@memberjunction/server 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/auth/sessionUserClone.js

@@ -7,7 +7,7 @@
  * concurrent session of the same user THE INSTANT it is written; this is
  * same-moment cross-request aliasing, not a cache-staleness problem. The
  * magic-link path has always cloned for exactly this reason (see
- * buildMagicLinkSessionUser in context.ts); this helper makes that rule a
+ * BuildMagicLinkSessionUser in context.ts); this helper makes that rule a
  * single shared primitive so every per-session stamp goes through the same
  * clone.
  *
@@ -29,7 +29,7 @@ import { Metadata, UserInfo } from '@memberjunction/core';
  * state on the clone; never stamp the input itself.
  */
 export function CloneUserForSessionContext(user) {
-    const md = Metadata.Provider; // global-provider-ok: server-side session construction under the server's single default provider, same as buildMagicLinkSessionUser
+    const md = Metadata.Provider; // global-provider-ok: server-side session construction under the server's single default provider, same as BuildMagicLinkSessionUser
     const clone = new UserInfo(md, {
         ...user,
         _UserRoles: undefined,
@@ -43,6 +43,7 @@ export function CloneUserForSessionContext(user) {
     clone.ReturningVisitorContext = user.ReturningVisitorContext;
     clone.WidgetGuestContext = user.WidgetGuestContext;
     clone.IsMagicLinkAnonymous = user.IsMagicLinkAnonymous;
+    clone.AnonymousVisitorID = user.AnonymousVisitorID;
     clone.APIKeyActingContext = user.APIKeyActingContext;
     clone.APIKeyRowFilters = user.APIKeyRowFilters;
     return clone;

package/dist/auth/sessionUserClone.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionUserClone.js","sourceRoot":"","sources":["../../src/auth/sessionUserClone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAc;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,qIAAqI;IACnK,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,EAAE;QAC7B,GAAG,IAAI;QACP,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,wEAAwE;IACxE,0EAA0E;IAC1E,6DAA6D;IAC7D,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IAC3C,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,CAAC;IAC7D,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACnD,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACvD,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;IACrD,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"sessionUserClone.js","sourceRoot":"","sources":["../../src/auth/sessionUserClone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAc;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,qIAAqI;IACnK,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,EAAE;QAC7B,GAAG,IAAI;QACP,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,wEAAwE;IACxE,0EAA0E;IAC1E,6DAA6D;IAC7D,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IAC3C,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,CAAC;IAC7D,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACnD,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACvD,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACnD,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;IACrD,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/broadcast/BaseCacheInvalidationBroadcastProvider.d.ts

@@ -0,0 +1,292 @@
+import { BaseSingleton } from '@memberjunction/global';
+import { EntityInfo, UserInfo } from '@memberjunction/core';
+import type { CacheInvalidationNotification, CacheInvalidationPayload, ReadPermissionRow, RoleHolder } from '../generic/CacheInvalidationResolver.js';
+/**
+ * Supported cache invalidation broadcast topologies.
+ */
+export type CacheInvalidationBroadcastTopology = 'SequencedRoleBucket' | 'AzureWebPubSub' | 'AWSIoTCore' | 'GCPPubSub';
+/**
+ * Configuration options for the cache invalidation broadcast subsystem.
+ * Configured under `cacheSettings.broadcast` in `mj.config.cjs` or via `MJ_CACHE_BROADCAST_*` env vars.
+ */
+export interface CacheBroadcastProviderConfig {
+    /**
+     * Driver key registered with `@RegisterClass(BaseCacheInvalidationBroadcastProvider, key)`.
+     * Defaults to `'SequencedRoleBucket'`.
+     */
+    provider?: CacheInvalidationBroadcastTopology | string;
+    /**
+     * Maximum number of sequenced invalidation events retained in the in-memory ring buffer
+     * for catch-up delta queries (`GetCacheInvalidationsSince`). Defaults to 5000.
+     */
+    ringBufferSize?: number;
+    /**
+     * Optional list of entity names whose cache invalidation broadcasts should be suppressed
+     * (e.g., high-churn telemetry/audit tables never cached on the client).
+     */
+    excludedEntities?: string[];
+    /**
+     * Azure Web PubSub configuration (used when `provider === 'AzureWebPubSub'`).
+     */
+    azureWebPubSub?: {
+        endpoint?: string;
+        hubName?: string;
+        accessKey?: string;
+        tokenTtlMinutes?: number;
+    };
+    /**
+     * AWS IoT Core MQTT over WebSockets configuration (used when `provider === 'AWSIoTCore'`).
+     */
+    awsIoTCore?: {
+        endpoint?: string;
+        region?: string;
+        topicPrefix?: string;
+        accessKeyId?: string;
+        secretAccessKey?: string;
+        tokenTtlSeconds?: number;
+    };
+    /**
+     * Google Cloud Pub/Sub / Cloud Run WebSockets configuration (used when `provider === 'GCPPubSub'`).
+     */
+    gcpPubSub?: {
+        projectId?: string;
+        topicPrefix?: string;
+        gatewayUrl?: string;
+        signingSecret?: string;
+        tokenTtlSeconds?: number;
+    };
+}
+/**
+ * Catch-up response returned by `GetChangesSince` when a client detects a sequence gap
+ * via `X-MJ-Cache-Seq` / `X-MJ-Server-ID` HTTP headers or WebSocket reconnection.
+ */
+export interface CacheInvalidationCatchUpResponse {
+    /**
+     * True when the requested `sinceSequence` has already been evicted from the ring buffer,
+     * belongs to a future sequence, or the server restarted. Instructs the client to evict
+     * its local dataset cache and re-fetch cleanly.
+     */
+    RequiresFullRefresh: boolean;
+    /**
+     * Latest monotonic sequence number assigned by this server process.
+     */
+    CurrentSequence: number;
+    /**
+     * Unique process identifier for this MJServer instance (`X-MJ-Server-ID`).
+     */
+    ServerProcessID: string;
+    /**
+     * Ordered delta of permission-filtered, RLS-shaped invalidation events strictly after `sinceSequence`.
+     */
+    Events: CacheInvalidationNotification[];
+}
+/**
+ * Connection token and subscription metadata returned by `NegotiateClientConnection`
+ * for Topology 3 external cloud WebSocket multiplexers (or in-process GraphQL WS fallback).
+ */
+export interface CacheBroadcastNegotiationResult {
+    /**
+     * Active provider driver key (e.g. `'SequencedRoleBucket'`, `'AzureWebPubSub'`, `'AWSIoTCore'`, `'GCPPubSub'`).
+     */
+    Provider: string;
+    /**
+     * WebSocket endpoint URL for the client to connect to.
+     */
+    Url: string;
+    /**
+     * Signed token / credentials authorizing the client for its role-scoped broadcast groups.
+     */
+    Token?: string;
+    /**
+     * Role-scoped group/topic names the client is authorized to subscribe to.
+     */
+    Groups: string[];
+    /**
+     * ISO-8601 expiration timestamp for the negotiated token.
+     */
+    ExpiresAt: string;
+    /**
+     * Current server process ID for sequence continuity tracking.
+     */
+    ServerProcessID: string;
+    /**
+     * Current server invalidation sequence at the moment of negotiation.
+     */
+    CurrentSequence: number;
+}
+/**
+ * Result of evaluating an invalidation event against a single role fingerprint bucket.
+ */
+export interface RoleBucketEvaluationResult {
+    Allow: boolean;
+    WithholdKey: boolean;
+    Shaped: CacheInvalidationNotification;
+}
+/**
+ * High-churn system telemetry/logging entities that can optionally be excluded from browser
+ * invalidation fan-out because browsers do not maintain live dataset caches for them.
+ */
+export declare const DEFAULT_HIGH_CHURN_SYSTEM_ENTITIES: readonly string[];
+/**
+ * Abstract base class for MemberJunction's pluggable Cache Invalidation Broadcast Hierarchy.
+ *
+ * Provides the shared primitives used by all broadcast topologies:
+ * 1. **Monotonic Sequence Ring Buffer (Topology 1)**: Every invalidation event is stamped with a
+ *    monotonically increasing `Sequence` integer and stored in a bounded circular buffer (`MaxRingBufferSize`),
+ *    enabling HTTP `X-MJ-Cache-Seq` piggybacking and `GetCacheInvalidationsSince` delta catch-up.
+ * 2. **Role-Fingerprint $O(\text{Roles})$ Evaluation & Shaping Memoizer (Topology 2)**: Computes a canonical
+ *    fingerprint of a user's sorted `RoleID`s (cached per `UserInfo` in a `WeakMap`) and memoizes
+ *    entity read-permission checks (`CanRead`) and row-level security key-withholding (`ReadIsRowFiltered`)
+ *    once per `(payload, entity, roleFingerprint)` tuple instead of once per connected WebSocket client.
+ * 3. **Cloud Multiplexer Extension Hooks (Topology 3)**: Subclasses (`AzureWebPubSubBroadcastProvider`,
+ *    `AWSIoTCoreBroadcastProvider`, `GCPPubSubBroadcastProvider`) override `PublishInvalidation` and
+ *    `NegotiateClientConnection` to offload WebSocket fan-out to managed cloud pub/sub infrastructure.
+ */
+export declare abstract class BaseCacheInvalidationBroadcastProvider {
+    private static readonly _serverProcessId;
+    private _currentSequence;
+    private _maxRingBufferSize;
+    private _ringBuffer;
+    private _ringHead;
+    private _ringCount;
+    private _excludedEntities;
+    protected _config: CacheBroadcastProviderConfig;
+    /**
+     * Memoizes canonical role fingerprints per `RoleHolder` / `UserInfo` object reference.
+     */
+    private readonly _roleFingerprintCache;
+    /**
+     * Memoizes `Metadata.EntityByName` lookup per `CacheInvalidationPayload` object reference
+     * so `CacheInvalidationFilter` and `CacheInvalidationResolver` only look up the entity once per event.
+     */
+    private readonly _payloadEntityCache;
+    /**
+     * Memoizes entity-level read permission (`CanRead`) per `(payload, roleFingerprint)`.
+     */
+    private readonly _payloadFilterMemo;
+    /**
+     * Memoizes row-level security key-withholding and shaped `CacheInvalidationNotification`
+     * per `(payload, entity, roleFingerprint)`.
+     */
+    private readonly _payloadShapeMemo;
+    /**
+     * Unique identifier of the running MJServer process, emitted in `X-MJ-Server-ID`.
+     */
+    get ServerProcessID(): string;
+    /**
+     * Identifier for the active broadcast topology.
+     */
+    abstract get Topology(): CacheInvalidationBroadcastTopology;
+    /**
+     * Latest monotonic sequence number assigned to a cache invalidation event in this process.
+     */
+    get CurrentSequence(): number;
+    /**
+     * Maximum number of invalidation events held in the circular ring buffer.
+     */
+    get MaxRingBufferSize(): number;
+    /**
+     * Number of invalidation events currently retained in the circular ring buffer.
+     */
+    get BufferedEventCount(): number;
+    /**
+     * Configures the provider instance with buffer sizing, entity exclusions, and cloud settings.
+     */
+    Configure(config?: CacheBroadcastProviderConfig): void;
+    /**
+     * Returns whether invalidation events for `entityName` should be broadcast to clients.
+     * Returns `false` for blank names or entities explicitly listed in `excludedEntities`.
+     */
+    ShouldBroadcastEntity(entityName: string | undefined | null): boolean;
+    /**
+     * Computes a canonical, order-independent role fingerprint for a user (`RoleHolder`).
+     * Memoized per user object in a `WeakMap` so repeated evaluations across thousands of events are $O(1)$.
+     */
+    GetRoleFingerprint(user: RoleHolder | undefined | null): string;
+    /**
+     * Resolves and caches the `EntityInfo` for a `CacheInvalidationPayload` so that
+     * `CacheInvalidationFilter` and `CacheInvalidationResolver` do not repeat metadata lookups.
+     */
+    ResolveEntityForPayload(payload: CacheInvalidationPayload, entityLookup?: (entityName: string) => EntityInfo | undefined | null): EntityInfo | null;
+    /**
+     * Evaluates whether `user` has entity-level read permission for `payload`, memoized by
+     * `(payload, entityName, roleFingerprint)` so $N$ subscribers sharing $R$ role combinations
+     * only run `GetUserPermisions` $R$ times per event.
+     */
+    EvaluateEntityReadAccess(payload: CacheInvalidationPayload, user: UserInfo | undefined, entityLookup?: (entityName: string) => EntityInfo | undefined | null): boolean;
+    /**
+     * Evaluates whether every read permission the user holds on `entity` is gated by a
+     * Row-Level Security filter (`ReadRLSFilterID`).
+     */
+    ReadIsRowFiltered(entity: {
+        Permissions: ReadonlyArray<ReadPermissionRow>;
+    }, user: RoleHolder): boolean;
+    /**
+     * Shapes a `CacheInvalidationPayload` into a `CacheInvalidationNotification` for `user` and `entity`.
+     * When `user` and `entity` are present and `user.UserRoles` is populated, the shaped object is
+     * memoized per `(payload, entity, roleFingerprint)` so $N$ subscribers sharing $R$ role buckets
+     * only allocate and evaluate `ReadIsRowFiltered` $R$ times per event.
+     */
+    ShapeEventForSubscriber(payload: CacheInvalidationPayload, user: RoleHolder | undefined, entity: {
+        Permissions: ReadonlyArray<ReadPermissionRow>;
+    } | null | undefined): CacheInvalidationNotification;
+    /**
+     * Assigns the next monotonic sequence number to `payload` (if not already stamped on this server),
+     * appends it to the bounded circular ring buffer, and invokes `OnInvalidationRecorded` for
+     * provider-specific fan-out.
+     */
+    RecordInvalidation(payload: CacheInvalidationPayload): CacheInvalidationPayload;
+    /**
+     * Returns all permission-allowed, RLS-shaped invalidation events strictly after `sinceSequence`
+     * for `user`. If `sinceSequence` has already been evicted from the ring buffer (or lies in the
+     * future due to a server restart), sets `RequiresFullRefresh: true` and returns an empty `Events` list.
+     */
+    GetChangesSince(sinceSequence: number, user: UserInfo | undefined): CacheInvalidationCatchUpResponse;
+    /**
+     * Resets the sequence counter and ring buffer. Intended for unit tests.
+     */
+    ResetStateForTesting(): void;
+    /**
+     * Hook invoked after an invalidation event is sequenced and stored in the ring buffer.
+     * Cloud multiplexer providers override this to forward role-bucketed payloads to their
+     * external pub/sub infrastructure.
+     */
+    protected abstract OnInvalidationRecorded(payload: CacheInvalidationPayload): Promise<void>;
+    /**
+     * Negotiates a client broadcast connection (URL, token, and authorized role-bucket groups)
+     * for the given authenticated user.
+     */
+    abstract NegotiateClientConnection(user: UserInfo, defaultGraphQLWsUrl?: string): Promise<CacheBroadcastNegotiationResult>;
+    private buildNotification;
+}
+/**
+ * Process-wide singleton managing the active {@link BaseCacheInvalidationBroadcastProvider}.
+ *
+ * Uses `MJGlobal.Instance.ClassFactory` to instantiate the configured provider class
+ * (defaulting to `'SequencedRoleBucket'`).
+ */
+export declare class CacheInvalidationBroadcastManager extends BaseSingleton<CacheInvalidationBroadcastManager> {
+    private _provider;
+    private _fallbackFactory;
+    protected constructor();
+    static get Instance(): CacheInvalidationBroadcastManager;
+    /**
+     * Registers the default fallback provider factory so `Provider` is always available even
+     * before `Configure()` is explicitly called.
+     */
+    RegisterDefaultProviderFactory(factory: () => BaseCacheInvalidationBroadcastProvider): void;
+    /**
+     * Returns the active broadcast provider, lazily instantiating the default
+     * `SequencedRoleBucketBroadcastProvider` if not yet configured.
+     */
+    get Provider(): BaseCacheInvalidationBroadcastProvider;
+    /**
+     * Configures and activates a broadcast provider via `MJGlobal.Instance.ClassFactory`.
+     */
+    Configure(config?: CacheBroadcastProviderConfig): BaseCacheInvalidationBroadcastProvider;
+    /**
+     * Explicitly sets the active provider instance (useful for testing or custom programmatic wiring).
+     */
+    SetProvider(provider: BaseCacheInvalidationBroadcastProvider): void;
+}
+//# sourceMappingURL=BaseCacheInvalidationBroadcastProvider.d.ts.map

package/dist/broadcast/BaseCacheInvalidationBroadcastProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseCacheInvalidationBroadcastProvider.d.ts","sourceRoot":"","sources":["../../src/broadcast/BaseCacheInvalidationBroadcastProvider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAY,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAY,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,KAAK,EACR,6BAA6B,EAC7B,wBAAwB,EACxB,iBAAiB,EACjB,UAAU,EACb,MAAM,yCAAyC,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,kCAAkC,GACxC,qBAAqB,GACrB,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;AAElB;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IACzC;;;OAGG;IACH,QAAQ,CAAC,EAAE,kCAAkC,GAAG,MAAM,CAAC;IACvD;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;OAEG;IACH,cAAc,CAAC,EAAE;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;OAEG;IACH,UAAU,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;OAEG;IACH,SAAS,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACL;AAED;;;GAGG;AACH,MAAM,WAAW,gCAAgC;IAC7C;;;;OAIG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAC7B;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,MAAM,EAAE,6BAA6B,EAAE,CAAC;CAC3C;AAED;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC5C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,6BAA6B,CAAC;CACzC;AAOD;;;GAGG;AACH,eAAO,MAAM,kCAAkC,EAAE,SAAS,MAAM,EAO/D,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,8BAAsB,sCAAsC;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAwB;IAEhE,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,WAAW,CAA0C;IAC7D,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,SAAS,CAAC,OAAO,EAAE,4BAA4B,CAAM;IAErD;;OAEG;IACH,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqE;IAE3G;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA8D;IAElG;;OAEG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiE;IAEpG;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAG9B;IAEJ;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;OAEG;IACH,aAAoB,QAAQ,IAAI,kCAAkC,CAAC;IAEnE;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;OAEG;IACH,IAAW,iBAAiB,IAAI,MAAM,CAErC;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAEtC;IAED;;OAEG;IACI,SAAS,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,IAAI;IAgB7D;;;OAGG;IACI,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO;IAW5E;;;OAGG;IACI,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM;IA+BtE;;;OAGG;IACI,uBAAuB,CAC1B,OAAO,EAAE,wBAAwB,EACjC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,GAAG,IAAI,GACrE,UAAU,GAAG,IAAI;IAgBpB;;;;OAIG;IACI,wBAAwB,CAC3B,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,QAAQ,GAAG,SAAS,EAC1B,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,GAAG,IAAI,GACrE,OAAO;IAsCV;;;OAGG;IACI,iBAAiB,CACpB,MAAM,EAAE;QAAE,WAAW,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAA;KAAE,EACzD,IAAI,EAAE,UAAU,GACjB,OAAO;IAcV;;;;;OAKG;IACI,uBAAuB,CAC1B,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,UAAU,GAAG,SAAS,EAC5B,MAAM,EAAE;QAAE,WAAW,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,GAC7E,6BAA6B;IA8BhC;;;;OAIG;IACI,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,wBAAwB;IAyBtF;;;;OAIG;IACI,eAAe,CAClB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,QAAQ,GAAG,SAAS,GAC3B,gCAAgC;IAkFnC;;OAEG;IACI,oBAAoB,IAAI,IAAI;IAOnC;;;;OAIG;IACH,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAE3F;;;OAGG;aACa,yBAAyB,CACrC,IAAI,EAAE,QAAQ,EACd,mBAAmB,CAAC,EAAE,MAAM,GAC7B,OAAO,CAAC,+BAA+B,CAAC;IAE3C,OAAO,CAAC,iBAAiB;CAkB5B;AAED;;;;;GAKG;AACH,qBAAa,iCAAkC,SAAQ,aAAa,CAAC,iCAAiC,CAAC;IACnG,OAAO,CAAC,SAAS,CAAuD;IACxE,OAAO,CAAC,gBAAgB,CAA+D;IAEvF,SAAS;IAIT,WAAkB,QAAQ,IAAI,iCAAiC,CAE9D;IAED;;;OAGG;IACI,8BAA8B,CAAC,OAAO,EAAE,MAAM,sCAAsC,GAAG,IAAI;IAIlG;;;OAGG;IACH,IAAW,QAAQ,IAAI,sCAAsC,CAK5D;IAED;;OAEG;IACI,SAAS,CAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,sCAAsC;IAmB/F;;OAEG;IACI,WAAW,CAAC,QAAQ,EAAE,sCAAsC,GAAG,IAAI;CAG7E"}