@memberjunction/server 5.40.1 → 5.41.0

package/dist/resolvers/AgentSessionResolver.js

@@ -0,0 +1,152 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+/**
+ * @fileoverview GraphQL resolver for the AI Agent Session record lifecycle.
+ *
+ * Exposes start / close / heartbeat mutations over {@link SessionManager}, each running under the
+ * request's `contextUser` + request-scoped `IMetadataProvider`. Enforces two authorization gates:
+ * - **Open**: `CanRun` on the target agent (delegated to {@link SessionManager.CreateSession}).
+ * - **Close / Heartbeat**: inbound ownership — the session's `UserID` must equal `contextUser.ID`.
+ *
+ * The audio/media transport and the long-lived realtime run are out of scope here (P5); this
+ * resolver only manipulates the durable session record.
+ *
+ * @module @memberjunction/server
+ */
+import { Resolver, Mutation, Arg, Ctx, ObjectType, Field } from 'type-graphql';
+import { LogError } from '@memberjunction/core';
+import { UUIDsEqual } from '@memberjunction/global';
+import { ResolverBase } from '../generic/ResolverBase.js';
+import { GetReadWriteProvider } from '../util.js';
+import { SessionManager, SessionAuthorizationError } from '../agentSessions/index.js';
+/** Result of {@link AgentSessionResolver.StartAgentSession}. */
+let StartAgentSessionResult = class StartAgentSessionResult {
+};
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], StartAgentSessionResult.prototype, "agentSessionId", void 0);
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], StartAgentSessionResult.prototype, "status", void 0);
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], StartAgentSessionResult.prototype, "conversationId", void 0);
+StartAgentSessionResult = __decorate([
+    ObjectType()
+], StartAgentSessionResult);
+export { StartAgentSessionResult };
+/**
+ * Resolver for the AI Agent Session record lifecycle. A single {@link SessionManager} instance is
+ * shared across requests — it holds no per-user/provider state (only heartbeat-coalescing
+ * timestamps), and every method is passed the request `contextUser` + provider explicitly.
+ */
+let AgentSessionResolver = class AgentSessionResolver extends ResolverBase {
+    constructor() {
+        super(...arguments);
+        this.sessionManager = new SessionManager();
+    }
+    /**
+     * Open a new session for an agent. Authorization (`CanRun`) is enforced inside
+     * {@link SessionManager.CreateSession}; a denial surfaces as a thrown error and no row is written.
+     */
+    async StartAgentSession(agentId, { userPayload, providers }, conversationId, lastSessionId, configJson) {
+        const { contextUser, provider } = this.requireUserAndProvider(userPayload, providers);
+        try {
+            const session = await this.sessionManager.CreateSession({ agentID: agentId, userID: contextUser.ID, conversationID: conversationId, lastSessionID: lastSessionId, config: configJson }, contextUser, provider);
+            return { agentSessionId: session.ID, status: session.Status, conversationId: session.ConversationID ?? '' };
+        }
+        catch (err) {
+            if (err instanceof SessionAuthorizationError) {
+                throw new Error(err.message); // authorization denial — no session created
+            }
+            throw err;
+        }
+    }
+    /**
+     * Close a session. Rejects unless the caller owns it. Returns `true` on a successful (or
+     * idempotent) close, `false` if the session can't be loaded.
+     */
+    async CloseAgentSession(agentSessionId, { userPayload, providers }) {
+        const { contextUser, provider } = this.requireUserAndProvider(userPayload, providers);
+        await this.assertOwnership(agentSessionId, contextUser, provider);
+        return this.sessionManager.CloseSession(agentSessionId, contextUser, provider);
+    }
+    /**
+     * Record activity on a session (coalesced). Rejects unless the caller owns it. Returns `true`
+     * when the heartbeat was accepted (written or coalesced), `false` if the session is gone/closed.
+     */
+    async AgentSessionHeartbeat(agentSessionId, { userPayload, providers }) {
+        const { contextUser, provider } = this.requireUserAndProvider(userPayload, providers);
+        await this.assertOwnership(agentSessionId, contextUser, provider);
+        return this.sessionManager.Heartbeat(agentSessionId, contextUser, provider);
+    }
+    // ----- internals -------------------------------------------------------------------------
+    /** Resolve the request user + read-write provider, throwing a clear error if unauthenticated. */
+    requireUserAndProvider(userPayload, providers) {
+        const contextUser = this.GetUserFromPayload(userPayload);
+        if (!contextUser) {
+            throw new Error('Not authenticated: no user context for agent session operation');
+        }
+        return { contextUser, provider: GetReadWriteProvider(providers) };
+    }
+    /**
+     * Inbound ownership gate (the one genuinely new session-authz primitive): the session's `UserID`
+     * must equal the caller's. Throws on mismatch or when the session can't be loaded.
+     */
+    async assertOwnership(agentSessionId, contextUser, provider) {
+        const session = await provider.GetEntityObject('MJ: AI Agent Sessions', contextUser);
+        const loaded = await session.Load(agentSessionId);
+        if (!loaded) {
+            throw new Error(`Agent session ${agentSessionId} not found`);
+        }
+        if (!UUIDsEqual(session.UserID, contextUser.ID)) {
+            LogError(`AgentSessionResolver: ownership check failed — user ${contextUser.ID} attempted to operate on session ${agentSessionId} owned by ${session.UserID}`);
+            throw new Error('Not authorized: you do not own this agent session');
+        }
+    }
+};
+__decorate([
+    Mutation(() => StartAgentSessionResult),
+    __param(0, Arg('agentId')),
+    __param(1, Ctx()),
+    __param(2, Arg('conversationId', { nullable: true })),
+    __param(3, Arg('lastSessionId', { nullable: true })),
+    __param(4, Arg('configJson', { nullable: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String, String, String]),
+    __metadata("design:returntype", Promise)
+], AgentSessionResolver.prototype, "StartAgentSession", null);
+__decorate([
+    Mutation(() => Boolean),
+    __param(0, Arg('agentSessionId')),
+    __param(1, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AgentSessionResolver.prototype, "CloseAgentSession", null);
+__decorate([
+    Mutation(() => Boolean),
+    __param(0, Arg('agentSessionId')),
+    __param(1, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AgentSessionResolver.prototype, "AgentSessionHeartbeat", null);
+AgentSessionResolver = __decorate([
+    Resolver()
+], AgentSessionResolver);
+export { AgentSessionResolver };
+//# sourceMappingURL=AgentSessionResolver.js.map

package/dist/resolvers/AgentSessionResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentSessionResolver.js","sourceRoot":"","sources":["../../src/resolvers/AgentSessionResolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE/E,OAAO,EAA+B,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,gEAAgE;AAEzD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CAYnC,CAAA;AATG;IADC,KAAK,EAAE;;+DACe;AAIvB;IADC,KAAK,EAAE;;uDACO;AAIf;IADC,KAAK,EAAE;;+DACe;AAXd,uBAAuB;IADnC,UAAU,EAAE;GACA,uBAAuB,CAYnC;;AAED;;;;GAIG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,YAAY;IAA/C;;QACc,mBAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IA4F3D,CAAC;IA1FG;;;OAGG;IAEG,AAAN,KAAK,CAAC,iBAAiB,CACH,OAAe,EACxB,EAAE,WAAW,EAAE,SAAS,EAAc,EACF,cAAuB,EACxB,aAAsB,EACzB,UAAmB;QAE1D,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEtF,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACnD,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,EAC9H,WAAW,EACX,QAAQ,CACX,CAAC;YACF,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAChH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C;YAC9E,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,iBAAiB,CACI,cAAsB,EACtC,EAAE,WAAW,EAAE,SAAS,EAAc;QAE7C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnF,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,qBAAqB,CACA,cAAsB,EACtC,EAAE,WAAW,EAAE,SAAS,EAAc;QAE7C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChF,CAAC;IAED,4FAA4F;IAE5F,iGAAiG;IACzF,sBAAsB,CAC1B,WAAsC,EACtC,SAAkC;QAElC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;IACtE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CACzB,cAAsB,EACtB,WAAqB,EACrB,QAA2B;QAE3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAyB,uBAAuB,EAAE,WAAW,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,cAAc,YAAY,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,uDAAuD,WAAW,CAAC,EAAE,oCAAoC,cAAc,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/J,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;CACJ,CAAA;AArFS;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC;IAEnC,WAAA,GAAG,CAAC,SAAS,CAAC,CAAA;IACd,WAAA,GAAG,EAAE,CAAA;IACL,WAAA,GAAG,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,GAAG,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,WAAA,GAAG,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;;;;6DAiBzC;AAOK;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAEnB,WAAA,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACrB,WAAA,GAAG,EAAE,CAAA;;;;6DAKT;AAOK;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAEnB,WAAA,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACrB,WAAA,GAAG,EAAE,CAAA;;;;iEAKT;AA1DQ,oBAAoB;IADhC,QAAQ,EAAE;GACE,oBAAoB,CA6FhC"}

package/dist/resolvers/EntityPermissionResolver.d.ts

@@ -0,0 +1,16 @@
+import { AppContext } from '../types.js';
+import { ResolverBase } from '../generic/ResolverBase.js';
+declare class EntityPermissionResult {
+    EntityName: string;
+    CanRead: boolean;
+}
+declare class CheckEntityPermissionsResult {
+    Success: boolean;
+    Results: EntityPermissionResult[];
+    ErrorMessage?: string;
+}
+export declare class EntityPermissionResolver extends ResolverBase {
+    CheckEntityPermissionsSystemUser(entityNames: string[], userEmail: string, context: AppContext): Promise<CheckEntityPermissionsResult>;
+}
+export {};
+//# sourceMappingURL=EntityPermissionResolver.d.ts.map

package/dist/resolvers/EntityPermissionResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntityPermissionResolver.d.ts","sourceRoot":"","sources":["../../src/resolvers/EntityPermissionResolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,cACM,sBAAsB;IAEhB,UAAU,EAAE,MAAM,CAAC;IAGnB,OAAO,EAAE,OAAO,CAAC;CAC5B;AAED,cACM,4BAA4B;IAEtB,OAAO,EAAE,OAAO,CAAC;IAGjB,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAG1C,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBACa,wBAAyB,SAAQ,YAAY;IAIhD,gCAAgC,CACE,WAAW,EAAE,MAAM,EAAE,EACzB,SAAS,EAAE,MAAM,EAC1C,OAAO,EAAE,UAAU,GAC3B,OAAO,CAAC,4BAA4B,CAAC;CAkC3C"}

package/dist/resolvers/EntityPermissionResolver.js

@@ -0,0 +1,95 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Arg, Ctx, Field, ObjectType, Query, Resolver } from 'type-graphql';
+import { LogError } from '@memberjunction/core';
+import { ResolverBase } from '../generic/ResolverBase.js';
+import { RequireSystemUser } from '../directives/RequireSystemUser.js';
+import { GetReadOnlyProvider } from '../util.js';
+import { UserCache } from '@memberjunction/sqlserver-dataprovider';
+let EntityPermissionResult = class EntityPermissionResult {
+};
+__decorate([
+    Field(() => String),
+    __metadata("design:type", String)
+], EntityPermissionResult.prototype, "EntityName", void 0);
+__decorate([
+    Field(() => Boolean),
+    __metadata("design:type", Boolean)
+], EntityPermissionResult.prototype, "CanRead", void 0);
+EntityPermissionResult = __decorate([
+    ObjectType()
+], EntityPermissionResult);
+let CheckEntityPermissionsResult = class CheckEntityPermissionsResult {
+};
+__decorate([
+    Field(() => Boolean),
+    __metadata("design:type", Boolean)
+], CheckEntityPermissionsResult.prototype, "Success", void 0);
+__decorate([
+    Field(() => [EntityPermissionResult]),
+    __metadata("design:type", Array)
+], CheckEntityPermissionsResult.prototype, "Results", void 0);
+__decorate([
+    Field(() => String, { nullable: true }),
+    __metadata("design:type", String)
+], CheckEntityPermissionsResult.prototype, "ErrorMessage", void 0);
+CheckEntityPermissionsResult = __decorate([
+    ObjectType()
+], CheckEntityPermissionsResult);
+let EntityPermissionResolver = class EntityPermissionResolver extends ResolverBase {
+    async CheckEntityPermissionsSystemUser(entityNames, userEmail, context) {
+        try {
+            const user = UserCache.Instance.Users.find(u => u.Email.toLowerCase().trim() === userEmail.toLowerCase().trim());
+            if (!user) {
+                return { Success: false, Results: [], ErrorMessage: `User not found: ${userEmail}` };
+            }
+            // Use the per-request provider (not the global default) so entity metadata + permission
+            // evaluation resolve against the connection servicing THIS request.
+            const md = GetReadOnlyProvider(context.providers, { allowFallbackToReadWrite: true });
+            const results = [];
+            for (const name of entityNames) {
+                const entityInfo = md.EntityByName(name);
+                if (!entityInfo) {
+                    results.push({ EntityName: name, CanRead: false });
+                    continue;
+                }
+                const perms = entityInfo.GetUserPermisions(user);
+                results.push({ EntityName: name, CanRead: perms?.CanRead ?? false });
+            }
+            return { Success: true, Results: results };
+        }
+        catch (err) {
+            LogError(err);
+            return {
+                Success: false,
+                Results: [],
+                ErrorMessage: `EntityPermissionResolver::CheckEntityPermissionsSystemUser --- ${err instanceof Error ? err.message : String(err)}`
+            };
+        }
+    }
+};
+__decorate([
+    RequireSystemUser(),
+    Query(() => CheckEntityPermissionsResult),
+    __param(0, Arg('EntityNames', () => [String])),
+    __param(1, Arg('UserEmail', () => String)),
+    __param(2, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Array, String, Object]),
+    __metadata("design:returntype", Promise)
+], EntityPermissionResolver.prototype, "CheckEntityPermissionsSystemUser", null);
+EntityPermissionResolver = __decorate([
+    Resolver()
+], EntityPermissionResolver);
+export { EntityPermissionResolver };
+//# sourceMappingURL=EntityPermissionResolver.js.map

package/dist/resolvers/EntityPermissionResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntityPermissionResolver.js","sourceRoot":"","sources":["../../src/resolvers/EntityPermissionResolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGnE,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CAM3B,CAAA;AAJW;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;0DACO;AAGnB;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;;uDACI;AALvB,sBAAsB;IAD3B,UAAU,EAAE;GACP,sBAAsB,CAM3B;AAGD,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;CASjC,CAAA;AAPW;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;;6DACI;AAGjB;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC;;6DACI;AAG1C;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEAClB;AARpB,4BAA4B;IADjC,UAAU,EAAE;GACP,4BAA4B,CASjC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,YAAY;IAIhD,AAAN,KAAK,CAAC,gCAAgC,CACE,WAAqB,EACzB,SAAiB,EAC1C,OAAmB;QAE1B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CACvE,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,mBAAmB,SAAS,EAAE,EAAE,CAAC;YACzF,CAAC;YAED,wFAAwF;YACxF,oEAAoE;YACpE,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,OAAO,GAA6B,EAAE,CAAC;YAE7C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBACnD,SAAS;gBACb,CAAC;gBACD,MAAM,KAAK,GAAG,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,kEAAkE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACrI,CAAC;QACN,CAAC;IACL,CAAC;CACJ,CAAA;AAtCS;IAFL,iBAAiB,EAAE;IACnB,KAAK,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC;IAErC,WAAA,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAClC,WAAA,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAA;IAC9B,WAAA,GAAG,EAAE,CAAA;;;;gFAkCT;AAzCQ,wBAAwB;IADpC,QAAQ,EAAE;GACE,wBAAwB,CA0CpC"}