@openora/core 0.4.1-canary.13 → 0.4.1-canary.130

package/dist/wallet/router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/wallet/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC9F,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,sBAAsB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,aAAa,EAUd,MAAM,8BAA8B,CAAC;AAEtC,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,cAAc,EACrB,cAAc,EAAE,cAAc,EAC9B,eAAe,EAAE,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2IxC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/wallet/router/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAE5B,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,IAAI,EACV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAkB,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EACL,aAAa,EA6Bd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,qBAAqB,EAItB,MAAM,sCAAsC,CAAC;AA0C9C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAE/D;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAClB,MAAM,EAAE,WAAW,GAAG,SAAS,GAC9B,cAAc,CAAC,mBAAmB,CAAC,CAKrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,cAAc,CAAC;IACtB,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,cAAc,EAAE,qBAAqB,CAAC;IACtC,QAAQ,EAAE,eAAe,CAAC;IAC1B,mBAAmB,EAAE,SAAS,CAAC;IAC/B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,EACjC,MAAM,EACN,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,mBAAmB,EACnB,QAAQ,EACR,OAAO,GACR,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0ZlB"}

package/dist/wallet/router/index.js

@@ -1,33 +1,122 @@
+import { randomUUID } from 'node:crypto';
 import { implement, ORPCError } from '@orpc/server';
-import { getUserId, mapErrors } from '@openora/core/server';
+import { createEventStreamGenerator, getUserId, mapErrors, assertRateLimit, } from '@openora/core/server';
+import { DEFAULT_PAYMENT_PROVIDER, RATE_LIMIT_KEYS, RgLimitExceededError, makeRateLimitKey, } from '@openora/core/contracts';
 import { walletContract } from '../contract/index.js';
-import { WalletNotFoundError, WithdrawalNotFoundError, WithdrawalNotPendingError, InsufficientBalanceError, CurrencyMismatchError, KycRequiredError, IdempotencyKeyReuseError, DepositAddressUnsupportedError, DestinationAddressRequiredError, } from '../service/wallet.service.js';
-export function createWalletRouter(wallet, adminGuard, audit, paymentAdapter, webhookVerifier) {
+import { CUSTODY_SWEEP_QUEUE } from '../service/custody-sweep.service.js';
+import { WalletNotFoundError, WithdrawalNotFoundError, WithdrawalNotPendingError, InsufficientBalanceError, KycRequiredError, IdempotencyKeyReuseError, DepositAddressUnsupportedError, DestinationAddressRequiredError, DestinationAddressNotWhitelistedError, AutoWithdrawalConfigNotFoundError, BonusRolloverLockedError, BonusRolloverConfigNotFoundError, WalletAssetNotFoundError, WalletAssetAlreadyExistsError, WalletAssetUnsupportedError, WalletAssetUnknownProviderError, WalletAssetInUseError, WalletAssetHasIssuedAddressesError, WalletAssetHasInFlightTransactionsError, AmbiguousNetworkError, UnsupportedNetworkError, WithdrawalDisabledError, BelowMinimumWithdrawalError, DepositDisabledError, BelowMinimumDepositError, PlayerNotFoundError, WithdrawalAddressAlreadyExistsError, WithdrawalAddressLimitReachedError, } from '../service/wallet.service.js';
+import { ReconciliationFindingNotFoundError, ReconciliationCreditTransactionNotFoundError, ReconciliationCreditMismatchError, } from '../service/reconciliation.service.js';
+// Unauthenticated route: it costs a signature verification (and, for a custody vendor,
+// a DB lookup) per request with nothing else gating it. Keyed on client IP, not a
+// vendor/account identity, since an attacker chooses neither. A request with no IP
+// signal (proxy misconfiguration) still shares one bucket rather than skipping the
+// limiter outright - "no signal" must never mean "no limit".
+const WALLET_WEBHOOK_RATE_LIMIT = { limit: 120, windowMs: 60 * 1000 };
+async function dispatchWebhook(wallet, paymentProviders, providerName, rawBody, headers) {
+    const provider = paymentProviders.get(providerName);
+    // A missing provider fails the exact same shape as a bad signature - the path segment
+    // must never let an attacker enumerate which vendors are bound.
+    if (rawBody === undefined ||
+        !provider ||
+        !(await provider.webhookVerifier.verify(rawBody, headers))) {
+        throw new ORPCError('UNAUTHORIZED', { message: 'Invalid payment webhook signature' });
+    }
+    // Always the SAME provider's adapter that verified the signature - never verify with
+    // one vendor's key and parse with another's format (signature confusion).
+    const event = provider.adapter.parseWebhook?.(rawBody, headers);
+    if (event) {
+        if (event.kind === 'deposit') {
+            await wallet.creditDepositByAddress(event, providerName);
+        }
+        else {
+            await wallet.reconcileWithdrawalStatus(event);
+        }
+    }
+    return { ok: true };
+}
+export function walletBalanceChannel(userId) {
+    return `wallet:balance:${userId}`;
+}
+export function createWalletBalanceStream(realtime, userId, signal) {
+    return createEventStreamGenerator((push) => realtime.subscribe(walletBalanceChannel(userId), push), { signal });
+}
+export function createWalletRouter({ wallet, adminGuard, audit, paymentProviders, reconciliation, jobQueue, reconciliationQueue, realtime, limiter, }) {
     const os = implement(walletContract).$context();
+    const throttleWebhook = (context) => assertRateLimit(limiter, makeRateLimitKey(RATE_LIMIT_KEYS.WALLET_WEBHOOK, context.clientMeta.ip ?? 'unknown'), WALLET_WEBHOOK_RATE_LIMIT);
     return os.router({
         getBalance: os.getBalance.handler(({ context }) => wallet.getBalance(getUserId(context))),
-        deposit: os.deposit.handler(({ input, context }) => mapErrors({ CONFLICT: IdempotencyKeyReuseError }, () => wallet.deposit({
+        getBalances: os.getBalances.handler(({ context }) => wallet.getBalances(getUserId(context))),
+        // Player-scoped: the channel is keyed by the session's userId, never an input
+        // parameter, so a player can never subscribe to another player's balance channel.
+        streamBalance: os.streamBalance.handler(({ signal, context }) => {
+            return createWalletBalanceStream(realtime, getUserId(context), signal);
+        }),
+        setActiveCurrency: os.setActiveCurrency.handler(({ input, context }) => mapErrors({ NOT_FOUND: WalletNotFoundError }, () => wallet.setActiveCurrency(getUserId(context), input.currency))),
+        deposit: os.deposit.handler(({ input, context }) => mapErrors({
+            // A disabled currency/network is a permanent policy rejection, not a state
+            // conflict: 409 would tell a status-code-branching client to retry it.
+            BAD_REQUEST: [UnsupportedNetworkError, BelowMinimumDepositError, DepositDisabledError],
+            CONFLICT: [IdempotencyKeyReuseError, RgLimitExceededError],
+        }, () => wallet.deposit({
             userId: getUserId(context),
             amount: input.amount,
             currency: input.currency,
             provider: input.provider,
             idempotencyKey: input.idempotencyKey,
         }))),
-        withdraw: os.withdraw.handler(({ input, context }) => mapErrors({
-            NOT_FOUND: WalletNotFoundError,
-            BAD_REQUEST: [InsufficientBalanceError, CurrencyMismatchError],
-            CONFLICT: [KycRequiredError, IdempotencyKeyReuseError, DestinationAddressRequiredError],
-        }, () => wallet.withdraw({
+        withdraw: os.withdraw.handler(({ input, context }) => {
+            return mapErrors({
+                NOT_FOUND: WalletNotFoundError,
+                BAD_REQUEST: [
+                    InsufficientBalanceError,
+                    AmbiguousNetworkError,
+                    UnsupportedNetworkError,
+                    BelowMinimumWithdrawalError,
+                ],
+                CONFLICT: [
+                    KycRequiredError,
+                    IdempotencyKeyReuseError,
+                    DestinationAddressRequiredError,
+                    BonusRolloverLockedError,
+                    DestinationAddressNotWhitelistedError,
+                    WithdrawalDisabledError,
+                ],
+            }, () => wallet.withdraw({
+                userId: getUserId(context),
+                amount: input.amount,
+                currency: input.currency,
+                network: input.network,
+                idempotencyKey: input.idempotencyKey,
+                destinationAddress: input.destinationAddress,
+                destinationTag: input.destinationTag,
+                ...context.clientMeta,
+            }));
+        }),
+        manualAdjustment: os.manualAdjustment.handler(async ({ input, context }) => {
+            const { userId: adminId, ip, userAgent } = await adminGuard.assertSuperAdmin(context);
+            return mapErrors({
+                NOT_FOUND: PlayerNotFoundError,
+                BAD_REQUEST: InsufficientBalanceError,
+                CONFLICT: IdempotencyKeyReuseError,
+            }, () => wallet.manualAdjust({ ...input, adminId, ip, userAgent }));
+        }),
+        listTransactions: os.listTransactions.handler(({ context, input }) => wallet.getTransactions({
             userId: getUserId(context),
-            amount: input.amount,
-            currency: input.currency,
-            idempotencyKey: input.idempotencyKey,
-            destinationAddress: input.destinationAddress,
-        }))),
-        listTransactions: os.listTransactions.handler(({ context, input }) => wallet.getTransactions(getUserId(context), input.page, input.limit)),
+            page: input.page,
+            limit: input.limit,
+            sortBy: input.sortBy,
+            sortOrder: input.sortOrder,
+        })),
         listPlayerTransactions: os.listPlayerTransactions.handler(async ({ input, context }) => {
             await adminGuard.assert(context, 'transaction', 'view');
-            return wallet.getTransactions(input.userId, input.page, input.limit);
+            return wallet.getTransactions({
+                userId: input.userId,
+                page: input.page,
+                limit: input.limit,
+                sortBy: input.sortBy,
+                sortOrder: input.sortOrder,
+                includeInternal: true,
+            });
         }),
         withdrawals: {
             list: os.withdrawals.list.handler(async ({ input, context }) => {
@@ -35,17 +124,17 @@ export function createWalletRouter(wallet, adminGuard, audit, paymentAdapter, we
                 return wallet.listWithdrawals(input);
             }),
             approve: os.withdrawals.approve.handler(async ({ input, context }) => {
-                const { userId: adminId } = await adminGuard.assert(context, 'withdrawal', 'approve');
-                return mapErrors({ NOT_FOUND: WithdrawalNotFoundError, CONFLICT: WithdrawalNotPendingError }, () => wallet.approveWithdrawal(adminId, input.withdrawalId));
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'withdrawal', 'approve');
+                return mapErrors({ NOT_FOUND: WithdrawalNotFoundError, CONFLICT: WithdrawalNotPendingError }, () => wallet.approveWithdrawal(adminId, input.withdrawalId, { ip, userAgent }));
             }),
             reject: os.withdrawals.reject.handler(async ({ input, context }) => {
-                const { userId: adminId } = await adminGuard.assert(context, 'withdrawal', 'reject');
-                return mapErrors({ NOT_FOUND: WithdrawalNotFoundError, CONFLICT: WithdrawalNotPendingError }, () => wallet.rejectWithdrawal(adminId, input.withdrawalId, input.reason));
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'withdrawal', 'reject');
+                return mapErrors({ NOT_FOUND: WithdrawalNotFoundError, CONFLICT: WithdrawalNotPendingError }, () => wallet.rejectWithdrawal(adminId, input.withdrawalId, input.reason, { ip, userAgent }));
             }),
         },
         autoWithdrawalRules: {
             set: os.autoWithdrawalRules.set.handler(async ({ input, context }) => {
-                const { userId: adminId } = await adminGuard.assert(context, 'withdrawal', 'auto-rule');
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'withdrawal', 'auto-rule');
                 const before = await wallet.getAutoWithdrawalRule(input.userId);
                 const rule = await wallet.setAutoWithdrawalRule({
                     userId: input.userId,
@@ -61,6 +150,8 @@ export function createWalletRouter(wallet, adminGuard, audit, paymentAdapter, we
                     resourceId: input.userId,
                     before: before ? { threshold: before.threshold, reason: before.reason } : null,
                     after: { threshold: rule.threshold, reason: rule.reason },
+                    ip,
+                    userAgent,
                 });
                 return rule;
             }),
@@ -69,7 +160,7 @@ export function createWalletRouter(wallet, adminGuard, audit, paymentAdapter, we
                 return wallet.getAutoWithdrawalRule(input.userId);
             }),
             delete: os.autoWithdrawalRules.delete.handler(async ({ input, context }) => {
-                const { userId: adminId } = await adminGuard.assert(context, 'withdrawal', 'auto-rule');
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'withdrawal', 'auto-rule');
                 const before = await wallet.getAutoWithdrawalRule(input.userId);
                 const deleted = await wallet.deleteAutoWithdrawalRule(input.userId);
                 if (deleted) {
@@ -81,30 +172,131 @@ export function createWalletRouter(wallet, adminGuard, audit, paymentAdapter, we
                         resourceId: input.userId,
                         before: before ? { threshold: before.threshold, reason: before.reason } : null,
                         after: null,
+                        ip,
+                        userAgent,
                     });
                 }
                 return deleted;
             }),
         },
+        autoWithdrawalConfig: {
+            set: os.autoWithdrawalConfig.set.handler(async ({ input, context }) => {
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'auto-withdrawal-config', 'update');
+                // The before-read, upsert, and audit write all run inside one transaction in
+                // the service - an audit failure rolls back the threshold change too.
+                return wallet.setAutoWithdrawalConfig(adminId, input, { ip, userAgent });
+            }),
+            get: os.autoWithdrawalConfig.get.handler(async ({ context }) => {
+                await adminGuard.assert(context, 'auto-withdrawal-config', 'view');
+                return mapErrors({ NOT_FOUND: AutoWithdrawalConfigNotFoundError }, () => wallet.getAutoWithdrawalConfig());
+            }),
+        },
+        listAssets: os.listAssets.handler(() => wallet.listEnabledWalletAssets()),
+        assets: {
+            list: os.assets.list.handler(async ({ context }) => {
+                await adminGuard.assert(context, 'wallet-asset', 'view');
+                return wallet.listWalletAssets();
+            }),
+            create: os.assets.create.handler(async ({ input, context }) => {
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'wallet-asset', 'create');
+                return mapErrors({
+                    CONFLICT: [
+                        WalletAssetAlreadyExistsError,
+                        WalletAssetUnsupportedError,
+                        WalletAssetUnknownProviderError,
+                    ],
+                }, () => wallet.createWalletAsset(adminId, input, { ip, userAgent }));
+            }),
+            update: os.assets.update.handler(async ({ input, context }) => {
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'wallet-asset', 'update');
+                return mapErrors({
+                    NOT_FOUND: WalletAssetNotFoundError,
+                    CONFLICT: WalletAssetUnsupportedError,
+                }, () => wallet.updateWalletAsset(adminId, input, { ip, userAgent }));
+            }),
+            delete: os.assets.delete.handler(async ({ input, context }) => {
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'wallet-asset', 'delete');
+                return mapErrors({
+                    CONFLICT: [
+                        WalletAssetInUseError,
+                        WalletAssetHasIssuedAddressesError,
+                        WalletAssetHasInFlightTransactionsError,
+                    ],
+                }, () => wallet.deleteWalletAsset(adminId, input.currency, input.network, { ip, userAgent }));
+            }),
+        },
+        withdrawalAddresses: {
+            list: os.withdrawalAddresses.list.handler(({ input, context }) => wallet.listWithdrawalAddresses(getUserId(context), input.currency)),
+            create: os.withdrawalAddresses.create.handler(({ input, context }) => mapErrors({
+                CONFLICT: [WithdrawalAddressAlreadyExistsError, WithdrawalAddressLimitReachedError],
+            }, () => wallet.createWithdrawalAddress(getUserId(context), input, context.clientMeta))),
+            delete: os.withdrawalAddresses.delete.handler(({ input, context }) => wallet.deleteWithdrawalAddress(getUserId(context), input.id, context.clientMeta)),
+        },
         deposits: {
-            getAddress: os.deposits.getAddress.handler(({ input, context }) => mapErrors({ CONFLICT: DepositAddressUnsupportedError }, () => wallet.getOrCreateDepositAddress(getUserId(context), input.currency))),
+            getAddress: os.deposits.getAddress.handler(({ input, context }) => mapErrors({
+                BAD_REQUEST: [UnsupportedNetworkError, DepositDisabledError],
+                CONFLICT: DepositAddressUnsupportedError,
+            }, () => wallet.getOrCreateDepositAddress(getUserId(context), input.currency, input.network))),
+        },
+        bonusRolloverStatus: os.bonusRolloverStatus.handler(({ context, input }) => wallet.getBonusRolloverStatus(getUserId(context), input.status)),
+        bonusRolloverConfig: {
+            get: os.bonusRolloverConfig.get.handler(async ({ context }) => {
+                await adminGuard.assert(context, 'bonus-rollover-config', 'view');
+                return mapErrors({ NOT_FOUND: BonusRolloverConfigNotFoundError }, () => wallet.getBonusRolloverConfig());
+            }),
+            set: os.bonusRolloverConfig.set.handler(async ({ input, context }) => {
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'bonus-rollover-config', 'update');
+                return wallet.setBonusRolloverConfig(adminId, input, { ip, userAgent });
+            }),
         },
         webhook: os.webhook.handler(async ({ context }) => {
-            const rawBody = context.rawBody;
-            if (rawBody === undefined || !webhookVerifier.verify(rawBody, context.request.headers)) {
-                throw new ORPCError('UNAUTHORIZED', { message: 'Invalid payment webhook signature' });
-            }
-            const event = paymentAdapter.parseWebhook?.(rawBody, context.request.headers);
-            if (event) {
-                if (event.kind === 'deposit') {
-                    await wallet.creditDepositByAddress(event);
-                }
-                else {
-                    await wallet.reconcileWithdrawalStatus(event);
-                }
-            }
-            return { ok: true };
+            await throttleWebhook(context);
+            return dispatchWebhook(wallet, paymentProviders, DEFAULT_PAYMENT_PROVIDER, context.rawBody, context.request.headers);
+        }),
+        webhookForProvider: os.webhookForProvider.handler(async ({ input, context }) => {
+            await throttleWebhook(context);
+            return dispatchWebhook(wallet, paymentProviders, input.provider, context.rawBody, context.request.headers);
         }),
+        custody: {
+            sweep: {
+                run: os.custody.sweep.run.handler(async ({ context }) => {
+                    await adminGuard.assert(context, 'wallet-custody', 'run');
+                    // The run claim (a unique-index insert in wallet_job_run) is the sole
+                    // concurrency authority, not this request - enqueue and return immediately so
+                    // an HTTP timeout can never orphan a cycle. runId is minted here so the caller
+                    // gets it back synchronously, before the job actually runs.
+                    const runId = randomUUID();
+                    await jobQueue.enqueue(CUSTODY_SWEEP_QUEUE, { runId });
+                    return { runId };
+                }),
+            },
+        },
+        reconciliation: {
+            list: os.reconciliation.list.handler(async ({ input, context }) => {
+                await adminGuard.assert(context, 'wallet-reconciliation', 'view');
+                return reconciliation.listFindings(input);
+            }),
+            resolve: os.reconciliation.resolve.handler(async ({ input, context }) => {
+                const { userId: adminId, ip, userAgent, } = await adminGuard.assert(context, 'wallet-reconciliation', 'resolve');
+                return mapErrors({
+                    NOT_FOUND: [
+                        ReconciliationFindingNotFoundError,
+                        ReconciliationCreditTransactionNotFoundError,
+                    ],
+                    CONFLICT: ReconciliationCreditMismatchError,
+                }, () => reconciliation.resolveFinding(adminId, input.id, input.resolution, { ip, userAgent }));
+            }),
+            // Enqueues the job and returns the runId immediately - never runs inline. The
+            // eventual worker's own claim (wallet_job_run's partial unique index) stays the
+            // single concurrency authority; this route does not know or care whether its
+            // claim will win.
+            run: os.reconciliation.run.handler(async ({ context }) => {
+                await adminGuard.assert(context, 'wallet-reconciliation', 'run');
+                const runId = randomUUID();
+                await jobQueue.enqueue(reconciliationQueue, { runId });
+                return { runId };
+            }),
+        },
     });
 }
 //# sourceMappingURL=index.js.map

package/dist/wallet/router/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/wallet/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAoC,MAAM,sBAAsB,CAAC;AAM9F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,EACxB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,8BAA8B,CAAC;AAEtC,MAAM,UAAU,kBAAkB,CAChC,MAAqB,EACrB,UAAsB,EACtB,KAAqB,EACrB,cAA8B,EAC9B,eAAuC;IAEvC,MAAM,EAAE,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAc,CAAC;IAE5D,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzF,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACjD,SAAS,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,EAAE,GAAG,EAAE,CACrD,MAAM,CAAC,OAAO,CAAC;YACb,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CACH,CACF;QAED,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACnD,SAAS,CACP;YACE,SAAS,EAAE,mBAAmB;YAC9B,WAAW,EAAE,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;YAC9D,QAAQ,EAAE,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,+BAA+B,CAAC;SACxF,EACD,GAAG,EAAE,CACH,MAAM,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C,CAAC,CACL,CACF;QAED,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CACnE,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CACpE;QAED,sBAAsB,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrF,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC,CAAC;QAEF,WAAW,EAAE;YACX,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;gBACvD,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC,CAAC;YAEF,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBACtF,OAAO,SAAS,CACd,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAC3E,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAC5D,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACjE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;gBACrF,OAAO,SAAS,CACd,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAC3E,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CACzE,CAAC;YACJ,CAAC,CAAC;SACH;QAED,mBAAmB,EAAE;YACnB,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBACxF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;oBAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,OAAO;iBACnB,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC;oBACjB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,OAAO;oBAClB,MAAM,EAAE,iCAAiC;oBACzC,YAAY,EAAE,sBAAsB;oBACpC,UAAU,EAAE,KAAK,CAAC,MAAM;oBACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;oBAC9E,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;iBAC1D,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;YAEF,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC5D,OAAO,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBACxF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,CAAC,MAAM,CAAC;wBACjB,OAAO,EAAE,OAAO;wBAChB,SAAS,EAAE,OAAO;wBAClB,MAAM,EAAE,qCAAqC;wBAC7C,YAAY,EAAE,sBAAsB;wBACpC,UAAU,EAAE,KAAK,CAAC,MAAM;wBACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;wBAC9E,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;SACH;QAED,QAAQ,EAAE;YACR,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAChE,SAAS,CAAC,EAAE,QAAQ,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAC3D,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CACrE,CACF;SACF;QAED,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/wallet/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,SAAS,EACT,SAAS,EACT,eAAe,GAGhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GAUjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAA4B,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,8BAA8B,EAC9B,+BAA+B,EAC/B,qCAAqC,EACrC,iCAAiC,EACjC,wBAAwB,EACxB,gCAAgC,EAChC,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,+BAA+B,EAC/B,qBAAqB,EACrB,kCAAkC,EAClC,uCAAuC,EACvC,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,kCAAkC,EAClC,4CAA4C,EAC5C,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAE9C,uFAAuF;AACvF,kFAAkF;AAClF,mFAAmF;AACnF,mFAAmF;AACnF,6DAA6D;AAC7D,MAAM,yBAAyB,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;AAEtE,KAAK,UAAU,eAAe,CAC5B,MAAqB,EACrB,gBAAyC,EACzC,YAAoB,EACpB,OAA2B,EAC3B,OAAsD;IAEtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpD,sFAAsF;IACtF,gEAAgE;IAChE,IACE,OAAO,KAAK,SAAS;QACrB,CAAC,QAAQ;QACT,CAAC,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,qFAAqF;IACrF,0EAA0E;IAC1E,MAAM,KAAK,GAA2C,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CACnF,OAAO,EACP,OAAO,CACR,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,OAAO,kBAAkB,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAA2B,EAC3B,MAAkB,EAClB,MAA+B;IAE/B,OAAO,0BAA0B,CAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAsB,oBAAoB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EACrF,EAAE,MAAM,EAAE,CACX,CAAC;AACJ,CAAC;AAoBD,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,mBAAmB,EACnB,QAAQ,EACR,OAAO,GACU;IACjB,MAAM,EAAE,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAc,CAAC;IAE5D,MAAM,eAAe,GAAG,CAAC,OAAmB,EAAE,EAAE,CAC9C,eAAe,CACb,OAAO,EACP,gBAAgB,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,SAAS,CAAC,EACpF,yBAAyB,CAC1B,CAAC;IAEJ,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAE5F,8EAA8E;QAC9E,kFAAkF;QAClF,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YAC9D,OAAO,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACrE,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACjD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAC7D,CACF;QAED,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACjD,SAAS,CACP;YACE,2EAA2E;YAC3E,uEAAuE;YACvE,WAAW,EAAE,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,oBAAoB,CAAC;YACtF,QAAQ,EAAE,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;SAC3D,EACD,GAAG,EAAE,CACH,MAAM,CAAC,OAAO,CAAC;YACb,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CACL,CACF;QAED,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACnD,OAAO,SAAS,CACd;gBACE,SAAS,EAAE,mBAAmB;gBAC9B,WAAW,EAAE;oBACX,wBAAwB;oBACxB,qBAAqB;oBACrB,uBAAuB;oBACvB,2BAA2B;iBAC5B;gBACD,QAAQ,EAAE;oBACR,gBAAgB;oBAChB,wBAAwB;oBACxB,+BAA+B;oBAC/B,wBAAwB;oBACxB,qCAAqC;oBACrC,uBAAuB;iBACxB;aACF,EACD,GAAG,EAAE,CACH,MAAM,CAAC,QAAQ,CAAC;gBACd,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,OAAO,CAAC,UAAU;aACtB,CAAC,CACL,CAAC;QACJ,CAAC,CAAC;QAEF,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACtF,OAAO,SAAS,CACd;gBACE,SAAS,EAAE,mBAAmB;gBAC9B,WAAW,EAAE,wBAAwB;gBACrC,QAAQ,EAAE,wBAAwB;aACnC,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC;QAEF,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CACnE,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH;QAED,sBAAsB,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrF,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,eAAe,CAAC;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,WAAW,EAAE;YACX,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;gBACvD,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC,CAAC;YAEF,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC9D,OAAO,SAAS,CACd,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAC3E,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC/E,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACjE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAC7D,OAAO,SAAS,CACd,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAC3E,GAAG,EAAE,CACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACxF,CAAC;YACJ,CAAC,CAAC;SACH;QAED,mBAAmB,EAAE;YACnB,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;oBAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,OAAO;iBACnB,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC;oBACjB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,OAAO;oBAClB,MAAM,EAAE,iCAAiC;oBACzC,YAAY,EAAE,sBAAsB;oBACpC,UAAU,EAAE,KAAK,CAAC,MAAM;oBACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;oBAC9E,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;oBACzD,EAAE;oBACF,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;YAEF,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC5D,OAAO,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,CAAC,MAAM,CAAC;wBACjB,OAAO,EAAE,OAAO;wBAChB,SAAS,EAAE,OAAO;wBAClB,MAAM,EAAE,qCAAqC;wBAC7C,YAAY,EAAE,sBAAsB;wBACpC,UAAU,EAAE,KAAK,CAAC,MAAM;wBACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;wBAC9E,KAAK,EAAE,IAAI;wBACX,EAAE;wBACF,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;SACH;QAED,oBAAoB,EAAE;YACpB,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,EAAE,QAAQ,CAAC,CAAC;gBACzE,6EAA6E;gBAC7E,sEAAsE;gBACtE,OAAO,MAAM,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC;YAEF,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;gBACnE,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,iCAAiC,EAAE,EAAE,GAAG,EAAE,CACtE,MAAM,CAAC,uBAAuB,EAAE,CACjC,CAAC;YACJ,CAAC,CAAC;SACH;QAED,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAEzE,MAAM,EAAE;YACN,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACjD,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;gBACzD,OAAO,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACnC,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC5D,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;gBAC/D,OAAO,SAAS,CACd;oBACE,QAAQ,EAAE;wBACR,6BAA6B;wBAC7B,2BAA2B;wBAC3B,+BAA+B;qBAChC;iBACF,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAClE,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC5D,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;gBAC/D,OAAO,SAAS,CACd;oBACE,SAAS,EAAE,wBAAwB;oBACnC,QAAQ,EAAE,2BAA2B;iBACtC,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAClE,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC5D,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;gBAC/D,OAAO,SAAS,CACd;oBACE,QAAQ,EAAE;wBACR,qBAAqB;wBACrB,kCAAkC;wBAClC,uCAAuC;qBACxC;iBACF,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC1F,CAAC;YACJ,CAAC,CAAC;SACH;QAED,mBAAmB,EAAE;YACnB,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAC/D,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CACnE;YAED,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACnE,SAAS,CACP;gBACE,QAAQ,EAAE,CAAC,mCAAmC,EAAE,kCAAkC,CAAC;aACpF,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CACpF,CACF;YAED,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACnE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CACjF;SACF;QAED,QAAQ,EAAE;YACR,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAChE,SAAS,CACP;gBACE,WAAW,EAAE,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;gBAC5D,QAAQ,EAAE,8BAA8B;aACzC,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAC1F,CACF;SACF;QAED,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CACzE,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAChE;QAED,mBAAmB,EAAE;YACnB,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC5D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;gBAClE,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,gCAAgC,EAAE,EAAE,GAAG,EAAE,CACrE,MAAM,CAAC,sBAAsB,EAAE,CAChC,CAAC;YACJ,CAAC,CAAC;YAEF,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,CAAC,CAAC;gBACxE,OAAO,MAAM,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC;SACH;QAED,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAChD,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,eAAe,CACpB,MAAM,EACN,gBAAgB,EAChB,wBAAwB,EACxB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,OAAO,CAAC,OAAO,CACxB,CAAC;QACJ,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7E,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,eAAe,CACpB,MAAM,EACN,gBAAgB,EAChB,KAAK,CAAC,QAAQ,EACd,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,OAAO,CAAC,OAAO,CACxB,CAAC;QACJ,CAAC,CAAC;QAEF,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;oBACtD,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;oBAC1D,sEAAsE;oBACtE,8EAA8E;oBAC9E,+EAA+E;oBAC/E,4DAA4D;oBAC5D,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;oBAC3B,MAAM,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;oBACvD,OAAO,EAAE,KAAK,EAAE,CAAC;gBACnB,CAAC,CAAC;aACH;SACF;QAED,cAAc,EAAE;YACd,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAChE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;gBAClE,OAAO,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACtE,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,EAAE,EACF,SAAS,GACV,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;gBACzE,OAAO,SAAS,CACd;oBACE,SAAS,EAAE;wBACT,kCAAkC;wBAClC,4CAA4C;qBAC7C;oBACD,QAAQ,EAAE,iCAAiC;iBAC5C,EACD,GAAG,EAAE,CACH,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACxF,CAAC;YACJ,CAAC,CAAC;YAEF,8EAA8E;YAC9E,gFAAgF;YAChF,6EAA6E;YAC7E,kBAAkB;YAClB,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACvD,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;gBACjE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}