@wildo-ai/saas-backend-lib 1.1.12 → 1.1.13

package/dist/esm/inbound/services/inbound-delivery-receiver.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-delivery-receiver.backend.service.js","sourceRoot":"","sources":["../../../../src/inbound/services/inbound-delivery-receiver.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,qCAAqC,EACrC,8BAA8B,EAC9B,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,uCAAuC,EACvC,4CAA4C,EAC5C,+BAA+B,EAC/B,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,SAAS,GAKV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qDAAqD,EACrD,sCAAsC,EACtC,gBAAgB,EAChB,uBAAuB,EAMvB,yBAAyB,GAE1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;AAEjI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAOpF,OAAO,EAAE,0BAA0B,EAAkE,MAAM,oFAAoF,CAAC;AAChM,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,iEAAiE,CAAC;AAEvJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wFAAwF,CAAC;AAClI,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,GAKxB,MAAM,uEAAuE,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,kEAAkE,CAAC;AAC5I,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,8EAA8E,CAAC;AAE3I,OAAO,EAAE,4BAA4B,EAA2C,MAAM,0CAA0C,CAAC;AACjI,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EAAE,mBAAmB,EAA2D,MAAM,2EAA2E,CAAC;AACzK,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,MAAM,2EAA2E,CAAC;AAClJ,OAAO,EAAE,0BAA0B,EAA0C,MAAM,iFAAiF,CAAC;AA0BrK,uHAAuH;AACvH,SAAS,cAAc,CAAC,MAA4B,EAAE,eAAiD;IACrG,OAAO,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5F,CAAC;AAED,MAAM,MAAM,GAAG;IACb,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;IACnD,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;IACrE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACjE,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;IACnE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE;IACjE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;IAC/D,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE;IACvE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;CACV,CAAC;AAE1D,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,SAAS,oBAAoB,CAAC,GAAuB;IACnD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,sBAAsB,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;AACrG,8GAA8G;AAC9G,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,qHAAqH;AACrH,MAAM,CAAC,MAAM,mCAAmC,GAAG,sBAAsB,GAAG,EAAE,CAAC;AAE/E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,UAAgB,EAAE,uBAA+B;IAC1G,MAAM,QAAQ,GAAG,uBAAuB,GAAG,KAAK,CAAC;IACjD,OAAO,GAAG,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,YAAY,CAAC,OAAqC,EAAE,IAAY;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAe;IAC/C,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAmC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;AACvK,CAAC;AAED,wGAAwG;AACxG,IAAK,iBAIJ;AAJD,WAAK,iBAAiB;IACpB,gCAAW,CAAA;IACX,kCAAa,CAAA;IACb,4CAAuB,CAAA;AACzB,CAAC,EAJI,iBAAiB,KAAjB,iBAAiB,QAIrB;AAGM,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAIM;IACuB;IACF;IACO;IACX;IAOG;IACK;IAEE;IAEE;IAET;IAES;IAEJ;IAzB9D,KAAK,CAAuB;IAE7C,YACsD,MAAqB,EACE,QAA8C,EAChD,KAAyC,EAClC,oBAAwH,EACnI,iBAAoF,EAOjF,mBAAyF,EACpF,KAAuD,EAC3E,SAAmC,EACb,cAA6C,EAE3C,SAAgF,EAEzF,cAA6D,EAEpD,UAAmE,EAEvE,mBAAqE;QAtB9F,WAAM,GAAN,MAAM,CAAe;QACE,aAAQ,GAAR,QAAQ,CAAsC;QAChD,UAAK,GAAL,KAAK,CAAoC;QAClC,yBAAoB,GAApB,oBAAoB,CAAoG;QACnI,sBAAiB,GAAjB,iBAAiB,CAAmE;QAOjF,wBAAmB,GAAnB,mBAAmB,CAAsE;QACpF,UAAK,GAAL,KAAK,CAAkD;QAErD,mBAAc,GAAd,cAAc,CAA+B;QAE3C,cAAS,GAAT,SAAS,CAAuE;QAEzF,mBAAc,GAAd,cAAc,CAA+C;QAEpD,eAAU,GAAV,UAAU,CAAyD;QAEvE,wBAAmB,GAAnB,mBAAmB,CAAkD;QAElJ,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,kFAAkF;IAClF,KAAK,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAErC,4EAA4E;IAC5E,0DAA0D;IAC1D,4EAA4E;IAE5E,KAAK,CAAC,0BAA0B,CAAC,QAAoC,EAAE,OAA0B;QAC/F,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,iBAAiB,CAAC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnG,MAAM,MAAM,GAAG,KAAK,EAAE,MAAsC,EAAE,MAA4B,EAAiC,EAAE;YAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,iGAAiG;QACjG,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9G,IAAI,WAAW,KAAK,kBAAkB;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjI,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/K,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;QACD,iGAAiG;QACjG,+DAA+D;QAC/D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uFAAuF,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9I,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;QAED,+FAA+F;QAC/F,MAAM,YAAY,GAAG,qCAAqC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YACxI,OAAO,MAAM,CAAC,8BAA8B,CAAC,qBAAqB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,iGAAiG;QACjG,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1J,IAAI,YAAY,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAEvF,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iGAAiG;YACjG,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE,iBAAiB,CAAC,oBAAoB;YAClD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,YAAY,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC9F,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI;SACL,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,4EAA4E;IAC5E,oFAAoF;IACpF,4EAA4E;IAE5E;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,WAAmB,EAAE,QAAuB,EAAE,OAAoC,EAAE,OAA0B;QAC1I,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,CAAC;QAC5E,oHAAoH;QACpH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAsC,EAAE,MAA4B,EAAiC,EAAE;YAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,6GAA6G;QAC7G,IAAI,uBAAuB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3I,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC;QACnD,iHAAiH;QACjH,iHAAiH;QACjH,kFAAkF;QAClF,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9F,OAAO,MAAM,CAAC,8BAA8B,CAAC,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3F,CAAC;QACD,+FAA+F;QAC/F,IAAI,OAAO,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAChG,iGAAiG;QACjG,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC1F,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,QAAgC,CAAC;QACrC,iMAAiM;QACjM,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,+BAA+B,CAAC;gBACnE,WAAW;gBACX,WAAW,EAAE,QAAQ,CAAC,GAAG;gBACzB,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAiC;gBAClD,WAAW;gBACX,oHAAoH;gBACpH,kCAAkC,EAAE,IAAI,CAAC,OAAO,CAAC,kCAAkC;gBACnF,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;gBACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAA8F,CAAC;gBACrH,qHAAqH;gBACrH,MAAM,MAAM,GAAG,OAAO,EAAE,gBAAgB,KAAK,KAAK;oBAChD,CAAC,CAAC,8BAA8B,CAAC,qBAAqB;oBACtD,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,8BAA8B,CAAC,uBAAuB;wBAC1E,CAAC,CAAC,8BAA8B,CAAC,uBAAuB;wBACxD,CAAC,CAAC,8BAA8B,CAAC,iBAAiB,CAAC;gBACvD,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;YACD,gGAAgG;YAChG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,EAAE,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnI,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,0BAA0B,CAAC,SAAS;gBACvC,iGAAiG;gBACjG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvE,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,KAAK,0BAA0B,CAAC,SAAS;gBACvC,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5E,KAAK,0BAA0B,CAAC,OAAO;gBACrC,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAClE,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,gHAAgH;gBAChH,8GAA8G;gBAC9G,IAAI,QAAQ,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;oBACpJ,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,QAAQ,GAA4B;oBACxC,UAAU,EAAE,iBAAiB,CAAC,iBAAiB;oBAC/C,SAAS;oBACT,kBAAkB,EAAE,QAAQ,CAAC,OAAO;oBACpC,UAAU;oBACV,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,iGAAiG;oBACjG,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;oBACrD,SAAS,EAAE,QAAQ,CAAC,iBAAiB;oBACrC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;iBACpG,CAAC;gBACF,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAChL,CAAC;YACD,KAAK,0BAA0B,CAAC,WAAW;gBACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzG,OAAO,CAAC,CAAC,CAAC;gBACR,+GAA+G;gBAC/G,8GAA8G;gBAC9G,MAAM,SAAS,GAAU,QAAQ,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAE,SAAuC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,oBAAoB,CAChC,WAAmB,EACnB,QAAuB,EACvB,OAAoC,EACpC,OAA0B,EAC1B,IAA0D,EAC1D,UAAgB,EAChB,MAA+G;QAE/G,MAAM,IAAI,GAAG,KAAK,EAAE,MAAsC,EAAiC,EAAE;YAC3F,MAAM,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC;QAC/B,CAAC,CAAC;QACF,uGAAuG;QACvG,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAEpE,yGAAyG;QACzG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,YAAY,CAAC,CAAC;QAE5I,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,sBAAsB,CAAC,CAAC;QAClK,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qCAAqC,CAAC,CAAC,EAAE,CAAC;YAC3I,OAAO,IAAI,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAEvE,IAAI,SAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,mCAAmC,EAAE,CAAC;YACtH,OAAO,IAAI,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;QAChE,CAAC;QAED,oGAAoG;QACpG,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE,iBAAiB,CAAC,iBAAiB;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,kBAAkB,EAAE,uBAAuB,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,uBAAuB,IAAI,qDAAqD,CAAC;YAC5J,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAClD,OAAO,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,IAAI,EAAE;YAClD,IAAI;SACL,CAAC;QACF,qFAAqF;QACrF,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9G,IAAI,OAAO,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACjC,oHAAoH;YACpH,kHAAkH;YAClH,oHAAoH;YACpH,mFAAmF;YACnF,MAAM,aAAa,GAAG,OAAO,CAAC,uBAAuB,IAAI,qDAAqD,CAAC;YAC/G,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,GAAG,KAAK,CAAC,CAAC;YAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;gBAChL,GAAG,SAAS;gBACZ,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,2BAA2B,CAAC,WAAmB,EAAE,WAAmB,EAAE,OAAoD;QACtI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,gCAAgC,CAAC,sEAAsE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACxI,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,sCAAsC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CACzC,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,EACjG,wBAAwB,EACxB,GAAG,WAAW,IAAI,WAAW,EAAE,CAChC,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC,gCAAgC,CAAC,iFAAiF,EAAE,WAAW,EAAE,WAAW,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;YACzL,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,gIAAgI;IAC/G,4BAA4B,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElE,gCAAgC,CAAC,OAAe,EAAE,WAAmB,EAAE,WAAmB,EAAE,SAAkC,EAAE;QACtI,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,MAAM;YAAE,OAAO;QACtD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,WAAmB,EACnB,QAAuB,EACvB,OAAoC,EACpC,QAA2F,EAC3F,OAA0B,EAC1B,SAAiB,EACjB,UAAgB;QAEhB,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5G,+GAA+G;YAC/G,MAAM,GAAG,EAAE,IAAI,EAAE,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,gCAAgC,CAAC,EAAE,CAAC;QACpH,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YACjL,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uHAAuH,EAAE;gBACzI,WAAW,EAAE,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB,CACjC,WAAmB,EACnB,QAAuB,EACvB,OAAoC,EACpC,QAAqF,EACrF,OAA0B,EAC1B,WAA6B,EAC7B,SAAiB,EACjB,UAAgB;QAEhB,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAClD,WAAW;YACX,WAAW,EAAE,QAAQ,CAAC,GAAG;YACzB,OAAO,EAAE,QAAQ,CAAC,WAAW;YAC7B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACjH,UAAU;YACV,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,yJAAyJ;gBACzJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;gBACxK,OAAO,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAChH,CAAC;SACF,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,0BAA0B,CAAC,MAAM,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,oBAAoB,CAChC,OAAoC,EACpC,IAAa,EACb,eAAuB,EACvB,gBAAiH,EACjH,OAA0B,EAC1B,SAAiB,EACjB,UAAgB,EAChB,IAAY;QAEZ,IAAI,CAAC;YACH,wGAAwG;YACxG,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,yEAAyE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9I,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,QAAQ,GAA4B;gBACxC,UAAU,EAAE,iBAAiB,CAAC,iBAAiB;gBAC/C,SAAS;gBACT,wGAAwG;gBACxG,kBAAkB,EAAE,eAAe;gBACnC,UAAU;gBACV,OAAO,EAAE,OAAO,CAAC,OAAQ;gBACzB,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrD,IAAI,EAAE,IAAI;gBACV,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;aAChE,CAAC;YACF,2JAA2J;YAC3J,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY;gBACzD,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBAClF,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,UAAU,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,gDAAgD,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5J,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,4GAA4G;IACpG,0BAA0B,CAAC,OAAoC;QACrE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB;eAC7D,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;IAC/G,CAAC;IAED,8GAA8G;IACtG,qBAAqB,CAAC,OAAoC;QAChE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB;eAC7D,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;IAC/G,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,OAAoC,EACpC,QAAiC,EACjC,IAA0D,EAC1D,MAA+G;IAC/G,gGAAgG;IAChG,oBAAuD;IACvD,+FAA+F;IAC/F,WAAqC;IACrC,wFAAwF;IACxF,WAAqC;IACrC;;;OAGG;IACH,aAAsI;QAEtI,qHAAqH;QACrH,6GAA6G;QAC7G,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAEhG,IAAI,QAA4B,CAAC;QACjC,IAAI,WAA0B,CAAC;QAC/B,IAAI,WAA0C,CAAC;QAC/C,IAAI,aAA2C,CAAC;QAChD,IAAI,CAAC;YACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACvF,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvF,oHAAoH;YACpH,qGAAqG;YACrG,WAAW,GAAG,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACzH,mGAAmG;YACnG,4DAA4D;YAC5D,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBACjI,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5E,CAAC;YACD,8JAA8J;YAC9J,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,aAAa,EAAE,CAAC;gBAClB,+GAA+G;gBAC/G,IAAI,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,UAAU;oBAAE,OAAO,aAAa,CAAC,WAAW,EAAE,CAAC;gBACnG,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;YAC1C,CAAC;YACD,uHAAuH;YACvH,mHAAmH;YACnH,mHAAmH;YACnH,kGAAkG;YAClG,4GAA4G;YAC5G,mEAAmE;YACnE,IAAI,WAAW,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;gBAC/F,WAAW,GAAG,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY;oBACxE,CAAC,CAAC,6BAA6B,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;oBAClJ,CAAC,CAAC,IAAI,CAAC;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iGAAiG,EAAE;gBACnH,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC;aAC1F,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,kHAAkH;YAClH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,CAAC;YACjF,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACjC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,OAAO,CAAC,GAAG;gBACvB,QAAQ;gBACR,WAAW;gBACX,GAAG,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzG,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;gBAChC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,aAAa;gBACb,sGAAsG;gBACtG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;oBAClB,eAAe,EAAE,sBAAsB,CAAC,UAAU;oBAClD,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3E,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP,qHAAqH;gBACrH,gHAAgH;gBAChH,kHAAkH;gBAClH,6GAA6G;gBAC7G,2GAA2G;gBAC3G,GAAG,CAAC,WAAW;oBACb,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,OAAO,EAAE;oBAC7C,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,oBAAoB,EAAE;wBACnG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9F,EAAE,aAAa,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzJ,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,KAAK,4BAA4B,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;QACzF,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,UAAU,EAAE,CAAC;YAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC7G,kGAAkG;QAClG,6EAA6E;QAC7E,MAAM,OAAO,GAAG,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvH,MAAM,8BAA8B,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,4BAA4B,CACxC,OAAoC,EACpC,KAAmC,EACnC,QAAiC,EACjC,YAA0D;QAE1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAC3C,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC1D,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY;YAAE,OAAO;QAChI,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;YAAE,OAAO;QACtG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,4BAA4B,CAAC;gBAChD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;gBACzC,OAAO,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE;gBACzF,aAAa,EAAE,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBACrH,YAAY,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE;aACnG,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gHAAgH,EAAE;gBACjI,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,YAAY,CAAC,OAAoC,EAAE,QAAiC,EAAE,OAAgB;QAClH,IAAI,OAAO,CAAC,SAAS,KAAK,uBAAuB,CAAC,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,WAAW,EAAE,CAAC;QACrH,MAAM,QAAQ,GAAyB,MAAM,OAAO,CAAC,YAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,CAAC,MAAuC,EAAgC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACtJ,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,0BAA0B,CAAC,6BAA6B,CAAC;QAEhI,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,wBAAwB,CAAC,UAAU;gBACtC,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,KAAK,uBAAuB,CAAC,qBAAqB;oBACnF,CAAC,CAAC,+BAA+B,CAAC,wBAAwB;oBAC1D,CAAC,CAAC,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;YACpE,KAAK,wBAAwB,CAAC,WAAW;gBACvC,OAAO,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,WAAW,CAAC;oBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,WAAW,EAAE;oBAChD,CAAC,CAAC,UAAU,CAAC,+BAA+B,CAAC,6BAA6B,CAAC,CAAC;YAChF,KAAK,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,YAAY,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,6BAA6B,CAAC,CAAC;gBAChJ,IAAI,CAAC,QAAQ,CAAC,cAAc;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,wBAAwB,CAAC,CAAC;gBAC1G,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACpF,IAAI,CAAC,YAAY;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,sBAAsB,CAAC,CAAC;gBAC7F,IAAI,CAAC,oBAAoB,IAAI,CAAC,uCAAuC,CAAC,YAAY,CAAC,MAAM,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,8BAA8B,CAAC,CAAC;gBAC9K,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;YAClG,CAAC;YACD,KAAK,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnC,qLAAqL;gBACrL,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,6BAA6B,CAAC,CAAC;gBACxI,IAAI,CAAC,QAAQ,CAAC,MAAM;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,cAAc,CAAC,CAAC;gBACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,IAAI,CAAC,IAAI;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,cAAc,CAAC,CAAC;gBAC7E,IAAI,CAAC,oBAAoB,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,sBAAsB,CAAC,CAAC;gBACtJ,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,SAAS,GAAU,QAAQ,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,kBAAkB,CAAC,MAAc;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAuC,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1I,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,0BAA0B,CAAC,cAAsB;QAC7D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAA+C,gBAAgB,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAClK,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACc,OAAO,GAAwB;QAC9C,yBAAyB,EAAE,CAAC,YAA0B,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CACtF,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC;QAC9G,iBAAiB,EAAE,CAAC,YAA0B,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CAC9E,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,oBAAoB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAClG,kCAAkC,EAAE,CAAC,aAAqB,EAAE,QAAgB,EAAE,KAAa,EAAE,EAAE,CAC7F,IAAI,CAAC,kCAAkC,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC;KAC1E,CAAC;IAEF;;;OAGG;IACK,KAAK,CAAC,kCAAkC,CAAC,aAAqB,EAAE,QAAgB,EAAE,KAAa;QACrG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,sEAAsE,CAAC,CAAC;QAC1I,CAAC;QACD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpI,sLAAsL;QACtL,oHAAoH;QACpH,sHAAsH;QACtH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,UAAU,IAAI,4CAA4C,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAChJ,aAAa;gBACb,OAAO,EAAE,IAAI;gBACb,CAAC,mBAAmB,QAAQ,QAAQ,CAAC,EAAE,KAAK;gBAC5C,CAAC,mBAAmB,QAAQ,aAAa,CAAC,EAAE,UAAU;aACvD,EAAE,oCAAoC,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB,CACjC,YAA0B,EAC1B,aAAkF,EAClF,UAAuC,EACvC,KAAa,EACb,KAAa;QAEb,MAAM,MAAM,GAAG,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACnG,mGAAmG;QACnG,iFAAiF;QACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAClG,CAAC;IAEO,oBAAoB,CAAC,YAA0B,EAAE,aAAmC,EAAE,UAAuC,EAAE,MAAc;QACnJ,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,YAAY,CAAgE,CAAC;QACnJ,IAAI,aAAa,EAAE,oBAAoB,KAAK,aAAa,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,MAAM,YAAY,cAAc,aAAa,yCAAyC,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,aAAkF,EAClF,UAAuC,EACvC,MAA+B,EAC/B,MAAc;QAEd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1G,OAAO,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB,CACjC,YAA0B,EAC1B,aAAkF,EAClF,UAAuC,EACvC,MAA+B,EAC/B,MAAc;QAEd,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAA0B,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACrJ,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;YACvE,sGAAsG;YACtG,6EAA6E;YAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CACvE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CACtF,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uGAAuG;YACvG,0GAA0G;YAC1G,2EAA2E;YAC3E,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC7E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAGO,WAAW,CAAC,OAAqC,EAAE,KAAwB;QACjF,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAlyBY,qCAAqC;IADjD,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IACxD,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAOlD,WAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAC1D,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IACvD,WAAA,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAE5D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAE9D,YAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAErD,YAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAE9D,YAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;;GA1BlD,qCAAqC,CAkyBjD","sourcesContent":["/**\n * The inbound receiver (#1596): from raw request to a stored, deduplicated, scope-resolved delivery —\n * and an HTTP answer the sender can act on.\n *\n * ```\n * size / media type ─► secret ─► verify ─► parse ─► select handler ─► payload schema\n *   ─► dedup key ─► resolve scope (no fallback) ─► insert once ─► enqueue ─► 200\n * ```\n *\n * The answers are chosen for what they tell a SENDER to do:\n *\n * | answer | when | sender's reading |\n * |---|---|---|\n * | 200 | stored, duplicate, unroutable, or an event no handler takes | done; do not retry |\n * | 400 | verified but not what the handler declared | a retry will not help |\n * | 401 | signature, timestamp or secret refused | not accepted |\n * | 413 / 415 | too large / not JSON | a retry will not help |\n * | 500 | something on OUR side failed before the row existed | retry later |\n *\n * Handler execution never happens here: an agent-backed handler outlasts any provider's delivery\n * timeout, and a handler failure is the worker's to retry, not the sender's.\n *\n * A provider endpoint may replace the 200's body with the answer its own contract requires (#2659): a Slack\n * `url_verification` handshake is answered with its challenge and stored nowhere; every other accepted request\n * gets the endpoint's `acknowledge` answer (an empty 200 for Slack, an invoke response for a Teams card action).\n * The answer is a pure function of the verified request, so it is due in milliseconds whatever the handler does.\n *\n * A chat SEARCH (#2666 S7, a Teams message-extension search) is the one request answered with what it asked for: it is\n * routed by the endpoint's own resolver, answered by the chat search lane within the vendor's deadline, written through\n * the endpoint's `answerChatSearch`, and stored nowhere.\n */\nimport { inject, injectable, optional } from 'inversify';\nimport {\n  InboundChatInputKind,\n  ChatBotOwnerScope,\n  CoreResourceType,\n  ErrorType,\n  deriveInboundEndpointSecretEnvVarName,\n  InboundDeliveryRejectionReason,\n  InboundDeliveryUnroutableReason,\n  InboundHandlerScopeMode,\n  InboundResolvedScopeKind,\n  InboundSenderAssurance,\n  InboundSourceKind,\n  isAuthorityConferringOrganizationStatus,\n  PROVIDER_CONNECTION_ROUTING_FACT_PROVENANCES,\n  isAuthorityConferringUserStatus,\n  isWildoBackendError,\n  jsonParsingSchemaOf,\n  ResourcePrimaryScope,\n  SortOrder,\n  type InboundDeliveryResolvedScope,\n  type OrganizationStatus,\n  type ResourceType,\n  type UserStatus,\n} from '@wildo-ai/saas-models';\nimport {\n  HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS,\n  HOOK_REREAD_TRIGGER_DEFAULT_RATE_LIMIT,\n  Hook_ContentType,\n  isReReadTriggerEndpoint,\n  type Hook_Acknowledgement,\n  type Hook_Endpoint,\n  type Hook_InboundChatCommand,\n  type Hook_InboundChatMessage,\n  type Hook_InboundPersonalConversation,\n  Hook_ChatSearchAnswerKind,\n  type Hook_ChatSearchAnswer,\n} from '@wildo-ai/external-connectors-models';\nimport { chatConversationOrderingKeyOf } from '~wildo-backend-lib/flows-actors/services/chat-conversation-store.backend.service';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { ApplicationIdentityBackendService } from '~wildo-backend-lib/applications/services/application-identity.backend.service';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport type { QueueBackendService } from '~wildo-backend-lib/queue/queue.backend.service';\nimport { ProviderInboundRequestKind, type ProviderInboundRequest, type WebhookHandlerBackendService } from '~wildo-backend-lib/notifications/webhooks/services/webhook-handler.backend.service';\nimport { decodeInboundBody, inboundContentTypeOf, providerEndpointKeptHeaders } from '~wildo-backend-lib/inbound/models/inbound-body-decoding.backend';\nimport type { RateLimitBackendService } from '~wildo-backend-lib/errors/services/rate-limit.backend.service';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { isMalformedIdLookupError } from '~wildo-backend-lib/base-classes/services/repositories/resource-write-integrity.backend';\nimport {\n  inboundSourceKey,\n  normalizeInboundSubjectKeys,\n  scopesAdmittedByHandler,\n  type AnyInboundHandlerDefinition,\n  type InboundResolvedScope,\n  type InboundScopeLookups,\n  type VerifiedInboundDelivery,\n} from '~wildo-backend-lib/inbound/models/inbound-handler.backend.definitions';\nimport { InboundScopeStandingPolicy, inboundScopeStandingPolicyOf } from '~wildo-backend-lib/inbound/models/inbound-engine-handler.backend';\nimport { headersKeptForScheme, verifyInboundDelivery } from '~wildo-backend-lib/inbound/verification/inbound-verification-schemes.backend';\nimport type { InboundApplicationEndpoint, InboundHandlerRegistryBackendService } from './inbound-handler-registry.backend.service';\nimport { InboundDeliveryInsertOutcome, type InboundDeliveryStoreBackendService } from './inbound-delivery-store.backend.service';\nimport { InboundDeliveryAudit } from './inbound-delivery-audit.backend';\nimport { enqueueInboundDeliveryDispatch } from './inbound-delivery-dispatch-queue.backend';\nimport type { ChatIdentityLinkBackendService } from './chat-identity-link.backend.service';\nimport { ChatSearchRouteKind, type ChatSearchLaneBackendService, type ChatSearchRoute } from '~wildo-backend-lib/inbound/chat-commands/chat-search-lane.backend.service';\nimport { CHAT_COMMAND_TRY_AGAIN_LABEL_REF, chatCommandLabelKey } from '~wildo-backend-lib/inbound/chat-commands/chat-command-words.backend.utils';\nimport { ChatCommandFormLaneOutcome, type ChatCommandFormLaneBackendService } from '~wildo-backend-lib/inbound/chat-commands/chat-command-form-lane.backend.service';\n\n/** The request, as the route hands it over. Header names lower-cased. */\nexport interface InboundRawRequest {\n  /** The exact bytes received, or `undefined` when the body parser kept none. */\n  readonly rawBody: Buffer | undefined;\n  readonly headers: Readonly<Record<string, string | string[] | undefined>>;\n  /** The body parser refused the body for its size before any bytes were kept (the parser's own ceiling). */\n  readonly bodyTooLarge?: boolean;\n  /**\n   * The path and query string the request arrived on, exactly as received (`req.originalUrl`). Read only by a scheme\n   * that signs the URL it was sent to (Twilio's, #3394); never stored.\n   */\n  readonly requestTarget?: string;\n}\n\nexport interface InboundReceiveAnswer {\n  readonly status: number;\n  readonly body: Readonly<Record<string, unknown>>;\n  /**\n   * The provider endpoint's own answer (#2659), written INSTEAD of `body` with a 200. Present only on a request the\n   * engine accepted; a refusal always carries the engine's answer.\n   */\n  readonly acknowledgement?: Hook_Acknowledgement;\n}\n\n/** The engine's 200 answer, carrying the endpoint's acknowledgement when it declares one. Never replaces a refusal. */\nfunction acknowledgedBy(answer: InboundReceiveAnswer, acknowledgement: Hook_Acknowledgement | undefined): InboundReceiveAnswer {\n  return acknowledgement && answer.status === 200 ? { ...answer, acknowledgement } : answer;\n}\n\nconst ANSWER = {\n  received: { status: 200, body: { received: true } },\n  duplicate: { status: 200, body: { received: true, duplicate: true } },\n  ignored: { status: 200, body: { received: true, ignored: true } },\n  unauthorized: { status: 401, body: { error: 'Invalid signature' } },\n  malformed: { status: 400, body: { error: 'Malformed delivery' } },\n  tooLarge: { status: 413, body: { error: 'Payload too large' } },\n  unsupported: { status: 415, body: { error: 'Unsupported media type' } },\n  retryLater: { status: 500, body: { error: 'Processing failed' } },\n} as const satisfies Record<string, InboundReceiveAnswer>;\n\n/** The longest dedup or ordering key the ledger stores (the schema's bound). */\nexport const INBOUND_KEY_MAX_LENGTH = 512;\n\nfunction isStorableInboundKey(key: string | undefined): key is string {\n  return typeof key === 'string' && key.length > 0 && key.length <= INBOUND_KEY_MAX_LENGTH;\n}\n\n/**\n * What EVERY request to a re-read trigger endpoint is answered (#2909): known or unknown reference, rate-limited,\n * malformed, stored or not. Its sender is unverified, so no answer may tell it anything, least of all which references\n * exist (a store failure answered 500 would say that one did).\n */\nexport const REREAD_TRIGGER_ANSWER: InboundReceiveAnswer = { status: 202, body: { received: true } };\n/** The largest notification a re-read trigger endpoint reads when its provider declares no `maxBodyBytes`. */\nexport const REREAD_TRIGGER_DEFAULT_MAX_BODY_BYTES = 16 * 1024;\n/** The longest reference kept: the delivery id appends the window's instant to it, within the ledger's key bound. */\nexport const REREAD_TRIGGER_MAX_REFERENCE_LENGTH = INBOUND_KEY_MAX_LENGTH - 32;\n\n/**\n * A re-read trigger's delivery id (#2909): the reference and the start of the coalescing window the notification arrived\n * in. Two notifications for one reference inside one window are one delivery, so a reference is re-read at most once per\n * window, whatever a sender sends.\n */\nexport function reReadTriggerDeliveryId(reference: string, receivedAt: Date, coalescingWindowSeconds: number): string {\n  const windowMs = coalescingWindowSeconds * 1_000;\n  return `${reference}@${new Date(Math.floor(receivedAt.getTime() / windowMs) * windowMs).toISOString()}`;\n}\n\nfunction headerString(headers: InboundRawRequest['headers'], name: string): string | undefined {\n  const value = headers[name];\n  return Array.isArray(value) ? value[0] : value;\n}\n\nfunction readPath(value: unknown, dotPath: string): unknown {\n  return dotPath.split('.').reduce<unknown>((current, key) => (current && typeof current === 'object' ? (current as Record<string, unknown>)[key] : undefined), value);\n}\n\n/** What a routing lookup found: one owner, none, or rows of two different owners (which names none). */\nenum ScopeOwnerOutcome {\n  ONE = 'one',\n  NONE = 'none',\n  AMBIGUOUS = 'ambiguous',\n}\n\n@injectable()\nexport class InboundDeliveryReceiverBackendService {\n  private readonly audit: InboundDeliveryAudit;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.InboundHandlerRegistryService) private readonly registry: InboundHandlerRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.InboundDeliveryStoreService) private readonly store: InboundDeliveryStoreBackendService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositoriesRegistry: Pick<RepositoriesRegistryHandlerBackendService, 'findManyForInfrastructure' | 'readUnscopedByKey'>,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: Pick<ResourcesRegistryBackendService, 'getResourceConfiguration'>,\n    /**\n     * The APPLICATION RECORD's id, stamped into an application-variant row's `applicationId` scope\n     * column. Never `AppConfigurationService.applicationId`: that is the PLATFORM's id for this\n     * process, and a row stamped with it is invisible to the application-scope list that filters by\n     * the record id (see `platform-application-id-readers.guard.test.ts`).\n     */\n    @inject(SAAS_SERVICE_TYPES.ApplicationIdentityService) private readonly applicationIdentity: Pick<ApplicationIdentityBackendService, 'getCanonicalApplicationId'>,\n    @inject(SAAS_SERVICE_TYPES.QueueBackendService) @optional() private readonly queue?: Pick<QueueBackendService, 'enqueueCustomBatch'>,\n    @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional() auditLogs?: AuditLogsBackendService,\n    @inject(SAAS_SERVICE_TYPES.WebhookHandlerService) @optional() private readonly webhookHandler?: WebhookHandlerBackendService,\n    /** #2664 S5b: where a verified personal conversation is recorded, on the sender's chat identity link. */\n    @inject(SAAS_SERVICE_TYPES.ChatIdentityLinkService) @optional() private readonly chatLinks?: Pick<ChatIdentityLinkBackendService, 'rememberPersonalConversation'>,\n    /** #2666 S7: where a chat search is answered, in the request. Optional: without it a search is answered \"try again\". */\n    @inject(SAAS_SERVICE_TYPES.ChatSearchLane) @optional() private readonly chatSearchLane?: Pick<ChatSearchLaneBackendService, 'answer'>,\n    /** #2909: the per-endpoint limit of a re-read trigger. Absent, every such notification is dropped (fail closed). */\n    @inject(SAAS_SERVICE_TYPES.RateLimitBackendService) @optional() private readonly rateLimits?: Pick<RateLimitBackendService, 'checkPolicyForSubject'>,\n    /** #2770: where a chat command's form is opened while the person waits. Optional: without it every command runs as typed. */\n    @inject(SAAS_SERVICE_TYPES.ChatCommandFormLane) @optional() private readonly chatCommandFormLane?: Pick<ChatCommandFormLaneBackendService, 'open'>,\n  ) {\n    this.audit = new InboundDeliveryAudit(auditLogs);\n  }\n\n  /** The clock; a property so tests can pin time without DI trying to inject it. */\n  clock: () => Date = () => new Date();\n\n  // ─────────────────────────────────────────────────────────────────────────\n  // Application endpoints: POST /webhooks/app/{endpointKey}\n  // ─────────────────────────────────────────────────────────────────────────\n\n  async receiveApplicationEndpoint(endpoint: InboundApplicationEndpoint, request: InboundRawRequest): Promise<InboundReceiveAnswer> {\n    const base = { sourceKind: InboundSourceKind.APPLICATION_ENDPOINT, sourceKey: endpoint.sourceKey };\n    const reject = async (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer): Promise<InboundReceiveAnswer> => {\n      await this.audit.rejected({ ...base, reason });\n      return answer;\n    };\n\n    // Media type first: only JSON keeps its raw bytes, and a scheme cannot verify what was not kept.\n    const contentType = (headerString(request.headers, 'content-type') ?? '').split(';')[0]!.trim().toLowerCase();\n    if (contentType !== 'application/json') return reject(InboundDeliveryRejectionReason.UNSUPPORTED_MEDIA_TYPE, ANSWER.unsupported);\n\n    const declaredLength = Number(headerString(request.headers, 'content-length'));\n    if (request.bodyTooLarge || (Number.isFinite(declaredLength) && declaredLength > endpoint.maxBodyBytes) || (request.rawBody && request.rawBody.length > endpoint.maxBodyBytes)) {\n      return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n    }\n    // No re-serialization fallback: a JSON.stringify of the parsed body does not byte-match what the\n    // sender signed, so \"verifying\" it would verify our own bytes.\n    if (!request.rawBody) {\n      this.logger.error('Inbound delivery refused: the raw request body was not kept, so it cannot be verified', { sourceKey: endpoint.sourceKey });\n      return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n    }\n\n    // I1 at request time: a secret can be removed after mount, and an empty secret is never a key.\n    const secretEnvVar = deriveInboundEndpointSecretEnvVarName(endpoint.endpointKey);\n    const secret = process.env[secretEnvVar] ?? '';\n    if (!secret) {\n      this.logger.error('Inbound delivery refused: the endpoint has no verification secret', { sourceKey: endpoint.sourceKey, secretEnvVar });\n      return reject(InboundDeliveryRejectionReason.SECRET_NOT_CONFIGURED, ANSWER.unauthorized);\n    }\n    const receivedAt = this.clock();\n    // assurance-control: WILDO.SECURITY.FAIL_CLOSED — no dispatch without a verified signature (I1).\n    const verification = verifyInboundDelivery(endpoint.source.verification, { rawBody: request.rawBody, headers: request.headers, secret, now: receivedAt });\n    if (verification.ok === false) return reject(verification.reason, ANSWER.unauthorized);\n\n    let json: unknown;\n    try {\n      json = JSON.parse(request.rawBody.toString('utf8'));\n    } catch {\n      return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n    }\n    const eventTypeValue = readPath(json, endpoint.eventTypePath);\n    const eventType = typeof eventTypeValue === 'string' ? eventTypeValue : undefined;\n    const handler = this.registry.selectApplicationEndpointHandler(endpoint, eventType);\n    if (!handler) {\n      // An event no handler declared is not ours to store; acknowledging stops the sender retrying it.\n      return ANSWER.ignored;\n    }\n\n    const delivery: VerifiedInboundDelivery = {\n      sourceKind: InboundSourceKind.APPLICATION_ENDPOINT,\n      sourceKey: endpoint.sourceKey,\n      ...(verification.deliveryId !== undefined ? { providerDeliveryId: verification.deliveryId } : {}),\n      ...(verification.signedAt !== undefined ? { signedAt: verification.signedAt } : {}),\n      receivedAt,\n      rawBody: request.rawBody,\n      headers: this.keptHeaders(request.headers, headersKeptForScheme(endpoint.source.verification)),\n      ...(eventType !== undefined ? { eventType } : {}),\n      json,\n    };\n    return this.admit(handler, delivery, base, reject);\n  }\n\n  // ─────────────────────────────────────────────────────────────────────────\n  // Provider endpoints bound to a handler: POST /webhooks/{providerRef}/{endpointKey}\n  // ─────────────────────────────────────────────────────────────────────────\n\n  /**\n   * A provider-declared endpoint whose events a handler takes. Verification is the provider's registered adapter\n   * (Stripe's SDK `constructEvent`, for one) or, for an engine-verified scheme (Svix, Slack v0, the Bot Framework\n   * token), engine code; both refuse an empty secret at request time. Everything after it is the durable path.\n   */\n  async receiveProviderEndpoint(providerRef: string, endpoint: Hook_Endpoint, handler: AnyInboundHandlerDefinition, request: InboundRawRequest): Promise<InboundReceiveAnswer> {\n    const sourceKey = inboundSourceKey(handler.source);\n    const base = { sourceKind: InboundSourceKind.PROVIDER_ENDPOINT, sourceKey };\n    // The receipt instant, taken before verification: a chat search's deadline is spent from it, verification included.\n    const receivedAt = this.clock();\n    const reject = async (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer): Promise<InboundReceiveAnswer> => {\n      await this.audit.rejected({ ...base, reason });\n      return answer;\n    };\n    // An unsigned notification that only triggers a re-read (#2909): handled by the engine, verified by nothing.\n    if (isReReadTriggerEndpoint(endpoint)) return this.receiveReReadTrigger(providerRef, endpoint, handler, request, base, receivedAt, reject);\n    if (!this.webhookHandler) return ANSWER.retryLater;\n    // The media types the endpoint declares (#2659), JSON when it declares none. Checked FIRST, like the application\n    // endpoint's: a body the engine would not decode is refused without being interpreted, and a type neither global\n    // parser reads (so no raw bytes were kept) is answered 415, not a misleading 400.\n    const contentType = inboundContentTypeOf(request.headers['content-type']);\n    if (!contentType || !(endpoint.contentTypes ?? [Hook_ContentType.JSON]).includes(contentType)) {\n      return reject(InboundDeliveryRejectionReason.UNSUPPORTED_MEDIA_TYPE, ANSWER.unsupported);\n    }\n    // Over the body parser's own limit (#3395): refused before anything was read into the request.\n    if (request.bodyTooLarge) return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n    if (!request.rawBody) return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n    // The endpoint's own cap, when its provider declares one: it is the ledger that stores the body.\n    if (endpoint.maxBodyBytes !== undefined && request.rawBody.length > endpoint.maxBodyBytes) {\n      return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n    }\n\n    let verified: ProviderInboundRequest;\n    // assurance-control: WILDO.SECURITY.FAIL_CLOSED — a provider event (billing's, since #1629; Slack's and Teams', #2659) is stored and dispatched only after its signature or token verified (I1).\n    try {\n      verified = await this.webhookHandler.verifyAndParseForInboundHandler({\n        providerRef,\n        endpointKey: endpoint.key,\n        endpoint,\n        rawBody: request.rawBody,\n        headers: request.headers as Record<string, string>,\n        contentType,\n        // An organization's own bot routes by the connection reporting it, through the same lookup a resolver uses (#2663).\n        findOrganizationIdByConnectionFact: this.lookups.findOrganizationIdByConnectionFact,\n        ...(request.requestTarget === undefined ? {} : { requestTarget: request.requestTarget }),\n      });\n    } catch (error) {\n      if (isWildoBackendError(error) && error.type === ErrorType.AUTHORIZATION) {\n        const refusal = error.context as { secretConfigured?: boolean; reason?: InboundDeliveryRejectionReason } | undefined;\n        // An engine-verified endpoint (#1600) names its refusal; an adapter-verified one only says whether a secret existed.\n        const reason = refusal?.secretConfigured === false\n          ? InboundDeliveryRejectionReason.SECRET_NOT_CONFIGURED\n          : refusal?.reason === InboundDeliveryRejectionReason.TIMESTAMP_OUT_OF_WINDOW\n            ? InboundDeliveryRejectionReason.TIMESTAMP_OUT_OF_WINDOW\n            : InboundDeliveryRejectionReason.SIGNATURE_INVALID;\n        return reject(reason, ANSWER.unauthorized);\n      }\n      // Ours, not the sender's: a key set that could not be fetched, an endpoint function that threw.\n      this.logger.error('Inbound provider delivery could not be verified or read', { sourceKey, ...projectCaughtErrorLogFields(error) });\n      return ANSWER.retryLater;\n    }\n\n    switch (verified.kind) {\n      case ProviderInboundRequestKind.HANDSHAKE:\n        // A reachability check, already verified: answered as the provider requires, and stored nowhere.\n        this.logger.info('Inbound provider handshake answered', { sourceKey });\n        return acknowledgedBy(ANSWER.received, verified.answer);\n      case ProviderInboundRequestKind.MALFORMED:\n        return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n      case ProviderInboundRequestKind.IGNORED:\n        return acknowledgedBy(ANSWER.ignored, verified.acknowledgement);\n      case ProviderInboundRequestKind.EVENT: {\n        // #2770: a command whose form the vendor must open while the person waits (a Slack modal) is answered here, and\n        // stored nowhere: its submission comes back as a command of its own. Declined, it is stored and run as typed.\n        if (verified.chatCommand && await this.openedChatCommandForm(providerRef, endpoint, handler, verified, request, contentType, sourceKey, receivedAt)) {\n          return acknowledgedBy(ANSWER.received, verified.acknowledgement);\n        }\n        const delivery: VerifiedInboundDelivery = {\n          sourceKind: InboundSourceKind.PROVIDER_ENDPOINT,\n          sourceKey,\n          providerDeliveryId: verified.eventId,\n          receivedAt,\n          rawBody: request.rawBody,\n          // The media type is kept: the dispatcher decodes the stored bytes as what they were received as.\n          headers: providerEndpointKeptHeaders(request.headers),\n          eventType: verified.providerEventType,\n          json: verified.body,\n          ...(verified.verifiedAudience === undefined ? {} : { verifiedAudience: verified.verifiedAudience }),\n        };\n        return acknowledgedBy(await this.admit(handler, delivery, base, reject, verified.personalConversation, verified.chatMessage, verified.chatCommand), verified.acknowledgement);\n      }\n      case ProviderInboundRequestKind.CHAT_SEARCH:\n        return this.answerChatSearch(providerRef, endpoint, handler, verified, request, sourceKey, receivedAt);\n      default: {\n        // A shape the receiver does not know is OUR defect (a verifier and a receiver out of step), never something to\n        // answer with: throwing reaches the route's error handler as a 500, where returning it would write no status.\n        const unhandled: never = verified;\n        throw new Error(`Unknown provider inbound request kind: ${JSON.stringify((unhandled as { kind?: unknown } | null)?.kind)}`);\n      }\n    }\n  }\n\n  // ─────────────────────────────────────────────────────────────────────────\n\n  /**\n   * A notification nobody can verify, that only names an object to re-read (#2909, `Hook_TriggerStrategy.WEBHOOK_TRIGGERS_POLL`).\n   *\n   * Nothing in it is trusted: it is rate-limited per endpoint before anything is read, its reference is looked up by the\n   * handler's own resolver (the record must already be this application's, or it is dropped), and only that reference is\n   * stored, under an id derived from it and the coalescing window. The handler re-reads the object from the vendor's\n   * authenticated API; that answer, never the notification, is what it records. Every outcome is answered 202.\n   *\n   * What the answer does not hide (review F7, a stated residual): its TIMING. A known reference costs a store write, an\n   * audit row and an enqueue; an unknown one a lookup and an aggregated refusal. A sender who already holds a candidate\n   * reference (a signer sees theirs) may tell from latency whether this application uses it. It learns nothing it could\n   * act on: the notification is never believed, and a known reference only causes a re-read at the vendor it came from.\n   *\n   * assurance-control: WILDO.SECURITY.FAIL_CLOSED — an unverified notification changes nothing by itself: it is dropped\n   * unless it names a known record, and then only triggers an authenticated re-read.\n   */\n  private async receiveReReadTrigger(\n    providerRef: string,\n    endpoint: Hook_Endpoint,\n    handler: AnyInboundHandlerDefinition,\n    request: InboundRawRequest,\n    base: { sourceKind: InboundSourceKind; sourceKey: string },\n    receivedAt: Date,\n    reject: (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer) => Promise<InboundReceiveAnswer>,\n  ): Promise<InboundReceiveAnswer> {\n    const drop = async (reason: InboundDeliveryRejectionReason): Promise<InboundReceiveAnswer> => {\n      await reject(reason, REREAD_TRIGGER_ANSWER);\n      return REREAD_TRIGGER_ANSWER;\n    };\n    // The route gate withholds an endpoint without one, so this is a declaration that changed after mount.\n    const trigger = endpoint.reReadTrigger;\n    if (!trigger) return drop(InboundDeliveryRejectionReason.MALFORMED);\n\n    // The endpoint's rate, FIRST: a flood is counted and dropped before anything of it is read or looked up.\n    if (!(await this.admittedByReReadTriggerRate(providerRef, endpoint.key, trigger))) return drop(InboundDeliveryRejectionReason.RATE_LIMITED);\n\n    const contentType = inboundContentTypeOf(request.headers['content-type']);\n    if (!contentType || !(endpoint.contentTypes ?? [Hook_ContentType.JSON]).includes(contentType)) return drop(InboundDeliveryRejectionReason.UNSUPPORTED_MEDIA_TYPE);\n    if (request.bodyTooLarge || (request.rawBody && request.rawBody.length > (endpoint.maxBodyBytes ?? REREAD_TRIGGER_DEFAULT_MAX_BODY_BYTES))) {\n      return drop(InboundDeliveryRejectionReason.BODY_TOO_LARGE);\n    }\n    if (!request.rawBody) return drop(InboundDeliveryRejectionReason.MALFORMED);\n    const decoded = decodeInboundBody(request.rawBody, contentType);\n    if (!decoded.ok) return drop(InboundDeliveryRejectionReason.MALFORMED);\n\n    let reference: string | null;\n    try {\n      reference = trigger.identifyReference({ rawBody: new Uint8Array(request.rawBody), headers: request.headers, contentType, body: decoded.body });\n    } catch {\n      reference = null;\n    }\n    if (typeof reference !== 'string' || reference.length === 0 || reference.length > REREAD_TRIGGER_MAX_REFERENCE_LENGTH) {\n      return drop(InboundDeliveryRejectionReason.UNKNOWN_REFERENCE);\n    }\n\n    // Only the reference is kept: the notification's other bytes are unverified and nothing reads them.\n    const json = { reference };\n    const delivery: VerifiedInboundDelivery = {\n      sourceKind: InboundSourceKind.PROVIDER_ENDPOINT,\n      sourceKey: base.sourceKey,\n      providerDeliveryId: reReadTriggerDeliveryId(reference, receivedAt, trigger.coalescingWindowSeconds ?? HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS),\n      receivedAt,\n      rawBody: Buffer.from(JSON.stringify(json), 'utf8'),\n      headers: { 'content-type': Hook_ContentType.JSON },\n      json,\n    };\n    // One re-read of a reference at a time: its deliveries are ordered by the reference.\n    const admission = { orderingKey: reference, dropUnknown: () => drop(InboundDeliveryRejectionReason.UNKNOWN_REFERENCE) };\n    const leading = await this.admit(handler, delivery, base, reject, undefined, undefined, undefined, admission);\n    if (leading === ANSWER.duplicate) {\n      // The TRAILING edge (#2909 review F3): this window's re-read is already stored and may already have run, so a later\n      // notification would be lost, and the vendor never retries. One more delivery is kept for the NEXT window, due at\n      // its start: the reference is re-read once per window at most, and the last notification of a window is never lost.\n      // A third notification in the window finds that one too, and is a duplicate of it.\n      const windowSeconds = trigger.coalescingWindowSeconds ?? HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS;\n      const nextWindowStart = new Date((Math.floor(receivedAt.getTime() / (windowSeconds * 1_000)) + 1) * windowSeconds * 1_000);\n      await this.admit(handler, { ...delivery, providerDeliveryId: reReadTriggerDeliveryId(reference, nextWindowStart, windowSeconds) }, base, reject, undefined, undefined, undefined, {\n        ...admission,\n        notBefore: nextWindowStart,\n      });\n    }\n    return REREAD_TRIGGER_ANSWER;\n  }\n\n  /**\n   * Counts one request against the endpoint's limit, all senders together (#2909). `false` when it is over the limit, and\n   * when the limiter cannot answer: an unverified notification is never worth admitting unmetered, and polling covers\n   * whatever a dropped one named.\n   */\n  private async admittedByReReadTriggerRate(providerRef: string, endpointKey: string, trigger: NonNullable<Hook_Endpoint['reReadTrigger']>): Promise<boolean> {\n    if (!this.rateLimits) {\n      this.logLimiterFailureAtMostPerMinute('A re-read trigger notification was dropped: no rate limiter is bound', providerRef, endpointKey);\n      return false;\n    }\n    const limit = trigger.rateLimit ?? HOOK_REREAD_TRIGGER_DEFAULT_RATE_LIMIT;\n    try {\n      await this.rateLimits.checkPolicyForSubject(\n        { customWindows: [{ requestsPerWindow: limit.maxRequests, windowSeconds: limit.windowSeconds }] },\n        'inbound-reread-trigger',\n        `${providerRef}:${endpointKey}`,\n      );\n      return true;\n    } catch (error) {\n      if (!(isWildoBackendError(error) && error.type === ErrorType.RATE_LIMIT)) {\n        this.logLimiterFailureAtMostPerMinute('A re-read trigger notification was dropped: its rate limit could not be checked', providerRef, endpointKey, projectCaughtErrorLogFields(error));\n      }\n      return false;\n    }\n  }\n\n  /** When each endpoint's limiter failure was last logged: unauthenticated requests must not write one line each (review F10). */\n  private readonly reReadTriggerLimiterLoggedAt = new Map<string, number>();\n\n  private logLimiterFailureAtMostPerMinute(message: string, providerRef: string, endpointKey: string, fields: Record<string, unknown> = {}): void {\n    const key = `${providerRef}:${endpointKey}`;\n    const now = this.clock().getTime();\n    const last = this.reReadTriggerLimiterLoggedAt.get(key);\n    if (last !== undefined && now - last < 60_000) return;\n    this.reReadTriggerLimiterLoggedAt.set(key, now);\n    this.logger.error(message, { providerRef, endpointKey, ...fields });\n  }\n\n  /**\n   * Answers a chat search in the request (#2666 S7 step 6): routed by the handler's own payload schema and scope resolver,\n   * exactly as an event would be, then answered by the chat search lane and written by the endpoint's `answerChatSearch`.\n   * Nothing is stored, enqueued, or audited as a delivery: a search is a query, sent per keystroke. Its row, when it has\n   * one, is the command door's (`CHAT_COMMAND_RUN`, for each outcome or refusal decided for a known member).\n   *\n   * Every failure here is answered with a sentence, never with \"retry later\": a 500 would show the person an error for a\n   * keystroke, and the next keystroke is the retry.\n   */\n  private async answerChatSearch(\n    providerRef: string,\n    endpoint: Hook_Endpoint,\n    handler: AnyInboundHandlerDefinition,\n    verified: Extract<ProviderInboundRequest, { kind: ProviderInboundRequestKind.CHAT_SEARCH }>,\n    request: InboundRawRequest,\n    sourceKey: string,\n    receivedAt: Date,\n  ): Promise<InboundReceiveAnswer> {\n    let answer: Hook_ChatSearchAnswer;\n    if (!this.chatSearchLane) {\n      this.logger.error('A chat search arrived, but no chat search lane is bound in this process', { sourceKey });\n      // No lane, no words: the sentence's key, visibly unworded, rather than an answer the vendor shows as an error.\n      answer = { kind: Hook_ChatSearchAnswerKind.MESSAGE, text: chatCommandLabelKey(CHAT_COMMAND_TRY_AGAIN_LABEL_REF) };\n    } else {\n      const route = await this.routeUnstoredRequest(handler, verified.body, verified.search.vendorRequestId, verified.verifiedAudience, request, sourceKey, receivedAt, 'chat search');\n      answer = await this.chatSearchLane.answer({ route, connectionRef: providerRef, sourceKey, search: verified.search, receivedAt });\n    }\n    try {\n      return acknowledgedBy(ANSWER.received, endpoint.answerChatSearch!(answer));\n    } catch (error) {\n      this.logger.error('Webhook endpoint function \\'answerChatSearch\\' threw; the search is answered with the engine\\'s plain acknowledgement', {\n        providerRef, sourceKey, ...projectCaughtErrorLogFields(error),\n      });\n      return ANSWER.received;\n    }\n  }\n\n  /**\n   * Opens a chat command's form while the person waits (#2770), through the chat command form lane: `true` when it\n   * opened (the request is answered and nothing is stored), `false` when it declined, and the command is stored and run as\n   * typed. The lane routes the command as a stored one would be routed, by the handler's own schema and resolver.\n   */\n  private async openedChatCommandForm(\n    providerRef: string,\n    endpoint: Hook_Endpoint,\n    handler: AnyInboundHandlerDefinition,\n    verified: Extract<ProviderInboundRequest, { kind: ProviderInboundRequestKind.EVENT }>,\n    request: InboundRawRequest,\n    contentType: Hook_ContentType,\n    sourceKey: string,\n    receivedAt: Date,\n  ): Promise<boolean> {\n    if (!this.chatCommandFormLane || !verified.chatCommand || !request.rawBody) return false;\n    const outcome = await this.chatCommandFormLane.open({\n      providerRef,\n      endpointKey: endpoint.key,\n      command: verified.chatCommand,\n      request: { rawBody: new Uint8Array(request.rawBody), headers: request.headers, contentType, body: verified.body },\n      receivedAt,\n      route: async () => {\n        // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a chat command's form is opened only in the organization the endpoint's own resolver routes it to.\n        const route = await this.routeUnstoredRequest(handler, verified.body, verified.eventId, verified.verifiedAudience, request, sourceKey, receivedAt, 'chat command form');\n        return route.kind === ChatSearchRouteKind.ORGANIZATION ? { organizationId: route.organizationId } : undefined;\n      },\n    });\n    return outcome === ChatCommandFormLaneOutcome.OPENED;\n  }\n\n  /**\n   * Where a request answered in its own request reads (a chat search, #2666 S7; a chat command's form, #2770): the\n   * organization the handler's payload schema and scope resolver route it to, exactly as an event's, or nowhere. A\n   * failure on OUR side (the handler's schema refusing what the module read, a resolver that threw) is FAILED, not\n   * UNROUTABLE: the person is asked to try again, never told the team is not connected.\n   */\n  private async routeUnstoredRequest(\n    handler: AnyInboundHandlerDefinition,\n    body: unknown,\n    vendorRequestId: string,\n    verifiedAudience: Extract<ProviderInboundRequest, { kind: ProviderInboundRequestKind.EVENT }>['verifiedAudience'],\n    request: InboundRawRequest,\n    sourceKey: string,\n    receivedAt: Date,\n    what: string,\n  ): Promise<ChatSearchRoute> {\n    try {\n      // A delivery body is JSON (#3478): a date in the handler's payload schema reads from its RFC 3339 form.\n      const payload = jsonParsingSchemaOf(handler.payloadSchema).safeParse(body);\n      if (!payload.success) {\n        this.logger.error(`A ${what} was refused by its handler's payload schema, so it could not be routed`, { sourceKey, handlerRef: handler.ref });\n        return { kind: ChatSearchRouteKind.FAILED };\n      }\n      const delivery: VerifiedInboundDelivery = {\n        sourceKind: InboundSourceKind.PROVIDER_ENDPOINT,\n        sourceKey,\n        // The vendor's id for the request: the only name it has, for a resolver that keys on one. Never stored.\n        providerDeliveryId: vendorRequestId,\n        receivedAt,\n        rawBody: request.rawBody!,\n        headers: providerEndpointKeptHeaders(request.headers),\n        json: body,\n        ...(verifiedAudience === undefined ? {} : { verifiedAudience }),\n      };\n      // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a request answered in place reads only in the organization the endpoint's own resolver routes it to.\n      const scope = await this.resolveScope(handler, delivery, payload.data);\n      return scope.kind === InboundResolvedScopeKind.ORGANIZATION\n        ? { kind: ChatSearchRouteKind.ORGANIZATION, organizationId: scope.organizationId }\n        : { kind: ChatSearchRouteKind.UNROUTABLE };\n    } catch (error) {\n      this.logger.error(`A ${what} could not be routed: a handler function threw`, { sourceKey, handlerRef: handler.ref, ...projectCaughtErrorLogFields(error) });\n      return { kind: ChatSearchRouteKind.FAILED };\n    }\n  }\n\n  /** Whether the handler's endpoint carries the messages people write to the application's bot (#2665 S6). */\n  private isChatConversationEndpoint(handler: AnyInboundHandlerDefinition): boolean {\n    return handler.source.kind === InboundSourceKind.PROVIDER_ENDPOINT\n      && this.registry.chatMessageEndpoint(handler.source.providerRef, handler.source.endpointKey) !== undefined;\n  }\n\n  /** Whether the handler's endpoint is one whose requests may carry a chat command a person sent (#2666 S7). */\n  private isChatCommandEndpoint(handler: AnyInboundHandlerDefinition): boolean {\n    return handler.source.kind === InboundSourceKind.PROVIDER_ENDPOINT\n      && this.registry.chatCommandEndpoint(handler.source.providerRef, handler.source.endpointKey) !== undefined;\n  }\n\n  private async admit(\n    handler: AnyInboundHandlerDefinition,\n    delivery: VerifiedInboundDelivery,\n    base: { sourceKind: InboundSourceKind; sourceKey: string },\n    reject: (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer) => Promise<InboundReceiveAnswer>,\n    /** The sender's personal conversation with the bot, when the verifier found one (#2664 S5b). */\n    personalConversation?: Hook_InboundPersonalConversation,\n    /** The message a person wrote to the bot, when the verified request carries one (#2665 S6). */\n    chatMessage?: Hook_InboundChatMessage,\n    /** The chat command a person sent, when the verified request carries one (#2666 S7). */\n    chatCommand?: Hook_InboundChatCommand,\n    /**\n     * A re-read trigger's delivery (#2909): ordered by its reference, and DROPPED, not stored as unroutable, when the\n     * handler's resolver finds no record it names.\n     */\n    reReadTrigger?: { readonly orderingKey: string; readonly dropUnknown: () => Promise<InboundReceiveAnswer>; readonly notBefore?: Date },\n  ): Promise<InboundReceiveAnswer> {\n    // A delivery body is JSON (#3478): a date in the handler's payload schema reads from its RFC 3339 form. The dispatch\n    // reads the stored body through the same schema, so the value checked here is the value the handler runs on.\n    const payload = jsonParsingSchemaOf(handler.payloadSchema).safeParse(delivery.json);\n    if (!payload.success) return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n\n    let dedupKey: string | undefined;\n    let orderingKey: string | null;\n    let subjectKeys: readonly string[] | undefined;\n    let resolvedScope: InboundDeliveryResolvedScope;\n    try {\n      dedupKey = handler.dedupKey ? handler.dedupKey(delivery) : delivery.providerDeliveryId;\n      orderingKey = handler.orderingKey ? handler.orderingKey(delivery, payload.data) : null;\n      // #1642: the people the payload names, as the handler declares them. Keys that cannot be stored refuse the delivery\n      // like a dedup key that cannot: stored without them, the person it names could never be found in it.\n      subjectKeys = normalizeInboundSubjectKeys(handler.subjectKeys ? handler.subjectKeys(delivery, payload.data) : undefined);\n      // A key the store cannot hold is the SENDER's malformed delivery, answered 400 and audited — not a\n      // 500 the sender would retry forever with nothing recorded.\n      if (!isStorableInboundKey(dedupKey) || (orderingKey !== null && !isStorableInboundKey(orderingKey)) || subjectKeys === undefined) {\n        return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n      }\n      // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a delivery runs only in the scope its handler admits; nothing falls back to the application scope (I3).\n      resolvedScope = await this.resolveScope(handler, delivery, payload.data);\n      if (reReadTrigger) {\n        // The known-record check (#2909): an unverified notification is kept only for a record this application holds.\n        if (resolvedScope.kind === InboundResolvedScopeKind.UNROUTABLE) return reReadTrigger.dropUnknown();\n        orderingKey = reReadTrigger.orderingKey;\n      }\n      // #2665 S6 (plans B6, V9): a chat message is ordered by the ENGINE, after routing, because its organization is part of\n      // the key: per organization, connection, vendor conversation and sender. So two people writing in one thread never\n      // wait on each other, and two organizations sharing a vendor channel never block each other. A message that routes\n      // to no organization orders with nothing. The registry refused a handler key on such an endpoint.\n      // #2666 S7 review L5: a request a module read as both is a command, and a command is never ordered behind a\n      // conversation's turns: it runs once, by its own compare-and-swap.\n      if (chatMessage && !chatCommand && handler.source.kind === InboundSourceKind.PROVIDER_ENDPOINT) {\n        orderingKey = resolvedScope.kind === InboundResolvedScopeKind.ORGANIZATION\n          ? chatConversationOrderingKeyOf({ organizationId: resolvedScope.organizationId, connectionRef: handler.source.providerRef, message: chatMessage })\n          : null;\n      }\n    } catch (error) {\n      this.logger.error('Inbound delivery could not be admitted: a handler function threw before the delivery was stored', {\n        handlerRef: handler.ref, sourceKey: base.sourceKey, ...projectCaughtErrorLogFields(error),\n      });\n      return ANSWER.retryLater;\n    }\n\n    let inserted;\n    try {\n      // assurance-control: WILDO.OPERATIONS.EXECUTION_INTEGRITY — one event, one stored delivery, at most one run (I2).\n      const applicationId = await this.applicationIdentity.getCanonicalApplicationId();\n      inserted = await this.store.insert({\n        sourceKind: base.sourceKind,\n        sourceKey: base.sourceKey,\n        handlerRef: handler.ref,\n        dedupKey,\n        orderingKey,\n        ...(delivery.providerDeliveryId !== undefined ? { providerDeliveryId: delivery.providerDeliveryId } : {}),\n        ...(delivery.signedAt !== undefined ? { signedAt: delivery.signedAt } : {}),\n        receivedAt: delivery.receivedAt,\n        rawBody: delivery.rawBody,\n        headers: { ...delivery.headers },\n        ...(subjectKeys.length > 0 ? { subjectKeys } : {}),\n        resolvedScope,\n        // #2909: an unsigned notification is recorded as what it is, and a trailing one waits for its window.\n        ...(reReadTrigger ? {\n          senderAssurance: InboundSenderAssurance.UNVERIFIED,\n          ...(reReadTrigger.notBefore ? { notBefore: reReadTrigger.notBefore } : {}),\n        } : {}),\n        // #2665 S6 (plan V4), #2666 S7: stored, so READ withholds the body and the PROCESSED settle empties it, whatever the\n        // handler registry later holds. A COMMAND is decided by the verified request, which is what it is, never by the\n        // live list of verbs. Anything else is marked per ENDPOINT, not per request: a chat-conversation endpoint's other\n        // events (an edit, a file share) carry what a person wrote just the same, and so does a request to a command\n        // endpoint whose command the module could not read (review M5: unmarked, its text would never be emptied).\n        ...(chatCommand\n          ? { chatInput: InboundChatInputKind.COMMAND }\n          : this.isChatConversationEndpoint(handler) ? { chatInput: InboundChatInputKind.CONVERSATION_MESSAGE }\n            : this.isChatCommandEndpoint(handler) ? { chatInput: InboundChatInputKind.COMMAND } : {}),\n      }, applicationId);\n    } catch (error) {\n      this.logger.error('Inbound delivery could not be stored', { handlerRef: handler.ref, sourceKey: base.sourceKey, ...projectCaughtErrorLogFields(error) });\n      return ANSWER.retryLater;\n    }\n\n    if (inserted.outcome === InboundDeliveryInsertOutcome.DUPLICATE) return ANSWER.duplicate;\n    if (inserted.row.resolvedScope.kind === InboundResolvedScopeKind.UNROUTABLE) {\n      await this.audit.unroutable(inserted.row);\n      return ANSWER.received;\n    }\n    await this.audit.accepted(inserted.row);\n    await this.rememberPersonalConversation(handler, inserted.row.resolvedScope, delivery, personalConversation);\n    // A failed enqueue leaves the row RECEIVED and due; the sweep picks it up. The sender is not told\n    // to retry — the delivery IS stored, and a retry would only be deduplicated.\n    const delayMs = reReadTrigger?.notBefore ? Math.max(0, reReadTrigger.notBefore.getTime() - this.clock().getTime()) : 0;\n    await enqueueInboundDeliveryDispatch(this.queue, inserted.location, this.logger, delayMs);\n    return ANSWER.received;\n  }\n\n  /**\n   * Records the sender's personal conversation with the bot on their chat identity link (#2664 S5b), so the application\n   * can post to them later without their writing first (a decision card). Every fact comes from the verified request\n   * and its routing, none from a handler:\n   *\n   * - the organization is the one this delivery was routed to, and only an ORGANIZATION delivery has links;\n   * - the connection is the delivery's provider, which every account it names belongs to;\n   * - the bot is the one the verified token was for. An organization's own bot is admitted only for that organization,\n   *   so its conversation is recorded only in that organization's links; the application's bot reaches whichever\n   *   organization claimed the tenant.\n   *\n   * A person not linked there gets nothing recorded, and a failure is logged: the delivery is stored and runs either way.\n   */\n  private async rememberPersonalConversation(\n    handler: AnyInboundHandlerDefinition,\n    scope: InboundDeliveryResolvedScope,\n    delivery: VerifiedInboundDelivery,\n    conversation: Hook_InboundPersonalConversation | undefined,\n  ): Promise<void> {\n    const audience = delivery.verifiedAudience;\n    if (!conversation || !audience || !this.chatLinks) return;\n    if (handler.source.kind !== InboundSourceKind.PROVIDER_ENDPOINT || scope.kind !== InboundResolvedScopeKind.ORGANIZATION) return;\n    if (audience.organizationId !== undefined && audience.organizationId !== scope.organizationId) return;\n    try {\n      await this.chatLinks.rememberPersonalConversation({\n        organizationId: scope.organizationId,\n        connectionRef: handler.source.providerRef,\n        account: { workspaceRef: conversation.workspaceRef, chatUserId: conversation.chatUserId },\n        botOwnerScope: audience.organizationId === undefined ? ChatBotOwnerScope.APPLICATION : ChatBotOwnerScope.ORGANIZATION,\n        conversation: { conversationId: conversation.conversationId, serviceUrl: conversation.serviceUrl },\n      });\n    } catch (error) {\n      this.logger.warn('A verified personal conversation could not be recorded on its chat identity link; the delivery runs regardless', {\n        handlerRef: handler.ref, sourceKey: delivery.sourceKey, ...projectCaughtErrorLogFields(error),\n      });\n    }\n  }\n\n  /**\n   * I3: the handler's declared mode decides what may be admitted. There is no fallback — a scope the\n   * handler is not admitted to, and an organization or person that does not exist or confers no authority,\n   * is `UNROUTABLE` and never runs.\n   *\n   * An ENGINE handler recording a third party's facts (billing, #1629) may run regardless of the scope's\n   * STANDING — see `InboundScopeStandingPolicy`. A scope that does not exist is unroutable for every handler.\n   */\n  private async resolveScope(handler: AnyInboundHandlerDefinition, delivery: VerifiedInboundDelivery, payload: unknown): Promise<InboundDeliveryResolvedScope> {\n    if (handler.scopeMode === InboundHandlerScopeMode.APPLICATION) return { kind: InboundResolvedScopeKind.APPLICATION };\n    const resolved: InboundResolvedScope = await handler.resolveScope!(delivery, payload, this.lookups);\n    const unroutable = (reason: InboundDeliveryUnroutableReason): InboundDeliveryResolvedScope => ({ kind: InboundResolvedScopeKind.UNROUTABLE, reason });\n    const admitted = scopesAdmittedByHandler(handler);\n    const regardlessOfStanding = inboundScopeStandingPolicyOf(handler) === InboundScopeStandingPolicy.RECORD_REGARDLESS_OF_STANDING;\n\n    switch (resolved.kind) {\n      case InboundResolvedScopeKind.UNROUTABLE:\n        return unroutable(handler.scopeMode === InboundHandlerScopeMode.ORGANIZATION_REQUIRED\n          ? InboundDeliveryUnroutableReason.NO_ORGANIZATION_RESOLVED\n          : InboundDeliveryUnroutableReason.RESOLVER_DECLARED_UNROUTABLE);\n      case InboundResolvedScopeKind.APPLICATION:\n        return admitted.includes(InboundResolvedScopeKind.APPLICATION)\n          ? { kind: InboundResolvedScopeKind.APPLICATION }\n          : unroutable(InboundDeliveryUnroutableReason.SCOPE_NOT_ADMITTED_BY_HANDLER);\n      case InboundResolvedScopeKind.ORGANIZATION: {\n        if (!admitted.includes(InboundResolvedScopeKind.ORGANIZATION)) return unroutable(InboundDeliveryUnroutableReason.SCOPE_NOT_ADMITTED_BY_HANDLER);\n        if (!resolved.organizationId) return unroutable(InboundDeliveryUnroutableReason.NO_ORGANIZATION_RESOLVED);\n        const organization = await this.readOrganizationForRouting(resolved.organizationId);\n        if (!organization) return unroutable(InboundDeliveryUnroutableReason.ORGANIZATION_NOT_FOUND);\n        if (!regardlessOfStanding && !isAuthorityConferringOrganizationStatus(organization.status)) return unroutable(InboundDeliveryUnroutableReason.ORGANIZATION_WITHOUT_AUTHORITY);\n        return { kind: InboundResolvedScopeKind.ORGANIZATION, organizationId: resolved.organizationId };\n      }\n      case InboundResolvedScopeKind.USER: {\n        // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a person's own data is reached only by a handler that declared roles for that scope, and only for a person who exists (#1629).\n        if (!admitted.includes(InboundResolvedScopeKind.USER)) return unroutable(InboundDeliveryUnroutableReason.SCOPE_NOT_ADMITTED_BY_HANDLER);\n        if (!resolved.userId) return unroutable(InboundDeliveryUnroutableReason.USER_NOT_FOUND);\n        const user = await this.readUserForRouting(resolved.userId);\n        if (!user) return unroutable(InboundDeliveryUnroutableReason.USER_NOT_FOUND);\n        if (!regardlessOfStanding && !isAuthorityConferringUserStatus(user.status)) return unroutable(InboundDeliveryUnroutableReason.USER_WITHOUT_AUTHORITY);\n        return { kind: InboundResolvedScopeKind.USER, userId: resolved.userId };\n      }\n      default: {\n        const unhandled: never = resolved;\n        return unhandled;\n      }\n    }\n  }\n\n  /** The person a resolver named; an id the store cannot cast names no one. */\n  private async readUserForRouting(userId: string): Promise<{ _id: string; status?: UserStatus } | null> {\n    try {\n      return await this.repositoriesRegistry.readUnscopedByKey<{ _id: string; status?: UserStatus }>(CoreResourceType.USERS, { _id: userId });\n    } catch (error) {\n      if (isMalformedIdLookupError(error)) return null;\n      throw error;\n    }\n  }\n\n  /**\n   * The organization a resolver named. An id the store cannot cast names no organization, so it is NOT_FOUND\n   * rather than a 500 the sender would retry forever.\n   */\n  private async readOrganizationForRouting(organizationId: string): Promise<{ _id: string; status?: OrganizationStatus } | null> {\n    try {\n      return await this.repositoriesRegistry.readUnscopedByKey<{ _id: string; status?: OrganizationStatus }>(CoreResourceType.ORGANIZATIONS, { _id: organizationId });\n    } catch (error) {\n      if (isMalformedIdLookupError(error)) return null;\n      throw error;\n    }\n  }\n\n  /**\n   * Routing lookups for a resolver. They run on the infrastructure tier — BEFORE any handler authority\n   * exists, under the engine's own routing authority — and answer only an organization id.\n   */\n  private readonly lookups: InboundScopeLookups = {\n    findOrganizationIdByField: (resourceType: ResourceType, field: string, value: string) =>\n      this.findScopeOwnerByField(resourceType, ResourcePrimaryScope.ORGANIZATIONS, 'organizationId', field, value),\n    findUserIdByField: (resourceType: ResourceType, field: string, value: string) =>\n      this.findScopeOwnerByField(resourceType, ResourcePrimaryScope.USER_SELF, 'userId', field, value),\n    findOrganizationIdByConnectionFact: (connectionRef: string, factName: string, value: string) =>\n      this.findOrganizationIdByConnectionFact(connectionRef, factName, value),\n  };\n\n  /**\n   * See {@link InboundScopeLookups.findOrganizationIdByConnectionFact}. The fact name is a declared identifier\n   * (`workspaceId`, `tenantId`), never caller text that could become a path operator, so anything else is refused.\n   */\n  private async findOrganizationIdByConnectionFact(connectionRef: string, factName: string, value: string): Promise<string | null> {\n    if (!/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(factName)) {\n      throw new Error(`findOrganizationIdByConnectionFact: '${factName}' is not a fact name (a letter, then letters, digits or underscores)`);\n    }\n    if (typeof connectionRef !== 'string' || connectionRef.length === 0 || typeof value !== 'string' || value.length === 0) return null;\n    // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a chat workspace or bot routes only to the organization its VENDOR reported or accepted, never on a typed value (#2660, #2663).\n    // One lookup per trusted provenance, and the answer is an organization only when exactly one holds the value across\n    // all of them: a value one organization's vendor reported and another's vendor accepted names no single organization.\n    const owners = new Set<string>();\n    for (const provenance of PROVIDER_CONNECTION_ROUTING_FACT_PROVENANCES) {\n      const outcome = await this.findScopeOwnerOutcome(CoreResourceType.ORG_PROVIDER_CREDENTIALS, ResourcePrimaryScope.ORGANIZATIONS, 'organizationId', {\n        connectionRef,\n        enabled: true,\n        [`connectionFacts.${factName}.value`]: value,\n        [`connectionFacts.${factName}.provenance`]: provenance,\n      }, 'findOrganizationIdByConnectionFact');\n      if (outcome.kind === ScopeOwnerOutcome.AMBIGUOUS) return null;\n      if (outcome.kind === ScopeOwnerOutcome.ONE) owners.add(outcome.owner);\n    }\n    return owners.size === 1 ? [...owners][0]! : null;\n  }\n\n  /**\n   * The scope owner (`organizationId` or `userId`) of the row of `resourceType` whose `field` equals `value`, or\n   * `null` — one implementation for both scopes, so the cross-owner refusal and the malformed-id rule cannot\n   * be applied to one and forgotten on the other.\n   */\n  private async findScopeOwnerByField(\n    resourceType: ResourceType,\n    requiredScope: ResourcePrimaryScope.ORGANIZATIONS | ResourcePrimaryScope.USER_SELF,\n    ownerField: 'organizationId' | 'userId',\n    field: string,\n    value: string,\n  ): Promise<string | null> {\n    const lookup = ownerField === 'organizationId' ? 'findOrganizationIdByField' : 'findUserIdByField';\n    // Only a plain value is looked up: a payload schema permissive enough to pass an object here would\n    // otherwise hand the store an operator (`{ $ne: null }`) that matches every row.\n    if (typeof value !== 'string' || value.length === 0) {\n      this.assertScopedResource(resourceType, requiredScope, ownerField, lookup);\n      return null;\n    }\n    return this.findScopeOwner(resourceType, requiredScope, ownerField, { [field]: value }, lookup);\n  }\n\n  private assertScopedResource(resourceType: ResourceType, requiredScope: ResourcePrimaryScope, ownerField: 'organizationId' | 'userId', lookup: string): void {\n    const configuration = this.resourcesRegistry.getResourceConfiguration(resourceType) as { resourcePrimaryScope?: ResourcePrimaryScope } | undefined;\n    if (configuration?.resourcePrimaryScope !== requiredScope) {\n      throw new Error(`${lookup}: '${resourceType}' is not a ${requiredScope}-scoped resource, so its rows name no ${ownerField === 'organizationId' ? 'organization' : 'person'}`);\n    }\n  }\n\n  /**\n   * The one owner whose rows of `resourceType` match `filter`, shared by every lookup so the cross-owner refusal and\n   * the malformed-id rule cannot be applied to one and forgotten on another. Every value in `filter` is a plain value\n   * its caller checked.\n   */\n  private async findScopeOwner(\n    resourceType: ResourceType,\n    requiredScope: ResourcePrimaryScope.ORGANIZATIONS | ResourcePrimaryScope.USER_SELF,\n    ownerField: 'organizationId' | 'userId',\n    filter: Record<string, unknown>,\n    lookup: string,\n  ): Promise<string | null> {\n    const outcome = await this.findScopeOwnerOutcome(resourceType, requiredScope, ownerField, filter, lookup);\n    return outcome.kind === ScopeOwnerOutcome.ONE ? outcome.owner : null;\n  }\n\n  /**\n   * {@link findScopeOwner}, saying WHY there is no owner: no matching row, or rows of two different owners. A lookup\n   * that combines several filters needs the difference, because two filters each naming one owner may name two.\n   */\n  private async findScopeOwnerOutcome(\n    resourceType: ResourceType,\n    requiredScope: ResourcePrimaryScope.ORGANIZATIONS | ResourcePrimaryScope.USER_SELF,\n    ownerField: 'organizationId' | 'userId',\n    filter: Record<string, unknown>,\n    lookup: string,\n  ): Promise<{ readonly kind: ScopeOwnerOutcome.ONE; readonly owner: string } | { readonly kind: ScopeOwnerOutcome.NONE | ScopeOwnerOutcome.AMBIGUOUS }> {\n    this.assertScopedResource(resourceType, requiredScope, ownerField, lookup);\n    const page = { sort: [{ field: '_id', order: SortOrder.ASC }], limit: 1 };\n    try {\n      const [first] = await this.repositoriesRegistry.findManyForInfrastructure<Record<string, unknown>>(resourceType, filter, undefined, undefined, page);\n      const owner = first?.[ownerField];\n      if (typeof owner !== 'string') return { kind: ScopeOwnerOutcome.NONE };\n      // A value unique per owner but not across owners must not route to whichever owner's row sorts first:\n      // a matching row belonging to ANY other owner makes the delivery unroutable.\n      const [other] = await this.repositoriesRegistry.findManyForInfrastructure<Record<string, unknown>>(\n        resourceType, { ...filter, [ownerField]: { $ne: owner } }, undefined, undefined, page,\n      );\n      return other ? { kind: ScopeOwnerOutcome.AMBIGUOUS } : { kind: ScopeOwnerOutcome.ONE, owner };\n    } catch (error) {\n      // The sender wrote the value, and the payload schema cannot know the store's id format (an ObjectId on\n      // MongoDB, something else on PostgreSQL). A value the store cannot cast matches no row: unroutable, never\n      // a 500 that tells the sender to retry the same malformed request forever.\n      if (isMalformedIdLookupError(error)) return { kind: ScopeOwnerOutcome.NONE };\n      throw error;\n    }\n  }\n\n\n  private keptHeaders(headers: InboundRawRequest['headers'], names: readonly string[]): Record<string, string> {\n    const kept: Record<string, string> = {};\n    for (const name of names) {\n      const value = headerString(headers, name.toLowerCase());\n      if (value !== undefined) kept[name.toLowerCase()] = value;\n    }\n    return kept;\n  }\n}\n"]}
+{"version":3,"file":"inbound-delivery-receiver.backend.service.js","sourceRoot":"","sources":["../../../../src/inbound/services/inbound-delivery-receiver.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,qCAAqC,EACrC,+BAA+B,EAC/B,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,uCAAuC,EACvC,4CAA4C,EAC5C,+BAA+B,EAC/B,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,SAAS,GAKV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qDAAqD,EACrD,sCAAsC,EACtC,gBAAgB,EAChB,uBAAuB,EAMvB,yBAAyB,GAE1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;AAEjI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAOpF,OAAO,EAAE,0BAA0B,EAAkE,MAAM,oFAAoF,CAAC;AAChM,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,iEAAiE,CAAC;AAEjL,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wFAAwF,CAAC;AAClI,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,GAKxB,MAAM,uEAAuE,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,kEAAkE,CAAC;AAC5I,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,8EAA8E,CAAC;AAE3I,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,8BAA8B,EAA2C,MAAM,0CAA0C,CAAC;AACvL,OAAO,EAAE,kBAAkB,EAAwE,MAAM,gDAAgD,CAAC;AAC1J,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EAAE,mBAAmB,EAA2D,MAAM,2EAA2E,CAAC;AACzK,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,MAAM,2EAA2E,CAAC;AAClJ,OAAO,EAAE,0BAA0B,EAA0C,MAAM,iFAAiF,CAAC;AA0BrK,uHAAuH;AACvH,SAAS,cAAc,CAAC,MAA4B,EAAE,eAAiD;IACrG,OAAO,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5F,CAAC;AAED,MAAM,MAAM,GAAG;IACb,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;IACnD,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;IACrE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACjE,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;IACnE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE;IACjE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;IAC/D,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE;IACvE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;CACV,CAAC;AAE1D,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,SAAS,oBAAoB,CAAC,GAAuB;IACnD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,sBAAsB,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;AACrG,8GAA8G;AAC9G,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/D,qHAAqH;AACrH,MAAM,CAAC,MAAM,mCAAmC,GAAG,sBAAsB,GAAG,EAAE,CAAC;AAE/E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,UAAgB,EAAE,uBAA+B;IAC1G,MAAM,QAAQ,GAAG,uBAAuB,GAAG,KAAK,CAAC;IACjD,OAAO,GAAG,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,YAAY,CAAC,OAAqC,EAAE,IAAY;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAe;IAC/C,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAmC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;AACvK,CAAC;AAED,wGAAwG;AACxG,IAAK,iBAIJ;AAJD,WAAK,iBAAiB;IACpB,gCAAW,CAAA;IACX,kCAAa,CAAA;IACb,4CAAuB,CAAA;AACzB,CAAC,EAJI,iBAAiB,KAAjB,iBAAiB,QAIrB;AAGM,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAIM;IACuB;IACF;IACO;IACX;IAOG;IACK;IAEE;IAEE;IAET;IAES;IAEJ;IAKa;IA9B3E,KAAK,CAAuB;IAE7C,YACsD,MAAqB,EACE,QAA8C,EAChD,KAAyC,EAClC,oBAAwH,EACnI,iBAAoF,EAOjF,mBAAyF,EACpF,KAAuD,EAC3E,SAAmC,EACb,cAA6C,EAE3C,SAAgF,EAEzF,cAA6D,EAEpD,UAAmE,EAEvE,mBAAqE,EAKxD,YAAiF;QA3BvH,WAAM,GAAN,MAAM,CAAe;QACE,aAAQ,GAAR,QAAQ,CAAsC;QAChD,UAAK,GAAL,KAAK,CAAoC;QAClC,yBAAoB,GAApB,oBAAoB,CAAoG;QACnI,sBAAiB,GAAjB,iBAAiB,CAAmE;QAOjF,wBAAmB,GAAnB,mBAAmB,CAAsE;QACpF,UAAK,GAAL,KAAK,CAAkD;QAErD,mBAAc,GAAd,cAAc,CAA+B;QAE3C,cAAS,GAAT,SAAS,CAAuE;QAEzF,mBAAc,GAAd,cAAc,CAA+C;QAEpD,eAAU,GAAV,UAAU,CAAyD;QAEvE,wBAAmB,GAAnB,mBAAmB,CAAkD;QAKxD,iBAAY,GAAZ,YAAY,CAAqE;QAE3K,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,kFAAkF;IAClF,KAAK,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAErC,4EAA4E;IAC5E,0DAA0D;IAC1D,4EAA4E;IAE5E,KAAK,CAAC,0BAA0B,CAAC,QAAoC,EAAE,OAA0B;QAC/F,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,iBAAiB,CAAC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnG,MAAM,MAAM,GAAG,KAAK,EAAE,MAAsC,EAAE,MAA4B,EAAiC,EAAE;YAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,iGAAiG;QACjG,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9G,IAAI,WAAW,KAAK,kBAAkB;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjI,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/K,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;QACD,iGAAiG;QACjG,+DAA+D;QAC/D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uFAAuF,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9I,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;QAED,+FAA+F;QAC/F,MAAM,YAAY,GAAG,qCAAqC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YACxI,OAAO,MAAM,CAAC,8BAA8B,CAAC,qBAAqB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,iGAAiG;QACjG,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1J,IAAI,YAAY,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAEvF,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iGAAiG;YACjG,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE,iBAAiB,CAAC,oBAAoB;YAClD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,YAAY,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC9F,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI;SACL,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,4EAA4E;IAC5E,oFAAoF;IACpF,4EAA4E;IAE5E;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,WAAmB,EAAE,QAAuB,EAAE,OAAoC,EAAE,OAA0B;QAC1I,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,CAAC;QAC5E,oHAAoH;QACpH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAsC,EAAE,MAA4B,EAAiC,EAAE;YAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,6GAA6G;QAC7G,IAAI,uBAAuB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3I,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC;QACnD,iHAAiH;QACjH,iHAAiH;QACjH,kFAAkF;QAClF,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9F,OAAO,MAAM,CAAC,8BAA8B,CAAC,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3F,CAAC;QACD,+FAA+F;QAC/F,IAAI,OAAO,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAChG,mHAAmH;QACnH,iGAAiG;QACjG,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;YACxJ,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,QAAgC,CAAC;QACrC,iMAAiM;QACjM,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,+BAA+B,CAAC;gBACnE,WAAW;gBACX,WAAW,EAAE,QAAQ,CAAC,GAAG;gBACzB,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAiC;gBAClD,WAAW;gBACX,oHAAoH;gBACpH,kCAAkC,EAAE,IAAI,CAAC,OAAO,CAAC,kCAAkC;gBACnF,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aACzF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;gBACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAA8F,CAAC;gBACrH,qHAAqH;gBACrH,MAAM,MAAM,GAAG,OAAO,EAAE,gBAAgB,KAAK,KAAK;oBAChD,CAAC,CAAC,8BAA8B,CAAC,qBAAqB;oBACtD,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,8BAA8B,CAAC,uBAAuB;wBAC1E,CAAC,CAAC,8BAA8B,CAAC,uBAAuB;wBACxD,CAAC,CAAC,8BAA8B,CAAC,iBAAiB,CAAC;gBACvD,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;YACD,gGAAgG;YAChG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,EAAE,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnI,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,0BAA0B,CAAC,SAAS;gBACvC,iGAAiG;gBACjG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvE,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,KAAK,0BAA0B,CAAC,SAAS;gBACvC,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5E,KAAK,0BAA0B,CAAC,OAAO;gBACrC,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAClE,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,gHAAgH;gBAChH,8GAA8G;gBAC9G,IAAI,QAAQ,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;oBACpJ,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,QAAQ,GAA4B;oBACxC,UAAU,EAAE,iBAAiB,CAAC,iBAAiB;oBAC/C,SAAS;oBACT,kBAAkB,EAAE,QAAQ,CAAC,OAAO;oBACpC,UAAU;oBACV,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,iGAAiG;oBACjG,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;oBACrD,SAAS,EAAE,QAAQ,CAAC,iBAAiB;oBACrC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;iBACpG,CAAC;gBACF,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAChL,CAAC;YACD,KAAK,0BAA0B,CAAC,WAAW;gBACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzG,OAAO,CAAC,CAAC,CAAC;gBACR,+GAA+G;gBAC/G,8GAA8G;gBAC9G,MAAM,SAAS,GAAU,QAAQ,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAE,SAAuC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,oBAAoB,CAChC,WAAmB,EACnB,QAAuB,EACvB,OAAoC,EACpC,OAA0B,EAC1B,IAA0D,EAC1D,UAAgB,EAChB,MAA+G;QAE/G,MAAM,IAAI,GAAG,KAAK,EAAE,MAAsC,EAAiC,EAAE;YAC3F,MAAM,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;YAC5C,OAAO,qBAAqB,CAAC;QAC/B,CAAC,CAAC;QACF,uGAAuG;QACvG,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAEpE,yGAAyG;QACzG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,YAAY,CAAC,CAAC;QAE5I,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,sBAAsB,CAAC,CAAC;QAClK,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qCAAqC,CAAC,CAAC,EAAE,CAAC;YAC3I,OAAO,IAAI,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAEvE,IAAI,SAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,mCAAmC,EAAE,CAAC;YACtH,OAAO,IAAI,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;QAChE,CAAC;QAED,oGAAoG;QACpG,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE,iBAAiB,CAAC,iBAAiB;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,kBAAkB,EAAE,uBAAuB,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,uBAAuB,IAAI,qDAAqD,CAAC;YAC5J,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAClD,OAAO,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,IAAI,EAAE;YAClD,IAAI;SACL,CAAC;QACF,qFAAqF;QACrF,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9G,IAAI,OAAO,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACjC,oHAAoH;YACpH,kHAAkH;YAClH,oHAAoH;YACpH,mFAAmF;YACnF,MAAM,aAAa,GAAG,OAAO,CAAC,uBAAuB,IAAI,qDAAqD,CAAC;YAC/G,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,GAAG,KAAK,CAAC,CAAC;YAC3H,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;gBAChL,GAAG,SAAS;gBACZ,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,2BAA2B,CAAC,WAAmB,EAAE,WAAmB,EAAE,OAAoD;QACtI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,gCAAgC,CAAC,sEAAsE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACxI,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,sCAAsC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CACzC,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,EACjG,wBAAwB,EACxB,GAAG,WAAW,IAAI,WAAW,EAAE,CAChC,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC,gCAAgC,CAAC,iFAAiF,EAAE,WAAW,EAAE,WAAW,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;YACzL,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,gIAAgI;IAC/G,4BAA4B,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElE,gCAAgC,CAAC,OAAe,EAAE,WAAmB,EAAE,WAAmB,EAAE,SAAkC,EAAE;QACtI,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,MAAM;YAAE,OAAO;QACtD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,WAAmB,EACnB,QAAuB,EACvB,OAAoC,EACpC,QAA2F,EAC3F,OAA0B,EAC1B,SAAiB,EACjB,UAAgB;QAEhB,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5G,+GAA+G;YAC/G,MAAM,GAAG,EAAE,IAAI,EAAE,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,gCAAgC,CAAC,EAAE,CAAC;QACpH,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YACjL,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uHAAuH,EAAE;gBACzI,WAAW,EAAE,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB,CACjC,WAAmB,EACnB,QAAuB,EACvB,OAAoC,EACpC,QAAqF,EACrF,OAA0B,EAC1B,WAA6B,EAC7B,SAAiB,EACjB,UAAgB;QAEhB,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAClD,WAAW;YACX,WAAW,EAAE,QAAQ,CAAC,GAAG;YACzB,OAAO,EAAE,QAAQ,CAAC,WAAW;YAC7B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACjH,UAAU;YACV,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,yJAAyJ;gBACzJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;gBACxK,OAAO,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAChH,CAAC;SACF,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,0BAA0B,CAAC,MAAM,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,oBAAoB,CAChC,OAAoC,EACpC,IAAa,EACb,eAAuB,EACvB,gBAAiH,EACjH,OAA0B,EAC1B,SAAiB,EACjB,UAAgB,EAChB,IAAY;QAEZ,IAAI,CAAC;YACH,wGAAwG;YACxG,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,yEAAyE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9I,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,QAAQ,GAA4B;gBACxC,UAAU,EAAE,iBAAiB,CAAC,iBAAiB;gBAC/C,SAAS;gBACT,wGAAwG;gBACxG,kBAAkB,EAAE,eAAe;gBACnC,UAAU;gBACV,OAAO,EAAE,OAAO,CAAC,OAAQ;gBACzB,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrD,IAAI,EAAE,IAAI;gBACV,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;aAChE,CAAC;YACF,2JAA2J;YAC3J,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY;gBACzD,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBAClF,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,UAAU,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,gDAAgD,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5J,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,4GAA4G;IACpG,0BAA0B,CAAC,OAAoC;QACrE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB;eAC7D,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;IAC/G,CAAC;IAED,8GAA8G;IACtG,qBAAqB,CAAC,OAAoC;QAChE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB;eAC7D,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;IAC/G,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,OAAoC,EACpC,QAAiC,EACjC,IAA0D,EAC1D,MAA+G;IAC/G,gGAAgG;IAChG,oBAAuD;IACvD,+FAA+F;IAC/F,WAAqC;IACrC,wFAAwF;IACxF,WAAqC;IACrC;;;OAGG;IACH,aAAsI;QAEtI,qHAAqH;QACrH,6GAA6G;QAC7G,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAEhG,IAAI,QAA4B,CAAC;QACjC,IAAI,WAA0B,CAAC;QAC/B,IAAI,WAA0C,CAAC;QAC/C,IAAI,aAA2C,CAAC;QAChD,IAAI,CAAC;YACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACvF,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvF,oHAAoH;YACpH,qGAAqG;YACrG,WAAW,GAAG,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACzH,mGAAmG;YACnG,4DAA4D;YAC5D,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBACjI,OAAO,MAAM,CAAC,8BAA8B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5E,CAAC;YACD,8JAA8J;YAC9J,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,aAAa,EAAE,CAAC;gBAClB,+GAA+G;gBAC/G,IAAI,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,UAAU;oBAAE,OAAO,aAAa,CAAC,WAAW,EAAE,CAAC;gBACnG,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;YAC1C,CAAC;YACD,uHAAuH;YACvH,mHAAmH;YACnH,mHAAmH;YACnH,kGAAkG;YAClG,4GAA4G;YAC5G,mEAAmE;YACnE,IAAI,WAAW,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;gBAC/F,WAAW,GAAG,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY;oBACxE,CAAC,CAAC,6BAA6B,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;oBAClJ,CAAC,CAAC,IAAI,CAAC;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iGAAiG,EAAE;gBACnH,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC;aAC1F,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,qHAAqH;QACrH,gHAAgH;QAChH,kHAAkH;QAClH,6GAA6G;QAC7G,2GAA2G;QAC3G,MAAM,SAAS,GAAG,WAAW;YAC3B,CAAC,CAAC,oBAAoB,CAAC,OAAO;YAC9B,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,oBAAoB;gBACpF,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAErF,IAAI,aAAqB,CAAC;QAC1B,IAAI,UAAyC,CAAC;QAC9C,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,CAAC;YAC3E,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,sCAAsC,EAAE,CAAC;gBACrE,iHAAiH;gBACjH,+FAA+F;gBAC/F,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY;oBAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjI,sGAAsG;gBACtG,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAC,SAAS,CAAC;gBACrG,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;oBACzC,YAAY,EAAE,8BAA8B,CAAC,aAAa,CAAC;oBAC3D,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;oBAC1D,KAAK,EAAE,QAAQ,CAAC,OAAO;oBACvB,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACpD,QAAQ,EAAE,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE;iBAC9I,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9J,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,kHAAkH;YAClH,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACjC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,OAAO,CAAC,GAAG;gBACvB,QAAQ;gBACR,WAAW;gBACX,GAAG,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzG,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;gBAChC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,aAAa;gBACb,sGAAsG;gBACtG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;oBAClB,eAAe,EAAE,sBAAsB,CAAC,UAAU;oBAClD,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3E,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,EAAE,aAAa,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzJ,IAAI,UAAU;gBAAE,MAAM,IAAI,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACrF,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,oHAAoH;QACpH,IAAI,UAAU,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,4BAA4B,CAAC,SAAS,IAAI,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1I,MAAM,IAAI,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,4BAA4B,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;QACzF,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,wBAAwB,CAAC,UAAU,EAAE,CAAC;YAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC7G,kGAAkG;QAClG,6EAA6E;QAC7E,MAAM,OAAO,GAAG,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvH,MAAM,8BAA8B,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,4BAA4B,CACxC,OAAoC,EACpC,KAAmC,EACnC,QAAiC,EACjC,YAA0D;QAE1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAC3C,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC1D,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,CAAC,YAAY;YAAE,OAAO;QAChI,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;YAAE,OAAO;QACtG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,4BAA4B,CAAC;gBAChD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;gBACzC,OAAO,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE;gBACzF,aAAa,EAAE,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBACrH,YAAY,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE;aACnG,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gHAAgH,EAAE;gBACjI,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,YAAY,CAAC,OAAoC,EAAE,QAAiC,EAAE,OAAgB;QAClH,IAAI,OAAO,CAAC,SAAS,KAAK,uBAAuB,CAAC,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,WAAW,EAAE,CAAC;QACrH,MAAM,QAAQ,GAAyB,MAAM,OAAO,CAAC,YAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,CAAC,MAAuC,EAAgC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACtJ,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,0BAA0B,CAAC,6BAA6B,CAAC;QAEhI,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,wBAAwB,CAAC,UAAU;gBACtC,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,KAAK,uBAAuB,CAAC,qBAAqB;oBACnF,CAAC,CAAC,+BAA+B,CAAC,wBAAwB;oBAC1D,CAAC,CAAC,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;YACpE,KAAK,wBAAwB,CAAC,WAAW;gBACvC,OAAO,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,WAAW,CAAC;oBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,WAAW,EAAE;oBAChD,CAAC,CAAC,UAAU,CAAC,+BAA+B,CAAC,6BAA6B,CAAC,CAAC;YAChF,KAAK,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,YAAY,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,6BAA6B,CAAC,CAAC;gBAChJ,IAAI,CAAC,QAAQ,CAAC,cAAc;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,wBAAwB,CAAC,CAAC;gBAC1G,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACpF,IAAI,CAAC,YAAY;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,sBAAsB,CAAC,CAAC;gBAC7F,IAAI,CAAC,oBAAoB,IAAI,CAAC,uCAAuC,CAAC,YAAY,CAAC,MAAM,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,8BAA8B,CAAC,CAAC;gBAC9K,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;YAClG,CAAC;YACD,KAAK,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnC,qLAAqL;gBACrL,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,6BAA6B,CAAC,CAAC;gBACxI,IAAI,CAAC,QAAQ,CAAC,MAAM;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,cAAc,CAAC,CAAC;gBACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,IAAI,CAAC,IAAI;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,cAAc,CAAC,CAAC;gBAC7E,IAAI,CAAC,oBAAoB,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,OAAO,UAAU,CAAC,+BAA+B,CAAC,sBAAsB,CAAC,CAAC;gBACtJ,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,SAAS,GAAU,QAAQ,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,kBAAkB,CAAC,MAAc;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAuC,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1I,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,0BAA0B,CAAC,cAAsB;QAC7D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAA+C,gBAAgB,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAClK,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACc,OAAO,GAAwB;QAC9C,yBAAyB,EAAE,CAAC,YAA0B,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CACtF,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC;QAC9G,iBAAiB,EAAE,CAAC,YAA0B,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CAC9E,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,oBAAoB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAClG,kCAAkC,EAAE,CAAC,aAAqB,EAAE,QAAgB,EAAE,KAAa,EAAE,EAAE,CAC7F,IAAI,CAAC,kCAAkC,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC;KAC1E,CAAC;IAEF;;;OAGG;IACK,KAAK,CAAC,kCAAkC,CAAC,aAAqB,EAAE,QAAgB,EAAE,KAAa;QACrG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,sEAAsE,CAAC,CAAC;QAC1I,CAAC;QACD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpI,sLAAsL;QACtL,oHAAoH;QACpH,sHAAsH;QACtH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,UAAU,IAAI,4CAA4C,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAChJ,aAAa;gBACb,OAAO,EAAE,IAAI;gBACb,CAAC,mBAAmB,QAAQ,QAAQ,CAAC,EAAE,KAAK;gBAC5C,CAAC,mBAAmB,QAAQ,aAAa,CAAC,EAAE,UAAU;aACvD,EAAE,oCAAoC,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB,CACjC,YAA0B,EAC1B,aAAkF,EAClF,UAAuC,EACvC,KAAa,EACb,KAAa;QAEb,MAAM,MAAM,GAAG,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACnG,mGAAmG;QACnG,iFAAiF;QACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAClG,CAAC;IAEO,oBAAoB,CAAC,YAA0B,EAAE,aAAmC,EAAE,UAAuC,EAAE,MAAc;QACnJ,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,YAAY,CAAgE,CAAC;QACnJ,IAAI,aAAa,EAAE,oBAAoB,KAAK,aAAa,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,MAAM,YAAY,cAAc,aAAa,yCAAyC,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,aAAkF,EAClF,UAAuC,EACvC,MAA+B,EAC/B,MAAc;QAEd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1G,OAAO,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB,CACjC,YAA0B,EAC1B,aAAkF,EAClF,UAAuC,EACvC,MAA+B,EAC/B,MAAc;QAEd,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAA0B,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACrJ,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;YACvE,sGAAsG;YACtG,6EAA6E;YAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CACvE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CACtF,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uGAAuG;YACvG,0GAA0G;YAC1G,2EAA2E;YAC3E,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC7E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAGO,WAAW,CAAC,OAAqC,EAAE,KAAwB;QACjF,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAt0BY,qCAAqC;IADjD,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IACxD,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAOlD,WAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAC1D,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IACvD,WAAA,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAE5D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAE9D,YAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAErD,YAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAE9D,YAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAK1D,YAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;;GA/B/D,qCAAqC,CAs0BjD","sourcesContent":["/**\n * The inbound receiver (#1596): from raw request to a stored, deduplicated, scope-resolved delivery —\n * and an HTTP answer the sender can act on.\n *\n * ```\n * size / media type ─► secret ─► verify ─► parse ─► select handler ─► payload schema\n *   ─► dedup key ─► resolve scope (no fallback) ─► insert once ─► enqueue ─► 200\n * ```\n *\n * The answers are chosen for what they tell a SENDER to do:\n *\n * | answer | when | sender's reading |\n * |---|---|---|\n * | 200 | stored, duplicate, unroutable, or an event no handler takes | done; do not retry |\n * | 400 | verified but not what the handler declared | a retry will not help |\n * | 401 | signature, timestamp or secret refused | not accepted |\n * | 413 / 415 | too large / not JSON | a retry will not help |\n * | 500 | something on OUR side failed before the row existed | retry later |\n *\n * Handler execution never happens here: an agent-backed handler outlasts any provider's delivery\n * timeout, and a handler failure is the worker's to retry, not the sender's.\n *\n * A provider endpoint may replace the 200's body with the answer its own contract requires (#2659): a Slack\n * `url_verification` handshake is answered with its challenge and stored nowhere; every other accepted request\n * gets the endpoint's `acknowledge` answer (an empty 200 for Slack, an invoke response for a Teams card action).\n * The answer is a pure function of the verified request, so it is due in milliseconds whatever the handler does.\n *\n * A chat SEARCH (#2666 S7, a Teams message-extension search) is the one request answered with what it asked for: it is\n * routed by the endpoint's own resolver, answered by the chat search lane within the vendor's deadline, written through\n * the endpoint's `answerChatSearch`, and stored nowhere.\n */\nimport { inject, injectable, optional } from 'inversify';\nimport {\n  InboundChatInputKind,\n  ChatBotOwnerScope,\n  CoreResourceType,\n  ErrorType,\n  deriveInboundEndpointSecretEnvVarName,\n  INBOUND_DELIVERY_MAX_BODY_BYTES,\n  INBOUND_DELIVERY_MAX_STORED_BODY_BYTES,\n  InboundDeliveryRejectionReason,\n  InboundDeliveryUnroutableReason,\n  InboundHandlerScopeMode,\n  InboundResolvedScopeKind,\n  InboundSenderAssurance,\n  InboundSourceKind,\n  isAuthorityConferringOrganizationStatus,\n  PROVIDER_CONNECTION_ROUTING_FACT_PROVENANCES,\n  isAuthorityConferringUserStatus,\n  isWildoBackendError,\n  jsonParsingSchemaOf,\n  ResourcePrimaryScope,\n  SortOrder,\n  type InboundDeliveryResolvedScope,\n  type OrganizationStatus,\n  type ResourceType,\n  type UserStatus,\n} from '@wildo-ai/saas-models';\nimport {\n  HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS,\n  HOOK_REREAD_TRIGGER_DEFAULT_RATE_LIMIT,\n  Hook_ContentType,\n  isReReadTriggerEndpoint,\n  type Hook_Acknowledgement,\n  type Hook_Endpoint,\n  type Hook_InboundChatCommand,\n  type Hook_InboundChatMessage,\n  type Hook_InboundPersonalConversation,\n  Hook_ChatSearchAnswerKind,\n  type Hook_ChatSearchAnswer,\n} from '@wildo-ai/external-connectors-models';\nimport { chatConversationOrderingKeyOf } from '~wildo-backend-lib/flows-actors/services/chat-conversation-store.backend.service';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { ApplicationIdentityBackendService } from '~wildo-backend-lib/applications/services/application-identity.backend.service';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport type { QueueBackendService } from '~wildo-backend-lib/queue/queue.backend.service';\nimport { ProviderInboundRequestKind, type ProviderInboundRequest, type WebhookHandlerBackendService } from '~wildo-backend-lib/notifications/webhooks/services/webhook-handler.backend.service';\nimport { decodeInboundBody, inboundContentTypeOf, providerEndpointKeptHeaders, storedInboundContentType } from '~wildo-backend-lib/inbound/models/inbound-body-decoding.backend';\nimport type { RateLimitBackendService } from '~wildo-backend-lib/errors/services/rate-limit.backend.service';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { isMalformedIdLookupError } from '~wildo-backend-lib/base-classes/services/repositories/resource-write-integrity.backend';\nimport {\n  inboundSourceKey,\n  normalizeInboundSubjectKeys,\n  scopesAdmittedByHandler,\n  type AnyInboundHandlerDefinition,\n  type InboundResolvedScope,\n  type InboundScopeLookups,\n  type VerifiedInboundDelivery,\n} from '~wildo-backend-lib/inbound/models/inbound-handler.backend.definitions';\nimport { InboundScopeStandingPolicy, inboundScopeStandingPolicyOf } from '~wildo-backend-lib/inbound/models/inbound-engine-handler.backend';\nimport { headersKeptForScheme, verifyInboundDelivery } from '~wildo-backend-lib/inbound/verification/inbound-verification-schemes.backend';\nimport type { InboundApplicationEndpoint, InboundHandlerRegistryBackendService } from './inbound-handler-registry.backend.service';\nimport { InboundDeliveryInsertOutcome, inboundDeliveryIdFor, inboundDeliveryResourceTypeFor, type InboundDeliveryStoreBackendService } from './inbound-delivery-store.backend.service';\nimport { storedBodyFileIdOf, type InboundDeliveryStoredBodyBackendService, type StoredInboundBody } from './inbound-delivery-stored-body.backend.service';\nimport { InboundDeliveryAudit } from './inbound-delivery-audit.backend';\nimport { enqueueInboundDeliveryDispatch } from './inbound-delivery-dispatch-queue.backend';\nimport type { ChatIdentityLinkBackendService } from './chat-identity-link.backend.service';\nimport { ChatSearchRouteKind, type ChatSearchLaneBackendService, type ChatSearchRoute } from '~wildo-backend-lib/inbound/chat-commands/chat-search-lane.backend.service';\nimport { CHAT_COMMAND_TRY_AGAIN_LABEL_REF, chatCommandLabelKey } from '~wildo-backend-lib/inbound/chat-commands/chat-command-words.backend.utils';\nimport { ChatCommandFormLaneOutcome, type ChatCommandFormLaneBackendService } from '~wildo-backend-lib/inbound/chat-commands/chat-command-form-lane.backend.service';\n\n/** The request, as the route hands it over. Header names lower-cased. */\nexport interface InboundRawRequest {\n  /** The exact bytes received, or `undefined` when the body parser kept none. */\n  readonly rawBody: Buffer | undefined;\n  readonly headers: Readonly<Record<string, string | string[] | undefined>>;\n  /** The body parser refused the body for its size before any bytes were kept (the parser's own ceiling). */\n  readonly bodyTooLarge?: boolean;\n  /**\n   * The path and query string the request arrived on, exactly as received (`req.originalUrl`). Read only by a scheme\n   * that signs the URL it was sent to (Twilio's, #3394); never stored.\n   */\n  readonly requestTarget?: string;\n}\n\nexport interface InboundReceiveAnswer {\n  readonly status: number;\n  readonly body: Readonly<Record<string, unknown>>;\n  /**\n   * The provider endpoint's own answer (#2659), written INSTEAD of `body` with a 200. Present only on a request the\n   * engine accepted; a refusal always carries the engine's answer.\n   */\n  readonly acknowledgement?: Hook_Acknowledgement;\n}\n\n/** The engine's 200 answer, carrying the endpoint's acknowledgement when it declares one. Never replaces a refusal. */\nfunction acknowledgedBy(answer: InboundReceiveAnswer, acknowledgement: Hook_Acknowledgement | undefined): InboundReceiveAnswer {\n  return acknowledgement && answer.status === 200 ? { ...answer, acknowledgement } : answer;\n}\n\nconst ANSWER = {\n  received: { status: 200, body: { received: true } },\n  duplicate: { status: 200, body: { received: true, duplicate: true } },\n  ignored: { status: 200, body: { received: true, ignored: true } },\n  unauthorized: { status: 401, body: { error: 'Invalid signature' } },\n  malformed: { status: 400, body: { error: 'Malformed delivery' } },\n  tooLarge: { status: 413, body: { error: 'Payload too large' } },\n  unsupported: { status: 415, body: { error: 'Unsupported media type' } },\n  retryLater: { status: 500, body: { error: 'Processing failed' } },\n} as const satisfies Record<string, InboundReceiveAnswer>;\n\n/** The longest dedup or ordering key the ledger stores (the schema's bound). */\nexport const INBOUND_KEY_MAX_LENGTH = 512;\n\nfunction isStorableInboundKey(key: string | undefined): key is string {\n  return typeof key === 'string' && key.length > 0 && key.length <= INBOUND_KEY_MAX_LENGTH;\n}\n\n/**\n * What EVERY request to a re-read trigger endpoint is answered (#2909): known or unknown reference, rate-limited,\n * malformed, stored or not. Its sender is unverified, so no answer may tell it anything, least of all which references\n * exist (a store failure answered 500 would say that one did).\n */\nexport const REREAD_TRIGGER_ANSWER: InboundReceiveAnswer = { status: 202, body: { received: true } };\n/** The largest notification a re-read trigger endpoint reads when its provider declares no `maxBodyBytes`. */\nexport const REREAD_TRIGGER_DEFAULT_MAX_BODY_BYTES = 16 * 1024;\n/** The longest reference kept: the delivery id appends the window's instant to it, within the ledger's key bound. */\nexport const REREAD_TRIGGER_MAX_REFERENCE_LENGTH = INBOUND_KEY_MAX_LENGTH - 32;\n\n/**\n * A re-read trigger's delivery id (#2909): the reference and the start of the coalescing window the notification arrived\n * in. Two notifications for one reference inside one window are one delivery, so a reference is re-read at most once per\n * window, whatever a sender sends.\n */\nexport function reReadTriggerDeliveryId(reference: string, receivedAt: Date, coalescingWindowSeconds: number): string {\n  const windowMs = coalescingWindowSeconds * 1_000;\n  return `${reference}@${new Date(Math.floor(receivedAt.getTime() / windowMs) * windowMs).toISOString()}`;\n}\n\nfunction headerString(headers: InboundRawRequest['headers'], name: string): string | undefined {\n  const value = headers[name];\n  return Array.isArray(value) ? value[0] : value;\n}\n\nfunction readPath(value: unknown, dotPath: string): unknown {\n  return dotPath.split('.').reduce<unknown>((current, key) => (current && typeof current === 'object' ? (current as Record<string, unknown>)[key] : undefined), value);\n}\n\n/** What a routing lookup found: one owner, none, or rows of two different owners (which names none). */\nenum ScopeOwnerOutcome {\n  ONE = 'one',\n  NONE = 'none',\n  AMBIGUOUS = 'ambiguous',\n}\n\n@injectable()\nexport class InboundDeliveryReceiverBackendService {\n  private readonly audit: InboundDeliveryAudit;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.InboundHandlerRegistryService) private readonly registry: InboundHandlerRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.InboundDeliveryStoreService) private readonly store: InboundDeliveryStoreBackendService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositoriesRegistry: Pick<RepositoriesRegistryHandlerBackendService, 'findManyForInfrastructure' | 'readUnscopedByKey'>,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: Pick<ResourcesRegistryBackendService, 'getResourceConfiguration'>,\n    /**\n     * The APPLICATION RECORD's id, stamped into an application-variant row's `applicationId` scope\n     * column. Never `AppConfigurationService.applicationId`: that is the PLATFORM's id for this\n     * process, and a row stamped with it is invisible to the application-scope list that filters by\n     * the record id (see `platform-application-id-readers.guard.test.ts`).\n     */\n    @inject(SAAS_SERVICE_TYPES.ApplicationIdentityService) private readonly applicationIdentity: Pick<ApplicationIdentityBackendService, 'getCanonicalApplicationId'>,\n    @inject(SAAS_SERVICE_TYPES.QueueBackendService) @optional() private readonly queue?: Pick<QueueBackendService, 'enqueueCustomBatch'>,\n    @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional() auditLogs?: AuditLogsBackendService,\n    @inject(SAAS_SERVICE_TYPES.WebhookHandlerService) @optional() private readonly webhookHandler?: WebhookHandlerBackendService,\n    /** #2664 S5b: where a verified personal conversation is recorded, on the sender's chat identity link. */\n    @inject(SAAS_SERVICE_TYPES.ChatIdentityLinkService) @optional() private readonly chatLinks?: Pick<ChatIdentityLinkBackendService, 'rememberPersonalConversation'>,\n    /** #2666 S7: where a chat search is answered, in the request. Optional: without it a search is answered \"try again\". */\n    @inject(SAAS_SERVICE_TYPES.ChatSearchLane) @optional() private readonly chatSearchLane?: Pick<ChatSearchLaneBackendService, 'answer'>,\n    /** #2909: the per-endpoint limit of a re-read trigger. Absent, every such notification is dropped (fail closed). */\n    @inject(SAAS_SERVICE_TYPES.RateLimitBackendService) @optional() private readonly rateLimits?: Pick<RateLimitBackendService, 'checkPolicyForSubject'>,\n    /** #2770: where a chat command's form is opened while the person waits. Optional: without it every command runs as typed. */\n    @inject(SAAS_SERVICE_TYPES.ChatCommandFormLane) @optional() private readonly chatCommandFormLane?: Pick<ChatCommandFormLaneBackendService, 'open'>,\n    /**\n     * #3395: where a body larger than a delivery row is written. Optional: without it such a body is refused 413, as it\n     * was before bodies could be stored outside the row.\n     */\n    @inject(SAAS_SERVICE_TYPES.InboundDeliveryStoredBodyService) @optional() private readonly storedBodies?: Pick<InboundDeliveryStoredBodyBackendService, 'write' | 'discard'>,\n  ) {\n    this.audit = new InboundDeliveryAudit(auditLogs);\n  }\n\n  /** The clock; a property so tests can pin time without DI trying to inject it. */\n  clock: () => Date = () => new Date();\n\n  // ─────────────────────────────────────────────────────────────────────────\n  // Application endpoints: POST /webhooks/app/{endpointKey}\n  // ─────────────────────────────────────────────────────────────────────────\n\n  async receiveApplicationEndpoint(endpoint: InboundApplicationEndpoint, request: InboundRawRequest): Promise<InboundReceiveAnswer> {\n    const base = { sourceKind: InboundSourceKind.APPLICATION_ENDPOINT, sourceKey: endpoint.sourceKey };\n    const reject = async (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer): Promise<InboundReceiveAnswer> => {\n      await this.audit.rejected({ ...base, reason });\n      return answer;\n    };\n\n    // Media type first: only JSON keeps its raw bytes, and a scheme cannot verify what was not kept.\n    const contentType = (headerString(request.headers, 'content-type') ?? '').split(';')[0]!.trim().toLowerCase();\n    if (contentType !== 'application/json') return reject(InboundDeliveryRejectionReason.UNSUPPORTED_MEDIA_TYPE, ANSWER.unsupported);\n\n    const declaredLength = Number(headerString(request.headers, 'content-length'));\n    if (request.bodyTooLarge || (Number.isFinite(declaredLength) && declaredLength > endpoint.maxBodyBytes) || (request.rawBody && request.rawBody.length > endpoint.maxBodyBytes)) {\n      return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n    }\n    // No re-serialization fallback: a JSON.stringify of the parsed body does not byte-match what the\n    // sender signed, so \"verifying\" it would verify our own bytes.\n    if (!request.rawBody) {\n      this.logger.error('Inbound delivery refused: the raw request body was not kept, so it cannot be verified', { sourceKey: endpoint.sourceKey });\n      return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n    }\n\n    // I1 at request time: a secret can be removed after mount, and an empty secret is never a key.\n    const secretEnvVar = deriveInboundEndpointSecretEnvVarName(endpoint.endpointKey);\n    const secret = process.env[secretEnvVar] ?? '';\n    if (!secret) {\n      this.logger.error('Inbound delivery refused: the endpoint has no verification secret', { sourceKey: endpoint.sourceKey, secretEnvVar });\n      return reject(InboundDeliveryRejectionReason.SECRET_NOT_CONFIGURED, ANSWER.unauthorized);\n    }\n    const receivedAt = this.clock();\n    // assurance-control: WILDO.SECURITY.FAIL_CLOSED — no dispatch without a verified signature (I1).\n    const verification = verifyInboundDelivery(endpoint.source.verification, { rawBody: request.rawBody, headers: request.headers, secret, now: receivedAt });\n    if (verification.ok === false) return reject(verification.reason, ANSWER.unauthorized);\n\n    let json: unknown;\n    try {\n      json = JSON.parse(request.rawBody.toString('utf8'));\n    } catch {\n      return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n    }\n    const eventTypeValue = readPath(json, endpoint.eventTypePath);\n    const eventType = typeof eventTypeValue === 'string' ? eventTypeValue : undefined;\n    const handler = this.registry.selectApplicationEndpointHandler(endpoint, eventType);\n    if (!handler) {\n      // An event no handler declared is not ours to store; acknowledging stops the sender retrying it.\n      return ANSWER.ignored;\n    }\n\n    const delivery: VerifiedInboundDelivery = {\n      sourceKind: InboundSourceKind.APPLICATION_ENDPOINT,\n      sourceKey: endpoint.sourceKey,\n      ...(verification.deliveryId !== undefined ? { providerDeliveryId: verification.deliveryId } : {}),\n      ...(verification.signedAt !== undefined ? { signedAt: verification.signedAt } : {}),\n      receivedAt,\n      rawBody: request.rawBody,\n      headers: this.keptHeaders(request.headers, headersKeptForScheme(endpoint.source.verification)),\n      ...(eventType !== undefined ? { eventType } : {}),\n      json,\n    };\n    return this.admit(handler, delivery, base, reject);\n  }\n\n  // ─────────────────────────────────────────────────────────────────────────\n  // Provider endpoints bound to a handler: POST /webhooks/{providerRef}/{endpointKey}\n  // ─────────────────────────────────────────────────────────────────────────\n\n  /**\n   * A provider-declared endpoint whose events a handler takes. Verification is the provider's registered adapter\n   * (Stripe's SDK `constructEvent`, for one) or, for an engine-verified scheme (Svix, Slack v0, the Bot Framework\n   * token), engine code; both refuse an empty secret at request time. Everything after it is the durable path.\n   */\n  async receiveProviderEndpoint(providerRef: string, endpoint: Hook_Endpoint, handler: AnyInboundHandlerDefinition, request: InboundRawRequest): Promise<InboundReceiveAnswer> {\n    const sourceKey = inboundSourceKey(handler.source);\n    const base = { sourceKind: InboundSourceKind.PROVIDER_ENDPOINT, sourceKey };\n    // The receipt instant, taken before verification: a chat search's deadline is spent from it, verification included.\n    const receivedAt = this.clock();\n    const reject = async (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer): Promise<InboundReceiveAnswer> => {\n      await this.audit.rejected({ ...base, reason });\n      return answer;\n    };\n    // An unsigned notification that only triggers a re-read (#2909): handled by the engine, verified by nothing.\n    if (isReReadTriggerEndpoint(endpoint)) return this.receiveReReadTrigger(providerRef, endpoint, handler, request, base, receivedAt, reject);\n    if (!this.webhookHandler) return ANSWER.retryLater;\n    // The media types the endpoint declares (#2659), JSON when it declares none. Checked FIRST, like the application\n    // endpoint's: a body the engine would not decode is refused without being interpreted, and a type neither global\n    // parser reads (so no raw bytes were kept) is answered 415, not a misleading 400.\n    const contentType = inboundContentTypeOf(request.headers['content-type']);\n    if (!contentType || !(endpoint.contentTypes ?? [Hook_ContentType.JSON]).includes(contentType)) {\n      return reject(InboundDeliveryRejectionReason.UNSUPPORTED_MEDIA_TYPE, ANSWER.unsupported);\n    }\n    // Over the body parser's own limit (#3395): refused before anything was read into the request.\n    if (request.bodyTooLarge) return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n    if (!request.rawBody) return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n    // The endpoint's own cap, when its provider declares one, and never past the most any delivery may hold (#3395): a\n    // body over the row's size is stored outside it, but the whole body is verified in memory first.\n    if ((endpoint.maxBodyBytes !== undefined && request.rawBody.length > endpoint.maxBodyBytes) || request.rawBody.length > INBOUND_DELIVERY_MAX_BODY_BYTES) {\n      return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n    }\n\n    let verified: ProviderInboundRequest;\n    // assurance-control: WILDO.SECURITY.FAIL_CLOSED — a provider event (billing's, since #1629; Slack's and Teams', #2659) is stored and dispatched only after its signature or token verified (I1).\n    try {\n      verified = await this.webhookHandler.verifyAndParseForInboundHandler({\n        providerRef,\n        endpointKey: endpoint.key,\n        endpoint,\n        rawBody: request.rawBody,\n        headers: request.headers as Record<string, string>,\n        contentType,\n        // An organization's own bot routes by the connection reporting it, through the same lookup a resolver uses (#2663).\n        findOrganizationIdByConnectionFact: this.lookups.findOrganizationIdByConnectionFact,\n        ...(request.requestTarget === undefined ? {} : { requestTarget: request.requestTarget }),\n      });\n    } catch (error) {\n      if (isWildoBackendError(error) && error.type === ErrorType.AUTHORIZATION) {\n        const refusal = error.context as { secretConfigured?: boolean; reason?: InboundDeliveryRejectionReason } | undefined;\n        // An engine-verified endpoint (#1600) names its refusal; an adapter-verified one only says whether a secret existed.\n        const reason = refusal?.secretConfigured === false\n          ? InboundDeliveryRejectionReason.SECRET_NOT_CONFIGURED\n          : refusal?.reason === InboundDeliveryRejectionReason.TIMESTAMP_OUT_OF_WINDOW\n            ? InboundDeliveryRejectionReason.TIMESTAMP_OUT_OF_WINDOW\n            : InboundDeliveryRejectionReason.SIGNATURE_INVALID;\n        return reject(reason, ANSWER.unauthorized);\n      }\n      // Ours, not the sender's: a key set that could not be fetched, an endpoint function that threw.\n      this.logger.error('Inbound provider delivery could not be verified or read', { sourceKey, ...projectCaughtErrorLogFields(error) });\n      return ANSWER.retryLater;\n    }\n\n    switch (verified.kind) {\n      case ProviderInboundRequestKind.HANDSHAKE:\n        // A reachability check, already verified: answered as the provider requires, and stored nowhere.\n        this.logger.info('Inbound provider handshake answered', { sourceKey });\n        return acknowledgedBy(ANSWER.received, verified.answer);\n      case ProviderInboundRequestKind.MALFORMED:\n        return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n      case ProviderInboundRequestKind.IGNORED:\n        return acknowledgedBy(ANSWER.ignored, verified.acknowledgement);\n      case ProviderInboundRequestKind.EVENT: {\n        // #2770: a command whose form the vendor must open while the person waits (a Slack modal) is answered here, and\n        // stored nowhere: its submission comes back as a command of its own. Declined, it is stored and run as typed.\n        if (verified.chatCommand && await this.openedChatCommandForm(providerRef, endpoint, handler, verified, request, contentType, sourceKey, receivedAt)) {\n          return acknowledgedBy(ANSWER.received, verified.acknowledgement);\n        }\n        const delivery: VerifiedInboundDelivery = {\n          sourceKind: InboundSourceKind.PROVIDER_ENDPOINT,\n          sourceKey,\n          providerDeliveryId: verified.eventId,\n          receivedAt,\n          rawBody: request.rawBody,\n          // The media type is kept: the dispatcher decodes the stored bytes as what they were received as.\n          headers: providerEndpointKeptHeaders(request.headers),\n          eventType: verified.providerEventType,\n          json: verified.body,\n          ...(verified.verifiedAudience === undefined ? {} : { verifiedAudience: verified.verifiedAudience }),\n        };\n        return acknowledgedBy(await this.admit(handler, delivery, base, reject, verified.personalConversation, verified.chatMessage, verified.chatCommand), verified.acknowledgement);\n      }\n      case ProviderInboundRequestKind.CHAT_SEARCH:\n        return this.answerChatSearch(providerRef, endpoint, handler, verified, request, sourceKey, receivedAt);\n      default: {\n        // A shape the receiver does not know is OUR defect (a verifier and a receiver out of step), never something to\n        // answer with: throwing reaches the route's error handler as a 500, where returning it would write no status.\n        const unhandled: never = verified;\n        throw new Error(`Unknown provider inbound request kind: ${JSON.stringify((unhandled as { kind?: unknown } | null)?.kind)}`);\n      }\n    }\n  }\n\n  // ─────────────────────────────────────────────────────────────────────────\n\n  /**\n   * A notification nobody can verify, that only names an object to re-read (#2909, `Hook_TriggerStrategy.WEBHOOK_TRIGGERS_POLL`).\n   *\n   * Nothing in it is trusted: it is rate-limited per endpoint before anything is read, its reference is looked up by the\n   * handler's own resolver (the record must already be this application's, or it is dropped), and only that reference is\n   * stored, under an id derived from it and the coalescing window. The handler re-reads the object from the vendor's\n   * authenticated API; that answer, never the notification, is what it records. Every outcome is answered 202.\n   *\n   * What the answer does not hide (review F7, a stated residual): its TIMING. A known reference costs a store write, an\n   * audit row and an enqueue; an unknown one a lookup and an aggregated refusal. A sender who already holds a candidate\n   * reference (a signer sees theirs) may tell from latency whether this application uses it. It learns nothing it could\n   * act on: the notification is never believed, and a known reference only causes a re-read at the vendor it came from.\n   *\n   * assurance-control: WILDO.SECURITY.FAIL_CLOSED — an unverified notification changes nothing by itself: it is dropped\n   * unless it names a known record, and then only triggers an authenticated re-read.\n   */\n  private async receiveReReadTrigger(\n    providerRef: string,\n    endpoint: Hook_Endpoint,\n    handler: AnyInboundHandlerDefinition,\n    request: InboundRawRequest,\n    base: { sourceKind: InboundSourceKind; sourceKey: string },\n    receivedAt: Date,\n    reject: (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer) => Promise<InboundReceiveAnswer>,\n  ): Promise<InboundReceiveAnswer> {\n    const drop = async (reason: InboundDeliveryRejectionReason): Promise<InboundReceiveAnswer> => {\n      await reject(reason, REREAD_TRIGGER_ANSWER);\n      return REREAD_TRIGGER_ANSWER;\n    };\n    // The route gate withholds an endpoint without one, so this is a declaration that changed after mount.\n    const trigger = endpoint.reReadTrigger;\n    if (!trigger) return drop(InboundDeliveryRejectionReason.MALFORMED);\n\n    // The endpoint's rate, FIRST: a flood is counted and dropped before anything of it is read or looked up.\n    if (!(await this.admittedByReReadTriggerRate(providerRef, endpoint.key, trigger))) return drop(InboundDeliveryRejectionReason.RATE_LIMITED);\n\n    const contentType = inboundContentTypeOf(request.headers['content-type']);\n    if (!contentType || !(endpoint.contentTypes ?? [Hook_ContentType.JSON]).includes(contentType)) return drop(InboundDeliveryRejectionReason.UNSUPPORTED_MEDIA_TYPE);\n    if (request.bodyTooLarge || (request.rawBody && request.rawBody.length > (endpoint.maxBodyBytes ?? REREAD_TRIGGER_DEFAULT_MAX_BODY_BYTES))) {\n      return drop(InboundDeliveryRejectionReason.BODY_TOO_LARGE);\n    }\n    if (!request.rawBody) return drop(InboundDeliveryRejectionReason.MALFORMED);\n    const decoded = decodeInboundBody(request.rawBody, contentType);\n    if (!decoded.ok) return drop(InboundDeliveryRejectionReason.MALFORMED);\n\n    let reference: string | null;\n    try {\n      reference = trigger.identifyReference({ rawBody: new Uint8Array(request.rawBody), headers: request.headers, contentType, body: decoded.body });\n    } catch {\n      reference = null;\n    }\n    if (typeof reference !== 'string' || reference.length === 0 || reference.length > REREAD_TRIGGER_MAX_REFERENCE_LENGTH) {\n      return drop(InboundDeliveryRejectionReason.UNKNOWN_REFERENCE);\n    }\n\n    // Only the reference is kept: the notification's other bytes are unverified and nothing reads them.\n    const json = { reference };\n    const delivery: VerifiedInboundDelivery = {\n      sourceKind: InboundSourceKind.PROVIDER_ENDPOINT,\n      sourceKey: base.sourceKey,\n      providerDeliveryId: reReadTriggerDeliveryId(reference, receivedAt, trigger.coalescingWindowSeconds ?? HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS),\n      receivedAt,\n      rawBody: Buffer.from(JSON.stringify(json), 'utf8'),\n      headers: { 'content-type': Hook_ContentType.JSON },\n      json,\n    };\n    // One re-read of a reference at a time: its deliveries are ordered by the reference.\n    const admission = { orderingKey: reference, dropUnknown: () => drop(InboundDeliveryRejectionReason.UNKNOWN_REFERENCE) };\n    const leading = await this.admit(handler, delivery, base, reject, undefined, undefined, undefined, admission);\n    if (leading === ANSWER.duplicate) {\n      // The TRAILING edge (#2909 review F3): this window's re-read is already stored and may already have run, so a later\n      // notification would be lost, and the vendor never retries. One more delivery is kept for the NEXT window, due at\n      // its start: the reference is re-read once per window at most, and the last notification of a window is never lost.\n      // A third notification in the window finds that one too, and is a duplicate of it.\n      const windowSeconds = trigger.coalescingWindowSeconds ?? HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS;\n      const nextWindowStart = new Date((Math.floor(receivedAt.getTime() / (windowSeconds * 1_000)) + 1) * windowSeconds * 1_000);\n      await this.admit(handler, { ...delivery, providerDeliveryId: reReadTriggerDeliveryId(reference, nextWindowStart, windowSeconds) }, base, reject, undefined, undefined, undefined, {\n        ...admission,\n        notBefore: nextWindowStart,\n      });\n    }\n    return REREAD_TRIGGER_ANSWER;\n  }\n\n  /**\n   * Counts one request against the endpoint's limit, all senders together (#2909). `false` when it is over the limit, and\n   * when the limiter cannot answer: an unverified notification is never worth admitting unmetered, and polling covers\n   * whatever a dropped one named.\n   */\n  private async admittedByReReadTriggerRate(providerRef: string, endpointKey: string, trigger: NonNullable<Hook_Endpoint['reReadTrigger']>): Promise<boolean> {\n    if (!this.rateLimits) {\n      this.logLimiterFailureAtMostPerMinute('A re-read trigger notification was dropped: no rate limiter is bound', providerRef, endpointKey);\n      return false;\n    }\n    const limit = trigger.rateLimit ?? HOOK_REREAD_TRIGGER_DEFAULT_RATE_LIMIT;\n    try {\n      await this.rateLimits.checkPolicyForSubject(\n        { customWindows: [{ requestsPerWindow: limit.maxRequests, windowSeconds: limit.windowSeconds }] },\n        'inbound-reread-trigger',\n        `${providerRef}:${endpointKey}`,\n      );\n      return true;\n    } catch (error) {\n      if (!(isWildoBackendError(error) && error.type === ErrorType.RATE_LIMIT)) {\n        this.logLimiterFailureAtMostPerMinute('A re-read trigger notification was dropped: its rate limit could not be checked', providerRef, endpointKey, projectCaughtErrorLogFields(error));\n      }\n      return false;\n    }\n  }\n\n  /** When each endpoint's limiter failure was last logged: unauthenticated requests must not write one line each (review F10). */\n  private readonly reReadTriggerLimiterLoggedAt = new Map<string, number>();\n\n  private logLimiterFailureAtMostPerMinute(message: string, providerRef: string, endpointKey: string, fields: Record<string, unknown> = {}): void {\n    const key = `${providerRef}:${endpointKey}`;\n    const now = this.clock().getTime();\n    const last = this.reReadTriggerLimiterLoggedAt.get(key);\n    if (last !== undefined && now - last < 60_000) return;\n    this.reReadTriggerLimiterLoggedAt.set(key, now);\n    this.logger.error(message, { providerRef, endpointKey, ...fields });\n  }\n\n  /**\n   * Answers a chat search in the request (#2666 S7 step 6): routed by the handler's own payload schema and scope resolver,\n   * exactly as an event would be, then answered by the chat search lane and written by the endpoint's `answerChatSearch`.\n   * Nothing is stored, enqueued, or audited as a delivery: a search is a query, sent per keystroke. Its row, when it has\n   * one, is the command door's (`CHAT_COMMAND_RUN`, for each outcome or refusal decided for a known member).\n   *\n   * Every failure here is answered with a sentence, never with \"retry later\": a 500 would show the person an error for a\n   * keystroke, and the next keystroke is the retry.\n   */\n  private async answerChatSearch(\n    providerRef: string,\n    endpoint: Hook_Endpoint,\n    handler: AnyInboundHandlerDefinition,\n    verified: Extract<ProviderInboundRequest, { kind: ProviderInboundRequestKind.CHAT_SEARCH }>,\n    request: InboundRawRequest,\n    sourceKey: string,\n    receivedAt: Date,\n  ): Promise<InboundReceiveAnswer> {\n    let answer: Hook_ChatSearchAnswer;\n    if (!this.chatSearchLane) {\n      this.logger.error('A chat search arrived, but no chat search lane is bound in this process', { sourceKey });\n      // No lane, no words: the sentence's key, visibly unworded, rather than an answer the vendor shows as an error.\n      answer = { kind: Hook_ChatSearchAnswerKind.MESSAGE, text: chatCommandLabelKey(CHAT_COMMAND_TRY_AGAIN_LABEL_REF) };\n    } else {\n      const route = await this.routeUnstoredRequest(handler, verified.body, verified.search.vendorRequestId, verified.verifiedAudience, request, sourceKey, receivedAt, 'chat search');\n      answer = await this.chatSearchLane.answer({ route, connectionRef: providerRef, sourceKey, search: verified.search, receivedAt });\n    }\n    try {\n      return acknowledgedBy(ANSWER.received, endpoint.answerChatSearch!(answer));\n    } catch (error) {\n      this.logger.error('Webhook endpoint function \\'answerChatSearch\\' threw; the search is answered with the engine\\'s plain acknowledgement', {\n        providerRef, sourceKey, ...projectCaughtErrorLogFields(error),\n      });\n      return ANSWER.received;\n    }\n  }\n\n  /**\n   * Opens a chat command's form while the person waits (#2770), through the chat command form lane: `true` when it\n   * opened (the request is answered and nothing is stored), `false` when it declined, and the command is stored and run as\n   * typed. The lane routes the command as a stored one would be routed, by the handler's own schema and resolver.\n   */\n  private async openedChatCommandForm(\n    providerRef: string,\n    endpoint: Hook_Endpoint,\n    handler: AnyInboundHandlerDefinition,\n    verified: Extract<ProviderInboundRequest, { kind: ProviderInboundRequestKind.EVENT }>,\n    request: InboundRawRequest,\n    contentType: Hook_ContentType,\n    sourceKey: string,\n    receivedAt: Date,\n  ): Promise<boolean> {\n    if (!this.chatCommandFormLane || !verified.chatCommand || !request.rawBody) return false;\n    const outcome = await this.chatCommandFormLane.open({\n      providerRef,\n      endpointKey: endpoint.key,\n      command: verified.chatCommand,\n      request: { rawBody: new Uint8Array(request.rawBody), headers: request.headers, contentType, body: verified.body },\n      receivedAt,\n      route: async () => {\n        // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a chat command's form is opened only in the organization the endpoint's own resolver routes it to.\n        const route = await this.routeUnstoredRequest(handler, verified.body, verified.eventId, verified.verifiedAudience, request, sourceKey, receivedAt, 'chat command form');\n        return route.kind === ChatSearchRouteKind.ORGANIZATION ? { organizationId: route.organizationId } : undefined;\n      },\n    });\n    return outcome === ChatCommandFormLaneOutcome.OPENED;\n  }\n\n  /**\n   * Where a request answered in its own request reads (a chat search, #2666 S7; a chat command's form, #2770): the\n   * organization the handler's payload schema and scope resolver route it to, exactly as an event's, or nowhere. A\n   * failure on OUR side (the handler's schema refusing what the module read, a resolver that threw) is FAILED, not\n   * UNROUTABLE: the person is asked to try again, never told the team is not connected.\n   */\n  private async routeUnstoredRequest(\n    handler: AnyInboundHandlerDefinition,\n    body: unknown,\n    vendorRequestId: string,\n    verifiedAudience: Extract<ProviderInboundRequest, { kind: ProviderInboundRequestKind.EVENT }>['verifiedAudience'],\n    request: InboundRawRequest,\n    sourceKey: string,\n    receivedAt: Date,\n    what: string,\n  ): Promise<ChatSearchRoute> {\n    try {\n      // A delivery body is JSON (#3478): a date in the handler's payload schema reads from its RFC 3339 form.\n      const payload = jsonParsingSchemaOf(handler.payloadSchema).safeParse(body);\n      if (!payload.success) {\n        this.logger.error(`A ${what} was refused by its handler's payload schema, so it could not be routed`, { sourceKey, handlerRef: handler.ref });\n        return { kind: ChatSearchRouteKind.FAILED };\n      }\n      const delivery: VerifiedInboundDelivery = {\n        sourceKind: InboundSourceKind.PROVIDER_ENDPOINT,\n        sourceKey,\n        // The vendor's id for the request: the only name it has, for a resolver that keys on one. Never stored.\n        providerDeliveryId: vendorRequestId,\n        receivedAt,\n        rawBody: request.rawBody!,\n        headers: providerEndpointKeptHeaders(request.headers),\n        json: body,\n        ...(verifiedAudience === undefined ? {} : { verifiedAudience }),\n      };\n      // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a request answered in place reads only in the organization the endpoint's own resolver routes it to.\n      const scope = await this.resolveScope(handler, delivery, payload.data);\n      return scope.kind === InboundResolvedScopeKind.ORGANIZATION\n        ? { kind: ChatSearchRouteKind.ORGANIZATION, organizationId: scope.organizationId }\n        : { kind: ChatSearchRouteKind.UNROUTABLE };\n    } catch (error) {\n      this.logger.error(`A ${what} could not be routed: a handler function threw`, { sourceKey, handlerRef: handler.ref, ...projectCaughtErrorLogFields(error) });\n      return { kind: ChatSearchRouteKind.FAILED };\n    }\n  }\n\n  /** Whether the handler's endpoint carries the messages people write to the application's bot (#2665 S6). */\n  private isChatConversationEndpoint(handler: AnyInboundHandlerDefinition): boolean {\n    return handler.source.kind === InboundSourceKind.PROVIDER_ENDPOINT\n      && this.registry.chatMessageEndpoint(handler.source.providerRef, handler.source.endpointKey) !== undefined;\n  }\n\n  /** Whether the handler's endpoint is one whose requests may carry a chat command a person sent (#2666 S7). */\n  private isChatCommandEndpoint(handler: AnyInboundHandlerDefinition): boolean {\n    return handler.source.kind === InboundSourceKind.PROVIDER_ENDPOINT\n      && this.registry.chatCommandEndpoint(handler.source.providerRef, handler.source.endpointKey) !== undefined;\n  }\n\n  private async admit(\n    handler: AnyInboundHandlerDefinition,\n    delivery: VerifiedInboundDelivery,\n    base: { sourceKind: InboundSourceKind; sourceKey: string },\n    reject: (reason: InboundDeliveryRejectionReason, answer: InboundReceiveAnswer) => Promise<InboundReceiveAnswer>,\n    /** The sender's personal conversation with the bot, when the verifier found one (#2664 S5b). */\n    personalConversation?: Hook_InboundPersonalConversation,\n    /** The message a person wrote to the bot, when the verified request carries one (#2665 S6). */\n    chatMessage?: Hook_InboundChatMessage,\n    /** The chat command a person sent, when the verified request carries one (#2666 S7). */\n    chatCommand?: Hook_InboundChatCommand,\n    /**\n     * A re-read trigger's delivery (#2909): ordered by its reference, and DROPPED, not stored as unroutable, when the\n     * handler's resolver finds no record it names.\n     */\n    reReadTrigger?: { readonly orderingKey: string; readonly dropUnknown: () => Promise<InboundReceiveAnswer>; readonly notBefore?: Date },\n  ): Promise<InboundReceiveAnswer> {\n    // A delivery body is JSON (#3478): a date in the handler's payload schema reads from its RFC 3339 form. The dispatch\n    // reads the stored body through the same schema, so the value checked here is the value the handler runs on.\n    const payload = jsonParsingSchemaOf(handler.payloadSchema).safeParse(delivery.json);\n    if (!payload.success) return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n\n    let dedupKey: string | undefined;\n    let orderingKey: string | null;\n    let subjectKeys: readonly string[] | undefined;\n    let resolvedScope: InboundDeliveryResolvedScope;\n    try {\n      dedupKey = handler.dedupKey ? handler.dedupKey(delivery) : delivery.providerDeliveryId;\n      orderingKey = handler.orderingKey ? handler.orderingKey(delivery, payload.data) : null;\n      // #1642: the people the payload names, as the handler declares them. Keys that cannot be stored refuse the delivery\n      // like a dedup key that cannot: stored without them, the person it names could never be found in it.\n      subjectKeys = normalizeInboundSubjectKeys(handler.subjectKeys ? handler.subjectKeys(delivery, payload.data) : undefined);\n      // A key the store cannot hold is the SENDER's malformed delivery, answered 400 and audited — not a\n      // 500 the sender would retry forever with nothing recorded.\n      if (!isStorableInboundKey(dedupKey) || (orderingKey !== null && !isStorableInboundKey(orderingKey)) || subjectKeys === undefined) {\n        return reject(InboundDeliveryRejectionReason.MALFORMED, ANSWER.malformed);\n      }\n      // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a delivery runs only in the scope its handler admits; nothing falls back to the application scope (I3).\n      resolvedScope = await this.resolveScope(handler, delivery, payload.data);\n      if (reReadTrigger) {\n        // The known-record check (#2909): an unverified notification is kept only for a record this application holds.\n        if (resolvedScope.kind === InboundResolvedScopeKind.UNROUTABLE) return reReadTrigger.dropUnknown();\n        orderingKey = reReadTrigger.orderingKey;\n      }\n      // #2665 S6 (plans B6, V9): a chat message is ordered by the ENGINE, after routing, because its organization is part of\n      // the key: per organization, connection, vendor conversation and sender. So two people writing in one thread never\n      // wait on each other, and two organizations sharing a vendor channel never block each other. A message that routes\n      // to no organization orders with nothing. The registry refused a handler key on such an endpoint.\n      // #2666 S7 review L5: a request a module read as both is a command, and a command is never ordered behind a\n      // conversation's turns: it runs once, by its own compare-and-swap.\n      if (chatMessage && !chatCommand && handler.source.kind === InboundSourceKind.PROVIDER_ENDPOINT) {\n        orderingKey = resolvedScope.kind === InboundResolvedScopeKind.ORGANIZATION\n          ? chatConversationOrderingKeyOf({ organizationId: resolvedScope.organizationId, connectionRef: handler.source.providerRef, message: chatMessage })\n          : null;\n      }\n    } catch (error) {\n      this.logger.error('Inbound delivery could not be admitted: a handler function threw before the delivery was stored', {\n        handlerRef: handler.ref, sourceKey: base.sourceKey, ...projectCaughtErrorLogFields(error),\n      });\n      return ANSWER.retryLater;\n    }\n\n    // #2665 S6 (plan V4), #2666 S7: stored, so READ withholds the body and the PROCESSED settle empties it, whatever the\n    // handler registry later holds. A COMMAND is decided by the verified request, which is what it is, never by the\n    // live list of verbs. Anything else is marked per ENDPOINT, not per request: a chat-conversation endpoint's other\n    // events (an edit, a file share) carry what a person wrote just the same, and so does a request to a command\n    // endpoint whose command the module could not read (review M5: unmarked, its text would never be emptied).\n    const chatInput = chatCommand\n      ? InboundChatInputKind.COMMAND\n      : this.isChatConversationEndpoint(handler) ? InboundChatInputKind.CONVERSATION_MESSAGE\n        : this.isChatCommandEndpoint(handler) ? InboundChatInputKind.COMMAND : undefined;\n\n    let applicationId: string;\n    let storedBody: StoredInboundBody | undefined;\n    try {\n      applicationId = await this.applicationIdentity.getCanonicalApplicationId();\n      if (delivery.rawBody.length > INBOUND_DELIVERY_MAX_STORED_BODY_BYTES) {\n        // #3395: what a person wrote to the bot is never larger than a row, and its readers read it from the row; a body\n        // too large for the row is written outside it only where a backend can, and refused otherwise.\n        if (chatInput !== undefined || !this.storedBodies) return reject(InboundDeliveryRejectionReason.BODY_TOO_LARGE, ANSWER.tooLarge);\n        // A retried copy of an event already stored writes nothing: the ledger answers it without the upload.\n        if (await this.store.locate(inboundDeliveryIdFor(base.sourceKey, dedupKey))) return ANSWER.duplicate;\n        storedBody = await this.storedBodies.write({\n          resourceType: inboundDeliveryResourceTypeFor(resolvedScope),\n          deliveryId: inboundDeliveryIdFor(base.sourceKey, dedupKey),\n          bytes: delivery.rawBody,\n          mimeType: storedInboundContentType(delivery.headers),\n          ownerRow: resolvedScope.kind === InboundResolvedScopeKind.ORGANIZATION ? { organizationId: resolvedScope.organizationId } : { applicationId },\n        });\n      }\n    } catch (error) {\n      this.logger.error('Inbound delivery body could not be stored', { handlerRef: handler.ref, sourceKey: base.sourceKey, ...projectCaughtErrorLogFields(error) });\n      return ANSWER.retryLater;\n    }\n\n    let inserted;\n    try {\n      // assurance-control: WILDO.OPERATIONS.EXECUTION_INTEGRITY — one event, one stored delivery, at most one run (I2).\n      inserted = await this.store.insert({\n        sourceKind: base.sourceKind,\n        sourceKey: base.sourceKey,\n        handlerRef: handler.ref,\n        dedupKey,\n        orderingKey,\n        ...(delivery.providerDeliveryId !== undefined ? { providerDeliveryId: delivery.providerDeliveryId } : {}),\n        ...(delivery.signedAt !== undefined ? { signedAt: delivery.signedAt } : {}),\n        receivedAt: delivery.receivedAt,\n        rawBody: delivery.rawBody,\n        ...(storedBody ? { storedBody } : {}),\n        headers: { ...delivery.headers },\n        ...(subjectKeys.length > 0 ? { subjectKeys } : {}),\n        resolvedScope,\n        // #2909: an unsigned notification is recorded as what it is, and a trailing one waits for its window.\n        ...(reReadTrigger ? {\n          senderAssurance: InboundSenderAssurance.UNVERIFIED,\n          ...(reReadTrigger.notBefore ? { notBefore: reReadTrigger.notBefore } : {}),\n        } : {}),\n        ...(chatInput !== undefined ? { chatInput } : {}),\n      }, applicationId);\n    } catch (error) {\n      this.logger.error('Inbound delivery could not be stored', { handlerRef: handler.ref, sourceKey: base.sourceKey, ...projectCaughtErrorLogFields(error) });\n      if (storedBody) await this.storedBodies!.discard(storedBody.fileId, 'insert_failed');\n      return ANSWER.retryLater;\n    }\n\n    // A body written for a row that was not stored (a concurrent copy won the key) or that does not name it is deleted.\n    if (storedBody && (inserted.outcome === InboundDeliveryInsertOutcome.DUPLICATE || storedBodyFileIdOf(inserted.row) !== storedBody.fileId)) {\n      await this.storedBodies!.discard(storedBody.fileId, 'not_stored');\n    }\n    if (inserted.outcome === InboundDeliveryInsertOutcome.DUPLICATE) return ANSWER.duplicate;\n    if (inserted.row.resolvedScope.kind === InboundResolvedScopeKind.UNROUTABLE) {\n      await this.audit.unroutable(inserted.row);\n      return ANSWER.received;\n    }\n    await this.audit.accepted(inserted.row);\n    await this.rememberPersonalConversation(handler, inserted.row.resolvedScope, delivery, personalConversation);\n    // A failed enqueue leaves the row RECEIVED and due; the sweep picks it up. The sender is not told\n    // to retry — the delivery IS stored, and a retry would only be deduplicated.\n    const delayMs = reReadTrigger?.notBefore ? Math.max(0, reReadTrigger.notBefore.getTime() - this.clock().getTime()) : 0;\n    await enqueueInboundDeliveryDispatch(this.queue, inserted.location, this.logger, delayMs);\n    return ANSWER.received;\n  }\n\n  /**\n   * Records the sender's personal conversation with the bot on their chat identity link (#2664 S5b), so the application\n   * can post to them later without their writing first (a decision card). Every fact comes from the verified request\n   * and its routing, none from a handler:\n   *\n   * - the organization is the one this delivery was routed to, and only an ORGANIZATION delivery has links;\n   * - the connection is the delivery's provider, which every account it names belongs to;\n   * - the bot is the one the verified token was for. An organization's own bot is admitted only for that organization,\n   *   so its conversation is recorded only in that organization's links; the application's bot reaches whichever\n   *   organization claimed the tenant.\n   *\n   * A person not linked there gets nothing recorded, and a failure is logged: the delivery is stored and runs either way.\n   */\n  private async rememberPersonalConversation(\n    handler: AnyInboundHandlerDefinition,\n    scope: InboundDeliveryResolvedScope,\n    delivery: VerifiedInboundDelivery,\n    conversation: Hook_InboundPersonalConversation | undefined,\n  ): Promise<void> {\n    const audience = delivery.verifiedAudience;\n    if (!conversation || !audience || !this.chatLinks) return;\n    if (handler.source.kind !== InboundSourceKind.PROVIDER_ENDPOINT || scope.kind !== InboundResolvedScopeKind.ORGANIZATION) return;\n    if (audience.organizationId !== undefined && audience.organizationId !== scope.organizationId) return;\n    try {\n      await this.chatLinks.rememberPersonalConversation({\n        organizationId: scope.organizationId,\n        connectionRef: handler.source.providerRef,\n        account: { workspaceRef: conversation.workspaceRef, chatUserId: conversation.chatUserId },\n        botOwnerScope: audience.organizationId === undefined ? ChatBotOwnerScope.APPLICATION : ChatBotOwnerScope.ORGANIZATION,\n        conversation: { conversationId: conversation.conversationId, serviceUrl: conversation.serviceUrl },\n      });\n    } catch (error) {\n      this.logger.warn('A verified personal conversation could not be recorded on its chat identity link; the delivery runs regardless', {\n        handlerRef: handler.ref, sourceKey: delivery.sourceKey, ...projectCaughtErrorLogFields(error),\n      });\n    }\n  }\n\n  /**\n   * I3: the handler's declared mode decides what may be admitted. There is no fallback — a scope the\n   * handler is not admitted to, and an organization or person that does not exist or confers no authority,\n   * is `UNROUTABLE` and never runs.\n   *\n   * An ENGINE handler recording a third party's facts (billing, #1629) may run regardless of the scope's\n   * STANDING — see `InboundScopeStandingPolicy`. A scope that does not exist is unroutable for every handler.\n   */\n  private async resolveScope(handler: AnyInboundHandlerDefinition, delivery: VerifiedInboundDelivery, payload: unknown): Promise<InboundDeliveryResolvedScope> {\n    if (handler.scopeMode === InboundHandlerScopeMode.APPLICATION) return { kind: InboundResolvedScopeKind.APPLICATION };\n    const resolved: InboundResolvedScope = await handler.resolveScope!(delivery, payload, this.lookups);\n    const unroutable = (reason: InboundDeliveryUnroutableReason): InboundDeliveryResolvedScope => ({ kind: InboundResolvedScopeKind.UNROUTABLE, reason });\n    const admitted = scopesAdmittedByHandler(handler);\n    const regardlessOfStanding = inboundScopeStandingPolicyOf(handler) === InboundScopeStandingPolicy.RECORD_REGARDLESS_OF_STANDING;\n\n    switch (resolved.kind) {\n      case InboundResolvedScopeKind.UNROUTABLE:\n        return unroutable(handler.scopeMode === InboundHandlerScopeMode.ORGANIZATION_REQUIRED\n          ? InboundDeliveryUnroutableReason.NO_ORGANIZATION_RESOLVED\n          : InboundDeliveryUnroutableReason.RESOLVER_DECLARED_UNROUTABLE);\n      case InboundResolvedScopeKind.APPLICATION:\n        return admitted.includes(InboundResolvedScopeKind.APPLICATION)\n          ? { kind: InboundResolvedScopeKind.APPLICATION }\n          : unroutable(InboundDeliveryUnroutableReason.SCOPE_NOT_ADMITTED_BY_HANDLER);\n      case InboundResolvedScopeKind.ORGANIZATION: {\n        if (!admitted.includes(InboundResolvedScopeKind.ORGANIZATION)) return unroutable(InboundDeliveryUnroutableReason.SCOPE_NOT_ADMITTED_BY_HANDLER);\n        if (!resolved.organizationId) return unroutable(InboundDeliveryUnroutableReason.NO_ORGANIZATION_RESOLVED);\n        const organization = await this.readOrganizationForRouting(resolved.organizationId);\n        if (!organization) return unroutable(InboundDeliveryUnroutableReason.ORGANIZATION_NOT_FOUND);\n        if (!regardlessOfStanding && !isAuthorityConferringOrganizationStatus(organization.status)) return unroutable(InboundDeliveryUnroutableReason.ORGANIZATION_WITHOUT_AUTHORITY);\n        return { kind: InboundResolvedScopeKind.ORGANIZATION, organizationId: resolved.organizationId };\n      }\n      case InboundResolvedScopeKind.USER: {\n        // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a person's own data is reached only by a handler that declared roles for that scope, and only for a person who exists (#1629).\n        if (!admitted.includes(InboundResolvedScopeKind.USER)) return unroutable(InboundDeliveryUnroutableReason.SCOPE_NOT_ADMITTED_BY_HANDLER);\n        if (!resolved.userId) return unroutable(InboundDeliveryUnroutableReason.USER_NOT_FOUND);\n        const user = await this.readUserForRouting(resolved.userId);\n        if (!user) return unroutable(InboundDeliveryUnroutableReason.USER_NOT_FOUND);\n        if (!regardlessOfStanding && !isAuthorityConferringUserStatus(user.status)) return unroutable(InboundDeliveryUnroutableReason.USER_WITHOUT_AUTHORITY);\n        return { kind: InboundResolvedScopeKind.USER, userId: resolved.userId };\n      }\n      default: {\n        const unhandled: never = resolved;\n        return unhandled;\n      }\n    }\n  }\n\n  /** The person a resolver named; an id the store cannot cast names no one. */\n  private async readUserForRouting(userId: string): Promise<{ _id: string; status?: UserStatus } | null> {\n    try {\n      return await this.repositoriesRegistry.readUnscopedByKey<{ _id: string; status?: UserStatus }>(CoreResourceType.USERS, { _id: userId });\n    } catch (error) {\n      if (isMalformedIdLookupError(error)) return null;\n      throw error;\n    }\n  }\n\n  /**\n   * The organization a resolver named. An id the store cannot cast names no organization, so it is NOT_FOUND\n   * rather than a 500 the sender would retry forever.\n   */\n  private async readOrganizationForRouting(organizationId: string): Promise<{ _id: string; status?: OrganizationStatus } | null> {\n    try {\n      return await this.repositoriesRegistry.readUnscopedByKey<{ _id: string; status?: OrganizationStatus }>(CoreResourceType.ORGANIZATIONS, { _id: organizationId });\n    } catch (error) {\n      if (isMalformedIdLookupError(error)) return null;\n      throw error;\n    }\n  }\n\n  /**\n   * Routing lookups for a resolver. They run on the infrastructure tier — BEFORE any handler authority\n   * exists, under the engine's own routing authority — and answer only an organization id.\n   */\n  private readonly lookups: InboundScopeLookups = {\n    findOrganizationIdByField: (resourceType: ResourceType, field: string, value: string) =>\n      this.findScopeOwnerByField(resourceType, ResourcePrimaryScope.ORGANIZATIONS, 'organizationId', field, value),\n    findUserIdByField: (resourceType: ResourceType, field: string, value: string) =>\n      this.findScopeOwnerByField(resourceType, ResourcePrimaryScope.USER_SELF, 'userId', field, value),\n    findOrganizationIdByConnectionFact: (connectionRef: string, factName: string, value: string) =>\n      this.findOrganizationIdByConnectionFact(connectionRef, factName, value),\n  };\n\n  /**\n   * See {@link InboundScopeLookups.findOrganizationIdByConnectionFact}. The fact name is a declared identifier\n   * (`workspaceId`, `tenantId`), never caller text that could become a path operator, so anything else is refused.\n   */\n  private async findOrganizationIdByConnectionFact(connectionRef: string, factName: string, value: string): Promise<string | null> {\n    if (!/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(factName)) {\n      throw new Error(`findOrganizationIdByConnectionFact: '${factName}' is not a fact name (a letter, then letters, digits or underscores)`);\n    }\n    if (typeof connectionRef !== 'string' || connectionRef.length === 0 || typeof value !== 'string' || value.length === 0) return null;\n    // assurance-control: WILDO.ACCESS.SCOPE_CONFINEMENT — a chat workspace or bot routes only to the organization its VENDOR reported or accepted, never on a typed value (#2660, #2663).\n    // One lookup per trusted provenance, and the answer is an organization only when exactly one holds the value across\n    // all of them: a value one organization's vendor reported and another's vendor accepted names no single organization.\n    const owners = new Set<string>();\n    for (const provenance of PROVIDER_CONNECTION_ROUTING_FACT_PROVENANCES) {\n      const outcome = await this.findScopeOwnerOutcome(CoreResourceType.ORG_PROVIDER_CREDENTIALS, ResourcePrimaryScope.ORGANIZATIONS, 'organizationId', {\n        connectionRef,\n        enabled: true,\n        [`connectionFacts.${factName}.value`]: value,\n        [`connectionFacts.${factName}.provenance`]: provenance,\n      }, 'findOrganizationIdByConnectionFact');\n      if (outcome.kind === ScopeOwnerOutcome.AMBIGUOUS) return null;\n      if (outcome.kind === ScopeOwnerOutcome.ONE) owners.add(outcome.owner);\n    }\n    return owners.size === 1 ? [...owners][0]! : null;\n  }\n\n  /**\n   * The scope owner (`organizationId` or `userId`) of the row of `resourceType` whose `field` equals `value`, or\n   * `null` — one implementation for both scopes, so the cross-owner refusal and the malformed-id rule cannot\n   * be applied to one and forgotten on the other.\n   */\n  private async findScopeOwnerByField(\n    resourceType: ResourceType,\n    requiredScope: ResourcePrimaryScope.ORGANIZATIONS | ResourcePrimaryScope.USER_SELF,\n    ownerField: 'organizationId' | 'userId',\n    field: string,\n    value: string,\n  ): Promise<string | null> {\n    const lookup = ownerField === 'organizationId' ? 'findOrganizationIdByField' : 'findUserIdByField';\n    // Only a plain value is looked up: a payload schema permissive enough to pass an object here would\n    // otherwise hand the store an operator (`{ $ne: null }`) that matches every row.\n    if (typeof value !== 'string' || value.length === 0) {\n      this.assertScopedResource(resourceType, requiredScope, ownerField, lookup);\n      return null;\n    }\n    return this.findScopeOwner(resourceType, requiredScope, ownerField, { [field]: value }, lookup);\n  }\n\n  private assertScopedResource(resourceType: ResourceType, requiredScope: ResourcePrimaryScope, ownerField: 'organizationId' | 'userId', lookup: string): void {\n    const configuration = this.resourcesRegistry.getResourceConfiguration(resourceType) as { resourcePrimaryScope?: ResourcePrimaryScope } | undefined;\n    if (configuration?.resourcePrimaryScope !== requiredScope) {\n      throw new Error(`${lookup}: '${resourceType}' is not a ${requiredScope}-scoped resource, so its rows name no ${ownerField === 'organizationId' ? 'organization' : 'person'}`);\n    }\n  }\n\n  /**\n   * The one owner whose rows of `resourceType` match `filter`, shared by every lookup so the cross-owner refusal and\n   * the malformed-id rule cannot be applied to one and forgotten on another. Every value in `filter` is a plain value\n   * its caller checked.\n   */\n  private async findScopeOwner(\n    resourceType: ResourceType,\n    requiredScope: ResourcePrimaryScope.ORGANIZATIONS | ResourcePrimaryScope.USER_SELF,\n    ownerField: 'organizationId' | 'userId',\n    filter: Record<string, unknown>,\n    lookup: string,\n  ): Promise<string | null> {\n    const outcome = await this.findScopeOwnerOutcome(resourceType, requiredScope, ownerField, filter, lookup);\n    return outcome.kind === ScopeOwnerOutcome.ONE ? outcome.owner : null;\n  }\n\n  /**\n   * {@link findScopeOwner}, saying WHY there is no owner: no matching row, or rows of two different owners. A lookup\n   * that combines several filters needs the difference, because two filters each naming one owner may name two.\n   */\n  private async findScopeOwnerOutcome(\n    resourceType: ResourceType,\n    requiredScope: ResourcePrimaryScope.ORGANIZATIONS | ResourcePrimaryScope.USER_SELF,\n    ownerField: 'organizationId' | 'userId',\n    filter: Record<string, unknown>,\n    lookup: string,\n  ): Promise<{ readonly kind: ScopeOwnerOutcome.ONE; readonly owner: string } | { readonly kind: ScopeOwnerOutcome.NONE | ScopeOwnerOutcome.AMBIGUOUS }> {\n    this.assertScopedResource(resourceType, requiredScope, ownerField, lookup);\n    const page = { sort: [{ field: '_id', order: SortOrder.ASC }], limit: 1 };\n    try {\n      const [first] = await this.repositoriesRegistry.findManyForInfrastructure<Record<string, unknown>>(resourceType, filter, undefined, undefined, page);\n      const owner = first?.[ownerField];\n      if (typeof owner !== 'string') return { kind: ScopeOwnerOutcome.NONE };\n      // A value unique per owner but not across owners must not route to whichever owner's row sorts first:\n      // a matching row belonging to ANY other owner makes the delivery unroutable.\n      const [other] = await this.repositoriesRegistry.findManyForInfrastructure<Record<string, unknown>>(\n        resourceType, { ...filter, [ownerField]: { $ne: owner } }, undefined, undefined, page,\n      );\n      return other ? { kind: ScopeOwnerOutcome.AMBIGUOUS } : { kind: ScopeOwnerOutcome.ONE, owner };\n    } catch (error) {\n      // The sender wrote the value, and the payload schema cannot know the store's id format (an ObjectId on\n      // MongoDB, something else on PostgreSQL). A value the store cannot cast matches no row: unroutable, never\n      // a 500 that tells the sender to retry the same malformed request forever.\n      if (isMalformedIdLookupError(error)) return { kind: ScopeOwnerOutcome.NONE };\n      throw error;\n    }\n  }\n\n\n  private keptHeaders(headers: InboundRawRequest['headers'], names: readonly string[]): Record<string, string> {\n    const kept: Record<string, string> = {};\n    for (const name of names) {\n      const value = headerString(headers, name.toLowerCase());\n      if (value !== undefined) kept[name.toLowerCase()] = value;\n    }\n    return kept;\n  }\n}\n"]}

package/dist/esm/inbound/services/inbound-delivery-store.backend.service.d.ts

@@ -1,6 +1,7 @@
 import { InboundChatInputKind, InboundChannelKind, InboundSenderAssurance, InboundDeliveryUnroutableReason, type InboundChatCommandRunResult, type InboundDeliveryBase, type InboundDeliveryBodyHolder, type InboundDeliveryResolvedScope, type ResourceType } from '@wildo-ai/saas-models';
 import type { RepositoriesRegistryHandlerBackendService } from '../../base-classes/services/repositories/repositories-registry-handler.backend.service';
 import { InboundScopeStandingPolicy } from '../../inbound/models/inbound-engine-handler.backend';
+import { type InboundDeliveryStoredBodyBackendService, type StoredInboundBody } from './inbound-delivery-stored-body.backend.service';
 /** A stored delivery as the store returns it: the base row plus its variant's scope FK. */
 /** A delivery a wake made due: where it is, and when it is due, which a trailing re-read holds to its window (#2909). */
 export interface InboundDeliveryWakeup extends InboundDeliveryLocation {
@@ -39,6 +40,11 @@ export interface NewInboundDelivery {
     readonly signedAt?: Date;
     readonly receivedAt: Date;
     readonly rawBody: Buffer;
+    /**
+     * The body as written outside the row (#3395), when it is larger than the row holds: the receiver wrote and linked the
+     * file, and the row keeps its id, SHA-256 and length with an empty `rawBody`. Omitted: the body is kept in the row.
+     */
+    readonly storedBody?: StoredInboundBody;
     readonly headers: Record<string, string>;
     /** The people the payload names, as the handler declared them and the receiver normalized them (#1642). Omitted: none. */
     readonly subjectKeys?: readonly string[];
@@ -89,9 +95,19 @@ export declare function inboundDeliveryIdFor(sourceKey: string, dedupKey: string
 export declare function inboundDeliveryResourceTypeFor(scope: InboundDeliveryResolvedScope): ResourceType;
 export declare class InboundDeliveryStoreBackendService {
     private readonly repositoriesRegistry;
+    /**
+     * Deletes a body stored outside its row once a redaction released it (#3395). Bound in every backend; optional only for
+     * a store that never holds one (a unit test's). What it cannot delete now stays DELETED and the files cleanup removes it.
+     */
+    private readonly storedBodies?;
     /** The store's clock. A property rather than a constructor argument so DI never tries to inject it; tests replace it. */
     clock: () => Date;
-    constructor(repositoriesRegistry: Pick<RepositoriesRegistryHandlerBackendService, 'readUnscopedByKey' | 'insertDocumentForInfrastructure' | 'atomicGuardedMutation' | 'findManyForInfrastructure'>);
+    constructor(repositoriesRegistry: Pick<RepositoriesRegistryHandlerBackendService, 'readUnscopedByKey' | 'insertDocumentForInfrastructure' | 'atomicGuardedMutation' | 'findManyForInfrastructure'>, 
+    /**
+     * Deletes a body stored outside its row once a redaction released it (#3395). Bound in every backend; optional only for
+     * a store that never holds one (a unit test's). What it cannot delete now stays DELETED and the files cleanup removes it.
+     */
+    storedBodies?: Pick<InboundDeliveryStoredBodyBackendService, 'discard'>);
     /** Read one row where it lives. */
     read(location: InboundDeliveryLocation): Promise<InboundDeliveryRow | null>;
     /** Find a delivery by id in either variant. */
@@ -232,6 +248,11 @@ export declare class InboundDeliveryStoreBackendService {
      * is nothing left to act on. WITHOUT_AUTHORITY refuses unless the handler records regardless of standing.
      */
     scopeStandingRefusal(row: Pick<InboundDeliveryRow, 'resolvedScope'>, policy: InboundScopeStandingPolicy): Promise<InboundDeliveryUnroutableReason | null>;
+    /**
+     * A redaction won its compare-and-swap (#3395): the body the row named outside itself is deleted now, as its in-row copy
+     * just was. The row no longer names the file, so whatever this cannot delete is swept by the files cleanup.
+     */
+    private discardStoredBodyOf;
     private settle;
 }
 //# sourceMappingURL=inbound-delivery-store.backend.service.d.ts.map

package/dist/esm/inbound/services/inbound-delivery-store.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-delivery-store.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/inbound/services/inbound-delivery-store.backend.service.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,oBAAoB,EAIpB,kBAAkB,EAIlB,sBAAsB,EACtB,+BAA+B,EAM/B,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAE9B,KAAK,4BAA4B,EACjC,KAAK,YAAY,EAElB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G,2FAA2F;AAC3F,yHAAyH;AACzH,MAAM,WAAW,qBAAsB,SAAQ,uBAAuB;IACpE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,yBAAyB;AACzB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,oBAAY,4BAA4B;IACtC,QAAQ,aAAa;IACrB,wFAAwF;IACxF,SAAS,cAAc;CACxB;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAA;CAAE,GACzI;IAAE,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE7G,oEAAoE;AACpE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,0HAA0H;IAC1H,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,4BAA4B,CAAC;IACrD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IAClD,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wHAAwH;IACxH,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,uHAAuH;IACvH,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAcD;;;GAGG;AACH,oBAAY,yBAAyB;IACnC,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;CACxB;AAED,oHAAoH;AACpH,eAAO,MAAM,yBAAyB,QAAiB,CAAC;AAExD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,4BAA4B,GAAG,YAAY,CAIhG;AAsCD,qBACa,kCAAkC;IAM3C,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IALvC,yHAAyH;IACzH,KAAK,EAAE,MAAM,IAAI,CAAoB;gBAIlB,oBAAoB,EAAE,IAAI,CAAC,yCAAyC,EAAE,mBAAmB,GAAG,iCAAiC,GAAG,uBAAuB,GAAG,2BAA2B,CAAC;IAGzM,mCAAmC;IAC7B,IAAI,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKjF,+CAA+C;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,GAAG,IAAI,CAAC;IAQxG;;;OAGG;IACG,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA8DvG;;;;OAIG;IACG,KAAK,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAmB3G;;;;;;;OAOG;IACG,aAAa,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,GAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,iCAAiC,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAWjM;;;;;OAKG;IACG,UAAU,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,iCAAiC,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUjK;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUxH;;;;OAIG;IACG,sBAAsB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUpK;;;;OAIG;IACG,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAU9H;;;;;;;;OAQG;IACG,aAAa,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAa3I;;;;;;;OAOG;IACG,UAAU,CACd,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,kBAAkB,EAC1B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,GAAG,IAAI,EACpB,OAAO,GAAE;QAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,iCAAiC,CAAA;KAAO,GAC9E,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAarC;;;;OAIG;IACG,MAAM,CAAC,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAqBhJ;;;OAGG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAwBvG;;;;OAIG;IACG,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBzG;;;OAGG;IACG,UAAU,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUnH;;;;;OAKG;IACG,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAUjH;;;;OAIG;IACG,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAqBlI;;;;;;;;OAQG;IACG,yBAAyB,CAAC,YAAY,EAAE,uBAAuB,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAoBlJ;;;;OAIG;IACG,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAQtF;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAMtE;;;OAGG;IACG,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;YAgBjJ,MAAM;CAQrB"}
+{"version":3,"file":"inbound-delivery-store.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/inbound/services/inbound-delivery-store.backend.service.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,oBAAoB,EAIpB,kBAAkB,EAIlB,sBAAsB,EACtB,+BAA+B,EAM/B,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAE9B,KAAK,4BAA4B,EACjC,KAAK,YAAY,EAElB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAO,EAAsB,KAAK,uCAAuC,EAAE,KAAK,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAE1J,2FAA2F;AAC3F,yHAAyH;AACzH,MAAM,WAAW,qBAAsB,SAAQ,uBAAuB;IACpE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,yBAAyB;AACzB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,oBAAY,4BAA4B;IACtC,QAAQ,aAAa;IACrB,wFAAwF;IACxF,SAAS,cAAc;CACxB;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAA;CAAE,GACzI;IAAE,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE7G,oEAAoE;AACpE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,0HAA0H;IAC1H,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,4BAA4B,CAAC;IACrD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IAClD,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wHAAwH;IACxH,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,uHAAuH;IACvH,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAwBD;;;GAGG;AACH,oBAAY,yBAAyB;IACnC,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;CACxB;AAED,oHAAoH;AACpH,eAAO,MAAM,yBAAyB,QAAiB,CAAC;AAExD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,4BAA4B,GAAG,YAAY,CAIhG;AAuCD,qBACa,kCAAkC;IAM3C,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC;;;OAGG;IAEH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAXhC,yHAAyH;IACzH,KAAK,EAAE,MAAM,IAAI,CAAoB;gBAIlB,oBAAoB,EAAE,IAAI,CAAC,yCAAyC,EAAE,mBAAmB,GAAG,iCAAiC,GAAG,uBAAuB,GAAG,2BAA2B,CAAC;IACvM;;;OAGG;IAEc,YAAY,CAAC,EAAE,IAAI,CAAC,uCAAuC,EAAE,SAAS,CAAC;IAG1F,mCAAmC;IAC7B,IAAI,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKjF,+CAA+C;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,GAAG,IAAI,CAAC;IAQxG;;;OAGG;IACG,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAoEvG;;;;OAIG;IACG,KAAK,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAmB3G;;;;;;;OAOG;IACG,aAAa,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,GAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,iCAAiC,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAejM;;;;;OAKG;IACG,UAAU,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,iCAAiC,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAYjK;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUxH;;;;OAIG;IACG,sBAAsB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUpK;;;;OAIG;IACG,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAU9H;;;;;;;;OAQG;IACG,aAAa,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAa3I;;;;;;;OAOG;IACG,UAAU,CACd,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,kBAAkB,EAC1B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,GAAG,IAAI,EACpB,OAAO,GAAE;QAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,iCAAiC,CAAA;KAAO,GAC9E,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAiBrC;;;;OAIG;IACG,MAAM,CAAC,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAqBhJ;;;OAGG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAwBvG;;;;OAIG;IACG,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBzG;;;OAGG;IACG,UAAU,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUnH;;;;;OAKG;IACG,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAUjH;;;;OAIG;IACG,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAqBlI;;;;;;;;OAQG;IACG,yBAAyB,CAAC,YAAY,EAAE,uBAAuB,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAoBlJ;;;;OAIG;IACG,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAQtF;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAMtE;;;OAGG;IACG,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;IAgB/J;;;OAGG;YACW,mBAAmB;YAKnB,MAAM;CAQrB"}