samlify 2.12.0 → 2.13.0

package/build/src/entity.js

@@ -15,10 +15,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
-* @file entity.ts
-* @author tngan
-* @desc  An abstraction for identity provider and service provider.
-*/
+ * @file entity.ts
+ * @author tngan
+ * @desc Shared base class for identity-provider and service-provider
+ * entities. Owns configuration merging, metadata delegation, and the
+ * high-level parse/create helpers used by both sides.
+ */
 var crypto_1 = require("crypto");
 var utility_1 = require("./utility");
 var urn_1 = require("./urn");
@@ -26,6 +28,8 @@ var metadata_idp_1 = __importDefault(require("./metadata-idp"));
 var metadata_sp_1 = __importDefault(require("./metadata-sp"));
 var binding_redirect_1 = __importDefault(require("./binding-redirect"));
 var binding_post_1 = __importDefault(require("./binding-post"));
+var binding_simplesign_1 = __importDefault(require("./binding-simplesign"));
+var options_1 = require("./options");
 var flow_1 = require("./flow");
 var dataEncryptionAlgorithm = urn_1.algorithms.encryption.data;
 var keyEncryptionAlgorithm = urn_1.algorithms.encryption.key;
@@ -40,27 +44,31 @@ var defaultEntitySetting = {
     requestSignatureAlgorithm: signatureAlgorithms.RSA_SHA256,
     dataEncryptionAlgorithm: dataEncryptionAlgorithm.AES_256,
     keyEncryptionAlgorithm: keyEncryptionAlgorithm.RSA_OAEP_MGF1P,
-    generateID: function () { return ('_' + (0, crypto_1.randomUUID)()); },
+    generateID: function () { return '_' + (0, crypto_1.randomUUID)(); },
     relayState: '',
 };
 var Entity = /** @class */ (function () {
     /**
-    * @param entitySetting
-    * @param entityMeta is the entity metadata, deprecated after 2.0
-    */
+     * Build an entity, merging the provided configuration with defaults and
+     * hydrating the metadata abstraction for its role.
+     *
+     * @param entitySetting IdP or SP settings (metadata XML or options)
+     * @param entityType `idp` or `sp`
+     */
     function Entity(entitySetting, entityType) {
         this.entitySetting = Object.assign({}, defaultEntitySetting, entitySetting);
+        this.entityType = entityType;
         var metadata = entitySetting.metadata || entitySetting;
         switch (entityType) {
             case 'idp':
                 this.entityMeta = (0, metadata_idp_1.default)(metadata);
-                // setting with metadata has higher precedence 
+                // Metadata takes precedence over settings when both supply the same key.
                 this.entitySetting.wantAuthnRequestsSigned = this.entityMeta.isWantAuthnRequestsSigned();
                 this.entitySetting.nameIDFormat = this.entityMeta.getNameIDFormat() || this.entitySetting.nameIDFormat;
                 break;
             case 'sp':
                 this.entityMeta = (0, metadata_sp_1.default)(metadata);
-                // setting with metadata has higher precedence 
+                // Metadata takes precedence over settings when both supply the same key.
                 this.entitySetting.authnRequestsSigned = this.entityMeta.isAuthnRequestSigned();
                 this.entitySetting.wantAssertionsSigned = this.entityMeta.isWantAssertionsSigned();
                 this.entitySetting.nameIDFormat = this.entityMeta.getNameIDFormat() || this.entitySetting.nameIDFormat;
@@ -70,31 +78,34 @@ var Entity = /** @class */ (function () {
         }
     }
     /**
-    * @desc  Returns the setting of entity
-    * @return {object}
-    */
+     * Return the effective entity settings (defaults merged with overrides).
+     */
     Entity.prototype.getEntitySetting = function () {
         return this.entitySetting;
     };
     /**
-    * @desc  Returns the xml string of entity metadata
-    * @return {string}
-    */
+     * Return the serialized metadata XML for this entity.
+     */
     Entity.prototype.getMetadata = function () {
         return this.entityMeta.getMetadata();
     };
     /**
-    * @desc  Exports the entity metadata into specified folder
-    * @param  {string} exportFile indicates the file name
-    */
+     * Persist the metadata XML to disk.
+     *
+     * @param exportFile absolute file path
+     */
     Entity.prototype.exportMetadata = function (exportFile) {
         return this.entityMeta.exportMetadata(exportFile);
     };
-    /** * @desc  Verify fields with the one specified in metadata
-    * @param  {string/[string]} field is a string or an array of string indicating the field value in SAML message
-    * @param  {string} metaField is a string indicating the same field specified in metadata
-    * @return {boolean} True/False
-    */
+    /**
+     * Equality check between a field value extracted from a SAML message and
+     * the value declared in the peer's metadata. Arrays must match on every
+     * entry.
+     *
+     * @param field value(s) from the inbound SAML message
+     * @param metaField value from peer metadata
+     * @returns true when every provided value equals `metaField`
+     */
     Entity.prototype.verifyFields = function (field, metaField) {
         if ((0, utility_1.isString)(field)) {
             return field === metaField;
@@ -104,22 +115,33 @@ var Entity = /** @class */ (function () {
             field.forEach(function (f) {
                 if (f !== metaField) {
                     res_1 = false;
-                    return;
                 }
             });
             return res_1;
         }
         return false;
     };
-    /** @desc   Generates the logout request for developers to design their own method
-    * @param  {ServiceProvider} sp     object of service provider
-    * @param  {string}   binding       protocol binding
-    * @param  {object}   user          current logged user (e.g. user)
-    * @param  {string} relayState      the URL to which to redirect the user when logout is complete
-    * @param  {function} customTagReplacement     used when developers have their own login response template
-    */
-    Entity.prototype.createLogoutRequest = function (targetEntity, binding, user, relayState, customTagReplacement) {
-        if (relayState === void 0) { relayState = ''; }
+    /**
+     * Build a logout request targeting `targetEntity`. The return type depends
+     * on the binding: `redirect` produces a URL; `post` and `simpleSign`
+     * produce a base64 envelope (the latter with a detached signature).
+     *
+     * The fourth parameter accepts either a string (legacy `relayState`
+     * positional shape) or an options bag `{ relayState?, customTagReplacement? }`.
+     * Per `saml-bindings §3.4.3 / §3.5.3`, RelayState is request-scoped — pass
+     * it via the options bag instead of `entitySetting.relayState`.
+     *
+     * @param targetEntity peer to receive the logout request
+     * @param binding `redirect`, `post`, or `simpleSign`
+     * @param user currently authenticated user
+     * @param optionsOrRelayState per-request options or legacy RelayState string
+     * @param legacyCustomTagReplacement optional custom template transformer (legacy positional form)
+     */
+    Entity.prototype.createLogoutRequest = function (targetEntity, binding, user, optionsOrRelayState, legacyCustomTagReplacement) {
+        var _a, _b;
+        var opts = (0, options_1.normalizeCreateLogoutRequestOptions)(optionsOrRelayState, legacyCustomTagReplacement);
+        var relayState = (_b = (_a = opts.relayState) !== null && _a !== void 0 ? _a : this.entitySetting.relayState) !== null && _b !== void 0 ? _b : '';
+        var customTagReplacement = opts.customTagReplacement;
         if (binding === urn_1.wording.binding.redirect) {
             return binding_redirect_1.default.logoutRequestRedirectURL(user, {
                 init: this,
@@ -131,19 +153,33 @@ var Entity = /** @class */ (function () {
             var context = binding_post_1.default.base64LogoutRequest(user, "/*[local-name(.)='LogoutRequest']", { init: this, target: targetEntity }, customTagReplacement);
             return __assign(__assign({}, context), { relayState: relayState, entityEndpoint: entityEndpoint, type: 'SAMLRequest' });
         }
-        // Will support artifact in the next release
+        if (binding === urn_1.wording.binding.simpleSign) {
+            var entityEndpoint = targetEntity.entityMeta.getSingleLogoutService(binding);
+            var context = binding_simplesign_1.default.base64LogoutRequest(user, { init: this, target: targetEntity }, relayState, customTagReplacement);
+            return __assign(__assign({}, context), { relayState: relayState, entityEndpoint: entityEndpoint, type: 'SAMLRequest' });
+        }
+        // Artifact binding is not yet implemented.
         throw new Error('ERR_UNDEFINED_BINDING');
     };
     /**
-    * @desc  Generates the logout response for developers to design their own method
-    * @param  {IdentityProvider} idp               object of identity provider
-    * @param  {object} requestInfo                 corresponding request, used to obtain the id
-    * @param  {string} relayState                  the URL to which to redirect the user when logout is complete.
-    * @param  {string} binding                     protocol binding
-    * @param  {function} customTagReplacement                 used when developers have their own login response template
-    */
-    Entity.prototype.createLogoutResponse = function (target, requestInfo, binding, relayState, customTagReplacement) {
-        if (relayState === void 0) { relayState = ''; }
+     * Build a logout response to the peer that initiated logout.
+     *
+     * The fourth parameter accepts either a string (legacy `relayState`
+     * positional shape) or an options bag `{ relayState?, customTagReplacement? }`.
+     * Per `saml-bindings §3.4.3 / §3.5.3`, RelayState is request-scoped — pass
+     * it via the options bag instead of `entitySetting.relayState`.
+     *
+     * @param target peer that sent the corresponding logout request
+     * @param requestInfo parsed request used to link `InResponseTo`
+     * @param binding `redirect`, `post`, or `simpleSign`
+     * @param optionsOrRelayState per-request options or legacy RelayState string
+     * @param legacyCustomTagReplacement optional custom template transformer (legacy positional form)
+     */
+    Entity.prototype.createLogoutResponse = function (target, requestInfo, binding, optionsOrRelayState, legacyCustomTagReplacement) {
+        var _a, _b;
+        var opts = (0, options_1.normalizeCreateLogoutResponseOptions)(optionsOrRelayState, legacyCustomTagReplacement);
+        var relayState = (_b = (_a = opts.relayState) !== null && _a !== void 0 ? _a : this.entitySetting.relayState) !== null && _b !== void 0 ? _b : '';
+        var customTagReplacement = opts.customTagReplacement;
         var protocol = urn_1.namespace.binding[binding];
         if (protocol === urn_1.namespace.binding.redirect) {
             return binding_redirect_1.default.logoutResponseRedirectURL(requestInfo, {
@@ -158,20 +194,23 @@ var Entity = /** @class */ (function () {
             }, customTagReplacement);
             return __assign(__assign({}, context), { relayState: relayState, entityEndpoint: target.entityMeta.getSingleLogoutService(binding), type: 'SAMLResponse' });
         }
+        if (protocol === urn_1.namespace.binding.simpleSign) {
+            var context = binding_simplesign_1.default.base64LogoutResponse(requestInfo, { init: this, target: target }, relayState, customTagReplacement);
+            return __assign(__assign({}, context), { relayState: relayState, entityEndpoint: target.entityMeta.getSingleLogoutService(binding), type: 'SAMLResponse' });
+        }
         throw new Error('ERR_CREATE_LOGOUT_RESPONSE_UNDEFINED_BINDING');
     };
     /**
-    * @desc   Validation of the parsed the URL parameters
-    * @param  {IdentityProvider}   idp             object of identity provider
-    * @param  {string}   binding                   protocol binding
-    * @param  {request}   req                      request
-    * @return {Promise}
-    */
+     * Parse, validate and verify an inbound logout request.
+     *
+     * @param from peer entity that produced the request
+     * @param binding `redirect`, `post`, or `simpleSign`
+     * @param request HTTP request envelope
+     */
     Entity.prototype.parseLogoutRequest = function (from, binding, request) {
-        var self = this;
         return (0, flow_1.flow)({
             from: from,
-            self: self,
+            self: this,
             type: 'logout',
             parserType: 'LogoutRequest',
             checkSignature: this.entitySetting.wantLogoutRequestSigned,
@@ -180,22 +219,21 @@ var Entity = /** @class */ (function () {
         });
     };
     /**
-    * @desc   Validation of the parsed the URL parameters
-    * @param  {object} config                      config for the parser
-    * @param  {string}   binding                   protocol binding
-    * @param  {request}   req                      request
-    * @return {Promise}
-    */
+     * Parse, validate and verify an inbound logout response.
+     *
+     * @param from peer entity that produced the response
+     * @param binding `redirect`, `post`, or `simpleSign`
+     * @param request HTTP request envelope
+     */
     Entity.prototype.parseLogoutResponse = function (from, binding, request) {
-        var self = this;
         return (0, flow_1.flow)({
             from: from,
-            self: self,
+            self: this,
             type: 'logout',
             parserType: 'LogoutResponse',
-            checkSignature: self.entitySetting.wantLogoutResponseSigned,
+            checkSignature: this.entitySetting.wantLogoutResponseSigned,
             binding: binding,
-            request: request
+            request: request,
         });
     };
     return Entity;

package/build/src/entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity.js","sourceRoot":"","sources":["../../src/entity.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;EAIE;AACF,iCAAoC;AACpC,qCAAsD;AACtD,6BAA8E;AAC9E,gEAAoF;AACpF,8DAAgF;AAChF,wEAAiD;AACjD,gEAAyC;AAEzC,+BAA0C;AAE1C,IAAM,uBAAuB,GAAG,gBAAU,CAAC,UAAU,CAAC,IAAI,CAAC;AAC3D,IAAM,sBAAsB,GAAG,gBAAU,CAAC,UAAU,CAAC,GAAG,CAAC;AACzD,IAAM,mBAAmB,GAAG,gBAAU,CAAC,SAAS,CAAC;AACjD,IAAM,oBAAoB,GAAG,2BAAqB,CAAC,YAAY,CAAC;AAEhE,IAAM,oBAAoB,GAAG;IAC3B,wBAAwB,EAAE,KAAK;IAC/B,mBAAmB,EAAE,oBAAoB,CAAC,iBAAiB;IAC3D,uBAAuB,EAAE,KAAK;IAC9B,WAAW,EAAE,KAAK;IAClB,oBAAoB,EAAE,KAAK;IAC3B,yBAAyB,EAAE,mBAAmB,CAAC,UAAU;IACzD,uBAAuB,EAAE,uBAAuB,CAAC,OAAO;IACxD,sBAAsB,EAAE,sBAAsB,CAAC,cAAc;IAC7D,UAAU,EAAE,cAAc,OAAA,CAAC,GAAG,GAAG,IAAA,mBAAU,GAAE,CAAC,EAApB,CAAoB;IAC9C,UAAU,EAAE,EAAE;CACf,CAAC;AAuCF;IAKE;;;MAGE;IACF,gBAAY,aAAgC,EAAE,UAAwB;QACpE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;QAC5E,IAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,IAAI,aAAa,CAAC;QACzD,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,IAAI,CAAC,UAAU,GAAG,IAAA,sBAAW,EAAC,QAAQ,CAAC,CAAC;gBACxC,+CAA+C;gBAC/C,IAAI,CAAC,aAAa,CAAC,uBAAuB,GAAG,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;gBACzF,IAAI,CAAC,aAAa,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;gBACvG,MAAM;YACR,KAAK,IAAI;gBACP,IAAI,CAAC,UAAU,GAAG,IAAA,qBAAU,EAAC,QAAQ,CAAC,CAAC;gBACvC,+CAA+C;gBAC/C,IAAI,CAAC,aAAa,CAAC,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;gBAChF,IAAI,CAAC,aAAa,CAAC,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC;gBACnF,IAAI,CAAC,aAAa,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;gBACvG,MAAM;YACR;gBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;MAGE;IACF,iCAAgB,GAAhB;QACE,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD;;;MAGE;IACF,4BAAW,GAAX;QACE,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAED;;;MAGE;IACF,+BAAc,GAAd,UAAe,UAAkB;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED;;;;MAIE;IACF,6BAAY,GAAZ,UAAa,KAAwB,EAAE,SAAiB;QACtD,IAAI,IAAA,kBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,KAAK,SAAS,CAAC;QAC7B,CAAC;QACD,IAAI,IAAA,yBAAe,EAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,KAAG,GAAG,IAAI,CAAC;YACd,KAAkB,CAAC,OAAO,CAAC,UAAA,CAAC;gBAC3B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBACpB,KAAG,GAAG,KAAK,CAAC;oBACZ,OAAO;gBACT,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,KAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD;;;;;;MAME;IACF,oCAAmB,GAAnB,UAAoB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,UAAe,EAAE,oBAAqB;QAAtC,2BAAA,EAAA,eAAe;QAC9D,IAAI,OAAO,KAAK,aAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,0BAAe,CAAC,wBAAwB,CAAC,IAAI,EAAE;gBACpD,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,YAAY;aACrB,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,KAAK,aAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACrC,IAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC/E,IAAM,OAAO,GAAG,sBAAW,CAAC,mBAAmB,CAAC,IAAI,EAAE,mCAAmC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACvJ,6BACK,OAAO,KACV,UAAU,YAAA,EACV,cAAc,gBAAA,EACd,IAAI,EAAE,aAAa,IACnB;QACJ,CAAC;QACD,4CAA4C;QAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;MAOE;IACF,qCAAoB,GAApB,UAAqB,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,UAAe,EAAE,oBAAqB;QAAtC,2BAAA,EAAA,eAAe;QAChE,IAAM,QAAQ,GAAG,eAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,eAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,0BAAe,CAAC,yBAAyB,CAAC,WAAW,EAAE;gBAC5D,IAAI,EAAE,IAAI;gBACV,MAAM,QAAA;aACP,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,QAAQ,KAAK,eAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,IAAM,OAAO,GAAG,sBAAW,CAAC,oBAAoB,CAAC,WAAW,EAAE;gBAC5D,IAAI,EAAE,IAAI;gBACV,MAAM,QAAA;aACP,EAAE,oBAAoB,CAAC,CAAC;YACzB,6BACK,OAAO,KACV,UAAU,YAAA,EACV,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,EACjE,IAAI,EAAE,cAAc,IACpB;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;MAME;IACF,mCAAkB,GAAlB,UAAmB,IAAI,EAAE,OAAO,EAAE,OAAyB;QACzD,IAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,IAAA,WAAI,EAAC;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,eAAe;YAC3B,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,uBAAuB;YAC1D,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;IACD;;;;;;MAME;IACF,oCAAmB,GAAnB,UAAoB,IAAI,EAAE,OAAO,EAAE,OAAyB;QAC1D,IAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,IAAA,WAAI,EAAC;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,gBAAgB;YAC5B,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB;YAC3D,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;IACH,aAAC;AAAD,CAAC,AA5KD,IA4KC"}
+{"version":3,"file":"entity.js","sourceRoot":"","sources":["../../src/entity.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;;;GAMG;AACH,iCAAoC;AACpC,qCAAsD;AACtD,6BAA8E;AAC9E,gEAAoF;AACpF,8DAAgF;AAChF,wEAAiD;AACjD,gEAAyC;AACzC,4EAAqD;AAiBrD,qCAGmB;AACnB,+BAA8B;AAW9B,IAAM,uBAAuB,GAAG,gBAAU,CAAC,UAAU,CAAC,IAAI,CAAC;AAC3D,IAAM,sBAAsB,GAAG,gBAAU,CAAC,UAAU,CAAC,GAAG,CAAC;AACzD,IAAM,mBAAmB,GAAG,gBAAU,CAAC,SAAS,CAAC;AACjD,IAAM,oBAAoB,GAAG,2BAAqB,CAAC,YAAY,CAAC;AAEhE,IAAM,oBAAoB,GAAG;IAC3B,wBAAwB,EAAE,KAAK;IAC/B,mBAAmB,EAAE,oBAAoB,CAAC,iBAAiB;IAC3D,uBAAuB,EAAE,KAAK;IAC9B,WAAW,EAAE,KAAK;IAClB,oBAAoB,EAAE,KAAK;IAC3B,yBAAyB,EAAE,mBAAmB,CAAC,UAAU;IACzD,uBAAuB,EAAE,uBAAuB,CAAC,OAAO;IACxD,sBAAsB,EAAE,sBAAsB,CAAC,cAAc;IAC7D,UAAU,EAAE,cAAc,OAAA,GAAG,GAAG,IAAA,mBAAU,GAAE,EAAlB,CAAkB;IAC5C,UAAU,EAAE,EAAE;CACf,CAAC;AAMF;IAKE;;;;;;OAMG;IACH,gBAAY,aAAgC,EAAE,UAAwB;QACpE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,IAAI,aAAa,CAAC;QACzD,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,IAAI,CAAC,UAAU,GAAG,IAAA,sBAAW,EAAC,QAAQ,CAAC,CAAC;gBACxC,yEAAyE;gBACzE,IAAI,CAAC,aAAa,CAAC,uBAAuB,GAAI,IAAI,CAAC,UAAqC,CAAC,yBAAyB,EAAE,CAAC;gBACrH,IAAI,CAAC,aAAa,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;gBACvG,MAAM;YACR,KAAK,IAAI;gBACP,IAAI,CAAC,UAAU,GAAG,IAAA,qBAAU,EAAC,QAAQ,CAAC,CAAC;gBACvC,yEAAyE;gBACzE,IAAI,CAAC,aAAa,CAAC,mBAAmB,GAAI,IAAI,CAAC,UAAoC,CAAC,oBAAoB,EAAE,CAAC;gBAC3G,IAAI,CAAC,aAAa,CAAC,oBAAoB,GAAI,IAAI,CAAC,UAAoC,CAAC,sBAAsB,EAAE,CAAC;gBAC9G,IAAI,CAAC,aAAa,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;gBACvG,MAAM;YACR;gBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iCAAgB,GAAhB;QACE,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,4BAAW,GAAX;QACE,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,+BAAc,GAAd,UAAe,UAAkB;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACH,6BAAY,GAAZ,UAAa,KAAwB,EAAE,SAAiB;QACtD,IAAI,IAAA,kBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,KAAK,SAAS,CAAC;QAC7B,CAAC;QACD,IAAI,IAAA,yBAAe,EAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,KAAG,GAAG,IAAI,CAAC;YACd,KAAkB,CAAC,OAAO,CAAC,UAAA,CAAC;gBAC3B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBACpB,KAAG,GAAG,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,KAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,oCAAmB,GAAnB,UACE,YAAoB,EACpB,OAAe,EACf,IAAc,EACd,mBAAyD,EACzD,0BAAiD;;QAEjD,IAAM,IAAI,GAAG,IAAA,6CAAmC,EAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;QAClG,IAAM,UAAU,GAAG,MAAA,MAAA,IAAI,CAAC,UAAU,mCAAI,IAAI,CAAC,aAAa,CAAC,UAAU,mCAAI,EAAE,CAAC;QAC1E,IAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAEvD,IAAI,OAAO,KAAK,aAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,0BAAe,CAAC,wBAAwB,CAAC,IAAI,EAAE;gBACpD,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,YAAY;aACrB,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,KAAK,aAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACrC,IAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAW,CAAC;YACzF,IAAM,OAAO,GAAG,sBAAW,CAAC,mBAAmB,CAAC,IAAI,EAAE,mCAAmC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACvJ,6BACK,OAAO,KACV,UAAU,YAAA,EACV,cAAc,gBAAA,EACd,IAAI,EAAE,aAAa,IACnB;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,aAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAW,CAAC;YACzF,IAAM,OAAO,GAAG,4BAAiB,CAAC,mBAAmB,CACnD,IAAI,EACJ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EACpC,UAAU,EACV,oBAAoB,CACrB,CAAC;YACF,6BACK,OAAO,KACV,UAAU,YAAA,EACV,cAAc,gBAAA,EACd,IAAI,EAAE,aAAa,IACnB;QACJ,CAAC;QACD,2CAA2C;QAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,qCAAoB,GAApB,UACE,MAAc,EACd,WAAwB,EACxB,OAAe,EACf,mBAA0D,EAC1D,0BAAiD;;QAEjD,IAAM,IAAI,GAAG,IAAA,8CAAoC,EAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;QACnG,IAAM,UAAU,GAAG,MAAA,MAAA,IAAI,CAAC,UAAU,mCAAI,IAAI,CAAC,aAAa,CAAC,UAAU,mCAAI,EAAE,CAAC;QAC1E,IAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACvD,IAAM,QAAQ,GAAG,eAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,eAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,0BAAe,CAAC,yBAAyB,CAAC,WAAW,EAAE;gBAC5D,IAAI,EAAE,IAAI;gBACV,MAAM,QAAA;aACP,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,QAAQ,KAAK,eAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,IAAM,OAAO,GAAG,sBAAW,CAAC,oBAAoB,CAAC,WAAW,EAAE;gBAC5D,IAAI,EAAE,IAAI;gBACV,MAAM,QAAA;aACP,EAAE,oBAAoB,CAAC,CAAC;YACzB,6BACK,OAAO,KACV,UAAU,YAAA,EACV,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAW,EAC3E,IAAI,EAAE,cAAc,IACpB;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,eAAS,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC9C,IAAM,OAAO,GAAG,4BAAiB,CAAC,oBAAoB,CACpD,WAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,QAAA,EAAE,EACtB,UAAU,EACV,oBAAoB,CACrB,CAAC;YACF,6BACK,OAAO,KACV,UAAU,YAAA,EACV,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAW,EAC3E,IAAI,EAAE,cAAc,IACpB;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,mCAAkB,GAAlB,UAAmB,IAAY,EAAE,OAAe,EAAE,OAAyB;QACzE,OAAO,IAAA,WAAI,EAAC;YACV,IAAI,MAAA;YACJ,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,eAAe;YAC3B,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,uBAAuB;YAC1D,OAAO,SAAA;YACP,OAAO,SAAA;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,oCAAmB,GAAnB,UAAoB,IAAY,EAAE,OAAe,EAAE,OAAyB;QAC1E,OAAO,IAAA,WAAI,EAAC;YACV,IAAI,MAAA;YACJ,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,gBAAgB;YAC5B,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB;YAC3D,OAAO,SAAA;YACP,OAAO,SAAA;SACR,CAAC,CAAC;IACL,CAAC;IACH,aAAC;AAAD,CAAC,AAlPD,IAkPC"}