@oneuptime/common 11.7.4 → 12.0.1

package/build/dist/Models/DatabaseModels/RumSessionErasureRequest.js

@@ -0,0 +1,591 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import Project from "./Project";
+import RumApplication from "./RumApplication";
+import User from "./User";
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import Route from "../../Types/API/Route";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import TenantColumn from "../../Types/Database/TenantColumn";
+import IconProp from "../../Types/Icon/IconProp";
+import ObjectID from "../../Types/ObjectID";
+import Permission from "../../Types/Permission";
+import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
+/*
+ * A standing instruction to delete session replay data, and the record
+ * that it was carried out.
+ *
+ * This is the first erasure primitive in the codebase, so it is worth
+ * being explicit about why the request is a durable row rather than a
+ * fire-and-forget call: an erasure has to survive a worker restart, a
+ * ClickHouse outage and the deletion of the thing it points at, and
+ * somebody has to be able to prove afterwards that it happened.
+ */
+/* What the request identifies. targetValue is interpreted per type. */
+export var RumSessionErasureRequestType;
+(function (RumSessionErasureRequestType) {
+    /* targetValue is a single sessionId. */
+    RumSessionErasureRequestType["BySessionId"] = "BySessionId";
+    /*
+     * targetValue is the HMAC of an end-user reference (the same one-way
+     * derivation stored on the session header). Erasing by the raw user
+     * reference is impossible by design - the raw value is not stored
+     * unless identity capture was explicitly enabled.
+     */
+    RumSessionErasureRequestType["ByIdentifiedUserKey"] = "ByIdentifiedUserKey";
+    /* startDate / endDate bound the erasure; targetValue is unused. */
+    RumSessionErasureRequestType["ByDateRange"] = "ByDateRange";
+    /* targetValue is a RUM application id. */
+    RumSessionErasureRequestType["ByRumApplication"] = "ByRumApplication";
+})(RumSessionErasureRequestType || (RumSessionErasureRequestType = {}));
+export var RumSessionErasureRequestStatus;
+(function (RumSessionErasureRequestStatus) {
+    RumSessionErasureRequestStatus["Pending"] = "Pending";
+    RumSessionErasureRequestStatus["InProgress"] = "InProgress";
+    RumSessionErasureRequestStatus["Completed"] = "Completed";
+    RumSessionErasureRequestStatus["Failed"] = "Failed";
+})(RumSessionErasureRequestStatus || (RumSessionErasureRequestStatus = {}));
+const READ_PERMISSIONS = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ReadRumSessionErasureRequest,
+];
+const CREATE_PERMISSIONS = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.CreateRumSessionErasureRequest,
+];
+let RumSessionErasureRequest = class RumSessionErasureRequest extends BaseModel {
+    constructor() {
+        super(...arguments);
+        this.project = undefined;
+        this.projectId = undefined;
+        /*
+         * NULLABLE with ON DELETE SET NULL, deliberately NOT the CASCADE every
+         * other rumApplicationId relation in this codebase uses.
+         *
+         * With CASCADE, deleting the RUM application would delete the erasure
+         * request that exists precisely to clean up after that application -
+         * the recordings live in ClickHouse and are not touched by a Postgres
+         * cascade, so the data would survive while the instruction to delete it
+         * vanished. That is the exact failure this table exists to prevent.
+         *
+         * The application id is therefore ALSO written into targetValue for a
+         * ByRumApplication request, so the worker can still find the rows after
+         * the relation has been nulled out.
+         */
+        this.rumApplication = undefined;
+        this.rumApplicationId = undefined;
+        this.requestType = undefined;
+        /*
+         * LongText rather than ShortText because it also carries the RUM
+         * application id for a ByRumApplication request, which is how the
+         * request survives the deletion of its parent.
+         */
+        this.targetValue = undefined;
+        this.startDate = undefined;
+        this.endDate = undefined;
+        this.status = undefined;
+        this.requestedByUser = undefined;
+        this.requestedByUserId = undefined;
+        this.requestedAt = undefined;
+        this.completedAt = undefined;
+        this.sessionsDeleted = undefined;
+        this.attempts = undefined;
+        this.chunksDeleted = undefined;
+        this.failureReason = undefined;
+        /*
+         * create: [] rather than CREATE_PERMISSIONS. DatabaseService stamps this
+         * from props.userId AFTER the permission check, and only when there IS a
+         * userId - so an API-key caller with a create grant could otherwise post
+         * an arbitrary createdByUserId and pin an erasure request on a
+         * colleague. On an audited compliance primitive that is not acceptable.
+         */
+        this.createdByUserId = undefined;
+        this.deletedByUser = undefined;
+        this.deletedByUserId = undefined;
+    }
+};
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "projectId",
+        type: TableColumnType.Entity,
+        modelType: Project,
+        title: "Project",
+        description: "Relation to Project this erasure request belongs to.",
+    }),
+    ManyToOne(() => {
+        return Project;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "CASCADE",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "projectId" }),
+    __metadata("design:type", Project)
+], RumSessionErasureRequest.prototype, "project", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: true,
+        canReadOnRelationQuery: true,
+        title: "Project ID",
+        description: "ID of the Project this erasure request belongs to.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: false,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], RumSessionErasureRequest.prototype, "projectId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "rumApplicationId",
+        type: TableColumnType.Entity,
+        modelType: RumApplication,
+        title: "RUM Application",
+        description: "Application this erasure request is scoped to, if any. Nulled out rather than cascaded if the application is deleted, so the request outlives its target.",
+    }),
+    ManyToOne(() => {
+        return RumApplication;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "rumApplicationId" }),
+    __metadata("design:type", RumApplication)
+], RumSessionErasureRequest.prototype, "rumApplication", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: false,
+        canReadOnRelationQuery: true,
+        title: "RUM Application ID",
+        description: "ID of the application this erasure request is scoped to. Null for a project-wide request, and nulled if the application is later deleted.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], RumSessionErasureRequest.prototype, "rumApplicationId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.ShortText,
+        canReadOnRelationQuery: true,
+        title: "Request Type",
+        description: "What the request identifies: BySessionId, ByIdentifiedUserKey, ByDateRange or ByRumApplication.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+    }),
+    __metadata("design:type", String)
+], RumSessionErasureRequest.prototype, "requestType", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.LongText,
+        title: "Target Value",
+        description: "The value the request type is matched against: a session id, an end-user key, or an application id. Unused for a date-range request.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.LongText,
+        length: ColumnLength.LongText,
+    }),
+    __metadata("design:type", String)
+], RumSessionErasureRequest.prototype, "targetValue", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.Date,
+        title: "Start Date",
+        description: "Inclusive lower bound on session start time for a date-range request.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.Date,
+    }),
+    __metadata("design:type", Date)
+], RumSessionErasureRequest.prototype, "startDate", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.Date,
+        title: "End Date",
+        description: "Inclusive upper bound on session start time for a date-range request.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.Date,
+    }),
+    __metadata("design:type", Date)
+], RumSessionErasureRequest.prototype, "endDate", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    })
+    /*
+     * computed, not just create: []. The service stamps this in
+     * onBeforeCreate, which runs BEFORE the create-column permission check,
+     * so without the computed flag ModelPermission sees a status the caller
+     * has no create grant on and rejects the whole request. computed is the
+     * flag ColumnPermission skips for exactly this "server writes it, the
+     * client never can" case.
+     */
+    ,
+    TableColumn({
+        isDefaultValueColumn: true,
+        required: true,
+        computed: true,
+        type: TableColumnType.ShortText,
+        canReadOnRelationQuery: true,
+        title: "Status",
+        description: "Pending, InProgress, Completed or Failed. Written by the erasure worker; a request is always created Pending regardless of what the client sends.",
+        defaultValue: RumSessionErasureRequestStatus.Pending,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+        default: RumSessionErasureRequestStatus.Pending,
+    }),
+    __metadata("design:type", String)
+], RumSessionErasureRequest.prototype, "status", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "requestedByUserId",
+        type: TableColumnType.Entity,
+        modelType: User,
+        title: "Requested by User",
+        description: "Relation to the user who raised this erasure request.",
+    }),
+    ManyToOne(() => {
+        return User;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "requestedByUserId" }),
+    __metadata("design:type", User)
+], RumSessionErasureRequest.prototype, "requestedByUser", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    })
+    /* Stamped from the authenticated caller in onBeforeCreate, never sent. */
+    ,
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: false,
+        computed: true,
+        canReadOnRelationQuery: true,
+        title: "Requested by User ID",
+        description: "ID of the user who raised this erasure request.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], RumSessionErasureRequest.prototype, "requestedByUserId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    })
+    /*
+     * Server clock, stamped in onBeforeCreate. computed for the same reason
+     * as status: it is written before the permission check runs, and it is
+     * also the worker's queue ordering, so a client-supplied value could
+     * jump the queue.
+     */
+    ,
+    TableColumn({
+        required: true,
+        computed: true,
+        type: TableColumnType.Date,
+        canReadOnRelationQuery: true,
+        title: "Requested At",
+        description: "When the request was raised. Also the worker's queue ordering, so the oldest outstanding erasure runs first.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Date,
+    }),
+    __metadata("design:type", Date)
+], RumSessionErasureRequest.prototype, "requestedAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.Date,
+        canReadOnRelationQuery: true,
+        title: "Completed At",
+        description: "When the erasure finished. Null while the request is outstanding.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.Date,
+    }),
+    __metadata("design:type", Date)
+], RumSessionErasureRequest.prototype, "completedAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        isDefaultValueColumn: true,
+        required: true,
+        computed: true,
+        type: TableColumnType.Number,
+        title: "Sessions Deleted",
+        description: "How many session headers the erasure removed.",
+        defaultValue: 0,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Number,
+        unique: false,
+        default: 0,
+    }),
+    __metadata("design:type", Number)
+], RumSessionErasureRequest.prototype, "sessionsDeleted", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        isDefaultValueColumn: true,
+        required: true,
+        computed: true,
+        type: TableColumnType.Number,
+        title: "Attempts",
+        description: "How many processing runs have failed for this request. An erasure is retried until this reaches the retry cap; only then is it marked Failed and the project owners are notified — a right-to-erasure obligation must not die silently on one transient error.",
+        defaultValue: 0,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Number,
+        unique: false,
+        default: 0,
+    }),
+    __metadata("design:type", Number)
+], RumSessionErasureRequest.prototype, "attempts", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        isDefaultValueColumn: true,
+        required: true,
+        computed: true,
+        type: TableColumnType.Number,
+        title: "Chunks Deleted",
+        description: "How many recording chunks the erasure removed. Reported separately from sessions because a mismatch is how a partial erasure is spotted.",
+        defaultValue: 0,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Number,
+        unique: false,
+        default: 0,
+    }),
+    __metadata("design:type", Number)
+], RumSessionErasureRequest.prototype, "chunksDeleted", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.LongText,
+        title: "Failure Reason",
+        description: "Why the erasure failed, if it did. Surfaced to the requester rather than only logged - an erasure that silently failed is worse than one that visibly did.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.LongText,
+        length: ColumnLength.LongText,
+    }),
+    __metadata("design:type", String)
+], RumSessionErasureRequest.prototype, "failureReason", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: READ_PERMISSIONS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Created By User ID",
+        description: "ID of the user who created this row.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], RumSessionErasureRequest.prototype, "createdByUserId", void 0);
+__decorate([
+    ColumnAccessControl({ create: [], read: READ_PERMISSIONS, update: [] }),
+    TableColumn({
+        manyToOneRelationColumn: "deletedByUserId",
+        type: TableColumnType.Entity,
+        modelType: User,
+        title: "Deleted By User",
+        description: "Relation to the user who deleted this row.",
+    }),
+    ManyToOne(() => {
+        return User;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "deletedByUserId" }),
+    __metadata("design:type", User)
+], RumSessionErasureRequest.prototype, "deletedByUser", void 0);
+__decorate([
+    ColumnAccessControl({ create: [], read: READ_PERMISSIONS, update: [] }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Deleted By User ID",
+        description: "ID of the user who deleted this row.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], RumSessionErasureRequest.prototype, "deletedByUserId", void 0);
+RumSessionErasureRequest = __decorate([
+    TenantColumn("projectId"),
+    TableAccessControl({
+        create: CREATE_PERMISSIONS,
+        read: READ_PERMISSIONS,
+        /*
+         * No update and no delete ACL. Progress columns are written by the
+         * erasure worker as root; a requester who could edit status, counts or
+         * failureReason could make an erasure that never ran look like one that
+         * did, and a requester who could delete the row would erase the proof.
+         */
+        update: [],
+        delete: [],
+    }),
+    CrudApiEndpoint(new Route("/rum-session-erasure-request")),
+    TableMetadata({
+        tableName: "RumSessionErasureRequest",
+        singularName: "Session Replay Erasure Request",
+        pluralName: "Session Replay Erasure Requests",
+        icon: IconProp.Trash,
+        tableDescription: "Requests to permanently delete session replay recordings, by session, by end-user key, by date range or by application. Processed asynchronously; the row records what was deleted.",
+    })
+    /*
+     * The worker's queue query: pending requests across ALL projects, oldest
+     * first. It does not filter on projectId, so a projectId-leading index
+     * cannot serve it - the leading column has to be status.
+     */
+    ,
+    Index(["status", "requestedAt"])
+    /* The per-project listing in the UI. */
+    ,
+    Index(["projectId", "status", "requestedAt"]),
+    Entity({
+        name: "RumSessionErasureRequest",
+    })
+], RumSessionErasureRequest);
+export default RumSessionErasureRequest;
+//# sourceMappingURL=RumSessionErasureRequest.js.map

package/build/dist/Models/DatabaseModels/RumSessionErasureRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RumSessionErasureRequest.js","sourceRoot":"","sources":["../../../../Models/DatabaseModels/RumSessionErasureRequest.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1B,OAAO,SAAS,MAAM,uCAAuC,CAAC;AAC9D,OAAO,KAAK,MAAM,uBAAuB,CAAC;AAC1C,OAAO,mBAAmB,MAAM,wDAAwD,CAAC;AACzF,OAAO,kBAAkB,MAAM,uDAAuD,CAAC;AACvF,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,UAAU,MAAM,iCAAiC,CAAC;AACzD,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,aAAa,MAAM,oCAAoC,CAAC;AAC/D,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AACjD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,UAAU,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvE;;;;;;;;;GASG;AAEH,uEAAuE;AACvE,MAAM,CAAN,IAAY,4BAiBX;AAjBD,WAAY,4BAA4B;IACtC,wCAAwC;IACxC,2DAA2B,CAAA;IAE3B;;;;;OAKG;IACH,2EAA2C,CAAA;IAE3C,mEAAmE;IACnE,2DAA2B,CAAA;IAE3B,0CAA0C;IAC1C,qEAAqC,CAAA;AACvC,CAAC,EAjBW,4BAA4B,KAA5B,4BAA4B,QAiBvC;AAED,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,qDAAmB,CAAA;IACnB,2DAAyB,CAAA;IACzB,yDAAuB,CAAA;IACvB,mDAAiB,CAAA;AACnB,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC;AAED,MAAM,gBAAgB,GAAsB;IAC1C,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,4BAA4B;CACxC,CAAC;AAEF,MAAM,kBAAkB,GAAsB;IAC5C,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,8BAA8B;CAC1C,CAAC;AAmCa,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,SAAS;IAAhD;;QAyBN,YAAO,GAAa,SAAS,CAAC;QAoB9B,cAAS,GAAc,SAAS,CAAC;QAExC;;;;;;;;;;;;;WAaG;QA0BI,mBAAc,GAAoB,SAAS,CAAC;QAqB5C,qBAAgB,GAAc,SAAS,CAAC;QAoBxC,gBAAW,GAAkC,SAAS,CAAC;QAE9D;;;;WAIG;QAkBI,gBAAW,GAAY,SAAS,CAAC;QAkBjC,cAAS,GAAU,SAAS,CAAC;QAkB7B,YAAO,GAAU,SAAS,CAAC;QAgC3B,WAAM,GAAoC,SAAS,CAAC;QA0BpD,oBAAe,GAAU,SAAS,CAAC;QAqBnC,sBAAiB,GAAc,SAAS,CAAC;QA0BzC,gBAAW,GAAU,SAAS,CAAC;QAmB/B,gBAAW,GAAU,SAAS,CAAC;QAsB/B,oBAAe,GAAY,SAAS,CAAC;QAuBrC,aAAQ,GAAY,SAAS,CAAC;QAuB9B,kBAAa,GAAY,SAAS,CAAC;QAmBnC,kBAAa,GAAY,SAAS,CAAC;QAE1C;;;;;;WAMG;QAgBI,oBAAe,GAAc,SAAS,CAAC;QAsBvC,kBAAa,GAAU,SAAS,CAAC;QAajC,oBAAe,GAAc,SAAS,CAAC;IAChD,CAAC;CAAA,CAAA;AAjbQ;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,WAAW;QACpC,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,sDAAsD;KACpE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BACjB,OAAO;yDAAa;AAoB9B;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACiB,QAAQ;2DAAa;AAyCjC;IAzBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,kBAAkB;QAC3C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,2JAA2J;KAC9J,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,cAAc,CAAC;IACxB,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;8BACjB,cAAc;gEAAa;AAqB5C;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK;QACf,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,2IAA2I;KAC9I,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACwB,QAAQ;kEAAa;AAoBxC;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,iGAAiG;KACpG,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;KAC/B,CAAC;;6DAC4D;AAwBvD;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,sIAAsI;KACzI,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC;;6DACsC;AAkBjC;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,uEAAuE;KAC1E,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC;8BACiB,IAAI;2DAAa;AAkB7B;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,uEAAuE;KAC1E,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC;8BACe,IAAI;yDAAa;AAgC3B;IA9BN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACF;;;;;;;OAOG;;IACF,WAAW,CAAC;QACX,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,QAAQ;QACf,WAAW,EACT,mJAAmJ;QACrJ,YAAY,EAAE,8BAA8B,CAAC,OAAO;KACrD,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;QAC9B,OAAO,EAAE,8BAA8B,CAAC,OAAO;KAChD,CAAC;;wDACyD;AA0BpD;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,mBAAmB;QAC5C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,uDAAuD;KACrE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,IAAI,CAAC;IACd,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;8BACjB,IAAI;iEAAa;AAqBnC;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,0EAA0E;;IACzE,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACyB,QAAQ;mEAAa;AA0BzC;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACF;;;;;OAKG;;IACF,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,8GAA8G;KACjH,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC;8BACmB,IAAI;6DAAa;AAmB/B;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,mEAAmE;KACtE,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC;8BACmB,IAAI;6DAAa;AAsB/B;IApBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,+CAA+C;QAC5D,YAAY,EAAE,CAAC;KAChB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,MAAM;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,CAAC;KACX,CAAC;;iEAC0C;AAuBrC;IArBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,gQAAgQ;QAClQ,YAAY,EAAE,CAAC;KAChB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,MAAM;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,CAAC;KACX,CAAC;;0DACmC;AAuB9B;IArBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,0IAA0I;QAC5I,YAAY,EAAE,CAAC;KAChB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,MAAM;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,CAAC;KACX,CAAC;;+DACwC;AAmBnC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,4JAA4J;KAC/J,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC;;+DACwC;AAwBnC;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;iEAAa;AAsBvC;IApBN,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvE,WAAW,CAAC;QACX,uBAAuB,EAAE,iBAAiB;QAC1C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,4CAA4C;KAC1D,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,IAAI,CAAC;IACd,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BACjB,IAAI;+DAAa;AAajC;IAXN,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvE,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;iEAAa;AAzc3B,wBAAwB;IAjC5C,YAAY,CAAC,WAAW,CAAC;IACzB,kBAAkB,CAAC;QAClB,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,gBAAgB;QACtB;;;;;WAKG;QACH,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC;IACD,eAAe,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1D,aAAa,CAAC;QACb,SAAS,EAAE,0BAA0B;QACrC,YAAY,EAAE,gCAAgC;QAC9C,UAAU,EAAE,iCAAiC;QAC7C,IAAI,EAAE,QAAQ,CAAC,KAAK;QACpB,gBAAgB,EACd,qLAAqL;KACxL,CAAC;IACF;;;;OAIG;;IACF,KAAK,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjC,wCAAwC;;IACvC,KAAK,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,CAAC;QACN,IAAI,EAAE,0BAA0B;KACjC,CAAC;GACmB,wBAAwB,CA0c5C;eA1coB,wBAAwB"}