ysk-server-core 1.0.0

package/dist/services/ai-task-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-task-service.js","sourceRoot":"","sources":["../../src/services/ai-task-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,GAGlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAG/D,MAAM,WAAW;IACc;IAA7B,YAA6B,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAChD,IAAI,CAAC,IAAY;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAA+B,CAAC;QAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;;YACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC;IACD,GAAG,CAAC,EAAU;QACZ,OAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI;QACF,OAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC;YACJ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IAKL;IACA;IACA;IACA;IACA;IACA;IATF,KAAK,CAAc;IAEpC,YACE,EAAe,EACE,SAAoB,EACpB,SAAwB,EACxB,IAAkB,EAClB,KAAsB,EACtB,GAAe,EACf,aAAoC;QALpC,cAAS,GAAT,SAAS,CAAW;QACpB,cAAS,GAAT,SAAS,CAAe;QACxB,SAAI,GAAJ,IAAI,CAAc;QAClB,UAAK,GAAL,KAAK,CAAiB;QACtB,QAAG,GAAH,GAAG,CAAY;QACf,kBAAa,GAAb,aAAa,CAAuB;QAErD,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAa,EAAE,MAAM,GAAG,IAAI;QACvD,IAAI,IAAI,GAAG,YAAY,CAAC;YACtB,MAAM;YACN,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,KAAK;YACL,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACxD,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,EAAU,EAAE,KAAa;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,KAAK;YACL,MAAM,EAAE,iBAAiB;YACzB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oEAAoE;IACpE,MAAM,CAAC,EAAU,EAAE,KAAa;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC5D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,uBAAuB,CAAC;YACvC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,KAAK;YACL,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,UAAU,CAAC,EAAU,EAAE,MAAc,EAAE,KAAa;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,eAAe,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,KAAK;YACL,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,MAAM,EAAE;YAClB,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,EAAU,EACV,KAAa,EACb,KAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACtE,yDAAyD;YACzD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;YAC3B,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACtE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,8CAA8C,CAAC;gBAC5D,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,UAA8B,CAAC;gBACnC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC1B,gGAAgG;oBAChG,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;wBACrC,MAAM,EAAE,IAAI,CAAC,IAAI;wBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,KAAK;wBAClB,OAAO,EAAE,IAAI,CAAC,IAAI;qBACnB,CAAC,CAAC;oBACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBAC1C,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC;gBAC1B,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACpC;oBACE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK;oBACL,KAAK;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;iBACjC,EACD,UAAU,CACX,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;oBACvB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;gBACnC,CAAC;qBAAM,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACrD,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;oBACvB,IAAI,CAAC,KAAK,GAAG,yBAAyB,CAAC;gBACzC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;oBACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC9B,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACvB,IAAI,CAAC,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,KAAK;YACL,MAAM,EAAE,iBAAiB;YACzB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YAC/B,EAAE,EAAE,CAAC,MAAM;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/services/auth.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Persistent auth: scrypt password hashing + sessions + TOTP 2FA (hardened).
+ * - Login rate limit / lockout
+ * - TOTP at-rest encryption (when dataDir set)
+ * - Anti-replay (last step)
+ * - Recovery codes (hashed)
+ * - Step-up verification for sensitive ops
+ */
+import type { AuthLoginRequest, AuthLoginResponse, UserDto } from 'ysk-server-shared';
+import type { UserRepository } from '../repositories/user-repo.js';
+import type { SessionRepository } from '../repositories/session-repo.js';
+import type { AuditRepository } from '../repositories/audit-repo.js';
+import type { JsonStore } from '../db/store.js';
+/** Absolute max session lifetime */
+export declare const SESSION_ABS_MS: number;
+/** Idle timeout — no activity */
+export declare const SESSION_IDLE_MS: number;
+export declare class AuthService {
+    private readonly users;
+    private readonly sessions;
+    private readonly audit?;
+    /** When set, Bearer ysk_* API keys authenticate as the owning user */
+    private readonly db?;
+    /** Enables secret encryption + optional rate-limit persist */
+    private readonly dataDir?;
+    constructor(users: UserRepository, sessions: SessionRepository, audit?: AuditRepository | undefined, 
+    /** When set, Bearer ysk_* API keys authenticate as the owning user */
+    db?: JsonStore | undefined, 
+    /** Enables secret encryption + optional rate-limit persist */
+    dataDir?: string | undefined);
+    /** settings key: security.require_admin_totp = "1" */
+    isAdminTotpRequired(): boolean;
+    setAdminTotpRequired(on: boolean, actor?: string): void;
+    /**
+     * Bootstrap admin if no users exist (called by setup).
+     */
+    ensureAdmin(username: string, password: string, locale?: string): UserDto;
+    login(req: AuthLoginRequest & {
+        totp?: string;
+        recoveryCode?: string;
+        /** skip TOTP if valid remember-device token */
+        deviceToken?: string;
+        /** after successful 2FA, issue device token */
+        rememberDevice?: boolean;
+    }, meta?: {
+        ip?: string;
+        userAgent?: string;
+    }): AuthLoginResponse & {
+        deviceToken?: string;
+        deviceExpiresAt?: string;
+    };
+    /**
+     * Begin 2FA enrollment — requires password re-entry or recent step-up.
+     */
+    beginTotp(userId: string, opts?: {
+        password?: string;
+        totp?: string;
+    }): {
+        secret: string;
+        otpauthUrl: string;
+        enabled: boolean;
+    };
+    listSessions(userId: string, currentToken?: string): import("../repositories/session-repo.js").SessionPublic[];
+    revokeSession(userId: string, sessionIdPrefix: string): boolean;
+    revokeOtherSessions(userId: string, keepToken: string): number;
+    /**
+     * Confirm enrollment with a valid code → enable 2FA.
+     * Returns one-time recovery codes (plaintext once).
+     */
+    confirmTotp(userId: string, code: string): {
+        enabled: boolean;
+        recoveryCodes: string[];
+    };
+    disableTotp(userId: string, code: string): {
+        enabled: boolean;
+    };
+    /**
+     * Admin clears another user's 2FA (per-user secret only — never shared).
+     * Actor must already have step-up (caller enforces totp on request).
+     */
+    adminClearUserTotp(actorUserId: string, targetUserId: string): {
+        cleared: boolean;
+        username: string;
+    };
+    /** Public security summary for a user (no secrets). */
+    userSecuritySummary(userId: string): {
+        totpEnabled: boolean;
+        totpEnrolled: boolean;
+        recoveryRemaining: number;
+        sessionCount: number;
+    };
+    totpStatus(userId: string): {
+        enabled: boolean;
+        enrolled: boolean;
+        recoveryRemaining: number;
+    };
+    /**
+     * Verify TOTP (or recovery) for step-up; marks recent step-up window.
+     */
+    verifyStepUp(userId: string, code: string): {
+        ok: true;
+    };
+    /** Throw unless recent step-up or valid code provided. */
+    requireStepUp(userId: string, code?: string): void;
+    logout(token: string | undefined): void;
+    /**
+     * Self-service password change. Clears must_change_password on success.
+     */
+    changeOwnPassword(userId: string, currentPassword: string, nextPassword: string): UserDto;
+    /**
+     * Authenticate + optional API-key read-only flag (for HTTP mutation gate).
+     */
+    authenticateDetailed(token: string | undefined): {
+        user: UserDto;
+        apiKeyReadOnly?: boolean;
+        viaApiKey?: boolean;
+    };
+    authenticate(token: string | undefined): UserDto;
+    /** Persist UI locale for the signed-in user (self-service). */
+    setOwnLocale(userId: string, locale: string): UserDto;
+    private resolveTotpSecret;
+    private assertTotpOrRecovery;
+}
+export declare function hashPassword(password: string, salt: string): string;
+export declare function verifyPassword(password: string, salt: string, expectedHex: string): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/services/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/services/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAGtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAwBhD,oCAAoC;AACpC,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,iCAAiC;AACjC,eAAO,MAAM,eAAe,QAAqB,CAAC;AAElD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACvB,sEAAsE;IACtE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpB,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBANR,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,CAAC,EAAE,eAAe,YAAA;IACxC,sEAAsE;IACrD,EAAE,CAAC,EAAE,SAAS,YAAA;IAC/B,8DAA8D;IAC7C,OAAO,CAAC,EAAE,MAAM,YAAA;IAGnC,sDAAsD;IACtD,mBAAmB,IAAI,OAAO;IAK9B,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAYvD;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAU,GAAG,OAAO;IA0C1E,KAAK,CACH,GAAG,EAAE,gBAAgB,GAAG;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,+CAA+C;QAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,+CAA+C;QAC/C,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,EACD,IAAI,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACzC,iBAAiB,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;IA0MzE;;OAEG;IACH,SAAS,CACP,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1C;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IAsC3D,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;IAIlD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;IAc/D,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAY9D;;;OAGG;IACH,WAAW,CACT,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE;IA2BhD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;IAuB/D;;;OAGG;IACH,kBAAkB,CAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IA0BzC,uDAAuD;IACvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG;QACnC,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,OAAO,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC;KACtB;IAWD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG;QAC1B,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;KAC3B;IAYD;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE;IAMxD,0DAA0D;IAC1D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAgBlD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAgBvC;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAsCzF;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG;QAC/C,IAAI,EAAE,OAAO,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB;IA4BD,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO;IAoDhD,+DAA+D;IAC/D,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAkBrD,OAAO,CAAC,iBAAiB;IAmBzB,OAAO,CAAC,oBAAoB;CA0B7B;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAK3F"}