@serve.zone/dcrouter 18.9.3 → 18.9.5

package/dist_ts/db/documents/classes.authentication-event.doc.js

@@ -1,273 +1,190 @@
-var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
-    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
-    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
-    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
-    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
-    var _, done = false;
-    for (var i = decorators.length - 1; i >= 0; i--) {
-        var context = {};
-        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
-        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
-        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
-        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
-        if (kind === "accessor") {
-            if (result === void 0) continue;
-            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
-            if (_ = accept(result.get)) descriptor.get = _;
-            if (_ = accept(result.set)) descriptor.set = _;
-            if (_ = accept(result.init)) initializers.unshift(_);
-        }
-        else if (_ = accept(result)) {
-            if (kind === "field") initializers.unshift(_);
-            else descriptor[key] = _;
-        }
-    }
-    if (target) Object.defineProperty(target, contextIn.name, descriptor);
-    done = true;
-};
-var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
-    var useValue = arguments.length > 2;
-    for (var i = 0; i < initializers.length; i++) {
-        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
-    }
-    return useValue ? value : void 0;
-};
 import * as plugins from '../../plugins.js';
 import { DcRouterDb } from '../classes.dcrouter-db.js';
 const DB_OPERATION_TIMEOUT_MS = 5_000;
 const getDb = () => DcRouterDb.getInstance().getDb();
-let AuthenticationEventDoc = (() => {
-    let _classDecorators = [plugins.smartdata.Collection(() => getDb())];
-    let _classDescriptor;
-    let _classExtraInitializers = [];
-    let _classThis;
-    let _classSuper = plugins.smartdata.SmartDataDbDoc;
-    let _id_decorators;
-    let _id_initializers = [];
-    let _id_extraInitializers = [];
-    let _timestamp_decorators;
-    let _timestamp_initializers = [];
-    let _timestamp_extraInitializers = [];
-    let _username_decorators;
-    let _username_initializers = [];
-    let _username_extraInitializers = [];
-    let _userId_decorators;
-    let _userId_initializers = [];
-    let _userId_extraInitializers = [];
-    let _success_decorators;
-    let _success_initializers = [];
-    let _success_extraInitializers = [];
-    let _requestedAuthSource_decorators;
-    let _requestedAuthSource_initializers = [];
-    let _requestedAuthSource_extraInitializers = [];
-    let _resolvedAuthSource_decorators;
-    let _resolvedAuthSource_initializers = [];
-    let _resolvedAuthSource_extraInitializers = [];
-    let _failureReason_decorators;
-    let _failureReason_initializers = [];
-    let _failureReason_extraInitializers = [];
-    var AuthenticationEventDoc = class extends _classSuper {
-        static { _classThis = this; }
-        static {
-            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
-            _id_decorators = [plugins.smartdata.unI(), plugins.smartdata.svDb()];
-            _timestamp_decorators = [plugins.smartdata.svDb()];
-            _username_decorators = [plugins.smartdata.svDb()];
-            _userId_decorators = [plugins.smartdata.svDb()];
-            _success_decorators = [plugins.smartdata.svDb()];
-            _requestedAuthSource_decorators = [plugins.smartdata.svDb()];
-            _resolvedAuthSource_decorators = [plugins.smartdata.svDb()];
-            _failureReason_decorators = [plugins.smartdata.svDb()];
-            __esDecorate(null, null, _id_decorators, { kind: "field", name: "id", static: false, private: false, access: { has: obj => "id" in obj, get: obj => obj.id, set: (obj, value) => { obj.id = value; } }, metadata: _metadata }, _id_initializers, _id_extraInitializers);
-            __esDecorate(null, null, _timestamp_decorators, { kind: "field", name: "timestamp", static: false, private: false, access: { has: obj => "timestamp" in obj, get: obj => obj.timestamp, set: (obj, value) => { obj.timestamp = value; } }, metadata: _metadata }, _timestamp_initializers, _timestamp_extraInitializers);
-            __esDecorate(null, null, _username_decorators, { kind: "field", name: "username", static: false, private: false, access: { has: obj => "username" in obj, get: obj => obj.username, set: (obj, value) => { obj.username = value; } }, metadata: _metadata }, _username_initializers, _username_extraInitializers);
-            __esDecorate(null, null, _userId_decorators, { kind: "field", name: "userId", static: false, private: false, access: { has: obj => "userId" in obj, get: obj => obj.userId, set: (obj, value) => { obj.userId = value; } }, metadata: _metadata }, _userId_initializers, _userId_extraInitializers);
-            __esDecorate(null, null, _success_decorators, { kind: "field", name: "success", static: false, private: false, access: { has: obj => "success" in obj, get: obj => obj.success, set: (obj, value) => { obj.success = value; } }, metadata: _metadata }, _success_initializers, _success_extraInitializers);
-            __esDecorate(null, null, _requestedAuthSource_decorators, { kind: "field", name: "requestedAuthSource", static: false, private: false, access: { has: obj => "requestedAuthSource" in obj, get: obj => obj.requestedAuthSource, set: (obj, value) => { obj.requestedAuthSource = value; } }, metadata: _metadata }, _requestedAuthSource_initializers, _requestedAuthSource_extraInitializers);
-            __esDecorate(null, null, _resolvedAuthSource_decorators, { kind: "field", name: "resolvedAuthSource", static: false, private: false, access: { has: obj => "resolvedAuthSource" in obj, get: obj => obj.resolvedAuthSource, set: (obj, value) => { obj.resolvedAuthSource = value; } }, metadata: _metadata }, _resolvedAuthSource_initializers, _resolvedAuthSource_extraInitializers);
-            __esDecorate(null, null, _failureReason_decorators, { kind: "field", name: "failureReason", static: false, private: false, access: { has: obj => "failureReason" in obj, get: obj => obj.failureReason, set: (obj, value) => { obj.failureReason = value; } }, metadata: _metadata }, _failureReason_initializers, _failureReason_extraInitializers);
-            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
-            AuthenticationEventDoc = _classThis = _classDescriptor.value;
-            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
-            __runInitializers(_classThis, _classExtraInitializers);
+export class AuthenticationEventDoc extends plugins.smartdata.SmartDataDbDoc {
+    id;
+    timestamp;
+    username;
+    userId;
+    success;
+    requestedAuthSource;
+    resolvedAuthSource;
+    failureReason;
+    constructor() {
+        super();
+    }
+    toApiObject() {
+        return {
+            id: this.id,
+            timestamp: this.timestamp,
+            username: this.username,
+            success: this.success,
+            requestedAuthSource: this.requestedAuthSource,
+            ...(this.userId ? { userId: this.userId } : {}),
+            ...(this.resolvedAuthSource ? { resolvedAuthSource: this.resolvedAuthSource } : {}),
+            ...(this.failureReason ? { failureReason: this.failureReason } : {}),
+        };
+    }
+    static toPersistedFields(eventArg) {
+        return {
+            id: eventArg.id,
+            timestamp: eventArg.timestamp,
+            username: eventArg.username,
+            success: eventArg.success,
+            requestedAuthSource: eventArg.requestedAuthSource,
+            ...(eventArg.userId !== undefined ? { userId: eventArg.userId } : {}),
+            ...(eventArg.resolvedAuthSource !== undefined
+                ? { resolvedAuthSource: eventArg.resolvedAuthSource }
+                : {}),
+            ...(eventArg.failureReason !== undefined ? { failureReason: eventArg.failureReason } : {}),
+        };
+    }
+    static validateEvent(eventArg) {
+        if (typeof eventArg.id !== 'string'
+            || !eventArg.id.trim()
+            || !Number.isSafeInteger(eventArg.timestamp)
+            || eventArg.timestamp < 0
+            || typeof eventArg.username !== 'string'
+            || !eventArg.username.trim()
+            || typeof eventArg.success !== 'boolean'
+            || !['auto', 'local', 'idp.global'].includes(eventArg.requestedAuthSource)) {
+            throw new Error('Invalid authentication event');
         }
-        id = __runInitializers(this, _id_initializers, void 0);
-        timestamp = (__runInitializers(this, _id_extraInitializers), __runInitializers(this, _timestamp_initializers, void 0));
-        username = (__runInitializers(this, _timestamp_extraInitializers), __runInitializers(this, _username_initializers, void 0));
-        userId = (__runInitializers(this, _username_extraInitializers), __runInitializers(this, _userId_initializers, void 0));
-        success = (__runInitializers(this, _userId_extraInitializers), __runInitializers(this, _success_initializers, void 0));
-        requestedAuthSource = (__runInitializers(this, _success_extraInitializers), __runInitializers(this, _requestedAuthSource_initializers, void 0));
-        resolvedAuthSource = (__runInitializers(this, _requestedAuthSource_extraInitializers), __runInitializers(this, _resolvedAuthSource_initializers, void 0));
-        failureReason = (__runInitializers(this, _resolvedAuthSource_extraInitializers), __runInitializers(this, _failureReason_initializers, void 0));
-        constructor() {
-            super();
-            __runInitializers(this, _failureReason_extraInitializers);
+        if (eventArg.userId !== undefined
+            && (typeof eventArg.userId !== 'string' || !eventArg.userId.trim())) {
+            throw new Error('Invalid authentication event user ID');
         }
-        toApiObject() {
-            return {
-                id: this.id,
-                timestamp: this.timestamp,
-                username: this.username,
-                success: this.success,
-                requestedAuthSource: this.requestedAuthSource,
-                ...(this.userId ? { userId: this.userId } : {}),
-                ...(this.resolvedAuthSource ? { resolvedAuthSource: this.resolvedAuthSource } : {}),
-                ...(this.failureReason ? { failureReason: this.failureReason } : {}),
-            };
+        if (eventArg.resolvedAuthSource !== undefined
+            && eventArg.resolvedAuthSource !== 'local'
+            && eventArg.resolvedAuthSource !== 'idp.global') {
+            throw new Error('Invalid resolved authentication source');
         }
-        static async getNativeCollection() {
-            const smartdataCollection = AuthenticationEventDoc.collection;
-            await smartdataCollection.init();
-            const probe = new AuthenticationEventDoc();
-            await smartdataCollection.markUniqueIndexes(probe.uniqueIndexes || []);
-            await smartdataCollection.createRegularIndexes(probe.regularIndexes || []);
-            return smartdataCollection.mongoDbCollection;
+        if (eventArg.failureReason !== undefined
+            && ![
+                'invalidCredentials',
+                'serviceUnavailable',
+                'identityIssuanceFailed',
+                'internalError',
+            ].includes(eventArg.failureReason)) {
+            throw new Error('Invalid authentication failure reason');
         }
-        static toPersistedFields(eventArg) {
-            return {
-                id: eventArg.id,
-                timestamp: eventArg.timestamp,
-                username: eventArg.username,
-                success: eventArg.success,
-                requestedAuthSource: eventArg.requestedAuthSource,
-                ...(eventArg.userId !== undefined ? { userId: eventArg.userId } : {}),
-                ...(eventArg.resolvedAuthSource !== undefined
-                    ? { resolvedAuthSource: eventArg.resolvedAuthSource }
-                    : {}),
-                ...(eventArg.failureReason !== undefined ? { failureReason: eventArg.failureReason } : {}),
-            };
+        if (eventArg.success && eventArg.failureReason) {
+            throw new Error('Successful authentication events cannot carry a failure reason');
         }
-        static validateEvent(eventArg) {
-            if (typeof eventArg.id !== 'string'
-                || !eventArg.id.trim()
-                || !Number.isSafeInteger(eventArg.timestamp)
-                || eventArg.timestamp < 0
-                || typeof eventArg.username !== 'string'
-                || !eventArg.username.trim()
-                || typeof eventArg.success !== 'boolean'
-                || !['auto', 'local', 'idp.global'].includes(eventArg.requestedAuthSource)) {
-                throw new Error('Invalid authentication event');
-            }
-            if (eventArg.userId !== undefined
-                && (typeof eventArg.userId !== 'string' || !eventArg.userId.trim())) {
-                throw new Error('Invalid authentication event user ID');
-            }
-            if (eventArg.resolvedAuthSource !== undefined
-                && eventArg.resolvedAuthSource !== 'local'
-                && eventArg.resolvedAuthSource !== 'idp.global') {
-                throw new Error('Invalid resolved authentication source');
-            }
-            if (eventArg.failureReason !== undefined
-                && ![
-                    'invalidCredentials',
-                    'serviceUnavailable',
-                    'identityIssuanceFailed',
-                    'internalError',
-                ].includes(eventArg.failureReason)) {
-                throw new Error('Invalid authentication failure reason');
-            }
-            if (eventArg.success && eventArg.failureReason) {
-                throw new Error('Successful authentication events cannot carry a failure reason');
-            }
-            if (!eventArg.success && !eventArg.failureReason) {
-                throw new Error('Failed authentication events require a failure reason');
-            }
+        if (!eventArg.success && !eventArg.failureReason) {
+            throw new Error('Failed authentication events require a failure reason');
         }
-        static async upsertMany(eventsArg) {
-            if (eventsArg.length === 0)
-                return;
-            if (eventsArg.length > 500) {
-                throw new Error('AuthenticationEventDoc.upsertMany accepts at most 500 events');
-            }
-            for (const event of eventsArg) {
-                AuthenticationEventDoc.validateEvent(event);
-            }
-            const collection = await AuthenticationEventDoc.getNativeCollection();
-            await collection.bulkWrite(eventsArg.map((event) => {
-                const timestamp = new Date(event.timestamp).toISOString();
-                const persistedEvent = AuthenticationEventDoc.toPersistedFields(event);
-                return {
-                    updateOne: {
-                        filter: { id: event.id },
-                        update: {
-                            $setOnInsert: {
-                                ...persistedEvent,
-                                _createdAt: timestamp,
-                                _updatedAt: timestamp,
-                            },
-                        },
-                        upsert: true,
-                    },
-                };
-            }), { ordered: false, timeoutMS: DB_OPERATION_TIMEOUT_MS });
+    }
+    static async upsertMany(eventsArg) {
+        if (eventsArg.length === 0)
+            return;
+        if (eventsArg.length > 500) {
+            throw new Error('AuthenticationEventDoc.upsertMany accepts at most 500 events');
         }
-        static async getWindowSummary(cutoffArg, limitArg = 100) {
-            if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
-                throw new Error('AuthenticationEventDoc.getWindowSummary requires a valid cutoff');
-            }
-            if (!Number.isSafeInteger(limitArg) || limitArg <= 0 || limitArg > 500) {
-                throw new Error('AuthenticationEventDoc.getWindowSummary requires a limit from 1 to 500');
-            }
-            const collection = await AuthenticationEventDoc.getNativeCollection();
-            const selector = { timestamp: { $gte: cutoffArg } };
-            const cursor = collection
-                .find(selector, { timeoutMS: DB_OPERATION_TIMEOUT_MS })
-                .sort({ timestamp: -1, id: -1 })
-                .limit(limitArg);
-            try {
-                const [successes, failures, rows] = await Promise.all([
-                    collection.countDocuments({ ...selector, success: true }, { timeoutMS: DB_OPERATION_TIMEOUT_MS }),
-                    collection.countDocuments({ ...selector, success: false }, { timeoutMS: DB_OPERATION_TIMEOUT_MS }),
-                    cursor.toArray(),
-                ]);
-                return {
-                    successes,
-                    failures,
-                    events: rows.map((row) => AuthenticationEventDoc
-                        .createInstanceFromMongoDbNativeDoc(row)
-                        .toApiObject()),
-                };
-            }
-            finally {
-                await cursor.close({ timeoutMS: DB_OPERATION_TIMEOUT_MS });
-            }
+        for (const event of eventsArg) {
+            AuthenticationEventDoc.validateEvent(event);
         }
-        static async findExistingIds(idsArg) {
-            const ids = [...new Set(idsArg)];
-            if (ids.length === 0)
-                return new Set();
-            if (ids.length > 500) {
-                throw new Error('AuthenticationEventDoc.findExistingIds accepts at most 500 ids');
-            }
-            const collection = await AuthenticationEventDoc.getNativeCollection();
-            const rows = await collection
-                .find({ id: { $in: ids } }, { projection: { id: 1 }, timeoutMS: DB_OPERATION_TIMEOUT_MS })
-                .toArray();
-            return new Set(rows.map((row) => String(row.id)));
+        const documents = new Map();
+        for (const event of eventsArg) {
+            if (documents.has(event.id))
+                continue;
+            const timestamp = new Date(event.timestamp).toISOString();
+            documents.set(event.id, Object.assign(new AuthenticationEventDoc(), {
+                ...AuthenticationEventDoc.toPersistedFields(event),
+                _createdAt: timestamp,
+                _updatedAt: timestamp,
+            }));
         }
-        static async pruneBefore(cutoffArg) {
-            if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
-                throw new Error('AuthenticationEventDoc.pruneBefore requires a valid cutoff');
-            }
-            const collection = await AuthenticationEventDoc.getNativeCollection();
-            let deletedCount = 0;
-            while (true) {
-                const rows = await collection
-                    .find({ timestamp: { $lt: cutoffArg } }, { projection: { _id: 1 }, timeoutMS: DB_OPERATION_TIMEOUT_MS })
-                    .sort({ timestamp: 1, _id: 1 })
-                    .limit(500)
-                    .toArray();
-                if (rows.length === 0)
-                    break;
-                const result = await collection.deleteMany({ _id: { $in: rows.map((row) => row._id) } }, { timeoutMS: DB_OPERATION_TIMEOUT_MS });
-                deletedCount += result.deletedCount;
-                if (rows.length < 500)
-                    break;
-            }
-            return deletedCount;
+        await AuthenticationEventDoc.insertManyIfAbsent([...documents.values()], {
+            identityField: 'id', timeoutMS: DB_OPERATION_TIMEOUT_MS,
+        });
+    }
+    static async getWindowSummary(cutoffArg, limitArg = 100) {
+        if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
+            throw new Error('AuthenticationEventDoc.getWindowSummary requires a valid cutoff');
         }
-    };
-    return AuthenticationEventDoc = _classThis;
-})();
-export { AuthenticationEventDoc };
-//# sourceMappingURL=data:application/json;base64,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
+        if (!Number.isSafeInteger(limitArg) || limitArg <= 0 || limitArg > 500) {
+            throw new Error('AuthenticationEventDoc.getWindowSummary requires a limit from 1 to 500');
+        }
+        await AuthenticationEventDoc.ensureInitialized();
+        const selector = { timestamp: { $gte: cutoffArg } };
+        const [totalsResult, rowsResult] = await Promise.allSettled([
+            AuthenticationEventDoc.getGroupedTotals({
+                filter: selector, groupBy: ['success'], limit: 3,
+                maxTimeMS: DB_OPERATION_TIMEOUT_MS, timeoutMS: DB_OPERATION_TIMEOUT_MS,
+            }),
+            AuthenticationEventDoc.getOffsetPage(selector, {
+                skip: 0, limit: limitArg, sort: { timestamp: -1, id: -1 },
+                maxTimeMS: DB_OPERATION_TIMEOUT_MS, timeoutMS: DB_OPERATION_TIMEOUT_MS,
+            }),
+        ]);
+        // Both public queries own a cursor; drain both before releasing this computation.
+        if (totalsResult.status === 'rejected')
+            throw totalsResult.reason;
+        if (rowsResult.status === 'rejected')
+            throw rowsResult.reason;
+        const totals = totalsResult.value;
+        const rows = rowsResult.value;
+        let successes = 0;
+        let failures = 0;
+        for (const total of totals) {
+            if (total.group.success === true)
+                successes = total.count;
+            else if (total.group.success === false)
+                failures = total.count;
+            else
+                throw new Error('Authentication events contain an invalid success value');
+        }
+        return { successes, failures, events: rows.map((row) => row.toApiObject()) };
+    }
+    static async findExistingIds(idsArg) {
+        const ids = [...new Set(idsArg)];
+        if (ids.length === 0)
+            return new Set();
+        if (ids.length > 500) {
+            throw new Error('AuthenticationEventDoc.findExistingIds accepts at most 500 ids');
+        }
+        await AuthenticationEventDoc.ensureInitialized();
+        const rows = await AuthenticationEventDoc.getOffsetPage({ id: { $in: ids } }, {
+            skip: 0, limit: ids.length, sort: { id: 1 }, projection: { id: 1, _id: 0 },
+            maxTimeMS: DB_OPERATION_TIMEOUT_MS, timeoutMS: DB_OPERATION_TIMEOUT_MS,
+        });
+        return new Set(rows.map((row) => row.id));
+    }
+    static async pruneBefore(cutoffArg) {
+        if (!Number.isSafeInteger(cutoffArg) || cutoffArg < 0) {
+            throw new Error('AuthenticationEventDoc.pruneBefore requires a valid cutoff');
+        }
+        await AuthenticationEventDoc.ensureInitialized();
+        let deletedCount = 0;
+        while (true) {
+            const rows = await AuthenticationEventDoc.getOffsetPage({ timestamp: { $lt: cutoffArg } }, {
+                skip: 0, limit: 500, sort: { timestamp: 1, id: 1 }, projection: { id: 1, _id: 0 },
+                maxTimeMS: DB_OPERATION_TIMEOUT_MS, timeoutMS: DB_OPERATION_TIMEOUT_MS,
+            });
+            if (rows.length === 0)
+                break;
+            const result = await AuthenticationEventDoc.atomicDeleteMany({ timestamp: { $lt: cutoffArg }, $or: rows.map((row) => ({ id: row.id })) }, { timeoutMS: DB_OPERATION_TIMEOUT_MS });
+            deletedCount += result.deletedCount;
+            if (rows.length < 500)
+                break;
+        }
+        return deletedCount;
+    }
+}
+// Match the names installed by create-monitoring-event-indexes on existing hubs.
+plugins.smartdata.defineCollectionModel(AuthenticationEventDoc, getDb, {
+    collectionName: 'AuthenticationEventDoc',
+    persistedFields: [
+        'id', 'timestamp', 'username', 'userId', 'success',
+        'requestedAuthSource', 'resolvedAuthSource', 'failureReason',
+    ],
+    identityFields: ['id'],
+    indexes: [
+        { name: 'authentication_event_id_unique', key: { id: 1 }, options: { unique: true } },
+        { name: 'authentication_event_timestamp', key: { timestamp: -1 } },
+        { name: 'authentication_event_success_timestamp', key: { success: 1, timestamp: -1 } },
+    ],
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5hdXRoZW50aWNhdGlvbi1ldmVudC5kb2MuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi90cy9kYi9kb2N1bWVudHMvY2xhc3Nlcy5hdXRoZW50aWNhdGlvbi1ldmVudC5kb2MudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxrQkFBa0IsQ0FBQztBQUM1QyxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sMkJBQTJCLENBQUM7QUFRdkQsTUFBTSx1QkFBdUIsR0FBRyxLQUFLLENBQUM7QUFFdEMsTUFBTSxLQUFLLEdBQUcsR0FBRyxFQUFFLENBQUMsVUFBVSxDQUFDLFdBQVcsRUFBRSxDQUFDLEtBQUssRUFBRSxDQUFDO0FBRXJELE1BQU0sT0FBTyxzQkFBdUIsU0FBUSxPQUFPLENBQUMsU0FBUyxDQUFDLGNBRzdEO0lBQ1EsRUFBRSxDQUFVO0lBRVosU0FBUyxDQUFVO0lBRW5CLFFBQVEsQ0FBVTtJQUVsQixNQUFNLENBQVU7SUFFaEIsT0FBTyxDQUFXO0lBRWxCLG1CQUFtQixDQUF5QjtJQUU1QyxrQkFBa0IsQ0FBaUM7SUFFbkQsYUFBYSxDQUFnQztJQUVwRDtRQUNFLEtBQUssRUFBRSxDQUFDO0lBQ1YsQ0FBQztJQUVNLFdBQVc7UUFDaEIsT0FBTztZQUNMLEVBQUUsRUFBRSxJQUFJLENBQUMsRUFBRTtZQUNYLFNBQVMsRUFBRSxJQUFJLENBQUMsU0FBUztZQUN6QixRQUFRLEVBQUUsSUFBSSxDQUFDLFFBQVE7WUFDdkIsT0FBTyxFQUFFLElBQUksQ0FBQyxPQUFPO1lBQ3JCLG1CQUFtQixFQUFFLElBQUksQ0FBQyxtQkFBbUI7WUFDN0MsR0FBRyxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLElBQUksQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1lBQy9DLEdBQUcsQ0FBQyxJQUFJLENBQUMsa0JBQWtCLENBQUMsQ0FBQyxDQUFDLEVBQUUsa0JBQWtCLEVBQUUsSUFBSSxDQUFDLGtCQUFrQixFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUNuRixHQUFHLENBQUMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxDQUFDLENBQUMsRUFBRSxhQUFhLEVBQUUsSUFBSSxDQUFDLGFBQWEsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7U0FDckUsQ0FBQztJQUNKLENBQUM7SUFFTyxNQUFNLENBQUMsaUJBQWlCLENBQUMsUUFBOEI7UUFDN0QsT0FBTztZQUNMLEVBQUUsRUFBRSxRQUFRLENBQUMsRUFBRTtZQUNmLFNBQVMsRUFBRSxRQUFRLENBQUMsU0FBUztZQUM3QixRQUFRLEVBQUUsUUFBUSxDQUFDLFFBQVE7WUFDM0IsT0FBTyxFQUFFLFFBQVEsQ0FBQyxPQUFPO1lBQ3pCLG1CQUFtQixFQUFFLFFBQVEsQ0FBQyxtQkFBbUI7WUFDakQsR0FBRyxDQUFDLFFBQVEsQ0FBQyxNQUFNLEtBQUssU0FBUyxDQUFDLENBQUMsQ0FBQyxFQUFFLE1BQU0sRUFBRSxRQUFRLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUNyRSxHQUFHLENBQUMsUUFBUSxDQUFDLGtCQUFrQixLQUFLLFNBQVM7Z0JBQzNDLENBQUMsQ0FBQyxFQUFFLGtCQUFrQixFQUFFLFFBQVEsQ0FBQyxrQkFBa0IsRUFBRTtnQkFDckQsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUNQLEdBQUcsQ0FBQyxRQUFRLENBQUMsYUFBYSxLQUFLLFNBQVMsQ0FBQyxDQUFDLENBQUMsRUFBRSxhQUFhLEVBQUUsUUFBUSxDQUFDLGFBQWEsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7U0FDM0YsQ0FBQztJQUNKLENBQUM7SUFFTyxNQUFNLENBQUMsYUFBYSxDQUFDLFFBQThCO1FBQ3pELElBQ0UsT0FBTyxRQUFRLENBQUMsRUFBRSxLQUFLLFFBQVE7ZUFDNUIsQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRTtlQUNuQixDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FBQztlQUN6QyxRQUFRLENBQUMsU0FBUyxHQUFHLENBQUM7ZUFDdEIsT0FBTyxRQUFRLENBQUMsUUFBUSxLQUFLLFFBQVE7ZUFDckMsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLElBQUksRUFBRTtlQUN6QixPQUFPLFFBQVEsQ0FBQyxPQUFPLEtBQUssU0FBUztlQUNyQyxDQUFDLENBQUMsTUFBTSxFQUFFLE9BQU8sRUFBRSxZQUFZLENBQUMsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLG1CQUFtQixDQUFDLEVBQzFFLENBQUM7WUFDRCxNQUFNLElBQUksS0FBSyxDQUFDLDhCQUE4QixDQUFDLENBQUM7UUFDbEQsQ0FBQztRQUNELElBQ0UsUUFBUSxDQUFDLE1BQU0sS0FBSyxTQUFTO2VBQzFCLENBQUMsT0FBTyxRQUFRLENBQUMsTUFBTSxLQUFLLFFBQVEsSUFBSSxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsSUFBSSxFQUFFLENBQUMsRUFDbkUsQ0FBQztZQUNELE1BQU0sSUFBSSxLQUFLLENBQUMsc0NBQXNDLENBQUMsQ0FBQztRQUMxRCxDQUFDO1FBQ0QsSUFDRSxRQUFRLENBQUMsa0JBQWtCLEtBQUssU0FBUztlQUN0QyxRQUFRLENBQUMsa0JBQWtCLEtBQUssT0FBTztlQUN2QyxRQUFRLENBQUMsa0JBQWtCLEtBQUssWUFBWSxFQUMvQyxDQUFDO1lBQ0QsTUFBTSxJQUFJLEtBQUssQ0FBQyx3Q0FBd0MsQ0FBQyxDQUFDO1FBQzVELENBQUM7UUFDRCxJQUNFLFFBQVEsQ0FBQyxhQUFhLEtBQUssU0FBUztlQUNqQyxDQUFDO2dCQUNGLG9CQUFvQjtnQkFDcEIsb0JBQW9CO2dCQUNwQix3QkFBd0I7Z0JBQ3hCLGVBQWU7YUFDaEIsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLGFBQWEsQ0FBQyxFQUNsQyxDQUFDO1lBQ0QsTUFBTSxJQUFJLEtBQUssQ0FBQyx1Q0FBdUMsQ0FBQyxDQUFDO1FBQzNELENBQUM7UUFDRCxJQUFJLFFBQVEsQ0FBQyxPQUFPLElBQUksUUFBUSxDQUFDLGFBQWEsRUFBRSxDQUFDO1lBQy9DLE1BQU0sSUFBSSxLQUFLLENBQUMsZ0VBQWdFLENBQUMsQ0FBQztRQUNwRixDQUFDO1FBQ0QsSUFBSSxDQUFDLFFBQVEsQ0FBQyxPQUFPLElBQUksQ0FBQyxRQUFRLENBQUMsYUFBYSxFQUFFLENBQUM7WUFDakQsTUFBTSxJQUFJLEtBQUssQ0FBQyx1REFBdUQsQ0FBQyxDQUFDO1FBQzNFLENBQUM7SUFDSCxDQUFDO0lBRU0sTUFBTSxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUMsU0FBaUM7UUFDOUQsSUFBSSxTQUFTLENBQUMsTUFBTSxLQUFLLENBQUM7WUFBRSxPQUFPO1FBQ25DLElBQUksU0FBUyxDQUFDLE1BQU0sR0FBRyxHQUFHLEVBQUUsQ0FBQztZQUMzQixNQUFNLElBQUksS0FBSyxDQUFDLDhEQUE4RCxDQUFDLENBQUM7UUFDbEYsQ0FBQztRQUNELEtBQUssTUFBTSxLQUFLLElBQUksU0FBUyxFQUFFLENBQUM7WUFDOUIsc0JBQXNCLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQzlDLENBQUM7UUFDRCxNQUFNLFNBQVMsR0FBRyxJQUFJLEdBQUcsRUFBa0MsQ0FBQztRQUM1RCxLQUFLLE1BQU0sS0FBSyxJQUFJLFNBQVMsRUFBRSxDQUFDO1lBQzlCLElBQUksU0FBUyxDQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO2dCQUFFLFNBQVM7WUFDdEMsTUFBTSxTQUFTLEdBQUcsSUFBSSxJQUFJLENBQUMsS0FBSyxDQUFDLFNBQVMsQ0FBQyxDQUFDLFdBQVcsRUFBRSxDQUFDO1lBQzFELFNBQVMsQ0FBQyxHQUFHLENBQUMsS0FBSyxDQUFDLEVBQUUsRUFBRSxNQUFNLENBQUMsTUFBTSxDQUFDLElBQUksc0JBQXNCLEVBQUUsRUFBRTtnQkFDbEUsR0FBRyxzQkFBc0IsQ0FBQyxpQkFBaUIsQ0FBQyxLQUFLLENBQUM7Z0JBQ2xELFVBQVUsRUFBRSxTQUFTO2dCQUNyQixVQUFVLEVBQUUsU0FBUzthQUN0QixDQUFDLENBQUMsQ0FBQztRQUNOLENBQUM7UUFDRCxNQUFNLHNCQUFzQixDQUFDLGtCQUFrQixDQUFDLENBQUMsR0FBRyxTQUFTLENBQUMsTUFBTSxFQUFFLENBQUMsRUFBRTtZQUN2RSxhQUFhLEVBQUUsSUFBSSxFQUFFLFNBQVMsRUFBRSx1QkFBdUI7U0FDeEQsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVNLE1BQU0sQ0FBQyxLQUFLLENBQUMsZ0JBQWdCLENBQ2xDLFNBQWlCLEVBQ2pCLFFBQVEsR0FBRyxHQUFHO1FBTWQsSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsU0FBUyxDQUFDLElBQUksU0FBUyxHQUFHLENBQUMsRUFBRSxDQUFDO1lBQ3RELE1BQU0sSUFBSSxLQUFLLENBQUMsaUVBQWlFLENBQUMsQ0FBQztRQUNyRixDQUFDO1FBQ0QsSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsUUFBUSxDQUFDLElBQUksUUFBUSxJQUFJLENBQUMsSUFBSSxRQUFRLEdBQUcsR0FBRyxFQUFFLENBQUM7WUFDdkUsTUFBTSxJQUFJLEtBQUssQ0FBQyx3RUFBd0UsQ0FBQyxDQUFDO1FBQzVGLENBQUM7UUFDRCxNQUFNLHNCQUFzQixDQUFDLGlCQUFpQixFQUFFLENBQUM7UUFDakQsTUFBTSxRQUFRLEdBQUcsRUFBRSxTQUFTLEVBQUUsRUFBRSxJQUFJLEVBQUUsU0FBUyxFQUFFLEVBQUUsQ0FBQztRQUNwRCxNQUFNLENBQUMsWUFBWSxFQUFFLFVBQVUsQ0FBQyxHQUFHLE1BQU0sT0FBTyxDQUFDLFVBQVUsQ0FBQztZQUMxRCxzQkFBc0IsQ0FBQyxnQkFBZ0IsQ0FBQztnQkFDdEMsTUFBTSxFQUFFLFFBQVEsRUFBRSxPQUFPLEVBQUUsQ0FBQyxTQUFTLENBQUMsRUFBRSxLQUFLLEVBQUUsQ0FBQztnQkFDaEQsU0FBUyxFQUFFLHVCQUF1QixFQUFFLFNBQVMsRUFBRSx1QkFBdUI7YUFDdkUsQ0FBQztZQUNGLHNCQUFzQixDQUFDLGFBQWEsQ0FBQyxRQUFRLEVBQUU7Z0JBQzdDLElBQUksRUFBRSxDQUFDLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxJQUFJLEVBQUUsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDLEVBQUUsRUFBRSxFQUFFLENBQUMsQ0FBQyxFQUFFO2dCQUN6RCxTQUFTLEVBQUUsdUJBQXVCLEVBQUUsU0FBUyxFQUFFLHVCQUF1QjthQUN2RSxDQUFDO1NBQ0gsQ0FBQyxDQUFDO1FBQ0gsa0ZBQWtGO1FBQ2xGLElBQUksWUFBWSxDQUFDLE1BQU0sS0FBSyxVQUFVO1lBQUUsTUFBTSxZQUFZLENBQUMsTUFBTSxDQUFDO1FBQ2xFLElBQUksVUFBVSxDQUFDLE1BQU0sS0FBSyxVQUFVO1lBQUUsTUFBTSxVQUFVLENBQUMsTUFBTSxDQUFDO1FBQzlELE1BQU0sTUFBTSxHQUFHLFlBQVksQ0FBQyxLQUFLLENBQUM7UUFDbEMsTUFBTSxJQUFJLEdBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQztRQUM5QixJQUFJLFNBQVMsR0FBRyxDQUFDLENBQUM7UUFDbEIsSUFBSSxRQUFRLEdBQUcsQ0FBQyxDQUFDO1FBQ2pCLEtBQUssTUFBTSxLQUFLLElBQUksTUFBTSxFQUFFLENBQUM7WUFDM0IsSUFBSSxLQUFLLENBQUMsS0FBSyxDQUFDLE9BQU8sS0FBSyxJQUFJO2dCQUFFLFNBQVMsR0FBRyxLQUFLLENBQUMsS0FBSyxDQUFDO2lCQUNyRCxJQUFJLEtBQUssQ0FBQyxLQUFLLENBQUMsT0FBTyxLQUFLLEtBQUs7Z0JBQUUsUUFBUSxHQUFHLEtBQUssQ0FBQyxLQUFLLENBQUM7O2dCQUMxRCxNQUFNLElBQUksS0FBSyxDQUFDLHdEQUF3RCxDQUFDLENBQUM7UUFDakYsQ0FBQztRQUNELE9BQU8sRUFBRSxTQUFTLEVBQUUsUUFBUSxFQUFFLE1BQU0sRUFBRSxJQUFJLENBQUMsR0FBRyxDQUFDLENBQUMsR0FBRyxFQUFFLEVBQUUsQ0FBQyxHQUFHLENBQUMsV0FBVyxFQUFFLENBQUMsRUFBRSxDQUFDO0lBQy9FLENBQUM7SUFFTSxNQUFNLENBQUMsS0FBSyxDQUFDLGVBQWUsQ0FBQyxNQUFnQjtRQUNsRCxNQUFNLEdBQUcsR0FBRyxDQUFDLEdBQUcsSUFBSSxHQUFHLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQztRQUNqQyxJQUFJLEdBQUcsQ0FBQyxNQUFNLEtBQUssQ0FBQztZQUFFLE9BQU8sSUFBSSxHQUFHLEVBQUUsQ0FBQztRQUN2QyxJQUFJLEdBQUcsQ0FBQyxNQUFNLEdBQUcsR0FBRyxFQUFFLENBQUM7WUFDckIsTUFBTSxJQUFJLEtBQUssQ0FBQyxnRUFBZ0UsQ0FBQyxDQUFDO1FBQ3BGLENBQUM7UUFDRCxNQUFNLHNCQUFzQixDQUFDLGlCQUFpQixFQUFFLENBQUM7UUFDakQsTUFBTSxJQUFJLEdBQUcsTUFBTSxzQkFBc0IsQ0FBQyxhQUFhLENBQUMsRUFBRSxFQUFFLEVBQUUsRUFBRSxHQUFHLEVBQUUsR0FBRyxFQUFFLEVBQUUsRUFBRTtZQUM1RSxJQUFJLEVBQUUsQ0FBQyxFQUFFLEtBQUssRUFBRSxHQUFHLENBQUMsTUFBTSxFQUFFLElBQUksRUFBRSxFQUFFLEVBQUUsRUFBRSxDQUFDLEVBQUUsRUFBRSxVQUFVLEVBQUUsRUFBRSxFQUFFLEVBQUUsQ0FBQyxFQUFFLEdBQUcsRUFBRSxDQUFDLEVBQUU7WUFDMUUsU0FBUyxFQUFFLHVCQUF1QixFQUFFLFNBQVMsRUFBRSx1QkFBdUI7U0FDdkUsQ0FBQyxDQUFDO1FBQ0gsT0FBTyxJQUFJLEdBQUcsQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLENBQUMsR0FBRyxFQUFFLEVBQUUsQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQztJQUM1QyxDQUFDO0lBRU0sTUFBTSxDQUFDLEtBQUssQ0FBQyxXQUFXLENBQUMsU0FBaUI7UUFDL0MsSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsU0FBUyxDQUFDLElBQUksU0FBUyxHQUFHLENBQUMsRUFBRSxDQUFDO1lBQ3RELE1BQU0sSUFBSSxLQUFLLENBQUMsNERBQTRELENBQUMsQ0FBQztRQUNoRixDQUFDO1FBQ0QsTUFBTSxzQkFBc0IsQ0FBQyxpQkFBaUIsRUFBRSxDQUFDO1FBQ2pELElBQUksWUFBWSxHQUFHLENBQUMsQ0FBQztRQUNyQixPQUFPLElBQUksRUFBRSxDQUFDO1lBQ1osTUFBTSxJQUFJLEdBQUcsTUFBTSxzQkFBc0IsQ0FBQyxhQUFhLENBQUMsRUFBRSxTQUFTLEVBQUUsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLEVBQUUsRUFBRTtnQkFDekYsSUFBSSxFQUFFLENBQUMsRUFBRSxLQUFLLEVBQUUsR0FBRyxFQUFFLElBQUksRUFBRSxFQUFFLFNBQVMsRUFBRSxDQUFDLEVBQUUsRUFBRSxFQUFFLENBQUMsRUFBRSxFQUFFLFVBQVUsRUFBRSxFQUFFLEVBQUUsRUFBRSxDQUFDLEVBQUUsR0FBRyxFQUFFLENBQUMsRUFBRTtnQkFDakYsU0FBUyxFQUFFLHVCQUF1QixFQUFFLFNBQVMsRUFBRSx1QkFBdUI7YUFDdkUsQ0FBQyxDQUFDO1lBQ0gsSUFBSSxJQUFJLENBQUMsTUFBTSxLQUFLLENBQUM7Z0JBQUUsTUFBTTtZQUM3QixNQUFNLE1BQU0sR0FBRyxNQUFNLHNCQUFzQixDQUFDLGdCQUFnQixDQUMxRCxFQUFFLFNBQVMsRUFBRSxFQUFFLEdBQUcsRUFBRSxTQUFTLEVBQUUsRUFBRSxHQUFHLEVBQUUsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDLEdBQUcsRUFBRSxFQUFFLENBQUMsQ0FBQyxFQUFFLEVBQUUsRUFBRSxHQUFHLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxFQUFFLEVBQzNFLEVBQUUsU0FBUyxFQUFFLHVCQUF1QixFQUFFLENBQ3ZDLENBQUM7WUFDRixZQUFZLElBQUksTUFBTSxDQUFDLFlBQVksQ0FBQztZQUNwQyxJQUFJLElBQUksQ0FBQyxNQUFNLEdBQUcsR0FBRztnQkFBRSxNQUFNO1FBQy9CLENBQUM7UUFDRCxPQUFPLFlBQVksQ0FBQztJQUN0QixDQUFDO0NBQ0Y7QUFFRCxpRkFBaUY7QUFDakYsT0FBTyxDQUFDLFNBQVMsQ0FBQyxxQkFBcUIsQ0FBQyxzQkFBc0IsRUFBRSxLQUFLLEVBQUU7SUFDckUsY0FBYyxFQUFFLHdCQUF3QjtJQUN4QyxlQUFlLEVBQUU7UUFDZixJQUFJLEVBQUUsV0FBVyxFQUFFLFVBQVUsRUFBRSxRQUFRLEVBQUUsU0FBUztRQUNsRCxxQkFBcUIsRUFBRSxvQkFBb0IsRUFBRSxlQUFlO0tBQzdEO0lBQ0QsY0FBYyxFQUFFLENBQUMsSUFBSSxDQUFDO0lBQ3RCLE9BQU8sRUFBRTtRQUNQLEVBQUUsSUFBSSxFQUFFLGdDQUFnQyxFQUFFLEdBQUcsRUFBRSxFQUFFLEVBQUUsRUFBRSxDQUFDLEVBQUUsRUFBRSxPQUFPLEVBQUUsRUFBRSxNQUFNLEVBQUUsSUFBSSxFQUFFLEVBQUU7UUFDckYsRUFBRSxJQUFJLEVBQUUsZ0NBQWdDLEVBQUUsR0FBRyxFQUFFLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQyxFQUFFLEVBQUU7UUFDbEUsRUFBRSxJQUFJLEVBQUUsd0NBQXdDLEVBQUUsR0FBRyxFQUFFLEVBQUUsT0FBTyxFQUFFLENBQUMsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDLEVBQUUsRUFBRTtLQUN2RjtDQUNGLENBQUMsQ0FBQyJ9