samlify 2.12.0 → 2.13.0

package/build/src/flow.js

@@ -56,6 +56,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.flow = flow;
+/**
+ * @file flow.ts
+ * @author tngan
+ * @desc Inbound SAML message pipeline. Dispatches between POST, Redirect,
+ * and POST-SimpleSign flows, handling decoding, schema validation, status
+ * checks, signature verification, and time-window validation.
+ */
 var utility_1 = require("./utility");
 var validator_1 = require("./validator");
 var libsaml_1 = __importDefault(require("./libsaml"));
@@ -63,14 +70,20 @@ var extractor_1 = require("./extractor");
 var urn_1 = require("./urn");
 var bindDict = urn_1.wording.binding;
 var urlParams = urn_1.wording.urlParams;
-// get the default extractor fields based on the parserType
+/**
+ * Map a parser type onto the default extractor fields that populate
+ * {@link FlowResult.extract}. Login-response extraction is parameterised by
+ * the verified assertion fragment to defend against wrapping attacks.
+ *
+ * @param parserType SAML message type
+ * @param assertion verified assertion XML (required for SAMLResponse)
+ */
 function getDefaultExtractorFields(parserType, assertion) {
     switch (parserType) {
         case urn_1.ParserType.SAMLRequest:
             return extractor_1.loginRequestFields;
         case urn_1.ParserType.SAMLResponse:
             if (!assertion) {
-                // unexpected hit
                 throw new Error('ERR_EMPTY_ASSERTION');
             }
             return (0, extractor_1.loginResponseFields)(assertion);
@@ -82,47 +95,48 @@ function getDefaultExtractorFields(parserType, assertion) {
             throw new Error('ERR_UNDEFINED_PARSERTYPE');
     }
 }
-// proceed the redirect binding flow
+/**
+ * Redirect-binding flow: reads the base64/deflate SAML message from query
+ * params and, when required, verifies the detached signature over the
+ * canonical octet string.
+ */
 function redirectFlow(options) {
     return __awaiter(this, void 0, void 0, function () {
-        var request, parserType, self, _a, checkSignature, from, query, octetString, sigAlg, signature, targetEntityMetadata, direction, content, xmlString, e_1, assertion, verifiedDoc, extractorFields, parseResult, base64Signature, decodeSigAlg, verified, issuer, extractedProperties;
-        return __generator(this, function (_b) {
-            switch (_b.label) {
+        var request, parserType, self, _a, checkSignature, from, query, octetString, _b, sigAlg, signature, targetEntityMetadata, direction, content, xmlString, _c, assertion, verifiedDoc, extractorFields, parseResult, base64Signature, decodeSigAlg, verified, issuer, extractedProperties;
+        var _d;
+        return __generator(this, function (_e) {
+            switch (_e.label) {
                 case 0:
                     request = options.request, parserType = options.parserType, self = options.self, _a = options.checkSignature, checkSignature = _a === void 0 ? true : _a, from = options.from;
                     query = request.query, octetString = request.octetString;
-                    sigAlg = query.SigAlg, signature = query.Signature;
+                    _b = query, sigAlg = _b.SigAlg, signature = _b.Signature;
                     targetEntityMetadata = from.entityMeta;
                     direction = libsaml_1.default.getQueryParamByType(parserType);
                     content = query[direction];
-                    // query must contain the saml content
                     if (content === undefined) {
-                        return [2 /*return*/, Promise.reject('ERR_REDIRECT_FLOW_BAD_ARGS')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_REDIRECT_FLOW_BAD_ARGS'))];
                     }
                     xmlString = (0, utility_1.inflateString)(decodeURIComponent(content));
-                    _b.label = 1;
+                    _e.label = 1;
                 case 1:
-                    _b.trys.push([1, 3, , 4]);
+                    _e.trys.push([1, 3, , 4]);
                     return [4 /*yield*/, libsaml_1.default.isValidXml(xmlString)];
                 case 2:
-                    _b.sent();
+                    _e.sent();
                     return [3 /*break*/, 4];
                 case 3:
-                    e_1 = _b.sent();
-                    return [2 /*return*/, Promise.reject('ERR_INVALID_XML')];
-                case 4: 
-                // check status based on different scenarios
-                return [4 /*yield*/, checkStatus(xmlString, parserType)];
+                    _c = _e.sent();
+                    return [2 /*return*/, Promise.reject(new Error('ERR_INVALID_XML'))];
+                case 4: return [4 /*yield*/, checkStatus(xmlString, parserType)];
                 case 5:
-                    // check status based on different scenarios
-                    _b.sent();
+                    _e.sent();
                     assertion = '';
                     if (parserType === urlParams.samlResponse) {
                         verifiedDoc = (0, extractor_1.extract)(xmlString, [{
                                 key: 'assertion',
                                 localPath: ['~Response', 'Assertion'],
                                 attributes: [],
-                                context: true
+                                context: true,
                             }]);
                         if (verifiedDoc && verifiedDoc.assertion) {
                             assertion = verifiedDoc.assertion;
@@ -134,54 +148,53 @@ function redirectFlow(options) {
                         sigAlg: null,
                         extract: (0, extractor_1.extract)(xmlString, extractorFields),
                     };
-                    // see if signature check is required
-                    // only verify message signature is enough
                     if (checkSignature) {
                         if (!signature || !sigAlg) {
-                            return [2 /*return*/, Promise.reject('ERR_MISSING_SIG_ALG')];
+                            return [2 /*return*/, Promise.reject(new Error('ERR_MISSING_SIG_ALG'))];
                         }
                         base64Signature = Buffer.from(decodeURIComponent(signature), 'base64');
                         decodeSigAlg = decodeURIComponent(sigAlg);
                         verified = libsaml_1.default.verifyMessageSignature(targetEntityMetadata, octetString, base64Signature, sigAlg);
                         if (!verified) {
-                            // Fail to verify message signature
-                            return [2 /*return*/, Promise.reject('ERR_FAILED_MESSAGE_SIGNATURE_VERIFICATION')];
+                            return [2 /*return*/, Promise.reject(new Error('ERR_FAILED_MESSAGE_SIGNATURE_VERIFICATION'))];
                         }
                         parseResult.sigAlg = decodeSigAlg;
                     }
                     issuer = targetEntityMetadata.getEntityID();
                     extractedProperties = parseResult.extract;
-                    // unmatched issuer
                     if ((parserType === 'LogoutResponse' || parserType === 'SAMLResponse')
                         && extractedProperties
                         && extractedProperties.issuer !== issuer) {
-                        return [2 /*return*/, Promise.reject('ERR_UNMATCH_ISSUER')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_UNMATCH_ISSUER'))];
                     }
-                    // invalid session time
-                    // only run the verifyTime when `SessionNotOnOrAfter` exists
+                    // Session expiration — only enforced when SessionNotOnOrAfter is present.
                     if (parserType === 'SAMLResponse'
-                        && extractedProperties.sessionIndex.sessionNotOnOrAfter
+                        && ((_d = extractedProperties.sessionIndex) === null || _d === void 0 ? void 0 : _d.sessionNotOnOrAfter)
                         && !(0, validator_1.verifyTime)(undefined, extractedProperties.sessionIndex.sessionNotOnOrAfter, self.entitySetting.clockDrifts)) {
-                        return [2 /*return*/, Promise.reject('ERR_EXPIRED_SESSION')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_EXPIRED_SESSION'))];
                     }
-                    // invalid time
-                    // 2.4.1.2 https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
+                    // Assertion validity window. SAML core 2.4.1.2.
                     if (parserType === 'SAMLResponse'
                         && extractedProperties.conditions
                         && !(0, validator_1.verifyTime)(extractedProperties.conditions.notBefore, extractedProperties.conditions.notOnOrAfter, self.entitySetting.clockDrifts)) {
-                        return [2 /*return*/, Promise.reject('ERR_SUBJECT_UNCONFIRMED')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_SUBJECT_UNCONFIRMED'))];
                     }
                     return [2 /*return*/, Promise.resolve(parseResult)];
             }
         });
     });
 }
-// proceed the post flow
+/**
+ * POST-binding flow: reads the base64 SAML message from the request body
+ * and verifies the embedded XML signature. Supports both encrypted-then-
+ * signed and signed-then-encrypted assertion pipelines.
+ */
 function postFlow(options) {
     return __awaiter(this, void 0, void 0, function () {
         var request, from, self, parserType, _a, checkSignature, body, direction, encodedRequest, samlContent, verificationOptions, decryptRequired, extractorFields, _b, verified, verifiedAssertionNode, result, result, decryptedDoc, _c, decryptedDocVerified, verifiedDecryptedAssertion, parseResult, targetEntityMetadata, issuer, extractedProperties;
-        return __generator(this, function (_d) {
-            switch (_d.label) {
+        var _d;
+        return __generator(this, function (_e) {
+            switch (_e.label) {
                 case 0:
                     request = options.request, from = options.from, self = options.self, parserType = options.parserType, _a = options.checkSignature, checkSignature = _a === void 0 ? true : _a;
                     body = request.body;
@@ -194,53 +207,46 @@ function postFlow(options) {
                     };
                     decryptRequired = from.entitySetting.isAssertionEncrypted;
                     extractorFields = [];
-                    // validate the xml first
                     return [4 /*yield*/, libsaml_1.default.isValidXml(samlContent)];
                 case 1:
-                    // validate the xml first
-                    _d.sent();
+                    _e.sent();
                     if (parserType !== urlParams.samlResponse) {
                         extractorFields = getDefaultExtractorFields(parserType, null);
                     }
-                    // check status based on different scenarios
                     return [4 /*yield*/, checkStatus(samlContent, parserType)];
                 case 2:
-                    // check status based on different scenarios
-                    _d.sent();
+                    _e.sent();
                     if (!checkSignature) return [3 /*break*/, 7];
                     _b = __read(libsaml_1.default.verifySignature(samlContent, verificationOptions), 2), verified = _b[0], verifiedAssertionNode = _b[1];
                     if (!(decryptRequired && verified && parserType === 'SAMLResponse' && verifiedAssertionNode)) return [3 /*break*/, 4];
                     return [4 /*yield*/, libsaml_1.default.decryptAssertion(self, verifiedAssertionNode)];
                 case 3:
-                    result = _d.sent();
+                    result = _e.sent();
                     samlContent = result[0];
-                    // extractor depends on signed content
                     extractorFields = getDefaultExtractorFields(parserType, result[1]);
                     return [3 /*break*/, 7];
                 case 4:
                     if (!(decryptRequired && !verified)) return [3 /*break*/, 6];
                     return [4 /*yield*/, libsaml_1.default.decryptAssertion(self, samlContent)];
                 case 5:
-                    result = _d.sent();
+                    result = _e.sent();
                     decryptedDoc = result[0];
                     _c = __read(libsaml_1.default.verifySignature(decryptedDoc, verificationOptions), 2), decryptedDocVerified = _c[0], verifiedDecryptedAssertion = _c[1];
                     if (decryptedDocVerified) {
-                        // extractor depends on signed content
                         extractorFields = getDefaultExtractorFields(parserType, verifiedDecryptedAssertion);
                     }
                     else {
-                        return [2 /*return*/, Promise.reject('FAILED_TO_VERIFY_SIGNATURE')];
+                        return [2 /*return*/, Promise.reject(new Error('FAILED_TO_VERIFY_SIGNATURE'))];
                     }
                     return [3 /*break*/, 7];
                 case 6:
                     if (verified) {
-                        // extractor depends on signed content
                         extractorFields = getDefaultExtractorFields(parserType, verifiedAssertionNode);
                     }
                     else {
-                        return [2 /*return*/, Promise.reject('FAILED_TO_VERIFY_SIGNATURE')];
+                        return [2 /*return*/, Promise.reject(new Error('FAILED_TO_VERIFY_SIGNATURE'))];
                     }
-                    _d.label = 7;
+                    _e.label = 7;
                 case 7:
                     parseResult = {
                         samlContent: samlContent,
@@ -249,37 +255,36 @@ function postFlow(options) {
                     targetEntityMetadata = from.entityMeta;
                     issuer = targetEntityMetadata.getEntityID();
                     extractedProperties = parseResult.extract;
-                    // unmatched issuer
                     if ((parserType === 'LogoutResponse' || parserType === 'SAMLResponse')
                         && extractedProperties
                         && extractedProperties.issuer !== issuer) {
-                        return [2 /*return*/, Promise.reject('ERR_UNMATCH_ISSUER')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_UNMATCH_ISSUER'))];
                     }
-                    // invalid session time
-                    // only run the verifyTime when `SessionNotOnOrAfter` exists
                     if (parserType === 'SAMLResponse'
-                        && extractedProperties.sessionIndex.sessionNotOnOrAfter
+                        && ((_d = extractedProperties.sessionIndex) === null || _d === void 0 ? void 0 : _d.sessionNotOnOrAfter)
                         && !(0, validator_1.verifyTime)(undefined, extractedProperties.sessionIndex.sessionNotOnOrAfter, self.entitySetting.clockDrifts)) {
-                        return [2 /*return*/, Promise.reject('ERR_EXPIRED_SESSION')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_EXPIRED_SESSION'))];
                     }
-                    // invalid time
-                    // 2.4.1.2 https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
                     if (parserType === 'SAMLResponse'
                         && extractedProperties.conditions
                         && !(0, validator_1.verifyTime)(extractedProperties.conditions.notBefore, extractedProperties.conditions.notOnOrAfter, self.entitySetting.clockDrifts)) {
-                        return [2 /*return*/, Promise.reject('ERR_SUBJECT_UNCONFIRMED')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_SUBJECT_UNCONFIRMED'))];
                     }
                     return [2 /*return*/, Promise.resolve(parseResult)];
             }
         });
     });
 }
-// proceed the post simple sign binding flow
+/**
+ * POST-SimpleSign flow: reads the base64 SAML message from the request body
+ * together with a detached signature over the SimpleSign octet string.
+ */
 function postSimpleSignFlow(options) {
     return __awaiter(this, void 0, void 0, function () {
-        var request, parserType, self, _a, checkSignature, from, body, octetString, targetEntityMetadata, direction, encodedRequest, sigAlg, signature, xmlString, e_2, assertion, verifiedDoc, extractorFields, parseResult, base64Signature, verified, issuer, extractedProperties;
-        return __generator(this, function (_b) {
-            switch (_b.label) {
+        var request, parserType, self, _a, checkSignature, from, body, octetString, targetEntityMetadata, direction, encodedRequest, sigAlg, signature, xmlString, _b, assertion, verifiedDoc, extractorFields, parseResult, base64Signature, verified, issuer, extractedProperties;
+        var _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
                 case 0:
                     request = options.request, parserType = options.parserType, self = options.self, _a = options.checkSignature, checkSignature = _a === void 0 ? true : _a, from = options.from;
                     body = request.body, octetString = request.octetString;
@@ -288,34 +293,30 @@ function postSimpleSignFlow(options) {
                     encodedRequest = body[direction];
                     sigAlg = body['SigAlg'];
                     signature = body['Signature'];
-                    // query must contain the saml content
                     if (encodedRequest === undefined) {
-                        return [2 /*return*/, Promise.reject('ERR_SIMPLESIGN_FLOW_BAD_ARGS')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_SIMPLESIGN_FLOW_BAD_ARGS'))];
                     }
                     xmlString = String((0, utility_1.base64Decode)(encodedRequest));
-                    _b.label = 1;
+                    _d.label = 1;
                 case 1:
-                    _b.trys.push([1, 3, , 4]);
+                    _d.trys.push([1, 3, , 4]);
                     return [4 /*yield*/, libsaml_1.default.isValidXml(xmlString)];
                 case 2:
-                    _b.sent();
+                    _d.sent();
                     return [3 /*break*/, 4];
                 case 3:
-                    e_2 = _b.sent();
-                    return [2 /*return*/, Promise.reject('ERR_INVALID_XML')];
-                case 4: 
-                // check status based on different scenarios
-                return [4 /*yield*/, checkStatus(xmlString, parserType)];
+                    _b = _d.sent();
+                    return [2 /*return*/, Promise.reject(new Error('ERR_INVALID_XML'))];
+                case 4: return [4 /*yield*/, checkStatus(xmlString, parserType)];
                 case 5:
-                    // check status based on different scenarios
-                    _b.sent();
+                    _d.sent();
                     assertion = '';
                     if (parserType === urlParams.samlResponse) {
                         verifiedDoc = (0, extractor_1.extract)(xmlString, [{
                                 key: 'assertion',
                                 localPath: ['~Response', 'Assertion'],
                                 attributes: [],
-                                context: true
+                                context: true,
                             }]);
                         if (verifiedDoc && verifiedDoc.assertion) {
                             assertion = verifiedDoc.assertion;
@@ -327,49 +328,48 @@ function postSimpleSignFlow(options) {
                         sigAlg: null,
                         extract: (0, extractor_1.extract)(xmlString, extractorFields),
                     };
-                    // see if signature check is required
-                    // only verify message signature is enough
                     if (checkSignature) {
                         if (!signature || !sigAlg) {
-                            return [2 /*return*/, Promise.reject('ERR_MISSING_SIG_ALG')];
+                            return [2 /*return*/, Promise.reject(new Error('ERR_MISSING_SIG_ALG'))];
                         }
                         base64Signature = Buffer.from(signature, 'base64');
                         verified = libsaml_1.default.verifyMessageSignature(targetEntityMetadata, octetString, base64Signature, sigAlg);
                         if (!verified) {
-                            // Fail to verify message signature
-                            return [2 /*return*/, Promise.reject('ERR_FAILED_MESSAGE_SIGNATURE_VERIFICATION')];
+                            return [2 /*return*/, Promise.reject(new Error('ERR_FAILED_MESSAGE_SIGNATURE_VERIFICATION'))];
                         }
                         parseResult.sigAlg = sigAlg;
                     }
                     issuer = targetEntityMetadata.getEntityID();
                     extractedProperties = parseResult.extract;
-                    // unmatched issuer
                     if ((parserType === 'LogoutResponse' || parserType === 'SAMLResponse')
                         && extractedProperties
                         && extractedProperties.issuer !== issuer) {
-                        return [2 /*return*/, Promise.reject('ERR_UNMATCH_ISSUER')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_UNMATCH_ISSUER'))];
                     }
-                    // invalid session time
-                    // only run the verifyTime when `SessionNotOnOrAfter` exists
                     if (parserType === 'SAMLResponse'
-                        && extractedProperties.sessionIndex.sessionNotOnOrAfter
+                        && ((_c = extractedProperties.sessionIndex) === null || _c === void 0 ? void 0 : _c.sessionNotOnOrAfter)
                         && !(0, validator_1.verifyTime)(undefined, extractedProperties.sessionIndex.sessionNotOnOrAfter, self.entitySetting.clockDrifts)) {
-                        return [2 /*return*/, Promise.reject('ERR_EXPIRED_SESSION')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_EXPIRED_SESSION'))];
                     }
-                    // invalid time
-                    // 2.4.1.2 https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
                     if (parserType === 'SAMLResponse'
                         && extractedProperties.conditions
                         && !(0, validator_1.verifyTime)(extractedProperties.conditions.notBefore, extractedProperties.conditions.notOnOrAfter, self.entitySetting.clockDrifts)) {
-                        return [2 /*return*/, Promise.reject('ERR_SUBJECT_UNCONFIRMED')];
+                        return [2 /*return*/, Promise.reject(new Error('ERR_SUBJECT_UNCONFIRMED'))];
                     }
                     return [2 /*return*/, Promise.resolve(parseResult)];
             }
         });
     });
 }
+/**
+ * Inspect the SAML `<Status>` code on a response and reject with a
+ * detailed error string when the top-tier code is not `Success`.
+ *
+ * @param content response XML
+ * @param parserType parser type (only SAMLResponse/LogoutResponse are checked)
+ * @returns `"OK"` when success or `"SKIPPED"` for non-response messages
+ */
 function checkStatus(content, parserType) {
-    // only check response parser
     if (parserType !== urlParams.samlResponse && parserType !== urlParams.logoutResponse) {
         return Promise.resolve('SKIPPED');
     }
@@ -377,21 +377,25 @@ function checkStatus(content, parserType) {
         ? extractor_1.loginResponseStatusFields
         : extractor_1.logoutResponseStatusFields;
     var _a = (0, extractor_1.extract)(content, fields), top = _a.top, second = _a.second;
-    // only resolve when top-tier status code is success
     if (top === urn_1.StatusCode.Success) {
         return Promise.resolve('OK');
     }
     if (!top) {
         throw new Error('ERR_UNDEFINED_STATUS');
     }
-    // returns a detailed error for two-tier error code
     throw new Error("ERR_FAILED_STATUS with top tier code: ".concat(top, ", second tier code: ").concat(second));
 }
+/**
+ * Entry point: dispatch an inbound SAML message to the matching binding
+ * handler based on `options.binding`.
+ *
+ * @param options flow inputs (request, parserType, entities, binding)
+ * @returns resolved {@link FlowResult} on success
+ */
 function flow(options) {
     var binding = options.binding;
     var parserType = options.parserType;
     options.supportBindings = [urn_1.BindingNamespace.Redirect, urn_1.BindingNamespace.Post, urn_1.BindingNamespace.SimpleSign];
-    // saml response  allows POST, REDIRECT
     if (parserType === urn_1.ParserType.SAMLResponse) {
         options.supportBindings = [urn_1.BindingNamespace.Post, urn_1.BindingNamespace.Redirect, urn_1.BindingNamespace.SimpleSign];
     }
@@ -404,6 +408,6 @@ function flow(options) {
     if (binding === bindDict.simpleSign) {
         return postSimpleSignFlow(options);
     }
-    return Promise.reject('ERR_UNEXPECTED_FLOW');
+    return Promise.reject(new Error('ERR_UNEXPECTED_FLOW'));
 }
 //# sourceMappingURL=flow.js.map

package/build/src/flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"flow.js","sourceRoot":"","sources":["../../src/flow.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2bA,oBAyBC;AApdD,qCAAwD;AACxD,yCAAyC;AACzC,sDAAgC;AAChC,yCASqB;AAErB,6BAMe;AAEf,IAAM,QAAQ,GAAG,aAAO,CAAC,OAAO,CAAC;AACjC,IAAM,SAAS,GAAG,aAAO,CAAC,SAAS,CAAC;AAQpC,2DAA2D;AAC3D,SAAS,yBAAyB,CAAC,UAAsB,EAAE,SAAe;IACxE,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,gBAAU,CAAC,WAAW;YACzB,OAAO,8BAAkB,CAAC;QAC5B,KAAK,gBAAU,CAAC,YAAY;YAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,iBAAiB;gBACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAA,+BAAmB,EAAC,SAAS,CAAC,CAAC;QACxC,KAAK,gBAAU,CAAC,aAAa;YAC3B,OAAO,+BAAmB,CAAC;QAC7B,KAAK,gBAAU,CAAC,cAAc;YAC5B,OAAO,gCAAoB,CAAC;QAC9B;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,oCAAoC;AACpC,SAAe,YAAY,CAAC,OAAO;;;;;;oBAEzB,OAAO,GAAoD,OAAO,QAA3D,EAAE,UAAU,GAAwC,OAAO,WAA/C,EAAE,IAAI,GAAkC,OAAO,KAAzC,EAAE,KAAgC,OAAO,eAAlB,EAArB,cAAc,mBAAG,IAAI,KAAA,EAAE,IAAI,GAAK,OAAO,KAAZ,CAAa;oBACnE,KAAK,GAAkB,OAAO,MAAzB,EAAE,WAAW,GAAK,OAAO,YAAZ,CAAa;oBACvB,MAAM,GAA2B,KAAK,OAAhC,EAAa,SAAS,GAAK,KAAK,UAAV,CAAW;oBAEjD,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC;oBAGvC,SAAS,GAAG,iBAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;oBACpD,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;oBAEjC,sCAAsC;oBACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,sBAAO,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAC;oBACtD,CAAC;oBAEK,SAAS,GAAG,IAAA,uBAAa,EAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;;;;oBAI3D,qBAAM,iBAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAA;;oBAAnC,SAAmC,CAAC;;;;oBAEpC,sBAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAC;;gBAG3C,4CAA4C;gBAC5C,qBAAM,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,EAAA;;oBADxC,4CAA4C;oBAC5C,SAAwC,CAAC;oBAErC,SAAS,GAAW,EAAE,CAAC;oBAE3B,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,EAAC,CAAC;wBAEnC,WAAW,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,CAAC;gCACtC,GAAG,EAAE,WAAW;gCAChB,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;gCACrC,UAAU,EAAE,EAAE;gCACd,OAAO,EAAE,IAAI;6BACd,CAAC,CAAC,CAAC;wBACJ,IAAI,WAAW,IAAI,WAAW,CAAC,SAAS,EAAC,CAAC;4BACxC,SAAS,GAAG,WAAW,CAAC,SAAmB,CAAC;wBAC9C,CAAC;oBACH,CAAC;oBAEK,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAEjG,WAAW,GAAmE;wBAClF,WAAW,EAAE,SAAS;wBACtB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,eAAe,CAAC;qBAC7C,CAAC;oBAEF,qCAAqC;oBACrC,0CAA0C;oBAC1C,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;4BAC1B,sBAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAC;wBAC/C,CAAC;wBAGK,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;wBACvE,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;wBAE1C,QAAQ,GAAG,iBAAO,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;wBAE5G,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,mCAAmC;4BACnC,sBAAO,OAAO,CAAC,MAAM,CAAC,2CAA2C,CAAC,EAAC;wBACrE,CAAC;wBAED,WAAW,CAAC,MAAM,GAAG,YAAY,CAAC;oBACpC,CAAC;oBAKK,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC;oBAEhD,mBAAmB;oBACnB,IACE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,KAAK,cAAc,CAAC;2BAC/D,mBAAmB;2BACnB,mBAAmB,CAAC,MAAM,KAAK,MAAM,EACxC,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAC;oBAC9C,CAAC;oBAED,uBAAuB;oBACvB,4DAA4D;oBAC5D,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,YAAY,CAAC,mBAAmB;2BACpD,CAAC,IAAA,sBAAU,EACZ,SAAS,EACT,mBAAmB,CAAC,YAAY,CAAC,mBAAmB,EACpD,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAC;oBAC/C,CAAC;oBAED,eAAe;oBACf,8EAA8E;oBAC9E,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,UAAU;2BAC9B,CAAC,IAAA,sBAAU,EACZ,mBAAmB,CAAC,UAAU,CAAC,SAAS,EACxC,mBAAmB,CAAC,UAAU,CAAC,YAAY,EAC3C,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAC;oBACnD,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC;;;;CACrC;AAED,wBAAwB;AACxB,SAAe,QAAQ,CAAC,OAAO;;;;;;oBAG3B,OAAO,GAKL,OAAO,QALF,EACP,IAAI,GAIF,OAAO,KAJL,EACJ,IAAI,GAGF,OAAO,KAHL,EACJ,UAAU,GAER,OAAO,WAFC,EACV,KACE,OAAO,eADY,EAArB,cAAc,mBAAG,IAAI,KAAA,CACX;oBAEJ,IAAI,GAAK,OAAO,KAAZ,CAAa;oBAEnB,SAAS,GAAG,iBAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;oBACpD,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;oBAEnC,WAAW,GAAG,MAAM,CAAC,IAAA,sBAAY,EAAC,cAAc,CAAC,CAAC,CAAC;oBAEjD,mBAAmB,GAAG;wBAC1B,QAAQ,EAAE,IAAI,CAAC,UAAU;wBACzB,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,yBAAyB;qBACjE,CAAC;oBAEI,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC;oBAE5D,eAAe,GAAoB,EAAE,CAAC;oBAE1C,yBAAyB;oBACzB,qBAAM,iBAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAA;;oBADrC,yBAAyB;oBACzB,SAAqC,CAAC;oBAEtC,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;wBAC1C,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBAChE,CAAC;oBAED,4CAA4C;oBAC5C,qBAAM,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,EAAA;;oBAD1C,4CAA4C;oBAC5C,SAA0C,CAAC;yBAIzC,cAAc,EAAd,wBAAc;oBAGR,KAAA,OAAoC,iBAAO,CAAC,eAAe,CAAC,WAAW,EAAE,mBAAmB,CAAC,IAAA,EAA5F,QAAQ,QAAA,EAAE,qBAAqB,QAAA,CAA8D;yBAIhG,CAAA,eAAe,IAAI,QAAQ,IAAI,UAAU,KAAK,cAAc,IAAI,qBAAqB,CAAA,EAArF,wBAAqF;oBAExE,qBAAM,iBAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAA;;oBAApE,MAAM,GAAG,SAA2D;oBAC1E,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACxB,sCAAsC;oBACtC,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;;;yBAC1D,CAAA,eAAe,IAAI,CAAC,QAAQ,CAAA,EAA5B,wBAA4B;oBAEtB,qBAAM,iBAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAA;;oBAA1D,MAAM,GAAG,SAAiD;oBAC1D,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACzB,KAAA,OAAqD,iBAAO,CAAC,eAAe,CAAC,YAAY,EAAE,mBAAmB,CAAC,IAAA,EAA9G,oBAAoB,QAAA,EAAE,0BAA0B,QAAA,CAA+D;oBACtH,IAAI,oBAAoB,EAAE,CAAC;wBACzB,sCAAsC;wBACtC,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;oBACtF,CAAC;yBAAM,CAAC;wBACN,sBAAO,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAC;oBACtD,CAAC;;;oBACI,IAAI,QAAQ,EAAE,CAAC;wBACpB,sCAAsC;wBACtC,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;oBACjF,CAAC;yBAAM,CAAC;wBACN,sBAAO,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAC;oBACtD,CAAC;;;oBAGG,WAAW,GAAG;wBAClB,WAAW,EAAE,WAAW;wBACxB,OAAO,EAAE,IAAA,mBAAO,EAAC,WAAW,EAAE,eAAe,CAAC;qBAC/C,CAAC;oBAKI,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC;oBACvC,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC;oBAEhD,mBAAmB;oBACnB,IACE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,KAAK,cAAc,CAAC;2BAC/D,mBAAmB;2BACnB,mBAAmB,CAAC,MAAM,KAAK,MAAM,EACxC,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAC;oBAC9C,CAAC;oBAED,uBAAuB;oBACvB,4DAA4D;oBAC5D,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,YAAY,CAAC,mBAAmB;2BACpD,CAAC,IAAA,sBAAU,EACZ,SAAS,EACT,mBAAmB,CAAC,YAAY,CAAC,mBAAmB,EACpD,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAC;oBAC/C,CAAC;oBAED,eAAe;oBACf,8EAA8E;oBAC9E,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,UAAU;2BAC9B,CAAC,IAAA,sBAAU,EACZ,mBAAmB,CAAC,UAAU,CAAC,SAAS,EACxC,mBAAmB,CAAC,UAAU,CAAC,YAAY,EAC3C,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAC;oBACnD,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC;;;;CACrC;AAGD,4CAA4C;AAC5C,SAAe,kBAAkB,CAAC,OAAO;;;;;;oBAE/B,OAAO,GAAoD,OAAO,QAA3D,EAAE,UAAU,GAAwC,OAAO,WAA/C,EAAE,IAAI,GAAkC,OAAO,KAAzC,EAAE,KAAgC,OAAO,eAAlB,EAArB,cAAc,mBAAG,IAAI,KAAA,EAAE,IAAI,GAAK,OAAO,KAAZ,CAAa;oBAEnE,IAAI,GAAkB,OAAO,KAAzB,EAAE,WAAW,GAAK,OAAO,YAAZ,CAAa;oBAEhC,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC;oBAGvC,SAAS,GAAG,iBAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;oBACpD,cAAc,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC;oBACzC,MAAM,GAAW,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAChC,SAAS,GAAW,IAAI,CAAC,WAAW,CAAC,CAAC;oBAE5C,sCAAsC;oBACtC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBACjC,sBAAO,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,EAAC;oBACxD,CAAC;oBAEK,SAAS,GAAG,MAAM,CAAC,IAAA,sBAAY,EAAC,cAAc,CAAC,CAAC,CAAC;;;;oBAIrD,qBAAM,iBAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAA;;oBAAnC,SAAmC,CAAC;;;;oBAEpC,sBAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAC;;gBAG3C,4CAA4C;gBAC5C,qBAAM,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,EAAA;;oBADxC,4CAA4C;oBAC5C,SAAwC,CAAC;oBAErC,SAAS,GAAW,EAAE,CAAC;oBAE3B,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,EAAC,CAAC;wBAEnC,WAAW,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,CAAC;gCACtC,GAAG,EAAE,WAAW;gCAChB,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;gCACrC,UAAU,EAAE,EAAE;gCACd,OAAO,EAAE,IAAI;6BACd,CAAC,CAAC,CAAC;wBACJ,IAAI,WAAW,IAAI,WAAW,CAAC,SAAS,EAAC,CAAC;4BACxC,SAAS,GAAG,WAAW,CAAC,SAAmB,CAAC;wBAC9C,CAAC;oBACH,CAAC;oBAEK,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAEjG,WAAW,GAAmE;wBAClF,WAAW,EAAE,SAAS;wBACtB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,eAAe,CAAC;qBAC7C,CAAC;oBAEF,qCAAqC;oBACrC,0CAA0C;oBAC1C,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;4BAC1B,sBAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAC;wBAC/C,CAAC;wBAGK,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;wBAEnD,QAAQ,GAAG,iBAAO,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;wBAE5G,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,mCAAmC;4BACnC,sBAAO,OAAO,CAAC,MAAM,CAAC,2CAA2C,CAAC,EAAC;wBACrE,CAAC;wBAED,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;oBAC9B,CAAC;oBAKK,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC;oBAEhD,mBAAmB;oBACnB,IACE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,KAAK,cAAc,CAAC;2BAC/D,mBAAmB;2BACnB,mBAAmB,CAAC,MAAM,KAAK,MAAM,EACxC,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAC;oBAC9C,CAAC;oBAED,uBAAuB;oBACvB,4DAA4D;oBAC5D,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,YAAY,CAAC,mBAAmB;2BACpD,CAAC,IAAA,sBAAU,EACZ,SAAS,EACT,mBAAmB,CAAC,YAAY,CAAC,mBAAmB,EACpD,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAC;oBAC/C,CAAC;oBAED,eAAe;oBACf,8EAA8E;oBAC9E,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,UAAU;2BAC9B,CAAC,IAAA,sBAAU,EACZ,mBAAmB,CAAC,UAAU,CAAC,SAAS,EACxC,mBAAmB,CAAC,UAAU,CAAC,YAAY,EAC3C,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAC;oBACnD,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC;;;;CACrC;AAGD,SAAS,WAAW,CAAC,OAAe,EAAE,UAAkB;IAEtD,6BAA6B;IAC7B,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,IAAI,UAAU,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;QACrF,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,IAAM,MAAM,GAAG,UAAU,KAAK,SAAS,CAAC,YAAY;QAClD,CAAC,CAAC,qCAAyB;QAC3B,CAAC,CAAC,sCAA0B,CAAC;IAEzB,IAAA,KAAgB,IAAA,mBAAO,EAAC,OAAO,EAAE,MAAM,CAAC,EAAvC,GAAG,SAAA,EAAE,MAAM,YAA4B,CAAC;IAE/C,oDAAoD;IACpD,IAAI,GAAG,KAAK,gBAAU,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,mDAAmD;IACnD,MAAM,IAAI,KAAK,CAAC,gDAAyC,GAAG,iCAAuB,MAAM,CAAE,CAAC,CAAC;AAC/F,CAAC;AAED,SAAgB,IAAI,CAAC,OAAO;IAE1B,IAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAEtC,OAAO,CAAC,eAAe,GAAG,CAAC,sBAAgB,CAAC,QAAQ,EAAE,sBAAgB,CAAC,IAAI,EAAE,sBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1G,uCAAuC;IACvC,IAAI,UAAU,KAAK,gBAAU,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,CAAC,eAAe,GAAG,CAAC,sBAAgB,CAAC,IAAI,EAAE,sBAAgB,CAAC,QAAQ,EAAE,sBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAE/C,CAAC"}
+{"version":3,"file":"flow.js","sourceRoot":"","sources":["../../src/flow.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAicA,oBAsBC;AAvdD;;;;;;GAMG;AACH,qCAAwD;AACxD,yCAAyC;AACzC,sDAAgC;AAChC,yCASqB;AAIrB,6BAKe;AAEf,IAAM,QAAQ,GAAG,aAAO,CAAC,OAAO,CAAC;AACjC,IAAM,SAAS,GAAG,aAAO,CAAC,SAAS,CAAC;AAqBpC;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAChC,UAA+B,EAC/B,SAAyB;IAEzB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,gBAAU,CAAC,WAAW;YACzB,OAAO,8BAAkB,CAAC;QAC5B,KAAK,gBAAU,CAAC,YAAY;YAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAA,+BAAmB,EAAC,SAAS,CAAC,CAAC;QACxC,KAAK,gBAAU,CAAC,aAAa;YAC3B,OAAO,+BAAmB,CAAC;QAC7B,KAAK,gBAAU,CAAC,cAAc;YAC5B,OAAO,gCAAoB,CAAC;QAC9B;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAe,YAAY,CAAC,OAAoB;;;;;;;oBACtC,OAAO,GAAoD,OAAO,QAA3D,EAAE,UAAU,GAAwC,OAAO,WAA/C,EAAE,IAAI,GAAkC,OAAO,KAAzC,EAAE,KAAgC,OAAO,eAAlB,EAArB,cAAc,mBAAG,IAAI,KAAA,EAAE,IAAI,GAAK,OAAO,KAAZ,CAAa;oBACnE,KAAK,GAAkB,OAAO,MAAzB,EAAE,WAAW,GAAK,OAAO,YAAZ,CAAa;oBACjC,KAA2C,KAA2C,EAA5E,MAAM,YAAA,EAAa,SAAS,eAAA,CAAiD;oBAEvF,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC;oBAEvC,SAAS,GAAG,iBAAO,CAAC,mBAAmB,CAAC,UAAoB,CAAC,CAAC;oBAC9D,OAAO,GAAI,KAA4C,CAAC,SAAS,CAAC,CAAC;oBAEzE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAC;oBACjE,CAAC;oBAEK,SAAS,GAAG,IAAA,uBAAa,EAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;;;;oBAG3D,qBAAM,iBAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAA;;oBAAnC,SAAmC,CAAC;;;;oBAEpC,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAC;wBAGtD,qBAAM,WAAW,CAAC,SAAS,EAAE,UAAoB,CAAC,EAAA;;oBAAlD,SAAkD,CAAC;oBAE/C,SAAS,GAAG,EAAE,CAAC;oBAEnB,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;wBACpC,WAAW,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,CAAC;gCACtC,GAAG,EAAE,WAAW;gCAChB,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;gCACrC,UAAU,EAAE,EAAE;gCACd,OAAO,EAAE,IAAI;6BACd,CAAC,CAAC,CAAC;wBACJ,IAAI,WAAW,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;4BACzC,SAAS,GAAG,WAAW,CAAC,SAAmB,CAAC;wBAC9C,CAAC;oBACH,CAAC;oBAEK,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAEjG,WAAW,GAAe;wBAC9B,WAAW,EAAE,SAAS;wBACtB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,eAAe,CAAC;qBAC7C,CAAC;oBAEF,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;4BAC1B,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAC;wBAC1D,CAAC;wBAEK,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;wBACvE,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;wBAE1C,QAAQ,GAAG,iBAAO,CAAC,sBAAsB,CAC7C,oBAAoB,EACpB,WAAqB,EACrB,eAAe,EACf,MAAM,CACP,CAAC;wBAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,EAAC;wBAChF,CAAC;wBAED,WAAW,CAAC,MAAM,GAAG,YAAY,CAAC;oBACpC,CAAC;oBAEK,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC;oBAEhD,IACE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,KAAK,cAAc,CAAC;2BAC/D,mBAAmB;2BACnB,mBAAmB,CAAC,MAAM,KAAK,MAAM,EACxC,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAC;oBACzD,CAAC;oBAED,0EAA0E;oBAC1E,IACE,UAAU,KAAK,cAAc;4BAC1B,MAAC,mBAAmB,CAAC,YAAmD,0CAAE,mBAAmB,CAAA;2BAC7F,CAAC,IAAA,sBAAU,EACZ,SAAS,EACR,mBAAmB,CAAC,YAAuC,CAAC,mBAAmB,EAChF,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAC;oBAC1D,CAAC;oBAED,gDAAgD;oBAChD,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,UAAU;2BAC9B,CAAC,IAAA,sBAAU,EACX,mBAAmB,CAAC,UAAqC,CAAC,SAAS,EACnE,mBAAmB,CAAC,UAAqC,CAAC,YAAY,EACvE,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAC;oBAC9D,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC;;;;CACrC;AAED;;;;GAIG;AACH,SAAe,QAAQ,CAAC,OAAoB;;;;;;;oBAExC,OAAO,GAKL,OAAO,QALF,EACP,IAAI,GAIF,OAAO,KAJL,EACJ,IAAI,GAGF,OAAO,KAHL,EACJ,UAAU,GAER,OAAO,WAFC,EACV,KACE,OAAO,eADY,EAArB,cAAc,mBAAG,IAAI,KAAA,CACX;oBAEJ,IAAI,GAAK,OAAO,KAAZ,CAAa;oBAEnB,SAAS,GAAG,iBAAO,CAAC,mBAAmB,CAAC,UAAoB,CAAC,CAAC;oBAC9D,cAAc,GAAI,IAA2C,CAAC,SAAS,CAAW,CAAC;oBAErF,WAAW,GAAG,MAAM,CAAC,IAAA,sBAAY,EAAC,cAAc,CAAC,CAAC,CAAC;oBAEjD,mBAAmB,GAAG;wBAC1B,QAAQ,EAAE,IAAI,CAAC,UAAU;wBACzB,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,yBAAyB;qBACjE,CAAC;oBAEI,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC;oBAE5D,eAAe,GAAoB,EAAE,CAAC;oBAE1C,qBAAM,iBAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAA;;oBAArC,SAAqC,CAAC;oBAEtC,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;wBAC1C,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBAChE,CAAC;oBAED,qBAAM,WAAW,CAAC,WAAW,EAAE,UAAoB,CAAC,EAAA;;oBAApD,SAAoD,CAAC;yBAEjD,cAAc,EAAd,wBAAc;oBACV,KAAA,OAAoC,iBAAO,CAAC,eAAe,CAAC,WAAW,EAAE,mBAAmB,CAAC,IAAA,EAA5F,QAAQ,QAAA,EAAE,qBAAqB,QAAA,CAA8D;yBAGhG,CAAA,eAAe,IAAI,QAAQ,IAAI,UAAU,KAAK,cAAc,IAAI,qBAAqB,CAAA,EAArF,wBAAqF;oBACxE,qBAAM,iBAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAA;;oBAApE,MAAM,GAAG,SAA2D;oBAC1E,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACxB,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;;;yBAC1D,CAAA,eAAe,IAAI,CAAC,QAAQ,CAAA,EAA5B,wBAA4B;oBAEtB,qBAAM,iBAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAA;;oBAA1D,MAAM,GAAG,SAAiD;oBAC1D,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACzB,KAAA,OAAqD,iBAAO,CAAC,eAAe,CAAC,YAAY,EAAE,mBAAmB,CAAC,IAAA,EAA9G,oBAAoB,QAAA,EAAE,0BAA0B,QAAA,CAA+D;oBACtH,IAAI,oBAAoB,EAAE,CAAC;wBACzB,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;oBACtF,CAAC;yBAAM,CAAC;wBACN,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAC;oBACjE,CAAC;;;oBACI,IAAI,QAAQ,EAAE,CAAC;wBACpB,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;oBACjF,CAAC;yBAAM,CAAC;wBACN,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAC;oBACjE,CAAC;;;oBAGG,WAAW,GAAe;wBAC9B,WAAW,aAAA;wBACX,OAAO,EAAE,IAAA,mBAAO,EAAC,WAAW,EAAE,eAAe,CAAC;qBAC/C,CAAC;oBAEI,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC;oBACvC,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC;oBAEhD,IACE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,KAAK,cAAc,CAAC;2BAC/D,mBAAmB;2BACnB,mBAAmB,CAAC,MAAM,KAAK,MAAM,EACxC,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAC;oBACzD,CAAC;oBAED,IACE,UAAU,KAAK,cAAc;4BAC1B,MAAC,mBAAmB,CAAC,YAAmD,0CAAE,mBAAmB,CAAA;2BAC7F,CAAC,IAAA,sBAAU,EACZ,SAAS,EACR,mBAAmB,CAAC,YAAuC,CAAC,mBAAmB,EAChF,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAC;oBAC1D,CAAC;oBAED,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,UAAU;2BAC9B,CAAC,IAAA,sBAAU,EACX,mBAAmB,CAAC,UAAqC,CAAC,SAAS,EACnE,mBAAmB,CAAC,UAAqC,CAAC,YAAY,EACvE,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAC;oBAC9D,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC;;;;CACrC;AAED;;;GAGG;AACH,SAAe,kBAAkB,CAAC,OAAoB;;;;;;;oBAC5C,OAAO,GAAoD,OAAO,QAA3D,EAAE,UAAU,GAAwC,OAAO,WAA/C,EAAE,IAAI,GAAkC,OAAO,KAAzC,EAAE,KAAgC,OAAO,eAAlB,EAArB,cAAc,mBAAG,IAAI,KAAA,EAAE,IAAI,GAAK,OAAO,KAAZ,CAAa;oBAEnE,IAAI,GAAkB,OAAO,KAAzB,EAAE,WAAW,GAAK,OAAO,YAAZ,CAAa;oBAEhC,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC;oBAEvC,SAAS,GAAG,iBAAO,CAAC,mBAAmB,CAAC,UAAoB,CAAC,CAAC;oBAC9D,cAAc,GAAY,IAA+B,CAAC,SAAS,CAAC,CAAC;oBACrE,MAAM,GAAY,IAA+B,CAAC,QAAQ,CAAC,CAAC;oBAC5D,SAAS,GAAY,IAA+B,CAAC,WAAW,CAAC,CAAC;oBAExE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBACjC,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAC;oBACnE,CAAC;oBAEK,SAAS,GAAG,MAAM,CAAC,IAAA,sBAAY,EAAC,cAAc,CAAC,CAAC,CAAC;;;;oBAGrD,qBAAM,iBAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAA;;oBAAnC,SAAmC,CAAC;;;;oBAEpC,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAC;wBAGtD,qBAAM,WAAW,CAAC,SAAS,EAAE,UAAoB,CAAC,EAAA;;oBAAlD,SAAkD,CAAC;oBAE/C,SAAS,GAAG,EAAE,CAAC;oBAEnB,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;wBACpC,WAAW,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,CAAC;gCACtC,GAAG,EAAE,WAAW;gCAChB,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;gCACrC,UAAU,EAAE,EAAE;gCACd,OAAO,EAAE,IAAI;6BACd,CAAC,CAAC,CAAC;wBACJ,IAAI,WAAW,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;4BACzC,SAAS,GAAG,WAAW,CAAC,SAAmB,CAAC;wBAC9C,CAAC;oBACH,CAAC;oBAEK,eAAe,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAEjG,WAAW,GAAe;wBAC9B,WAAW,EAAE,SAAS;wBACtB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,eAAe,CAAC;qBAC7C,CAAC;oBAEF,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;4BAC1B,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAC;wBAC1D,CAAC;wBAEK,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;wBAEnD,QAAQ,GAAG,iBAAO,CAAC,sBAAsB,CAC7C,oBAAoB,EACpB,WAAqB,EACrB,eAAe,EACf,MAAM,CACP,CAAC;wBAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,EAAC;wBAChF,CAAC;wBAED,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;oBAC9B,CAAC;oBAEK,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;oBAC5C,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC;oBAEhD,IACE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,KAAK,cAAc,CAAC;2BAC/D,mBAAmB;2BACnB,mBAAmB,CAAC,MAAM,KAAK,MAAM,EACxC,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAC;oBACzD,CAAC;oBAED,IACE,UAAU,KAAK,cAAc;4BAC1B,MAAC,mBAAmB,CAAC,YAAmD,0CAAE,mBAAmB,CAAA;2BAC7F,CAAC,IAAA,sBAAU,EACZ,SAAS,EACR,mBAAmB,CAAC,YAAuC,CAAC,mBAAmB,EAChF,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAC;oBAC1D,CAAC;oBAED,IACE,UAAU,KAAK,cAAc;2BAC1B,mBAAmB,CAAC,UAAU;2BAC9B,CAAC,IAAA,sBAAU,EACX,mBAAmB,CAAC,UAAqC,CAAC,SAAS,EACnE,mBAAmB,CAAC,UAAqC,CAAC,YAAY,EACvE,IAAI,CAAC,aAAa,CAAC,WAAW,CAC/B,EACD,CAAC;wBACD,sBAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAC;oBAC9D,CAAC;oBAED,sBAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC;;;;CACrC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,OAAe,EAAE,UAAkB;IACtD,IAAI,UAAU,KAAK,SAAS,CAAC,YAAY,IAAI,UAAU,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;QACrF,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,IAAM,MAAM,GAAG,UAAU,KAAK,SAAS,CAAC,YAAY;QAClD,CAAC,CAAC,qCAAyB;QAC3B,CAAC,CAAC,sCAA0B,CAAC;IAEzB,IAAA,KAAkB,IAAA,mBAAO,EAAC,OAAO,EAAE,MAAM,CAAsC,EAA7E,GAAG,SAAA,EAAE,MAAM,YAAkE,CAAC;IAEtF,IAAI,GAAG,KAAK,gBAAU,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,gDAAyC,GAAG,iCAAuB,MAAM,CAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,IAAI,CAAC,OAAoB;IACvC,IAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAEtC,OAAO,CAAC,eAAe,GAAG,CAAC,sBAAgB,CAAC,QAAQ,EAAE,sBAAgB,CAAC,IAAI,EAAE,sBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1G,IAAI,UAAU,KAAK,gBAAU,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,CAAC,eAAe,GAAG,CAAC,sBAAgB,CAAC,IAAI,EAAE,sBAAgB,CAAC,QAAQ,EAAE,sBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC1D,CAAC"}