@marinoscar/platform-contract 0.0.0-stage → 0.1.0-next.4

package/dist/cjs/sharing/grants.js

@@ -0,0 +1,447 @@
+"use strict";
+// =============================================================================
+// Grants: the wire shapes of `/api/grants` and of link shares (issue #729)
+// =============================================================================
+//
+// A grant shares ONE record of a registered resource type with a user, a
+// group of the same organization, or (#730) anyone holding a link token, with
+// one of the type's roles and an optional expiry. Every kind is described
+// here, the link kind included, so the link routes (#730) and the share
+// dialog (#731) build against one contract.
+//
+//   GET    /api/grants?resourceType&resourceId  grantListQuerySchema   -> grantListSchema
+//   POST   /api/grants                          createGrantSchema      -> grantSchema
+//   PATCH  /api/grants/:id                      updateGrantSchema      -> grantSchema
+//   DELETE /api/grants/:id                                             -> 204
+//   GET    /api/grants/shared-with-me           sharedWithMeQuerySchema -> sharedWithMeListSchema
+//   GET    /api/sharing/grantee-kinds                                  -> granteeKindListSchema (PP-14.16)
+//
+//   POST   /api/grants/links                    linkGrantCreateSchema  -> issuedLinkGrantSchema (#730)
+//   GET    /api/grants/links?resourceType&resourceId grantListQuerySchema -> linkGrantListSchema (#730)
+//   GET    /api/public/links/current            (X-Link-Token header)  -> publicLinkResolutionSchema (#730)
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publicLinkResolutionSchema = exports.linkGrantListSchema = exports.issuedLinkGrantSchema = exports.linkGrantViewSchema = exports.linkGrantCreateSchema = exports.sharedWithMeListSchema = exports.sharedWithMeItemSchema = exports.sharedWithMeQuerySchema = exports.grantListSchema = exports.grantSchema = exports.grantGranteeViewSchema = exports.grantListQuerySchema = exports.updateGrantSchema = exports.createGrantSchema = exports.granteeKindListSchema = exports.granteeKindDescriptorSchema = exports.grantGranteeInputSchema = exports.customGranteeSchema = exports.grantGranteeKindSchema = exports.granteeKindIdSchema = exports.groupGranteeSchema = exports.userGranteeSchema = exports.grantRoleSchema = exports.resourceTypeSchema = void 0;
+const zod_1 = require("zod");
+const constants_js_1 = require("./constants.js");
+const enum_js_1 = require("./enum.js");
+const groups_js_1 = require("./groups.js");
+/**
+ * A registered resource type id (`transcript`, `media_item`).
+ *
+ * @stability experimental
+ */
+exports.resourceTypeSchema = zod_1.z
+    .string()
+    .max(constants_js_1.SHARING_LIMITS.grantIdentifierMax)
+    .regex(constants_js_1.SHARING_IDENTIFIER_PATTERN, 'A resource type is lower-case snake_case')
+    .describe('A registered resource type id, lower-case snake_case (e.g. `transcript`).');
+/**
+ * One of a resource type's grantable roles (`viewer`, `editor`). `owner` is
+ * implicit and never grantable; the API refuses a role the type does not list.
+ *
+ * @stability experimental
+ */
+exports.grantRoleSchema = zod_1.z
+    .string()
+    .max(constants_js_1.SHARING_LIMITS.grantIdentifierMax)
+    .regex(constants_js_1.SHARING_IDENTIFIER_PATTERN, 'A role is lower-case snake_case')
+    .describe("One of the resource type's grantable roles (e.g. `viewer`, `editor`).");
+/** An ISO 8601 instant with an offset, for an expiry. */
+const instantSchema = zod_1.z.iso.datetime({ offset: true });
+/**
+ * A user grantee: exactly one of `email` and `userId`. The person must be an
+ * active member of the resource's organization.
+ *
+ * @stability experimental
+ */
+exports.userGranteeSchema = zod_1.z
+    .object({
+    /** `user`. */
+    kind: zod_1.z.literal('user'),
+    /** The person's e-mail (looked up among the organization's members; failed lookups are throttled). */
+    email: groups_js_1.groupEmailSchema.optional(),
+    /** The person's user id. */
+    userId: zod_1.z.uuid().optional(),
+})
+    .strict()
+    .refine((body) => (body.email === undefined) !== (body.userId === undefined), 'Send exactly one of email and userId');
+/**
+ * A group grantee: a group of the resource's organization.
+ *
+ * @stability experimental
+ */
+exports.groupGranteeSchema = zod_1.z
+    .object({
+    /** `group`. */
+    kind: zod_1.z.literal('group'),
+    /** The group. */
+    groupId: zod_1.z.uuid(),
+})
+    .strict();
+/**
+ * An id of a registered grantee kind, built in or not (`email-domain`).
+ *
+ * @stability experimental
+ */
+exports.granteeKindIdSchema = zod_1.z
+    .string()
+    .regex(constants_js_1.GRANTEE_KIND_ID_PATTERN, 'A grantee kind is lower-case letters, digits and hyphens, starting with a letter')
+    .describe('A registered grantee kind id: lower-case letters, digits and hyphens (e.g. `email-domain`).');
+/**
+ * The kind of a grant's grantee on the wire: `user`, `group`, `link` or the id
+ * of a persisted app kind.
+ *
+ * @stability experimental
+ */
+exports.grantGranteeKindSchema = exports.granteeKindIdSchema;
+/**
+ * A grantee of an app-registered kind: the wire discriminator is the literal
+ * `custom` (so the built-in shapes keep their exact validation messages), the
+ * registered kind goes in `granteeKind` and an opaque reference the kind
+ * validates in `ref` (for example kind `custom`, `granteeKind` `email-domain`
+ * and `ref` `example.com`). The API answers 422 `GRANTEE_KIND_UNKNOWN` for a kind
+ * nobody registered, 422 `GRANTEE_INVALID` for a `ref` the kind rejects and 422
+ * `GRANTEE_KIND_NOT_PERSISTABLE` for a registered kind that is not `persisted`.
+ *
+ * @stability experimental
+ */
+exports.customGranteeSchema = zod_1.z
+    .object({
+    /** `custom`: the grantee is of an app-registered kind. */
+    kind: zod_1.z.literal('custom'),
+    /** The registered kind (not `user`, `group`, `link` or `custom`). */
+    granteeKind: exports.granteeKindIdSchema.refine((kind) => kind !== 'custom' && !constants_js_1.BUILTIN_GRANTEE_KINDS.includes(kind), 'Use the built-in grantee shapes for user, group and link'),
+    /** The grantee, in the form the kind validates. */
+    ref: zod_1.z.string().min(1).max(constants_js_1.SHARING_LIMITS.granteeRefMax),
+})
+    .strict();
+/**
+ * Who `POST /api/grants` shares with: a user, a group, or (`kind: 'custom'`)
+ * a grantee of an app-registered kind. Link grants are created through their
+ * own route (#730).
+ *
+ * @stability experimental
+ */
+exports.grantGranteeInputSchema = zod_1.z.discriminatedUnion('kind', [exports.userGranteeSchema, exports.groupGranteeSchema, exports.customGranteeSchema]);
+/**
+ * One grantee kind as `GET /api/sharing/grantee-kinds` describes it: what a
+ * share dialog needs to offer it.
+ *
+ * @stability experimental
+ */
+exports.granteeKindDescriptorSchema = zod_1.z.object({
+    /** The kind's id (`user`, `group`, `link`, `email-domain`). */
+    kind: exports.granteeKindIdSchema,
+    /** The label a share dialog shows. */
+    label: zod_1.z.string(),
+    /** A sentence about who the kind shares with, or `null`. */
+    description: zod_1.z.string().nullable(),
+    /** How the dialog collects the grantee. */
+    input: (0, enum_js_1.wireEnum)(constants_js_1.GRANTEE_KIND_INPUTS),
+    /** Whether the platform ships the kind (`user`, `group`, `link`). */
+    builtin: zod_1.z.boolean(),
+    /** Whether grants of this kind are stored (the built-ins and any app kind registered `persisted`). */
+    persisted: zod_1.z.boolean(),
+});
+/**
+ * `GET /api/sharing/grantee-kinds` response: the registered kinds, in registration order.
+ *
+ * @stability experimental
+ */
+exports.granteeKindListSchema = zod_1.z.object({
+    /** The kinds. */
+    items: zod_1.z.array(exports.granteeKindDescriptorSchema),
+});
+/**
+ * `POST /api/grants` body. Granting a grantee that already has an active
+ * grant on the record replaces its role (one role per grantee).
+ *
+ * @stability experimental
+ */
+exports.createGrantSchema = zod_1.z
+    .object({
+    /** The record's resource type. */
+    resourceType: exports.resourceTypeSchema,
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+    /** Who to share with. */
+    grantee: exports.grantGranteeInputSchema,
+    /** The role to grant. */
+    role: exports.grantRoleSchema,
+    /** When the grant stops working; absent or `null` for never. Must be in the future. */
+    expiresAt: instantSchema.nullish(),
+})
+    .strict();
+/** A link's label: trimmed, 1 to `linkLabelMax` characters. */
+const linkLabelSchema = zod_1.z.string().trim().min(1).max(constants_js_1.SHARING_LIMITS.linkLabelMax);
+/**
+ * `PATCH /api/grants/:id` body: at least one field. `label` applies to a
+ * link grant only (#730; 422 `NOT_A_LINK_GRANT` on any other kind).
+ *
+ * @stability experimental
+ */
+exports.updateGrantSchema = zod_1.z
+    .object({
+    /** A new role. */
+    role: exports.grantRoleSchema.optional(),
+    /** A new expiry; `null` removes it (a link's is capped by the deployment's maximum link lifetime). */
+    expiresAt: instantSchema.nullable().optional(),
+    /** A link grant's new label; `null` removes it (#730). */
+    label: linkLabelSchema.nullable().optional(),
+})
+    .strict()
+    .refine((body) => Object.keys(body).length > 0, 'Send at least one field');
+/**
+ * `GET /api/grants` query: the record whose active grants to list, and the
+ * page.
+ *
+ * @stability experimental
+ */
+exports.grantListQuerySchema = groups_js_1.pageQuerySchema.extend({
+    /** The record's resource type. */
+    resourceType: exports.resourceTypeSchema,
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+});
+/**
+ * The grantee of a grant as the API returns it. The fields of the other kinds
+ * are `null`.
+ *
+ * @stability experimental
+ */
+exports.grantGranteeViewSchema = zod_1.z.object({
+    /** `user`, `group`, `link` or the id of a persisted app kind. */
+    kind: exports.grantGranteeKindSchema,
+    /** The user (kind `user`). */
+    userId: zod_1.z.uuid().nullable(),
+    /** Their e-mail (kind `user`). */
+    email: zod_1.z.email().nullable(),
+    /** Their display name (kind `user`), or `null`. */
+    displayName: zod_1.z.string().nullable(),
+    /** The group (kind `group`). */
+    groupId: zod_1.z.uuid().nullable(),
+    /** The group's name (kind `group`). */
+    groupName: zod_1.z.string().nullable(),
+    /** The grantee reference of an app kind (`example.com` for `email-domain`); `null` for the built-in kinds. */
+    ref: zod_1.z.string().nullable(),
+    /** The kind's description of the grantee of an app kind ("Anyone at example.com"); `null` for the built-in kinds. */
+    display: zod_1.z.string().nullable(),
+});
+/**
+ * One user or group grant.
+ *
+ * @stability experimental
+ */
+exports.grantSchema = zod_1.z.object({
+    /** The grant's id. */
+    id: zod_1.z.uuid(),
+    /** The organization of the record. */
+    orgId: zod_1.z.uuid(),
+    /** The record's resource type. */
+    resourceType: zod_1.z.string(),
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+    /** Who it shares with. */
+    grantee: exports.grantGranteeViewSchema,
+    /** The granted role. */
+    role: zod_1.z.string(),
+    /** When it stops working, or `null`. */
+    expiresAt: zod_1.z.iso.datetime().nullable(),
+    /** When it was revoked, or `null` (an active grant). */
+    revokedAt: zod_1.z.iso.datetime().nullable(),
+    /** Who granted it, or `null` (deleted user). */
+    grantedById: zod_1.z.uuid().nullable(),
+    /** When it was created. */
+    createdAt: zod_1.z.iso.datetime(),
+    /** When it last changed. */
+    updatedAt: zod_1.z.iso.datetime(),
+});
+/**
+ * A page of grants.
+ *
+ * @stability experimental
+ */
+exports.grantListSchema = zod_1.z.object({
+    /** The grants of this page. */
+    items: zod_1.z.array(exports.grantSchema),
+    /** Grants in the whole list. */
+    total: zod_1.z.number().int(),
+    /** This page's number. */
+    page: zod_1.z.number().int(),
+    /** The page size. */
+    pageSize: zod_1.z.number().int(),
+    /** Pages in the whole list. */
+    totalPages: zod_1.z.number().int(),
+});
+/**
+ * `GET /api/grants/shared-with-me` query: optionally one resource type, and
+ * the page.
+ *
+ * @stability experimental
+ */
+exports.sharedWithMeQuerySchema = groups_js_1.pageQuerySchema.extend({
+    /** Only records of this type. */
+    resourceType: exports.resourceTypeSchema.optional(),
+});
+/**
+ * One record shared with the caller.
+ *
+ * @stability experimental
+ */
+exports.sharedWithMeItemSchema = zod_1.z.object({
+    /** The grant that shares it. */
+    grantId: zod_1.z.uuid(),
+    /** The record's resource type. */
+    resourceType: zod_1.z.string(),
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+    /** The granted role. */
+    role: zod_1.z.string(),
+    /** `user_grant` (shared with you), `group_grant` (shared with a group you belong to) or the `via` of an app grantee kind. */
+    via: zod_1.z.string(),
+    /** The group, for a group grant. */
+    groupId: zod_1.z.uuid().nullable(),
+    /** The record's label, when its resource type describes it. */
+    title: zod_1.z.string().nullable(),
+    /** The app path of the record, when its resource type describes it. */
+    path: zod_1.z.string().nullable(),
+    /** Who shared it, or `null`. */
+    grantedById: zod_1.z.uuid().nullable(),
+    /** When the grant stops working, or `null`. */
+    expiresAt: zod_1.z.iso.datetime().nullable(),
+    /** When it was shared. */
+    createdAt: zod_1.z.iso.datetime(),
+});
+/**
+ * A page of records shared with the caller, newest first.
+ *
+ * @stability experimental
+ */
+exports.sharedWithMeListSchema = zod_1.z.object({
+    /** The items of this page. */
+    items: zod_1.z.array(exports.sharedWithMeItemSchema),
+    /** Items in the whole list. */
+    total: zod_1.z.number().int(),
+    /** This page's number. */
+    page: zod_1.z.number().int(),
+    /** The page size. */
+    pageSize: zod_1.z.number().int(),
+    /** Pages in the whole list. */
+    totalPages: zod_1.z.number().int(),
+});
+// ---- link grants (the routes are #730) ------------------------------------------------
+/**
+ * `POST /api/grants/links` body (#730): the record, the role (one the type
+ * lists under `grantable.link`; absent: the weakest of them), an optional
+ * expiry and label, and whether to reuse the caller's active link.
+ *
+ * @stability experimental
+ */
+exports.linkGrantCreateSchema = zod_1.z
+    .object({
+    /** The record's resource type. */
+    resourceType: exports.resourceTypeSchema,
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+    /** The role anyone holding the link gets; absent: the weakest role the type grants to links. */
+    role: exports.grantRoleSchema.optional(),
+    /**
+     * When the link stops working: absent for the deployment's default
+     * lifetime, `null` for none; must be in the future. Either way capped by
+     * the deployment's maximum link lifetime.
+     */
+    expiresAt: instantSchema.nullish(),
+    /** A label for the owner's list ("Shared with the printer"). */
+    label: linkLabelSchema.nullish(),
+    /**
+     * Return the caller's ACTIVE link to the record with the same role
+     * instead of creating another (MemoriaHub's behaviour). Its token is
+     * returned again; expiry and label are left as they are.
+     */
+    reuseActive: zod_1.z.boolean().optional(),
+})
+    .strict();
+/**
+ * One link grant as its record's sharer sees it (#730).
+ *
+ * @stability experimental
+ */
+exports.linkGrantViewSchema = zod_1.z.object({
+    /** The grant's id. */
+    id: zod_1.z.uuid(),
+    /** The organization of the record. */
+    orgId: zod_1.z.uuid(),
+    /** The record's resource type. */
+    resourceType: zod_1.z.string(),
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+    /** The role anyone holding the link gets. */
+    role: zod_1.z.string(),
+    /** The label, or `null`. */
+    label: zod_1.z.string().nullable(),
+    /**
+     * The share URL (`buildLinkUrl`, token in the fragment), or `null` when the
+     * token cannot be shown.
+     */
+    url: zod_1.z.string().nullable(),
+    /** When the link stops working, or `null`. */
+    expiresAt: zod_1.z.iso.datetime().nullable(),
+    /** When it was revoked, or `null`. */
+    revokedAt: zod_1.z.iso.datetime().nullable(),
+    /** Who created it, or `null`. */
+    grantedById: zod_1.z.uuid().nullable(),
+    /** When it was created. */
+    createdAt: zod_1.z.iso.datetime(),
+});
+/**
+ * The `POST /api/grants/links` response (#730): the link, its URL and its
+ * token. The response body is the ONLY place the API returns a token in
+ * clear; the list re-derives the URL instead.
+ *
+ * @stability experimental
+ */
+exports.issuedLinkGrantSchema = zod_1.z.object({
+    /** The link grant. */
+    grant: exports.linkGrantViewSchema,
+    /** The share URL (`buildLinkUrl`): the token rides in the fragment. */
+    url: zod_1.z.string(),
+    /** The token (`lnk_` and 43 base64url characters), for clients that build their own URL. */
+    token: zod_1.z.string().regex(constants_js_1.LINK_TOKEN_PATTERN),
+});
+/**
+ * A page of a record's link grants, newest first (#730).
+ *
+ * @stability experimental
+ */
+exports.linkGrantListSchema = zod_1.z.object({
+    /** The links of this page. */
+    items: zod_1.z.array(exports.linkGrantViewSchema),
+    /** Links in the whole list. */
+    total: zod_1.z.number().int(),
+    /** This page's number. */
+    page: zod_1.z.number().int(),
+    /** The page size. */
+    pageSize: zod_1.z.number().int(),
+    /** Pages in the whole list. */
+    totalPages: zod_1.z.number().int(),
+});
+/**
+ * What resolving a link token publicly returns (#730). An unknown, expired or
+ * revoked token is a generic 404, never a different answer.
+ *
+ * @stability experimental
+ */
+exports.publicLinkResolutionSchema = zod_1.z.object({
+    /** The record's resource type. */
+    resourceType: zod_1.z.string(),
+    /** The record. */
+    resourceId: zod_1.z.uuid(),
+    /** The role the link grants. */
+    role: zod_1.z.string(),
+    /** When the link stops working, or `null`. */
+    expiresAt: zod_1.z.iso.datetime().nullable(),
+    /** The record's label, when its resource type describes it. */
+    title: zod_1.z.string().nullable(),
+});
+//# sourceMappingURL=grants.js.map

package/dist/cjs/sharing/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../../src/sharing/grants.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAC9E,0EAA0E;AAC1E,wEAAwE;AACxE,4CAA4C;AAC5C,EAAE;AACF,0FAA0F;AAC1F,sFAAsF;AACtF,sFAAsF;AACtF,8EAA8E;AAC9E,kGAAkG;AAClG,2GAA2G;AAC3G,EAAE;AACF,uGAAuG;AACvG,wGAAwG;AACxG,4GAA4G;AAC5G,gFAAgF;;;AAEhF,6BAAwB;AAExB,iDAAqK;AACrK,uCAAqC;AACrC,2CAAgE;AAEhE;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,6BAAc,CAAC,kBAAkB,CAAC;KACtC,KAAK,CAAC,yCAA0B,EAAE,0CAA0C,CAAC;KAC7E,QAAQ,CAAC,2EAA2E,CAAC,CAAC;AAEzF;;;;;GAKG;AACU,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,EAAE;KACR,GAAG,CAAC,6BAAc,CAAC,kBAAkB,CAAC;KACtC,KAAK,CAAC,yCAA0B,EAAE,iCAAiC,CAAC;KACpE,QAAQ,CAAC,uEAAuE,CAAC,CAAC;AAErF,yDAAyD;AACzD,MAAM,aAAa,GAAG,OAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvD;;;;;GAKG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,cAAc;IACd,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,sGAAsG;IACtG,KAAK,EAAE,4BAAgB,CAAC,QAAQ,EAAE;IAClC,4BAA4B;IAC5B,MAAM,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,sCAAsC,CAAC,CAAC;AAExH;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,eAAe;IACf,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,iBAAiB;IACjB,OAAO,EAAE,OAAC,CAAC,IAAI,EAAE;CAClB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CAAC,sCAAuB,EAAE,kFAAkF,CAAC;KAClH,QAAQ,CAAC,6FAA6F,CAAC,CAAC;AAE3G;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,2BAAmB,CAAC;AAE1D;;;;;;;;;;GAUG;AACU,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,0DAA0D;IAC1D,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,qEAAqE;IACrE,WAAW,EAAE,2BAAmB,CAAC,MAAM,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAE,oCAA2C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3F,0DAA0D,CAC3D;IACD,mDAAmD;IACnD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAc,CAAC,aAAa,CAAC;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;GAMG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,yBAAiB,EAAE,0BAAkB,EAAE,2BAAmB,CAAC,CAAC,CAAC;AAElI;;;;;GAKG;AACU,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,+DAA+D;IAC/D,IAAI,EAAE,2BAAmB;IACzB,sCAAsC;IACtC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,4DAA4D;IAC5D,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,2CAA2C;IAC3C,KAAK,EAAE,IAAA,kBAAQ,EAAC,kCAAmB,CAAC;IACpC,qEAAqE;IACrE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,sGAAsG;IACtG,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,iBAAiB;IACjB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,mCAA2B,CAAC;CAC5C,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,kCAAkC;IAClC,YAAY,EAAE,0BAAkB;IAChC,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;IACpB,yBAAyB;IACzB,OAAO,EAAE,+BAAuB;IAChC,yBAAyB;IACzB,IAAI,EAAE,uBAAe;IACrB,uFAAuF;IACvF,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+DAA+D;AAC/D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAc,CAAC,YAAY,CAAC,CAAC;AAElF;;;;;GAKG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,kBAAkB;IAClB,IAAI,EAAE,uBAAe,CAAC,QAAQ,EAAE;IAChC,sGAAsG;IACtG,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,0DAA0D;IAC1D,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAE7E;;;;;GAKG;AACU,QAAA,oBAAoB,GAAG,2BAAe,CAAC,MAAM,CAAC;IACzD,kCAAkC;IAClC,YAAY,EAAE,0BAAkB;IAChC,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;CACrB,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,iEAAiE;IACjE,IAAI,EAAE,8BAAsB;IAC5B,8BAA8B;IAC9B,MAAM,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3B,kCAAkC;IAClC,KAAK,EAAE,OAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,mDAAmD;IACnD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gCAAgC;IAChC,OAAO,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC5B,uCAAuC;IACvC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,8GAA8G;IAC9G,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,qHAAqH;IACrH,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,sBAAsB;IACtB,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE;IACZ,sCAAsC;IACtC,KAAK,EAAE,OAAC,CAAC,IAAI,EAAE;IACf,kCAAkC;IAClC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;IACpB,0BAA0B;IAC1B,OAAO,EAAE,8BAAsB;IAC/B,wBAAwB;IACxB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,wCAAwC;IACxC,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,wDAAwD;IACxD,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,gDAAgD;IAChD,WAAW,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,2BAA2B;IAC3B,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,4BAA4B;IAC5B,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,+BAA+B;IAC/B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAW,CAAC;IAC3B,gCAAgC;IAChC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,0BAA0B;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,qBAAqB;IACrB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,2BAAe,CAAC,MAAM,CAAC;IAC5D,iCAAiC;IACjC,YAAY,EAAE,0BAAkB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,gCAAgC;IAChC,OAAO,EAAE,OAAC,CAAC,IAAI,EAAE;IACjB,kCAAkC;IAClC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;IACpB,wBAAwB;IACxB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,6HAA6H;IAC7H,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,oCAAoC;IACpC,OAAO,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC5B,+DAA+D;IAC/D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,uEAAuE;IACvE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,gCAAgC;IAChC,WAAW,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,+CAA+C;IAC/C,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,0BAA0B;IAC1B,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,8BAA8B;IAC9B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAsB,CAAC;IACtC,+BAA+B;IAC/B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,0BAA0B;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,qBAAqB;IACrB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAEH,0FAA0F;AAE1F;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,kCAAkC;IAClC,YAAY,EAAE,0BAAkB;IAChC,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;IACpB,gGAAgG;IAChG,IAAI,EAAE,uBAAe,CAAC,QAAQ,EAAE;IAChC;;;;OAIG;IACH,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE;IAClC,gEAAgE;IAChE,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE;IAChC;;;;OAIG;IACH,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,sBAAsB;IACtB,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE;IACZ,sCAAsC;IACtC,KAAK,EAAE,OAAC,CAAC,IAAI,EAAE;IACf,kCAAkC;IAClC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;IACpB,6CAA6C;IAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,4BAA4B;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B;;;OAGG;IACH,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,8CAA8C;IAC9C,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,sCAAsC;IACtC,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,iCAAiC;IACjC,WAAW,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,2BAA2B;IAC3B,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,sBAAsB;IACtB,KAAK,EAAE,2BAAmB;IAC1B,uEAAuE;IACvE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,4FAA4F;IAC5F,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAkB,CAAC;CAC5C,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,8BAA8B;IAC9B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC;IACnC,+BAA+B;IAC/B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,0BAA0B;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,qBAAqB;IACrB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,kCAAkC;IAClC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,OAAC,CAAC,IAAI,EAAE;IACpB,gCAAgC;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,8CAA8C;IAC9C,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,+DAA+D;IAC/D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}