@librechat/data-schemas 0.0.43 → 0.0.45

package/dist/methods/aclEntry.cjs

@@ -0,0 +1,361 @@
+'use strict';
+
+var mongoose = require('mongoose');
+var librechatDataProvider = require('librechat-data-provider');
+
+function createAclEntryMethods(mongoose$1) {
+    /**
+     * Find ACL entries for a specific principal (user or group)
+     * @param principalType - The type of principal ('user', 'group')
+     * @param principalId - The ID of the principal
+     * @param resourceType - Optional filter by resource type
+     * @returns Array of ACL entries
+     */
+    async function findEntriesByPrincipal(principalType, principalId, resourceType) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const query = { principalType, principalId };
+        if (resourceType) {
+            query.resourceType = resourceType;
+        }
+        return await AclEntry.find(query).lean();
+    }
+    /**
+     * Find ACL entries for a specific resource
+     * @param resourceType - The type of resource ('agent', 'project', 'file')
+     * @param resourceId - The ID of the resource
+     * @returns Array of ACL entries
+     */
+    async function findEntriesByResource(resourceType, resourceId) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        return await AclEntry.find({ resourceType, resourceId }).lean();
+    }
+    /**
+     * Find all ACL entries for a set of principals (including public)
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @returns Array of matching ACL entries
+     */
+    async function findEntriesByPrincipalsAndResource(principalsList, resourceType, resourceId) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== librechatDataProvider.PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        return await AclEntry.find({
+            $or: principalsQuery,
+            resourceType,
+            resourceId,
+        }).lean();
+    }
+    /**
+     * Check if a set of principals has a specific permission on a resource
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param permissionBit - The permission bit to check (use PermissionBits enum)
+     * @returns Whether any of the principals has the permission
+     */
+    async function hasPermission(principalsList, resourceType, resourceId, permissionBit) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== librechatDataProvider.PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        const entry = await AclEntry.findOne({
+            $or: principalsQuery,
+            resourceType,
+            resourceId,
+            permBits: { $bitsAllSet: permissionBit },
+        }).lean();
+        return !!entry;
+    }
+    /**
+     * Get the combined effective permissions for a set of principals on a resource
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @returns {Promise<number>} Effective permission bitmask
+     */
+    async function getEffectivePermissions(principalsList, resourceType, resourceId) {
+        const aclEntries = await findEntriesByPrincipalsAndResource(principalsList, resourceType, resourceId);
+        let effectiveBits = 0;
+        for (const entry of aclEntries) {
+            effectiveBits |= entry.permBits;
+        }
+        return effectiveBits;
+    }
+    /**
+     * Get effective permissions for multiple resources in a single query (BATCH)
+     * Returns a map of resourceId → effectivePermissionBits
+     *
+     * @param principalsList - List of principals (user + groups + public)
+     * @param resourceType - The type of resource ('MCPSERVER', 'AGENT', etc.)
+     * @param resourceIds - Array of resource IDs to check
+     * @returns {Promise<Map<string, number>>} Map of resourceId → permission bits
+     *
+     * @example
+     * const principals = await getUserPrincipals({ userId, role });
+     * const serverIds = [id1, id2, id3];
+     * const permMap = await getEffectivePermissionsForResources(
+     *   principals,
+     *   ResourceType.MCPSERVER,
+     *   serverIds
+     * );
+     * // permMap.get(id1.toString()) → 7 (VIEW|EDIT|DELETE)
+     */
+    async function getEffectivePermissionsForResources(principalsList, resourceType, resourceIds) {
+        if (!Array.isArray(resourceIds) || resourceIds.length === 0) {
+            return new Map();
+        }
+        const AclEntry = mongoose$1.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== librechatDataProvider.PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        // Batch query for all resources at once
+        const aclEntries = await AclEntry.find({
+            $or: principalsQuery,
+            resourceType,
+            resourceId: { $in: resourceIds },
+        }).lean();
+        // Compute effective permissions per resource
+        const permissionsMap = new Map();
+        for (const entry of aclEntries) {
+            const rid = entry.resourceId.toString();
+            const currentBits = permissionsMap.get(rid) || 0;
+            permissionsMap.set(rid, currentBits | entry.permBits);
+        }
+        return permissionsMap;
+    }
+    /**
+     * Grant permission to a principal for a resource
+     * @param principalType - The type of principal ('user', 'group', 'public')
+     * @param principalId - The ID of the principal (null for 'public')
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param permBits - The permission bits to grant
+     * @param grantedBy - The ID of the user granting the permission
+     * @param session - Optional MongoDB session for transactions
+     * @param roleId - Optional role ID to associate with this permission
+     * @returns The created or updated ACL entry
+     */
+    async function grantPermission(principalType, principalId, resourceType, resourceId, permBits, grantedBy, session, roleId) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const query = {
+            principalType,
+            resourceType,
+            resourceId,
+        };
+        if (principalType !== librechatDataProvider.PrincipalType.PUBLIC) {
+            query.principalId =
+                typeof principalId === 'string' && principalType !== librechatDataProvider.PrincipalType.ROLE
+                    ? new mongoose.Types.ObjectId(principalId)
+                    : principalId;
+            if (principalType === librechatDataProvider.PrincipalType.USER) {
+                query.principalModel = librechatDataProvider.PrincipalModel.USER;
+            }
+            else if (principalType === librechatDataProvider.PrincipalType.GROUP) {
+                query.principalModel = librechatDataProvider.PrincipalModel.GROUP;
+            }
+            else if (principalType === librechatDataProvider.PrincipalType.ROLE) {
+                query.principalModel = librechatDataProvider.PrincipalModel.ROLE;
+            }
+        }
+        const update = {
+            $set: {
+                permBits,
+                grantedBy,
+                grantedAt: new Date(),
+                ...(roleId && { roleId }),
+            },
+        };
+        const options = {
+            upsert: true,
+            new: true,
+            ...(session ? { session } : {}),
+        };
+        return await AclEntry.findOneAndUpdate(query, update, options);
+    }
+    /**
+     * Revoke permissions from a principal for a resource
+     * @param principalType - The type of principal ('user', 'group', 'public')
+     * @param principalId - The ID of the principal (null for 'public')
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param session - Optional MongoDB session for transactions
+     * @returns The result of the delete operation
+     */
+    async function revokePermission(principalType, principalId, resourceType, resourceId, session) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const query = {
+            principalType,
+            resourceType,
+            resourceId,
+        };
+        if (principalType !== librechatDataProvider.PrincipalType.PUBLIC) {
+            query.principalId =
+                typeof principalId === 'string' && principalType !== librechatDataProvider.PrincipalType.ROLE
+                    ? new mongoose.Types.ObjectId(principalId)
+                    : principalId;
+        }
+        const options = session ? { session } : {};
+        return await AclEntry.deleteOne(query, options);
+    }
+    /**
+     * Modify existing permission bits for a principal on a resource
+     * @param principalType - The type of principal ('user', 'group', 'public')
+     * @param principalId - The ID of the principal (null for 'public')
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param addBits - Permission bits to add
+     * @param removeBits - Permission bits to remove
+     * @param session - Optional MongoDB session for transactions
+     * @returns The updated ACL entry
+     */
+    async function modifyPermissionBits(principalType, principalId, resourceType, resourceId, addBits, removeBits, session) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const query = {
+            principalType,
+            resourceType,
+            resourceId,
+        };
+        if (principalType !== librechatDataProvider.PrincipalType.PUBLIC) {
+            query.principalId =
+                typeof principalId === 'string' && principalType !== librechatDataProvider.PrincipalType.ROLE
+                    ? new mongoose.Types.ObjectId(principalId)
+                    : principalId;
+        }
+        const update = {};
+        if (addBits) {
+            update.$bit = { permBits: { or: addBits } };
+        }
+        if (removeBits) {
+            if (!update.$bit) {
+                update.$bit = {};
+            }
+            const bitUpdate = update.$bit;
+            bitUpdate.permBits = { ...bitUpdate.permBits, and: ~removeBits };
+        }
+        const options = {
+            new: true,
+            ...(session ? { session } : {}),
+        };
+        return await AclEntry.findOneAndUpdate(query, update, options);
+    }
+    /**
+     * Find all resources of a specific type that a set of principals has access to
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param requiredPermBit - Required permission bit (use PermissionBits enum)
+     * @returns Array of resource IDs
+     */
+    async function findAccessibleResources(principalsList, resourceType, requiredPermBit) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== librechatDataProvider.PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        const entries = await AclEntry.find({
+            $or: principalsQuery,
+            resourceType,
+            permBits: { $bitsAllSet: requiredPermBit },
+        }).distinct('resourceId');
+        return entries;
+    }
+    /**
+     * Deletes ACL entries matching the given filter.
+     * @param filter - MongoDB filter query
+     * @param options - Optional query options (e.g., { session })
+     */
+    async function deleteAclEntries(filter, options) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        return AclEntry.deleteMany(filter, options || {});
+    }
+    /**
+     * Performs a bulk write operation on ACL entries.
+     * @param ops - Array of bulk write operations
+     * @param options - Optional query options (e.g., { session })
+     */
+    async function bulkWriteAclEntries(ops, options) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        return AclEntry.bulkWrite(ops, options || {});
+    }
+    /**
+     * Finds all publicly accessible resource IDs for a given resource type.
+     * @param resourceType - The type of resource
+     * @param requiredPermissions - Required permission bits
+     */
+    async function findPublicResourceIds(resourceType, requiredPermissions) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        return AclEntry.find({
+            principalType: librechatDataProvider.PrincipalType.PUBLIC,
+            resourceType,
+            permBits: { $bitsAllSet: requiredPermissions },
+        }).distinct('resourceId');
+    }
+    /**
+     * Runs an aggregation pipeline on the AclEntry collection.
+     * @param pipeline - MongoDB aggregation pipeline stages
+     */
+    async function aggregateAclEntries(pipeline) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        return AclEntry.aggregate(pipeline);
+    }
+    /**
+     * Returns resource IDs solely owned by the given user (no other principals
+     * hold DELETE on the same resource). Handles both single and array resource types.
+     */
+    async function getSoleOwnedResourceIds(userObjectId, resourceTypes) {
+        const AclEntry = mongoose$1.models.AclEntry;
+        const types = Array.isArray(resourceTypes) ? resourceTypes : [resourceTypes];
+        const ownedEntries = await AclEntry.find({
+            principalType: librechatDataProvider.PrincipalType.USER,
+            principalId: userObjectId,
+            resourceType: { $in: types },
+            permBits: { $bitsAllSet: librechatDataProvider.PermissionBits.DELETE },
+        })
+            .select('resourceId')
+            .lean();
+        if (ownedEntries.length === 0) {
+            return [];
+        }
+        const ownedIds = ownedEntries.map((e) => e.resourceId);
+        const otherOwners = await AclEntry.aggregate([
+            {
+                $match: {
+                    resourceType: { $in: types },
+                    resourceId: { $in: ownedIds },
+                    permBits: { $bitsAllSet: librechatDataProvider.PermissionBits.DELETE },
+                    $or: [
+                        { principalId: { $ne: userObjectId } },
+                        { principalType: { $ne: librechatDataProvider.PrincipalType.USER } },
+                    ],
+                },
+            },
+            { $group: { _id: '$resourceId' } },
+        ]);
+        const multiOwnerIds = new Set(otherOwners.map((doc) => doc._id.toString()));
+        return ownedIds.filter((id) => !multiOwnerIds.has(id.toString()));
+    }
+    return {
+        findEntriesByPrincipal,
+        findEntriesByResource,
+        findEntriesByPrincipalsAndResource,
+        hasPermission,
+        getEffectivePermissions,
+        getEffectivePermissionsForResources,
+        grantPermission,
+        revokePermission,
+        modifyPermissionBits,
+        findAccessibleResources,
+        deleteAclEntries,
+        bulkWriteAclEntries,
+        findPublicResourceIds,
+        aggregateAclEntries,
+        getSoleOwnedResourceIds,
+    };
+}
+
+exports.createAclEntryMethods = createAclEntryMethods;
+//# sourceMappingURL=aclEntry.cjs.map

package/dist/methods/aclEntry.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"aclEntry.cjs","sources":["../../src/methods/aclEntry.ts"],"sourcesContent":[null],"names":["mongoose","PrincipalType","Types","PrincipalModel","PermissionBits"],"mappings":";;;;;AAWM,SAAU,qBAAqB,CAACA,UAAmC,EAAA;AACvE;;;;;;AAMG;AACH,IAAA,eAAe,sBAAsB,CACnC,aAAqB,EACrB,WAAoC,EACpC,YAAqB,EAAA;AAErB,QAAA,MAAM,QAAQ,GAAGA,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B,EAAE,aAAa,EAAE,WAAW,EAAE;QACrE,IAAI,YAAY,EAAE;AAChB,YAAA,KAAK,CAAC,YAAY,GAAG,YAAY;QACnC;QACA,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;IAC1C;AAEA;;;;;AAKG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,UAAmC,EAAA;AAEnC,QAAA,MAAM,QAAQ,GAAGA,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACjE;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,kCAAkC,CAC/C,cAAuF,EACvF,YAAoB,EACpB,UAAmC,EAAA;AAEnC,QAAA,MAAM,QAAQ,GAAGA,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAKC,mCAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;AAEH,QAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC;AACzB,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;YACZ,UAAU;SACX,CAAC,CAAC,IAAI,EAAE;IACX;AAEA;;;;;;;AAOG;IACH,eAAe,aAAa,CAC1B,cAAuF,EACvF,YAAoB,EACpB,UAAmC,EACnC,aAAqB,EAAA;AAErB,QAAA,MAAM,QAAQ,GAAGD,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAKC,mCAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACnC,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;YACZ,UAAU;AACV,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;SACzC,CAAC,CAAC,IAAI,EAAE;QAET,OAAO,CAAC,CAAC,KAAK;IAChB;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,uBAAuB,CACpC,cAAuF,EACvF,YAAoB,EACpB,UAAmC,EAAA;QAEnC,MAAM,UAAU,GAAG,MAAM,kCAAkC,CACzD,cAAc,EACd,YAAY,EACZ,UAAU,CACX;QAED,IAAI,aAAa,GAAG,CAAC;AACrB,QAAA,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE;AAC9B,YAAA,aAAa,IAAI,KAAK,CAAC,QAAQ;QACjC;AACA,QAAA,OAAO,aAAa;IACtB;AAEA;;;;;;;;;;;;;;;;;;AAkBG;AACH,IAAA,eAAe,mCAAmC,CAChD,cAAuF,EACvF,YAAoB,EACpB,WAA2C,EAAA;AAE3C,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;YAC3D,OAAO,IAAI,GAAG,EAAE;QAClB;AAEA,QAAA,MAAM,QAAQ,GAAGD,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAKC,mCAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;;AAGH,QAAA,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;AACrC,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;AACZ,YAAA,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;SACjC,CAAC,CAAC,IAAI,EAAE;;AAGT,QAAA,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB;AAChD,QAAA,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;YACvC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAChD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC;QACvD;AAEA,QAAA,OAAO,cAAc;IACvB;AAEA;;;;;;;;;;;AAWG;AACH,IAAA,eAAe,eAAe,CAC5B,aAAqB,EACrB,WAA2C,EAC3C,YAAoB,EACpB,UAAmC,EACnC,QAAgB,EAChB,SAAkC,EAClC,OAAuB,EACvB,MAAgC,EAAA;AAEhC,QAAA,MAAM,QAAQ,GAAGD,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B;YACrC,aAAa;YACb,YAAY;YACZ,UAAU;SACX;AAED,QAAA,IAAI,aAAa,KAAKC,mCAAa,CAAC,MAAM,EAAE;AAC1C,YAAA,KAAK,CAAC,WAAW;gBACf,OAAO,WAAW,KAAK,QAAQ,IAAI,aAAa,KAAKA,mCAAa,CAAC;AACjE,sBAAE,IAAIC,cAAK,CAAC,QAAQ,CAAC,WAAW;sBAC9B,WAAW;AACjB,YAAA,IAAI,aAAa,KAAKD,mCAAa,CAAC,IAAI,EAAE;AACxC,gBAAA,KAAK,CAAC,cAAc,GAAGE,oCAAc,CAAC,IAAI;YAC5C;AAAO,iBAAA,IAAI,aAAa,KAAKF,mCAAa,CAAC,KAAK,EAAE;AAChD,gBAAA,KAAK,CAAC,cAAc,GAAGE,oCAAc,CAAC,KAAK;YAC7C;AAAO,iBAAA,IAAI,aAAa,KAAKF,mCAAa,CAAC,IAAI,EAAE;AAC/C,gBAAA,KAAK,CAAC,cAAc,GAAGE,oCAAc,CAAC,IAAI;YAC5C;QACF;AAEA,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,IAAI,EAAE;gBACJ,QAAQ;gBACR,SAAS;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE;AACrB,gBAAA,IAAI,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,aAAA;SACF;AAED,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;QAED,OAAO,MAAM,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;IAChE;AAEA;;;;;;;;AAQG;IACH,eAAe,gBAAgB,CAC7B,aAAqB,EACrB,WAA2C,EAC3C,YAAoB,EACpB,UAAmC,EACnC,OAAuB,EAAA;AAEvB,QAAA,MAAM,QAAQ,GAAGH,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B;YACrC,aAAa;YACb,YAAY;YACZ,UAAU;SACX;AAED,QAAA,IAAI,aAAa,KAAKC,mCAAa,CAAC,MAAM,EAAE;AAC1C,YAAA,KAAK,CAAC,WAAW;gBACf,OAAO,WAAW,KAAK,QAAQ,IAAI,aAAa,KAAKA,mCAAa,CAAC;AACjE,sBAAE,IAAIC,cAAK,CAAC,QAAQ,CAAC,WAAW;sBAC9B,WAAW;QACnB;AAEA,QAAA,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAE1C,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IACjD;AAEA;;;;;;;;;;AAUG;AACH,IAAA,eAAe,oBAAoB,CACjC,aAAqB,EACrB,WAA2C,EAC3C,YAAoB,EACpB,UAAmC,EACnC,OAAuB,EACvB,UAA0B,EAC1B,OAAuB,EAAA;AAEvB,QAAA,MAAM,QAAQ,GAAGF,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B;YACrC,aAAa;YACb,YAAY;YACZ,UAAU;SACX;AAED,QAAA,IAAI,aAAa,KAAKC,mCAAa,CAAC,MAAM,EAAE;AAC1C,YAAA,KAAK,CAAC,WAAW;gBACf,OAAO,WAAW,KAAK,QAAQ,IAAI,aAAa,KAAKA,mCAAa,CAAC;AACjE,sBAAE,IAAIC,cAAK,CAAC,QAAQ,CAAC,WAAW;sBAC9B,WAAW;QACnB;QAEA,MAAM,MAAM,GAA4B,EAAE;QAE1C,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC7C;QAEA,IAAI,UAAU,EAAE;AACd,YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;AAChB,gBAAA,MAAM,CAAC,IAAI,GAAG,EAAE;YAClB;AACA,YAAA,MAAM,SAAS,GAAG,MAAM,CAAC,IAA+B;AACxD,YAAA,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAI,SAAS,CAAC,QAAoC,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC/F;AAEA,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;QAED,OAAO,MAAM,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;IAChE;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,uBAAuB,CACpC,cAAuF,EACvF,YAAoB,EACpB,eAAuB,EAAA;AAEvB,QAAA,MAAM,QAAQ,GAAGF,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAKC,mCAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;AAClC,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;AACZ,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;AAC3C,SAAA,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;AAEzB,QAAA,OAAO,OAAO;IAChB;AAEA;;;;AAIG;AACH,IAAA,eAAe,gBAAgB,CAC7B,MAA+B,EAC/B,OAAqC,EAAA;AAErC,QAAA,MAAM,QAAQ,GAAGD,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD;AAEA;;;;AAIG;AACH,IAAA,eAAe,mBAAmB,CAChC,GAAuC,EACvC,OAAqC,EAAA;AAErC,QAAA,MAAM,QAAQ,GAAGA,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,OAAO,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;IAC/C;AAEA;;;;AAIG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,mBAA2B,EAAA;AAE3B,QAAA,MAAM,QAAQ,GAAGA,UAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC;YACnB,aAAa,EAAEC,mCAAa,CAAC,MAAM;YACnC,YAAY;AACZ,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;AAC/C,SAAA,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC3B;AAEA;;;AAGG;IACH,eAAe,mBAAmB,CAAC,QAAyB,EAAA;AAC1D,QAAA,MAAM,QAAQ,GAAGD,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,OAAO,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;IACrC;AAEA;;;AAGG;AACH,IAAA,eAAe,uBAAuB,CACpC,YAA4B,EAC5B,aAAgC,EAAA;AAEhC,QAAA,MAAM,QAAQ,GAAGA,UAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,GAAG,CAAC,aAAa,CAAC;AAE5E,QAAA,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACvC,aAAa,EAAEC,mCAAa,CAAC,IAAI;AACjC,YAAA,WAAW,EAAE,YAAY;AACzB,YAAA,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;AAC5B,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAEG,oCAAc,CAAC,MAAM,EAAE;SACjD;aACE,MAAM,CAAC,YAAY;AACnB,aAAA,IAAI,EAAE;AAET,QAAA,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7B,YAAA,OAAO,EAAE;QACX;AAEA,QAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AAEtD,QAAA,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;AAC3C,YAAA;AACE,gBAAA,MAAM,EAAE;AACN,oBAAA,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;AAC5B,oBAAA,UAAU,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;AAC7B,oBAAA,QAAQ,EAAE,EAAE,WAAW,EAAEA,oCAAc,CAAC,MAAM,EAAE;AAChD,oBAAA,GAAG,EAAE;AACH,wBAAA,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE;wBACtC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAEH,mCAAa,CAAC,IAAI,EAAE,EAAE;AAC/C,qBAAA;AACF,iBAAA;AACF,aAAA;AACD,YAAA,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;AACnC,SAAA,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAA4B,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE;IAEA,OAAO;QACL,sBAAsB;QACtB,qBAAqB;QACrB,kCAAkC;QAClC,aAAa;QACb,uBAAuB;QACvB,mCAAmC;QACnC,eAAe;QACf,gBAAgB;QAChB,oBAAoB;QACpB,uBAAuB;QACvB,gBAAgB;QAChB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,uBAAuB;KACxB;AACH;;;;"}