@memberjunction/storage 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/StorageAccessEvaluator.js

@@ -0,0 +1,435 @@
+/**
+ * @fileoverview The one place MJ decides who may use a file storage account, and which tracked files in it a user may
+ * read.
+ *
+ * `MJ: File Storage Account Permissions` rows grant `CanRead` and/or `CanWrite` on a storage account to Everyone, to a
+ * Role, or to a single User. Every consumer of that model asks {@link StorageAccessEvaluator}: the storage GraphQL routes
+ * (MJServer `FileResolver`, `ArtifactFileResolver`), the File Storage core actions and the agent file handler, the
+ * search lane (`StorageSearchProvider`), the search engine's late permission filter, and every route that goes from an
+ * `MJ: Files` row to its object (through `FileStorageEngine.ResolveFileObject`).
+ *
+ * **Evaluated per call.** Nothing is snapshotted: each question reads the permission rows for exactly the accounts it
+ * names, so a grant or a revocation is seen by the next call, and the answer for one user never depends on which user
+ * happened to ask first. Reads set `IgnoreMaxRows`, so the entity's row cap can never drop an account's rows (which the
+ * zero-rows rule would read as "open") or a tracked file's row.
+ *
+ * **Read with an elevated identity, decided for the caller.** The permission rows are read as the MJ system user
+ * (resolved through `WellKnownUserSource`, the same way server-side `BaseEngine`s load). Reading them as the caller
+ * would turn "this user may not read the permission rows" into "this account has no rows", which the zero-rows rule
+ * below treats as open. When no elevated identity can be resolved, or any read fails, the answer is "no access"
+ * (fail closed).
+ *
+ * **The tracked-file rule.** An object that backs an `MJ: Files` row may be read, signed, listed, returned by search,
+ * overwritten, moved, copied or deleted only when the caller can read that row ({@link StorageAccessEvaluator.UnreadableTrackedObjectKeys}).
+ * Keys are compared through the account driver's `NormalizeObjectKey` and case-insensitively; a key whose meaning
+ * depends on the provider (`..`, `\`, `%2F`, ...) is refused outright (`IsSafeStorageObjectKey`).
+ *
+ * @module @memberjunction/storage
+ */
+import { LogError, Metadata, RunView, WellKnownUserSource } from '@memberjunction/core';
+import { BaseSingleton, EscapeSQLString, IsValidUUID, NormalizeUUID, UUIDsEqual } from '@memberjunction/global';
+import { DEFAULT_OBJECT_KEY_NORMALIZER, IsSafeStorageObjectKey, StorageObjectKeyOf } from './generic/ObjectKeys.js';
+/**
+ * The refusal for a storage account the caller may not use. Deliberately the same for an account that does not exist, so a
+ * refusal never reveals whether an account ID is real.
+ */
+export const STORAGE_ACCOUNT_ACCESS_DENIED_MESSAGE = 'You do not have access to this storage account or it does not exist.';
+/** The refusal for an object backed by an `MJ: Files` row the caller may not read — the wording `GetFileContents` uses. */
+export const TRACKED_FILE_ACCESS_DENIED_MESSAGE = 'You do not have access to this file or it does not exist.';
+/** Thrown by {@link StorageAccessEvaluator.AssertAccountAccess} when the caller may not use a storage account. */
+export class StorageAccountAccessDeniedError extends Error {
+    constructor(message = STORAGE_ACCOUNT_ACCESS_DENIED_MESSAGE) {
+        super(message);
+        this.name = 'StorageAccountAccessDeniedError';
+    }
+}
+/**
+ * Thrown by {@link StorageAccessEvaluator.AssertTrackedObjectsReadable} when an object backs an `MJ: Files` row the caller
+ * may not read (or its key is one the checks refuse — see {@link IsSafeStorageObjectKey}). Carries
+ * {@link TRACKED_FILE_ACCESS_DENIED_MESSAGE}, the wording `GetFileContents` uses for a row it cannot load.
+ */
+export class TrackedFileAccessDeniedError extends Error {
+    constructor(message = TRACKED_FILE_ACCESS_DENIED_MESSAGE) {
+        super(message);
+        this.name = 'TrackedFileAccessDeniedError';
+    }
+}
+/**
+ * How many values one `IN (...)` list carries. The tracked-file lookups are batched into lists of this size so a long
+ * listing or search page never becomes one oversized statement.
+ */
+const IN_LIST_BATCH_SIZE = 500;
+/**
+ * Decides storage-account access (`Read` / `Write`) and tracked-file read access for a user, per call. See the module
+ * documentation for the evaluation model.
+ *
+ * ```typescript
+ * const evaluator = StorageAccessEvaluator.Instance;
+ * await evaluator.AssertAccountAccess(accountId, contextUser, 'Write', provider);   // throws when refused
+ * const readable = await evaluator.AccessibleAccountIDs(ids, contextUser, 'Read', provider);
+ * if (readable.has(NormalizeUUID(id))) { ... }
+ * ```
+ */
+export class StorageAccessEvaluator extends BaseSingleton {
+    /**
+     * **The current product rule: a storage account with NO `MJ: File Storage Account Permissions` rows is open to every
+     * authenticated user, for both Read and Write.** The admin UI documents it ("If no roles are selected, all authorized
+     * users have access"), and every account created before account permissions existed relies on it. Entity-level
+     * permissions on `MJ: Files` still apply on top.
+     *
+     * This is the ONLY place the rule lives. Flipping it to "no rows means closed" is a product decision that needs a data
+     * migration writing an explicit `Everyone` row (CanRead, and CanWrite where wanted) for every existing account without
+     * rows — otherwise every such account goes dark at deploy time.
+     */
+    static { this.ACCOUNT_WITHOUT_PERMISSION_ROWS_IS_OPEN = true; }
+    /** Returns the global singleton instance. */
+    static get Instance() {
+        return super.getInstance();
+    }
+    // ─────────────────────────────────────────────────────────────────────
+    // Account access
+    // ─────────────────────────────────────────────────────────────────────
+    /**
+     * The subset of `accountIDs` that `user` may use for `access`, as normalized ({@link NormalizeUUID}) IDs — compare with
+     * `NormalizeUUID(id)`. An ID that is not a UUID, names no account, or names an account the user may not use is left
+     * out; so is everything when the user cannot be evaluated or the permission read fails (fail closed).
+     *
+     * @param accountIDs - `MJ: File Storage Accounts` IDs to ask about (duplicates and casing are ignored)
+     * @param user - The user the decision is for
+     * @param access - `Read` checks `CanRead`; `Write` checks `CanWrite`
+     * @param provider - The metadata provider to read through; defaults to `Metadata.Provider`
+     */
+    async AccessibleAccountIDs(accountIDs, user, access, provider) {
+        const allowed = new Set();
+        const requested = this.distinctValidAccountIDs(accountIDs);
+        if (requested.length === 0 || !this.canEvaluate(user)) {
+            return allowed;
+        }
+        const state = await this.loadStateSafely(requested, provider);
+        if (!state) {
+            return allowed; // fail closed — the failure is already logged
+        }
+        const rowsByAccount = this.groupRowsByAccount(state.Rows);
+        for (const id of requested) {
+            if (state.ExistingAccountIDs.has(id) && this.GrantsAccess(rowsByAccount.get(id) ?? [], user, access)) {
+                allowed.add(id);
+            }
+        }
+        return allowed;
+    }
+    /** Whether `user` may use storage account `accountID` for `access`. See {@link AccessibleAccountIDs}. */
+    async UserCanAccessAccount(accountID, user, access, provider) {
+        const allowed = await this.AccessibleAccountIDs([accountID], user, access, provider);
+        return allowed.has(NormalizeUUID(accountID));
+    }
+    /**
+     * Throws {@link StorageAccountAccessDeniedError} unless `user` may use storage account `accountID` for `access`. The
+     * error carries {@link STORAGE_ACCOUNT_ACCESS_DENIED_MESSAGE} whether the account is restricted or does not exist.
+     */
+    async AssertAccountAccess(accountID, user, access, provider) {
+        if (!(await this.UserCanAccessAccount(accountID, user, access, provider))) {
+            throw new StorageAccountAccessDeniedError();
+        }
+    }
+    /**
+     * The decision for ONE account, given all of its permission rows: open when it has none (the current product rule —
+     * see {@link ACCOUNT_WITHOUT_PERMISSION_ROWS_IS_OPEN}), otherwise granted when any row both allows `access`
+     * (`CanRead` / `CanWrite`) and applies to `user` (an `Everyone` row, a `Role` row for one of `user.UserRoles`, or a
+     * `User` row naming `user.ID`). A user that cannot be evaluated (no ID, or no `UserRoles` array) is refused.
+     */
+    GrantsAccess(rows, user, access) {
+        if (!this.canEvaluate(user)) {
+            return false;
+        }
+        if (rows.length === 0) {
+            return StorageAccessEvaluator.ACCOUNT_WITHOUT_PERMISSION_ROWS_IS_OPEN;
+        }
+        const roleIDs = new Set(user.UserRoles.map(r => NormalizeUUID(r.RoleID)));
+        return rows.some(row => this.rowGrants(row, user, roleIDs, access));
+    }
+    /**
+     * Reads, with the elevated reader, which of `accountIDs` exist and every permission row they have. Returns `null` when
+     * the question could not be asked (no elevated reader, or a failed read) — callers fail closed.
+     * Protected so a host with its own permission store can supply the state; `accountIDs` arrive validated and normalized.
+     */
+    async LoadAccountPermissionState(accountIDs, provider) {
+        const md = provider ?? Metadata.Provider;
+        const reader = await this.ResolveElevatedReader(md);
+        if (!reader) {
+            LogError('StorageAccessEvaluator: no elevated reader (MJ system user) could be resolved — storage access denied');
+            return null;
+        }
+        const inList = accountIDs.map(id => `'${EscapeSQLString(id)}'`).join(', ');
+        const [accounts, permissions] = await RunView.FromMetadataProvider(md).RunViews([
+            // IgnoreMaxRows on both: a truncated read would drop rows, and an account whose rows were all dropped would look
+            // like an account with none — which the zero-rows rule treats as open.
+            { EntityName: 'MJ: File Storage Accounts', ExtraFilter: `ID IN (${inList})`, Fields: ['ID'], ResultType: 'simple', IgnoreMaxRows: true },
+            {
+                EntityName: 'MJ: File Storage Account Permissions',
+                ExtraFilter: `FileStorageAccountID IN (${inList})`,
+                Fields: ['FileStorageAccountID', 'Type', 'UserID', 'RoleID', 'CanRead', 'CanWrite'],
+                ResultType: 'simple',
+                IgnoreMaxRows: true
+            }
+        ], reader);
+        if (!accounts?.Success || !permissions?.Success) {
+            LogError(`StorageAccessEvaluator: permission read failed: ${accounts?.ErrorMessage ?? permissions?.ErrorMessage ?? 'no result'}`);
+            return null;
+        }
+        const rows = permissions.Results.filter((r) => this.isPermissionRow(r));
+        return { ExistingAccountIDs: this.accountIDsOf(accounts), Rows: rows };
+    }
+    /**
+     * The identity the permission rows and the `MJ: Files` mapping are read with: the MJ system user for `provider`'s
+     * connection, or `null` when this process has none. Protected so a host can supply a different elevated reader.
+     */
+    async ResolveElevatedReader(provider) {
+        try {
+            return await WellKnownUserSource.Instance.GetSystemUser(provider);
+        }
+        catch (error) {
+            LogError(`StorageAccessEvaluator: resolving the elevated reader failed: ${error instanceof Error ? error.message : String(error)}`);
+            return null;
+        }
+    }
+    // ─────────────────────────────────────────────────────────────────────
+    // Tracked files
+    // ─────────────────────────────────────────────────────────────────────
+    /**
+     * Which of `objectKeys` back an `MJ: Files` row that `user` may not read. An object is tracked when an `MJ: Files` row
+     * on the account's storage provider resolves to it the way the server resolves every row to an object — `ProviderKey`,
+     * or `Name` when `ProviderKey` is empty. The mapping is read with the elevated reader (so a row the user cannot see
+     * still counts as tracked); whether the user may read each row is then asked as the user, through `RunView` (entity
+     * permission and row-level security both apply, as they do for `Load`). Reads are batched and never truncated.
+     *
+     * **Matching.** The key a caller sends and the key a row stores are both put through `keyNormalizer` — pass the
+     * account's driver, whose `NormalizeObjectKey` knows how that driver spells one object several ways (S3's key prefix;
+     * leading, trailing and repeated `/` everywhere) — and compared case-insensitively. The lookup finds rows whose stored
+     * key is the canonical key with or without a leading or trailing `/`, or the caller's own spelling; a row stored in any
+     * other non-canonical spelling (a driver prefix written into `ProviderKey`, doubled slashes) is not found, and MJ's
+     * own writers store neither.
+     *
+     * **Refused keys.** A key {@link IsSafeStorageObjectKey} rejects (a `.`/`..` segment, a backslash, a
+     * meaning-changing percent encoding, a control character) is always returned: its meaning depends on the provider,
+     * so it is never compared.
+     *
+     * Untracked keys are never returned — they are governed by the account gate alone. `MJ: Files` rows are keyed by
+     * PROVIDER, not account, so a tracked row in another account on the same provider with the same key also counts: the
+     * error is always toward refusing. Fails closed — when the mapping cannot be read every key is returned, and when the
+     * user-side read fails every tracked key is.
+     *
+     * @param fileStorageProviderID - The `MJ: File Storage Providers` ID of the account the objects live in
+     * @param objectKeys - Object keys as the caller or the driver spells them (path and/or provider object ID)
+     * @param keyNormalizer - The account's canonicalizer (its driver); defaults to `NormalizeStorageObjectKey`
+     */
+    async UnreadableTrackedObjectKeys(fileStorageProviderID, objectKeys, user, provider, keyNormalizer = DEFAULT_OBJECT_KEY_NORMALIZER) {
+        const keys = Array.from(new Set((objectKeys ?? []).filter(k => typeof k === 'string' && k.length > 0)));
+        const refused = keys.filter(k => !IsSafeStorageObjectKey(k));
+        try {
+            const canonical = this.canonicalKeys(keys.filter(k => IsSafeStorageObjectKey(k)), keyNormalizer);
+            if (canonical.size === 0) {
+                return new Set(refused);
+            }
+            const md = provider ?? Metadata.Provider;
+            const tracked = await this.FindTrackedFiles(fileStorageProviderID, this.lookupValues(canonical), md);
+            if (!tracked) {
+                return new Set(keys);
+            }
+            const unreadable = await this.keysBehindUnreadableRows(canonical, tracked, keyNormalizer, user, md);
+            return new Set([...refused, ...unreadable]);
+        }
+        catch (error) {
+            LogError(`StorageAccessEvaluator: tracked-file check failed: ${error instanceof Error ? error.message : String(error)}`);
+            return new Set(keys);
+        }
+    }
+    /**
+     * Throws {@link TrackedFileAccessDeniedError} when any of `objectKeys` backs an `MJ: Files` row `user` may not read
+     * (or is a key the checks refuse). See {@link UnreadableTrackedObjectKeys} for the rule.
+     */
+    async AssertTrackedObjectsReadable(fileStorageProviderID, objectKeys, user, provider, keyNormalizer = DEFAULT_OBJECT_KEY_NORMALIZER) {
+        const unreadable = await this.UnreadableTrackedObjectKeys(fileStorageProviderID, objectKeys, user, provider, keyNormalizer);
+        if (unreadable.size > 0) {
+            throw new TrackedFileAccessDeniedError();
+        }
+    }
+    /**
+     * Reads, with the elevated reader, the `MJ: Files` rows on `fileStorageProviderID` whose stored object key
+     * ({@link StorageObjectKeyOf}: `ProviderKey`, else `Name`), lower-cased, is one of `lookupValues` (already lower-cased). Batched, never truncated.
+     * Returns `null` when the read could not be made. Protected so a host can change the mapping.
+     */
+    async FindTrackedFiles(fileStorageProviderID, lookupValues, provider) {
+        if (!IsValidUUID(fileStorageProviderID)) {
+            return null;
+        }
+        const reader = await this.ResolveElevatedReader(provider);
+        if (!reader) {
+            LogError('StorageAccessEvaluator: no elevated reader (MJ system user) could be resolved — tracked-file check denied');
+            return null;
+        }
+        const providerFilter = `ProviderID = '${EscapeSQLString(fileStorageProviderID)}'`;
+        const views = this.batches(lookupValues).map(batch => {
+            const inList = batch.map(v => `'${EscapeSQLString(v)}'`).join(', ');
+            return {
+                EntityName: 'MJ: Files',
+                ExtraFilter: `${providerFilter} AND (LOWER(ProviderKey) IN (${inList}) OR ((ProviderKey IS NULL OR ProviderKey = '') AND LOWER(Name) IN (${inList})))`,
+                Fields: ['ID', 'Name', 'ProviderKey'],
+                ResultType: 'simple',
+                IgnoreMaxRows: true
+            };
+        });
+        const results = await RunView.FromMetadataProvider(provider).RunViews(views, reader);
+        const failed = results.find(r => !r?.Success);
+        if (failed || results.length !== views.length) {
+            LogError(`StorageAccessEvaluator: tracked-file lookup failed: ${failed?.ErrorMessage ?? 'no result'}`);
+            return null;
+        }
+        return results.flatMap(r => r.Results);
+    }
+    // ─────────────────────────────────────────────────────────────────────
+    // Helpers
+    // ─────────────────────────────────────────────────────────────────────
+    /** Whether a single permission row allows `access` and applies to `user`. */
+    rowGrants(row, user, roleIDs, access) {
+        const allows = access === 'Write' ? row.CanWrite : row.CanRead;
+        if (!allows) {
+            return false;
+        }
+        switch (row.Type) {
+            case 'Everyone':
+                return true;
+            case 'User':
+                return row.UserID != null && UUIDsEqual(row.UserID, user.ID);
+            case 'Role':
+                return row.RoleID != null && roleIDs.has(NormalizeUUID(row.RoleID));
+            default:
+                return false;
+        }
+    }
+    /** A user can be evaluated only with an ID and a hydrated `UserRoles` array; anything less is refused. */
+    canEvaluate(user) {
+        const ok = user != null && typeof user.ID === 'string' && user.ID.length > 0 && Array.isArray(user.UserRoles);
+        if (!ok) {
+            LogError('StorageAccessEvaluator: the user cannot be evaluated (missing ID or UserRoles) — storage access denied');
+        }
+        return ok;
+    }
+    /** Distinct, normalized, UUID-shaped IDs — anything else can name no account and is simply not asked about. */
+    distinctValidAccountIDs(accountIDs) {
+        return Array.from(new Set((accountIDs ?? []).filter(id => IsValidUUID(id)).map(id => NormalizeUUID(id))));
+    }
+    /** {@link LoadAccountPermissionState}, with a throw turned into `null` (fail closed). */
+    async loadStateSafely(accountIDs, provider) {
+        try {
+            return await this.LoadAccountPermissionState(accountIDs, provider);
+        }
+        catch (error) {
+            LogError(`StorageAccessEvaluator: permission read threw: ${error instanceof Error ? error.message : String(error)}`);
+            return null;
+        }
+    }
+    /** Permission rows keyed by normalized account ID. */
+    groupRowsByAccount(rows) {
+        const byAccount = new Map();
+        for (const row of rows) {
+            const id = NormalizeUUID(row.FileStorageAccountID);
+            const list = byAccount.get(id);
+            if (list) {
+                list.push(row);
+            }
+            else {
+                byAccount.set(id, [row]);
+            }
+        }
+        return byAccount;
+    }
+    /** The normalized account IDs in an accounts result. */
+    accountIDsOf(result) {
+        const ids = new Set();
+        for (const row of result.Results) {
+            if ('ID' in row && row.ID) {
+                ids.add(NormalizeUUID(row.ID));
+            }
+        }
+        return ids;
+    }
+    /** Narrows a row from the batched read to a permission row. */
+    isPermissionRow(row) {
+        return 'FileStorageAccountID' in row;
+    }
+    /** Each safe key paired with its lower-cased canonical form; keys that canonicalize to the root (`''`) name no object. */
+    canonicalKeys(keys, keyNormalizer) {
+        const canonical = new Map();
+        for (const key of keys) {
+            const normalized = keyNormalizer.NormalizeObjectKey(key).toLowerCase();
+            if (normalized.length > 0) {
+                canonical.set(key, normalized);
+            }
+        }
+        return canonical;
+    }
+    /**
+     * The lower-cased stored spellings the lookup matches for each key: the canonical key bare, with a leading `/`, with a
+     * trailing `/`, with both — and the caller's own spelling, so a row stored exactly as the caller spells it is found.
+     */
+    lookupValues(canonical) {
+        const values = new Set();
+        for (const [raw, key] of canonical) {
+            [key, `/${key}`, `${key}/`, `/${key}/`, raw.trim().toLowerCase()].forEach(v => values.add(v));
+        }
+        return Array.from(values);
+    }
+    /** `items` in consecutive batches of {@link IN_LIST_BATCH_SIZE}. */
+    batches(items) {
+        const out = [];
+        for (let i = 0; i < items.length; i += IN_LIST_BATCH_SIZE) {
+            out.push(items.slice(i, i + IN_LIST_BATCH_SIZE));
+        }
+        return out;
+    }
+    /** The keys (as the caller spelled them) whose tracked rows include one the user may not read. */
+    async keysBehindUnreadableRows(canonical, tracked, keyNormalizer, user, provider) {
+        const unreadable = new Set();
+        const wanted = new Set(canonical.values());
+        const rowsByKey = new Map();
+        for (const row of tracked) {
+            const key = this.trackedKeyOf(row, keyNormalizer);
+            if (wanted.has(key)) {
+                rowsByKey.set(key, [...(rowsByKey.get(key) ?? []), row]);
+            }
+        }
+        if (rowsByKey.size === 0) {
+            return unreadable;
+        }
+        const rowIDs = new Set(Array.from(rowsByKey.values()).flat().map(f => f.ID));
+        const readable = await this.readableFileIDs(Array.from(rowIDs), user, provider);
+        for (const [raw, key] of canonical) {
+            if ((rowsByKey.get(key) ?? []).some(f => !readable || !readable.has(NormalizeUUID(f.ID)))) {
+                unreadable.add(raw);
+            }
+        }
+        return unreadable;
+    }
+    /** The canonical, lower-cased object key the server resolves an `MJ: Files` row to ({@link StorageObjectKeyOf}). */
+    trackedKeyOf(file, keyNormalizer) {
+        return keyNormalizer.NormalizeObjectKey(StorageObjectKeyOf(file)).toLowerCase();
+    }
+    /** Which of `fileIDs` `user` may read, asked as the user (batched, never truncated); `null` when a read fails. */
+    async readableFileIDs(fileIDs, user, provider) {
+        const views = this.batches(fileIDs).map(batch => ({
+            EntityName: 'MJ: Files',
+            ExtraFilter: `ID IN (${batch.map(id => `'${EscapeSQLString(id)}'`).join(', ')})`,
+            Fields: ['ID'],
+            ResultType: 'simple',
+            IgnoreMaxRows: true
+        }));
+        const results = await RunView.FromMetadataProvider(provider).RunViews(views, user);
+        const failed = results.find(r => !r?.Success);
+        if (failed || results.length !== views.length) {
+            LogError(`StorageAccessEvaluator: reading MJ: Files as the user failed: ${failed?.ErrorMessage ?? 'no result'}`);
+            return null;
+        }
+        return new Set(results.flatMap(r => r.Results).map(r => NormalizeUUID(r.ID)));
+    }
+}
+//# sourceMappingURL=StorageAccessEvaluator.js.map

package/dist/StorageAccessEvaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StorageAccessEvaluator.js","sourceRoot":"","sources":["../src/StorageAccessEvaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAqB,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAA2B,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACpI,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhH,OAAO,EAAE,6BAA6B,EAAE,sBAAsB,EAA8B,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAmB7I;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,sEAAsE,CAAC;AAE5H,2HAA2H;AAC3H,MAAM,CAAC,MAAM,kCAAkC,GAAG,2DAA2D,CAAC;AAE9G,kHAAkH;AAClH,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACtD,YAAmB,UAAkB,qCAAqC;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAClD,CAAC;CACJ;AAED;;;;GAIG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACnD,YAAmB,UAAkB,kCAAkC;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC/C,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAQ/B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAuB,SAAQ,aAAqC;IAC7E;;;;;;;;;OASG;aACqB,4CAAuC,GAAG,IAAI,CAAC;IAEvE,6CAA6C;IACtC,MAAM,KAAK,QAAQ;QACtB,OAAO,KAAK,CAAC,WAAW,EAA0B,CAAC;IACvD,CAAC;IAED,wEAAwE;IACxE,iBAAiB;IACjB,wEAAwE;IAExE;;;;;;;;;OASG;IACI,KAAK,CAAC,oBAAoB,CAC7B,UAAoB,EACpB,IAAc,EACd,MAA4B,EAC5B,QAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,OAAO,CAAC,CAAC,8CAA8C;QAClE,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpB,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,yGAAyG;IAClG,KAAK,CAAC,oBAAoB,CAC7B,SAAiB,EACjB,IAAc,EACd,MAA4B,EAC5B,QAA4B;QAE5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,mBAAmB,CAC5B,SAAiB,EACjB,IAAc,EACd,MAA4B,EAC5B,QAA4B;QAE5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,+BAA+B,EAAE,CAAC;QAChD,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,YAAY,CAAC,IAAmC,EAAE,IAAc,EAAE,MAA4B;QACjG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,sBAAsB,CAAC,uCAAuC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,0BAA0B,CACtC,UAAoB,EACpB,QAA4B;QAE5B,MAAM,EAAE,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,QAAQ,CAAC,uGAAuG,CAAC,CAAC;YAClH,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,QAAQ,CAA6C;YACxH,iHAAiH;YACjH,uEAAuE;YACvE,EAAE,UAAU,EAAE,2BAA2B,EAAE,WAAW,EAAE,UAAU,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE;YACxI;gBACI,UAAU,EAAE,sCAAsC;gBAClD,WAAW,EAAE,4BAA4B,MAAM,GAAG;gBAClD,MAAM,EAAE,CAAC,sBAAsB,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;gBACnF,UAAU,EAAE,QAAQ;gBACpB,aAAa,EAAE,IAAI;aACtB;SACJ,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC9C,QAAQ,CAAC,mDAAmD,QAAQ,EAAE,YAAY,IAAI,WAAW,EAAE,YAAY,IAAI,WAAW,EAAE,CAAC,CAAC;YAClI,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,OAAO,EAAE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,qBAAqB,CAAC,QAA2B;QAC7D,IAAI,CAAC;YACD,OAAO,MAAM,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,iEAAiE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpI,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,gBAAgB;IAChB,wEAAwE;IAExE;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACI,KAAK,CAAC,2BAA2B,CACpC,qBAA6B,EAC7B,UAAoB,EACpB,IAAc,EACd,QAA4B,EAC5B,gBAA4C,6BAA6B;QAEzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YACjG,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACpG,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,sDAAsD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,4BAA4B,CACrC,qBAA6B,EAC7B,UAAoB,EACpB,IAAc,EACd,QAA4B,EAC5B,gBAA4C,6BAA6B;QAEzE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5H,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,gBAAgB,CAC5B,qBAA6B,EAC7B,YAAsB,EACtB,QAA2B;QAE3B,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,QAAQ,CAAC,2GAA2G,CAAC,CAAC;YACtH,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,eAAe,CAAC,qBAAqB,CAAC,GAAG,CAAC;QAClF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACjD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpE,OAAO;gBACH,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,GAAG,cAAc,gCAAgC,MAAM,uEAAuE,MAAM,KAAK;gBACtJ,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC;gBACrC,UAAU,EAAE,QAAiB;gBAC7B,aAAa,EAAE,IAAI;aACtB,CAAC;QACN,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAiB,KAAK,EAAE,MAAM,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,QAAQ,CAAC,uDAAuD,MAAM,EAAE,YAAY,IAAI,WAAW,EAAE,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,wEAAwE;IACxE,UAAU;IACV,wEAAwE;IAExE,6EAA6E;IACrE,SAAS,CAAC,GAAgC,EAAE,IAAc,EAAE,OAAoB,EAAE,MAA4B;QAClH,MAAM,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,UAAU;gBACX,OAAO,IAAI,CAAC;YAChB,KAAK,MAAM;gBACP,OAAO,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM;gBACP,OAAO,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACxE;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAED,0GAA0G;IAClG,WAAW,CAAC,IAAiC;QACjD,MAAM,EAAE,GAAG,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9G,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,QAAQ,CAAC,wGAAwG,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,+GAA+G;IACvG,uBAAuB,CAAC,UAAoB;QAChD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,eAAe,CAAC,UAAoB,EAAE,QAA4B;QAC5E,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,kDAAkD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrH,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,sDAAsD;IAC9C,kBAAkB,CAAC,IAAmC;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyC,CAAC;QACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,IAAI,EAAE,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACJ,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,wDAAwD;IAChD,YAAY,CAAC,MAAiE;QAClF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,IAAI,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACxB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,+DAA+D;IACvD,eAAe,CAAC,GAA+C;QACnE,OAAO,sBAAsB,IAAI,GAAG,CAAC;IACzC,CAAC;IAED,0HAA0H;IAClH,aAAa,CAAC,IAAc,EAAE,aAAyC;QAC3E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,aAAa,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACvE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,SAA8B;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;YACjC,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,oEAAoE;IAC5D,OAAO,CAAI,KAAU;QACzB,MAAM,GAAG,GAAU,EAAE,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,kGAAkG;IAC1F,KAAK,CAAC,wBAAwB,CAClC,SAA8B,EAC9B,OAAyB,EACzB,aAAyC,EACzC,IAAc,EACd,QAA2B;QAE3B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7D,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,oHAAoH;IAC5G,YAAY,CAAC,IAAoB,EAAE,aAAyC;QAChF,OAAO,aAAa,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpF,CAAC;IAED,kHAAkH;IAC1G,KAAK,CAAC,eAAe,CAAC,OAAiB,EAAE,IAAc,EAAE,QAA2B;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9C,UAAU,EAAE,WAAW;YACvB,WAAW,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChF,MAAM,EAAE,CAAC,IAAI,CAAC;YACd,UAAU,EAAE,QAAiB;YAC7B,aAAa,EAAE,IAAI;SACtB,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAA2B,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,QAAQ,CAAC,iEAAiE,MAAM,EAAE,YAAY,IAAI,WAAW,EAAE,CAAC,CAAC;YACjH,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC"}

package/dist/config.d.ts

@@ -79,6 +79,7 @@ declare const storageProvidersSchema: z.ZodObject<{
         refreshToken: z.ZodOptional<z.ZodString>;
         redirectURI: z.ZodOptional<z.ZodString>;
         rootFolderID: z.ZodOptional<z.ZodString>;
+        driveID: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         refreshToken?: string;
         keyFile?: string;
@@ -87,6 +88,7 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientSecret?: string;
         redirectURI?: string;
         rootFolderID?: string;
+        driveID?: string;
     }, {
         refreshToken?: string;
         keyFile?: string;
@@ -95,6 +97,7 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientSecret?: string;
         redirectURI?: string;
         rootFolderID?: string;
+        driveID?: string;
     }>>;
     /**
      * Dropbox Configuration
@@ -161,16 +164,16 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientID?: string;
         clientSecret?: string;
         rootFolderID?: string;
+        driveID?: string;
         tenantID?: string;
         siteID?: string;
-        driveID?: string;
     }, {
         clientID?: string;
         clientSecret?: string;
         rootFolderID?: string;
+        driveID?: string;
         tenantID?: string;
         siteID?: string;
-        driveID?: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     aws?: {
@@ -200,6 +203,7 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientSecret?: string;
         redirectURI?: string;
         rootFolderID?: string;
+        driveID?: string;
     };
     dropbox?: {
         refreshToken?: string;
@@ -220,9 +224,9 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientID?: string;
         clientSecret?: string;
         rootFolderID?: string;
+        driveID?: string;
         tenantID?: string;
         siteID?: string;
-        driveID?: string;
     };
 }, {
     aws?: {
@@ -252,6 +256,7 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientSecret?: string;
         redirectURI?: string;
         rootFolderID?: string;
+        driveID?: string;
     };
     dropbox?: {
         refreshToken?: string;
@@ -272,9 +277,9 @@ declare const storageProvidersSchema: z.ZodObject<{
         clientID?: string;
         clientSecret?: string;
         rootFolderID?: string;
+        driveID?: string;
         tenantID?: string;
         siteID?: string;
-        driveID?: string;
     };
 }>;
 /**
@@ -361,6 +366,7 @@ declare const storageConfigSchema: z.ZodObject<{
             refreshToken: z.ZodOptional<z.ZodString>;
             redirectURI: z.ZodOptional<z.ZodString>;
             rootFolderID: z.ZodOptional<z.ZodString>;
+            driveID: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             refreshToken?: string;
             keyFile?: string;
@@ -369,6 +375,7 @@ declare const storageConfigSchema: z.ZodObject<{
             clientSecret?: string;
             redirectURI?: string;
             rootFolderID?: string;
+            driveID?: string;
         }, {
             refreshToken?: string;
             keyFile?: string;
@@ -377,6 +384,7 @@ declare const storageConfigSchema: z.ZodObject<{
             clientSecret?: string;
             redirectURI?: string;
             rootFolderID?: string;
+            driveID?: string;
         }>>;
         /**
          * Dropbox Configuration
@@ -443,16 +451,16 @@ declare const storageConfigSchema: z.ZodObject<{
             clientID?: string;
             clientSecret?: string;
             rootFolderID?: string;
+            driveID?: string;
             tenantID?: string;
             siteID?: string;
-            driveID?: string;
         }, {
             clientID?: string;
             clientSecret?: string;
             rootFolderID?: string;
+            driveID?: string;
             tenantID?: string;
             siteID?: string;
-            driveID?: string;
         }>>;
     }, "strip", z.ZodTypeAny, {
         aws?: {
@@ -482,6 +490,7 @@ declare const storageConfigSchema: z.ZodObject<{
             clientSecret?: string;
             redirectURI?: string;
             rootFolderID?: string;
+            driveID?: string;
         };
         dropbox?: {
             refreshToken?: string;
@@ -502,9 +511,9 @@ declare const storageConfigSchema: z.ZodObject<{
             clientID?: string;
             clientSecret?: string;
             rootFolderID?: string;
+            driveID?: string;
             tenantID?: string;
             siteID?: string;
-            driveID?: string;
         };
     }, {
         aws?: {
@@ -534,6 +543,7 @@ declare const storageConfigSchema: z.ZodObject<{
             clientSecret?: string;
             redirectURI?: string;
             rootFolderID?: string;
+            driveID?: string;
         };
         dropbox?: {
             refreshToken?: string;
@@ -554,9 +564,9 @@ declare const storageConfigSchema: z.ZodObject<{
             clientID?: string;
             clientSecret?: string;
             rootFolderID?: string;
+            driveID?: string;
             tenantID?: string;
             siteID?: string;
-            driveID?: string;
         };
     }>>>;
 }, "strip", z.ZodTypeAny, {
@@ -588,6 +598,7 @@ declare const storageConfigSchema: z.ZodObject<{
             clientSecret?: string;
             redirectURI?: string;
             rootFolderID?: string;
+            driveID?: string;
         };
         dropbox?: {
             refreshToken?: string;
@@ -608,9 +619,9 @@ declare const storageConfigSchema: z.ZodObject<{
             clientID?: string;
             clientSecret?: string;
             rootFolderID?: string;
+            driveID?: string;
             tenantID?: string;
             siteID?: string;
-            driveID?: string;
         };
     };
 }, {
@@ -642,6 +653,7 @@ declare const storageConfigSchema: z.ZodObject<{
             clientSecret?: string;
             redirectURI?: string;
             rootFolderID?: string;
+            driveID?: string;
         };
         dropbox?: {
             refreshToken?: string;
@@ -662,9 +674,9 @@ declare const storageConfigSchema: z.ZodObject<{
             clientID?: string;
             clientSecret?: string;
             rootFolderID?: string;
+            driveID?: string;
             tenantID?: string;
             siteID?: string;
-            driveID?: string;
         };
     };
 }>;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,QAAA,MAAM,sBAAsB;IAC1B;;;OAGG;;;;;;;;;;;;;;;;;;;;IAWH;;;OAGG;;;;;;;;;;;;;;;;;IAUH;;;OAGG;;;;;;;;;;;;;;;;;IAUH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;IAeH;;;OAGG;;;;;;;;;;;;;;;;;;;;IAWH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;IAYH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWH,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,mBAAmB;IACvB;;OAEG;;QA/GH;;;WAGG;;;;;;;;;;;;;;;;;;;;QAWH;;;WAGG;;;;;;;;;;;;;;;;;QAUH;;;WAGG;;;;;;;;;;;;;;;;;QAUH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;QAeH;;;WAGG;;;;;;;;;;;;;;;;;;;;QAWH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;QAYH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBH,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAI5E;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAgFhD;AAED,gDAAgD;AAChD,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,sBAAsB,CAGlE;AAED,yDAAyD;AACzD,wBAAgB,yBAAyB,IAAI,sBAAsB,CAElE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,sBAAsB,EAAE,QAAQ,EAAE,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAGhH;AAED,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,sBAAsB,EAAE,QAAQ,EAAE,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAEhH;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,kDAAkD;AAClD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,QAAA,MAAM,sBAAsB;IAC1B;;;OAGG;;;;;;;;;;;;;;;;;;;;IAWH;;;OAGG;;;;;;;;;;;;;;;;;IAUH;;;OAGG;;;;;;;;;;;;;;;;;IAUH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiBH;;;OAGG;;;;;;;;;;;;;;;;;;;;IAWH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;IAYH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWH,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,mBAAmB;IACvB;;OAEG;;QAjHH;;;WAGG;;;;;;;;;;;;;;;;;;;;QAWH;;;WAGG;;;;;;;;;;;;;;;;;QAUH;;;WAGG;;;;;;;;;;;;;;;;;QAUH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAiBH;;;WAGG;;;;;;;;;;;;;;;;;;;;QAWH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;QAYH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBH,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAI5E;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAiFhD;AAED,gDAAgD;AAChD,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,sBAAsB,CAGlE;AAED,yDAAyD;AACzD,wBAAgB,yBAAyB,IAAI,sBAAsB,CAElE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,sBAAsB,EAAE,QAAQ,EAAE,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAGhH;AAED,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,sBAAsB,EAAE,QAAQ,EAAE,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAEhH;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,kDAAkD;AAClD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}