@clipboard-health/oxlint-plugin 1.2.0 → 1.3.0

package/README.md

@@ -12,6 +12,7 @@ ESLint.
 - `enforce-ts-rest-in-controllers`
 - `no-empty-boolean-call`
 - `no-cross-contract-imports`
+- `no-parallel-mongo-session-ops`
 - `require-contract-fixture-construction`
 - `require-contract-response-parse`
 - `require-http-module-factory`
@@ -27,3 +28,17 @@ apply the shared controller, module, contract, and cross-contract-import scopes.
 `no-empty-boolean-call`, `require-contract-response-parse`, and
 `require-run-validators-with-upsert` are opt-in because their safe adoption scope is
 repository-specific.
+
+`no-parallel-mongo-session-ops` is also opt-in. Out of the box it covers `Promise.all`,
+`Promise.allSettled`, `Promise.race`, and `Promise.any`. Repositories with their own
+bounded-concurrency helpers must name them, or those call sites go unchecked:
+
+```ts
+"@clipboard-health/no-parallel-mongo-session-ops": [
+  "warn",
+  { additionalPrimitives: ["batchPromiseAllWithLimit", "batchPromiseAllSettledWithLimit"] },
+],
+```
+
+Exclude tests: app-level session objects such as `session.sessionUserId` share the name but are
+unrelated to MongoDB sessions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clipboard-health/oxlint-plugin",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Clipboard's Oxlint plugin.",
   "keywords": [
     "oxlint",
@@ -20,11 +20,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@oxlint/plugins": "1.78.0",
+    "@oxlint/plugins": "1.79.0",
     "tslib": "2.8.1"
   },
   "devDependencies": {
-    "oxlint": "1.78.0"
+    "oxlint": "1.79.0"
   },
   "types": "./src/index.d.ts"
 }

package/src/index.d.ts

@@ -2,6 +2,7 @@ export declare const rules: {
     "enforce-ts-rest-in-controllers": import("@oxlint/plugins").Rule;
     "no-empty-boolean-call": import("@oxlint/plugins").Rule;
     "no-cross-contract-imports": import("@oxlint/plugins").Rule;
+    "no-parallel-mongo-session-ops": import("@oxlint/plugins").Rule;
     "require-contract-fixture-construction": import("@oxlint/plugins").Rule;
     "require-contract-response-parse": import("@oxlint/plugins").Rule;
     "require-http-module-factory": import("@oxlint/plugins").Rule;

package/src/index.js

@@ -5,6 +5,7 @@ const tslib_1 = require("tslib");
 const enforce_ts_rest_in_controllers_1 = tslib_1.__importDefault(require("./lib/rules/enforce-ts-rest-in-controllers"));
 const no_cross_contract_imports_1 = tslib_1.__importDefault(require("./lib/rules/no-cross-contract-imports"));
 const no_empty_boolean_call_1 = tslib_1.__importDefault(require("./lib/rules/no-empty-boolean-call"));
+const no_parallel_mongo_session_ops_1 = tslib_1.__importDefault(require("./lib/rules/no-parallel-mongo-session-ops"));
 const require_contract_fixture_construction_1 = tslib_1.__importDefault(require("./lib/rules/require-contract-fixture-construction"));
 const require_contract_response_parse_1 = tslib_1.__importDefault(require("./lib/rules/require-contract-response-parse"));
 const require_http_module_factory_1 = tslib_1.__importDefault(require("./lib/rules/require-http-module-factory"));
@@ -14,6 +15,7 @@ exports.rules = {
     "enforce-ts-rest-in-controllers": enforce_ts_rest_in_controllers_1.default,
     "no-empty-boolean-call": no_empty_boolean_call_1.default,
     "no-cross-contract-imports": no_cross_contract_imports_1.default,
+    "no-parallel-mongo-session-ops": no_parallel_mongo_session_ops_1.default,
     "require-contract-fixture-construction": require_contract_fixture_construction_1.default,
     "require-contract-response-parse": require_contract_response_parse_1.default,
     "require-http-module-factory": require_http_module_factory_1.default,

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/oxlint-plugin/src/index.ts"],"names":[],"mappings":";;;;AAAA,wHAAoF;AACpF,8GAA2E;AAC3E,sGAAmE;AACnE,sIAAmG;AACnG,0HAAuF;AACvF,kHAA+E;AAC/E,gIAA4F;AAC5F,0HAAsF;AAEzE,QAAA,KAAK,GAAG;IACnB,gCAAgC,EAAE,wCAA0B;IAC5D,uBAAuB,EAAE,+BAAkB;IAC3C,2BAA2B,EAAE,mCAAsB;IACnD,uCAAuC,EAAE,+CAAkC;IAC3E,iCAAiC,EAAE,yCAA4B;IAC/D,6BAA6B,EAAE,qCAAwB;IACvD,oCAAoC,EAAE,4CAA8B;IACpE,iCAAiC,EAAE,yCAA2B;CAC/D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/oxlint-plugin/src/index.ts"],"names":[],"mappings":";;;;AAAA,wHAAoF;AACpF,8GAA2E;AAC3E,sGAAmE;AACnE,sHAAkF;AAClF,sIAAmG;AACnG,0HAAuF;AACvF,kHAA+E;AAC/E,gIAA4F;AAC5F,0HAAsF;AAEzE,QAAA,KAAK,GAAG;IACnB,gCAAgC,EAAE,wCAA0B;IAC5D,uBAAuB,EAAE,+BAAkB;IAC3C,2BAA2B,EAAE,mCAAsB;IACnD,+BAA+B,EAAE,uCAAyB;IAC1D,uCAAuC,EAAE,+CAAkC;IAC3E,iCAAiC,EAAE,yCAA4B;IAC/D,6BAA6B,EAAE,qCAAwB;IACvD,oCAAoC,EAAE,4CAA8B;IACpE,iCAAiC,EAAE,yCAA2B;CAC/D,CAAC"}

package/src/lib/rules/no-parallel-mongo-session-ops/index.d.ts

@@ -0,0 +1,2 @@
+declare const rule: import("@oxlint/plugins").Rule;
+export default rule;

package/src/lib/rules/no-parallel-mongo-session-ops/index.js

@@ -0,0 +1,262 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @fileoverview Rule to disallow parallel operations sharing one MongoDB transaction session.
+ *
+ * The MongoDB driver documents parallel operations inside a transaction as undefined behaviour.
+ * From `startTransaction` and `withTransaction` in the driver's `lib/sessions.js`:
+ *
+ * > Running operations in parallel is not supported during a transaction. The use of
+ * > `Promise.all`, `Promise.allSettled`, `Promise.race`, etc to parallelize operations inside a
+ * > transaction is undefined behaviour.
+ *
+ * In practice one branch aborts the transaction and its siblings, still in flight, fail with
+ * `Transaction with { txnNumber: N } has been aborted.`
+ *
+ * The rule reports a concurrency primitive that reaches a session declared *outside* it, meaning
+ * every branch shares one session. A session created *inside* the callback gives each branch its
+ * own and is not reported, which is the safe way to fan out.
+ *
+ * Oxlint JS plugins receive no type information, so a session is recognised by binding name or by
+ * `.session` member access rather than by the `ClientSession` type. Bindings are resolved through
+ * scope analysis, so same-named sessions in different scopes do not collide.
+ *
+ * Repositories with their own bounded-concurrency helpers should list them in
+ * `additionalPrimitives`; the defaults cover only the `Promise` combinators.
+ *
+ * The invariant is one sentence: a session is per-branch when a `map` callback creates it, and
+ * shared otherwise. Everything else follows from that — a callback parameter receives whatever was
+ * mapped over, an alias is the same session, a `flatMap` callback runs once per group rather than
+ * per task, and a session created in a scope that encloses the fan-out is shared.
+ *
+ * Known limitations. The rule is a net for the shapes people write, not a soundness proof, and
+ * cannot become one without type and dataflow information:
+ *
+ * - a session forwarded as an opaque options object through a call chain, or held on `this`, is
+ *   invisible
+ * - a session reaching the fan-out through a helper the rule does not model is invisible
+ * - recognition is by binding name, so a session under an unlisted name is missed
+ *
+ * Prefer accepting a miss over reporting safe code: a false positive gets the rule switched off,
+ * which costs more than any single missed call site.
+ */
+const plugins_1 = require("@oxlint/plugins");
+const findVariable_1 = require("../../internal/findVariable");
+const SESSION_NAMES = new Set([
+    "session",
+    "mongoSession",
+    "transactionSession",
+    "clientSession",
+    "dbSession",
+]);
+const PROMISE_COMBINATORS = new Set(["all", "allSettled", "race", "any"]);
+const TASK_LIST_METHODS = new Set(["map", "flatMap"]);
+/**
+ * Only a `map` callback runs once per task. A `flatMap` callback runs once per group and can
+ * return many operations, so a session created there is shared by all of them.
+ */
+const PER_BRANCH_METHODS = new Set(["map"]);
+function isWithin(inner, outer) {
+    return Number(inner[0]) >= Number(outer[0]) && Number(inner[1]) <= Number(outer[1]);
+}
+/**
+ * A call plausibly produces a fresh session; a bare identifier or member expression is an alias of
+ * something that already exists.
+ */
+function createsSession(init) {
+    const expression = init?.type === "AwaitExpression" ? init.argument : init;
+    return expression?.type === "CallExpression" || expression?.type === "NewExpression";
+}
+/** A task list is the only initialiser worth following; anything else is unrelated data. */
+function isTaskList(init) {
+    if (!init) {
+        return false;
+    }
+    if (init.type === "ArrayExpression") {
+        return true;
+    }
+    return (init.type === "CallExpression" &&
+        init.callee.type === "MemberExpression" &&
+        !init.callee.computed &&
+        init.callee.property.type === "Identifier" &&
+        TASK_LIST_METHODS.has(init.callee.property.name));
+}
+const rule = (0, plugins_1.defineRule)({
+    meta: {
+        type: "problem",
+        docs: {
+            description: "Disallow parallel operations sharing one MongoDB transaction session",
+            url: "https://github.com/ClipboardHealth/core-utils/tree/main/packages/oxlint-plugin/src/lib/rules/no-parallel-mongo-session-ops",
+        },
+        schema: [
+            {
+                type: "object",
+                properties: {
+                    additionalPrimitives: {
+                        type: "array",
+                        items: { type: "string" },
+                        description: "Names of project-local helpers that run their tasks concurrently, for example a bounded-concurrency wrapper around Promise.all.",
+                    },
+                },
+                additionalProperties: false,
+            },
+        ],
+        messages: {
+            parallelSessionOps: "`{{ primitive }}` runs its operations in parallel on the `{{ name }}` transaction session, which the MongoDB driver documents as undefined behaviour. Await them sequentially, or give each branch its own session.",
+        },
+    },
+    create(context) {
+        const [options] = context.options;
+        const additionalPrimitives = new Set(options?.additionalPrimitives ?? []);
+        const parallelCalls = [];
+        const sessionReferences = [];
+        const identifierReferences = [];
+        const nonReferenceRanges = new Set();
+        /** Keyed by resolved binding, so same-named lists in sibling scopes stay distinct. */
+        const taskLists = new Map();
+        /**
+         * Bodies of `map`/`flatMap` callbacks: the only regions that run once per branch. A session
+         * created anywhere else inside the primitive, such as in an enclosing IIFE, is created once
+         * and shared.
+         */
+        const taskCallbackRanges = [];
+        function resolve(identifier) {
+            return (0, findVariable_1.findVariable)(context.sourceCode, identifier);
+        }
+        function primitiveName(node) {
+            const { callee } = node;
+            if (callee.type === "Identifier" && additionalPrimitives.has(callee.name)) {
+                return callee.name;
+            }
+            if (callee.type === "MemberExpression" &&
+                !callee.computed &&
+                callee.object.type === "Identifier" &&
+                callee.object.name === "Promise" &&
+                callee.property.type === "Identifier" &&
+                PROMISE_COMBINATORS.has(callee.property.name)) {
+                return `Promise.${callee.property.name}`;
+            }
+            return undefined;
+        }
+        /**
+         * A configured helper taking a concurrency of 1 runs one task at a time, so it is already
+         * sequential and safe.
+         */
+        function isSequential(node) {
+            const { callee } = node;
+            if (!(callee.type === "Identifier" && additionalPrimitives.has(callee.name))) {
+                return false;
+            }
+            return node.arguments.some((argument) => "value" in argument && argument.value === 1);
+        }
+        /**
+         * A session is per-branch only when a task callback *creates* one. Neither declaration scope
+         * nor creation alone is proof: a callback parameter receives whatever the caller mapped over,
+         * an alias of an outer binding is the very same session, and a session created in a scope
+         * that encloses the fan-out is shared by every branch. All three stay reportable.
+         */
+        function createsOwnSession(variable, range) {
+            return (variable?.defs.some((definition) => {
+                if (definition.type !== "Variable" || !isWithin(definition.name.range, range)) {
+                    return false;
+                }
+                return (definition.node.type === "VariableDeclarator" && createsSession(definition.node.init));
+            }) === true);
+        }
+        return {
+            CallExpression(node) {
+                const primitive = primitiveName(node);
+                if (primitive !== undefined && !isSequential(node)) {
+                    parallelCalls.push({ node, primitive });
+                }
+                const { callee } = node;
+                if (callee.type === "MemberExpression" &&
+                    !callee.computed &&
+                    callee.property.type === "Identifier" &&
+                    PER_BRANCH_METHODS.has(callee.property.name)) {
+                    for (const argument of node.arguments) {
+                        if (argument.type === "ArrowFunctionExpression" ||
+                            argument.type === "FunctionExpression") {
+                            taskCallbackRanges.push(argument.range);
+                        }
+                    }
+                }
+            },
+            // A non-shorthand key, as in `{ session: workplaceId }`, is a label rather than a reference.
+            Property(node) {
+                if (!("key" in node) || !("shorthand" in node)) {
+                    return;
+                }
+                if (!node.shorthand && !node.computed && node.key.type === "Identifier") {
+                    nonReferenceRanges.add(node.key.range.join(":"));
+                }
+            },
+            // `options.session` and `options?.session` carry the session in on an object.
+            MemberExpression(node) {
+                if (node.type !== "MemberExpression" || node.computed) {
+                    return;
+                }
+                if (node.property.type !== "Identifier") {
+                    return;
+                }
+                if (node.property.name === "session") {
+                    const object = node.object;
+                    sessionReferences.push({
+                        range: node.range,
+                        variable: object.type === "Identifier" ? resolve(object) : undefined,
+                        label: object.type === "Identifier" ? object.name : "session",
+                    });
+                }
+                nonReferenceRanges.add(node.property.range.join(":"));
+            },
+            Identifier(node) {
+                const variable = resolve(node);
+                identifierReferences.push({ range: node.range, variable });
+                if (SESSION_NAMES.has(node.name)) {
+                    sessionReferences.push({ range: node.range, variable, label: node.name });
+                }
+            },
+            VariableDeclarator(node) {
+                const { id, init } = node;
+                if (id.type !== "Identifier" || !isTaskList(init)) {
+                    return;
+                }
+                const variable = resolve(id);
+                if (variable && init) {
+                    taskLists.set(variable, init);
+                }
+            },
+            "Program:exit"() {
+                for (const { node, primitive } of parallelCalls) {
+                    const argumentRanges = node.arguments.map((argument) => argument.range);
+                    const searchRanges = [node.range];
+                    // `const tasks = items.map(...)` before `Promise.all(tasks)` keeps the session out of
+                    // the call site, so search where the list was built too.
+                    for (const reference of identifierReferences) {
+                        if (!argumentRanges.some((range) => isWithin(reference.range, range))) {
+                            continue;
+                        }
+                        const taskList = reference.variable && taskLists.get(reference.variable);
+                        if (taskList && !isWithin(taskList.range, node.range)) {
+                            searchRanges.push(taskList.range);
+                        }
+                    }
+                    // Only callbacks reached by this call can create a per-branch session.
+                    const perBranchRanges = taskCallbackRanges.filter((callback) => searchRanges.some((range) => isWithin(callback, range)));
+                    const shared = sessionReferences.find((reference) => searchRanges.some((range) => isWithin(reference.range, range)) &&
+                        !nonReferenceRanges.has(reference.range.join(":")) &&
+                        !perBranchRanges.some((range) => createsOwnSession(reference.variable, range)));
+                    if (shared) {
+                        context.report({
+                            node,
+                            messageId: "parallelSessionOps",
+                            data: { primitive, name: shared.label },
+                        });
+                    }
+                }
+            },
+        };
+    },
+});
+exports.default = rule;
+//# sourceMappingURL=index.js.map

package/src/lib/rules/no-parallel-mongo-session-ops/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/oxlint-plugin/src/lib/rules/no-parallel-mongo-session-ops/index.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,6CAAyE;AAEzE,8DAAkF;AAElF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,SAAS;IACT,cAAc;IACd,oBAAoB;IACpB,eAAe;IACf,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE1E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtD;;;GAGG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAgB5C,SAAS,QAAQ,CAAC,KAAwB,EAAE,KAAwB;IAClE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAoC;IAC1D,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3E,OAAO,UAAU,EAAE,IAAI,KAAK,gBAAgB,IAAI,UAAU,EAAE,IAAI,KAAK,eAAe,CAAC;AACvF,CAAC;AAED,4FAA4F;AAC5F,SAAS,UAAU,CAAC,IAAoC;IACtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;QACvC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;QACrB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;QAC1C,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,IAAA,oBAAU,EAAC;IACtB,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EAAE,sEAAsE;YACnF,GAAG,EAAE,4HAA4H;SAClI;QACD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,oBAAoB,EAAE;wBACpB,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,WAAW,EACT,iIAAiI;qBACpI;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD,QAAQ,EAAE;YACR,kBAAkB,EAChB,qNAAqN;SACxN;KACF;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QAClC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CACjC,OAA2D,EAAE,oBAAoB,IAAI,EAAE,CACzF,CAAC;QAEF,MAAM,aAAa,GAA8D,EAAE,CAAC;QACpF,MAAM,iBAAiB,GAAuB,EAAE,CAAC;QACjD,MAAM,oBAAoB,GAA0B,EAAE,CAAC;QACvD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,sFAAsF;QACtF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QACnD;;;;WAIG;QACH,MAAM,kBAAkB,GAA6B,EAAE,CAAC;QAExD,SAAS,OAAO,CAAC,UAAsB;YACrC,OAAO,IAAA,2BAAmB,EAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC7D,CAAC;QAED,SAAS,aAAa,CAAC,IAA2B;YAChD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;YAExB,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1E,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,IACE,MAAM,CAAC,IAAI,KAAK,kBAAkB;gBAClC,CAAC,MAAM,CAAC,QAAQ;gBAChB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;gBACnC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;gBAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;gBACrC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC7C,CAAC;gBACD,OAAO,WAAW,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;QAED;;;WAGG;QACH,SAAS,YAAY,CAAC,IAA2B;YAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC7E,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;QACxF,CAAC;QAED;;;;;WAKG;QACH,SAAS,iBAAiB,CAAC,QAA8B,EAAE,KAAwB;YACjF,OAAO,CACL,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;gBACjC,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC9E,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACtF,CAAC;YACJ,CAAC,CAAC,KAAK,IAAI,CACZ,CAAC;QACJ,CAAC;QAED,OAAO;YACL,cAAc,CAAC,IAAI;gBACjB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;gBACxB,IACE,MAAM,CAAC,IAAI,KAAK,kBAAkB;oBAClC,CAAC,MAAM,CAAC,QAAQ;oBAChB,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;oBACrC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC5C,CAAC;oBACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACtC,IACE,QAAQ,CAAC,IAAI,KAAK,yBAAyB;4BAC3C,QAAQ,CAAC,IAAI,KAAK,oBAAoB,EACtC,CAAC;4BACD,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;wBAC1C,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,6FAA6F;YAC7F,QAAQ,CAAC,IAAI;gBACX,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC;oBAC/C,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACxE,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,8EAA8E;YAC9E,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtD,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACxC,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;oBAC3B,iBAAiB,CAAC,IAAI,CAAC;wBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;wBACpE,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC9D,CAAC,CAAC;gBACL,CAAC;gBAED,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC;YAED,UAAU,CAAC,IAAI;gBACb,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/B,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAE3D,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YAED,kBAAkB,CAAC,IAAI;gBACrB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;gBAC1B,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC7B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACrB,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,cAAc;gBACZ,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,aAAa,EAAE,CAAC;oBAChD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM,YAAY,GAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAE5D,sFAAsF;oBACtF,yDAAyD;oBACzD,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;wBAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;4BACtE,SAAS;wBACX,CAAC;wBAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBACzE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;4BACtD,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;wBACpC,CAAC;oBACH,CAAC;oBAED,uEAAuE;oBACvE,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7D,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CACxD,CAAC;oBAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CACnC,CAAC,SAAS,EAAE,EAAE,CACZ,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;wBAC9D,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAClD,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CACjF,CAAC;oBAEF,IAAI,MAAM,EAAE,CAAC;wBACX,OAAO,CAAC,MAAM,CAAC;4BACb,IAAI;4BACJ,SAAS,EAAE,oBAAoB;4BAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE;yBACxC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;kBAEY,IAAI"}