@rockcarver/frodo-lib 4.10.0 → 4.11.0-1

package/types/ops/ManagedObjectOps.d.ts

@@ -0,0 +1,393 @@
+import { IdObjectSkeletonInterface, PatchOperationInterface } from '../api/ApiTypes';
+import { State } from '../shared/State';
+import { type RelationshipTarget } from './internal/RelationshipHelpers';
+export type { RelationshipTarget } from './internal/RelationshipHelpers';
+/**
+ * `ManagedObject` covers two distinct things that are easy to conflate:
+ * - **Records**: actual data instances of a managed type (e.g. a specific
+ *   `alpha_user`), created/read/updated/deleted via the `createManagedObject`
+ *   / `readManagedObject` / `updateManagedObjectProperties` /
+ *   `deleteManagedObject` family below.
+ * - **Configuration**: the `managed.json` config entity that defines every
+ *   managed type for the tenant (properties, relationships, etc.), read and
+ *   written as a whole document via `IdmConfigOps.ts`'s
+ *   `readSubConfigEntity('managed', type)` / `importSubConfigEntity('managed', ...)`.
+ *
+ * A type's **schema** — its resolved property/relationship definitions, and
+ * the ways to mutate them — is a third, related thing, covered by
+ * `ManagedObjectSchemaOps.ts` instead (exposed as `frodo.idm.managed.schema`).
+ */
+export type ManagedObject = {
+    /**
+     * Create managed object
+     * @param {string} type managed object type, e.g. teammember or alpha_user
+     * @param {IdObjectSkeletonInterface} moData managed object data
+     * @param {string} id managed object _id
+     */
+    createManagedObject(type: string, moData: IdObjectSkeletonInterface, id?: string): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Find a managed object by a CREST query filter, creating one with a
+     * server-generated _id if no match exists. Intended for JIT-provisioning
+     * flows where an external identity (e.g. a JWT subject from a foreign IDP)
+     * must not become the managed object's own _id/userName: query by a
+     * metadata field pair that captures the external identity instead (e.g.
+     * `custom_merchantCustomerId eq "..." and custom_merchantId eq "..."`),
+     * and let IDM generate the local _id on first use.
+     * @param {string} type managed object type, e.g. alpha_user
+     * @param {string} filter CREST search filter uniquely identifying the object by its external identity metadata
+     * @param {IdObjectSkeletonInterface} moData object data to create with if no match is found; ignored if a match is found
+     * @param {string[]} fields array of fields to return in either case
+     * @returns {Promise<FindOrCreateManagedObjectResult>} the found or newly created object, and whether it was newly created
+     */
+    findOrCreateManagedObject(type: string, filter: string, moData: IdObjectSkeletonInterface, fields?: string[]): Promise<FindOrCreateManagedObjectResult>;
+    /**
+     * Read managed object
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} id managed object id
+     * @param {string[]} fields array of fields to include
+     * @returns {Promise<IdObjectSkeletonInterface>} a promise that resolves to an IdObjectSkeletonInterface
+     */
+    readManagedObject(type: string, id: string, fields?: string[]): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Read all managed object of the specified type
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string[]} fields array of fields to return
+     * @returns {Promise<IdObjectSkeletonInterface[]>} a promise that resolves to an array of IdObjectSkeletonInterfaces
+     */
+    readManagedObjects(type: string, fields?: string[]): Promise<IdObjectSkeletonInterface[]>;
+    /**
+     * Count managed objects of the specified type.
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} filter CREST search filter
+     * @returns {Promise<number>} a promise that resolves to the object count
+     */
+    countManagedObjects(type: string, filter?: string): Promise<number>;
+    /**
+     * Update managed object
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} id managed object id
+     * @param {IdObjectSkeletonInterface} moData managed object data
+     * @returns {Promise<IdObjectSkeletonInterface>} a promise that resolves to an IdObjectSkeletonInterface
+     */
+    updateManagedObject(type: string, id: string, moData: IdObjectSkeletonInterface): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Partially update managed object through a collection of patch operations.
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} id managed object id
+     * @param {PatchOperationInterface[]} operations collection of patch operations to perform on the object
+     * @param {string} rev managed object revision
+     * @returns {Promise<IdObjectSkeletonInterface>} a promise that resolves to an IdObjectSkeletonInterface
+     */
+    updateManagedObjectProperties(type: string, id: string, operations: PatchOperationInterface[], rev?: string): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Partially update multiple managed object through a collection of patch operations.
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} filter CREST search filter
+     * @param {PatchOperationInterface[]} operations collection of patch operations to perform on the object
+     * @param {string} rev managed object revision
+     * @param {number} pageSize page size
+     * @returns {Promise<IdObjectSkeletonInterface>} a promise that resolves to an IdObjectSkeletonInterface
+     */
+    updateManagedObjectsProperties(type: string, filter: string, operations: PatchOperationInterface[], rev?: string, pageSize?: number): Promise<IdObjectSkeletonInterface[]>;
+    /**
+     * Delete managed object
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} id managed object id
+     * @returns {Promise<IdObjectSkeletonInterface>} a promise that resolves to an IdObjectSkeletonInterface
+     */
+    deleteManagedObject(type: string, id: string): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Delete managed objects by filter
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} filter filter
+     * @returns {Promise<number>} a promise that resolves the number of deleted objects
+     */
+    deleteManagedObjects(type: string, filter: string): Promise<number>;
+    /**
+     * Query managed objects
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} filter CREST search filter
+     * @param {string[]} fields array of fields to return
+     * @param {number} pageSize page size
+     * @return {Promise<IdObjectSkeletonInterface[]>} a promise resolving to an array of managed objects
+     */
+    queryManagedObjects(type: string, filter?: string, fields?: string[], pageSize?: number): Promise<IdObjectSkeletonInterface[]>;
+    /**
+     * Query related managed objects
+     * @param {string} type managed object type, e.g. alpha_user or user
+     * @param {string} id managed object id
+     * @param {string} relationship name of the relationship to query, e.g. "members" for team membership relationships
+     * @param {string[]} fields array of fields to return
+     * @return {Promise<IdObjectSkeletonInterface[]>} a promise resolving to an array of managed objects
+     */
+    queryRelatedManagedObjects(type: string, id: string, relationship: string, fields?: string[], pageSize?: number): Promise<IdObjectSkeletonInterface[]>;
+    /**
+     * Read the current value of a relationship field directly off a managed
+     * object (the forward direction, e.g. an alpha_user's own `manager` or
+     * `roles` field). For the reverse direction use queryRelatedManagedObjects.
+     * @param {string} type managed object type, e.g. alpha_user
+     * @param {string} id managed object id
+     * @param {string} field relationship field name, e.g. 'manager' or 'roles'
+     * @returns {Promise<unknown>} the field's current value: a single ref object, an array of them, or null/undefined if unset
+     */
+    readRelationship(type: string, id: string, field: string): Promise<unknown>;
+    /**
+     * Add one target to a many-valued relationship field without disturbing
+     * any existing members.
+     * @param {string} type managed object type, e.g. alpha_user
+     * @param {string} id managed object id
+     * @param {string} field relationship field name, e.g. 'roles'
+     * @param {RelationshipTarget} target the object to add, as plain { type, id }
+     * @param {string} rev optional optimistic concurrency revision token
+     * @returns {Promise<IdObjectSkeletonInterface>} the patched object
+     */
+    addRelationship(type: string, id: string, field: string, target: RelationshipTarget, rev?: string): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Remove one target from a many-valued relationship field without
+     * disturbing any other members.
+     * @param {string} type managed object type, e.g. alpha_user
+     * @param {string} id managed object id
+     * @param {string} field relationship field name, e.g. 'roles'
+     * @param {RelationshipTarget} target the object to remove, as plain { type, id }
+     * @param {string} rev optional optimistic concurrency revision token
+     * @returns {Promise<IdObjectSkeletonInterface>} the patched object
+     */
+    removeRelationship(type: string, id: string, field: string, target: RelationshipTarget, rev?: string): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Replace the entire value of a relationship field: a single target (or
+     * null to clear it) for a single-valued field like 'manager', or an array
+     * of targets for a many-valued field like 'roles'. Replaces the whole
+     * field — use addRelationship/removeRelationship to change one member of
+     * a many-valued field without disturbing the rest.
+     * @param {string} type managed object type, e.g. alpha_user
+     * @param {string} id managed object id
+     * @param {string} field relationship field name, e.g. 'manager' or 'roles'
+     * @param {RelationshipTarget | RelationshipTarget[] | null} target the new value
+     * @param {string} rev optional optimistic concurrency revision token
+     * @returns {Promise<IdObjectSkeletonInterface>} the patched object
+     */
+    replaceRelationship(type: string, id: string, field: string, target: RelationshipTarget | RelationshipTarget[] | null, rev?: string): Promise<IdObjectSkeletonInterface>;
+    /**
+     * Resolve a managed object's uuid to a human readable username
+     * @param {string} type managed object type, e.g. teammember or alpha_user
+     * @param {string} id managed object _id
+     * @returns {Promise<string>} resolved username or uuid if any error occurs during reslution
+     */
+    resolveUserName(type: string, id: string): Promise<string>;
+    /**
+     * Resolve a managed object's uuid to a human readable full name
+     * @param {string} type managed object type, e.g. teammember or alpha_user
+     * @param {string} id managed object _id
+     * @returns {Promise<string>} resolved full name or uuid if any error occurs during reslution
+     */
+    resolveFullName(type: string, id: string): Promise<string>;
+    /**
+     * Resolve a DN or bare uuid to a structured identity: what kind of principal it is
+     * (managed user, service account, tenant admin, or unknown/unconfirmed) and its
+     * display name, without the caller needing to already know its managed object type.
+     * @param {string} idOrDn a managed/system object uuid, or a full userId DN (e.g. from an audit log event)
+     * @param {string} realm optional realm override; only consulted when idOrDn is a bare uuid (a DN's own realm segment, if present, always wins)
+     * @returns {Promise<ResolvedIdentity>} the resolved identity
+     */
+    resolveIdentity(idOrDn: string, realm?: string): Promise<ResolvedIdentity>;
+};
+declare const _default: (state: State) => ManagedObject;
+export default _default;
+export declare function createManagedObject({ type, id, moData, state, }: {
+    type: string;
+    id?: string;
+    moData: IdObjectSkeletonInterface;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+/** Result of {@link findOrCreateManagedObject}. */
+export type FindOrCreateManagedObjectResult = {
+    /** The found or newly created managed object. */
+    object: IdObjectSkeletonInterface;
+    /** True if no existing object matched the filter and a new one was created. */
+    created: boolean;
+};
+/**
+ * Find a managed object by a CREST query filter, creating one with a
+ * server-generated _id if no match exists. Intended for JIT-provisioning
+ * flows where an external identity (e.g. a JWT subject from a foreign IDP)
+ * must not become the managed object's own _id/userName: query by a
+ * metadata field pair that captures the external identity instead (e.g.
+ * `custom_merchantCustomerId eq "..." and custom_merchantId eq "..."`),
+ * and let IDM generate the local _id on first use.
+ */
+export declare function findOrCreateManagedObject({ type, filter, moData, fields, state, }: {
+    type: string;
+    filter: string;
+    moData: IdObjectSkeletonInterface;
+    fields?: string[];
+    state: State;
+}): Promise<FindOrCreateManagedObjectResult>;
+export declare function readManagedObject({ type, id, fields, state, }: {
+    type: string;
+    id: string;
+    fields: string[];
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+export declare function readManagedObjects({ type, fields, state, }: {
+    type: string;
+    fields: string[];
+    state: State;
+}): Promise<IdObjectSkeletonInterface[]>;
+export declare function countManagedObjects({ type, filter, state, }: {
+    type: string;
+    filter?: string;
+    state: State;
+}): Promise<number>;
+export declare function updateManagedObject({ type, id, moData, state, }: {
+    type: string;
+    id: string;
+    moData: IdObjectSkeletonInterface;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+export declare function updateManagedObjectProperties({ type, id, operations, rev, state, }: {
+    type: string;
+    id: string;
+    operations: PatchOperationInterface[];
+    rev?: string;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+export declare function updateManagedObjectsProperties({ type, filter, operations, rev, pageSize, state, }: {
+    type: string;
+    filter: string;
+    operations: PatchOperationInterface[];
+    rev?: string;
+    pageSize?: number;
+    state: State;
+}): Promise<IdObjectSkeletonInterface[]>;
+export declare function deleteManagedObject({ type, id, state, }: {
+    type: string;
+    id: string;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+export declare function deleteManagedObjects({ type, filter, state, }: {
+    type: string;
+    filter: string;
+    state: State;
+}): Promise<number>;
+export declare function queryManagedObjects({ type, filter, fields, pageSize, state, }: {
+    type: string;
+    filter?: string;
+    fields?: string[];
+    pageSize?: number;
+    state: State;
+}): Promise<IdObjectSkeletonInterface[]>;
+/**
+ * Query related managed object
+ * @param {object} params structured and named parameters
+ * @param {string} params.type managed system object type, e.g. svcacct or teammember
+ * @param {string} params.id managed system object id
+ * @param {string} params.relationship relationship name
+ * @param {string[]} params.fields array of fields to include
+ * @param {string} params.pageCookie paged results cookie
+ * @param {State} params.state library state
+ * @returns {Promise<IdObjectSkeletonInterface[]>} a promise that resolves to an array of managed system objects
+ */
+export declare function queryRelatedManagedObjects({ type, id, relationship, fields, pageSize, state, }: {
+    type: string;
+    id: string;
+    relationship: string;
+    fields?: string[];
+    pageSize?: number;
+    state: State;
+}): Promise<IdObjectSkeletonInterface[]>;
+/**
+ * Reads the current value of a relationship field directly off a managed
+ * object — the forward direction (e.g. an alpha_user's own `manager` or
+ * `roles` field). For the reverse direction (e.g. an alpha_role's members),
+ * use queryRelatedManagedObjects instead; reverse relationships aren't
+ * stored as a field on the object at all, so there's nothing here to read.
+ */
+export declare function readRelationship({ type, id, field, state, }: {
+    type: string;
+    id: string;
+    field: string;
+    state: State;
+}): Promise<unknown>;
+/**
+ * Adds one target to a many-valued relationship field without disturbing
+ * any existing members — the safe way to "add a member" (use
+ * replaceRelationship instead only when you actually mean to overwrite the
+ * whole field).
+ */
+export declare function addRelationship({ type, id, field, target, rev, state, }: {
+    type: string;
+    id: string;
+    field: string;
+    target: RelationshipTarget;
+    rev?: string;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+/**
+ * Removes one target from a many-valued relationship field without
+ * disturbing any other members. Throws if the target isn't currently a
+ * member, rather than silently doing nothing the way a raw PATCH with a
+ * non-matching value would.
+ */
+export declare function removeRelationship({ type, id, field, target, rev, state, }: {
+    type: string;
+    id: string;
+    field: string;
+    target: RelationshipTarget;
+    rev?: string;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+/**
+ * Replaces the entire value of a relationship field: a single target (or
+ * null to clear it) for a single-valued field like 'manager', or an array
+ * of targets for a many-valued field like 'roles' — replacing the whole
+ * array, not adding to it. Use addRelationship/removeRelationship instead
+ * when you only want to change one member of a many-valued field.
+ */
+export declare function replaceRelationship({ type, id, field, target, rev, state, }: {
+    type: string;
+    id: string;
+    field: string;
+    target: RelationshipTarget | RelationshipTarget[] | null;
+    rev?: string;
+    state: State;
+}): Promise<IdObjectSkeletonInterface>;
+export declare function resolveUserName({ type, id, state, }: {
+    type: string;
+    id: string;
+    state: State;
+}): Promise<string>;
+export declare function resolveFullName({ type, id, state, }: {
+    type: string;
+    id: string;
+    state: State;
+}): Promise<string>;
+/** What kind of principal a resolved identity turned out to be. */
+export type ResolvedIdentityKind = 'user' | 'service' | 'admin' | 'admin-unconfirmed' | 'unknown';
+export type ResolvedIdentity = {
+    /** The uuid that was resolved (extracted from the DN, if one was given). */
+    id: string;
+    kind: ResolvedIdentityKind;
+    /** Realm the identity belongs to. Only set for kind 'user'. */
+    realm?: string;
+    username?: string;
+    displayName?: string;
+    /** The managed/system object type the identity was actually found under, e.g. 'alpha_user', 'svcacct', 'teammember'. */
+    resolvedVia?: string;
+    /** Present for 'admin-unconfirmed'/'unknown': why a definitive kind couldn't be determined. */
+    note?: string;
+};
+/**
+ * Resolves a DN or bare uuid to a structured identity, without the caller
+ * needing to already know its managed object type. Replaces the older
+ * resolvePerpetratorUuid, which returned an opaque formatted string, hardcoded
+ * 'alpha_user'/'bravo_user' as the only realms, and couldn't distinguish "not
+ * found" from "found but the calling credential lacks visibility" — a real
+ * distinction: a service-account-authenticated session can read svcacct
+ * objects but gets a 403, not a 404, on teammember.
+ */
+export declare function resolveIdentity({ idOrDn, realm, state, }: {
+    idOrDn: string;
+    realm?: string;
+    state: State;
+}): Promise<ResolvedIdentity>;
+//# sourceMappingURL=ManagedObjectOps.d.ts.map

package/types/ops/ManagedObjectOps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManagedObjectOps.d.ts","sourceRoot":"","sources":["../../src/ops/ManagedObjectOps.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EAEzB,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B;;;;;OAKG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,yBAAyB,EACjC,EAAE,CAAC,EAAE,MAAM,GACV,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;;;;;;;;;OAaG;IACH,yBAAyB,CACvB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,yBAAyB,EACjC,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;OAKG;IACH,kBAAkB,CAChB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACxC;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE;;;;;;OAMG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;;;OAOG;IACH,6BAA6B,CAC3B,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,uBAAuB,EAAE,EACrC,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,8BAA8B,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,uBAAuB,EAAE,EACrC,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACxC;;;;;OAKG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;OAKG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE;;;;;;;OAOG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,EAAE,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACxC;;;;;;;OAOG;IACH,0BAA0B,CACxB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,EAAE,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACxC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E;;;;;;;;;OASG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,kBAAkB,EAC1B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;;;;;OASG;IACH,kBAAkB,CAChB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,kBAAkB,EAC1B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,EAAE,GAAG,IAAI,EACxD,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D;;;;;;;OAOG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC5E,CAAC;yBAEc,OAAO,KAAK,KAAG,aAAa;AAA5C,wBAyJE;AAEF,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,MAAM,EACN,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAWrC;AAED,mDAAmD;AACnD,MAAM,MAAM,+BAA+B,GAAG;IAC5C,iDAAiD;IACjD,MAAM,EAAE,yBAAyB,CAAC;IAClC,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,IAAI,EACJ,MAAM,EACN,MAAM,EACN,MAAc,EACd,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,yBAAyB,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAwB3C;AAED,wBAAsB,iBAAiB,CAAC,EACtC,IAAI,EACJ,EAAE,EACF,MAAM,EACN,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAMrC;AAED,wBAAsB,kBAAkB,CAAC,EACvC,IAAI,EACJ,MAAM,EACN,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAwBvC;AAED,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,MAAe,EACf,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CASlB;AAED,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,MAAM,EACN,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CASrC;AAED,wBAAsB,6BAA6B,CAAC,EAClD,IAAI,EACJ,EAAE,EACF,UAAU,EACV,GAAU,EACV,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CASrC;AAED,wBAAsB,8BAA8B,CAAC,EACnD,IAAI,EACJ,MAAM,EACN,UAAU,EACV,GAAU,EACV,QAA4B,EAC5B,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CA+CvC;AAED,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CASrC;AAED,wBAAsB,oBAAoB,CAAC,EACzC,IAAI,EACJ,MAAM,EACN,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAmClB;AAED,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,MAAe,EACf,MAAc,EACd,QAA4B,EAC5B,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAiCvC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,IAAI,EACJ,EAAE,EACF,YAAY,EACZ,MAAc,EACd,QAA4B,EAC5B,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAkCvC;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,IAAI,EACJ,EAAE,EACF,KAAK,EACL,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,CAQnB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAUrC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,IAAI,EACJ,EAAE,EACF,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAWrC;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,EAAE,GAAG,IAAI,CAAC;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAUrC;AAED,wBAAsB,eAAe,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAelB;AAED,wBAAsB,eAAe,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,KAAK,GACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED,mEAAmE;AACnE,MAAM,MAAM,oBAAoB,GAC9B,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC;AAEjE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,oBAAoB,CAAC;IAC3B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wHAAwH;IACxH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAgDF;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,EACpC,MAAM,EACN,KAAK,EACL,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6G5B"}