@oneuptime/common 13.0.8 → 14.0.0

package/build/dist/Server/Types/Database/Permissions/EditionPermission.js

@@ -7,39 +7,179 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { IsBillingEnabled, IsEnterpriseEdition, } from "../../../../Server/EnvironmentConfig";
-import PaymentRequiredException from "../../../../Types/Exception/PaymentRequiredException";
+import { IsBillingEnabled } from "../../../../Server/EnvironmentConfig";
+import EnterpriseEdition from "../../../Enterprise/EnterpriseEdition";
+import { ALL_ENTERPRISE_FEATURES, } from "../../../Enterprise/EnterpriseFeature";
+import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
 import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
+/*
+ * Switching an identity provider off (isEnabled: false). Switching one on is
+ * configuration and needs the license; only the literal false counts, so a
+ * value the database might coerce ("false", 0) is judged by the full check.
+ */
+const isSwitchingOff = (value) => {
+    return value === false;
+};
+/*
+ * The shortest SCIM bearer token a rotation may set without the license. The
+ * Dashboard's "Reset token" generates a UUID (36 characters) and services
+ * default to one, so this only turns away a token short enough to be weaker
+ * than the one it replaces.
+ */
+export const MIN_ROTATED_SCIM_BEARER_TOKEN_LENGTH = 32;
+// Replacing a (possibly leaked) SCIM bearer token with a new, long one.
+const isRotatedBearerToken = (value) => {
+    return (typeof value === "string" &&
+        value.trim().length >= MIN_ROTATED_SCIM_BEARER_TOKEN_LENGTH);
+};
+/*
+ * The updates an administrator may make to enterprise configuration while
+ * the feature is unavailable, because they can only tighten security: the
+ * incident-response moves. Keyed by table name, like the facade's feature
+ * map; a model that is not listed has none.
+ *
+ *   isEnabled: false   disable an SSO/OIDC provider (project, status page or
+ *                      global), or a global provider's attachment to a
+ *                      project.
+ *   bearerToken        rotate a leaked SCIM bearer token.
+ *
+ * TeamComplianceSetting has no entry: switching a compliance rule off
+ * relaxes it.
+ */
+const TIGHTEN_ONLY_UPDATES = new Map([
+    ["GlobalSSO", { isEnabled: isSwitchingOff }],
+    ["GlobalOIDC", { isEnabled: isSwitchingOff }],
+    ["GlobalSSOProject", { isEnabled: isSwitchingOff }],
+    ["GlobalOIDCProject", { isEnabled: isSwitchingOff }],
+    ["ProjectSSO", { isEnabled: isSwitchingOff }],
+    ["ProjectOIDC", { isEnabled: isSwitchingOff }],
+    ["StatusPageSSO", { isEnabled: isSwitchingOff }],
+    ["StatusPageOIDC", { isEnabled: isSwitchingOff }],
+    ["ProjectSCIM", { bearerToken: isRotatedBearerToken }],
+    ["StatusPageSCIM", { bearerToken: isRotatedBearerToken }],
+]);
 export default class EditionPermissions {
     /*
-     * Gates models marked with @TableEditionAccessControl({ requiresEnterprise: true }).
+     * Gates the enterprise CONFIGURATION models, the ones marked with
+     * @TableEditionAccessControl({ requiresEnterprise: true }): project, global
+     * and status page SSO/OIDC providers, SCIM configurations and team
+     * compliance settings.
+     *
+     * Only creating and updating them needs the license. Reading and deleting
+     * are always allowed, so an install that dropped to the Community Edition,
+     * or whose license lapsed, can still see what it has configured and remove
+     * it. Only configuration is gated here, and none of it is ever deleted.
+     * Whether what exists RUNS is decided at runtime by
+     * EnterpriseEdition.isFeatureActive: SSO, SCIM and audit logging stop while
+     * a self-hosted license is lapsed and resume when a license is activated.
+     *
+     * The one kind of update that needs no license either is a TIGHTEN-ONLY
+     * update (see TIGHTEN_ONLY_UPDATES): every column it writes is on the
+     * model's list with a value that can only tighten security - disabling an
+     * identity provider, rotating a leaked SCIM bearer token. A lapsed license
+     * must never stand between an administrator and those moves during an
+     * incident. The same holds on the Community Edition, deliberately and for
+     * the same reason reads and deletes do: the move can only reduce what the
+     * configuration allows, and a provider disabled (or a token rotated) there
+     * stays so when the install returns to the Enterprise Edition, instead of
+     * coming back live. Anything else in the same update - even one more
+     * column - makes it an ordinary update, which needs the license.
+     *
+     * `updateData` is what the update writes. Only UpdatePermission, which has
+     * it, passes it; without it an update is judged by the full check (fail
+     * closed). TablePermission leaves updates to UpdatePermission for that
+     * reason.
+     *
+     * Master admins are subject to this check - Create/UpdatePermission call it
+     * before their master-admin early return - because the global SSO/OIDC
+     * models are only ever written by master admins and would otherwise never
+     * be gated. Internal root writes (props.isRoot) are never checked.
      *
-     * On self-hosted builds (billing disabled) the model is only accessible when
-     * the binary was built as the Enterprise Edition (IS_ENTERPRISE_EDITION=true).
+     * On the cloud / billing-enabled deployment enforcement is left to
+     * BillingPermission: it already gates these models by the plan tier in
+     * their @TableBillingAccessControl, so a second check would be redundant.
      *
-     * On the cloud / billing-enabled deployment we leave enforcement to
-     * BillingPermission — it already gates these models via the model's
-     * @TableBillingAccessControl plan tier, so a second check would be redundant.
+     * Deliberately synchronous. TablePermission and CreatePermission are
+     * synchronous and their callers do not await them, so an async check with a
+     * missed await would turn the refusal into an unhandled rejection and let
+     * the write through. The license is read from the enterprise module's
+     * cached snapshot, and an unknown snapshot refuses the write (fail closed).
      */
-    static checkEditionPermissions(modelType, _props) {
+    static checkEditionPermissions(modelType, props, operation, updateData) {
         if (IsBillingEnabled) {
             return;
         }
+        if (props.isRoot) {
+            return;
+        }
+        if (operation !== DatabaseRequestType.Create &&
+            operation !== DatabaseRequestType.Update) {
+            return;
+        }
         const model = new modelType();
         if (!model.requiresEnterprise) {
             return;
         }
-        if (!IsEnterpriseEdition) {
-            throw new PaymentRequiredException(`${model.singularName || "This feature"} is only available on the OneUptime Enterprise Edition. ` +
-                `Please switch to the Enterprise Edition build to enable this feature. ` +
-                `See https://oneuptime.com/enterprise/overview for details.`);
+        if (operation === DatabaseRequestType.Update &&
+            EditionPermissions.isTightenOnlyUpdate(model.tableName, updateData)) {
+            return;
+        }
+        const feature = EnterpriseEdition.getModelFeature(modelType);
+        if (feature) {
+            EnterpriseEdition.assertFeatureAvailableSync(feature);
+            return;
+        }
+        /*
+         * An enterprise model the facade has no feature for (its guard test
+         * should make this impossible). Fail closed: only a license entitled to
+         * every enterprise feature may configure it.
+         */
+        for (const enterpriseFeature of ALL_ENTERPRISE_FEATURES) {
+            EnterpriseEdition.assertFeatureAvailableSync(enterpriseFeature);
+        }
+    }
+    /*
+     * True when the update writes at least one column, and every column it
+     * writes is on the table's tighten-only list with a value that passes the
+     * column's rule. Columns set to undefined are not written and are ignored.
+     * Anything that is not a plain object of columns is not tighten-only.
+     */
+    static isTightenOnlyUpdate(tableName, updateData) {
+        const rules = tableName ? TIGHTEN_ONLY_UPDATES.get(tableName) : undefined;
+        if (!rules) {
+            return false;
+        }
+        if (!updateData ||
+            typeof updateData !== "object" ||
+            Array.isArray(updateData)) {
+            return false;
+        }
+        const writtenColumns = Object.entries(updateData).filter(([, value]) => {
+            return value !== undefined;
+        });
+        if (writtenColumns.length === 0) {
+            return false;
+        }
+        return writtenColumns.every(([column, value]) => {
+            const rule = Object.prototype.hasOwnProperty.call(rules, column)
+                ? rules[column]
+                : undefined;
+            return Boolean(rule && rule(value));
+        });
+    }
+    // The tables with tighten-only updates, and their columns (for guard tests).
+    static getTightenOnlyColumns() {
+        const columns = new Map();
+        for (const [tableName, rules] of TIGHTEN_ONLY_UPDATES) {
+            columns.set(tableName, Object.keys(rules));
         }
+        return columns;
     }
 }
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:paramtypes", [Object, Object, String, Object]),
     __metadata("design:returntype", void 0)
 ], EditionPermissions, "checkEditionPermissions", null);
 //# sourceMappingURL=EditionPermission.js.map

package/build/dist/Server/Types/Database/Permissions/EditionPermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"EditionPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/EditionPermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sCAAsC,CAAC;AAK9C,OAAO,wBAAwB,MAAM,sDAAsD,CAAC;AAC5F,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACrC;;;;;;;;;OASG;IAEW,AAAP,MAAM,CAAC,uBAAuB,CACnC,SAAgC,EAChC,MAAsC;QAEtC,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAChC,GAAG,KAAK,CAAC,YAAY,IAAI,cAAc,0DAA0D;gBAC/F,wEAAwE;gBACxE,4DAA4D,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAtBe;IADb,WAAW,EAAE;;;;uDAsBb"}
+{"version":3,"file":"EditionPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/EditionPermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,iBAAiB,MAAM,uCAAuC,CAAC;AACtE,OAA0B,EACxB,uBAAuB,GACxB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAKzE,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAK/D;;;;GAIG;AACH,MAAM,cAAc,GAA0B,CAAC,KAAc,EAAW,EAAE;IACxE,OAAO,KAAK,KAAK,KAAK,CAAC;AACzB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAW,EAAE,CAAC;AAE/D,wEAAwE;AACxE,MAAM,oBAAoB,GAA0B,CAClD,KAAc,EACL,EAAE;IACX,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,oCAAoC,CAC5D,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,oBAAoB,GAGtB,IAAI,GAAG,CAA0D;IACnE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5C,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7C,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACnD,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC7C,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAChD,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACjD,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACtD,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IAEW,AAAP,MAAM,CAAC,uBAAuB,CACnC,SAAgC,EAChC,KAAqC,EACrC,SAA8B,EAC9B,UAAoB;QAEpB,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IACE,SAAS,KAAK,mBAAmB,CAAC,MAAM;YACxC,SAAS,KAAK,mBAAmB,CAAC,MAAM,EACxC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IACE,SAAS,KAAK,mBAAmB,CAAC,MAAM;YACxC,kBAAkB,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,EACnE,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GACX,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,OAAO,EAAE,CAAC;YACZ,iBAAiB,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED;;;;WAIG;QACH,KAAK,MAAM,iBAAiB,IAAI,uBAAuB,EAAE,CAAC;YACxD,iBAAiB,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,mBAAmB,CAC/B,SAAoC,EACpC,UAAmB;QAEnB,MAAM,KAAK,GACT,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,CAAC,UAAU;YACX,OAAO,UAAU,KAAK,QAAQ;YAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EACzB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAA6B,MAAM,CAAC,OAAO,CAC7D,UAAqC,CACtC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAoB,EAAW,EAAE;YACjD,OAAO,KAAK,KAAK,SAAS,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,cAAc,CAAC,KAAK,CACzB,CAAC,CAAC,MAAM,EAAE,KAAK,CAAoB,EAAW,EAAE;YAC9C,MAAM,IAAI,GACR,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACjD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;gBACf,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC,CACF,CAAC;IACJ,CAAC;IAED,6EAA6E;IACtE,MAAM,CAAC,qBAAqB;QAIjC,MAAM,OAAO,GAAuC,IAAI,GAAG,EAGxD,CAAC;QAEJ,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,oBAAoB,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAnHe;IADb,WAAW,EAAE;;;;uDAmDb"}

package/build/dist/Server/Types/Database/Permissions/TablePermission.js

@@ -39,10 +39,17 @@ export default class TablePermission {
         // 2nd CHECK: Is user project in active state?
         BillingPermissions.checkBillingPermissions(modelType, props, type);
         /*
-         * 3rd CHECK: Is this an enterprise-only feature being accessed on the
-         * community self-hosted build?
+         * 3rd CHECK: Is this a create of enterprise configuration that the
+         * edition or the license does not allow? (Reads and deletes always pass.)
+         * Updates are checked by UpdatePermission.checkUpdatePermissions instead,
+         * which every update runs and which sees what the update writes: an
+         * update that only tightens security (disabling an identity provider,
+         * rotating a SCIM token) needs no license, and this check, which is not
+         * handed the data, could only refuse it.
          */
-        EditionPermissions.checkEditionPermissions(modelType, props);
+        if (type !== DatabaseRequestType.Update) {
+            EditionPermissions.checkEditionPermissions(modelType, props, type);
+        }
         // 4th CHECK: Does user have access to CRUD data on this model.
         const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Allow);
         const modelPermissions = TablePermission.getTablePermission(modelType, type);

package/build/dist/Server/Types/Database/Permissions/TablePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"TablePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TablePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAKlD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,UAAU,EAAE,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,kBAAkB,CAC9B,SAAgC,EAChC,IAAyB;QAEzB,IAAI,gBAAgB,GAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACjD,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGa,AAAP,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,8CAA8C;QAC9C,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE;;;WAGG;QACH,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,yBAAyB,GAC7B,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QAEJ,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,yBAAyB,CAC1B,EACD,CAAC;YACD,MAAM,WAAW,GACf,gBAAgB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,YAAY,kBAAkB,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,IAAI,IACpC,IAAI,SAAS,EAAE,CAAC,YAClB,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,4BAA4B,CACzC,SAAgC,EAChC,gBAAmC,EACnC,IAAyB;QAEzB,MAAM,SAAS,GAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,eAAe,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,iCAAiC,CAC9C,IAAyB;QAEzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,+BAA+B,CAC3C,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD;;;;;;;WAOG;QACH,MAAM,cAAc,GAA+B,eAAe,CAAC,IAAI,CACrE,CAAC,cAA8B,EAAE,EAAE;YACjC,OAAO,CACL,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC;gBACpD,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CACnE,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,IAC/B,IAAI,SAAS,EAAE,CAAC,YAClB,YACE,cAAc,CAAC,UACjB,2CAA2C,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAjLe;IADb,WAAW,EAAE;;;oCAIX,KAAK;+CAqBP;AAGa;IADb,WAAW,EAAE;;;;uDA0Db;AAgDa;IADb,WAAW,EAAE;;;;4DA6Cb"}
+{"version":3,"file":"TablePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TablePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAKlD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,UAAU,EAAE,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,kBAAkB,CAC9B,SAAgC,EAChC,IAAyB;QAEzB,IAAI,gBAAgB,GAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACjD,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGa,AAAP,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,8CAA8C;QAC9C,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE;;;;;;;;WAQG;QACH,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,yBAAyB,GAC7B,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QAEJ,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,yBAAyB,CAC1B,EACD,CAAC;YACD,MAAM,WAAW,GACf,gBAAgB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,YAAY,kBAAkB,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,IAAI,IACpC,IAAI,SAAS,EAAE,CAAC,YAClB,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,4BAA4B,CACzC,SAAgC,EAChC,gBAAmC,EACnC,IAAyB;QAEzB,MAAM,SAAS,GAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,eAAe,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,iCAAiC,CAC9C,IAAyB;QAEzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,+BAA+B,CAC3C,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD;;;;;;;WAOG;QACH,MAAM,cAAc,GAA+B,eAAe,CAAC,IAAI,CACrE,CAAC,cAA8B,EAAE,EAAE;YACjC,OAAO,CACL,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC;gBACpD,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CACnE,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,IAC/B,IAAI,SAAS,EAAE,CAAC,YAClB,YACE,cAAc,CAAC,UACjB,2CAA2C,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAxLe;IADb,WAAW,EAAE;;;oCAIX,KAAK;+CAqBP;AAGa;IADb,WAAW,EAAE;;;;uDAiEb;AAgDa;IADb,WAAW,EAAE;;;;4DA6Cb"}

package/build/dist/Server/Types/Database/Permissions/UpdatePermission.js

@@ -11,6 +11,7 @@ import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
 import AccessControlUtil from "./AccessControlPermission";
 import BasePermission from "./BasePermission";
 import ColumnPermissions from "./ColumnPermission";
+import EditionPermissions from "./EditionPermission";
 import TablePermission from "./TablePermission";
 import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
 export default class UpdatePermission {
@@ -19,11 +20,27 @@ export default class UpdatePermission {
         await AccessControlUtil.checkAccessControlPermissionByModel(Object.assign(Object.assign({}, data), { type: DatabaseRequestType.Update }));
     }
     static async checkUpdatePermissions(modelType, query, data, props) {
+        /*
+         * The edition check for updates runs here, the one permission entry
+         * point that sees what the update writes: an update that only tightens
+         * security (disabling an identity provider, rotating a SCIM token) needs
+         * no license, anything else does (see EditionPermission). TablePermission
+         * leaves updates to this method for that reason.
+         *
+         * Master admins skip every table-level check below, but not the edition
+         * check: changing enterprise configuration (global SSO/OIDC providers are
+         * only ever edited by master admins) needs the license for them too.
+         * Everyone else gets it right after the table-level check.
+         */
+        if (props.isMasterAdmin && !props.isRoot) {
+            EditionPermissions.checkEditionPermissions(modelType, props, DatabaseRequestType.Update, data);
+        }
         if (props.isRoot || props.isMasterAdmin) {
             // If system is making this query then let the query run!
             return query;
         }
         TablePermission.checkTableLevelPermissions(modelType, props, DatabaseRequestType.Update);
+        EditionPermissions.checkEditionPermissions(modelType, props, DatabaseRequestType.Update, data);
         const checkBasePermission = await BasePermission.checkPermissions(modelType, query, null, props, DatabaseRequestType.Update);
         query = checkBasePermission.query;
         ColumnPermissions.checkDataColumnPermissions(modelType, data, props, DatabaseRequestType.Update);

package/build/dist/Server/Types/Database/Permissions/UpdatePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdatePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/UpdatePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAEzE,OAAO,iBAAiB,MAAM,2BAA2B,CAAC;AAC1D,OAAO,cAAgD,MAAM,kBAAkB,CAAC;AAChF,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAEf,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,MAAM,iBAAiB,CAAC,wCAAwC,iCACzD,IAAI,KAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAC5C,CAAC;QAEF,MAAM,iBAAiB,CAAC,mCAAmC,iCACtD,IAAI,KACP,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAChC,CAAC;IACL,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,sBAAsB,CACxC,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,yDAAyD;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,eAAe,CAAC,0BAA0B,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,gBAAgB,CACnC,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEJ,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC;QAElC,iBAAiB,CAAC,0BAA0B,CAC1C,SAAS,EACT,IAAW,EACX,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAvDqB;IADnB,WAAW,EAAE;;;;0DAgBb;AAGmB;IADnB,WAAW,EAAE;;;;oDAqCb"}
+{"version":3,"file":"UpdatePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/UpdatePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAEzE,OAAO,iBAAiB,MAAM,2BAA2B,CAAC;AAC1D,OAAO,cAAgD,MAAM,kBAAkB,CAAC;AAChF,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAEf,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,MAAM,iBAAiB,CAAC,wCAAwC,iCACzD,IAAI,KAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAC5C,CAAC;QAEF,MAAM,iBAAiB,CAAC,mCAAmC,iCACtD,IAAI,KACP,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAChC,CAAC;IACL,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,sBAAsB,CACxC,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC;;;;;;;;;;;WAWG;QACH,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,kBAAkB,CAAC,uBAAuB,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,EAC1B,IAAI,CACL,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,yDAAyD;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,eAAe,CAAC,0BAA0B,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,kBAAkB,CAAC,uBAAuB,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,EAC1B,IAAI,CACL,CAAC;QAEF,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,gBAAgB,CACnC,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEJ,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC;QAElC,iBAAiB,CAAC,0BAA0B,CAC1C,SAAS,EACT,IAAW,EACX,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAnFqB;IADnB,WAAW,EAAE;;;;0DAgBb;AAGmB;IADnB,WAAW,EAAE;;;;oDAiEb"}

package/build/dist/Server/Types/Markdown.js

@@ -163,6 +163,37 @@ class Markdown {
                 `word-break:break-word;${align || "text-align:left;"}">` +
                 `${content}</${tag}>`);
         };
+        /*
+         * Lists. A platform monitor's root cause lists its affected resources
+         * as a numbered list with a bullet list of details nested under each
+         * item, and the cluster and metric details above it are bullets too.
+         *
+         * Left to the client, Gmail and Apple Mail indent every list level by
+         * 40px — close to a tenth of the card, twice over for a nested list —
+         * and Outlook's Word engine ignores padding on <ul>/<ol> and picks its
+         * own margins. So the indent is a margin-left, which Outlook honours,
+         * with padding zeroed: 24px holds a bullet, and 32px holds a numbered
+         * marker up to three digits ("100."). The vertical margins give each
+         * item's nested details a little air above and a gap below that
+         * separates it from the next item.
+         *
+         * margin-left is a physical side, so it is followed by the logical
+         * margin-inline-start / -end: a client that understands them moves
+         * the indent to the marker side in right-to-left text, and one that
+         * does not keeps the margin-left.
+         */
+        renderer.list = function (body, ordered, start) {
+            const tag = ordered ? "ol" : "ul";
+            const startAttribute = ordered && start !== "" && start !== 1 ? ` start="${start}"` : "";
+            const indent = ordered ? "32px" : "24px";
+            return (`<${tag}${startAttribute} style="margin:6px 0 12px 0;` +
+                `margin-left:${indent};margin-inline-start:${indent};` +
+                `margin-inline-end:0;padding:0;">` +
+                `${body}</${tag}>`);
+        };
+        renderer.listitem = function (text) {
+            return `<li style="margin:0 0 4px;padding:0;">${text}</li>`;
+        };
         /*
          * The root cause backticks metric names, aliases and timestamps. Left
          * bare they were indistinguishable from the prose around them.

package/build/dist/Server/Types/Markdown.js.map

@@ -1 +1 @@
-{"version":3,"file":"Markdown.js","sourceRoot":"","sources":["../../../../Server/Types/Markdown.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,MAAM,CAAN,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,6DAAI,CAAA;IACJ,6DAAI,CAAA;IACJ,+DAAK,CAAA;IACL,+EAA+E;IAC/E,iFAAc,CAAA;AAChB,CAAC,EANW,mBAAmB,KAAnB,mBAAmB,QAM9B;AAED,MAAqB,QAAQ;IAEb,AAAP,MAAM,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,GAAW,QAAQ,CAAC;QAE5B,mBAAmB;QACnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAEpC,kDAAkD;QAClD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAEpD,uDAAuD;QACvD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QAErD,sCAAsC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAC1D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAEpD,gCAAgC;QAChC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE1C,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAExC,0BAA0B;QAC1B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAExC,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEnC,mCAAmC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAEzC,+BAA+B;QAC/B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAE5C,uBAAuB;QACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,2DAA2D;QAC3D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,kBAAkB;QAClB,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAEnB,OAAO,IAAI,CAAC;IACd,CAAC;IAOmB,AAAb,MAAM,CAAC,KAAK,CAAC,aAAa,CAC/B,QAAgB,EAChB,WAAgC;QAEhC,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACvD,QAAQ,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED;;;;WAIG;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;gBACvC,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,MAAM,MAAM,CAAC,QAAQ,EAAE;YAC9C,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,UAAU,CAAC,IAAY;QACnC,OAAO,IAAI;aACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACK,MAAM,CAAC,gBAAgB;QAC7B,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,MAAM,QAAQ,GACZ,2IAA2I,CAAC;QAE9I,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAc,EAAE,IAAY;YACrD,OAAO,CACL,iEAAiE;gBACjE,+DAA+D;gBAC/D,2CAA2C;gBAC3C,UAAU,MAAM,kBAAkB,IAAI,kBAAkB,CACzD,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAe;YAC3C,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UACnB,OAAe,EACf,KAAkD;YAElD,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE;;;;eAIG;YACH,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM;gBAC/B,CAAC,CAAC,yFAAyF;gBAC3F,CAAC,CAAC,gEAAgE,CAAC;YAErE,OAAO,CACL,IAAI,GAAG,4BAA4B,QAAQ,GAAG,IAAI,EAAE;gBACpD,yBAAyB,KAAK,IAAI,kBAAkB,IAAI;gBACxD,GAAG,OAAO,KAAK,GAAG,GAAG,CACtB,CAAC;QACJ,CAAC,CAAC;QAEF;;;;;;;;;;WAUG;QACH,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAY;YACxC,OAAO,CACL,sDAAsD;gBACtD,oCAAoC;gBACpC,8EAA8E;gBAC9E,oBAAoB,IAAI,SAAS,CAClC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAE9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,yBAAyB;QACtC,IAAI,IAAI,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,sBAAsB,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,OAAO,oKAAoK,IAAI,OAAO,CAAC;YACzL,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,+DAA+D,IAAI,OAAO,CAAC;YACpF,CAAC;YACD,OAAO,6DAA6D,IAAI,OAAO,CAAC;QAClF,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,2DAA2D,IAAI,MAAM,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,4EAA4E,CAAC;YACjF,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QAEF,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,sBAAsB,IAAI,OAAO,CAAC;QAC3C,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO,qFAAqF,KAAK,eAAe,CAAC;QACnH,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,8CAA8C,CAAC;QACxD,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wGAAwG,OAAO,SAAS,CAAC;QAClI,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,oIAAoI,QAAQ,6BAA6B,OAAO,eAAe,CAAC;QACzM,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,mHAAmH,MAAM,GAAG,IAAI,gBAAgB,CAAC;QAC1J,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wDAAwD,OAAO,OAAO,CAAC;QAChF,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,WAAW,GAAW,KAAK,CAAC,MAAM;gBACtC,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,gBAAgB,CAAC;YACrB,OAAO,IAAI,GAAG,oBAAoB,KAAK,GAAG,WAAW,KAAK,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YACD,MAAM,UAAU,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,GAAG,GAAW,UAAU;gBAC5B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,YAAY,IAAI,IAAI,GAAG,sIAAsI,IAAI,MAAM,CAAC;QACjL,CAAC,CAAC;QAEF,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,OAAO,CAAC,IAAY;QAChC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAgEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C;;;;;;WAMG;QAEH,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,MAAM,IAAI,MAAM,CAAC;QAC1B,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,MAAM,YAAY,GAA4B,KAAK,CAAC,KAAK,CACvD,wEAAwE,CACzE,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAW,YAAY,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAoD;oBACjE,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,8RAA8R;wBACpS,KAAK,EAAE,KAAK;qBACb;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,+HAA+H;wBACrI,KAAK,EAAE,QAAQ;qBAChB;iBACF,CAAC;gBAEF,MAAM,MAAM,GACV,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,CAAC;gBAExC,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,CACnC,2EAA2E,EAC3E,KAAK,CACN,CAAC;gBAEF,OAAO,0CAA0C,IAAI;;uHAE0D,MAAM,CAAC,IAAI;gDAClF,MAAM,CAAC,KAAK;;4CAEhB,OAAO;eACpC,CAAC;YACV,CAAC;YAED,OAAO,kCAAkC,KAAK,eAAe,CAAC;QAChE,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YAC1C,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,aAAa,IAAI,UAAU,IAAI,IAAI,EAAE,IAAI,SAAS,wDAAwD,CAAC;QACpH,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/D,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACpC,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAW,UAAU;gBAC/B,CAAC,CAAC,0QAA0Q;gBAC5Q,CAAC,CAAC,EAAE,CAAC;YAEP,OAAO,8BAA8B,IAAI,IAAI,SAAS,GAAG,aAAa,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC;QAChG,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,IAAI,GAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB;;;;mBAIG;gBACH,OAAO,kDAAkD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YACnG,CAAC;YAED,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,KAAK,GAAuB,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACnE;;;eAGG;YACH,MAAM,SAAS,GAAW,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE;;;;;eAKG;YACH,MAAM,GAAG,GAAW;0CACgB,KAAK,IAAI,EAAE;;;;;eAKtC,CAAC;YAEV,OAAO,yBAAyB,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,qBAAqB,SAAS,KAAK,OAAO,qBAAqB,CAAC;QAC/I,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,MAAM,IAAI,GAAW,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,MAAM,GACV,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;gBACtB,CAAC,CAAC,iCAAiC,IAAI,0CAA0C;gBACjF,CAAC,CAAC,EAAE,CAAC;YAET,MAAM,SAAS,GAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE1D,OAAO,KAAK,SAAS,QAAQ,IAAI,+BAA+B,SAAS,sCAAsC,IAAI,UAAU,MAAM,MAAM,SAAS,GAAG,CAAC;QACxJ,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,wBAAwB,CAAC;QAClC,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,0EAA0E,MAAM,GAAG,IAAI,gBAAgB,CAAC;QACjH,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK;gBAC/B,CAAC,CAAC,sBAAsB,KAAK,CAAC,KAAK,GAAG;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/C,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,kCAAkC,OAAO,SAAS,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,wDAAwD,IAAI,MAAM,CAAC;QAC5E,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO;mDACsC,KAAK;sBAClC,CAAC;QACnB,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wBAAwB,QAAQ,sCAAsC,QAAQ,gBAAgB,OAAO,eAAe,CAAC;QAC9H,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;YACD,OAAO,2DAA2D,IAAI,OAAO,CAAC;QAChF,CAAC,CAAC;QAEF,QAAQ;QACR,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C,CAAC;YAClD,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,yBAAyB,IAAI,OAAO,CAAC;QAC9C,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO;UACH,MAAM,GAAG,IAAI;qBACF,CAAC;QAClB,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wCAAwC,OAAO,OAAO,CAAC;QAChE,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,GAAW,oDAAoD,CAAC;YAC1E,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,MAAM,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,IAAI,WAAW,IAAI,GAAG,KAAK,GAAG,MAAM,KAAK,OAAO,KAAK,IAAI,GAAG,CAAC;QAC1E,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,4EAA4E,OAAO,SAAS,CAAC;QACtG,CAAC,CAAC;QAEF,kBAAkB;QAClB,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,+CAA+C,CAAC;QACzD,CAAC,CAAC;QAEF,oCAAoC;QACpC,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QACF,QAAQ,CAAC,GAAG,GAAG,UAAU,IAAI;YAC3B,OAAO,2CAA2C,IAAI,QAAQ,CAAC;QACjE,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC3C,OAAO,kCAAkC,IAAI,UAAU,IAAI,oIAAoI,IAAI,IAAI,EAAE,wBAAwB,CAAC;QACpO,CAAC,CAAC;QAEF;;;;;WAKG;QACH,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,2CAA2C;YAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAY,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAY,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GACd,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9B,MAAM;gBACN,QAAQ;gBACR,KAAK,CAAC;YAER,MAAM,WAAW,GAAW;gBAC1B,eAAe;gBACf,iBAAiB;gBACjB,WAAW;gBACX,oBAAoB;gBACpB,uBAAuB;gBACvB,6BAA6B;gBAC7B,uBAAuB;gBACvB,mBAAmB;aACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAW,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,4CAA4C,CAAC;YAEjD,OAAO,YAAY,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI,aAAa,IAAI,IAAI,MAAM,CAAC;QAC5F,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;;AAvoBc,qBAAY,GAAoB,IAAI,CAAC;AACrC,qBAAY,GAAoB,IAAI,CAAC;AACrC,sBAAa,GAAoB,IAAI,CAAC;AACtC,+BAAsB,GAAoB,IAAI,CAAC;AAsQ9D;;;;;;GAMG;AACqB,0BAAiB,GAA2B;IAClE,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,GAAG;IACN,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,UAAU;IACjB,EAAE,EAAE,QAAQ;IACZ,MAAM,EAAE,QAAQ;IAChB,CAAC,EAAE,GAAG;IACN,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,OAAO;CACb,CAAC;eAlYiB,QAAQ;AAEb;IADb,WAAW,EAAE;;;;wCA2Db;AAOmB;IADnB,WAAW,EAAE;;;;mCAuCb"}
+{"version":3,"file":"Markdown.js","sourceRoot":"","sources":["../../../../Server/Types/Markdown.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,MAAM,CAAN,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,6DAAI,CAAA;IACJ,6DAAI,CAAA;IACJ,+DAAK,CAAA;IACL,+EAA+E;IAC/E,iFAAc,CAAA;AAChB,CAAC,EANW,mBAAmB,KAAnB,mBAAmB,QAM9B;AAED,MAAqB,QAAQ;IAEb,AAAP,MAAM,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,GAAW,QAAQ,CAAC;QAE5B,mBAAmB;QACnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAEpC,kDAAkD;QAClD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAEpD,uDAAuD;QACvD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QAErD,sCAAsC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAC1D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAEpD,gCAAgC;QAChC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE1C,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAExC,0BAA0B;QAC1B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAExC,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEnC,mCAAmC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAEzC,+BAA+B;QAC/B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAE5C,uBAAuB;QACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,2DAA2D;QAC3D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,kBAAkB;QAClB,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAEnB,OAAO,IAAI,CAAC;IACd,CAAC;IAOmB,AAAb,MAAM,CAAC,KAAK,CAAC,aAAa,CAC/B,QAAgB,EAChB,WAAgC;QAEhC,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACvD,QAAQ,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED;;;;WAIG;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;gBACvC,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,MAAM,MAAM,CAAC,QAAQ,EAAE;YAC9C,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,UAAU,CAAC,IAAY;QACnC,OAAO,IAAI;aACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACK,MAAM,CAAC,gBAAgB;QAC7B,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,MAAM,QAAQ,GACZ,2IAA2I,CAAC;QAE9I,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAc,EAAE,IAAY;YACrD,OAAO,CACL,iEAAiE;gBACjE,+DAA+D;gBAC/D,2CAA2C;gBAC3C,UAAU,MAAM,kBAAkB,IAAI,kBAAkB,CACzD,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAe;YAC3C,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UACnB,OAAe,EACf,KAAkD;YAElD,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE;;;;eAIG;YACH,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM;gBAC/B,CAAC,CAAC,yFAAyF;gBAC3F,CAAC,CAAC,gEAAgE,CAAC;YAErE,OAAO,CACL,IAAI,GAAG,4BAA4B,QAAQ,GAAG,IAAI,EAAE;gBACpD,yBAAyB,KAAK,IAAI,kBAAkB,IAAI;gBACxD,GAAG,OAAO,KAAK,GAAG,GAAG,CACtB,CAAC;QACJ,CAAC,CAAC;QAEF;;;;;;;;;;;;;;;;;;WAkBG;QACH,QAAQ,CAAC,IAAI,GAAG,UACd,IAAY,EACZ,OAAgB,EAChB,KAAkB;YAElB,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,cAAc,GAClB,OAAO,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAW,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAEjD,OAAO,CACL,IAAI,GAAG,GAAG,cAAc,8BAA8B;gBACtD,eAAe,MAAM,wBAAwB,MAAM,GAAG;gBACtD,kCAAkC;gBAClC,GAAG,IAAI,KAAK,GAAG,GAAG,CACnB,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAY;YACxC,OAAO,yCAAyC,IAAI,OAAO,CAAC;QAC9D,CAAC,CAAC;QAEF;;;;;;;;;;WAUG;QACH,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAY;YACxC,OAAO,CACL,sDAAsD;gBACtD,oCAAoC;gBACpC,8EAA8E;gBAC9E,oBAAoB,IAAI,SAAS,CAClC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAE9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,yBAAyB;QACtC,IAAI,IAAI,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,sBAAsB,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,OAAO,oKAAoK,IAAI,OAAO,CAAC;YACzL,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,+DAA+D,IAAI,OAAO,CAAC;YACpF,CAAC;YACD,OAAO,6DAA6D,IAAI,OAAO,CAAC;QAClF,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,2DAA2D,IAAI,MAAM,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,4EAA4E,CAAC;YACjF,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QAEF,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,sBAAsB,IAAI,OAAO,CAAC;QAC3C,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO,qFAAqF,KAAK,eAAe,CAAC;QACnH,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,8CAA8C,CAAC;QACxD,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wGAAwG,OAAO,SAAS,CAAC;QAClI,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,oIAAoI,QAAQ,6BAA6B,OAAO,eAAe,CAAC;QACzM,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,mHAAmH,MAAM,GAAG,IAAI,gBAAgB,CAAC;QAC1J,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wDAAwD,OAAO,OAAO,CAAC;QAChF,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,WAAW,GAAW,KAAK,CAAC,MAAM;gBACtC,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,gBAAgB,CAAC;YACrB,OAAO,IAAI,GAAG,oBAAoB,KAAK,GAAG,WAAW,KAAK,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YACD,MAAM,UAAU,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,GAAG,GAAW,UAAU;gBAC5B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,YAAY,IAAI,IAAI,GAAG,sIAAsI,IAAI,MAAM,CAAC;QACjL,CAAC,CAAC;QAEF,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,OAAO,CAAC,IAAY;QAChC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAgEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C;;;;;;WAMG;QAEH,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,MAAM,IAAI,MAAM,CAAC;QAC1B,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,MAAM,YAAY,GAA4B,KAAK,CAAC,KAAK,CACvD,wEAAwE,CACzE,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAW,YAAY,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAoD;oBACjE,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,8RAA8R;wBACpS,KAAK,EAAE,KAAK;qBACb;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,+HAA+H;wBACrI,KAAK,EAAE,QAAQ;qBAChB;iBACF,CAAC;gBAEF,MAAM,MAAM,GACV,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,CAAC;gBAExC,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,CACnC,2EAA2E,EAC3E,KAAK,CACN,CAAC;gBAEF,OAAO,0CAA0C,IAAI;;uHAE0D,MAAM,CAAC,IAAI;gDAClF,MAAM,CAAC,KAAK;;4CAEhB,OAAO;eACpC,CAAC;YACV,CAAC;YAED,OAAO,kCAAkC,KAAK,eAAe,CAAC;QAChE,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YAC1C,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,aAAa,IAAI,UAAU,IAAI,IAAI,EAAE,IAAI,SAAS,wDAAwD,CAAC;QACpH,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/D,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACpC,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAW,UAAU;gBAC/B,CAAC,CAAC,0QAA0Q;gBAC5Q,CAAC,CAAC,EAAE,CAAC;YAEP,OAAO,8BAA8B,IAAI,IAAI,SAAS,GAAG,aAAa,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC;QAChG,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,IAAI,GAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB;;;;mBAIG;gBACH,OAAO,kDAAkD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YACnG,CAAC;YAED,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,KAAK,GAAuB,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACnE;;;eAGG;YACH,MAAM,SAAS,GAAW,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE;;;;;eAKG;YACH,MAAM,GAAG,GAAW;0CACgB,KAAK,IAAI,EAAE;;;;;eAKtC,CAAC;YAEV,OAAO,yBAAyB,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,qBAAqB,SAAS,KAAK,OAAO,qBAAqB,CAAC;QAC/I,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,MAAM,IAAI,GAAW,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,MAAM,GACV,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;gBACtB,CAAC,CAAC,iCAAiC,IAAI,0CAA0C;gBACjF,CAAC,CAAC,EAAE,CAAC;YAET,MAAM,SAAS,GAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE1D,OAAO,KAAK,SAAS,QAAQ,IAAI,+BAA+B,SAAS,sCAAsC,IAAI,UAAU,MAAM,MAAM,SAAS,GAAG,CAAC;QACxJ,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,wBAAwB,CAAC;QAClC,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,0EAA0E,MAAM,GAAG,IAAI,gBAAgB,CAAC;QACjH,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK;gBAC/B,CAAC,CAAC,sBAAsB,KAAK,CAAC,KAAK,GAAG;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/C,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,kCAAkC,OAAO,SAAS,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,wDAAwD,IAAI,MAAM,CAAC;QAC5E,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO;mDACsC,KAAK;sBAClC,CAAC;QACnB,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wBAAwB,QAAQ,sCAAsC,QAAQ,gBAAgB,OAAO,eAAe,CAAC;QAC9H,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;YACD,OAAO,2DAA2D,IAAI,OAAO,CAAC;QAChF,CAAC,CAAC;QAEF,QAAQ;QACR,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C,CAAC;YAClD,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,yBAAyB,IAAI,OAAO,CAAC;QAC9C,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO;UACH,MAAM,GAAG,IAAI;qBACF,CAAC;QAClB,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wCAAwC,OAAO,OAAO,CAAC;QAChE,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,GAAW,oDAAoD,CAAC;YAC1E,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,MAAM,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,IAAI,WAAW,IAAI,GAAG,KAAK,GAAG,MAAM,KAAK,OAAO,KAAK,IAAI,GAAG,CAAC;QAC1E,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,4EAA4E,OAAO,SAAS,CAAC;QACtG,CAAC,CAAC;QAEF,kBAAkB;QAClB,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,+CAA+C,CAAC;QACzD,CAAC,CAAC;QAEF,oCAAoC;QACpC,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QACF,QAAQ,CAAC,GAAG,GAAG,UAAU,IAAI;YAC3B,OAAO,2CAA2C,IAAI,QAAQ,CAAC;QACjE,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC3C,OAAO,kCAAkC,IAAI,UAAU,IAAI,oIAAoI,IAAI,IAAI,EAAE,wBAAwB,CAAC;QACpO,CAAC,CAAC;QAEF;;;;;WAKG;QACH,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,2CAA2C;YAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAY,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAY,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GACd,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9B,MAAM;gBACN,QAAQ;gBACR,KAAK,CAAC;YAER,MAAM,WAAW,GAAW;gBAC1B,eAAe;gBACf,iBAAiB;gBACjB,WAAW;gBACX,oBAAoB;gBACpB,uBAAuB;gBACvB,6BAA6B;gBAC7B,uBAAuB;gBACvB,mBAAmB;aACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAW,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,4CAA4C,CAAC;YAEjD,OAAO,YAAY,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI,aAAa,IAAI,IAAI,MAAM,CAAC;QAC5F,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;;AAhrBc,qBAAY,GAAoB,IAAI,CAAC;AACrC,qBAAY,GAAoB,IAAI,CAAC;AACrC,sBAAa,GAAoB,IAAI,CAAC;AACtC,+BAAsB,GAAoB,IAAI,CAAC;AA+S9D;;;;;;GAMG;AACqB,0BAAiB,GAA2B;IAClE,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,GAAG;IACN,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,UAAU;IACjB,EAAE,EAAE,QAAQ;IACZ,MAAM,EAAE,QAAQ;IAChB,CAAC,EAAE,GAAG;IACN,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,OAAO;CACb,CAAC;eA3aiB,QAAQ;AAEb;IADb,WAAW,EAAE;;;;wCA2Db;AAOmB;IADnB,WAAW,EAAE;;;;mCAuCb"}

package/build/dist/Server/Utils/CommunityEditionSsoReport.js

@@ -0,0 +1,223 @@
+import EnterpriseEdition from "../Enterprise/EnterpriseEdition";
+import EnterpriseFeature from "../Enterprise/EnterpriseFeature";
+import { ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS, ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS, } from "../Enterprise/EnterpriseLicenseSnapshot";
+import GlobalConfigService from "../Services/GlobalConfigService";
+import ProjectSCIMService from "../Services/ProjectSCIMService";
+import ProjectService from "../Services/ProjectService";
+import StatusPageService from "../Services/StatusPageService";
+import logger from "./Logger";
+// How many ids of each kind the log line names; the counts are always exact.
+export const MAX_IDS_LISTED_PER_KIND = 20;
+const COMMUNITY_CONTEXT = { reason: "community" };
+/*
+ * Tells the operator which configured security settings this server is not
+ * enforcing, so that never happens silently:
+ *
+ *   - Community Edition: moving from the Enterprise image to the Community
+ *     one keeps the database as it is, so a project that required SSO still
+ *     says so - but the SSO login routes are part of the Enterprise Edition,
+ *     so the requirement is relaxed rather than locking everyone out. Logged
+ *     once per process at boot.
+ *   - Enterprise Edition: when the license lapses, SSO and SCIM stop and the
+ *     same settings are relaxed until a license is activated. Logged each time
+ *     SSO or SCIM stops (EnterpriseEdition reports each change once),
+ *     including a license that has already lapsed at boot.
+ */
+class CommunityEditionSsoReport {
+    /*
+     * Called once at boot, after the enterprise loader. On the Community
+     * Edition it logs the relaxed settings once per process. On the Enterprise
+     * Edition it starts watching the license (once per process) and reports
+     * whenever SSO or SCIM stops. Never throws: a failed check is logged and
+     * boot carries on. Returns what the Community Edition report found (null
+     * when it did not run or the check failed).
+     */
+    static async logRelaxedEnforcementOnce() {
+        if (EnterpriseEdition.isLoaded()) {
+            CommunityEditionSsoReport.watchLicenseOnce();
+            return null;
+        }
+        if (CommunityEditionSsoReport.hasRun) {
+            return null;
+        }
+        CommunityEditionSsoReport.hasRun = true;
+        return await CommunityEditionSsoReport.report(COMMUNITY_CONTEXT);
+    }
+    /*
+     * Collects and logs the relaxed settings. Never throws. Returns what it
+     * found (null when the check failed).
+     */
+    static async report(context) {
+        try {
+            const summary = await CommunityEditionSsoReport.collect();
+            const message = CommunityEditionSsoReport.describe(summary, context);
+            if (message) {
+                logger.warn(message);
+            }
+            return summary;
+        }
+        catch (err) {
+            logger.error(context.reason === "community"
+                ? "Community Edition: could not check for SSO requirements and SCIM team locks left over from an Enterprise Edition install."
+                : "OneUptime Enterprise license lapsed: could not check which SSO requirements and SCIM team locks are no longer enforced.");
+            logger.error(err);
+            return null;
+        }
+    }
+    /*
+     * Watches the Enterprise license for SSO or SCIM stopping, once per
+     * process. The first look happens here, so a license that has already
+     * lapsed at boot is reported like a lapse at runtime.
+     */
+    static watchLicenseOnce() {
+        if (CommunityEditionSsoReport.stopWatchingLicense) {
+            return;
+        }
+        CommunityEditionSsoReport.stopWatchingLicense =
+            EnterpriseEdition.onFeatureStateChange((change) => {
+                CommunityEditionSsoReport.onFeatureStateChange(change);
+            });
+        try {
+            EnterpriseEdition.isFeatureActive(EnterpriseFeature.SSO);
+            EnterpriseEdition.isFeatureActive(EnterpriseFeature.SCIM);
+        }
+        catch (err) {
+            logger.error(err);
+        }
+    }
+    static onFeatureStateChange(change) {
+        const isSsoRelaxed = change.stopped.includes(EnterpriseFeature.SSO);
+        const isScimRelaxed = change.stopped.includes(EnterpriseFeature.SCIM);
+        if (!isSsoRelaxed && !isScimRelaxed) {
+            return;
+        }
+        void CommunityEditionSsoReport.report({
+            reason: "lapsed-license",
+            isSsoRelaxed,
+            isScimRelaxed,
+        });
+    }
+    // Reads the stored (not the masked) settings. Root reads are never masked.
+    static async collect() {
+        const [instanceRequiresSso, projectCount, projects, statusPageCount, statusPages, scimCount, scimConfigurations,] = await Promise.all([
+            GlobalConfigService.getRequireSsoForLogin(),
+            ProjectService.countBy({
+                query: { requireSsoForLogin: true },
+                props: { isRoot: true },
+            }),
+            ProjectService.findBy({
+                query: { requireSsoForLogin: true },
+                select: { _id: true },
+                limit: MAX_IDS_LISTED_PER_KIND,
+                skip: 0,
+                props: { isRoot: true },
+            }),
+            StatusPageService.countBy({
+                query: { requireSsoForLogin: true },
+                props: { isRoot: true },
+            }),
+            StatusPageService.findBy({
+                query: { requireSsoForLogin: true },
+                select: { _id: true },
+                limit: MAX_IDS_LISTED_PER_KIND,
+                skip: 0,
+                props: { isRoot: true },
+            }),
+            ProjectSCIMService.countBy({
+                query: { enablePushGroups: true },
+                props: { isRoot: true },
+            }),
+            ProjectSCIMService.findBy({
+                query: { enablePushGroups: true },
+                select: { projectId: true },
+                limit: MAX_IDS_LISTED_PER_KIND,
+                skip: 0,
+                props: { isRoot: true },
+            }),
+        ]);
+        return {
+            instanceRequiresSso: Boolean(instanceRequiresSso),
+            projectsRequiringSso: projectCount.toNumber(),
+            projectIdsRequiringSso: CommunityEditionSsoReport.toIds(projects.map((project) => {
+                var _a, _b;
+                return ((_a = project.id) === null || _a === void 0 ? void 0 : _a.toString()) || ((_b = project._id) === null || _b === void 0 ? void 0 : _b.toString());
+            })),
+            statusPagesRequiringSso: statusPageCount.toNumber(),
+            statusPageIdsRequiringSso: CommunityEditionSsoReport.toIds(statusPages.map((statusPage) => {
+                var _a, _b;
+                return ((_a = statusPage.id) === null || _a === void 0 ? void 0 : _a.toString()) || ((_b = statusPage._id) === null || _b === void 0 ? void 0 : _b.toString());
+            })),
+            scimConfigurationsWithPushGroups: scimCount.toNumber(),
+            projectIdsWithScimPushGroups: CommunityEditionSsoReport.toIds(scimConfigurations.map((scim) => {
+                var _a;
+                return (_a = scim.projectId) === null || _a === void 0 ? void 0 : _a.toString();
+            })),
+        };
+    }
+    // The log line, or null when nothing is relaxed.
+    static describe(summary, context = COMMUNITY_CONTEXT) {
+        const isSsoRelaxed = context.reason === "community" || context.isSsoRelaxed;
+        const isScimRelaxed = context.reason === "community" || context.isScimRelaxed;
+        const relaxed = [];
+        if (isSsoRelaxed && summary.instanceRequiresSso) {
+            relaxed.push('the instance-wide "Require SSO for Login" setting (Admin Dashboard > Settings > Authentication)');
+        }
+        if (isSsoRelaxed && summary.projectsRequiringSso > 0) {
+            relaxed.push(`${summary.projectsRequiringSso} project(s) that require SSO for login${CommunityEditionSsoReport.describeIds(summary.projectIdsRequiringSso, summary.projectsRequiringSso)}`);
+        }
+        if (isSsoRelaxed && summary.statusPagesRequiringSso > 0) {
+            relaxed.push(`${summary.statusPagesRequiringSso} private status page(s) that require SSO for login${CommunityEditionSsoReport.describeIds(summary.statusPageIdsRequiringSso, summary.statusPagesRequiringSso)}`);
+        }
+        if (isScimRelaxed && summary.scimConfigurationsWithPushGroups > 0) {
+            relaxed.push(`${summary.scimConfigurationsWithPushGroups} SCIM configuration(s) with Push Groups on, whose teams can be edited in OneUptime again${CommunityEditionSsoReport.describeIds(summary.projectIdsWithScimPushGroups, summary.scimConfigurationsWithPushGroups, "project ids")}`);
+        }
+        if (relaxed.length === 0) {
+            return null;
+        }
+        if (context.reason === "lapsed-license") {
+            const stopped = isSsoRelaxed && isScimRelaxed
+                ? "SSO login and SCIM provisioning have"
+                : isSsoRelaxed
+                    ? "SSO login has"
+                    : "SCIM provisioning has";
+            return ("OneUptime Enterprise license lapsed: this server has security settings that it no longer enforces, " +
+                `because ${stopped} stopped until a license that includes ${isSsoRelaxed && isScimRelaxed ? "them" : "it"} is activated. ` +
+                (isSsoRelaxed
+                    ? "Users of these projects and status pages sign in with email and password instead (users who only ever signed in with SSO can reset their password). "
+                    : "") +
+                `Not enforced: ${relaxed.join("; ")}. ` +
+                "The settings are kept unchanged and are enforced again as soon as a license is activated, without a restart.");
+        }
+        return ("Community Edition: this server has security settings from an Enterprise Edition install that it does not enforce, " +
+            "because SSO login and SCIM provisioning are part of the OneUptime Enterprise Edition. " +
+            "Users of these projects and status pages sign in with email and password instead. " +
+            `Not enforced: ${relaxed.join("; ")}. ` +
+            `The settings are kept unchanged and are enforced again when this server runs the Enterprise Edition image with a valid license (or during its ${ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS}-day trial, or the ${ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS}-day grace period after a license expires).`);
+    }
+    // Test suites only: allow the next call to run again and stop watching.
+    static resetForTests() {
+        CommunityEditionSsoReport.hasRun = false;
+        if (CommunityEditionSsoReport.stopWatchingLicense) {
+            CommunityEditionSsoReport.stopWatchingLicense();
+            CommunityEditionSsoReport.stopWatchingLicense = null;
+        }
+    }
+    static toIds(values) {
+        return values
+            .filter((value) => {
+            return Boolean(value);
+        })
+            .slice(0, MAX_IDS_LISTED_PER_KIND);
+    }
+    static describeIds(ids, total, label = "ids") {
+        if (ids.length === 0) {
+            return "";
+        }
+        const more = total > ids.length ? ` and ${total - ids.length} more` : "";
+        return ` (${label}: ${ids.join(", ")}${more})`;
+    }
+}
+CommunityEditionSsoReport.hasRun = false;
+CommunityEditionSsoReport.stopWatchingLicense = null;
+export default CommunityEditionSsoReport;
+//# sourceMappingURL=CommunityEditionSsoReport.js.map