@substrat-run/control-plane-api 0.163.0 → 0.165.0

package/dist/vertical-connectors.js

@@ -0,0 +1,428 @@
+import { CONNECTOR_DISPATCH_KIND_PREFIX, VERTICAL_CONNECTOR_BINDING_PREFIX, connectionProbe, connectorBindResult, connectorCallConnection, connectorCallResponse, CONNECTOR_CALL_STATE_MAX_BYTES, CONNECTOR_CALL_STATE_MAX_KEYS, connectorCallState, connectorDispatchPayload, connectorSweepResult, scopeId as scopeIdSchema, verticalConnectorBinding, verticalConnectorBindingKey, verticalConnectorStateKey, verticalConnectorStatePrefix, } from '@substrat-run/contracts';
+import { isPrimaryScope, runningVersionOf } from '@substrat-run/kernel';
+/** {@link VerticalConnectorReads} over a host's directory and registry, read as `actor`. */
+export function verticalConnectorReadsOf(host, actor) {
+    return {
+        scope: (tenantId, scopeId) => host.admin.getScopeRecord(actor, tenantId, scopeId),
+        serving: async (vertical) => {
+            const serving = await host.admin.verticalServing(actor, vertical);
+            return serving ? { ref: serving.ref, versionId: serving.versionId } : null;
+        },
+        prodVersionId: async (vertical) => (await host.admin.listChannels(actor, vertical)).find((c) => c.channel === 'prod')?.versionId ?? null,
+        version: (vertical, versionId) => host.admin.getVersion(actor, versionId, vertical),
+        connectors: (vertical, versionId) => host.versionConnectors(vertical, versionId),
+    };
+}
+/**
+ * Which declaration a call runs and where it goes (§6.3, §6.4) — `VerticalConnectorDeps.resolve`.
+ * A scoped call runs the scope's RUNNING version (`runningVersionOf`) in the deployment that holds
+ * its data: its serving script, else that version's own. A connection-level call runs the
+ * vertical's serving version, else its prod channel's. The declaration is read off that version's
+ * stored manifest on every call, so a promote that drops a connector stops it at the next one; the
+ * hosts are that version's declared `outbound`.
+ */
+export async function resolveVerticalConnectorTarget(reads, { tenantId, vertical, scopeId, provider }) {
+    let versionId;
+    let deploymentRef = null;
+    if (scopeId) {
+        const scope = await reads.scope(tenantId, scopeId);
+        if (!scope || scope.vertical !== vertical)
+            return { refused: `scope ${scopeId} is not an install of '${vertical}' in tenant ${tenantId}` };
+        if (!isPrimaryScope(scope))
+            return { refused: `scope ${scopeId} is a preview or a fork, and those cause no outbound effects` };
+        // The serving pointer matters only to a scope on the serving script (`runningVersionOf`).
+        const serving = scope.servingRef ? await reads.serving(vertical) : null;
+        versionId = runningVersionOf(scope, serving);
+        deploymentRef = scope.servingRef ?? null;
+    }
+    else {
+        const serving = await reads.serving(vertical);
+        if (serving) {
+            versionId = serving.versionId;
+            deploymentRef = serving.ref;
+        }
+        else {
+            versionId = await reads.prodVersionId(vertical);
+        }
+    }
+    if (!versionId)
+        return { refused: `no version of '${vertical}' runs${scopeId ? ` for scope ${scopeId}` : ''}` };
+    const version = await reads.version(vertical, versionId);
+    if (!version)
+        return { refused: `version ${versionId} of '${vertical}' is not in the registry` };
+    deploymentRef ??= version.deploymentRef;
+    if (!deploymentRef)
+        return { refused: `version ${versionId} of '${vertical}' has no deployment` };
+    const fact = await reads.connectors(vertical, versionId);
+    if (fact.kind === 'unreadable')
+        return { refused: `the connectors version ${versionId} of '${vertical}' declares cannot be read: ${fact.reason}` };
+    const declaration = fact.kind === 'connectors' ? fact.rows.find((d) => d.provider === provider) : undefined;
+    if (!declaration)
+        return { refused: `version ${versionId} of '${vertical}' does not declare the connector '${provider}'` };
+    return { declaration, target: { deploymentRef, slug: vertical, tenantId, scopeId, hosts: version.outbound ?? [] } };
+}
+const message = (e) => (e instanceof Error ? e.message : String(e));
+const USE_ERROR_MAX = 600;
+/**
+ * The live credential for `row`, as a call carries it. Refused when the live connection for its
+ * (tenant, vertical, provider, account) is not `row` itself: the credential that is sent and the
+ * connection the call's uses and state are recorded against must be the same row.
+ */
+async function openFor(deps, row) {
+    const open = await deps.host.admin.openConnection(row.tenantId, row.vertical, row.provider, row.externalAccountRef ?? undefined);
+    if (!open)
+        throw new Error(`no live '${row.provider}' connection for tenant ${row.tenantId} / vertical '${row.vertical}'`);
+    if (open.id !== row.id) {
+        throw new Error(`connection ${row.id} is not the live '${row.provider}' connection for tenant ${row.tenantId} / vertical ` +
+            `'${row.vertical}' (that is ${open.id}): the credential sent and the connection recorded must be the same`);
+    }
+    for (const [key, value] of Object.entries(open.secret)) {
+        if (typeof value !== 'string') {
+            throw new Error(`the stored credential of connection ${row.id} holds a non-string value under '${key}'; a vertical-defined connector is handed strings only`);
+        }
+    }
+    return connectorCallConnection.parse({
+        id: open.id,
+        tenantId: row.tenantId,
+        vertical: row.vertical,
+        provider: row.provider,
+        externalAccountRef: row.externalAccountRef,
+        expiresAt: open.expiresAt,
+        secret: open.secret,
+    });
+}
+/** The connector's state for one call — the connection's, or one scope's — without its storage prefix. */
+async function stateOf(host, id, scopeId) {
+    const prefix = verticalConnectorStatePrefix(scopeId);
+    const rows = await host.admin.listConnectorState(id, prefix);
+    const parsed = connectorCallState.safeParse(rows.filter((r) => r.value !== null).map((r) => ({ key: r.key.slice(prefix.length), value: r.value })));
+    if (!parsed.success) {
+        throw new Error(`the connector state of ${scopeId === null ? 'the connection' : `scope ${scopeId}`} does not fit one call: ${parsed.error.issues[0]?.message ?? 'invalid'}`);
+    }
+    return parsed.data;
+}
+/**
+ * Make one call and apply its answer (§6.2, §6.3). A succeeded call's state writes land, then its
+ * recorded uses; a failed one's uses only, so a cursor never moves past work that did not land. A
+ * call that never produced an answer (a transport throw, a non-200, a body that is not a response)
+ * records one failed use and is reported retryable.
+ */
+async function applyConnectorCall(deps, connectionId, scopeId, target, request) {
+    const unanswered = async (error) => {
+        await deps.host.admin.recordConnectionUse(connectionId, { ok: false, error: error.slice(0, USE_ERROR_MAX) });
+        return { ok: false, refused: false, error };
+    };
+    let answer;
+    try {
+        answer = await deps.call(target, request);
+    }
+    catch (e) {
+        return unanswered(`the call into the vertical's connector did not complete: ${message(e)}`);
+    }
+    if (answer.status !== 200)
+        return unanswered(`the vertical's connector answered HTTP ${answer.status}`);
+    const parsed = connectorCallResponse.safeParse(answer.body);
+    if (!parsed.success)
+        return unanswered("the vertical's connector answered something that is not a connector-call response");
+    const response = parsed.data;
+    // The uses happened whatever becomes of the state, so every outcome records them; a succeeded
+    // call's state lands first.
+    const recordUses = async () => {
+        for (const use of response.uses)
+            await deps.host.admin.recordConnectionUse(connectionId, use);
+    };
+    if (!response.ok) {
+        await recordUses();
+        return { ok: false, refused: response.refused, error: response.error };
+    }
+    // The cap holds the TOTAL a later call carries, not only this call's writes: state that grew
+    // past it would refuse every later call, and the connector could never run to delete keys.
+    const over = response.state.length > 0 ? await stateCapAfter(deps.host, connectionId, scopeId, response.state) : null;
+    if (over) {
+        await recordUses();
+        return { ok: false, refused: false, error: over };
+    }
+    for (const w of response.state) {
+        await deps.host.admin.putConnectorState(connectionId, verticalConnectorStateKey(scopeId, w.key), w.value === undefined ? null : w.value);
+    }
+    await recordUses();
+    return { ok: true, result: response.result };
+}
+/**
+ * Why `writes` may not land on the stored state of `scopeId` (null for the connection's own), or
+ * null when the merged state (stored, then the writes, a `null` deleting) fits one call's cap.
+ */
+async function stateCapAfter(host, id, scopeId, writes) {
+    const prefix = verticalConnectorStatePrefix(scopeId);
+    const merged = new Map();
+    for (const r of await host.admin.listConnectorState(id, prefix))
+        if (r.value !== null)
+            merged.set(r.key.slice(prefix.length), r.value);
+    for (const w of writes) {
+        if (w.value === null || w.value === undefined)
+            merged.delete(w.key);
+        else
+            merged.set(w.key, w.value);
+    }
+    const fits = connectorCallState.safeParse([...merged].map(([key, value]) => ({ key, value })));
+    if (fits.success)
+        return null;
+    return (`connector state would exceed what one call carries (${CONNECTOR_CALL_STATE_MAX_KEYS} keys, ${CONNECTOR_CALL_STATE_MAX_BYTES} bytes ` +
+        `serialised) with ${merged.size} keys: nothing was written; the connector must delete keys`);
+}
+/** The bindings the platform holds for a connection, tombstones and unreadable rows left out. */
+async function storedBindings(host, id) {
+    const rows = await host.admin.listConnectorState(id, VERTICAL_CONNECTOR_BINDING_PREFIX);
+    return rows.flatMap((r) => {
+        if (r.value === null)
+            return [];
+        const b = verticalConnectorBinding.safeParse(r.value);
+        return b.success ? [b.data] : [];
+    });
+}
+/**
+ * The poll floor for one vertical-defined connection: one call per bound scope, to that scope's own
+ * deployment, carrying that scope's state (§6.1). Built per connection, since the pass hands a
+ * sweeper only an id. Answers `{ found, failed, landed }`, which the pass reads
+ * (`connectorSweepAnswerOf`).
+ */
+export function verticalConnectorSweeper(deps, connection) {
+    return async (_host, connectionId) => {
+        if (connectionId !== connection.id)
+            throw new Error(`this sweeper was built for connection ${connection.id}, not ${connectionId}`);
+        const rows = (await deps.host.admin.listConnectorState(connection.id, VERTICAL_CONNECTOR_BINDING_PREFIX)).filter((r) => r.value !== null);
+        const failed = [];
+        let found = 0;
+        let landed = 0;
+        if (rows.length === 0)
+            return { found, failed, landed };
+        const opened = await openFor(deps, connection);
+        for (const row of rows) {
+            const scopeId = row.key.slice(VERTICAL_CONNECTOR_BINDING_PREFIX.length);
+            found += 1;
+            const binding = verticalConnectorBinding.safeParse(row.value);
+            if (!binding.success || binding.data.scopeId !== scopeId) {
+                failed.push({ scopeId, error: 'its stored binding does not read as one' });
+                continue;
+            }
+            try {
+                const resolved = await deps.resolve({ tenantId: connection.tenantId, vertical: connection.vertical, scopeId: binding.data.scopeId, provider: connection.provider });
+                if ('refused' in resolved) {
+                    failed.push({ scopeId, error: resolved.refused });
+                    continue;
+                }
+                if (!resolved.declaration.sweeps) {
+                    // A connector with no sweep polls nothing; its binding is the dispatch's, not a poll's.
+                    found -= 1;
+                    continue;
+                }
+                const state = await stateOf(deps.host, connection.id, scopeId);
+                const outcome = await applyConnectorCall(deps, connection.id, scopeId, resolved.target, {
+                    role: 'sweep',
+                    provider: connection.provider,
+                    connection: opened,
+                    binding: binding.data,
+                    state,
+                });
+                if (!outcome.ok) {
+                    failed.push({ scopeId, error: outcome.error });
+                    continue;
+                }
+                const result = connectorSweepResult.safeParse(outcome.result);
+                if (result.success)
+                    landed += result.data.landed;
+                else
+                    failed.push({ scopeId, error: 'the connector answered a sweep result that does not read as one' });
+            }
+            catch (e) {
+                failed.push({ scopeId, error: message(e) });
+            }
+        }
+        return { found, failed, landed };
+    };
+}
+/**
+ * Write `connection`'s binding to one scope (§6.1). Refused unless the scope's enforced tuples give
+ * the connection the binding's key; the connector's `bind` hook, when it declares one, normalises
+ * the options first, and a connector without one takes none.
+ */
+async function bindScope(deps, host, connection, target) {
+    const { tenantId, scopeId: rawScope, vertical, operation, permission, ...raw } = target;
+    if (tenantId !== connection.tenantId || vertical !== connection.vertical) {
+        throw new Error(`connection ${connection.id} belongs to tenant ${connection.tenantId} / vertical '${connection.vertical}', not to the scope's`);
+    }
+    const scopeId = scopeIdSchema.parse(rawScope);
+    const grants = await host.connectionGrantsInScope(connection.tenantId, scopeId);
+    if (!grants.some((g) => g.connectionId === connection.id && g.permission === permission)) {
+        throw new Error(`connection ${connection.id} does not hold '${permission}' on scope ${scopeId} — what it read could not land. ` +
+            'Grant it first (grantToConnection), then bind.');
+    }
+    const resolved = await deps.resolve({ tenantId: connection.tenantId, vertical: connection.vertical, scopeId, provider: connection.provider });
+    if ('refused' in resolved)
+        throw new Error(resolved.refused);
+    let options = raw;
+    if (resolved.declaration.binds) {
+        const outcome = await applyConnectorCall(deps, connection.id, scopeId, resolved.target, {
+            role: 'bind',
+            provider: connection.provider,
+            connection: await openFor(deps, connection),
+            scopeId,
+            options: raw,
+        });
+        if (!outcome.ok)
+            throw new Error(`the ${connection.provider} connector ${outcome.refused ? 'refused' : 'could not complete'} the binding: ${outcome.error}`);
+        const result = connectorBindResult.safeParse(outcome.result);
+        if (!result.success)
+            throw new Error(`the ${connection.provider} connector answered a binding that does not read as one`);
+        options = result.data.options;
+    }
+    else if (Object.keys(raw).length > 0) {
+        throw new Error(`'${connection.provider}' takes no binding options (its connector declares no bind); got ${Object.keys(raw).join(', ')}`);
+    }
+    const binding = verticalConnectorBinding.parse({ scopeId, operation, permission, options, declared: raw, boundAt: deps.now() });
+    await host.admin.putConnectorState(connection.id, verticalConnectorBindingKey(scopeId), binding);
+    return binding;
+}
+const LISTED_FIXED = new Set(['scopeId', 'operation', 'permission']);
+/**
+ * The binder the landing pass binds a vertical-defined connection with (#2316). It lists each
+ * binding's DECLARED options, so the pass compares a declaration with what was declared, never with
+ * what the connector's `bind` hook normalised it to.
+ */
+export function verticalConnectorBinder(deps) {
+    return {
+        list: async (host, connection) => (await storedBindings(host, connection.id)).map((b) => ({ ...b.declared, scopeId: b.scopeId, operation: b.operation, permission: b.permission })),
+        bind: (host, connection, target) => bindScope(deps, host, connection, target),
+        // Validated at bind, by the connector. A current binding's options survive unless overridden.
+        options: (raw, current) => ({
+            ...(current ? Object.fromEntries(Object.entries(current).filter(([k]) => !LISTED_FIXED.has(k))) : {}),
+            ...(raw ?? {}),
+        }),
+    };
+}
+const probeFailure = (error, refused = false) => ({
+    ok: false,
+    refused,
+    accountRef: null,
+    accountLabel: null,
+    facts: [],
+    error: error.slice(0, USE_ERROR_MAX),
+});
+/** A probe call's outcome as the probe routes read it. */
+function probeOf(outcome) {
+    if (!outcome.ok)
+        return probeFailure(outcome.error, outcome.refused);
+    const probe = connectionProbe.safeParse(outcome.result);
+    return probe.success ? probe.data : probeFailure('the connector answered a probe that does not read as one');
+}
+function scopeBindingOf(connection, b) {
+    return {
+        ...b.options,
+        operation: b.operation,
+        permission: b.permission,
+        tenantId: connection.tenantId,
+        scopeId: b.scopeId,
+        vertical: connection.vertical,
+        boundAt: b.boundAt,
+    };
+}
+/**
+ * What the inspection routes and the relay's connect-time gate ask of a vertical-defined provider,
+ * for one (tenant, vertical). `activity`, `credential` and `certificate` are absent, so those
+ * routes keep answering 501 / 404 for such a connection.
+ */
+export function verticalConnectorInspector(deps, provider, context) {
+    return {
+        // A probe that cannot run is an answer the verify route shows, never a 500.
+        probe: async (host, connection) => {
+            try {
+                const resolved = await deps.resolve({ tenantId: connection.tenantId, vertical: connection.vertical, scopeId: null, provider: connection.provider });
+                if ('refused' in resolved)
+                    return probeFailure(resolved.refused);
+                const opened = await openFor(deps, connection);
+                const state = await stateOf(host, connection.id, null);
+                return probeOf(await applyConnectorCall(deps, connection.id, null, resolved.target, { role: 'probe', provider: connection.provider, connection: opened, state }));
+            }
+            catch (e) {
+                return probeFailure(`the probe could not run: ${message(e)}`);
+            }
+        },
+        // To the vertical's serving deployment (§6.3), so not the asking scope's. No connection exists
+        // yet, so nothing is recorded and no state is applied.
+        probeCandidate: async (secret) => {
+            const resolved = await deps.resolve({ tenantId: context.tenantId, vertical: context.vertical, scopeId: null, provider });
+            if ('refused' in resolved)
+                return probeFailure(resolved.refused);
+            let answer;
+            try {
+                answer = await deps.call(resolved.target, { role: 'probe-candidate', provider, secret });
+            }
+            catch (e) {
+                return probeFailure(`the call into the vertical's connector did not complete: ${message(e)}`);
+            }
+            if (answer.status !== 200)
+                return probeFailure(`the vertical's connector answered HTTP ${answer.status}`);
+            const parsed = connectorCallResponse.safeParse(answer.body);
+            if (!parsed.success)
+                return probeFailure("the vertical's connector answered something that is not a connector-call response");
+            const r = parsed.data;
+            return probeOf(r.ok ? { ok: true, result: r.result } : { ok: false, refused: r.refused, error: r.error });
+        },
+        bindScope: async (host, connection, target) => scopeBindingOf(connection, await bindScope(deps, host, connection, target)),
+        bindings: async (host, connection) => (await storedBindings(host, connection.id)).map((b) => scopeBindingOf(connection, b)),
+    };
+}
+/**
+ * The `connector:<namespace>.<name>` handler: one routed event, dispatched into the drained scope's
+ * own deployment with that scope's binding (or none) and state. Expressed as
+ * `connectorDispatchHandler` expresses its outcomes: a refusal settles `failed`, anything retryable
+ * throws (the drain settles it `pending`), and a delivered event is `done`.
+ */
+export function verticalConnectorDispatchHandler(deps) {
+    return async (ctx, request) => {
+        const provider = request.kind.slice(CONNECTOR_DISPATCH_KIND_PREFIX.length);
+        const payload = connectorDispatchPayload.parse(request.payload);
+        if (payload.event.tenantId !== ctx.tenantId || payload.event.scopeId !== ctx.scopeId) {
+            return {
+                status: 'failed',
+                error: `routed event ${payload.event.id} is stamped (${payload.event.tenantId}, ${payload.event.scopeId}), ` +
+                    `which is not the drained scope (${ctx.tenantId}, ${ctx.scopeId})`,
+            };
+        }
+        const rows = await deps.host.admin.listConnections(deps.actor, { tenantId: ctx.tenantId, vertical: ctx.vertical, provider });
+        if (rows.length !== 1) {
+            throw new Error(rows.length === 0
+                ? `no live '${provider}' connection for tenant ${ctx.tenantId} / vertical '${ctx.vertical}'`
+                : `tenant ${ctx.tenantId} holds ${rows.length} live '${provider}' connections for vertical '${ctx.vertical}'; a routed event names none of them`);
+        }
+        const row = rows[0];
+        const resolved = await deps.resolve({ tenantId: ctx.tenantId, vertical: ctx.vertical, scopeId: ctx.scopeId, provider });
+        if ('refused' in resolved)
+            throw new Error(resolved.refused);
+        const opened = await openFor(deps, row);
+        const stored = await deps.host.admin.getConnectorState(row.id, verticalConnectorBindingKey(ctx.scopeId));
+        let binding = null;
+        if (stored !== undefined && stored !== null) {
+            const parsed = verticalConnectorBinding.safeParse(stored);
+            if (!parsed.success)
+                throw new Error(`the stored binding of connection ${row.id} to scope ${ctx.scopeId} does not read as one`);
+            binding = parsed.data;
+        }
+        const state = await stateOf(deps.host, row.id, ctx.scopeId);
+        const outcome = await applyConnectorCall(deps, row.id, ctx.scopeId, resolved.target, {
+            role: 'dispatch',
+            provider,
+            connection: opened,
+            scopeId: ctx.scopeId,
+            binding,
+            event: payload.event,
+            state,
+        });
+        if (outcome.ok)
+            return { status: 'done', result: { eventId: payload.event.id } };
+        if (outcome.refused)
+            return { status: 'failed', error: `the ${provider} connector refused event ${payload.event.id}: ${outcome.error}` };
+        throw new Error(outcome.error);
+    };
+}
+//# sourceMappingURL=vertical-connectors.js.map

package/dist/vertical-connectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vertical-connectors.js","sourceRoot":"","sources":["../src/vertical-connectors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,8BAA8B,EAC9B,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,OAAO,IAAI,aAAa,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,4BAA4B,GAc7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAqF,MAAM,sBAAsB,CAAC;AAoD3J,4FAA4F;AAC5F,MAAM,UAAU,wBAAwB,CACtC,IAAwH,EACxH,KAAsB;IAEtB,OAAO;QACL,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;QACjF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7E,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,SAAS,IAAI,IAAI;QACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;QACnF,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC;KACjF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA6B,EAC7B,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAmD;IAE1F,IAAI,SAAwB,CAAC;IAC7B,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,OAAO,0BAA0B,QAAQ,eAAe,QAAQ,EAAE,EAAE,CAAC;QAC3I,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,OAAO,8DAA8D,EAAE,CAAC;QAC/H,0FAA0F;QAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,aAAa,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAC9B,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,QAAQ,SAAS,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IAChH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,SAAS,QAAQ,QAAQ,0BAA0B,EAAE,CAAC;IACjG,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC;IACxC,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,SAAS,QAAQ,QAAQ,qBAAqB,EAAE,CAAC;IAClG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,SAAS,QAAQ,QAAQ,8BAA8B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACnJ,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,SAAS,QAAQ,QAAQ,qCAAqC,QAAQ,GAAG,EAAE,CAAC;IAC3H,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,EAAE,CAAC;AACtH,CAAC;AAKD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;;GAIG;AACH,KAAK,UAAU,OAAO,CAAC,IAAyC,EAAE,GAAkB;IAClF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS,CAAC,CAAC;IACjI,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,QAAQ,2BAA2B,GAAG,CAAC,QAAQ,gBAAgB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3H,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,cAAc,GAAG,CAAC,EAAE,qBAAqB,GAAG,CAAC,QAAQ,2BAA2B,GAAG,CAAC,QAAQ,cAAc;YACxG,IAAI,GAAG,CAAC,QAAQ,cAAc,IAAI,CAAC,EAAE,qEAAqE,CAC7G,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAiC,CAAC,EAAE,CAAC;QAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,EAAE,oCAAoC,GAAG,wDAAwD,CAAC,CAAC;QAChK,CAAC;IACH,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACnC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,OAAO,CAAC,IAAe,EAAE,EAAgB,EAAE,OAAsB;IAC9E,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CACzC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CACvG,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,2BAA2B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE,CAC5J,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAA2B,EAC3B,YAA0B,EAC1B,OAAsB,EACtB,MAA+B,EAC/B,OAA6B;IAE7B,MAAM,UAAU,GAAG,KAAK,EAAE,KAAa,EAAwB,EAAE;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAC7G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC,CAAC;IACF,IAAI,MAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,UAAU,CAAC,4DAA4D,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC,0CAA0C,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,mFAAmF,CAAC,CAAC;IAC5H,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,8FAA8F;IAC9F,4BAA4B;IAC5B,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzE,CAAC;IACD,6FAA6F;IAC7F,2FAA2F;IAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtH,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3I,CAAC;IACD,MAAM,UAAU,EAAE,CAAC;IACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAe,EACf,EAAgB,EAChB,OAAsB,EACtB,MAAkD;IAElD,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACvI,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;YAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,CACL,uDAAuD,6BAA6B,UAAU,8BAA8B,SAAS;QACrI,oBAAoB,MAAM,CAAC,IAAI,4DAA4D,CAC5F,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,cAAc,CAAC,IAAe,EAAE,EAAgB;IAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA2B,EAAE,UAAsB;IAC1F,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;QACnC,IAAI,YAAY,KAAK,UAAU,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC,CAAC;QACnI,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAC1I,MAAM,MAAM,GAAyC,EAAE,CAAC;QACxD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC;YACxE,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;gBAC3E,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACpK,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;oBACjC,wFAAwF;oBACxF,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACtF,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9D,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;;oBAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAC;YAC1G,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAKD;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,IAA2B,EAAE,IAAe,EAAE,UAAsB,EAAE,MAAkB;IAC/G,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC;IACxF,IAAI,QAAQ,KAAK,UAAU,CAAC,QAAQ,IAAI,QAAQ,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,CAAC,EAAE,sBAAsB,UAAU,CAAC,QAAQ,gBAAgB,UAAU,CAAC,QAAQ,uBAAuB,CAAC,CAAC;IAClJ,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,CAAC,EAAE,mBAAmB,UAAU,cAAc,OAAO,kCAAkC;YAC7G,gDAAgD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9I,IAAI,SAAS,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,OAAO,GAA4B,GAAG,CAAC;IAC3C,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACtF,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;YAC3C,OAAO;YACP,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,UAAU,CAAC,QAAQ,cAAc,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,iBAAiB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7J,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,UAAU,CAAC,QAAQ,yDAAyD,CAAC,CAAC;QAC1H,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;IAChC,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,oEAAoE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5I,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAChI,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACjG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAErE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAC/B,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACnJ,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;QAC7E,8FAA8F;QAC9F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACf,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,OAAO,GAAG,KAAK,EAAmB,EAAE,CAAC,CAAC;IACzE,EAAE,EAAE,KAAK;IACT,OAAO;IACP,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,IAAI;IAClB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;CACrC,CAAC,CAAC;AAEH,0DAA0D;AAC1D,SAAS,OAAO,CAAC,OAAoB;IACnC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,0DAA0D,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,cAAc,CAAC,UAAsB,EAAE,CAA2B;IACzE,OAAO;QACL,GAAG,CAAC,CAAC,OAAO;QACZ,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAA2B,EAC3B,QAAgB,EAChB,OAA0E;IAE1E,OAAO;QACL,4EAA4E;QAC5E,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACpJ,IAAI,SAAS,IAAI,QAAQ;oBAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACvD,OAAO,OAAO,CACZ,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAClJ,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,4BAA4B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,+FAA+F;QAC/F,uDAAuD;QACvD,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzH,IAAI,SAAS,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,MAAyC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,4DAA4D,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,YAAY,CAAC,0CAA0C,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1G,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,YAAY,CAAC,mFAAmF,CAAC,CAAC;YAC9H,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAA+B,CAAC,CAAC;QACnJ,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;KAC5H,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAA2B;IAC1E,OAAO,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YACrF,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,KAAK,EACH,gBAAgB,OAAO,CAAC,KAAK,CAAC,EAAE,gBAAgB,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK;oBACrG,mCAAmC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,GAAG;aACrE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7H,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,IAAI,CAAC,MAAM,KAAK,CAAC;gBACf,CAAC,CAAC,YAAY,QAAQ,2BAA2B,GAAG,CAAC,QAAQ,gBAAgB,GAAG,CAAC,QAAQ,GAAG;gBAC5F,CAAC,CAAC,UAAU,GAAG,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,UAAU,QAAQ,+BAA+B,GAAG,CAAC,QAAQ,sCAAsC,CACnJ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxH,IAAI,SAAS,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACzG,IAAI,OAAO,GAAoC,IAAI,CAAC;QACpD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC;YAChI,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACnF,IAAI,EAAE,UAAU;YAChB,QAAQ;YACR,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,QAAQ,4BAA4B,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACzI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/control-plane-api",
-  "version": "0.163.0",
+  "version": "0.165.0",
   "description": "HTTP surface over HostAdmin — the audited control-plane transport (control-plane.md §4.5)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -27,9 +27,9 @@
   ],
   "dependencies": {
     "hono": "^4.13.13",
-    "@substrat-run/contracts": "^0.163.0",
-    "@substrat-run/control-plane-client": "^0.3.14",
-    "@substrat-run/kernel": "^0.163.0",
+    "@substrat-run/contracts": "^0.165.0",
+    "@substrat-run/kernel": "^0.165.0",
+    "@substrat-run/control-plane-client": "^0.3.16",
     "@substrat-run/psl": "^0.2.5"
   },
   "devDependencies": {
@@ -43,10 +43,10 @@
     "tsx": "^4.19.0",
     "typescript": "^7.0.0",
     "vitest": "^5.0.5",
-    "@substrat-run/adapter-sqlite": "^0.163.0",
-    "@substrat-run/connector-fortnox": "^0.4.65",
-    "@substrat-run/vertical-host": "^0.163.0",
-    "@substrat-run/connector-planima": "^0.2.60"
+    "@substrat-run/adapter-sqlite": "^0.165.0",
+    "@substrat-run/connector-fortnox": "^0.4.67",
+    "@substrat-run/connector-planima": "^0.2.62",
+    "@substrat-run/vertical-host": "^0.165.0"
   },
   "publishConfig": {
     "access": "public"