@iann29/rastro 0.1.0-alpha.1 → 0.1.0-alpha.11

package/dist/client/federation.js

@@ -0,0 +1,274 @@
+import { ConvexError, v } from "convex/values";
+import { MAX_JOURNEY_EVENTS, MAX_LIVE_VISITORS, MAX_REPORT_RANGE_DAYS, MAX_REPORT_SITES, } from "../component/constants.js";
+export const FEDERATED_ANALYTICS_CLAIMS = Object.freeze({
+    connectionId: "rastro_connection_id",
+    organizationId: "rastro_organization_id",
+    permissions: "rastro_permissions",
+});
+export const FEDERATED_ANALYTICS_READ_PERMISSION = "analytics:read";
+/**
+ * The opt-in write scope. A token carries it only for organization owners and
+ * admins, and a host honors it only when its local grant lists it too: both
+ * sides must agree before any configuration function runs.
+ */
+export const FEDERATED_ANALYTICS_CONFIGURE_PERMISSION = "analytics:configure";
+export const FEDERATED_ANALYTICS_PERMISSIONS = Object.freeze([
+    FEDERATED_ANALYTICS_READ_PERMISSION,
+    FEDERATED_ANALYTICS_CONFIGURE_PERMISSION,
+]);
+export const FEDERATED_ANALYTICS_ERROR_CODES = Object.freeze({
+    UNAUTHENTICATED: "FEDERATION_UNAUTHENTICATED",
+    ISSUER_MISMATCH: "FEDERATION_ISSUER_MISMATCH",
+    INVALID_CLAIMS: "FEDERATION_INVALID_CLAIMS",
+    CONNECTION_DENIED: "FEDERATION_CONNECTION_DENIED",
+    INVALID_SCOPE: "FEDERATION_INVALID_SCOPE",
+    SITE_DENIED: "FEDERATION_SITE_DENIED",
+    CONFIGURE_FORBIDDEN: "FEDERATION_CONFIGURE_FORBIDDEN",
+});
+const MAX_CONNECTION_SITE_IDS = MAX_REPORT_SITES;
+/**
+ * The protocol-v1 baseline every compatible host must serve. Newer hosts may
+ * advertise more functions and capabilities; a dashboard must require only
+ * this frozen set, or older hosts would fail verification on every addition.
+ */
+export const FEDERATED_ANALYTICS_REQUIRED_FUNCTIONS = Object.freeze({
+    manifest: "manifest",
+    connectionStatus: "connectionStatus",
+    listSites: "listSites",
+    overview: "overview",
+    liveVisitors: "liveVisitors",
+    listSessions: "listSessions",
+    sessionJourney: "sessionJourney",
+    listConversions: "listConversions",
+    visitorJourney: "visitorJourney",
+    goalsReport: "goalsReport",
+    funnelsReport: "funnelsReport",
+    affiliatesReport: "affiliatesReport",
+    dataCoverage: "dataCoverage",
+});
+export const FEDERATED_ANALYTICS_REQUIRED_CAPABILITIES = Object.freeze([
+    "siteSummaries",
+    "overview",
+    "liveVisitors",
+    "sessions",
+    "sessionJourney",
+    "conversions",
+    "visitorJourney",
+    "goals",
+    "funnels",
+    "affiliates",
+    "dataCoverage",
+]);
+/**
+ * The optional configuration surface behind the `configure` capability. Every
+ * function here requires the configure permission on the token and on the
+ * host's grant; a host that keeps its grants read-only never runs them.
+ */
+export const FEDERATED_ANALYTICS_CONFIGURE_FUNCTIONS = Object.freeze({
+    siteSettings: "siteSettings",
+    updateSite: "updateSite",
+    listGoals: "listGoals",
+    upsertGoal: "upsertGoal",
+    removeGoal: "removeGoal",
+    listFunnels: "listFunnels",
+    upsertFunnel: "upsertFunnel",
+    removeFunnel: "removeFunnel",
+    listAffiliates: "listAffiliates",
+    upsertAffiliate: "upsertAffiliate",
+    removeAffiliate: "removeAffiliate",
+    retentionStatus: "retentionStatus",
+    setRetentionPolicy: "setRetentionPolicy",
+    disableRetentionPolicy: "disableRetentionPolicy",
+});
+const FEDERATED_ANALYTICS_FUNCTION_NAMES = Object.freeze({
+    ...FEDERATED_ANALYTICS_REQUIRED_FUNCTIONS,
+    vitalsReport: "vitalsReport",
+    siteMap: "siteMap",
+    ...FEDERATED_ANALYTICS_CONFIGURE_FUNCTIONS,
+});
+const FEDERATED_ANALYTICS_CAPABILITIES = Object.freeze([
+    ...FEDERATED_ANALYTICS_REQUIRED_CAPABILITIES,
+    "vitals",
+    "siteMap",
+    // The daily overview answers whole calendar days in the site's timezone
+    // from its own buckets (alpha.11); dashboards must not require it.
+    "localDays",
+    "configure",
+]);
+const FEDERATED_ANALYTICS_LIMITS = Object.freeze({
+    maxSitesPerRequest: MAX_REPORT_SITES,
+    maxSitesPerConnection: MAX_CONNECTION_SITE_IDS,
+    maxReportRangeDays: MAX_REPORT_RANGE_DAYS,
+    maxLiveVisitors: MAX_LIVE_VISITORS,
+    maxJourneyEvents: MAX_JOURNEY_EVENTS,
+});
+export const FEDERATED_ANALYTICS_CONNECTOR_MANIFEST = Object.freeze({
+    protocol: "amage-rastro-analytics",
+    protocolVersion: 1,
+    moduleName: "rastroFederation",
+    functions: FEDERATED_ANALYTICS_FUNCTION_NAMES,
+    capabilities: FEDERATED_ANALYTICS_CAPABILITIES,
+    limits: FEDERATED_ANALYTICS_LIMITS,
+});
+const MAX_CLAIM_LENGTH = 128;
+const MAX_PERMISSIONS = 16;
+const federatedAnalyticsCapabilityValidator = v.union(v.literal("siteSummaries"), v.literal("overview"), v.literal("liveVisitors"), v.literal("sessions"), v.literal("sessionJourney"), v.literal("conversions"), v.literal("visitorJourney"), v.literal("goals"), v.literal("funnels"), v.literal("affiliates"), v.literal("dataCoverage"), v.literal("vitals"), v.literal("siteMap"), v.literal("localDays"), v.literal("configure"));
+export const federatedAnalyticsPermissionValidator = v.union(v.literal(FEDERATED_ANALYTICS_READ_PERMISSION), v.literal(FEDERATED_ANALYTICS_CONFIGURE_PERMISSION));
+export const federatedAnalyticsManifestValidator = v.object({
+    protocol: v.literal(FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.protocol),
+    protocolVersion: v.literal(FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.protocolVersion),
+    moduleName: v.literal(FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.moduleName),
+    functions: v.object({
+        manifest: v.literal("manifest"),
+        connectionStatus: v.literal("connectionStatus"),
+        listSites: v.literal("listSites"),
+        overview: v.literal("overview"),
+        liveVisitors: v.literal("liveVisitors"),
+        listSessions: v.literal("listSessions"),
+        sessionJourney: v.literal("sessionJourney"),
+        listConversions: v.literal("listConversions"),
+        visitorJourney: v.literal("visitorJourney"),
+        goalsReport: v.literal("goalsReport"),
+        funnelsReport: v.literal("funnelsReport"),
+        affiliatesReport: v.literal("affiliatesReport"),
+        dataCoverage: v.literal("dataCoverage"),
+        vitalsReport: v.literal("vitalsReport"),
+        siteMap: v.literal("siteMap"),
+        siteSettings: v.literal("siteSettings"),
+        updateSite: v.literal("updateSite"),
+        listGoals: v.literal("listGoals"),
+        upsertGoal: v.literal("upsertGoal"),
+        removeGoal: v.literal("removeGoal"),
+        listFunnels: v.literal("listFunnels"),
+        upsertFunnel: v.literal("upsertFunnel"),
+        removeFunnel: v.literal("removeFunnel"),
+        listAffiliates: v.literal("listAffiliates"),
+        upsertAffiliate: v.literal("upsertAffiliate"),
+        removeAffiliate: v.literal("removeAffiliate"),
+        retentionStatus: v.literal("retentionStatus"),
+        setRetentionPolicy: v.literal("setRetentionPolicy"),
+        disableRetentionPolicy: v.literal("disableRetentionPolicy"),
+    }),
+    capabilities: v.array(federatedAnalyticsCapabilityValidator),
+    limits: v.object({
+        maxSitesPerRequest: v.number(),
+        maxSitesPerConnection: v.number(),
+        maxReportRangeDays: v.number(),
+        maxLiveVisitors: v.number(),
+        maxJourneyEvents: v.number(),
+    }),
+});
+export const federatedAnalyticsConnectionStatusValidator = v.object({
+    status: v.literal("connected"),
+    protocolVersion: v.literal(1),
+    capabilities: v.array(federatedAnalyticsCapabilityValidator),
+    permissions: v.array(federatedAnalyticsPermissionValidator),
+    siteCount: v.number(),
+});
+/**
+ * The permissions a request may act with: those the token claims that the
+ * host's grant also lists. Reading needs no listing — a grant is a read grant
+ * by definition — so the read permission is always present.
+ */
+export function effectiveFederatedPermissions(claimed, connection) {
+    const granted = new Set(connection.permissions ?? []);
+    return FEDERATED_ANALYTICS_PERMISSIONS.filter((permission) => permission === FEDERATED_ANALYTICS_READ_PERMISSION ||
+        (claimed.includes(permission) && granted.has(permission)));
+}
+export const federatedSiteSummaryValidator = v.object({
+    siteId: v.string(),
+    name: v.string(),
+    currency: v.string(),
+    timezone: v.union(v.string(), v.null()),
+    cookieless: v.boolean(),
+    localDays: v.union(v.object({ timezone: v.string(), since: v.number() }), v.null()),
+});
+export function createFederatedAnalyticsManifest() {
+    return {
+        ...FEDERATED_ANALYTICS_CONNECTOR_MANIFEST,
+        functions: { ...FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.functions },
+        capabilities: [...FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.capabilities],
+        limits: { ...FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.limits },
+    };
+}
+export function createFederatedAnalyticsConnectionAuthorizer(options) {
+    if (!isBoundedClaim(options?.issuer)) {
+        throw new Error("Federated analytics issuer must be a non-empty string");
+    }
+    if (typeof options.resolveConnection !== "function") {
+        throw new Error("Federated analytics connection resolver is required");
+    }
+    return async (ctx, requestedSiteIds, requiredPermission = FEDERATED_ANALYTICS_READ_PERMISSION) => {
+        const identity = await ctx.auth.getUserIdentity();
+        if (!identity) {
+            fail(FEDERATED_ANALYTICS_ERROR_CODES.UNAUTHENTICATED, "Federated analytics authentication is required");
+        }
+        if (identity.issuer !== options.issuer) {
+            fail(FEDERATED_ANALYTICS_ERROR_CODES.ISSUER_MISMATCH, "Federated analytics issuer is not trusted");
+        }
+        const connectionId = identity[FEDERATED_ANALYTICS_CLAIMS.connectionId];
+        const organizationId = identity[FEDERATED_ANALYTICS_CLAIMS.organizationId];
+        const permissions = identity[FEDERATED_ANALYTICS_CLAIMS.permissions];
+        if (!isBoundedClaim(connectionId) ||
+            !isBoundedClaim(organizationId) ||
+            !isStringArray(permissions, MAX_PERMISSIONS) ||
+            !permissions.includes(FEDERATED_ANALYTICS_READ_PERMISSION)) {
+            fail(FEDERATED_ANALYTICS_ERROR_CODES.INVALID_CLAIMS, "Federated analytics claims are invalid");
+        }
+        const connection = await options.resolveConnection(ctx, {
+            connectionId,
+            organizationId,
+            identity,
+        });
+        if (!connection ||
+            connection.revokedAt !== undefined ||
+            connection.connectionId !== connectionId ||
+            connection.organizationId !== organizationId ||
+            !isStringArray(connection.siteIds, MAX_CONNECTION_SITE_IDS) ||
+            connection.siteIds.length === 0 ||
+            new Set(connection.siteIds).size !== connection.siteIds.length ||
+            (connection.permissions !== undefined &&
+                !isPermissionList(connection.permissions))) {
+            fail(FEDERATED_ANALYTICS_ERROR_CODES.CONNECTION_DENIED, "Federated analytics connection is not active");
+        }
+        // The permission is settled before the site scope, so a read-only token
+        // probing a configuration function learns nothing about which sites the
+        // grant covers.
+        const effectivePermissions = effectiveFederatedPermissions(permissions, connection);
+        if (!effectivePermissions.includes(requiredPermission)) {
+            fail(FEDERATED_ANALYTICS_ERROR_CODES.CONFIGURE_FORBIDDEN, "Federated analytics configuration is not permitted");
+        }
+        if (requestedSiteIds !== undefined) {
+            if (requestedSiteIds.length === 0 ||
+                requestedSiteIds.length > MAX_REPORT_SITES ||
+                new Set(requestedSiteIds).size !== requestedSiteIds.length ||
+                requestedSiteIds.some((siteId) => !isBoundedClaim(siteId))) {
+                fail(FEDERATED_ANALYTICS_ERROR_CODES.INVALID_SCOPE, "Federated analytics site scope is invalid");
+            }
+            const allowedSiteIds = new Set(connection.siteIds);
+            if (requestedSiteIds.some((siteId) => !allowedSiteIds.has(siteId))) {
+                fail(FEDERATED_ANALYTICS_ERROR_CODES.SITE_DENIED, "Federated analytics site is not authorized");
+            }
+        }
+        return { ...connection, effectivePermissions };
+    };
+}
+function isBoundedClaim(value) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= MAX_CLAIM_LENGTH);
+}
+function isStringArray(value, maximumLength) {
+    return (Array.isArray(value) &&
+        value.length <= maximumLength &&
+        value.every(isBoundedClaim));
+}
+function isPermissionList(value) {
+    return (Array.isArray(value) &&
+        value.length <= FEDERATED_ANALYTICS_PERMISSIONS.length &&
+        value.every((entry) => FEDERATED_ANALYTICS_PERMISSIONS.includes(entry)));
+}
+function fail(code, message) {
+    throw new ConvexError({ code, message });
+}
+//# sourceMappingURL=federation.js.map

package/dist/client/federation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.js","sourceRoot":"","sources":["../../src/client/federation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAGnC,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,YAAY,EAAE,sBAAsB;IACpC,cAAc,EAAE,wBAAwB;IACxC,WAAW,EAAE,oBAAoB;CACzB,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;AACpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,qBAAqB,CAAC;AAC9E,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,mCAAmC;IACnC,wCAAwC;CAChC,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,eAAe,EAAE,4BAA4B;IAC7C,eAAe,EAAE,4BAA4B;IAC7C,cAAc,EAAE,2BAA2B;IAC3C,iBAAiB,EAAE,8BAA8B;IACjD,aAAa,EAAE,0BAA0B;IACzC,WAAW,EAAE,wBAAwB;IACrC,mBAAmB,EAAE,gCAAgC;CAC7C,CAAC,CAAC;AAEZ,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,MAAM,CAAC;IAClE,QAAQ,EAAE,UAAU;IACpB,gBAAgB,EAAE,kBAAkB;IACpC,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,eAAe;IAC9B,gBAAgB,EAAE,kBAAkB;IACpC,YAAY,EAAE,cAAc;CACpB,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,yCAAyC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrE,eAAe;IACf,UAAU;IACV,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,aAAa;IACb,gBAAgB;IAChB,OAAO;IACP,SAAS;IACT,YAAY;IACZ,cAAc;CACN,CAAC,CAAC;AACZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,eAAe,EAAE,iBAAiB;IAClC,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,oBAAoB;IACxC,sBAAsB,EAAE,wBAAwB;CACxC,CAAC,CAAC;AACZ,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,GAAG,sCAAsC;IACzC,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,GAAG,uCAAuC;CAClC,CAAC,CAAC;AACZ,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,GAAG,yCAAyC;IAC5C,QAAQ;IACR,SAAS;IACT,wEAAwE;IACxE,mEAAmE;IACnE,WAAW;IACX,WAAW;CACH,CAAC,CAAC;AACZ,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,kBAAkB,EAAE,gBAAgB;IACpC,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,qBAAqB;IACzC,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,MAAM,CAAC;IAClE,QAAQ,EAAE,wBAAwB;IAClC,eAAe,EAAE,CAAC;IAClB,UAAU,EAAE,kBAAkB;IAC9B,SAAS,EAAE,kCAAkC;IAC7C,YAAY,EAAE,gCAAgC;IAC9C,MAAM,EAAE,0BAA0B;CAC1B,CAAC,CAAC;AAEZ,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,EAAE,CAAC;AA0E3B,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACnD,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAC1B,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EACrB,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EACzB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EACrB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC3B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EACxB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC3B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAClB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EACpB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EACvB,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EACzB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EACnB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EACpB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EACtB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CACvB,CAAC;AACF,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAC1D,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,EAC9C,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC,CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,QAAQ,CAAC;IACpE,eAAe,EAAE,CAAC,CAAC,OAAO,CACxB,sCAAsC,CAAC,eAAe,CACvD;IACD,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,UAAU,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/B,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC/C,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/B,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC3C,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC7C,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACrC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACzC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC/C,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACrC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QACvC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC3C,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC7C,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC7C,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC7C,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;QACnD,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;KAC5D,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC9B,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;QACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC9B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC7B,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAA0B,EAC1B,UAA6D;IAE7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,+BAA+B,CAAC,MAAM,CAC3C,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,KAAK,mCAAmC;QAClD,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EACrD,CAAC,CAAC,IAAI,EAAE,CACT;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,GAAG,sCAAsC;QACzC,SAAS,EAAE,EAAE,GAAG,sCAAsC,CAAC,SAAS,EAAE;QAClE,YAAY,EAAE,CAAC,GAAG,sCAAsC,CAAC,YAAY,CAAC;QACtE,MAAM,EAAE,EAAE,GAAG,sCAAsC,CAAC,MAAM,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,OAA4C;IAE5C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,KAAK,EACV,GAAkC,EAClC,gBAAoC,EACpC,kBAAkB,GAAiC,mCAAmC,EACrC,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CACF,+BAA+B,CAAC,eAAe,EAC/C,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACvC,IAAI,CACF,+BAA+B,CAAC,eAAe,EAC/C,2CAA2C,CAC5C,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,QAAQ,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,QAAQ,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACrE,IACE,CAAC,cAAc,CAAC,YAAY,CAAC;YAC7B,CAAC,cAAc,CAAC,cAAc,CAAC;YAC/B,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,CAAC;YAC5C,CAAC,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAC1D,CAAC;YACD,IAAI,CACF,+BAA+B,CAAC,cAAc,EAC9C,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE;YACtD,YAAY;YACZ,cAAc;YACd,QAAQ;SACT,CAAC,CAAC;QACH,IACE,CAAC,UAAU;YACX,UAAU,CAAC,SAAS,KAAK,SAAS;YAClC,UAAU,CAAC,YAAY,KAAK,YAAY;YACxC,UAAU,CAAC,cAAc,KAAK,cAAc;YAC5C,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC;YAC3D,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,CAAC,MAAM;YAC9D,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;gBACnC,CAAC,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAC5C,CAAC;YACD,IAAI,CACF,+BAA+B,CAAC,iBAAiB,EACjD,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,gBAAgB;QAChB,MAAM,oBAAoB,GAAG,6BAA6B,CACxD,WAAW,EACX,UAAU,CACX,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvD,IAAI,CACF,+BAA+B,CAAC,mBAAmB,EACnD,oDAAoD,CACrD,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,IACE,gBAAgB,CAAC,MAAM,KAAK,CAAC;gBAC7B,gBAAgB,CAAC,MAAM,GAAG,gBAAgB;gBAC1C,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,MAAM;gBAC1D,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAC1D,CAAC;gBACD,IAAI,CACF,+BAA+B,CAAC,aAAa,EAC7C,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACnE,IAAI,CACF,+BAA+B,CAAC,WAAW,EAC3C,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,GAAG,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACjD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,gBAAgB,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,aAAqB;IAErB,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,IAAI,aAAa;QAC7B,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc;IAEd,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,IAAI,+BAA+B,CAAC,MAAM;QACtD,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,+BAAqD,CAAC,QAAQ,CAAC,KAAK,CAAC,CACvE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAiC,EAAE,OAAe;IAC9D,MAAM,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3C,CAAC"}