@aglyn/plugins-data 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/datasets-export-route.js

@@ -1,229 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { effectiveDatasetModel, memberCanSee, pluginRequestFromWeb } from "@aglyn/aglyn/server";
-import { emailUnverifiedResponse, firebaseAdmin, isImpersonationSession, isServerReleaseFlagOnForOrg, lockdownRefusal, resolveOrgMembership } from "@aglyn/tenant-data-admin";
-import { FieldPath, FieldValue } from "firebase-admin/firestore";
-import { addAdminAudit } from "@aglyn/tenant-data-admin/server/admin-audit-write";
-import { isRefusedIdToken } from "@aglyn/tenant-data-admin/server/id-token-refusal";
-import { datasetCsvHeader, datasetCsvRow, datasetRecordToJson } from "../model/dataset-csv.js";
-/**
- * Records read per round trip. Not a cap — the stream keeps paging until
- * the collection is exhausted. It bounds what is held at once, which is the
- * only thing a page size should ever bound.
- */ const PAGE_SIZE = 500;
-/** Header naming the row count the server undertook to send. */ export const EXPORT_ROWS_HEADER = 'X-Aglyn-Export-Rows';
-const json = (body, status)=>Response.json(body, {
-        status
-    });
-/**
- * Complete dataset export, streamed (AGL-2335).
- *
- * `run-an-agency-workspace.md` sells this as half of a **full handover** —
- * the artifact a departing client is told is theirs. What it actually
- * produced was `records`, the card's live listener window: `limit(500)`
- * **with no `orderBy`**. Firestore answers an unordered limit in document-id
- * order over auto-ids, so a 2,000-record dataset did not export "the first
- * 500", it exported *500 unpredictable rows*, and re-exporting could produce
- * a different set. `sortDatasetRecords` then sorted that sample, which made
- * the result look ordered and be arbitrary. The button said `CSV`.
- *
- * Three things this route does that the client could not:
- *
- * 1. **Every row.** Cursor-paged over the whole collection, streamed out as
- *    it goes, so completeness does not cost a browser hang or a giant buffer
- *    — the reason the obvious client-side fix was unsafe on a tier where
- *    `recordsPerDataset` is `UNLIMITED`.
- * 2. **A deterministic total order.** `orderBy(FieldPath.documentId())`.
- *    Deliberately NOT `orderBy('order')`, the field the table sorts by:
- *    Firestore silently DROPS documents missing an ordered field, and legacy
- *    records have no `order`, so ordering by it would reintroduce exactly the
- *    silent row loss this issue is about — with an index requirement on top.
- *    Document id is present on every document, is a total order, and is the
- *    order the old window happened to arrive in. Same order, now complete.
- * 3. **A checkable promise.** `X-Aglyn-Export-Rows` carries a `count()`
- *    aggregate taken before the first page, so the client can prove the file
- *    it received is whole. A stream that dies halfway yields a perfectly
- *    well-formed shorter file; nothing about the bytes says they are short.
- *
- * **No entitlement gate, deliberately.** The client button never had one and
- * this is the customer's own data — the same reasoning `/api/orgs/export-data`
- * records for the workspace export. Adding a plan gate here would take a
- * capability away from people who have it today, on the export path of all
- * places. The `release_data_store` flag gate is kept, because that is
- * whether the feature exists at all rather than whether it is paid for.
- */ export const datasetsExportHandler = async (request)=>{
-    var _headers_authorization, _ref, _ref1;
-    const { method, query, headers: rawHeaders } = await pluginRequestFromWeb(request);
-    const headers = rawHeaders;
-    if (method !== 'GET') return json({
-        error: 'Method not allowed'
-    }, 405);
-    const authorization = (_headers_authorization = headers.authorization) != null ? _headers_authorization : '';
-    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
-    if (!idToken) return json({
-        error: 'Unauthenticated'
-    }, 401);
-    const orgId = String((_ref = query == null ? void 0 : query['orgId']) != null ? _ref : '');
-    const datasetId = String((_ref1 = query == null ? void 0 : query['datasetId']) != null ? _ref1 : '');
-    const format = (query == null ? void 0 : query['format']) === 'json' ? 'json' : 'csv';
-    if (!orgId || !datasetId) {
-        return json({
-            error: 'Missing orgId or datasetId'
-        }, 400);
-    }
-    try {
-        var _data_count, _dataset_displayName;
-        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
-        if (!decoded.email_verified && !isImpersonationSession(decoded)) {
-            return emailUnverifiedResponse();
-        }
-        const staff = decoded['staff'] === true;
-        const membership = await resolveOrgMembership(decoded.uid, orgId);
-        const member = membership == null ? void 0 : membership.member;
-        // Reading is not writing: every member who can SEE the dataset may take
-        // a copy of it. The writer-role gate on `/api/orgs/datasets` is about
-        // quota-consuming creates and has no business here.
-        if (!member && !staff) return json({
-            error: 'Not found'
-        }, 404);
-        if (!staff && !await isServerReleaseFlagOnForOrg('release_data_store', orgId)) {
-            return json({
-                error: 'Not available'
-            }, 404);
-        }
-        const firestore = firebaseAdmin.app().firestore();
-        const orgRef = firestore.collection('orgs').doc(orgId);
-        const orgSnapshot = await orgRef.get();
-        if (!orgSnapshot.exists) return json({
-            error: 'Unknown organization'
-        }, 404);
-        const org = orgSnapshot.data();
-        const locked = await lockdownRefusal({
-            request,
-            staff,
-            uid: decoded.uid,
-            org
-        });
-        if (locked) return locked;
-        const datasetRef = orgRef.collection('datasets').doc(datasetId);
-        const datasetSnapshot = await datasetRef.get();
-        if (!datasetSnapshot.exists) {
-            return json({
-                error: 'Unknown dataset'
-            }, 404);
-        }
-        const dataset = datasetSnapshot.data();
-        // Scoped sharing (AGL-1037/1044). The records subcollection carries no
-        // `visibleTo` of its own — scope lives on the parent dataset — so this
-        // is the ONLY place the check can be made, and skipping it would let a
-        // single-site collaborator export an internal dataset wholesale. The
-        // Admin SDK bypasses rules entirely, so `memberCanSee` IS the
-        // enforcement here rather than a second opinion about it; membership
-        // was already refused above, which is the precondition it documents.
-        if (!staff && !memberCanSee(member, dataset['visibleTo'])) {
-            return json({
-                error: 'Not found'
-            }, 404);
-        }
-        const model = effectiveDatasetModel(dataset);
-        const recordsRef = datasetRef.collection('records');
-        // Taken BEFORE the first page, so it describes the collection the export
-        // started from. A `count()` aggregate bills one read per 1,000 documents
-        // — cheap next to the export it is describing, and the only way the
-        // client can tell a complete file from a truncated one.
-        const total = Number((_data_count = (await recordsRef.count().get()).data().count) != null ? _data_count : 0);
-        const encoder = new TextEncoder();
-        const encode = (text)=>encoder.encode(text);
-        let cursor = null;
-        let phase = 'head';
-        let emitted = 0;
-        const stream = new ReadableStream({
-            async pull (controller) {
-                try {
-                    if (phase === 'head') {
-                        phase = 'body';
-                        controller.enqueue(encode(format === 'csv' ? datasetCsvHeader(model) : '['));
-                        return;
-                    }
-                    if (phase === 'body') {
-                        let page = recordsRef.orderBy(FieldPath.documentId()).limit(PAGE_SIZE);
-                        if (cursor) page = page.startAfter(cursor);
-                        const snapshot = await page.get();
-                        if (snapshot.empty) {
-                            phase = 'tail';
-                        } else {
-                            cursor = snapshot.docs[snapshot.docs.length - 1];
-                            if (snapshot.docs.length < PAGE_SIZE) phase = 'tail';
-                            const first = emitted === 0;
-                            const lines = snapshot.docs.map((entry)=>{
-                                var _values, _entry_data;
-                                const values = (_values = ((_entry_data = entry.data()) != null ? _entry_data : {})['values']) != null ? _values : {};
-                                emitted += 1;
-                                return format === 'csv' ? datasetCsvRow(model, values) : JSON.stringify(datasetRecordToJson(model, values));
-                            });
-                            controller.enqueue(encode(format === 'csv' ? `\n${lines.join('\n')}` : `${first ? '' : ','}${lines.join(',')}`));
-                            return;
-                        }
-                    }
-                    // tail
-                    controller.enqueue(encode(format === 'csv' ? '\n' : ']'));
-                    controller.close();
-                } catch (error) {
-                    // Erroring the stream truncates the download rather than
-                    // completing it short — a half-written file that the browser
-                    // reports as a failed transfer, not a quiet partial handover.
-                    controller.error(error);
-                }
-            }
-        });
-        // Ids and counts only, never content (the AGL-1443 rule the workspace
-        // export follows). A full copy of a dataset leaving the platform is
-        // worth a row; what was in it is not ours to log.
-        void addAdminAudit(firestore, {
-            actorUid: decoded.uid,
-            action: 'dataset.exported',
-            target: `orgs/${orgId}/datasets/${datasetId}`,
-            before: null,
-            after: {
-                format,
-                records: total
-            },
-            at: FieldValue.serverTimestamp()
-        }).catch(()=>undefined);
-        const base = String((_dataset_displayName = dataset['displayName']) != null ? _dataset_displayName : 'collection').replace(/[^A-Za-z0-9_-]+/g, '-').toLowerCase() || 'collection';
-        const stamp = new Date().toISOString().slice(0, 10);
-        return new Response(stream, {
-            status: 200,
-            headers: {
-                'Content-Type': format === 'csv' ? 'text/csv; charset=utf-8' : 'application/json; charset=utf-8',
-                'Content-Disposition': `attachment; filename="${base}-${stamp}.${format}"`,
-                [EXPORT_ROWS_HEADER]: String(total),
-                'Cache-Control': 'no-store, private'
-            }
-        });
-    } catch (error) {
-        // A refused credential is a 401, not a fault of ours (AGL-1993); anything
-        // else keeps the answer below.
-        if (isRefusedIdToken(error)) return json({
-            error: 'Unauthenticated'
-        }, 401);
-        return json({
-            error: 'Export failed'
-        }, 500);
-    }
-};
-
-//# sourceMappingURL=datasets-export-route.js.map

package/src/lib/server/datasets-export-route.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/data/src/lib/server/datasets-export-route.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  effectiveDatasetModel,\n  memberCanSee,\n  pluginRequestFromWeb,\n  type PluginWebApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  isImpersonationSession,\n  isServerReleaseFlagOnForOrg,\n  lockdownRefusal,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { FieldPath, FieldValue } from 'firebase-admin/firestore'\nimport { addAdminAudit } from '@aglyn/tenant-data-admin/server/admin-audit-write'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport {\n  datasetCsvHeader,\n  datasetCsvRow,\n  datasetRecordToJson,\n} from '../model/dataset-csv'\n\n/**\n * Records read per round trip. Not a cap — the stream keeps paging until\n * the collection is exhausted. It bounds what is held at once, which is the\n * only thing a page size should ever bound.\n */\nconst PAGE_SIZE = 500\n\n/** Header naming the row count the server undertook to send. */\nexport const EXPORT_ROWS_HEADER = 'X-Aglyn-Export-Rows'\n\nconst json = (body: unknown, status: number) => Response.json(body, { status })\n\n/**\n * Complete dataset export, streamed (AGL-2335).\n *\n * `run-an-agency-workspace.md` sells this as half of a **full handover** —\n * the artifact a departing client is told is theirs. What it actually\n * produced was `records`, the card's live listener window: `limit(500)`\n * **with no `orderBy`**. Firestore answers an unordered limit in document-id\n * order over auto-ids, so a 2,000-record dataset did not export \"the first\n * 500\", it exported *500 unpredictable rows*, and re-exporting could produce\n * a different set. `sortDatasetRecords` then sorted that sample, which made\n * the result look ordered and be arbitrary. The button said `CSV`.\n *\n * Three things this route does that the client could not:\n *\n * 1. **Every row.** Cursor-paged over the whole collection, streamed out as\n *    it goes, so completeness does not cost a browser hang or a giant buffer\n *    — the reason the obvious client-side fix was unsafe on a tier where\n *    `recordsPerDataset` is `UNLIMITED`.\n * 2. **A deterministic total order.** `orderBy(FieldPath.documentId())`.\n *    Deliberately NOT `orderBy('order')`, the field the table sorts by:\n *    Firestore silently DROPS documents missing an ordered field, and legacy\n *    records have no `order`, so ordering by it would reintroduce exactly the\n *    silent row loss this issue is about — with an index requirement on top.\n *    Document id is present on every document, is a total order, and is the\n *    order the old window happened to arrive in. Same order, now complete.\n * 3. **A checkable promise.** `X-Aglyn-Export-Rows` carries a `count()`\n *    aggregate taken before the first page, so the client can prove the file\n *    it received is whole. A stream that dies halfway yields a perfectly\n *    well-formed shorter file; nothing about the bytes says they are short.\n *\n * **No entitlement gate, deliberately.** The client button never had one and\n * this is the customer's own data — the same reasoning `/api/orgs/export-data`\n * records for the workspace export. Adding a plan gate here would take a\n * capability away from people who have it today, on the export path of all\n * places. The `release_data_store` flag gate is kept, because that is\n * whether the feature exists at all rather than whether it is paid for.\n */\nexport const datasetsExportHandler: PluginWebApiHandler = async (request) => {\n  const { method, query, headers: rawHeaders } =\n    await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  if (method !== 'GET') return json({ error: 'Method not allowed' }, 405)\n\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return json({ error: 'Unauthenticated' }, 401)\n\n  const orgId = String(query?.['orgId'] ?? '')\n  const datasetId = String(query?.['datasetId'] ?? '')\n  const format = query?.['format'] === 'json' ? 'json' : 'csv'\n  if (!orgId || !datasetId) {\n    return json({ error: 'Missing orgId or datasetId' }, 400)\n  }\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) {\n      return emailUnverifiedResponse()\n    }\n    const staff = decoded['staff'] === true\n    const membership = await resolveOrgMembership(decoded.uid, orgId)\n    const member = membership?.member\n    // Reading is not writing: every member who can SEE the dataset may take\n    // a copy of it. The writer-role gate on `/api/orgs/datasets` is about\n    // quota-consuming creates and has no business here.\n    if (!member && !staff) return json({ error: 'Not found' }, 404)\n\n    if (\n      !staff &&\n      !(await isServerReleaseFlagOnForOrg('release_data_store', orgId))\n    ) {\n      return json({ error: 'Not available' }, 404)\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(orgId)\n    const orgSnapshot = await orgRef.get()\n    if (!orgSnapshot.exists) return json({ error: 'Unknown organization' }, 404)\n    const org = orgSnapshot.data()\n\n    const locked = await lockdownRefusal({\n      request,\n      staff,\n      uid: decoded.uid,\n      org,\n    })\n    if (locked) return locked\n\n    const datasetRef = orgRef.collection('datasets').doc(datasetId)\n    const datasetSnapshot = await datasetRef.get()\n    if (!datasetSnapshot.exists) {\n      return json({ error: 'Unknown dataset' }, 404)\n    }\n    const dataset = datasetSnapshot.data() as Record<string, unknown>\n\n    // Scoped sharing (AGL-1037/1044). The records subcollection carries no\n    // `visibleTo` of its own — scope lives on the parent dataset — so this\n    // is the ONLY place the check can be made, and skipping it would let a\n    // single-site collaborator export an internal dataset wholesale. The\n    // Admin SDK bypasses rules entirely, so `memberCanSee` IS the\n    // enforcement here rather than a second opinion about it; membership\n    // was already refused above, which is the precondition it documents.\n    if (\n      !staff &&\n      !memberCanSee(member, dataset['visibleTo'] as string[] | undefined)\n    ) {\n      return json({ error: 'Not found' }, 404)\n    }\n\n    const model = effectiveDatasetModel(dataset as never)\n    const recordsRef = datasetRef.collection('records')\n    // Taken BEFORE the first page, so it describes the collection the export\n    // started from. A `count()` aggregate bills one read per 1,000 documents\n    // — cheap next to the export it is describing, and the only way the\n    // client can tell a complete file from a truncated one.\n    const total = Number(\n      (await recordsRef.count().get()).data().count ?? 0,\n    )\n\n    const encoder = new TextEncoder()\n    const encode = (text: string) => encoder.encode(text)\n    let cursor: FirebaseFirestore.QueryDocumentSnapshot | null = null\n    let phase: 'head' | 'body' | 'tail' = 'head'\n    let emitted = 0\n\n    const stream = new ReadableStream<Uint8Array>({\n      async pull(controller) {\n        try {\n          if (phase === 'head') {\n            phase = 'body'\n            controller.enqueue(\n              encode(format === 'csv' ? datasetCsvHeader(model) : '['),\n            )\n            return\n          }\n          if (phase === 'body') {\n            let page = recordsRef\n              .orderBy(FieldPath.documentId())\n              .limit(PAGE_SIZE)\n            if (cursor) page = page.startAfter(cursor)\n            const snapshot = await page.get()\n            if (snapshot.empty) {\n              phase = 'tail'\n            } else {\n              cursor = snapshot.docs[snapshot.docs.length - 1]\n              if (snapshot.docs.length < PAGE_SIZE) phase = 'tail'\n              const first = emitted === 0\n              const lines = snapshot.docs.map((entry) => {\n                const values = ((entry.data() ?? {})['values'] ??\n                  {}) as Record<string, unknown>\n                emitted += 1\n                return format === 'csv'\n                  ? datasetCsvRow(model, values)\n                  : JSON.stringify(datasetRecordToJson(model, values))\n              })\n              controller.enqueue(\n                encode(\n                  format === 'csv'\n                    ? `\\n${lines.join('\\n')}`\n                    : `${first ? '' : ','}${lines.join(',')}`,\n                ),\n              )\n              return\n            }\n          }\n          // tail\n          controller.enqueue(encode(format === 'csv' ? '\\n' : ']'))\n          controller.close()\n        } catch (error) {\n          // Erroring the stream truncates the download rather than\n          // completing it short — a half-written file that the browser\n          // reports as a failed transfer, not a quiet partial handover.\n          controller.error(error)\n        }\n      },\n    })\n\n    // Ids and counts only, never content (the AGL-1443 rule the workspace\n    // export follows). A full copy of a dataset leaving the platform is\n    // worth a row; what was in it is not ours to log.\n    void addAdminAudit(firestore, {\n      actorUid: decoded.uid,\n      action: 'dataset.exported',\n      target: `orgs/${orgId}/datasets/${datasetId}`,\n      before: null,\n      after: { format, records: total },\n      at: FieldValue.serverTimestamp(),\n    })\n      .catch(() => undefined)\n\n    const base =\n      String(dataset['displayName'] ?? 'collection')\n        .replace(/[^A-Za-z0-9_-]+/g, '-')\n        .toLowerCase() || 'collection'\n    const stamp = new Date().toISOString().slice(0, 10)\n    return new Response(stream, {\n      status: 200,\n      headers: {\n        'Content-Type':\n          format === 'csv'\n            ? 'text/csv; charset=utf-8'\n            : 'application/json; charset=utf-8',\n        'Content-Disposition': `attachment; filename=\"${base}-${stamp}.${format}\"`,\n        [EXPORT_ROWS_HEADER]: String(total),\n        'Cache-Control': 'no-store, private',\n      },\n    })\n  } catch (error) {\n    // A refused credential is a 401, not a fault of ours (AGL-1993); anything\n    // else keeps the answer below.\n    if (isRefusedIdToken(error)) return json({ error: 'Unauthenticated' }, 401)\n    return json({ error: 'Export failed' }, 500)\n  }\n}\n"],"names":["effectiveDatasetModel","memberCanSee","pluginRequestFromWeb","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","isServerReleaseFlagOnForOrg","lockdownRefusal","resolveOrgMembership","FieldPath","FieldValue","addAdminAudit","isRefusedIdToken","datasetCsvHeader","datasetCsvRow","datasetRecordToJson","PAGE_SIZE","EXPORT_ROWS_HEADER","json","body","status","Response","datasetsExportHandler","request","headers","method","query","rawHeaders","error","authorization","idToken","startsWith","slice","length","undefined","orgId","String","datasetId","format","dataset","decoded","app","auth","verifyIdToken","email_verified","staff","membership","uid","member","firestore","orgRef","collection","doc","orgSnapshot","get","exists","org","data","locked","datasetRef","datasetSnapshot","model","recordsRef","total","Number","count","encoder","TextEncoder","encode","text","cursor","phase","emitted","stream","ReadableStream","pull","controller","enqueue","page","orderBy","documentId","limit","startAfter","snapshot","empty","docs","first","lines","map","entry","values","JSON","stringify","join","close","actorUid","action","target","before","after","records","at","serverTimestamp","catch","base","replace","toLowerCase","stamp","Date","toISOString"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,YAAY,EACZC,oBAAoB,QAEf,sBAAqB;AAC5B,SACEC,uBAAuB,EACvBC,aAAa,EACbC,sBAAsB,EACtBC,2BAA2B,EAC3BC,eAAe,EACfC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,SAAS,EAAEC,UAAU,QAAQ,2BAA0B;AAChE,SAASC,aAAa,QAAQ,oDAAmD;AACjF,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SACEC,gBAAgB,EAChBC,aAAa,EACbC,mBAAmB,QACd,0BAAsB;AAE7B;;;;CAIC,GACD,MAAMC,YAAY;AAElB,8DAA8D,GAC9D,OAAO,MAAMC,qBAAqB,sBAAqB;AAEvD,MAAMC,OAAO,CAACC,MAAeC,SAAmBC,SAASH,IAAI,CAACC,MAAM;QAAEC;IAAO;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GACD,OAAO,MAAME,wBAA6C,OAAOC;QAMzCC;IALtB,MAAM,EAAEC,MAAM,EAAEC,KAAK,EAAEF,SAASG,UAAU,EAAE,GAC1C,MAAMzB,qBAAqBqB;IAC7B,MAAMC,UAAUG;IAChB,IAAIF,WAAW,OAAO,OAAOP,KAAK;QAAEU,OAAO;IAAqB,GAAG;IAEnE,MAAMC,iBAAgBL,yBAAAA,QAAQK,aAAa,YAArBL,yBAAyB;IAC/C,MAAMM,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOZ,KAAK;QAAEU,OAAO;IAAkB,GAAG;IAExD,MAAMO,QAAQC,eAAOV,yBAAAA,KAAO,CAAC,QAAQ,mBAAI;IACzC,MAAMW,YAAYD,gBAAOV,yBAAAA,KAAO,CAAC,YAAY,oBAAI;IACjD,MAAMY,SAASZ,CAAAA,yBAAAA,KAAO,CAAC,SAAS,MAAK,SAAS,SAAS;IACvD,IAAI,CAACS,SAAS,CAACE,WAAW;QACxB,OAAOnB,KAAK;YAAEU,OAAO;QAA6B,GAAG;IACvD;IAEA,IAAI;YA8DA,aA2EOW;QAxIT,MAAMC,UAAU,MAAMpC,cAAcqC,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACb;QAC/D,IAAI,CAACU,QAAQI,cAAc,IAAI,CAACvC,uBAAuBmC,UAAU;YAC/D,OAAOrC;QACT;QACA,MAAM0C,QAAQL,OAAO,CAAC,QAAQ,KAAK;QACnC,MAAMM,aAAa,MAAMtC,qBAAqBgC,QAAQO,GAAG,EAAEZ;QAC3D,MAAMa,SAASF,8BAAAA,WAAYE,MAAM;QACjC,wEAAwE;QACxE,sEAAsE;QACtE,oDAAoD;QACpD,IAAI,CAACA,UAAU,CAACH,OAAO,OAAO3B,KAAK;YAAEU,OAAO;QAAY,GAAG;QAE3D,IACE,CAACiB,SACD,CAAE,MAAMvC,4BAA4B,sBAAsB6B,QAC1D;YACA,OAAOjB,KAAK;gBAAEU,OAAO;YAAgB,GAAG;QAC1C;QAEA,MAAMqB,YAAY7C,cAAcqC,GAAG,GAAGQ,SAAS;QAC/C,MAAMC,SAASD,UAAUE,UAAU,CAAC,QAAQC,GAAG,CAACjB;QAChD,MAAMkB,cAAc,MAAMH,OAAOI,GAAG;QACpC,IAAI,CAACD,YAAYE,MAAM,EAAE,OAAOrC,KAAK;YAAEU,OAAO;QAAuB,GAAG;QACxE,MAAM4B,MAAMH,YAAYI,IAAI;QAE5B,MAAMC,SAAS,MAAMnD,gBAAgB;YACnCgB;YACAsB;YACAE,KAAKP,QAAQO,GAAG;YAChBS;QACF;QACA,IAAIE,QAAQ,OAAOA;QAEnB,MAAMC,aAAaT,OAAOC,UAAU,CAAC,YAAYC,GAAG,CAACf;QACrD,MAAMuB,kBAAkB,MAAMD,WAAWL,GAAG;QAC5C,IAAI,CAACM,gBAAgBL,MAAM,EAAE;YAC3B,OAAOrC,KAAK;gBAAEU,OAAO;YAAkB,GAAG;QAC5C;QACA,MAAMW,UAAUqB,gBAAgBH,IAAI;QAEpC,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,8DAA8D;QAC9D,qEAAqE;QACrE,qEAAqE;QACrE,IACE,CAACZ,SACD,CAAC5C,aAAa+C,QAAQT,OAAO,CAAC,YAAY,GAC1C;YACA,OAAOrB,KAAK;gBAAEU,OAAO;YAAY,GAAG;QACtC;QAEA,MAAMiC,QAAQ7D,sBAAsBuC;QACpC,MAAMuB,aAAaH,WAAWR,UAAU,CAAC;QACzC,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,wDAAwD;QACxD,MAAMY,QAAQC,QACZ,cAAA,AAAC,CAAA,MAAMF,WAAWG,KAAK,GAAGX,GAAG,EAAC,EAAGG,IAAI,GAAGQ,KAAK,YAA7C,cAAiD;QAGnD,MAAMC,UAAU,IAAIC;QACpB,MAAMC,SAAS,CAACC,OAAiBH,QAAQE,MAAM,CAACC;QAChD,IAAIC,SAAyD;QAC7D,IAAIC,QAAkC;QACtC,IAAIC,UAAU;QAEd,MAAMC,SAAS,IAAIC,eAA2B;YAC5C,MAAMC,MAAKC,UAAU;gBACnB,IAAI;oBACF,IAAIL,UAAU,QAAQ;wBACpBA,QAAQ;wBACRK,WAAWC,OAAO,CAChBT,OAAO9B,WAAW,QAAQzB,iBAAiBgD,SAAS;wBAEtD;oBACF;oBACA,IAAIU,UAAU,QAAQ;wBACpB,IAAIO,OAAOhB,WACRiB,OAAO,CAACtE,UAAUuE,UAAU,IAC5BC,KAAK,CAACjE;wBACT,IAAIsD,QAAQQ,OAAOA,KAAKI,UAAU,CAACZ;wBACnC,MAAMa,WAAW,MAAML,KAAKxB,GAAG;wBAC/B,IAAI6B,SAASC,KAAK,EAAE;4BAClBb,QAAQ;wBACV,OAAO;4BACLD,SAASa,SAASE,IAAI,CAACF,SAASE,IAAI,CAACpD,MAAM,GAAG,EAAE;4BAChD,IAAIkD,SAASE,IAAI,CAACpD,MAAM,GAAGjB,WAAWuD,QAAQ;4BAC9C,MAAMe,QAAQd,YAAY;4BAC1B,MAAMe,QAAQJ,SAASE,IAAI,CAACG,GAAG,CAAC,CAACC;oCACf,SAACA;gCAAjB,MAAMC,UAAU,UAAA,EAACD,cAAAA,MAAMhC,IAAI,cAAVgC,cAAgB,CAAC,EAAE,CAAC,SAAS,YAA9B,UACd,CAAC;gCACHjB,WAAW;gCACX,OAAOlC,WAAW,QACdxB,cAAc+C,OAAO6B,UACrBC,KAAKC,SAAS,CAAC7E,oBAAoB8C,OAAO6B;4BAChD;4BACAd,WAAWC,OAAO,CAChBT,OACE9B,WAAW,QACP,CAAC,EAAE,EAAEiD,MAAMM,IAAI,CAAC,OAAO,GACvB,GAAGP,QAAQ,KAAK,MAAMC,MAAMM,IAAI,CAAC,MAAM;4BAG/C;wBACF;oBACF;oBACA,OAAO;oBACPjB,WAAWC,OAAO,CAACT,OAAO9B,WAAW,QAAQ,OAAO;oBACpDsC,WAAWkB,KAAK;gBAClB,EAAE,OAAOlE,OAAO;oBACd,yDAAyD;oBACzD,6DAA6D;oBAC7D,8DAA8D;oBAC9DgD,WAAWhD,KAAK,CAACA;gBACnB;YACF;QACF;QAEA,sEAAsE;QACtE,oEAAoE;QACpE,kDAAkD;QAClD,KAAKjB,cAAcsC,WAAW;YAC5B8C,UAAUvD,QAAQO,GAAG;YACrBiD,QAAQ;YACRC,QAAQ,CAAC,KAAK,EAAE9D,MAAM,UAAU,EAAEE,WAAW;YAC7C6D,QAAQ;YACRC,OAAO;gBAAE7D;gBAAQ8D,SAASrC;YAAM;YAChCsC,IAAI3F,WAAW4F,eAAe;QAChC,GACGC,KAAK,CAAC,IAAMrE;QAEf,MAAMsE,OACJpE,QAAOG,uBAAAA,OAAO,CAAC,cAAc,YAAtBA,uBAA0B,cAC9BkE,OAAO,CAAC,oBAAoB,KAC5BC,WAAW,MAAM;QACtB,MAAMC,QAAQ,IAAIC,OAAOC,WAAW,GAAG7E,KAAK,CAAC,GAAG;QAChD,OAAO,IAAIX,SAASoD,QAAQ;YAC1BrD,QAAQ;YACRI,SAAS;gBACP,gBACEc,WAAW,QACP,4BACA;gBACN,uBAAuB,CAAC,sBAAsB,EAAEkE,KAAK,CAAC,EAAEG,MAAM,CAAC,EAAErE,OAAO,CAAC,CAAC;gBAC1E,CAACrB,mBAAmB,EAAEmB,OAAO2B;gBAC7B,iBAAiB;YACnB;QACF;IACF,EAAE,OAAOnC,OAAO;QACd,0EAA0E;QAC1E,+BAA+B;QAC/B,IAAIhB,iBAAiBgB,QAAQ,OAAOV,KAAK;YAAEU,OAAO;QAAkB,GAAG;QACvE,OAAOV,KAAK;YAAEU,OAAO;QAAgB,GAAG;IAC1C;AACF,EAAC"}