@marinoscar/platform-contract 0.1.0-next.3 → 0.1.0-next.4

package/dist/esm/sharing/grants.js

@@ -0,0 +1,444 @@
+// =============================================================================
+// Grants: the wire shapes of `/api/grants` and of link shares (issue #729)
+// =============================================================================
+//
+// A grant shares ONE record of a registered resource type with a user, a
+// group of the same organization, or (#730) anyone holding a link token, with
+// one of the type's roles and an optional expiry. Every kind is described
+// here, the link kind included, so the link routes (#730) and the share
+// dialog (#731) build against one contract.
+//
+//   GET    /api/grants?resourceType&resourceId  grantListQuerySchema   -> grantListSchema
+//   POST   /api/grants                          createGrantSchema      -> grantSchema
+//   PATCH  /api/grants/:id                      updateGrantSchema      -> grantSchema
+//   DELETE /api/grants/:id                                             -> 204
+//   GET    /api/grants/shared-with-me           sharedWithMeQuerySchema -> sharedWithMeListSchema
+//   GET    /api/sharing/grantee-kinds                                  -> granteeKindListSchema (PP-14.16)
+//
+//   POST   /api/grants/links                    linkGrantCreateSchema  -> issuedLinkGrantSchema (#730)
+//   GET    /api/grants/links?resourceType&resourceId grantListQuerySchema -> linkGrantListSchema (#730)
+//   GET    /api/public/links/current            (X-Link-Token header)  -> publicLinkResolutionSchema (#730)
+// =============================================================================
+import { z } from 'zod';
+import { BUILTIN_GRANTEE_KINDS, GRANTEE_KIND_ID_PATTERN, GRANTEE_KIND_INPUTS, LINK_TOKEN_PATTERN, SHARING_IDENTIFIER_PATTERN, SHARING_LIMITS } from './constants.js';
+import { wireEnum } from './enum.js';
+import { groupEmailSchema, pageQuerySchema } from './groups.js';
+/**
+ * A registered resource type id (`transcript`, `media_item`).
+ *
+ * @stability experimental
+ */
+export const resourceTypeSchema = z
+    .string()
+    .max(SHARING_LIMITS.grantIdentifierMax)
+    .regex(SHARING_IDENTIFIER_PATTERN, 'A resource type is lower-case snake_case')
+    .describe('A registered resource type id, lower-case snake_case (e.g. `transcript`).');
+/**
+ * One of a resource type's grantable roles (`viewer`, `editor`). `owner` is
+ * implicit and never grantable; the API refuses a role the type does not list.
+ *
+ * @stability experimental
+ */
+export const grantRoleSchema = z
+    .string()
+    .max(SHARING_LIMITS.grantIdentifierMax)
+    .regex(SHARING_IDENTIFIER_PATTERN, 'A role is lower-case snake_case')
+    .describe("One of the resource type's grantable roles (e.g. `viewer`, `editor`).");
+/** An ISO 8601 instant with an offset, for an expiry. */
+const instantSchema = z.iso.datetime({ offset: true });
+/**
+ * A user grantee: exactly one of `email` and `userId`. The person must be an
+ * active member of the resource's organization.
+ *
+ * @stability experimental
+ */
+export const userGranteeSchema = z
+    .object({
+    /** `user`. */
+    kind: z.literal('user'),
+    /** The person's e-mail (looked up among the organization's members; failed lookups are throttled). */
+    email: groupEmailSchema.optional(),
+    /** The person's user id. */
+    userId: z.uuid().optional(),
+})
+    .strict()
+    .refine((body) => (body.email === undefined) !== (body.userId === undefined), 'Send exactly one of email and userId');
+/**
+ * A group grantee: a group of the resource's organization.
+ *
+ * @stability experimental
+ */
+export const groupGranteeSchema = z
+    .object({
+    /** `group`. */
+    kind: z.literal('group'),
+    /** The group. */
+    groupId: z.uuid(),
+})
+    .strict();
+/**
+ * An id of a registered grantee kind, built in or not (`email-domain`).
+ *
+ * @stability experimental
+ */
+export const granteeKindIdSchema = z
+    .string()
+    .regex(GRANTEE_KIND_ID_PATTERN, 'A grantee kind is lower-case letters, digits and hyphens, starting with a letter')
+    .describe('A registered grantee kind id: lower-case letters, digits and hyphens (e.g. `email-domain`).');
+/**
+ * The kind of a grant's grantee on the wire: `user`, `group`, `link` or the id
+ * of a persisted app kind.
+ *
+ * @stability experimental
+ */
+export const grantGranteeKindSchema = granteeKindIdSchema;
+/**
+ * A grantee of an app-registered kind: the wire discriminator is the literal
+ * `custom` (so the built-in shapes keep their exact validation messages), the
+ * registered kind goes in `granteeKind` and an opaque reference the kind
+ * validates in `ref` (for example kind `custom`, `granteeKind` `email-domain`
+ * and `ref` `example.com`). The API answers 422 `GRANTEE_KIND_UNKNOWN` for a kind
+ * nobody registered, 422 `GRANTEE_INVALID` for a `ref` the kind rejects and 422
+ * `GRANTEE_KIND_NOT_PERSISTABLE` for a registered kind that is not `persisted`.
+ *
+ * @stability experimental
+ */
+export const customGranteeSchema = z
+    .object({
+    /** `custom`: the grantee is of an app-registered kind. */
+    kind: z.literal('custom'),
+    /** The registered kind (not `user`, `group`, `link` or `custom`). */
+    granteeKind: granteeKindIdSchema.refine((kind) => kind !== 'custom' && !BUILTIN_GRANTEE_KINDS.includes(kind), 'Use the built-in grantee shapes for user, group and link'),
+    /** The grantee, in the form the kind validates. */
+    ref: z.string().min(1).max(SHARING_LIMITS.granteeRefMax),
+})
+    .strict();
+/**
+ * Who `POST /api/grants` shares with: a user, a group, or (`kind: 'custom'`)
+ * a grantee of an app-registered kind. Link grants are created through their
+ * own route (#730).
+ *
+ * @stability experimental
+ */
+export const grantGranteeInputSchema = z.discriminatedUnion('kind', [userGranteeSchema, groupGranteeSchema, customGranteeSchema]);
+/**
+ * One grantee kind as `GET /api/sharing/grantee-kinds` describes it: what a
+ * share dialog needs to offer it.
+ *
+ * @stability experimental
+ */
+export const granteeKindDescriptorSchema = z.object({
+    /** The kind's id (`user`, `group`, `link`, `email-domain`). */
+    kind: granteeKindIdSchema,
+    /** The label a share dialog shows. */
+    label: z.string(),
+    /** A sentence about who the kind shares with, or `null`. */
+    description: z.string().nullable(),
+    /** How the dialog collects the grantee. */
+    input: wireEnum(GRANTEE_KIND_INPUTS),
+    /** Whether the platform ships the kind (`user`, `group`, `link`). */
+    builtin: z.boolean(),
+    /** Whether grants of this kind are stored (the built-ins and any app kind registered `persisted`). */
+    persisted: z.boolean(),
+});
+/**
+ * `GET /api/sharing/grantee-kinds` response: the registered kinds, in registration order.
+ *
+ * @stability experimental
+ */
+export const granteeKindListSchema = z.object({
+    /** The kinds. */
+    items: z.array(granteeKindDescriptorSchema),
+});
+/**
+ * `POST /api/grants` body. Granting a grantee that already has an active
+ * grant on the record replaces its role (one role per grantee).
+ *
+ * @stability experimental
+ */
+export const createGrantSchema = z
+    .object({
+    /** The record's resource type. */
+    resourceType: resourceTypeSchema,
+    /** The record. */
+    resourceId: z.uuid(),
+    /** Who to share with. */
+    grantee: grantGranteeInputSchema,
+    /** The role to grant. */
+    role: grantRoleSchema,
+    /** When the grant stops working; absent or `null` for never. Must be in the future. */
+    expiresAt: instantSchema.nullish(),
+})
+    .strict();
+/** A link's label: trimmed, 1 to `linkLabelMax` characters. */
+const linkLabelSchema = z.string().trim().min(1).max(SHARING_LIMITS.linkLabelMax);
+/**
+ * `PATCH /api/grants/:id` body: at least one field. `label` applies to a
+ * link grant only (#730; 422 `NOT_A_LINK_GRANT` on any other kind).
+ *
+ * @stability experimental
+ */
+export const updateGrantSchema = z
+    .object({
+    /** A new role. */
+    role: grantRoleSchema.optional(),
+    /** A new expiry; `null` removes it (a link's is capped by the deployment's maximum link lifetime). */
+    expiresAt: instantSchema.nullable().optional(),
+    /** A link grant's new label; `null` removes it (#730). */
+    label: linkLabelSchema.nullable().optional(),
+})
+    .strict()
+    .refine((body) => Object.keys(body).length > 0, 'Send at least one field');
+/**
+ * `GET /api/grants` query: the record whose active grants to list, and the
+ * page.
+ *
+ * @stability experimental
+ */
+export const grantListQuerySchema = pageQuerySchema.extend({
+    /** The record's resource type. */
+    resourceType: resourceTypeSchema,
+    /** The record. */
+    resourceId: z.uuid(),
+});
+/**
+ * The grantee of a grant as the API returns it. The fields of the other kinds
+ * are `null`.
+ *
+ * @stability experimental
+ */
+export const grantGranteeViewSchema = z.object({
+    /** `user`, `group`, `link` or the id of a persisted app kind. */
+    kind: grantGranteeKindSchema,
+    /** The user (kind `user`). */
+    userId: z.uuid().nullable(),
+    /** Their e-mail (kind `user`). */
+    email: z.email().nullable(),
+    /** Their display name (kind `user`), or `null`. */
+    displayName: z.string().nullable(),
+    /** The group (kind `group`). */
+    groupId: z.uuid().nullable(),
+    /** The group's name (kind `group`). */
+    groupName: z.string().nullable(),
+    /** The grantee reference of an app kind (`example.com` for `email-domain`); `null` for the built-in kinds. */
+    ref: z.string().nullable(),
+    /** The kind's description of the grantee of an app kind ("Anyone at example.com"); `null` for the built-in kinds. */
+    display: z.string().nullable(),
+});
+/**
+ * One user or group grant.
+ *
+ * @stability experimental
+ */
+export const grantSchema = z.object({
+    /** The grant's id. */
+    id: z.uuid(),
+    /** The organization of the record. */
+    orgId: z.uuid(),
+    /** The record's resource type. */
+    resourceType: z.string(),
+    /** The record. */
+    resourceId: z.uuid(),
+    /** Who it shares with. */
+    grantee: grantGranteeViewSchema,
+    /** The granted role. */
+    role: z.string(),
+    /** When it stops working, or `null`. */
+    expiresAt: z.iso.datetime().nullable(),
+    /** When it was revoked, or `null` (an active grant). */
+    revokedAt: z.iso.datetime().nullable(),
+    /** Who granted it, or `null` (deleted user). */
+    grantedById: z.uuid().nullable(),
+    /** When it was created. */
+    createdAt: z.iso.datetime(),
+    /** When it last changed. */
+    updatedAt: z.iso.datetime(),
+});
+/**
+ * A page of grants.
+ *
+ * @stability experimental
+ */
+export const grantListSchema = z.object({
+    /** The grants of this page. */
+    items: z.array(grantSchema),
+    /** Grants in the whole list. */
+    total: z.number().int(),
+    /** This page's number. */
+    page: z.number().int(),
+    /** The page size. */
+    pageSize: z.number().int(),
+    /** Pages in the whole list. */
+    totalPages: z.number().int(),
+});
+/**
+ * `GET /api/grants/shared-with-me` query: optionally one resource type, and
+ * the page.
+ *
+ * @stability experimental
+ */
+export const sharedWithMeQuerySchema = pageQuerySchema.extend({
+    /** Only records of this type. */
+    resourceType: resourceTypeSchema.optional(),
+});
+/**
+ * One record shared with the caller.
+ *
+ * @stability experimental
+ */
+export const sharedWithMeItemSchema = z.object({
+    /** The grant that shares it. */
+    grantId: z.uuid(),
+    /** The record's resource type. */
+    resourceType: z.string(),
+    /** The record. */
+    resourceId: z.uuid(),
+    /** The granted role. */
+    role: z.string(),
+    /** `user_grant` (shared with you), `group_grant` (shared with a group you belong to) or the `via` of an app grantee kind. */
+    via: z.string(),
+    /** The group, for a group grant. */
+    groupId: z.uuid().nullable(),
+    /** The record's label, when its resource type describes it. */
+    title: z.string().nullable(),
+    /** The app path of the record, when its resource type describes it. */
+    path: z.string().nullable(),
+    /** Who shared it, or `null`. */
+    grantedById: z.uuid().nullable(),
+    /** When the grant stops working, or `null`. */
+    expiresAt: z.iso.datetime().nullable(),
+    /** When it was shared. */
+    createdAt: z.iso.datetime(),
+});
+/**
+ * A page of records shared with the caller, newest first.
+ *
+ * @stability experimental
+ */
+export const sharedWithMeListSchema = z.object({
+    /** The items of this page. */
+    items: z.array(sharedWithMeItemSchema),
+    /** Items in the whole list. */
+    total: z.number().int(),
+    /** This page's number. */
+    page: z.number().int(),
+    /** The page size. */
+    pageSize: z.number().int(),
+    /** Pages in the whole list. */
+    totalPages: z.number().int(),
+});
+// ---- link grants (the routes are #730) ------------------------------------------------
+/**
+ * `POST /api/grants/links` body (#730): the record, the role (one the type
+ * lists under `grantable.link`; absent: the weakest of them), an optional
+ * expiry and label, and whether to reuse the caller's active link.
+ *
+ * @stability experimental
+ */
+export const linkGrantCreateSchema = z
+    .object({
+    /** The record's resource type. */
+    resourceType: resourceTypeSchema,
+    /** The record. */
+    resourceId: z.uuid(),
+    /** The role anyone holding the link gets; absent: the weakest role the type grants to links. */
+    role: grantRoleSchema.optional(),
+    /**
+     * When the link stops working: absent for the deployment's default
+     * lifetime, `null` for none; must be in the future. Either way capped by
+     * the deployment's maximum link lifetime.
+     */
+    expiresAt: instantSchema.nullish(),
+    /** A label for the owner's list ("Shared with the printer"). */
+    label: linkLabelSchema.nullish(),
+    /**
+     * Return the caller's ACTIVE link to the record with the same role
+     * instead of creating another (MemoriaHub's behaviour). Its token is
+     * returned again; expiry and label are left as they are.
+     */
+    reuseActive: z.boolean().optional(),
+})
+    .strict();
+/**
+ * One link grant as its record's sharer sees it (#730).
+ *
+ * @stability experimental
+ */
+export const linkGrantViewSchema = z.object({
+    /** The grant's id. */
+    id: z.uuid(),
+    /** The organization of the record. */
+    orgId: z.uuid(),
+    /** The record's resource type. */
+    resourceType: z.string(),
+    /** The record. */
+    resourceId: z.uuid(),
+    /** The role anyone holding the link gets. */
+    role: z.string(),
+    /** The label, or `null`. */
+    label: z.string().nullable(),
+    /**
+     * The share URL (`buildLinkUrl`, token in the fragment), or `null` when the
+     * token cannot be shown.
+     */
+    url: z.string().nullable(),
+    /** When the link stops working, or `null`. */
+    expiresAt: z.iso.datetime().nullable(),
+    /** When it was revoked, or `null`. */
+    revokedAt: z.iso.datetime().nullable(),
+    /** Who created it, or `null`. */
+    grantedById: z.uuid().nullable(),
+    /** When it was created. */
+    createdAt: z.iso.datetime(),
+});
+/**
+ * The `POST /api/grants/links` response (#730): the link, its URL and its
+ * token. The response body is the ONLY place the API returns a token in
+ * clear; the list re-derives the URL instead.
+ *
+ * @stability experimental
+ */
+export const issuedLinkGrantSchema = z.object({
+    /** The link grant. */
+    grant: linkGrantViewSchema,
+    /** The share URL (`buildLinkUrl`): the token rides in the fragment. */
+    url: z.string(),
+    /** The token (`lnk_` and 43 base64url characters), for clients that build their own URL. */
+    token: z.string().regex(LINK_TOKEN_PATTERN),
+});
+/**
+ * A page of a record's link grants, newest first (#730).
+ *
+ * @stability experimental
+ */
+export const linkGrantListSchema = z.object({
+    /** The links of this page. */
+    items: z.array(linkGrantViewSchema),
+    /** Links in the whole list. */
+    total: z.number().int(),
+    /** This page's number. */
+    page: z.number().int(),
+    /** The page size. */
+    pageSize: z.number().int(),
+    /** Pages in the whole list. */
+    totalPages: z.number().int(),
+});
+/**
+ * What resolving a link token publicly returns (#730). An unknown, expired or
+ * revoked token is a generic 404, never a different answer.
+ *
+ * @stability experimental
+ */
+export const publicLinkResolutionSchema = z.object({
+    /** The record's resource type. */
+    resourceType: z.string(),
+    /** The record. */
+    resourceId: z.uuid(),
+    /** The role the link grants. */
+    role: z.string(),
+    /** When the link stops working, or `null`. */
+    expiresAt: z.iso.datetime().nullable(),
+    /** The record's label, when its resource type describes it. */
+    title: z.string().nullable(),
+});
+//# sourceMappingURL=grants.js.map

package/dist/esm/sharing/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../../src/sharing/grants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAC9E,0EAA0E;AAC1E,wEAAwE;AACxE,4CAA4C;AAC5C,EAAE;AACF,0FAA0F;AAC1F,sFAAsF;AACtF,sFAAsF;AACtF,8EAA8E;AAC9E,kGAAkG;AAClG,2GAA2G;AAC3G,EAAE;AACF,uGAAuG;AACvG,wGAAwG;AACxG,4GAA4G;AAC5G,gFAAgF;AAEhF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrK,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC;KACtC,KAAK,CAAC,0BAA0B,EAAE,0CAA0C,CAAC;KAC7E,QAAQ,CAAC,2EAA2E,CAAC,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC;KACtC,KAAK,CAAC,0BAA0B,EAAE,iCAAiC,CAAC;KACpE,QAAQ,CAAC,uEAAuE,CAAC,CAAC;AAErF,yDAAyD;AACzD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,cAAc;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,sGAAsG;IACtG,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,4BAA4B;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,sCAAsC,CAAC,CAAC;AAExH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,eAAe;IACf,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,iBAAiB;IACjB,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;CAClB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,KAAK,CAAC,uBAAuB,EAAE,kFAAkF,CAAC;KAClH,QAAQ,CAAC,6FAA6F,CAAC,CAAC;AAE3G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,0DAA0D;IAC1D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,qEAAqE;IACrE,WAAW,EAAE,mBAAmB,CAAC,MAAM,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAE,qBAA2C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3F,0DAA0D,CAC3D;IACD,mDAAmD;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAElI;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,+DAA+D;IAC/D,IAAI,EAAE,mBAAmB;IACzB,sCAAsC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,2CAA2C;IAC3C,KAAK,EAAE,QAAQ,CAAC,mBAAmB,CAAC;IACpC,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,sGAAsG;IACtG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iBAAiB;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;CAC5C,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,kCAAkC;IAClC,YAAY,EAAE,kBAAkB;IAChC,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,yBAAyB;IACzB,OAAO,EAAE,uBAAuB;IAChC,yBAAyB;IACzB,IAAI,EAAE,eAAe;IACrB,uFAAuF;IACvF,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+DAA+D;AAC/D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;AAElF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,kBAAkB;IAClB,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE;IAChC,sGAAsG;IACtG,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,0DAA0D;IAC1D,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC,MAAM,CAAC;IACzD,kCAAkC;IAClC,YAAY,EAAE,kBAAkB;IAChC,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;CACrB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,iEAAiE;IACjE,IAAI,EAAE,sBAAsB;IAC5B,8BAA8B;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3B,kCAAkC;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,mDAAmD;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gCAAgC;IAChC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC5B,uCAAuC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,8GAA8G;IAC9G,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,qHAAqH;IACrH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,sBAAsB;IACtB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,sCAAsC;IACtC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,kCAAkC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,0BAA0B;IAC1B,OAAO,EAAE,sBAAsB;IAC/B,wBAAwB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,wDAAwD;IACxD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,gDAAgD;IAChD,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,2BAA2B;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,4BAA4B;IAC5B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,+BAA+B;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC3B,gCAAgC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,0BAA0B;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,qBAAqB;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC,MAAM,CAAC;IAC5D,iCAAiC;IACjC,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,gCAAgC;IAChC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,kCAAkC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,wBAAwB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,6HAA6H;IAC7H,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,oCAAoC;IACpC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC5B,+DAA+D;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,uEAAuE;IACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,gCAAgC;IAChC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,+CAA+C;IAC/C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,0BAA0B;IAC1B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,8BAA8B;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IACtC,+BAA+B;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,0BAA0B;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,qBAAqB;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAEH,0FAA0F;AAE1F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,kCAAkC;IAClC,YAAY,EAAE,kBAAkB;IAChC,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,gGAAgG;IAChG,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE;IAChC;;;;OAIG;IACH,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE;IAClC,gEAAgE;IAChE,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE;IAChC;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,sBAAsB;IACtB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,sCAAsC;IACtC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,kCAAkC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,6CAA6C;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,4BAA4B;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B;;;OAGG;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,8CAA8C;IAC9C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,iCAAiC;IACjC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,2BAA2B;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,sBAAsB;IACtB,KAAK,EAAE,mBAAmB;IAC1B,uEAAuE;IACvE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,4FAA4F;IAC5F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;CAC5C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,8BAA8B;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACnC,+BAA+B;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,0BAA0B;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,qBAAqB;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,kCAAkC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,gCAAgC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,8CAA8C;IAC9C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,+DAA+D;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}