@oneuptime/common 14.0.10 → 14.0.12

package/build/dist/Server/Middleware/McpDelegationAuthorization.js

@@ -0,0 +1,138 @@
+import AccessTokenService from "../Services/AccessTokenService";
+import ProjectService from "../Services/ProjectService";
+import TeamMemberService from "../Services/TeamMemberService";
+import UserService from "../Services/UserService";
+import McpDelegationToken from "../Utils/Mcp/McpDelegationToken";
+import McpOAuthConfig from "../Utils/Mcp/McpOAuthConfig";
+import Response from "../Utils/Response";
+import SpanUtil from "../Utils/Telemetry/SpanUtil";
+import BadDataException from "../../Types/Exception/BadDataException";
+import ExceptionMessages from "../../Types/Exception/ExceptionMessages";
+import NotAuthenticatedException from "../../Types/Exception/NotAuthenticatedException";
+import Name from "../../Types/Name";
+import UserType from "../../Types/UserType";
+/*
+ * How the API recognises a request the MCP server is making for a member who
+ * connected an MCP client with OAuth (see McpDelegationToken for why the
+ * client's own access token never reaches the API).
+ *
+ * The request is authorized AS THE MEMBER, in the one project the grant is
+ * for:
+ *
+ *   - the tenant is the grant's project, whatever `tenantid` or `projectid`
+ *     the request happens to carry - the same rule an API key gets, where the
+ *     project comes from the credential and never from the caller;
+ *   - the permissions are the member's own, read here from their teams on
+ *     every request, so a role change or a removal from the project applies
+ *     to the very next tool call;
+ *   - it is a User request, never a MasterAdmin one, even when the member is
+ *     a master admin. An agent acting for an instance administrator gets what
+ *     that person's teams grant in the project and nothing more;
+ *   - a grant that carries read access only is marked read-only, and the
+ *     permission layer then refuses every create, update and delete it makes,
+ *     whatever the member's own permissions allow.
+ *
+ * Everything about the GRANT - that it exists, has not been revoked or
+ * expired, still satisfies the project's SSO rules - was checked by the MCP
+ * server before it minted the token, a moment ago, and is not asked again
+ * here. What is asked again is the little that could matter for an API call
+ * and costs nothing to ask: the token verifies, and the member is not blocked.
+ */
+const MULTI_TENANT_QUERY_HEADER = "is-multi-tenant-query";
+const API_KEY_HEADER = "apikey";
+const INVALID_DELEGATION_MESSAGE = "The MCP delegation token is invalid or has expired.";
+export default class McpDelegationAuthorization {
+    /*
+     * Presence, not validity - the reading ProjectMiddleware.hasApiKey makes of
+     * its own header, for the same reason: a request that carries the header is
+     * a caller attempting this kind of authentication, and it must be answered
+     * as that (a 401 saying so) rather than fall through to another credential
+     * or to the anonymous path.
+     */
+    static hasDelegationToken(req) {
+        var _a;
+        return ((_a = req.headers) === null || _a === void 0 ? void 0 : _a[McpDelegationToken.HEADER_NAME]) !== undefined;
+    }
+    static async authorize(req, res, next) {
+        const oneuptimeRequest = req;
+        try {
+            if (!McpOAuthConfig.isEnabled()) {
+                throw new NotAuthenticatedException(INVALID_DELEGATION_MESSAGE);
+            }
+            /*
+             * Two credentials on one request is never something the MCP server
+             * sends. Refusing it outright means there is no order of precedence to
+             * get wrong.
+             */
+            if (req.headers[API_KEY_HEADER] !== undefined) {
+                throw new BadDataException("A request cannot carry both an API key and an MCP delegation token.");
+            }
+            const rawToken = req.headers[McpDelegationToken.HEADER_NAME];
+            const claims = McpDelegationToken.verify(Array.isArray(rawToken) ? undefined : rawToken);
+            if (!claims) {
+                throw new NotAuthenticatedException(INVALID_DELEGATION_MESSAGE);
+            }
+            if (await UserService.isUserBlocked(claims.userId)) {
+                throw new NotAuthenticatedException(ExceptionMessages.UserBlocked);
+            }
+            /*
+             * A delegated request is for exactly one project. Dropping the header
+             * (rather than merely not setting the flag) keeps every later reader of
+             * the raw request from widening it.
+             */
+            delete req.headers[MULTI_TENANT_QUERY_HEADER];
+            oneuptimeRequest.tenantId = claims.projectId;
+            oneuptimeRequest.userType = UserType.User;
+            oneuptimeRequest.userAuthorization = {
+                userId: claims.userId,
+                email: claims.userEmail,
+                name: new Name(claims.userName),
+                isMasterAdmin: false,
+                isGlobalLogin: false,
+            };
+            oneuptimeRequest.mcpOAuth = {
+                grantId: claims.grantId,
+                clientId: claims.clientId,
+                clientName: claims.clientName,
+                isReadOnly: !claims.canWrite,
+            };
+            SpanUtil.addAttributesToCurrentSpan(Object.assign({ userId: claims.userId.toString(), userType: UserType.User, projectId: claims.projectId.toString(), mcpOAuthGrantId: claims.grantId.toString() }, (oneuptimeRequest.requestId
+                ? { requestId: oneuptimeRequest.requestId }
+                : {})));
+            // Fire-and-forget, debounced inside each service - as for a session.
+            void ProjectService.updateLastActive(claims.projectId);
+            void UserService.updateLastActive(claims.userId);
+            const userGlobalAccessPermissionPromise = AccessTokenService.getUserGlobalAccessPermission(claims.userId);
+            const [userGlobalAccessPermission, userTenantAccessPermission, userTeamIds,] = await Promise.all([
+                userGlobalAccessPermissionPromise,
+                AccessTokenService.getUserTenantAccessPermission(claims.userId, claims.projectId, { userGlobalAccessPermission: userGlobalAccessPermissionPromise }),
+                TeamMemberService.getTeamIdsForUser(claims.userId, claims.projectId),
+            ]);
+            /*
+             * No permission set means the member has left the project since the MCP
+             * server looked. Without this the request would carry on with no tenant
+             * permissions at all and fail later as a puzzling per-model refusal.
+             */
+            if (!userTenantAccessPermission) {
+                throw new NotAuthenticatedException("You are no longer a member of the project this MCP client is connected to.");
+            }
+            if (userGlobalAccessPermission) {
+                /*
+                 * The global permission lists every project the member belongs to.
+                 * This request is for one of them, so that is all it is told about.
+                 */
+                oneuptimeRequest.userGlobalAccessPermission = Object.assign(Object.assign({}, userGlobalAccessPermission), { projectIds: [claims.projectId] });
+            }
+            oneuptimeRequest.userTenantAccessPermission = {
+                [claims.projectId.toString()]: userTenantAccessPermission,
+            };
+            oneuptimeRequest.userTeamIds = userTeamIds;
+            return next();
+        }
+        catch (err) {
+            SpanUtil.recordExceptionOnCurrentSpan(err);
+            return Response.sendErrorResponse(req, res, err);
+        }
+    }
+}
+//# sourceMappingURL=McpDelegationAuthorization.js.map

package/build/dist/Server/Middleware/McpDelegationAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpDelegationAuthorization.js","sourceRoot":"","sources":["../../../../Server/Middleware/McpDelegationAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,gCAAgC,CAAC;AAChE,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAOlD,OAAO,kBAEN,MAAM,iCAAiC,CAAC;AACzC,OAAO,cAAc,MAAM,6BAA6B,CAAC;AACzD,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AACnD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AAEtE,OAAO,iBAAiB,MAAM,yCAAyC,CAAC;AACxE,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAMpC,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,yBAAyB,GAAW,uBAAuB,CAAC;AAClE,MAAM,cAAc,GAAW,QAAQ,CAAC;AAExC,MAAM,0BAA0B,GAC9B,qDAAqD,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,0BAA0B;IAC7C;;;;;;OAMG;IACI,MAAM,CAAC,kBAAkB,CAAC,GAAmB;;QAClD,OAAO,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAG,kBAAkB,CAAC,WAAW,CAAC,MAAK,SAAS,CAAC;IACrE,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,SAAS,CAC3B,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;QAEnE,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,yBAAyB,CAAC,0BAA0B,CAAC,CAAC;YAClE,CAAC;YAED;;;;eAIG;YACH,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,gBAAgB,CACxB,qEAAqE,CACtE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GACZ,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAE9C,MAAM,MAAM,GAA+B,kBAAkB,CAAC,MAAM,CAClE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAC/C,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,yBAAyB,CAAC,0BAA0B,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,MAAM,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACrE,CAAC;YAED;;;;eAIG;YACH,OAAO,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAE9C,gBAAgB,CAAC,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;YAC7C,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC1C,gBAAgB,CAAC,iBAAiB,GAAG;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC/B,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,KAAK;aACrB,CAAC;YACF,gBAAgB,CAAC,QAAQ,GAAG;gBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,CAAC,MAAM,CAAC,QAAQ;aAC7B,CAAC;YAEF,QAAQ,CAAC,0BAA0B,iBACjC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAChC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EACvB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EACtC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IACvC,CAAC,gBAAgB,CAAC,SAAS;gBAC5B,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC,EACP,CAAC;YAEH,qEAAqE;YACrE,KAAK,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvD,KAAK,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEjD,MAAM,iCAAiC,GACrC,kBAAkB,CAAC,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAElE,MAAM,CACJ,0BAA0B,EAC1B,0BAA0B,EAC1B,WAAW,EACZ,GAIG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpB,iCAAiC;gBACjC,kBAAkB,CAAC,6BAA6B,CAC9C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,EAChB,EAAE,0BAA0B,EAAE,iCAAiC,EAAE,CAClE;gBACD,iBAAiB,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;aACrE,CAAC,CAAC;YAEH;;;;eAIG;YACH,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAChC,MAAM,IAAI,yBAAyB,CACjC,4EAA4E,CAC7E,CAAC;YACJ,CAAC;YAED,IAAI,0BAA0B,EAAE,CAAC;gBAC/B;;;mBAGG;gBACH,gBAAgB,CAAC,0BAA0B,mCACtC,0BAA0B,KAC7B,UAAU,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,GAC/B,CAAC;YACJ,CAAC;YAED,gBAAgB,CAAC,0BAA0B,GAAG;gBAC5C,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,0BAA0B;aAC1D,CAAC;YACF,gBAAgB,CAAC,WAAW,GAAG,WAAW,CAAC;YAE3C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAgB,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;CACF"}

package/build/dist/Server/Middleware/McpOAuthRateLimit.js

@@ -0,0 +1,191 @@
+import Redis from "../Infrastructure/Redis";
+import resolveTrustedClientIp from "../Utils/ClientIp";
+import logger from "../Utils/Logger";
+/*
+ * Rate limiting for the MCP authorization server's endpoints
+ * (/mcp/oauth/...).
+ *
+ * All of them answer callers nobody has identified yet, and each can be made
+ * to do something on request: registration writes a row, authorization can
+ * trigger an outbound fetch of a client metadata document, the token and
+ * revocation endpoints look a secret up, the consent endpoints read a
+ * member's projects. None of the secrets involved can be guessed - they are
+ * 256 bits - so this is load control, not the thing standing between an
+ * attacker and a token.
+ *
+ * One fixed-window counter per bucket per client address, the shape the
+ * on-call calendar feed limiter uses. The budgets are fixed rather than
+ * configurable: they are sized so that no real client comes near them even
+ * with a whole office behind one address (a connected client exchanges a
+ * token about once an hour), and an operator who has to tune them has a
+ * problem a number will not fix.
+ */
+export var McpOAuthRateLimitBucket;
+(function (McpOAuthRateLimitBucket) {
+    // Opening the consent flow. May fetch a client metadata document.
+    McpOAuthRateLimitBucket["Authorize"] = "authorize";
+    // Code exchange and refresh.
+    McpOAuthRateLimitBucket["Token"] = "token";
+    // Dynamic client registration: an anonymous database write.
+    McpOAuthRateLimitBucket["Register"] = "register";
+    McpOAuthRateLimitBucket["Revoke"] = "revoke";
+    // The consent screen's own calls, made with a member's session.
+    McpOAuthRateLimitBucket["Consent"] = "consent";
+})(McpOAuthRateLimitBucket || (McpOAuthRateLimitBucket = {}));
+export var McpOAuthRateLimitOutcome;
+(function (McpOAuthRateLimitOutcome) {
+    McpOAuthRateLimitOutcome["Allowed"] = "allowed";
+    McpOAuthRateLimitOutcome["RateLimited"] = "rate-limited";
+    /* Redis is unreachable, so no limit can be honoured either way. */
+    McpOAuthRateLimitOutcome["CounterUnavailable"] = "counter-unavailable";
+})(McpOAuthRateLimitOutcome || (McpOAuthRateLimitOutcome = {}));
+const WINDOW_SECONDS = 15 * 60;
+const BUCKET_CONFIG = {
+    [McpOAuthRateLimitBucket.Authorize]: {
+        windowSeconds: WINDOW_SECONDS,
+        limit: 300,
+        failClosed: false,
+    },
+    [McpOAuthRateLimitBucket.Token]: {
+        windowSeconds: WINDOW_SECONDS,
+        limit: 1200,
+        failClosed: false,
+    },
+    [McpOAuthRateLimitBucket.Register]: {
+        windowSeconds: WINDOW_SECONDS,
+        limit: 60,
+        failClosed: true,
+    },
+    [McpOAuthRateLimitBucket.Revoke]: {
+        windowSeconds: WINDOW_SECONDS,
+        limit: 600,
+        failClosed: false,
+    },
+    [McpOAuthRateLimitBucket.Consent]: {
+        windowSeconds: WINDOW_SECONDS,
+        limit: 600,
+        failClosed: false,
+    },
+};
+const KEY_PREFIX = "mcpoauth:rl:";
+/*
+ * Counter keys outlive their window by one full window, so a request landing
+ * on a boundary cannot read a key that was reclaimed mid-window.
+ */
+const TTL_MULTIPLIER = 2;
+/* Bounds a Redis key built from a caller-influenced address. */
+const MAX_KEY_SEGMENT_LENGTH = 64;
+/* How often the "counter unavailable" condition may be logged. */
+const COUNTER_UNAVAILABLE_LOG_INTERVAL_MS = 60 * 1000;
+class McpOAuthRateLimit {
+    static getLimit(bucket) {
+        return BUCKET_CONFIG[bucket].limit;
+    }
+    /*
+     * The client address to bill this request to: read from the trusted end of
+     * X-Forwarded-For under TRUSTED_PROXY_HOPS, never the leftmost entry, which
+     * the caller writes themselves - a spoofed value per request would be a
+     * fresh bucket per request and no limit at all.
+     */
+    static resolveClientIp(req) {
+        const clientIp = resolveTrustedClientIp(req);
+        if (!clientIp) {
+            // Unidentifiable callers share one bucket: the conservative direction.
+            return "unknown";
+        }
+        return clientIp
+            .slice(0, MAX_KEY_SEGMENT_LENGTH)
+            .replace(/[^a-zA-Z0-9._:%\-[\]]/g, "_");
+    }
+    static async consume(data) {
+        const client = Redis.getClient();
+        if (!client || !Redis.isConnected()) {
+            return { outcome: McpOAuthRateLimitOutcome.CounterUnavailable };
+        }
+        const config = BUCKET_CONFIG[data.bucket];
+        const windowMs = config.windowSeconds * 1000;
+        const windowIndex = Math.floor(Date.now() / windowMs);
+        const counterKey = `${KEY_PREFIX}${data.bucket}:${data.clientIp}:${windowIndex}`;
+        try {
+            const count = await client.incr(counterKey);
+            if (typeof count !== "number") {
+                throw new Error("Rate limit counter returned a non-numeric value");
+            }
+            /*
+             * The expiry is set only by the write that created the key. Re-issuing
+             * it on every increment would slide the window for as long as the load
+             * continued, and a caller that tripped the limit once could never
+             * recover.
+             */
+            if (count === 1) {
+                await client.expire(counterKey, config.windowSeconds * TTL_MULTIPLIER);
+            }
+            if (count > config.limit) {
+                return {
+                    outcome: McpOAuthRateLimitOutcome.RateLimited,
+                    retryAfterSeconds: Math.max(1, Math.ceil((windowMs - (Date.now() % windowMs)) / 1000)),
+                    isFirstRejectionInWindow: count === config.limit + 1,
+                };
+            }
+            return { outcome: McpOAuthRateLimitOutcome.Allowed };
+        }
+        catch (err) {
+            if (McpOAuthRateLimit.shouldLogCounterUnavailable()) {
+                logger.warn(`McpOAuthRateLimit: counter failed for a ${data.bucket} request from ${data.clientIp}`);
+                logger.warn(err);
+            }
+            return { outcome: McpOAuthRateLimitOutcome.CounterUnavailable };
+        }
+    }
+    /*
+     * Express middleware for one bucket. `onRejected` writes the refusal,
+     * because the endpoints do not share a body format: the OAuth ones answer
+     * `{ error, error_description }`, the consent ones the API's `{ message }`.
+     */
+    static getMiddleware(bucket, onRejected) {
+        return async (req, res, next) => {
+            const clientIp = McpOAuthRateLimit.resolveClientIp(req);
+            const decision = await McpOAuthRateLimit.consume({ bucket, clientIp });
+            if (decision.outcome === McpOAuthRateLimitOutcome.RateLimited) {
+                if (decision.retryAfterSeconds) {
+                    res.setHeader("Retry-After", String(decision.retryAfterSeconds));
+                }
+                // One line per address per window, not one per refused request.
+                if (decision.isFirstRejectionInWindow) {
+                    logger.warn(`McpOAuthRateLimit: rejected ${bucket} requests from ${clientIp}`);
+                }
+                return onRejected({
+                    req,
+                    res,
+                    statusCode: 429,
+                    retryAfterSeconds: decision.retryAfterSeconds,
+                });
+            }
+            if (decision.outcome === McpOAuthRateLimitOutcome.CounterUnavailable) {
+                if (BUCKET_CONFIG[bucket].failClosed) {
+                    return onRejected({ req, res, statusCode: 503 });
+                }
+                if (McpOAuthRateLimit.shouldLogCounterUnavailable()) {
+                    logger.warn(`McpOAuthRateLimit: rate limit counter unavailable, allowing ${bucket} requests unthrottled`);
+                }
+            }
+            return next();
+        };
+    }
+    /*
+     * A Redis outage sends EVERY request down the unavailable path, so an
+     * unguarded log line there is one per request for as long as it lasts.
+     */
+    static shouldLogCounterUnavailable() {
+        const now = Date.now();
+        if (now - McpOAuthRateLimit.counterUnavailableLastLoggedAt <
+            COUNTER_UNAVAILABLE_LOG_INTERVAL_MS) {
+            return false;
+        }
+        McpOAuthRateLimit.counterUnavailableLastLoggedAt = now;
+        return true;
+    }
+}
+McpOAuthRateLimit.counterUnavailableLastLoggedAt = 0;
+export default McpOAuthRateLimit;
+//# sourceMappingURL=McpOAuthRateLimit.js.map

package/build/dist/Server/Middleware/McpOAuthRateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpOAuthRateLimit.js","sourceRoot":"","sources":["../../../../Server/Middleware/McpOAuthRateLimit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAqB,MAAM,yBAAyB,CAAC;AAC5D,OAAO,sBAA+C,MAAM,mBAAmB,CAAC;AAMhF,OAAO,MAAM,MAAM,iBAAiB,CAAC;AAErC;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,CAAN,IAAY,uBAcX;AAdD,WAAY,uBAAuB;IACjC,kEAAkE;IAClE,kDAAuB,CAAA;IAEvB,6BAA6B;IAC7B,0CAAe,CAAA;IAEf,4DAA4D;IAC5D,gDAAqB,CAAA;IAErB,4CAAiB,CAAA;IAEjB,gEAAgE;IAChE,8CAAmB,CAAA;AACrB,CAAC,EAdW,uBAAuB,KAAvB,uBAAuB,QAclC;AAED,MAAM,CAAN,IAAY,wBAMX;AAND,WAAY,wBAAwB;IAClC,+CAAmB,CAAA;IACnB,wDAA4B,CAAA;IAE5B,mEAAmE;IACnE,sEAA0C,CAAA;AAC5C,CAAC,EANW,wBAAwB,KAAxB,wBAAwB,QAMnC;AAuBD,MAAM,cAAc,GAAW,EAAE,GAAG,EAAE,CAAC;AAEvC,MAAM,aAAa,GAAkD;IACnE,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE;QACnC,aAAa,EAAE,cAAc;QAC7B,KAAK,EAAE,GAAG;QACV,UAAU,EAAE,KAAK;KAClB;IACD,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE;QAC/B,aAAa,EAAE,cAAc;QAC7B,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;KAClB;IACD,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE;QAClC,aAAa,EAAE,cAAc;QAC7B,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,IAAI;KACjB;IACD,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE;QAChC,aAAa,EAAE,cAAc;QAC7B,KAAK,EAAE,GAAG;QACV,UAAU,EAAE,KAAK;KAClB;IACD,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE;QACjC,aAAa,EAAE,cAAc;QAC7B,KAAK,EAAE,GAAG;QACV,UAAU,EAAE,KAAK;KAClB;CACF,CAAC;AAEF,MAAM,UAAU,GAAW,cAAc,CAAC;AAE1C;;;GAGG;AACH,MAAM,cAAc,GAAW,CAAC,CAAC;AAEjC,gEAAgE;AAChE,MAAM,sBAAsB,GAAW,EAAE,CAAC;AAE1C,kEAAkE;AAClE,MAAM,mCAAmC,GAAW,EAAE,GAAG,IAAI,CAAC;AAS9D,MAAqB,iBAAiB;IAG7B,MAAM,CAAC,QAAQ,CAAC,MAA+B;QACpD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,eAAe,CAAC,GAAmB;QAC/C,MAAM,QAAQ,GAAuB,sBAAsB,CACzD,GAAqC,CACtC,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,uEAAuE;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ;aACZ,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;aAChC,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAG3B;QACC,MAAM,MAAM,GAAsB,KAAK,CAAC,SAAS,EAAE,CAAC;QAEpD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,kBAAkB,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAiB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAW,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QACrD,MAAM,WAAW,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAW,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;QAEzF,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAErD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YAED;;;;;eAKG;YACH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,GAAG,cAAc,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,wBAAwB,CAAC,WAAW;oBAC7C,iBAAiB,EAAE,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CACvD;oBACD,wBAAwB,EAAE,KAAK,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC;iBACrD,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,iBAAiB,CAAC,2BAA2B,EAAE,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CACT,2CAA2C,IAAI,CAAC,MAAM,iBAAiB,IAAI,CAAC,QAAQ,EAAE,CACvF,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,kBAAkB,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,aAAa,CACzB,MAA+B,EAC/B,UAA6C;QAM7C,OAAO,KAAK,EACV,GAAmB,EACnB,GAAoB,EACpB,IAAkB,EACH,EAAE;YACjB,MAAM,QAAQ,GAAW,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAEhE,MAAM,QAAQ,GACZ,MAAM,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAExD,IAAI,QAAQ,CAAC,OAAO,KAAK,wBAAwB,CAAC,WAAW,EAAE,CAAC;gBAC9D,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;oBAC/B,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACnE,CAAC;gBAED,gEAAgE;gBAChE,IAAI,QAAQ,CAAC,wBAAwB,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CACT,+BAA+B,MAAM,kBAAkB,QAAQ,EAAE,CAClE,CAAC;gBACJ,CAAC;gBAED,OAAO,UAAU,CAAC;oBAChB,GAAG;oBACH,GAAG;oBACH,UAAU,EAAE,GAAG;oBACf,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;iBAC9C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,CAAC,OAAO,KAAK,wBAAwB,CAAC,kBAAkB,EAAE,CAAC;gBACrE,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;oBACrC,OAAO,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAED,IAAI,iBAAiB,CAAC,2BAA2B,EAAE,EAAE,CAAC;oBACpD,MAAM,CAAC,IAAI,CACT,+DAA+D,MAAM,uBAAuB,CAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,2BAA2B;QACxC,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,IACE,GAAG,GAAG,iBAAiB,CAAC,8BAA8B;YACtD,mCAAmC,EACnC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iBAAiB,CAAC,8BAA8B,GAAG,GAAG,CAAC;QAEvD,OAAO,IAAI,CAAC;IACd,CAAC;;AA/Jc,gDAA8B,GAAW,CAAC,CAAC;eADvC,iBAAiB"}

package/build/dist/Server/Middleware/ProjectAuthorization.js

@@ -16,7 +16,7 @@ import UserType from "../../Types/UserType";
 import APIKeyAccessPermission from "../Utils/APIKey/AccessPermission";
 import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
 import SpanUtil from "../Utils/Telemetry/SpanUtil";
-export default class ProjectMiddleware {
+class ProjectMiddleware {
     static getProjectId(req) {
         let projectId = null;
         if (req.params && req.params["projectId"]) {
@@ -163,6 +163,15 @@ export default class ProjectMiddleware {
                 tenantId = apiKeyRow.projectId;
                 req.tenantId = tenantId;
                 req.userType = UserType.API;
+                /*
+                 * Which key this is, for the audit trail. A key request carries no
+                 * userId, so these two are the only thing that lets an audit entry
+                 * tell one key's changes from another's. Nothing below reads them.
+                 */
+                req.apiKeyId = apiKeyRow.id;
+                if (apiKeyRow.name) {
+                    req.apiKeyName = apiKeyRow.name;
+                }
                 /*
                  * The two halves of an API key's authority. The global half is the
                  * fixed marker set every key carries (see APIKeyAccessPermission); the
@@ -186,6 +195,8 @@ export default class ProjectMiddleware {
                 const isMasterApiKey = await ProjectMiddleware.isMasterApiKey(apiKey);
                 if (isMasterApiKey) {
                     req.userType = UserType.MasterAdmin;
+                    req.apiKeyName =
+                        ProjectMiddleware.MASTER_API_KEY_AUDIT_NAME;
                     // get master admin user
                     const user = await UserService.findOneBy({
                         query: {
@@ -238,6 +249,14 @@ export default class ProjectMiddleware {
         }
     }
 }
+/*
+ * What the audit trail calls the instance-wide master API key. It has no
+ * row in ApiKey - it is a column on GlobalConfig - so there is no id or
+ * name to record, and without a label a change made with it reads as the
+ * master admin user having made it by hand.
+ */
+ProjectMiddleware.MASTER_API_KEY_AUDIT_NAME = "Master API Key";
+export default ProjectMiddleware;
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),

package/build/dist/Server/Middleware/ProjectAuthorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectAuthorization.js","sourceRoot":"","sources":["../../../../Server/Middleware/ProjectAuthorization.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAAa,MAAM,2BAA2B,CAAC;AACtD,OAAO,mBAAmB,MAAM,iCAAiC,CAAC;AAClE,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAQlD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAG5C,OAAO,sBAAsB,MAAM,kCAAkC,CAAC;AACtE,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,iBAAiB;IAEtB,AAAP,MAAM,CAAC,YAAY,CAAC,GAAmB;QAC5C,IAAI,SAAS,GAAoB,IAAI,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAW,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,yDAAyD;YACzD,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAW,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,yDAAyD;YACzD,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAW,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAmB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,kBAAkB,CAAC,GAAmB;;QACnD,MAAM,SAAS,GACb,MAAA,GAAG,CAAC,OAAO,0CAAG,QAAQ,CAAC,CAAC;QAE1B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAGa,AAAP,MAAM,CAAC,SAAS,CAAC,GAAmB;QACzC,MAAM,SAAS,GAAkB,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE3E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAW,SAAS,CAAC,IAAI,EAAE,CAAC;QAExC;;;;;;WAMG;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IAEW,AAAP,MAAM,CAAC,SAAS,CAAC,GAAmB;QACzC,OAAO,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAC5D,CAAC;IAGa,AAAP,MAAM,CAAC,YAAY,CAAC,GAAmB;QAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAgB;QACjD;;;;;WAKG;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,qBAAqB,GACzB,MAAM,mBAAmB,CAAC,SAAS,CAAC;YAClC,KAAK,EAAE;gBACL,GAAG,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE;gBAC1C,qBAAqB,EAAE,IAAI;gBAC3B,YAAY,EAAE,MAAM;aACrB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;aACV;SACF,CAAC,CAAC;QAEL,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,mCAAmC,CACrD,GAAmB,EACnB,IAAqB,EACrB,IAAkB;QAElB,IAAI,CAAC;YACH,IAAI,QAAQ,GAAoB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAoB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAEpD,IAAI,QAAQ,EAAE,CAAC;gBACZ,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAE9C,8DAA8D;gBAC9D,QAAQ,CAAC,0BAA0B,CAAC;oBAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ;;;;;;mBAMG;gBACH,IAAI,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;gBAChD,CAAC;gBAED,MAAM,IAAI,gBAAgB,CACxB,gGAAgG,CACjG,CAAC;YACJ,CAAC;YAED;;;eAGG;YACH,MAAM,SAAS,GACb,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAEzC,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC;gBAE9B,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC7C,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC;gBAElD;;;;;;;mBAOG;gBACF,GAAwB,CAAC,0BAA0B;oBAClD,MAAM,sBAAsB,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;gBAEvE,MAAM,0BAA0B,GAC9B,MAAM,sBAAsB,CAAC,4BAA4B,CACvD,QAAQ,EACR,SAAS,CAAC,EAAE,CACb,CAAC;gBAEJ,IAAI,0BAA0B,EAAE,CAAC;oBAC9B,GAAwB,CAAC,0BAA0B,GAAG,EAAE,CAAC;oBAEvD,GAAwB;yBACtB,0BACJ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;oBAEpD,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,oBAAoB;gBACpB,MAAM,cAAc,GAClB,MAAM,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAEjD,IAAI,cAAc,EAAE,CAAC;oBAClB,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;oBAE1D,wBAAwB;oBAExB,MAAM,IAAI,GAAgB,MAAM,WAAW,CAAC,SAAS,CAAC;wBACpD,KAAK,EAAE;4BACL,aAAa,EAAE,IAAI;yBACpB;wBACD,MAAM,EAAE;4BACN,GAAG,EAAE,IAAI;4BACT,KAAK,EAAE,IAAI;4BACX,IAAI,EAAE,IAAI;yBACX;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,IAAI,gBAAgB,CACxB,qFAAqF,CACtF,CAAC;oBACJ,CAAC;oBAEA,GAAwB,CAAC,iBAAiB,GAAG;wBAC5C,MAAM,EAAE,IAAI,CAAC,EAAG;wBAChB,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAM;wBAClB,IAAI,EAAE,IAAI,CAAC,IAAK;wBAChB,aAAa,EAAE,IAAI;qBACpB,CAAC;oBAEF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,6DAA6D;gBAC7D,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,gBAAgB,CACxB,4CAA4C,CAC7C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb;;;;;;;;;eASG;YACH,QAAQ,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAnRe;IADb,WAAW,EAAE;;;;2CAoBb;AAuBa;IADb,WAAW,EAAE;;;;wCAsBb;AAmBa;IADb,WAAW,EAAE;;;;wCAGb;AAGa;IADb,WAAW,EAAE;;;;2CAGb;AAUmB;IADnB,WAAW,EAAE;;qCAC6B,QAAQ;;6CA2BlD;AAGmB;IADnB,WAAW,EAAE;;;;kEAkJb"}
+{"version":3,"file":"ProjectAuthorization.js","sourceRoot":"","sources":["../../../../Server/Middleware/ProjectAuthorization.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAAiC,MAAM,2BAA2B,CAAC;AAC1E,OAAO,mBAAmB,MAAM,iCAAiC,CAAC;AAClE,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAQlD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAG5C,OAAO,sBAAsB,MAAM,kCAAkC,CAAC;AACtE,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AAEnD,MAAqB,iBAAiB;IAUtB,AAAP,MAAM,CAAC,YAAY,CAAC,GAAmB;QAC5C,IAAI,SAAS,GAAoB,IAAI,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAW,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,yDAAyD;YACzD,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAW,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,yDAAyD;YACzD,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAW,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,SAAS,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAmB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,kBAAkB,CAAC,GAAmB;;QACnD,MAAM,SAAS,GACb,MAAA,GAAG,CAAC,OAAO,0CAAG,QAAQ,CAAC,CAAC;QAE1B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAGa,AAAP,MAAM,CAAC,SAAS,CAAC,GAAmB;QACzC,MAAM,SAAS,GAAkB,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE3E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAW,SAAS,CAAC,IAAI,EAAE,CAAC;QAExC;;;;;;WAMG;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IAEW,AAAP,MAAM,CAAC,SAAS,CAAC,GAAmB;QACzC,OAAO,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAC5D,CAAC;IAGa,AAAP,MAAM,CAAC,YAAY,CAAC,GAAmB;QAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAgB;QACjD;;;;;WAKG;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,qBAAqB,GACzB,MAAM,mBAAmB,CAAC,SAAS,CAAC;YAClC,KAAK,EAAE;gBACL,GAAG,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE;gBAC1C,qBAAqB,EAAE,IAAI;gBAC3B,YAAY,EAAE,MAAM;aACrB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;aACV;SACF,CAAC,CAAC;QAEL,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,mCAAmC,CACrD,GAAmB,EACnB,IAAqB,EACrB,IAAkB;QAElB,IAAI,CAAC;YACH,IAAI,QAAQ,GAAoB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAoB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAEpD,IAAI,QAAQ,EAAE,CAAC;gBACZ,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAE9C,8DAA8D;gBAC9D,QAAQ,CAAC,0BAA0B,CAAC;oBAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ;;;;;;mBAMG;gBACH,IAAI,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;gBAChD,CAAC;gBAED,MAAM,IAAI,gBAAgB,CACxB,gGAAgG,CACjG,CAAC;YACJ,CAAC;YAED;;;eAGG;YACH,MAAM,SAAS,GACb,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAEzC,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC;gBAE9B,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC7C,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC;gBAElD;;;;mBAIG;gBACF,GAAwB,CAAC,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC;gBAElD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;oBAClB,GAAwB,CAAC,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC;gBACxD,CAAC;gBAED;;;;;;;mBAOG;gBACF,GAAwB,CAAC,0BAA0B;oBAClD,MAAM,sBAAsB,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;gBAEvE,MAAM,0BAA0B,GAC9B,MAAM,sBAAsB,CAAC,4BAA4B,CACvD,QAAQ,EACR,SAAS,CAAC,EAAE,CACb,CAAC;gBAEJ,IAAI,0BAA0B,EAAE,CAAC;oBAC9B,GAAwB,CAAC,0BAA0B,GAAG,EAAE,CAAC;oBAEvD,GAAwB;yBACtB,0BACJ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,0BAA0B,CAAC;oBAEpD,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,oBAAoB;gBACpB,MAAM,cAAc,GAClB,MAAM,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAEjD,IAAI,cAAc,EAAE,CAAC;oBAClB,GAAwB,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;oBACzD,GAAwB,CAAC,UAAU;wBAClC,iBAAiB,CAAC,yBAAyB,CAAC;oBAE9C,wBAAwB;oBAExB,MAAM,IAAI,GAAgB,MAAM,WAAW,CAAC,SAAS,CAAC;wBACpD,KAAK,EAAE;4BACL,aAAa,EAAE,IAAI;yBACpB;wBACD,MAAM,EAAE;4BACN,GAAG,EAAE,IAAI;4BACT,KAAK,EAAE,IAAI;4BACX,IAAI,EAAE,IAAI;yBACX;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,IAAI,gBAAgB,CACxB,qFAAqF,CACtF,CAAC;oBACJ,CAAC;oBAEA,GAAwB,CAAC,iBAAiB,GAAG;wBAC5C,MAAM,EAAE,IAAI,CAAC,EAAG;wBAChB,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAM;wBAClB,IAAI,EAAE,IAAI,CAAC,IAAK;wBAChB,aAAa,EAAE,IAAI;qBACpB,CAAC;oBAEF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,6DAA6D;gBAC7D,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,gBAAgB,CACxB,4CAA4C,CAC7C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb;;;;;;;;;eASG;YACH,QAAQ,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;;AAxSD;;;;;GAKG;AACoB,2CAAyB,GAAW,gBAAgB,CAAC;eAPzD,iBAAiB;AAUtB;IADb,WAAW,EAAE;;;;2CAoBb;AAuBa;IADb,WAAW,EAAE;;;;wCAsBb;AAmBa;IADb,WAAW,EAAE;;;;wCAGb;AAGa;IADb,WAAW,EAAE;;;;2CAGb;AAUmB;IADnB,WAAW,EAAE;;qCAC6B,QAAQ;;6CA2BlD;AAGmB;IADnB,WAAW,EAAE;;;;kEA+Jb"}

package/build/dist/Server/Middleware/UserAuthorization.js

@@ -17,6 +17,7 @@ import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
 import JSONWebToken from "../Utils/JsonWebToken";
 import logger, { getLogAttributesFromRequest } from "../Utils/Logger";
 import Response from "../Utils/Response";
+import McpDelegationAuthorization from "./McpDelegationAuthorization";
 import ProjectMiddleware from "./ProjectAuthorization";
 import SpanUtil from "../Utils/Telemetry/SpanUtil";
 import ExceptionMessages from "../../Types/Exception/ExceptionMessages";
@@ -35,7 +36,6 @@ import NotAuthorizedException from "../../Types/Exception/NotAuthorizedException
 import { PermissionHelper, } from "../../Types/Permission";
 import UserType from "../../Types/UserType";
 import UserPermissionUtil from "../Utils/UserPermission/UserPermission";
-import EditionEnforcement from "../Utils/EditionEnforcement";
 class UserMiddleware {
     /*
      * Description: Checking if user is authorized to access the page and decode jwt to get user data.
@@ -362,6 +362,16 @@ class UserMiddleware {
         });
     }
     static async resolveRequestUser(req, res, next, options) {
+        /*
+         * A request the MCP server makes for a member who connected a client with
+         * OAuth. Claimed before anything else is read: its project comes from the
+         * credential, so not even the tenant header below is to be trusted, and a
+         * request that presents this credential must be answered as that - never
+         * quietly authenticated some other way, or as nobody.
+         */
+        if (McpDelegationAuthorization.hasDelegationToken(req)) {
+            return await McpDelegationAuthorization.authorize(req, res, next);
+        }
         const tenantId = ProjectMiddleware.getProjectId(req);
         const oneuptimeRequest = req;
         if (tenantId) {
@@ -579,20 +589,10 @@ class UserMiddleware {
         var _a;
         const { req, tenantId, userId, userGlobalAccessPermission } = data;
         const isMasterAdmin = ((_a = req.userAuthorization) === null || _a === void 0 ? void 0 : _a.isMasterAdmin) === true;
-        /*
-         * SSO requirements are enforced while SSO is active: the Enterprise
-         * Edition is loaded and its license covers SSO (or billing is on). The
-         * Community Edition, which has no SSO login routes, and an Enterprise
-         * install whose license lapsed, where those routes refuse, relax them.
-         * Errors and an unknown license state answer "enforce".
-         */
-        const isSsoEnforced = EditionEnforcement.isSsoEnforced();
         /*
          * Resolve the SSO requirement and the tenant permission in parallel.
          * `getRequireSsoForLogin` is cached in-process for 60s, so this is
-         * usually free; the tenant permission lookup is the expensive call. It
-         * runs on the Community Edition too: it is also what turns an unknown
-         * project into TenantNotFoundException.
+         * usually free; the tenant permission lookup is the expensive call.
          */
         const [projectRequireSsoForLogin, tenantPermission] = await Promise.all([
             ProjectService.getRequireSsoForLogin(tenantId).catch((err) => {
@@ -615,8 +615,8 @@ class UserMiddleware {
          * can't lock them out — a project's own requireSsoForLogin still applies to
          * them. Only checked when the project doesn't already enforce SSO.
          */
-        let requireSsoForLogin = isSsoEnforced && projectRequireSsoForLogin;
-        if (isSsoEnforced && !requireSsoForLogin && !isMasterAdmin) {
+        let requireSsoForLogin = projectRequireSsoForLogin;
+        if (!requireSsoForLogin && !isMasterAdmin) {
             requireSsoForLogin =
                 await GlobalConfigService.getRequireSsoForLogin().catch(() => {
                     return false;
@@ -649,17 +649,11 @@ class UserMiddleware {
             return null;
         }
         const isMasterAdmin = ((_a = req.userAuthorization) === null || _a === void 0 ? void 0 : _a.isMasterAdmin) === true;
-        /*
-         * Same rule as the single-tenant path: SSO requirements are enforced
-         * while SSO is active and relaxed on the Community Edition and while the
-         * license does not cover SSO. Decided once for the whole fan-out.
-         */
-        const isSsoEnforced = EditionEnforcement.isSsoEnforced();
         /*
          * Instance-wide "Require SSO for Login" forces SSO on every project. Master
          * admins are exempt. Resolved once (cached) rather than per project.
          */
-        const globalRequireSsoForLogin = isMasterAdmin || !isSsoEnforced
+        const globalRequireSsoForLogin = isMasterAdmin
             ? false
             : await GlobalConfigService.getRequireSsoForLogin().catch(() => {
                 return false;
@@ -670,15 +664,13 @@ class UserMiddleware {
          * OR'd in so enforcement matches the single-tenant path.
          */
         const resolved = await Promise.all(projectIds.map(async (projectId) => {
-            const projectRequireSsoForLogin = !isSsoEnforced
-                ? false
-                : await ProjectService.getRequireSsoForLogin(projectId).catch(() => {
-                    /*
-                     * Unknown/inaccessible project: do not enforce SSO here. Actual
-                     * access is still gated by AccessTokenService below.
-                     */
-                    return false;
-                });
+            const projectRequireSsoForLogin = await ProjectService.getRequireSsoForLogin(projectId).catch(() => {
+                /*
+                 * Unknown/inaccessible project: do not enforce SSO here. Actual
+                 * access is still gated by AccessTokenService below.
+                 */
+                return false;
+            });
             const requireSsoForLogin = projectRequireSsoForLogin || globalRequireSsoForLogin;
             if (requireSsoForLogin) {
                 const requiredSsoProviderId = await ProjectService.getRequireSsoWithSsoProviderId(projectId).catch(() => {

package/build/dist/Server/Middleware/UserAuthorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserAuthorization.js","sourceRoot":"","sources":["../../../../Server/Middleware/UserAuthorization.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,kBAAkB,MAAM,gCAAgC,CAAC;AAChE,OAAO,mBAAmB,MAAM,iCAAiC,CAAC;AAClE,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAClD,OAAO,UAAU,MAAM,iBAAiB,CAAC;AAOzC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,YAAY,MAAM,uBAAuB,CAAC;AACjD,OAAO,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,iBAAiB,MAAM,wBAAwB,CAAC;AACvD,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AAGnD,OAAO,iBAAiB,MAAM,yCAAyC,CAAC;AACxE,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,uBAAuB,MAAM,+CAA+C,CAAC;AACpF,OAAO,YAAY,MAAM,0BAA0B,CAAC;AAEpD,OAAO,aAAa,MAAM,2BAA2B,CAAC;AAEtD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAC9D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAE5D,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,uBAAuB,MAAM,qCAAqC,CAAC;AAC1E,OAAO,wBAAwB,MAAM,sCAAsC,CAAC;AAC5E,OAAO,sBAAsB,MAAM,8CAA8C,CAAC;AAClF,OAAmB,EACjB,gBAAgB,GAIjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,kBAAkB,MAAM,wCAAwC,CAAC;AACxE,OAAO,kBAAkB,MAAM,6BAA6B,CAAC;AAE7D,MAAqB,cAAc;IACjC;;;;;OAKG;IAGW,AAAP,MAAM,CAAC,wBAAwB,CACpC,GAAmB;QAEnB,IAAI,WAAW,GAAuB,SAAS,CAAC;QAEhD,IACE,UAAU,CAAC,2BAA2B,CAAC,GAAG,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC,EACzE,CAAC;YACD,WAAW,GAAG,UAAU,CAAC,2BAA2B,CAClD,GAAG,EACH,UAAU,CAAC,eAAe,EAAE,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAGa,AAAP,MAAM,CAAC,gCAAgC,CAC5C,GAAmB;QAEnB,8CAA8C;QAC9C,MAAM,WAAW,GACf,UAAU,CAAC,2BAA2B,CAAC,GAAG,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;QAE5E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,4EAA4E;QAC5E,MAAM,UAAU,GAAuB,GAAG,CAAC,OAAO,CAAC,eAAe,CAErD,CAAC;QACd,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAGa,AAAP,MAAM,CAAC,YAAY,CAAC,GAAmB;;QAC5C,MAAM,SAAS,GAAuB,EAAE,CAAC;QAEzC,+BAA+B;QAE/B,MAAM,OAAO,GAAuB,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAElE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,KAAK,GAAuC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/D,IAAI,SAAS,GAAuB,SAAS,CAAC;gBAE9C,IAAI,CAAC;oBACH,SAAS,GAAG,MAAA,YAAY,CAAC,MAAM,CAC7B,KAAe,CAChB,CAAC,SAAS,0CAAE,QAAQ,EAAE,CAAC;gBAC1B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CACV,GAAG,EACH,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,IACE,SAAS;oBACT,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,OAAO,SAAS,KAAK,QAAQ,EAC7B,CAAC;oBACD,SAAS,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,CAAW,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,MAAM,eAAe,GAAuB,GAAG,CAAC,OAAO,CAAC,cAAc,CAEzD,CAAC;QAEd,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,YAAY,GAChB,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAE9B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;oBAClD,MAAM,KAAK,GAAuB,YAAY,CAAC,SAAS,CAAC,CAAC;oBAE1D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACxC,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,OAAO,GAAqB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAE7D,IAAI,CAAA,MAAA,OAAO,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,SAAS,EAAE,CAAC;4BAChD,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;wBAC/B,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,KAAK,CACV,GAAG,EACH,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;wBACF,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,GAAuB,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,sBAAsB,CACnC,WAA6B,EAC7B,qBAA4C;QAE5C,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAuB,WAAW,CAAC,aAAa;YACnE,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;YACtC,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,OAAO,CACZ,eAAe,IAAI,eAAe,KAAK,qBAAqB,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IAEW,AAAP,MAAM,CAAC,qBAAqB,CACjC,GAAmB;QAEnB,IAAI,QAAQ,GAAuB,UAAU,CAAC,2BAA2B,CACvE,GAAG,EACH,UAAU,CAAC,eAAe,EAAE,CAC7B,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,WAAW,GAAuB,GAAG,CAAC,OAAO,CACjD,oBAAoB,CACC,CAAC;YACxB,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACnD,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAqB,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEpE,IACE,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,SAAS;gBACzD,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,EAC1D,CAAC;gBACD,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,GAAuB,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IAEW,AAAP,MAAM,CAAC,8BAA8B,CAC1C,GAAmB,EACnB,SAAmB,EACnB,MAAgB,EAChB,qBAA4C;;QAE5C,MAAM,SAAS,GAAuB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAqB,YAAY,CAAC,MAAM,CACvD,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAW,CAC1C,CAAC;YAEF;;;;;;;;;;eAUG;YACH,IACE,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,SAAS;gBACzD,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,EAC1D,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,CAAA,MAAA,WAAW,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,SAAS,CAAC,QAAQ,EAAE;gBAC1D,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE;gBACnD,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAChE,CAAC;QACJ,CAAC;QAAC,WAAM,CAAC;YACP;;;;;eAKG;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IAEW,AAAP,MAAM,CAAC,mCAAmC,CAC/C,GAAmB,EACnB,MAAgB,EAChB,qBAA4C;QAE5C,MAAM,kBAAkB,GACtB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,EACvE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED;;;;;;;;OAQG;IAEW,AAAP,MAAM,CAAC,2BAA2B,CACvC,GAAmB,EACnB,SAAmB,EACnB,MAAgB,EAChB,qBAA4C;QAE5C,IACE,IAAI,CAAC,8BAA8B,CACjC,GAAG,EACH,SAAS,EACT,MAAM,EACN,qBAAqB,CACtB,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CACZ,IAAI,CAAC,mCAAmC,CACtC,GAAG,EACH,MAAM,EACN,qBAAqB,CACtB,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,IAGxD;;QACC,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE/C,MAAM,eAAe,GACnB,MAAA,kBAAkB,CAAC,aAAa,0CAAE,QAAQ,EAAE,CAAC;QAE/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB;;;;eAIG;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAa,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,MAAM,GACV,kBAAkB,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,CAAC;QAEpE,MAAM,KAAK,GAAwB,MAAM;YACvC,CAAC,CAAC,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACtD,CAAC,CAAC,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC;YACtC;;;eAGG;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM;YACX,CAAC,CAAC,wBAAwB,CAAC,yBAAyB,CAAC;gBACjD,YAAY,EAAE,UAAU;gBACxB,SAAS;aACV,CAAC;YACJ,CAAC,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;gBAChD,WAAW,EAAE,UAAU;gBACvB,SAAS;aACV,CAAC,CAAC;IACT,CAAC;IAED;;;;;;OAMG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAK5C;QACC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;QAE/D,IACE,IAAI,CAAC,8BAA8B,CACjC,GAAG,EACH,SAAS,EACT,MAAM,EACN,qBAAqB,CACtB,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,kBAAkB,GACtB,IAAI,CAAC,mCAAmC,CACtC,GAAG,EACH,MAAM,EACN,qBAAqB,CACtB,CAAC;QAEJ,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,oCAAoC,CAAC;YAC/C,kBAAkB;YAClB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,iBAAiB,CACnC,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,OAAO,MAAM,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,kCAAkC,EAAE,KAAK;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAC9C,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,OAAO,MAAM,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,kCAAkC,EAAE,IAAI;SACzC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,kBAAkB,CACrC,GAAmB,EACnB,GAAoB,EACpB,IAAkB,EAClB,OAAwD;QAExD,MAAM,QAAQ,GAAoB,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;QAEnE,IAAI,QAAQ,EAAE,CAAC;YACb,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAErC;;;;eAIG;YACH,KAAK,cAAc,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,MAAM,iBAAiB,CAAC,mCAAmC,CAChE,GAAG,EACH,GAAG,EACH,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,cAAc,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC;QAEvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,gBAAgB,CAAC,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,kCAAkC,EAAE,CAAC;gBAC/C,yDAAyD;gBACzD,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC5C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,mFAAmF;YACnF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACjE,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAC3B,+DAA+D,CAChE,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;;;WAUG;QACH,IAAI,aAAsB,CAAC;QAE3B,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,WAAW,CAAC,aAAa,CAC7C,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAgB,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,OAAO,CAAC,kCAAkC,EAAE,CAAC;gBAC/C,mFAAmF;gBACnF,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;gBAC1C,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC5C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACrD,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAW,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAE5E,uEAAuE;QACvE,QAAQ,CAAC,0BAA0B,+BACjC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAChC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACpD,CAAC,gBAAgB,CAAC,SAAS;YAC5B,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC,EACP,CAAC;QAEH;;;WAGG;QACH,KAAK,WAAW,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD;;;;;;;;WAQG;QACH,MAAM,iCAAiC,GACrC,kBAAkB,CAAC,6BAA6B,CAC9C,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAC1C,CAAC;QAEJ,IAAI,0BAA0B,GAAsC,IAAI,CAAC;QAEzE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,CAAC,gBAAgB,EAAE,0BAA0B,EAAE,WAAW,CAAC,GAI7D,MAAM,OAAO,CAAC,GAAG,CAAC;oBACpB,iCAAiC;oBACjC,cAAc,CAAC,yCAAyC,CAAC;wBACvD,GAAG;wBACH,QAAQ;wBACR,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC;wBAC5B,0BAA0B,EAAE,iCAAiC;qBAC9D,CAAC;oBACF,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;iBACpE,CAAC,CAAC;gBAEH,0BAA0B,GAAG,gBAAgB,CAAC;gBAE9C,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,0BAA0B;wBACzC,0BAA0B,CAAC;gBAC/B,CAAC;gBAED,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,0BAA0B,GAAG,EAAE,CAAC;oBACjD,gBAAgB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBAC9D,0BAA0B,CAAC;gBAC/B,CAAC;gBAED;;;;;mBAKG;gBACH,gBAAgB,CAAC,WAAW,GAAG,WAAW,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAkB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,0BAA0B,GAAG,MAAM,iCAAiC,CAAC;YAErE,IAAI,0BAA0B,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,0BAA0B;oBACzC,0BAA0B,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACzC,IACE,0BAA0B;gBAC1B,0BAA0B,CAAC,UAAU;gBACrC,0BAA0B,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAChD,CAAC;gBACD,MAAM,0BAA0B,GAC9B,MAAM,cAAc,CAAC,2CAA2C,CAC9D,GAAG,EACH,IAAI,QAAQ,CAAC,MAAM,CAAC,EACpB,0BAA0B,CAAC,UAAU,EACrC,0BAA0B,CAC3B,CAAC;gBAEJ,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,0BAA0B;wBACzC,0BAA0B,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QAEvB,IAAI,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;YAChD,MAAM,eAAe,GAAe,aAAa,CAAC,SAAS,CACzD,gBAAgB,CAAC,0BAA0B,CAC5C,CAAC;YACF,MAAM,WAAW,GAAW,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC5D,MAAM,qBAAqB,GAAW,MAAM,YAAY,CAAC,SAAS,CAChE,WAAW,EACX,IAAI,CACL,CAAC;YAEF,IACE,CAAC,CACC,GAAG,CAAC,OAAO;gBACX,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,qBAAqB,CACjE,EACD,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IACE,gBAAgB,CAAC,0BAA0B;YAC3C,QAAQ;YACR,gBAAgB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAChE,CAAC;YACD,MAAM,YAAY,GAAW,IAAI,CAAC,SAAS,CACzC,aAAa,CAAC,SAAS,CACrB,gBAAgB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAE,CAClE,CACF,CAAC;YAEF,MAAM,sBAAsB,GAAW,MAAM,YAAY,CAAC,SAAS,CACjE,YAAY,EACZ,IAAI,CACL,CAAC;YAEF,IACE,CAAC,CACC,GAAG,CAAC,OAAO;gBACX,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC;gBACvC,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,sBAAsB,CACnE,EACD,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,sBAAsB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAC3C,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;QAEnE,IAAI,cAAc,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAC3B,cAAc,CAAC,+BAA+B,CAC/C,CACF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAMD;;;;OAIG;IACI,MAAM,CAAC,kBAAkB,CAAC,GAAqB;QACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC;IAC3D,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAAC,IAE/B;QAKC,OAAO,KAAK,EACV,GAAmB,EACnB,GAAoB,EACpB,IAAkB,EACH,EAAE;;YACjB,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;YAEnE;;;;eAIG;YACH,IAAI,cAAc,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACxD,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAC3B,cAAc,CAAC,+BAA+B,CAC/C,CACF,CAAC;YACJ,CAAC;YAED,yCAAyC;YACzC,IAAI,gBAAgB,CAAC,QAAQ,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACvD,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,QAAQ,GAAyB,gBAAgB,CAAC,QAAQ,CAAC;YAEjE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,sBAAsB,CACxB,iDAAiD,CAClD,CACF,CAAC;YACJ,CAAC;YAED,MAAM,oBAAoB,GACxB,MAAA,gBAAgB,CAAC,0BAA0B,0CAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAErE,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,sBAAsB,CACxB,oDAAoD,CACrD,CACF,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GACnB,oBAAoB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;gBACzD,OAAO,CAAC,CAAC,UAAU,CAAC;YACtB,CAAC,CAAC,CAAC;YAEL,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,EACf,IAAI,CAAC,WAAW,CACjB,EACD,CAAC;gBACD,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,sBAAsB,CACxB,iEAAiE,CAClE,CACF,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,IAc7D;;QACC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,IAAI,CAAC;QAEnE,MAAM,aAAa,GACjB,CAAA,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,aAAa,MAAK,IAAI,CAAC;QAEtE;;;;;;WAMG;QACH,MAAM,aAAa,GAAY,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAElE;;;;;;WAMG;QACH,MAAM,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,GAG/C,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,cAAc,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;gBAClE;;;mBAGG;gBACH,IAAI,GAAG,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;oBACxC,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC;YACF,kBAAkB,CAAC,6BAA6B,CAAC,MAAM,EAAE,QAAQ,EAAE;gBACjE,0BAA0B;aAC3B,CAAC;SACH,CAAC,CAAC;QAEH;;;;;WAKG;QACH,IAAI,kBAAkB,GACpB,aAAa,IAAI,yBAAyB,CAAC;QAC7C,IAAI,aAAa,IAAI,CAAC,kBAAkB,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3D,kBAAkB;gBAChB,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC3D,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,kBAAkB,EAAE,CAAC;YACvB;;;eAGG;YACH,MAAM,qBAAqB,GACzB,MAAM,cAAc,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,KAAK,CACjE,GAAG,EAAE;gBACH,OAAO,IAAI,CAAC;YACd,CAAC,CACF,CAAC;YAEJ,IACE,CAAC,CAAC,MAAM,cAAc,CAAC,wBAAwB,CAAC;gBAC9C,GAAG;gBACH,SAAS,EAAE,QAAQ;gBACnB,MAAM;gBACN,qBAAqB,EAAE,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,SAAS;aAC1D,CAAC,CAAC,EACH,CAAC;gBACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAC7D,GAAmB,EACnB,MAAgB,EAChB,UAAsB;IACtB,mFAAmF;IACnF,0BAA0E;;QAE1E,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GACjB,CAAA,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,aAAa,MAAK,IAAI,CAAC;QAEtE;;;;WAIG;QACH,MAAM,aAAa,GAAY,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAElE;;;WAGG;QACH,MAAM,wBAAwB,GAC5B,aAAa,IAAI,CAAC,aAAa;YAC7B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC3D,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QAET;;;;WAIG;QACH,MAAM,QAAQ,GAGT,MAAM,OAAO,CAAC,GAAG,CACpB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAmB,EAAE,EAAE;YAC3C,MAAM,yBAAyB,GAAY,CAAC,aAAa;gBACvD,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,MAAM,cAAc,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC/D;;;uBAGG;oBACH,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;YAEP,MAAM,kBAAkB,GACtB,yBAAyB,IAAI,wBAAwB,CAAC;YAExD,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,qBAAqB,GACzB,MAAM,cAAc,CAAC,8BAA8B,CACjD,SAAS,CACV,CAAC,KAAK,CAAC,GAAG,EAAE;oBACX,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEL,IACE,CAAC,CAAC,MAAM,cAAc,CAAC,wBAAwB,CAAC;oBAC9C,GAAG;oBACH,SAAS;oBACT,MAAM;oBACN,qBAAqB,EAAE,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,SAAS;iBAC1D,CAAC,CAAC,EACH,CAAC;oBACD,OAAO;wBACL,SAAS;wBACT,UAAU,EACR,kBAAkB,CAAC,oCAAoC,CACrD,SAAS,CACV;qBACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO;gBACL,SAAS;gBACT,UAAU,EAAE,MAAM,kBAAkB,CAAC,6BAA6B,CAChE,MAAM,EACN,SAAS,EACT,EAAE,0BAA0B,EAAE,CAC/B;aACF,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,MAAM,GAAkD,IAAI,CAAC;QACjE,KAAK,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,QAAQ,EAAE,CAAC;YACjD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,GAAG,EAAE,CAAC;gBACd,CAAC;gBACD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;;AA1SD,6DAA6D;AACtC,8CAA+B,GACpD,iEAAiE,CAAC;eApwBjD,cAAc;AASnB;IADb,WAAW,EAAE;;;;oDAgBb;AAGa;IADb,WAAW,EAAE;;;;4DAqBb;AAGa;IADb,WAAW,EAAE;;;;wCA4Eb;AAkCa;IADb,WAAW,EAAE;;;;iDAqCb;AAQa;IADb,WAAW,EAAE;;6CAGD,QAAQ;QACX,QAAQ;;0DA8CjB;AAYa;IADb,WAAW,EAAE;;6CAGJ,QAAQ;;+DAqBjB;AAYa;IADb,WAAW,EAAE;;6CAGD,QAAQ;QACX,QAAQ;;uDAqBjB;AA+BmB;IADnB,WAAW,EAAE;;;;gEAiDb;AAUmB;IADnB,WAAW,EAAE;;;;oDAmCb;AAGmB;IADnB,WAAW,EAAE;;;;6CASb;AAwBmB;IADnB,WAAW,EAAE;;;;wDASb;AAqQmB;IADnB,WAAW,EAAE;;;;qDAmBb;AAmGmB;IADnB,WAAW,EAAE;;;;qEAgGb;AAGmB;IADnB,WAAW,EAAE;;6CAGJ,QAAQ;;uEAqGjB"}
+{"version":3,"file":"UserAuthorization.js","sourceRoot":"","sources":["../../../../Server/Middleware/UserAuthorization.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,kBAAkB,MAAM,gCAAgC,CAAC;AAChE,OAAO,mBAAmB,MAAM,iCAAiC,CAAC;AAClE,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAClD,OAAO,UAAU,MAAM,iBAAiB,CAAC;AAOzC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,YAAY,MAAM,uBAAuB,CAAC;AACjD,OAAO,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,0BAA0B,MAAM,8BAA8B,CAAC;AACtE,OAAO,iBAAiB,MAAM,wBAAwB,CAAC;AACvD,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AAGnD,OAAO,iBAAiB,MAAM,yCAAyC,CAAC;AACxE,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,uBAAuB,MAAM,+CAA+C,CAAC;AACpF,OAAO,YAAY,MAAM,0BAA0B,CAAC;AAEpD,OAAO,aAAa,MAAM,2BAA2B,CAAC;AAEtD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAC9D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAE5D,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,uBAAuB,MAAM,qCAAqC,CAAC;AAC1E,OAAO,wBAAwB,MAAM,sCAAsC,CAAC;AAC5E,OAAO,sBAAsB,MAAM,8CAA8C,CAAC;AAClF,OAAmB,EACjB,gBAAgB,GAIjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,kBAAkB,MAAM,wCAAwC,CAAC;AAExE,MAAqB,cAAc;IACjC;;;;;OAKG;IAGW,AAAP,MAAM,CAAC,wBAAwB,CACpC,GAAmB;QAEnB,IAAI,WAAW,GAAuB,SAAS,CAAC;QAEhD,IACE,UAAU,CAAC,2BAA2B,CAAC,GAAG,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC,EACzE,CAAC;YACD,WAAW,GAAG,UAAU,CAAC,2BAA2B,CAClD,GAAG,EACH,UAAU,CAAC,eAAe,EAAE,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAGa,AAAP,MAAM,CAAC,gCAAgC,CAC5C,GAAmB;QAEnB,8CAA8C;QAC9C,MAAM,WAAW,GACf,UAAU,CAAC,2BAA2B,CAAC,GAAG,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;QAE5E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,4EAA4E;QAC5E,MAAM,UAAU,GAAuB,GAAG,CAAC,OAAO,CAAC,eAAe,CAErD,CAAC;QACd,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAGa,AAAP,MAAM,CAAC,YAAY,CAAC,GAAmB;;QAC5C,MAAM,SAAS,GAAuB,EAAE,CAAC;QAEzC,+BAA+B;QAE/B,MAAM,OAAO,GAAuB,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAElE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,KAAK,GAAuC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/D,IAAI,SAAS,GAAuB,SAAS,CAAC;gBAE9C,IAAI,CAAC;oBACH,SAAS,GAAG,MAAA,YAAY,CAAC,MAAM,CAC7B,KAAe,CAChB,CAAC,SAAS,0CAAE,QAAQ,EAAE,CAAC;gBAC1B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CACV,GAAG,EACH,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,IACE,SAAS;oBACT,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,OAAO,SAAS,KAAK,QAAQ,EAC7B,CAAC;oBACD,SAAS,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,CAAW,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,MAAM,eAAe,GAAuB,GAAG,CAAC,OAAO,CAAC,cAAc,CAEzD,CAAC;QAEd,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,YAAY,GAChB,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAE9B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;oBAClD,MAAM,KAAK,GAAuB,YAAY,CAAC,SAAS,CAAC,CAAC;oBAE1D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACxC,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,OAAO,GAAqB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAE7D,IAAI,CAAA,MAAA,OAAO,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,SAAS,EAAE,CAAC;4BAChD,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;wBAC/B,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,KAAK,CACV,GAAG,EACH,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;wBACF,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,GAAuB,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,sBAAsB,CACnC,WAA6B,EAC7B,qBAA4C;QAE5C,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAuB,WAAW,CAAC,aAAa;YACnE,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;YACtC,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,OAAO,CACZ,eAAe,IAAI,eAAe,KAAK,qBAAqB,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IAEW,AAAP,MAAM,CAAC,qBAAqB,CACjC,GAAmB;QAEnB,IAAI,QAAQ,GAAuB,UAAU,CAAC,2BAA2B,CACvE,GAAG,EACH,UAAU,CAAC,eAAe,EAAE,CAC7B,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,WAAW,GAAuB,GAAG,CAAC,OAAO,CACjD,oBAAoB,CACC,CAAC;YACxB,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACnD,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAqB,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEpE,IACE,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,SAAS;gBACzD,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,EAC1D,CAAC;gBACD,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,GAAuB,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IAEW,AAAP,MAAM,CAAC,8BAA8B,CAC1C,GAAmB,EACnB,SAAmB,EACnB,MAAgB,EAChB,qBAA4C;;QAE5C,MAAM,SAAS,GAAuB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAqB,YAAY,CAAC,MAAM,CACvD,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAW,CAC1C,CAAC;YAEF;;;;;;;;;;eAUG;YACH,IACE,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,SAAS;gBACzD,WAAW,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,EAC1D,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,CAAA,MAAA,WAAW,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,SAAS,CAAC,QAAQ,EAAE;gBAC1D,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE;gBACnD,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAChE,CAAC;QACJ,CAAC;QAAC,WAAM,CAAC;YACP;;;;;eAKG;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IAEW,AAAP,MAAM,CAAC,mCAAmC,CAC/C,GAAmB,EACnB,MAAgB,EAChB,qBAA4C;QAE5C,MAAM,kBAAkB,GACtB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,EACvE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED;;;;;;;;OAQG;IAEW,AAAP,MAAM,CAAC,2BAA2B,CACvC,GAAmB,EACnB,SAAmB,EACnB,MAAgB,EAChB,qBAA4C;QAE5C,IACE,IAAI,CAAC,8BAA8B,CACjC,GAAG,EACH,SAAS,EACT,MAAM,EACN,qBAAqB,CACtB,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CACZ,IAAI,CAAC,mCAAmC,CACtC,GAAG,EACH,MAAM,EACN,qBAAqB,CACtB,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,IAGxD;;QACC,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE/C,MAAM,eAAe,GACnB,MAAA,kBAAkB,CAAC,aAAa,0CAAE,QAAQ,EAAE,CAAC;QAE/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB;;;;eAIG;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAa,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,MAAM,GACV,kBAAkB,CAAC,eAAe,KAAK,eAAe,CAAC,UAAU,CAAC;QAEpE,MAAM,KAAK,GAAwB,MAAM;YACvC,CAAC,CAAC,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACtD,CAAC,CAAC,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC;YACtC;;;eAGG;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM;YACX,CAAC,CAAC,wBAAwB,CAAC,yBAAyB,CAAC;gBACjD,YAAY,EAAE,UAAU;gBACxB,SAAS;aACV,CAAC;YACJ,CAAC,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;gBAChD,WAAW,EAAE,UAAU;gBACvB,SAAS;aACV,CAAC,CAAC;IACT,CAAC;IAED;;;;;;OAMG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAK5C;QACC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;QAE/D,IACE,IAAI,CAAC,8BAA8B,CACjC,GAAG,EACH,SAAS,EACT,MAAM,EACN,qBAAqB,CACtB,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,kBAAkB,GACtB,IAAI,CAAC,mCAAmC,CACtC,GAAG,EACH,MAAM,EACN,qBAAqB,CACtB,CAAC;QAEJ,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,oCAAoC,CAAC;YAC/C,kBAAkB;YAClB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,iBAAiB,CACnC,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,OAAO,MAAM,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,kCAAkC,EAAE,KAAK;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAC9C,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,OAAO,MAAM,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,kCAAkC,EAAE,IAAI;SACzC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,kBAAkB,CACrC,GAAmB,EACnB,GAAoB,EACpB,IAAkB,EAClB,OAAwD;QAExD;;;;;;WAMG;QACH,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,MAAM,0BAA0B,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,QAAQ,GAAoB,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;QAEnE,IAAI,QAAQ,EAAE,CAAC;YACb,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAErC;;;;eAIG;YACH,KAAK,cAAc,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,MAAM,iBAAiB,CAAC,mCAAmC,CAChE,GAAG,EACH,GAAG,EACH,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,cAAc,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC;QAEvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,gBAAgB,CAAC,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,kCAAkC,EAAE,CAAC;gBAC/C,yDAAyD;gBACzD,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC5C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,mFAAmF;YACnF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACjE,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAC3B,+DAA+D,CAChE,CACF,CAAC;QACJ,CAAC;QAED;;;;;;;;;;WAUG;QACH,IAAI,aAAsB,CAAC;QAE3B,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,WAAW,CAAC,aAAa,CAC7C,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAgB,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,OAAO,CAAC,kCAAkC,EAAE,CAAC;gBAC/C,mFAAmF;gBACnF,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;gBAC1C,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC5C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACrD,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAW,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAE5E,uEAAuE;QACvE,QAAQ,CAAC,0BAA0B,+BACjC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAChC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACpD,CAAC,gBAAgB,CAAC,SAAS;YAC5B,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC,EACP,CAAC;QAEH;;;WAGG;QACH,KAAK,WAAW,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD;;;;;;;;WAQG;QACH,MAAM,iCAAiC,GACrC,kBAAkB,CAAC,6BAA6B,CAC9C,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAC1C,CAAC;QAEJ,IAAI,0BAA0B,GAAsC,IAAI,CAAC;QAEzE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,CAAC,gBAAgB,EAAE,0BAA0B,EAAE,WAAW,CAAC,GAI7D,MAAM,OAAO,CAAC,GAAG,CAAC;oBACpB,iCAAiC;oBACjC,cAAc,CAAC,yCAAyC,CAAC;wBACvD,GAAG;wBACH,QAAQ;wBACR,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC;wBAC5B,0BAA0B,EAAE,iCAAiC;qBAC9D,CAAC;oBACF,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;iBACpE,CAAC,CAAC;gBAEH,0BAA0B,GAAG,gBAAgB,CAAC;gBAE9C,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,0BAA0B;wBACzC,0BAA0B,CAAC;gBAC/B,CAAC;gBAED,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,0BAA0B,GAAG,EAAE,CAAC;oBACjD,gBAAgB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBAC9D,0BAA0B,CAAC;gBAC/B,CAAC;gBAED;;;;;mBAKG;gBACH,gBAAgB,CAAC,WAAW,GAAG,WAAW,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAkB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,0BAA0B,GAAG,MAAM,iCAAiC,CAAC;YAErE,IAAI,0BAA0B,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,0BAA0B;oBACzC,0BAA0B,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACzC,IACE,0BAA0B;gBAC1B,0BAA0B,CAAC,UAAU;gBACrC,0BAA0B,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAChD,CAAC;gBACD,MAAM,0BAA0B,GAC9B,MAAM,cAAc,CAAC,2CAA2C,CAC9D,GAAG,EACH,IAAI,QAAQ,CAAC,MAAM,CAAC,EACpB,0BAA0B,CAAC,UAAU,EACrC,0BAA0B,CAC3B,CAAC;gBAEJ,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,0BAA0B;wBACzC,0BAA0B,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QAEvB,IAAI,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;YAChD,MAAM,eAAe,GAAe,aAAa,CAAC,SAAS,CACzD,gBAAgB,CAAC,0BAA0B,CAC5C,CAAC;YACF,MAAM,WAAW,GAAW,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC5D,MAAM,qBAAqB,GAAW,MAAM,YAAY,CAAC,SAAS,CAChE,WAAW,EACX,IAAI,CACL,CAAC;YAEF,IACE,CAAC,CACC,GAAG,CAAC,OAAO;gBACX,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,qBAAqB,CACjE,EACD,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IACE,gBAAgB,CAAC,0BAA0B;YAC3C,QAAQ;YACR,gBAAgB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAChE,CAAC;YACD,MAAM,YAAY,GAAW,IAAI,CAAC,SAAS,CACzC,aAAa,CAAC,SAAS,CACrB,gBAAgB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAE,CAClE,CACF,CAAC;YAEF,MAAM,sBAAsB,GAAW,MAAM,YAAY,CAAC,SAAS,CACjE,YAAY,EACZ,IAAI,CACL,CAAC;YAEF,IACE,CAAC,CACC,GAAG,CAAC,OAAO;gBACX,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC;gBACvC,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,sBAAsB,CACnE,EACD,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,sBAAsB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAC3C,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;QAEnE,IAAI,cAAc,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAC3B,cAAc,CAAC,+BAA+B,CAC/C,CACF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAMD;;;;OAIG;IACI,MAAM,CAAC,kBAAkB,CAAC,GAAqB;QACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC;IAC3D,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAAC,IAE/B;QAKC,OAAO,KAAK,EACV,GAAmB,EACnB,GAAoB,EACpB,IAAkB,EACH,EAAE;;YACjB,MAAM,gBAAgB,GAAqB,GAAuB,CAAC;YAEnE;;;;eAIG;YACH,IAAI,cAAc,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACxD,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,yBAAyB,CAC3B,cAAc,CAAC,+BAA+B,CAC/C,CACF,CAAC;YACJ,CAAC;YAED,yCAAyC;YACzC,IAAI,gBAAgB,CAAC,QAAQ,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACvD,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,QAAQ,GAAyB,gBAAgB,CAAC,QAAQ,CAAC;YAEjE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,sBAAsB,CACxB,iDAAiD,CAClD,CACF,CAAC;YACJ,CAAC;YAED,MAAM,oBAAoB,GACxB,MAAA,gBAAgB,CAAC,0BAA0B,0CAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAErE,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,sBAAsB,CACxB,oDAAoD,CACrD,CACF,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GACnB,oBAAoB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;gBACzD,OAAO,CAAC,CAAC,UAAU,CAAC;YACtB,CAAC,CAAC,CAAC;YAEL,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,EACf,IAAI,CAAC,WAAW,CACjB,EACD,CAAC;gBACD,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,sBAAsB,CACxB,iEAAiE,CAClE,CACF,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,IAc7D;;QACC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,IAAI,CAAC;QAEnE,MAAM,aAAa,GACjB,CAAA,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,aAAa,MAAK,IAAI,CAAC;QAEtE;;;;WAIG;QACH,MAAM,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,GAG/C,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,cAAc,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;gBAClE;;;mBAGG;gBACH,IAAI,GAAG,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;oBACxC,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC;YACF,kBAAkB,CAAC,6BAA6B,CAAC,MAAM,EAAE,QAAQ,EAAE;gBACjE,0BAA0B;aAC3B,CAAC;SACH,CAAC,CAAC;QAEH;;;;;WAKG;QACH,IAAI,kBAAkB,GAAY,yBAAyB,CAAC;QAC5D,IAAI,CAAC,kBAAkB,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,kBAAkB;gBAChB,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC3D,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,kBAAkB,EAAE,CAAC;YACvB;;;eAGG;YACH,MAAM,qBAAqB,GACzB,MAAM,cAAc,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,KAAK,CACjE,GAAG,EAAE;gBACH,OAAO,IAAI,CAAC;YACd,CAAC,CACF,CAAC;YAEJ,IACE,CAAC,CAAC,MAAM,cAAc,CAAC,wBAAwB,CAAC;gBAC9C,GAAG;gBACH,SAAS,EAAE,QAAQ;gBACnB,MAAM;gBACN,qBAAqB,EAAE,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,SAAS;aAC1D,CAAC,CAAC,EACH,CAAC;gBACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAC7D,GAAmB,EACnB,MAAgB,EAChB,UAAsB;IACtB,mFAAmF;IACnF,0BAA0E;;QAE1E,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GACjB,CAAA,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,aAAa,MAAK,IAAI,CAAC;QAEtE;;;WAGG;QACH,MAAM,wBAAwB,GAAY,aAAa;YACrD,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC3D,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QAEP;;;;WAIG;QACH,MAAM,QAAQ,GAGT,MAAM,OAAO,CAAC,GAAG,CACpB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAmB,EAAE,EAAE;YAC3C,MAAM,yBAAyB,GAC7B,MAAM,cAAc,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC/D;;;mBAGG;gBACH,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEL,MAAM,kBAAkB,GACtB,yBAAyB,IAAI,wBAAwB,CAAC;YAExD,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,qBAAqB,GACzB,MAAM,cAAc,CAAC,8BAA8B,CACjD,SAAS,CACV,CAAC,KAAK,CAAC,GAAG,EAAE;oBACX,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEL,IACE,CAAC,CAAC,MAAM,cAAc,CAAC,wBAAwB,CAAC;oBAC9C,GAAG;oBACH,SAAS;oBACT,MAAM;oBACN,qBAAqB,EAAE,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,SAAS;iBAC1D,CAAC,CAAC,EACH,CAAC;oBACD,OAAO;wBACL,SAAS;wBACT,UAAU,EACR,kBAAkB,CAAC,oCAAoC,CACrD,SAAS,CACV;qBACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO;gBACL,SAAS;gBACT,UAAU,EAAE,MAAM,kBAAkB,CAAC,6BAA6B,CAChE,MAAM,EACN,SAAS,EACT,EAAE,0BAA0B,EAAE,CAC/B;aACF,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,MAAM,GAAkD,IAAI,CAAC;QACjE,KAAK,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,QAAQ,EAAE,CAAC;YACjD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,GAAG,EAAE,CAAC;gBACd,CAAC;gBACD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;;AArRD,6DAA6D;AACtC,8CAA+B,GACpD,iEAAiE,CAAC;eA/wBjD,cAAc;AASnB;IADb,WAAW,EAAE;;;;oDAgBb;AAGa;IADb,WAAW,EAAE;;;;4DAqBb;AAGa;IADb,WAAW,EAAE;;;;wCA4Eb;AAkCa;IADb,WAAW,EAAE;;;;iDAqCb;AAQa;IADb,WAAW,EAAE;;6CAGD,QAAQ;QACX,QAAQ;;0DA8CjB;AAYa;IADb,WAAW,EAAE;;6CAGJ,QAAQ;;+DAqBjB;AAYa;IADb,WAAW,EAAE;;6CAGD,QAAQ;QACX,QAAQ;;uDAqBjB;AA+BmB;IADnB,WAAW,EAAE;;;;gEAiDb;AAUmB;IADnB,WAAW,EAAE;;;;oDAmCb;AAGmB;IADnB,WAAW,EAAE;;;;6CASb;AAwBmB;IADnB,WAAW,EAAE;;;;wDASb;AAgRmB;IADnB,WAAW,EAAE;;;;qDAmBb;AAmGmB;IADnB,WAAW,EAAE;;;;qEAoFb;AAGmB;IADnB,WAAW,EAAE;;6CAGJ,QAAQ;;uEA4FjB"}