valtech-components 2.0.821 → 2.0.824

package/esm2022/lib/services/auth/config.mjs

@@ -0,0 +1,75 @@
+import { InjectionToken, makeEnvironmentProviders, APP_INITIALIZER, } from '@angular/core';
+import { provideHttpClient, withInterceptors } from '@angular/common/http';
+import { authInterceptor } from './interceptor';
+import { AuthService } from './auth.service';
+/**
+ * Token de inyección para la configuración de Auth.
+ */
+export const VALTECH_AUTH_CONFIG = new InjectionToken('ValtechAuthConfig');
+/**
+ * Configuración por defecto.
+ */
+export const DEFAULT_AUTH_CONFIG = {
+    authPrefix: '/v2/auth',
+    storagePrefix: 'valtech_auth_',
+    refreshBeforeExpiry: 60,
+    enableTabSync: true,
+    loginRoute: '/login',
+    homeRoute: '/',
+    unauthorizedRoute: '/unauthorized',
+    enableFirebaseIntegration: false,
+    enableDeviceRegistration: false,
+};
+/**
+ * Factory para inicializar el AuthService.
+ */
+function initializeAuth(authService) {
+    return () => authService.initialize();
+}
+/**
+ * Provee el servicio de autenticación a la aplicación Angular.
+ *
+ * @param config - Configuración de autenticación
+ * @returns EnvironmentProviders para usar en bootstrapApplication
+ *
+ * @example
+ * ```typescript
+ * // main.ts
+ * import { bootstrapApplication } from '@angular/platform-browser';
+ * import { provideValtechAuth } from 'valtech-components';
+ * import { environment } from './environments/environment';
+ *
+ * bootstrapApplication(AppComponent, {
+ *   providers: [
+ *     provideValtechAuth({
+ *       apiUrl: environment.apiUrl,
+ *       enableFirebaseIntegration: true,
+ *     }),
+ *   ],
+ * });
+ * ```
+ */
+export function provideValtechAuth(config) {
+    const mergedConfig = {
+        ...DEFAULT_AUTH_CONFIG,
+        ...config,
+    };
+    return makeEnvironmentProviders([
+        { provide: VALTECH_AUTH_CONFIG, useValue: mergedConfig },
+        provideHttpClient(withInterceptors([authInterceptor])),
+        // Inicializar AuthService al arrancar la app
+        {
+            provide: APP_INITIALIZER,
+            useFactory: initializeAuth,
+            deps: [AuthService],
+            multi: true,
+        },
+    ]);
+}
+/**
+ * Provee solo el interceptor (para apps que ya tienen AuthService configurado manualmente).
+ */
+export function provideValtechAuthInterceptor() {
+    return makeEnvironmentProviders([provideHttpClient(withInterceptors([authInterceptor]))]);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/esm2022/lib/services/auth/device.service.mjs

@@ -0,0 +1,135 @@
+import { Injectable, Inject } from '@angular/core';
+import { map } from 'rxjs/operators';
+import { VALTECH_AUTH_CONFIG } from './config';
+import * as i0 from "@angular/core";
+import * as i1 from "@angular/common/http";
+/**
+ * Servicio para gestión de dispositivos del usuario.
+ * Permite listar, aprobar, bloquear y eliminar dispositivos registrados.
+ *
+ * @example
+ * ```typescript
+ * import { DeviceService } from 'valtech-components';
+ *
+ * @Component({...})
+ * export class DevicesPage {
+ *   private deviceService = inject(DeviceService);
+ *
+ *   devices = signal<DeviceInfo[]>([]);
+ *
+ *   async ngOnInit() {
+ *     const devices = await firstValueFrom(this.deviceService.listDevices());
+ *     this.devices.set(devices);
+ *   }
+ *
+ *   async blockDevice(deviceId: string) {
+ *     await firstValueFrom(this.deviceService.blockDevice(deviceId));
+ *     // Recargar lista
+ *   }
+ * }
+ * ```
+ */
+export class DeviceService {
+    constructor(config, http) {
+        this.config = config;
+        this.http = http;
+    }
+    get baseUrl() {
+        return `${this.config.apiUrl}/v2/users/me/devices`;
+    }
+    /**
+     * Lista todos los dispositivos registrados del usuario.
+     */
+    listDevices() {
+        return this.http.get(this.baseUrl).pipe(map(response => response.devices));
+    }
+    /**
+     * Obtiene información de un dispositivo específico.
+     */
+    getDevice(deviceId) {
+        return this.http.get(`${this.baseUrl}/${deviceId}`).pipe(map(response => response.device));
+    }
+    /**
+     * Bloquea un dispositivo.
+     * Revoca todas las sesiones activas de ese dispositivo.
+     */
+    blockDevice(deviceId) {
+        return this.http.post(`${this.baseUrl}/${deviceId}/block`, {});
+    }
+    /**
+     * Aprueba un dispositivo pendiente.
+     * Cambia el estado de pending_approval a active.
+     */
+    approveDevice(deviceId) {
+        return this.http.post(`${this.baseUrl}/${deviceId}/approve`, {});
+    }
+    /**
+     * Elimina un dispositivo registrado.
+     */
+    deleteDevice(deviceId) {
+        return this.http.delete(`${this.baseUrl}/${deviceId}`);
+    }
+    /**
+     * Valida un token de acción SIN ejecutarlo.
+     * Útil para mostrar confirmación al usuario antes de ejecutar.
+     * Este endpoint NO requiere autenticación.
+     *
+     * @param token Token JWT de acción
+     * @returns Información del token si es válido
+     *
+     * @example
+     * ```typescript
+     * const token = this.route.snapshot.queryParams['token'];
+     * if (token) {
+     *   const validation = await firstValueFrom(this.deviceService.validateAction(token));
+     *   if (validation.valid) {
+     *     // Mostrar confirmación al usuario
+     *     console.log(`Acción: ${validation.actionType}`);
+     *   }
+     * }
+     * ```
+     */
+    validateAction(token) {
+        return this.http.post(`${this.config.apiUrl}/v2/actions/validate`, { token });
+    }
+    /**
+     * Ejecuta una acción de dispositivo desde un token de email.
+     * Este endpoint NO requiere autenticación.
+     * El token viene en la URL del email de alerta de nuevo inicio de sesión.
+     *
+     * @param token Token JWT de acción (24h, un solo uso)
+     *
+     * @example
+     * ```typescript
+     * // En la página de dispositivos, al detectar ?token=xxx en la URL:
+     * const token = this.route.snapshot.queryParams['token'];
+     * if (token) {
+     *   const result = await firstValueFrom(this.deviceService.executeAction(token));
+     *   if (result.success) {
+     *     console.log(`Dispositivo bloqueado, ${result.sessionsRevoked} sesiones cerradas`);
+     *   }
+     * }
+     * ```
+     */
+    executeAction(token) {
+        // Usa el endpoint unificado de acciones
+        return this.http.post(`${this.config.apiUrl}/v2/actions/execute`, { token }).pipe(map(response => ({
+            operationId: response.operationId,
+            success: response.success,
+            message: response.message,
+            action: response.data?.['action'] || 'refuse',
+            deviceId: response.data?.['deviceId'] || '',
+            sessionsRevoked: response.data?.['sessionsRevoked'],
+        })));
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: DeviceService, deps: [{ token: VALTECH_AUTH_CONFIG }, { token: i1.HttpClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: DeviceService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: DeviceService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }], ctorParameters: () => [{ type: undefined, decorators: [{
+                    type: Inject,
+                    args: [VALTECH_AUTH_CONFIG]
+                }] }, { type: i1.HttpClient }] });
+//# sourceMappingURL=data:application/json;base64,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

package/esm2022/lib/services/auth/guards.mjs

@@ -0,0 +1,199 @@
+import { inject } from '@angular/core';
+import { Router, } from '@angular/router';
+import { AuthService } from './auth.service';
+import { VALTECH_AUTH_CONFIG } from './config';
+/**
+ * Guard que verifica si el usuario está autenticado.
+ * Redirige a loginRoute si no está autenticado.
+ *
+ * Preserva la URL solicitada en el query param `returnUrl` para que la
+ * página de login pueda devolver al usuario a su destino tras autenticarse.
+ *
+ * @example
+ * ```typescript
+ * import { authGuard } from 'valtech-components';
+ *
+ * const routes: Routes = [
+ *   {
+ *     path: 'dashboard',
+ *     canActivate: [authGuard],
+ *     loadComponent: () => import('./dashboard.page'),
+ *   },
+ * ];
+ * ```
+ */
+export const authGuard = (_route, state) => {
+    const authService = inject(AuthService);
+    const router = inject(Router);
+    const config = inject(VALTECH_AUTH_CONFIG);
+    if (authService.isAuthenticated()) {
+        return true;
+    }
+    return router.createUrlTree([config.loginRoute], {
+        queryParams: { returnUrl: state.url },
+    });
+};
+/**
+ * Guard que verifica si el usuario NO está autenticado.
+ * Redirige a homeRoute si ya está autenticado.
+ * Útil para páginas de login/registro.
+ *
+ * @example
+ * ```typescript
+ * import { guestGuard } from 'valtech-components';
+ *
+ * const routes: Routes = [
+ *   {
+ *     path: 'login',
+ *     canActivate: [guestGuard],
+ *     loadComponent: () => import('./login.page'),
+ *   },
+ * ];
+ * ```
+ */
+export const guestGuard = () => {
+    const authService = inject(AuthService);
+    const router = inject(Router);
+    const config = inject(VALTECH_AUTH_CONFIG);
+    if (!authService.isAuthenticated()) {
+        return true;
+    }
+    return router.createUrlTree([config.homeRoute]);
+};
+/**
+ * Factory para crear guard de permisos.
+ * Verifica si el usuario tiene el permiso especificado.
+ *
+ * @param permissions - Permiso o lista de permisos requeridos (OR)
+ * @returns Guard function
+ *
+ * @example
+ * ```typescript
+ * import { authGuard, permissionGuard } from 'valtech-components';
+ *
+ * const routes: Routes = [
+ *   {
+ *     path: 'templates',
+ *     canActivate: [authGuard, permissionGuard('templates:read')],
+ *     loadComponent: () => import('./templates.page'),
+ *   },
+ *   {
+ *     path: 'admin',
+ *     canActivate: [authGuard, permissionGuard(['admin:*', 'super_admin'])],
+ *     loadComponent: () => import('./admin.page'),
+ *   },
+ * ];
+ * ```
+ */
+export function permissionGuard(permissions) {
+    return () => {
+        const authService = inject(AuthService);
+        const router = inject(Router);
+        const config = inject(VALTECH_AUTH_CONFIG);
+        const permArray = Array.isArray(permissions) ? permissions : [permissions];
+        if (authService.hasAnyPermission(permArray)) {
+            return true;
+        }
+        console.warn(`[ValtechAuth] Permiso denegado. Requerido: ${permArray.join(' o ')}`);
+        return router.createUrlTree([config.unauthorizedRoute]);
+    };
+}
+/**
+ * Guard que lee permisos desde route.data.
+ * Permite configurar permisos directamente en la definición de rutas.
+ *
+ * @example
+ * ```typescript
+ * import { authGuard, permissionGuardFromRoute } from 'valtech-components';
+ *
+ * const routes: Routes = [
+ *   {
+ *     path: 'admin/users',
+ *     canActivate: [authGuard, permissionGuardFromRoute],
+ *     data: {
+ *       permissions: ['users:read', 'users:manage'],
+ *       requireAll: false  // true = AND, false = OR (default)
+ *     },
+ *     loadComponent: () => import('./users.page'),
+ *   },
+ * ];
+ * ```
+ */
+export const permissionGuardFromRoute = (route) => {
+    const authService = inject(AuthService);
+    const router = inject(Router);
+    const config = inject(VALTECH_AUTH_CONFIG);
+    const permissions = route.data['permissions'];
+    const requireAll = route.data['requireAll'];
+    if (!permissions || permissions.length === 0) {
+        return true;
+    }
+    const hasAccess = requireAll
+        ? authService.hasAllPermissions(permissions)
+        : authService.hasAnyPermission(permissions);
+    if (hasAccess) {
+        return true;
+    }
+    console.warn(`[ValtechAuth] Permiso denegado. Requerido: ${permissions.join(requireAll ? ' y ' : ' o ')}`);
+    return router.createUrlTree([config.unauthorizedRoute]);
+};
+/**
+ * Guard que verifica si el usuario es super admin.
+ *
+ * @example
+ * ```typescript
+ * import { authGuard, superAdminGuard } from 'valtech-components';
+ *
+ * const routes: Routes = [
+ *   {
+ *     path: 'super-admin',
+ *     canActivate: [authGuard, superAdminGuard],
+ *     loadComponent: () => import('./super-admin.page'),
+ *   },
+ * ];
+ * ```
+ */
+export const superAdminGuard = () => {
+    const authService = inject(AuthService);
+    const router = inject(Router);
+    const config = inject(VALTECH_AUTH_CONFIG);
+    if (authService.isSuperAdmin()) {
+        return true;
+    }
+    console.warn('[ValtechAuth] Acceso de super admin requerido');
+    return router.createUrlTree([config.unauthorizedRoute]);
+};
+/**
+ * Guard que verifica si el usuario tiene un rol específico.
+ *
+ * @param roles - Rol o lista de roles requeridos (OR)
+ * @returns Guard function
+ *
+ * @example
+ * ```typescript
+ * import { authGuard, roleGuard } from 'valtech-components';
+ *
+ * const routes: Routes = [
+ *   {
+ *     path: 'editor',
+ *     canActivate: [authGuard, roleGuard(['editor', 'admin'])],
+ *     loadComponent: () => import('./editor.page'),
+ *   },
+ * ];
+ * ```
+ */
+export function roleGuard(roles) {
+    return () => {
+        const authService = inject(AuthService);
+        const router = inject(Router);
+        const config = inject(VALTECH_AUTH_CONFIG);
+        const roleArray = Array.isArray(roles) ? roles : [roles];
+        const hasRole = roleArray.some(role => authService.hasRole(role));
+        if (hasRole) {
+            return true;
+        }
+        console.warn(`[ValtechAuth] Rol requerido: ${roleArray.join(' o ')}`);
+        return router.createUrlTree([config.unauthorizedRoute]);
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/esm2022/lib/services/auth/handoff.service.mjs

@@ -0,0 +1,152 @@
+import { Inject, Injectable } from '@angular/core';
+import { firstValueFrom } from 'rxjs';
+import { catchError, tap } from 'rxjs/operators';
+import { VALTECH_AUTH_CONFIG } from './config';
+import * as i0 from "@angular/core";
+import * as i1 from "@angular/common/http";
+import * as i2 from "./auth.service";
+import * as i3 from "@angular/router";
+/**
+ * Name of the query param that carries the handoff token. Apps may override
+ * via `detectAndExchangeHandoff({ tokenParam })` but the default keeps the
+ * convention consistent across the factory.
+ */
+export const HANDOFF_TOKEN_PARAM = 'handoff';
+/**
+ * Name of the query param that carries the post-exchange route.
+ */
+export const HANDOFF_ROUTE_PARAM = 'route';
+/**
+ * HandoffService — cross-app session transfer.
+ *
+ * Implements the OAuth Authorization Code pattern, applied internally between
+ * apps that share the same backend.
+ *
+ * **Origin app (user is authenticated):**
+ *
+ * ```typescript
+ * const { token, route } = await firstValueFrom(
+ *   handoff.createHandoff({ targetAppId: 'myvaltech', route: '/app/dashboard' })
+ * );
+ * window.location.href = `https://myvaltech.app/?handoff=${token}&route=${encodeURIComponent(route ?? '/')}`;
+ * ```
+ *
+ * **Target app (boot):** call `exchangeHandoff(token)`. On success, the session
+ * is installed (`AuthService.setExternalAuth`) and the user is authenticated.
+ * See `detectAndExchangeHandoff` helper for the typical bootstrap pattern.
+ *
+ * Security notes:
+ * - Token is single-use and short-lived (30s) — enforced server-side.
+ * - Token in URL must be removed from history after exchange to avoid log leakage.
+ * - The exchange endpoint is public; do NOT add auth header. The
+ *   `HttpClient` request below avoids triggering the auth interceptor since the
+ *   user isn't logged in yet on the target app.
+ */
+export class HandoffService {
+    constructor(config, http, auth, router) {
+        this.config = config;
+        this.http = http;
+        this.auth = auth;
+        this.router = router;
+        this.detected = false;
+    }
+    /**
+     * Create a handoff token. Caller must be authenticated.
+     *
+     * @param request Optional metadata: target app id and intended route.
+     * @returns Observable emitting `{ token, expiresAt, route? }`.
+     */
+    createHandoff(request = {}) {
+        return this.http.post(`${this.baseUrl}/handoff`, request);
+    }
+    /**
+     * Exchange a handoff token for a session and install it.
+     *
+     * On success, the response is piped through `AuthService.setExternalAuth`
+     * so the user becomes authenticated. Subsequent navigation can proceed.
+     *
+     * On failure, the observable errors. The caller is responsible for
+     * showing an error and routing to `/login`.
+     *
+     * @param token Raw handoff token read from the URL.
+     */
+    exchangeHandoff(token) {
+        return this.http
+            .post(`${this.baseUrl}/handoff/exchange`, { token })
+            .pipe(tap(response => this.installSession(response)), catchError(err => {
+            // Surface the error untouched — the caller decides how to react
+            // (typically: redirect to /login + toast). Don't install a bad session.
+            throw err;
+        }));
+    }
+    /**
+     * Bootstrap helper — reads the handoff token from the current URL, exchanges
+     * it for a session, and navigates to the intended route with the token
+     * stripped from history.
+     *
+     * Idempotent: subsequent calls are no-ops. Wire from an
+     * `APP_INITIALIZER`/`provideAppInitializer` factory in `main.ts`.
+     *
+     * ```typescript
+     * // main.ts
+     * provideAppInitializer(() => inject(HandoffService).detectAndExchangeHandoff())
+     * ```
+     *
+     * On error (expired/used/invalid token), redirects to `errorRoute` (default:
+     * the app's configured `loginRoute`). The URL is always cleaned, even on
+     * error, so the token cannot be retried by refreshing the page.
+     *
+     * @returns `true` if a handoff was detected and processed (success or fail).
+     *          `false` if no token was present (cold boot, normal flow).
+     */
+    async detectAndExchangeHandoff(options = {}) {
+        if (this.detected || typeof window === 'undefined') {
+            return false;
+        }
+        this.detected = true;
+        const tokenParam = options.tokenParam ?? HANDOFF_TOKEN_PARAM;
+        const routeParam = options.routeParam ?? HANDOFF_ROUTE_PARAM;
+        const defaultRoute = options.defaultRoute ?? '/';
+        const errorRoute = options.errorRoute ?? this.config.loginRoute ?? '/login';
+        const params = new URLSearchParams(window.location.search);
+        const token = params.get(tokenParam);
+        if (!token) {
+            return false;
+        }
+        const targetRoute = params.get(routeParam) || defaultRoute;
+        try {
+            await firstValueFrom(this.exchangeHandoff(token));
+            await this.router.navigateByUrl(targetRoute, { replaceUrl: true });
+        }
+        catch (err) {
+            console.warn('[Handoff] Exchange failed, redirecting to login', err);
+            await this.router.navigateByUrl(errorRoute, { replaceUrl: true });
+        }
+        return true;
+    }
+    /**
+     * Persist the session in `AuthService`. Mirrors the install flow used by
+     * the normal signin path so timers, Firebase, and tab-sync all kick in.
+     */
+    installSession(response) {
+        this.auth.setExternalAuth({
+            accessToken: response.accessToken,
+            refreshToken: response.refreshToken,
+            firebaseToken: response.firebaseToken,
+            expiresIn: response.expiresIn,
+        });
+    }
+    get baseUrl() {
+        return `${this.config.apiUrl}${this.config.authPrefix}`;
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: HandoffService, deps: [{ token: VALTECH_AUTH_CONFIG }, { token: i1.HttpClient }, { token: i2.AuthService }, { token: i3.Router }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: HandoffService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: HandoffService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }], ctorParameters: () => [{ type: undefined, decorators: [{
+                    type: Inject,
+                    args: [VALTECH_AUTH_CONFIG]
+                }] }, { type: i1.HttpClient }, { type: i2.AuthService }, { type: i3.Router }] });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaGFuZG9mZi5zZXJ2aWNlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2xpYi9zZXJ2aWNlcy9hdXRoL2hhbmRvZmYuc2VydmljZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFDQSxPQUFPLEVBQUUsTUFBTSxFQUFFLFVBQVUsRUFBRSxNQUFNLGVBQWUsQ0FBQztBQUVuRCxPQUFPLEVBQUUsY0FBYyxFQUFjLE1BQU0sTUFBTSxDQUFDO0FBQ2xELE9BQU8sRUFBRSxVQUFVLEVBQUUsR0FBRyxFQUFFLE1BQU0sZ0JBQWdCLENBQUM7QUFHakQsT0FBTyxFQUFFLG1CQUFtQixFQUFFLE1BQU0sVUFBVSxDQUFDOzs7OztBQUcvQzs7OztHQUlHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sbUJBQW1CLEdBQUcsU0FBUyxDQUFDO0FBRTdDOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sbUJBQW1CLEdBQUcsT0FBTyxDQUFDO0FBbUUzQzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztHQXlCRztBQUVILE1BQU0sT0FBTyxjQUFjO0lBR3pCLFlBQ3VDLE1BQXlCLEVBQ3RELElBQWdCLEVBQ2hCLElBQWlCLEVBQ2pCLE1BQWM7UUFIZSxXQUFNLEdBQU4sTUFBTSxDQUFtQjtRQUN0RCxTQUFJLEdBQUosSUFBSSxDQUFZO1FBQ2hCLFNBQUksR0FBSixJQUFJLENBQWE7UUFDakIsV0FBTSxHQUFOLE1BQU0sQ0FBUTtRQU5oQixhQUFRLEdBQUcsS0FBSyxDQUFDO0lBT3RCLENBQUM7SUFFSjs7Ozs7T0FLRztJQUNILGFBQWEsQ0FBQyxVQUFnQyxFQUFFO1FBQzlDLE9BQU8sSUFBSSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQXdCLEdBQUcsSUFBSSxDQUFDLE9BQU8sVUFBVSxFQUFFLE9BQU8sQ0FBQyxDQUFDO0lBQ25GLENBQUM7SUFFRDs7Ozs7Ozs7OztPQVVHO0lBQ0gsZUFBZSxDQUFDLEtBQWE7UUFDM0IsT0FBTyxJQUFJLENBQUMsSUFBSTthQUNiLElBQUksQ0FBMEIsR0FBRyxJQUFJLENBQUMsT0FBTyxtQkFBbUIsRUFBRSxFQUFFLEtBQUssRUFBRSxDQUFDO2FBQzVFLElBQUksQ0FDSCxHQUFHLENBQUMsUUFBUSxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsY0FBYyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQzlDLFVBQVUsQ0FBQyxHQUFHLENBQUMsRUFBRTtZQUNmLGdFQUFnRTtZQUNoRSx3RUFBd0U7WUFDeEUsTUFBTSxHQUFHLENBQUM7UUFDWixDQUFDLENBQUMsQ0FDSCxDQUFDO0lBQ04sQ0FBQztJQUVEOzs7Ozs7Ozs7Ozs7Ozs7Ozs7O09BbUJHO0lBQ0gsS0FBSyxDQUFDLHdCQUF3QixDQUFDLFVBQW9DLEVBQUU7UUFDbkUsSUFBSSxJQUFJLENBQUMsUUFBUSxJQUFJLE9BQU8sTUFBTSxLQUFLLFdBQVcsRUFBRSxDQUFDO1lBQ25ELE9BQU8sS0FBSyxDQUFDO1FBQ2YsQ0FBQztRQUNELElBQUksQ0FBQyxRQUFRLEdBQUcsSUFBSSxDQUFDO1FBRXJCLE1BQU0sVUFBVSxHQUFHLE9BQU8sQ0FBQyxVQUFVLElBQUksbUJBQW1CLENBQUM7UUFDN0QsTUFBTSxVQUFVLEdBQUcsT0FBTyxDQUFDLFVBQVUsSUFBSSxtQkFBbUIsQ0FBQztRQUM3RCxNQUFNLFlBQVksR0FBRyxPQUFPLENBQUMsWUFBWSxJQUFJLEdBQUcsQ0FBQztRQUNqRCxNQUFNLFVBQVUsR0FBRyxPQUFPLENBQUMsVUFBVSxJQUFJLElBQUksQ0FBQyxNQUFNLENBQUMsVUFBVSxJQUFJLFFBQVEsQ0FBQztRQUU1RSxNQUFNLE1BQU0sR0FBRyxJQUFJLGVBQWUsQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1FBQzNELE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLENBQUM7UUFDckMsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDO1lBQ1gsT0FBTyxLQUFLLENBQUM7UUFDZixDQUFDO1FBRUQsTUFBTSxXQUFXLEdBQUcsTUFBTSxDQUFDLEdBQUcsQ0FBQyxVQUFVLENBQUMsSUFBSSxZQUFZLENBQUM7UUFFM0QsSUFBSSxDQUFDO1lBQ0gsTUFBTSxjQUFjLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDO1lBQ2xELE1BQU0sSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsV0FBVyxFQUFFLEVBQUUsVUFBVSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7UUFDckUsQ0FBQztRQUFDLE9BQU8sR0FBRyxFQUFFLENBQUM7WUFDYixPQUFPLENBQUMsSUFBSSxDQUFDLGlEQUFpRCxFQUFFLEdBQUcsQ0FBQyxDQUFDO1lBQ3JFLE1BQU0sSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsVUFBVSxFQUFFLEVBQUUsVUFBVSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7UUFDcEUsQ0FBQztRQUVELE9BQU8sSUFBSSxDQUFDO0lBQ2QsQ0FBQztJQUVEOzs7T0FHRztJQUNLLGNBQWMsQ0FBQyxRQUFpQztRQUN0RCxJQUFJLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQztZQUN4QixXQUFXLEVBQUUsUUFBUSxDQUFDLFdBQVc7WUFDakMsWUFBWSxFQUFFLFFBQVEsQ0FBQyxZQUFZO1lBQ25DLGFBQWEsRUFBRSxRQUFRLENBQUMsYUFBYTtZQUNyQyxTQUFTLEVBQUUsUUFBUSxDQUFDLFNBQVM7U0FDOUIsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVELElBQVksT0FBTztRQUNqQixPQUFPLEdBQUcsSUFBSSxDQUFDLE1BQU0sQ0FBQyxNQUFNLEdBQUcsSUFBSSxDQUFDLE1BQU0sQ0FBQyxVQUFVLEVBQUUsQ0FBQztJQUMxRCxDQUFDOytHQTdHVSxjQUFjLGtCQUlmLG1CQUFtQjttSEFKbEIsY0FBYyxjQURELE1BQU07OzRGQUNuQixjQUFjO2tCQUQxQixVQUFVO21CQUFDLEVBQUUsVUFBVSxFQUFFLE1BQU0sRUFBRTs7MEJBSzdCLE1BQU07MkJBQUMsbUJBQW1CIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgSHR0cENsaWVudCB9IGZyb20gJ0Bhbmd1bGFyL2NvbW1vbi9odHRwJztcbmltcG9ydCB7IEluamVjdCwgSW5qZWN0YWJsZSB9IGZyb20gJ0Bhbmd1bGFyL2NvcmUnO1xuaW1wb3J0IHsgUm91dGVyIH0gZnJvbSAnQGFuZ3VsYXIvcm91dGVyJztcbmltcG9ydCB7IGZpcnN0VmFsdWVGcm9tLCBPYnNlcnZhYmxlIH0gZnJvbSAncnhqcyc7XG5pbXBvcnQgeyBjYXRjaEVycm9yLCB0YXAgfSBmcm9tICdyeGpzL29wZXJhdG9ycyc7XG5cbmltcG9ydCB7IEF1dGhTZXJ2aWNlIH0gZnJvbSAnLi9hdXRoLnNlcnZpY2UnO1xuaW1wb3J0IHsgVkFMVEVDSF9BVVRIX0NPTkZJRyB9IGZyb20gJy4vY29uZmlnJztcbmltcG9ydCB7IFZhbHRlY2hBdXRoQ29uZmlnIH0gZnJvbSAnLi90eXBlcyc7XG5cbi8qKlxuICogTmFtZSBvZiB0aGUgcXVlcnkgcGFyYW0gdGhhdCBjYXJyaWVzIHRoZSBoYW5kb2ZmIHRva2VuLiBBcHBzIG1heSBvdmVycmlkZVxuICogdmlhIGBkZXRlY3RBbmRFeGNoYW5nZUhhbmRvZmYoeyB0b2tlblBhcmFtIH0pYCBidXQgdGhlIGRlZmF1bHQga2VlcHMgdGhlXG4gKiBjb252ZW50aW9uIGNvbnNpc3RlbnQgYWNyb3NzIHRoZSBmYWN0b3J5LlxuICovXG5leHBvcnQgY29uc3QgSEFORE9GRl9UT0tFTl9QQVJBTSA9ICdoYW5kb2ZmJztcblxuLyoqXG4gKiBOYW1lIG9mIHRoZSBxdWVyeSBwYXJhbSB0aGF0IGNhcnJpZXMgdGhlIHBvc3QtZXhjaGFuZ2Ugcm91dGUuXG4gKi9cbmV4cG9ydCBjb25zdCBIQU5ET0ZGX1JPVVRFX1BBUkFNID0gJ3JvdXRlJztcblxuLyoqXG4gKiBPcHRpb25zIGZvciBgSGFuZG9mZlNlcnZpY2UuZGV0ZWN0QW5kRXhjaGFuZ2VIYW5kb2ZmYC5cbiAqL1xuZXhwb3J0IGludGVyZmFjZSBEZXRlY3RBbmRFeGNoYW5nZU9wdGlvbnMge1xuICAvKiogT3ZlcnJpZGUgdGhlIHF1ZXJ5IHBhcmFtIG5hbWUuIERlZmF1bHQ6IGAnaGFuZG9mZidgLiAqL1xuICB0b2tlblBhcmFtPzogc3RyaW5nO1xuICAvKiogT3ZlcnJpZGUgdGhlIHJvdXRlIHBhcmFtIG5hbWUuIERlZmF1bHQ6IGAncm91dGUnYC4gKi9cbiAgcm91dGVQYXJhbT86IHN0cmluZztcbiAgLyoqIFdoZXJlIHRvIG5hdmlnYXRlIGlmIG5vIHJvdXRlIHBhcmFtIGlzIHByZXNlbnQuIERlZmF1bHQ6IGAnLydgLiAqL1xuICBkZWZhdWx0Um91dGU/OiBzdHJpbmc7XG4gIC8qKiBXaGVyZSB0byBuYXZpZ2F0ZSBvbiBleGNoYW5nZSBlcnJvci4gRGVmYXVsdDogYXBwJ3MgY29uZmlndXJlZCBgbG9naW5Sb3V0ZWAuICovXG4gIGVycm9yUm91dGU/OiBzdHJpbmc7XG59XG5cbi8qKlxuICogUmVxdWVzdCBib2R5IGZvciBgUE9TVCAvdjIvYXV0aC9oYW5kb2ZmYC5cbiAqXG4gKiBCb3RoIGZpZWxkcyBhcmUgb3B0aW9uYWwgYW5kIHN0b3JlZCBmb3IgYXVkaXQgb25seSDigJQgdGhlIGV4Y2hhbmdlIHN0ZXBcbiAqIGRvZXMgbm90IGVuZm9yY2UgdGhhdCB0aGUgcmVkZWVtaW5nIGFwcCBtYXRjaGVzIGB0YXJnZXRBcHBJZGAuXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgSGFuZG9mZkNyZWF0ZVJlcXVlc3Qge1xuICAvKiogVGFyZ2V0IGFwcCB0aGUgaGFuZG9mZiBpcyBpbnRlbmRlZCBmb3IgKGUuZy4gYFwibXl2YWx0ZWNoXCJgKS4gQXVkaXQtb25seS4gKi9cbiAgdGFyZ2V0QXBwSWQ/OiBzdHJpbmc7XG4gIC8qKiBSb3V0ZSB0aGUgdGFyZ2V0IGFwcCBzaG91bGQgbmF2aWdhdGUgdG8gYWZ0ZXIgZXhjaGFuZ2UuIEVjaG9lZCBiYWNrLiAqL1xuICByb3V0ZT86IHN0cmluZztcbn1cblxuLyoqXG4gKiBSZXNwb25zZSBib2R5IGZyb20gYFBPU1QgL3YyL2F1dGgvaGFuZG9mZmAuXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgSGFuZG9mZkNyZWF0ZVJlc3BvbnNlIHtcbiAgb3BlcmF0aW9uSWQ6IHN0cmluZztcbiAgLyoqIFJhdyB0b2tlbiB0byBlbWJlZCBpbiB0aGUgcmVkaXJlY3QgVVJMIGFzIGA/aGFuZG9mZj08dG9rZW4+YC4gMzBzIFRUTCwgc2luZ2xlLXVzZS4gKi9cbiAgdG9rZW46IHN0cmluZztcbiAgLyoqIFJGQzMzMzkgZXhwaXJhdGlvbiB0aW1lc3RhbXAuICovXG4gIGV4cGlyZXNBdDogc3RyaW5nO1xuICAvKiogRWNob2VkIGByb3V0ZWAgZnJvbSB0aGUgcmVxdWVzdCwgd2hlbiBwcm92aWRlZC4gKi9cbiAgcm91dGU/OiBzdHJpbmc7XG4gIC8qKlxuICAgKiBBYnNvbHV0ZSBiYXNlIFVSTCBvZiB0aGUgdGFyZ2V0IGFwcCAoZS5nLiBgXCJodHRwczovL3NpZ2lmeS5jb21cImApLlxuICAgKlxuICAgKiBXaGVuIHByZXNlbnQsIGNhbGxlcnMgc2hvdWxkIHVzZSB0aGlzIGFzIHRoZSBkZXN0aW5hdGlvbiBmb3IgdGhlIHJlZGlyZWN0LlxuICAgKiBCYWNrZW5kIHJlc29sdmVzIGl0IGZyb20gdGhlIGBhcHAtY29uZmlnYCB0YWJsZSAoc2luZ2xlIHNvdXJjZSBvZiB0cnV0aCkuXG4gICAqXG4gICAqIE9wdGlvbmFsIGZvciBiYWNrd2FyZCBjb21wYXRpYmlsaXR5IOKAlCB3aGVuIG1pc3NpbmcsIGNhbGxlcnMgbWF5IGZhbGwgYmFja1xuICAgKiB0byBhIGNsaWVudC1zaWRlIGBhcHBVcmxzYCBtYXBwaW5nLlxuICAgKi9cbiAgdGFyZ2V0QmFzZVVybD86IHN0cmluZztcbn1cblxuLyoqXG4gKiBSZXNwb25zZSBib2R5IGZyb20gYFBPU1QgL3YyL2F1dGgvaGFuZG9mZi9leGNoYW5nZWAuXG4gKlxuICogU2FtZSBzaGFwZSBhcyBgU2lnbmluUmVzcG9uc2VgIOKAlCBpbnN0YWxsYWJsZSB2aWEgYEF1dGhTZXJ2aWNlLnNldEV4dGVybmFsQXV0aGAuXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgSGFuZG9mZkV4Y2hhbmdlUmVzcG9uc2Uge1xuICBvcGVyYXRpb25JZDogc3RyaW5nO1xuICBhY2Nlc3NUb2tlbjogc3RyaW5nO1xuICByZWZyZXNoVG9rZW46IHN0cmluZztcbiAgZmlyZWJhc2VUb2tlbj86IHN0cmluZztcbiAgZXhwaXJlc0luOiBudW1iZXI7XG4gIHRva2VuVHlwZTogc3RyaW5nO1xuICB1c2VySWQ6IHN0cmluZztcbn1cblxuLyoqXG4gKiBIYW5kb2ZmU2VydmljZSDigJQgY3Jvc3MtYXBwIHNlc3Npb24gdHJhbnNmZXIuXG4gKlxuICogSW1wbGVtZW50cyB0aGUgT0F1dGggQXV0aG9yaXphdGlvbiBDb2RlIHBhdHRlcm4sIGFwcGxpZWQgaW50ZXJuYWxseSBiZXR3ZWVuXG4gKiBhcHBzIHRoYXQgc2hhcmUgdGhlIHNhbWUgYmFja2VuZC5cbiAqXG4gKiAqKk9yaWdpbiBhcHAgKHVzZXIgaXMgYXV0aGVudGljYXRlZCk6KipcbiAqXG4gKiBgYGB0eXBlc2NyaXB0XG4gKiBjb25zdCB7IHRva2VuLCByb3V0ZSB9ID0gYXdhaXQgZmlyc3RWYWx1ZUZyb20oXG4gKiAgIGhhbmRvZmYuY3JlYXRlSGFuZG9mZih7IHRhcmdldEFwcElkOiAnbXl2YWx0ZWNoJywgcm91dGU6ICcvYXBwL2Rhc2hib2FyZCcgfSlcbiAqICk7XG4gKiB3aW5kb3cubG9jYXRpb24uaHJlZiA9IGBodHRwczovL215dmFsdGVjaC5hcHAvP2hhbmRvZmY9JHt0b2tlbn0mcm91dGU9JHtlbmNvZGVVUklDb21wb25lbnQocm91dGUgPz8gJy8nKX1gO1xuICogYGBgXG4gKlxuICogKipUYXJnZXQgYXBwIChib290KToqKiBjYWxsIGBleGNoYW5nZUhhbmRvZmYodG9rZW4pYC4gT24gc3VjY2VzcywgdGhlIHNlc3Npb25cbiAqIGlzIGluc3RhbGxlZCAoYEF1dGhTZXJ2aWNlLnNldEV4dGVybmFsQXV0aGApIGFuZCB0aGUgdXNlciBpcyBhdXRoZW50aWNhdGVkLlxuICogU2VlIGBkZXRlY3RBbmRFeGNoYW5nZUhhbmRvZmZgIGhlbHBlciBmb3IgdGhlIHR5cGljYWwgYm9vdHN0cmFwIHBhdHRlcm4uXG4gKlxuICogU2VjdXJpdHkgbm90ZXM6XG4gKiAtIFRva2VuIGlzIHNpbmdsZS11c2UgYW5kIHNob3J0LWxpdmVkICgzMHMpIOKAlCBlbmZvcmNlZCBzZXJ2ZXItc2lkZS5cbiAqIC0gVG9rZW4gaW4gVVJMIG11c3QgYmUgcmVtb3ZlZCBmcm9tIGhpc3RvcnkgYWZ0ZXIgZXhjaGFuZ2UgdG8gYXZvaWQgbG9nIGxlYWthZ2UuXG4gKiAtIFRoZSBleGNoYW5nZSBlbmRwb2ludCBpcyBwdWJsaWM7IGRvIE5PVCBhZGQgYXV0aCBoZWFkZXIuIFRoZVxuICogICBgSHR0cENsaWVudGAgcmVxdWVzdCBiZWxvdyBhdm9pZHMgdHJpZ2dlcmluZyB0aGUgYXV0aCBpbnRlcmNlcHRvciBzaW5jZSB0aGVcbiAqICAgdXNlciBpc24ndCBsb2dnZWQgaW4geWV0IG9uIHRoZSB0YXJnZXQgYXBwLlxuICovXG5ASW5qZWN0YWJsZSh7IHByb3ZpZGVkSW46ICdyb290JyB9KVxuZXhwb3J0IGNsYXNzIEhhbmRvZmZTZXJ2aWNlIHtcbiAgcHJpdmF0ZSBkZXRlY3RlZCA9IGZhbHNlO1xuXG4gIGNvbnN0cnVjdG9yKFxuICAgIEBJbmplY3QoVkFMVEVDSF9BVVRIX0NPTkZJRykgcHJpdmF0ZSBjb25maWc6IFZhbHRlY2hBdXRoQ29uZmlnLFxuICAgIHByaXZhdGUgaHR0cDogSHR0cENsaWVudCxcbiAgICBwcml2YXRlIGF1dGg6IEF1dGhTZXJ2aWNlLFxuICAgIHByaXZhdGUgcm91dGVyOiBSb3V0ZXJcbiAgKSB7fVxuXG4gIC8qKlxuICAgKiBDcmVhdGUgYSBoYW5kb2ZmIHRva2VuLiBDYWxsZXIgbXVzdCBiZSBhdXRoZW50aWNhdGVkLlxuICAgKlxuICAgKiBAcGFyYW0gcmVxdWVzdCBPcHRpb25hbCBtZXRhZGF0YTogdGFyZ2V0IGFwcCBpZCBhbmQgaW50ZW5kZWQgcm91dGUuXG4gICAqIEByZXR1cm5zIE9ic2VydmFibGUgZW1pdHRpbmcgYHsgdG9rZW4sIGV4cGlyZXNBdCwgcm91dGU/IH1gLlxuICAgKi9cbiAgY3JlYXRlSGFuZG9mZihyZXF1ZXN0OiBIYW5kb2ZmQ3JlYXRlUmVxdWVzdCA9IHt9KTogT2JzZXJ2YWJsZTxIYW5kb2ZmQ3JlYXRlUmVzcG9uc2U+IHtcbiAgICByZXR1cm4gdGhpcy5odHRwLnBvc3Q8SGFuZG9mZkNyZWF0ZVJlc3BvbnNlPihgJHt0aGlzLmJhc2VVcmx9L2hhbmRvZmZgLCByZXF1ZXN0KTtcbiAgfVxuXG4gIC8qKlxuICAgKiBFeGNoYW5nZSBhIGhhbmRvZmYgdG9rZW4gZm9yIGEgc2Vzc2lvbiBhbmQgaW5zdGFsbCBpdC5cbiAgICpcbiAgICogT24gc3VjY2VzcywgdGhlIHJlc3BvbnNlIGlzIHBpcGVkIHRocm91Z2ggYEF1dGhTZXJ2aWNlLnNldEV4dGVybmFsQXV0aGBcbiAgICogc28gdGhlIHVzZXIgYmVjb21lcyBhdXRoZW50aWNhdGVkLiBTdWJzZXF1ZW50IG5hdmlnYXRpb24gY2FuIHByb2NlZWQuXG4gICAqXG4gICAqIE9uIGZhaWx1cmUsIHRoZSBvYnNlcnZhYmxlIGVycm9ycy4gVGhlIGNhbGxlciBpcyByZXNwb25zaWJsZSBmb3JcbiAgICogc2hvd2luZyBhbiBlcnJvciBhbmQgcm91dGluZyB0byBgL2xvZ2luYC5cbiAgICpcbiAgICogQHBhcmFtIHRva2VuIFJhdyBoYW5kb2ZmIHRva2VuIHJlYWQgZnJvbSB0aGUgVVJMLlxuICAgKi9cbiAgZXhjaGFuZ2VIYW5kb2ZmKHRva2VuOiBzdHJpbmcpOiBPYnNlcnZhYmxlPEhhbmRvZmZFeGNoYW5nZVJlc3BvbnNlPiB7XG4gICAgcmV0dXJuIHRoaXMuaHR0cFxuICAgICAgLnBvc3Q8SGFuZG9mZkV4Y2hhbmdlUmVzcG9uc2U+KGAke3RoaXMuYmFzZVVybH0vaGFuZG9mZi9leGNoYW5nZWAsIHsgdG9rZW4gfSlcbiAgICAgIC5waXBlKFxuICAgICAgICB0YXAocmVzcG9uc2UgPT4gdGhpcy5pbnN0YWxsU2Vzc2lvbihyZXNwb25zZSkpLFxuICAgICAgICBjYXRjaEVycm9yKGVyciA9PiB7XG4gICAgICAgICAgLy8gU3VyZmFjZSB0aGUgZXJyb3IgdW50b3VjaGVkIOKAlCB0aGUgY2FsbGVyIGRlY2lkZXMgaG93IHRvIHJlYWN0XG4gICAgICAgICAgLy8gKHR5cGljYWxseTogcmVkaXJlY3QgdG8gL2xvZ2luICsgdG9hc3QpLiBEb24ndCBpbnN0YWxsIGEgYmFkIHNlc3Npb24uXG4gICAgICAgICAgdGhyb3cgZXJyO1xuICAgICAgICB9KVxuICAgICAgKTtcbiAgfVxuXG4gIC8qKlxuICAgKiBCb290c3RyYXAgaGVscGVyIOKAlCByZWFkcyB0aGUgaGFuZG9mZiB0b2tlbiBmcm9tIHRoZSBjdXJyZW50IFVSTCwgZXhjaGFuZ2VzXG4gICAqIGl0IGZvciBhIHNlc3Npb24sIGFuZCBuYXZpZ2F0ZXMgdG8gdGhlIGludGVuZGVkIHJvdXRlIHdpdGggdGhlIHRva2VuXG4gICAqIHN0cmlwcGVkIGZyb20gaGlzdG9yeS5cbiAgICpcbiAgICogSWRlbXBvdGVudDogc3Vic2VxdWVudCBjYWxscyBhcmUgbm8tb3BzLiBXaXJlIGZyb20gYW5cbiAgICogYEFQUF9JTklUSUFMSVpFUmAvYHByb3ZpZGVBcHBJbml0aWFsaXplcmAgZmFjdG9yeSBpbiBgbWFpbi50c2AuXG4gICAqXG4gICAqIGBgYHR5cGVzY3JpcHRcbiAgICogLy8gbWFpbi50c1xuICAgKiBwcm92aWRlQXBwSW5pdGlhbGl6ZXIoKCkgPT4gaW5qZWN0KEhhbmRvZmZTZXJ2aWNlKS5kZXRlY3RBbmRFeGNoYW5nZUhhbmRvZmYoKSlcbiAgICogYGBgXG4gICAqXG4gICAqIE9uIGVycm9yIChleHBpcmVkL3VzZWQvaW52YWxpZCB0b2tlbiksIHJlZGlyZWN0cyB0byBgZXJyb3JSb3V0ZWAgKGRlZmF1bHQ6XG4gICAqIHRoZSBhcHAncyBjb25maWd1cmVkIGBsb2dpblJvdXRlYCkuIFRoZSBVUkwgaXMgYWx3YXlzIGNsZWFuZWQsIGV2ZW4gb25cbiAgICogZXJyb3IsIHNvIHRoZSB0b2tlbiBjYW5ub3QgYmUgcmV0cmllZCBieSByZWZyZXNoaW5nIHRoZSBwYWdlLlxuICAgKlxuICAgKiBAcmV0dXJucyBgdHJ1ZWAgaWYgYSBoYW5kb2ZmIHdhcyBkZXRlY3RlZCBhbmQgcHJvY2Vzc2VkIChzdWNjZXNzIG9yIGZhaWwpLlxuICAgKiAgICAgICAgICBgZmFsc2VgIGlmIG5vIHRva2VuIHdhcyBwcmVzZW50IChjb2xkIGJvb3QsIG5vcm1hbCBmbG93KS5cbiAgICovXG4gIGFzeW5jIGRldGVjdEFuZEV4Y2hhbmdlSGFuZG9mZihvcHRpb25zOiBEZXRlY3RBbmRFeGNoYW5nZU9wdGlvbnMgPSB7fSk6IFByb21pc2U8Ym9vbGVhbj4ge1xuICAgIGlmICh0aGlzLmRldGVjdGVkIHx8IHR5cGVvZiB3aW5kb3cgPT09ICd1bmRlZmluZWQnKSB7XG4gICAgICByZXR1cm4gZmFsc2U7XG4gICAgfVxuICAgIHRoaXMuZGV0ZWN0ZWQgPSB0cnVlO1xuXG4gICAgY29uc3QgdG9rZW5QYXJhbSA9IG9wdGlvbnMudG9rZW5QYXJhbSA/PyBIQU5ET0ZGX1RPS0VOX1BBUkFNO1xuICAgIGNvbnN0IHJvdXRlUGFyYW0gPSBvcHRpb25zLnJvdXRlUGFyYW0gPz8gSEFORE9GRl9ST1VURV9QQVJBTTtcbiAgICBjb25zdCBkZWZhdWx0Um91dGUgPSBvcHRpb25zLmRlZmF1bHRSb3V0ZSA/PyAnLyc7XG4gICAgY29uc3QgZXJyb3JSb3V0ZSA9IG9wdGlvbnMuZXJyb3JSb3V0ZSA/PyB0aGlzLmNvbmZpZy5sb2dpblJvdXRlID8/ICcvbG9naW4nO1xuXG4gICAgY29uc3QgcGFyYW1zID0gbmV3IFVSTFNlYXJjaFBhcmFtcyh3aW5kb3cubG9jYXRpb24uc2VhcmNoKTtcbiAgICBjb25zdCB0b2tlbiA9IHBhcmFtcy5nZXQodG9rZW5QYXJhbSk7XG4gICAgaWYgKCF0b2tlbikge1xuICAgICAgcmV0dXJuIGZhbHNlO1xuICAgIH1cblxuICAgIGNvbnN0IHRhcmdldFJvdXRlID0gcGFyYW1zLmdldChyb3V0ZVBhcmFtKSB8fCBkZWZhdWx0Um91dGU7XG5cbiAgICB0cnkge1xuICAgICAgYXdhaXQgZmlyc3RWYWx1ZUZyb20odGhpcy5leGNoYW5nZUhhbmRvZmYodG9rZW4pKTtcbiAgICAgIGF3YWl0IHRoaXMucm91dGVyLm5hdmlnYXRlQnlVcmwodGFyZ2V0Um91dGUsIHsgcmVwbGFjZVVybDogdHJ1ZSB9KTtcbiAgICB9IGNhdGNoIChlcnIpIHtcbiAgICAgIGNvbnNvbGUud2FybignW0hhbmRvZmZdIEV4Y2hhbmdlIGZhaWxlZCwgcmVkaXJlY3RpbmcgdG8gbG9naW4nLCBlcnIpO1xuICAgICAgYXdhaXQgdGhpcy5yb3V0ZXIubmF2aWdhdGVCeVVybChlcnJvclJvdXRlLCB7IHJlcGxhY2VVcmw6IHRydWUgfSk7XG4gICAgfVxuXG4gICAgcmV0dXJuIHRydWU7XG4gIH1cblxuICAvKipcbiAgICogUGVyc2lzdCB0aGUgc2Vzc2lvbiBpbiBgQXV0aFNlcnZpY2VgLiBNaXJyb3JzIHRoZSBpbnN0YWxsIGZsb3cgdXNlZCBieVxuICAgKiB0aGUgbm9ybWFsIHNpZ25pbiBwYXRoIHNvIHRpbWVycywgRmlyZWJhc2UsIGFuZCB0YWItc3luYyBhbGwga2ljayBpbi5cbiAgICovXG4gIHByaXZhdGUgaW5zdGFsbFNlc3Npb24ocmVzcG9uc2U6IEhhbmRvZmZFeGNoYW5nZVJlc3BvbnNlKTogdm9pZCB7XG4gICAgdGhpcy5hdXRoLnNldEV4dGVybmFsQXV0aCh7XG4gICAgICBhY2Nlc3NUb2tlbjogcmVzcG9uc2UuYWNjZXNzVG9rZW4sXG4gICAgICByZWZyZXNoVG9rZW46IHJlc3BvbnNlLnJlZnJlc2hUb2tlbixcbiAgICAgIGZpcmViYXNlVG9rZW46IHJlc3BvbnNlLmZpcmViYXNlVG9rZW4sXG4gICAgICBleHBpcmVzSW46IHJlc3BvbnNlLmV4cGlyZXNJbixcbiAgICB9KTtcbiAgfVxuXG4gIHByaXZhdGUgZ2V0IGJhc2VVcmwoKTogc3RyaW5nIHtcbiAgICByZXR1cm4gYCR7dGhpcy5jb25maWcuYXBpVXJsfSR7dGhpcy5jb25maWcuYXV0aFByZWZpeH1gO1xuICB9XG59XG4iXX0=