@mondaydotcomorg/monday-authorization 3.3.0-feat-add-graph-api-routing-support-2d70b30 → 3.3.0-feat-add-graph-api-routing-support-c37c919

package/dist/esm/clients/{platform-api.client.mjs → platform-api.mjs}

@@ -2,14 +2,22 @@ import { Api } from '@mondaydotcomorg/trident-backend-api';
 import { HttpFetcherError } from '@mondaydotcomorg/monday-fetch-api';
 import { AuthorizationInternalService, logger } from '../authorization-internal-service.mjs';
 import { getAttributionsFromApi } from '../attributions-service.mjs';
-import { toSnakeCase, scopeToResource, toCamelCase } from '../utils/authorization.utils.mjs';
-import { incrementAuthorizationError } from '../prometheus-service.mjs';
+import { toSnakeCase, toCamelCase } from '../utils/authorization.utils.mjs';
+import { recordAuthorizationError } from '../metrics-service.mjs';
 
 const PLATFORM_CAN_ACTIONS_IN_SCOPES_PATH = '/internal_ms/authorization/can_actions_in_scopes';
 /**
  * Client for handling Platform API authorization operations
  */
-class PlatformApiClient {
+class PlatformApi {
+    httpClient;
+    constructor() {
+        const httpClient = Api.getPart('httpClient');
+        if (!httpClient) {
+            throw new Error('PlatformApi: http client is not initialized');
+        }
+        this.httpClient = httpClient;
+    }
     /**
      * Builds the request payload for Platform API calls
      */
@@ -22,11 +30,10 @@ class PlatformApiClient {
     /**
      * Fetches authorization data from the Platform API
      */
-    static async fetchPermissions(profile, internalAuthToken, userId, scopedActionsPayload) {
+    async fetchPermissions(profile, internalAuthToken, userId, scopedActionsPayload) {
         const attributionHeaders = getAttributionsFromApi();
-        const httpClient = Api.getPart('httpClient');
         try {
-            const response = await httpClient.fetch({
+            const response = await this.httpClient.fetch({
                 url: {
                     appName: 'platform',
                     path: PLATFORM_CAN_ACTIONS_IN_SCOPES_PATH,
@@ -49,8 +56,7 @@ class PlatformApiClient {
             if (err instanceof HttpFetcherError) {
                 AuthorizationInternalService.throwOnHttpError(err.status, 'canActionInScopeMultiple');
                 if (scopedActionsPayload.length > 0) {
-                    const { resourceType } = scopeToResource(toCamelCase(scopedActionsPayload[0].scope));
-                    incrementAuthorizationError(resourceType, scopedActionsPayload[0].action, err.status, 'platform');
+                    recordAuthorizationError('platform', err.status);
                 }
             }
             throw err;
@@ -61,8 +67,8 @@ class PlatformApiClient {
      */
     static mapResponse(response) {
         if (!response) {
-            logger.error({ tag: 'platform-api-client', response }, 'PlatformApiClient: missing response');
-            throw new Error('PlatformApiClient: missing response');
+            logger.error({ tag: 'platform-api', response }, 'PlatformApi: missing response');
+            throw new Error('PlatformApi: missing response');
         }
         return response.result.map(responseObject => {
             const { scopedAction, permit } = responseObject;
@@ -77,11 +83,11 @@ class PlatformApiClient {
     /**
      * Performs a complete authorization check using the Platform API
      */
-    static async checkPermissions(profile, internalAuthToken, userId, scopedActions) {
-        const scopedActionsPayload = this.buildRequestPayload(scopedActions);
+    async checkPermissions(profile, internalAuthToken, userId, scopedActions) {
+        const scopedActionsPayload = PlatformApi.buildRequestPayload(scopedActions);
         const platformResponse = await this.fetchPermissions(profile, internalAuthToken, userId, scopedActionsPayload);
-        return this.mapResponse(platformResponse);
+        return PlatformApi.mapResponse(platformResponse);
     }
 }
 
-export { PlatformApiClient };
+export { PlatformApi };

package/dist/esm/index.d.ts

@@ -5,6 +5,12 @@ export interface InitOptions {
     mondayFetchOptions?: MondayFetchOptions;
     redisClient?: any;
     grantedFeatureRedisExpirationInSeconds?: number;
+    metrics?: {
+        serviceName?: string;
+        host?: string;
+        port?: number;
+        disabled?: boolean;
+    };
 }
 export declare function init(options?: InitOptions): Promise<void>;
 export { authorizationCheckMiddleware, getAuthorizationMiddleware, skipAuthorizationMiddleware, } from './authorization-middleware';

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,sCAAsC,CAAC,EAAE,MAAM,CAAC;CACjD;AAED,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,iBAcnD;AAED,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAInE,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,sCAAsC,CAAC,EAAE,MAAM,CAAC;IAChD,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,iBAqBnD;AAED,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/esm/index.mjs

@@ -1,6 +1,7 @@
 import { setPrometheus } from './prometheus-service.mjs';
 import { setRequestFetchOptions, setRedisClient, setIgniteClient } from './authorization-service.mjs';
 export { AuthorizationService } from './authorization-service.mjs';
+import { initializeMetrics } from './metrics-service.mjs';
 import * as testKit_index from './testKit/index.mjs';
 export { testKit_index as TestKit };
 export { authorizationCheckMiddleware, getAuthorizationMiddleware, skipAuthorizationMiddleware } from './authorization-middleware.mjs';
@@ -12,6 +13,12 @@ async function init(options = {}) {
     if (options.prometheus) {
         setPrometheus(options.prometheus);
     }
+    initializeMetrics({
+        serviceName: options.metrics?.serviceName ?? process.env.APP_NAME ?? 'authorization-sdk',
+        host: options.metrics?.host,
+        port: options.metrics?.port,
+        disabled: options.metrics?.disabled,
+    });
     if (options.mondayFetchOptions) {
         setRequestFetchOptions(options.mondayFetchOptions);
     }

package/dist/esm/metrics-service.d.ts

@@ -0,0 +1,13 @@
+type ApiType = 'platform' | 'graph';
+interface InitializeMetricsOptions {
+    serviceName: string;
+    host?: string;
+    port?: number;
+    disabled?: boolean;
+}
+export declare function initializeMetrics(options: InitializeMetricsOptions): void;
+export declare function recordAuthorizationTiming(apiType: ApiType, duration: number): void;
+export declare function recordAuthorizationSuccess(apiType: ApiType): void;
+export declare function recordAuthorizationError(apiType: ApiType, statusCode: number): void;
+export {};
+//# sourceMappingURL=metrics-service.d.ts.map

package/dist/esm/metrics-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-service.d.ts","sourceRoot":"","sources":["../../src/metrics-service.ts"],"names":[],"mappings":"AAGA,KAAK,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;AAEpC,UAAU,wBAAwB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAID,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA4BzE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAUlF;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAUjE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAUnF"}

package/dist/esm/metrics-service.mjs

@@ -0,0 +1,65 @@
+import { Metric } from '@mondaydotcomorg/monday-observability-kit';
+import { logger } from './authorization-internal-service.mjs';
+
+let initialized = false;
+function initializeMetrics(options) {
+    if (initialized) {
+        return;
+    }
+    const { serviceName } = options;
+    if (!serviceName) {
+        logger.warn({ tag: 'metrics-service' }, 'Metrics initialization skipped: serviceName is missing');
+        return;
+    }
+    const resolvedHost = options.host ?? process.env.DOGSTATSD_HOST ?? 'localhost';
+    const envPort = process.env.DOGSTATSD_PORT ? Number(process.env.DOGSTATSD_PORT) : undefined;
+    const resolvedPort = options.port ?? (Number.isFinite(envPort ?? NaN) ? envPort : undefined) ?? 8125;
+    const resolvedDisabled = options.disabled ?? ['test', 'development'].includes((process.env.NODE_ENV ?? '').toLowerCase());
+    try {
+        Metric.initialize({
+            serviceName,
+            host: resolvedHost,
+            port: resolvedPort,
+            disabled: resolvedDisabled,
+        });
+        initialized = true;
+    }
+    catch (error) {
+        logger.warn({ tag: 'metrics-service', error }, 'Failed to initialize metrics');
+    }
+}
+function recordAuthorizationTiming(apiType, duration) {
+    if (!initialized) {
+        return;
+    }
+    try {
+        Metric.distribution(`authorization.authorizationCheck.${apiType}.duration`, duration);
+    }
+    catch (error) {
+        logger.warn({ tag: 'metrics-service', error }, 'Failed to record authorization timing');
+    }
+}
+function recordAuthorizationSuccess(apiType) {
+    if (!initialized) {
+        return;
+    }
+    try {
+        Metric.increment(`authorization.authorizationCheck.${apiType}.success`);
+    }
+    catch (error) {
+        logger.warn({ tag: 'metrics-service', error }, 'Failed to record authorization success');
+    }
+}
+function recordAuthorizationError(apiType, statusCode) {
+    if (!initialized) {
+        return;
+    }
+    try {
+        Metric.increment(`authorization.authorizationCheck.${apiType}.error.${statusCode}`);
+    }
+    catch (error) {
+        logger.warn({ tag: 'metrics-service', error }, 'Failed to record authorization error');
+    }
+}
+
+export { initializeMetrics, recordAuthorizationError, recordAuthorizationSuccess, recordAuthorizationTiming };

package/dist/esm/prometheus-service.d.ts

@@ -7,6 +7,4 @@ export declare const METRICS: {
 export declare function setPrometheus(customPrometheus: any): void;
 export declare function getMetricsManager(): any;
 export declare function sendAuthorizationCheckResponseTimeMetric(resourceType: string, action: Action, isAuthorized: boolean, responseStatus: number, time: number, apiType?: 'platform' | 'graph'): void;
-export declare function incrementAuthorizationSuccess(resourceType: string, action: Action, apiType: 'platform' | 'graph'): void;
-export declare function incrementAuthorizationError(resourceType: string, action: Action, statusCode: number, apiType: 'platform' | 'graph'): void;
 //# sourceMappingURL=prometheus-service.d.ts.map

package/dist/esm/prometheus-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prometheus-service.d.ts","sourceRoot":"","sources":["../../src/prometheus-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAOzC,eAAO,MAAM,OAAO;;;;CAInB,CAAC;AAQF,wBAAgB,aAAa,CAAC,gBAAgB,KAAA,QAqB7C;AAED,wBAAgB,iBAAiB,QAEhC;AAED,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,EACrB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,UAAU,GAAG,OAAoB,QAW3C;AAcD,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,QAQhH;AAED,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,GAAG,OAAO,QAS9B"}
+{"version":3,"file":"prometheus-service.d.ts","sourceRoot":"","sources":["../../src/prometheus-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAKzC,eAAO,MAAM,OAAO;;;;CAInB,CAAC;AAQF,wBAAgB,aAAa,CAAC,gBAAgB,KAAA,QAmB7C;AAED,wBAAgB,iBAAiB,QAEhC;AAED,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,EACrB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,UAAU,GAAG,OAAoB,QAW3C"}

package/dist/esm/prometheus-service.mjs

@@ -1,7 +1,5 @@
 let prometheus = null;
 let authorizationCheckResponseTimeMetric = null;
-let authorizationSuccessMetric = null;
-let authorizationErrorMetric = null;
 const METRICS = {
     AUTHORIZATION_CHECK: 'authorization_check',
     AUTHORIZATION_CHECKS_PER_REQUEST: 'authorization_checks_per_request',
@@ -16,16 +14,14 @@ function setPrometheus(customPrometheus) {
     prometheus = customPrometheus;
     if (!prometheus) {
         authorizationCheckResponseTimeMetric = null;
-        authorizationSuccessMetric = null;
-        authorizationErrorMetric = null;
         return;
     }
     const { METRICS_TYPES } = prometheus;
     const metricsManager = getMetricsManager();
-    if (metricsManager) {
-        authorizationCheckResponseTimeMetric = metricsManager.addMetric(METRICS_TYPES.SUMMARY, authorizationCheckResponseTimeMetricConfig.name, authorizationCheckResponseTimeMetricConfig.labels, authorizationCheckResponseTimeMetricConfig.description);
-        initializeAdditionalMetrics();
+    if (!metricsManager) {
+        return;
     }
+    authorizationCheckResponseTimeMetric = metricsManager.addMetric(METRICS_TYPES.SUMMARY, authorizationCheckResponseTimeMetricConfig.name, authorizationCheckResponseTimeMetricConfig.labels, authorizationCheckResponseTimeMetricConfig.description);
 }
 function getMetricsManager() {
     return prometheus?.metricsManager;
@@ -42,47 +38,5 @@ function sendAuthorizationCheckResponseTimeMetric(resourceType, action, isAuthor
         // ignore
     }
 }
-const authorizationSuccessMetricConfig = {
-    name: 'authorization_success_total',
-    labels: ['resourceType', 'action', 'apiType'],
-    description: 'Total number of successful authorization checks',
-};
-const authorizationErrorMetricConfig = {
-    name: 'authorization_error_total',
-    labels: ['resourceType', 'action', 'statusCode', 'apiType'],
-    description: 'Total number of authorization errors',
-};
-function incrementAuthorizationSuccess(resourceType, action, apiType) {
-    try {
-        if (authorizationSuccessMetric) {
-            authorizationSuccessMetric.labels(resourceType, action, apiType).inc();
-        }
-    }
-    catch (e) {
-        // ignore
-    }
-}
-function incrementAuthorizationError(resourceType, action, statusCode, apiType) {
-    try {
-        if (authorizationErrorMetric) {
-            authorizationErrorMetric.labels(resourceType, action, statusCode, apiType).inc();
-        }
-    }
-    catch (e) {
-        // ignore
-    }
-}
-// Initialize additional metrics when prometheus is set
-function initializeAdditionalMetrics() {
-    if (!prometheus) {
-        return;
-    }
-    const { METRICS_TYPES } = prometheus;
-    const metricsManager = getMetricsManager();
-    if (metricsManager) {
-        authorizationSuccessMetric = metricsManager.addMetric(METRICS_TYPES.COUNTER, authorizationSuccessMetricConfig.name, authorizationSuccessMetricConfig.labels, authorizationSuccessMetricConfig.description);
-        authorizationErrorMetric = metricsManager.addMetric(METRICS_TYPES.COUNTER, authorizationErrorMetricConfig.name, authorizationErrorMetricConfig.labels, authorizationErrorMetricConfig.description);
-    }
-}
 
-export { METRICS, getMetricsManager, incrementAuthorizationError, incrementAuthorizationSuccess, sendAuthorizationCheckResponseTimeMetric, setPrometheus };
+export { METRICS, getMetricsManager, sendAuthorizationCheckResponseTimeMetric, setPrometheus };

package/dist/esm/types/graph-api.types.d.ts

@@ -2,14 +2,15 @@ export type ResourceType = string;
 export type ResourceId = number;
 export type ActionName = string;
 export type GraphIsAllowedDto = Record<ResourceType, Record<ResourceId, ActionName[]>>;
-export type GraphPermissionResult = {
+export interface GraphPermissionReason {
+    key: string;
+    additionalOptions?: Record<string, string>;
+    technicalReason?: number;
+}
+export interface GraphPermissionResult {
     can: boolean;
-    reason: string | {
-        key: string;
-        additionalOptions?: Record<string, string>;
-        technicalReason?: number;
-    };
-};
+    reason?: GraphPermissionReason;
+}
 export type GraphPermissionResults = Record<ActionName, GraphPermissionResult>;
 export type GraphIsAllowedResponse = Record<ResourceType, Record<string, GraphPermissionResults>>;
 //# sourceMappingURL=graph-api.types.d.ts.map

package/dist/esm/types/graph-api.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-api.types.d.ts","sourceRoot":"","sources":["../../../src/types/graph-api.types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAClC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAChC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAEvF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EACF,MAAM,GACN;QACE,GAAG,EAAE,MAAM,CAAC;QACZ,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACP,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;AAI/E,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"graph-api.types.d.ts","sourceRoot":"","sources":["../../../src/types/graph-api.types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAClC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAChC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAEvF,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAGD,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;AAI/E,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -5,6 +5,12 @@ export interface InitOptions {
     mondayFetchOptions?: MondayFetchOptions;
     redisClient?: any;
     grantedFeatureRedisExpirationInSeconds?: number;
+    metrics?: {
+        serviceName?: string;
+        host?: string;
+        port?: number;
+        disabled?: boolean;
+    };
 }
 export declare function init(options?: InitOptions): Promise<void>;
 export { authorizationCheckMiddleware, getAuthorizationMiddleware, skipAuthorizationMiddleware, } from './authorization-middleware';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,sCAAsC,CAAC,EAAE,MAAM,CAAC;CACjD;AAED,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,iBAcnD;AAED,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAInE,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,sCAAsC,CAAC,EAAE,MAAM,CAAC;IAChD,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,iBAqBnD;AAED,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -2,6 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const prometheusService = require('./prometheus-service.js');
 const authorizationService = require('./authorization-service.js');
+const metricsService = require('./metrics-service.js');
 const testKit_index = require('./testKit/index.js');
 const authorizationMiddleware = require('./authorization-middleware.js');
 const authorizationAttributesService = require('./authorization-attributes-service.js');
@@ -12,6 +13,12 @@ async function init(options = {}) {
     if (options.prometheus) {
         prometheusService.setPrometheus(options.prometheus);
     }
+    metricsService.initializeMetrics({
+        serviceName: options.metrics?.serviceName ?? process.env.APP_NAME ?? 'authorization-sdk',
+        host: options.metrics?.host,
+        port: options.metrics?.port,
+        disabled: options.metrics?.disabled,
+    });
     if (options.mondayFetchOptions) {
         authorizationService.setRequestFetchOptions(options.mondayFetchOptions);
     }

package/dist/metrics-service.d.ts

@@ -0,0 +1,13 @@
+type ApiType = 'platform' | 'graph';
+interface InitializeMetricsOptions {
+    serviceName: string;
+    host?: string;
+    port?: number;
+    disabled?: boolean;
+}
+export declare function initializeMetrics(options: InitializeMetricsOptions): void;
+export declare function recordAuthorizationTiming(apiType: ApiType, duration: number): void;
+export declare function recordAuthorizationSuccess(apiType: ApiType): void;
+export declare function recordAuthorizationError(apiType: ApiType, statusCode: number): void;
+export {};
+//# sourceMappingURL=metrics-service.d.ts.map

package/dist/metrics-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-service.d.ts","sourceRoot":"","sources":["../src/metrics-service.ts"],"names":[],"mappings":"AAGA,KAAK,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;AAEpC,UAAU,wBAAwB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAID,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA4BzE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAUlF;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAUjE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAUnF"}

package/dist/metrics-service.js

@@ -0,0 +1,70 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const mondayObservabilityKit = require('@mondaydotcomorg/monday-observability-kit');
+const authorizationInternalService = require('./authorization-internal-service.js');
+
+let initialized = false;
+function initializeMetrics(options) {
+    if (initialized) {
+        return;
+    }
+    const { serviceName } = options;
+    if (!serviceName) {
+        authorizationInternalService.logger.warn({ tag: 'metrics-service' }, 'Metrics initialization skipped: serviceName is missing');
+        return;
+    }
+    const resolvedHost = options.host ?? process.env.DOGSTATSD_HOST ?? 'localhost';
+    const envPort = process.env.DOGSTATSD_PORT ? Number(process.env.DOGSTATSD_PORT) : undefined;
+    const resolvedPort = options.port ?? (Number.isFinite(envPort ?? NaN) ? envPort : undefined) ?? 8125;
+    const resolvedDisabled = options.disabled ?? ['test', 'development'].includes((process.env.NODE_ENV ?? '').toLowerCase());
+    try {
+        mondayObservabilityKit.Metric.initialize({
+            serviceName,
+            host: resolvedHost,
+            port: resolvedPort,
+            disabled: resolvedDisabled,
+        });
+        initialized = true;
+    }
+    catch (error) {
+        authorizationInternalService.logger.warn({ tag: 'metrics-service', error }, 'Failed to initialize metrics');
+    }
+}
+function recordAuthorizationTiming(apiType, duration) {
+    if (!initialized) {
+        return;
+    }
+    try {
+        mondayObservabilityKit.Metric.distribution(`authorization.authorizationCheck.${apiType}.duration`, duration);
+    }
+    catch (error) {
+        authorizationInternalService.logger.warn({ tag: 'metrics-service', error }, 'Failed to record authorization timing');
+    }
+}
+function recordAuthorizationSuccess(apiType) {
+    if (!initialized) {
+        return;
+    }
+    try {
+        mondayObservabilityKit.Metric.increment(`authorization.authorizationCheck.${apiType}.success`);
+    }
+    catch (error) {
+        authorizationInternalService.logger.warn({ tag: 'metrics-service', error }, 'Failed to record authorization success');
+    }
+}
+function recordAuthorizationError(apiType, statusCode) {
+    if (!initialized) {
+        return;
+    }
+    try {
+        mondayObservabilityKit.Metric.increment(`authorization.authorizationCheck.${apiType}.error.${statusCode}`);
+    }
+    catch (error) {
+        authorizationInternalService.logger.warn({ tag: 'metrics-service', error }, 'Failed to record authorization error');
+    }
+}
+
+exports.initializeMetrics = initializeMetrics;
+exports.recordAuthorizationError = recordAuthorizationError;
+exports.recordAuthorizationSuccess = recordAuthorizationSuccess;
+exports.recordAuthorizationTiming = recordAuthorizationTiming;

package/dist/prometheus-service.d.ts

@@ -7,6 +7,4 @@ export declare const METRICS: {
 export declare function setPrometheus(customPrometheus: any): void;
 export declare function getMetricsManager(): any;
 export declare function sendAuthorizationCheckResponseTimeMetric(resourceType: string, action: Action, isAuthorized: boolean, responseStatus: number, time: number, apiType?: 'platform' | 'graph'): void;
-export declare function incrementAuthorizationSuccess(resourceType: string, action: Action, apiType: 'platform' | 'graph'): void;
-export declare function incrementAuthorizationError(resourceType: string, action: Action, statusCode: number, apiType: 'platform' | 'graph'): void;
 //# sourceMappingURL=prometheus-service.d.ts.map

package/dist/prometheus-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prometheus-service.d.ts","sourceRoot":"","sources":["../src/prometheus-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAOzC,eAAO,MAAM,OAAO;;;;CAInB,CAAC;AAQF,wBAAgB,aAAa,CAAC,gBAAgB,KAAA,QAqB7C;AAED,wBAAgB,iBAAiB,QAEhC;AAED,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,EACrB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,UAAU,GAAG,OAAoB,QAW3C;AAcD,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,QAQhH;AAED,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,GAAG,OAAO,QAS9B"}
+{"version":3,"file":"prometheus-service.d.ts","sourceRoot":"","sources":["../src/prometheus-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAKzC,eAAO,MAAM,OAAO;;;;CAInB,CAAC;AAQF,wBAAgB,aAAa,CAAC,gBAAgB,KAAA,QAmB7C;AAED,wBAAgB,iBAAiB,QAEhC;AAED,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,EACrB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,UAAU,GAAG,OAAoB,QAW3C"}

package/dist/prometheus-service.js

@@ -2,8 +2,6 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 let prometheus = null;
 let authorizationCheckResponseTimeMetric = null;
-let authorizationSuccessMetric = null;
-let authorizationErrorMetric = null;
 const METRICS = {
     AUTHORIZATION_CHECK: 'authorization_check',
     AUTHORIZATION_CHECKS_PER_REQUEST: 'authorization_checks_per_request',
@@ -18,16 +16,14 @@ function setPrometheus(customPrometheus) {
     prometheus = customPrometheus;
     if (!prometheus) {
         authorizationCheckResponseTimeMetric = null;
-        authorizationSuccessMetric = null;
-        authorizationErrorMetric = null;
         return;
     }
     const { METRICS_TYPES } = prometheus;
     const metricsManager = getMetricsManager();
-    if (metricsManager) {
-        authorizationCheckResponseTimeMetric = metricsManager.addMetric(METRICS_TYPES.SUMMARY, authorizationCheckResponseTimeMetricConfig.name, authorizationCheckResponseTimeMetricConfig.labels, authorizationCheckResponseTimeMetricConfig.description);
-        initializeAdditionalMetrics();
+    if (!metricsManager) {
+        return;
     }
+    authorizationCheckResponseTimeMetric = metricsManager.addMetric(METRICS_TYPES.SUMMARY, authorizationCheckResponseTimeMetricConfig.name, authorizationCheckResponseTimeMetricConfig.labels, authorizationCheckResponseTimeMetricConfig.description);
 }
 function getMetricsManager() {
     return prometheus?.metricsManager;
@@ -44,52 +40,8 @@ function sendAuthorizationCheckResponseTimeMetric(resourceType, action, isAuthor
         // ignore
     }
 }
-const authorizationSuccessMetricConfig = {
-    name: 'authorization_success_total',
-    labels: ['resourceType', 'action', 'apiType'],
-    description: 'Total number of successful authorization checks',
-};
-const authorizationErrorMetricConfig = {
-    name: 'authorization_error_total',
-    labels: ['resourceType', 'action', 'statusCode', 'apiType'],
-    description: 'Total number of authorization errors',
-};
-function incrementAuthorizationSuccess(resourceType, action, apiType) {
-    try {
-        if (authorizationSuccessMetric) {
-            authorizationSuccessMetric.labels(resourceType, action, apiType).inc();
-        }
-    }
-    catch (e) {
-        // ignore
-    }
-}
-function incrementAuthorizationError(resourceType, action, statusCode, apiType) {
-    try {
-        if (authorizationErrorMetric) {
-            authorizationErrorMetric.labels(resourceType, action, statusCode, apiType).inc();
-        }
-    }
-    catch (e) {
-        // ignore
-    }
-}
-// Initialize additional metrics when prometheus is set
-function initializeAdditionalMetrics() {
-    if (!prometheus) {
-        return;
-    }
-    const { METRICS_TYPES } = prometheus;
-    const metricsManager = getMetricsManager();
-    if (metricsManager) {
-        authorizationSuccessMetric = metricsManager.addMetric(METRICS_TYPES.COUNTER, authorizationSuccessMetricConfig.name, authorizationSuccessMetricConfig.labels, authorizationSuccessMetricConfig.description);
-        authorizationErrorMetric = metricsManager.addMetric(METRICS_TYPES.COUNTER, authorizationErrorMetricConfig.name, authorizationErrorMetricConfig.labels, authorizationErrorMetricConfig.description);
-    }
-}
 
 exports.METRICS = METRICS;
 exports.getMetricsManager = getMetricsManager;
-exports.incrementAuthorizationError = incrementAuthorizationError;
-exports.incrementAuthorizationSuccess = incrementAuthorizationSuccess;
 exports.sendAuthorizationCheckResponseTimeMetric = sendAuthorizationCheckResponseTimeMetric;
 exports.setPrometheus = setPrometheus;

package/dist/types/graph-api.types.d.ts

@@ -2,14 +2,15 @@ export type ResourceType = string;
 export type ResourceId = number;
 export type ActionName = string;
 export type GraphIsAllowedDto = Record<ResourceType, Record<ResourceId, ActionName[]>>;
-export type GraphPermissionResult = {
+export interface GraphPermissionReason {
+    key: string;
+    additionalOptions?: Record<string, string>;
+    technicalReason?: number;
+}
+export interface GraphPermissionResult {
     can: boolean;
-    reason: string | {
-        key: string;
-        additionalOptions?: Record<string, string>;
-        technicalReason?: number;
-    };
-};
+    reason?: GraphPermissionReason;
+}
 export type GraphPermissionResults = Record<ActionName, GraphPermissionResult>;
 export type GraphIsAllowedResponse = Record<ResourceType, Record<string, GraphPermissionResults>>;
 //# sourceMappingURL=graph-api.types.d.ts.map

package/dist/types/graph-api.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-api.types.d.ts","sourceRoot":"","sources":["../../src/types/graph-api.types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAClC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAChC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAEvF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EACF,MAAM,GACN;QACE,GAAG,EAAE,MAAM,CAAC;QACZ,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACP,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;AAI/E,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"graph-api.types.d.ts","sourceRoot":"","sources":["../../src/types/graph-api.types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAClC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAChC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAEvF,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAGD,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;AAI/E,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "3.3.0-feat-add-graph-api-routing-support-2d70b30",
+  "version": "3.3.0-feat-add-graph-api-routing-support-c37c919",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -25,6 +25,7 @@
     "@mondaydotcomorg/monday-fetch-api": "^1.0.2",
     "@mondaydotcomorg/monday-jwt": "^3.0.14",
     "@mondaydotcomorg/monday-logger": "^4.0.11",
+    "@mondaydotcomorg/monday-observability-kit": "^1.5.3",
     "@mondaydotcomorg/monday-sns": "^1.2.1",
     "@mondaydotcomorg/trident-backend-api": "^0.24.3",
     "lodash": "^4.17.21",

package/dist/clients/graph-api.client.d.ts

@@ -1,24 +0,0 @@
-import { ScopedAction, ScopedActionResponseObject } from '../types/scoped-actions-contracts';
-import { GraphIsAllowedDto, GraphIsAllowedResponse } from '../types/graph-api.types';
-/**
- * Client for handling Graph API authorization operations
- */
-export declare class GraphApiClient {
-    /**
-     * Builds the request body for Graph API calls
-     */
-    static buildRequestBody(scopedActions: ScopedAction[]): GraphIsAllowedDto;
-    /**
-     * Fetches authorization data from the Graph API
-     */
-    static fetchPermissions(internalAuthToken: string, scopedActions: ScopedAction[]): Promise<GraphIsAllowedResponse>;
-    /**
-     * Maps Graph API response to the expected format
-     */
-    static mapResponse(scopedActions: ScopedAction[], graphResponse: GraphIsAllowedResponse): ScopedActionResponseObject[];
-    /**
-     * Performs a complete authorization check using the Graph API
-     */
-    static checkPermissions(internalAuthToken: string, scopedActions: ScopedAction[]): Promise<ScopedActionResponseObject[]>;
-}
-//# sourceMappingURL=graph-api.client.d.ts.map

package/dist/clients/graph-api.client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"graph-api.client.d.ts","sourceRoot":"","sources":["../../src/clients/graph-api.client.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,0BAA0B,EAG3B,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EAIvB,MAAM,0BAA0B,CAAC;AAMlC;;GAEG;AACH,qBAAa,cAAc;IACzB;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,YAAY,EAAE,GAAG,iBAAiB;IAyBzE;;OAEG;WACU,gBAAgB,CAC3B,iBAAiB,EAAE,MAAM,EACzB,aAAa,EAAE,YAAY,EAAE,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IA2ClC;;OAEG;IACH,MAAM,CAAC,WAAW,CAChB,aAAa,EAAE,YAAY,EAAE,EAC7B,aAAa,EAAE,sBAAsB,GACpC,0BAA0B,EAAE;IAsC/B;;OAEG;WACU,gBAAgB,CAC3B,iBAAiB,EAAE,MAAM,EACzB,aAAa,EAAE,YAAY,EAAE,GAC5B,OAAO,CAAC,0BAA0B,EAAE,CAAC;CAIzC"}