@de-otio/trellis 0.7.1 → 0.9.0

package/dist/lib/routes/agent-authorize.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Interactive agent-authorization page (T9b-d).
  *
@@ -14,28 +13,23 @@
  * and on success calls Cognito AdminInitiateAuth to mint tokens, seals
  * them under the device_code, and writes the agent-session row.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.agentAuthorizeRoutes = void 0;
-exports._setAgentAuthorizeDepsForTest = _setAgentAuthorizeDepsForTest;
-exports._resetAgentAuthorizeDepsForTest = _resetAgentAuthorizeDepsForTest;
-const zod_1 = require("zod");
-const node_crypto_1 = require("node:crypto");
-const db_1 = require("../../db");
-const capabilities_1 = require("../auth/capabilities");
-const require_1 = require("../auth/require");
-const device_authorization_1 = require("../oauth/device-authorization");
-const emit_1 = require("../audit/emit");
-const event_types_1 = require("../audit/event-types");
-const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
-const cognito_issuer_1 = require("../oauth/cognito-issuer");
-const refresh_detection_1 = require("../oauth/refresh-detection");
-const middleware_1 = require("../middleware");
-const trusted_client_ip_1 = require("../net/trusted-client-ip");
-const rate_limit_1 = require("../rate-limit");
-const secret_resolver_1 = require("../secret-resolver");
-const security_headers_1 = require("../security-headers");
-const session_manager_1 = require("../session-manager");
-const errors_1 = require("./errors");
+import { z } from "zod";
+import { randomBytes, randomUUID } from "node:crypto";
+import { createPrisma } from "../../db.js";
+import { Capability } from "../auth/capabilities.js";
+import { requireCapability } from "../auth/require.js";
+import { approveDeviceAuth, hashUserCode, incrementFailedLookup, loadByDeviceCode, lookupDeviceCodeByUserCode, normaliseUserCode, USER_CODE_FAILURE_LIMIT, } from "../oauth/device-authorization.js";
+import { TenantAuditEmitter } from "../audit-composer.js";
+import { AuditEventType } from "../audit-actions.js";
+import { CognitoIdentityProviderClient } from "@aws-sdk/client-cognito-identity-provider";
+import { AwsCognitoIssuer, } from "../oauth/cognito-issuer.js";
+import { recordAgentSession, } from "../oauth/refresh-detection.js";
+import { corsMiddleware, csrfMiddleware } from "../middleware.js";
+import { trustedClientIp } from "../net/trusted-client-ip.js";
+import { RateLimiter } from "../rate-limit.js";
+import { SecurityHeaders } from "../security-headers.js";
+import { SessionManager } from "../session-cookie.js";
+import { structuredError } from "./errors.js";
 /** Per-IP ceiling on approvals (G4 CRITICAL-3). */
 const APPROVE_RATE_LIMIT = 5;
 const APPROVE_RATE_WINDOW_SECONDS = 60;
@@ -51,31 +45,31 @@ const APPROVE_GLOBAL_WINDOW_SECONDS = 60;
 const VERIFY_MISS_LIMIT = 30;
 const VERIFY_MISS_WINDOW_SECONDS = 60;
 const MFA_FRESHNESS_MS = 60 * 60 * 1000; // 1 hour
-const ApproveSchema = zod_1.z
+const ApproveSchema = z
     .object({
-    user_code: zod_1.z.string().min(4).max(32),
+    user_code: z.string().min(4).max(32),
 })
     .strict();
 /** Module-level deps; tests can override. */
 let deps = {};
-function _setAgentAuthorizeDepsForTest(d) {
+export function _setAgentAuthorizeDepsForTest(d) {
     deps = d;
 }
-function _resetAgentAuthorizeDepsForTest() {
+export function _resetAgentAuthorizeDepsForTest() {
     deps = {};
 }
 function getIssuer() {
     if (deps.issuer)
         return deps.issuer;
-    return new cognito_issuer_1.AwsCognitoIssuer(new client_cognito_identity_provider_1.CognitoIdentityProviderClient({
+    return new AwsCognitoIssuer(new CognitoIdentityProviderClient({
         region: process.env.COGNITO_REGION || process.env.AWS_REGION || "us-east-1",
     }));
 }
 function getAudit() {
-    return deps.auditEmitter ?? new emit_1.AuditEventEmitter();
+    return deps.auditEmitter ?? new TenantAuditEmitter();
 }
 function getRateLimiter() {
-    return deps.rateLimiter ?? new rate_limit_1.RateLimiter();
+    return deps.rateLimiter ?? new RateLimiter();
 }
 function htmlResponse(body, status = 200) {
     return new Response(body, {
@@ -88,7 +82,7 @@ function htmlResponse(body, status = 200) {
     });
 }
 function jsonError(env, body, status) {
-    const sec = new security_headers_1.SecurityHeaders(env);
+    const sec = new SecurityHeaders(env);
     return sec.createSecureResponse(JSON.stringify(body), {
         status,
         headers: { "content-type": "application/json", "cache-control": "no-store" },
@@ -139,7 +133,7 @@ function renderApprovalPage(input) {
   <p>Source IP: <span class="code">${escape(input.sourceIp)}</span></p>
   <div class="caveat">
     The agent name above is supplied by the agent and is not verified by
-    Skybber. Verify with the person who initiated this flow before
+    Trellis. Verify with the person who initiated this flow before
     approving.
   </div>
   <p>Code:
@@ -161,7 +155,7 @@ async function buildAuthContext(session, env) {
     if (!session.userId)
         return null;
     // We need tenantRole. Look up via Prisma.
-    const prisma = (0, db_1.createPrisma)(env);
+    const prisma = createPrisma(env);
     const memberWithTenant = await prisma.tenantMember.findFirst({
         where: { userId: session.userId, status: "ACTIVE" },
         orderBy: { joinedAt: "asc" },
@@ -194,7 +188,7 @@ async function buildAuthContext(session, env) {
         membershipsLoader: async () => [memberWithTenant],
     };
 }
-exports.agentAuthorizeRoutes = [
+export const agentAuthorizeRoutes = [
     {
         path: "/agents/authorize",
         method: "GET",
@@ -204,8 +198,8 @@ exports.agentAuthorizeRoutes = [
             if (!rawUserCode) {
                 return htmlResponse("<p>Missing user_code parameter</p>", 400);
             }
-            const sessionManager = new session_manager_1.SessionManager();
-            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            const sessionManager = new SessionManager();
+            const session = await sessionManager.getSession(request, env.SESSION_SECRET, env);
             if (!session) {
                 const returnTo = encodeURIComponent(`/agents/authorize?user_code=${rawUserCode}`);
                 return new Response(null, {
@@ -218,7 +212,7 @@ exports.agentAuthorizeRoutes = [
             if (!auth) {
                 return htmlResponse("<p>Active tenant membership required.</p>", 403);
             }
-            const denied = (0, require_1.requireCapability)(auth, capabilities_1.Capability.ManageAgentSessions);
+            const denied = requireCapability(auth, Capability.ManageAgentSessions);
             if (denied) {
                 return htmlResponse("<p>You are not permitted to approve agents for this tenant.</p>", 403);
             }
@@ -234,9 +228,9 @@ exports.agentAuthorizeRoutes = [
             // Resolve the user_code → device_code lookup. Don't reveal whether
             // the code is valid in the page body to avoid easy brute-force —
             // but we can still tell the user the page renders.
-            const userCode = (0, device_authorization_1.normaliseUserCode)(rawUserCode);
-            const deviceCode = await (0, device_authorization_1.lookupDeviceCodeByUserCode)(userCode);
-            const record = deviceCode ? await (0, device_authorization_1.loadByDeviceCode)(deviceCode) : null;
+            const userCode = normaliseUserCode(rawUserCode);
+            const deviceCode = await lookupDeviceCodeByUserCode(userCode);
+            const record = deviceCode ? await loadByDeviceCode(deviceCode) : null;
             // MEDIUM-2: charge a miss against the per-IP miss bucket whenever
             // the user_code did not resolve. Combined with the global ceiling
             // above, a single source cannot enumerate user_codes by spamming
@@ -255,12 +249,12 @@ exports.agentAuthorizeRoutes = [
             return htmlResponse(renderApprovalPage({
                 userCode: rawUserCode,
                 agentLabel: record?.agentLabel,
-                sourceIp: (0, trusted_client_ip_1.trustedClientIp)(request, env),
+                sourceIp: trustedClientIp(request, env),
                 mfaRequired: !mfaFresh,
                 csrfToken: session.csrfToken,
             }));
         },
-        middleware: [(0, middleware_1.corsMiddleware)()],
+        middleware: [corsMiddleware()],
         description: "Render the agent-approval page",
     },
     {
@@ -278,10 +272,10 @@ exports.agentAuthorizeRoutes = [
             const limited = await rl.applyRateLimitKV(env, request, "/agents/authorize/approve", APPROVE_RATE_LIMIT, APPROVE_RATE_WINDOW_SECONDS);
             if (limited)
                 return limited;
-            const sessionManager = new session_manager_1.SessionManager();
-            const session = await sessionManager.getSession(request, secret_resolver_1.Secrets.getSessionSecret(env), env);
+            const sessionManager = new SessionManager();
+            const session = await sessionManager.getSession(request, env.SESSION_SECRET, env);
             if (!session) {
-                return (0, errors_1.structuredError)(401, {
+                return structuredError(401, {
                     error: "UNAUTHORIZED",
                     message: "Authentication required.",
                     remediation: "Sign in at /auth/login and retry.",
@@ -294,7 +288,7 @@ exports.agentAuthorizeRoutes = [
                 typeof session.mfaVerifiedAt === "number" &&
                 Math.abs(Date.now() - session.mfaVerifiedAt) < MFA_FRESHNESS_MS;
             if (!mfaFresh) {
-                return (0, errors_1.structuredError)(401, {
+                return structuredError(401, {
                     error: "MFA_REQUIRED",
                     message: "Step up with a fresh MFA verification before approving an agent.",
                     remediation: "POST /api/mfa/verify with a TOTP code, then retry this approval.",
@@ -302,13 +296,13 @@ exports.agentAuthorizeRoutes = [
             }
             const auth = await buildAuthContext(session, env);
             if (!auth) {
-                return (0, errors_1.structuredError)(401, {
+                return structuredError(401, {
                     error: "UNAUTHORIZED",
                     message: "Authentication required.",
                     remediation: "Sign in at /auth/login with an active tenant membership and retry.",
                 });
             }
-            const denied = (0, require_1.requireCapability)(auth, capabilities_1.Capability.ManageAgentSessions);
+            const denied = requireCapability(auth, Capability.ManageAgentSessions);
             if (denied)
                 return denied;
             // Read form / json body.
@@ -322,7 +316,7 @@ exports.agentAuthorizeRoutes = [
                 body = (await request.json());
             }
             else {
-                return (0, errors_1.structuredError)(400, {
+                return structuredError(400, {
                     error: "INVALID_REQUEST",
                     message: "Request body must be form-encoded or JSON.",
                     remediation: "Set Content-Type to application/x-www-form-urlencoded or application/json.",
@@ -330,15 +324,15 @@ exports.agentAuthorizeRoutes = [
             }
             const parsed = ApproveSchema.safeParse(body);
             if (!parsed.success) {
-                return (0, errors_1.structuredError)(400, {
+                return structuredError(400, {
                     error: "INVALID_REQUEST",
                     message: "user_code is required.",
                     remediation: "Include the user_code displayed on the agent device.",
                     field: "user_code",
                 });
             }
-            const userCode = (0, device_authorization_1.normaliseUserCode)(parsed.data.user_code);
-            const deviceCode = await (0, device_authorization_1.lookupDeviceCodeByUserCode)(userCode);
+            const userCode = normaliseUserCode(parsed.data.user_code);
+            const deviceCode = await lookupDeviceCodeByUserCode(userCode);
             if (!deviceCode) {
                 // MEDIUM-2: charge the per-IP miss bucket on every unresolved
                 // user_code so enumeration is bounded even when the device-code
@@ -346,19 +340,19 @@ exports.agentAuthorizeRoutes = [
                 await rl
                     .applyRateLimitKV(env, request, "/agents/authorize:miss", VERIFY_MISS_LIMIT, VERIFY_MISS_WINDOW_SECONDS)
                     .catch(() => null);
-                return (0, errors_1.structuredError)(404, {
+                return structuredError(404, {
                     error: "INVALID_USER_CODE",
                     message: "User code not found or expired.",
                     remediation: "Verify the code displayed on the agent device and try again.",
                     field: "user_code",
                 });
             }
-            const record = await (0, device_authorization_1.loadByDeviceCode)(deviceCode);
+            const record = await loadByDeviceCode(deviceCode);
             if (!record) {
                 await rl
                     .applyRateLimitKV(env, request, "/agents/authorize:miss", VERIFY_MISS_LIMIT, VERIFY_MISS_WINDOW_SECONDS)
                     .catch(() => null);
-                return (0, errors_1.structuredError)(404, {
+                return structuredError(404, {
                     error: "INVALID_USER_CODE",
                     message: "User code not found or expired.",
                     remediation: "Verify the code displayed on the agent device and try again.",
@@ -366,25 +360,25 @@ exports.agentAuthorizeRoutes = [
                 });
             }
             // Verify the supplied user_code actually matches the record's hash.
-            const expected = (0, device_authorization_1.hashUserCode)(userCode);
+            const expected = hashUserCode(userCode);
             if (expected !== record.userCodeHash) {
-                const after = await (0, device_authorization_1.incrementFailedLookup)(deviceCode);
-                if (after >= device_authorization_1.USER_CODE_FAILURE_LIMIT) {
-                    return (0, errors_1.structuredError)(410, {
+                const after = await incrementFailedLookup(deviceCode);
+                if (after >= USER_CODE_FAILURE_LIMIT) {
+                    return structuredError(410, {
                         error: "DEVICE_CODE_LOCKED",
                         message: "Too many failed attempts. This device code has been locked.",
                         remediation: "Restart the agent authorization flow to get a new code.",
                     });
                 }
-                return (0, errors_1.structuredError)(404, {
+                return structuredError(404, {
                     error: "INVALID_USER_CODE",
                     message: "User code not found or expired.",
                     remediation: "Verify the code displayed on the agent device and try again.",
                     field: "user_code",
                 });
             }
-            if (record.failedLookups >= device_authorization_1.USER_CODE_FAILURE_LIMIT) {
-                return (0, errors_1.structuredError)(410, {
+            if (record.failedLookups >= USER_CODE_FAILURE_LIMIT) {
+                return structuredError(410, {
                     error: "DEVICE_CODE_LOCKED",
                     message: "Too many failed attempts. This device code has been locked.",
                     remediation: "Restart the agent authorization flow to get a new code.",
@@ -399,7 +393,7 @@ exports.agentAuthorizeRoutes = [
             // input to AdminInitiateAuth(REFRESH_TOKEN_AUTH).
             const refreshToken = session.refreshToken;
             if (!refreshToken) {
-                return (0, errors_1.structuredError)(400, {
+                return structuredError(400, {
                     error: "SESSION_MISSING_REFRESH_TOKEN",
                     message: "This session has no Cognito refresh token.",
                     remediation: "Sign in via the agent client and retry.",
@@ -412,12 +406,12 @@ exports.agentAuthorizeRoutes = [
                 username: auth.cognitoSub,
                 refreshToken,
             });
-            const sessionId = `s_${(0, node_crypto_1.randomBytes)(16).toString("base64url")}`;
+            const sessionId = `s_${randomBytes(16).toString("base64url")}`;
             // Naive jti extraction from the new refresh token — Cognito refresh
             // tokens are opaque, so we derive a jti from the token bytes via
             // a stable hash.
-            const initialJti = `j_${(0, node_crypto_1.randomBytes)(16).toString("base64url")}`;
-            await (0, device_authorization_1.approveDeviceAuth)({
+            const initialJti = `j_${randomBytes(16).toString("base64url")}`;
+            await approveDeviceAuth({
                 deviceCode,
                 approvedByUserId: auth.userId,
                 cognitoSub: auth.cognitoSub,
@@ -425,7 +419,7 @@ exports.agentAuthorizeRoutes = [
                 tokens,
                 sessionId,
             });
-            const requestIp = (0, trusted_client_ip_1.trustedClientIp)(request, env);
+            const requestIp = trustedClientIp(request, env);
             const sessionRow = {
                 sessionId,
                 userId: auth.userId,
@@ -438,17 +432,17 @@ exports.agentAuthorizeRoutes = [
                 createdAt: Math.floor(Date.now() / 1000),
                 lastUsedAt: Math.floor(Date.now() / 1000),
             };
-            await (0, refresh_detection_1.recordAgentSession)({ session: sessionRow, initialJti });
+            await recordAgentSession({ session: sessionRow, initialJti });
             // Audit: agent session approved.
             try {
                 const audit = getAudit();
-                const prisma = (0, db_1.createPrisma)(env);
+                const prisma = createPrisma(env);
                 // MEDIUM-6: do not include a hash of the device_code in the audit
                 // payload — it can be replayed against a stolen device_code as a
                 // confirmation oracle. Use agentSessionId as the correlator and
                 // generate a fresh UUID for any further cross-event linking.
                 await audit.emit({
-                    type: event_types_1.AuditEventType.AUTH_AGENT_SESSION_APPROVED,
+                    type: AuditEventType.AUTH_AGENT_SESSION_APPROVED,
                     tenantId: auth.activeTenantId,
                     actorUserId: auth.userId,
                     payload: {
@@ -456,23 +450,23 @@ exports.agentAuthorizeRoutes = [
                         // G4 N1: cap raw User-Agent in the audit payload to match
                         // the 256-byte agent-label cap applied at oauth.ts:36.
                         userAgent: (request.headers.get("user-agent") ?? "(unknown)").slice(0, 256),
-                        correlationId: (0, node_crypto_1.randomUUID)(),
+                        correlationId: randomUUID(),
                     },
                     sourceIp: requestIp,
                     agentSessionId: sessionId,
                 }, prisma);
             }
             catch {
-                // Audit failures don't block approval — the AuditEventEmitter
+                // Audit failures don't block approval — the TenantAuditEmitter
                 // logs an audit-fallback line itself.
             }
-            const sec = new security_headers_1.SecurityHeaders(env);
+            const sec = new SecurityHeaders(env);
             return sec.createSecureResponse(JSON.stringify({ status: "approved" }), {
                 status: 200,
                 headers: { "content-type": "application/json", "cache-control": "no-store" },
             });
         },
-        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        middleware: [corsMiddleware(), csrfMiddleware()],
         description: "Approve a pending agent session",
     },
 ];

package/dist/lib/routes/agent-authorize.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-authorize.js","sourceRoot":"","sources":["../../../src/lib/routes/agent-authorize.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAuEH,sEAEC;AAED,0EAEC;AA3ED,6BAAwB;AACxB,6CAAsD;AACtD,iCAAwC;AACxC,uDAAkD;AAClD,6CAAoD;AAEpD,wEAQuC;AACvC,wCAAkD;AAClD,sDAAsD;AACtD,gGAA0F;AAC1F,4DAGiC;AACjC,kEAGoC;AACpC,8CAA+D;AAC/D,gEAA2D;AAC3D,8CAA4C;AAC5C,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAkE;AAClE,qCAA2C;AAG3C,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAElD,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAWZ,6CAA6C;AAC7C,IAAI,IAAI,GAAuB,EAAE,CAAC;AAElC,SAAgB,6BAA6B,CAAC,CAAqB;IACjE,IAAI,GAAG,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,+BAA+B;IAC7C,IAAI,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACpC,OAAO,IAAI,iCAAgB,CACzB,IAAI,gEAA6B,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;KAC5E,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,wBAAiB,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,wBAAW,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG;IAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;YAC3B,wBAAwB,EAAE,SAAS;SACpC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,IAAa,EAAE,MAAc;IAC5D,MAAM,GAAG,GAAG,IAAI,kCAAe,CAAC,GAAY,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACpD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAM3B;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW;QAC/B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,uBAAuB,CAAC;IAE5B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW;QACjC,CAAC,CAAC;;kCAE4B;QAC9B,CAAC,CAAC,EAAE,CAAC;IAEP,mEAAmE;IACnE,sEAAsE;IACtE,yEAAyE;IACzE,OAAO;;;;;;;;;;;;;;;;;;QAkBD,MAAM,CAAC,OAAO,CAAC;;8BAEO,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC;;qCAEvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;;;;;;;0BAOjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5C,SAAS;;mDAEsC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;MACnE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,iDAAiD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;2BAChF,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;;;QAGvD,CAAC;AACT,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAgB,EAChB,GAAY;IAEZ,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,0CAA0C;IAC1C,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAY,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;QAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;QACnD,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAEnC,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,MAAM,UAAU,GAAI,OAAO,CAAC,IAAkC,IAAI,UAAU,CAAC;IAE7E,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU;QACV,cAAc,EAAE,gBAAgB,CAAC,QAAQ;QACzC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI;QACxC,UAAU,EAAE,gBAAgB,CAAC,IAAI;QACjC,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,gBAAyB,CAAC;KAC3D,CAAC;AACJ,CAAC;AAEY,QAAA,oBAAoB,GAAY;IAC3C;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,kBAAkB,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;gBAClF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,sBAAsB,QAAQ,EAAE,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;YAED,kCAAkC;YAClC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,YAAY,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,2BAAiB,EAAC,IAAI,EAAE,yBAAU,CAAC,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,iEAAiE,EAAE,GAAG,CAAC,CAAC;YAC9F,CAAC;YAED,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC7C,GAAG,EACH,OAAO,EACP,0BAA0B,EAC1B,oBAAoB,EACpB,6BAA6B;YAC7B,iEAAiE;YACjE,+CAA+C;YAC/C,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;YACF,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YAExC,mEAAmE;YACnE,iEAAiE;YACjE,mDAAmD;YACnD,MAAM,QAAQ,GAAG,IAAA,wCAAiB,EAAC,WAAW,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,MAAM,IAAA,iDAA0B,EAAC,QAAQ,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,IAAA,uCAAgB,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEtE,kEAAkE;YAClE,kEAAkE;YAClE,iEAAiE;YACjE,4CAA4C;YAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,EAAE;qBACL,gBAAgB,CACf,GAAG,EACH,OAAO,EACP,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,CAC3B;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAED,mEAAmE;YACnE,oEAAoE;YACpE,sDAAsD;YACtD,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;gBACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,gBAAgB,CAAC;YAElE,OAAO,YAAY,CACjB,kBAAkB,CAAC;gBACjB,QAAQ,EAAE,WAAW;gBACrB,UAAU,EAAE,MAAM,EAAE,UAAU;gBAC9B,QAAQ,EAAE,IAAA,mCAAe,EAAC,OAAO,EAAE,GAAG,CAAC;gBACvC,WAAW,EAAE,CAAC,QAAQ;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,gCAAgC;KAC9C;IAED;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;YAE5B,gEAAgE;YAChE,gEAAgE;YAChE,4CAA4C;YAC5C,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC7C,GAAG,EACH,OAAO,EACP,kCAAkC,EAClC,oBAAoB,EACpB,6BAA6B,EAC7B,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;YACF,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YAExC,6CAA6C;YAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACvC,GAAG,EACH,OAAO,EACP,2BAA2B,EAC3B,kBAAkB,EAClB,2BAA2B,CAC5B,CAAC;YACF,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAE5B,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,mCAAmC;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,+DAA+D;YAC/D,8DAA8D;YAC9D,sCAAsC;YACtC,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;gBACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,gBAAgB,CAAC;YAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,kEAAkE;oBAC3E,WAAW,EAAE,kEAAkE;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,oEAAoE;iBAClF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,2BAAiB,EAAC,IAAI,EAAE,yBAAU,CAAC,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAE1B,yBAAyB;YACzB,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACrD,IAAI,IAA4B,CAAC;YACjC,IAAI,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA2B,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,4CAA4C;oBACrD,WAAW,EAAE,4EAA4E;iBAC1F,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,wBAAwB;oBACjC,WAAW,EAAE,sDAAsD;oBACnE,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,IAAA,wCAAiB,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,IAAA,iDAA0B,EAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,8DAA8D;gBAC9D,gEAAgE;gBAChE,6DAA6D;gBAC7D,MAAM,EAAE;qBACL,gBAAgB,CACf,GAAG,EACH,OAAO,EACP,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,CAC3B;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;oBAC1C,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAgB,EAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,EAAE;qBACL,gBAAgB,CACf,GAAG,EACH,OAAO,EACP,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,CAC3B;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;oBAC1C,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,oEAAoE;YACpE,MAAM,QAAQ,GAAG,IAAA,mCAAY,EAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,QAAQ,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,IAAA,4CAAqB,EAAC,UAAU,CAAC,CAAC;gBACtD,IAAI,KAAK,IAAI,8CAAuB,EAAE,CAAC;oBACrC,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;wBAC1B,KAAK,EAAE,oBAAoB;wBAC3B,OAAO,EAAE,6DAA6D;wBACtE,WAAW,EAAE,yDAAyD;qBACvE,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;oBAC1C,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,aAAa,IAAI,8CAAuB,EAAE,CAAC;gBACpD,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,6DAA6D;oBACtE,WAAW,EAAE,yDAAyD;iBACvE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;YAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,uBAAuB,CAAC;YAClD,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,mEAAmE;YACnE,kDAAkD;YAClD,MAAM,YAAY,GAAI,OAA+C,CAAC,YAAY,CAAC;YACnF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,+BAA+B;oBACtC,OAAO,EAAE,4CAA4C;oBACrD,WAAW,EAAE,yCAAyC;iBACvD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;gBACxC,UAAU;gBACV,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,IAAI,CAAC,UAAU;gBACzB,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,KAAK,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,oEAAoE;YACpE,iEAAiE;YACjE,iBAAiB;YACjB,MAAM,UAAU,GAAG,KAAK,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAEhE,MAAM,IAAA,wCAAiB,EAAC;gBACtB,UAAU;gBACV,gBAAgB,EAAE,IAAI,CAAC,MAAM;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,cAAc;gBAC7B,MAAM;gBACN,SAAS;aACV,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAA,mCAAe,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,UAAU,GAAuB;gBACrC,SAAS;gBACT,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,cAAc;gBAC7B,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACxC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aAC1C,CAAC;YACF,MAAM,IAAA,sCAAkB,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAE9D,iCAAiC;YACjC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAY,CAAC,CAAC;gBAC1C,kEAAkE;gBAClE,iEAAiE;gBACjE,gEAAgE;gBAChE,6DAA6D;gBAC7D,MAAM,KAAK,CAAC,IAAI,CACd;oBACE,IAAI,EAAE,4BAAc,CAAC,2BAA2B;oBAChD,QAAQ,EAAE,IAAI,CAAC,cAAc;oBAC7B,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,OAAO,EAAE;wBACP,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,WAAW;wBAC5C,0DAA0D;wBAC1D,uDAAuD;wBACvD,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC3E,aAAa,EAAE,IAAA,wBAAU,GAAE;qBAC5B;oBACD,QAAQ,EAAE,SAAS;oBACnB,cAAc,EAAE,SAAS;iBAC1B,EACD,MAAe,CAChB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,sCAAsC;YACxC,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,kCAAe,CAAC,GAAY,CAAC,CAAC;YAC9C,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EACtC;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;aAC7E,CACF,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}
+{"version":3,"file":"agent-authorize.js","sourceRoot":"","sources":["../../../src/lib/routes/agent-authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,gBAAgB,GAEjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,GAEnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAElD,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAWZ,6CAA6C;AAC7C,IAAI,IAAI,GAAuB,EAAE,CAAC;AAElC,MAAM,UAAU,6BAA6B,CAAC,CAAqB;IACjE,IAAI,GAAG,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,IAAI,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACpC,OAAO,IAAI,gBAAgB,CACzB,IAAI,6BAA6B,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;KAC5E,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,kBAAkB,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG;IAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;YAC3B,wBAAwB,EAAE,SAAS;SACpC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,IAAa,EAAE,MAAc;IAC5D,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,GAAY,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACpD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAM3B;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW;QAC/B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,uBAAuB,CAAC;IAE5B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW;QACjC,CAAC,CAAC;;kCAE4B;QAC9B,CAAC,CAAC,EAAE,CAAC;IAEP,mEAAmE;IACnE,sEAAsE;IACtE,yEAAyE;IACzE,OAAO;;;;;;;;;;;;;;;;;;QAkBD,MAAM,CAAC,OAAO,CAAC;;8BAEO,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC;;qCAEvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;;;;;;;0BAOjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5C,SAAS;;mDAEsC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;MACnE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,iDAAiD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;2BAChF,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;;;QAGvD,CAAC;AACT,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAgB,EAChB,GAAY;IAEZ,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,0CAA0C;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAY,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;QAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;QACnD,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAEnC,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,MAAM,UAAU,GAAI,OAAO,CAAC,IAAkC,IAAI,UAAU,CAAC;IAE7E,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU;QACV,cAAc,EAAE,gBAAgB,CAAC,QAAQ;QACzC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI;QACxC,UAAU,EAAE,gBAAgB,CAAC,IAAI;QACjC,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,gBAAyB,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAY;IAC3C;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,GAAG,CAAC,cAAc,EAClB,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,kBAAkB,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;gBAClF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,sBAAsB,QAAQ,EAAE,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;YAED,kCAAkC;YAClC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,YAAY,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,iEAAiE,EAAE,GAAG,CAAC,CAAC;YAC9F,CAAC;YAED,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC7C,GAAG,EACH,OAAO,EACP,0BAA0B,EAC1B,oBAAoB,EACpB,6BAA6B;YAC7B,iEAAiE;YACjE,+CAA+C;YAC/C,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;YACF,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YAExC,mEAAmE;YACnE,iEAAiE;YACjE,mDAAmD;YACnD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEtE,kEAAkE;YAClE,kEAAkE;YAClE,iEAAiE;YACjE,4CAA4C;YAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,EAAE;qBACL,gBAAgB,CACf,GAAG,EACH,OAAO,EACP,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,CAC3B;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAED,mEAAmE;YACnE,oEAAoE;YACpE,sDAAsD;YACtD,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;gBACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,gBAAgB,CAAC;YAElE,OAAO,YAAY,CACjB,kBAAkB,CAAC;gBACjB,QAAQ,EAAE,WAAW;gBACrB,UAAU,EAAE,MAAM,EAAE,UAAU;gBAC9B,QAAQ,EAAE,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC;gBACvC,WAAW,EAAE,CAAC,QAAQ;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC;QAC9B,WAAW,EAAE,gCAAgC;KAC9C;IAED;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;YAE5B,gEAAgE;YAChE,gEAAgE;YAChE,4CAA4C;YAC5C,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAC7C,GAAG,EACH,OAAO,EACP,kCAAkC,EAClC,oBAAoB,EACpB,6BAA6B,EAC7B,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;YACF,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YAExC,6CAA6C;YAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,gBAAgB,CACvC,GAAG,EACH,OAAO,EACP,2BAA2B,EAC3B,kBAAkB,EAClB,2BAA2B,CAC5B,CAAC;YACF,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAE5B,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,GAAG,CAAC,cAAc,EAClB,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,mCAAmC;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,+DAA+D;YAC/D,8DAA8D;YAC9D,sCAAsC;YACtC,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;gBACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,gBAAgB,CAAC;YAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,kEAAkE;oBAC3E,WAAW,EAAE,kEAAkE;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,oEAAoE;iBAClF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAE1B,yBAAyB;YACzB,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACrD,IAAI,IAA4B,CAAC;YACjC,IAAI,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA2B,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,4CAA4C;oBACrD,WAAW,EAAE,4EAA4E;iBAC1F,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,wBAAwB;oBACjC,WAAW,EAAE,sDAAsD;oBACnE,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,8DAA8D;gBAC9D,gEAAgE;gBAChE,6DAA6D;gBAC7D,MAAM,EAAE;qBACL,gBAAgB,CACf,GAAG,EACH,OAAO,EACP,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,CAC3B;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;oBAC1C,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,EAAE;qBACL,gBAAgB,CACf,GAAG,EACH,OAAO,EACP,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,CAC3B;qBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;oBAC1C,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,oEAAoE;YACpE,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,QAAQ,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAI,KAAK,IAAI,uBAAuB,EAAE,CAAC;oBACrC,OAAO,eAAe,CAAC,GAAG,EAAE;wBAC1B,KAAK,EAAE,oBAAoB;wBAC3B,OAAO,EAAE,6DAA6D;wBACtE,WAAW,EAAE,yDAAyD;qBACvE,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;oBAC1C,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,aAAa,IAAI,uBAAuB,EAAE,CAAC;gBACpD,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,6DAA6D;oBACtE,WAAW,EAAE,yDAAyD;iBACvE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;YAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,uBAAuB,CAAC;YAClD,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,mEAAmE;YACnE,kDAAkD;YAClD,MAAM,YAAY,GAAI,OAA+C,CAAC,YAAY,CAAC;YACnF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,+BAA+B;oBACtC,OAAO,EAAE,4CAA4C;oBACrD,WAAW,EAAE,yCAAyC;iBACvD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;gBACxC,UAAU;gBACV,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,IAAI,CAAC,UAAU;gBACzB,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,oEAAoE;YACpE,iEAAiE;YACjE,iBAAiB;YACjB,MAAM,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAEhE,MAAM,iBAAiB,CAAC;gBACtB,UAAU;gBACV,gBAAgB,EAAE,IAAI,CAAC,MAAM;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,cAAc;gBAC7B,MAAM;gBACN,SAAS;aACV,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,UAAU,GAAuB;gBACrC,SAAS;gBACT,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,cAAc;gBAC7B,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACxC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aAC1C,CAAC;YACF,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAE9D,iCAAiC;YACjC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAY,CAAC,CAAC;gBAC1C,kEAAkE;gBAClE,iEAAiE;gBACjE,gEAAgE;gBAChE,6DAA6D;gBAC7D,MAAM,KAAK,CAAC,IAAI,CACd;oBACE,IAAI,EAAE,cAAc,CAAC,2BAA2B;oBAChD,QAAQ,EAAE,IAAI,CAAC,cAAc;oBAC7B,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,OAAO,EAAE;wBACP,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,WAAW;wBAC5C,0DAA0D;wBAC1D,uDAAuD;wBACvD,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC3E,aAAa,EAAE,UAAU,EAAE;qBAC5B;oBACD,QAAQ,EAAE,SAAS;oBACnB,cAAc,EAAE,SAAS;iBAC1B,EACD,MAAe,CAChB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;gBAC/D,sCAAsC;YACxC,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,GAAY,CAAC,CAAC;YAC9C,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EACtC;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;aAC7E,CACF,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC;QAChD,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}

package/dist/lib/routes/agent-sessions.d.ts

@@ -6,12 +6,12 @@
  *
  * Backed by the AGENT_REFRESH_TABLE rows written by the device-auth flow.
  */
-import { type CognitoRevoker } from "../oauth/refresh-detection";
-import { AuditEventEmitter } from "../audit/emit";
-import type { Route } from "./types";
+import { type CognitoRevoker } from "../oauth/refresh-detection.js";
+import { TenantAuditEmitter } from "../audit-composer.js";
+import type { Route } from "./types.js";
 interface AgentSessionDeps {
     cognito?: CognitoRevoker;
-    auditEmitter?: AuditEventEmitter;
+    auditEmitter?: TenantAuditEmitter;
 }
 export declare function _setAgentSessionDepsForTest(d: AgentSessionDeps): void;
 export declare function _resetAgentSessionDepsForTest(): void;

package/dist/lib/routes/agent-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-sessions.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/agent-sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAUlD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,UAAU,gBAAgB;IACxB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAID,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAErE;AAED,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAmCD,eAAO,MAAM,mBAAmB,EAAE,KAAK,EAgFtC,CAAC"}
+{"version":3,"file":"agent-sessions.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/agent-sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAU1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,UAAU,gBAAgB;IACxB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAID,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAErE;AAED,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAmCD,eAAO,MAAM,mBAAmB,EAAE,KAAK,EAgFtC,CAAC"}

package/dist/lib/routes/agent-sessions.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * User-facing agent session management (T9b-d).
  *
@@ -7,34 +6,30 @@
  *
  * Backed by the AGENT_REFRESH_TABLE rows written by the device-auth flow.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.agentSessionsRoutes = void 0;
-exports._setAgentSessionDepsForTest = _setAgentSessionDepsForTest;
-exports._resetAgentSessionDepsForTest = _resetAgentSessionDepsForTest;
-const refresh_detection_1 = require("../oauth/refresh-detection");
-const auth_middleware_1 = require("../auth/auth-middleware");
-const emit_1 = require("../audit/emit");
-const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
-const db_1 = require("../../db");
-const middleware_1 = require("../middleware");
-const trusted_client_ip_1 = require("../net/trusted-client-ip");
-const security_headers_1 = require("../security-headers");
-const errors_1 = require("./errors");
+import { getAgentSession, listAgentSessions, revokeAgentSession, } from "../oauth/refresh-detection.js";
+import { authMiddleware } from "../auth/auth-middleware.js";
+import { TenantAuditEmitter } from "../audit-composer.js";
+import { AdminUserGlobalSignOutCommand, CognitoIdentityProviderClient, } from "@aws-sdk/client-cognito-identity-provider";
+import { createPrisma } from "../../db.js";
+import { corsMiddleware, csrfMiddleware } from "../middleware.js";
+import { trustedClientIp } from "../net/trusted-client-ip.js";
+import { SecurityHeaders } from "../security-headers.js";
+import { structuredError, unauthorizedError } from "./errors.js";
 let deps = {};
-function _setAgentSessionDepsForTest(d) {
+export function _setAgentSessionDepsForTest(d) {
     deps = d;
 }
-function _resetAgentSessionDepsForTest() {
+export function _resetAgentSessionDepsForTest() {
     deps = {};
 }
 function getCognito() {
     if (deps.cognito)
         return deps.cognito;
     const region = process.env.COGNITO_REGION || process.env.AWS_REGION || "us-east-1";
-    const client = new client_cognito_identity_provider_1.CognitoIdentityProviderClient({ region });
+    const client = new CognitoIdentityProviderClient({ region });
     return {
         async globalSignOut(input) {
-            await client.send(new client_cognito_identity_provider_1.AdminUserGlobalSignOutCommand({
+            await client.send(new AdminUserGlobalSignOutCommand({
                 UserPoolId: input.userPoolId,
                 Username: input.cognitoUsername,
             }));
@@ -42,7 +37,7 @@ function getCognito() {
     };
 }
 function getAudit() {
-    return deps.auditEmitter ?? new emit_1.AuditEventEmitter();
+    return deps.auditEmitter ?? new TenantAuditEmitter();
 }
 function publicShape(rec) {
     return {
@@ -55,41 +50,41 @@ function publicShape(rec) {
     };
 }
 const REVOKE_RE = /^\/api\/users\/me\/agent-sessions\/([^/]+)\/revoke$/;
-exports.agentSessionsRoutes = [
+export const agentSessionsRoutes = [
     {
         path: "/api/users/me/agent-sessions",
         method: "GET",
         handler: async (request, env) => {
-            const sec = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const sec = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(sec);
-            const sessions = await (0, refresh_detection_1.listAgentSessions)(auth.userId);
+                return unauthorizedError(sec);
+            const sessions = await listAgentSessions(auth.userId);
             return sec.createSecureResponse(JSON.stringify({ sessions: sessions.map(publicShape) }), { status: 200, headers: { "content-type": "application/json" } });
         },
-        middleware: [(0, middleware_1.corsMiddleware)()],
+        middleware: [corsMiddleware()],
         description: "List active agent sessions for the current user",
     },
     {
         path: REVOKE_RE,
         method: "POST",
         handler: async (request, env, { pathname }) => {
-            const sec = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const sec = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(sec);
+                return unauthorizedError(sec);
             const sessionId = pathname.match(REVOKE_RE)?.[1];
             if (!sessionId) {
-                return (0, errors_1.structuredError)(400, {
+                return structuredError(400, {
                     error: "INVALID_REQUEST",
                     message: "Session ID is required.",
                     remediation: "Ensure the session ID is included in the URL path.",
                 }, sec);
             }
-            const session = await (0, refresh_detection_1.getAgentSession)(sessionId);
+            const session = await getAgentSession(sessionId);
             if (!session || session.userId !== auth.userId) {
                 // 404 — don't reveal cross-user existence.
-                return (0, errors_1.structuredError)(404, {
+                return structuredError(404, {
                     error: "NOT_FOUND",
                     message: "Agent session not found.",
                     remediation: "Verify the session ID and ensure it belongs to your account.",
@@ -102,8 +97,8 @@ exports.agentSessionsRoutes = [
             const cognito = getCognito();
             const audit = getAudit();
             // Audit emitter wants a Prisma client — supply the standard shape.
-            const prisma = (0, db_1.createPrisma)(env);
-            await (0, refresh_detection_1.revokeAgentSession)({
+            const prisma = createPrisma(env);
+            await revokeAgentSession({
                 sessionId,
                 userPoolId,
                 cognitoUsername: session.cognitoSub,
@@ -113,11 +108,11 @@ exports.agentSessionsRoutes = [
                 },
                 tenantId: session.tenantId,
                 actorUserId: auth.userId,
-                sourceIp: (0, trusted_client_ip_1.trustedClientIp)(request, env),
+                sourceIp: trustedClientIp(request, env),
             });
             return sec.createSecureResponse(JSON.stringify({ status: "revoked" }), { status: 200, headers: { "content-type": "application/json" } });
         },
-        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        middleware: [corsMiddleware(), csrfMiddleware()],
         description: "Revoke an agent session",
     },
 ];

package/dist/lib/routes/agent-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-sessions.js","sourceRoot":"","sources":["../../../src/lib/routes/agent-sessions.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AA6BH,kEAEC;AAED,sEAEC;AAjCD,kEAMoC;AACpC,6DAAyD;AACzD,wCAAkD;AAClD,gGAGmD;AACnD,iCAAwC;AACxC,8CAA+D;AAC/D,gEAA2D;AAC3D,0DAAsD;AACtD,qCAA8D;AAQ9D,IAAI,IAAI,GAAqB,EAAE,CAAC;AAEhC,SAAgB,2BAA2B,CAAC,CAAmB;IAC7D,IAAI,GAAG,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,6BAA6B;IAC3C,IAAI,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,gEAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,gEAA6B,CAAC;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,eAAe;aAChC,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,wBAAiB,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,SAAS;QACjB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACvD,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACzD,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,qDAAqD,CAAC;AAE3D,QAAA,mBAAmB,GAAY;IAC1C;QACE,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAC;YAEzC,MAAM,QAAQ,GAAG,MAAM,IAAA,qCAAiB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtD,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,EACvD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,iDAAiD;KAC/D;IAED;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAC;YAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,yBAAyB;oBAClC,WAAW,EAAE,oDAAoD;iBAClE,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAA,mCAAe,EAAC,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/C,2CAA2C;gBAC3C,OAAO,IAAA,wBAAe,EAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,8DAA8D;iBAC5E,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;YAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,mEAAmE;YACnE,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;YAEjC,MAAM,IAAA,sCAAkB,EAAC;gBACvB,SAAS;gBACT,UAAU;gBACV,eAAe,EAAE,OAAO,CAAC,UAAU;gBACnC,OAAO;gBACP,KAAK,EAAE;oBACL,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAc,EAAE,MAAe,CAAC;iBACnE;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,QAAQ,EAAE,IAAA,mCAAe,EAAC,OAAO,EAAE,GAAG,CAAC;aACxC,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EACrC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,yBAAyB;KACvC;CACF,CAAC"}
+{"version":3,"file":"agent-sessions.js","sourceRoot":"","sources":["../../../src/lib/routes/agent-sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GAGnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQjE,IAAI,IAAI,GAAqB,EAAE,CAAC;AAEhC,MAAM,UAAU,2BAA2B,CAAC,CAAmB;IAC7D,IAAI,GAAG,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,IAAI,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,6BAA6B,CAAC;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,eAAe;aAChC,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,kBAAkB,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,SAAS;QACjB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACvD,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACzD,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,qDAAqD,CAAC;AAExE,MAAM,CAAC,MAAM,mBAAmB,GAAY;IAC1C;QACE,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAEzC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtD,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,EACvD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC;QAC9B,WAAW,EAAE,iDAAiD;KAC/D;IAED;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,yBAAyB;oBAClC,WAAW,EAAE,oDAAoD;iBAClE,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/C,2CAA2C;gBAC3C,OAAO,eAAe,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,0BAA0B;oBACnC,WAAW,EAAE,8DAA8D;iBAC5E,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;YAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAC3C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,mEAAmE;YACnE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAEjC,MAAM,kBAAkB,CAAC;gBACvB,SAAS;gBACT,UAAU;gBACV,eAAe,EAAE,OAAO,CAAC,UAAU;gBACnC,OAAO;gBACP,KAAK,EAAE;oBACL,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAc,EAAE,MAAe,CAAC;iBACnE;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,QAAQ,EAAE,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC;aACxC,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC,oBAAoB,CAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EACrC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC;QAChD,WAAW,EAAE,yBAAyB;KACvC;CACF,CAAC"}