@substrat-run/connector-fortnox 0.2.0

package/dist/index.js

@@ -0,0 +1,477 @@
+import { z } from 'zod';
+import { connectionActivity, connectionId as connectionIdSchema, instant, money, scopeId as scopeIdSchema, tenantId as tenantIdSchema, } from '@substrat-run/contracts';
+import { FortnoxApi, FortnoxApiError, FORTNOX_API_BASE, FORTNOX_OAUTH_BASE, fortnoxSecret, } from './api.js';
+import { financialYearFor, summarizeLedger } from './aggregate.js';
+import { parseSie4 } from './sie4.js';
+export { FortnoxApi, FortnoxApiError, FORTNOX_API_BASE, FORTNOX_OAUTH_BASE, fortnoxConsentUrl, fortnoxSecret, } from './api.js';
+export { parseSie4, splitSieLine, sieAmount, sieDate, } from './sie4.js';
+export { COST_CENTRE_DIMENSION, financialYearFor, summarizeLedger, } from './aggregate.js';
+export { FortnoxMock } from './mock.js';
+/**
+ * The Fortnox connector — the INBOUND half of accounting integration.
+ *
+ * ## Poll-only, and that is a design fact rather than an omission
+ *
+ * `connector-scrive` has two halves: a dispatch handler driven by an engine event, and
+ * a sweep that polls the provider. This connector has **only the sweep**, and registers
+ * no event handler at all, because nothing inside a scope initiates the work. A
+ * vertical does not *ask* for last month's bookkeeping the way it asks for a signature;
+ * the bookkeeping simply changes at Fortnox, and the platform finds out by looking.
+ *
+ * So there is no `registerFortnoxConnector`. `sweepFortnoxLedger` is a
+ * {@link ConnectorSweeper}, the deployment binds it into the platform sweeper exactly
+ * as it binds Scrive's, and that is the whole trigger surface.
+ *
+ * ## Where the data lands, and why the connector does not decide
+ *
+ * A sweep has no delivered event, so it has neither a scope to write to nor authority
+ * to write with. Scrive gets both from its dispatch ledger — the row it wrote when the
+ * event arrived. This connector has no such moment, so the scope is declared **once**,
+ * explicitly, by {@link bindFortnoxScope}: which scope, which operation to land the
+ * ledger through, and which permission that operation checks.
+ *
+ * The operation is the *consumer's*, not this connector's, and that is deliberate. What
+ * comes out of Fortnox is neutral accounting fact — accounts, cost centres, months,
+ * debit-positive sums. What a business *means* by them (which account is
+ * `lokal_grundhyra`, which sign normalizes it, which group it rolls into) is vocabulary,
+ * and vocabulary is the vertical's layer. A connector that mapped accounts to row keys
+ * would be a vertical wearing a connector's clothes, and the second customer with a
+ * different chart of accounts would have to fork it.
+ */
+/**
+ * The standing grants this connector requires — deliberately EMPTY, with a mechanism
+ * in place of a declaration.
+ *
+ * Every other connector names its return-path permissions here so `lint:connector-grants`
+ * can prove the dashboard's door is able to grant them. This one genuinely cannot: the
+ * permission it needs is whatever the *consumer's* landing operation checks, which
+ * differs per vertical and is unknown at this package's build time.
+ *
+ * That would be an invisible hole — the exact shape of #841, where a connector needed a
+ * grant no door could give and the way it surfaced was a failure months later. So the
+ * check moves from build time to bind time: {@link bindFortnoxScope} verifies the
+ * connection actually holds the named permission in the named scope and **refuses the
+ * binding otherwise**, naming what is missing. A sweep can therefore never be configured
+ * into a state where it fetches a year of bookkeeping and cannot write it down.
+ */
+export const FORTNOX_CONNECTION_GRANTS = [];
+/** The connector-state key prefix every binding lives under — what the sweep enumerates. */
+const BINDING_PREFIX = 'fortnox:binding:';
+const bindingKey = (scope) => `${BINDING_PREFIX}${scope}`;
+/**
+ * One page of parsed bookkeeping, as it crosses into a scope.
+ *
+ * Parsed with this schema on the way OUT, before every `invoke`. The engine-seam rule
+ * (`returns()`) exists because a value crossing a version boundary must be pinned to a
+ * published shape rather than to whatever the code currently produces, and a connector
+ * seam is the same boundary with a network in the middle: a vertical compiled against
+ * one version of this package and running against another must get a throw, never a
+ * silently-reshaped ledger on a screen.
+ */
+export const fortnoxLedgerPage = z.object({
+    /**
+     * Identifies this sync RUN, and it is the content hash rather than a ULID on purpose:
+     * two syncs of unchanged books produce the same `syncId`, so a consumer's upsert is
+     * naturally idempotent and a redelivered page cannot double a balance.
+     */
+    syncId: z.string().min(1),
+    connectionId: z.string().min(1),
+    company: z.object({
+        name: z.string(),
+        organizationNumber: z.string(),
+    }),
+    financialYear: z.object({
+        id: z.number(),
+        from: z.string(),
+        to: z.string(),
+    }),
+    page: z.number().int().nonnegative(),
+    pageCount: z.number().int().positive(),
+    /** True on the last page — the signal a consumer commits or swaps on. */
+    final: z.boolean(),
+    /** Present on page 0 only; the labels every later page's codes refer to. */
+    accounts: z.array(z.object({ number: z.string(), name: z.string() })).default([]),
+    costCentres: z.array(z.object({ code: z.string(), name: z.string() })).default([]),
+    balances: z.array(z.object({
+        account: z.string(),
+        costCentre: z.string().nullable(),
+        month: z.string(),
+        /** Debit-positive, as SIE states it. The consumer applies its own sign. */
+        amount: money,
+    })),
+});
+/** How many balance rows ride one `invoke`. */
+const PAGE_SIZE = 500;
+/**
+ * Declare that a connection should sync one scope — the one-time setup a poll-only
+ * connector needs in place of a dispatch.
+ *
+ * **Refuses a binding whose grant is missing**, which is the whole reason this is a
+ * function rather than a config object. The alternative — write the binding, discover
+ * at sweep time that the connection cannot invoke the operation — fails in the worst
+ * possible place: after a year of bookkeeping has been fetched, in a background timer
+ * nobody is watching, with a provider round trip already spent. Here it fails in the
+ * operator's hands, naming the permission to grant.
+ */
+export async function bindFortnoxScope(host, input) {
+    const tenant = tenantIdSchema.parse(input.tenantId);
+    const scope = scopeIdSchema.parse(input.scopeId);
+    // On the host, not `admin`: this is the same projection the permission checker reads,
+    // so a binding is verified against the tuples that will actually gate the invoke —
+    // not against a directory row that may not have reached the scope yet.
+    const granted = await host.connectionGrantsInScope(tenant, scope);
+    const held = granted.some((g) => g.connectionId === input.connectionId && g.permission === input.permission);
+    if (!held) {
+        throw new Error(`connection ${input.connectionId} does not hold '${input.permission}' on scope ${input.scopeId} — ` +
+            `a sweep would fetch the ledger and then fail to land it. Grant it first ` +
+            `(grantToConnection), then bind.`);
+    }
+    const binding = {
+        scopeId: input.scopeId,
+        tenantId: input.tenantId,
+        vertical: input.vertical,
+        operation: input.operation,
+        permission: input.permission,
+        boundAt: new Date(input.now?.() ?? Date.now()).toISOString(),
+    };
+    await host.admin.putConnectorState(input.connectionId, bindingKey(input.scopeId), binding);
+    return binding;
+}
+/** Every scope this connection syncs into. */
+export async function listFortnoxBindings(host, connectionId) {
+    const rows = await host.admin.listConnectorState(connectionId, BINDING_PREFIX);
+    // Tombstones filtered, exactly as the sweep and the activity projection do.
+    // `unbindFortnoxScope` writes `null` under the same key, and casting that to
+    // `FortnoxBinding` hands a caller a typed value that throws on the first property
+    // read — a lie the type system cannot catch.
+    return rows
+        .filter((r) => r.value !== null && typeof r.value === 'object')
+        .map((r) => r.value);
+}
+/**
+ * Stop syncing one scope. The binding row is replaced with a tombstone rather than
+ * removed, because `putConnectorState` is the only verb this surface has — and an
+ * unbound scope that a later sweep silently re-adopts would be worse than a visible
+ * dead row.
+ */
+export async function unbindFortnoxScope(host, connectionId, scopeId) {
+    await host.admin.putConnectorState(connectionId, bindingKey(scopeId), null);
+}
+const sha256Hex = async (text) => {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(text));
+    return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, '0')).join('');
+};
+/**
+ * Sync ONE bound scope: fetch the year that covers `period`, parse it, sum it, and land
+ * it through the binding's operation as the connection itself (#97).
+ *
+ * Idempotent and cheap on a no-op. The SIE payload is hashed before anything is landed,
+ * and an unchanged hash returns `changed: false` without a single `invoke` — which
+ * matters because a sweep runs on a timer and most passes find books nobody has touched.
+ */
+export async function syncFortnoxScope(host, connectionId, binding, options) {
+    const admin = host.admin;
+    const conn = await openFortnoxConnection(admin, options.fetch, binding.tenantId, binding.vertical, options.timeoutMs ?? 30_000);
+    const api = new FortnoxApi(conn, {
+        apiBase: options.apiBase,
+        oauthBase: options.oauthBase,
+        now: options.now,
+    });
+    // The period defaults to the calendar year containing "now", which is the sane
+    // default for a recurring sync; a caller back-filling names its own.
+    const nowMs = options.now?.() ?? Date.now();
+    const year = new Date(nowMs).toISOString().slice(0, 4);
+    const period = options.period ?? { from: `${year}-01-01`, to: `${year}-12-31` };
+    const years = await api.financialYears();
+    // Overlap, never containment — a first financial year can start mid-month. See
+    // `financialYearFor`.
+    const financialYear = financialYearFor(years, period);
+    if (!financialYear) {
+        return {
+            scopeId: binding.scopeId,
+            changed: false,
+            syncId: '',
+            financialYearId: null,
+            balances: 0,
+            pages: 0,
+            outOfRange: 0,
+        };
+    }
+    const sie = await api.sieFile(financialYear.Id);
+    // The WINDOW is part of the sync's identity, not just the payload.
+    //
+    // What lands is `summarizeLedger(ledger, period)` — the payload filtered to the
+    // window — so hashing the payload alone makes two genuinely different results share
+    // an identity, and the skip below then drops the second one. A broken financial year
+    // is all it takes: with `#RAR` running 2026-07-01..2027-06-30, a December sweep uses
+    // the default period 2026-01-01..2026-12-31 and lands only the 2026 months; a January
+    // sweep selects the SAME year by overlap, downloads the SAME unchanged payload, and
+    // returns `changed: false` — so the 2027 months never land until the books happen to
+    // change. Non-calendar financial years are ordinary in Sweden, so this was reachable
+    // rather than theoretical. An explicit back-fill over a different window inside an
+    // already-synced year was a silent no-op for the same reason.
+    //
+    // Folding the window in fixes the second half too: `syncId` IS this hash, and it is
+    // the consumer's idempotency key. Two windows that land different rows must never
+    // present the same key to an upsert.
+    const contentHash = await sha256Hex(`${financialYear.Id}\n${period.from}\n${period.to}\n${sie}`);
+    if (binding.lastSync?.contentHash === contentHash) {
+        return {
+            scopeId: binding.scopeId,
+            changed: false,
+            syncId: contentHash,
+            financialYearId: financialYear.Id,
+            balances: binding.lastSync.balances,
+            pages: 0,
+            outOfRange: 0,
+        };
+    }
+    const ledger = parseSie4(sie);
+    const summary = summarizeLedger(ledger, period);
+    // The connection acting as itself (#97). Refuses a scope in another tenant or running
+    // another vertical by construction, and the invoke below is gated on the connection's
+    // own grant — the one `bindFortnoxScope` verified.
+    const scope = await host.getConnectorScope(connectionId, scopeIdSchema.parse(binding.scopeId));
+    const pageCount = Math.max(1, Math.ceil(summary.balances.length / PAGE_SIZE));
+    for (let page = 0; page < pageCount; page += 1) {
+        const slice = summary.balances.slice(page * PAGE_SIZE, (page + 1) * PAGE_SIZE);
+        const payload = fortnoxLedgerPage.parse({
+            syncId: contentHash,
+            connectionId,
+            company: { name: ledger.company, organizationNumber: ledger.organizationNumber },
+            financialYear: {
+                id: financialYear.Id,
+                from: financialYear.FromDate,
+                to: financialYear.ToDate,
+            },
+            page,
+            pageCount,
+            final: page === pageCount - 1,
+            // The labels ride page 0 only: they are the same on every page, and repeating a
+            // full chart of accounts across twenty pages is bytes through a clone pipe for
+            // nothing.
+            accounts: page === 0 ? summary.accounts : [],
+            costCentres: page === 0 ? summary.costCentres : [],
+            balances: slice,
+        });
+        await scope.invoke(binding.operation, payload);
+    }
+    const synced = {
+        ...binding,
+        lastSync: {
+            financialYearId: financialYear.Id,
+            syncedAt: new Date(nowMs).toISOString(),
+            contentHash,
+            balances: summary.balances.length,
+        },
+    };
+    // Written only AFTER every page landed, so a failure mid-way leaves the cursor at the
+    // previous hash and the next sweep retries the whole year rather than resuming into a
+    // half-written ledger.
+    await admin.putConnectorState(connectionId, bindingKey(binding.scopeId), synced);
+    return {
+        scopeId: binding.scopeId,
+        changed: true,
+        syncId: contentHash,
+        financialYearId: financialYear.Id,
+        balances: summary.balances.length,
+        pages: pageCount,
+        outOfRange: summary.outOfRange,
+    };
+}
+/**
+ * Poll Fortnox for every scope this connection is bound to — the {@link ConnectorSweeper}
+ * a deployment schedules.
+ *
+ * A timer calls this; it holds no timer itself. That keeps the trigger a deployment
+ * concern (`startPlatformSweeper` on node, `definePlatformSweeperDO`'s alarm on
+ * Cloudflare) and this a plain, testable function.
+ *
+ * Robust the way a poller must be: an unchanged year is skipped without landing
+ * anything, and a failure on one scope is recorded and stepped over rather than sinking
+ * the pass — one vertical's missing grant must not stop another tenant's books syncing.
+ */
+export async function sweepFortnoxLedger(host, connectionId, options) {
+    const rows = await host.admin.listConnectorState(connectionId, BINDING_PREFIX);
+    const result = { found: 0, synced: [], unchanged: 0, failed: [] };
+    for (const { value } of rows) {
+        // A tombstoned binding (`unbindFortnoxScope`) — present as a row, not a target.
+        if (value === null || typeof value !== 'object')
+            continue;
+        const binding = value;
+        result.found += 1;
+        try {
+            const r = await syncFortnoxScope(host, connectionId, binding, options);
+            if (r.changed)
+                result.synced.push(r);
+            else
+                result.unchanged += 1;
+        }
+        catch (err) {
+            result.failed.push({
+                scopeId: binding.scopeId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return result;
+}
+/**
+ * Probe a credential that is not stored yet — the connect-time check (#605).
+ *
+ * Takes the candidate secret directly, touches no connection and no store, and records
+ * no health: there may be no connection to record against, and a candidate's failure is
+ * not a fact about a live one.
+ *
+ * The probe is a token mint followed by `companyinformation`, and it must be both:
+ * minting alone proves the client pair and the consent, but only the company read proves
+ * the `TenantId` names a company this integration can actually see — which is the field
+ * an operator is most likely to paste wrong.
+ */
+export async function probeFortnoxSecret(secret, options) {
+    const parsed = fortnoxSecret.safeParse(secret);
+    if (!parsed.success) {
+        // A malformed credential IS a refusal — Fortnox would reject it, and there is no
+        // point spending a round trip to hear so.
+        return {
+            ok: false,
+            refused: true,
+            accountRef: null,
+            accountLabel: null,
+            facts: [],
+            error: `incomplete Fortnox credential: ${parsed.error.issues
+                .map((i) => i.path.join('.'))
+                .join(', ')}`,
+        };
+    }
+    const timeoutMs = options.timeoutMs ?? 15_000;
+    const conn = {
+        id: connectionIdSchema.parse('00000000000000000000000000'), // no row yet; never read
+        tenantId: '',
+        vertical: '',
+        provider: 'fortnox',
+        secret: parsed.data,
+        expiresAt: null,
+        fetch: (input, init) => options.fetch(input, { ...init, signal: AbortSignal.timeout(timeoutMs) }),
+    };
+    return probeWith(conn, options);
+}
+/** Probe the credential a live connection already holds. Verifying is itself a use. */
+export async function probeFortnoxConnection(host, connection, options) {
+    const conn = await openFortnoxConnection(host.admin, options.fetch, connection.tenantId, connection.vertical, options.timeoutMs ?? 15_000);
+    return probeWith(conn, options);
+}
+async function probeWith(conn, options) {
+    const api = new FortnoxApi(conn, {
+        apiBase: options.apiBase,
+        oauthBase: options.oauthBase,
+        now: options.now,
+    });
+    try {
+        const company = await api.companyInformation();
+        const years = await api.financialYears();
+        const ref = company.DatabaseNumber === undefined ? null : String(company.DatabaseNumber);
+        return {
+            ok: true,
+            refused: false,
+            accountRef: ref,
+            accountLabel: company.CompanyName || null,
+            facts: [
+                { label: 'Organisationsnummer', value: company.OrganizationNumber || '—' },
+                { label: 'Database number', value: ref ?? '—' },
+                {
+                    label: 'Financial years',
+                    value: years.length === 0
+                        ? 'none'
+                        : `${years.length} (${years
+                            .map((y) => y.FromDate.slice(0, 4))
+                            .sort()
+                            .join(', ')})`,
+                },
+            ],
+            error: null,
+        };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            // Only "not with these credentials" counts. A timeout or a 5xx says nothing about
+            // the credential, and treating it as a refusal would make a Fortnox outage look
+            // like every tenant's keys going bad at once.
+            refused: err instanceof FortnoxApiError && err.refused,
+            accountRef: null,
+            accountLabel: null,
+            facts: [],
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
+/**
+ * What this connection has been doing, for a console — one entry per bound scope.
+ *
+ * Reads the binding ledger rather than the provider: this answers "what has the platform
+ * synced", which is the question an operator asks when a figure looks stale, and it
+ * answers it without spending a provider round trip.
+ */
+export async function fortnoxConnectionActivity(host, connectionId) {
+    const rows = await host.admin.listConnectorState(connectionId, BINDING_PREFIX);
+    const entries = rows
+        .filter(({ value }) => value !== null && typeof value === 'object')
+        .map(({ key, value }) => {
+        const b = value;
+        return {
+            key,
+            title: `${b.vertical} — ${b.scopeId}`,
+            reference: b.lastSync ? String(b.lastSync.financialYearId) : null,
+            status: b.lastSync ? 'synced' : 'bound — not yet synced',
+            at: instant.parse(b.lastSync?.syncedAt ?? b.boundAt),
+            facts: [
+                { label: 'Lands through', value: b.operation },
+                { label: 'Permission', value: b.permission },
+                ...(b.lastSync
+                    ? [
+                        { label: 'Balances', value: String(b.lastSync.balances) },
+                        { label: 'Financial year', value: String(b.lastSync.financialYearId) },
+                        // The content hash IS the sync identity, so an operator comparing two
+                        // scopes can tell "same books" from "same moment" at a glance.
+                        { label: 'Content hash', value: b.lastSync.contentHash.slice(0, 12) },
+                    ]
+                    : []),
+            ],
+        };
+    });
+    return connectionActivity.parse({
+        source: 'ledger',
+        entries,
+        // Never live: this reads the binding ledger, never the provider. The ledger knows
+        // what the platform synced, not what Fortnox has since booked, and a console that
+        // blurs the two invents facts.
+        live: false,
+    });
+}
+/** Open the live Fortnox connection for a (tenant, vertical), with health recorded. */
+async function openFortnoxConnection(admin, fetchImpl, tenant, vertical, timeoutMs) {
+    const parsedTenant = tenantIdSchema.parse(tenant);
+    const open = await admin.openConnection(parsedTenant, vertical, 'fortnox');
+    if (!open) {
+        throw new Error(`no live 'fortnox' connection for tenant ${tenant} / vertical '${vertical}'`);
+    }
+    return {
+        ...open,
+        fetch: async (input, init) => {
+            try {
+                const res = await fetchImpl(input, { ...init, signal: AbortSignal.timeout(timeoutMs) });
+                await admin.recordConnectionUse(open.id, res.ok ? { ok: true } : { ok: false, error: `HTTP ${res.status} from fortnox` });
+                return res;
+            }
+            catch (err) {
+                await admin.recordConnectionUse(open.id, {
+                    ok: false,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+                throw err;
+            }
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,YAAY,IAAI,kBAAkB,EAClC,OAAO,EACP,KAAK,EACL,OAAO,IAAI,aAAa,EACxB,QAAQ,IAAI,cAAc,GAI3B,MAAM,yBAAyB,CAAC;AAOjC,OAAO,EACL,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,GACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAQtC,OAAO,EACL,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,GAId,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,SAAS,EACT,YAAY,EACZ,SAAS,EACT,OAAO,GAOR,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,GAGhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAA2B,MAAM,WAAW,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAW,CAAC;AAErD,4FAA4F;AAC5F,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,GAAG,cAAc,GAAG,KAAK,EAAE,CAAC;AA8C1E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC/B,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;KACf,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,yEAAyE;IACzE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,4EAA4E;IAC5E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClF,QAAQ,EAAE,CAAC,CAAC,KAAK,CACf,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,2EAA2E;QAC3E,MAAM,EAAE,KAAK;KACd,CAAC,CACH;CACF,CAAC,CAAC;AAGH,+CAA+C;AAC/C,MAAM,SAAS,GAAG,GAAG,CAAC;AAWtB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAe,EACf,KAQC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjD,sFAAsF;IACtF,mFAAmF;IACnF,uEAAuE;IACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CACvB,CAAC,CAA+C,EAAE,EAAE,CAClD,CAAC,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAC7E,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,CAAC,YAAY,mBAAmB,KAAK,CAAC,UAAU,cAAc,KAAK,CAAC,OAAO,KAAK;YACjG,0EAA0E;YAC1E,iCAAiC,CACpC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAmB;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;KAC7D,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAe,EACf,YAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,kFAAkF;IAClF,6CAA6C;IAC7C,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;SAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAuB,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAe,EACf,YAA0B,EAC1B,OAAe;IAEf,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AAC9E,CAAC;AAeD,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;IACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAe,EACf,YAA0B,EAC1B,OAAuB,EACvB,OAA4E;IAE5E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,qBAAqB,CACtC,KAAK,EACL,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,IAAI,MAAM,CAC5B,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,QAAQ,EAAE,EAAE,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;IAEhF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;IACzC,+EAA+E;IAC/E,sBAAsB;IACtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,CAAC;YACR,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAChD,mEAAmE;IACnE,EAAE;IACF,gFAAgF;IAChF,oFAAoF;IACpF,qFAAqF;IACrF,qFAAqF;IACrF,sFAAsF;IACtF,oFAAoF;IACpF,qFAAqF;IACrF,qFAAqF;IACrF,mFAAmF;IACnF,8DAA8D;IAC9D,EAAE;IACF,oFAAoF;IACpF,kFAAkF;IAClF,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,GAAG,aAAa,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW;YACnB,eAAe,EAAE,aAAa,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;YACnC,KAAK,EAAE,CAAC;YACR,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhD,sFAAsF;IACtF,sFAAsF;IACtF,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC9E,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC;YACtC,MAAM,EAAE,WAAW;YACnB,YAAY;YACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE;YAChF,aAAa,EAAE;gBACb,EAAE,EAAE,aAAa,CAAC,EAAE;gBACpB,IAAI,EAAE,aAAa,CAAC,QAAQ;gBAC5B,EAAE,EAAE,aAAa,CAAC,MAAM;aACzB;YACD,IAAI;YACJ,SAAS;YACT,KAAK,EAAE,IAAI,KAAK,SAAS,GAAG,CAAC;YAC7B,gFAAgF;YAChF,+EAA+E;YAC/E,WAAW;YACX,QAAQ,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC5C,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YAClD,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,GAAG,OAAO;QACV,QAAQ,EAAE;YACR,eAAe,EAAE,aAAa,CAAC,EAAE;YACjC,QAAQ,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YACvC,WAAW;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;SAClC;KACF,CAAC;IACF,sFAAsF;IACtF,sFAAsF;IACtF,uBAAuB;IACvB,MAAM,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAEjF,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,WAAW;QACnB,eAAe,EAAE,aAAa,CAAC,EAAE;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;QACjC,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAe,EACf,YAA0B,EAC1B,OAA4E;IAE5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAEtF,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QAC7B,gFAAgF;QAChF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC1D,MAAM,OAAO,GAAG,KAAuB,CAAC;QACxC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,CAAC,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAChC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA8B,EAC9B,OAAgC;IAEhC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,iFAAiF;QACjF,0CAA0C;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,kCAAkC,MAAM,CAAC,KAAK,CAAC,MAAM;iBACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;iBAC5B,IAAI,CAAC,IAAI,CAAC,EAAE;SAChB,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,IAAI,GAAwB;QAChC,EAAE,EAAE,kBAAkB,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,yBAAyB;QACrF,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;KAC5E,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAe,EACf,UAAkD,EAClD,OAAgC;IAEhC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CACtC,IAAI,CAAC,KAAK,EACV,OAAO,CAAC,KAAK,EACb,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,QAAQ,EACnB,OAAO,CAAC,SAAS,IAAI,MAAM,CAC5B,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAyB,EACzB,OAAgC;IAEhC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,GAAG;YACf,YAAY,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACzC,KAAK,EAAE;gBACL,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,kBAAkB,IAAI,GAAG,EAAE;gBAC1E,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,IAAI,GAAG,EAAE;gBAC/C;oBACE,KAAK,EAAE,iBAAiB;oBACxB,KAAK,EACH,KAAK,CAAC,MAAM,KAAK,CAAC;wBAChB,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK;6BACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;6BAClC,IAAI,EAAE;6BACN,IAAI,CAAC,IAAI,CAAC,GAAG;iBACvB;aACF;YACD,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,kFAAkF;YAClF,gFAAgF;YAChF,8CAA8C;YAC9C,OAAO,EAAE,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,OAAO;YACtD,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAe,EACf,YAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI;SACjB,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;SAClE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACtB,MAAM,CAAC,GAAG,KAAuB,CAAC;QAClC,OAAO;YACL,GAAG;YACH,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,OAAO,EAAE;YACrC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB;YACxD,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC;YACpD,KAAK,EAAE;gBACL,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE;gBAC9C,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE;gBAC5C,GAAG,CAAC,CAAC,CAAC,QAAQ;oBACZ,CAAC,CAAC;wBACE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;wBACzD,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;wBACtE,sEAAsE;wBACtE,+DAA+D;wBAC/D,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;qBACtE;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,MAAM,EAAE,QAAQ;QAChB,OAAO;QACP,kFAAkF;QAClF,kFAAkF;QAClF,+BAA+B;QAC/B,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,qBAAqB,CAClC,KAAgB,EAChB,SAAoB,EACpB,MAAc,EACd,QAAgB,EAChB,SAAiB;IAEjB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,gBAAgB,QAAQ,GAAG,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACxF,MAAM,KAAK,CAAC,mBAAmB,CAC7B,IAAI,CAAC,EAAE,EACP,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,eAAe,EAAE,CAChF,CAAC;gBACF,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE;oBACvC,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mock.d.ts

@@ -0,0 +1,59 @@
+import type { FetchLike } from '@substrat-run/kernel';
+/**
+ * Fortnox in memory — the token endpoint and the three REST reads, enough to run the
+ * whole sweep without a provider account.
+ *
+ * **What a mock proves:** that our shape works — the client-credentials mint, the
+ * latin1 decode, the year-overlap pick, the paging, the unchanged-hash skip.
+ * **What it cannot prove:** that our reading of Fortnox's API is correct. The mock IS
+ * our reading. Green here means *ready to check against a real company*, which is what
+ * `test/live.test.ts` does when a credential is present.
+ *
+ * The one thing it models with real bytes rather than a convenient string is the SIE
+ * response: {@link FortnoxMock.sieBytes} encodes to ISO-8859-1, so a connector that
+ * forgot to decode explicitly fails here rather than in production with mangled
+ * account names.
+ */
+export interface FortnoxMockOptions {
+    clientId?: string;
+    clientSecret?: string;
+    tenantId?: string;
+    company?: {
+        CompanyName: string;
+        OrganizationNumber: string;
+        DatabaseNumber: number;
+    };
+    financialYears?: {
+        Id: number;
+        FromDate: string;
+        ToDate: string;
+    }[];
+    /** SIE4 text per financial-year id. */
+    sie?: Record<number, string>;
+    /** Seconds a minted token claims to live. */
+    expiresIn?: number;
+}
+/** Encode to ISO-8859-1. Any code point above 0xff becomes `?`, exactly as Fortnox would. */
+export declare function latin1Bytes(text: string): Uint8Array;
+export declare class FortnoxMock {
+    readonly apiBase = "https://api.fortnox.test/3";
+    readonly oauthBase = "https://apps.fortnox.test/oauth-v1";
+    private readonly clientId;
+    private readonly clientSecret;
+    private readonly tenantId;
+    private readonly company;
+    private readonly years;
+    private readonly sie;
+    private readonly expiresIn;
+    /** Every token this mock has minted — a test asserts the mint happened exactly once. */
+    readonly mints: string[];
+    /** Every REST path fetched, in order. */
+    readonly calls: string[];
+    constructor(options?: FortnoxMockOptions);
+    /** Replace one year's SIE payload — how a test simulates "the books changed". */
+    setSie(financialYearId: number, text: string): void;
+    private json;
+    /** The `fetch` a connector is handed. */
+    readonly fetch: FetchLike;
+}
+//# sourceMappingURL=mock.d.ts.map

package/dist/mock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../src/mock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAMtD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,cAAc,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpE,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAOpD;AAED,qBAAa,WAAW;IACtB,QAAQ,CAAC,OAAO,gCAAgC;IAChD,QAAQ,CAAC,SAAS,wCAAwC;IAE1D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoD;IAC1E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,wFAAwF;IACxF,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAM;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAM;IAE9B,YAAY,OAAO,GAAE,kBAAuB,EAe3C;IAED,iFAAiF;IACjF,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAElD;IAED,OAAO,CAAC,IAAI;IAUZ,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,CA0DvB;CACH"}