@oneuptime/common 14.0.1 → 14.0.3

package/build/dist/Server/Services/WorkflowVariableService.js

@@ -1,8 +1,10 @@
 import DatabaseService from "./DatabaseService";
 import QueryHelper from "../Types/Database/QueryHelper";
+import logger from "../Utils/Logger";
 import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
 import BadDataException from "../../Types/Exception/BadDataException";
 import Typeof from "../../Types/Typeof";
+import { DEFAULT_OAUTH2_CLIENT_AUTHENTICATION_METHOD, OAuth2GrantType, WorkflowVariableType, getOAuth2AdditionalParametersError, isOAuth2ClientAuthenticationMethod, isOAuth2GrantType, normalizeOAuth2AdditionalParameters, } from "../../Types/Workflow/WorkflowVariableOAuth";
 import Model from "../../Models/DatabaseModels/WorkflowVariable";
 /*
  * isSecret is declared `string` over a genuinely boolean column, so the value
@@ -14,10 +16,369 @@ import Model from "../../Models/DatabaseModels/WorkflowVariable";
 function isSecretValue(value) {
     return value === true || value === "true";
 }
+/*
+ * The settings of an OAuth 2.0 variable a person can change after creating it.
+ * A change to any of them can change which token the identity provider issues
+ * (a new scope, a different client, another tenant's token URL), so the cached
+ * token is thrown away when one of them actually changes.
+ */
+export const OAUTH2_EDITABLE_SETTINGS_COLUMNS = [
+    "oauthTokenUrl",
+    "oauthClientId",
+    "oauthClientSecret",
+    "oauthRefreshToken",
+    "oauthScope",
+    "oauthAdditionalParameters",
+    "oauthClientAuthenticationMethod",
+];
+/*
+ * Everything an OAuth 2.0 variable stores that a Static variable must never
+ * carry: the settings above, the grant type, and the columns OneUptime writes
+ * while it manages the token.
+ */
+export const OAUTH2_COLUMNS = [
+    ...OAUTH2_EDITABLE_SETTINGS_COLUMNS,
+    "oauthGrantType",
+    "oauthAccessToken",
+    "oauthAccessTokenExpiresAt",
+    "oauthLastRefreshedAt",
+    "oauthLastRefreshError",
+    "oauthLastRefreshErrorAt",
+];
+/*
+ * What onUpdateSuccess writes after a settings change: no token, no expiry, no
+ * refresh history and no stale error, so the Token column reads "Not fetched
+ * yet" and the next workflow that uses the variable fetches a new token.
+ */
+const CLEARED_OAUTH2_TOKEN_STATE = {
+    oauthAccessToken: null,
+    oauthAccessTokenExpiresAt: null,
+    oauthLastRefreshedAt: null,
+    oauthLastRefreshError: null,
+    oauthLastRefreshErrorAt: null,
+};
+function isBlank(value) {
+    if (value === null || value === undefined) {
+        return true;
+    }
+    if (typeof value === Typeof.String) {
+        return value.trim().length === 0;
+    }
+    if (typeof value === Typeof.Object && !Array.isArray(value)) {
+        return Object.keys(value).length === 0;
+    }
+    return false;
+}
+function getTokenUrlError(value) {
+    if (typeof value !== Typeof.String && !(value instanceof Object)) {
+        return "Token URL is required for an OAuth 2.0 variable.";
+    }
+    const text = String(value).trim();
+    if (!text) {
+        return "Token URL is required for an OAuth 2.0 variable.";
+    }
+    let parsed;
+    try {
+        parsed = new URL(text);
+    }
+    catch (_a) {
+        return `"${text}" is not a valid token URL.`;
+    }
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+        return "The token URL must start with https:// (or http:// for an identity provider on your own network).";
+    }
+    return null;
+}
+/*
+ * Compared as the service stores them: text trimmed, parameters normalised,
+ * empty and absent treated alike. Without this an edit form that round-trips an
+ * unchanged value would be read as a change and throw a good token away every
+ * time somebody fixed a typo in the description.
+ */
+function normalizeSettingForComparison(column, value) {
+    if (column === "oauthAdditionalParameters") {
+        const normalized = normalizeOAuth2AdditionalParameters(value);
+        return JSON.stringify(Object.keys(normalized)
+            .sort()
+            .map((key) => {
+            return [key, normalized[key]];
+        }));
+    }
+    if (value === null || value === undefined) {
+        return "";
+    }
+    return String(value).trim();
+}
 export class Service extends DatabaseService {
     constructor() {
         super(Model);
     }
+    /*
+     * A variable's type decides what it must carry, and the column metadata
+     * cannot say "required when" - so both halves of that rule live here.
+     *
+     * A Static variable needs content (TableColumn used to require it for every
+     * row, which an OAuth variable cannot satisfy). It never uses the OAuth
+     * columns, and they are dropped rather than refused: the dashboard's create
+     * form posts every field it has, including the OAuth ones it hid and their
+     * default values.
+     *
+     * An OAuth 2.0 variable needs what its grant needs to fetch a token. It is
+     * always secret, because its value is a bearer credential - redacting it from
+     * run logs is not something to leave to a toggle - and it stores no content:
+     * its value is the access token, which lives in its own encrypted column.
+     */
+    async onBeforeCreate(createBy) {
+        const data = createBy.data;
+        const record = data;
+        const variableType = isBlank(data.variableType)
+            ? WorkflowVariableType.Static
+            : data.variableType;
+        if (!Object.values(WorkflowVariableType).includes(variableType)) {
+            throw new BadDataException(`Variable type must be one of: ${Object.values(WorkflowVariableType).join(", ")}.`);
+        }
+        data.variableType = variableType;
+        if (variableType === WorkflowVariableType.Static) {
+            if (!data.content) {
+                throw new BadDataException("content is required");
+            }
+            for (const column of OAUTH2_COLUMNS) {
+                delete record[column];
+            }
+            return { createBy, carryForward: null };
+        }
+        if (!isOAuth2GrantType(data.oauthGrantType)) {
+            throw new BadDataException(`OAuth grant type must be one of: ${Object.values(OAuth2GrantType).join(", ")}.`);
+        }
+        const tokenUrlError = getTokenUrlError(data.oauthTokenUrl);
+        if (tokenUrlError) {
+            throw new BadDataException(tokenUrlError);
+        }
+        data.oauthTokenUrl = String(data.oauthTokenUrl).trim();
+        if (typeof data.oauthClientId !== Typeof.String ||
+            isBlank(data.oauthClientId)) {
+            throw new BadDataException("Client ID is required for an OAuth 2.0 variable.");
+        }
+        data.oauthClientId = data.oauthClientId.trim();
+        this.assertOptionalText(data.oauthClientSecret, "Client secret");
+        this.assertOptionalText(data.oauthRefreshToken, "Refresh token");
+        this.assertOptionalText(data.oauthScope, "Scope");
+        if (data.oauthGrantType === OAuth2GrantType.ClientCredentials &&
+            isBlank(data.oauthClientSecret)) {
+            throw new BadDataException("Client secret is required for the Client Credentials grant.");
+        }
+        if (data.oauthGrantType === OAuth2GrantType.RefreshToken) {
+            if (isBlank(data.oauthRefreshToken)) {
+                throw new BadDataException("Refresh token is required for the Refresh Token grant.");
+            }
+        }
+        else {
+            // The form hides it for this grant; an API caller may still send one.
+            delete record["oauthRefreshToken"];
+        }
+        if (isBlank(data.oauthClientSecret)) {
+            // A public client. Store nothing rather than an empty ciphertext.
+            delete record["oauthClientSecret"];
+        }
+        data.oauthScope = isBlank(data.oauthScope)
+            ? null
+            : data.oauthScope.trim();
+        const parametersError = getOAuth2AdditionalParametersError(data.oauthAdditionalParameters);
+        if (parametersError) {
+            throw new BadDataException(parametersError);
+        }
+        data.oauthAdditionalParameters = isBlank(data.oauthAdditionalParameters)
+            ? null
+            : normalizeOAuth2AdditionalParameters(data.oauthAdditionalParameters);
+        if (isBlank(data.oauthClientAuthenticationMethod)) {
+            data.oauthClientAuthenticationMethod =
+                DEFAULT_OAUTH2_CLIENT_AUTHENTICATION_METHOD;
+        }
+        else if (!isOAuth2ClientAuthenticationMethod(data.oauthClientAuthenticationMethod)) {
+            throw new BadDataException("Client authentication must be HTTP Basic Header or Request Body.");
+        }
+        /*
+         * isSecret is declared `string` over a boolean column (see isSecretValue);
+         * write the boolean the column holds.
+         */
+        data.isSecret = true;
+        data.content = "";
+        return { createBy, carryForward: null };
+    }
+    /*
+     * Clears the cached token of every variable whose OAuth settings this update
+     * changed, so the next workflow that uses it fetches one with the new
+     * settings instead of reusing a token the old ones produced.
+     *
+     * It runs after the write, as root, because nobody may write the token
+     * columns through the API - so they cannot ride along in the caller's own
+     * update, which is permission-checked column by column. A failure here is
+     * logged rather than thrown: the settings are already saved, and a caller
+     * who retried would change nothing and so clear nothing. The cost of a miss
+     * is bounded - the old token is used until it expires or someone presses
+     * Refresh now.
+     */
+    async onUpdateSuccess(onUpdate, updatedItemIds) {
+        const carryForward = onUpdate.carryForward || null;
+        const idsToInvalidate = new Set((carryForward === null || carryForward === void 0 ? void 0 : carryForward.invalidateOAuthTokenForIds) || []);
+        if (idsToInvalidate.size === 0) {
+            return onUpdate;
+        }
+        for (const id of updatedItemIds) {
+            if (!idsToInvalidate.has(id.toString())) {
+                continue;
+            }
+            try {
+                await this.updateOneById({
+                    id,
+                    // Cast once: see the TS2589 note in onBeforeUpdate.
+                    data: CLEARED_OAUTH2_TOKEN_STATE,
+                    props: {
+                        isRoot: true,
+                        ignoreHooks: true,
+                    },
+                });
+            }
+            catch (err) {
+                logger.error(`Could not clear the cached OAuth token of workflow variable ${id.toString()} after its settings changed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        return onUpdate;
+    }
+    assertOptionalText(value, label) {
+        if (value !== undefined &&
+            value !== null &&
+            typeof value !== Typeof.String) {
+            throw new BadDataException(`${label} must be text.`);
+        }
+    }
+    /*
+     * The OAuth half of onBeforeUpdate, run against the rows the update will
+     * touch. Returns the ids whose settings actually change.
+     */
+    applyOAuthUpdateRules(updateBy, itemsBeingUpdated) {
+        const data = updateBy.data;
+        const oauthItems = itemsBeingUpdated.filter((item) => {
+            return item.variableType === WorkflowVariableType.OAuth2;
+        });
+        const staticItems = itemsBeingUpdated.filter((item) => {
+            return item.variableType !== WorkflowVariableType.OAuth2;
+        });
+        if (data["content"] !== undefined && oauthItems.length > 0) {
+            /*
+             * An OAuth variable's value is the token OneUptime fetches. A value typed
+             * over it would never be used, so it is refused rather than accepted and
+             * silently ignored.
+             */
+            if (!isBlank(data["content"])) {
+                throw new BadDataException(`"${oauthItems[0].name}" is an OAuth 2.0 variable. Its value is the access token OneUptime fetches from your identity provider, so it cannot be set by hand. Change its OAuth settings or credentials instead.`);
+            }
+            if (staticItems.length === 0) {
+                delete data["content"];
+            }
+        }
+        const providedColumns = OAUTH2_COLUMNS.filter((column) => {
+            return data[column] !== undefined;
+        });
+        if (providedColumns.length === 0) {
+            return { invalidateOAuthTokenForIds: [] };
+        }
+        if (oauthItems.length === 0) {
+            /*
+             * A Static variable never uses these. The dashboard's edit form posts
+             * every field it holds, the hidden OAuth ones included, so dropping them
+             * is what keeps editing a Static variable working.
+             */
+            for (const column of providedColumns) {
+                delete data[column];
+            }
+            return { invalidateOAuthTokenForIds: [] };
+        }
+        if (staticItems.length > 0) {
+            throw new BadDataException("OAuth settings can only be changed on OAuth 2.0 variables, and this update also matches Static variables. Update them separately.");
+        }
+        if (data["oauthTokenUrl"] !== undefined) {
+            const tokenUrlError = getTokenUrlError(data["oauthTokenUrl"]);
+            if (tokenUrlError) {
+                throw new BadDataException(tokenUrlError);
+            }
+            data["oauthTokenUrl"] = String(data["oauthTokenUrl"]).trim();
+        }
+        if (data["oauthClientId"] !== undefined) {
+            if (typeof data["oauthClientId"] !== Typeof.String ||
+                isBlank(data["oauthClientId"])) {
+                throw new BadDataException("Client ID is required for an OAuth 2.0 variable.");
+            }
+            data["oauthClientId"] = data["oauthClientId"].trim();
+        }
+        this.assertOptionalText(data["oauthClientSecret"], "Client secret");
+        this.assertOptionalText(data["oauthRefreshToken"], "Refresh token");
+        this.assertOptionalText(data["oauthScope"], "Scope");
+        if (data["oauthScope"] !== undefined) {
+            data["oauthScope"] = isBlank(data["oauthScope"])
+                ? null
+                : data["oauthScope"].trim();
+        }
+        if (data["oauthAdditionalParameters"] !== undefined) {
+            const parametersError = getOAuth2AdditionalParametersError(data["oauthAdditionalParameters"]);
+            if (parametersError) {
+                throw new BadDataException(parametersError);
+            }
+            data["oauthAdditionalParameters"] = isBlank(data["oauthAdditionalParameters"])
+                ? null
+                : normalizeOAuth2AdditionalParameters(data["oauthAdditionalParameters"]);
+        }
+        if (data["oauthClientAuthenticationMethod"] !== undefined) {
+            if (isBlank(data["oauthClientAuthenticationMethod"])) {
+                data["oauthClientAuthenticationMethod"] =
+                    DEFAULT_OAUTH2_CLIENT_AUTHENTICATION_METHOD;
+            }
+            else if (!isOAuth2ClientAuthenticationMethod(data["oauthClientAuthenticationMethod"])) {
+                throw new BadDataException("Client authentication must be HTTP Basic Header or Request Body.");
+            }
+        }
+        for (const item of oauthItems) {
+            if (data["oauthClientSecret"] !== undefined &&
+                isBlank(data["oauthClientSecret"]) &&
+                item.oauthGrantType === OAuth2GrantType.ClientCredentials) {
+                throw new BadDataException(`The client secret of "${item.name}" cannot be removed: the Client Credentials grant needs one.`);
+            }
+            if (data["oauthRefreshToken"] !== undefined) {
+                if (item.oauthGrantType !== OAuth2GrantType.RefreshToken) {
+                    if (!isBlank(data["oauthRefreshToken"])) {
+                        throw new BadDataException(`"${item.name}" uses the ${item.oauthGrantType} grant, which does not use a refresh token.`);
+                    }
+                }
+                else if (isBlank(data["oauthRefreshToken"])) {
+                    throw new BadDataException(`The refresh token of "${item.name}" cannot be removed: the Refresh Token grant needs one. Paste a new one to replace it.`);
+                }
+            }
+        }
+        if (data["oauthClientSecret"] !== undefined &&
+            isBlank(data["oauthClientSecret"])) {
+            // A Refresh Token variable becoming a public client.
+            data["oauthClientSecret"] = null;
+        }
+        if (data["oauthRefreshToken"] !== undefined &&
+            isBlank(data["oauthRefreshToken"])) {
+            delete data["oauthRefreshToken"];
+        }
+        const invalidateOAuthTokenForIds = [];
+        for (const item of oauthItems) {
+            const itemRecord = item;
+            const changesSettings = OAUTH2_EDITABLE_SETTINGS_COLUMNS.some((column) => {
+                if (data[column] === undefined) {
+                    return false;
+                }
+                return (normalizeSettingForComparison(column, data[column]) !==
+                    normalizeSettingForComparison(column, itemRecord[column]));
+            });
+            if (changesSettings && item.id) {
+                invalidateOAuthTokenForIds.push(item.id.toString());
+            }
+        }
+        return { invalidateOAuthTokenForIds };
+    }
     /*
      * @UniqueColumnBy(["workflowId", "projectId"]) on `name` is enforced by
      * DatabaseService.checkUniqueColumnBy, which runs on create only - and there
@@ -40,7 +401,14 @@ export class Service extends DatabaseService {
      * duplicates through.
      */
     async onBeforeUpdate(updateBy) {
-        const rawName = updateBy.data.name;
+        /*
+         * Read through a plain JSON view: the typed partial of a model with a JSON
+         * column (oauthAdditionalParameters) is recursive enough that TypeScript
+         * gives up instantiating it (TS2589), and every value is checked by hand
+         * below anyway.
+         */
+        const incoming = updateBy.data;
+        const rawName = incoming["name"];
         /*
          * Only an update that does not carry the column at all is exempt. An
          * explicitly blank name is still a write to `name` - the column is
@@ -69,10 +437,19 @@ export class Service extends DatabaseService {
          * the value out of the log. Marking a variable secret stays freely
          * available; unmarking one does not.
          */
-        const isDeclassifying = updateBy.data.isSecret !== undefined &&
-            updateBy.data.isSecret !== null &&
-            !isSecretValue(updateBy.data.isSecret);
-        if (!isRename && !isDeclassifying) {
+        const isDeclassifying = incoming["isSecret"] !== undefined &&
+            incoming["isSecret"] !== null &&
+            !isSecretValue(incoming["isSecret"]);
+        /*
+         * Content and the OAuth columns mean different things for the two variable
+         * types, so a write to either needs to know the type of every row it
+         * touches. See applyOAuthUpdateRules.
+         */
+        const touchesTypeDependentColumns = incoming["content"] !== undefined ||
+            OAUTH2_COLUMNS.some((column) => {
+                return incoming[column] !== undefined;
+            });
+        if (!isRename && !isDeclassifying && !touchesTypeDependentColumns) {
             return { updateBy, carryForward: null };
         }
         /*
@@ -102,6 +479,15 @@ export class Service extends DatabaseService {
                 isSecret: true,
                 projectId: true,
                 workflowId: true,
+                variableType: true,
+                oauthGrantType: true,
+                oauthTokenUrl: true,
+                oauthClientId: true,
+                oauthClientSecret: true,
+                oauthRefreshToken: true,
+                oauthScope: true,
+                oauthAdditionalParameters: true,
+                oauthClientAuthenticationMethod: true,
             },
             limit: LIMIT_PER_PROJECT,
             skip: 0,
@@ -116,8 +502,11 @@ export class Service extends DatabaseService {
                 }
             }
         }
+        const carryForward = touchesTypeDependentColumns
+            ? this.applyOAuthUpdateRules(updateBy, itemsBeingUpdated)
+            : null;
         if (!isRename) {
-            return { updateBy, carryForward: null };
+            return { updateBy, carryForward };
         }
         /*
          * Renaming two rows to one name is a conflict the database lookup below
@@ -171,7 +560,7 @@ export class Service extends DatabaseService {
                     : `A global variable named "${newName}" already exists in this project. Global variable names must be unique.`);
             }
         }
-        return { updateBy, carryForward: null };
+        return { updateBy, carryForward };
     }
 }
 export default new Service();

package/build/dist/Server/Services/WorkflowVariableService.js.map

@@ -1 +1 @@
-{"version":3,"file":"WorkflowVariableService.js","sourceRoot":"","sources":["../../../../Server/Services/WorkflowVariableService.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAEhD,OAAO,WAAW,MAAM,+BAA+B,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AAEtE,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,KAAK,MAAM,8CAA8C,CAAC;AAEjE;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACgB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,MAAM,OAAO,GAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAE5C;;;;;;;WAOG;QACH,MAAM,QAAQ,GAAY,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC;QAEpE;;;;;WAKG;QACH,IAAI,QAAQ,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAW,OAAiB,CAAC;QAE1C;;;;;;;;WAQG;QACH,MAAM,eAAe,GACnB,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YACpC,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI;YAC/B,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzC,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QAED;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,QAAQ,GAAyB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAE/D,MAAM,iBAAiB,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACxD,KAAK,EAAE,QAAQ;gBACb,CAAC,iCAAM,QAAQ,CAAC,KAAK,KAAE,SAAS,EAAE,QAAQ,IAC1C,CAAC,CAAC,QAAQ,CAAC,KAAK;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB;YACD,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBACrC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,gBAAgB,CACxB,IAAI,IAAI,CAAC,IAAI,uQAAuQ,CACrR,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QAED;;;;WAIG;QACH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,iBAAiB,CAAC,MAAM,2BAA2B,OAAO,2CAA2C,CACvH,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACrC;;;;eAIG;YACH,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnE,SAAS;YACX,CAAC;YAED;;;;;;eAMG;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,gBAAgB,CACxB,mFAAmF,CACpF,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAW,CAC5B,MAAM,IAAI,CAAC,OAAO,CAAC;gBACjB,KAAK,EAAE;oBACL,IAAI,EAAE,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB;;;;;uBAKG;oBACH,UAAU,EAAE,IAAI,CAAC,UAAU;wBACzB,CAAC,CAAC,IAAI,CAAC,UAAU;wBACjB,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE;oBACxB,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAc,CAAC;iBAChD;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;YAEb,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,gBAAgB,CACxB,IAAI,CAAC,UAAU;oBACb,CAAC,CAAC,8BAA8B,OAAO,qFAAqF;oBAC5H,CAAC,CAAC,4BAA4B,OAAO,yEAAyE,CACjH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;CACF;AACD,eAAe,IAAI,OAAO,EAAE,CAAC"}
+{"version":3,"file":"WorkflowVariableService.js","sourceRoot":"","sources":["../../../../Server/Services/WorkflowVariableService.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAGhD,OAAO,WAAW,MAAM,+BAA+B,CAAC;AAExD,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AAItE,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EACL,2CAA2C,EAC3C,eAAe,EACf,oBAAoB,EACpB,kCAAkC,EAClC,kCAAkC,EAClC,iBAAiB,EACjB,mCAAmC,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,MAAM,8CAA8C,CAAC;AAEjE;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA+B;IAC1E,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,YAAY;IACZ,2BAA2B;IAC3B,iCAAiC;CAClC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAA+B;IACxD,GAAG,gCAAgC;IACnC,gBAAgB;IAChB,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,0BAA0B,GAAe;IAC7C,gBAAgB,EAAE,IAAI;IACtB,yBAAyB,EAAE,IAAI;IAC/B,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,IAAI;IAC3B,uBAAuB,EAAE,IAAI;CAC9B,CAAC;AAOF,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,OAAQ,KAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,YAAY,MAAM,CAAC,EAAE,CAAC;QACjE,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IAED,IAAI,MAAW,CAAC;IAEhB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,IAAI,6BAA6B,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,OAAO,mGAAmG,CAAC;IAC7G,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CACpC,MAAmB,EACnB,KAAc;IAEd,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;QAC3C,MAAM,UAAU,GACd,mCAAmC,CAAC,KAAK,CAAC,CAAC;QAE7C,OAAO,IAAI,CAAC,SAAS,CACnB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;aACpB,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAW,EAAE,EAAE;YACnB,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACgB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,MAAM,IAAI,GAAU,QAAQ,CAAC,IAAI,CAAC;QAClC,MAAM,MAAM,GAA4B,IAGvC,CAAC;QAEF,MAAM,YAAY,GAAY,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YACtD,CAAC,CAAC,oBAAoB,CAAC,MAAM;YAC7B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QAEtB,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAC3C,YAAoC,CACrC,EACD,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,iCAAiC,MAAM,CAAC,MAAM,CAC5C,oBAAoB,CACrB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,YAAoC,CAAC;QAEzD,IAAI,YAAY,KAAK,oBAAoB,CAAC,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;YACpD,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;gBACpC,OAAO,MAAM,CAAC,MAAgB,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CACrE,IAAI,CACL,GAAG,CACL,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAkB,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE1E,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;QAEvD,IACE,OAAO,IAAI,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM;YAC3C,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,GAAI,IAAI,CAAC,aAAwB,CAAC,IAAI,EAAE,CAAC;QAE3D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElD,IACE,IAAI,CAAC,cAAc,KAAK,eAAe,CAAC,iBAAiB;YACzD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,CAAC,YAAY,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,gBAAgB,CACxB,wDAAwD,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpC,kEAAkE;YAClE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YACxC,CAAC,CAAE,IAA0B;YAC7B,CAAC,CAAE,IAAI,CAAC,UAAqB,CAAC,IAAI,EAAE,CAAC;QAEvC,MAAM,eAAe,GAAkB,kCAAkC,CACvE,IAAI,CAAC,yBAAyB,CAC/B,CAAC;QAEF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC;YACtE,CAAC,CAAE,IAA8B;YACjC,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAExE,IAAI,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,+BAA+B;gBAClC,2CAA2C,CAAC;QAChD,CAAC;aAAM,IACL,CAAC,kCAAkC,CAAC,IAAI,CAAC,+BAA+B,CAAC,EACzE,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QAED;;;WAGG;QACH,IAAI,CAAC,QAAQ,GAAG,IAAyB,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAElB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;;OAYG;IACgB,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,cAA+B;QAE/B,MAAM,YAAY,GACf,QAAQ,CAAC,YAA0C,IAAI,IAAI,CAAC;QAE/D,MAAM,eAAe,GAAgB,IAAI,GAAG,CAC1C,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,0BAA0B,KAAI,EAAE,CAC/C,CAAC;QAEF,IAAI,eAAe,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,EAAE;oBACF,oDAAoD;oBACpD,IAAI,EAAE,0BAAsE;oBAC5E,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;wBACZ,WAAW,EAAE,IAAI;qBAClB;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CACV,+DAA+D,EAAE,CAAC,QAAQ,EAAE,gCAC1E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAc,EAAE,KAAa;QACtD,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,EAC9B,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,QAAyB,EACzB,iBAA+B;QAE/B,MAAM,IAAI,GAA4B,QAAQ,CAAC,IAG9C,CAAC;QAEF,MAAM,UAAU,GAAiB,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAW,EAAE,EAAE;YACxE,OAAO,IAAI,CAAC,YAAY,KAAK,oBAAoB,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAiB,iBAAiB,CAAC,MAAM,CACxD,CAAC,IAAW,EAAE,EAAE;YACd,OAAO,IAAI,CAAC,YAAY,KAAK,oBAAoB,CAAC,MAAM,CAAC;QAC3D,CAAC,CACF,CAAC;QAEF,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D;;;;eAIG;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,gBAAgB,CACxB,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,yLAAyL,CACjN,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAuB,cAAc,CAAC,MAAM,CAC/D,CAAC,MAAmB,EAAE,EAAE;YACtB,OAAO,IAAI,CAAC,MAAgB,CAAC,KAAK,SAAS,CAAC;QAC9C,CAAC,CACF,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B;;;;eAIG;YACH,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,MAAgB,CAAC,CAAC;YAChC,CAAC;YAED,OAAO,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CACxB,mIAAmI,CACpI,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,aAAa,GAAkB,gBAAgB,CACnD,IAAI,CAAC,eAAe,CAAC,CACtB,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;YACxC,IACE,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC,MAAM;gBAC9C,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAC9B,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,kDAAkD,CACnD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,GAAI,IAAI,CAAC,eAAe,CAAY,CAAC,IAAI,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC9C,CAAC,CAAC,IAAI;gBACN,CAAC,CAAE,IAAI,CAAC,YAAY,CAAY,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,IAAI,CAAC,2BAA2B,CAAC,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,eAAe,GAAkB,kCAAkC,CACvE,IAAI,CAAC,2BAA2B,CAAC,CAClC,CAAC;YAEF,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,2BAA2B,CAAC,GAAG,OAAO,CACzC,IAAI,CAAC,2BAA2B,CAAC,CAClC;gBACC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,mCAAmC,CACjC,IAAI,CAAC,2BAA2B,CAAC,CAClC,CAAC;QACR,CAAC;QAED,IAAI,IAAI,CAAC,iCAAiC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,iCAAiC,CAAC;oBACrC,2CAA2C,CAAC;YAChD,CAAC;iBAAM,IACL,CAAC,kCAAkC,CACjC,IAAI,CAAC,iCAAiC,CAAC,CACxC,EACD,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,kEAAkE,CACnE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IACE,IAAI,CAAC,mBAAmB,CAAC,KAAK,SAAS;gBACvC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBAClC,IAAI,CAAC,cAAc,KAAK,eAAe,CAAC,iBAAiB,EACzD,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,yBAAyB,IAAI,CAAC,IAAI,8DAA8D,CACjG,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,CAAC,YAAY,EAAE,CAAC;oBACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,gBAAgB,CACxB,IAAI,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,cAAc,6CAA6C,CAC5F,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,gBAAgB,CACxB,yBAAyB,IAAI,CAAC,IAAI,wFAAwF,CAC3H,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IACE,IAAI,CAAC,mBAAmB,CAAC,KAAK,SAAS;YACvC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAClC,CAAC;YACD,qDAAqD;YACrD,IAAI,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC;QACnC,CAAC;QAED,IACE,IAAI,CAAC,mBAAmB,CAAC,KAAK,SAAS;YACvC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAClC,CAAC;YACD,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,0BAA0B,GAAkB,EAAE,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,GAA4B,IAG3C,CAAC;YAEF,MAAM,eAAe,GAAY,gCAAgC,CAAC,IAAI,CACpE,CAAC,MAAmB,EAAE,EAAE;gBACtB,IAAI,IAAI,CAAC,MAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;oBACzC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,OAAO,CACL,6BAA6B,CAAC,MAAM,EAAE,IAAI,CAAC,MAAgB,CAAC,CAAC;oBAC7D,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,MAAgB,CAAC,CAAC,CACpE,CAAC;YACJ,CAAC,CACF,CAAC;YAEF,IAAI,eAAe,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAC/B,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACgB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB;;;;;WAKG;QACH,MAAM,QAAQ,GAAe,QAAQ,CAAC,IAA6B,CAAC;QAEpE,MAAM,OAAO,GAAY,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE1C;;;;;;;WAOG;QACH,MAAM,QAAQ,GAAY,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC;QAEpE;;;;;WAKG;QACH,IAAI,QAAQ,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAW,OAAiB,CAAC;QAE1C;;;;;;;;WAQG;QACH,MAAM,eAAe,GACnB,QAAQ,CAAC,UAAU,CAAC,KAAK,SAAS;YAClC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI;YAC7B,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvC;;;;WAIG;QACH,MAAM,2BAA2B,GAC/B,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;YACjC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAmB,EAAE,EAAE;gBAC1C,OAAO,QAAQ,CAAC,MAAgB,CAAC,KAAK,SAAS,CAAC;YAClD,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAClE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QAED;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,QAAQ,GAAyB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAE/D,MAAM,iBAAiB,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACxD,KAAK,EAAE,QAAQ;gBACb,CAAC,iCAAM,QAAQ,CAAC,KAAK,KAAE,SAAS,EAAE,QAAQ,IAC1C,CAAC,CAAC,QAAQ,CAAC,KAAK;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,IAAI;gBACpB,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,IAAI;gBACnB,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,IAAI;gBACvB,UAAU,EAAE,IAAI;gBAChB,yBAAyB,EAAE,IAAI;gBAC/B,+BAA+B,EAAE,IAAI;aACtC;YACD,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBACrC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,gBAAgB,CACxB,IAAI,IAAI,CAAC,IAAI,uQAAuQ,CACrR,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAA8B,2BAA2B;YACzE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,CAAC;YACzD,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACpC,CAAC;QAED;;;;WAIG;QACH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,iBAAiB,CAAC,MAAM,2BAA2B,OAAO,2CAA2C,CACvH,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACrC;;;;eAIG;YACH,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnE,SAAS;YACX,CAAC;YAED;;;;;;eAMG;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,gBAAgB,CACxB,mFAAmF,CACpF,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAW,CAC5B,MAAM,IAAI,CAAC,OAAO,CAAC;gBACjB,KAAK,EAAE;oBACL,IAAI,EAAE,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB;;;;;uBAKG;oBACH,UAAU,EAAE,IAAI,CAAC,UAAU;wBACzB,CAAC,CAAC,IAAI,CAAC,UAAU;wBACjB,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE;oBACxB,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAc,CAAC;iBAChD;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;YAEb,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,gBAAgB,CACxB,IAAI,CAAC,UAAU;oBACb,CAAC,CAAC,8BAA8B,OAAO,qFAAqF;oBAC5H,CAAC,CAAC,4BAA4B,OAAO,yEAAyE,CACjH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;CACF;AACD,eAAe,IAAI,OAAO,EAAE,CAAC"}