@crowi/api 2.0.0-alpha.0

package/dist/hono/app.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.honoOnError = exports.defaultHook = exports.createJwtAdminRequired = exports.createJwtAuth = exports.createCors = exports.createHonoApp = void 0;
+const zod_openapi_1 = require("@hono/zod-openapi");
+const admin_1 = require("./middleware/admin");
+Object.defineProperty(exports, "createJwtAdminRequired", { enumerable: true, get: function () { return admin_1.createJwtAdminRequired; } });
+const auth_1 = require("./middleware/auth");
+Object.defineProperty(exports, "createJwtAuth", { enumerable: true, get: function () { return auth_1.createJwtAuth; } });
+const cors_1 = require("./middleware/cors");
+Object.defineProperty(exports, "createCors", { enumerable: true, get: function () { return cors_1.createCors; } });
+const default_hook_1 = require("./middleware/default-hook");
+Object.defineProperty(exports, "defaultHook", { enumerable: true, get: function () { return default_hook_1.defaultHook; } });
+const error_handler_1 = require("./middleware/error-handler");
+Object.defineProperty(exports, "honoOnError", { enumerable: true, get: function () { return error_handler_1.honoOnError; } });
+const createHonoApp = () => {
+    const app = new zod_openapi_1.OpenAPIHono({ defaultHook: default_hook_1.defaultHook });
+    app.onError(error_handler_1.honoOnError);
+    return app;
+};
+exports.createHonoApp = createHonoApp;
+//# sourceMappingURL=app.js.map

package/dist/hono/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/hono/app.ts"],"names":[],"mappings":";;;AAAA,mDAAgD;AAEhD,8CAA4D;AAwBxB,uGAxB3B,8BAAsB,OAwB2B;AAvB1D,4CAA0E;AAuBrD,8FAvBY,oBAAa,OAuBZ;AAtBlC,4CAA+C;AAsBtC,2FAtBA,iBAAU,OAsBA;AArBnB,4DAAwD;AAqBI,4FArBnD,0BAAW,OAqBmD;AApBvE,8DAAyD;AAoBgB,4FApBhE,2BAAW,OAoBgE;AAN7E,MAAM,aAAa,GAAG,GAAmC,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,yBAAW,CAAoB,EAAE,WAAW,EAAX,0BAAW,EAAE,CAAC,CAAC;IAChE,GAAG,CAAC,OAAO,CAAC,2BAAW,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAJW,QAAA,aAAa,iBAIxB"}

package/dist/hono/handlers/_helpers/errors.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Literal-typed error bodies reused across Hono handlers.
+ *
+ * Each constant matches the corresponding schema in
+ * `@crowi/api-contract` (`InternalServerErrorSchema`,
+ * `AuthenticationRequiredErrorSchema`, `InvalidPageIdErrorSchema`).
+ * Centralising them keeps the literal narrowing in one place — bare
+ * object literals lose the `as const` narrowing and trip the schemas'
+ * literal checks at the `c.json` typed-response boundary.
+ *
+ * Resource-specific bodies whose message is fixed (`USER_NOT_FOUND_BODY`,
+ * `INVALID_CREDENTIALS_BODY` etc.) stay in their respective handler
+ * files — they have no reuse benefit and keep the resource handlers
+ * self-contained.
+ */
+export declare const INTERNAL_ERROR_BODY: {
+    error: {
+        code: "INTERNAL_ERROR";
+        message: "Internal server error";
+    };
+};
+export declare const AUTH_REQUIRED_BODY: {
+    error: {
+        code: "AUTHENTICATION_REQUIRED";
+        message: "Authentication is required";
+    };
+};
+/**
+ * `InvalidPageIdErrorSchema` envelope. The schema's `message` is a free
+ * `z.string()` (not a literal) so callers can override; the default
+ * matches the legacy ts-rest era message verbatim.
+ */
+export declare const INVALID_PAGE_ID_BODY: {
+    error: {
+        code: "INVALID_PAGE_ID";
+        message: "Invalid page_id";
+    };
+};
+/**
+ * `PageNotFoundErrorSchema` envelope. Used as the existence-leak guard
+ * 404 — handlers collapse grant-denied (`PAGE_NOT_GRANTED`) into this
+ * response so the caller cannot tell whether a page exists.
+ */
+export declare const PAGE_NOT_FOUND_BODY: {
+    error: {
+        code: "PAGE_NOT_FOUND";
+        message: "Page not found";
+    };
+};
+/**
+ * Factory for the generic `INVALID_REQUEST` envelope. Used when the
+ * request fails a handler-level invariant that the Zod schema cannot
+ * express (e.g. a query-parameter combination that is individually
+ * valid but conflicts as a whole).
+ */
+export declare const invalidRequestBody: (message: string) => {
+    error: {
+        code: "INVALID_REQUEST";
+        message: string;
+    };
+};

package/dist/hono/handlers/_helpers/errors.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * Literal-typed error bodies reused across Hono handlers.
+ *
+ * Each constant matches the corresponding schema in
+ * `@crowi/api-contract` (`InternalServerErrorSchema`,
+ * `AuthenticationRequiredErrorSchema`, `InvalidPageIdErrorSchema`).
+ * Centralising them keeps the literal narrowing in one place — bare
+ * object literals lose the `as const` narrowing and trip the schemas'
+ * literal checks at the `c.json` typed-response boundary.
+ *
+ * Resource-specific bodies whose message is fixed (`USER_NOT_FOUND_BODY`,
+ * `INVALID_CREDENTIALS_BODY` etc.) stay in their respective handler
+ * files — they have no reuse benefit and keep the resource handlers
+ * self-contained.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.invalidRequestBody = exports.PAGE_NOT_FOUND_BODY = exports.INVALID_PAGE_ID_BODY = exports.AUTH_REQUIRED_BODY = exports.INTERNAL_ERROR_BODY = void 0;
+exports.INTERNAL_ERROR_BODY = {
+    error: { code: 'INTERNAL_ERROR', message: 'Internal server error' },
+};
+exports.AUTH_REQUIRED_BODY = {
+    error: { code: 'AUTHENTICATION_REQUIRED', message: 'Authentication is required' },
+};
+/**
+ * `InvalidPageIdErrorSchema` envelope. The schema's `message` is a free
+ * `z.string()` (not a literal) so callers can override; the default
+ * matches the legacy ts-rest era message verbatim.
+ */
+exports.INVALID_PAGE_ID_BODY = {
+    error: { code: 'INVALID_PAGE_ID', message: 'Invalid page_id' },
+};
+/**
+ * `PageNotFoundErrorSchema` envelope. Used as the existence-leak guard
+ * 404 — handlers collapse grant-denied (`PAGE_NOT_GRANTED`) into this
+ * response so the caller cannot tell whether a page exists.
+ */
+exports.PAGE_NOT_FOUND_BODY = {
+    error: { code: 'PAGE_NOT_FOUND', message: 'Page not found' },
+};
+/**
+ * Factory for the generic `INVALID_REQUEST` envelope. Used when the
+ * request fails a handler-level invariant that the Zod schema cannot
+ * express (e.g. a query-parameter combination that is individually
+ * valid but conflicts as a whole).
+ */
+const invalidRequestBody = (message) => ({
+    error: { code: 'INVALID_REQUEST', message },
+});
+exports.invalidRequestBody = invalidRequestBody;
+//# sourceMappingURL=errors.js.map

package/dist/hono/handlers/_helpers/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../src/hono/handlers/_helpers/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEU,QAAA,mBAAmB,GAAG;IACjC,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,uBAAgC,EAAE;CACtF,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAkC,EAAE,OAAO,EAAE,4BAAqC,EAAE;CACpG,CAAC;AAEF;;;;GAIG;AACU,QAAA,oBAAoB,GAAG;IAClC,KAAK,EAAE,EAAE,IAAI,EAAE,iBAA0B,EAAE,OAAO,EAAE,iBAA0B,EAAE;CACjF,CAAC;AAEF;;;;GAIG;AACU,QAAA,mBAAmB,GAAG;IACjC,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,gBAAyB,EAAE;CAC/E,CAAC;AAEF;;;;;GAKG;AACI,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC;IACtD,KAAK,EAAE,EAAE,IAAI,EAAE,iBAA0B,EAAE,OAAO,EAAE;CACrD,CAAC,CAAC;AAFU,QAAA,kBAAkB,sBAE5B"}

package/dist/hono/handlers/_helpers/user-shape.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Shared user-shape helpers used by Hono handlers that translate a
+ * Mongoose `UserDocument` to the wire. Two concerns:
+ *
+ *  - `toUserImage(image)` collapses Mongoose's `null | string |
+ *    undefined` representation to `string | undefined` (the OpenAPI
+ *    schemas declare `z.string().optional()` and Hono's typed-response
+ *    check rejects `null`). Reused by `tokenAuth.ts` / `me.ts` /
+ *    `user.ts` wherever a user image surfaces.
+ *  - `toAuthUser(user)` produces the `{ id, username, email, name,
+ *    image, admin }` envelope shared by `TokenAuthResponseSchema` and
+ *    `TokenMeResponseSchema`. `me` and `user` resources expose
+ *    *different* response shapes (profile envelope with `lang` /
+ *    `googleId` etc. for me, `UserPublic` projection for user) so they
+ *    do not share this helper, only `toUserImage`.
+ */
+import type { UserDocument } from '../../../models/user';
+/**
+ * Convert Mongoose's `null | string` `user.image` to the contract-friendly
+ * `string | undefined`. The Hono `c.json` typed-response check rejects
+ * `null` against `z.string().optional()`, so we explicitly coerce.
+ */
+export declare const toUserImage: (image: string | null | undefined) => string | undefined;
+/**
+ * Subset of `UserDocument` required to build an `AuthUser` envelope.
+ * Declared loosely so populated subdocs (e.g. `revision.author`) work as
+ * well as the full Mongoose document.
+ */
+export type AuthUserLike = Pick<UserDocument, 'username' | 'email' | 'name'> & {
+    _id: {
+        toString(): string;
+    };
+    image?: string | null;
+    admin?: boolean;
+};
+/**
+ * `TokenAuthResponseSchema.user` / `TokenMeResponseSchema.user` shape.
+ */
+export declare const toAuthUser: (user: AuthUserLike) => {
+    id: string;
+    username: string;
+    email: string;
+    name: string;
+    image: string | undefined;
+    admin: boolean;
+};

package/dist/hono/handlers/_helpers/user-shape.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toAuthUser = exports.toUserImage = void 0;
+/**
+ * Convert Mongoose's `null | string` `user.image` to the contract-friendly
+ * `string | undefined`. The Hono `c.json` typed-response check rejects
+ * `null` against `z.string().optional()`, so we explicitly coerce.
+ */
+const toUserImage = (image) => image ?? undefined;
+exports.toUserImage = toUserImage;
+/**
+ * `TokenAuthResponseSchema.user` / `TokenMeResponseSchema.user` shape.
+ */
+const toAuthUser = (user) => ({
+    id: user._id.toString(),
+    username: user.username,
+    email: user.email,
+    name: user.name,
+    image: (0, exports.toUserImage)(user.image),
+    admin: user.admin === true,
+});
+exports.toAuthUser = toAuthUser;
+//# sourceMappingURL=user-shape.js.map

package/dist/hono/handlers/_helpers/user-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-shape.js","sourceRoot":"","sources":["../../../../src/hono/handlers/_helpers/user-shape.ts"],"names":[],"mappings":";;;AAkBA;;;;GAIG;AACI,MAAM,WAAW,GAAG,CAAC,KAAgC,EAAsB,EAAE,CAAC,KAAK,IAAI,SAAS,CAAC;AAA3F,QAAA,WAAW,eAAgF;AAaxG;;GAEG;AACI,MAAM,UAAU,GAAG,CAAC,IAAkB,EAAE,EAAE,CAAC,CAAC;IACjD,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;IACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;IACvB,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,KAAK,EAAE,IAAA,mBAAW,EAAC,IAAI,CAAC,KAAK,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;CAC3B,CAAC,CAAC;AAPU,QAAA,UAAU,cAOpB"}

package/dist/hono/handlers/access-token.d.ts

@@ -0,0 +1,221 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import type Crowi from '../../crowi';
+import type { CrowiHonoBindings } from '../app';
+export declare const registerAccessTokenRoutes: <E extends OpenAPIHono<CrowiHonoBindings>>(app: E, crowi: Crowi) => OpenAPIHono<CrowiHonoBindings, {
+    "/me/access-tokens": {
+        $get: {
+            input: {};
+            output: {
+                accessTokens: {
+                    id: string;
+                    name: string;
+                    scopes: string[];
+                    expiresAt: string | null;
+                    lastUsedAt: string | null;
+                    createdAt: string;
+                }[];
+            };
+            outputFormat: "json";
+            status: 200;
+        } | {
+            input: {};
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED";
+                    message: "Authentication is required";
+                    redirectTo?: string | undefined;
+                };
+            };
+            outputFormat: "json";
+            status: 401;
+        } | {
+            input: {};
+            output: {
+                error: {
+                    code: "FORBIDDEN";
+                    message: string;
+                };
+            };
+            outputFormat: "json";
+            status: 403;
+        } | {
+            input: {};
+            output: {
+                error: {
+                    code: "INTERNAL_ERROR";
+                    message: "Internal server error";
+                };
+            };
+            outputFormat: "json";
+            status: 500;
+        };
+    };
+} & {
+    "/me/access-tokens": {
+        $post: {
+            input: {
+                json: {
+                    name: string;
+                    scopes: string[];
+                    expiresAt?: string | null | undefined;
+                };
+            };
+            output: {
+                id: string;
+                name: string;
+                scopes: string[];
+                expiresAt: string | null;
+                lastUsedAt: string | null;
+                createdAt: string;
+                token: string;
+            };
+            outputFormat: "json";
+            status: 201;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                    scopes: string[];
+                    expiresAt?: string | null | undefined;
+                };
+            };
+            output: {
+                error: {
+                    code: "INVALID_SCOPE";
+                    message: string;
+                    details?: {
+                        invalidScopes: string[];
+                    } | undefined;
+                };
+            };
+            outputFormat: "json";
+            status: 400;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                    scopes: string[];
+                    expiresAt?: string | null | undefined;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED";
+                    message: "Authentication is required";
+                    redirectTo?: string | undefined;
+                };
+            };
+            outputFormat: "json";
+            status: 401;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                    scopes: string[];
+                    expiresAt?: string | null | undefined;
+                };
+            };
+            output: {
+                error: {
+                    code: "FORBIDDEN";
+                    message: string;
+                };
+            };
+            outputFormat: "json";
+            status: 403;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                    scopes: string[];
+                    expiresAt?: string | null | undefined;
+                };
+            };
+            output: {
+                error: {
+                    code: "INTERNAL_ERROR";
+                    message: "Internal server error";
+                };
+            };
+            outputFormat: "json";
+            status: 500;
+        };
+    };
+} & {
+    "/me/access-tokens/:id": {
+        $delete: {
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+            output: {
+                id: string;
+                name: string;
+                scopes: string[];
+                expiresAt: string | null;
+                lastUsedAt: string | null;
+                createdAt: string;
+            };
+            outputFormat: "json";
+            status: 200;
+        } | {
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED";
+                    message: "Authentication is required";
+                    redirectTo?: string | undefined;
+                };
+            };
+            outputFormat: "json";
+            status: 401;
+        } | {
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "FORBIDDEN";
+                    message: string;
+                };
+            };
+            outputFormat: "json";
+            status: 403;
+        } | {
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "NOT_FOUND";
+                    message: string;
+                };
+            };
+            outputFormat: "json";
+            status: 404;
+        } | {
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "INTERNAL_ERROR";
+                    message: "Internal server error";
+                };
+            };
+            outputFormat: "json";
+            status: 500;
+        };
+    };
+}, "/">;

package/dist/hono/handlers/access-token.js

@@ -0,0 +1,113 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAccessTokenRoutes = void 0;
+const api_contract_1 = require("@crowi/api-contract");
+const debug_1 = __importDefault(require("debug"));
+const mongoose_1 = require("mongoose");
+const debug = (0, debug_1.default)('crowi:hono:handlers:access-token');
+const FORBIDDEN_BODY = {
+    error: {
+        code: 'FORBIDDEN',
+        message: 'Personal access tokens can only be managed from a web session.',
+    },
+};
+/** Serialise a PAT document to its public metadata (never the secret). */
+const toAccessTokenResponse = (doc) => ({
+    id: doc._id.toString(),
+    name: doc.name,
+    scopes: doc.scopes,
+    expiresAt: doc.expiresAt ? doc.expiresAt.toISOString() : null,
+    lastUsedAt: doc.lastUsedAt ? doc.lastUsedAt.toISOString() : null,
+    createdAt: doc.createdAt.toISOString(),
+});
+const registerAccessTokenRoutes = (app, crowi) => {
+    const PersonalAccessToken = crowi.model('PersonalAccessToken');
+    // No `app.use('/me/*', createJwtAuth)` here — `registerMeRoutes` owns
+    // that broad apply and MUST register first (see `hono/index.ts`). These
+    // routes therefore see `c.get('user')` / `c.get('authContext')` already
+    // populated.
+    return app
+        .openapi(api_contract_1.listAccessTokensRoute, async (c) => {
+        if (c.get('authContext').kind !== 'web') {
+            return c.json(FORBIDDEN_BODY, 403);
+        }
+        const user = c.get('user');
+        try {
+            const tokens = await PersonalAccessToken.listByUser(user._id);
+            return c.json({ accessTokens: tokens.map(toAccessTokenResponse) }, 200);
+        }
+        catch (err) {
+            debug('listAccessTokens failed:', err);
+            return c.json({ error: { code: 'INTERNAL_ERROR', message: 'Internal server error' } }, 500);
+        }
+    })
+        .openapi(api_contract_1.createAccessTokenRoute, async (c) => {
+        if (c.get('authContext').kind !== 'web') {
+            return c.json(FORBIDDEN_BODY, 403);
+        }
+        const user = c.get('user');
+        const { name, scopes, expiresAt } = c.req.valid('json');
+        // Reject any requested scope outside the issuable set (catalog minus
+        // `admin:*`). Deduplicate to keep the stored array tidy.
+        const invalidScopes = scopes.filter((s) => !(0, api_contract_1.isIssuableScope)(s));
+        if (invalidScopes.length > 0) {
+            const body = {
+                error: {
+                    code: 'INVALID_SCOPE',
+                    message: `One or more requested scopes cannot be issued: ${invalidScopes.join(', ')}`,
+                    details: { invalidScopes },
+                },
+            };
+            return c.json(body, 400);
+        }
+        const uniqueScopes = [...new Set(scopes)];
+        try {
+            const { token, tokenHash } = PersonalAccessToken.generateToken();
+            const created = await PersonalAccessToken.create({
+                tokenHash,
+                userId: user._id,
+                name,
+                scopes: uniqueScopes,
+                expiresAt: expiresAt ? new Date(expiresAt) : null,
+            });
+            const body = { ...toAccessTokenResponse(created), token };
+            return c.json(body, 201);
+        }
+        catch (err) {
+            debug('createAccessToken failed:', err);
+            return c.json({ error: { code: 'INTERNAL_ERROR', message: 'Internal server error' } }, 500);
+        }
+    })
+        .openapi(api_contract_1.deleteAccessTokenRoute, async (c) => {
+        if (c.get('authContext').kind !== 'web') {
+            return c.json(FORBIDDEN_BODY, 403);
+        }
+        const user = c.get('user');
+        const { id } = c.req.valid('param');
+        if (!mongoose_1.Types.ObjectId.isValid(id)) {
+            return c.json({ error: { code: 'NOT_FOUND', message: 'No such access token' } }, 404);
+        }
+        try {
+            // Scope the lookup to the caller so one user cannot revoke
+            // another's token (an unknown / already-revoked id is a 404).
+            const doc = await PersonalAccessToken.findOne({ _id: new mongoose_1.Types.ObjectId(id), userId: user._id });
+            if (!doc) {
+                return c.json({ error: { code: 'NOT_FOUND', message: 'No such access token' } }, 404);
+            }
+            if (!doc.revokedAt) {
+                doc.revokedAt = new Date();
+                await doc.save();
+            }
+            return c.json(toAccessTokenResponse(doc), 200);
+        }
+        catch (err) {
+            debug('deleteAccessToken failed:', err);
+            return c.json({ error: { code: 'INTERNAL_ERROR', message: 'Internal server error' } }, 500);
+        }
+    });
+};
+exports.registerAccessTokenRoutes = registerAccessTokenRoutes;
+//# sourceMappingURL=access-token.js.map

package/dist/hono/handlers/access-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../../../src/hono/handlers/access-token.ts"],"names":[],"mappings":";;;;;;AAqBA,sDAA6H;AAE7H,kDAA0B;AAC1B,uCAAiC;AAOjC,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,kCAAkC,CAAC,CAAC;AAExD,MAAM,cAAc,GAAmB;IACrC,KAAK,EAAE;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,gEAAgE;KAC1E;CACF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,CAAC,GAAgC,EAAE,EAAE,CAAC,CAAC;IACnE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE;IACtB,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;IAC7D,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;IAChE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;CACvC,CAAC,CAAC;AAEI,MAAM,yBAAyB,GAAG,CAA2C,GAAM,EAAE,KAAY,EAAE,EAAE;IAC1G,MAAM,mBAAmB,GAAG,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAE/D,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,aAAa;IAEb,OAAO,GAAG;SACP,OAAO,CAAC,oCAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,uBAAgC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAChH,CAAC;IACH,CAAC,CAAC;SACD,OAAO,CAAC,qCAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAExD,qEAAqE;QACrE,yDAAyD;QACzD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,8BAAe,EAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAsB;gBAC9B,KAAK,EAAE;oBACL,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,kDAAkD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACrF,OAAO,EAAE,EAAE,aAAa,EAAE;iBAC3B;aACF,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBAC/C,SAAS;gBACT,MAAM,EAAE,IAAI,CAAC,GAAG;gBAChB,IAAI;gBACJ,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;aAClD,CAAC,CAAC;YAEH,MAAM,IAAI,GAA8B,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;YACrF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,uBAAgC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAChH,CAAC;IACH,CAAC,CAAC;SACD,OAAO,CAAC,qCAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEpC,IAAI,CAAC,gBAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,CAAC;YACH,2DAA2D;YAC3D,8DAA8D;YAC9D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,gBAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACjG,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACnB,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,uBAAgC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAChH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAzFW,QAAA,yBAAyB,6BAyFpC"}