@digimuza/saas-core 0.0.2

package/dist/workspaces/service.d.ts

@@ -0,0 +1,126 @@
+import type { CoreDatabase } from "../db/types.ts";
+import { type CoreEventPublisher } from "../events/publisher.ts";
+import type { Role, Workspace, WorkspaceInvitation } from "../db/schema/index.ts";
+import { type WorkspaceContext } from "./context.ts";
+/** Roles created with every new workspace, so a workspace is never role-less. */
+export interface SystemRoleDefinition {
+    readonly key: string;
+    readonly name: string;
+    readonly description?: string;
+    /** Granted to new members when an invitation names no role. */
+    readonly isDefault?: boolean;
+    /** Permission keys to grant. Must already exist in `permissions`. */
+    readonly permissions?: readonly string[];
+}
+/**
+ * Default role set for a new workspace.
+ *
+ * `admin` receives permissions explicitly registered by the application, so the
+ * core does not invent a permission vocabulary. See
+ * `authorization.registerPermissions()`.
+ */
+export declare const DEFAULT_SYSTEM_ROLES: readonly SystemRoleDefinition[];
+export interface WorkspaceMemberSummary {
+    readonly userId: string;
+    readonly email: string | null;
+    readonly displayName: string | null;
+    readonly avatarUrl: string | null;
+    readonly joinedAt: Date;
+    readonly roles: readonly Pick<Role, "id" | "key" | "name">[];
+}
+export interface CreateWorkspaceInput {
+    readonly name: string;
+    /** URL identifier. Derived from `name` when omitted. */
+    readonly slug?: string;
+    /** The creating user. Becomes the first member, with the `admin` role. */
+    readonly ownerUserId: string;
+    /** Overrides {@link DEFAULT_SYSTEM_ROLES}. */
+    readonly systemRoles?: readonly SystemRoleDefinition[];
+}
+export interface InviteMemberInput {
+    readonly email: string;
+    /** Role granted on acceptance. Falls back to the workspace default role. */
+    readonly roleId?: string;
+    readonly expiresInSeconds?: number;
+}
+export interface InvitationWithToken {
+    readonly invitation: WorkspaceInvitation;
+    /**
+     * The single-use token, to be emailed to the invitee.
+     *
+     * Only the hash is stored, so this is the one and only time the token is
+     * available. Losing it means revoking the invitation and issuing a new one.
+     */
+    readonly token: string;
+}
+export interface AcceptInvitationInput {
+    readonly token: string;
+    /** The authenticated user accepting. Never taken from the invitation payload. */
+    readonly userId: string;
+}
+export declare function slugify(value: string): string;
+export interface WorkspacesService {
+    create(input: CreateWorkspaceInput): Promise<Workspace>;
+    /** Look up a workspace the caller is a member of. */
+    get(context: WorkspaceContext): Promise<Workspace>;
+    update(context: WorkspaceContext, patch: {
+        name?: string;
+        slug?: string;
+    }): Promise<Workspace>;
+    delete(context: WorkspaceContext): Promise<void>;
+    /** Every workspace the user belongs to. */
+    listForUser(userId: string): Promise<Workspace[]>;
+    /**
+     * Verify that `userId` is a member of `workspaceId` and return a context.
+     *
+     * This is the only sanctioned way to turn an untrusted workspace identifier
+     * into something the rest of the core will accept.
+     */
+    resolveContext(input: {
+        userId: string;
+        workspaceId: string;
+    }): Promise<WorkspaceContext | undefined>;
+    /**
+     * As {@link resolveContext}, but throws.
+     *
+     * Raises {@link NotFoundError} rather than a permission error: telling a
+     * non-member that a workspace exists would let them enumerate other tenants.
+     */
+    requireContext(input: {
+        userId: string;
+        workspaceId: string;
+    }): Promise<WorkspaceContext>;
+    /** Resolve by slug, still verifying membership. */
+    requireContextBySlug(input: {
+        userId: string;
+        slug: string;
+    }): Promise<WorkspaceContext>;
+    readonly members: {
+        list(context: WorkspaceContext): Promise<WorkspaceMemberSummary[]>;
+        /** Add an existing user directly, bypassing the invitation flow. */
+        add(context: WorkspaceContext, input: {
+            userId: string;
+            roleIds?: readonly string[];
+        }): Promise<void>;
+        remove(context: WorkspaceContext, userId: string): Promise<void>;
+        invite(context: WorkspaceContext, input: InviteMemberInput): Promise<InvitationWithToken>;
+        listInvitations(context: WorkspaceContext): Promise<WorkspaceInvitation[]>;
+        revokeInvitation(context: WorkspaceContext, invitationId: string): Promise<void>;
+        /** Redeem a token. Not workspace-scoped: the token identifies the workspace. */
+        acceptInvitation(input: AcceptInvitationInput): Promise<WorkspaceContext>;
+    };
+}
+export interface WorkspacesServiceDeps {
+    readonly db: CoreDatabase;
+    /**
+     * Optional event publisher.
+     *
+     * Omit it and the service behaves exactly as before, emitting nothing — so
+     * events are opt-in rather than a hidden dependency. When provided, each event
+     * is written in the same transaction as the state change it describes and
+     * dispatched only after that transaction commits.
+     */
+    readonly events?: CoreEventPublisher;
+}
+export declare function createWorkspacesService(deps: WorkspacesServiceDeps): WorkspacesService;
+//# sourceMappingURL=service.d.ts.map

package/dist/workspaces/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/workspaces/service.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAmB,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAe,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE7E,iFAAiF;AACjF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,oBAAoB,EAG/D,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAKD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAa7C;AAOD,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAExD,qDAAqD;IACrD,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnD,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/F,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjD,2CAA2C;IAC3C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAElD;;;;;OAKG;IACH,cAAc,CAAC,KAAK,EAAE;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE1C;;;;;OAKG;IACH,cAAc,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE1F,mDAAmD;IACnD,oBAAoB,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEzF,QAAQ,CAAC,OAAO,EAAE;QAChB,IAAI,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;QACnE,oEAAoE;QACpE,GAAG,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACtG,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC1F,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC3E,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACjF,gFAAgF;QAChF,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;KAC3E,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CAkmBtF"}

package/dist/workspaces/service.js

@@ -0,0 +1,495 @@
+import { createHash, randomBytes } from "node:crypto";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { ConflictError, InvalidInputError, NotFoundError } from "../errors.js";
+import { isUniqueViolation } from "../db/errors.js";
+import { roles, userProfiles, users, workspaceInvitations, workspaceMemberRoles, workspaceMembers, workspaces, } from "../db/schema/index.js";
+import { EventOutbox } from "../events/publisher.js";
+import { unsafeWorkspaceContext } from "./context.js";
+/**
+ * Default role set for a new workspace.
+ *
+ * `admin` receives permissions explicitly registered by the application, so the
+ * core does not invent a permission vocabulary. See
+ * `authorization.registerPermissions()`.
+ */
+export const DEFAULT_SYSTEM_ROLES = [
+    { key: "admin", name: "Admin", description: "Full access to the workspace." },
+    { key: "member", name: "Member", description: "Standard access.", isDefault: true },
+];
+/** 7 days. */
+const DEFAULT_INVITATION_TTL_SECONDS = 60 * 60 * 24 * 7;
+export function slugify(value) {
+    const slug = value
+        .normalize("NFKD")
+        .replace(/[̀-ͯ]/g, "")
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, 60);
+    if (slug.length === 0) {
+        throw new InvalidInputError("Workspace name must contain at least one alphanumeric character.");
+    }
+    return slug;
+}
+/** Invitation tokens are compared by hash, so the digest must be deterministic. */
+function hashToken(token) {
+    return createHash("sha256").update(token).digest("hex");
+}
+export function createWorkspacesService(deps) {
+    const outbox = () => new EventOutbox(deps.events);
+    async function findMembership(userId, workspaceId) {
+        const rows = await deps.db
+            .select({ userId: workspaceMembers.userId })
+            .from(workspaceMembers)
+            .where(and(eq(workspaceMembers.workspaceId, workspaceId), eq(workspaceMembers.userId, userId)))
+            .limit(1);
+        return rows.length > 0;
+    }
+    async function seedRoles(tx, workspaceId, definitions) {
+        return tx
+            .insert(roles)
+            .values(definitions.map((definition) => ({
+            workspaceId,
+            key: definition.key,
+            name: definition.name,
+            description: definition.description ?? null,
+            isSystem: true,
+            isDefault: definition.isDefault ?? false,
+        })))
+            .returning();
+    }
+    const members = {
+        async list(context) {
+            const rows = await deps.db
+                .select({
+                userId: workspaceMembers.userId,
+                joinedAt: workspaceMembers.createdAt,
+                email: userProfiles.email,
+                displayName: userProfiles.displayName,
+                avatarUrl: userProfiles.avatarUrl,
+                roleId: roles.id,
+                roleKey: roles.key,
+                roleName: roles.name,
+            })
+                .from(workspaceMembers)
+                .leftJoin(userProfiles, eq(userProfiles.userId, workspaceMembers.userId))
+                .leftJoin(workspaceMemberRoles, and(eq(workspaceMemberRoles.workspaceId, workspaceMembers.workspaceId), eq(workspaceMemberRoles.userId, workspaceMembers.userId)))
+                .leftJoin(roles, eq(roles.id, workspaceMemberRoles.roleId))
+                .where(eq(workspaceMembers.workspaceId, context.workspaceId));
+            // One row per member/role pair; fold roles into their member.
+            const byUser = new Map();
+            const collected = new Map();
+            for (const row of rows) {
+                if (!byUser.has(row.userId)) {
+                    byUser.set(row.userId, {
+                        userId: row.userId,
+                        email: row.email,
+                        displayName: row.displayName,
+                        avatarUrl: row.avatarUrl,
+                        joinedAt: row.joinedAt,
+                        roles: [],
+                    });
+                    collected.set(row.userId, []);
+                }
+                if (row.roleId !== null && row.roleKey !== null && row.roleName !== null) {
+                    collected.get(row.userId).push({ id: row.roleId, key: row.roleKey, name: row.roleName });
+                }
+            }
+            return [...byUser.values()].map((member) => ({
+                ...member,
+                roles: collected.get(member.userId) ?? [],
+            }));
+        },
+        async add(context, input) {
+            const events = outbox();
+            await deps.db.transaction(async (tx) => {
+                await tx
+                    .insert(workspaceMembers)
+                    .values({ workspaceId: context.workspaceId, userId: input.userId })
+                    .onConflictDoNothing();
+                let roleIds;
+                if (input.roleIds !== undefined) {
+                    roleIds = input.roleIds;
+                }
+                else {
+                    const defaultRole = await tx
+                        .select({ id: roles.id })
+                        .from(roles)
+                        .where(and(eq(roles.workspaceId, context.workspaceId), eq(roles.isDefault, true)))
+                        .limit(1);
+                    roleIds = defaultRole.map((row) => row.id);
+                }
+                if (roleIds.length > 0) {
+                    await tx
+                        .insert(workspaceMemberRoles)
+                        .values(roleIds.map((roleId) => ({
+                        workspaceId: context.workspaceId,
+                        userId: input.userId,
+                        roleId,
+                    })))
+                        .onConflictDoNothing();
+                }
+                await events.record({
+                    type: "workspace.member.created",
+                    workspaceId: context.workspaceId,
+                    actorId: context.userId,
+                    data: { userId: input.userId, roleIds: [...roleIds] },
+                }, tx);
+            });
+            await events.flush();
+        },
+        async remove(context, userId) {
+            /**
+             * Delete first, then check what is left, inside one transaction.
+             *
+             * Counting before deleting would be wrong twice over: it reports
+             * "last member" for a user who is not a member at all — leaking the
+             * workspace's member count to an outsider — and it races, since two
+             * concurrent removals could each see two members and both proceed.
+             * Throwing here rolls the delete back.
+             */
+            const events = outbox();
+            await deps.db.transaction(async (tx) => {
+                const deleted = await tx
+                    .delete(workspaceMembers)
+                    .where(and(eq(workspaceMembers.workspaceId, context.workspaceId), eq(workspaceMembers.userId, userId)))
+                    .returning({ userId: workspaceMembers.userId });
+                // Scoped to the caller's workspace, so a member of another tenant
+                // matches nothing and is reported as not found.
+                if (deleted.length === 0) {
+                    throw new NotFoundError("Workspace member not found.");
+                }
+                const remaining = await tx
+                    .select({ count: sql `count(*)::int` })
+                    .from(workspaceMembers)
+                    .where(eq(workspaceMembers.workspaceId, context.workspaceId));
+                // An empty workspace is unreachable: nobody left to administer it.
+                if ((remaining[0]?.count ?? 0) === 0) {
+                    throw new ConflictError("A workspace must keep at least one member.");
+                }
+                await events.record({
+                    type: "workspace.member.removed",
+                    workspaceId: context.workspaceId,
+                    actorId: context.userId,
+                    data: { userId },
+                }, tx);
+            });
+            await events.flush();
+            // Role grants cascade via workspace_member_roles_member_fk.
+        },
+        async invite(context, input) {
+            const email = input.email.trim().toLowerCase();
+            if (email.length === 0 || !email.includes("@")) {
+                throw new InvalidInputError("A valid email address is required.");
+            }
+            const token = randomBytes(32).toString("base64url");
+            const expiresAt = new Date(Date.now() + (input.expiresInSeconds ?? DEFAULT_INVITATION_TTL_SECONDS) * 1000);
+            const events = outbox();
+            try {
+                const invitation = await deps.db.transaction(async (tx) => {
+                    const [created] = await tx
+                        .insert(workspaceInvitations)
+                        .values({
+                        workspaceId: context.workspaceId,
+                        email,
+                        tokenHash: hashToken(token),
+                        invitedByUserId: context.userId,
+                        roleId: input.roleId ?? null,
+                        expiresAt,
+                    })
+                        .returning();
+                    await events.record({
+                        type: "workspace.invitation.created",
+                        workspaceId: context.workspaceId,
+                        actorId: context.userId,
+                        // The token is never included: events are durable and readable,
+                        // and an invitation token is a bearer credential.
+                        data: { invitationId: created.id, email, roleId: created.roleId },
+                    }, tx);
+                    return created;
+                });
+                await events.flush();
+                return { invitation, token };
+            }
+            catch (error) {
+                if (isUniqueViolation(error, "workspace_invitations_pending_idx")) {
+                    throw new ConflictError("An invitation for this address is already outstanding.", {
+                        cause: error,
+                    });
+                }
+                throw error;
+            }
+        },
+        async listInvitations(context) {
+            return deps.db
+                .select()
+                .from(workspaceInvitations)
+                .where(and(eq(workspaceInvitations.workspaceId, context.workspaceId), isNull(workspaceInvitations.acceptedAt), isNull(workspaceInvitations.revokedAt)));
+        },
+        async revokeInvitation(context, invitationId) {
+            const events = outbox();
+            const revoked = await deps.db
+                .update(workspaceInvitations)
+                .set({ revokedAt: new Date(), updatedAt: new Date() })
+                .where(and(eq(workspaceInvitations.id, invitationId), 
+            // Scoped to the caller's workspace, so an id from another tenant
+            // cannot be revoked.
+            eq(workspaceInvitations.workspaceId, context.workspaceId), isNull(workspaceInvitations.acceptedAt), isNull(workspaceInvitations.revokedAt)))
+                .returning({ id: workspaceInvitations.id });
+            if (revoked.length === 0) {
+                throw new NotFoundError("Outstanding invitation not found.");
+            }
+            await events.record({
+                type: "workspace.invitation.revoked",
+                workspaceId: context.workspaceId,
+                actorId: context.userId,
+                data: { invitationId },
+            }, deps.db);
+            await events.flush();
+        },
+        async acceptInvitation(input) {
+            const tokenHash = hashToken(input.token);
+            const events = outbox();
+            const accepted = await deps.db.transaction(async (tx) => {
+                const rows = await tx
+                    .select()
+                    .from(workspaceInvitations)
+                    .where(eq(workspaceInvitations.tokenHash, tokenHash))
+                    .limit(1);
+                const invitation = rows[0];
+                /**
+                 * A single "invalid invitation" for missing, revoked, accepted and
+                 * expired tokens: distinguishing them would tell a token-guessing
+                 * attacker which guesses corresponded to real invitations.
+                 */
+                if (invitation === undefined ||
+                    invitation.acceptedAt !== null ||
+                    invitation.revokedAt !== null ||
+                    invitation.expiresAt.getTime() <= Date.now()) {
+                    throw new NotFoundError("Invitation is invalid or has expired.");
+                }
+                /**
+                 * Mark accepted with the same guard in the WHERE clause, so two
+                 * concurrent redemptions cannot both succeed.
+                 */
+                const claimed = await tx
+                    .update(workspaceInvitations)
+                    .set({ acceptedAt: new Date(), updatedAt: new Date() })
+                    .where(and(eq(workspaceInvitations.id, invitation.id), isNull(workspaceInvitations.acceptedAt), isNull(workspaceInvitations.revokedAt)))
+                    .returning({ id: workspaceInvitations.id });
+                if (claimed.length === 0) {
+                    throw new NotFoundError("Invitation is invalid or has expired.");
+                }
+                await tx
+                    .insert(workspaceMembers)
+                    .values({ workspaceId: invitation.workspaceId, userId: input.userId })
+                    .onConflictDoNothing();
+                const roleId = invitation.roleId ??
+                    (await tx
+                        .select({ id: roles.id })
+                        .from(roles)
+                        .where(and(eq(roles.workspaceId, invitation.workspaceId), eq(roles.isDefault, true)))
+                        .limit(1))[0]?.id;
+                if (roleId !== undefined) {
+                    await tx
+                        .insert(workspaceMemberRoles)
+                        .values({
+                        workspaceId: invitation.workspaceId,
+                        userId: input.userId,
+                        roleId,
+                    })
+                        .onConflictDoNothing();
+                }
+                await events.record({
+                    type: "workspace.invitation.accepted",
+                    workspaceId: invitation.workspaceId,
+                    actorId: input.userId,
+                    data: { invitationId: invitation.id, userId: input.userId },
+                }, tx);
+                await events.record({
+                    type: "workspace.member.created",
+                    workspaceId: invitation.workspaceId,
+                    actorId: input.userId,
+                    data: { userId: input.userId, roleIds: roleId !== undefined ? [roleId] : [] },
+                }, tx);
+                return unsafeWorkspaceContext(input.userId, invitation.workspaceId);
+            });
+            await events.flush();
+            return accepted;
+        },
+    };
+    return {
+        async create(input) {
+            const slug = input.slug !== undefined ? slugify(input.slug) : slugify(input.name);
+            const definitions = input.systemRoles ?? DEFAULT_SYSTEM_ROLES;
+            const events = outbox();
+            try {
+                const workspace = await deps.db.transaction(async (tx) => {
+                    const [workspace] = await tx
+                        .insert(workspaces)
+                        .values({ name: input.name, slug })
+                        .returning();
+                    const created = await seedRoles(tx, workspace.id, definitions);
+                    await tx
+                        .insert(workspaceMembers)
+                        .values({ workspaceId: workspace.id, userId: input.ownerUserId });
+                    /**
+                     * The creator gets `admin` if it exists, otherwise the default role.
+                     * Without this a new workspace would have no one able to administer it.
+                     */
+                    const ownerRole = created.find((role) => role.key === "admin") ??
+                        created.find((role) => role.isDefault) ??
+                        created[0];
+                    if (ownerRole !== undefined) {
+                        await tx.insert(workspaceMemberRoles).values({
+                            workspaceId: workspace.id,
+                            userId: input.ownerUserId,
+                            roleId: ownerRole.id,
+                        });
+                    }
+                    await events.record({
+                        type: "workspace.created",
+                        workspaceId: workspace.id,
+                        actorId: input.ownerUserId,
+                        data: { workspaceId: workspace.id, slug },
+                    }, tx);
+                    await events.record({
+                        type: "workspace.member.created",
+                        workspaceId: workspace.id,
+                        actorId: input.ownerUserId,
+                        data: {
+                            userId: input.ownerUserId,
+                            roleIds: ownerRole !== undefined ? [ownerRole.id] : [],
+                        },
+                    }, tx);
+                    return workspace;
+                });
+                await events.flush();
+                return workspace;
+            }
+            catch (error) {
+                if (isUniqueViolation(error, "workspaces_slug_unique")) {
+                    throw new ConflictError(`Workspace slug "${slug}" is already taken.`, { cause: error });
+                }
+                throw error;
+            }
+        },
+        async get(context) {
+            const rows = await deps.db
+                .select()
+                .from(workspaces)
+                .where(eq(workspaces.id, context.workspaceId))
+                .limit(1);
+            const workspace = rows[0];
+            if (workspace === undefined) {
+                throw new NotFoundError("Workspace not found.");
+            }
+            return workspace;
+        },
+        async update(context, patch) {
+            const next = { updatedAt: new Date() };
+            if (patch.name !== undefined) {
+                next.name = patch.name;
+            }
+            if (patch.slug !== undefined) {
+                next.slug = slugify(patch.slug);
+            }
+            const events = outbox();
+            try {
+                const workspace = await deps.db.transaction(async (tx) => {
+                    const [updated] = await tx
+                        .update(workspaces)
+                        .set(next)
+                        .where(eq(workspaces.id, context.workspaceId))
+                        .returning();
+                    if (updated === undefined) {
+                        throw new NotFoundError("Workspace not found.");
+                    }
+                    const changed = ["name", "slug"].filter((field) => patch[field] !== undefined);
+                    await events.record({
+                        type: "workspace.updated",
+                        workspaceId: context.workspaceId,
+                        actorId: context.userId,
+                        data: { workspaceId: context.workspaceId, changed },
+                    }, tx);
+                    return updated;
+                });
+                await events.flush();
+                return workspace;
+            }
+            catch (error) {
+                if (isUniqueViolation(error, "workspaces_slug_unique")) {
+                    throw new ConflictError("Workspace slug is already taken.", { cause: error });
+                }
+                throw error;
+            }
+        },
+        async delete(context) {
+            /**
+             * The event is recorded before the delete in the same transaction, because
+             * `events.workspace_id` cascades — writing it afterwards would insert a row
+             * referencing a workspace that no longer exists.
+             */
+            const events = outbox();
+            await deps.db.transaction(async (tx) => {
+                const rows = await tx
+                    .select({ slug: workspaces.slug })
+                    .from(workspaces)
+                    .where(eq(workspaces.id, context.workspaceId))
+                    .limit(1);
+                const existing = rows[0];
+                if (existing === undefined) {
+                    throw new NotFoundError("Workspace not found.");
+                }
+                await events.record({
+                    type: "workspace.deleted",
+                    // Deliberately not workspace-scoped: the cascade would remove it.
+                    workspaceId: null,
+                    actorId: context.userId,
+                    data: { workspaceId: context.workspaceId, slug: existing.slug },
+                }, tx);
+                await tx.delete(workspaces).where(eq(workspaces.id, context.workspaceId));
+            });
+            await events.flush();
+        },
+        async listForUser(userId) {
+            return deps.db
+                .select({
+                id: workspaces.id,
+                name: workspaces.name,
+                slug: workspaces.slug,
+                createdAt: workspaces.createdAt,
+                updatedAt: workspaces.updatedAt,
+            })
+                .from(workspaces)
+                .innerJoin(workspaceMembers, eq(workspaceMembers.workspaceId, workspaces.id))
+                .where(eq(workspaceMembers.userId, userId));
+        },
+        async resolveContext({ userId, workspaceId }) {
+            const isMember = await findMembership(userId, workspaceId);
+            return isMember ? unsafeWorkspaceContext(userId, workspaceId) : undefined;
+        },
+        async requireContext({ userId, workspaceId }) {
+            const context = await this.resolveContext({ userId, workspaceId });
+            if (context === undefined) {
+                throw new NotFoundError("Workspace not found.");
+            }
+            return context;
+        },
+        async requireContextBySlug({ userId, slug }) {
+            const rows = await deps.db
+                .select({ workspaceId: workspaces.id })
+                .from(workspaces)
+                .innerJoin(workspaceMembers, and(eq(workspaceMembers.workspaceId, workspaces.id), eq(workspaceMembers.userId, userId)))
+                .where(eq(workspaces.slug, slug))
+                .limit(1);
+            const row = rows[0];
+            if (row === undefined) {
+                throw new NotFoundError("Workspace not found.");
+            }
+            return unsafeWorkspaceContext(userId, row.workspaceId);
+        },
+        members,
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/workspaces/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/workspaces/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,KAAK,EACL,YAAY,EACZ,KAAK,EACL,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,GACX,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,WAAW,EAA2B,MAAM,wBAAwB,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAyB,MAAM,cAAc,CAAC;AAa7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoC;IACnE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,+BAA+B,EAAE;IAC7E,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE;CACpF,CAAC;AA6CF,cAAc;AACd,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAExD,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,IAAI,GAAG,KAAK;SACf,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,iBAAiB,CAAC,kEAAkE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AA+DD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,MAAM,GAAG,GAAgB,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/D,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,WAAmB;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC;aAC3C,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACxF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,EAAmB,EACnB,WAAmB,EACnB,WAA4C;QAE5C,OAAO,EAAE;aACN,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CACL,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC/B,WAAW;YACX,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;YAC3C,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,KAAK;SACzC,CAAC,CAAC,CACJ;aACA,SAAS,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAiC;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;iBACvB,MAAM,CAAC;gBACN,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,QAAQ,EAAE,gBAAgB,CAAC,SAAS;gBACpC,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChB,OAAO,EAAE,KAAK,CAAC,GAAG;gBAClB,QAAQ,EAAE,KAAK,CAAC,IAAI;aACrB,CAAC;iBACD,IAAI,CAAC,gBAAgB,CAAC;iBACtB,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;iBACxE,QAAQ,CACP,oBAAoB,EACpB,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC,EAClE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CACzD,CACF;iBACA,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;iBAC1D,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAEhE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4D,CAAC;YACnF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+C,CAAC;YAEzE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;wBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,WAAW,EAAE,GAAG,CAAC,WAAW;wBAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,KAAK,EAAE,EAAE;qBACV,CAAC,CAAC;oBACH,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACzE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC3C,GAAG,MAAM;gBACT,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;aAC1C,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK;YACtB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACrC,MAAM,EAAE;qBACL,MAAM,CAAC,gBAAgB,CAAC;qBACxB,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;qBAClE,mBAAmB,EAAE,CAAC;gBAEzB,IAAI,OAA0B,CAAC;gBAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,WAAW,GAAG,MAAM,EAAE;yBACzB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;yBACxB,IAAI,CAAC,KAAK,CAAC;yBACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;yBACjF,KAAK,CAAC,CAAC,CAAC,CAAC;oBACZ,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,EAAE;yBACL,MAAM,CAAC,oBAAoB,CAAC;yBAC5B,MAAM,CACL,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;wBACvB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,MAAM;qBACP,CAAC,CAAC,CACJ;yBACA,mBAAmB,EAAE,CAAC;gBAC3B,CAAC;gBAED,MAAM,MAAM,CAAC,MAAM,CACjB;oBACE,IAAI,EAAE,0BAA0B;oBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE;iBACtD,EACD,EAAE,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM;YAC1B;;;;;;;;eAQG;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACrC,MAAM,OAAO,GAAG,MAAM,EAAE;qBACrB,MAAM,CAAC,gBAAgB,CAAC;qBACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACrD,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CACpC,CACF;qBACA,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;gBAElD,kEAAkE;gBAClE,gDAAgD;gBAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;gBACzD,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,EAAE;qBACvB,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;qBAC7C,IAAI,CAAC,gBAAgB,CAAC;qBACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBAEhE,mEAAmE;gBACnE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;gBACxE,CAAC;gBAED,MAAM,MAAM,CAAC,MAAM,CACjB;oBACE,IAAI,EAAE,0BAA0B;oBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,IAAI,EAAE,EAAE,MAAM,EAAE;iBACjB,EACD,EAAE,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,4DAA4D;QAC9D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,8BAA8B,CAAC,GAAG,IAAI,CAC/E,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBACxD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;yBACvB,MAAM,CAAC,oBAAoB,CAAC;yBAC5B,MAAM,CAAC;wBACN,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,KAAK;wBACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;wBAC3B,eAAe,EAAE,OAAO,CAAC,MAAM;wBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;wBAC5B,SAAS;qBACV,CAAC;yBACD,SAAS,EAAE,CAAC;oBAEf,MAAM,MAAM,CAAC,MAAM,CACjB;wBACE,IAAI,EAAE,8BAA8B;wBACpC,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO,EAAE,OAAO,CAAC,MAAM;wBACvB,gEAAgE;wBAChE,kDAAkD;wBAClD,IAAI,EAAE,EAAE,YAAY,EAAE,OAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAQ,CAAC,MAAM,EAAE;qBACpE,EACD,EAAE,CACH,CAAC;oBAEF,OAAO,OAAQ,CAAC;gBAClB,CAAC,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,iBAAiB,CAAC,KAAK,EAAE,mCAAmC,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,aAAa,CAAC,wDAAwD,EAAE;wBAChF,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,OAAO;YAC3B,OAAO,IAAI,CAAC,EAAE;iBACX,MAAM,EAAE;iBACR,IAAI,CAAC,oBAAoB,CAAC;iBAC1B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACzD,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,EACvC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CACvC,CACF,CAAC;QACN,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY;YAC1C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC1B,MAAM,CAAC,oBAAoB,CAAC;iBAC5B,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAE,YAAY,CAAC;YACzC,iEAAiE;YACjE,qBAAqB;YACrB,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACzD,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,EACvC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CACvC,CACF;iBACA,SAAS,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;YAE9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,mCAAmC,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,MAAM,CAAC,MAAM,CACjB;gBACE,IAAI,EAAE,8BAA8B;gBACpC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,IAAI,EAAE,EAAE,YAAY,EAAE;aACvB,EACD,IAAI,CAAC,EAAE,CACR,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,KAAK;YAC1B,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACtD,MAAM,IAAI,GAAG,MAAM,EAAE;qBAClB,MAAM,EAAE;qBACR,IAAI,CAAC,oBAAoB,CAAC;qBAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;qBACpD,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEZ,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBAE3B;;;;mBAIG;gBACH,IACE,UAAU,KAAK,SAAS;oBACxB,UAAU,CAAC,UAAU,KAAK,IAAI;oBAC9B,UAAU,CAAC,SAAS,KAAK,IAAI;oBAC7B,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAC5C,CAAC;oBACD,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;gBACnE,CAAC;gBAED;;;mBAGG;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE;qBACrB,MAAM,CAAC,oBAAoB,CAAC;qBAC5B,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBACtD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,EAC1C,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,EACvC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CACvC,CACF;qBACA,SAAS,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;gBAE9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;gBACnE,CAAC;gBAED,MAAM,EAAE;qBACL,MAAM,CAAC,gBAAgB,CAAC;qBACxB,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;qBACrE,mBAAmB,EAAE,CAAC;gBAEzB,MAAM,MAAM,GACV,UAAU,CAAC,MAAM;oBACjB,CACE,MAAM,EAAE;yBACL,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;yBACxB,IAAI,CAAC,KAAK,CAAC;yBACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;yBACpF,KAAK,CAAC,CAAC,CAAC,CACZ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAEX,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,EAAE;yBACL,MAAM,CAAC,oBAAoB,CAAC;yBAC5B,MAAM,CAAC;wBACN,WAAW,EAAE,UAAU,CAAC,WAAW;wBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,MAAM;qBACP,CAAC;yBACD,mBAAmB,EAAE,CAAC;gBAC3B,CAAC;gBAED,MAAM,MAAM,CAAC,MAAM,CACjB;oBACE,IAAI,EAAE,+BAA+B;oBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,IAAI,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;iBAC5D,EACD,EAAE,CACH,CAAC;gBACF,MAAM,MAAM,CAAC,MAAM,CACjB;oBACE,IAAI,EAAE,0BAA0B;oBAChC,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;iBAC9E,EACD,EAAE,CACH,CAAC;gBAEF,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,oBAAoB,CAAC;YAE9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBACvD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;yBACzB,MAAM,CAAC,UAAU,CAAC;yBAClB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;yBAClC,SAAS,EAAE,CAAC;oBAEf,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,SAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;oBAEhE,MAAM,EAAE;yBACL,MAAM,CAAC,gBAAgB,CAAC;yBACxB,MAAM,CAAC,EAAE,WAAW,EAAE,SAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;oBAErE;;;uBAGG;oBACH,MAAM,SAAS,GACb,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC;wBAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;wBACtC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAEb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;4BAC3C,WAAW,EAAE,SAAU,CAAC,EAAE;4BAC1B,MAAM,EAAE,KAAK,CAAC,WAAW;4BACzB,MAAM,EAAE,SAAS,CAAC,EAAE;yBACrB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,MAAM,CAAC,MAAM,CACjB;wBACE,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,SAAU,CAAC,EAAE;wBAC1B,OAAO,EAAE,KAAK,CAAC,WAAW;wBAC1B,IAAI,EAAE,EAAE,WAAW,EAAE,SAAU,CAAC,EAAE,EAAE,IAAI,EAAE;qBAC3C,EACD,EAAE,CACH,CAAC;oBACF,MAAM,MAAM,CAAC,MAAM,CACjB;wBACE,IAAI,EAAE,0BAA0B;wBAChC,WAAW,EAAE,SAAU,CAAC,EAAE;wBAC1B,OAAO,EAAE,KAAK,CAAC,WAAW;wBAC1B,IAAI,EAAE;4BACJ,MAAM,EAAE,KAAK,CAAC,WAAW;4BACzB,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;yBACvD;qBACF,EACD,EAAE,CACH,CAAC;oBAEF,OAAO,SAAU,CAAC;gBACpB,CAAC,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,aAAa,CAAC,mBAAmB,IAAI,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;iBAC7C,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK;YACzB,MAAM,IAAI,GAAsD,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YAC1F,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACzB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBACvD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;yBACvB,MAAM,CAAC,UAAU,CAAC;yBAClB,GAAG,CAAC,IAAI,CAAC;yBACT,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;yBAC7C,SAAS,EAAE,CAAC;oBAEf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;oBAClD,CAAC;oBAED,MAAM,OAAO,GAAI,CAAC,MAAM,EAAE,MAAM,CAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;oBAC1F,MAAM,MAAM,CAAC,MAAM,CACjB;wBACE,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO,EAAE,OAAO,CAAC,MAAM;wBACvB,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE;qBACpD,EACD,EAAE,CACH,CAAC;oBAEF,OAAO,OAAO,CAAC;gBACjB,CAAC,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB;;;;eAIG;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YAExB,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACrC,MAAM,IAAI,GAAG,MAAM,EAAE;qBAClB,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;qBACjC,IAAI,CAAC,UAAU,CAAC;qBAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;qBAC7C,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;gBAClD,CAAC;gBAED,MAAM,MAAM,CAAC,MAAM,CACjB;oBACE,IAAI,EAAE,mBAAmB;oBACzB,kEAAkE;oBAClE,WAAW,EAAE,IAAI;oBACjB,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;iBAChE,EACD,EAAE,CACH,CAAC;gBAEF,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,OAAO,IAAI,CAAC,EAAE;iBACX,MAAM,CAAC;gBACN,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC,CAAC;iBACD,IAAI,CAAC,UAAU,CAAC;iBAChB,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;iBAC5E,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE;YAC1C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE;YAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;YACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;iBACvB,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;iBACtC,IAAI,CAAC,UAAU,CAAC;iBAChB,SAAS,CACR,gBAAgB,EAChB,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,EAC/C,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CACpC,CACF;iBACA,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;iBAChC,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;KACR,CAAC;AACJ,CAAC"}