@atlasauth/emulator-core 0.2.0 → 0.3.0

package/dist/handlers/emu4-authz-trust.js

@@ -0,0 +1,488 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.delegationView = exports.authzAuditRows = exports.EVALUATION_VALID_FOR_SECONDS = void 0;
+exports.auditAuthz = auditAuthz;
+exports.delegationForMint = delegationForMint;
+exports.delegationOfToken = delegationOfToken;
+exports.emu4TrustAuthzHandlers = emu4TrustAuthzHandlers;
+const errors_1 = require("../errors");
+const store_1 = require("../store");
+const support_1 = require("./support");
+/**
+ * The agent delegation graph and continuous access evaluation. A delegation says an agent acts under a grant from a user
+ * (root) or from another agent (child), for named scopes, until a time. Children only narrow (scopes, lifetime, resource), the
+ * chain has a depth limit, revoking a delegation revokes everything below it, and a machine that holds any delegation mints
+ * tokens only under a live one, narrowed to its scopes and carrying `delegation`, `act` and `posture` claims. With continuous
+ * evaluation on, the delegator's live posture (account, MFA freshness, risk, device) is re-checked on every mint and evaluate.
+ */
+const bad = (m, p) => new errors_1.EmulatorError('VALIDATION_FAILED', m, p);
+const conflict = (m) => new errors_1.EmulatorError('CONFLICT', m);
+const SCOPE = /^[A-Za-z0-9:_./-]{1,100}$/;
+const MAX_CHILDREN = 100;
+exports.EVALUATION_VALID_FOR_SECONDS = 30;
+const RISK = { low: 0, medium: 1, high: 2 };
+const defaultFabric = () => ({ continuousEvaluation: false, maxMfaAgeSeconds: null, maxRiskLevel: null, requireTrustedDevice: false, onFailure: 'revoke', maxDelegationDepth: 4, defaultDelegationTtlSeconds: 86_400 });
+const st = (0, support_1.engineState)((e) => ({ audit: [], cfg: defaultFabric(), posture: new Map(), delegations: new store_1.Table('agent_delegations', e.clock.now, 'dlg'), evaluations: new store_1.Table('agent_access_evaluations', e.clock.now, 'aev') }));
+/** Audit rows for every authorization-surface mutation (read back with `GET /__emulator/authz/audit`). */
+function auditAuthz(e, action, targetType, targetId, metadata = {}) {
+    st(e).audit.push({ id: e.db.newId('audit'), action, actor_type: 'api_key', actor_id: 'emulator', target_type: targetType, target_id: targetId, metadata, created_at: e.clock.now() });
+}
+const authzAuditRows = (e) => st(e).audit;
+exports.authzAuditRows = authzAuditRows;
+// ── views ──
+const table = (e) => st(e).delegations;
+const delegationView = (d) => ({
+    object: 'agent_delegation',
+    id: d.id,
+    child_machine_id: d.child_machine_id,
+    parent_delegation_id: d.parent_delegation_id ?? null,
+    root_delegation_id: d.root_delegation_id,
+    parent_machine_id: d.parent_machine_id ?? null,
+    delegator_user_id: d.delegator_user_id ?? null,
+    organization_id: d.organization_id ?? null,
+    depth: d.depth,
+    scopes: d.scopes,
+    resource: d.resource ?? null,
+    status: d.status,
+    expires_at: d.expires_at ?? null,
+    revoked_at: d.revoked_at ?? null,
+    revoked_by: d.revoked_by ?? null,
+    revoked_reason: d.revoked_reason ?? null,
+    posture: d.posture ?? null,
+    last_decision: d.last_decision ?? null,
+    last_evaluated_at: d.last_evaluated_at ?? null,
+    created_at: d.created_at,
+});
+exports.delegationView = delegationView;
+const isLive = (d, now) => d.status === 'active' && (!d.expires_at || d.expires_at > now);
+/** The ancestors of a delegation, root first, ending with the delegation itself. */
+const chainOf = (e, d) => {
+    const out = [];
+    for (let cur = d; cur && out.length < 20; cur = cur.parent_delegation_id ? table(e).get(cur.parent_delegation_id) : undefined)
+        out.unshift(cur);
+    return out;
+};
+/** A delegation and everything below it. */
+const subtreeOf = (e, id) => {
+    const root = table(e).get(id);
+    if (!root)
+        return [];
+    const out = [root];
+    for (let i = 0; i < out.length; i++)
+        out.push(...table(e).filter((d) => d.parent_delegation_id === out[i].id).reverse());
+    return out;
+};
+function loadPosture(e, userId) {
+    const u = e.db.users.get(userId);
+    const now = e.clock.now();
+    const usable = !!u && !u.deleted && u.banned !== true && u.locked !== true;
+    const sessions = e.db.sessions.filter((s) => s.user_id === userId && s.status === 'active' && (!s.expires_at || s.expires_at > now));
+    const set = st(e).posture.get(userId) ?? {};
+    let mfaAt = set.mfa_at ?? null;
+    let risk = set.risk ?? null;
+    for (const s of sessions) {
+        if (set.mfa_at === undefined && s.step_up_method && s.auth_time && (mfaAt === null || s.auth_time > mfaAt))
+            mfaAt = s.auth_time;
+        const level = s.risk?.level;
+        if (set.risk === undefined && level && (risk === null || RISK[level] > RISK[risk]))
+            risk = level;
+    }
+    return { usable, activeSessions: sessions.length, mfaAt, risk, deviceCompliant: set.device_compliant === true };
+}
+const postureClaim = (p, now) => ({ mfa_at: p.mfaAt ? Math.floor(p.mfaAt / 1000) : null, risk: p.risk, device: p.deviceCompliant ? 'compliant' : 'unknown', evaluated_at: Math.floor(now / 1000) });
+function verdictOf(cfg, p, now) {
+    const reasons = [];
+    if (!p.usable)
+        reasons.push('delegator_unavailable');
+    if ((cfg.maxMfaAgeSeconds !== null || cfg.maxRiskLevel !== null) && p.activeSessions === 0)
+        reasons.push('no_active_session');
+    if (cfg.maxMfaAgeSeconds !== null && p.activeSessions > 0 && (!p.mfaAt || now - p.mfaAt > cfg.maxMfaAgeSeconds * 1000))
+        reasons.push('mfa_stale');
+    if (cfg.maxRiskLevel !== null && p.risk !== null && RISK[p.risk] > RISK[cfg.maxRiskLevel])
+        reasons.push('risk_too_high');
+    if (cfg.requireTrustedDevice && !p.deviceCompliant)
+        reasons.push('untrusted_device');
+    return { decision: reasons.length ? 'deny' : 'allow', reasons };
+}
+function evaluate(e, d) {
+    const now = e.clock.now();
+    if (d.status !== 'active')
+        return { decision: 'revoked', reasons: ['delegation_revoked'], posture: null };
+    if (!isLive(d, now))
+        return { decision: 'deny', reasons: ['delegation_expired'], posture: null };
+    const dead = chainOf(e, d).find((c) => !isLive(c, now));
+    if (dead)
+        return { decision: dead.status !== 'active' ? 'revoked' : 'deny', reasons: [dead.status !== 'active' ? 'delegation_revoked' : 'delegation_expired'], posture: null };
+    if (!d.delegator_user_id)
+        return { decision: 'allow', reasons: [], posture: null };
+    const p = loadPosture(e, d.delegator_user_id);
+    const cfg = st(e).cfg;
+    // The instance policy applies only when continuous evaluation is on; the delegator's account state always does.
+    const v = verdictOf(cfg.continuousEvaluation ? cfg : { ...cfg, maxMfaAgeSeconds: null, maxRiskLevel: null, requireTrustedDevice: false }, p, now);
+    return { decision: v.decision, reasons: v.reasons, posture: postureClaim(p, now) };
+}
+function revokeSubtree(e, ids, reason) {
+    const now = e.clock.now();
+    const out = [];
+    for (const d of ids) {
+        if (d.status !== 'active')
+            continue;
+        table(e).update(d.id, { status: 'revoked', revoked_at: now, revoked_by: 'secret_key', revoked_reason: reason });
+        out.push(table(e).get(d.id));
+    }
+    return out;
+}
+function finishRevocation(e, revoked, rootId, opts) {
+    const machineIds = [...new Set(revoked.map((r) => r.child_machine_id))];
+    const disabled = [];
+    if (opts.disableAgents) {
+        const now = e.clock.now();
+        for (const mid of machineIds) {
+            if (table(e).filter((d) => d.child_machine_id === mid && isLive(d, now)).length === 0) {
+                const m = e.db.machines.get(mid);
+                if (m && !m.deleted)
+                    (e.db.machines.update(mid, { status: 'revoked', updated_at: now }), disabled.push(mid));
+            }
+        }
+    }
+    if (revoked.length) {
+        const data = { object: 'agent_delegation_revocation', root_id: rootId, reason: opts.reason, trigger: opts.trigger, delegation_ids: revoked.map((r) => r.id), machine_ids: machineIds, disabled_machine_ids: disabled, count: revoked.length };
+        auditAuthz(e, 'agent.delegation_revoked', 'agent_delegation', rootId ?? revoked[0].id, data);
+        e.webhooks.emit('agent.delegation_revoked', data);
+    }
+    return { object: 'agent_delegation_revocation', revoked: revoked.map(exports.delegationView), disabled_machine_ids: disabled, count: revoked.length };
+}
+/** Record a change of standing and, on a deny, act as the instance's `onFailure` says. Returns the evaluation. */
+function enforce(e, root, ev) {
+    const s = st(e);
+    const now = e.clock.now();
+    if (ev.decision !== (root.last_decision ?? 'allow'))
+        s.evaluations.insert({ delegation_id: root.id, decision: ev.decision, reasons: ev.reasons, posture: ev.posture ?? {}, evaluated_at: now });
+    table(e).update(root.id, { last_decision: ev.decision, last_evaluated_at: now });
+    if (ev.decision === 'deny') {
+        const revokeNow = s.cfg.onFailure === 'revoke' && !ev.reasons.includes('delegation_expired');
+        e.webhooks.emit('agent.access_denied', { object: 'agent_access_evaluation', delegation_id: root.id, root_delegation_id: root.root_delegation_id, child_machine_id: root.child_machine_id, reasons: ev.reasons, action: revokeNow ? 'revoked' : 'denied' });
+        if (revokeNow)
+            finishRevocation(e, revokeSubtree(e, subtreeOf(e, root.root_delegation_id), `access_evaluation:${ev.reasons.join(',')}`), root.root_delegation_id, { reason: `access_evaluation:${ev.reasons.join(',')}`, disableAgents: false, trigger: 'evaluation' });
+    }
+    return ev;
+}
+const rootOf = (e, d) => (d.parent_delegation_id ? (table(e).get(d.root_delegation_id) ?? d) : d);
+// ── token minting hook ──
+/**
+ * Called by every machine-token mint. A machine with no delegation is unaffected. One that has any must hold a live delegation:
+ * the one named by `delegation_id`, or the newest live one. Returns what the mint must apply: scopes narrowed to the delegated
+ * scopes (never widened), a lifetime cap and the `delegation`, `act` and `posture` claims. Refuses (403) when none is live or
+ * the continuous evaluation fails.
+ */
+function delegationForMint(e, machineId, req) {
+    const mine = table(e).filter((d) => d.child_machine_id === machineId);
+    if (!mine.length)
+        return null;
+    const now = e.clock.now();
+    let d;
+    if (typeof req.delegation_id === 'string' && req.delegation_id) {
+        d = mine.find((x) => x.id === req.delegation_id);
+        if (!d)
+            throw new errors_1.EmulatorError('FORBIDDEN', 'That delegation does not belong to this machine.', 'delegation_id');
+    }
+    else
+        d = mine.find((x) => isLive(x, now));
+    if (!d || !isLive(d, now))
+        throw new errors_1.EmulatorError('FORBIDDEN', 'This machine has no live delegation: it may not mint tokens.');
+    const root = rootOf(e, d);
+    const ev = enforce(e, root, evaluate(e, d));
+    if (ev.decision !== 'allow')
+        throw new errors_1.EmulatorError('FORBIDDEN', `The delegation is not usable right now (${ev.reasons.join(', ')}).`);
+    const chain = chainOf(e, d);
+    const principals = [];
+    if (chain[0]?.delegator_user_id)
+        principals.push(chain[0].delegator_user_id);
+    for (const c of chain.slice(0, -1))
+        principals.push(c.child_machine_id);
+    let act;
+    for (const sub of principals)
+        act = act ? { sub, act } : { sub };
+    const ttlSeconds = d.expires_at ? Math.max(1, Math.floor((d.expires_at - now) / 1000)) : Number.MAX_SAFE_INTEGER;
+    return {
+        scopes: d.scopes,
+        ttlSeconds,
+        claims: { delegation: { id: d.id, root: d.root_delegation_id, depth: d.depth, delegator: chain[0]?.delegator_user_id ?? null, scopes: d.scopes }, ...(act ? { act } : {}), posture: ev.posture ?? undefined },
+    };
+}
+/** What `POST /v1/m2m_tokens/verify` adds for a token minted under a delegation: null when it has none, `revoked` when it is no longer live. */
+function delegationOfToken(e, claims) {
+    const id = claims.delegation?.id;
+    if (typeof id !== 'string')
+        return null;
+    const d = table(e).get(id);
+    if (!d)
+        return { live: false, delegation: (0, exports.delegationView)({ id, status: 'revoked', scopes: [] }) };
+    const now = e.clock.now();
+    return { live: chainOf(e, d).every((c) => isLive(c, now)), delegation: (0, exports.delegationView)(d) };
+}
+// ── routes ──
+const obj = (b) => b;
+const reasonOf = (b) => {
+    if (b.reason === undefined)
+        return 'operator';
+    if (typeof b.reason !== 'string' || !b.reason.trim() || b.reason.length > 200)
+        throw bad('reason must be a short string.', 'reason');
+    return b.reason.trim();
+};
+// shortcut: unknown body fields are ignored (the engine's own strict mode rejects them where the document lists the route).
+const known = (_b, _fields) => undefined;
+const DELEGATION_FIELDS = ['child_machine_id', 'delegator_user_id', 'parent_delegation_id', 'scopes', 'resource', 'expires_in_seconds', 'expires_at', 'organization_id'];
+function createDelegation(e, body) {
+    const cfg = st(e).cfg;
+    const now = e.clock.now();
+    if (typeof body.child_machine_id !== 'string' || !body.child_machine_id)
+        throw bad('child_machine_id is required.', 'child_machine_id');
+    if (!Array.isArray(body.scopes) || !body.scopes.length || body.scopes.length > 50 || body.scopes.some((s) => typeof s !== 'string' || !SCOPE.test(s)))
+        throw bad('scopes must be a list of 1 to 50 scope names.', 'scopes');
+    const scopes = [...new Set(body.scopes)];
+    if (body.resource !== undefined && body.resource !== null && (typeof body.resource !== 'string' || body.resource.length > 255))
+        throw bad('resource must be a string.', 'resource');
+    const resource = body.resource ?? null;
+    const child = e.db.machines.get(body.child_machine_id);
+    if (!child || child.deleted)
+        throw (0, errors_1.notFound)('Machine');
+    if (child.status !== 'active')
+        throw conflict('The machine must be active to receive a delegation.');
+    let parent;
+    let delegator = null;
+    if (typeof body.parent_delegation_id === 'string' && body.parent_delegation_id) {
+        if (body.delegator_user_id !== undefined)
+            throw bad('A delegation under a parent takes its delegator from the root: omit delegator_user_id.', 'delegator_user_id');
+        parent = table(e).get(body.parent_delegation_id);
+        if (!parent)
+            throw new errors_1.EmulatorError('NOT_FOUND', 'Unknown parent delegation.');
+        if (!isLive(parent, now))
+            throw conflict('The parent delegation is revoked or expired.');
+        if (parent.depth >= cfg.maxDelegationDepth)
+            throw conflict(`Delegations can be at most ${cfg.maxDelegationDepth} deep.`);
+        if (table(e).filter((d) => d.parent_delegation_id === parent.id && d.status === 'active').length >= MAX_CHILDREN)
+            throw conflict(`A delegation can have at most ${MAX_CHILDREN} active children.`);
+        if (parent.child_machine_id === child.id)
+            throw bad('An agent cannot delegate to itself.', 'child_machine_id');
+        if (chainOf(e, parent).some((c) => c.child_machine_id === child.id))
+            throw bad('That agent is already an ancestor in this chain: a delegation cannot loop.', 'child_machine_id');
+        const extra = scopes.filter((s) => !parent.scopes.includes(s));
+        if (extra.length)
+            throw bad(`A child delegation cannot hold scopes its parent lacks: ${extra.join(', ')}.`, 'scopes');
+        if (parent.resource && resource && parent.resource !== resource)
+            throw bad("A child delegation stays on its parent's resource.", 'resource');
+        delegator = parent.delegator_user_id ?? null;
+    }
+    else {
+        if (typeof body.delegator_user_id !== 'string' || !body.delegator_user_id)
+            throw bad('delegator_user_id is required for a root delegation (or give parent_delegation_id).', 'delegator_user_id');
+        const u = e.db.users.get(body.delegator_user_id);
+        if (!u || u.deleted || u.banned === true || u.locked === true)
+            throw new errors_1.EmulatorError('NOT_FOUND', 'Unknown user.');
+        delegator = u.id;
+    }
+    let expiresAt;
+    if (body.expires_at !== undefined && body.expires_in_seconds !== undefined)
+        throw bad('Send expires_at or expires_in_seconds, not both.', 'expires_at');
+    if (body.expires_in_seconds !== undefined) {
+        const s = body.expires_in_seconds;
+        if (typeof s !== 'number' || !Number.isInteger(s) || s < 60 || s > 2_592_000)
+            throw bad('expires_in_seconds must be a whole number of seconds from 60 to 2592000.', 'expires_in_seconds');
+        expiresAt = now + s * 1000;
+    }
+    else if (body.expires_at !== undefined) {
+        const at = typeof body.expires_at === 'number' || typeof body.expires_at === 'string' ? new Date(body.expires_at).getTime() : NaN;
+        if (Number.isNaN(at) || at <= now || at - now > 2_592_000_000)
+            throw bad('expires_at must be a future time within 30 days.', 'expires_at');
+        expiresAt = at;
+    }
+    else
+        expiresAt = now + cfg.defaultDelegationTtlSeconds * 1000;
+    if (parent?.expires_at && expiresAt > parent.expires_at)
+        expiresAt = parent.expires_at;
+    let posture = null;
+    if (!parent && delegator) {
+        const p = loadPosture(e, delegator);
+        posture = postureClaim(p, now);
+        // A root delegation is refused when the live policy already fails: it would be revoked at once.
+        if (cfg.continuousEvaluation) {
+            const v = verdictOf(cfg, p, now);
+            if (v.decision === 'deny')
+                throw new errors_1.EmulatorError('FORBIDDEN', `The delegator does not meet the instance's access policy (${v.reasons.join(', ')}).`);
+        }
+    }
+    const row = table(e).insert({ child_machine_id: child.id, parent_delegation_id: parent?.id ?? null, root_delegation_id: parent?.root_delegation_id ?? '', parent_machine_id: parent?.child_machine_id ?? null, delegator_user_id: delegator, organization_id: typeof body.organization_id === 'string' ? body.organization_id : null, depth: (parent?.depth ?? 0) + 1, scopes, resource, status: 'active', expires_at: expiresAt, revoked_at: null, revoked_by: null, revoked_reason: null, posture, last_decision: null, last_evaluated_at: null, created_at: now });
+    if (!parent)
+        table(e).update(row.id, { root_delegation_id: row.id });
+    const fresh = table(e).get(row.id);
+    auditAuthz(e, 'agent.delegation_created', 'agent_delegation', fresh.id, { child_machine_id: fresh.child_machine_id, parent_delegation_id: fresh.parent_delegation_id, delegator_user_id: fresh.delegator_user_id, depth: fresh.depth, scopes: fresh.scopes, expires_at: fresh.expires_at });
+    e.webhooks.emit('agent.delegation_created', { object: 'agent_delegation', id: fresh.id, child_machine_id: fresh.child_machine_id, parent_delegation_id: fresh.parent_delegation_id, root_delegation_id: fresh.root_delegation_id, delegator_user_id: fresh.delegator_user_id, depth: fresh.depth, scopes: fresh.scopes, expires_at: fresh.expires_at });
+    return (0, exports.delegationView)(fresh);
+}
+const find = (e, id) => {
+    const d = table(e).get(id);
+    if (!d)
+        throw new errors_1.EmulatorError('NOT_FOUND', 'Unknown delegation.');
+    return d;
+};
+function emu4TrustAuthzHandlers() {
+    const base = '/v1/agent_delegations';
+    const boolField = (b, k) => {
+        if (b[k] !== undefined && typeof b[k] !== 'boolean')
+            throw bad(`${k} must be true or false.`, k);
+    };
+    return [
+        { method: 'POST', pattern: base, scope: 'machines:write', handler: (c) => (known(obj(c.body), DELEGATION_FIELDS), { status: 201, body: createDelegation(c.engine, obj(c.body)) }) },
+        {
+            method: 'GET',
+            pattern: base,
+            scope: 'machines:read',
+            handler: (c) => {
+                const q = c.query;
+                const status = q.get('status');
+                if (status !== null && status !== 'active' && status !== 'revoked')
+                    throw bad('status must be active or revoked.', 'status');
+                const limit = Math.min(Math.max(Math.trunc(Number(q.get('limit') ?? 50)) || 50, 1), 200);
+                let rows = table(c.engine).all().filter((d) => (!q.get('machine_id') || d.child_machine_id === q.get('machine_id')) && (!q.get('delegator_user_id') || d.delegator_user_id === q.get('delegator_user_id')) && (!q.get('root_id') || d.root_delegation_id === q.get('root_id')) && (!status || d.status === status));
+                const after = q.get('starting_after');
+                if (after)
+                    rows = rows.slice(rows.findIndex((d) => d.id === after) + 1);
+                return { body: { object: 'list', data: rows.slice(0, limit).map(exports.delegationView), has_more: rows.length > limit } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: `${base}/revoke_for_user`,
+            scope: 'machines:write',
+            handler: (c) => {
+                const b = obj(c.body);
+                known(b, ['user_id', 'reason', 'disable_agents']);
+                if (typeof b.user_id !== 'string' || !b.user_id)
+                    throw bad('user_id is required.', 'user_id');
+                boolField(b, 'disable_agents');
+                const e = c.engine;
+                const roots = table(e).filter((d) => d.delegator_user_id === b.user_id && d.status === 'active');
+                const revoked = revokeSubtree(e, roots.flatMap((r) => subtreeOf(e, r.id)).filter((d, i, a) => a.findIndex((x) => x.id === d.id) === i), reasonOf(b));
+                return { body: finishRevocation(e, revoked, null, { reason: reasonOf(b), disableAgents: b.disable_agents === true, trigger: 'operator' }) };
+            },
+        },
+        {
+            method: 'GET',
+            pattern: `${base}/:id`,
+            scope: 'machines:read',
+            handler: (c) => {
+                const d = find(c.engine, c.params.id);
+                const evs = st(c.engine).evaluations.filter((x) => x.delegation_id === d.id).slice(0, 10);
+                return { body: { ...(0, exports.delegationView)(d), evaluations: evs.map((x) => ({ decision: x.decision, reasons: x.reasons, evaluated_at: x.evaluated_at })) } };
+            },
+        },
+        {
+            method: 'GET',
+            pattern: '/v1/agent_delegations/:id/graph',
+            scope: 'machines:read',
+            handler: (c) => {
+                const e = c.engine;
+                const d = find(e, c.params.id);
+                const nodes = subtreeOf(e, d.id).sort((a, b) => a.depth - b.depth);
+                return { body: { object: 'agent_delegation_graph', root_id: d.root_delegation_id, ancestors: chainOf(e, d).filter((a) => a.id !== d.id).map(exports.delegationView), nodes: nodes.map(exports.delegationView), edges: nodes.filter((n) => n.parent_delegation_id).map((n) => ({ from: n.parent_delegation_id, to: n.id, parent_machine_id: n.parent_machine_id, child_machine_id: n.child_machine_id })) } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/agent_delegations/:id/revoke',
+            scope: 'machines:write',
+            handler: (c) => {
+                const e = c.engine;
+                const b = obj(c.body);
+                known(b, ['reason', 'disable_agents']);
+                boolField(b, 'disable_agents');
+                const d = find(e, c.params.id);
+                return { body: finishRevocation(e, revokeSubtree(e, subtreeOf(e, d.id), reasonOf(b)), d.id, { reason: reasonOf(b), disableAgents: b.disable_agents === true, trigger: 'operator' }) };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/agent_delegations/:id/evaluate',
+            scope: 'machines:read',
+            handler: (c) => {
+                const e = c.engine;
+                const b = obj(c.body);
+                known(b, ['enforce']);
+                boolField(b, 'enforce');
+                const d = find(e, c.params.id);
+                const ev = evaluate(e, d);
+                if (b.enforce === true && d.status === 'active')
+                    enforce(e, rootOf(e, d), ev);
+                return { headers: { 'cache-control': 'no-store' }, body: { object: 'agent_access_evaluation', delegation_id: d.id, decision: ev.decision, reasons: ev.reasons, posture: ev.posture, valid_for_seconds: ev.decision === 'allow' ? exports.EVALUATION_VALID_FOR_SECONDS : 0, evaluated_at: e.clock.now() } };
+            },
+        },
+        // ── emulator control: the instance policy, the delegator's live posture and the worker sweep ──
+        { method: 'GET', pattern: '/__emulator/agent_fabric', public: true, handler: (c) => ({ body: st(c.engine).cfg }) },
+        {
+            method: 'PUT',
+            pattern: '/__emulator/agent_fabric',
+            public: true,
+            handler: (c) => {
+                const b = obj(c.body);
+                const next = { ...defaultFabric(), ...st(c.engine).cfg, ...b };
+                const int = (k, min, max, nullable) => {
+                    const v = next[k];
+                    if (nullable && v === null)
+                        return;
+                    if (typeof v !== 'number' || !Number.isInteger(v) || v < min || v > max)
+                        throw bad(`${k} must be a whole number from ${min} to ${max}${nullable ? ' (or null)' : ''}.`, k);
+                };
+                if (typeof next.continuousEvaluation !== 'boolean' || typeof next.requireTrustedDevice !== 'boolean')
+                    throw bad('continuousEvaluation and requireTrustedDevice are true or false.', 'continuousEvaluation');
+                if (next.maxRiskLevel !== null && !(next.maxRiskLevel in RISK))
+                    throw bad('maxRiskLevel must be low, medium, high or null.', 'maxRiskLevel');
+                if (next.onFailure !== 'revoke' && next.onFailure !== 'deny')
+                    throw bad('onFailure must be revoke or deny.', 'onFailure');
+                int('maxMfaAgeSeconds', 60, 86_400, true);
+                int('maxDelegationDepth', 1, 8, false);
+                int('defaultDelegationTtlSeconds', 60, 2_592_000, false);
+                st(c.engine).cfg = next;
+                return { body: next };
+            },
+        },
+        {
+            method: 'PUT',
+            pattern: '/__emulator/agent_posture/:userId',
+            public: true,
+            handler: (c) => {
+                const b = obj(c.body);
+                const p = {};
+                if (b.mfa_at !== undefined)
+                    (b.mfa_at === null || Number.isFinite(b.mfa_at) ? (p.mfa_at = b.mfa_at) : (() => { throw bad('mfa_at is epoch milliseconds or null.', 'mfa_at'); })());
+                if (b.risk !== undefined)
+                    (b.risk === null || (typeof b.risk === 'string' && b.risk in RISK) ? (p.risk = b.risk) : (() => { throw bad('risk must be low, medium, high or null.', 'risk'); })());
+                if (b.device_compliant !== undefined)
+                    (typeof b.device_compliant === 'boolean' ? (p.device_compliant = b.device_compliant) : (() => { throw bad('device_compliant must be true or false.', 'device_compliant'); })());
+                st(c.engine).posture.set(c.params.userId, { ...(st(c.engine).posture.get(c.params.userId) ?? {}), ...p });
+                return { body: { user_id: c.params.userId, ...st(c.engine).posture.get(c.params.userId) } };
+            },
+        },
+        {
+            // What the worker does every minute: re-evaluate every live root delegation (only while continuous evaluation is on).
+            method: 'POST',
+            pattern: '/__emulator/agent_fabric/sweep',
+            public: true,
+            handler: (c) => {
+                const e = c.engine;
+                const out = { evaluated: 0, denied: 0 };
+                if (!st(e).cfg.continuousEvaluation)
+                    return { body: out };
+                for (const root of table(e).filter((d) => !d.parent_delegation_id && d.status === 'active')) {
+                    const ev = enforce(e, root, evaluate(e, root));
+                    out.evaluated++;
+                    if (ev.decision !== 'allow')
+                        out.denied++;
+                }
+                return { body: out };
+            },
+        },
+        { method: 'GET', pattern: '/__emulator/authz/audit', public: true, handler: (c) => ({ body: { object: 'list', data: [...st(c.engine).audit].reverse() } }) },
+    ];
+}
+//# sourceMappingURL=emu4-authz-trust.js.map

package/dist/handlers/emu4-authz-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emu4-authz-trust.js","sourceRoot":"","sources":["../../src/handlers/emu4-authz-trust.ts"],"names":[],"mappings":";;;AA4CA,gCAEC;AAuJD,8CAyBC;AAED,8CAOC;AAkFD,wDA+IC;AAtcD,sCAAoD;AAEpD,oCAAiC;AACjC,uCAAwC;AAExC;;;;;;GAMG;AACH,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAU,EAAE,EAAE,CAAC,IAAI,sBAAa,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACpF,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,sBAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AACjE,MAAM,KAAK,GAAG,2BAA2B,CAAC;AAC1C,MAAM,YAAY,GAAG,GAAG,CAAC;AACZ,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAC;AAYrD,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EAAE,2BAA2B,EAAE,MAAM,EAAE,CAAC,CAAC;AAUhO,MAAM,EAAE,GAAG,IAAA,qBAAW,EAAC,CAAC,CAAS,EAAS,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,aAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,aAAK,CAAC,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAEjP,0GAA0G;AAC1G,SAAgB,UAAU,CAAC,CAAS,EAAE,MAAc,EAAE,UAAkB,EAAE,QAAgB,EAAE,WAAgB,EAAE;IAC5G,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACxL,CAAC;AACM,MAAM,cAAc,GAAG,CAAC,CAAS,EAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAAnD,QAAA,cAAc,kBAAqC;AAEhE,cAAc;AAEd,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACxC,MAAM,cAAc,GAAG,CAAC,CAAM,EAAO,EAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,kBAAkB;IAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;IACpC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,IAAI,IAAI;IACpD,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;IACxC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;IAC9C,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;IAC9C,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;IAChC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;IAChC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;IAChC,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;IAC1B,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;IACtC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;IAC9C,UAAU,EAAE,CAAC,CAAC,UAAU;CACzB,CAAC,CAAC;AArBU,QAAA,cAAc,kBAqBxB;AACH,MAAM,MAAM,GAAG,CAAC,CAAM,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;AAChH,oFAAoF;AACpF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAM,EAAS,EAAE;IAC3C,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,GAAG,GAAoB,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjK,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AACF,4CAA4C;AAC5C,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAU,EAAS,EAAE;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1H,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAWF,SAAS,WAAW,CAAC,CAAS,EAAE,MAAc;IAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;IAC3E,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC;IACrI,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,KAAK,GAAkB,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;IAC9C,IAAI,IAAI,GAAgB,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC;YAAE,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;QAChI,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,KAAyB,CAAC;QAChD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,GAAG,KAAK,CAAC;IACnG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;AAClH,CAAC;AACD,MAAM,YAAY,GAAG,CAAC,CAAU,EAAE,GAAW,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;AAE1N,SAAS,SAAS,CAAC,GAAW,EAAE,CAAU,EAAE,GAAW;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9H,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClJ,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzH,IAAI,GAAG,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,eAAe;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrF,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC;AAMD,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAM;IACjC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1G,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjG,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/K,IAAI,CAAC,CAAC,CAAC,iBAAiB;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnF,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtB,gHAAgH;IAChH,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAClJ,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,GAAU,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QACpC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;QAChH,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,gBAAgB,CAAC,CAAS,EAAE,OAAc,EAAE,MAAqB,EAAE,IAAiE;IAC3I,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtF,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9O,UAAU,CAAC,CAAC,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9F,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAc,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAChJ,CAAC;AAED,kHAAkH;AAClH,SAAS,OAAO,CAAC,CAAS,EAAE,IAAS,EAAE,EAAc;IACnD,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC;QAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAChM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjF,IAAI,EAAE,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC7F,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3P,IAAI,SAAS;YAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1Q,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,CAAM,EAAO,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpH,2BAA2B;AAE3B;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,CAAS,EAAE,SAAiB,EAAE,GAAQ;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,CAAkB,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QAC/D,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,kDAAkD,EAAE,eAAe,CAAC,CAAC;IACpH,CAAC;;QAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,8DAA8D,CAAC,CAAC;IAChI,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,EAAE,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,2CAA2C,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxI,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,iBAAiB;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7E,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACxE,IAAI,GAAoB,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,UAAU;QAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;IACjE,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;IACjH,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU;QACV,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,iBAAiB,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,SAAS,EAAE;KAC9M,CAAC;AACJ,CAAC;AACD,gJAAgJ;AAChJ,SAAgB,iBAAiB,CAAC,CAAS,EAAE,MAAW;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACjC,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAA,sBAAc,EAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IAClG,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,IAAA,sBAAc,EAAC,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,eAAe;AAEf,MAAM,GAAG,GAAG,CAAC,CAAU,EAAO,EAAE,CAAC,CAAQ,CAAC;AAC1C,MAAM,QAAQ,GAAG,CAAC,CAAM,EAAU,EAAE;IAClC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;IACrI,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC,CAAC;AACF,4HAA4H;AAC5H,MAAM,KAAK,GAAG,CAAC,EAAO,EAAE,OAA0B,EAAQ,EAAE,CAAC,SAAS,CAAC;AACvE,MAAM,iBAAiB,GAAG,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,iBAAiB,CAAU,CAAC;AAElL,SAAS,gBAAgB,CAAC,CAAS,EAAE,IAAS;IAC5C,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,gBAAgB;QAAE,MAAM,GAAG,CAAC,+BAA+B,EAAE,kBAAkB,CAAC,CAAC;IACxI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,+CAA+C,EAAE,QAAQ,CAAC,CAAC;IACrO,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAkB,CAAC,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,MAAM,GAAG,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC;IACpL,MAAM,QAAQ,GAAmB,IAAI,CAAC,QAAsC,IAAI,IAAI,CAAC;IACrF,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,IAAA,iBAAQ,EAAC,SAAS,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACrG,IAAI,MAAuB,CAAC;IAC5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,wFAAwF,EAAE,mBAAmB,CAAC,CAAC;QACnK,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,QAAQ,CAAC,8CAA8C,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,kBAAkB;YAAE,MAAM,QAAQ,CAAC,8BAA8B,GAAG,CAAC,kBAAkB,QAAQ,CAAC,CAAC;QACzH,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,KAAK,MAAO,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM,QAAQ,CAAC,iCAAiC,YAAY,mBAAmB,CAAC,CAAC;QACpM,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,EAAE;YAAE,MAAM,GAAG,CAAC,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,GAAG,CAAC,4EAA4E,EAAE,kBAAkB,CAAC,CAAC;QACjL,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,GAAG,CAAC,2DAA2D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtH,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC,oDAAoD,EAAE,UAAU,CAAC,CAAC;QAC7I,SAAS,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,MAAM,GAAG,CAAC,qFAAqF,EAAE,mBAAmB,CAAC,CAAC;QACjM,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACrH,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS;QAAE,MAAM,GAAG,CAAC,kDAAkD,EAAE,YAAY,CAAC,CAAC;IACxJ,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS;YAAE,MAAM,GAAG,CAAC,0EAA0E,EAAE,oBAAoB,CAAC,CAAC;QAC1L,SAAS,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IAC7B,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAClI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,GAAG,GAAG,GAAG,aAAa;YAAE,MAAM,GAAG,CAAC,kDAAkD,EAAE,YAAY,CAAC,CAAC;QAC3I,SAAS,GAAG,EAAE,CAAC;IACjB,CAAC;;QAAM,SAAS,GAAG,GAAG,GAAG,GAAG,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAChE,IAAI,MAAM,EAAE,UAAU,IAAI,SAAS,GAAG,MAAM,CAAC,UAAU;QAAE,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;IACvF,IAAI,OAAO,GAAe,IAAI,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/B,gGAAgG;QAChG,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;gBAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,6DAA6D,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,IAAI,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,IAAI,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACtiB,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;IACpC,UAAU,CAAC,CAAC,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5R,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACxV,OAAO,IAAA,sBAAc,EAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAsB,EAAO,EAAE;IACtD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,SAAgB,sBAAsB;IACpC,MAAM,IAAI,GAAG,uBAAuB,CAAC;IACrC,MAAM,SAAS,GAAG,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC;IACF,OAAO;QACL,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE;QACnL;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBAClB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,GAAG,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;gBAC7H,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzF,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;gBACpT,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBACtC,IAAI,KAAK;oBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,EAAE,CAAC;YACrH,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,IAAI,kBAAkB;YAClC,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAClD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,MAAM,GAAG,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;gBAC9F,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;gBACjG,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrJ,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YAC9I,CAAC;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,GAAG,IAAI,MAAM;YACtB,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1F,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAA,sBAAc,EAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACvJ,CAAC;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,iCAAiC;YAC1C,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,sBAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,sBAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/X,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kCAAkC;YAC3C,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBACvC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACxL,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oCAAoC;YAC7C,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;gBACtB,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACxB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9E,OAAO,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,oCAA4B,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACrS,CAAC;SACF;QACD,iGAAiG;QACjG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE;QAClH;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,0BAA0B;YACnC,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM,IAAI,GAAW,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvE,MAAM,GAAG,GAAG,CAAC,CAAe,EAAE,GAAW,EAAE,GAAW,EAAE,QAAiB,EAAE,EAAE;oBAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAY,CAAC;oBAC7B,IAAI,QAAQ,IAAI,CAAC,KAAK,IAAI;wBAAE,OAAO;oBACnC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG;wBAAE,MAAM,GAAG,CAAC,GAAG,CAAC,gCAAgC,GAAG,OAAO,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7K,CAAC,CAAC;gBACF,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,SAAS;oBAAE,MAAM,GAAG,CAAC,kEAAkE,EAAE,sBAAsB,CAAC,CAAC;gBAC5M,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;oBAAE,MAAM,GAAG,CAAC,iDAAiD,EAAE,cAAc,CAAC,CAAC;gBAC7I,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;oBAAE,MAAM,GAAG,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC;gBAC1H,GAAG,CAAC,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC1C,GAAG,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvC,GAAG,CAAC,6BAA6B,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACzD,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;gBACxB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACxB,CAAC;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,mCAAmC;YAC5C,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM,CAAC,GAA+E,EAAE,CAAC;gBACzF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;oBAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpM,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;oBAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,yCAAyC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/M,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;oBAAE,CAAC,OAAO,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,yCAAyC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtN,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAO,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5G,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAO,CAAC,EAAE,EAAE,CAAC;YAC/F,CAAC;SACF;QACD;YACE,sHAAsH;YACtH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gCAAgC;YACzC,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB;oBAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;oBAC5F,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC/C,GAAG,CAAC,SAAS,EAAE,CAAC;oBAChB,IAAI,EAAE,CAAC,QAAQ,KAAK,OAAO;wBAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5C,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,CAAC;SACF;QACD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE;KAC7J,CAAC;AACJ,CAAC"}

package/dist/handlers/emu4-authz.d.ts

@@ -0,0 +1,2 @@
+import type { RouteDef } from '../engine';
+export declare function emu4AuthzHandlers(): RouteDef[];