@shipfox/api-auth 18.0.0 → 20.0.0

package/dist/db/agent-access.d.ts

@@ -0,0 +1,255 @@
+import type { AgentAuthorizationCode, AgentAuthorizationRequest, AgentClient, AgentGrant, AgentPersonalAccessToken, AgentRefreshToken } from '#core/entities/agent-access.js';
+import { db } from './db.js';
+export type AgentAccessTx = Parameters<Parameters<ReturnType<typeof db>['transaction']>[0]>[0];
+type AgentAccessExecutor = ReturnType<typeof db> | AgentAccessTx;
+/** Returns the default sliding lifetime for a newly issued agent refresh token. */
+export declare function agentRefreshTokenExpiresAt(now?: Date): Date;
+/**
+ * A rotated token remains usable for an access-token-only grace response. The
+ * row must still exist; pruning deliberately turns later replays into plain
+ * unknown-token responses.
+ */
+export declare function isWithinAgentRefreshRotationGrace(params: {
+    rotatedAt: Date | null;
+    now?: Date;
+    graceSeconds?: number | undefined;
+}): boolean;
+export interface CreateAgentClientParams {
+    clientId: string;
+    name: string;
+    redirectUris: string[];
+    kind: 'registered' | 'cimd';
+}
+export declare function createAgentClient(params: CreateAgentClientParams): Promise<AgentClient>;
+export declare function createAgentClientTx(tx: AgentAccessTx, params: CreateAgentClientParams): Promise<AgentClient>;
+export interface UpsertCimdAgentClientParams {
+    clientId: string;
+    name: string;
+    redirectUris: string[];
+}
+/**
+ * Stores the latest validated CIMD identity. The generic client upsert above
+ * intentionally preserves registration metadata; CIMD documents are the
+ * source of truth and therefore use this explicit update path.
+ */
+export declare function upsertCimdAgentClient(params: UpsertCimdAgentClientParams): Promise<AgentClient>;
+export declare function findAgentClientByClientId(params: {
+    clientId: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentClient | undefined>;
+export declare function markAgentClientReferenced(tx: AgentAccessTx, params: {
+    clientUuid: string;
+}): Promise<void>;
+export declare function markAgentClientUnreferenced(tx: AgentAccessTx, params: {
+    clientUuid: string;
+}): Promise<void>;
+export interface CreateAgentAuthorizationRequestParams {
+    /** Internal `auth_agent_clients.id`, not the public OAuth `client_id`. */
+    clientId: string;
+    redirectUri: string;
+    resource: string;
+    scopes: string[];
+    codeChallenge: string;
+    state: string | null;
+    expiresAt: Date;
+}
+export declare function createAgentAuthorizationRequest(params: CreateAgentAuthorizationRequestParams): Promise<AgentAuthorizationRequest>;
+export declare function createAgentAuthorizationRequestTx(tx: AgentAccessTx, params: CreateAgentAuthorizationRequestParams): Promise<AgentAuthorizationRequest>;
+export declare function findPendingAgentAuthorizationRequest(params: {
+    id: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentAuthorizationRequest | undefined>;
+export declare function consumeAgentAuthorizationRequest(params: {
+    id: string;
+}): Promise<AgentAuthorizationRequest | undefined>;
+/**
+ * Claims a pending request in the caller's transaction. The expiry and
+ * consumed-at predicates are part of the update so concurrent approval and
+ * denial can have only one winner.
+ */
+export declare function consumeAgentAuthorizationRequestTx(tx: AgentAccessTx, params: {
+    id: string;
+}): Promise<AgentAuthorizationRequest | undefined>;
+export interface CreateAgentGrantParams {
+    userId: string;
+    workspaceId: string;
+    /** Internal `auth_agent_clients.id`, not the public OAuth `client_id`. */
+    clientId: string;
+    scopes: string[];
+}
+export declare function createAgentGrant(params: CreateAgentGrantParams): Promise<AgentGrant>;
+/**
+ * Creates or reauthorizes a grant while holding its client row lock. A newly
+ * created grant has no live child until its first authorization code or refresh
+ * token is issued, so approval callers must compose that first child creation
+ * with this Tx helper in one database transaction.
+ */
+export declare function createAgentGrantTx(tx: AgentAccessTx, params: CreateAgentGrantParams): Promise<AgentGrant>;
+export declare function findAgentGrant(params: {
+    id: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentGrant | undefined>;
+/**
+ * Locks one grant row until the surrounding transaction ends. Code exchange
+ * and lifecycle transitions must use this same primitive before inspecting or
+ * changing grant state. Callers must keep the transaction database-only while
+ * this lock is held; external I/O must happen after commit.
+ */
+export declare function lockAgentGrant(tx: AgentAccessTx, params: {
+    grantId: string;
+}): Promise<AgentGrant | undefined>;
+export interface CreateAgentAuthorizationCodeParams {
+    grantId: string;
+    hashedCode: string;
+    codeChallenge: string;
+    redirectUri: string;
+    resource: string;
+    expiresAt: Date;
+}
+export declare function createAgentAuthorizationCode(params: CreateAgentAuthorizationCodeParams): Promise<AgentAuthorizationCode>;
+export declare function createAgentAuthorizationCodeTx(tx: AgentAccessTx, params: CreateAgentAuthorizationCodeParams): Promise<AgentAuthorizationCode>;
+export declare function findAgentAuthorizationCodeByHash(params: {
+    hashedCode: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentAuthorizationCode | undefined>;
+export declare function findActiveAgentAuthorizationCodeByHash(params: {
+    hashedCode: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentAuthorizationCode | undefined>;
+export declare function consumeAgentAuthorizationCode(params: {
+    hashedCode: string;
+}): Promise<AgentAuthorizationCode | undefined>;
+/** Claims an authorization code exactly once, including its 60-second TTL. */
+export declare function consumeAgentAuthorizationCodeTx(tx: AgentAccessTx, params: {
+    hashedCode: string;
+}): Promise<AgentAuthorizationCode | undefined>;
+export interface CreateAgentRefreshTokenParams {
+    grantId: string;
+    hashedToken: string;
+    /** Defaults to the configured 14-day lifetime. */
+    expiresAt?: Date;
+}
+export declare function createAgentRefreshToken(params: CreateAgentRefreshTokenParams): Promise<AgentRefreshToken>;
+export declare function createAgentRefreshTokenTx(tx: AgentAccessTx, params: CreateAgentRefreshTokenParams): Promise<AgentRefreshToken>;
+export declare function findAgentRefreshTokenByHash(params: {
+    hashedToken: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentRefreshToken | undefined>;
+export declare function findActiveAgentRefreshTokenByHash(params: {
+    hashedToken: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentRefreshToken | undefined>;
+/** Finds the one live refresh token currently attached to a grant. */
+export declare function findActiveAgentRefreshTokenByGrantId(params: {
+    grantId: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentRefreshToken | undefined>;
+export type AgentRefreshTokenReplayResult = {
+    kind: 'grace';
+    grant: AgentGrant;
+    predecessor: AgentRefreshToken;
+    successor: AgentRefreshToken;
+} | {
+    kind: 'reused';
+    grant: AgentGrant;
+    predecessor: AgentRefreshToken;
+};
+/**
+ * Resolves a replay of a retained, rotated token. A grace hit returns the one
+ * live successor so the caller can mint an access token without issuing a new
+ * refresh cookie. A replay after grace revokes the complete grant family.
+ * Missing or pruned rows return undefined and therefore remain plain 401s.
+ */
+export declare function resolveAgentRefreshTokenReplay(params: {
+    hashedToken: string;
+    now?: Date;
+    graceSeconds?: number;
+}): Promise<AgentRefreshTokenReplayResult | undefined>;
+export declare function resolveAgentRefreshTokenReplayTx(tx: AgentAccessTx, params: {
+    hashedToken: string;
+    now?: Date;
+    graceSeconds?: number;
+}): Promise<AgentRefreshTokenReplayResult | undefined>;
+/** Rotates a refresh token atomically; a concurrent rotation cannot win twice. */
+export declare function rotateAgentRefreshToken(params: {
+    hashedToken: string;
+    replacementHashedToken: string;
+    /** Defaults to the configured 14-day sliding lifetime. */
+    replacementExpiresAt?: Date;
+}): Promise<AgentRefreshToken | undefined>;
+export declare function rotateAgentRefreshTokenTx(tx: AgentAccessTx, params: {
+    hashedToken: string;
+    replacementHashedToken: string;
+    replacementExpiresAt?: Date;
+}): Promise<AgentRefreshToken | undefined>;
+export declare function revokeAgentRefreshToken(params: {
+    id: string;
+}): Promise<AgentRefreshToken | undefined>;
+/** Revokes a grant and every refresh-token generation in its family. */
+export declare function revokeAgentGrant(params: {
+    grantId: string;
+}): Promise<AgentGrant | undefined>;
+export declare function revokeAgentGrantTx(tx: AgentAccessTx, params: {
+    grantId: string;
+}): Promise<AgentGrant | undefined>;
+export interface TransitionAgentGrantsToTerminalParams {
+    limit?: number;
+    now?: Date;
+    deadlineMs?: number | undefined;
+}
+/**
+ * Marks grants terminal once they have no usable refresh token or authorization
+ * code left. Each candidate is locked before its children are inspected so a
+ * concurrent code exchange or token rotation cannot create a live child after
+ * the decision.
+ */
+export declare function transitionAgentGrantsToTerminal(params?: TransitionAgentGrantsToTerminalParams): Promise<number>;
+export declare function transitionAgentGrantsToTerminalTx(tx: AgentAccessTx, params?: TransitionAgentGrantsToTerminalParams): Promise<number>;
+export interface CreateAgentPersonalAccessTokenParams {
+    userId: string;
+    workspaceId: string;
+    hashedToken: string;
+    prefix: string;
+    name: string;
+    scopes: string[];
+    expiresAt: Date;
+}
+export declare function createAgentPersonalAccessToken(params: CreateAgentPersonalAccessTokenParams): Promise<AgentPersonalAccessToken>;
+export declare function createAgentPersonalAccessTokenTx(tx: AgentAccessTx, params: CreateAgentPersonalAccessTokenParams): Promise<AgentPersonalAccessToken>;
+export declare function findAgentPersonalAccessTokenByHash(params: {
+    hashedToken: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentPersonalAccessToken | undefined>;
+export declare function findActiveAgentPersonalAccessTokenByHash(params: {
+    hashedToken: string;
+    executor?: AgentAccessExecutor;
+}): Promise<AgentPersonalAccessToken | undefined>;
+export declare function markAgentPersonalAccessTokenUsed(params: {
+    id: string;
+    throttleSeconds?: number;
+}): Promise<AgentPersonalAccessToken | undefined>;
+export declare function revokeAgentPersonalAccessToken(params: {
+    id: string;
+}): Promise<AgentPersonalAccessToken | undefined>;
+export interface PruneAgentAccessParams {
+    /** Overrides every retention horizon for deterministic maintenance tests. */
+    retentionDays?: number;
+    limit?: number;
+    now?: Date;
+    /** Absolute epoch deadline used to bound every PostgreSQL statement. */
+    deadlineMs?: number;
+}
+export interface PruneAgentAccessResult {
+    deleted: number;
+    transitioned: number;
+}
+/**
+ * Transitions inactive grants and deletes retained agent-access rows in bounded
+ * batches. The caller can override the common horizon in tests; production uses
+ * the per-row windows from the agent-access retention policy.
+ */
+export declare function pruneAgentAccess(params?: PruneAgentAccessParams): Promise<number>;
+/** Runs one bounded retention transaction and reports terminal transitions separately. */
+export declare function pruneAgentAccessBatch(params?: PruneAgentAccessParams): Promise<PruneAgentAccessResult>;
+export {};
+//# sourceMappingURL=agent-access.d.ts.map

package/dist/db/agent-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-access.d.ts","sourceRoot":"","sources":["../../src/db/agent-access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,UAAU,EACV,wBAAwB,EACxB,iBAAiB,EAClB,MAAM,gCAAgC,CAAC;AASxC,OAAO,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAiB3B,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,KAAK,mBAAmB,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,aAAa,CAAC;AA0FjE,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,IAAiB,GAAG,IAAI,CAEvE;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,OAAO,CAQV;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC;CAC7B;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,CAE7F;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,WAAW,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CASnC;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,GAC3B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,GAC3B,OAAO,CAAC,IAAI,CAAC,CAef;AAED,MAAM,WAAW,qCAAqC;IACpD,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,qCAAqC,GAC5C,OAAO,CAAC,yBAAyB,CAAC,CAEpC;AAED,wBAAsB,iCAAiC,CACrD,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,qCAAqC,GAC5C,OAAO,CAAC,yBAAyB,CAAC,CAQpC;AAED,wBAAsB,oCAAoC,CAAC,MAAM,EAAE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAejD;AAED,wBAAsB,gCAAgC,CAAC,MAAM,EAAE;IAC7D,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAEjD;AAED;;;;GAIG;AACH,wBAAsB,kCAAkC,CACtD,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAC,EAAE,EAAE,MAAM,CAAA;CAAC,GACnB,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAchD;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CAE1F;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAkCrB;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CASlC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GACxB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CASjC;AAED,MAAM,WAAW,kCAAkC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,kCAAkC,GACzC,OAAO,CAAC,sBAAsB,CAAC,CAEjC;AAED,wBAAsB,8BAA8B,CAClD,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,kCAAkC,GACzC,OAAO,CAAC,sBAAsB,CAAC,CAMjC;AAED,wBAAsB,gCAAgC,CAAC,MAAM,EAAE;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAS9C;AAED,wBAAsB,sCAAsC,CAAC,MAAM,EAAE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAe9C;AAED,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAE9C;AAED,8EAA8E;AAC9E,wBAAsB,+BAA+B,CACnD,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,GAC3B,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CA8B7C;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,6BAA6B,GACpC,OAAO,CAAC,iBAAiB,CAAC,CAE5B;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,6BAA6B,GACpC,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAczC;AAED,wBAAsB,iCAAiC,CAAC,MAAM,EAAE;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAgBzC;AAED,sEAAsE;AACtE,wBAAsB,oCAAoC,CAAC,MAAM,EAAE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAgBzC;AAED,MAAM,MAAM,6BAA6B,GACrC;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,SAAS,EAAE,iBAAiB,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,iBAAiB,CAAC;CAChC,CAAC;AAEN;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAErD;AAED,wBAAsB,gCAAgC,CACpD,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CA+DpD;AAED,kFAAkF;AAClF,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,0DAA0D;IAC1D,oBAAoB,CAAC,EAAE,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAEzC;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,IAAI,CAAC;CAC7B,GACA,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAmDxC;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAoBzC;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAEjG;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GACxB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAsBjC;AAED,MAAM,WAAW,qCAAqC;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAsB,+BAA+B,CACnD,MAAM,GAAE,qCAA0C,GACjD,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAsB,iCAAiC,CACrD,EAAE,EAAE,aAAa,EACjB,MAAM,GAAE,qCAA0C,GACjD,OAAO,CAAC,MAAM,CAAC,CAuFjB;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,oCAAoC,GAC3C,OAAO,CAAC,wBAAwB,CAAC,CAEnC;AAED,wBAAsB,gCAAgC,CACpD,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,oCAAoC,GAC3C,OAAO,CAAC,wBAAwB,CAAC,CAKnC;AAED,wBAAsB,kCAAkC,CAAC,MAAM,EAAE;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAShD;AAED,wBAAsB,wCAAwC,CAAC,MAAM,EAAE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAiBhD;AAED,wBAAsB,gCAAgC,CAAC,MAAM,EAAE;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CA2ChD;AAED,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAUhD;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAiUD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3F;AAED,0FAA0F;AAC1F,wBAAsB,qBAAqB,CACzC,MAAM,GAAE,sBAA2B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CA6DjC"}