@numa-tech/numa 1.19.0 → 1.20.1

package/dist/authorization/application-client.js

@@ -0,0 +1,391 @@
+import { z } from "zod";
+import { open, unlink, lstat } from "node:fs/promises";
+import { resolve } from "node:path";
+import { resolveBackendUrl } from "../backend.js";
+import { ensureAccessToken, fetchWithKeycloakIdentity, } from "../oauth.js";
+import { AuthorizationError, authorizationHttpErrorCode } from "./errors.js";
+import * as s from "./application-schemas.js";
+const ROOT = "/api/v1/admin/authorization";
+function invalid(message) {
+    throw new AuthorizationError(message, "authorization_input_invalid");
+}
+function id(value) {
+    return s.parse(s.uuid, value);
+}
+function query(value) {
+    return new URLSearchParams(Object.entries(value)
+        .filter(([, v]) => v !== undefined)
+        .map(([k, v]) => [k, String(v)])).toString();
+}
+function pagination(p = {}) {
+    return s.parse(z
+        .object({
+        page: s.positive.max(100000),
+        size: s.positive.max(100),
+        q: z.string().max(100).optional(),
+    })
+        .strict(), {
+        page: p.page ?? 1,
+        size: p.size ?? 20,
+        ...(p.q === undefined ? {} : { q: p.q }),
+    });
+}
+export class ApplicationClient {
+    config;
+    dependencies;
+    applicationId;
+    base;
+    constructor(config, applicationId, dependencies = {}) {
+        this.config = config;
+        this.dependencies = dependencies;
+        this.applicationId = s.parse(s.positive, applicationId);
+        this.base = `${ROOT}/applications/${this.applicationId}`;
+    }
+    async request(path, method = "GET", body, binary = false) {
+        try {
+            return await fetchWithKeycloakIdentity(this.config, resolveBackendUrl(this.config, { path, method }), () => ({
+                method,
+                redirect: "error",
+                signal: AbortSignal.timeout(60000),
+                headers: {
+                    Accept: binary ? "application/octet-stream" : "application/json",
+                    ...(body === undefined
+                        ? {}
+                        : { "Content-Type": "application/json" }),
+                },
+                ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+            }), {
+                fetch: this.dependencies.fetch ?? fetch,
+                tokenProvider: this.dependencies.tokenProvider ?? ensureAccessToken,
+                retryUnauthorized: method === "GET",
+            });
+        }
+        catch {
+            throw new AuthorizationError("Application authorization request did not complete; inspect the original request before further action.", "authorization_api_error", undefined, body && typeof body === "object" && "requestId" in body
+                ? String(body.requestId)
+                : undefined);
+        }
+    }
+    async json(path, schema, method = "GET", body) {
+        const response = await this.request(path, method, body);
+        if (!response.ok)
+            throw await this.failure(response);
+        const parsed = schema.safeParse(await response.json().catch(() => undefined));
+        if (!parsed.success)
+            throw new AuthorizationError("Application API response does not match the current contract.", "authorization_invalid_response", response.status);
+        return parsed.data;
+    }
+    async failure(response, requestId) {
+        // Binary responses and untrusted details are never read into errors.
+        let code;
+        if (response.headers.get("content-type")?.includes("application/json")) {
+            const body = await response.json().catch(() => undefined);
+            if (body &&
+                typeof body === "object" &&
+                "code" in body &&
+                typeof body.code === "string" &&
+                /^[A-Z][A-Z0-9_]{1,100}$/.test(body.code))
+                code = body.code;
+        }
+        return new AuthorizationError(`Application authorization API returned HTTP ${response.status}.`, authorizationHttpErrorCode(response.status), response.status, requestId, code);
+    }
+    scoped(value) {
+        if (value.applicationId !== undefined &&
+            value.applicationId !== this.applicationId)
+            throw new AuthorizationError("Response application scope mismatch.", "authorization_invalid_response");
+        return value;
+    }
+    async sources() {
+        return this.json(`${this.base}/identity/sources`, z.array(s.source));
+    }
+    async source(environmentId) {
+        id(environmentId);
+        const matches = (await this.sources()).filter((v) => v.environmentId === environmentId);
+        if (matches.length !== 1)
+            invalid("Environment is not an exact source of the chosen application.");
+        return matches[0];
+    }
+    catalog(p = {}) {
+        return this.json(`${ROOT}/application-catalog?${query(pagination(p))}`, s.page);
+    }
+    async definition() {
+        return this.scoped(await this.json(`${this.base}/definition`, s.draftDefinition));
+    }
+    async saveDefinition(input) {
+        return this.scoped(await this.json(`${this.base}/definition`, s.draftDefinition, "PUT", s.parse(s.definitionSave, input)));
+    }
+    async freeze(input) {
+        return this.scoped(await this.json(`${this.base}/definition/versions`, s.immutableDefinition, "POST", s.parse(s.freezeInput, input)));
+    }
+    async definitionVersion(n) {
+        return this.scoped(await this.json(`${this.base}/definition/versions/${s.parse(s.positive, n)}`, s.immutableDefinition));
+    }
+    targets(p = {}, filters = {}) {
+        const f = s.parse(z
+            .object({
+            issuerId: s.uuid.optional(),
+            identitySource: z.enum(["PLATFORM", "REGISTERED"]).optional(),
+        })
+            .strict(), filters);
+        const { q: _, ...paging } = pagination(p);
+        return this.json(`${this.base}/publication-targets?${query({ ...paging, ...f })}`, s.page);
+    }
+    environments(p = {}) {
+        return this.json(`${this.base}/environments?${query(pagination(p))}`, s.page.extend({ items: z.array(s.environmentView) }));
+    }
+    async environment(environmentId) {
+        const result = this.scoped(await this.json(`${this.base}/environments/${id(environmentId)}`, s.environmentView));
+        if (result.id !== environmentId)
+            invalid("Environment response scope mismatch.");
+        return result;
+    }
+    async saveEnvironment(input, environmentId) {
+        const body = s.parse(s.environmentInput, input);
+        if (!environmentId && body.version !== 0)
+            invalid("Environment creation requires version 0.");
+        return this.scoped(await this.json(`${this.base}/environments${environmentId ? `/${id(environmentId)}` : ""}`, s.environmentView, environmentId ? "PUT" : "POST", body));
+    }
+    configuration(environmentId) {
+        return this.json(`${this.base}/environments/${id(environmentId)}/configuration`, s.document);
+    }
+    gatewayHistory(bindingId, p = {}) {
+        return this.json(`${this.base}/gateway-bindings/${id(bindingId)}/history?${query(pagination(p))}`, s.page);
+    }
+    environmentRuns(environmentId, p = {}) {
+        return this.json(`${this.base}/environments/${id(environmentId)}/runs?${query(pagination(p))}`, s.page);
+    }
+    directory(kind, environmentId, p = {}) {
+        s.parse(z.enum(["users", "clients", "groups", "service-accounts"]), kind);
+        return this.json(`${this.base}/identity/directory/${kind}?${query({ environmentId: id(environmentId), ...pagination(p) })}`, s.directoryPage);
+    }
+    kind(kind) {
+        return s.parse(z.enum(["clients", "groups"]), kind);
+    }
+    objects(kind, p = {}) {
+        return this.json(`${this.base}/identity/${this.kind(kind)}?${query(pagination(p))}`, s.page.extend({ hasMore: z.boolean(), items: z.array(s.draftView) }));
+    }
+    async object(kind, referenceId, environmentId) {
+        const result = this.scoped(await this.json(`${this.base}/identity/${this.kind(kind)}/${id(referenceId)}?${query({ environmentId: id(environmentId) })}`, s.draftView.extend({ source: s.source })));
+        if (result.referenceId !== referenceId)
+            invalid("Reference response scope mismatch.");
+        const source = s.parse(s.source, result.source);
+        if (source.environmentId !== environmentId)
+            invalid("Reference environment mismatch.");
+        this.verifyInstances(result.instances, source);
+        return result;
+    }
+    verifyInstances(value, source) {
+        if (!Array.isArray(value))
+            invalid("Reference instances missing.");
+        for (const instance of value) {
+            if (instance.identityKey !== source.identityKey ||
+                instance.issuerUrl !== source.issuerUrl)
+                invalid("Instance source mismatch.");
+        }
+    }
+    async saveObject(kind, input, referenceId) {
+        const body = kind === "clients"
+            ? s.parse(s.clientInput, input)
+            : s.parse(s.groupInput, input);
+        return this.scoped(await this.json(`${this.base}/identity/${this.kind(kind)}${referenceId ? `/${id(referenceId)}` : ""}`, s.draftView, referenceId ? "PUT" : "POST", body));
+    }
+    async registered(kind, definitionId, environmentId, instanceId) {
+        const result = this.scoped(await this.json(`${this.base}/identity/registered/${this.kind(kind)}/${id(definitionId)}?${query({ environmentId: id(environmentId), ...(instanceId ? { instanceId: id(instanceId) } : {}) })}`, s.registeredView));
+        const source = s.parse(s.source, result.source);
+        if (result.definitionId !== definitionId ||
+            source.environmentId !== environmentId)
+            invalid("Registered selection scope mismatch.");
+        if (result.instance) {
+            const instance = s.parse(s.document, result.instance);
+            if ((instanceId && instance.id !== instanceId) ||
+                instance.identityKey !== source.identityKey ||
+                instance.issuerUrl !== source.issuerUrl)
+                invalid("Registered instance source mismatch.");
+        }
+        else if (instanceId)
+            invalid("Selected instance missing.");
+        return result;
+    }
+    versions(kind, definitionId, environmentId, p = {}, instanceId) {
+        return this.json(`${this.base}/identity/registered/${this.kind(kind)}/${id(definitionId)}/versions?${query({ environmentId: id(environmentId), ...(instanceId ? { instanceId: id(instanceId) } : {}), ...pagination(p) })}`, s.page);
+    }
+    history(kind, referenceId, instanceId, environmentId, p = {}) {
+        return this.instanceReader(kind, referenceId, instanceId, environmentId, "history", p);
+    }
+    members(referenceId, instanceId, environmentId, p = {}) {
+        return this.instanceReader("groups", referenceId, instanceId, environmentId, "members", p);
+    }
+    blacklist(referenceId, instanceId, environmentId, p = {}) {
+        return this.instanceReader("groups", referenceId, instanceId, environmentId, "blacklist", p);
+    }
+    instanceReader(kind, referenceId, instanceId, environmentId, reader, p) {
+        return this.json(`${this.base}/identity/${this.kind(kind)}/${id(referenceId)}/instances/${id(instanceId)}/${reader}?${query({ environmentId: id(environmentId), ...pagination(p) })}`, s.page.extend({ hasMore: z.boolean() }));
+    }
+    providers(environmentId, p = {}) {
+        return this.json(`${this.base}/identity/catalog/providers?${query({ environmentId: id(environmentId), ...pagination(p) })}`, s.page);
+    }
+    provider(providerApplicationId, environmentId) {
+        return this.json(`${this.base}/identity/catalog/providers/${s.parse(s.positive, providerApplicationId)}?${query({ environmentId: id(environmentId) })}`, s.document);
+    }
+    machines(environmentId, p = {}) {
+        return this.json(`${this.base}/identity/catalog/machines?${query({ environmentId: id(environmentId), ...pagination(p) })}`, s.page);
+    }
+    async relations(environmentId, p = {}) {
+        const source = await this.source(environmentId);
+        return this.json(`${this.base}/identity/relations?${query({ identityKey: source.identityKey, ...pagination(p) })}`, s.relationPage);
+    }
+    async saveRelations(environmentId, input) {
+        const body = s.parse(s.relationsInput, input), source = await this.source(environmentId);
+        return this.json(`${this.base}/identity/relations?${query({ identityKey: source.identityKey })}`, s.relationPage, "PUT", body);
+    }
+    async subjectAccess(subject, environmentId) {
+        await this.source(environmentId);
+        if (!subject ||
+            subject === "." ||
+            subject === ".." ||
+            /[\u0000-\u001f\u007f]/.test(subject))
+            invalid("Invalid subject.");
+        return this.json(`${ROOT}/identity/subjects/${encodeURIComponent(subject)}/access?${query({ environmentId: id(environmentId) })}`, s.document);
+    }
+    async plan(input) {
+        return this.scoped(await this.json(`${this.base}/publication-jobs`, s.publicationJob, "POST", s.parse(s.planInput, input)));
+    }
+    jobs(p = {}) {
+        return this.json(`${this.base}/publication-jobs?${query(pagination(p))}`, s.page.extend({ items: z.array(s.publicationJob) }));
+    }
+    async job(jobId) {
+        const result = this.scoped(await this.json(`${this.base}/publication-jobs/${id(jobId)}`, s.publicationJob));
+        if (result.id !== jobId)
+            invalid("Job response scope mismatch.");
+        return result;
+    }
+    async jobAction(jobId, action, input) {
+        const schemas = {
+            validate: s.confirmation,
+            cancel: s.confirmation,
+            prepare: s.stepConfirmation,
+            review: s.stepConfirmation,
+            apply: s.stepConfirmation,
+            recheck: s.recheckInput,
+            terminate: s.terminateInput,
+            repreview: s.repreviewInput,
+        };
+        const body = s.parse(schemas[action], input), route = { prepare: "prepare-next", apply: "apply-next" }[action] ?? action;
+        const result = this.scoped(await this.json(`${this.base}/publication-jobs/${id(jobId)}/${route}`, s.publicationJob, "POST", body));
+        const expectedId = action === "repreview"
+            ? body.requestId
+            : jobId;
+        if (result.id !== expectedId)
+            invalid("Job response scope mismatch.");
+        return result;
+    }
+    credentialPath(scope) {
+        return `${this.base}/environments/${id(scope.environmentId)}/client-references/${id(scope.referenceId)}/instances/${id(scope.instanceId)}/credentials`;
+    }
+    credentialScope(result, scope) {
+        const c = result.context;
+        if (c.applicationId !== this.applicationId ||
+            c.environmentId !== scope.environmentId ||
+            c.referenceId !== scope.referenceId ||
+            c.instanceId !== scope.instanceId)
+            invalid("Credential response scope mismatch.");
+        if ((c.issuerId === null && c.identityKey !== "platform") ||
+            (c.issuerId !== null && c.identityKey !== c.issuerId))
+            invalid("Credential issuer mismatch.");
+        return result;
+    }
+    async credentialTarget(scope) {
+        return this.credentialScope(await this.json(this.credentialPath(scope), s.credentialTarget), scope);
+    }
+    async credentialOperation(scope, requestId) {
+        const result = this.credentialScope(await this.json(`${this.credentialPath(scope)}/operations/${id(requestId)}`, s.credentialOperation), scope);
+        if (result.requestId !== requestId)
+            invalid("Credential request mismatch.");
+        return result;
+    }
+    async credentialAction(scope, requestId, action, input) {
+        const body = s.parse((action === "recheck"
+            ? s.recheckInput
+            : s.terminateInput), input);
+        const result = this.credentialScope(await this.json(`${this.credentialPath(scope)}/operations/${id(requestId)}/${action}`, s.credentialOperation, "POST", body), scope);
+        if (result.requestId !== requestId)
+            invalid("Credential request mismatch.");
+        return result;
+    }
+    async deliverCredential(scope, action, input, outputPath) {
+        const body = s.parse((action === "rotate"
+            ? s.rotateInput
+            : s.downloadInput), input);
+        const path = this.credentialPath(scope);
+        if (!outputPath ||
+            outputPath === "-" ||
+            outputPath.startsWith("/dev/") ||
+            outputPath.startsWith("/proc/"))
+            invalid("Credentials require an explicit regular output file; stdout is forbidden.");
+        const output = resolve(outputPath);
+        let file;
+        try {
+            file = await open(output, "wx", 0o600);
+        }
+        catch {
+            throw new AuthorizationError("Cannot exclusively create credential output file.", "authorization_input_invalid", undefined, body.requestId);
+        }
+        const created = await file.stat();
+        let complete = false;
+        try {
+            const response = await this.request(`${path}/${action}`, "POST", body, true);
+            if (!response.ok)
+                throw await this.failure(response, body.requestId);
+            if (response.headers
+                .get("content-type")
+                ?.split(";")[0]
+                ?.trim()
+                .toLowerCase() !== "application/octet-stream" ||
+                !/^attachment(?:;|$)/i.test(response.headers.get("content-disposition") ?? "") ||
+                !response.body)
+                throw new AuthorizationError("Credential response is not an attachment.", "authorization_invalid_response", response.status, body.requestId);
+            const reader = response.body.getReader();
+            let size = 0;
+            try {
+                for (;;) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    size += value.byteLength;
+                    if (size > 1024 * 1024)
+                        throw new Error("size");
+                    let offset = 0;
+                    while (offset < value.length) {
+                        const result = await file.write(value, offset, value.length - offset);
+                        if (!result.bytesWritten)
+                            throw new Error("write");
+                        offset += result.bytesWritten;
+                    }
+                }
+                if (size === 0)
+                    throw new Error("empty");
+                await file.sync();
+                await file.close();
+                complete = true;
+            }
+            finally {
+                reader.releaseLock();
+            }
+            return { requestId: body.requestId, outputPath: output };
+        }
+        catch (error) {
+            if (error instanceof AuthorizationError)
+                throw error;
+            throw new AuthorizationError("Credential delivery could not be saved. Inspect this request; do not repeat it.", "authorization_api_error", undefined, body.requestId);
+        }
+        finally {
+            if (!complete) {
+                await file.close().catch(() => { });
+                const current = await lstat(output).catch(() => undefined);
+                if (current?.ino === created.ino && current?.dev === created.dev)
+                    await unlink(output).catch(() => { });
+            }
+        }
+    }
+}
+//# sourceMappingURL=application-client.js.map

package/dist/authorization/application-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-client.js","sourceRoot":"","sources":["../../src/authorization/application-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,yBAAyB,GAE1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,CAAC,MAAM,0BAA0B,CAAC;AAC9C,MAAM,IAAI,GAAG,6BAA6B,CAAC;AAY3C,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;AACvE,CAAC;AACD,SAAS,EAAE,CAAC,KAAa;IACvB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AACD,SAAS,KAAK,CAAC,KAA8B;IAC3C,OAAO,IAAI,eAAe,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACnC,CAAC,QAAQ,EAAE,CAAC;AACf,CAAC;AACD,SAAS,UAAU,CAAC,CAAC,GAAe,EAAE;IACpC,OAAO,CAAC,CAAC,KAAK,CACZ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QACzB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,MAAM,EAAE,EACX;QACE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CACF,CAAC;AACJ,CAAC;AACD,MAAM,OAAO,iBAAiB;IAIT,MAAM;IAEN,YAAY;IALtB,aAAa,CAAS;IACd,IAAI,CAAS;IAC9B,YACmB,MAAkB,EACnC,aAAqB,EACJ,YAAY,GAAkC,EAAE;sBAFhD,MAAM;4BAEN,YAAY;QAE7B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,iBAAiB,IAAI,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IACO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,MAAM,GAA2B,KAAK,EACtC,IAAc,EACd,MAAM,GAAG,KAAK;QAEd,IAAI,CAAC;YACH,OAAO,MAAM,yBAAyB,CACpC,IAAI,CAAC,MAAM,EACX,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAChD,GAAG,EAAE,CAAC,CAAC;gBACL,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;gBAClC,OAAO,EAAE;oBACP,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,kBAAkB;oBAChE,GAAG,CAAC,IAAI,KAAK,SAAS;wBACpB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC5C;gBACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;aAC9D,CAAC,EACF;gBACE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,KAAK;gBACvC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,IAAI,iBAAiB;gBACnE,iBAAiB,EAAE,MAAM,KAAK,KAAK;aACpC,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,kBAAkB,CAC1B,yGAAyG,EACzG,yBAAyB,EACzB,SAAS,EACT,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI;gBACrD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxB,CAAC,CAAC,SAAS,CACd,CAAC;QACJ,CAAC;IACH,CAAC;IACO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,MAAoB,EACpB,MAAM,GAA2B,KAAK,EACtC,IAAc;QAEd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAC7B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAC7C,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,kBAAkB,CAC1B,+DAA+D,EAC/D,gCAAgC,EAChC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,QAAkB,EAAE,SAAkB;QAC1D,qEAAqE;QACrE,IAAI,IAAwB,CAAC;QAC7B,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnE,IACE,IAAI;gBACJ,OAAO,IAAI,KAAK,QAAQ;gBACxB,MAAM,IAAI,IAAI;gBACd,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAEzC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,kBAAkB,CAC3B,+CAA+C,QAAQ,CAAC,MAAM,GAAG,EACjE,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC3C,QAAQ,CAAC,MAAM,EACf,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IACO,MAAM,CAAoC,KAAQ;QACxD,IACE,KAAK,CAAC,aAAa,KAAK,SAAS;YACjC,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;YAE1C,MAAM,IAAI,kBAAkB,CAC1B,sCAAsC,EACtC,gCAAgC,CACjC,CAAC;QACJ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IACO,KAAK,CAAC,MAAM,CAAC,aAAqB;QACxC,EAAE,CAAC,aAAa,CAAC,CAAC;QAClB,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,aAAa,CACzC,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACtB,OAAO,CAAC,+DAA+D,CAAC,CAAC;QAC3E,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC,GAAe,EAAE;QACxB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,wBAAwB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EACrD,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,KAAc;QACjC,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,aAAa,EACzB,CAAC,CAAC,eAAe,EACjB,KAAK,EACL,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CACjC,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,sBAAsB,EAClC,CAAC,CAAC,mBAAmB,EACrB,MAAM,EACN,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAC9B,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,CAAS;QAC/B,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAC5D,CAAC,CAAC,mBAAmB,CACtB,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CACL,CAAC,GAAe,EAAE,EAClB,OAAO,GAAmD,EAAE;QAE5D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CACf,CAAC;aACE,MAAM,CAAC;YACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC3B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC9D,CAAC;aACD,MAAM,EAAE,EACX,OAAO,CACR,CAAC;QACF,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,wBAAwB,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAChE,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,CAAC,GAAe,EAAE;QAC7B,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,iBAAiB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EACnD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CACrD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,aAAqB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAC,aAAa,CAAC,EAAE,EAChD,CAAC,CAAC,eAAe,CAClB,CACF,CAAC;QACF,IAAI,MAAM,CAAC,EAAE,KAAK,aAAa;YAC7B,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,KAAc,EAAE,aAAsB;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;YACtC,OAAO,CAAC,0CAA0C,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,gBAAgB,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1E,CAAC,CAAC,eAAe,EACjB,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAC9B,IAAI,CACL,CACF,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,aAAqB;QACjC,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAC9D,CAAC,CAAC,QAAQ,CACX,CAAC;IACJ,CAAC;IACD,cAAc,CAAC,SAAiB,EAAE,CAAC,GAAe,EAAE;QAClD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,qBAAqB,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAChF,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,eAAe,CAAC,aAAqB,EAAE,CAAC,GAAe,EAAE;QACvD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAC,aAAa,CAAC,SAAS,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7E,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,IAAY,EAAE,aAAqB,EAAE,CAAC,GAAe,EAAE;QAC/D,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,uBAAuB,IAAI,IAAI,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1G,CAAC,CAAC,aAAa,CAChB,CAAC;IACJ,CAAC;IACO,IAAI,CAAC,IAAU;QACrB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,IAAU,EAAE,CAAC,GAAe,EAAE;QACpC,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAClE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAU,EAAE,WAAmB,EAAE,aAAqB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAC5G,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CACzC,CACF,CAAC;QACF,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW;YACpC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,aAAa,KAAK,aAAa;YACxC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAC7C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,eAAe,CAAC,KAAc,EAAE,MAAgC;QACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACnE,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,IACE,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAC3C,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAEvC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAU,EAAE,KAAc,EAAE,WAAoB;QAC/D,MAAM,IAAI,GACR,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC;YAC/B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACrF,CAAC,CAAC,SAAS,EACX,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAC5B,IAAI,CACL,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,UAAU,CACd,IAAU,EACV,YAAoB,EACpB,aAAqB,EACrB,UAAmB;QAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,wBAAwB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAC/K,CAAC,CAAC,cAAc,CACjB,CACF,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,IACE,MAAM,CAAC,YAAY,KAAK,YAAY;YACpC,MAAM,CAAC,aAAa,KAAK,aAAa;YAEtC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,IACE,CAAC,UAAU,IAAI,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC;gBAC1C,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAC3C,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAEvC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,UAAU;YAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,QAAQ,CACN,IAAU,EACV,YAAoB,EACpB,aAAqB,EACrB,CAAC,GAAe,EAAE,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,wBAAwB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,aAAa,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1M,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,OAAO,CACL,IAAU,EACV,WAAmB,EACnB,UAAkB,EAClB,aAAqB,EACrB,CAAC,GAAe,EAAE;QAElB,OAAO,IAAI,CAAC,cAAc,CACxB,IAAI,EACJ,WAAW,EACX,UAAU,EACV,aAAa,EACb,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CACL,WAAmB,EACnB,UAAkB,EAClB,aAAqB,EACrB,CAAC,GAAe,EAAE;QAElB,OAAO,IAAI,CAAC,cAAc,CACxB,QAAQ,EACR,WAAW,EACX,UAAU,EACV,aAAa,EACb,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,SAAS,CACP,WAAmB,EACnB,UAAkB,EAClB,aAAqB,EACrB,CAAC,GAAe,EAAE;QAElB,OAAO,IAAI,CAAC,cAAc,CACxB,QAAQ,EACR,WAAW,EACX,UAAU,EACV,aAAa,EACb,WAAW,EACX,CAAC,CACF,CAAC;IACJ,CAAC;IACO,cAAc,CACpB,IAAU,EACV,WAAmB,EACnB,UAAkB,EAClB,aAAqB,EACrB,MAAc,EACd,CAAa;QAEb,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACpK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACxC,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,aAAqB,EAAE,CAAC,GAAe,EAAE;QACjD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,+BAA+B,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1G,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,qBAA6B,EAAE,aAAqB;QAC3D,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,+BAA+B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,qBAAqB,CAAC,IAAI,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EACtI,CAAC,CAAC,QAAQ,CACX,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,aAAqB,EAAE,CAAC,GAAe,EAAE;QAChD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,8BAA8B,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACzG,CAAC,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,aAAqB,EAAE,CAAC,GAAe,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,uBAAuB,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACjG,CAAC,CAAC,YAAY,CACf,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,aAAqB,EAAE,KAAc;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,EAC3C,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,uBAAuB,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,EAC/E,CAAC,CAAC,YAAY,EACd,KAAK,EACL,IAAI,CACL,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,aAAqB;QACxD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjC,IACE,CAAC,OAAO;YACR,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;YAErC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,WAAW,KAAK,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAChH,CAAC,CAAC,QAAQ,CACX,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAc;QACvB,OAAO,IAAI,CAAC,MAAM,CAChB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAC/B,CAAC,CAAC,cAAc,EAChB,MAAM,EACN,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAC5B,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,GAAe,EAAE;QACrB,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,qBAAqB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EACvD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,qBAAqB,EAAE,CAAC,KAAK,CAAC,EAAE,EAC5C,CAAC,CAAC,cAAc,CACjB,CACF,CAAC;QACF,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,SAAS,CACb,KAAa,EACb,MAQe,EACf,KAAc;QAEd,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,CAAC,CAAC,YAAY;YACxB,MAAM,EAAE,CAAC,CAAC,YAAY;YACtB,OAAO,EAAE,CAAC,CAAC,gBAAgB;YAC3B,MAAM,EAAE,CAAC,CAAC,gBAAgB;YAC1B,KAAK,EAAE,CAAC,CAAC,gBAAgB;YACzB,OAAO,EAAE,CAAC,CAAC,YAAY;YACvB,SAAS,EAAE,CAAC,CAAC,cAAc;YAC3B,SAAS,EAAE,CAAC,CAAC,cAAc;SAC5B,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAuB,EAAE,KAAK,CAAC,EAChE,KAAK,GACH,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,CAC9C,MAA6B,CAC9B,IAAI,MAAM,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,IAAI,qBAAqB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,EACrD,CAAC,CAAC,cAAc,EAChB,MAAM,EACN,IAAI,CACL,CACF,CAAC;QACF,MAAM,UAAU,GACd,MAAM,KAAK,WAAW;YACpB,CAAC,CAAE,IAA8B,CAAC,SAAS;YAC3C,CAAC,CAAC,KAAK,CAAC;QACZ,IAAI,MAAM,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,cAAc,CAAC,KAAsB;QAC3C,OAAO,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC;IACzJ,CAAC;IACO,eAAe,CAErB,MAAS,EAAE,KAAsB;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,IACE,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;YACtC,CAAC,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;YACvC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YACnC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAEjC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACjD,IACE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC;YACrD,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,QAAQ,CAAC;YAErD,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,KAAsB;QAC3C,OAAO,IAAI,CAAC,eAAe,CACzB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAC/D,KAAK,CACN,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,KAAsB,EAAE,SAAiB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CACjC,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,EAC3D,CAAC,CAAC,mBAAmB,CACtB,EACD,KAAK,CACN,CAAC;QACF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,gBAAgB,CACpB,KAAsB,EACtB,SAAiB,EACjB,MAA+B,EAC/B,KAAc;QAEd,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAClB,CAAC,MAAM,KAAK,SAAS;YACnB,CAAC,CAAC,CAAC,CAAC,YAAY;YAChB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAuB,EAC3C,KAAK,CACN,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CACjC,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,EACrE,CAAC,CAAC,mBAAmB,EACrB,MAAM,EACN,IAAI,CACL,EACD,KAAK,CACN,CAAC;QACF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,iBAAiB,CACrB,KAAsB,EACtB,MAA6B,EAC7B,KAAc,EACd,UAAkB;QAElB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAClB,CAAC,MAAM,KAAK,QAAQ;YAClB,CAAC,CAAC,CAAC,CAAC,WAAW;YACf,CAAC,CAAC,CAAC,CAAC,aAAa,CAA2B,EAC9C,KAAK,CACN,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,IACE,CAAC,UAAU;YACX,UAAU,KAAK,GAAG;YAClB,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;YAC9B,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;YAE/B,OAAO,CACL,2EAA2E,CAC5E,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,kBAAkB,CAC1B,mDAAmD,EACnD,6BAA6B,EAC7B,SAAS,EACT,IAAI,CAAC,SAAS,CACf,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,GAAG,IAAI,IAAI,MAAM,EAAE,EACnB,MAAM,EACN,IAAI,EACJ,IAAI,CACL,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrE,IACE,QAAQ,CAAC,OAAO;iBACb,GAAG,CAAC,cAAc,CAAC;gBACpB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACf,EAAE,IAAI,EAAE;iBACP,WAAW,EAAE,KAAK,0BAA0B;gBAC/C,CAAC,qBAAqB,CAAC,IAAI,CACzB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAClD;gBACD,CAAC,QAAQ,CAAC,IAAI;gBAEd,MAAM,IAAI,kBAAkB,CAC1B,2CAA2C,EAC3C,gCAAgC,EAChC,QAAQ,CAAC,MAAM,EACf,IAAI,CAAC,SAAS,CACf,CAAC;YACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,SAAS,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI;wBAAE,MAAM;oBAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;oBACzB,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;oBAChD,IAAI,MAAM,GAAG,CAAC,CAAC;oBACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,KAAK,EACL,MAAM,EACN,KAAK,CAAC,MAAM,GAAG,MAAM,CACtB,CAAC;wBACF,IAAI,CAAC,MAAM,CAAC,YAAY;4BAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;wBACnD,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC;oBAChC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB;gBAAE,MAAM,KAAK,CAAC;YACrD,MAAM,IAAI,kBAAkB,CAC1B,iFAAiF,EACjF,yBAAyB,EACzB,SAAS,EACT,IAAI,CAAC,SAAS,CACf,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG;oBAC9D,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/authorization/application-commands.d.ts

@@ -0,0 +1,15 @@
+import { Command } from "commander";
+import { ApplicationClient } from "./application-client.js";
+export interface ApplicationCommandDependencies {
+    applicationClientFactory?: (app: number) => ApplicationClient;
+}
+export declare function registerApplicationCommands(authorization: Command, dependencies?: ApplicationCommandDependencies): Command;
+/** One registration drives actual help and catalog so flags cannot drift. No action runs here. */
+export declare function applicationCommandCatalog(): {
+    command: string;
+    summary: string;
+    access: "role";
+    roles: string[];
+    operationalNotes: string[];
+    examples: string[];
+}[];