@tellescope/sdk 1.246.1 → 1.246.2

package/lib/cjs/tests/api_tests/account_switcher.test.d.ts

@@ -0,0 +1,6 @@
+import { Session } from "../../sdk";
+export declare const account_switcher_tests: ({ sdk, sdkNonAdmin }: {
+    sdk: Session;
+    sdkNonAdmin: Session;
+}) => Promise<void>;
+//# sourceMappingURL=account_switcher.test.d.ts.map

package/lib/cjs/tests/api_tests/account_switcher.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account_switcher.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/account_switcher.test.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAoBnC,eAAO,MAAM,sBAAsB;SAAwC,OAAO;iBAAe,OAAO;mBAuXvG,CAAA"}

package/lib/cjs/tests/api_tests/account_switcher.test.js

@@ -0,0 +1,445 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.account_switcher_tests = void 0;
+require('source-map-support').install();
+var crypto_1 = __importDefault(require("crypto"));
+var sdk_1 = require("../../sdk");
+var testing_1 = require("@tellescope/testing");
+var utilities_1 = require("@tellescope/utilities");
+var setup_1 = require("../setup");
+var host = process.env.API_URL || 'http://localhost:8080';
+var TEST_EMAIL = process.env.TEST_EMAIL;
+var TEST_PASSWORD = process.env.TEST_PASSWORD;
+var NON_ADMIN_EMAIL = process.env.NON_ADMIN_EMAIL;
+var NON_ADMIN_PASSWORD = process.env.NON_ADMIN_PASSWORD;
+// matches the API key used in tests.ts for the secondary org
+var SDK_OTHER_API_KEY = "ba745e25162bb95a795c5fa1af70df188d93c4d3aac9c48b34a5c8c9dd7b80f7";
+var account_switcher_tests = function (_a) {
+    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var sdkOther, adminBaseEmail, _b, adminLocal, adminDomain, naBaseEmail, _c, naLocal, naDomain, suffix, emailPlusA, emailPlusB, emailPlusLocked, emailPlusUppercase, emailPlusInjection, emailReadOnly, emailOtherBase, emailPrefixSwitcher, emailNonAdminPlus, emailUnverifTarget, emailCrossOrg, userPlusA, userPlusB, userPlusLocked, userPlusUppercase, userPlusInjection, userReadOnly, userOtherBase, userPrefixSwitcher, userNonAdminPlus, userCrossOrg, userUnverifTarget, restrictiveRole, linkedFromAdmin, linkedIds, sample, preSwitchTokenSession_1, switchResult, switchedSession_1, meAfterSwitch, newLinkedFromSwitched, newLinkedIds, xorgSwitch, xorgSession_1, xorgMe, downgradeSwitch, downgradedSession_1, noAuthSession_1, allLogs, logsArr, switchLog, beforeUnverif, afterUnverif, rateLimitTripped, lastError, i, e_1, msg, cleanup;
+        var _d, _e, _f, _g, _h, _j, _k;
+        return __generator(this, function (_l) {
+            switch (_l.label) {
+                case 0:
+                    (0, testing_1.log_header)("Account Switcher Tests");
+                    sdkOther = new sdk_1.Session({ host: host, apiKey: SDK_OTHER_API_KEY });
+                    adminBaseEmail = (0, utilities_1.getBaseEmail)(sdk.userInfo.email);
+                    _b = adminBaseEmail.split('@'), adminLocal = _b[0], adminDomain = _b[1];
+                    naBaseEmail = (0, utilities_1.getBaseEmail)(sdkNonAdmin.userInfo.email);
+                    _c = naBaseEmail.split('@'), naLocal = _c[0], naDomain = _c[1];
+                    suffix = crypto_1.default.randomBytes(4).toString('hex');
+                    emailPlusA = "".concat(adminLocal, "+acctsw_a_").concat(suffix, "@").concat(adminDomain);
+                    emailPlusB = "".concat(adminLocal, "+acctsw_b_").concat(suffix, "@").concat(adminDomain);
+                    emailPlusLocked = "".concat(adminLocal, "+acctsw_locked_").concat(suffix, "@").concat(adminDomain);
+                    emailPlusUppercase = "".concat(adminLocal.toUpperCase(), "+AcctSwCaps_").concat(suffix, "@").concat(adminDomain);
+                    emailPlusInjection = "".concat(adminLocal, "+acctsw.x.y_").concat(suffix, "@").concat(adminDomain);
+                    emailReadOnly = "".concat(adminLocal, "+acctsw_ro_").concat(suffix, "@").concat(adminDomain);
+                    emailOtherBase = "acctsw_unrelated_".concat(suffix, "@").concat(adminDomain);
+                    emailPrefixSwitcher = "prefix".concat(adminLocal, "+acctsw_pfx_").concat(suffix, "@").concat(adminDomain);
+                    emailNonAdminPlus = "".concat(naLocal, "+acctsw_na_").concat(suffix, "@").concat(naDomain);
+                    emailUnverifTarget = "".concat(adminLocal, "+acctsw_unvrf_").concat(suffix, "@").concat(adminDomain);
+                    emailCrossOrg = "".concat(adminLocal, "+acctsw_xorg_").concat(suffix, "@").concat(adminDomain);
+                    _l.label = 1;
+                case 1:
+                    _l.trys.push([1, , 56, 58]);
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailPlusA, fname: 'A', verifiedEmail: true })];
+                case 2:
+                    // ------------------------------ Fixtures ------------------------------
+                    userPlusA = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailPlusB, fname: 'B', verifiedEmail: true })];
+                case 3:
+                    userPlusB = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailPlusUppercase, verifiedEmail: true })];
+                case 4:
+                    userPlusUppercase = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailPlusInjection, verifiedEmail: true })];
+                case 5:
+                    userPlusInjection = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailOtherBase, verifiedEmail: true })];
+                case 6:
+                    userOtherBase = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailPrefixSwitcher, verifiedEmail: true })];
+                case 7:
+                    userPrefixSwitcher = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailNonAdminPlus, verifiedEmail: true })
+                        // Created with verifiedEmail: false so we can observe propagation from a verified source
+                    ];
+                case 8:
+                    userNonAdminPlus = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailUnverifTarget, verifiedEmail: false })
+                        // Locked sibling (lockedOutUntil = 0 => indefinite lockout per types-models)
+                    ];
+                case 9:
+                    // Created with verifiedEmail: false so we can observe propagation from a verified source
+                    userUnverifTarget = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailPlusLocked, verifiedEmail: true })];
+                case 10:
+                    // Locked sibling (lockedOutUntil = 0 => indefinite lockout per types-models)
+                    userPlusLocked = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.updateOne(userPlusLocked.id, { lockedOutUntil: 0 })
+                        // Restrictive role + user assigned to that role (used to verify no privilege escalation)
+                    ];
+                case 11:
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
+                            role: "acctsw_restrictive_".concat(suffix),
+                            permissions: {
+                                users: { read: null, create: null, update: null, delete: null },
+                                endusers: { read: null, create: null, update: null, delete: null },
+                            },
+                        })];
+                case 12:
+                    // Restrictive role + user assigned to that role (used to verify no privilege escalation)
+                    restrictiveRole = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: emailReadOnly, verifiedEmail: true })];
+                case 13:
+                    userReadOnly = _l.sent();
+                    return [4 /*yield*/, sdk.api.users.updateOne(userReadOnly.id, { roles: [restrictiveRole.role] }, { replaceObjectFields: true })
+                        // Cross-org sibling (different org via API key)
+                    ];
+                case 14:
+                    _l.sent();
+                    return [4 /*yield*/, sdkOther.api.users.createOne({ email: emailCrossOrg, verifiedEmail: true })];
+                case 15:
+                    // Cross-org sibling (different org via API key)
+                    userCrossOrg = _l.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 250)
+                        // ====================== A. get_linked_accounts ======================
+                    ]; // small settle for created records
+                case 16:
+                    _l.sent(); // small settle for created records
+                    return [4 /*yield*/, sdk.api.users.get_linked_accounts()];
+                case 17:
+                    linkedFromAdmin = _l.sent();
+                    linkedIds = (linkedFromAdmin.linkedAccounts || []).map(function (a) { return a.id; });
+                    (0, testing_1.assert)(linkedIds.includes(userPlusA.id), 'userPlusA missing from linked accounts', 'get_linked_accounts: includes plus sibling A');
+                    (0, testing_1.assert)(linkedIds.includes(userPlusB.id), 'userPlusB missing from linked accounts', 'get_linked_accounts: includes plus sibling B');
+                    (0, testing_1.assert)(linkedIds.includes(userPlusUppercase.id), 'uppercase plus variant missing from linked accounts', 'get_linked_accounts: case-insensitive base match');
+                    (0, testing_1.assert)(linkedIds.includes(userPlusInjection.id), 'regex-special plus variant missing from linked accounts', 'get_linked_accounts: regex special chars do not break matching');
+                    (0, testing_1.assert)(linkedIds.includes(userCrossOrg.id), 'cross-org sibling missing from linked accounts', 'get_linked_accounts: includes cross-org plus sibling');
+                    (0, testing_1.assert)(!linkedIds.includes(sdk.userInfo.id), 'caller present in linked accounts', 'get_linked_accounts: excludes caller');
+                    (0, testing_1.assert)(!linkedIds.includes(userOtherBase.id), 'unrelated-base user present in linked accounts', 'get_linked_accounts: excludes unrelated base email');
+                    (0, testing_1.assert)(!linkedIds.includes(userPrefixSwitcher.id), 'prefix-extended user present in linked accounts (anchored regex broken?)', 'get_linked_accounts: anchored regex excludes prefix-extended local part');
+                    (0, testing_1.assert)(!linkedIds.includes(userPlusLocked.id), 'locked user present in linked accounts', 'get_linked_accounts: excludes locked target');
+                    sample = (linkedFromAdmin.linkedAccounts || []).find(function (a) { return a.id === userPlusB.id; });
+                    (0, testing_1.assert)(!!sample
+                        && typeof sample.email === 'string'
+                        && typeof sample.orgName === 'string'
+                        && typeof sample.requiresMFA === 'boolean', 'linked account entry missing required fields', 'get_linked_accounts: entries have id, email, orgName, requiresMFA');
+                    // noAccessPermissions: non-admin can call without 403
+                    return [4 /*yield*/, (0, testing_1.async_test)('get_linked_accounts callable by non-admin (noAccessPermissions)', function () { return sdkNonAdmin.api.users.get_linked_accounts(); }, { onResult: function (r) { return Array.isArray(r.linkedAccounts); } })
+                        // ====================== B. switch_account ======================
+                        // 1. Same-org happy path: sdk (admin) → userPlusB
+                        // Capture the source token in a separate Session BEFORE the switch so we can verify
+                        // the original JWT is invalidated (Step 13) without losing access via `sdk` itself.
+                    ];
+                case 18:
+                    // noAccessPermissions: non-admin can call without 403
+                    _l.sent();
+                    preSwitchTokenSession_1 = new sdk_1.Session({ host: host, authToken: sdk.authToken });
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: pre-switch source token is valid', function () { return preSwitchTokenSession_1.test_authenticated(); }, { expectedResult: 'Authenticated!' })];
+                case 19:
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.users.switch_account({ targetUserId: userPlusB.id })];
+                case 20:
+                    switchResult = _l.sent();
+                    (0, testing_1.assert)(!!switchResult.authToken, 'no authToken returned from switch_account', 'switch_account: returns authToken');
+                    (0, testing_1.assert)(((_d = switchResult.user) === null || _d === void 0 ? void 0 : _d.id) === userPlusB.id, 'switch_account returned wrong user id', 'switch_account: returns target user record');
+                    (0, testing_1.assert)((((_e = switchResult.user) === null || _e === void 0 ? void 0 : _e.email) || '').toLowerCase() === emailPlusB.toLowerCase(), 'switch_account returned wrong email', 'switch_account: returns target email');
+                    // User model stores password hash in `hashedPass` (not `hashedPassword` — that's Enduser).
+                    // Both are asserted as belt-and-suspenders in case field names drift.
+                    (0, testing_1.assert)(!((_f = switchResult.user) === null || _f === void 0 ? void 0 : _f.hashedPass), "switch_account response leaked hashedPass: ".concat(JSON.stringify(switchResult.user.hashedPass)), 'switch_account: response redacts hashedPass');
+                    (0, testing_1.assert)(!((_g = switchResult.user) === null || _g === void 0 ? void 0 : _g.hashedPassword), "switch_account response leaked hashedPassword: ".concat(JSON.stringify(switchResult.user.hashedPassword)), 'switch_account: response has no hashedPassword (defense-in-depth)');
+                    switchedSession_1 = new sdk_1.Session({ host: host, authToken: switchResult.authToken });
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: new token authenticates', function () { return switchedSession_1.test_authenticated(); }, { expectedResult: 'Authenticated!' })];
+                case 21:
+                    _l.sent();
+                    return [4 /*yield*/, switchedSession_1.api.users.getOne(userPlusB.id)];
+                case 22:
+                    meAfterSwitch = _l.sent();
+                    (0, testing_1.assert)((meAfterSwitch.email || '').toLowerCase() === emailPlusB.toLowerCase(), 'switched session does not resolve to target user', 'switch_account: new session authenticates as target user');
+                    return [4 /*yield*/, switchedSession_1.api.users.get_linked_accounts()];
+                case 23:
+                    newLinkedFromSwitched = _l.sent();
+                    newLinkedIds = (newLinkedFromSwitched.linkedAccounts || []).map(function (a) { return a.id; });
+                    (0, testing_1.assert)(!newLinkedIds.includes(userPlusB.id), 'post-switch linked accounts include the new caller', 'post-switch get_linked_accounts: excludes new caller');
+                    (0, testing_1.assert)(newLinkedIds.includes(userPlusA.id), 'post-switch linked accounts missing other sibling', 'post-switch get_linked_accounts: includes other plus siblings');
+                    (0, testing_1.assert)(newLinkedIds.includes(sdk.userInfo.id), 'post-switch linked accounts missing original caller', 'post-switch get_linked_accounts: includes original caller');
+                    // JWT invalidation (Step 13): the source token captured pre-switch must now be rejected.
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: source JWT invalidated after switch', function () { return preSwitchTokenSession_1.test_authenticated(); }, { shouldError: true, onError: function (e) { var _a; return /unauth|expired|invalid/i.test((e === null || e === void 0 ? void 0 : e.message) || ((_a = e === null || e === void 0 ? void 0 : e.toString) === null || _a === void 0 ? void 0 : _a.call(e)) || String(e)); } })
+                        // Re-authenticate sdk so subsequent tests in this suite work (its prior token is now expired).
+                    ];
+                case 24:
+                    // JWT invalidation (Step 13): the source token captured pre-switch must now be rejected.
+                    _l.sent();
+                    // Re-authenticate sdk so subsequent tests in this suite work (its prior token is now expired).
+                    return [4 /*yield*/, sdk.authenticate(TEST_EMAIL, TEST_PASSWORD)
+                        // 2. Cross-org happy path: sdk (admin) → userCrossOrg (in sdkOther's org)
+                    ];
+                case 25:
+                    // Re-authenticate sdk so subsequent tests in this suite work (its prior token is now expired).
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.users.switch_account({ targetUserId: userCrossOrg.id })];
+                case 26:
+                    xorgSwitch = _l.sent();
+                    (0, testing_1.assert)(((_h = xorgSwitch.user) === null || _h === void 0 ? void 0 : _h.id) === userCrossOrg.id, 'cross-org switch returned wrong user', 'switch_account: cross-org switch returns target');
+                    xorgSession_1 = new sdk_1.Session({ host: host, authToken: xorgSwitch.authToken });
+                    return [4 /*yield*/, xorgSession_1.api.users.getOne(userCrossOrg.id)];
+                case 27:
+                    xorgMe = _l.sent();
+                    (0, testing_1.assert)((xorgMe.email || '').toLowerCase() === emailCrossOrg.toLowerCase(), 'cross-org session not scoped correctly', 'switch_account: cross-org session resolves to target user');
+                    // Multi-tenant isolation: cross-org session must NOT see source-org users
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: cross-org session cannot see source-org user (tenant isolation)', function () { return xorgSession_1.api.users.getOne(sdk.userInfo.id); }, testing_1.handleAnyError)
+                        // Re-auth sdk: previous switch invalidated its token (Step 13)
+                    ];
+                case 28:
+                    // Multi-tenant isolation: cross-org session must NOT see source-org users
+                    _l.sent();
+                    // Re-auth sdk: previous switch invalidated its token (Step 13)
+                    return [4 /*yield*/, sdk.authenticate(TEST_EMAIL, TEST_PASSWORD)
+                        // 3. Permission scoping (no privilege escalation): sdk (admin) → userReadOnly,
+                        //    then attempt an admin-only operation with the new token. Must fail.
+                    ];
+                case 29:
+                    // Re-auth sdk: previous switch invalidated its token (Step 13)
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.users.switch_account({ targetUserId: userReadOnly.id })];
+                case 30:
+                    downgradeSwitch = _l.sent();
+                    downgradedSession_1 = new sdk_1.Session({ host: host, authToken: downgradeSwitch.authToken });
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: downgraded session cannot perform admin op (no privilege escalation)', function () { return downgradedSession_1.api.users.updateOne(userPlusA.id, { roles: ['Admin'] }, { replaceObjectFields: true }); }, testing_1.handleAnyError)
+                        // Re-auth sdk: previous switch invalidated its token (Step 13)
+                    ];
+                case 31:
+                    _l.sent();
+                    // Re-auth sdk: previous switch invalidated its token (Step 13)
+                    return [4 /*yield*/, sdk.authenticate(TEST_EMAIL, TEST_PASSWORD)
+                        // 3b. Self-switch attempt MUST be rejected (Step 12): no-op that wastes rate-limit budget
+                        //     and creates spurious audit logs.
+                    ];
+                case 32:
+                    // Re-auth sdk: previous switch invalidated its token (Step 13)
+                    _l.sent();
+                    // 3b. Self-switch attempt MUST be rejected (Step 12): no-op that wastes rate-limit budget
+                    //     and creates spurious audit logs.
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: rejects self-switch', function () { return sdk.api.users.switch_account({ targetUserId: sdk.userInfo.id }); }, { shouldError: true, onError: function (e) { var _a; return /own account/i.test((e === null || e === void 0 ? void 0 : e.message) || ((_a = e === null || e === void 0 ? void 0 : e.toString) === null || _a === void 0 ? void 0 : _a.call(e)) || String(e)); } })
+                        // 4. Cross-base attack: sdk (admin) → userOtherBase (different base) MUST be rejected.
+                    ];
+                case 33:
+                    // 3b. Self-switch attempt MUST be rejected (Step 12): no-op that wastes rate-limit budget
+                    //     and creates spurious audit logs.
+                    _l.sent();
+                    // 4. Cross-base attack: sdk (admin) → userOtherBase (different base) MUST be rejected.
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: rejects cross-base target', function () { return sdk.api.users.switch_account({ targetUserId: userOtherBase.id }); }, testing_1.handleAnyError)];
+                case 34:
+                    // 4. Cross-base attack: sdk (admin) → userOtherBase (different base) MUST be rejected.
+                    _l.sent();
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: source session unaffected after rejected cross-base attempt', function () { return sdk.test_authenticated(); }, { expectedResult: 'Authenticated!' })
+                        // 5. Locked target: must reject
+                    ];
+                case 35:
+                    _l.sent();
+                    // 5. Locked target: must reject
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: rejects locked target', function () { return sdk.api.users.switch_account({ targetUserId: userPlusLocked.id }); }, testing_1.handleAnyError)
+                        // 6. Nonexistent target: must reject without leaking existence
+                    ];
+                case 36:
+                    // 5. Locked target: must reject
+                    _l.sent();
+                    // 6. Nonexistent target: must reject without leaking existence
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: rejects nonexistent target', function () { return sdk.api.users.switch_account({ targetUserId: '000000000000000000000000' }); }, testing_1.handleAnyError)
+                        // 7. Malformed targetUserId: validation error (does not reach handler / rate limit)
+                    ];
+                case 37:
+                    // 6. Nonexistent target: must reject without leaking existence
+                    _l.sent();
+                    // 7. Malformed targetUserId: validation error (does not reach handler / rate limit)
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: rejects malformed targetUserId', function () { return sdk.api.users.switch_account({ targetUserId: 'not-an-objectid' }); }, testing_1.handleAnyError)
+                        // 8. noAccessPermissions on switch: non-admin can switch to its own plus sibling
+                    ];
+                case 38:
+                    // 7. Malformed targetUserId: validation error (does not reach handler / rate limit)
+                    _l.sent();
+                    // 8. noAccessPermissions on switch: non-admin can switch to its own plus sibling
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: callable by non-admin (noAccessPermissions)', function () { return sdkNonAdmin.api.users.switch_account({ targetUserId: userNonAdminPlus.id }); }, { onResult: function (r) { var _a; return ((_a = r.user) === null || _a === void 0 ? void 0 : _a.id) === userNonAdminPlus.id && !!r.authToken; } })
+                        // Re-auth sdkNonAdmin: previous switch invalidated its token (Step 13)
+                    ];
+                case 39:
+                    // 8. noAccessPermissions on switch: non-admin can switch to its own plus sibling
+                    _l.sent();
+                    // Re-auth sdkNonAdmin: previous switch invalidated its token (Step 13)
+                    return [4 /*yield*/, sdkNonAdmin.authenticate(NON_ADMIN_EMAIL, NON_ADMIN_PASSWORD)
+                        // 9. Unauthenticated request: must reject before reaching handler
+                    ];
+                case 40:
+                    // Re-auth sdkNonAdmin: previous switch invalidated its token (Step 13)
+                    _l.sent();
+                    noAuthSession_1 = new sdk_1.Session({ host: host });
+                    return [4 /*yield*/, (0, testing_1.async_test)('switch_account: rejects unauthenticated caller', function () { return noAuthSession_1.api.users.switch_account({ targetUserId: userPlusA.id }); }, testing_1.handleAnyError)
+                        // 10. Audit log written for the same-org switch performed in step 1
+                    ];
+                case 41:
+                    _l.sent();
+                    // 10. Audit log written for the same-org switch performed in step 1
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)];
+                case 42:
+                    // 10. Audit log written for the same-org switch performed in step 1
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.user_logs.getSome({ limit: 1000 })];
+                case 43:
+                    allLogs = _l.sent();
+                    logsArr = Array.isArray(allLogs) ? allLogs : ((allLogs === null || allLogs === void 0 ? void 0 : allLogs.user_logs) || []);
+                    switchLog = logsArr.find(function (l) {
+                        var _a, _b, _c;
+                        return ((_a = l === null || l === void 0 ? void 0 : l.info) === null || _a === void 0 ? void 0 : _a.event) === 'account_switch'
+                            && ((_b = l === null || l === void 0 ? void 0 : l.info) === null || _b === void 0 ? void 0 : _b.targetUserId) === userPlusB.id
+                            && ((_c = l === null || l === void 0 ? void 0 : l.info) === null || _c === void 0 ? void 0 : _c.sourceUserId) === sdk.userInfo.id;
+                    });
+                    (0, testing_1.assert)(!!switchLog, 'no account_switch audit log found for sdk → userPlusB', 'switch_account: HIPAA audit log written');
+                    if (switchLog) {
+                        (0, testing_1.assert)(!!switchLog.info.sourceBusinessId && !!switchLog.info.targetBusinessId, 'audit log missing businessIds', 'switch_account: audit log captures both businessIds');
+                        (0, testing_1.assert)((switchLog.info.targetEmail || '').toLowerCase() === emailPlusB.toLowerCase(), 'audit log targetEmail mismatch', 'switch_account: audit log captures targetEmail');
+                    }
+                    return [4 /*yield*/, sdk.api.users.getOne(userUnverifTarget.id)];
+                case 44:
+                    beforeUnverif = _l.sent();
+                    (0, testing_1.assert)(beforeUnverif.verifiedEmail !== true, "test fixture userUnverifTarget was unexpectedly already verified", 'verifiedEmail propagation fixture: target starts unverified');
+                    return [4 /*yield*/, sdk.api.users.switch_account({ targetUserId: userUnverifTarget.id })];
+                case 45:
+                    _l.sent();
+                    return [4 /*yield*/, sdk.authenticate(TEST_EMAIL, TEST_PASSWORD)];
+                case 46:
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.users.getOne(userUnverifTarget.id)];
+                case 47:
+                    afterUnverif = _l.sent();
+                    (0, testing_1.assert)(afterUnverif.verifiedEmail === true, "target verifiedEmail did not propagate from verified source", 'switch_account: verified source propagates verifiedEmail to target');
+                    rateLimitTripped = false;
+                    lastError = null;
+                    i = 0;
+                    _l.label = 48;
+                case 48:
+                    if (!(i < 15)) return [3 /*break*/, 54];
+                    _l.label = 49;
+                case 49:
+                    _l.trys.push([49, 52, , 53]);
+                    return [4 /*yield*/, sdk.authenticate(TEST_EMAIL, TEST_PASSWORD)];
+                case 50:
+                    _l.sent();
+                    return [4 /*yield*/, sdk.api.users.switch_account({ targetUserId: userPlusA.id })];
+                case 51:
+                    _l.sent();
+                    return [3 /*break*/, 53];
+                case 52:
+                    e_1 = _l.sent();
+                    lastError = e_1;
+                    msg = (e_1 === null || e_1 === void 0 ? void 0 : e_1.message) || ((_j = e_1 === null || e_1 === void 0 ? void 0 : e_1.toString) === null || _j === void 0 ? void 0 : _j.call(e_1)) || String(e_1);
+                    if (/too many|rate/i.test(msg)) {
+                        rateLimitTripped = true;
+                        return [3 /*break*/, 54];
+                    }
+                    return [3 /*break*/, 53];
+                case 53:
+                    i++;
+                    return [3 /*break*/, 48];
+                case 54:
+                    (0, testing_1.assert)(rateLimitTripped, "rate limit never tripped after 15 attempts (last error: ".concat((_k = lastError === null || lastError === void 0 ? void 0 : lastError.message) !== null && _k !== void 0 ? _k : 'none', ")"), 'switch_account: rate limit enforced');
+                    // Best-effort re-auth so cleanup below can use sdk
+                    return [4 /*yield*/, sdk.authenticate(TEST_EMAIL, TEST_PASSWORD).catch(function () { return null; })];
+                case 55:
+                    // Best-effort re-auth so cleanup below can use sdk
+                    _l.sent();
+                    return [3 /*break*/, 58];
+                case 56:
+                    cleanup = function (fn) { return fn().catch(function () { return null; }); };
+                    return [4 /*yield*/, Promise.all([
+                            userPlusA && cleanup(function () { return sdk.api.users.deleteOne(userPlusA.id); }),
+                            userPlusB && cleanup(function () { return sdk.api.users.deleteOne(userPlusB.id); }),
+                            userPlusLocked && cleanup(function () { return sdk.api.users.deleteOne(userPlusLocked.id); }),
+                            userPlusUppercase && cleanup(function () { return sdk.api.users.deleteOne(userPlusUppercase.id); }),
+                            userPlusInjection && cleanup(function () { return sdk.api.users.deleteOne(userPlusInjection.id); }),
+                            userReadOnly && cleanup(function () { return sdk.api.users.deleteOne(userReadOnly.id); }),
+                            userOtherBase && cleanup(function () { return sdk.api.users.deleteOne(userOtherBase.id); }),
+                            userPrefixSwitcher && cleanup(function () { return sdk.api.users.deleteOne(userPrefixSwitcher.id); }),
+                            userNonAdminPlus && cleanup(function () { return sdk.api.users.deleteOne(userNonAdminPlus.id); }),
+                            userUnverifTarget && cleanup(function () { return sdk.api.users.deleteOne(userUnverifTarget.id); }),
+                            userCrossOrg && cleanup(function () { return sdkOther.api.users.deleteOne(userCrossOrg.id); }),
+                            restrictiveRole && cleanup(function () { return sdk.api.role_based_access_permissions.deleteOne(restrictiveRole.id); }),
+                        ])];
+                case 57:
+                    _l.sent();
+                    return [7 /*endfinally*/];
+                case 58: return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.account_switcher_tests = account_switcher_tests;
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    var sdk_2 = new sdk_1.Session({ host: host });
+    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, exports.account_switcher_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ Account switcher test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Account switcher test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=account_switcher.test.js.map

package/lib/cjs/tests/api_tests/account_switcher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account_switcher.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/account_switcher.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,kDAA2B;AAE3B,iCAAmC;AACnC,+CAM4B;AAC5B,mDAAoD;AACpD,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAW,CAAA;AAC1C,IAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAc,CAAA;AAChD,IAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,eAAgB,CAAA;AACpD,IAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAmB,CAAA;AAE1D,6DAA6D;AAC7D,IAAM,iBAAiB,GAAG,kEAAkE,CAAA;AAErF,IAAM,sBAAsB,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBAC7D,IAAA,oBAAU,EAAC,wBAAwB,CAAC,CAAA;oBAE9B,QAAQ,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;oBAG3D,cAAc,GAAG,IAAA,wBAAY,EAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACjD,KAA4B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAApD,UAAU,QAAA,EAAE,WAAW,QAAA,CAA6B;oBAErD,WAAW,GAAG,IAAA,wBAAY,EAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACtD,KAAsB,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAA3C,OAAO,QAAA,EAAE,QAAQ,QAAA,CAA0B;oBAE5C,MAAM,GAAG,gBAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBAG9C,UAAU,GAAY,UAAG,UAAU,uBAAa,MAAM,cAAI,WAAW,CAAE,CAAA;oBACvE,UAAU,GAAY,UAAG,UAAU,uBAAa,MAAM,cAAI,WAAW,CAAE,CAAA;oBACvE,eAAe,GAAO,UAAG,UAAU,4BAAkB,MAAM,cAAI,WAAW,CAAE,CAAA;oBAC5E,kBAAkB,GAAI,UAAG,UAAU,CAAC,WAAW,EAAE,yBAAe,MAAM,cAAI,WAAW,CAAE,CAAA;oBACvF,kBAAkB,GAAI,UAAG,UAAU,yBAAe,MAAM,cAAI,WAAW,CAAE,CAAA;oBACzE,aAAa,GAAS,UAAG,UAAU,wBAAc,MAAM,cAAI,WAAW,CAAE,CAAA;oBAGxE,cAAc,GAAQ,2BAAoB,MAAM,cAAI,WAAW,CAAE,CAAA;oBACjE,mBAAmB,GAAG,gBAAS,UAAU,yBAAe,MAAM,cAAI,WAAW,CAAE,CAAA;oBAG/E,iBAAiB,GAAK,UAAG,OAAO,wBAAc,MAAM,cAAI,QAAQ,CAAE,CAAA;oBAGlE,kBAAkB,GAAI,UAAG,UAAU,2BAAiB,MAAM,cAAI,WAAW,CAAE,CAAA;oBAG3E,aAAa,GAAS,UAAG,UAAU,0BAAgB,MAAM,cAAI,WAAW,CAAE,CAAA;;;;oBAW1D,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBADhH,yEAAyE;oBACzE,SAAS,GAAW,SAA4F,CAAA;oBAC5F,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAAhH,SAAS,GAAW,SAA4F,CAAA;oBAC5F,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAA5G,iBAAiB,GAAG,SAAwF,CAAA;oBACxF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAA5G,iBAAiB,GAAG,SAAwF,CAAA;oBACxF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAAxG,aAAa,GAAO,SAAoF,CAAA;oBACpF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAA7G,kBAAkB,GAAE,SAAyF,CAAA;oBACzF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC;wBAE3G,yFAAyF;sBAFkB;;oBAA3G,gBAAgB,GAAI,SAAuF,CAAA;oBAGvF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,EAAS,CAAC;wBAE7G,6EAA6E;sBAFgC;;oBAD7G,yFAAyF;oBACzF,iBAAiB,GAAG,SAAyF,CAAA;oBAGzF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBADzG,6EAA6E;oBAC7E,cAAc,GAAM,SAAqF,CAAA;oBACzG,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAS,CAAC;wBAE9E,yFAAyF;sBAFX;;oBAA9E,SAA8E,CAAA;oBAG5D,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACtE,IAAI,EAAE,6BAAsB,MAAM,CAAE;4BACpC,WAAW,EAAE;gCACX,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gCAC/D,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;6BAC5D;yBACT,CAAC,EAAA;;oBAPF,yFAAyF;oBACzF,eAAe,GAAG,SAMhB,CAAA;oBACa,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAAlG,YAAY,GAAG,SAAmF,CAAA;oBAClG,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAEhH,gDAAgD;sBAFgE;;oBAAhH,SAAgH,CAAA;oBAGjG,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAS,CAAC,EAAA;;oBADvG,gDAAgD;oBAChD,YAAY,GAAG,SAAwF,CAAA;oBAEvG,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC;wBAE1B,uEAAuE;sBAF7C,CAAC,mCAAmC;;oBAA9D,SAA0B,CAAA,CAAC,mCAAmC;oBAItC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAA;;oBAA3D,eAAe,GAAG,SAAyC;oBAC3D,SAAS,GAAa,CAAC,eAAe,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAA;oBAExF,IAAA,gBAAM,EAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EACrC,wCAAwC,EACxC,8CAA8C,CAAC,CAAA;oBACjD,IAAA,gBAAM,EAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EACrC,wCAAwC,EACxC,8CAA8C,CAAC,CAAA;oBACjD,IAAA,gBAAM,EAAC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAC7C,qDAAqD,EACrD,kDAAkD,CAAC,CAAA;oBACrD,IAAA,gBAAM,EAAC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAC7C,yDAAyD,EACzD,gEAAgE,CAAC,CAAA;oBACnE,IAAA,gBAAM,EAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EACxC,gDAAgD,EAChD,sDAAsD,CAAC,CAAA;oBAEzD,IAAA,gBAAM,EAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EACzC,mCAAmC,EACnC,sCAAsC,CAAC,CAAA;oBACzC,IAAA,gBAAM,EAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAC1C,gDAAgD,EAChD,oDAAoD,CAAC,CAAA;oBACvD,IAAA,gBAAM,EAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAC/C,0EAA0E,EAC1E,yEAAyE,CAAC,CAAA;oBAC5E,IAAA,gBAAM,EAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,EAC3C,wCAAwC,EACxC,6CAA6C,CAAC,CAAA;oBAG1C,MAAM,GAAG,CAAC,eAAe,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,EAArB,CAAqB,CAAC,CAAA;oBAC7F,IAAA,gBAAM,EACJ,CAAC,CAAC,MAAM;2BACH,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;2BAChC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;2BAClC,OAAO,MAAM,CAAC,WAAW,KAAK,SAAS,EAC5C,8CAA8C,EAC9C,mEAAmE,CACpE,CAAA;oBAED,sDAAsD;oBACtD,qBAAM,IAAA,oBAAU,EACd,iEAAiE,EACjE,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAA3C,CAA2C,EACjD,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,EAA/B,CAA+B,EAAE,CAC1D;wBAED,kEAAkE;wBAElE,kDAAkD;wBAClD,oFAAoF;wBACpF,oFAAoF;sBANnF;;oBALD,sDAAsD;oBACtD,SAIC,CAAA;oBAOK,0BAAwB,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAA;oBAC7E,qBAAM,IAAA,oBAAU,EACd,kDAAkD,EAClD,cAAM,OAAA,uBAAqB,CAAC,kBAAkB,EAAE,EAA1C,CAA0C,EAChD,EAAE,cAAc,EAAE,gBAAgB,EAAE,CACrC,EAAA;;oBAJD,SAIC,CAAA;oBAEyB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAAtF,YAAY,GAAQ,SAAkE;oBAC5F,IAAA,gBAAM,EAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAC7B,2CAA2C,EAC3C,mCAAmC,CAAC,CAAA;oBACtC,IAAA,gBAAM,EAAC,CAAA,MAAA,YAAY,CAAC,IAAI,0CAAE,EAAE,MAAK,SAAS,CAAC,EAAE,EAC3C,uCAAuC,EACvC,4CAA4C,CAAC,CAAA;oBAC/C,IAAA,gBAAM,EAAC,CAAC,CAAA,MAAA,YAAY,CAAC,IAAI,0CAAE,KAAK,KAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAChF,qCAAqC,EACrC,sCAAsC,CAAC,CAAA;oBAEzC,2FAA2F;oBAC3F,sEAAsE;oBACtE,IAAA,gBAAM,EAAC,CAAC,CAAA,MAAC,YAAY,CAAC,IAAY,0CAAE,UAAU,CAAA,EAC5C,qDAA8C,IAAI,CAAC,SAAS,CAAE,YAAY,CAAC,IAAY,CAAC,UAAU,CAAC,CAAE,EACrG,6CAA6C,CAAC,CAAA;oBAChD,IAAA,gBAAM,EAAC,CAAC,CAAA,MAAC,YAAY,CAAC,IAAY,0CAAE,cAAc,CAAA,EAChD,yDAAkD,IAAI,CAAC,SAAS,CAAE,YAAY,CAAC,IAAY,CAAC,cAAc,CAAC,CAAE,EAC7G,mEAAmE,CAAC,CAAA;oBAEhE,oBAAkB,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAA;oBAChF,qBAAM,IAAA,oBAAU,EACd,yCAAyC,EACzC,cAAM,OAAA,iBAAe,CAAC,kBAAkB,EAAE,EAApC,CAAoC,EAC1C,EAAE,cAAc,EAAE,gBAAgB,EAAE,CACrC,EAAA;;oBAJD,SAIC,CAAA;oBACqB,qBAAM,iBAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAApE,aAAa,GAAG,SAAoD;oBAC1E,IAAA,gBAAM,EAAC,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAC3E,kDAAkD,EAClD,0DAA0D,CAAC,CAAA;oBAI/B,qBAAM,iBAAe,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAA;;oBAA7E,qBAAqB,GAAG,SAAqD;oBAC7E,YAAY,GAAa,CAAC,qBAAqB,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAA;oBACjG,IAAA,gBAAM,EAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EACzC,oDAAoD,EACpD,sDAAsD,CAAC,CAAA;oBACzD,IAAA,gBAAM,EAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EACxC,mDAAmD,EACnD,+DAA+D,CAAC,CAAA;oBAClE,IAAA,gBAAM,EAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC3C,qDAAqD,EACrD,2DAA2D,CAAC,CAAA;oBAE9D,yFAAyF;oBACzF,qBAAM,IAAA,oBAAU,EACd,qDAAqD,EACrD,cAAM,OAAA,uBAAqB,CAAC,kBAAkB,EAAE,EAA1C,CAA0C,EAChD,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,YAAK,OAAA,yBAAyB,CAAC,IAAI,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,MAAI,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,iDAAI,CAAA,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA,EAAA,EAAE,CACvH;wBAED,+FAA+F;sBAF9F;;oBALD,yFAAyF;oBACzF,SAIC,CAAA;oBAED,+FAA+F;oBAC/F,qBAAM,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC;wBAEjD,0EAA0E;sBAFzB;;oBADjD,+FAA+F;oBAC/F,SAAiD,CAAA;oBAGzB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAAvF,UAAU,GAAQ,SAAqE;oBAC7F,IAAA,gBAAM,EAAC,CAAA,MAAA,UAAU,CAAC,IAAI,0CAAE,EAAE,MAAK,YAAY,CAAC,EAAE,EAC5C,sCAAsC,EACtC,iDAAiD,CAAC,CAAA;oBAE9C,gBAAc,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAA;oBAC3D,qBAAM,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,EAAA;;oBAA5D,MAAM,GAAG,SAAmD;oBAClE,IAAA,gBAAM,EAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,EACvE,wCAAwC,EACxC,2DAA2D,CAAC,CAAA;oBAE9D,0EAA0E;oBAC1E,qBAAM,IAAA,oBAAU,EACd,iFAAiF,EACjF,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAA7C,CAA6C,EACnD,wBAAc,CACf;wBAED,+DAA+D;sBAF9D;;oBALD,0EAA0E;oBAC1E,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,qBAAM,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC;wBAEjD,+EAA+E;wBAC/E,yEAAyE;sBAHxB;;oBADjD,+DAA+D;oBAC/D,SAAiD,CAAA;oBAIpB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAA5F,eAAe,GAAQ,SAAqE;oBAC5F,sBAAoB,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,CAAC,CAAA;oBACrF,qBAAM,IAAA,oBAAU,EACd,sFAAsF,EACtF,cAAM,OAAA,mBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAxG,CAAwG,EAC9G,wBAAc,CACf;wBAED,+DAA+D;sBAF9D;;oBAJD,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,qBAAM,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC;wBAEjD,0FAA0F;wBAC1F,uCAAuC;sBAHU;;oBADjD,+DAA+D;oBAC/D,SAAiD,CAAA;oBAEjD,0FAA0F;oBAC1F,uCAAuC;oBACvC,qBAAM,IAAA,oBAAU,EACd,qCAAqC,EACrC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAA/D,CAA+D,EACrE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,YAAK,OAAA,cAAc,CAAC,IAAI,CAAC,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,MAAI,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,iDAAI,CAAA,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA,EAAA,EAAE,CAC5G;wBAED,uFAAuF;sBAFtF;;oBAND,0FAA0F;oBAC1F,uCAAuC;oBACvC,SAIC,CAAA;oBAED,uFAAuF;oBACvF,qBAAM,IAAA,oBAAU,EACd,2CAA2C,EAC3C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,EAAhE,CAAgE,EACtE,wBAAc,CACf,EAAA;;oBALD,uFAAuF;oBACvF,SAIC,CAAA;oBACD,qBAAM,IAAA,oBAAU,EACd,6EAA6E,EAC7E,cAAM,OAAA,GAAG,CAAC,kBAAkB,EAAE,EAAxB,CAAwB,EAC9B,EAAE,cAAc,EAAE,gBAAgB,EAAE,CACrC;wBAED,gCAAgC;sBAF/B;;oBAJD,SAIC,CAAA;oBAED,gCAAgC;oBAChC,qBAAM,IAAA,oBAAU,EACd,uCAAuC,EACvC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,EAAjE,CAAiE,EACvE,wBAAc,CACf;wBAED,+DAA+D;sBAF9D;;oBALD,gCAAgC;oBAChC,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,qBAAM,IAAA,oBAAU,EACd,4CAA4C,EAC5C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC,EAA1E,CAA0E,EAChF,wBAAc,CACf;wBAED,oFAAoF;sBAFnF;;oBALD,+DAA+D;oBAC/D,SAIC,CAAA;oBAED,oFAAoF;oBACpF,qBAAM,IAAA,oBAAU,EACd,gDAAgD,EAChD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,iBAAwB,EAAE,CAAC,EAAxE,CAAwE,EAC9E,wBAAc,CACf;wBAED,iFAAiF;sBAFhF;;oBALD,oFAAoF;oBACpF,SAIC,CAAA;oBAED,iFAAiF;oBACjF,qBAAM,IAAA,oBAAU,EACd,6DAA6D,EAC7D,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAA3E,CAA2E,EACjF,EAAE,QAAQ,EAAE,UAAC,CAAM,YAAK,OAAA,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,EAAE,MAAK,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA,EAAA,EAAE,CAC9E;wBAED,uEAAuE;sBAFtE;;oBALD,iFAAiF;oBACjF,SAIC,CAAA;oBAED,uEAAuE;oBACvE,qBAAM,WAAW,CAAC,YAAY,CAAC,eAAe,EAAE,kBAAkB,CAAC;wBAEnE,kEAAkE;sBAFC;;oBADnE,uEAAuE;oBACvE,SAAmE,CAAA;oBAG7D,kBAAgB,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;oBAC3C,qBAAM,IAAA,oBAAU,EACd,gDAAgD,EAChD,cAAM,OAAA,eAAa,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,EAAtE,CAAsE,EAC5E,wBAAc,CACf;wBAED,oEAAoE;sBAFnE;;oBAJD,SAIC,CAAA;oBAED,oEAAoE;oBACpE,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAD1B,oEAAoE;oBACpE,SAA0B,CAAA;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAAtE,OAAO,GAAQ,SAAuD;oBACtE,OAAO,GAAU,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,KAAI,EAAE,CAAC,CAAA;oBAC9E,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,UAAC,CAAM;;wBACjC,OAAA,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,KAAK,MAAK,gBAAgB;+BACnC,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,YAAY,MAAK,SAAS,CAAC,EAAE;+BACtC,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,YAAY,MAAK,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAA;qBAAA,CAC7C,CAAA;oBACD,IAAA,gBAAM,EAAC,CAAC,CAAC,SAAS,EAChB,uDAAuD,EACvD,yCAAyC,CAAC,CAAA;oBAC5C,IAAI,SAAS,EAAE;wBACb,IAAA,gBAAM,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAC3E,+BAA+B,EAC/B,qDAAqD,CAAC,CAAA;wBACxD,IAAA,gBAAM,EAAC,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAClF,gCAAgC,EAChC,gDAAgD,CAAC,CAAA;qBACpD;oBAKqB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAA;;oBAAhE,aAAa,GAAG,SAAgD;oBACtE,IAAA,gBAAM,EAAC,aAAa,CAAC,aAAa,KAAK,IAAI,EACzC,kEAAkE,EAClE,6DAA6D,CAAC,CAAA;oBAEhE,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAA1E,SAA0E,CAAA;oBAC1E,qBAAM,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,EAAA;;oBAAjD,SAAiD,CAAA;oBAE5B,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAA;;oBAA/D,YAAY,GAAG,SAAgD;oBACrE,IAAA,gBAAM,EAAC,YAAY,CAAC,aAAa,KAAK,IAAI,EACxC,6DAA6D,EAC7D,oEAAoE,CAAC,CAAA;oBAYnE,gBAAgB,GAAG,KAAK,CAAA;oBACxB,SAAS,GAAQ,IAAI,CAAA;oBAChB,CAAC,GAAG,CAAC;;;yBAAE,CAAA,CAAC,GAAG,EAAE,CAAA;;;;oBAElB,qBAAM,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,EAAA;;oBAAjD,SAAiD,CAAA;oBACjD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAAlE,SAAkE,CAAA;;;;oBAElE,SAAS,GAAG,GAAC,CAAA;oBACP,GAAG,GAAG,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,OAAO,MAAI,MAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,QAAQ,mDAAI,CAAA,IAAI,MAAM,CAAC,GAAC,CAAC,CAAA;oBACtD,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;wBAC9B,gBAAgB,GAAG,IAAI,CAAA;wBACvB,yBAAK;qBACN;;;oBAVmB,CAAC,EAAE,CAAA;;;oBAc3B,IAAA,gBAAM,EAAC,gBAAgB,EACrB,kEAA2D,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,OAAO,mCAAI,MAAM,MAAG,EAC1F,qCAAqC,CAAC,CAAA;oBAExC,mDAAmD;oBACnD,qBAAM,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,cAAM,OAAA,IAAI,EAAJ,CAAI,CAAC,EAAA;;oBADnE,mDAAmD;oBACnD,SAAmE,CAAA;;;oBAG7D,OAAO,GAAG,UAAC,EAAsB,IAAK,OAAA,EAAE,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,IAAI,EAAJ,CAAI,CAAC,EAAtB,CAAsB,CAAA;oBAClE,qBAAM,OAAO,CAAC,GAAG,CAAC;4BAChB,SAAS,IAAa,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,CAAC;4BAC1E,SAAS,IAAa,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,CAAC;4BAC1E,cAAc,IAAQ,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAA1C,CAA0C,CAAC;4BAC/E,iBAAiB,IAAK,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAA7C,CAA6C,CAAC;4BAClF,iBAAiB,IAAK,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAA7C,CAA6C,CAAC;4BAClF,YAAY,IAAU,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,EAAxC,CAAwC,CAAC;4BAC7E,aAAa,IAAS,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,EAAzC,CAAyC,CAAC;4BAC9E,kBAAkB,IAAI,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAA9C,CAA8C,CAAC;4BACnF,gBAAgB,IAAM,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAA5C,CAA4C,CAAC;4BACjF,iBAAiB,IAAK,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAA7C,CAA6C,CAAC;4BAClF,YAAY,IAAU,OAAO,CAAC,cAAM,OAAA,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,EAA7C,CAA6C,CAAC;4BAClF,eAAe,IAAO,OAAO,CAAC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC,EAAnE,CAAmE,CAAC;yBACzG,CAAC,EAAA;;oBAbF,SAaE,CAAA;;;;;;CAEL,CAAA;AAvXY,QAAA,sBAAsB,0BAuXlC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,8BAAsB,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;;;;SACnD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/calendar_events_bulk_update.test.d.ts

@@ -0,0 +1,5 @@
+import { Session } from "../../sdk";
+export declare const calendar_events_bulk_update_tests: ({ sdk }: {
+    sdk: Session;
+}) => Promise<void>;
+//# sourceMappingURL=calendar_events_bulk_update.test.d.ts.map

package/lib/cjs/tests/api_tests/calendar_events_bulk_update.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar_events_bulk_update.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/calendar_events_bulk_update.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAWnC,eAAO,MAAM,iCAAiC;SAA0B,OAAO;mBA8X9E,CAAA"}