@atlasauth/emulator-core 0.1.0 → 0.2.0

package/dist/handlers/governance.js

@@ -0,0 +1,460 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.governanceHandlers = governanceHandlers;
+const crypto_util_1 = require("../crypto-util");
+const errors_1 = require("../errors");
+const store_1 = require("../store");
+const adopt_1 = require("../adopt");
+const authz_1 = require("./authz");
+const round2_1 = require("./round2");
+const support_1 = require("./support");
+const util_1 = require("./util");
+/**
+ * Governance routes: named step-up policies and the assertion a resource server calls before a sensitive action (with a
+ * signed receipt), legal holds, instance export and import (the exit and copy path) and the session export. The
+ * authorization routes (explain, what-if, FGA sync, the event feed) live in `authz.ts` and are registered from here.
+ */
+const STEP_UP_METHODS = ['password', 'email_code', 'sms_code', 'totp', 'backup_code', 'passkey', 'push', 'duo', 'yubikey'];
+const PHISHING_RESISTANT = ['passkey'];
+const AMR_OF = { password: 'pwd', email_code: 'email', sms_code: 'sms', totp: 'otp', backup_code: 'otp', passkey: 'hwk', push: 'push', duo: 'duo', yubikey: 'hwk' };
+const NAME_RE = /^[a-z0-9][a-z0-9_.:-]{0,63}$/;
+const AMR_RE = /^[a-z0-9_:.-]{1,40}$/;
+const MAX_LIST = 20;
+const bad = (message, param) => new errors_1.EmulatorError('VALIDATION_FAILED', message, param);
+const st = (0, support_1.engineState)((e) => ({ policies: new store_1.Table('step_up_policies', e.clock.now, 'sup'), exports: new store_1.Table('instance_exports', e.clock.now, 'iexp'), secret: (0, store_1.randomToken)(24) }));
+function strList(v, field, each, what) {
+    if (!Array.isArray(v) || v.length > MAX_LIST || v.some((x) => typeof x !== 'string' || !each(x)))
+        throw bad(`${field} must be a list of up to ${MAX_LIST} ${what}.`, field);
+    return [...new Set(v)];
+}
+function parsePolicy(b, existing) {
+    const out = {};
+    if (!existing || b.name !== undefined) {
+        if (typeof b.name !== 'string' || !NAME_RE.test(b.name))
+            throw bad('name must be 1-64 characters: lowercase letters, digits and _ . : -, starting with a letter or digit.', 'name');
+        out.name = b.name;
+    }
+    if (b.description !== undefined) {
+        if (b.description !== null && (typeof b.description !== 'string' || b.description.length > 500))
+            throw bad('description must be text up to 500 characters.', 'description');
+        out.description = b.description;
+    }
+    if (b.enabled !== undefined) {
+        if (typeof b.enabled !== 'boolean')
+            throw bad('enabled must be true or false.', 'enabled');
+        out.enabled = b.enabled;
+    }
+    if (b.max_age_seconds !== undefined)
+        out.max_age_seconds = (0, support_1.intIn)(b.max_age_seconds, 'max_age_seconds', 1, 30 * 86_400);
+    if (b.receipt_ttl_seconds !== undefined)
+        out.receipt_ttl_seconds = (0, support_1.intIn)(b.receipt_ttl_seconds, 'receipt_ttl_seconds', 10, 300);
+    if (b.required_acr !== undefined)
+        out.required_acr = strList(b.required_acr, 'required_acr', (s) => s.length > 0 && s.length <= 200, 'acr values');
+    if (b.required_amr !== undefined)
+        out.required_amr = strList(b.required_amr, 'required_amr', (s) => AMR_RE.test(s), 'amr values');
+    if (b.required_amr_any !== undefined)
+        out.required_amr_any = strList(b.required_amr_any, 'required_amr_any', (s) => AMR_RE.test(s), 'amr values');
+    if (b.phishing_resistant !== undefined) {
+        if (typeof b.phishing_resistant !== 'boolean')
+            throw bad('phishing_resistant must be true or false.', 'phishing_resistant');
+        out.phishing_resistant = b.phishing_resistant;
+    }
+    if (b.allowed_methods !== undefined)
+        out.allowed_methods = strList(b.allowed_methods, 'allowed_methods', (s) => STEP_UP_METHODS.includes(s), `of: ${STEP_UP_METHODS.join(', ')}`);
+    const merged = { phishing_resistant: false, allowed_methods: [], ...(existing ?? {}), ...out };
+    // A policy no method could satisfy is refused when written, not discovered when users are locked out.
+    if (merged.phishing_resistant && merged.allowed_methods.length && !merged.allowed_methods.some((m) => PHISHING_RESISTANT.includes(m)))
+        throw bad('phishing_resistant needs passkey among allowed_methods (or no allowed_methods).', 'allowed_methods');
+    return out;
+}
+const policyView = (p) => ({
+    object: 'step_up_policy',
+    id: p.id,
+    name: p.name,
+    description: p.description ?? null,
+    enabled: p.enabled,
+    max_age_seconds: p.max_age_seconds,
+    required_acr: p.required_acr,
+    required_amr: p.required_amr,
+    required_amr_any: p.required_amr_any,
+    phishing_resistant: p.phishing_resistant,
+    allowed_methods: p.allowed_methods,
+    receipt_ttl_seconds: p.receipt_ttl_seconds,
+    created_at: p.created_at,
+    updated_at: p.updated_at,
+});
+const holdView = (h) => ({ object: 'legal_hold', id: h.id, user_id: h.user_id, reason: h.reason, case_ref: h.case_ref ?? null, placed_at: h.placed_at, released_at: h.released_at ?? null, release_reason: h.release_reason ?? null, active: !h.released_at });
+const canonical = (v) => (Array.isArray(v) ? `[${v.map(canonical).join(',')}]` : v && typeof v === 'object' ? `{${Object.keys(v).sort().map((k) => `${JSON.stringify(k)}:${canonical(v[k])}`).join(',')}}` : JSON.stringify(v ?? null));
+const hex = (b) => [...b].map((x) => x.toString(16).padStart(2, '0')).join('');
+const exportView = (j) => ({ object: j.kind === 'export' ? 'instance_export' : 'instance_import', id: j.id, status: j.status, counts: j.counts, bundle_sha256: j.bundle_sha256 ?? null, signature: j.signature ?? null, dry_run: j.dry_run ?? false, errors: j.errors ?? [], created_at: j.created_at, completed_at: j.completed_at ?? null });
+function governanceHandlers() {
+    const policyOf = (e, id) => {
+        const p = st(e).policies.get(id);
+        if (!p)
+            throw (0, errors_1.notFound)('Step-up policy');
+        return p;
+    };
+    const exportOf = (e, id, kind) => {
+        const j = st(e).exports.get(id);
+        if (!j || j.kind !== kind)
+            throw (0, errors_1.notFound)(`Instance ${kind}`);
+        return j;
+    };
+    const completed = (j) => {
+        if (j.status !== 'completed' || !j.bundle)
+            throw new errors_1.EmulatorError('CONFLICT', 'The export is not ready.');
+        return j;
+    };
+    const signLink = async (e, j, exp) => hex(await (0, crypto_util_1.sha256)(`${j.id}.${j.nonce}.${exp}.${st(e).secret}`));
+    const listJobs = (kind) => (c) => (0, util_1.listReply)(c, st(c.engine).exports.filter((j) => j.kind === kind), exportView);
+    return [
+        // ── step-up policies ──
+        { method: 'GET', pattern: '/v1/step_up/policies', scope: 'step_up:read', handler: (c) => ({ body: { object: 'list', data: st(c.engine).policies.all().map(policyView), has_more: false, next_cursor: null } }) },
+        {
+            method: 'POST',
+            pattern: '/v1/step_up/policies',
+            scope: 'step_up:write',
+            handler: (c) => {
+                const e = c.engine;
+                const fields = parsePolicy(c.body);
+                if (st(e).policies.find((p) => p.name === fields.name))
+                    throw bad(`A step-up policy named "${fields.name}" already exists.`, 'name');
+                const now = e.clock.now();
+                const row = st(e).policies.insert({ description: null, enabled: true, max_age_seconds: 300, required_acr: [], required_amr: [], required_amr_any: [], phishing_resistant: false, allowed_methods: [], receipt_ttl_seconds: 60, ...fields, created_at: now, updated_at: now });
+                return { status: 201, body: policyView(row) };
+            },
+        },
+        { method: 'GET', pattern: '/v1/step_up/policies/:id', scope: 'step_up:read', handler: (c) => ({ body: policyView(policyOf(c.engine, c.params.id)) }) },
+        {
+            method: 'PATCH',
+            pattern: '/v1/step_up/policies/:id',
+            scope: 'step_up:write',
+            handler: (c) => {
+                const e = c.engine;
+                const p = policyOf(e, c.params.id);
+                const patch = parsePolicy(c.body, p);
+                if (patch.name && patch.name !== p.name && st(e).policies.find((x) => x.name === patch.name))
+                    throw bad(`A step-up policy named "${patch.name}" already exists.`, 'name');
+                Object.assign(p, patch, { updated_at: e.clock.now() });
+                return { body: policyView(p) };
+            },
+        },
+        {
+            method: 'DELETE',
+            pattern: '/v1/step_up/policies/:id',
+            scope: 'step_up:write',
+            handler: (c) => {
+                const p = policyOf(c.engine, c.params.id);
+                st(c.engine).policies.delete(p.id);
+                return { body: { object: 'step_up_policy', id: p.id, name: p.name, deleted: true } };
+            },
+        },
+        {
+            // Always 200 with `allowed`: a denial is an answer, not an error. Fails closed: unknown policy 404, disabled 409.
+            method: 'POST',
+            pattern: '/v1/step_up/assert',
+            scope: 'step_up:assert',
+            handler: async (c) => {
+                const e = c.engine;
+                if (typeof c.body.token !== 'string' || !c.body.token)
+                    throw bad('A session token is required.', 'token');
+                if (c.body.authorized_parties !== undefined && (!Array.isArray(c.body.authorized_parties) || c.body.authorized_parties.some((x) => typeof x !== 'string')))
+                    throw bad('authorized_parties must be a list of strings.', 'authorized_parties');
+                const ttlOverride = c.body.receipt_ttl_seconds === undefined ? undefined : (0, support_1.intIn)(c.body.receipt_ttl_seconds, 'receipt_ttl_seconds', 10, 300);
+                if (c.body.audience !== undefined && (typeof c.body.audience !== 'string' || !c.body.audience || c.body.audience.length > 200))
+                    throw bad('audience must be a non-empty string up to 200 characters.', 'audience');
+                const policy = st(e).policies.find((p) => p.name === c.body.policy);
+                if (!policy)
+                    throw (0, errors_1.notFound)('Step-up policy');
+                if (!policy.enabled)
+                    throw new errors_1.EmulatorError('CONFLICT', `The step-up policy "${policy.name}" is disabled.`);
+                const verified = await e.tokens.verify(c.body.token);
+                const session = verified.ok ? e.db.sessions.get(String(verified.claims.sid)) : undefined;
+                const deny = (reason, extra = {}) => ({ body: { object: 'step_up_assertion', allowed: false, reason, policy: policy.name, user_id: session?.user_id ?? null, session_id: session?.id ?? null, seconds_since_authentication: extra.age ?? null, step_up: { policy: policy.name, reason, max_age_seconds: policy.max_age_seconds, ...(policy.allowed_methods.length ? { allowed_methods: policy.allowed_methods } : {}), phishing_resistant: policy.phishing_resistant } } });
+                if (!verified.ok || !session || session.status !== 'active')
+                    return deny('invalid_session');
+                const parties = c.body.authorized_parties;
+                if (parties?.length && verified.claims.azp && !parties.includes(String(verified.claims.azp)))
+                    return deny('unauthorized_party');
+                const authTime = session.auth_time ?? session.created_at;
+                const age = Math.max(0, Math.floor((e.clock.now() - authTime) / 1000));
+                const amr = session.amr ?? ['pwd'];
+                const method = session.step_up_method ?? null;
+                if (age > policy.max_age_seconds)
+                    return deny('max_age_exceeded', { age });
+                if (policy.required_acr.length && !policy.required_acr.includes(session.acr))
+                    return deny('acr_insufficient', { age });
+                if (policy.required_amr.some((m) => !amr.includes(m)))
+                    return deny('amr_insufficient', { age });
+                if (policy.required_amr_any.length && !policy.required_amr_any.some((m) => amr.includes(m)))
+                    return deny('amr_insufficient', { age });
+                if (policy.phishing_resistant && !(method && PHISHING_RESISTANT.includes(method)))
+                    return deny('phishing_resistant_required', { age });
+                if (policy.allowed_methods.length && !(method && policy.allowed_methods.includes(method)))
+                    return deny('method_not_allowed', { age });
+                const ttl = ttlOverride ?? policy.receipt_ttl_seconds;
+                const jti = e.db.newId('sureceipt');
+                const receipt = await e.tokens.signClaims({ sub: session.user_id, sid: session.id, jti, token_use: 'step_up_receipt', policy: policy.name, auth_time: Math.floor(authTime / 1000), amr, acr: session.acr ?? null, ...(c.body.audience ? { aud: c.body.audience } : {}) }, ttl);
+                return { body: { object: 'step_up_assertion', allowed: true, reason: null, policy: policy.name, user_id: session.user_id, session_id: session.id, auth_time: Math.floor(authTime / 1000), amr, acr: session.acr ?? null, seconds_since_authentication: age, receipt, receipt_id: jti, receipt_expires_at: e.clock.now() + ttl * 1000 } };
+            },
+        },
+        {
+            // Emulator control: the user completes a step-up with `method`, which stamps the session like the real sign-in does.
+            method: 'POST',
+            pattern: '/__emulator/sessions/:id/authenticate',
+            public: true,
+            handler: (c) => {
+                const e = c.engine;
+                const s = e.db.sessions.get(c.params.id);
+                if (!s)
+                    throw (0, errors_1.notFound)('Session');
+                const method = (0, support_1.oneOf)(c.body, 'method', STEP_UP_METHODS);
+                s.auth_time = e.clock.now();
+                s.step_up_method = method;
+                s.amr = Array.isArray(c.body.amr) ? c.body.amr : [...new Set([...(s.amr ?? ['pwd']), AMR_OF[method]])];
+                if (typeof c.body.acr === 'string')
+                    s.acr = c.body.acr;
+                e.webhooks.emit('step_up.completed', { object: 'step_up', session_id: s.id, user_id: s.user_id, method, at: s.auth_time });
+                return { body: { object: 'session', id: s.id, auth_time: s.auth_time, step_up_method: method, amr: s.amr, acr: s.acr ?? null } };
+            },
+        },
+        // ── legal holds ──
+        {
+            method: 'GET',
+            pattern: '/v1/users/:id/legal_hold',
+            scope: 'data_subject_requests:read',
+            handler: (c) => {
+                const e = c.engine;
+                if (!e.db.users.get(c.params.id))
+                    throw (0, errors_1.notFound)('User');
+                const active = (0, support_1.activeHold)(e, c.params.id ?? '');
+                return { body: { object: 'legal_hold_status', user_id: c.params.id, on_hold: !!active, active: active ? holdView(active) : null, history: (0, support_1.legalHolds)(e).filter((h) => h.user_id === c.params.id).map(holdView) } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/users/:id/legal_hold',
+            scope: 'data_subject_requests:write',
+            handler: (c) => {
+                const e = c.engine;
+                const u = e.db.users.get(c.params.id);
+                if (!u || u.deleted)
+                    throw (0, errors_1.notFound)('User');
+                const reason = typeof c.body.reason === 'string' ? c.body.reason.trim() : '';
+                if (!reason || reason.length > 1000)
+                    throw bad('reason is required (max 1000 characters).', 'reason');
+                if (c.body.case_ref !== undefined && c.body.case_ref !== null && (typeof c.body.case_ref !== 'string' || c.body.case_ref.length > 200))
+                    throw bad('case_ref is text of at most 200 characters.', 'case_ref');
+                const have = (0, support_1.activeHold)(e, u.id);
+                if (have)
+                    return { status: 200, body: holdView(have) };
+                const hold = (0, support_1.legalHolds)(e).insert({ user_id: u.id, reason, case_ref: c.body.case_ref ?? null, placed_at: e.clock.now() });
+                e.webhooks.emit('user.legal_hold_placed', { object: 'legal_hold', id: hold.id, user_id: u.id, case_ref: hold.case_ref, placed_at: hold.placed_at });
+                return { status: 201, body: holdView(hold) };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/users/:id/legal_hold/release',
+            scope: 'data_subject_requests:write',
+            handler: (c) => {
+                const e = c.engine;
+                if (c.body.reason !== undefined && c.body.reason !== null && (typeof c.body.reason !== 'string' || c.body.reason.length > 1000))
+                    throw bad('reason is text of at most 1000 characters.', 'reason');
+                const hold = (0, support_1.activeHold)(e, c.params.id ?? '');
+                if (!hold)
+                    throw new errors_1.EmulatorError('CONFLICT', 'This user has no active legal hold.');
+                Object.assign(hold, { released_at: e.clock.now(), release_reason: c.body.reason ?? null });
+                e.webhooks.emit('user.legal_hold_released', { object: 'legal_hold', id: hold.id, user_id: hold.user_id, released_at: hold.released_at });
+                return { body: holdView(hold) };
+            },
+        },
+        { method: 'GET', pattern: '/v1/legal_holds', scope: 'data_subject_requests:read', handler: (c) => (0, util_1.listReply)(c, (0, support_1.legalHolds)(c.engine).filter((h) => !h.released_at), holdView) },
+        // ── instance export and import ──
+        {
+            method: 'POST',
+            pattern: '/v1/instance/exports',
+            scope: 'instance:write',
+            handler: async (c) => {
+                const e = c.engine;
+                const include = c.body.include === undefined ? ['users', 'organizations', 'memberships'] : c.body.include;
+                if (!Array.isArray(include) || include.some((x) => !['users', 'organizations', 'memberships'].includes(x)))
+                    throw bad('include is a list of users, organizations, memberships.', 'include');
+                const now = e.clock.now();
+                const users = include.includes('users') ? e.db.users.filter((u) => !u.deleted).reverse().map((u) => ({ id: u.id, username: u.username ?? null, first_name: u.first_name ?? null, last_name: u.last_name ?? null, external_id: u.external_id ?? null, email_addresses: u.emails.map((m) => ({ email_address: m.email_address, verified: m.verified === true, primary: m.id === u.primary_email_address_id })), public_metadata: u.public_metadata ?? {}, unsafe_metadata: u.unsafe_metadata ?? {}, banned: u.banned === true, created_at: u.created_at })) : [];
+                const organizations = include.includes('organizations') ? e.db.organizations.all().reverse().map((o) => ({ id: o.id, name: o.name, slug: o.slug, public_metadata: o.public_metadata ?? {}, created_at: o.created_at })) : [];
+                const memberships = include.includes('memberships') ? e.db.memberships.all().reverse().map((m) => ({ organization_id: m.organization_id, user_id: m.user_id, role: m.role })) : [];
+                // Private metadata and password material never enter a bundle.
+                const bundle = JSON.stringify({ version: 1, instance_id: e.instanceId, exported_at: now, users, organizations, memberships });
+                const digest = hex(await (0, crypto_util_1.sha256)(bundle));
+                const signature = await e.tokens.signClaims({ token_use: 'instance_export', sha256: digest, sub: e.instanceId }, 365 * 86_400);
+                const job = st(e).exports.insert({ kind: 'export', status: 'completed', bundle, bundle_sha256: digest, signature, nonce: (0, store_1.randomToken)(12), counts: { users: users.length, organizations: organizations.length, memberships: memberships.length }, created_at: now, completed_at: now });
+                e.webhooks.emit('instance_export.completed', { object: 'instance_export', id: job.id, counts: job.counts });
+                return { status: 202, body: exportView(job) };
+            },
+        },
+        { method: 'GET', pattern: '/v1/instance/exports', scope: 'instance:read', handler: listJobs('export') },
+        { method: 'GET', pattern: '/v1/instance/imports', scope: 'instance:read', handler: listJobs('import') },
+        { method: 'GET', pattern: '/v1/instance/exports/:id', scope: 'instance:read', handler: (c) => ({ body: exportView(exportOf(c.engine, c.params.id, 'export')) }) },
+        { method: 'GET', pattern: '/v1/instance/imports/:id', scope: 'instance:read', handler: (c) => ({ body: exportView(exportOf(c.engine, c.params.id, 'import')) }) },
+        {
+            method: 'GET',
+            pattern: '/v1/instance/exports/:id/bundle',
+            scope: 'instance:read',
+            handler: (c) => {
+                const j = completed(exportOf(c.engine, c.params.id, 'export'));
+                return { raw: j.bundle, headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store', 'x-atlas-bundle-sha256': j.bundle_sha256, 'x-atlas-bundle-signature': j.signature } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/instance/exports/:id/download_url',
+            scope: 'instance:read',
+            handler: async (c) => {
+                const e = c.engine;
+                const j = completed(exportOf(e, c.params.id, 'export'));
+                const exp = e.clock.now() + 15 * 60_000;
+                const sig = await signLink(e, j, exp);
+                return { body: { object: 'instance_export_download', url: `${e.issuer}/v1/instance/exports/${j.id}/download?i=${j.nonce}&exp=${exp}&sig=${sig}`, expires_at: exp } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/instance/exports/:id/revoke_links',
+            scope: 'instance:write',
+            handler: (c) => {
+                const j = exportOf(c.engine, c.params.id, 'export');
+                j.nonce = (0, store_1.randomToken)(12);
+                return { body: exportView(j) };
+            },
+        },
+        {
+            // The signed link: no key, the signature is the credential. Every refusal is the same 404.
+            method: 'GET',
+            pattern: '/v1/instance/exports/:id/download',
+            public: true,
+            handler: async (c) => {
+                const e = c.engine;
+                const j = st(e).exports.get(c.params.id);
+                const exp = Number(c.query.get('exp'));
+                const same = (a, b) => a.length === b.length && [...a].every((ch, i) => ch === b[i]);
+                if (!j || j.kind !== 'export' || !j.bundle || c.query.get('i') !== j.nonce || !Number.isFinite(exp) || exp <= e.clock.now() || !same(c.query.get('sig') ?? '', await signLink(e, j, exp)))
+                    throw (0, errors_1.notFound)('Export');
+                return { raw: j.bundle, headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store', 'x-atlas-bundle-sha256': j.bundle_sha256, 'x-atlas-bundle-signature': j.signature } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/instance/imports',
+            scope: 'instance:write',
+            handler: async (c) => {
+                const e = c.engine;
+                let text;
+                if (typeof c.body.bundle === 'string')
+                    text = c.body.bundle;
+                else if (c.body.bundle && typeof c.body.bundle === 'object')
+                    text = JSON.stringify(c.body.bundle);
+                else
+                    throw bad('bundle is required: the object or the exact string an export returned.', 'bundle');
+                // A digest or signature that was sent must match: a tampered bundle never loads.
+                if (c.body.bundle_sha256 !== undefined && c.body.bundle_sha256 !== hex(await (0, crypto_util_1.sha256)(text)))
+                    throw bad('bundle_sha256 does not match the bundle.', 'bundle_sha256');
+                if (c.body.signature !== undefined) {
+                    const v = await e.tokens.verifyAny(String(c.body.signature));
+                    if (!v.ok || v.claims.token_use !== 'instance_export' || v.claims.sha256 !== hex(await (0, crypto_util_1.sha256)(text)))
+                        throw bad('signature does not verify for this bundle.', 'signature');
+                }
+                let bundle;
+                try {
+                    bundle = JSON.parse(text);
+                }
+                catch {
+                    throw bad('bundle is not valid JSON.', 'bundle');
+                }
+                if (bundle.version !== 1 || !Array.isArray(bundle.users ?? []) || !Array.isArray(bundle.organizations ?? []) || !Array.isArray(bundle.memberships ?? []))
+                    throw bad('bundle is not a version 1 instance export.', 'bundle');
+                const dry = c.body.dry_run === true;
+                const counts = { users: { created: 0, skipped: 0, failed: 0 }, organizations: { created: 0, skipped: 0, failed: 0 }, memberships: { created: 0, skipped: 0, failed: 0 } };
+                const errors = [];
+                const now = e.clock.now();
+                for (const o of bundle.organizations ?? []) {
+                    if (typeof o?.id !== 'string' || typeof o.name !== 'string') {
+                        counts.organizations.failed++;
+                        errors.push({ kind: 'organization', id: o?.id ?? null, error: 'id and name are required' });
+                        continue;
+                    }
+                    if (e.db.organizations.get(o.id)) {
+                        counts.organizations.skipped++;
+                        continue;
+                    }
+                    if (!dry)
+                        (0, adopt_1.adoptOrganization)(e, { id: o.id, name: o.name, slug: o.slug ?? null, public_metadata: o.public_metadata, created_at: o.created_at ?? now, updated_at: now });
+                    counts.organizations.created++;
+                }
+                for (const u of bundle.users ?? []) {
+                    const emails = Array.isArray(u?.email_addresses) ? u.email_addresses : [];
+                    if (typeof u?.id !== 'string') {
+                        counts.users.failed++;
+                        errors.push({ kind: 'user', id: null, error: 'id is required' });
+                        continue;
+                    }
+                    const taken = e.db.users.get(u.id) || emails.some((m) => e.db.users.all().some((x) => !x.deleted && x.emails.some((y) => y.email_address.toLowerCase() === String(m.email_address).toLowerCase())));
+                    if (taken) {
+                        counts.users.skipped++;
+                        continue;
+                    }
+                    if (!dry) {
+                        const rows = emails.map((m) => ({ id: e.db.newId('idn'), email_address: String(m.email_address), verified: m.verified === true }));
+                        const primary = emails.findIndex((m) => m.primary === true);
+                        (0, adopt_1.adoptUser)(e, { id: u.id, emails: rows, primary_email_address_id: rows[primary >= 0 ? primary : 0]?.id ?? null, first_name: u.first_name, last_name: u.last_name, username: u.username, external_id: u.external_id, public_metadata: u.public_metadata, unsafe_metadata: u.unsafe_metadata, banned: u.banned, created_at: u.created_at ?? now, updated_at: now });
+                    }
+                    counts.users.created++;
+                }
+                for (const m of bundle.memberships ?? []) {
+                    const known = (id, table) => !!e.db[table].get(id) || (dry && (bundle[table] ?? []).some((x) => x.id === id));
+                    if (!known(m?.organization_id, 'organizations') || !known(m?.user_id, 'users')) {
+                        counts.memberships.failed++;
+                        errors.push({ kind: 'membership', id: `${m?.organization_id}:${m?.user_id}`, error: 'organization or user not found' });
+                        continue;
+                    }
+                    if (e.db.memberships.find((x) => x.organization_id === m.organization_id && x.user_id === m.user_id)) {
+                        counts.memberships.skipped++;
+                        continue;
+                    }
+                    if (!dry)
+                        (0, adopt_1.adoptMembership)(e, m.organization_id, m.user_id, m.role ?? 'org:member');
+                    counts.memberships.created++;
+                }
+                const failed = counts.users.failed + counts.organizations.failed + counts.memberships.failed;
+                const job = st(e).exports.insert({ kind: 'import', status: 'completed', counts, dry_run: dry, errors: errors.slice(0, 100), created_at: now, completed_at: now });
+                e.webhooks.emit(failed && !dry ? 'import_job.failed' : 'import_job.completed', { object: 'instance_import', id: job.id, counts, dry_run: dry });
+                return { status: 202, body: exportView(job) };
+            },
+        },
+        // ── sessions export ──
+        {
+            method: 'GET',
+            pattern: '/v1/sessions/export',
+            scope: 'sessions:read',
+            handler: (c) => {
+                const e = c.engine;
+                const format = c.query.get('format') ?? 'csv';
+                if (format !== 'csv')
+                    throw bad('format must be csv.', 'format');
+                const rows = e.db.sessions.all().reverse().filter((s) => (0, round2_1.sessionMatches)(e, s, (k) => c.query.get(k)));
+                const cols = ['id', 'user_id', 'organization_id', 'status', 'created_at', 'last_active_at', 'expires_at', 'revoked_at', 'revoked_reason', 'ip', 'country'];
+                // A cell that starts with = + - @ would run as a formula in a spreadsheet: prefix it.
+                const cell = (v) => {
+                    let s = v === null || v === undefined ? '' : String(v);
+                    if (/^[=+\-@\t\r]/.test(s))
+                        s = `'${s}`;
+                    return /[",\n\r]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s;
+                };
+                const lines = [cols.join(','), ...rows.map((s) => cols.map((k) => cell(s[k])).join(','))];
+                return { raw: `${lines.join('\n')}\n`, headers: { 'content-type': 'text/csv; charset=utf-8', 'content-disposition': 'attachment; filename="sessions.csv"', 'cache-control': 'no-store' } };
+            },
+        },
+        ...(0, authz_1.authzHandlers)(),
+    ];
+}
+//# sourceMappingURL=governance.js.map

package/dist/handlers/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/handlers/governance.ts"],"names":[],"mappings":";;AA4FA,gDAqTC;AA/YD,gDAAwC;AACxC,sCAAoD;AAEpD,oCAA8C;AAC9C,oCAAyE;AACzE,mCAAwC;AACxC,qCAA0C;AAC1C,uCAA8E;AAC9E,iCAAmC;AAEnC;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AACpI,MAAM,kBAAkB,GAAG,CAAC,SAAS,CAAC,CAAC;AACvC,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5L,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAC/C,MAAM,MAAM,GAAG,sBAAsB,CAAC;AACtC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,sBAAa,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAOvG,MAAM,EAAE,GAAG,IAAA,qBAAW,EAAC,CAAC,CAAS,EAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,aAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,aAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAA,mBAAW,EAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEpM,SAAS,OAAO,CAAC,CAAU,EAAE,KAAa,EAAE,IAA4B,EAAE,IAAY;IACpF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,GAAG,KAAK,4BAA4B,QAAQ,IAAI,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5K,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAa,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,CAAM,EAAE,QAAc;IACzC,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,CAAC,uGAAuG,EAAE,MAAM,CAAC,CAAC;QACpL,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,gDAAgD,EAAE,aAAa,CAAC,CAAC;QAC5K,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC;QAC3F,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;QAAE,GAAG,CAAC,eAAe,GAAG,IAAA,eAAK,EAAC,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC;IACvH,IAAI,CAAC,CAAC,mBAAmB,KAAK,SAAS;QAAE,GAAG,CAAC,mBAAmB,GAAG,IAAA,eAAK,EAAC,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAChI,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,YAAY,CAAC,CAAC;IACnJ,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAClI,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAClJ,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,CAAC,kBAAkB,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,2CAA2C,EAAE,oBAAoB,CAAC,CAAC;QAC5H,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;QAAE,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzM,MAAM,MAAM,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IAC/F,sGAAsG;IACtG,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,iFAAiF,EAAE,iBAAiB,CAAC,CAAC;IAC/P,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAM,EAAO,EAAE,CAAC,CAAC;IACnC,MAAM,EAAE,gBAAgB;IACxB,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,eAAe,EAAE,CAAC,CAAC,eAAe;IAClC,YAAY,EAAE,CAAC,CAAC,YAAY;IAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;IAC5B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;IACpC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;IACxC,eAAe,EAAE,CAAC,CAAC,eAAe;IAClC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;IAC1C,UAAU,EAAE,CAAC,CAAC,UAAU;IACxB,UAAU,EAAE,CAAC,CAAC,UAAU;CACzB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAM,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAEzQ,MAAM,SAAS,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAE,CAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;AACzQ,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEnG,MAAM,UAAU,GAAG,CAAC,CAAM,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;AAEzV,SAAgB,kBAAkB;IAChC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAsB,EAAO,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAA,iBAAQ,EAAC,gBAAgB,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAsB,EAAE,IAAY,EAAO,EAAE;QACxE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAA,iBAAQ,EAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAM,EAAO,EAAE;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,sBAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAS,EAAE,CAAM,EAAE,GAAW,EAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,IAAA,oBAAM,EAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3I,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAS,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IAE7I,OAAO;QACL,yBAAyB;QACzB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE;QAChN;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;oBAAE,MAAM,GAAG,CAAC,2BAA2B,MAAM,CAAC,IAAI,mBAAmB,EAAE,MAAM,CAAC,CAAC;gBACrI,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAS,CAAC,CAAC;gBACrR,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;SACF;QACD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE;QACtJ;YACE,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,0BAA0B;YACnC,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;oBAAE,MAAM,GAAG,CAAC,2BAA2B,KAAK,CAAC,IAAI,mBAAmB,EAAE,MAAM,CAAC,CAAC;gBAC1K,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,CAAC;SACF;QACD;YACE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,0BAA0B;YACnC,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1C,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YACvF,CAAC;SACF;QACD;YACE,kHAAkH;YAClH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oBAAoB;YAC7B,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;oBAAE,MAAM,GAAG,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC;gBAC1G,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;oBAAE,MAAM,GAAG,CAAC,+CAA+C,EAAE,oBAAoB,CAAC,CAAC;gBACtP,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,eAAK,EAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC7I,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC,2DAA2D,EAAE,UAAU,CAAC,CAAC;gBACnN,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAA,iBAAQ,EAAC,gBAAgB,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,sBAAa,CAAC,UAAU,EAAE,uBAAuB,MAAM,CAAC,IAAI,gBAAgB,CAAC,CAAC;gBAC7G,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,QAAa,EAAE,EAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,4BAA4B,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC;gBACxe,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC5F,MAAM,OAAO,GAAyB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBAChE,IAAI,OAAO,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAChI,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC;gBACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;gBACvE,MAAM,GAAG,GAAa,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,MAAM,GAAkB,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;gBAC7D,IAAI,GAAG,GAAG,MAAM,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3E,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvH,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACxG,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC9I,IAAI,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvI,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtI,MAAM,GAAG,GAAG,WAAW,IAAI,MAAM,CAAC,mBAAmB,CAAC;gBACtD,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACpC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC/Q,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC;YAC3U,CAAC;SACF;QACD;YACE,qHAAqH;YACrH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uCAAuC;YAChD,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzC,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,SAAS,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,IAAA,eAAK,EAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC5B,CAAC,CAAC,cAAc,GAAG,MAAM,CAAC;gBAC1B,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC,CAAC;gBACxG,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ;oBAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC3H,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACnI,CAAC;SACF;QACD,oBAAoB;QACpB;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,0BAA0B;YACnC,KAAK,EAAE,4BAA4B;YACnC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,MAAM,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAA,oBAAU,EAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACrN,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0BAA0B;YACnC,KAAK,EAAE,6BAA6B;YACpC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;oBAAE,MAAM,IAAA,iBAAQ,EAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;oBAAE,MAAM,GAAG,CAAC,2CAA2C,EAAE,QAAQ,CAAC,CAAC;gBACtG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC,6CAA6C,EAAE,UAAU,CAAC,CAAC;gBAC7M,MAAM,IAAI,GAAG,IAAA,oBAAU,EAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjC,IAAI,IAAI;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1H,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBACpJ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kCAAkC;YAC3C,KAAK,EAAE,6BAA6B;YACpC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;oBAAE,MAAM,GAAG,CAAC,4CAA4C,EAAE,QAAQ,CAAC,CAAC;gBACnM,MAAM,IAAI,GAAG,IAAA,oBAAU,EAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,sBAAa,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;gBACtF,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC3F,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzI,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,CAAC;SACF;QACD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAS,EAAC,CAAC,EAAE,IAAA,oBAAU,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,EAAE;QAC9K,mCAAmC;QACnC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC1G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAW,CAAC,CAAC;oBAAE,MAAM,GAAG,CAAC,yDAAyD,EAAE,SAAS,CAAC,CAAC;gBAC/M,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,eAAe,EAAG,CAAC,CAAC,MAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1iB,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7N,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnL,+DAA+D;gBAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC9H,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAA,oBAAM,EAAC,MAAM,CAAC,CAAC,CAAC;gBACzC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;gBAC/H,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAA,mBAAW,EAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvR,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5G,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;SACF;QACD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QACvG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QACvG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE;QACjK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE;QACjK;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,iCAAiC;YAC1C,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC/D,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC,aAAa,EAAE,0BAA0B,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3M,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uCAAuC;YAChD,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,wBAAwB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,KAAK,QAAQ,GAAG,QAAQ,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC;YACvK,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uCAAuC;YAChD,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACpD,CAAC,CAAC,KAAK,GAAG,IAAA,mBAAW,EAAC,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,CAAC;SACF;QACD;YACE,2FAA2F;YAC3F,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,mCAAmC;YAC5C,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,QAAQ,CAAC,CAAC;gBACpN,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC,aAAa,EAAE,0BAA0B,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YAC3M,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,IAAY,CAAC;gBACjB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;qBACvD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;oBAC7F,MAAM,GAAG,CAAC,wEAAwE,EAAE,QAAQ,CAAC,CAAC;gBACnG,iFAAiF;gBACjF,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,KAAK,GAAG,CAAC,MAAM,IAAA,oBAAM,EAAC,IAAI,CAAC,CAAC;oBAAE,MAAM,GAAG,CAAC,0CAA0C,EAAE,eAAe,CAAC,CAAC;gBACnK,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACnC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,iBAAiB,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAA,oBAAM,EAAC,IAAI,CAAC,CAAC;wBAAE,MAAM,GAAG,CAAC,4CAA4C,EAAE,WAAW,CAAC,CAAC;gBAC7K,CAAC;gBACD,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;gBACnD,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;oBAAE,MAAM,GAAG,CAAC,4CAA4C,EAAE,QAAQ,CAAC,CAAC;gBAC5N,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;gBACpC,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1K,MAAM,MAAM,GAAU,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;oBAC3C,IAAI,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACtM,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;wBAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBAC/E,IAAI,CAAC,GAAG;wBAAE,IAAA,yBAAiB,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;oBACvK,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBACjC,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;oBACnC,MAAM,MAAM,GAAU,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjF,IAAI,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;wBAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACrI,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAK,CAAC,CAAC,MAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC/M,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBAChD,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;wBACnI,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;wBAC5D,IAAA,iBAAS,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;oBACnW,CAAC;oBACD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,KAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBACtJ,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;wBAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,eAAe,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACnP,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;wBAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACjJ,IAAI,CAAC,GAAG;wBAAE,IAAA,uBAAe,EAAC,CAAC,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC;oBACnF,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC/B,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC7F,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChJ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;SACF;QACD,wBAAwB;QACxB;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,qBAAqB;YAC9B,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;gBAC9C,IAAI,MAAM,KAAK,KAAK;oBAAE,MAAM,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,uBAAc,EAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC3J,sFAAsF;gBACtF,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE;oBAClC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBACvD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;wBAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;oBACxC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1F,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,qCAAqC,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC;YAC7L,CAAC;SACF;QACD,GAAG,IAAA,qBAAa,GAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/handlers/hooks.js

@@ -9,6 +9,7 @@ const keys_1 = require("./keys");
 const machines_1 = require("./machines");
 const orgs_1 = require("./orgs");
 const users_1 = require("./users");
+const webhook_ext_1 = require("../webhook-ext");
 const util_1 = require("./util");
 function presentEndpoint(e, ep) {
     return e.shape('WebhookEndpoint', {
@@ -24,6 +25,7 @@ function presentEndpoint(e, ep) {
         last_success_at: ep.last_success_at ?? null,
         last_failure: ep.last_failure ?? null,
         consecutive_failures: ep.consecutive_failures ?? 0,
+        ...(0, webhook_ext_1.presentEndpointExtras)(ep),
     });
 }
 /** What the change feed and its snapshots read: current state per feed resource. */
@@ -89,7 +91,7 @@ function hooksHandlers() {
                 if (!events.length)
                     throw new errors_1.EmulatorError('VALIDATION_FAILED', 'enabled_events cannot be empty.', 'enabled_events');
                 const secret = typeof c.body.secret === 'string' ? c.body.secret : e.webhooks.newSecret();
-                const ep = e.db.endpoints.insert({ url, description: c.body.description ?? null, enabled_events: events, active: c.body.active !== false, event_naming: c.body.event_naming ?? 'canonical', secret, consecutive_failures: 0, created_at: e.clock.now() });
+                const ep = e.db.endpoints.insert({ ...(0, webhook_ext_1.parseEndpointExtras)(c.body), url, description: c.body.description ?? null, enabled_events: events, active: c.body.active !== false, event_naming: c.body.event_naming ?? 'canonical', secret, consecutive_failures: 0, created_at: e.clock.now() });
                 return { status: 201, body: { ...presentEndpoint(e, ep), secret } };
             },
         },
@@ -113,6 +115,7 @@ function hooksHandlers() {
                 for (const k of ['url', 'description', 'enabled_events', 'active', 'event_naming'])
                     if (k in c.body)
                         ep[k] = c.body[k];
+                Object.assign(ep, (0, webhook_ext_1.parseEndpointExtras)(c.body, ep));
                 if (c.body.active === true)
                     Object.assign(ep, { consecutive_failures: 0, failing_since: null });
                 return { body: presentEndpoint(c.engine, ep) };