@forestadmin/agent 1.66.1 → 1.67.0

package/dist/services/authorization/internal/rendering-permission.d.ts

@@ -1,39 +0,0 @@
-import { GenericTree } from '@forestadmin/datasource-toolkit';
-
-import { AgentOptionsWithDefaults } from '../../../types';
-import { User } from './types';
-import UserPermissionService from './user-permission';
-
-export declare type RenderingPermissionOptions = Pick<
-  AgentOptionsWithDefaults,
-  'forestServerUrl' | 'envSecret' | 'isProduction' | 'permissionsCacheDurationInSeconds' | 'logger'
->;
-export default class RenderingPermissionService {
-  private readonly options;
-  private readonly userPermissions;
-  private readonly permissionsByRendering;
-  constructor(options: RenderingPermissionOptions, userPermissions: UserPermissionService);
-  getScope({
-    renderingId,
-    collectionName,
-    user,
-  }: {
-    renderingId: string;
-    collectionName: string;
-    user: User;
-  }): Promise<GenericTree>;
-  private getScopeOrRetry;
-  private loadPermissions;
-  canRetrieveChart({
-    renderingId,
-    chartRequest,
-    userId,
-  }: {
-    renderingId: number;
-    chartRequest: any;
-    userId: number;
-  }): Promise<boolean>;
-  private canRetrieveChartHashOrRetry;
-  invalidateCache(renderingId: any): void;
-}
-// # sourceMappingURL=rendering-permission.d.ts.map

package/dist/services/authorization/internal/rendering-permission.js

@@ -1,121 +0,0 @@
-const __importDefault =
-  (this && this.__importDefault) ||
-  function (mod) {
-    return mod && mod.__esModule ? mod : { default: mod };
-  };
-
-Object.defineProperty(exports, '__esModule', { value: true });
-const lru_cache_1 = __importDefault(require('lru-cache'));
-const hash_chart_1 = require('./hash-chart');
-const types_1 = require('./types');
-const forest_http_api_1 = __importDefault(require('../../../utils/forest-http-api'));
-const generate_user_scope_1 = __importDefault(require('./generate-user-scope'));
-
-class RenderingPermissionService {
-  constructor(options, userPermissions) {
-    this.options = options;
-    this.userPermissions = userPermissions;
-    this.permissionsByRendering = new lru_cache_1.default({
-      max: 256,
-      ttl: this.options.permissionsCacheDurationInSeconds * 1000,
-      fetchMethod: renderingId => this.loadPermissions(renderingId),
-    });
-  }
-
-  async getScope({ renderingId, collectionName, user }) {
-    return this.getScopeOrRetry({ renderingId, collectionName, user, allowRetry: true });
-  }
-
-  async getScopeOrRetry({ renderingId, collectionName, user, allowRetry }) {
-    const [permissions, userInfo] = await Promise.all([
-      this.permissionsByRendering.fetch(renderingId),
-      this.userPermissions.getUserInfo(user.id),
-    ]);
-    const collectionPermissions = permissions?.collections?.[collectionName];
-
-    if (!collectionPermissions) {
-      if (allowRetry) {
-        this.invalidateCache(renderingId);
-
-        return this.getScopeOrRetry({ renderingId, collectionName, user, allowRetry: false });
-      }
-
-      return null;
-    }
-
-    return (0, generate_user_scope_1.default)(
-      collectionPermissions.scope,
-      permissions.team,
-      userInfo,
-    );
-  }
-
-  async loadPermissions(renderingId) {
-    this.options.logger('Debug', `Loading rendering permissions for rendering ${renderingId}`);
-    const rawPermissions = await forest_http_api_1.default.getRenderingPermissions(
-      renderingId,
-      this.options,
-    );
-
-    return {
-      team: rawPermissions.team,
-      collections: rawPermissions.collections,
-      charts: (0, hash_chart_1.hashServerCharts)(rawPermissions.stats),
-    };
-  }
-
-  async canRetrieveChart({ renderingId, chartRequest, userId }) {
-    const chartHash = (0, hash_chart_1.hashChartRequest)(chartRequest);
-
-    return this.canRetrieveChartHashOrRetry({ renderingId, chartHash, userId, allowRetry: true });
-  }
-
-  async canRetrieveChartHashOrRetry({ renderingId, userId, chartHash, allowRetry }) {
-    const [userInfo, permissions] = await Promise.all([
-      this.userPermissions.getUserInfo(userId),
-      this.permissionsByRendering.fetch(renderingId),
-    ]);
-
-    if (
-      [
-        types_1.PermissionLevel.Admin,
-        types_1.PermissionLevel.Developer,
-        types_1.PermissionLevel.Editor,
-      ].includes(userInfo?.permissionLevel) ||
-      permissions.charts.has(chartHash)
-    ) {
-      this.options.logger('Debug', `User ${userId} can retrieve chart on rendering ${renderingId}`);
-
-      return true;
-    }
-
-    if (allowRetry) {
-      this.invalidateCache(renderingId);
-      this.userPermissions.clearCache();
-
-      return this.canRetrieveChartHashOrRetry({
-        renderingId,
-        userId,
-        chartHash,
-        allowRetry: false,
-      });
-    }
-
-    this.options.logger(
-      'Debug',
-      `User ${userId} cannot retrieve chart on rendering ${renderingId}`,
-    );
-
-    return false;
-  }
-
-  invalidateCache(renderingId) {
-    this.options.logger(
-      'Debug',
-      `Invalidating rendering permissions cache for rendering ${renderingId}`,
-    );
-    this.permissionsByRendering.del(renderingId);
-  }
-}
-exports.default = RenderingPermissionService;
-// # sourceMappingURL=data:application/json;base64,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

package/dist/services/authorization/internal/types.d.ts

@@ -1,255 +0,0 @@
-import { GenericTree } from '@forestadmin/datasource-toolkit';
-
-export declare type EnvironmentPermissionsV4 = EnvironmentPermissionsV4Remote | true;
-export declare type RightDescriptionWithRolesV4 = {
-  roles: number[];
-};
-export declare type RightDescriptionV4 = boolean | RightDescriptionWithRolesV4;
-export interface EnvironmentCollectionAccessPermissionsV4 {
-  browseEnabled: RightDescriptionV4;
-  readEnabled: RightDescriptionV4;
-  editEnabled: RightDescriptionV4;
-  addEnabled: RightDescriptionV4;
-  deleteEnabled: RightDescriptionV4;
-  exportEnabled: RightDescriptionV4;
-}
-export interface EnvironmentSmartActionPermissionsV4 {
-  triggerEnabled: RightDescriptionV4;
-  approvalRequired: RightDescriptionV4;
-  userApprovalEnabled: RightDescriptionV4;
-  selfApprovalEnabled: RightDescriptionV4;
-}
-export interface EnvironmentCollectionActionPermissionsV4 {
-  [actionName: string]: EnvironmentSmartActionPermissionsV4;
-}
-export interface EnvironmentCollectionPermissionsV4 {
-  collection: EnvironmentCollectionAccessPermissionsV4;
-  actions: EnvironmentCollectionActionPermissionsV4;
-}
-export interface EnvironmentCollectionsPermissionsV4 {
-  [id: string]: EnvironmentCollectionPermissionsV4;
-}
-export interface EnvironmentPermissionsV4Remote {
-  collections: EnvironmentCollectionsPermissionsV4;
-}
-export declare enum PermissionLevel {
-  Admin = 'admin',
-  Developer = 'developer',
-  Editor = 'editor',
-  User = 'user',
-}
-export declare type UserPermissionV4 = {
-  id: number;
-  firstName: string;
-  lastName: string;
-  email: string;
-  permissionLevel: PermissionLevel;
-  tags: Record<string, string>;
-  roleId: number;
-};
-export declare enum CollectionActionEvent {
-  Browse = 'browse',
-  Export = 'export',
-  Read = 'read',
-  Edit = 'edit',
-  Delete = 'delete',
-  Add = 'add',
-}
-export declare enum CustomActionEvent {
-  Trigger = 'trigger',
-  Approve = 'approve',
-  SelfApprove = 'self-approve',
-  RequireApproval = 'require-approval',
-}
-export declare enum ChartType {
-  Pie = 'Pie',
-  Value = 'Value',
-  Leaderboard = 'Leaderboard',
-  Line = 'Line',
-  Objective = 'Objective',
-  Percentage = 'Percentage',
-  Smart = 'Smart',
-}
-export interface DisplaySettings {
-  x: number;
-  y: number;
-  width: number;
-  height: number;
-}
-export interface BaseChart {
-  type: ChartType;
-}
-export interface SmartRouteChart extends BaseChart {
-  type: Exclude<ChartType, ChartType.Smart>;
-  smartRoute: string;
-}
-export interface ApiRouteChart extends BaseChart {
-  type: Exclude<ChartType, ChartType.Smart>;
-  apiRoute: string;
-}
-export interface QueryChart extends BaseChart {
-  type: Exclude<ChartType, ChartType.Smart>;
-  query: string;
-  filter?: Record<string, any>;
-}
-export interface S3Versions {
-  'component.js': string;
-  'template.hbs': string;
-}
-export interface FilterableChart extends BaseChart {
-  filter?: string;
-}
-export interface AggregatedChart extends BaseChart {
-  aggregator: 'Sum' | 'Count';
-  aggregateFieldName: string | null;
-}
-export interface CollectionChart extends BaseChart {
-  sourceCollectionName: string | number;
-}
-export interface GroupedByChart extends BaseChart {
-  groupByFieldName: string | null;
-}
-export interface SmartChart extends BaseChart {
-  type: ChartType.Smart;
-  s3Versions: S3Versions & {
-    'style.css': string;
-  };
-  id: string;
-}
-export interface LeaderboardChart extends BaseChart, AggregatedChart, CollectionChart {
-  type: ChartType.Leaderboard;
-  labelFieldName: string;
-  relationshipFieldName: string;
-  limit: number;
-}
-export interface LineChart
-  extends BaseChart,
-    FilterableChart,
-    AggregatedChart,
-    CollectionChart,
-    GroupedByChart {
-  type: ChartType.Line;
-  timeRange: 'Day' | 'Week' | 'Month' | 'Year';
-}
-export interface ObjectiveChart
-  extends BaseChart,
-    FilterableChart,
-    AggregatedChart,
-    CollectionChart {
-  type: ChartType.Objective;
-  objective: number;
-}
-export interface PercentageChart extends BaseChart {
-  type: ChartType.Percentage;
-  numeratorChartId: string;
-  denominatorChartId: string;
-}
-export interface PieChart
-  extends BaseChart,
-    FilterableChart,
-    AggregatedChart,
-    CollectionChart,
-    GroupedByChart {
-  type: ChartType.Pie;
-}
-export interface ValueChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart {
-  type: ChartType.Value;
-}
-export declare type Chart =
-  | SmartChart
-  | ApiRouteChart
-  | QueryChart
-  | SmartRouteChart
-  | LeaderboardChart
-  | LineChart
-  | ObjectiveChart
-  | PercentageChart
-  | PieChart
-  | ValueChart;
-export interface CollectionColumn {
-  id: string | number;
-  fieldName: string;
-  position: number | null;
-  isVisible: boolean;
-}
-export interface BaseCollectionSegment {
-  id: string | number;
-  type: 'manual' | 'smart';
-  name: string;
-  position: number;
-  defaultSortingFieldName: string | null;
-  defaultSortingFieldOrder: 'ascending' | 'descending' | null;
-  isVisible: boolean;
-  hasColumnsConfiguration: boolean;
-  columns: CollectionColumn[];
-}
-export interface FilterCondition {
-  id: string;
-  value: boolean | number | string | string[];
-  fieldName: string | null;
-  subFieldName: string | null;
-  embeddedFieldName?: string | null;
-  operator: string;
-  embeddedField?: {
-    id?: number;
-    type: string;
-    field: string;
-    enums?: Array<string | number | Record<string, string>>;
-  } | null;
-}
-export interface Filter {
-  id?: string;
-  type: 'and' | 'or';
-  conditions: FilterCondition[] | null;
-}
-export interface ManualCollectionSegment extends BaseCollectionSegment {
-  type: 'manual';
-  filter: Filter | null;
-  query: string | null;
-}
-export interface SmartCollectionSegment extends BaseCollectionSegment {
-  type: 'smart';
-}
-export declare type CollectionSegment = ManualCollectionSegment | SmartCollectionSegment;
-export declare type DynamicScopesValues = {
-  users: Record<string, Record<string, string | number>>;
-};
-export declare type CollectionRenderingPermissionV4 = {
-  scope: GenericTree | null;
-  segments: CollectionSegment[];
-};
-export declare type Team = {
-  id: number;
-  name: string;
-};
-export declare type RenderingPermissionV4 = {
-  team: Team;
-  collections: Record<string, CollectionRenderingPermissionV4>;
-  stats: Chart[];
-};
-export declare type User = Record<string, any> & {
-  id: number;
-  tags: Record<string, string>;
-};
-export interface ActionApprovalAttributes {
-  requester_id: number;
-  ids: Array<string>;
-  collection_name: string;
-  smart_action_id: string;
-  values: any | null;
-  parent_collection_name: string | null;
-  parent_collection_id: string | null;
-  parent_association_name: string | null;
-  all_records: boolean;
-  all_records_subset_query: null;
-}
-export declare type ActionApprovalJWT = {
-  data: {
-    id: string | number;
-    type: string;
-    attributes: ActionApprovalAttributes;
-  };
-};
-export declare class JTWUnableToVerifyError extends Error {}
-export declare class JTWTokenExpiredError extends Error {}
-// # sourceMappingURL=types.d.ts.map

package/dist/services/authorization/internal/types.js

@@ -1,54 +0,0 @@
-Object.defineProperty(exports, '__esModule', { value: true });
-exports.JTWTokenExpiredError =
-  exports.JTWUnableToVerifyError =
-  exports.ChartType =
-  exports.CustomActionEvent =
-  exports.CollectionActionEvent =
-  exports.PermissionLevel =
-    void 0;
-let PermissionLevel;
-
-(function (PermissionLevel) {
-  PermissionLevel.Admin = 'admin';
-  PermissionLevel.Developer = 'developer';
-  PermissionLevel.Editor = 'editor';
-  PermissionLevel.User = 'user';
-})((PermissionLevel = exports.PermissionLevel || (exports.PermissionLevel = {})));
-
-let CollectionActionEvent;
-
-(function (CollectionActionEvent) {
-  CollectionActionEvent.Browse = 'browse';
-  CollectionActionEvent.Export = 'export';
-  CollectionActionEvent.Read = 'read';
-  CollectionActionEvent.Edit = 'edit';
-  CollectionActionEvent.Delete = 'delete';
-  CollectionActionEvent.Add = 'add';
-})((CollectionActionEvent = exports.CollectionActionEvent || (exports.CollectionActionEvent = {})));
-
-let CustomActionEvent;
-
-(function (CustomActionEvent) {
-  CustomActionEvent.Trigger = 'trigger';
-  CustomActionEvent.Approve = 'approve';
-  CustomActionEvent.SelfApprove = 'self-approve';
-  CustomActionEvent.RequireApproval = 'require-approval';
-})((CustomActionEvent = exports.CustomActionEvent || (exports.CustomActionEvent = {})));
-
-let ChartType;
-
-(function (ChartType) {
-  ChartType.Pie = 'Pie';
-  ChartType.Value = 'Value';
-  ChartType.Leaderboard = 'Leaderboard';
-  ChartType.Line = 'Line';
-  ChartType.Objective = 'Objective';
-  ChartType.Percentage = 'Percentage';
-  ChartType.Smart = 'Smart';
-})((ChartType = exports.ChartType || (exports.ChartType = {})));
-
-class JTWUnableToVerifyError extends Error {}
-exports.JTWUnableToVerifyError = JTWUnableToVerifyError;
-class JTWTokenExpiredError extends Error {}
-exports.JTWTokenExpiredError = JTWTokenExpiredError;
-// # sourceMappingURL=data:application/json;base64,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

package/dist/services/authorization/internal/user-permission.d.ts

@@ -1,16 +0,0 @@
-import { AgentOptionsWithDefaults } from '../../../types';
-import { UserPermissionV4 } from './types';
-
-export declare type UserPermissionOptions = Pick<
-  AgentOptionsWithDefaults,
-  'forestServerUrl' | 'envSecret' | 'isProduction' | 'permissionsCacheDurationInSeconds' | 'logger'
->;
-export default class UserPermissionService {
-  private readonly options;
-  private cacheExpirationTimestamp;
-  private userInfoById;
-  constructor(options: UserPermissionOptions);
-  getUserInfo(userId: number): Promise<UserPermissionV4 | undefined>;
-  clearCache(): void;
-}
-// # sourceMappingURL=user-permission.d.ts.map

package/dist/services/authorization/internal/user-permission.js

@@ -1,46 +0,0 @@
-const __importDefault =
-  (this && this.__importDefault) ||
-  function (mod) {
-    return mod && mod.__esModule ? mod : { default: mod };
-  };
-
-Object.defineProperty(exports, '__esModule', { value: true });
-const forest_http_api_1 = __importDefault(require('../../../utils/forest-http-api'));
-
-class UserPermissionService {
-  constructor(options) {
-    this.options = options;
-    this.cacheExpirationTimestamp = 0;
-    // The trick here is to keep the cache as a Promise and not a Map
-    // in order to avoid doing the same HTTP request twice when
-    // 2 calls are made to getUserInfo at the same time.
-    this.userInfoById = null;
-  }
-
-  async getUserInfo(userId) {
-    if (
-      !this.cacheExpirationTimestamp ||
-      this.cacheExpirationTimestamp < Date.now() ||
-      !(await this.userInfoById).has(userId)
-    ) {
-      this.cacheExpirationTimestamp =
-        Date.now() + this.options.permissionsCacheDurationInSeconds * 1000;
-      this.options.logger('Debug', `Refreshing user permissions cache`);
-      // The response here is not awaited in order to be set in the cache
-      // allowing subsequent calls to getUserInfo to use the cache even if
-      // the response is not yet available.
-      this.userInfoById = forest_http_api_1.default
-        .getUsers(this.options)
-        .then(users => new Map(users.map(user => [user.id, user])));
-    }
-
-    return (await this.userInfoById).get(userId);
-  }
-
-  clearCache() {
-    this.userInfoById = null;
-    this.cacheExpirationTimestamp = Number.NEGATIVE_INFINITY;
-  }
-}
-exports.default = UserPermissionService;
-// # sourceMappingURL=data:application/json;base64,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

package/dist/services/permissions.d.ts

@@ -1,19 +0,0 @@
-import { Collection, ConditionTree } from '@forestadmin/datasource-toolkit';
-import { Context } from 'koa';
-import { AgentOptionsWithDefaults } from '../types';
-declare type RolesOptions = Pick<AgentOptionsWithDefaults, 'forestServerUrl' | 'envSecret' | 'isProduction' | 'permissionsCacheDurationInSeconds'>;
-export default class PermissionService {
-    private options;
-    private cache;
-    constructor(options: RolesOptions);
-    invalidateCache(renderingId: number): void;
-    /** Checks that a charting query is in the list of allowed queries */
-    canChart(context: Context): Promise<void>;
-    /** Check if a user is allowed to perform a specific action */
-    can(context: Context, action: string, allowRefetch?: boolean): Promise<void>;
-    getScope(collection: Collection, context: Context): Promise<ConditionTree>;
-    /** Get cached version of "rendering permissions" */
-    private getRenderingPermissions;
-}
-export {};
-//# sourceMappingURL=permissions.d.ts.map

package/dist/services/permissions.js

@@ -1,85 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const lru_cache_1 = __importDefault(require("lru-cache"));
-const object_hash_1 = __importDefault(require("object-hash"));
-const types_1 = require("../types");
-const condition_tree_parser_1 = __importDefault(require("../utils/condition-tree-parser"));
-const forest_http_api_1 = __importDefault(require("../utils/forest-http-api"));
-class PermissionService {
-    constructor(options) {
-        this.options = options;
-        this.cache = new lru_cache_1.default({
-            max: 256,
-            ttl: this.options.permissionsCacheDurationInSeconds * 1000,
-        });
-    }
-    invalidateCache(renderingId) {
-        this.cache.delete(renderingId);
-    }
-    /** Checks that a charting query is in the list of allowed queries */
-    async canChart(context) {
-        // If the permissions level already allow the chart, no need to check further
-        if (['admin', 'editor', 'developer'].includes(context.state.user.permissionLevel)) {
-            return;
-        }
-        const chart = { ...context.request.body };
-        // When the server sends the data of the allowed charts, the target column is not specified
-        // for relations => allow them all.
-        if (chart?.group_by_field?.includes(':'))
-            chart.group_by_field = chart.group_by_field.substring(0, chart.group_by_field.indexOf(':'));
-        const chartHash = (0, object_hash_1.default)(chart, {
-            respectType: false,
-            excludeKeys: key => chart[key] === null,
-        });
-        await this.can(context, `chart:${chartHash}`);
-    }
-    /** Check if a user is allowed to perform a specific action */
-    async can(context, action, allowRefetch = true) {
-        const { id: userId, renderingId } = context.state.user;
-        const perms = await this.getRenderingPermissions(renderingId);
-        const isAllowed = perms.actions.has(action) || perms.actionsByUser[action]?.has(userId);
-        if (!isAllowed && allowRefetch) {
-            this.invalidateCache(renderingId);
-            return this.can(context, action, false);
-        }
-        if (!isAllowed) {
-            context.throw(types_1.HttpCode.Forbidden, 'Forbidden');
-        }
-    }
-    async getScope(collection, context) {
-        const { user } = context.state;
-        const perms = await this.getRenderingPermissions(user.renderingId);
-        const scopes = perms.scopes[collection.name];
-        if (!scopes)
-            return null;
-        const conditionTree = condition_tree_parser_1.default.fromPlainObject(collection, scopes.conditionTree);
-        return conditionTree.replaceLeafs(leaf => {
-            const dynamicValues = scopes.dynamicScopeValues?.[user.id];
-            if (typeof leaf.value === 'string' && leaf.value.startsWith('$currentUser')) {
-                // Search replacement hash from forestadmin server
-                if (dynamicValues) {
-                    return leaf.override({ value: dynamicValues[leaf.value] });
-                }
-                // Search JWT token (new user)
-                return leaf.override({
-                    value: leaf.value.startsWith('$currentUser.tags.')
-                        ? user.tags[leaf.value.substring(18)]
-                        : user[leaf.value.substring(13)],
-                });
-            }
-            return leaf;
-        });
-    }
-    /** Get cached version of "rendering permissions" */
-    getRenderingPermissions(renderingId) {
-        if (!this.cache.has(renderingId))
-            this.cache.set(renderingId, forest_http_api_1.default.getPermissions(this.options, renderingId));
-        // We already checked the entry is up-to-date with the .has() call => allowStale
-        return this.cache.get(renderingId, { allowStale: true });
-    }
-}
-exports.default = PermissionService;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGVybWlzc2lvbnMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvc2VydmljZXMvcGVybWlzc2lvbnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFFQSwwREFBaUM7QUFDakMsOERBQXFDO0FBRXJDLG9DQUE4RDtBQUM5RCwyRkFBaUU7QUFDakUsK0VBQStFO0FBTy9FLE1BQXFCLGlCQUFpQjtJQUlwQyxZQUFZLE9BQXFCO1FBQy9CLElBQUksQ0FBQyxPQUFPLEdBQUcsT0FBTyxDQUFDO1FBQ3ZCLElBQUksQ0FBQyxLQUFLLEdBQUcsSUFBSSxtQkFBUSxDQUFDO1lBQ3hCLEdBQUcsRUFBRSxHQUFHO1lBQ1IsR0FBRyxFQUFFLElBQUksQ0FBQyxPQUFPLENBQUMsaUNBQWlDLEdBQUcsSUFBSTtTQUMzRCxDQUFDLENBQUM7SUFDTCxDQUFDO0lBRUQsZUFBZSxDQUFDLFdBQW1CO1FBQ2pDLElBQUksQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDLFdBQVcsQ0FBQyxDQUFDO0lBQ2pDLENBQUM7SUFFRCxxRUFBcUU7SUFDckUsS0FBSyxDQUFDLFFBQVEsQ0FBQyxPQUFnQjtRQUM3Qiw2RUFBNkU7UUFDN0UsSUFBSSxDQUFDLE9BQU8sRUFBRSxRQUFRLEVBQUUsV0FBVyxDQUFDLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxFQUFFO1lBQ2pGLE9BQU87U0FDUjtRQUVELE1BQU0sS0FBSyxHQUFHLEVBQUUsR0FBRyxPQUFPLENBQUMsT0FBTyxDQUFDLElBQUksRUFBRSxDQUFDO1FBRTFDLDJGQUEyRjtRQUMzRixtQ0FBbUM7UUFDbkMsSUFBSSxLQUFLLEVBQUUsY0FBYyxFQUFFLFFBQVEsQ0FBQyxHQUFHLENBQUM7WUFDdEMsS0FBSyxDQUFDLGNBQWMsR0FBRyxLQUFLLENBQUMsY0FBYyxDQUFDLFNBQVMsQ0FBQyxDQUFDLEVBQUUsS0FBSyxDQUFDLGNBQWMsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQztRQUU5RixNQUFNLFNBQVMsR0FBRyxJQUFBLHFCQUFVLEVBQUMsS0FBSyxFQUFFO1lBQ2xDLFdBQVcsRUFBRSxLQUFLO1lBQ2xCLFdBQVcsRUFBRSxHQUFHLENBQUMsRUFBRSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsS0FBSyxJQUFJO1NBQ3hDLENBQUMsQ0FBQztRQUVILE1BQU0sSUFBSSxDQUFDLEdBQUcsQ0FBQyxPQUFPLEVBQUUsU0FBUyxTQUFTLEVBQUUsQ0FBQyxDQUFDO0lBQ2hELENBQUM7SUFFRCw4REFBOEQ7SUFDOUQsS0FBSyxDQUFDLEdBQUcsQ0FBQyxPQUFnQixFQUFFLE1BQWMsRUFBRSxZQUFZLEdBQUcsSUFBSTtRQUM3RCxNQUFNLEVBQUUsRUFBRSxFQUFFLE1BQU0sRUFBRSxXQUFXLEVBQUUsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQztRQUN2RCxNQUFNLEtBQUssR0FBRyxNQUFNLElBQUksQ0FBQyx1QkFBdUIsQ0FBQyxXQUFXLENBQUMsQ0FBQztRQUM5RCxNQUFNLFNBQVMsR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsSUFBSSxLQUFLLENBQUMsYUFBYSxDQUFDLE1BQU0sQ0FBQyxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQztRQUV4RixJQUFJLENBQUMsU0FBUyxJQUFJLFlBQVksRUFBRTtZQUM5QixJQUFJLENBQUMsZUFBZSxDQUFDLFdBQVcsQ0FBQyxDQUFDO1lBRWxDLE9BQU8sSUFBSSxDQUFDLEdBQUcsQ0FBQyxPQUFPLEVBQUUsTUFBTSxFQUFFLEtBQUssQ0FBQyxDQUFDO1NBQ3pDO1FBRUQsSUFBSSxDQUFDLFNBQVMsRUFBRTtZQUNkLE9BQU8sQ0FBQyxLQUFLLENBQUMsZ0JBQVEsQ0FBQyxTQUFTLEVBQUUsV0FBVyxDQUFDLENBQUM7U0FDaEQ7SUFDSCxDQUFDO0lBRUQsS0FBSyxDQUFDLFFBQVEsQ0FBQyxVQUFzQixFQUFFLE9BQWdCO1FBQ3JELE1BQU0sRUFBRSxJQUFJLEVBQUUsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDO1FBQy9CLE1BQU0sS0FBSyxHQUFHLE1BQU0sSUFBSSxDQUFDLHVCQUF1QixDQUFDLElBQUksQ0FBQyxXQUFXLENBQUMsQ0FBQztRQUNuRSxNQUFNLE1BQU0sR0FBRyxLQUFLLENBQUMsTUFBTSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUU3QyxJQUFJLENBQUMsTUFBTTtZQUFFLE9BQU8sSUFBSSxDQUFDO1FBRXpCLE1BQU0sYUFBYSxHQUFHLCtCQUFtQixDQUFDLGVBQWUsQ0FBQyxVQUFVLEVBQUUsTUFBTSxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBRTVGLE9BQU8sYUFBYSxDQUFDLFlBQVksQ0FBQyxJQUFJLENBQUMsRUFBRTtZQUN2QyxNQUFNLGFBQWEsR0FBRyxNQUFNLENBQUMsa0JBQWtCLEVBQUUsQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLENBQUM7WUFFM0QsSUFBSSxPQUFPLElBQUksQ0FBQyxLQUFLLEtBQUssUUFBUSxJQUFJLElBQUksQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDLGNBQWMsQ0FBQyxFQUFFO2dCQUMzRSxrREFBa0Q7Z0JBQ2xELElBQUksYUFBYSxFQUFFO29CQUNqQixPQUFPLElBQUksQ0FBQyxRQUFRLENBQUMsRUFBRSxLQUFLLEVBQUUsYUFBYSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDLENBQUM7aUJBQzVEO2dCQUVELDhCQUE4QjtnQkFDOUIsT0FBTyxJQUFJLENBQUMsUUFBUSxDQUFDO29CQUNuQixLQUFLLEVBQUUsSUFBSSxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUMsb0JBQW9CLENBQUM7d0JBQ2hELENBQUMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDLEVBQUUsQ0FBQyxDQUFDO3dCQUNyQyxDQUFDLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDLEVBQUUsQ0FBQyxDQUFDO2lCQUNuQyxDQUFDLENBQUM7YUFDSjtZQUVELE9BQU8sSUFBSSxDQUFDO1FBQ2QsQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDO0lBRUQsb0RBQW9EO0lBQzVDLHVCQUF1QixDQUFDLFdBQW1CO1FBQ2pELElBQUksQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxXQUFXLENBQUM7WUFDOUIsSUFBSSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsV0FBVyxFQUFFLHlCQUFhLENBQUMsY0FBYyxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsV0FBVyxDQUFDLENBQUMsQ0FBQztRQUV2RixnRkFBZ0Y7UUFDaEYsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxXQUFXLEVBQUUsRUFBRSxVQUFVLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztJQUMzRCxDQUFDO0NBQ0Y7QUE3RkQsb0NBNkZDIn0=