;QAC7B,iEAAiE;QACjE,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,uCAAuC;QACvC,IAAM,WAAW,GAAG,6BAA6B,KAAK,SAAS,CAAC;QAChE,IAAM,IAAI,GAAsB;YAC9B,EAAE,EAAE,EAAE;YACN,WAAW,EAAE,IAAc;YAC3B,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE;YACjC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,eAAe,EAAE,WAAW;gBAC1B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,gDAAgD;YACpD,2BAA2B,EAAE,WAAW;gBACtC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAW;YACnE,6BAA6B,EAAE,6BAA6B;YAC5D,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,oBAAoB;YAClC,mEAAmE;YACnE,wDAAwD;YACxD,UAAU,EAAE,UAAU;SACvB,CAAC;QACF,cAAc,GAAG,iBAAO,CAAC,kBAAkB,CAAC,iBAAO,CAAC,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,CAAC;QACrC,IAAA,UAAU,GAA8F,SAAS,WAAvG,EAAE,cAAc,GAA8E,SAAS,eAAvF,EAA6B,kBAAkB,GAA+B,SAAS,0BAAxC,EAAE,wBAAwB,GAAK,SAAS,yBAAd,CAAe;QAC1H,OAAO;YACL,EAAE,IAAA;YACF,OAAO,EAAE,iBAAO,CAAC,sBAAsB,CAAC;gBACtC,iBAAiB,mBAAA;gBACjB,UAAU,EAAE,UAAoB;gBAChC,cAAc,gBAAA;gBACd,kBAAkB,EAAE,kBAAmB;gBACvC,wBAAwB,0BAAA;gBACxB,cAAc,EAAE,cAAc;gBAC9B,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAW;gBAChE,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI;oBAC5C,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,4DAA4D,EAAE,MAAM,EAAE,OAAO,EAAE;iBACvG;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,IAAA;QACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,cAAc,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAe,mBAAmB;wDAChC,WAA0F,EAC1F,MAAqB,EACrB,IAAmB,EACnB,oBAA2D,EAC3D,eAAuB;;;QAJvB,4BAAA,EAAA,cAAyE,EAAiB;QAE1F,qBAAA,EAAA,SAAmB;QAEnB,gCAAA,EAAA,uBAAuB;;;;oBAEjB,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;oBACtC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC;oBACpC,EAAE,GAAG,UAAU,CAAC,UAAW,EAAE,CAAC;oBAC9B,QAAQ,GAAG;wBACf,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU;wBAC1B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU;qBACzB,CAAC;oBACI,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;oBACvC,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;oBAE1F,qBAAqB;oBACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBAClC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;oBACvE,CAAC;oBAGK,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAE7D,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;oBACrB,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;oBACvC,oBAAoB,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;oBACzD,oBAAoB,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;oBACjE,gBAAgB,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBACtD,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC5B,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5D,MAAM,GAAsB;wBAChC,EAAE,EAAE,EAAE;wBACN,WAAW,EAAE,UAAU,CAAC,UAAW,EAAE;wBACrC,WAAW,EAAE,IAAc;wBAC3B,QAAQ,EAAE,UAAU;wBACpB,QAAQ,EAAE,UAAU;wBACpB,gBAAgB,EAAE,GAAa;wBAC/B,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE;wBAClC,YAAY,EAAE,GAAG;wBACjB,2BAA2B,EAAE,GAAa;wBAC1C,UAAU,EAAE,gBAAU,CAAC,OAAO;wBAC9B,mBAAmB,EAAE,GAAG;wBACxB,sBAAsB,EAAE,gBAAgB;wBACxC,mCAAmC,EAAE,gBAAgB;wBACrD,YAAY,EAAE,oBAAoB;wBAClC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;wBACxB,YAAY,EAAE,IAAA,aAAG,EAAS,WAAsC,EAAE,oBAAoB,EAAE,EAAE,CAAW;wBACrG,cAAc,EAAE,EAAE;wBAClB,kBAAkB,EAAE,EAAE;qBACvB,CAAC;oBACF,IAAI,oBAAoB,EAAE,CAAC;wBAKnB,eAAe,GAAG,MAAA,MAAA,MAAA,UAAU,CAAC,qBAAqB,0CAAE,OAAO,mCAC5D,MAAA,MAAA,UAAU,CAAC,mBAAmB,0CAAE,qBAAqB,0CAAE,OAAO,mCAC9D,iBAAO,CAAC,4BAA4B,CAAC,OAAO,CAAC;wBAC5C,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;wBACvD,eAAe,GAAG,IAAA,aAAG,EAAS,QAA8C,EAAE,SAAS,CAAW,CAAC;oBACrG,CAAC;yBAAM,CAAC;wBACN,IAAI,WAAW,KAAK,IAAI,KAAI,MAAC,WAA2B,CAAC,OAAO,0CAAE,OAAO,CAAA,EAAE,CAAC;4BAC1E,MAAM,CAAC,YAAY,GAAI,WAA2B,CAAC,OAAO,CAAC,OAAQ,CAAC,EAAY,CAAC;wBACnF,CAAC;wBAGK,YAAY,GAAG,MAAA,MAAA,MAAA,UAAU,CAAC,mBAAmB,0CAAE,qBAAqB,0CAAE,OAAO,mCAC9E,iBAAO,CAAC,4BAA4B,CAAC,OAAO,CAAC;wBAClD,eAAe,GAAG,iBAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;oBACrE,CAAC;oBACO,UAAU,GAAoE,UAAU,WAA9E,EAAE,cAAc,GAAoD,UAAU,eAA9D,EAA6B,kBAAkB,GAAK,UAAU,0BAAf,CAAgB;oBAC3F,MAAM,GAAG;wBACb,UAAU,EAAE,UAAoB;wBAChC,cAAc,gBAAA;wBACd,kBAAkB,EAAE,kBAAmB;wBACvC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAW;wBACjE,cAAc,EAAE,KAAK;qBACtB,CAAC;oBACF,2FAA2F;oBAC3F,IAAI,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,EAAE,CAAC;wBACzC,eAAe,GAAG,iBAAO,CAAC,sBAAsB,uBAC3C,MAAM,KACT,cAAc,EAAE,eAAe,EAC/B,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAC5D,iBAAiB,EAAE,2DAA2D,EAC9E,eAAe,EAAE;gCACf,MAAM,EAAE,IAAI;gCACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,qFAAqF,EAAE,MAAM,EAAE,OAAO,EAAE;6BAChI,IACD,CAAC;oBACL,CAAC;oBAED,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;wBAC/F,eAAe,GAAG,iBAAO,CAAC,sBAAsB,uBAC3C,MAAM,KACT,cAAc,EAAE,eAAe,EAC/B,eAAe,EAAE,IAAI,EACrB,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAC5D,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI;gCAC5C,MAAM,EAAE,IAAI;gCACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,wDAAwD,EAAE,MAAM,EAAE,OAAO,EAAE;6BACnG,IACD,CAAC;oBACL,CAAC;yBAEG,UAAU,CAAC,oBAAoB,EAA/B,wBAA+B;oBACjB,qBAAM,iBAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC,EAAA;;oBAAhF,OAAO,GAAG,SAAsE;oBACtF,IAAI,eAAe,EAAE,CAAC;wBACpB,eAAe,GAAG,iBAAO,CAAC,YAAY,CAAC,OAAO,CAAW,CAAC;oBAC5D,CAAC;yBAAM,CAAC;wBACN,sBAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAA,EAAE,OAAO,SAAA,EAAE,CAAC,EAAC;oBAC1C,CAAC;;;oBAGH,IAAI,eAAe,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;wBAC9F,eAAe,GAAG,iBAAO,CAAC,sBAAsB,uBAC3C,MAAM,KACT,cAAc,EAAE,eAAe,EAC/B,eAAe,EAAE,IAAI,EACrB,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAC5D,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI;gCAC5C,MAAM,EAAE,IAAI;gCACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,wDAAwD,EAAE,MAAM,EAAE,OAAO,EAAE;6BACnG,IACD,CAAC;oBACL,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC;4BACrB,EAAE,IAAA;4BACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,eAAe,CAAC;yBAC/C,CAAC,EAAC;;;;CACJ;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC1B,IAAc,EACd,iBAAyB,EACzB,MAA0B,EAC1B,oBAA2D;;IAE3D,IAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpF,IAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;IAC9C,IAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAC9C,IAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1F,IAAI,EAAE,GAAG,EAAE,CAAC;IAEZ,qBAAqB;IACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,oBAAoB;IAEpB,IAAI,cAAsB,CAAC;IAC3B,IAAI,oBAAoB,EAAE,CAAC;QACzB,oEAAoE;QACpE,iEAAiE;QACjE,uEAAuE;QACvE,mCAAmC;QACnC,IAAM,eAAe,GAAG,MAAA,MAAA,MAAA,WAAW,CAAC,qBAAqB,0CAAE,OAAO,mCAC7D,MAAA,MAAA,WAAW,CAAC,mBAAmB,0CAAE,qBAAqB,0CAAE,OAAO,mCAC/D,iBAAO,CAAC,4BAA4B,CAAC,OAAO,CAAC;QAClD,IAAM,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;QACvD,EAAE,GAAG,IAAA,aAAG,EAAS,QAA8C,EAAE,IAAI,CAAW,CAAC;QACjF,cAAc,GAAG,IAAA,aAAG,EAAS,QAA8C,EAAE,SAAS,CAAW,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,WAAW,CAAC,UAAW,EAAE,CAAC;QAC/B,IAAM,MAAM,GAAsB;YAChC,EAAE,EAAE,EAAE;YACN,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAW;YAC3E,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;YACrC,YAAY,EAAE,oBAAoB;YAClC,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,kEAAkE;YAClE,kDAAkD;YAClD,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;QACF,IAAM,YAAY,GAAG,MAAA,MAAA,MAAA,WAAW,CAAC,mBAAmB,0CAAE,qBAAqB,0CAAE,OAAO,mCAC/E,iBAAO,CAAC,4BAA4B,CAAC,OAAO,CAAC;QAClD,cAAc,GAAG,iBAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC;QAChD,IAAA,UAAU,GAA8F,WAAW,WAAzG,EAAE,cAAc,GAA8E,WAAW,eAAzF,EAA6B,kBAAkB,GAA+B,WAAW,0BAA1C,EAAE,wBAAwB,GAAK,WAAW,yBAAhB,CAAiB;QAC5H,OAAO;YACL,EAAE,IAAA;YACF,OAAO,EAAE,iBAAO,CAAC,sBAAsB,CAAC;gBACtC,iBAAiB,mBAAA;gBACjB,UAAU,EAAE,UAAoB;gBAChC,cAAc,gBAAA;gBACd,kBAAkB,EAAE,kBAAmB;gBACvC,wBAAwB,0BAAA;gBACxB,cAAc,EAAE,cAAc;gBAC9B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAW;gBAClE,eAAe,EAAE,WAAW,CAAC,eAAe,IAAI;oBAC9C,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,EAAE,SAAS,EAAE,6DAA6D,EAAE,MAAM,EAAE,OAAO,EAAE;iBACxG;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,IAAA;QACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,cAAc,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,WAAwB,EACxB,MAA0B,EAC1B,oBAA2D;;IAE3D,IAAM,QAAQ,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;KACjC,CAAC;IACF,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;IAE9C,qBAAqB;IACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,oBAAoB;IAEpB,IAAI,eAAuB,CAAC;IAC5B,IAAI,oBAAoB,EAAE,CAAC;QACzB,oEAAoE;QACpE,kEAAkE;QAClE,uEAAuE;QACvE,mCAAmC;QACnC,IAAM,eAAe,GAAG,MAAA,MAAA,MAAA,WAAW,CAAC,sBAAsB,0CAAE,OAAO,mCAC9D,MAAA,MAAA,WAAW,CAAC,mBAAmB,0CAAE,sBAAsB,0CAAE,OAAO,mCAChE,iBAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC;QACnD,IAAM,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;QACvD,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACjB,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,WAAW,CAAC,UAAW,EAAE,CAAC;QAC/B,IAAM,MAAM,GAAsB;YAChC,EAAE,EAAE,EAAE;YACN,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAW;YAC3E,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,gBAAU,CAAC,OAAO;YAC9B,YAAY,EAAE,IAAA,aAAG,EAAS,WAAsC,EAAE,oBAAoB,CAAW;SAClG,CAAC;QACF,IAAM,YAAY,GAAG,MAAA,MAAA,MAAA,WAAW,CAAC,mBAAmB,0CAAE,sBAAsB,0CAAE,OAAO,mCAChF,iBAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC;QACnD,eAAe,GAAG,iBAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,wBAAwB,EAAE,CAAC;QACjD,IAAA,UAAU,GAA8F,WAAW,WAAzG,EAAE,cAAc,GAA8E,WAAW,eAAzF,EAA6B,kBAAkB,GAA+B,WAAW,0BAA1C,EAAE,wBAAwB,GAAK,WAAW,yBAAhB,CAAiB;QAC5H,OAAO;YACL,EAAE,IAAA;YACF,OAAO,EAAE,iBAAO,CAAC,sBAAsB,CAAC;gBACtC,eAAe,EAAE,IAAI;gBACrB,wBAAwB,0BAAA;gBACxB,UAAU,EAAE,UAAoB;gBAChC,cAAc,gBAAA;gBACd,kBAAkB,EAAE,kBAAmB;gBACvC,cAAc,EAAE,eAAe;gBAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAW;gBAClE,eAAe,EAAE;oBACf,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE;wBACR,SAAS,EAAE,8DAA8D;wBACzE,MAAM,EAAE,OAAO;qBAChB;iBACF;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,IAAA;QACF,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,eAAe,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,IAAM,WAAW,GAAG;IAClB,kBAAkB,oBAAA;IAClB,mBAAmB,qBAAA;IACnB,mBAAmB,qBAAA;IACnB,oBAAoB,sBAAA;CACrB,CAAC;AAEF,kBAAe,WAAW,CAAC"}