@selvajs/selva 4.20.0-beta.3 → 4.20.0-beta.5

package/build/server/chunks/chunks/handlers.js-DXC_VLsg.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handlers.js-DXC_VLsg.js","sources":["../../../../.svelte-kit/output/server/chunks/handlers.js"],"sourcesContent":["import { C as describeApiScope, D as DEFAULT_ORG_PERMISSIONS, F as slugify, O as MEMBER_ASSIGNABLE_PERMISSIONS, T as ALL_ORG_PERMISSIONS, c as GuidSchema, f as GH_EXTENSIONS, g as validateProjectFlags, j as OrgAssetKindSchema, l as PublishVersionInputSchema, o as CreateShareLinkInputSchema, p as toDefinitionListItem, r as hasPermission, s as CreateDefinitionInputSchema, t as SYSTEM_CONTEXT, u as UpdateMetadataInputSchema, v as outsideTokenOrg, w as parseApiScope } from \"./src.js\";\nimport \"./providers.server.js\";\nimport { i as resolveAccessibleProjects, n as listVisibleDefinitions, r as loadVisibleVersion, t as getVisibleDefinition } from \"./definitions.js\";\nimport { t as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"./types.js\";\nimport { c as isPlatformServer, o as serversVisibleTo, s as isOrgServer } from \"./utils2.js\";\nimport { C as requirePermission, D as canChangeOrgRole, M as canView, N as checkOwnerRemoval, O as canChangeVisibilityToPublic, P as withAdminBypass, S as requireManageOrgMembers, _ as requireEditableDefinition, a as projectAccessInputFromRowsWith, c as requireCanCreateDefinition, d as requireCanEditProjectSettings, f as requireCanManage, g as requireCanViewProject, i as canActorChangeOrgRole, j as canSolve, k as canEdit, l as requireCanCreateProject, o as requireActingOrg, p as requireCanReclaim, r as assertCanGrantPlatformPermissions, t as splitFlatPermissions, w as requireTargetIsOrgMember, x as requireManageOrgCompute } from \"./access.js\";\nimport { d as apiError, p as isApiError, r as fetchSchemaFromCompute, u as ApiErrorCode, y as actorOf } from \"./schema-extraction.js\";\nimport { I as scopeRefusalsToday, _ as parseDefinitionListOptions, a as InviteResponseSchema, c as AddProjectMemberBodySchema, d as CreateProjectBodySchema, f as OrgComputePatchBodySchema, g as UpdateProjectMemberBodySchema, h as UpdateProjectBodySchema, i as CreatedShareLinkResponseSchema, l as CreateApiTokenBodySchema, m as UpdateOrgMemberBodySchema, n as CreatedApiTokenResponseSchema, o as OrgComputeResponseSchema, r as CreatedInviteResponseSchema, s as ShareLinkResponseSchema, t as ApiTokenResponseSchema, u as CreateInviteBodySchema, v as parseListOptions } from \"./api.js\";\nimport { a as requireParams, i as requireCaller, n as parseBody, o as requireUpload, r as parseParam, s as throwZodError, t as formText } from \"./request.js\";\nimport { i as resolveServerForOrg, n as storedKeysById, r as validateIncomingServers, t as resolveApiKey } from \"./compute.js\";\nimport { t as evictChangedServers } from \"./evict-changed-servers.js\";\nimport { t as createProjectWithUniqueSlug } from \"./projects.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region ../server/src/api/responses.ts\n/** A paginated collection. The one envelope every list endpoint returns. */\nfunction collection(page) {\n\treturn { body: {\n\t\titems: page.items,\n\t\tnextCursor: page.nextCursor\n\t} };\n}\n/** A created resource. */\nfunction created(body) {\n\treturn {\n\t\tstatus: 201,\n\t\tbody\n\t};\n}\n/** A successful mutation with nothing to say. */\nfunction noContent() {\n\treturn { status: 204 };\n}\n//#endregion\n//#region ../server/src/api/shaped.ts\n/** Serialize a payload through an explicit response schema. */\nfunction shaped(schema, payload, status = 200) {\n\treturn {\n\t\tstatus,\n\t\tbody: schema.parse(payload)\n\t};\n}\n/** `shaped`, mapped over a page of records. */\nfunction shapedCollection(schema, page) {\n\treturn { body: {\n\t\titems: page.items.map((item) => schema.parse(item)),\n\t\tnextCursor: page.nextCursor\n\t} };\n}\n//#endregion\n//#region ../notifications/src/html.ts\n/**\n* Escape text for interpolation into an HTML attribute or text node.\n*\n* One copy on purpose: per-template copies are how one of them ends up missing\n* a case. Every value a template interpolates goes through this, including\n* URLs — an `acceptUrl` carries a token, and a token can contain characters\n* that would otherwise close the `href` early.\n*/\nfunction escapeHtml(s) {\n\treturn s.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\").replace(/\"/g, \"&quot;\");\n}\n//#endregion\n//#region ../notifications/src/layout.ts\n/**\n* The frame every Selva mail shares: card chrome, type stack, colours.\n* Templates supply a body; this supplies the look, so mail written by\n* different people at different times still reads as coming from one product.\n*\n* Deliberately plain — no images, no tracking pixel, no external stylesheet.\n* Inline styles with a table-free layout survive the common clients, and mail\n* clients that strip the styling still get readable, ordered content.\n*/\nfunction renderLayout({ heading, body, footer }) {\n\treturn `<!doctype html>\n<html>\n<body style=\"margin:0;padding:24px;background:#f6f7f9;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;color:#1a1a1a;\">\n\t<div style=\"max-width:480px;margin:0 auto;background:#ffffff;border:1px solid #e4e6eb;border-radius:12px;padding:32px;\">\n\t\t<h1 style=\"margin:0 0 16px;font-size:20px;font-weight:600;\">${escapeHtml(heading)}</h1>\n${body}${footer ? `\n\t\t<hr style=\"border:none;border-top:1px solid #e4e6eb;margin:24px 0;\" />\n\t\t<p style=\"margin:0;font-size:12px;line-height:1.5;color:#8a8a8a;\">\n\t\t\t${footer}\n\t\t</p>` : \"\"}\n\t</div>\n</body>\n</html>`;\n}\n/** The primary action button. One definition so every mail's call to action matches. */\nfunction renderButton(href, label) {\n\treturn `<a href=\"${escapeHtml(href)}\" style=\"display:inline-block;padding:11px 20px;background:#1a1a1a;color:#ffffff;text-decoration:none;border-radius:8px;font-size:15px;font-weight:500;\">${escapeHtml(label)}</a>`;\n}\n/**\n* Fallback for clients that do not make the button clickable. Every mail whose\n* point is a link needs this: a button that does not render leaves the reader\n* with no way to continue.\n*/\nfunction renderUrlFallback(href) {\n\treturn `<p style=\"margin:24px 0 0;font-size:13px;line-height:1.5;color:#6b6b6b;\">\n\t\t\tOr paste this into your browser:<br />\n\t\t\t<span style=\"word-break:break-all;color:#4a4a4a;\">${escapeHtml(href)}</span>\n\t\t</p>`;\n}\n//#endregion\n//#region ../notifications/src/templates/invite.ts\nfunction formatExpiry(iso) {\n\tconst d = new Date(iso);\n\treturn Number.isNaN(d.getTime()) ? \"soon\" : d.toLocaleDateString(\"en-US\", {\n\t\tyear: \"numeric\",\n\t\tmonth: \"long\",\n\t\tday: \"numeric\"\n\t});\n}\n/**\n* \"An admin invited you to an org\" — the mail carrying an invite's accept link.\n*\n* The text part must always carry the URL: a mail that degrades to plain text\n* is still the only way the invitee can accept.\n*/\nfunction renderInviteEmail(input) {\n\tconst { to, acceptUrl, orgName, invitedBy } = input;\n\tconst expiry = formatExpiry(input.expiresAt);\n\tconst inviter = invitedBy ? `${invitedBy} invited you` : \"You have been invited\";\n\treturn {\n\t\tkind: \"org.invite\",\n\t\tto,\n\t\tsubject: `${inviter} to join ${orgName} on Selva`,\n\t\ttext: [\n\t\t\t`${inviter} to join ${orgName} on Selva.`,\n\t\t\t\"\",\n\t\t\t\"Open this link to accept and set up your account:\",\n\t\t\tacceptUrl,\n\t\t\t\"\",\n\t\t\t`The link expires on ${expiry} and can only be used once.`,\n\t\t\t\"\",\n\t\t\t\"If you weren't expecting this invitation, you can ignore this email.\"\n\t\t].join(\"\\n\"),\n\t\thtml: renderLayout({\n\t\t\theading: `Join ${orgName} on Selva`,\n\t\t\tbody: `\t\t<p style=\"margin:0 0 24px;font-size:15px;line-height:1.5;color:#4a4a4a;\">\n\t\t\t${escapeHtml(inviter)} to join <strong>${escapeHtml(orgName)}</strong>. Open the link below to accept and set up your account.\n\t\t</p>\n\t\t${renderButton(acceptUrl, \"Accept invitation\")}\n\t\t${renderUrlFallback(acceptUrl)}`,\n\t\t\tfooter: `This link expires on ${escapeHtml(expiry)} and can only be used once.\n\t\t\tIf you weren't expecting this invitation, you can ignore this email.`\n\t\t})\n\t};\n}\n//#endregion\n//#region ../notifications/src/templates/api-token.ts\nfunction formatDate(iso) {\n\tconst d = new Date(iso);\n\treturn Number.isNaN(d.getTime()) ? iso : d.toLocaleDateString(\"en-US\", {\n\t\tyear: \"numeric\",\n\t\tmonth: \"long\",\n\t\tday: \"numeric\"\n\t});\n}\n/**\n* \"A new API token was created on your account\". The point is the case where\n* the owner didn't create it, so the revoke link leads.\n*/\nfunction renderApiTokenCreatedEmail(input) {\n\tconst { to, tokenName, orgName, scopes, manageUrl } = input;\n\tconst expiry = formatDate(input.expiresAt);\n\treturn {\n\t\tkind: \"api_token.created\",\n\t\tto,\n\t\tsubject: `New API token \"${tokenName}\" in ${orgName}`,\n\t\ttext: [\n\t\t\t`A new API token named \"${tokenName}\" was created on your Selva account in ${orgName}.`,\n\t\t\t\"\",\n\t\t\t\"It can:\",\n\t\t\t...scopes.map((s) => `- ${s}`),\n\t\t\t\"\",\n\t\t\t`It expires on ${expiry}.`,\n\t\t\t\"\",\n\t\t\t\"If you didn't create it, revoke it now:\",\n\t\t\tmanageUrl\n\t\t].join(\"\\n\"),\n\t\thtml: renderLayout({\n\t\t\theading: \"New API token\",\n\t\t\tbody: `\t\t<p style=\"margin:0 0 16px;font-size:15px;line-height:1.5;color:#4a4a4a;\">\n\t\t\tA new API token named <strong>${escapeHtml(tokenName)}</strong> was created on your account in <strong>${escapeHtml(orgName)}</strong>. It can:\n\t\t</p>\n\t\t<ul style=\"margin:0 0 24px;padding-left:20px;font-size:15px;line-height:1.5;color:#4a4a4a;\">\n\t\t\t${scopes.map((s) => `<li>${escapeHtml(s)}</li>`).join(\"\")}\n\t\t</ul>\n\t\t${renderButton(manageUrl, \"Review your tokens\")}\n\t\t${renderUrlFallback(manageUrl)}`,\n\t\t\tfooter: `It expires on ${escapeHtml(expiry)}. If you didn't create it, revoke it from the page above.`\n\t\t})\n\t};\n}\n//#endregion\n//#region ../server/src/notifications/deliver-invite.ts\n/**\n* Mail an invite's accept link, best-effort.\n*\n* Shared by the mint and resend routes so they cannot disagree about what the\n* invitee receives. Swallows every failure: the invite row is already\n* committed and the caller still holds `acceptUrl` to share by hand, so a dead\n* SMTP host must not report a valid invite as a failure.\n*/\nasync function deliverInvite(input) {\n\tconst { ctx, log, invite, acceptUrl, actor, orgs, notifications, fallbackOrgName } = input;\n\ttry {\n\t\tconst org = await orgs.getOrg(ctx, invite.orgId);\n\t\tconst { status } = await notifications.send(renderInviteEmail({\n\t\t\tto: invite.email,\n\t\t\tacceptUrl,\n\t\t\torgName: org?.name ?? fallbackOrgName,\n\t\t\tinvitedBy: actor.profile?.displayName || actor.user?.email,\n\t\t\texpiresAt: invite.expiresAt\n\t\t}), log);\n\t\treturn status;\n\t} catch (err) {\n\t\tlog.warn(\"Invite mail could not be prepared\", {\n\t\t\tcomponent: \"Invites\",\n\t\t\tinviteId: invite.id,\n\t\t\treason: err instanceof Error ? err.message : String(err)\n\t\t});\n\t\treturn \"failed\";\n\t}\n}\n//#endregion\n//#region ../server/src/handlers/services.ts\nfunction definitionService(deps) {\n\tconst service = deps.services.definitions;\n\tif (!service) throw new Error(\"SelvaDeps.services.definitions is not wired — mount requires it.\");\n\treturn service;\n}\nfunction orgAssetService(deps) {\n\tconst service = deps.services.orgAssets;\n\tif (!service) throw new Error(\"SelvaDeps.services.orgAssets is not wired — mount requires it.\");\n\treturn service;\n}\n/**\n* A token codec, or a named failure.\n*\n* Minting through an absent codec is the one failure mode worth being loud\n* about: a handler that quietly skipped hashing would persist a row whose token\n* can never be verified, and nothing downstream would report it.\n*/\nfunction tokenCodec(deps, family) {\n\tconst codec = deps.tokens[family];\n\tif (!codec) throw new Error(`SelvaDeps.tokens.${family} is not wired — mount requires it.`);\n\treturn codec;\n}\n//#endregion\n//#region ../server/src/handlers/me.ts\n/**\n* Whoami. The first call a non-browser client makes, and the only way a token\n* holder can see which org their credential resolved into — `actingOrgId` is\n* derived per request from the caller's membership, not frozen at mint time.\n*/\nvar getMe = async (req) => {\n\tconst { ctx, user } = requireCaller(req);\n\treturn { body: {\n\t\tuserId: user.id,\n\t\temail: user.email,\n\t\tdisplayName: req.profile?.displayName,\n\t\tactingOrgId: ctx.actingOrgId,\n\t\tplatformPermissions: ctx.platformPermissions,\n\t\torgPermissions: ctx.orgPermissions,\n\t\tstarredDefinitions: req.profile?.starredDefinitions ?? []\n\t} };\n};\n//#endregion\n//#region ../server/src/handlers/me.starred.ts\n/**\n* Starring a definition for the calling user. Both directions are idempotent.\n*\n* No visibility check: a star is a row on the caller's own profile, keyed by\n* guid, and reveals nothing about whether that guid exists. The read paths that\n* expand stars into definitions filter by visibility there.\n*/\nvar starDefinition = async (req) => {\n\tconst { ctx, user } = requireCaller(req);\n\tconst { guid } = requireParams(req.params, \"guid\");\n\tawait req.deps.userProfile.starDefinition(ctx, user.id, guid);\n\treturn noContent();\n};\nvar unstarDefinition = async (req) => {\n\tconst { ctx, user } = requireCaller(req);\n\tconst { guid } = requireParams(req.params, \"guid\");\n\tawait req.deps.userProfile.unstarDefinition(ctx, user.id, guid);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/orgs.ts\n/**\n* The acting org's record and roster.\n*\n* `requireActingOrg` is the tenancy gate on both: the URL `orgId` must equal\n* `ctx.actingOrgId`, so the URL alone never decides which tenant is read.\n*/\n/** The acting org's record — name, slug, and branding asset URLs. */\nvar getOrg = async (req) => {\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst org = await req.deps.orgs.getOrg(ctx, orgId);\n\tif (!org) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\treturn { body: org };\n};\n/**\n* List the org's members. Any member of the acting org may read this — the\n* roster is what the team page renders, and `requireActingOrg` already confines\n* the read to the caller's own tenant.\n*/\nvar listOrgMembers = async (req) => {\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\treturn collection(await req.deps.orgs.listOrgMembers(ctx, orgId, parseListOptions(req.url)));\n};\n//#endregion\n//#region ../server/src/handlers/apiTokens.ts\n/**\n* API tokens: mint, list, revoke.\n*\n* **Session-only.** A key can't manage keys, so a leaked one can't mint more or\n* revoke the owner's others to cover its tracks.\n*\n* **The raw key exists only in the mint response.** The store holds its HMAC,\n* and every response goes through a schema that has no `tokenHash`.\n*/\nvar DAY_MS = 864e5;\nfunction requireSessionInOrg(req) {\n\tif (req.ctx?.apiScope) apiError(403, ApiErrorCode.FORBIDDEN, \"API tokens can’t manage API tokens. Sign in to the web app to do this.\");\n\treturn requireActingOrg(req, req.params.orgId);\n}\nfunction requireMayHoldApiTokens(req, ctx) {\n\tconst policy = req.deps.tokens.mayHoldApiTokens;\n\tif (!policy) {\n\t\trequirePermission(req, \"manage_api_tokens\");\n\t\treturn;\n\t}\n\tif (!policy(ctx)) apiError(403, ApiErrorCode.FORBIDDEN, \"You can’t create API tokens in this org.\");\n}\nfunction unavailable() {\n\tapiError(503, ApiErrorCode.API_TOKENS_UNAVAILABLE, \"API tokens are not available on this server.\");\n}\nfunction storeOf(req) {\n\treturn req.deps.data.apiTokens ?? unavailable();\n}\nfunction codecOf(req) {\n\treturn req.deps.tokens.apiTokens ?? unavailable();\n}\nfunction toResponse(token) {\n\treturn {\n\t\t...token,\n\t\trefusedToday: scopeRefusalsToday(token.id)\n\t};\n}\n/**\n* Refuse scopes naming something outside this org or out of the creator's\n* sight. Not the security boundary: a key never exceeds its owner's live rights\n* anyway. This stops someone minting a key that can only ever be refused.\n*/\nasync function assertScopesReachable(req, orgId, scopes) {\n\tconst refuse = (message) => apiError(400, ApiErrorCode.VALIDATION_FAILED, message, { scopes: message });\n\tfor (const value of scopes) {\n\t\tconst { resource } = parseApiScope(value) ?? refuse(`Unknown scope: ${value}`);\n\t\tif (resource.kind === \"all\") continue;\n\t\tif (resource.kind === \"org\") {\n\t\t\tif (resource.id !== orgId) refuse(\"An org scope must name this org.\");\n\t\t\tcontinue;\n\t\t}\n\t\tlet projectId = resource.id;\n\t\tif (resource.kind === \"definition\") projectId = (await req.deps.definitionMeta.get(req.ctx, resource.id) ?? refuse(`No definition ${resource.id}.`)).projectId;\n\t\tconst project = await req.deps.projects.getProject(req.ctx, projectId);\n\t\tif (!project || project.orgId !== orgId) refuse(`No ${resource.kind} ${resource.id} in this org.`);\n\t\ttry {\n\t\t\tawait requireCanViewProject(req, projectId);\n\t\t} catch (err) {\n\t\t\tif (isApiError(err)) refuse(`You can’t access ${resource.kind} ${resource.id}.`);\n\t\t\tthrow err;\n\t\t}\n\t}\n}\n/**\n* Tell the owner a key now exists on their account, best-effort. The case that\n* matters is the one where they didn't make it.\n*/\nasync function mailTokenCreated(req, token) {\n\tconst notifications = req.deps.notifications;\n\tconst to = req.user?.email;\n\tif (!notifications || !to) return;\n\ttry {\n\t\tconst org = await req.deps.orgs.getOrg(req.ctx, token.orgId);\n\t\tawait notifications.send(renderApiTokenCreatedEmail({\n\t\t\tto,\n\t\t\ttokenName: token.name,\n\t\t\torgName: org?.name ?? req.deps.instanceName,\n\t\t\tscopes: token.scopes.map(describeApiScope),\n\t\t\texpiresAt: token.expiresAt,\n\t\t\tmanageUrl: `${req.url.origin}${req.deps.apiTokenSettingsPath}`\n\t\t}), req.log);\n\t} catch (err) {\n\t\treq.log.warn(\"API token mail could not be sent\", {\n\t\t\tcomponent: \"ApiTokens\",\n\t\t\ttokenId: token.id,\n\t\t\treason: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n}\n/**\n* The caller's own tokens in this org, newest first, including revoked and\n* expired ones. `?all=true` returns everyone's and needs `manage_org_members`.\n*/\nvar listApiTokens = async (req) => {\n\tconst { ctx, orgId } = requireSessionInOrg(req);\n\tconst all = req.url.searchParams.get(\"all\") === \"true\";\n\tif (all) requireManageOrgMembers(req);\n\tconst page = await storeOf(req).listByOrg(ctx, orgId, {\n\t\t...parseListOptions(req.url),\n\t\tuserId: all ? void 0 : ctx.userId\n\t});\n\treturn shapedCollection(ApiTokenResponseSchema, {\n\t\t...page,\n\t\titems: page.items.map(toResponse)\n\t});\n};\n/** Mint a token acting as the caller. The raw key is in this response and nowhere else. */\nvar createApiToken = async (req) => {\n\tconst { ctx, orgId } = requireSessionInOrg(req);\n\trequireMayHoldApiTokens(req, ctx);\n\tconst { user } = requireCaller(req);\n\tconst store = storeOf(req);\n\tconst codec = codecOf(req);\n\tconst delegated = req.deps.auth.delegatedSession;\n\tif (delegated && !(await delegated.status()).ok) unavailable();\n\tconst input = await parseBody(req.request, CreateApiTokenBodySchema);\n\tawait assertScopesReachable(req, orgId, input.scopes);\n\tconst raw = codec.mintRawToken();\n\tconst now = /* @__PURE__ */ new Date();\n\tconst token = {\n\t\tid: randomUUID(),\n\t\tuserId: user.id,\n\t\tcreatedBy: user.id,\n\t\torgId,\n\t\tname: input.name,\n\t\ttokenHash: codec.hashToken(raw),\n\t\tscopes: [...new Set(input.scopes)],\n\t\tcreatedAt: now.toISOString(),\n\t\texpiresAt: new Date(now.getTime() + input.expiresInDays * DAY_MS).toISOString(),\n\t\tlastUsedAt: null,\n\t\trevokedAt: null\n\t};\n\tawait store.create(ctx, token);\n\tawait mailTokenCreated(req, token);\n\tconst { tokenHash: _hash, ...summary } = token;\n\treturn {\n\t\tstatus: 201,\n\t\theaders: { \"Cache-Control\": \"no-store\" },\n\t\tbody: CreatedApiTokenResponseSchema.parse({\n\t\t\ttoken: toResponse(summary),\n\t\t\tsecret: raw\n\t\t})\n\t};\n};\n/**\n* Revoke a token: the owner's own, or anyone's in the org for\n* `manage_org_members`. Someone else's token reads as missing, not forbidden.\n*/\nvar revokeApiToken = async (req) => {\n\tconst { ctx, orgId } = requireSessionInOrg(req);\n\tconst { tokenId } = requireParams(req.params, \"tokenId\");\n\tconst store = storeOf(req);\n\tconst token = await store.get(ctx, tokenId);\n\tconst own = token?.userId === ctx.userId;\n\tif (!token || token.orgId !== orgId || !own && !hasPermission(ctx, \"manage_org_members\")) apiError(404, ApiErrorCode.NOT_FOUND, \"API token not found\");\n\tawait store.revoke(ctx, tokenId, own ? \"owner\" : \"admin\");\n\treturn noContent();\n};\n/**\n* Revoke every live key `userId` holds, in one org or (no `orgId`) all of\n* them. Call it when someone leaves an org or is disabled: the resolver already\n* refuses those keys, but without this they would work again the moment the\n* person is re-added or re-enabled.\n*\n* Best effort. The removal or disable has already committed, so a failure is\n* logged rather than thrown.\n*/\nasync function revokeUserApiTokens(store, ctx, userId, opts, log) {\n\tif (!store) return;\n\ttry {\n\t\tawait store.revokeAllForUser(ctx, userId, opts);\n\t} catch (err) {\n\t\tlog.error(\"Failed to revoke API tokens\", {\n\t\t\tcomponent: \"ApiTokens\",\n\t\t\tuserId,\n\t\t\torgId: opts.orgId,\n\t\t\treason: opts.reason,\n\t\t\terr: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n}\n//#endregion\n//#region ../server/src/handlers/orgMembers.ts\n/**\n* Org member role, permissions, and removal.\n*\n* Two gates run on every request: `requireManageOrgMembers` (owner+admin) and\n* `requireActingOrg` (the URL `orgId` must equal `ctx.actingOrgId`, so\n* cross-org member mutation is blocked even for an actor with permissions in\n* another org).\n*\n* The sole-owner invariant applies to demotion and removal alike — an org with\n* no owner is unadministrable, and removing an owner ends their role exactly as\n* demoting them does.\n*/\nvar ROSTER_PAGE_LIMIT = 200;\nvar MAX_ROSTER_PAGES = 100;\n/**\n* Whether anyone other than `exceptUserId` still owns the org.\n*\n* Both branches below need this and both used to scan the roster themselves —\n* the sole-owner invariant is one rule, so it reads from one place.\n*\n* Pages rather than reading one 200-row window: a second owner sitting past the\n* first page read as \"no other owner\", so the invariant refused a demotion or\n* removal that was in fact safe. That failed closed, but it made the org\n* unadministrable exactly when it had grown enough to need administering.\n* Returns on the first owner found, so the common case is still one round-trip.\n*/\nasync function hasAnotherOwner(req, ctx, orgId, exceptUserId) {\n\tlet cursor;\n\tfor (let page = 0; page < MAX_ROSTER_PAGES; page++) {\n\t\tconst result = await req.deps.orgs.listOrgMembers(ctx, orgId, {\n\t\t\tlimit: ROSTER_PAGE_LIMIT,\n\t\t\tcursor\n\t\t});\n\t\tif (result.items.some((m) => m.role === \"owner\" && m.userId !== exceptUserId && !m.deletedAt)) return true;\n\t\tcursor = result.nextCursor;\n\t\tif (!cursor) return false;\n\t}\n\treq.log.warn(\"hasAnotherOwner hit the page cap — treating as sole owner\", {\n\t\torgId,\n\t\tpages: MAX_ROSTER_PAGES\n\t});\n\treturn false;\n}\n/**\n* Projects in `orgId` where `userId` is the only live owner — the ones that\n* will have no owner once `removeOrgMember` cascades their membership rows.\n*\n* **Report, do not block.** Blocking puts an unbounded chore in front of\n* offboarding — the cost scales with how many projects the departing person\n* owned, which is backwards, because the most prolific people are the ones\n* whose departure most needs to be clean. An offboarding that fails halfway is\n* worse than an ownerless project: the person stays in the org while someone\n* works through the backlog. Reclaim already exists to adopt an ownerless\n* project, so the recovery path is built; what was missing was any signal that\n* recovery was needed. Hence the event.\n*\n* MUST be called before the removal — afterwards the rows it reads are gone.\n*/\nasync function findProjectsLosingSoleOwner(req, ctx, orgId, userId) {\n\tconst projects = req.deps.projects;\n\tconst orgProjects = await projects.listProjects(ctx, orgId, { limit: ROSTER_PAGE_LIMIT });\n\treturn (await Promise.all(orgProjects.items.map(async (project) => {\n\t\tconst owners = (await projects.listProjectMembers(ctx, project.id, { limit: ROSTER_PAGE_LIMIT })).items.filter((m) => m.role === \"owner\" && !m.deletedAt);\n\t\treturn owners.length === 1 && owners[0].userId === userId ? project : null;\n\t}))).filter((p) => p !== null);\n}\n/**\n* Body accepts either or both:\n*   - `{ role: OrgRole }` — change the member's role. Owner-only.\n*   - `{ permissions: OrgPermission[] }` — replace the member's grantable\n*     permissions. Owner/admin via `manage_org_members`. For `member`-role\n*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a\n*     member's permissions does NOT change their role.\n*/\nvar updateOrgMember = async (req) => {\n\tconst { userId } = requireParams(req.params, \"orgId\", \"userId\");\n\trequireManageOrgMembers(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst patch = await parseBody(req.request, UpdateOrgMemberBodySchema);\n\tconst orgs = req.deps.orgs;\n\tconst [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);\n\tif (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n\tif (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, \"You are not a member of this organization.\");\n\tif (patch.role !== void 0 && patch.role !== target.role) {\n\t\tif (!canChangeOrgRole({\n\t\t\tactorMember,\n\t\t\trole: patch.role\n\t\t}) || !canChangeOrgRole({\n\t\t\tactorMember,\n\t\t\trole: target.role\n\t\t})) apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can change roles.\");\n\t\tif (target.role === \"owner\" && patch.role !== \"owner\" && !await hasAnotherOwner(req, ctx, orgId, target.userId)) apiError(409, ApiErrorCode.CONFLICT, \"Cannot demote the sole owner of this organization. Promote another member to owner first.\");\n\t\tawait orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n\t}\n\tif (patch.permissions !== void 0) {\n\t\tconst effectiveRole = patch.role ?? target.role;\n\t\tconst valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n\t\tconst invalid = patch.permissions.filter((p) => !valid.has(p));\n\t\tif (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`);\n\t\tawait orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n\t}\n\treturn noContent();\n};\n/**\n* Remove a member from the org. Owner/admin via `manage_org_members`, same\n* tenancy check as PATCH, and the same sole-owner invariant — removing the last\n* owner would leave the org unadministrable.\n*/\nvar removeOrgMember = async (req) => {\n\tconst { userId } = requireParams(req.params, \"orgId\", \"userId\");\n\trequireManageOrgMembers(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst orgs = req.deps.orgs;\n\tconst [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);\n\tif (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n\tif (!canChangeOrgRole({\n\t\tactorMember,\n\t\trole: target.role\n\t})) apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can remove another owner.\");\n\tif (target.role === \"owner\" && !await hasAnotherOwner(req, ctx, orgId, target.userId)) apiError(409, ApiErrorCode.CONFLICT, \"Cannot remove the sole owner of this organization. Promote another member to owner first.\");\n\tconst orphaned = await findProjectsLosingSoleOwner(req, ctx, orgId, userId);\n\tawait orgs.removeOrgMember(ctx, orgId, userId);\n\tif (orphaned.length > 0) {\n\t\tawait req.deps.events.emit({\n\t\t\ttype: \"org_member.removed_orphaning_projects\",\n\t\t\torgId,\n\t\t\tuserId,\n\t\t\tprojectIds: orphaned.map((p) => p.id),\n\t\t\t...actorOf(ctx)\n\t\t});\n\t\treq.log.warn(\"Org member removal left projects without an owner\", {\n\t\t\torgId,\n\t\t\tuserId,\n\t\t\tactorId: ctx.userId,\n\t\t\tprojectCount: orphaned.length\n\t\t});\n\t}\n\tconst email = (await req.deps.auth.getUser(userId))?.email;\n\tif (email) try {\n\t\tawait req.deps.invites.revokePendingByEmail(ctx, orgId, email);\n\t} catch (err) {\n\t\treq.log.error(\"Removed org member but failed to revoke their pending invites\", {\n\t\t\torgId,\n\t\t\tuserId,\n\t\t\terror: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n\tawait revokeUserApiTokens(req.deps.data.apiTokens, ctx, userId, {\n\t\torgId,\n\t\treason: \"member_removed\"\n\t}, req.log);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/reclaim.ts\n/**\n* Org owner/admin escape hatch for a project they cannot otherwise reach.\n*\n* Adds the actor as a co-owner and does NOT demote the existing owner.\n* Idempotent: reclaiming twice is a no-op, because `addProjectMember`\n* reactivates a soft-deleted row in place.\n*/\nvar reclaimProject = async (req) => {\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst { user, ctx, project } = await requireCanReclaim(req, id);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst member = {\n\t\tprojectId: id,\n\t\tuserId: user.id,\n\t\trole: \"owner\",\n\t\tjoinedAt: now,\n\t\tupdatedAt: now,\n\t\tupdatedBy: ctx.userId || user.id,\n\t\tdeletedAt: null\n\t};\n\tawait req.deps.projects.addProjectMember(ctx, member);\n\tawait req.deps.events.emit({\n\t\ttype: \"project.reclaimed\",\n\t\tprojectId: id,\n\t\torgId: project.orgId,\n\t\t...actorOf(ctx),\n\t\tpriorVisibility: project.visibility\n\t});\n\treturn created({ member });\n};\n//#endregion\n//#region ../server/src/handlers/orgAssets.ts\n/**\n* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on\n* `manage_org_members` — org branding is an org-admin action.\n*\n* Raster images and SVG are both accepted. Every input is rasterized to WebP by\n* the shared transcoder inside the storage provider, so SVG carries no XSS\n* surface: no vector blob is ever stored or served. The allowlist below is the\n* HTTP gate; the rasterization is the security control.\n*/\nvar ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([\n\t\"image/png\",\n\t\"image/jpeg\",\n\t\"image/webp\",\n\t\"image/gif\",\n\t\"image/svg+xml\"\n]);\nfunction parseKind(params) {\n\tconst kind = OrgAssetKindSchema.safeParse(params.kind);\n\tif (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);\n\treturn kind.data;\n}\nvar uploadOrgAsset = async (req) => {\n\trequireManageOrgMembers(req);\n\tconst kind = parseKind(req.params);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tif (!await req.deps.orgs.getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\tconst { file } = requireUpload(await req.request.formData(), \"image\", {\n\t\tmaxBytes: req.deps.uploadLimits.maxImageFileSize,\n\t\tcontentTypes: {\n\t\t\tallowed: ALLOWED_CONTENT_TYPES,\n\t\t\tmessage: \"Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG\"\n\t\t},\n\t\tlabel: \"Image\"\n\t});\n\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\treturn { body: {\n\t\tkind,\n\t\turl: await orgAssetService(req.deps).saveAsset(ctx, orgId, kind, bytes, file.type)\n\t} };\n};\nvar removeOrgAsset = async (req) => {\n\trequireManageOrgMembers(req);\n\tconst kind = parseKind(req.params);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tawait orgAssetService(req.deps).removeAsset(ctx, orgId, kind);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/shareLinks.ts\n/**\n* Share-link administration.\n*\n* Minting, listing and revoking are gated by `canEditDefinition` — the same\n* authority that uploads versions and publishes. The raw token appears in the\n* POST response and nowhere else; everything afterwards sees `hasToken: true`.\n*\n* **Responses go through `shaped`/`shapedCollection`, never `{ body }`.** A\n* `ShareLink` carries `tokenHash`, and the response schema is what drops it —\n* returning the record directly would put a credential hash on the wire with\n* nothing failing at build time.\n*/\nfunction assertSharingEnabled(req) {\n\tif (!req.deps.flag(\"ENABLE_SHARING\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n}\n/** `tokenHash` is dropped by the response schema, not by this function. */\nfunction forClient(link) {\n\treturn {\n\t\t...link,\n\t\thasToken: true\n\t};\n}\nvar listShareLinks = async (req) => {\n\tassertSharingEnabled(req);\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\tconst page = await req.deps.shareLinks.listByDefinition(ctx, guid, parseListOptions(req.url));\n\treturn shapedCollection(ShareLinkResponseSchema, {\n\t\titems: page.items.map(forClient),\n\t\tnextCursor: page.nextCursor\n\t});\n};\nvar createShareLink = async (req) => {\n\tassertSharingEnabled(req);\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { user } = requireCaller(req);\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\tconst input = await parseBody(req.request, CreateShareLinkInputSchema, { missingAs: {} });\n\tconst codec = tokenCodec(req.deps, \"shareLinks\");\n\tconst raw = codec.mintRawToken();\n\tconst link = {\n\t\tid: randomUUID(),\n\t\tdefinitionId: guid,\n\t\tchannel: input.channel,\n\t\ttokenHash: codec.hashToken(raw),\n\t\tname: input.name,\n\t\tcreatedBy: user.id,\n\t\tcreatedAt: (/* @__PURE__ */ new Date()).toISOString(),\n\t\texpiresAt: input.expiresAt ?? null,\n\t\trevokedAt: null,\n\t\tallowSolve: input.allowSolve,\n\t\tmaxSolves: input.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : input.maxSolves,\n\t\tsolveCount: 0\n\t};\n\tawait req.deps.shareLinks.create(ctx, link);\n\treturn shaped(CreatedShareLinkResponseSchema, {\n\t\tlink: forClient(link),\n\t\ttoken: raw\n\t}, 201);\n};\n/**\n* Revoke a share link (soft-delete). Idempotent, gated by `canEditDefinition`.\n*\n* The link must belong to this definition, so one definition's editor cannot\n* revoke another's link with a guessed or leaked linkId.\n*/\nvar revokeShareLink = async (req) => {\n\tassertSharingEnabled(req);\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst linkId = parseParam(req.params.linkId, GuidSchema, \"link ID\");\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\tconst existing = await req.deps.shareLinks.getById(ctx, linkId);\n\tif (!existing || existing.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, \"Share link not found.\");\n\tawait req.deps.shareLinks.revoke(ctx, linkId);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/definitions.ts\n/**\n* Definition handlers: the collection, one definition's detail and metadata,\n* its live schema, cover image, and the publish channel.\n*\n* Solve and the two compute routes stay unwrapped deliberately — they stream\n* and mark their own metrics, which the `ApiResponse` envelope does not model.\n*/\nvar LISTABLE_STATUSES = [\n\t\"draft\",\n\t\"published\",\n\t\"archived\"\n];\n/**\n* Definitions the caller can view. Visibility is resolved into the query via\n* `projectIds`, so `limit`/`nextCursor` describe the filtered set.\n*/\nvar listDefinitions = async (req) => {\n\tconst { ctx } = requireCaller(req);\n\tconst statusParam = req.url.searchParams.get(\"status\");\n\tif (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(\", \")}`);\n\tconst page = await listVisibleDefinitions(ctx, {\n\t\t...parseDefinitionListOptions(req.url),\n\t\tprojectId: req.url.searchParams.get(\"projectId\") ?? void 0,\n\t\tstatuses: statusParam ? [statusParam] : void 0\n\t}, req.deps);\n\treturn collection({\n\t\titems: page.items.map(toDefinitionListItem),\n\t\tnextCursor: page.nextCursor\n\t});\n};\nfunction parseTags(raw) {\n\tif (!raw) return void 0;\n\tconst tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n\treturn tags.length ? tags : void 0;\n}\n/** Create a definition — metadata and the Grasshopper file in one request. */\nvar createDefinition = async (req) => {\n\tconst { ctx, user } = requireCaller(req);\n\tconst form = await req.request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: req.deps.uploadLimits.maxDefinitionFileSize,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst imageFile = form.get(\"image\");\n\tconst maxImageBytes = req.deps.uploadLimits.maxImageFileSize;\n\tif (imageFile instanceof File && imageFile.size > maxImageBytes) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${maxImageBytes / 1048576} MB`);\n\tlet projectId = formText(form, \"projectId\");\n\tif (!projectId) {\n\t\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\t\tconst { projects } = await resolveAccessibleProjects(ctx, req.deps);\n\t\tconst fallback = projects.find((p) => p.orgId === ctx.actingOrgId);\n\t\tif (!fallback) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No accessible project — pass projectId.\");\n\t\tprojectId = fallback.id;\n\t}\n\tconst { project } = await requireCanCreateDefinition(req, projectId);\n\tconst parsed = CreateDefinitionInputSchema.safeParse({\n\t\tdisplayName: formText(form, \"displayName\"),\n\t\tdescription: formText(form, \"description\"),\n\t\tcategory: formText(form, \"category\"),\n\t\tcoverImage: formText(form, \"coverImage\"),\n\t\ttags: parseTags(formText(form, \"tags\")),\n\t\tprojectId,\n\t\tcomputeServerId: formText(form, \"computeServerId\")\n\t});\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst guid = randomUUID();\n\tconst fileData = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project.orgId, req.deps.computeServer, { definitionPin: parsed.data.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(fileData, server);\n\tconst service = definitionService(req.deps);\n\tconst { record, version } = await service.create(ctx, {\n\t\tguid,\n\t\tprojectId: parsed.data.projectId,\n\t\townerId: user.id,\n\t\tfileExt: extension.slice(1),\n\t\toriginalFilename: file.name,\n\t\tcomputeServerId: parsed.data.computeServerId,\n\t\tdisplayName: parsed.data.displayName.trim(),\n\t\tdescription: parsed.data.description,\n\t\tcategory: parsed.data.category,\n\t\ttags: parsed.data.tags,\n\t\tcoverImage: parsed.data.coverImage\n\t}, fileData, schema);\n\tlet coverImage = record.coverImage;\n\tif (imageFile instanceof File && imageFile.size > 0) {\n\t\tconst imageData = new Uint8Array(await imageFile.arrayBuffer());\n\t\tcoverImage = await service.saveCoverImage(ctx, guid, imageData);\n\t}\n\treturn created({\n\t\tguid,\n\t\tversion,\n\t\tcoverImage\n\t});\n};\n/** `schema` is a large blob, served on demand by `/versions/{versionId}/schema`. */\nfunction versionSummary(v) {\n\treturn {\n\t\tid: v.id,\n\t\tversionNumber: v.versionNumber,\n\t\tuploadedAt: v.uploadedAt,\n\t\tuploadedBy: v.uploadedBy,\n\t\tchangeNote: v.changeNote\n\t};\n}\n/** The record plus its live and draft version summaries. */\nvar getDefinition = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = requireCaller(req);\n\tconst record = await getVisibleDefinition(ctx, guid, req.deps);\n\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\tconst meta = req.deps.definitionMeta;\n\tconst [liveVersion, draftVersion] = await Promise.all([record.liveVersionId ? meta.getVersion(ctx, record.liveVersionId) : null, record.draftVersionId ? meta.getVersion(ctx, record.draftVersionId) : null]);\n\treturn { body: {\n\t\t...record,\n\t\tliveVersion: liveVersion ? versionSummary(liveVersion) : null,\n\t\tdraftVersion: draftVersion ? versionSummary(draftVersion) : null\n\t} };\n};\n/** Soft-delete the definition; versions and blobs are wiped with it. */\nvar deleteDefinition = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\tawait definitionService(req.deps).delete(ctx, guid);\n\treturn noContent();\n};\n/** Metadata only. New versions POST to `/versions`. */\nvar updateDefinition = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx, record } = await requireEditableDefinition(req, guid);\n\tconst patch = await parseBody(req.request, UpdateMetadataInputSchema);\n\tif (patch.projectId && patch.projectId !== record.projectId) await requireCanCreateDefinition(req, patch.projectId);\n\tawait definitionService(req.deps).updateMeta(ctx, guid, patch);\n\treturn noContent();\n};\n/**\n* Convenience alias for the live version's schema — the call a client makes\n* before solving. The canonical location is `/versions/{versionId}/schema`;\n* this resolves the `live` pointer for you.\n*/\nvar getDefinitionSchema = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = requireCaller(req);\n\tconst record = await getVisibleDefinition(ctx, guid, req.deps);\n\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\tif (!record.liveVersionId) apiError(404, ApiErrorCode.NOT_FOUND, \"This definition has no published version\");\n\tconst version = await loadVisibleVersion(ctx, guid, record.liveVersionId, req.deps);\n\tif (!version?.schema) apiError(404, ApiErrorCode.NOT_FOUND, \"No schema cached for the live version\");\n\treturn { body: version.schema };\n};\n/**\n* Advance the live channel. Body `{ versionId? }` targets a specific version\n* (rollback or forward-roll); omit it to promote the current draft.\n*/\nvar publishDefinition = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { versionId } = await parseBody(req.request, PublishVersionInputSchema, { missingAs: {} });\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\treturn { body: { version: await definitionService(req.deps).publish(ctx, guid, versionId) } };\n};\n/** Upload a cover image. */\nvar uploadDefinitionImage = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\tconst { file } = requireUpload(await req.request.formData(), \"image\", {\n\t\tmaxBytes: req.deps.uploadLimits.maxImageFileSize,\n\t\tlabel: \"Image\"\n\t});\n\tconst data = new Uint8Array(await file.arrayBuffer());\n\treturn { body: { coverImage: await definitionService(req.deps).saveCoverImage(ctx, guid, data) } };\n};\n//#endregion\n//#region ../server/src/handlers/definitionVersions.ts\n/**\n* Version handlers: list, upload, read, delete, and a version's cached schema.\n*\n* Reads resolve through `getVisibleDefinition` / `loadVisibleVersion`, which\n* return `null` rather than throwing, so an invisible definition answers 404.\n* A 403 anywhere here would confirm a guid exists across a tenant boundary.\n*/\nvar listVersions = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = requireCaller(req);\n\tif (!await getVisibleDefinition(ctx, guid, req.deps)) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\treturn collection(await req.deps.definitionMeta.listVersions(ctx, guid, parseListOptions(req.url)));\n};\n/** Upload a new version. Advances `draft`; `live` is unchanged until publish. */\nvar uploadVersion = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst form = await req.request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: req.deps.uploadLimits.maxDefinitionFileSize,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst changeNote = formText(form, \"changeNote\", { maxLength: 1e3 });\n\tconst { ctx, record, project } = await requireEditableDefinition(req, guid);\n\tconst data = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project?.orgId ?? null, req.deps.computeServer, { definitionPin: record.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(data, server);\n\treturn created({ version: await definitionService(req.deps).uploadVersion(ctx, guid, data, extension.slice(1), file.name, schema, changeNote) });\n};\n/**\n* Version metadata. `schema` is excluded and served by the `/schema`\n* sub-resource, so a version read never carries a several-hundred-KB blob.\n*/\nvar getVersion = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(req.params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = requireCaller(req);\n\tconst version = await loadVisibleVersion(ctx, guid, versionId, req.deps);\n\tif (!version) apiError(404, ApiErrorCode.NOT_FOUND, \"Version not found\");\n\tconst { schema: _schema, ...rest } = version;\n\treturn { body: rest };\n};\n/**\n* Delete an old version. The store throws 409 if the version is currently\n* referenced by `liveVersionId` or `draftVersionId` — repoint first.\n*/\nvar deleteVersion = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(req.params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = await requireEditableDefinition(req, guid);\n\tawait definitionService(req.deps).deleteVersion(ctx, guid, versionId);\n\treturn noContent();\n};\n/**\n* The UI schema cached on this version at upload. Reads what is stored — no\n* Rhino.Compute round-trip, unlike the pre-upload `POST /api/v1/compute/schema`.\n*\n* Schemas belong to a version, so this is the canonical location;\n* `/definitions/{guid}/schema` is an alias for the live one.\n*/\nvar getVersionSchema = async (req) => {\n\tconst guid = parseParam(req.params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(req.params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = requireCaller(req);\n\tconst version = await loadVisibleVersion(ctx, guid, versionId, req.deps);\n\tif (!version) apiError(404, ApiErrorCode.NOT_FOUND, \"Version not found\");\n\tif (!version.schema) apiError(404, ApiErrorCode.NOT_FOUND, \"No schema cached for this version\");\n\treturn { body: version.schema };\n};\n//#endregion\n//#region ../server/src/handlers/projects.ts\n/**\n* Project handlers: the collection, and a single project's detail and settings.\n*\n* `listProjects` was authored against `resolveAccessibleProjects`, not lifted\n* from the pre-v1 handler: that one listed every project in the acting org with\n* no `canView` filter and had no UI caller, so it carried no evidence of being\n* correct. The rest are lifted, logic intact, with reads moved onto `req.deps`.\n*/\nvar listProjects = async (req) => {\n\tconst { ctx } = requireCaller(req);\n\tconst { projects } = await resolveAccessibleProjects(ctx, req.deps);\n\tconst { limit, cursor } = parseListOptions(req.url);\n\tconst start = cursor ? Number(cursor) : 0;\n\tif (!Number.isInteger(start) || start < 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid cursor\");\n\tconst items = projects.slice(start, start + (limit ?? projects.length));\n\tconst nextIndex = start + items.length;\n\treturn collection({\n\t\titems,\n\t\tnextCursor: nextIndex < projects.length ? String(nextIndex) : void 0\n\t});\n};\nvar createProject = async (req) => {\n\tconst { ctx, user } = requireCaller(req);\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tawait requireCanCreateProject(req, ctx.actingOrgId);\n\tconst input = await parseBody(req.request, CreateProjectBodySchema);\n\tif (input.visibility === \"platform\" && !hasPermission(ctx, \"instance_admin\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Only a platform admin can create a project with platform visibility.\");\n\tconst autoJoinOnUpload = input.autoJoinOnUpload ?? false;\n\tconst flagIssues = validateProjectFlags({\n\t\tvisibility: input.visibility,\n\t\tautoJoinOnUpload\n\t});\n\tif (flagIssues.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \"));\n\treturn created(await createProjectWithUniqueSlug(req.deps.projects, {\n\t\tid: randomUUID(),\n\t\torgId: ctx.actingOrgId,\n\t\tname: input.name,\n\t\tdescription: input.description,\n\t\tvisibility: input.visibility,\n\t\townerId: user.id,\n\t\tcreatedBy: user.id,\n\t\tupdatedBy: user.id,\n\t\tautoJoinOnUpload\n\t}, {\n\t\twriteCtx: ctx,\n\t\tfallbackSlug: \"project\",\n\t\tconflictScope: \"this organization\"\n\t}));\n};\n/**\n* Project detail plus the caller's effective capabilities on it.\n*\n* A project the caller cannot view returns 404, not 403 — `403` would confirm\n* the id exists to anyone probing.\n*/\nvar getProject = async (req) => {\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst { ctx } = requireCaller(req);\n\tconst project = await req.deps.projects.getProject(SYSTEM_CONTEXT, id);\n\tif (!project || outsideTokenOrg(ctx, project.orgId)) apiError(404, ApiErrorCode.NOT_FOUND, \"Project not found\");\n\tconst [orgMembers, projectMembers, grants] = await Promise.all([\n\t\treq.deps.orgs.getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),\n\t\treq.deps.projects.getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),\n\t\tproject.visibility === \"platform\" ? req.deps.platformProjectGrants.listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])\n\t]);\n\tconst member = projectMembers.get(project.id) ?? null;\n\tconst input = projectAccessInputFromRowsWith(req, ctx, project, {\n\t\tmember,\n\t\torgMember: orgMembers.get(project.orgId) ?? null,\n\t\tplatformGrants: grants\n\t});\n\tif (!canView(input)) apiError(404, ApiErrorCode.NOT_FOUND, \"Project not found\");\n\treturn { body: {\n\t\t...project,\n\t\trole: member?.role ?? null,\n\t\tcanEdit: canEdit(input),\n\t\tcanSolve: canSolve(input)\n\t} };\n};\nvar updateProject = async (req) => {\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst { ctx, project: existing } = await requireCanEditProjectSettings(req, id);\n\tconst input = await parseBody(req.request, UpdateProjectBodySchema);\n\tif (input.visibility === \"platform\" && existing.visibility !== \"platform\") {\n\t\tif (!hasPermission(ctx, \"instance_admin\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Only a platform admin can give a project platform visibility.\");\n\t}\n\tif (input.visibility === \"public\" && existing.visibility !== \"public\") {\n\t\tconst orgMember = await req.deps.orgs.getOrgMember(ctx, existing.orgId, ctx.userId);\n\t\tif (!withAdminBypass(ctx.platformPermissions, () => canChangeVisibilityToPublic({ orgMember }))) apiError(403, ApiErrorCode.FORBIDDEN, \"Only org owners or admins can make a project public.\");\n\t}\n\tconst flagIssues = validateProjectFlags({\n\t\tvisibility: input.visibility ?? existing.visibility,\n\t\tautoJoinOnUpload: input.autoJoinOnUpload ?? existing.autoJoinOnUpload\n\t});\n\tif (flagIssues.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \"));\n\tconst patch = {};\n\tif (input.name !== void 0) {\n\t\tpatch.name = input.name;\n\t\tpatch.slug = slugify(input.name);\n\t}\n\tif (input.description !== void 0) patch.description = input.description ?? void 0;\n\tif (input.visibility !== void 0) patch.visibility = input.visibility;\n\tif (input.autoJoinOnUpload !== void 0) patch.autoJoinOnUpload = input.autoJoinOnUpload;\n\tawait req.deps.projects.updateProject(ctx, id, patch);\n\treturn noContent();\n};\nvar deleteProject = async (req) => {\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst { ctx } = requireCaller(req);\n\tawait requireCanManage(req, id);\n\tawait req.deps.projects.deleteProject(ctx, id);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/projectMembers.ts\n/**\n* Project membership: list, add, change role, remove.\n*\n* Every method here gates on `requireCanManage(req, id, 'members')`. The\n* owner-count preconditions on PATCH and DELETE come from `checkOwnerRemoval`,\n* a pure rules function, so demotion and removal cannot drift apart — a sole\n* owner demoting themselves locks the project exactly as removing themselves\n* would.\n*/\nvar listProjectMembers = async (req) => {\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst { ctx } = requireCaller(req);\n\tawait requireCanManage(req, id, \"members\");\n\treturn collection(await req.deps.projects.listProjectMembers(ctx, id, parseListOptions(req.url)));\n};\nvar addProjectMember = async (req) => {\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst { ctx } = requireCaller(req);\n\tawait requireCanManage(req, id, \"members\");\n\tconst input = await parseBody(req.request, AddProjectMemberBodySchema);\n\tconst project = await req.deps.projects.getProject(ctx, id);\n\tif (!project) apiError(404, ApiErrorCode.NOT_FOUND, \"Project not found\");\n\tawait requireTargetIsOrgMember(req, project.orgId, input.userId);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst member = {\n\t\tprojectId: id,\n\t\tuserId: input.userId,\n\t\trole: input.role,\n\t\tjoinedAt: now,\n\t\tupdatedAt: now,\n\t\tupdatedBy: ctx.userId || input.userId,\n\t\tdeletedAt: null\n\t};\n\tawait req.deps.projects.addProjectMember(ctx, member);\n\treturn created(member);\n};\n/**\n* Guard the owner count before a demotion or removal goes through.\n*\n* `?confirm=true` is what distinguishes \"I meant to do this\" from a misclick;\n* the sole-owner case has no confirmation, because there is no state the\n* caller could confirm into that leaves the project manageable.\n*/\nasync function assertOwnerRemovable(req, projectId, target, action) {\n\tconst { ctx } = requireCaller(req);\n\tconst page = await req.deps.projects.listProjectMembers(ctx, projectId, { limit: 200 });\n\tconst decision = checkOwnerRemoval({\n\t\ttarget: { role: target.role },\n\t\tallMembers: page.items.map((m) => ({ role: m.role })),\n\t\tconfirmed: req.url.searchParams.get(\"confirm\") === \"true\"\n\t});\n\tif (decision === \"sole_owner\") apiError(409, ApiErrorCode.CONFLICT, `Cannot ${action} the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.`);\n\tif (decision === \"needs_confirm\") apiError(409, ApiErrorCode.CONFLICT, `${action === \"demote\" ? \"Demoting\" : \"Removing\"} another project owner requires explicit confirmation. Retry with ?confirm=true.`);\n}\nvar updateProjectMemberRole = async (req) => {\n\tconst { id, userId } = requireParams(req.params, \"id\", \"userId\");\n\tconst { ctx } = requireCaller(req);\n\tawait requireCanManage(req, id, \"members\");\n\tconst { role } = await parseBody(req.request, UpdateProjectMemberBodySchema);\n\tif (role !== \"owner\") {\n\t\tconst target = await req.deps.projects.getProjectMember(ctx, id, userId);\n\t\tif (target?.role === \"owner\") await assertOwnerRemovable(req, id, target, \"demote\");\n\t}\n\tawait req.deps.projects.updateProjectMemberRole(ctx, id, userId, role);\n\treturn noContent();\n};\nvar removeProjectMember = async (req) => {\n\tconst { id, userId } = requireParams(req.params, \"id\", \"userId\");\n\tconst { ctx } = requireCaller(req);\n\tawait requireCanManage(req, id, \"members\");\n\tconst target = await req.deps.projects.getProjectMember(ctx, id, userId);\n\tif (!target) return noContent();\n\tif (target.role === \"owner\") await assertOwnerRemovable(req, id, target, \"remove\");\n\tawait req.deps.projects.removeProjectMember(ctx, id, userId);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/orgCompute.ts\n/**\n* Per-org compute config: this org's own servers (`scope: 'org'`) and its\n* default selection (`orgDefaults[orgId]`). Platform servers and the global\n* default are read-only here — `manage_compute` owns those via `/api/admin/compute`.\n*\n* Authorization: org `owner`/`admin` with `manage_org_compute`, plus the acting-org\n* tenancy check. Gated by `ALLOW_ORG_COMPUTE_OVERRIDE`; when off, both methods 403.\n*\n* **`apiKey` merge semantics are the trap here.** Omitted preserves the stored\n* key, `null` clears it, a string replaces it — and `/api/admin/compute` must\n* agree, which is why the merge lives in `@selvajs/server/compute`, not inline.\n*/\nfunction requireFlag(req) {\n\tif (!req.deps.flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar getOrgCompute = async (req) => {\n\trequireFlag(req);\n\trequireManageOrgCompute(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst config = await req.deps.computeServer.getConfig(ctx, { scopeToOrgId: orgId });\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => ({\n\t\t...s,\n\t\thasApiKey: !!s.hasApiKey\n\t}));\n\tconst catalog = config.servers.map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn shaped(OrgComputeResponseSchema, {\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar updateOrgCompute = async (req) => {\n\trequireFlag(req);\n\trequireManageOrgCompute(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst incoming = await parseBody(req.request, OrgComputePatchBodySchema);\n\tvalidateIncomingServers(incoming.servers);\n\tconst provider = req.deps.computeServer;\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeys = storedKeysById(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: resolveApiKey(s.apiKey, storedKeys.get(s.id))\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tevictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next, req.deps.evictComputeClient);\n\treturn noContent();\n};\n//#endregion\n//#region ../server/src/handlers/invite-lookup.ts\n/**\n* Find an invite by id, confirming it belongs to `orgId`.\n*\n* `manage_org_members` is org-scoped, so a permitted caller must not reach an\n* invite in another org. Neither store scopes `revoke()` by acting org, so\n* every route that mutates an invite by id has to establish ownership first —\n* hence one shared paged scan rather than a copy per route.\n*/\nasync function findPendingInviteInOrg(ctx, orgId, id, store) {\n\tlet cursor;\n\tdo {\n\t\tconst page = await store.listByOrg(ctx, orgId, {\n\t\t\tlimit: 200,\n\t\t\tcursor\n\t\t});\n\t\tconst match = page.items.find((i) => i.id === id);\n\t\tif (match) return match;\n\t\tcursor = page.nextCursor ?? void 0;\n\t} while (cursor);\n\treturn null;\n}\n//#endregion\n//#region ../server/src/handlers/invites.ts\n/**\n* Org invites: list, mint, revoke, resend.\n*\n* **The raw token exists only in the response.** The store sees an HMAC digest,\n* so a leak of the `invites` table cannot be replayed without the instance\n* secret — and `tokenHash` is dropped by the response schema, which is why\n* every response here goes through `shaped`/`shapedCollection` rather than\n* `{ body }`.\n*/\nvar INVITE_TTL_MS = 6048e5;\n/**\n* Mail the accept link, or report why not.\n*\n* Mint and resend must send the identical message, so the deps threading lives\n* here rather than at each call site. `not-configured` when the host wired no\n* notification provider: the invite row is already committed and the caller\n* still holds `acceptUrl`, so an instance without mail is a working instance,\n* not a failed write.\n*/\nasync function mailInvite(req, invite, acceptUrl) {\n\tconst notifications = req.deps.notifications;\n\tif (!notifications) return \"not-configured\";\n\treturn deliverInvite({\n\t\tctx: req.ctx,\n\t\tlog: req.log,\n\t\tinvite,\n\t\tacceptUrl,\n\t\tactor: {\n\t\t\tprofile: req.profile,\n\t\t\tuser: req.user\n\t\t},\n\t\torgs: req.deps.orgs,\n\t\tnotifications,\n\t\tfallbackOrgName: req.deps.instanceName\n\t});\n}\n/** Pending and recently accepted invites for the acting org. */\nvar listInvites = async (req) => {\n\trequireManageOrgMembers(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\treturn shapedCollection(InviteResponseSchema, await req.deps.invites.listByOrg(ctx, orgId, parseListOptions(req.url)));\n};\n/** Create an invite and return the accept URL. */\nvar createInvite = async (req) => {\n\trequireManageOrgMembers(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst { user } = requireCaller(req);\n\tconst input = await parseBody(req.request, CreateInviteBodySchema);\n\tconst { platform: submittedPlatformPerms, org: submittedOrgPerms } = splitFlatPermissions(input.permissions);\n\tassertCanGrantPlatformPermissions(ctx, submittedPlatformPerms);\n\tif (!await canActorChangeOrgRole(ctx, orgId, input.orgRole, req)) apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can invite someone as owner or admin.\");\n\tconst orgPermissions = input.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[input.orgRole]];\n\tconst codec = tokenCodec(req.deps, \"invites\");\n\tconst rawToken = codec.mintRawToken();\n\tconst now = /* @__PURE__ */ new Date();\n\tconst invite = {\n\t\tid: randomUUID(),\n\t\ttokenHash: codec.hashToken(rawToken),\n\t\temail: input.email,\n\t\torgId,\n\t\torgRole: input.orgRole,\n\t\torgPermissions,\n\t\tplatformPermissions: submittedPlatformPerms,\n\t\tinvitedBy: user.id,\n\t\tcreatedAt: now.toISOString(),\n\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t};\n\tawait req.deps.invites.create(ctx, invite);\n\tconst acceptUrl = `${req.url.origin}/accept-invite?token=${rawToken}`;\n\tconst delivery = await mailInvite(req, invite, acceptUrl);\n\treturn shaped(CreatedInviteResponseSchema, {\n\t\t...invite,\n\t\tacceptUrl,\n\t\tdelivery\n\t}, 201);\n};\n/** Revoke a pending invite. Consumed invites are preserved for audit. */\nvar revokeInvite = async (req) => {\n\trequireManageOrgMembers(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst { id } = requireParams(req.params, \"id\");\n\tif (!await findPendingInviteInOrg(ctx, orgId, id, req.deps.invites)) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\tawait req.deps.invites.revoke(ctx, id);\n\treturn noContent();\n};\n/**\n* Re-send an invite: mint a replacement and revoke the original.\n*\n* A resend cannot reuse the original link. The raw token is never stored — only\n* its HMAC digest is — so there is nothing to re-read, and rather than weaken\n* that, this issues a fresh token and revokes the row it replaces. The old link\n* stops working the moment this returns, which is also what an admin wants\n* after mailing an invite to the wrong address.\n*\n* Grants are copied verbatim from the original. The role and permission gates\n* ran when it was minted; re-deriving them here would let a since-demoted admin\n* silently change what the invite carries.\n*/\nvar resendInvite = async (req) => {\n\trequireManageOrgMembers(req);\n\tconst { ctx, orgId } = requireActingOrg(req, req.params.orgId);\n\tconst { id } = requireParams(req.params, \"id\");\n\tconst existing = await findPendingInviteInOrg(ctx, orgId, id, req.deps.invites);\n\tif (!existing) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\tif (existing.acceptedAt) apiError(409, ApiErrorCode.CONFLICT, \"This invite has already been accepted.\");\n\tconst codec = tokenCodec(req.deps, \"invites\");\n\tconst rawToken = codec.mintRawToken();\n\tconst now = /* @__PURE__ */ new Date();\n\tconst replacement = {\n\t\t...existing,\n\t\tid: randomUUID(),\n\t\ttokenHash: codec.hashToken(rawToken),\n\t\tcreatedAt: now.toISOString(),\n\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t};\n\tawait req.deps.invites.create(ctx, replacement);\n\tawait req.deps.invites.revoke(ctx, existing.id);\n\tconst acceptUrl = `${req.url.origin}/accept-invite?token=${rawToken}`;\n\tconst delivery = await mailInvite(req, replacement, acceptUrl);\n\treturn shaped(CreatedInviteResponseSchema, {\n\t\t...replacement,\n\t\tacceptUrl,\n\t\tdelivery\n\t}, 201);\n};\n//#endregion\nexport { listShareLinks as A, revokeUserApiTokens as B, getDefinition as C, updateDefinition as D, publishDefinition as E, removeOrgMember as F, getMe as G, listOrgMembers as H, updateOrgMember as I, createApiToken as L, removeOrgAsset as M, uploadOrgAsset as N, uploadDefinitionImage as O, reclaimProject as P, listApiTokens as R, deleteDefinition as S, listDefinitions as T, starDefinition as U, getOrg as V, unstarDefinition as W, getVersion as _, getOrgCompute as a, uploadVersion as b, listProjectMembers as c, createProject as d, deleteProject as f, deleteVersion as g, updateProject as h, revokeInvite as i, revokeShareLink as j, createShareLink as k, removeProjectMember as l, listProjects as m, listInvites as n, updateOrgCompute as o, getProject as p, resendInvite as r, addProjectMember as s, createInvite as t, updateProjectMemberRole as u, getVersionSchema as v, getDefinitionSchema as w, createDefinition as x, listVersions as y, revokeApiToken as z };\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAaA;AACA;AACA,SAAS,UAAU,CAAC,IAAI,EAAE;AAC1B,CAAC,OAAO,EAAE,IAAI,EAAE;AAChB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,EAAE;AACJ;AACA;AACA,SAAS,OAAO,CAAC,IAAI,EAAE;AACvB,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,GAAG;AACb,EAAE;AACF,EAAE;AACF;AACA;AACA,SAAS,SAAS,GAAG;AACrB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;AACvB;AACA;AACA;AACA;AACA,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,EAAE;AAC/C,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;AAC5B,EAAE;AACF;AACA;AACA,SAAS,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE;AACxC,CAAC,OAAO,EAAE,IAAI,EAAE;AAChB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrD,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,EAAE;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,UAAU,CAAC,CAAC,EAAE;AACvB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;AACpG;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;AACjD,CAAC,OAAO,CAAC;AACT;AACA;AACA;AACA,8DAA8D,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AACpF,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;AAClB;AACA;AACA,GAAG,EAAE,MAAM;AACX,MAAM,CAAC,GAAG,EAAE;AACZ;AACA;AACA,OAAO,CAAC;AACR;AACA;AACA,SAAS,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE;AACnC,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,yJAAyJ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACvN;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,IAAI,EAAE;AACjC,CAAC,OAAO,CAAC;AACT;AACA,qDAAqD,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACxE,MAAM,CAAC;AACP;AACA;AACA;AACA,SAAS,YAAY,CAAC,GAAG,EAAE;AAC3B,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;AACxB,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;AAC3E,EAAE,IAAI,EAAE,SAAS;AACjB,EAAE,KAAK,EAAE,MAAM;AACf,EAAE,GAAG,EAAE;AACP,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,KAAK,EAAE;AAClC,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK;AACpD,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;AAC7C,CAAC,MAAM,OAAO,GAAG,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,YAAY,CAAC,GAAG,uBAAuB;AACjF,CAAC,OAAO;AACR,EAAE,IAAI,EAAE,YAAY;AACpB,EAAE,EAAE;AACJ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;AACnD,EAAE,IAAI,EAAE;AACR,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC;AAC5C,GAAG,EAAE;AACL,GAAG,mDAAmD;AACtD,GAAG,SAAS;AACZ,GAAG,EAAE;AACL,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,2BAA2B,CAAC;AAC7D,GAAG,EAAE;AACL,GAAG;AACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;AACd,EAAE,IAAI,EAAE,YAAY,CAAC;AACrB,GAAG,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC;AACtC,GAAG,IAAI,EAAE,CAAC;AACV,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AAChE;AACA,EAAE,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AAChD,EAAE,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;AAClC,GAAG,MAAM,EAAE,CAAC,qBAAqB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AACtD,uEAAuE;AACvE,GAAG;AACH,EAAE;AACF;AACA;AACA;AACA,SAAS,UAAU,CAAC,GAAG,EAAE;AACzB,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;AACxB,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;AACxE,EAAE,IAAI,EAAE,SAAS;AACjB,EAAE,KAAK,EAAE,MAAM;AACf,EAAE,GAAG,EAAE;AACP,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA,SAAS,0BAA0B,CAAC,KAAK,EAAE;AAC3C,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK;AAC5D,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;AAC3C,CAAC,OAAO;AACR,EAAE,IAAI,EAAE,mBAAmB;AAC3B,EAAE,EAAE;AACJ,EAAE,OAAO,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACvD,EAAE,IAAI,EAAE;AACR,GAAG,CAAC,uBAAuB,EAAE,SAAS,CAAC,uCAAuC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1F,GAAG,EAAE;AACL,GAAG,SAAS;AACZ,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACjC,GAAG,EAAE;AACL,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7B,GAAG,EAAE;AACL,GAAG,yCAAyC;AAC5C,GAAG;AACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;AACd,EAAE,IAAI,EAAE,YAAY,CAAC;AACrB,GAAG,OAAO,EAAE,eAAe;AAC3B,GAAG,IAAI,EAAE,CAAC;AACV,iCAAiC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,iDAAiD,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AAChI;AACA;AACA,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5D;AACA,EAAE,EAAE,YAAY,CAAC,SAAS,EAAE,oBAAoB,CAAC;AACjD,EAAE,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;AAClC,GAAG,MAAM,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,yDAAyD;AACxG,GAAG;AACH,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,aAAa,CAAC,KAAK,EAAE;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,KAAK;AAC3F,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC;AAChE,GAAG,EAAE,EAAE,MAAM,CAAC,KAAK;AACnB,GAAG,SAAS;AACZ,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,eAAe;AACxC,GAAG,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK;AAC7D,GAAG,SAAS,EAAE,MAAM,CAAC;AACrB,GAAG,CAAC,EAAE,GAAG,CAAC;AACV,EAAE,OAAO,MAAM;AACf,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;AAChD,GAAG,SAAS,EAAE,SAAS;AACvB,GAAG,QAAQ,EAAE,MAAM,CAAC,EAAE;AACtB,GAAG,MAAM,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AAC1D,GAAG,CAAC;AACJ,EAAE,OAAO,QAAQ;AACjB,CAAC;AACD;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,IAAI,EAAE;AACjC,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW;AAC1C,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC;AAClG,CAAC,OAAO,OAAO;AACf;AACA,SAAS,eAAe,CAAC,IAAI,EAAE;AAC/B,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS;AACxC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;AAChG,CAAC,OAAO,OAAO;AACf;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;AAClC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;AAClC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,iBAAiB,EAAE,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAC5F,CAAC,OAAO,KAAK;AACb;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,KAAK,GAAG,OAAO,GAAG,KAAK;AAC3B,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACzC,CAAC,OAAO,EAAE,IAAI,EAAE;AAChB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW;AACvC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;AAC9B,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;AAC9C,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc;AACpC,EAAE,kBAAkB,EAAE,GAAG,CAAC,OAAO,EAAE,kBAAkB,IAAI;AACzD,EAAE,EAAE;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACzC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;AACnD,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC9D,CAAC,OAAO,SAAS,EAAE;AACnB;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACzC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;AACnD,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChE,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,OAAO,GAAG,KAAK;AAC5B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;AACnD,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AAC1E,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE;AACrB;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,GAAG,KAAK;AAClB,SAAS,mBAAmB,CAAC,GAAG,EAAE;AAClC,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wEAAwE,CAAC;AACvI,CAAC,OAAO,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/C;AACA,SAAS,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE;AAC3C,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB;AAChD,CAAC,IAAI,CAAC,MAAM,EAAE;AACd,EAAE,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,CAAC;AAC7C,EAAE;AACF,CAAC;AACD,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,0CAA0C,CAAC;AACpG;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,sBAAsB,EAAE,8CAA8C,CAAC;AACnG;AACA,SAAS,OAAO,CAAC,GAAG,EAAE;AACtB,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE;AAChD;AACA,SAAS,OAAO,CAAC,GAAG,EAAE;AACtB,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,WAAW,EAAE;AAClD;AACA,SAAS,UAAU,CAAC,KAAK,EAAE;AAC3B,CAAC,OAAO;AACR,EAAE,GAAG,KAAK;AACV,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE;AAC3C,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE;AACzD,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACxG,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC7B,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;AAChF,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE;AAC/B,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE;AAC/B,GAAG,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,MAAM,CAAC,kCAAkC,CAAC;AACxE,GAAG;AACH,EAAE;AACF,EAAE,IAAI,SAAS,GAAG,QAAQ,CAAC,EAAE;AAC7B,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS;AAChK,EAAE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;AACxE,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;AACpG,EAAE,IAAI;AACN,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACnF,GAAG,MAAM,GAAG;AACZ,EAAE;AACF,CAAC;AACD;AACA;AACA;AACA;AACA;AACA,eAAe,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE;AAC5C,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa;AAC7C,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK;AAC3B,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,EAAE;AAC5B,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC;AAC9D,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC;AACtD,GAAG,EAAE;AACL,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI;AACxB,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY;AAC9C,GAAG,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAC7C,GAAG,SAAS,EAAE,KAAK,CAAC,SAAS;AAC7B,GAAG,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC;AAChE,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AACd,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;AACnD,GAAG,SAAS,EAAE,WAAW;AACzB,GAAG,OAAO,EAAE,KAAK,CAAC,EAAE;AACpB,GAAG,MAAM,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AAC1D,GAAG,CAAC;AACJ,CAAC;AACD;AACA;AACA;AACA;AACA;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM;AACvD,CAAC,IAAI,GAAG,EAAE,uBAAuB,CAAC,GAAG,CAAC;AACtC,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE;AACvD,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9B,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,CAAC;AAC7B,EAAE,CAAC;AACH,CAAC,OAAO,gBAAgB,CAAC,sBAAsB,EAAE;AACjD,EAAE,GAAG,IAAI;AACT,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU;AAClC,EAAE,CAAC;AACH;AACA;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC;AAClC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACpC,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC;AAC3B,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC;AAC3B,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB;AACjD,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;AAC/D,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC;AACrE,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;AACtD,CAAC,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE;AACjC,CAAC,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACvC,CAAC,MAAM,KAAK,GAAG;AACf,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,KAAK;AACP,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACpC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC9B,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;AACjF,EAAE,UAAU,EAAE,IAAI;AAClB,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;AAC/B,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC;AACnC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK;AAC/C,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,GAAG;AACb,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;AAC1C,EAAE,IAAI,EAAE,6BAA6B,CAAC,KAAK,CAAC;AAC5C,GAAG,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC;AAC7B,GAAG,MAAM,EAAE;AACX,GAAG;AACH,EAAE;AACF;AACA;AACA;AACA;AACA;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;AACzD,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC;AAC3B,CAAC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;AAC5C,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM;AACzC,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC;AACvJ,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,GAAG,OAAO,CAAC;AAC1D,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE;AAClE,CAAC,IAAI,CAAC,KAAK,EAAE;AACb,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;AACjD,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE;AAC3C,GAAG,SAAS,EAAE,WAAW;AACzB,GAAG,MAAM;AACT,GAAG,KAAK,EAAE,IAAI,CAAC,KAAK;AACpB,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,GAAG,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACvD,GAAG,CAAC;AACJ,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,iBAAiB,GAAG,GAAG;AAC3B,IAAI,gBAAgB,GAAG,GAAG;AAC1B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE;AAC9D,CAAC,IAAI,MAAM;AACX,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,gBAAgB,EAAE,IAAI,EAAE,EAAE;AACrD,EAAE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE;AAChE,GAAG,KAAK,EAAE,iBAAiB;AAC3B,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,IAAI;AAC5G,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU;AAC5B,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK;AAC3B,CAAC;AACD,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2D,EAAE;AAC3E,EAAE,KAAK;AACP,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,OAAO,KAAK;AACb;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE;AACpE,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ;AACnC,CAAC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AAC1F,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,OAAO,KAAK;AACpE,EAAE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3J,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,OAAO,GAAG,IAAI;AAC5E,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AAC/B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,eAAe,GAAG,OAAO,GAAG,KAAK;AACrC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;AAChE,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACtE,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI;AAC3B,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC7F,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4CAA4C,CAAC;AACtG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC1D,EAAE,IAAI,CAAC,gBAAgB,CAAC;AACxB,GAAG,WAAW;AACd,GAAG,IAAI,EAAE,KAAK,CAAC;AACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAC1B,GAAG,WAAW;AACd,GAAG,IAAI,EAAE,MAAM,CAAC;AAChB,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sCAAsC,CAAC;AACnF,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,2FAA2F,CAAC;AACpP,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAChE,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACnC,EAAE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACjD,EAAE,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AAClH,EAAE,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChE,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AACxJ,EAAE,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAC9E,CAAC;AACD,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,eAAe,GAAG,OAAO,GAAG,KAAK;AACrC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;AAChE,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI;AAC3B,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC7F,CAAC,IAAI,CAAC,gBAAgB,CAAC;AACvB,EAAE,WAAW;AACb,EAAE,IAAI,EAAE,MAAM,CAAC;AACf,EAAE,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,8CAA8C,CAAC;AAC1F,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,2FAA2F,CAAC;AACzN,CAAC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC;AAC5E,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC;AAC/C,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC1B,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AAC7B,GAAG,IAAI,EAAE,uCAAuC;AAChD,GAAG,KAAK;AACR,GAAG,MAAM;AACT,GAAG,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACxC,GAAG,GAAG,OAAO,CAAC,GAAG;AACjB,GAAG,CAAC;AACJ,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE;AACpE,GAAG,KAAK;AACR,GAAG,MAAM;AACT,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM;AACtB,GAAG,YAAY,EAAE,QAAQ,CAAC;AAC1B,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK;AAC3D,CAAC,IAAI,KAAK,EAAE,IAAI;AAChB,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC;AAChE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,+DAA+D,EAAE;AACjF,GAAG,KAAK;AACR,GAAG,MAAM;AACT,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACzD,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE;AACjE,EAAE,KAAK;AACP,EAAE,MAAM,EAAE;AACV,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC;AACZ,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC;AAChE,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,IAAI,EAAE,OAAO;AACf,EAAE,QAAQ,EAAE,GAAG;AACf,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AAClC,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AACtD,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AAC5B,EAAE,IAAI,EAAE,mBAAmB;AAC3B,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;AACtB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AACjB,EAAE,eAAe,EAAE,OAAO,CAAC;AAC3B,EAAE,CAAC;AACH,CAAC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,qBAAqB,mBAAmB,IAAI,GAAG,CAAC;AACpD,CAAC,WAAW;AACZ,CAAC,YAAY;AACb,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC;AACD,CAAC,CAAC;AACF,SAAS,SAAS,CAAC,MAAM,EAAE;AAC3B,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACvD,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC,OAAO,IAAI,CAAC,IAAI;AACjB;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AAC7G,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACvE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB;AAClD,EAAE,YAAY,EAAE;AAChB,GAAG,OAAO,EAAE,qBAAqB;AACjC,GAAG,OAAO,EAAE;AACZ,GAAG;AACH,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC,OAAO,EAAE,IAAI,EAAE;AAChB,EAAE,IAAI;AACN,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI;AACnF,EAAE,EAAE;AACJ;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;AAC9D,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,oBAAoB,CAAC,GAAG,EAAE;AACnC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,6DAA6D,CAAC;AAC3I;AACA;AACA,SAAS,SAAS,CAAC,IAAI,EAAE;AACzB,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,QAAQ,EAAE;AACZ,EAAE;AACF;AACG,IAAC,cAAc,GAAG,OAAO,GAAG,KAAK;AACpC,CAAC,oBAAoB,CAAC,GAAG,CAAC;AAC1B,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9F,CAAC,OAAO,gBAAgB,CAAC,uBAAuB,EAAE;AAClD,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;AAClC,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH;AACG,IAAC,eAAe,GAAG,OAAO,GAAG,KAAK;AACrC,CAAC,oBAAoB,CAAC,GAAG,CAAC;AAC1B,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1F,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC;AACjD,CAAC,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE;AACjC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,YAAY,EAAE,IAAI;AACpB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;AACxB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;AACpC,EAAE,SAAS,EAAE,IAAI;AACjB,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;AAC9B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,KAAK,CAAC,SAAS;AACzF,EAAE,UAAU,EAAE;AACd,EAAE;AACF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AAC5C,CAAC,OAAO,MAAM,CAAC,8BAA8B,EAAE;AAC/C,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;AACvB,EAAE,KAAK,EAAE;AACT,EAAE,EAAE,GAAG,CAAC;AACR;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,eAAe,GAAG,OAAO,GAAG,KAAK;AACrC,CAAC,oBAAoB,CAAC,GAAG,CAAC;AAC1B,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC;AAChE,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,uBAAuB,CAAC;AAChH,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC9C,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,iBAAiB,GAAG;AACxB,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACG,IAAC,eAAe,GAAG,OAAO,GAAG,KAAK;AACrC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;AACvD,CAAC,IAAI,WAAW,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrK,CAAC,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE;AAChD,EAAE,GAAG,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;AACxC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,MAAM;AAC5D,EAAE,QAAQ,EAAE,WAAW,GAAG,CAAC,WAAW,CAAC,GAAG;AAC1C,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC;AACb,CAAC,OAAO,UAAU,CAAC;AACnB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAC7C,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,MAAM;AACxB,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACnC;AACA;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACzC,CAAC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC1C,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB;AACvD,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB;AAC7D,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;AAC3K,CAAC,IAAI,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;AAC5C,CAAC,IAAI,CAAC,SAAS,EAAE;AACjB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;AACrE,EAAE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,WAAW,CAAC;AACpE,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;AACzG,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE;AACzB,CAAC;AACD,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,SAAS,CAAC;AACrE,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACtD,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;AACtC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;AAC1C,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,EAAE,SAAS;AACX,EAAE,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB;AACnD,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,IAAI,GAAG,UAAU,EAAE;AAC1B,CAAC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AAC7I,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;AAC9D,CAAC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5C,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;AACvD,EAAE,IAAI;AACN,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AAClC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI;AAC7B,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AAC9C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AAC7C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACtC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AAChC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAC1B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC;AACrB,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACnC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACtD,EAAE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AACjE,EAAE,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACjE,CAAC;AACD,CAAC,OAAO,OAAO,CAAC;AAChB,EAAE,IAAI;AACN,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH;AACA;AACA,SAAS,cAAc,CAAC,CAAC,EAAE;AAC3B,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa;AAChC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE;AACF;AACA;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AAC3E,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc;AACrC,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9M,CAAC,OAAO,EAAE,IAAI,EAAE;AAChB,EAAE,GAAG,MAAM;AACX,EAAE,WAAW,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI;AAC/D,EAAE,YAAY,EAAE,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC,GAAG;AAC9D,EAAE,EAAE;AACJ;AACA;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACpD,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AACnE,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACtE,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,0BAA0B,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;AACpH,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;AAC/D,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,mBAAmB,GAAG,OAAO,GAAG,KAAK;AACzC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AAC3E,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,0CAA0C,CAAC;AAC7G,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC;AACpF,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,uCAAuC,CAAC;AACrG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;AAChC;AACA;AACA;AACA;AACA;AACG,IAAC,iBAAiB,GAAG,OAAO,GAAG,KAAK;AACvC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACjG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE;AAC9F;AACA;AACG,IAAC,qBAAqB,GAAG,OAAO,GAAG,KAAK;AAC3C,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACvE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB;AAClD,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;AACnG;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,YAAY,GAAG,OAAO,GAAG,KAAK;AAClC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AACpH,CAAC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACpG;AACA;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC1C,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB;AACvD,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC5E,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AACjJ,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC;AAC1D,CAAC,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;AACjJ;AACA;AACA;AACA;AACA;AACG,IAAC,UAAU,GAAG,OAAO,GAAG,KAAK;AAChC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AAC7E,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO;AAC7C,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;AACtB;AACA;AACA;AACA;AACA;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AAC7E,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3D,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACtE,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AAC7D,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AAC7E,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mCAAmC,CAAC;AAChG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;AAChC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,YAAY,GAAG,OAAO,GAAG,KAAK;AAClC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;AACpE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;AACpD,CAAC,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AAC3G,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxE,CAAC,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM;AACvC,CAAC,OAAO,UAAU,CAAC;AACnB,EAAE,KAAK;AACP,EAAE,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG;AAChE,EAAE,CAAC;AACH;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACzC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC;AACpD,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC;AACpE,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sEAAsE,CAAC;AAC5L,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,KAAK;AACzD,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACzC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;AAC9B,EAAE;AACF,EAAE,CAAC;AACH,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtI,CAAC,OAAO,OAAO,CAAC,MAAM,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;AACrE,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW;AACxB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;AAChC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;AAC9B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE;AACF,EAAE,EAAE;AACJ,EAAE,QAAQ,EAAE,GAAG;AACf,EAAE,YAAY,EAAE,SAAS;AACzB,EAAE,aAAa,EAAE;AACjB,EAAE,CAAC,CAAC;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,UAAU,GAAG,OAAO,GAAG,KAAK;AAChC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AACvE,CAAC,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AAChH,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AAC7E,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AAClF,EAAE,OAAO,CAAC,UAAU,KAAK,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE;AACnI,EAAE,CAAC;AACH,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AACtD,CAAC,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AACjE,EAAE,MAAM;AACR,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AAClD,EAAE,cAAc,EAAE;AAClB,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AAChF,CAAC,OAAO,EAAE,IAAI,EAAE;AAChB,EAAE,GAAG,OAAO;AACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;AAC5B,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;AACzB,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK;AAC1B,EAAE,EAAE;AACJ;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,6BAA6B,CAAC,GAAG,EAAE,EAAE,CAAC;AAChF,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC;AACpE,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE;AAC5E,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,+DAA+D,CAAC;AACnJ,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;AACxE,EAAE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AACrF,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sDAAsD,CAAC;AAChM,CAAC;AACD,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACzC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;AACrD,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,QAAQ,CAAC;AACvD,EAAE,CAAC;AACH,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtI,CAAC,MAAM,KAAK,GAAG,EAAE;AACjB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE;AAC5B,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;AACzB,EAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;AAClC,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,MAAM;AAClF,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;AACrE,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM,EAAE,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB;AACvF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AACtD,CAAC,OAAO,SAAS,EAAE;AACnB;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC;AAChC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;AAC/C,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,kBAAkB,GAAG,OAAO,GAAG,KAAK;AACxC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AAC3C,CAAC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAClG;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AAC3C,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,0BAA0B,CAAC;AACvE,CAAC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5D,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;AACjE,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;AACtB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,QAAQ,EAAE,GAAG;AACf,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;AACvC,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AACtD,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC;AACvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxF,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;AAC/B,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACvD,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK;AACrD,EAAE,CAAC;AACH,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,2FAA2F,CAAC,CAAC;AACnL,CAAC,IAAI,QAAQ,KAAK,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,KAAK,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC,gFAAgF,CAAC,CAAC;AAC3M;AACG,IAAC,uBAAuB,GAAG,OAAO,GAAG,KAAK;AAC7C,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;AACjE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AAC3C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAC;AAC7E,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE;AACvB,EAAE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AAC1E,EAAE,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC;AACrF,CAAC;AACD,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC;AACvE,CAAC,OAAO,SAAS,EAAE;AACnB;AACG,IAAC,mBAAmB,GAAG,OAAO,GAAG,KAAK;AACzC,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;AACjE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACnC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AAC3C,CAAC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACzE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE;AAChC,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC;AACnF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AAC7D,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,GAAG,EAAE;AAC1B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AAC/K;AACG,IAAC,aAAa,GAAG,OAAO,GAAG,KAAK;AACnC,CAAC,WAAW,CAAC,GAAG,CAAC;AACjB,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACpF,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAClG,EAAE,GAAG,CAAC;AACN,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AACjB,EAAE,CAAC,CAAC;AACJ,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC5C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,MAAM,CAAC,wBAAwB,EAAE;AACzC,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,gBAAgB,GAAG,OAAO,GAAG,KAAK;AACtC,CAAC,WAAW,CAAC,GAAG,CAAC;AACjB,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACzE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC;AAC1C,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa;AACxC,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AAC5G,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC;AACjI,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE;AAC7D,CAAC,IAAI,MAAM;AACX,CAAC,GAAG;AACJ,EAAE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE;AACjD,GAAG,KAAK,EAAE,GAAG;AACb,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACnD,EAAE,IAAI,KAAK,EAAE,OAAO,KAAK;AACzB,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM;AACpC,CAAC,CAAC,QAAQ,MAAM;AAChB,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,aAAa,GAAG,MAAM;AAC1B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE;AAClD,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa;AAC7C,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,gBAAgB;AAC5C,CAAC,OAAO,aAAa,CAAC;AACtB,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG;AACd,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG;AACd,EAAE,MAAM;AACR,EAAE,SAAS;AACX,EAAE,KAAK,EAAE;AACT,GAAG,OAAO,EAAE,GAAG,CAAC,OAAO;AACvB,GAAG,IAAI,EAAE,GAAG,CAAC;AACb,GAAG;AACH,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;AACrB,EAAE,aAAa;AACf,EAAE,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC;AAC5B,EAAE,CAAC;AACH;AACA;AACG,IAAC,WAAW,GAAG,OAAO,GAAG,KAAK;AACjC,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,OAAO,gBAAgB,CAAC,oBAAoB,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACvH;AACA;AACG,IAAC,YAAY,GAAG,OAAO,GAAG,KAAK;AAClC,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC;AACpC,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC;AACnE,CAAC,MAAM,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC;AAC7G,CAAC,iCAAiC,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,0DAA0D,CAAC;AACpK,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7K,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;AAC9C,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE;AACtC,CAAC,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACvC,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AACtC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;AACpB,EAAE,KAAK;AACP,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;AACxB,EAAE,cAAc;AAChB,EAAE,mBAAmB,EAAE,sBAAsB;AAC7C,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC9B,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AAChE,EAAE;AACF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC3C,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACtE,CAAC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC;AAC1D,CAAC,OAAO,MAAM,CAAC,2BAA2B,EAAE;AAC5C,EAAE,GAAG,MAAM;AACX,EAAE,SAAS;AACX,EAAE;AACF,EAAE,EAAE,GAAG,CAAC;AACR;AACA;AACG,IAAC,YAAY,GAAG,OAAO,GAAG,KAAK;AAClC,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AAC/H,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACvC,CAAC,OAAO,SAAS,EAAE;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,YAAY,GAAG,OAAO,GAAG,KAAK;AAClC,CAAC,uBAAuB,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;AAChF,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACzE,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,wCAAwC,CAAC;AACxG,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;AAC9C,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE;AACtC,CAAC,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACvC,CAAC,MAAM,WAAW,GAAG;AACrB,EAAE,GAAG,QAAQ;AACb,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AACtC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC9B,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AAChE,EAAE;AACF,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC;AAChD,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACtE,CAAC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC;AAC/D,CAAC,OAAO,MAAM,CAAC,2BAA2B,EAAE;AAC5C,EAAE,GAAG,WAAW;AAChB,EAAE,SAAS;AACX,EAAE;AACF,EAAE,EAAE,GAAG,CAAC;AACR;;;;"}

package/build/server/chunks/chunks/http.js-RE8xO8ob.js

@@ -1,60 +0,0 @@
-import { A as ApiErrorCode } from './schema-extraction.js-_C5meGta.js';
-import './api.js-DYHk_mqE.js';
-import { h as handleApiError, a as apiError } from './api-errors.js-1B8OozMX.js';
-import { json } from '@sveltejs/kit';
-
-//#region src/lib/server/api/http.ts
-/**
-* The rule this file enforces: **a route handler parses, guards, delegates and
-* serializes — nothing else.** Anything two endpoints must agree on lives here
-* or in `@selvajs/server`, never copied into both.
-*
-* Scope-neutral on purpose: `/api/v1/*` and `/api/admin/*` are siblings over
-* one core, so a rule that lands here reaches both.
-*
-* Request parsers live in `@selvajs/server/api` and are re-exported below —
-* they never depended on SvelteKit, only their throw did. What genuinely
-* belongs to this host stays: `requireCaller` (reads `App.Locals`), the
-* `json`-returning response helpers, and `apiRoute` itself.
-*/
-/**
-* The authenticated caller, or 401. Returns the narrowed pair so callers don't
-* need `locals.ctx!` — if you have the result, the context exists.
-*
-* For handlers that need an identity without a permission check — the `/me`
-* routes, and reads whose authorization is a visibility filter. Guards in
-* `access.server.ts` do their own 401 as a side effect of checking a permission.
-*/
-function requireCaller(locals) {
-	if (!locals.ctx || !locals.user) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
-	return {
-		ctx: locals.ctx,
-		user: locals.user
-	};
-}
-/** A created resource. */
-function created(body) {
-	return json(body, { status: 201 });
-}
-/** A successful mutation with nothing to say. */
-function noContent() {
-	return new Response(null, { status: 204 });
-}
-/**
-* Wrap a handler so an unhandled error becomes a structured API error.
-*
-* `fallback` is required: it's the message used when the error carries none of
-* its own, and "something went wrong" tells a caller nothing.
-*/
-function apiRoute(fallback, handler) {
-	return async (event) => {
-		try {
-			return await handler(event);
-		} catch (err) {
-			handleApiError(err, fallback, event.locals.log);
-		}
-	};
-}
-
-export { apiRoute as a, created as c, noContent as n, requireCaller as r };
-//# sourceMappingURL=http.js-RE8xO8ob.js.map

package/build/server/chunks/chunks/http.js-RE8xO8ob.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js-RE8xO8ob.js","sources":["../../../../.svelte-kit/output/server/chunks/http.js"],"sourcesContent":["import { u as ApiErrorCode } from \"./schema-extraction.js\";\nimport \"./api.js\";\nimport { n as handleApiError, t as apiError } from \"./api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/lib/server/api/http.ts\n/**\n* The rule this file enforces: **a route handler parses, guards, delegates and\n* serializes — nothing else.** Anything two endpoints must agree on lives here\n* or in `@selvajs/server`, never copied into both.\n*\n* Scope-neutral on purpose: `/api/v1/*` and `/api/admin/*` are siblings over\n* one core, so a rule that lands here reaches both.\n*\n* Request parsers live in `@selvajs/server/api` and are re-exported below —\n* they never depended on SvelteKit, only their throw did. What genuinely\n* belongs to this host stays: `requireCaller` (reads `App.Locals`), the\n* `json`-returning response helpers, and `apiRoute` itself.\n*/\n/**\n* The authenticated caller, or 401. Returns the narrowed pair so callers don't\n* need `locals.ctx!` — if you have the result, the context exists.\n*\n* For handlers that need an identity without a permission check — the `/me`\n* routes, and reads whose authorization is a visibility filter. Guards in\n* `access.server.ts` do their own 401 as a side effect of checking a permission.\n*/\nfunction requireCaller(locals) {\n\tif (!locals.ctx || !locals.user) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\treturn {\n\t\tctx: locals.ctx,\n\t\tuser: locals.user\n\t};\n}\n/** A created resource. */\nfunction created(body) {\n\treturn json(body, { status: 201 });\n}\n/** A successful mutation with nothing to say. */\nfunction noContent() {\n\treturn new Response(null, { status: 204 });\n}\n/**\n* Wrap a handler so an unhandled error becomes a structured API error.\n*\n* `fallback` is required: it's the message used when the error carries none of\n* its own, and \"something went wrong\" tells a caller nothing.\n*/\nfunction apiRoute(fallback, handler) {\n\treturn async (event) => {\n\t\ttry {\n\t\t\treturn await handler(event);\n\t\t} catch (err) {\n\t\t\thandleApiError(err, fallback, event.locals.log);\n\t\t}\n\t};\n}\n//#endregion\nexport { requireCaller as i, created as n, noContent as r, apiRoute as t };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,MAAM,EAAE;AAC/B,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG;AACjB,EAAE,IAAI,EAAE,MAAM,CAAC;AACf,EAAE;AACF;AACA;AACA,SAAS,OAAO,CAAC,IAAI,EAAE;AACvB,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnC;AACA;AACA,SAAS,SAAS,GAAG;AACrB,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE;AACrC,CAAC,OAAO,OAAO,KAAK,KAAK;AACzB,EAAE,IAAI;AACN,GAAG,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC;AAC9B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;AAClD,EAAE;AACF,CAAC,CAAC;AACF;;;;"}

package/build/server/chunks/chunks/input.js-DqvxsRdb.js

@@ -1,31 +0,0 @@
-import { al as attributes, am as clsx$1, at as bind_props } from './server.js-CUv4onuj.js';
-import { c as cn } from './utils3.js-D4hQ3EdJ.js';
-
-//#region ../ui/dist/components/primitives/input/input.svelte
-function Input($$renderer, $$props) {
-	$$renderer.component(($$renderer) => {
-		let { ref = null, value = "", type, files = void 0, class: className, "data-slot": dataSlot = "input", $$slots, $$events, ...restProps } = $$props;
-		if (type === "file") $$renderer.push(`<!--[0--><input${attributes({
-			"data-slot": dataSlot,
-			class: clsx$1(cn("h-9 min-w-0 px-3 pt-1.5 text-sm font-medium shadow-xs flex w-full rounded-md border border-input bg-transparent ring-offset-background transition-[color,box-shadow] outline-none selection:bg-primary selection:text-primary-foreground placeholder:text-muted-foreground disabled:cursor-not-allowed disabled:opacity-50 dark:bg-input/30", "focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50", "aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40", className)),
-			type: "file",
-			...restProps
-		}, void 0, void 0, void 0, 4)}/>`);
-		else $$renderer.push(`<!--[-1--><input${attributes({
-			"data-slot": dataSlot,
-			class: clsx$1(cn("h-9 min-w-0 px-3 py-1 text-base shadow-xs md:text-sm flex w-full rounded-md border border-input bg-background ring-offset-background transition-[color,box-shadow] outline-none selection:bg-primary selection:text-primary-foreground placeholder:text-muted-foreground disabled:cursor-not-allowed disabled:opacity-50 dark:bg-input/30", "focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50", "aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40", className)),
-			type,
-			value,
-			...restProps
-		}, void 0, void 0, void 0, 4)}/>`);
-		$$renderer.push(`<!--]-->`);
-		bind_props($$props, {
-			ref,
-			value,
-			files
-		});
-	});
-}
-
-export { Input as I };
-//# sourceMappingURL=input.js-DqvxsRdb.js.map

package/build/server/chunks/chunks/input.js-DqvxsRdb.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"input.js-DqvxsRdb.js","sources":["../../../../.svelte-kit/output/server/chunks/input.js"],"sourcesContent":["import { O as clsx, i as bind_props, r as attributes } from \"./server.js\";\nimport { t as cn } from \"./utils3.js\";\n//#region ../ui/dist/components/primitives/input/input.svelte\nfunction Input($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { ref = null, value = \"\", type, files = void 0, class: className, \"data-slot\": dataSlot = \"input\", $$slots, $$events, ...restProps } = $$props;\n\t\tif (type === \"file\") $$renderer.push(`<!--[0--><input${attributes({\n\t\t\t\"data-slot\": dataSlot,\n\t\t\tclass: clsx(cn(\"h-9 min-w-0 px-3 pt-1.5 text-sm font-medium shadow-xs flex w-full rounded-md border border-input bg-transparent ring-offset-background transition-[color,box-shadow] outline-none selection:bg-primary selection:text-primary-foreground placeholder:text-muted-foreground disabled:cursor-not-allowed disabled:opacity-50 dark:bg-input/30\", \"focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50\", \"aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40\", className)),\n\t\t\ttype: \"file\",\n\t\t\t...restProps\n\t\t}, void 0, void 0, void 0, 4)}/>`);\n\t\telse $$renderer.push(`<!--[-1--><input${attributes({\n\t\t\t\"data-slot\": dataSlot,\n\t\t\tclass: clsx(cn(\"h-9 min-w-0 px-3 py-1 text-base shadow-xs md:text-sm flex w-full rounded-md border border-input bg-background ring-offset-background transition-[color,box-shadow] outline-none selection:bg-primary selection:text-primary-foreground placeholder:text-muted-foreground disabled:cursor-not-allowed disabled:opacity-50 dark:bg-input/30\", \"focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50\", \"aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40\", className)),\n\t\t\ttype,\n\t\t\tvalue,\n\t\t\t...restProps\n\t\t}, void 0, void 0, void 0, 4)}/>`);\n\t\t$$renderer.push(`<!--]-->`);\n\t\tbind_props($$props, {\n\t\t\tref,\n\t\t\tvalue,\n\t\t\tfiles\n\t\t});\n\t});\n}\n//#endregion\nexport { Input as t };\n"],"names":["clsx"],"mappings":";;;AAEA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO;AACpJ,EAAE,IAAI,IAAI,KAAK,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,UAAU,CAAC;AACpE,GAAG,WAAW,EAAE,QAAQ;AACxB,GAAG,KAAK,EAAEA,MAAI,CAAC,EAAE,CAAC,6UAA6U,EAAE,+EAA+E,EAAE,wGAAwG,EAAE,SAAS,CAAC,CAAC;AACviB,GAAG,IAAI,EAAE,MAAM;AACf,GAAG,GAAG;AACN,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC;AACrD,GAAG,WAAW,EAAE,QAAQ;AACxB,GAAG,KAAK,EAAEA,MAAI,CAAC,EAAE,CAAC,2UAA2U,EAAE,+EAA+E,EAAE,wGAAwG,EAAE,SAAS,CAAC,CAAC;AACriB,GAAG,IAAI;AACP,GAAG,KAAK;AACR,GAAG,GAAG;AACN,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7B,EAAE,UAAU,CAAC,OAAO,EAAE;AACtB,GAAG,GAAG;AACN,GAAG,KAAK;AACR,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/chunks/instanceAdmins.server.js-Cd58T2Cl.js

@@ -1,24 +0,0 @@
-import { h as hasPermission } from './src.js-bYgw0r8C.js';
-import { b as getPermissionStore } from './providers.server.js-w28aoEzQ.js';
-import { A as ApiErrorCode } from './schema-extraction.js-_C5meGta.js';
-import { a as apiError } from './api-errors.js-1B8OozMX.js';
-
-//#region src/lib/server/admin/instanceAdmins.server.ts
-/**
-* Shared preconditions for the two routes that remove an instance admin's
-* access — `DELETE /api/admin/users/[id]` and its `disable` sibling. Both used
-* to carry their own copy; the copies agreed, which is exactly how they would
-* have drifted.
-*
-* `verb` is spliced into the 409 message ("Cannot delete/disable the last…").
-*/
-async function requireCanRemoveInstanceAdmin(ctx, targetUserId, verb) {
-	const targetIsAdmin = (await getPermissionStore().getFor(ctx, targetUserId)).includes("instance_admin");
-	if (!targetIsAdmin) return { targetIsAdmin };
-	if (!hasPermission(ctx, "instance_admin")) apiError(403, ApiErrorCode.FORBIDDEN, `Only a platform admin can ${verb} another platform admin.`);
-	if (await getPermissionStore().countInstanceAdminsExcluding(ctx, targetUserId) === 0) apiError(409, ApiErrorCode.CONFLICT, `Cannot ${verb} the last instance admin. Promote another user to instance admin first.`);
-	return { targetIsAdmin };
-}
-
-export { requireCanRemoveInstanceAdmin as r };
-//# sourceMappingURL=instanceAdmins.server.js-Cd58T2Cl.js.map

package/build/server/chunks/chunks/instanceAdmins.server.js-Cd58T2Cl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"instanceAdmins.server.js-Cd58T2Cl.js","sources":["../../../../.svelte-kit/output/server/chunks/instanceAdmins.server.js"],"sourcesContent":["import { r as hasPermission } from \"./src.js\";\nimport { g as getPermissionStore } from \"./providers.server.js\";\nimport { u as ApiErrorCode } from \"./schema-extraction.js\";\nimport { t as apiError } from \"./api-errors.js\";\n//#region src/lib/server/admin/instanceAdmins.server.ts\n/**\n* Shared preconditions for the two routes that remove an instance admin's\n* access — `DELETE /api/admin/users/[id]` and its `disable` sibling. Both used\n* to carry their own copy; the copies agreed, which is exactly how they would\n* have drifted.\n*\n* `verb` is spliced into the 409 message (\"Cannot delete/disable the last…\").\n*/\nasync function requireCanRemoveInstanceAdmin(ctx, targetUserId, verb) {\n\tconst targetIsAdmin = (await getPermissionStore().getFor(ctx, targetUserId)).includes(\"instance_admin\");\n\tif (!targetIsAdmin) return { targetIsAdmin };\n\tif (!hasPermission(ctx, \"instance_admin\")) apiError(403, ApiErrorCode.FORBIDDEN, `Only a platform admin can ${verb} another platform admin.`);\n\tif (await getPermissionStore().countInstanceAdminsExcluding(ctx, targetUserId) === 0) apiError(409, ApiErrorCode.CONFLICT, `Cannot ${verb} the last instance admin. Promote another user to instance admin first.`);\n\treturn { targetIsAdmin };\n}\n//#endregion\nexport { requireCanRemoveInstanceAdmin as t };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,6BAA6B,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;AACtE,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC;AACxG,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE;AAC7C,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,0BAA0B,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAC9I,CAAC,IAAI,MAAM,kBAAkB,EAAE,CAAC,4BAA4B,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,uEAAuE,CAAC,CAAC;AACpN,CAAC,OAAO,EAAE,aAAa,EAAE;AACzB;;;;"}