@stratum-hq/nestjs 0.3.1 → 1.0.0

package/dist/stratum.decorator.d.ts

@@ -6,7 +6,7 @@
  * ```ts
  * @Get('me')
  * @UseGuards(StratumGuard)
- * getProfile(@Tenant() tenant: TenantContextLegacy) {
+ * getProfile(@Tenant() tenant: ResolvedTenantContext) {
  *   return tenant;
  * }
  * ```

package/dist/stratum.decorator.js

@@ -7,7 +7,7 @@ import { createParamDecorator } from "@nestjs/common";
  * ```ts
  * @Get('me')
  * @UseGuards(StratumGuard)
- * getProfile(@Tenant() tenant: TenantContextLegacy) {
+ * getProfile(@Tenant() tenant: ResolvedTenantContext) {
  *   return tenant;
  * }
  * ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratum-hq/nestjs",
-  "version": "0.3.1",
+  "version": "1.0.0",
   "description": "Stratum NestJS integration — StratumGuard, @Tenant() decorator, and StratumModule",
   "keywords": [
     "multi-tenancy",
@@ -43,8 +43,8 @@
   "peerDependencies": {
     "@nestjs/common": ">=10.0.0",
     "@nestjs/core": ">=10.0.0",
-    "@stratum-hq/core": ">=0.3.0",
-    "@stratum-hq/sdk": ">=0.3.0",
+    "@stratum-hq/core": ">=1.0.0",
+    "@stratum-hq/sdk": ">=1.0.0",
     "reflect-metadata": ">=0.1.13"
   },
   "devDependencies": {
@@ -57,6 +57,13 @@
     "typescript": "^5.4.0",
     "vitest": "^1.6.0"
   },
+  "license": "MIT",
+  "author": "Christian Crank",
+  "homepage": "https://github.com/stratum-hq/Stratum/tree/main/packages/nestjs#readme",
+  "bugs": "https://github.com/stratum-hq/Stratum/issues",
+  "engines": {
+    "node": ">=20.0.0"
+  },
   "repository": {
     "type": "git",
     "url": "https://github.com/stratum-hq/Stratum.git",

package/dist/__tests__/stratum.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=stratum.test.d.ts.map

package/dist/__tests__/stratum.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stratum.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/stratum.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/stratum.test.js

@@ -1,341 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { resolveFromHeader, resolveFromJwt } from "@stratum-hq/sdk";
-import { StratumGuard } from "../stratum.guard.js";
-// ── Mock StratumClient ───────────────────────────────────────────────────────
-function makeMockClient(resolvedContext = null, shouldThrow) {
-    return {
-        resolveTenant: vi.fn(async (_tenantId) => {
-            if (shouldThrow)
-                throw shouldThrow;
-            if (!resolvedContext)
-                throw new Error("No context configured");
-            return resolvedContext;
-        }),
-    };
-}
-// ── makeContext helper ───────────────────────────────────────────────────────
-function makeExecutionContext(req) {
-    return {
-        switchToHttp: () => ({
-            getRequest: () => req,
-            getResponse: () => ({}),
-            getNext: () => ({}),
-        }),
-    };
-}
-// ── Stubs for NestJS exceptions ──────────────────────────────────────────────
-import { TenantNotFoundError } from "@stratum-hq/core";
-class UnauthorizedException extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "UnauthorizedException";
-    }
-}
-class ForbiddenException extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "ForbiddenException";
-    }
-}
-// ── Guard logic (mirrors stratum.guard.ts) ───────────────────────────────────
-async function canActivate(client, context, options = {}) {
-    const req = context.switchToHttp().getRequest();
-    // 1. Resolve tenant ID: JWT (verified) → header → custom resolvers
-    let tenantId = null;
-    tenantId = resolveFromJwt(req, options.jwtClaimPath, {
-        secret: options.jwtSecret,
-        verify: options.jwtVerify,
-    });
-    if (!tenantId) {
-        tenantId = resolveFromHeader(req);
-    }
-    if (!tenantId && options.resolvers) {
-        for (const resolver of options.resolvers) {
-            const result = await resolver.resolve(req);
-            if (result) {
-                tenantId = result;
-                break;
-            }
-        }
-    }
-    if (!tenantId) {
-        throw new UnauthorizedException("Tenant ID could not be resolved from request");
-    }
-    // 2. Resolve caller tenant context
-    let callerContext;
-    try {
-        callerContext = await client.resolveTenant(tenantId);
-    }
-    catch (err) {
-        if (err instanceof TenantNotFoundError) {
-            throw new UnauthorizedException(`Tenant not found: ${tenantId}`);
-        }
-        throw err;
-    }
-    req["tenant"] = callerContext;
-    req["impersonating"] = false;
-    // 3. Impersonation
-    if (options.impersonation?.enabled) {
-        const impersonateHeader = options.impersonation.headerName ?? "X-Impersonate-Tenant";
-        const headers = req.headers;
-        const rawVal = headers?.[impersonateHeader.toLowerCase()];
-        const impersonateTenantId = Array.isArray(rawVal) ? rawVal[0] : rawVal;
-        if (impersonateTenantId && impersonateTenantId !== tenantId) {
-            const authorized = await options.impersonation.authorize(req, tenantId, impersonateTenantId);
-            if (!authorized) {
-                throw new ForbiddenException("Not authorized to impersonate this tenant");
-            }
-            let impersonatedContext;
-            try {
-                impersonatedContext = await client.resolveTenant(impersonateTenantId);
-            }
-            catch (err) {
-                if (err instanceof TenantNotFoundError) {
-                    throw new UnauthorizedException(`Impersonated tenant not found: ${impersonateTenantId}`);
-                }
-                throw err;
-            }
-            req["tenant"] = impersonatedContext;
-            req["impersonating"] = true;
-            req["originalTenantId"] = tenantId;
-            options.impersonation.onImpersonate?.(req, tenantId, impersonateTenantId);
-            return true;
-        }
-    }
-    return true;
-}
-// ── @Tenant() decorator extraction logic ─────────────────────────────────────
-function extractTenant(req) {
-    return req["tenant"];
-}
-// ── Tests ─────────────────────────────────────────────────────────────────────
-const MOCK_CONTEXT = {
-    id: "tenant-123",
-    slug: "acme",
-    name: "Acme Corp",
-};
-const MOCK_CONTEXT_B = {
-    id: "tenant-456",
-    slug: "other",
-    name: "Other Corp",
-};
-describe("StratumGuard", () => {
-    let client;
-    beforeEach(() => {
-        client = makeMockClient(MOCK_CONTEXT);
-    });
-    describe("canActivate — x-tenant-id header", () => {
-        it("returns true and sets req.tenant when x-tenant-id header is present", async () => {
-            const req = {
-                headers: { "x-tenant-id": "tenant-123" },
-            };
-            const ctx = makeExecutionContext(req);
-            const result = await canActivate(client, ctx);
-            expect(result).toBe(true);
-            expect(req["tenant"]).toEqual(MOCK_CONTEXT);
-            expect(client.resolveTenant).toHaveBeenCalledWith("tenant-123");
-        });
-    });
-    describe("canActivate — JWT (unverified tokens rejected)", () => {
-        function makeJwt(payload) {
-            const header = Buffer.from(JSON.stringify({ alg: "HS256", typ: "JWT" })).toString("base64url");
-            const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
-            return `${header}.${body}.fakesig`;
-        }
-        it("does NOT trust JWT claims when no jwtSecret or jwtVerify is configured", async () => {
-            // Without a secret, the guard must not extract tenant from JWT
-            const token = makeJwt({ tenant_id: "forged-tenant" });
-            const req = {
-                headers: { authorization: `Bearer ${token}` },
-            };
-            const ctx = makeExecutionContext(req);
-            // No options — should reject because JWT is unverified
-            await expect(canActivate(client, ctx, {})).rejects.toThrow(UnauthorizedException);
-            await expect(canActivate(client, ctx, {})).rejects.toThrow("Tenant ID could not be resolved from request");
-            expect(client.resolveTenant).not.toHaveBeenCalled();
-        });
-        it("resolves tenant from JWT when jwtVerify is provided", async () => {
-            const token = makeJwt({ tenant_id: "tenant-from-jwt" });
-            const req = {
-                headers: { authorization: `Bearer ${token}` },
-            };
-            const ctx = makeExecutionContext(req);
-            // Supply a verify function that trusts this token
-            const jwtVerify = (_t) => ({ tenant_id: "tenant-from-jwt" });
-            const result = await canActivate(client, ctx, { jwtVerify });
-            expect(result).toBe(true);
-            expect(client.resolveTenant).toHaveBeenCalledWith("tenant-from-jwt");
-        });
-        it("prefers the verified JWT claim over the x-tenant-id header", async () => {
-            const token = makeJwt({ tenant_id: "jwt-tenant" });
-            const req = {
-                headers: {
-                    "x-tenant-id": "header-tenant",
-                    authorization: `Bearer ${token}`,
-                },
-            };
-            const ctx = makeExecutionContext(req);
-            await canActivate(client, ctx, { jwtVerify: () => ({ tenant_id: "jwt-tenant" }) });
-            expect(client.resolveTenant).toHaveBeenCalledWith("jwt-tenant");
-        });
-    });
-    describe("canActivate — missing tenant", () => {
-        it("throws UnauthorizedException when no tenant identifier in request", async () => {
-            const req = { headers: {} };
-            const ctx = makeExecutionContext(req);
-            await expect(canActivate(client, ctx)).rejects.toThrow(UnauthorizedException);
-            await expect(canActivate(client, ctx)).rejects.toThrow("Tenant ID could not be resolved from request");
-        });
-        it("throws UnauthorizedException when tenant not found in control plane", async () => {
-            const notFoundClient = makeMockClient(null, new TenantNotFoundError("tenant-missing"));
-            const req = {
-                headers: { "x-tenant-id": "tenant-missing" },
-            };
-            const ctx = makeExecutionContext(req);
-            await expect(canActivate(notFoundClient, ctx)).rejects.toThrow(UnauthorizedException);
-            await expect(canActivate(notFoundClient, ctx)).rejects.toThrow("Tenant not found: tenant-missing");
-        });
-        it("re-throws unexpected errors", async () => {
-            const boom = new Error("Network failure");
-            const errorClient = makeMockClient(null, boom);
-            const req = {
-                headers: { "x-tenant-id": "tenant-123" },
-            };
-            const ctx = makeExecutionContext(req);
-            await expect(canActivate(errorClient, ctx)).rejects.toThrow("Network failure");
-        });
-    });
-    describe("canActivate — custom resolvers", () => {
-        it("uses custom resolver when header and JWT resolve nothing", async () => {
-            const req = { headers: {} };
-            const ctx = makeExecutionContext(req);
-            const customResolver = { resolve: vi.fn(async () => "tenant-from-resolver") };
-            const result = await canActivate(client, ctx, { resolvers: [customResolver] });
-            expect(result).toBe(true);
-            expect(customResolver.resolve).toHaveBeenCalledWith(req);
-            expect(client.resolveTenant).toHaveBeenCalledWith("tenant-from-resolver");
-        });
-        it("stops at first resolver that returns a value", async () => {
-            const req = { headers: {} };
-            const ctx = makeExecutionContext(req);
-            const r1 = { resolve: vi.fn(async () => "first-resolver-tenant") };
-            const r2 = { resolve: vi.fn(async () => "second-resolver-tenant") };
-            await canActivate(client, ctx, { resolvers: [r1, r2] });
-            expect(r1.resolve).toHaveBeenCalled();
-            expect(r2.resolve).not.toHaveBeenCalled();
-            expect(client.resolveTenant).toHaveBeenCalledWith("first-resolver-tenant");
-        });
-    });
-    describe("canActivate — impersonation", () => {
-        it("impersonates target tenant when authorized", async () => {
-            // client returns MOCK_CONTEXT for "tenant-123", MOCK_CONTEXT_B for "tenant-456"
-            const impClient = {
-                resolveTenant: vi.fn(async (id) => {
-                    if (id === "tenant-123")
-                        return MOCK_CONTEXT;
-                    if (id === "tenant-456")
-                        return MOCK_CONTEXT_B;
-                    throw new TenantNotFoundError(id);
-                }),
-            };
-            const req = {
-                headers: {
-                    "x-tenant-id": "tenant-123",
-                    "x-impersonate-tenant": "tenant-456",
-                },
-            };
-            const ctx = makeExecutionContext(req);
-            const onImpersonate = vi.fn();
-            const result = await canActivate(impClient, ctx, {
-                impersonation: {
-                    enabled: true,
-                    authorize: async () => true,
-                    onImpersonate,
-                },
-            });
-            expect(result).toBe(true);
-            expect(req["tenant"]).toEqual(MOCK_CONTEXT_B);
-            expect(req["impersonating"]).toBe(true);
-            expect(req["originalTenantId"]).toBe("tenant-123");
-            expect(onImpersonate).toHaveBeenCalledWith(req, "tenant-123", "tenant-456");
-        });
-        it("throws ForbiddenException when impersonation is denied", async () => {
-            const req = {
-                headers: {
-                    "x-tenant-id": "tenant-123",
-                    "x-impersonate-tenant": "tenant-456",
-                },
-            };
-            const ctx = makeExecutionContext(req);
-            await expect(canActivate(client, ctx, {
-                impersonation: {
-                    enabled: true,
-                    authorize: async () => false,
-                },
-            })).rejects.toThrow(ForbiddenException);
-        });
-    });
-});
-// ── Real StratumGuard: verified JWT must be authoritative ─────────────────────
-// Exercises the actual guard (not the mirror above) to lock in that an untrusted
-// X-Tenant-ID header cannot override the tenant proven by a verified JWT.
-describe("StratumGuard (real guard): tenant identity precedence", () => {
-    function makeJwt(payload) {
-        const header = Buffer.from(JSON.stringify({ alg: "HS256", typ: "JWT" })).toString("base64url");
-        const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
-        return `${header}.${body}.fakesig`;
-    }
-    it("uses the verified JWT tenant and ignores a conflicting X-Tenant-ID header", async () => {
-        const token = makeJwt({ tenant_id: "tenant-a" });
-        const req = {
-            headers: {
-                authorization: `Bearer ${token}`,
-                "x-tenant-id": "tenant-b",
-            },
-        };
-        const ctx = makeExecutionContext(req);
-        const resolveTenant = vi.fn(async (id) => ({ id, slug: id, name: id }));
-        const client = { resolveTenant };
-        const options = { jwtVerify: () => ({ tenant_id: "tenant-a" }) };
-        const guard = new StratumGuard(client, options);
-        const result = await guard.canActivate(ctx);
-        expect(result).toBe(true);
-        // The verified JWT tenant is authoritative; the header must not be used.
-        expect(resolveTenant).toHaveBeenCalledWith("tenant-a");
-        expect(resolveTenant).not.toHaveBeenCalledWith("tenant-b");
-        expect(req["tenant"].id).toBe("tenant-a");
-    });
-    it("falls back to the X-Tenant-ID header only when no verified JWT tenant is present", async () => {
-        const req = {
-            headers: { "x-tenant-id": "tenant-header" },
-        };
-        const ctx = makeExecutionContext(req);
-        const resolveTenant = vi.fn(async (id) => ({ id, slug: id, name: id }));
-        const client = { resolveTenant };
-        const guard = new StratumGuard(client, {});
-        const result = await guard.canActivate(ctx);
-        expect(result).toBe(true);
-        expect(resolveTenant).toHaveBeenCalledWith("tenant-header");
-    });
-});
-describe("@Tenant() decorator", () => {
-    it("extracts req.tenant from execution context", () => {
-        const req = { tenant: MOCK_CONTEXT };
-        const tenant = extractTenant(req);
-        expect(tenant).toEqual(MOCK_CONTEXT);
-    });
-    it("returns undefined when tenant not yet set (guard not applied)", () => {
-        const req = {};
-        const tenant = extractTenant(req);
-        expect(tenant).toBeUndefined();
-    });
-});
-describe("STRATUM_CLIENT / STRATUM_OPTIONS constants", () => {
-    it("exports distinct Symbol injection tokens", async () => {
-        const { STRATUM_CLIENT, STRATUM_OPTIONS } = await import("../constants.js");
-        expect(typeof STRATUM_CLIENT).toBe("symbol");
-        expect(typeof STRATUM_OPTIONS).toBe("symbol");
-        expect(STRATUM_CLIENT).not.toBe(STRATUM_OPTIONS);
-    });
-});
-//# sourceMappingURL=stratum.test.js.map

package/dist/__tests__/stratum.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stratum.test.js","sourceRoot":"","sources":["../../src/__tests__/stratum.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAoBnD,gFAAgF;AAChF,SAAS,cAAc,CAAC,kBAA4C,IAAI,EAAE,WAAmB;IAC3F,OAAO;QACL,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;YAC/C,IAAI,WAAW;gBAAE,MAAM,WAAW,CAAC;YACnC,IAAI,CAAC,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC/D,OAAO,eAAe,CAAC;QACzB,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,oBAAoB,CAAC,GAA4B;IACxD,OAAO;QACL,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;YACnB,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG;YACrB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC9B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC3B,CAAC;KACiB,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,qBAAsB,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,kBAAmB,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAgBD,gFAAgF;AAChF,KAAK,UAAU,WAAW,CACxB,MAAyC,EACzC,OAAyB,EACzB,UAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAEzC,CAAC;IAEL,mEAAmE;IACnE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE;QACnD,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,MAAM,EAAE,OAAO,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,GAAG,MAAM,CAAC;gBAClB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,qBAAqB,CAAC,8CAA8C,CAAC,CAAC;IAClF,CAAC;IAED,mCAAmC;IACnC,IAAI,aAAa,CAAC;IAClB,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;YACvC,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC;IAC9B,GAAG,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;IAE7B,mBAAmB;IACnB,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QACnC,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,sBAAsB,CAAC;QACrF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAoE,CAAC;QACzF,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAEvE,IAAI,mBAAmB,IAAI,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAC7F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,mBAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,mBAAmB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;oBACvC,MAAM,IAAI,qBAAqB,CAAC,kCAAkC,mBAAmB,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,GAAG,CAAC,QAAQ,CAAC,GAAG,mBAAmB,CAAC;YACpC,GAAG,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;YAC5B,GAAG,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC;YAEnC,OAAO,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAE1E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,GAA4B;IACjD,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,iFAAiF;AAEjF,MAAM,YAAY,GAAsB;IACtC,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,WAAW;CAClB,CAAC;AAEF,MAAM,cAAc,GAAsB;IACxC,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,MAAyC,CAAC;IAE9C,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;aACzC,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC9D,SAAS,OAAO,CAAC,OAAgC;YAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxE,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;QACrC,CAAC;QAED,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;YACtF,+DAA+D;YAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;YACtD,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,uDAAuD;YACvD,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAClF,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACxD,8CAA8C,CAC/C,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACxD,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,kDAAkD;YAClD,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAE7D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YACnD,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE;oBACP,aAAa,EAAE,eAAe;oBAC9B,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;aACF,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;YAEnF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,GAAG,GAA4B,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAC9E,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpD,8CAA8C,CAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACvF,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE;aAC7C,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACtF,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;aACzC,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,GAAG,GAA4B,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAE9E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAE/E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,GAAG,GAA4B,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACnE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAEpE,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAExD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,gFAAgF;YAChF,MAAM,SAAS,GAAG;gBAChB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;oBACxC,IAAI,EAAE,KAAK,YAAY;wBAAE,OAAO,YAAY,CAAC;oBAC7C,IAAI,EAAE,KAAK,YAAY;wBAAE,OAAO,cAAc,CAAC;oBAC/C,MAAM,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC;gBACpC,CAAC,CAAC;aACH,CAAC;YAEF,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE;oBACP,aAAa,EAAE,YAAY;oBAC3B,sBAAsB,EAAE,YAAY;iBACrC;aACF,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC/C,aAAa,EAAE;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;oBAC3B,aAAa;iBACd;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,GAAG,GAA4B;gBACnC,OAAO,EAAE;oBACP,aAAa,EAAE,YAAY;oBAC3B,sBAAsB,EAAE,YAAY;iBACrC;aACF,CAAC;YACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEtC,MAAM,MAAM,CACV,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE;gBACvB,aAAa,EAAE;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;iBAC7B;aACF,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AACjF,iFAAiF;AACjF,0EAA0E;AAC1E,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,SAAS,OAAO,CAAC,OAAgC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxE,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;IACrC,CAAC;IAED,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAA4B;YACnC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,aAAa,EAAE,UAAU;aAC1B;SACF,CAAC;QACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,EAAE,aAAa,EAAwD,CAAC;QACvF,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAEjE,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,OAAyE,CAAC,CAAC;QAClH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAA2D,CAAC,CAAC;QAEpG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,yEAAyE;QACzE,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,CAAE,GAAG,CAAC,QAAQ,CAAoB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,GAAG,GAA4B;YACnC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE;SAC5C,CAAC;QACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,EAAE,aAAa,EAAwD,CAAC;QAEvF,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAoE,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAA2D,CAAC,CAAC;QAEpG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAA4B,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}