@openora/core 0.4.0 → 0.4.1-canary.100

package/dist/iam/__tests__/iam.service.int.test.js

@@ -0,0 +1,573 @@
+import { randomUUID } from 'node:crypto';
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { sql, eq } from 'drizzle-orm';
+import { makeIdentityReader, mock, NO_CLIENT_META, makeEventBus } from '../../testing/mock.js';
+import { statement, findOneOrThrow, RedisCache, RedisRateLimiter, } from '@openora/core/server';
+import { createTestDb, createTestRedis, seedUser, } from '@openora/core/testing';
+import { migrate as migrateIam } from '@openora/core/iam/migrate';
+import { migrate as migrateIdentity } from '@openora/core/pam/migrate/identity';
+import { user } from '@openora/core/pam/schema/identity';
+import { adminRole, adminRolePermission, adminRoleAssignment, adminInvitation, } from '../schema/index.js';
+import { IamService, DbAdminPermissionResolver, RoleNotFoundError, InvalidGrantError, NotSuperAdminError, ProtectedRoleError, LastSuperAdminError, InvitationConflictError, AdminUserNotFoundError, NotAnAdminUserError, } from '../service/iam.service.js';
+let db;
+let redis;
+const makeEmail = () => mock({ send: vi.fn().mockResolvedValue(undefined) });
+const identityReader = makeIdentityReader();
+function makeIamService(drizzle, events, email, sessionCommands, rateLimiter) {
+    return new IamService(drizzle, events, email, identityReader, sessionCommands, rateLimiter);
+}
+// Bootstrap super-admin: no DB assignment row + user.role === 'admin' passes the static fallback.
+const ADMIN_CALLER = { userId: randomUUID(), role: 'admin', ...NO_CLIENT_META };
+const SUPPORT_CALLER = { userId: randomUUID(), role: 'support', ...NO_CLIENT_META };
+const TOTAL_GRANTS = Object.keys(statement).reduce((n, r) => n + statement[r].length, 0);
+async function seedRole(overrides = {}) {
+    const [row] = await db.drizzle.db
+        .insert(adminRole)
+        .values({
+        name: overrides.name ?? 'Ops',
+        key: overrides.key ?? null,
+        isSystem: overrides.isSystem ?? false,
+        isSuperAdmin: overrides.isSuperAdmin ?? false,
+    })
+        .returning();
+    return row;
+}
+async function seedAssignment(userId, roleId) {
+    await db.drizzle.db.insert(adminRoleAssignment).values({ userId, roleId });
+}
+async function seedPermission(roleId, resource, level) {
+    await db.drizzle.db.insert(adminRolePermission).values({ roleId, resource, level });
+}
+beforeAll(async () => {
+    db = await createTestDb([migrateIam, migrateIdentity]);
+    redis = await createTestRedis();
+});
+afterAll(async () => {
+    await db.drop();
+    await redis.quit();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${adminRole}, ${adminRolePermission}, ${adminRoleAssignment}, ${adminInvitation}, ${user} RESTART IDENTITY CASCADE`);
+    await redis.flush();
+});
+describe('IamService.listCatalog', () => {
+    it('omits the admin module from the assignable catalog', () => {
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const catalog = svc.listCatalog();
+        expect(catalog.modules.some((m) => m.resource === 'admin')).toBe(false);
+        expect(catalog.modules.some((m) => m.resource === 'player')).toBe(true);
+    });
+});
+describe('DbAdminPermissionResolver (real PG)', () => {
+    it('returns null when the user has no assignment', async () => {
+        const resolver = new DbAdminPermissionResolver(db.drizzle);
+        expect(await resolver.getGrants(randomUUID())).toBeNull();
+    });
+    it('super-admin assignment returns ALL grants (bypass)', async () => {
+        const role = await seedRole({ isSuperAdmin: true });
+        const userId = randomUUID();
+        await seedAssignment(userId, role.id);
+        const grants = await new DbAdminPermissionResolver(db.drizzle).getGrants(userId);
+        expect(grants).toHaveLength(TOTAL_GRANTS);
+    });
+    it('expands stored level rows into action grants', async () => {
+        const role = await seedRole();
+        await seedPermission(role.id, 'player', 'read');
+        await seedPermission(role.id, 'withdrawal', 'read_write');
+        const userId = randomUUID();
+        await seedAssignment(userId, role.id);
+        const grants = await new DbAdminPermissionResolver(db.drizzle).getGrants(userId);
+        expect(grants).toContainEqual({ resource: 'player', action: 'view' });
+        expect(grants).toContainEqual({ resource: 'withdrawal', action: 'approve' });
+        // read player must NOT yield write actions.
+        expect(grants).not.toContainEqual({ resource: 'player', action: 'ban' });
+    });
+});
+describe('DbAdminPermissionResolver caching (real Redis read-through)', () => {
+    it('serves a repeat lookup from cache even after the underlying rows change', async () => {
+        const role = await seedRole({ isSuperAdmin: true });
+        const userId = randomUUID();
+        await seedAssignment(userId, role.id);
+        const resolver = new DbAdminPermissionResolver(db.drizzle, new RedisCache(redis.client));
+        expect(await resolver.getGrants(userId)).toHaveLength(TOTAL_GRANTS);
+        // Revoke in the DB behind the cache's back; the cached grants must still be served.
+        await db.drizzle.db.delete(adminRoleAssignment).where(eq(adminRoleAssignment.userId, userId));
+        expect(await resolver.getGrants(userId)).toHaveLength(TOTAL_GRANTS);
+    });
+    it('without a cache, every lookup re-queries the DB', async () => {
+        const role = await seedRole({ isSuperAdmin: true });
+        const userId = randomUUID();
+        await seedAssignment(userId, role.id);
+        const resolver = new DbAdminPermissionResolver(db.drizzle);
+        expect(await resolver.getGrants(userId)).toHaveLength(TOTAL_GRANTS);
+        await db.drizzle.db.delete(adminRoleAssignment).where(eq(adminRoleAssignment.userId, userId));
+        expect(await resolver.getGrants(userId)).toBeNull();
+    });
+    it('invalidateUser purges so the next lookup reflects the revoke', async () => {
+        const role = await seedRole({ isSuperAdmin: true });
+        const userId = randomUUID();
+        await seedAssignment(userId, role.id);
+        const resolver = new DbAdminPermissionResolver(db.drizzle, new RedisCache(redis.client));
+        await resolver.getGrants(userId);
+        await db.drizzle.db.delete(adminRoleAssignment).where(eq(adminRoleAssignment.userId, userId));
+        await resolver.invalidateUser(userId);
+        expect(await resolver.getGrants(userId)).toBeNull();
+    });
+    it('invalidateRole purges every current holder of the role', async () => {
+        const role = await seedRole();
+        await seedPermission(role.id, 'player', 'read');
+        const u1 = randomUUID();
+        const u2 = randomUUID();
+        await seedAssignment(u1, role.id);
+        await seedAssignment(u2, role.id);
+        const resolver = new DbAdminPermissionResolver(db.drizzle, new RedisCache(redis.client));
+        // Prime both users' caches at the 'read' level (just the view action).
+        expect(await resolver.getGrants(u1)).toEqual([{ resource: 'player', action: 'view' }]);
+        expect(await resolver.getGrants(u2)).toEqual([{ resource: 'player', action: 'view' }]);
+        // Widen the role to read_write, then invalidate every holder.
+        await db.drizzle.db
+            .update(adminRolePermission)
+            .set({ level: 'read_write' })
+            .where(eq(adminRolePermission.roleId, role.id));
+        await resolver.invalidateRole(role.id);
+        for (const uid of [u1, u2]) {
+            const grants = await resolver.getGrants(uid);
+            expect(grants).toContainEqual({ resource: 'player', action: 'ban' });
+        }
+    });
+});
+describe('IamService.setRolePermissions', () => {
+    it('rejects a non-super-admin caller and audits the denial', async () => {
+        const role = await seedRole();
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        await expect(svc.setRolePermissions({
+            roleId: role.id,
+            grants: [{ resource: 'player', level: 'read' }],
+            caller: SUPPORT_CALLER,
+        })).rejects.toBeInstanceOf(NotSuperAdminError);
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({
+            userId: SUPPORT_CALLER.userId,
+            resource: 'admin',
+            action: 'update',
+            role: 'support',
+        }));
+    });
+    it('throws RoleNotFoundError when the role does not exist', async () => {
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.setRolePermissions({
+            roleId: randomUUID(),
+            grants: [{ resource: 'player', level: 'read' }],
+            caller: ADMIN_CALLER,
+        })).rejects.toBeInstanceOf(RoleNotFoundError);
+    });
+    it('throws InvalidGrantError for an unknown module', async () => {
+        const role = await seedRole();
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.setRolePermissions({
+            roleId: role.id,
+            grants: [{ resource: 'nonexistent', level: 'read' }],
+            caller: ADMIN_CALLER,
+        })).rejects.toBeInstanceOf(InvalidGrantError);
+    });
+    it('rejects a grant targeting the admin module (super-admin-only, A6)', async () => {
+        const role = await seedRole();
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.setRolePermissions({
+            roleId: role.id,
+            grants: [{ resource: 'admin', level: 'read_write' }],
+            caller: ADMIN_CALLER,
+        })).rejects.toBeInstanceOf(InvalidGrantError);
+    });
+    it('blocks editing a super-admin role (always full)', async () => {
+        const role = await seedRole({ isSuperAdmin: true, isSystem: true });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.setRolePermissions({
+            roleId: role.id,
+            grants: [{ resource: 'player', level: 'read' }],
+            caller: ADMIN_CALLER,
+        })).rejects.toBeInstanceOf(ProtectedRoleError);
+    });
+    it('a super caller may grant any level and the rows are persisted', async () => {
+        const role = await seedRole();
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.setRolePermissions({
+            roleId: role.id,
+            grants: [{ resource: 'withdrawal', level: 'read_write' }],
+            caller: ADMIN_CALLER,
+        });
+        expect(result.permissions).toContainEqual({ resource: 'withdrawal', level: 'read_write' });
+        const rows = await db.drizzle.db
+            .select()
+            .from(adminRolePermission)
+            .where(eq(adminRolePermission.roleId, role.id));
+        expect(rows).toHaveLength(1);
+        expect(rows[0]).toMatchObject({ resource: 'withdrawal', level: 'read_write' });
+    });
+    it('emits iam.role.permissions.changed with actorId', async () => {
+        const role = await seedRole();
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        await svc.setRolePermissions({
+            roleId: role.id,
+            grants: [{ resource: 'player', level: 'read' }],
+            caller: ADMIN_CALLER,
+        });
+        expect(events.emit).toHaveBeenCalledWith('iam.role.permissions.changed', expect.objectContaining({ roleId: role.id, actorId: ADMIN_CALLER.userId }));
+    });
+});
+describe('IamService.updateRole', () => {
+    it('blocks renaming the super-admin role', async () => {
+        const role = await seedRole({ isSuperAdmin: true, isSystem: true });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.updateRole({ roleId: role.id, name: 'Renamed', caller: ADMIN_CALLER })).rejects.toBeInstanceOf(ProtectedRoleError);
+    });
+    it('allows renaming a predefined (isSystem, non-super) role', async () => {
+        const role = await seedRole({ isSystem: true, isSuperAdmin: false });
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.updateRole({ roleId: role.id, name: 'Renamed', caller: ADMIN_CALLER });
+        expect(result.name).toBe('Renamed');
+        expect(events.emit).toHaveBeenCalledWith('iam.role.updated', expect.objectContaining({ roleId: role.id, actorId: ADMIN_CALLER.userId }));
+        const [row] = await db.drizzle.db.select().from(adminRole).where(eq(adminRole.id, role.id));
+        expect(row.name).toBe('Renamed');
+    });
+});
+describe('IamService.deleteRole', () => {
+    it('blocks deleting a system role', async () => {
+        const role = await seedRole({ isSystem: true });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.deleteRole({ roleId: role.id, caller: ADMIN_CALLER })).rejects.toBeInstanceOf(ProtectedRoleError);
+    });
+    it('blocks deleting a super-admin role', async () => {
+        const role = await seedRole({ isSuperAdmin: true });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.deleteRole({ roleId: role.id, caller: ADMIN_CALLER })).rejects.toBeInstanceOf(ProtectedRoleError);
+    });
+    it('deletes a custom role with no assignments and emits only iam.role.deleted', async () => {
+        const role = await seedRole();
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.deleteRole({ roleId: role.id, caller: ADMIN_CALLER });
+        expect(result).toEqual({ success: true });
+        expect(events.emit).toHaveBeenCalledWith('iam.role.deleted', expect.objectContaining({ roleId: role.id, actorId: ADMIN_CALLER.userId }));
+        expect(events.emit).not.toHaveBeenCalledWith('iam.role.revoked', expect.anything());
+        expect(await db.drizzle.db.select().from(adminRole).where(eq(adminRole.id, role.id))).toHaveLength(0);
+    });
+    it('emits iam.role.revoked once per affected user plus iam.role.deleted, and cascades assignments', async () => {
+        const role = await seedRole();
+        const userA = randomUUID();
+        const userB = randomUUID();
+        await seedAssignment(userA, role.id);
+        await seedAssignment(userB, role.id);
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.deleteRole({ roleId: role.id, caller: ADMIN_CALLER });
+        expect(result).toEqual({ success: true });
+        expect(events.emit).toHaveBeenCalledWith('iam.role.revoked', {
+            roleId: role.id,
+            userId: userA,
+            actorId: ADMIN_CALLER.userId,
+            ...NO_CLIENT_META,
+        });
+        expect(events.emit).toHaveBeenCalledWith('iam.role.revoked', {
+            roleId: role.id,
+            userId: userB,
+            actorId: ADMIN_CALLER.userId,
+            ...NO_CLIENT_META,
+        });
+        const revokeCalls = events.emit.mock.calls.filter((c) => c[0] === 'iam.role.revoked');
+        expect(revokeCalls).toHaveLength(2);
+        expect(events.emit).toHaveBeenCalledWith('iam.role.deleted', expect.objectContaining({ roleId: role.id, actorId: ADMIN_CALLER.userId }));
+        // ON DELETE CASCADE removed the assignment rows.
+        expect(await db.drizzle.db.select().from(adminRoleAssignment)).toHaveLength(0);
+    });
+});
+describe('IamService.assignRole', () => {
+    it('dedupes an existing assignment without inserting again (unique index)', async () => {
+        const role = await seedRole();
+        const target = await seedUser(db, { name: 'U', role: 'admin' });
+        await seedAssignment(target.id, role.id);
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.assignRole({
+            userId: target.id,
+            roleId: role.id,
+            caller: ADMIN_CALLER,
+        });
+        expect(events.emit).not.toHaveBeenCalledWith('iam.role.assigned', expect.anything());
+        // Still exactly one assignment row, and the existing one was returned.
+        const rows = await db.drizzle.db.select().from(adminRoleAssignment);
+        expect(rows).toHaveLength(1);
+        expect(result.id).toBe(rows[0].id);
+    });
+    it('rejects assigning a role to a non-admin (player) account', async () => {
+        const role = await seedRole();
+        const player = await seedUser(db, { name: 'U', role: 'player' });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.assignRole({ userId: player.id, roleId: role.id, caller: ADMIN_CALLER })).rejects.toThrow(NotAnAdminUserError);
+    });
+    it('rejects assigning a role to an unknown user', async () => {
+        const role = await seedRole();
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.assignRole({ userId: randomUUID(), roleId: role.id, caller: ADMIN_CALLER })).rejects.toThrow(AdminUserNotFoundError);
+    });
+    it('the unique index keeps two concurrent assigns from double-inserting', async () => {
+        const role = await seedRole();
+        const target = await seedUser(db, { name: 'U', role: 'admin' });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await Promise.allSettled([
+            svc.assignRole({ userId: target.id, roleId: role.id, caller: ADMIN_CALLER }),
+            svc.assignRole({ userId: target.id, roleId: role.id, caller: ADMIN_CALLER }),
+        ]);
+        const rows = await db.drizzle.db
+            .select()
+            .from(adminRoleAssignment)
+            .where(eq(adminRoleAssignment.userId, target.id));
+        expect(rows).toHaveLength(1);
+    });
+});
+describe('IamService.unassignRole', () => {
+    it('rejects removing the last super-admin holder', async () => {
+        const superRole = await seedRole({ isSuperAdmin: true, isSystem: true });
+        const target = randomUUID();
+        await seedAssignment(target, superRole.id);
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.unassignRole({ userId: target, roleId: superRole.id, caller: ADMIN_CALLER })).rejects.toBeInstanceOf(LastSuperAdminError);
+        // The holder survives the rejected unassign.
+        expect(await db.drizzle.db.select().from(adminRoleAssignment)).toHaveLength(1);
+    });
+    it('returns success but emits no revoked event when nothing was deleted', async () => {
+        const role = await seedRole();
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.unassignRole({
+            userId: randomUUID(),
+            roleId: role.id,
+            caller: ADMIN_CALLER,
+        });
+        expect(result).toEqual({ success: true });
+        expect(events.emit).not.toHaveBeenCalledWith('iam.role.revoked', expect.anything());
+    });
+    it('emits iam.role.revoked when a row was actually deleted', async () => {
+        const role = await seedRole();
+        const target = randomUUID();
+        await seedAssignment(target, role.id);
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        await svc.unassignRole({ userId: target, roleId: role.id, caller: ADMIN_CALLER });
+        expect(events.emit).toHaveBeenCalledWith('iam.role.revoked', expect.objectContaining({ roleId: role.id, userId: target, actorId: ADMIN_CALLER.userId }));
+        expect(await db.drizzle.db.select().from(adminRoleAssignment)).toHaveLength(0);
+    });
+    it('under two concurrent unassigns of a two-holder super role, exactly one wins (FOR UPDATE guard)', async () => {
+        const superRole = await seedRole({ isSuperAdmin: true, isSystem: true });
+        const userA = randomUUID();
+        const userB = randomUUID();
+        await seedAssignment(userA, superRole.id);
+        await seedAssignment(userB, superRole.id);
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const results = await Promise.allSettled([
+            svc.unassignRole({ userId: userA, roleId: superRole.id, caller: ADMIN_CALLER }),
+            svc.unassignRole({ userId: userB, roleId: superRole.id, caller: ADMIN_CALLER }),
+        ]);
+        const rejected = results.filter((r) => r.status === 'rejected');
+        expect(rejected).toHaveLength(1);
+        expect(rejected[0].reason).toBeInstanceOf(LastSuperAdminError);
+        // Exactly one super-admin holder survives - the guard never let both strip it.
+        expect(await db.drizzle.db.select().from(adminRoleAssignment)).toHaveLength(1);
+    });
+});
+describe('IamService.previewEffectivePermissions', () => {
+    it('returns the max level per module across roles (union)', async () => {
+        const roleA = await seedRole();
+        const roleB = await seedRole();
+        await seedPermission(roleA.id, 'player', 'read');
+        await seedPermission(roleA.id, 'withdrawal', 'read');
+        await seedPermission(roleB.id, 'player', 'read_write');
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.previewEffectivePermissions({ roleIds: [roleA.id, roleB.id] });
+        expect(result.permissions).toContainEqual({ resource: 'player', level: 'read_write' });
+        expect(result.permissions).toContainEqual({ resource: 'withdrawal', level: 'read' });
+        expect(result.permissions.filter((p) => p.resource === 'player')).toHaveLength(1);
+    });
+    it('super-admin role in the set yields all modules read_write', async () => {
+        const superRole = await seedRole({ isSuperAdmin: true });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.previewEffectivePermissions({ roleIds: [superRole.id] });
+        expect(result.permissions).toHaveLength(Object.keys(statement).length);
+        expect(result.permissions.every((p) => p.level === 'read_write')).toBe(true);
+    });
+    it('falls back to static role permissions when the user has no dynamic role assignments', async () => {
+        const u = await seedUser(db, { name: 'U', role: 'support' });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.previewEffectivePermissions({ userId: u.id });
+        expect(result.permissions).not.toHaveLength(0);
+        expect(result.permissions).toContainEqual({ resource: 'player', level: 'read' });
+    });
+});
+describe('IamService.acceptInvitation', () => {
+    async function seedInvitation() {
+        const role = await seedRole();
+        const token = randomUUID();
+        await db.drizzle.db.insert(adminInvitation).values({
+            email: 'who@admin.com',
+            roleId: role.id,
+            token,
+            status: 'pending',
+            expiresAt: new Date(Date.now() + 60_000),
+        });
+        return token;
+    }
+    it('accepts once and emits exactly one event; a replay conflicts and emits nothing more', async () => {
+        const token = await seedInvitation();
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const first = await svc.acceptInvitation(token);
+        expect(first).toEqual({ success: true, email: 'who@admin.com' });
+        await expect(svc.acceptInvitation(token)).rejects.toBeInstanceOf(InvitationConflictError);
+        expect(events.emit).toHaveBeenCalledTimes(1);
+    });
+    it('two concurrent accepts: exactly one succeeds, one event (atomic conditional UPDATE)', async () => {
+        const token = await seedInvitation();
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const results = await Promise.allSettled([
+            svc.acceptInvitation(token),
+            svc.acceptInvitation(token),
+        ]);
+        const fulfilled = results.filter((r) => r.status === 'fulfilled');
+        const rejected = results.filter((r) => r.status === 'rejected');
+        expect(fulfilled).toHaveLength(1);
+        expect(rejected).toHaveLength(1);
+        expect(rejected[0].reason).toBeInstanceOf(InvitationConflictError);
+        expect(events.emit).toHaveBeenCalledTimes(1);
+    });
+});
+describe('IamService.inviteAdmin', () => {
+    it('creates a pending invitation and calls SEND_EMAIL when caller is super-admin', async () => {
+        const role = await seedRole();
+        const email = makeEmail();
+        const svc = makeIamService(db.drizzle, makeEventBus(), email);
+        const result = await svc.inviteAdmin({
+            email: 'new@admin.com',
+            roleId: role.id,
+            caller: ADMIN_CALLER,
+        });
+        expect(result.status).toBe('pending');
+        expect(result.email).toBe('new@admin.com');
+        expect(email.send).toHaveBeenCalledOnce();
+        expect(email.send).toHaveBeenCalledWith(expect.objectContaining({ to: 'new@admin.com' }));
+        const rows = await db.drizzle.db.select().from(adminInvitation);
+        expect(rows).toHaveLength(1);
+        expect(rows[0]).toMatchObject({ email: 'new@admin.com', status: 'pending' });
+    });
+    it('rejects a non-super-admin caller', async () => {
+        const role = await seedRole();
+        const email = makeEmail();
+        const svc = makeIamService(db.drizzle, makeEventBus(), email);
+        await expect(svc.inviteAdmin({ email: 'new@admin.com', roleId: role.id, caller: SUPPORT_CALLER })).rejects.toBeInstanceOf(NotSuperAdminError);
+        expect(email.send).not.toHaveBeenCalled();
+    });
+});
+describe('IamService paginated lists', () => {
+    it('listRoles returns { items, total, page, limit }', async () => {
+        const role = await seedRole();
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.listRoles({ page: 1, limit: 10 });
+        expect(result.total).toBe(1);
+        expect(result.page).toBe(1);
+        expect(result.limit).toBe(10);
+        expect(result.items).toHaveLength(1);
+        expect(findOneOrThrow(result.items, new Error('expected an item')).id).toBe(role.id);
+    });
+    it('listInvitations returns the paginated wrapper', async () => {
+        const role = await seedRole();
+        await db.drizzle.db.insert(adminInvitation).values({
+            email: 'a@b.com',
+            roleId: role.id,
+            token: randomUUID(),
+            status: 'pending',
+            expiresAt: new Date(Date.now() + 60_000),
+        });
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.listInvitations({ page: 1, limit: 20 });
+        expect(result.total).toBe(1);
+        expect(result.items).toHaveLength(1);
+        expect(findOneOrThrow(result.items, new Error('expected an item')).email).toBe('a@b.com');
+    });
+    it('listAssignments returns the paginated wrapper with joined role fields', async () => {
+        const role = await seedRole({ name: 'Ops' });
+        await seedAssignment(randomUUID(), role.id);
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        const result = await svc.listAssignments({ page: 1, limit: 20 });
+        expect(result.total).toBe(1);
+        expect(result.items).toHaveLength(1);
+        expect(findOneOrThrow(result.items, new Error('expected an item')).roleName).toBe('Ops');
+    });
+});
+describe('IamService.reportAccessDenied', () => {
+    it('records and audits a genuine denial (caller lacks the resource/level)', async () => {
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.reportAccessDenied({
+            resource: 'withdrawal',
+            level: 'read',
+            caller: SUPPORT_CALLER,
+        });
+        expect(result).toEqual({ recorded: true });
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({
+            userId: SUPPORT_CALLER.userId,
+            resource: 'withdrawal',
+            action: 'access',
+            role: 'support',
+        }));
+    });
+    it('does not record or emit when the caller genuinely holds the permission', async () => {
+        const events = makeEventBus();
+        const svc = makeIamService(db.drizzle, events, makeEmail());
+        const result = await svc.reportAccessDenied({
+            resource: 'player',
+            level: 'read_write',
+            caller: ADMIN_CALLER,
+        });
+        expect(result).toEqual({ recorded: false });
+        expect(events.emit).not.toHaveBeenCalled();
+    });
+    it('with a rate limiter wired, a repeat report within the window is throttled and not recorded again', async () => {
+        const events = makeEventBus();
+        const limiter = new RedisRateLimiter(redis.client);
+        const svc = makeIamService(db.drizzle, events, makeEmail(), undefined, limiter);
+        const first = await svc.reportAccessDenied({
+            resource: 'withdrawal',
+            level: 'read',
+            caller: SUPPORT_CALLER,
+        });
+        const second = await svc.reportAccessDenied({
+            resource: 'withdrawal',
+            level: 'read',
+            caller: SUPPORT_CALLER,
+        });
+        expect(first).toEqual({ recorded: true });
+        expect(second).toEqual({ recorded: false });
+        const denialCalls = events.emit.mock.calls.filter((c) => c[0] === 'identity.user.unauthorized_access');
+        expect(denialCalls).toHaveLength(1);
+    });
+});
+describe('IamService.forceLogout', () => {
+    it('rejects a non-super-admin caller', async () => {
+        const svc = makeIamService(db.drizzle, makeEventBus(), makeEmail());
+        await expect(svc.forceLogout({ userId: randomUUID(), caller: SUPPORT_CALLER })).rejects.toBeInstanceOf(NotSuperAdminError);
+    });
+    it('allows a super-admin caller to delete sessions for a user via SessionCommands', async () => {
+        const events = makeEventBus();
+        const sessionCommands = mock({
+            revokeAll: vi.fn().mockResolvedValue({ success: true }),
+        });
+        const svc = makeIamService(db.drizzle, events, makeEmail(), sessionCommands);
+        const targetUserId = randomUUID();
+        const result = await svc.forceLogout({ userId: targetUserId, caller: ADMIN_CALLER });
+        expect(result).toEqual({ success: true });
+        expect(sessionCommands.revokeAll).toHaveBeenCalledWith(targetUserId, ADMIN_CALLER.userId);
+    });
+});
+//# sourceMappingURL=iam.service.int.test.js.map

package/dist/iam/__tests__/iam.service.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.service.int.test.js","sourceRoot":"","sources":["../../../src/iam/__tests__/iam.service.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,SAAS,EACT,cAAc,EACd,UAAU,EACV,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EACL,YAAY,EACZ,eAAe,EAGf,QAAQ,GACT,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAC;AACzD,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,EACV,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAEnC,IAAI,EAAU,CAAC;AACf,IAAI,KAAgB,CAAC;AAErB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAgB,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAC5F,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAC;AAE5C,SAAS,cAAc,CACrB,OAA0B,EAC1B,MAAuC,EACvC,KAAoB,EACpB,eAAiC,EACjC,WAA8C;IAE9C,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;AAC9F,CAAC;AAED,kGAAkG;AAClG,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;AAChF,MAAM,cAAc,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;AAEpF,MAAM,YAAY,GAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAoB,CAAC,MAAM,CACpE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAI,SAAS,CAAC,CAAC,CAAuB,CAAC,MAAM,EACxD,CAAC,CACF,CAAC;AAEF,KAAK,UAAU,QAAQ,CACrB,YAAyF,EAAE;IAE3F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC;QACN,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,KAAK;QAC7B,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI;QAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,KAAK;QACrC,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,KAAK;KAC9C,CAAC;SACD,SAAS,EAAE,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,MAAc;IAC1D,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAc,EACd,QAAgB,EAChB,KAA0C;IAE1C,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACvD,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,SAAS,KAAK,mBAAmB,KAAK,mBAAmB,KAAK,eAAe,KAAK,IAAI,2BAA2B,CACjI,CAAC;IACF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7E,4CAA4C;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzF,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAEpE,oFAAoF;QACpF,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9F,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzF,uEAAuE;QACvE,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAEvF,8DAA8D;QAC9D,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAChB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;aAC5B,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvC,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,CACV,GAAG,CAAC,kBAAkB,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/C,MAAM,EAAE,cAAc;SACvB,CAAC,CACH,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,SAAS;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,kBAAkB,CAAC;YACrB,MAAM,EAAE,UAAU,EAAE;YACpB,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/C,MAAM,EAAE,YAAY;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,kBAAkB,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAW,CAAC;YAC7D,MAAM,EAAE,YAAY;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,kBAAkB,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACpD,MAAM,EAAE,YAAY;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,kBAAkB,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/C,MAAM,EAAE,YAAY;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACzD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAE3F,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAC7B,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/C,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,8BAA8B,EAC9B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,kBAAkB,EAClB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAC3E,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC5F,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC5F,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,kBAAkB,EAClB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAC3E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEpF,MAAM,CACJ,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAC9E,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,EAAE;YAC3D,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,YAAY,CAAC,MAAM;YAC5B,GAAG,cAAc;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,EAAE;YAC3D,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,YAAY,CAAC,MAAM;YAC5B,GAAG,cAAc;SAClB,CAAC,CAAC;QACH,MAAM,WAAW,GAAI,MAAM,CAAC,IAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAC7E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,kBAAkB,CACnC,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,kBAAkB,EAClB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAC3E,CAAC;QACF,iDAAiD;QACjD,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC;YAClC,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,uEAAuE;QACvE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAC7E,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpE,MAAM,OAAO,CAAC,UAAU,CAAC;YACvB,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC5E,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SAC7E,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAC7B,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpE,MAAM,MAAM,CACV,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CACjF,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAC9C,6CAA6C;QAC7C,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC;YACpC,MAAM,EAAE,UAAU,EAAE;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,kBAAkB,EAClB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAC3F,CAAC;QACF,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACvC,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC/E,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SAChF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAE,QAAQ,CAAC,CAAC,CAA2B,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAC1F,+EAA+E;QAC/E,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC/B,MAAM,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,2BAA2B,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,2BAA2B,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,KAAK,UAAU,cAAc;QAC3B,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACvC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAC3B,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAE,QAAQ,CAAC,CAAC,CAA2B,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;YACnC,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QAE1F,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,MAAM,CACV,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CACrF,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,UAAU,EAAE;YACnB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC1C,QAAQ,EAAE,YAAY;YACtB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,SAAS;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC1C,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;QAChH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAEhF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YACzC,QAAQ,EAAE,YAAY;YACtB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC1C,QAAQ,EAAE,YAAY;YACtB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAI,MAAM,CAAC,IAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAC7E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,mCAAmC,CACpD,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAClE,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAG,IAAI,CAAkB;YAC5C,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,eAAe,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/iam/adapters/admin-player-activity.d.ts

@@ -0,0 +1,10 @@
+import type { ActiveUsersTrendPoint, AdminPlayerActivity, PlayerActivityFilter, RegistrationsOverTimePoint, RetentionCohortRow } from '@openora/core/contracts';
+import { DrizzleService } from '@openora/core/server';
+export declare class DrizzleAdminPlayerActivity implements AdminPlayerActivity {
+    private readonly drizzle;
+    constructor(drizzle: DrizzleService);
+    getRegistrationsOverTime(filter: PlayerActivityFilter): Promise<RegistrationsOverTimePoint[]>;
+    getActiveUsersTrend(filter: PlayerActivityFilter): Promise<ActiveUsersTrendPoint[]>;
+    getRetentionCohorts(filter: PlayerActivityFilter, windowDays: 7 | 30): Promise<RetentionCohortRow[]>;
+}
+//# sourceMappingURL=admin-player-activity.d.ts.map