@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.4

package/dist/notifications/notification-stream.service.js

@@ -0,0 +1,406 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var NotificationStreamService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationStreamService = exports.NOTIFICATION_STREAM_BUS_CHANNEL = exports.HEARTBEAT_INTERVAL_MS = exports.NOTIFICATION_SSE_EVENT = void 0;
+exports.parseNotificationStreamBusMessage = parseNotificationStreamBusMessage;
+const common_1 = require("@nestjs/common");
+const rxjs_1 = require("rxjs");
+const ports_1 = require("./ports");
+Object.defineProperty(exports, "NOTIFICATION_STREAM_BUS_CHANNEL", { enumerable: true, get: function () { return ports_1.NOTIFICATION_STREAM_BUS_CHANNEL; } });
+const index_1 = require("../core/index");
+/**
+ * SSE `event:` name carrying a new notification.
+ *
+ * NAMED RATHER THAN THE DEFAULT `message`. A named event lets the client
+ * register `addEventListener('notification', …)` and stay unbothered by
+ * anything else this stream ever carries; an unnamed event would make every
+ * future addition a breaking change for a handler that assumed `message` meant
+ * "a notification".
+  *
+  * @stability experimental
+ */
+exports.NOTIFICATION_SSE_EVENT = 'notification';
+/**
+ * How often an idle connection is sent a comment line.
+ *
+ * WHY A HEARTBEAT AT ALL: an SSE connection that sends nothing is
+ * indistinguishable, to everything between the browser and this process, from
+ * a dead one. `infra/nginx/nginx.conf` sets `proxy_read_timeout 60s` on
+ * `location /api` today (the change is #127's infra half, out of this
+ * commit's scope), and load balancers, corporate proxies and NAT tables all
+ * apply idle timeouts of their own. Without traffic the connection is reaped,
+ * the client reconnects, and the cycle repeats — a reconnect storm that looks
+ * like a flapping backend.
+ *
+ * 25 SECONDS, chosen to sit comfortably under a 30s idle timeout (the
+ * shortest in common use, and half of nginx's current 60s) with room for a
+ * scheduling delay. Shorter wastes wakeups on every idle tab; longer starts
+ * losing the race with the tightest proxy in the chain.
+ *
+ * A COMMENT (`: …`), NOT AN EVENT. Comment lines are consumed by `EventSource`
+ * and never surface to the page, so a heartbeat cannot be mistaken for a
+ * notification by a client that forgot to check the event name — while still
+ * being real bytes on the wire, which is all a proxy's idle timer cares about.
+  *
+  * @stability experimental
+ */
+exports.HEARTBEAT_INTERVAL_MS = 25_000;
+/**
+ * The comment text sent as a heartbeat. Content is irrelevant to the protocol;
+ * it is here so a human reading `curl` output knows what they are looking at.
+ */
+const HEARTBEAT_COMMENT = 'heartbeat';
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value !== '';
+}
+function isStreamEvent(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const e = value;
+    return (isNonEmptyString(e.id) &&
+        typeof e.eventKey === 'string' &&
+        typeof e.title === 'string' &&
+        typeof e.body === 'string' &&
+        (e.link === null || typeof e.link === 'string') &&
+        typeof e.createdAt === 'string' &&
+        typeof e.toast === 'boolean' &&
+        typeof e.pushed === 'boolean');
+}
+/**
+ * Validates a message received from the bus, or returns `null`.
+ *
+ * The bus is a shared database channel, so a message is DATA to check, not an
+ * instruction to follow: anything not exactly one of the two shapes above is
+ * dropped rather than partially delivered.
+  *
+  * @stability experimental
+ */
+function parseNotificationStreamBusMessage(raw) {
+    if (typeof raw !== 'object' || raw === null)
+        return null;
+    const message = raw;
+    if (!isNonEmptyString(message.userId))
+        return null;
+    if ('event' in message) {
+        return isStreamEvent(message.event) ? { userId: message.userId, event: message.event } : null;
+    }
+    const ref = message.ref;
+    if (typeof ref === 'object' &&
+        ref !== null &&
+        isNonEmptyString(ref.notificationId) &&
+        typeof ref.toast === 'boolean' &&
+        typeof ref.pushed === 'boolean') {
+        return {
+            userId: message.userId,
+            ref: { notificationId: ref.notificationId, toast: ref.toast, pushed: ref.pushed },
+        };
+    }
+    return null;
+}
+/**
+ * Exported for an app's own unit tests (`@marinoscar/platform-api/notifications/testing`); not an extension point: reach it through `NotificationsModule` and its documented seams.
+ *
+ * @internal
+ */
+let NotificationStreamService = NotificationStreamService_1 = class NotificationStreamService {
+    bus;
+    prisma;
+    logger = new common_1.Logger(NotificationStreamService_1.name);
+    /** Unsubscribes from the bus on shutdown; null when there is no bus. */
+    unsubscribeBus = null;
+    /**
+     * BOTH OPTIONAL, so `new NotificationStreamService()` remains a complete,
+     * single-process instance (the unit suite builds it that way). In the
+     * application the global host core (`EVENT_BUS`) and the app's Prisma module always
+     * provide them. Prisma is read ONLY to resolve an oversize event's reference.
+     */
+    constructor(bus, prisma) {
+        this.bus = bus;
+        this.prisma = prisma;
+    }
+    /** Starts receiving other replicas' events. Registers a handler; no I/O. */
+    onModuleInit() {
+        if (!this.bus || this.unsubscribeBus)
+            return;
+        this.unsubscribeBus = this.bus.subscribe(ports_1.NOTIFICATION_STREAM_BUS_CHANNEL, (message, meta) => this.onBusMessage(message, meta));
+    }
+    /**
+     * user id -\> that user's open connections.
+     *
+     * A `Set` per user because one person legitimately has several tabs open,
+     * and each is its own connection that must receive its own copy. The bucket
+     * is DELETED when it empties rather than left as an empty Set: a long-lived
+     * process serving many users would otherwise accumulate one Map entry per
+     * user who ever connected — a slow leak that nothing ever reclaims.
+     */
+    subscribers = new Map();
+    /**
+     * Open a stream for ONE user.
+     *
+     * The returned Observable is COLD and per-caller: the registration happens
+     * in the subscribe function, so a connection that is created and never
+     * subscribed (a client that vanishes during setup) registers nothing and
+     * leaks nothing.
+     *
+     * @param userId - the AUTHENTICATED principal's id. There is no other correct
+     *        argument — see the isolation note in the header. A caller passing
+     *        an id taken from a request parameter has built an IDOR, and the
+     *        controller is written so that value does not exist.
+     */
+    subscribe(userId) {
+        return new rxjs_1.Observable((observer) => {
+            // The SUBSCRIBER itself is what gets registered — there is no
+            // intermediate Subject. One less object per connection, and more
+            // importantly one less place a write can land while the connection it
+            // was meant for has already gone away.
+            let bucket = this.subscribers.get(userId);
+            if (!bucket) {
+                bucket = new Set();
+                this.subscribers.set(userId, bucket);
+            }
+            bucket.add(observer);
+            // An immediate comment, before anything else.
+            //
+            // NOT DECORATION. `SseStream` defers the response headers until the
+            // first message, so with nothing to send the browser sits with no
+            // headers and `EventSource.onopen` never fires — the client cannot tell
+            // "connected and idle" from "still connecting". Worse, a buffering proxy
+            // has nothing to flush and holds the connection open with zero bytes
+            // through its own idle timeout.
+            //
+            // A comment rather than an event, for the same reason heartbeats are:
+            // it commits the headers and proves the path end to end without the page
+            // seeing a message it has to recognise and discard.
+            observer.next({ comment: 'connected' });
+            const heartbeat = setInterval(() => {
+                observer.next({ comment: HEARTBEAT_COMMENT });
+            }, exports.HEARTBEAT_INTERVAL_MS);
+            // `unref` so an open SSE connection can never be the reason the process
+            // refuses to exit. Without it a single idle tab keeps the event loop
+            // alive and a `docker compose down` waits for its stop grace period on
+            // every deploy. `?.` because a test environment's fake timers may not
+            // implement it.
+            heartbeat.unref?.();
+            this.logger.debug(`SSE connection opened for user ${userId} ` +
+                `(${bucket.size} for this user, ${this.subscribers.size} users connected).`);
+            // TEARDOWN. Returned from the subscribe function, so RxJS runs it on
+            // EVERY exit path — client disconnect (Nest unsubscribes on the raw
+            // socket's `close`), stream completion, and error — rather than only on
+            // the one a hand-written `close` listener remembered to cover.
+            //
+            // Everything allocated above is released here, in the same order it was
+            // taken: the interval (a leaked one fires forever against a dead
+            // observer) and the registration (a leaked one keeps this user's bucket
+            // non-empty so it is never reclaimed, and makes `publish` write into a
+            // closed connection on every event thereafter).
+            //
+            // Idempotent by construction — `clearInterval`, `Set.delete` and
+            // `Map.delete` are all safe to run twice — because RxJS is not the only
+            // thing that can trigger it and a teardown that must run exactly once is
+            // a teardown that eventually runs zero times.
+            return () => {
+                clearInterval(heartbeat);
+                const open = this.subscribers.get(userId);
+                if (open) {
+                    open.delete(observer);
+                    if (open.size === 0)
+                        this.subscribers.delete(userId);
+                }
+                this.logger.debug(`SSE connection closed for user ${userId}.`);
+            };
+        });
+    }
+    /**
+     * Deliver a notification to every connection this user currently has open
+     * — on this replica directly, and on every other replica through the event
+     * bus (`notifications.stream`; see the header for what each adapter reaches).
+     *
+     * NEVER THROWS, and that is a hard requirement rather than a courtesy: the
+     * only caller is `BrowserNotificationChannel.deliver`, which is on the
+     * dispatcher's never-throw path (#125). A connection that has somehow
+     * already errored must not turn into a failed delivery for a row that was
+     * written successfully.
+     *
+     * NO-OP WHEN NOBODY IS LISTENING, and that is the NORMAL case — the user has
+     * no tab open. It is emphatically not a failure: the `notifications` row is
+     * already written and the bell will show it at next login. The browser
+     * channel therefore reports success on a publish that reached zero
+     * connections; see its own comment for why anything else would mark real
+     * deliveries as failures.
+     *
+     * @returns how many connections ON THIS REPLICA it was written to. For
+     *          logging and tests only — no caller makes a delivery decision from
+     *          it, and other replicas' deliveries are not (cannot be) counted.
+     */
+    publish(userId, event) {
+        const delivered = this.deliverLocal(userId, event);
+        // Then every other replica, fire and forget. `EventBus.publish` never
+        // rejects, so neither does this; the `void` is the whole error handling.
+        if (this.bus) {
+            void this.bus.publish(ports_1.NOTIFICATION_STREAM_BUS_CHANNEL, this.busMessageFor(userId, event));
+        }
+        return delivered;
+    }
+    /**
+     * The full event when it fits in a bus envelope, a reference when it does
+     * not. See "OVERSIZE EVENTS TRAVEL BY REFERENCE" in the header.
+     */
+    busMessageFor(userId, event) {
+        const full = { userId, event };
+        if (!this.exceedsInlineLimit(full))
+            return full;
+        return { userId, ref: { notificationId: event.id, toast: event.toast, pushed: event.pushed } };
+    }
+    /**
+     * Another replica's event. Our own (`meta.local`) was already delivered by
+     * `publish`, so it is ignored — delivering it again would double every frame.
+     */
+    /**
+     * Whether the full event is too large to publish inline: the bus's own
+     * answer when it gives one, else a conservative byte estimate.
+     */
+    exceedsInlineLimit(message) {
+        if (this.bus?.exceedsPayloadLimit)
+            return this.bus.exceedsPayloadLimit(ports_1.NOTIFICATION_STREAM_BUS_CHANNEL, message);
+        try {
+            return Buffer.byteLength(JSON.stringify(message), 'utf8') > ports_1.NOTIFICATION_STREAM_INLINE_LIMIT_BYTES;
+        }
+        catch {
+            return true;
+        }
+    }
+    async onBusMessage(raw, meta) {
+        if (meta.local)
+            return;
+        const message = parseNotificationStreamBusMessage(raw);
+        if (!message) {
+            this.logger.warn(`Dropping a malformed "${ports_1.NOTIFICATION_STREAM_BUS_CHANNEL}" message from the event bus.`);
+            return;
+        }
+        if ('event' in message) {
+            this.deliverLocal(message.userId, message.event);
+            return;
+        }
+        // Nobody on this replica is listening for this user: skip the read.
+        if (this.connectionCount(message.userId) === 0)
+            return;
+        const event = await this.resolveReference(message.userId, message.ref);
+        if (event)
+            this.deliverLocal(message.userId, event);
+    }
+    /**
+     * Reads a referenced notification back, scoped to its user.
+     *
+     * ⚠ `id` AND `userId` ARE BOTH IN THE `where`. The id alone would let a
+     * reference naming user A and notification-of-user-B push B's row into A's
+     * tabs. With both, the worst a bad reference can do is find nothing.
+     */
+    async resolveReference(userId, ref) {
+        if (!this.prisma)
+            return null;
+        try {
+            const row = await this.prisma.notification.findFirst({
+                where: { id: ref.notificationId, userId },
+                select: { id: true, eventKey: true, title: true, body: true, link: true, createdAt: true },
+            });
+            if (!row)
+                return null;
+            return {
+                id: row.id,
+                eventKey: row.eventKey,
+                title: row.title,
+                body: row.body,
+                link: row.link,
+                createdAt: row.createdAt.toISOString(),
+                toast: ref.toast,
+                pushed: ref.pushed,
+            };
+        }
+        catch (err) {
+            this.logger.debug(`Could not resolve a streamed notification reference: ${err instanceof Error ? err.message : 'unknown error'}`);
+            return null;
+        }
+    }
+    /**
+     * Writes one event into ONE user's bucket on THIS replica. The original body
+     * of `publish`, and still the only code that touches a connection.
+     */
+    deliverLocal(userId, event) {
+        const bucket = this.subscribers.get(userId);
+        if (!bucket || bucket.size === 0)
+            return 0;
+        let delivered = 0;
+        for (const observer of bucket) {
+            try {
+                observer.next({ type: exports.NOTIFICATION_SSE_EVENT, data: event });
+                delivered += 1;
+            }
+            catch (err) {
+                // A closed or errored connection. Logged at debug, not warn: the
+                // overwhelmingly likely cause is a connection that died between the
+                // Map lookup and this write, which is an ordinary race on a stream
+                // whose client is a browser tab that can be closed at any instant.
+                this.logger.debug(`Dropping a stream write for user ${userId}: ${err instanceof Error ? err.message : 'unknown error'}`);
+            }
+        }
+        return delivered;
+    }
+    /**
+     * Number of open connections for a user. Diagnostics and tests only.
+     */
+    connectionCount(userId) {
+        return this.subscribers.get(userId)?.size ?? 0;
+    }
+    /**
+     * Close every open stream on shutdown.
+     *
+     * Without this, a rolling deploy leaves clients hanging on a socket this
+     * process will never write to again until a TCP timeout notices — seconds to
+     * minutes of a bell that looks connected and receives nothing. Completing
+     * the subscriber ends the response cleanly, `EventSource` sees the close
+     * immediately and reconnects to the new instance, which is the fastest
+     * correct recovery available.
+     *
+     * The per-connection teardown above also runs (completion is one of its exit
+     * paths), so intervals and Map entries are released here too.
+     */
+    async onModuleDestroy() {
+        this.unsubscribeBus?.();
+        this.unsubscribeBus = null;
+        if (this.subscribers.size === 0)
+            return;
+        this.logger.log(`Closing SSE connections for ${this.subscribers.size} user(s) on shutdown.`);
+        // Snapshot both levels before completing anything: `complete()` runs the
+        // per-connection teardown, which mutates the Map and the Sets being
+        // iterated — and mutating a collection mid-iteration is how a shutdown
+        // silently skips half its connections.
+        for (const bucket of [...this.subscribers.values()]) {
+            for (const observer of [...bucket]) {
+                observer.complete();
+            }
+        }
+        this.subscribers.clear();
+    }
+};
+exports.NotificationStreamService = NotificationStreamService;
+exports.NotificationStreamService = NotificationStreamService = NotificationStreamService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)(ports_1.NOTIFICATIONS_EVENT_BUS)),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [Object, Object])
+], NotificationStreamService);
+//# sourceMappingURL=notification-stream.service.js.map

package/dist/notifications/notification-stream.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-stream.service.js","sourceRoot":"","sources":["../../src/notifications/notification-stream.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AA0UA,8EAwBC;AAlWD,2CAOwB;AACxB,+BAAmD;AAEnD,mCAMiB;AAmPR,gHAvPP,uCAA+B,OAuPO;AAlPxC,yCAAgD;AAkLhD;;;;;;;;;;GAUG;AACU,QAAA,sBAAsB,GAAG,cAAc,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,qBAAqB,GAAG,MAAM,CAAC;AAE5C;;;GAGG;AACH,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAgEtC,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC/C,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS;QAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,iCAAiC,CAAC,GAAY;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,OAAO,GAAG,GAA8B,CAAC;IAC/C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAA0C,CAAC;IAC/D,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC;QACpC,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS;QAC9B,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,EAC/B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;SAClF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AAEI,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAa4B;IACR;IAbvC,MAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IAErE,wEAAwE;IAChE,cAAc,GAAwB,IAAI,CAAC;IAEnD;;;;;OAKG;IACH,YACgE,GAA2B,EACnC,MAA4B;QADpB,QAAG,GAAH,GAAG,CAAwB;QACnC,WAAM,GAAN,MAAM,CAAsB;IACjF,CAAC;IAEJ,4EAA4E;IAC5E,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAE7C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CACtC,uCAA+B,EAC/B,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CACpD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACc,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE9E;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,MAAc;QACtB,OAAO,IAAI,iBAAU,CAAa,CAAC,QAAQ,EAAE,EAAE;YAC7C,8DAA8D;YAC9D,iEAAiE;YACjE,sEAAsE;YACtE,uCAAuC;YACvC,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACnB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAErB,8CAA8C;YAC9C,EAAE;YACF,oEAAoE;YACpE,kEAAkE;YAClE,wEAAwE;YACxE,yEAAyE;YACzE,qEAAqE;YACrE,gCAAgC;YAChC,EAAE;YACF,sEAAsE;YACtE,yEAAyE;YACzE,oDAAoD;YACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAExC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAChD,CAAC,EAAE,6BAAqB,CAAC,CAAC;YAE1B,wEAAwE;YACxE,qEAAqE;YACrE,uEAAuE;YACvE,sEAAsE;YACtE,gBAAgB;YAChB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAEpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,kCAAkC,MAAM,GAAG;gBACzC,IAAI,MAAM,CAAC,IAAI,mBAAmB,IAAI,CAAC,WAAW,CAAC,IAAI,oBAAoB,CAC9E,CAAC;YAEF,qEAAqE;YACrE,oEAAoE;YACpE,wEAAwE;YACxE,+DAA+D;YAC/D,EAAE;YACF,wEAAwE;YACxE,iEAAiE;YACjE,wEAAwE;YACxE,uEAAuE;YACvE,gDAAgD;YAChD,EAAE;YACF,iEAAiE;YACjE,wEAAwE;YACxE,yEAAyE;YACzE,8CAA8C;YAC9C,OAAO,GAAG,EAAE;gBACV,aAAa,CAAC,SAAS,CAAC,CAAC;gBAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACtB,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;wBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,MAAc,EAAE,KAA8B;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEnD,sEAAsE;QACtE,yEAAyE;QACzE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,uCAA+B,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,MAAc,EAAE,KAA8B;QAClE,MAAM,IAAI,GAAiC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;IACjG,CAAC;IAED;;;OAGG;IACH;;;OAGG;IACK,kBAAkB,CAAC,OAAqC;QAC9D,IAAI,IAAI,CAAC,GAAG,EAAE,mBAAmB;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,uCAA+B,EAAE,OAAO,CAAC,CAAC;QACjH,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG,8CAAsC,CAAC;QACrG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,IAA+B;QACtE,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAEvB,MAAM,OAAO,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,uCAA+B,+BAA+B,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QAED,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO;QAEvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,KAAK;YAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAc,EACd,GAAgE;QAEhE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;gBACnD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE;gBACzC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;aAC3F,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAEtB,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;gBACtC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,wDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eACvC,EAAE,CACH,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,MAAc,EAAE,KAA8B;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE3C,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAAsB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,oEAAoE;gBACpE,mEAAmE;gBACnE,mEAAmE;gBACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,oCAAoC,MAAM,KACxC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eACvC,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAE3B,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAExC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,+BAA+B,IAAI,CAAC,WAAW,CAAC,IAAI,uBAAuB,CAC5E,CAAC;QAEF,yEAAyE;QACzE,oEAAoE;QACpE,uEAAuE;QACvE,uCAAuC;QACvC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACpD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA/TY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;IAcR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAuB,CAAC,CAAA;IAC3C,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;;GAd3B,yBAAyB,CA+TrC"}