@tempoxyz/id 0.0.0-stage → 0.0.1

package/dist/internal/ErrorResponse.d.ts

@@ -0,0 +1,608 @@
+/**
+ * OAuth error responses (RFC 6749 §5.2), with extension members that apps branch on. Each `reason`
+ * has exactly one `error` and one HTTP status.
+ * @module
+ */
+import type { Context, TypedResponse } from 'hono';
+import { HTTPException } from 'hono/http-exception';
+import type { ContentfulStatusCode } from 'hono/utils/http-status';
+import type { JSONParsed } from 'hono/utils/types';
+import * as z from 'zod';
+/** Every refusal by `reason`, with its OAuth `error`, status, and meaning. */
+export declare const reasons: {
+    readonly already_decided: {
+        readonly description: 'The user code was already approved or denied.';
+        readonly error: 'invalid_request';
+        readonly status: 409;
+    };
+    readonly authorization_expired: {
+        readonly description: "The app's authorization request that sign-in or the approval page continues is forged or expired.";
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly body_too_large: {
+        readonly description: 'The request body exceeds 64 KiB.';
+        readonly error: 'invalid_request';
+        readonly status: 413;
+    };
+    readonly challenge_not_permitted: {
+        readonly description: 'A request carries a challenge, and its app lacks the `tempo-id:sign` scope.';
+        readonly error: 'unauthorized_client';
+        readonly status: 403;
+    };
+    readonly config_conflict: {
+        readonly description: "The chain's configuration of the account differs from the one that Tempo ID stores.";
+        readonly error: 'invalid_request';
+        readonly status: 409;
+    };
+    readonly configurable_accounts_disabled: {
+        readonly description: 'The deployment has no configurable accounts, or the request names another chain.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly cross_site_request: {
+        readonly description: 'A form or body-less write came from another site.';
+        readonly error: 'access_denied';
+        readonly status: 403;
+    };
+    readonly duplicate_limit: {
+        readonly description: 'Two limits name the same token.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly duplicate_scope: {
+        readonly description: 'Two scopes name the same call on one target, or one allows any function on a target that another names a function on.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly empty_limits: {
+        readonly description: '`limits` is an empty list.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly empty_scopes: {
+        readonly description: '`scopes` is an empty list.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly expiry_exceeds_maximum: {
+        readonly description: 'A headless key lasts longer than a year.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 403;
+    };
+    readonly expiry_passed: {
+        readonly description: 'The key expiry has passed.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly foreign_account: {
+        readonly description: "The request names a Tempo Account that is not the user's in the app's realms.";
+        readonly error: 'access_denied';
+        readonly status: 403;
+    };
+    readonly invalid_chain: {
+        readonly description: 'The key chain ID is 0.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly invalid_code: {
+        readonly description: 'The emailed code is wrong or expired.';
+        readonly error: 'invalid_grant';
+        readonly status: 401;
+    };
+    readonly invalid_expiry: {
+        readonly description: 'The key expiry is 0, which never expires.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly invalid_field: {
+        readonly description: 'A field is missing or malformed.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly invalid_id_token_hint: {
+        readonly description: 'The ID token hint is not an ID token that Tempo ID signed for the app.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly invalid_origin: {
+        readonly description: 'A headless request came from an origin its redirect URI does not allow.';
+        readonly error: 'unauthorized_client';
+        readonly status: 403;
+    };
+    readonly invalid_period: {
+        readonly description: "A limit's `period` is not a whole number of seconds.";
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly invalid_public_key: {
+        readonly description: 'The key public key is not a valid point.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly invalid_recipients: {
+        readonly description: "A scope's `recipients` names the zero address or a duplicate, or is on a call other than `transfer`, `transferWithMemo`, or `approve` on a TIP-20 token.";
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly limit_exceeds_maximum: {
+        readonly description: 'A headless key limit exceeds the token’s ceiling.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 403;
+    };
+    readonly logout_not_permitted: {
+        readonly description: 'The app that the ID token hint names may not end the session at the end-session endpoint.';
+        readonly error: 'unauthorized_client';
+        readonly status: 403;
+    };
+    readonly malformed_body: {
+        readonly description: 'The request body is not valid JSON.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly missing_key: {
+        readonly description: 'The key authorization names no key.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly missing_permissions: {
+        readonly description: "A third-party app's key request leaves out `expiry`, `limits`, or `scopes`.";
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly missing_recipients: {
+        readonly description: 'An `approve` scope names no spenders.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly passkey_link_expired: {
+        readonly description: "The email step's link to a wallet.tempo passkey expired, or the browser holds no link for it.";
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly passkey_not_permitted: {
+        readonly description: 'A passkey sign-in names an app, or reaches a realm, that holds no passkeys for Tempo ID.';
+        readonly error: 'unauthorized_client';
+        readonly status: 403;
+    };
+    readonly not_configurable: {
+        readonly description: 'The account is not configurable on the chain, so no owner can join it, or no passkey owns it, so it cannot upgrade.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly owner_exists: {
+        readonly description: 'The account already holds the owner that the request adds, or is already configurable.';
+        readonly error: 'invalid_request';
+        readonly status: 409;
+    };
+    readonly passkey_limit: {
+        readonly description: 'The user holds the most passkeys that Tempo ID registers for one user.';
+        readonly error: 'access_denied';
+        readonly status: 403;
+    };
+    readonly post_logout_redirect_not_permitted: {
+        readonly description: 'The post-logout redirect URI is not one of the post-logout redirect URIs the app registered.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly rate_limited: {
+        readonly description: 'Tempo ID, or a service it depends on, is rate limiting the request.';
+        readonly error: 'temporarily_unavailable';
+        readonly status: 429;
+    };
+    readonly reauthentication_required: {
+        readonly description: 'The request needs a session that signed in within the last 10 minutes.';
+        readonly error: 'login_required';
+        readonly status: 401;
+    };
+    readonly rejected: {
+        readonly description: 'The issuer refused the authorization request.';
+        readonly error: 'invalid_request';
+        readonly status: 400;
+    };
+    readonly scope_without_limit: {
+        readonly description: 'A scope calls a listed token that no limit names.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly session_changed: {
+        readonly description: 'The signed-in session differs from the one that the approval page showed.';
+        readonly error: 'invalid_request';
+        readonly status: 409;
+    };
+    readonly session_required: {
+        readonly description: 'The request needs a signed-in session.';
+        readonly error: 'login_required';
+        readonly status: 401;
+    };
+    readonly sign_up_not_permitted: {
+        readonly description: 'The verified address has no account, and its domain is not one where the deployment creates accounts.';
+        readonly error: 'access_denied';
+        readonly status: 403;
+    };
+    readonly unexpected: {
+        readonly description: 'An unexpected failure.';
+        readonly error: 'server_error';
+        readonly status: 500;
+    };
+    readonly unknown_code: {
+        readonly description: 'The user code is wrong or expired.';
+        readonly error: 'invalid_request';
+        readonly status: 404;
+    };
+    readonly unknown_endpoint: {
+        readonly description: 'No API endpoint matches this method and path.';
+        readonly error: 'invalid_request';
+        readonly status: 404;
+    };
+    readonly unsupported_call: {
+        readonly description: 'A selector does not parse, a scope allows any function on a TIP-20 token, or a headless scope names an unrecognized call.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly unsupported_token: {
+        readonly description: 'A limit names a token that is not supported on the chain.';
+        readonly error: 'invalid_authorization_details';
+        readonly status: 400;
+    };
+    readonly upgrade_required: {
+        readonly description: "A key authorization names a wallet.tempo passkey's account on a chain whose accounts are configurable, before its upgrade.";
+        readonly error: 'interaction_required';
+        readonly status: 403;
+    };
+    readonly upstream_unavailable: {
+        readonly description: 'A service Tempo ID depends on failed or did not respond.';
+        readonly error: 'temporarily_unavailable';
+        readonly status: 503;
+    };
+    readonly webauthn_rejected: {
+        readonly description: 'A passkey ceremony failed: its challenge is unknown, spent, or expired, or its response does not verify.';
+        readonly error: 'access_denied';
+        readonly status: 401;
+    };
+    readonly webauthn_required: {
+        readonly description: 'A request without a page names a Tempo Account whose passkey signs only on a Tempo ID page.';
+        readonly error: 'interaction_required';
+        readonly status: 403;
+    };
+};
+/** Each refusal's stable name. */
+export type Reason = keyof typeof reasons;
+/** The OAuth error code of a refusal. */
+export type Code = (typeof reasons)[Reason]['error'];
+/** The HTTP status of `reason`. */
+export type Status<reason extends Reason = Reason> = (typeof reasons)[reason]['status'];
+/** An OAuth error response for `reason`, as its schema reads it. */
+export type ErrorResponse<reason extends Reason = Reason> = reason extends Reason ? Omit<z.output<typeof schema.base>, 'error' | 'reason'> & {
+    /** Determined by `reason`. */
+    error: (typeof reasons)[reason]['error'];
+    /** A stable name for apps to branch on. */
+    reason: reason;
+} : never;
+/** The JSON response `json` returns for `reason`. One per reason, so each keeps its status. */
+export type Json<reason extends Reason> = reason extends Reason ? Response & TypedResponse<JSONParsed<ErrorResponse<reason>>, Status<reason>, 'json'> : never;
+/** A refusal's class, which `fn.errors` lists. Its static `reason` names the refusal. */
+export type Class = (abstract new (...args: never[]) => ResponseError) & {
+    /** The reason of every refusal the class constructs. */
+    readonly reason: Reason;
+};
+/** An instance of a class in `errors`, which types the refusals that a function returns. */
+export type Instance<errors extends readonly Class[]> = InstanceType<errors[number]>;
+/** A refusal, which `json` responds with when returned, and `handle` when thrown. */
+export declare class ResponseError<reason extends Reason = Reason> extends HTTPException {
+    readonly name: string;
+    /** The error response the refusal sends. */
+    readonly response: ErrorResponse<reason>;
+    constructor(response: ErrorResponse<reason>);
+}
+/**
+ * Returns the base class of `reason`'s refusals, such as for
+ * `class InvalidCodeError extends ErrorResponse.define('invalid_code') {}`.
+ */
+export declare function define<const reason extends Reason>(reason: reason): {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: ErrorResponse<reason>;
+    };
+    readonly reason: reason;
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+export declare namespace define {
+    type Options = Omit<from.Value<Reason>, 'reason'>;
+}
+declare const CrossSiteRequestError_base: {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: Omit<{
+            error: string;
+            error_description: string;
+            error_uri: string;
+            field?: string | undefined;
+            meta?: Readonly<Record<string, string | number>> | undefined;
+            reason: string;
+            request_id?: string | undefined;
+        }, "error" | "reason"> & {
+            /** Determined by `reason`. */
+            error: "access_denied";
+            /** A stable name for apps to branch on. */
+            reason: "cross_site_request";
+        };
+    };
+    readonly reason: "cross_site_request";
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+/** A cross-site form or body-less write, which `csrf()` refuses, or a cross-site account read. */
+export declare class CrossSiteRequestError extends CrossSiteRequestError_base {
+    readonly name = "ErrorResponse.CrossSiteRequestError";
+    constructor();
+}
+declare const MalformedBodyError_base: {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: Omit<{
+            error: string;
+            error_description: string;
+            error_uri: string;
+            field?: string | undefined;
+            meta?: Readonly<Record<string, string | number>> | undefined;
+            reason: string;
+            request_id?: string | undefined;
+        }, "error" | "reason"> & {
+            /** Determined by `reason`. */
+            error: "invalid_request";
+            /** A stable name for apps to branch on. */
+            reason: "malformed_body";
+        };
+    };
+    readonly reason: "malformed_body";
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+/** The body is not valid JSON, which Hono's body validator refuses. */
+export declare class MalformedBodyError extends MalformedBodyError_base {
+    readonly name = "ErrorResponse.MalformedBodyError";
+    constructor();
+}
+declare const RateLimitedError_base: {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: Omit<{
+            error: string;
+            error_description: string;
+            error_uri: string;
+            field?: string | undefined;
+            meta?: Readonly<Record<string, string | number>> | undefined;
+            reason: string;
+            request_id?: string | undefined;
+        }, "error" | "reason"> & {
+            /** Determined by `reason`. */
+            error: "temporarily_unavailable";
+            /** A stable name for apps to branch on. */
+            reason: "rate_limited";
+        };
+    };
+    readonly reason: "rate_limited";
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+/** A service Tempo ID depends on, such as Privy, is rate limiting it. */
+export declare class RateLimitedError extends RateLimitedError_base {
+    readonly name = "ErrorResponse.RateLimitedError";
+    /** Seconds that the service requested, which `handle` sends as `Retry-After`. */
+    readonly retryAfter: number | undefined;
+    constructor(options?: RateLimitedError.Options);
+}
+export declare namespace RateLimitedError {
+    type Options = {
+        /** Seconds that the service requested. */
+        retryAfter?: number | undefined;
+    };
+}
+declare const UnexpectedError_base: {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: Omit<{
+            error: string;
+            error_description: string;
+            error_uri: string;
+            field?: string | undefined;
+            meta?: Readonly<Record<string, string | number>> | undefined;
+            reason: string;
+            request_id?: string | undefined;
+        }, "error" | "reason"> & {
+            /** Determined by `reason`. */
+            error: "server_error";
+            /** A stable name for apps to branch on. */
+            reason: "unexpected";
+        };
+    };
+    readonly reason: "unexpected";
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+/** An unexpected failure, which `handle` logs. */
+export declare class UnexpectedError extends UnexpectedError_base {
+    readonly name = "ErrorResponse.UnexpectedError";
+    constructor();
+}
+declare const UnknownEndpointError_base: {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: Omit<{
+            error: string;
+            error_description: string;
+            error_uri: string;
+            field?: string | undefined;
+            meta?: Readonly<Record<string, string | number>> | undefined;
+            reason: string;
+            request_id?: string | undefined;
+        }, "error" | "reason"> & {
+            /** Determined by `reason`. */
+            error: "invalid_request";
+            /** A stable name for apps to branch on. */
+            reason: "unknown_endpoint";
+        };
+    };
+    readonly reason: "unknown_endpoint";
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+/** No API route matches the method and path. */
+export declare class UnknownEndpointError extends UnknownEndpointError_base {
+    readonly name = "ErrorResponse.UnknownEndpointError";
+    constructor();
+}
+declare const UpstreamUnavailableError_base: {
+    new (options: define.Options): {
+        message: string;
+        stack?: string;
+        cause?: unknown;
+        readonly res?: Response;
+        readonly status: ContentfulStatusCode;
+        getResponse(): Response;
+        readonly name: string;
+        /** The error response the refusal sends. */
+        readonly response: Omit<{
+            error: string;
+            error_description: string;
+            error_uri: string;
+            field?: string | undefined;
+            meta?: Readonly<Record<string, string | number>> | undefined;
+            reason: string;
+            request_id?: string | undefined;
+        }, "error" | "reason"> & {
+            /** Determined by `reason`. */
+            error: "temporarily_unavailable";
+            /** A stable name for apps to branch on. */
+            reason: "upstream_unavailable";
+        };
+    };
+    readonly reason: "upstream_unavailable";
+    captureStackTrace(targetObject: object, constructorOpt?: Function): void;
+    prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
+    stackTraceLimit: number;
+};
+/** A service Tempo ID depends on, such as Privy, failed or did not respond. */
+export declare class UpstreamUnavailableError extends UpstreamUnavailableError_base {
+    readonly name = "ErrorResponse.UpstreamUnavailableError";
+    constructor();
+}
+/** Zod schemas for every error response, which the OpenAPI document reads. */
+export declare namespace schema {
+    /** The members every error response has. */
+    const base: z.ZodObject<{
+        error: z.ZodString;
+        error_description: z.ZodString;
+        error_uri: z.ZodURL;
+        field: z.ZodOptional<z.ZodString>;
+        meta: z.ZodOptional<z.ZodReadonly<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>>>;
+        reason: z.ZodString;
+        request_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    /** The schema of `reason`'s error response. */
+    function of<const reason extends Reason>(reason: reason): z.ZodType<ErrorResponse<reason>>;
+}
+/** Returns an {@link ErrorResponse} for `reason`, with its `error` and `error_uri`. */
+export declare function from<const reason extends Reason>(value: from.Value<reason>): ErrorResponse<reason>;
+export declare namespace from {
+    type Value<reason extends Reason> = {
+        /** What went wrong and how to fix it, for people. */
+        error_description: string;
+        /** The request field at fault, as a dotted path. */
+        field?: string | undefined;
+        /** The values the refusal compared. Base units are decimal strings. */
+        meta?: Readonly<Record<string, number | string>> | undefined;
+        /** The refusal, which determines `error` and the status. */
+        reason: reason;
+    };
+}
+/**
+ * Returns the refusal for an upstream service's failure: `rate_limited` for a 429, and
+ * `upstream_unavailable` for a 408, a 5xx, a timeout, or no response. Returns `undefined` otherwise.
+ */
+export declare function fromUpstream(failure: Error | Response): Instance<typeof fromUpstream.errors> | undefined;
+export declare namespace fromUpstream {
+    /** The refusals `fromUpstream` returns. */
+    const errors: readonly [typeof RateLimitedError, typeof UpstreamUnavailableError];
+}
+/**
+ * Maps any error that a handler or middleware throws to its documented response:
+ *
+ * - A {@link ResponseError} maps to its own response.
+ * - Hono's body and CSRF refusals map to `malformed_body` and `cross_site_request`.
+ * - An upstream failure maps to `rate_limited` or `upstream_unavailable`, and logs a warning.
+ * - Anything else maps to `unexpected`, and logs the error.
+ */
+export declare function handle(error: Error, c: Context): Response & TypedResponse<{
+    error: any;
+    reason: any;
+    error_description: string;
+    error_uri: string;
+    field?: string | undefined;
+    meta?: {
+        readonly [x: string]: string | number;
+    } | undefined;
+    request_id?: string | undefined;
+}, any, "json">;
+/** Returns the response for `error`, with `Retry-After` for a `rate_limited` wait. */
+export declare function json<const reason extends Reason>(c: Context, error: ResponseError<reason>): Json<reason>;
+/** Returns a wait of `seconds` in the largest whole unit, rounded up, such as "5 minutes". */
+export declare function wait(options: wait.Options): string;
+export declare namespace wait {
+    type Options = {
+        /** Whole seconds. */
+        seconds: number;
+    };
+}
+export {};
+//# sourceMappingURL=ErrorResponse.d.ts.map

package/dist/internal/ErrorResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorResponse.d.ts","sourceRoot":"","sources":["../../src/internal/ErrorResponse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAA;AAMxB,8EAA8E;AAC9E,eAAO,MAAM,OAAO;;iBAEhB,WAAW,EAAE,+CAA+C;iBAC5D,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,mGAAmG;iBACrG,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,kCAAkC;iBAC/C,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,6EAA6E;iBAC/E,KAAK,EAAE,qBAAqB;iBAC5B,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,qFAAqF;iBACvF,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,kFAAkF;iBACpF,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,mDAAmD;iBAChE,KAAK,EAAE,eAAe;iBACtB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,iCAAiC;iBAC9C,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,uHAAuH;iBACzH,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,4BAA4B;iBACzC,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,4BAA4B;iBACzC,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,0CAA0C;iBACvD,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,4BAA4B;iBACzC,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,+EAA+E;iBACjF,KAAK,EAAE,eAAe;iBACtB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,wBAAwB;iBACrC,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,uCAAuC;iBACpD,KAAK,EAAE,eAAe;iBACtB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,2CAA2C;iBACxD,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,kCAAkC;iBAC/C,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,wEAAwE;iBAC1E,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,yEAAyE;iBAC3E,KAAK,EAAE,qBAAqB;iBAC5B,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,sDAAsD;iBACnE,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,0CAA0C;iBACvD,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,0JAA0J;iBAC5J,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,mDAAmD;iBAChE,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,2FAA2F;iBAC7F,KAAK,EAAE,qBAAqB;iBAC5B,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,qCAAqC;iBAClD,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,qCAAqC;iBAClD,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,6EAA6E;iBAC/E,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,uCAAuC;iBACpD,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,+FAA+F;iBACjG,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,0FAA0F;iBAC5F,KAAK,EAAE,qBAAqB;iBAC5B,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,qHAAqH;iBACvH,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,wFAAwF;iBAC1F,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,wEAAwE;iBAC1E,KAAK,EAAE,eAAe;iBACtB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,8FAA8F;iBAChG,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,qEAAqE;iBACvE,KAAK,EAAE,yBAAyB;iBAChC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,wEAAwE;iBAC1E,KAAK,EAAE,gBAAgB;iBACvB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,+CAA+C;iBAC5D,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,mDAAmD;iBAChE,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,2EAA2E;iBAC7E,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,wCAAwC;iBACrD,KAAK,EAAE,gBAAgB;iBACvB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,uGAAuG;iBACzG,KAAK,EAAE,eAAe;iBACtB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,wBAAwB;iBACrC,KAAK,EAAE,cAAc;iBACrB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,oCAAoC;iBACjD,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,+CAA+C;iBAC5D,KAAK,EAAE,iBAAiB;iBACxB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,2HAA2H;iBAC7H,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,2DAA2D;iBACxE,KAAK,EAAE,+BAA+B;iBACtC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,4HAA4H;iBAC9H,KAAK,EAAE,sBAAsB;iBAC7B,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EAAE,0DAA0D;iBACvE,KAAK,EAAE,yBAAyB;iBAChC,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,0GAA0G;iBAC5G,KAAK,EAAE,eAAe;iBACtB,MAAM,EAAE,GAAG;;;iBAGX,WAAW,EACT,6FAA6F;iBAC/F,KAAK,EAAE,sBAAsB;iBAC7B,MAAM,EAAE,GAAG;;CAKd,CAAA;AAED,kCAAkC;AAClC,MAAM,MAAM,MAAM,GAAG,MAAM,OAAO,OAAO,CAAA;AAEzC,yCAAyC;AACzC,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;AAEpD,mCAAmC;AACnC,MAAM,MAAM,MAAM,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IAC/C,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAA;AAEpC,oEAAoE;AACpE,MAAM,MAAM,aAAa,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IACtD,MAAM,SAAS,MAAM,GACjB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG;IACvD,8BAA8B;IAC9B,KAAK,EAAE,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;IACxC,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAA;CACf,GACD,KAAK,CAAA;AAEX,+FAA+F;AAC/F,MAAM,MAAM,IAAI,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,MAAM,GAC3D,QAAQ,GACN,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAC1E,KAAK,CAAA;AAET,yFAAyF;AACzF,MAAM,MAAM,KAAK,GAAG,CAAC,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,aAAa,CAAC,GAAG;IACvE,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,4FAA4F;AAC5F,MAAM,MAAM,QAAQ,CAAC,MAAM,SAAS,SAAS,KAAK,EAAE,IAAI,YAAY,CAClE,MAAM,CAAC,MAAM,CAAC,CACf,CAAA;AAED,qFAAqF;AACrF,qBAAa,aAAa,CACxB,MAAM,SAAS,MAAM,GAAG,MAAM,CAC9B,SAAQ,aAAa;IACrB,SAAkB,IAAI,EAAE,MAAM,CAAgC;IAC9D,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAExC,YAAY,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,EAI1C;CACF;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,MAAM,EAAE,MAAM,EAAE,MAAM;kBAIzC,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;EAsB7C;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,KAAK,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;CAClD;;kBARwB,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;;;;YA7BtC,8BAA8B;;YAE9B,2CAA2C;;;;;;;;;AAuDnD,kGAAkG;AAClG,qBAAa,qBAAsB,SAAQ,0BAA4B;IACrE,SAAkB,IAAI,yCAAwC;IAE9D,cAKC;CACF;;kBApBwB,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;;;;YA7BtC,8BAA8B;;YAE9B,2CAA2C;;;;;;;;;AAmEnD,uEAAuE;AACvE,qBAAa,kBAAmB,SAAQ,uBAAwB;IAC9D,SAAkB,IAAI,sCAAqC;IAE3D,cAKC;CACF;;kBAhCwB,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;;;;YA7BtC,8BAA8B;;YAE9B,2CAA2C;;;;;;;;;AA+EnD,yEAAyE;AACzE,qBAAa,gBAAiB,SAAQ,qBAAsB;IAC1D,SAAkB,IAAI,oCAAmC;IACzD,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAEvC,YAAY,OAAO,GAAE,gBAAgB,CAAC,OAAY,EAOjD;CACF;AAED,MAAM,CAAC,OAAO,WAAW,gBAAgB,CAAC;IACxC,KAAK,OAAO,GAAG;QACb,0CAA0C;QAC1C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAChC,CAAA;CACF;;kBAvDwB,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;;;;YA7BtC,8BAA8B;;YAE9B,2CAA2C;;;;;;;;;AAsGnD,kDAAkD;AAClD,qBAAa,eAAgB,SAAQ,oBAAoB;IACvD,SAAkB,IAAI,mCAAkC;IAExD,cAEC;CACF;;kBAhEwB,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;;;;YA7BtC,8BAA8B;;YAE9B,2CAA2C;;;;;;;;;AA+GnD,gDAAgD;AAChD,qBAAa,oBAAqB,SAAQ,yBAA0B;IAClE,SAAkB,IAAI,wCAAuC;IAE7D,cAMC;CACF;;kBA7EwB,MAAM,CAAC,OAAO;;;;;;;uBAnBb,MAAM;QAC9B,4CAA4C;;;;;;;;;;YA7BtC,8BAA8B;;YAE9B,2CAA2C;;;;;;;;;AA4HnD,+EAA+E;AAC/E,qBAAa,wBAAyB,SAAQ,6BAA8B;IAC1E,SAAkB,IAAI,4CAA2C;IAEjE,cAIC;CACF;AAED,8EAA8E;AAC9E,yBAAiB,MAAM,CAAC;IACtB,4CAA4C;IACrC,MAAM,IAAI;;;;;;;;qBA8Bf,CAAA;IAsRF,+CAA+C;IAC/C,SAAgB,EAAE,CAAC,KAAK,CAAC,MAAM,SAAS,MAAM,EAAE,MAAM,EAAE,MAAM,GAC5B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CACjE;CACF;AAED,uFAAuF;AACvF,wBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,MAAM,EAC9C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GACxB,aAAa,CAAC,MAAM,CAAC,CAUvB;AAED,MAAM,CAAC,OAAO,WAAW,IAAI,CAAC;IAC5B,KAAK,KAAK,CAAC,MAAM,SAAS,MAAM,IAAI;QAClC,qDAAqD;QACrD,iBAAiB,EAAE,MAAM,CAAA;QACzB,oDAAoD;QACpD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC1B,uEAAuE;QACvE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,SAAS,CAAA;QAC5D,4DAA4D;QAC5D,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,KAAK,GAAG,QAAQ,GACxB,QAAQ,CAAC,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,SAAS,CA2BlD;AAED,yBAAiB,YAAY,CAAC;IAC5B,2CAA2C;IACpC,MAAM,MAAM,qEAAwD,CAAA;CAC5E;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO;;;;;;;;;;gBAgB9C;AAED,sFAAsF;AACtF,wBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,MAAM,EAC9C,CAAC,EAAE,OAAO,EACV,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,GAC3B,IAAI,CAAC,MAAM,CAAC,CAKd;AAED,8FAA8F;AAC9F,wBAAgB,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,UAYzC;AAED,MAAM,CAAC,OAAO,WAAW,IAAI,CAAC;IAC5B,KAAK,OAAO,GAAG;QACb,qBAAqB;QACrB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;CACF"}