@proteinjs/user-server 1.12.0 → 1.13.0

package/dist/src/authorization/userCache.js

@@ -45,7 +45,9 @@ var db_1 = require("@proteinjs/db");
 var logger_1 = require("@proteinjs/logger");
 var user_1 = require("@proteinjs/user");
 var DefaultAdminCredentials_1 = require("../authentication/DefaultAdminCredentials");
+var UserActivityStamp_1 = require("./UserActivityStamp");
 var logger = new logger_1.Logger({ name: 'userCache' });
+var userActivityStamp = new UserActivityStamp_1.UserActivityStamp();
 exports.userCache = {
     key: user_1.USER_SESSION_CACHE_KEY,
     create: function (sessionId, userEmail) { return __awaiter(void 0, void 0, void 0, function () {
@@ -84,6 +86,13 @@ exports.userCache = {
                     else if (accountUser) {
                         delete accountUser['password'];
                         user = accountUser;
+                        // LAST ACTIVITY (human presence — UserActivityTable's contract): stamped HERE because
+                        // this cache build runs exactly once per session-cookie request (wrapRoute), i.e. only
+                        // for interactive transport. Background/seeded contexts (runInUserScope) set session
+                        // data directly and never pass through, so machinery acting as the user structurally
+                        // cannot stamp; the stamp itself refuses machine accounts. Fire-and-forget: the
+                        // returned promise never rejects, and a request never waits on its own stamp.
+                        void userActivityStamp.recordInteractiveRequest(user);
                     }
                     else {
                         // A session can outlive its account (row deleted, or a dev auto-login for a never-created

package/dist/src/authorization/userCache.js.map

@@ -1 +1 @@
-{"version":3,"file":"userCache.js","sourceRoot":"","sources":["../../../src/authorization/userCache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAE5B,oCAA8C;AAC9C,4CAA2C;AAC3C,wCAAkF;AAClF,qFAAoF;AAEpF,IAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAEpC,QAAA,SAAS,GAA2B;IAC/C,GAAG,EAAE,6BAAsB;IAC3B,MAAM,EAAE,UAAO,SAAiB,EAAE,SAAiB;;;;;oBAC7C,IAAI,GAAG,gBAAS,CAAC;yBACjB,SAAS,EAAT,wBAAS;oBACL,gBAAgB,GAAG,iDAAuB,CAAC,cAAc,EAAE,CAAC;yBAC9D,CAAA,gBAAgB,IAAI,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAA,EAA1D,wBAA0D;oBACtD,SAAS,GAAS;wBACtB,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB,CAAC,QAAQ;wBAChC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;wBACnC,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,CAAC,OAAO,CAAC;wBAChB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,EAAE,EAAE,OAAO;qBACZ,CAAC;oBACF,IAAI,GAAG,SAAS,CAAC;;wBAEG,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,EAAA;;oBAAxF,WAAW,GAAG,SAA0E;oBAC9F,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,EAAE;wBACvD,sFAAsF;wBACtF,iFAAiF;wBACjF,4EAA4E;wBAC5E,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,wEAAwE;4BACjF,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;yBAAM,IAAI,WAAW,EAAE;wBACtB,OAAQ,WAAmB,CAAC,UAAU,CAAC,CAAC;wBACxC,IAAI,GAAG,WAAW,CAAC;qBACpB;yBAAM;wBACL,0FAA0F;wBAC1F,+EAA+E;wBAC/E,sFAAsF;wBACtF,yDAAyD;wBACzD,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,iFAAiF;4BAC1F,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;;wBAIL,sBAAO,IAAI,EAAC;;;SACb;CACF,CAAC"}
+{"version":3,"file":"userCache.js","sourceRoot":"","sources":["../../../src/authorization/userCache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAE5B,oCAA8C;AAC9C,4CAA2C;AAC3C,wCAAkF;AAClF,qFAAoF;AACpF,yDAAwD;AAExD,IAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACjD,IAAM,iBAAiB,GAAG,IAAI,qCAAiB,EAAE,CAAC;AAErC,QAAA,SAAS,GAA2B;IAC/C,GAAG,EAAE,6BAAsB;IAC3B,MAAM,EAAE,UAAO,SAAiB,EAAE,SAAiB;;;;;oBAC7C,IAAI,GAAG,gBAAS,CAAC;yBACjB,SAAS,EAAT,wBAAS;oBACL,gBAAgB,GAAG,iDAAuB,CAAC,cAAc,EAAE,CAAC;yBAC9D,CAAA,gBAAgB,IAAI,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAA,EAA1D,wBAA0D;oBACtD,SAAS,GAAS;wBACtB,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB,CAAC,QAAQ;wBAChC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;wBACnC,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,CAAC,OAAO,CAAC;wBAChB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,EAAE,EAAE,OAAO;qBACZ,CAAC;oBACF,IAAI,GAAG,SAAS,CAAC;;wBAEG,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,EAAA;;oBAAxF,WAAW,GAAG,SAA0E;oBAC9F,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,EAAE;wBACvD,sFAAsF;wBACtF,iFAAiF;wBACjF,4EAA4E;wBAC5E,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,wEAAwE;4BACjF,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;yBAAM,IAAI,WAAW,EAAE;wBACtB,OAAQ,WAAmB,CAAC,UAAU,CAAC,CAAC;wBACxC,IAAI,GAAG,WAAW,CAAC;wBACnB,sFAAsF;wBACtF,uFAAuF;wBACvF,qFAAqF;wBACrF,qFAAqF;wBACrF,gFAAgF;wBAChF,8EAA8E;wBAC9E,KAAK,iBAAiB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;qBACvD;yBAAM;wBACL,0FAA0F;wBAC1F,+EAA+E;wBAC/E,sFAAsF;wBACtF,yDAAyD;wBACzD,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,iFAAiF;4BAC1F,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;;wBAIL,sBAAO,IAAI,EAAC;;;SACb;CACF,CAAC"}

package/dist/test/UserActivityStamp.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserActivityStamp.integration.test.d.ts.map

package/dist/test/UserActivityStamp.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserActivityStamp.integration.test.d.ts","sourceRoot":"","sources":["../../test/UserActivityStamp.integration.test.ts"],"names":[],"mappings":""}

package/dist/test/UserActivityStamp.integration.test.js

@@ -0,0 +1,255 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var moment_1 = __importDefault(require("moment"));
+var db_1 = require("@proteinjs/db");
+var user_1 = require("@proteinjs/user");
+var userCache_1 = require("../src/authorization/userCache");
+var UserActivityStamp_1 = require("../src/authorization/UserActivityStamp");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+var stampInternals = function (stamp) { return stamp.constructor; };
+var activityRows = function (scope) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserActivity, { scope: scope })];
+        case 1: return [2 /*return*/, _a.sent()];
+    }
+}); }); };
+/** The stamp write is fire-and-forget off userCache — poll the OUTCOME (row present) briefly. */
+var waitForActivityRow = function (scope) { return __awaiter(void 0, void 0, void 0, function () {
+    var attempt, rows;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                attempt = 0;
+                _a.label = 1;
+            case 1:
+                if (!(attempt < 50)) return [3 /*break*/, 5];
+                return [4 /*yield*/, activityRows(scope)];
+            case 2:
+                rows = _a.sent();
+                if (rows.length > 0) {
+                    return [2 /*return*/, rows[0]];
+                }
+                return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 100); })];
+            case 3:
+                _a.sent();
+                _a.label = 4;
+            case 4:
+                attempt++;
+                return [3 /*break*/, 1];
+            case 5: throw new Error("No user_activity row appeared for scope ".concat(scope));
+        }
+    });
+}); };
+/**
+ * LAST ACTIVITY = HUMAN PRESENCE (UserActivityTable's contract): the stamp fires from
+ * userCache.create — the once-per-interactive-request session-cache build — and from nowhere
+ * else. These tests pin the seam's outcomes: a human's request lands the presence row; machine
+ * accounts (real sessions, e.g. the error bridge's polling login) never do; repeated stamps
+ * keep ONE row per user; the throttle holds writes to the interval.
+ */
+describe('UserActivityStamp — interactive presence', function () {
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    beforeEach(function () {
+        // Each test controls its own throttle history.
+        stampInternals(new UserActivityStamp_1.UserActivityStamp()).lastStampMs.clear();
+    });
+    it('stamps presence when a signed-in human makes an interactive request (through userCache.create)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var user, resolved, row;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Present Human', email: 'present-human@test.local' })];
+                case 1:
+                    user = _a.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('interactive-session', user.email)];
+                case 2:
+                    resolved = _a.sent();
+                    expect(resolved.id).toBe(user.id);
+                    return [4 /*yield*/, waitForActivityRow(user.id)];
+                case 3:
+                    row = _a.sent();
+                    expect((0, moment_1.default)(row.lastActiveAt).isAfter((0, moment_1.default)().subtract(1, 'minute'))).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('keeps ONE row per user and advances it on later stamps (scope-unique invariant)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var user, stamp, first, rows;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Returning Human', email: 'returning-human@test.local' })];
+                case 1:
+                    user = _a.sent();
+                    stamp = new UserActivityStamp_1.UserActivityStamp();
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, waitForActivityRow(user.id)];
+                case 3:
+                    first = _a.sent();
+                    // Clear the throttle so the second request stamps immediately.
+                    stampInternals(stamp).lastStampMs.clear();
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 5); })];
+                case 4:
+                    _a.sent();
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 5:
+                    _a.sent();
+                    return [4 /*yield*/, activityRows(user.id)];
+                case 6:
+                    rows = _a.sent();
+                    expect(rows).toHaveLength(1);
+                    expect((0, moment_1.default)(rows[0].lastActiveAt).valueOf()).toBeGreaterThanOrEqual((0, moment_1.default)(first.lastActiveAt).valueOf());
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('never stamps a machine account, even though its requests ride a real session', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var machine, resolved, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().insert(user_1.tables.User, {
+                        name: 'Ops machine',
+                        email: 'stamp-machine@test.local',
+                        password: 'test',
+                        emailVerified: true,
+                        roles: [],
+                        isLoadedFromSource: true,
+                    })];
+                case 1:
+                    machine = _b.sent();
+                    // Await the stamp DIRECTLY (deterministic absence — no fire-and-forget race), then confirm
+                    // the transport seam agrees by resolving the machine session through userCache too.
+                    return [4 /*yield*/, new UserActivityStamp_1.UserActivityStamp().recordInteractiveRequest(machine)];
+                case 2:
+                    // Await the stamp DIRECTLY (deterministic absence — no fire-and-forget race), then confirm
+                    // the transport seam agrees by resolving the machine session through userCache too.
+                    _b.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('machine-session', machine.email)];
+                case 3:
+                    resolved = _b.sent();
+                    expect(resolved.id).toBe(machine.id);
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 300); })];
+                case 4:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, activityRows(machine.id)];
+                case 5:
+                    _a.apply(void 0, [_b.sent()]).toHaveLength(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('throttles: a second request inside the interval writes nothing', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var user, stamp, first, rows;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Rapid Human', email: 'rapid-human@test.local' })];
+                case 1:
+                    user = _a.sent();
+                    stamp = new UserActivityStamp_1.UserActivityStamp();
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, waitForActivityRow(user.id)];
+                case 3:
+                    first = _a.sent();
+                    // Throttle history now holds this user; a second stamp inside the interval must not write.
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 4:
+                    // Throttle history now holds this user; a second stamp inside the interval must not write.
+                    _a.sent();
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 300); })];
+                case 5:
+                    _a.sent();
+                    return [4 /*yield*/, activityRows(user.id)];
+                case 6:
+                    rows = _a.sent();
+                    expect(rows).toHaveLength(1);
+                    expect((0, moment_1.default)(rows[0].lastActiveAt).valueOf()).toBe((0, moment_1.default)(first.lastActiveAt).valueOf());
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('a session for a missing account still resolves guest and stamps nothing (no throw)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var before, resolved, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserActivity, {})];
+                case 1:
+                    before = (_b.sent()).length;
+                    return [4 /*yield*/, userCache_1.userCache.create('stale-session', 'no-such-account@test.local')];
+                case 2:
+                    resolved = _b.sent();
+                    expect(resolved.id).toBe('guest');
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 200); })];
+                case 3:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserActivity, {})];
+                case 4:
+                    _a.apply(void 0, [(_b.sent()).length]).toBe(before);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=UserActivityStamp.integration.test.js.map

package/dist/test/UserActivityStamp.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserActivityStamp.integration.test.js","sourceRoot":"","sources":["../../test/UserActivityStamp.integration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAAuE;AACvE,4DAA2D;AAC3D,4EAA2E;AAC3E,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAMhD,IAAM,cAAc,GAAG,UAAC,KAAwB,IAAK,OAAC,KAAmC,CAAC,WAAW,EAAhD,CAAgD,CAAC;AAEtG,IAAM,YAAY,GAAG,UAAO,KAAa;;gBACvC,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,YAAY,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;gBAA3D,sBAAA,SAA2D,EAAA;;SAAA,CAAC;AAE9D,iGAAiG;AACjG,IAAM,kBAAkB,GAAG,UAAO,KAAa;;;;;gBACpC,OAAO,GAAG,CAAC;;;qBAAE,CAAA,OAAO,GAAG,EAAE,CAAA;gBACnB,qBAAM,YAAY,CAAC,KAAK,CAAC,EAAA;;gBAAhC,IAAI,GAAG,SAAyB;gBACtC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;oBACnB,sBAAO,IAAI,CAAC,CAAC,CAAC,EAAC;iBAChB;gBACD,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;gBAAxD,SAAwD,CAAC;;;gBALvB,OAAO,EAAE,CAAA;;oBAO7C,MAAM,IAAI,KAAK,CAAC,kDAA2C,KAAK,CAAE,CAAC,CAAC;;;KACrE,CAAC;AAEF;;;;;;GAMG;AACH,QAAQ,CAAC,0CAA0C,EAAE;IACnD,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,UAAU,CAAC;QACT,+CAA+C;QAC/C,cAAc,CAAC,IAAI,qCAAiB,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE;;;;wBACtF,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,EAAA;;oBAA7F,IAAI,GAAG,SAAsF;oBAElF,qBAAM,qBAAS,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,EAAA;;oBAApE,QAAQ,GAAG,SAAyD;oBAC1E,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAEtB,qBAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAvC,GAAG,GAAG,SAAiC;oBAC7C,MAAM,CAAC,IAAA,gBAAM,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;;;SACrF,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE;;;;wBACvE,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,EAAA;;oBAAjG,IAAI,GAAG,SAA0F;oBACjG,KAAK,GAAG,IAAI,qCAAiB,EAAE,CAAC;oBAEtC,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAA1C,SAA0C,CAAC;oBAC7B,qBAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAzC,KAAK,GAAG,SAAiC;oBAE/C,+DAA+D;oBAC/D,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;oBAC1C,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,EAAtB,CAAsB,CAAC,EAAA;;oBAAtD,SAAsD,CAAC;oBACvD,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAA1C,SAA0C,CAAC;oBAE9B,qBAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAlC,IAAI,GAAG,SAA2B;oBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC7B,MAAM,CAAC,IAAA,gBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,sBAAsB,CAAC,IAAA,gBAAM,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;;;SAC7G,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE;;;;wBACjE,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;wBACxD,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,0BAA0B;wBACjC,QAAQ,EAAE,MAAM;wBAChB,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,EAAE;wBACT,kBAAkB,EAAE,IAAI;qBACN,CAAC,EAAA;;oBAPf,OAAO,GAAG,SAOK;oBAErB,2FAA2F;oBAC3F,oFAAoF;oBACpF,qBAAM,IAAI,qCAAiB,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAA;;oBAF/D,2FAA2F;oBAC3F,oFAAoF;oBACpF,SAA+D,CAAC;oBAC/C,qBAAM,qBAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,EAAA;;oBAAnE,QAAQ,GAAG,SAAwD;oBACzE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACrC,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;oBAAxD,SAAwD,CAAC;oBAEzD,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAA;;oBAArC,kBAAO,SAA8B,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE;;;;wBACtD,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EAAA;;oBAAzF,IAAI,GAAG,SAAkF;oBACzF,KAAK,GAAG,IAAI,qCAAiB,EAAE,CAAC;oBAEtC,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAA1C,SAA0C,CAAC;oBAC7B,qBAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAzC,KAAK,GAAG,SAAiC;oBAE/C,2FAA2F;oBAC3F,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAD1C,2FAA2F;oBAC3F,SAA0C,CAAC;oBAC3C,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;oBAAxD,SAAwD,CAAC;oBAE5C,qBAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAlC,IAAI,GAAG,SAA2B;oBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC7B,MAAM,CAAC,IAAA,gBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAA,gBAAM,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;;;SAC3F,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE;;;;wBACvE,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,YAAY,EAAE,EAAE,CAAC,EAAA;;oBAA9D,MAAM,GAAG,CAAC,SAAoD,CAAC,CAAC,MAAM;oBAC3D,qBAAM,qBAAS,CAAC,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC,EAAA;;oBAAhF,QAAQ,GAAG,SAAqE;oBACtF,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAClC,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;oBAAxD,SAAwD,CAAC;oBACzD,KAAA,MAAM,CAAA;oBAAE,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,YAAY,EAAE,EAAE,CAAC,EAAA;;oBAA5D,kBAAO,CAAC,SAAoD,CAAC,CAAC,MAAM,EAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;;;SACpF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}