arc-1 0.9.14 → 0.9.16

package/dist/handlers/activate.js

@@ -0,0 +1,334 @@
+/**
+ * SAPActivate handler — activate single/batch objects, CDS activation ordering, message
+ * formatting.
+ */
+import { activate, activateBatch, publishServiceBinding, unpublishServiceBinding, } from '../adt/devtools.js';
+import { AdtSafetyError } from '../adt/errors.js';
+import { isServerDrivenObjectType, serverDrivenBlueContentType, serverDrivenObjectUrl } from '../adt/server-driven.js';
+import { invalidateInactiveList } from './cache-security.js';
+import { buildCdsActivationDependencyHint } from './cds-hints.js';
+import { isTablesEndpointAvailable } from './feature-cache.js';
+import { normalizeObjectType, objectUrlForType } from './object-types.js';
+import { errorResult, textResult } from './shared.js';
+import { enforceAllowedPackageForObjectUrl, inactiveSyntaxDiagnostic, SERVICEBINDING_V2_ACCEPT, } from './write-helpers.js';
+// ─── SAPActivate Handler ─────────────────────────────────────────────
+export async function handleSAPActivate(client, args, cachingLayer, cacheSecurity) {
+    const action = String(args.action ?? 'activate');
+    const name = String(args.name ?? '');
+    const version = String(args.version ?? '0001');
+    const explicitServiceType = args.service_type;
+    // Resolve the OData service type for publish/unpublish endpoints.
+    // Explicit service_type parameter takes precedence; otherwise auto-detect from SRVB metadata.
+    async function resolveServiceType() {
+        if (explicitServiceType === 'odatav4' || explicitServiceType === 'odatav2')
+            return explicitServiceType;
+        try {
+            const { source: srvbJson } = await client.getSrvb(name);
+            const srvb = JSON.parse(srvbJson);
+            if (srvb.odataVersion === 'V4')
+                return 'odatav4';
+        }
+        catch {
+            // If readback fails, fall back to odatav2 (legacy default)
+        }
+        return 'odatav2';
+    }
+    // Publish service binding
+    if (action === 'publish_srvb') {
+        if (!name) {
+            return errorResult('Missing required "name" parameter for publish_srvb action.');
+        }
+        await enforceAllowedPackageForObjectUrl(client, objectUrlForType('SRVB', name), `Publish of service binding '${name}'`, SERVICEBINDING_V2_ACCEPT);
+        const serviceType = await resolveServiceType();
+        const result = await publishServiceBinding(client.http, client.safety, name, version, serviceType);
+        if (result.severity === 'ERROR') {
+            return errorResult(`Failed to publish service binding ${name}: ${result.shortText}${result.longText ? ` — ${result.longText}` : ''}`);
+        }
+        let srvbInfo;
+        try {
+            srvbInfo = (await client.getSrvb(name)).source;
+        }
+        catch {
+            if (result.severity === 'UNKNOWN') {
+                return errorResult(`Publish response for ${name} could not be parsed and readback failed — use SAPRead to verify publish status.`);
+            }
+            return textResult(`Successfully published service binding ${name} (readback of binding metadata failed — use SAPRead to verify)`);
+        }
+        // Verify the published flag from the SRVB readback
+        try {
+            const srvbData = JSON.parse(srvbInfo);
+            if (srvbData.published === false) {
+                return errorResult(`Publish of service binding ${name} may have failed — binding is still unpublished.\n\n${srvbInfo}`);
+            }
+        }
+        catch {
+            // If we can't parse the readback JSON, fall through — better to return what we have
+        }
+        if (result.severity === 'UNKNOWN') {
+            return textResult(`Publish request for ${name} completed but response could not be fully parsed. Verify status below:\n\n${srvbInfo}`);
+        }
+        return textResult(`Successfully published service binding ${name}.\n\n${srvbInfo}`);
+    }
+    // Unpublish service binding
+    if (action === 'unpublish_srvb') {
+        if (!name) {
+            return errorResult('Missing required "name" parameter for unpublish_srvb action.');
+        }
+        await enforceAllowedPackageForObjectUrl(client, objectUrlForType('SRVB', name), `Unpublish of service binding '${name}'`, SERVICEBINDING_V2_ACCEPT);
+        const serviceType = await resolveServiceType();
+        const result = await unpublishServiceBinding(client.http, client.safety, name, version, serviceType);
+        if (result.severity === 'ERROR') {
+            return errorResult(`Failed to unpublish service binding ${name}: ${result.shortText}${result.longText ? ` — ${result.longText}` : ''}`);
+        }
+        let srvbInfo;
+        try {
+            srvbInfo = (await client.getSrvb(name)).source;
+        }
+        catch {
+            // Readback failed — fall through with what we have
+        }
+        // Verify the published flag from the SRVB readback
+        if (srvbInfo) {
+            try {
+                const srvbData = JSON.parse(srvbInfo);
+                if (srvbData.published === true) {
+                    return errorResult(`Unpublish of service binding ${name} may have failed — binding is still published.\n\n${srvbInfo}`);
+                }
+            }
+            catch {
+                // If we can't parse the readback JSON, fall through
+            }
+        }
+        if (result.severity === 'UNKNOWN') {
+            return textResult(`Unpublish request for ${name} completed but response could not be fully parsed.${srvbInfo ? ` Verify status below:\n\n${srvbInfo}` : ' Use SAPRead to verify status.'}`);
+        }
+        return textResult(`Successfully unpublished service binding ${name}.${srvbInfo ? `\n\n${srvbInfo}` : ''}`);
+    }
+    // Batch activation: multiple objects at once (for RAP stacks etc.)
+    const type = normalizeObjectType(String(args.type ?? ''));
+    const preaudit = args.preaudit !== undefined ? Boolean(args.preaudit) : undefined;
+    const activateOpts = preaudit !== undefined ? { preaudit } : undefined;
+    if (args.objects && Array.isArray(args.objects)) {
+        const rawObjects = args.objects;
+        // Resolve URLs sequentially. For TABL we await the URL resolver so DDIC
+        // structures (which live at /sap/bc/adt/ddic/structures/) are addressed
+        // correctly; the resolver short-circuits on its in-memory cache.
+        // For FUNC the URL needs the parent function-group baked into the path
+        // (issue #250); each batch entry must carry `group` or be auto-resolvable
+        // by name.
+        const objects = await Promise.all(rawObjects.map(async (o) => {
+            const objType = normalizeObjectType(String(o.type ?? type));
+            const objName = String(o.name ?? '');
+            let url;
+            if (objType === 'TABL') {
+                // Use the write-path resolver: refuses TABL/DT activation on systems
+                // that don't expose /sap/bc/adt/ddic/tables/ (NW 7.50/7.51), where
+                // activate would hit the wrong endpoint. See issue #285.
+                url = await client.resolveTablObjectUrlForWrite(objName, {
+                    tablesEndpointAvailable: isTablesEndpointAvailable(),
+                });
+            }
+            else if (objType === 'FUNC') {
+                let group = String(o.group ?? args.group ?? '').trim();
+                if (!group) {
+                    const resolved = cachingLayer
+                        ? await cachingLayer.resolveFuncGroup(client, objName)
+                        : await client.resolveFunctionGroup(objName);
+                    if (!resolved) {
+                        throw new Error(`Cannot resolve function group for FM "${objName}" in batch activate. Provide "group" on each FUNC entry.`);
+                    }
+                    group = resolved;
+                }
+                const groupLc = encodeURIComponent(group.toLowerCase());
+                url = `/sap/bc/adt/functions/groups/${groupLc}/fmodules/${encodeURIComponent(objName.toLowerCase())}`;
+            }
+            else {
+                url = objectUrlForType(objType, objName);
+            }
+            return { type: objType, name: objName, url };
+        }));
+        // Enforce the allowedPackages ceiling against each object's REAL package before
+        // activating ANY of them — one out-of-allowlist object aborts the whole batch
+        // (no partial activation). Fail-closed; no-op when unrestricted. (security audit 2026-06)
+        for (const o of objects) {
+            await enforceAllowedPackageForObjectUrl(client, o.url, `Activation of ${o.type} '${o.name}'`);
+        }
+        const result = await activateBatch(client.http, client.safety, objects, activateOpts);
+        const names = objects.map((o) => o.name).join(', ');
+        const batchStatuses = buildBatchActivationStatuses(objects, result);
+        const statusDetails = formatBatchActivationStatuses(batchStatuses);
+        if (result.success) {
+            for (const object of objects) {
+                cachingLayer?.invalidate(object.type, object.name, 'all');
+            }
+            invalidateInactiveList(cachingLayer, client, cacheSecurity);
+            return textResult(`Successfully activated ${objects.length} objects: ${names}.${statusDetails}`);
+        }
+        // On batch failure enrich with per-object inactive-version syntax errors —
+        // only for objects whose activation returned no error details, to avoid duplicating messages.
+        const objectsNeedingSyntaxCheck = objects.filter((_o, i) => batchStatuses[i].status !== 'error');
+        const diagnostics = await Promise.all(objectsNeedingSyntaxCheck.map((o) => inactiveSyntaxDiagnostic(client, o.type, o.name)));
+        const combinedDiag = diagnostics
+            .map((d, i) => (d ? `\n[${objectsNeedingSyntaxCheck[i].name}]${d}` : ''))
+            .filter(Boolean)
+            .join('');
+        return errorResult(`Batch activation failed for: ${names}.${statusDetails}\n${formatActivationMessages(result)}${combinedDiag}`);
+    }
+    // Single activation (existing behavior). For TABL we use the write-path
+    // resolver so transparent-table activations on NW 7.50/7.51 are refused
+    // with the SE11 hint instead of silently activating against /structures/
+    // (which would not even be the right object). See issue #285.
+    // For FUNC the URL needs the parent function group baked into the path
+    // (issue #250) — `objectBasePath('FUNC')` deliberately throws so generic
+    // builders fail loudly. Auto-resolve the group when omitted.
+    let objectUrl;
+    if (type === 'TABL') {
+        try {
+            objectUrl = await client.resolveTablObjectUrlForWrite(name, {
+                tablesEndpointAvailable: isTablesEndpointAvailable(),
+            });
+        }
+        catch (resolveErr) {
+            if (resolveErr instanceof AdtSafetyError) {
+                return errorResult(resolveErr.message);
+            }
+            throw resolveErr;
+        }
+    }
+    else if (type === 'FUNC') {
+        let group = String(args.group ?? '').trim();
+        if (!group) {
+            const resolved = cachingLayer
+                ? await cachingLayer.resolveFuncGroup(client, name)
+                : await client.resolveFunctionGroup(name);
+            if (!resolved) {
+                return errorResult(`Cannot resolve function group for FM "${name}". Provide the "group" parameter explicitly.`);
+            }
+            group = resolved;
+        }
+        const groupLc = encodeURIComponent(group.toLowerCase());
+        objectUrl = `/sap/bc/adt/functions/groups/${groupLc}/fmodules/${encodeURIComponent(name.toLowerCase())}`;
+    }
+    else if (isServerDrivenObjectType(type)) {
+        // Server-driven objects (8.16+): objectBasePath(<sdo>) throws, so route via the registry href.
+        // Single-object activation only — SDO is not added to the batch resolver above (batch is
+        // RAP-stack-oriented). The generic activate() endpoint handles SDO (verified: activate(DESD) → ok).
+        objectUrl = serverDrivenObjectUrl(type, name);
+    }
+    else {
+        objectUrl = objectUrlForType(type, name);
+    }
+    // Enforce the allowedPackages ceiling against the object's REAL package before
+    // activating — activation is a write-class state change (inactive draft → active
+    // runtime version) and must honor the same package boundary as create/update/delete.
+    // Fail-closed; no-op when allowedPackages is unrestricted. (security audit 2026-06)
+    // SDO metadata only renders its packageRef under the blues Accept — thread it for SDO types.
+    await enforceAllowedPackageForObjectUrl(client, objectUrl, `Activation of ${type} '${name}'`, isServerDrivenObjectType(type) ? serverDrivenBlueContentType(type) : undefined);
+    const result = await activate(client.http, client.safety, objectUrl, { ...activateOpts, name });
+    if (result.success) {
+        cachingLayer?.invalidate(type, name, 'all');
+        invalidateInactiveList(cachingLayer, client, cacheSecurity);
+        return textResult(`Successfully activated ${type} ${name}.${formatActivationMessages(result)}`);
+    }
+    // On failure, try to enrich with the actual compiler errors from the inactive version —
+    // especially useful when SAP returned <ioc:inactiveObjects> with no <msg> detail.
+    // Skip when activation already returned error details to avoid duplicating the same messages.
+    const hasActivationErrors = result.details.some((d) => d.severity === 'error');
+    const syntaxDetail = hasActivationErrors ? '' : await inactiveSyntaxDiagnostic(client, type, name);
+    let activationError = `Activation failed for ${type} ${name}.\n${formatActivationMessages(result)}${syntaxDetail}`;
+    if (type === 'DDLS') {
+        activationError += `\n\n${await buildCdsActivationDependencyHint(client, name, objectUrl)}`;
+    }
+    return errorResult(activationError);
+}
+/** Format activation result messages with structured detail (line numbers, URIs) when available */
+function formatActivationMessages(result) {
+    if (result.details.length === 0)
+        return '';
+    const errors = result.details.filter((d) => d.severity === 'error');
+    const warnings = result.details.filter((d) => d.severity === 'warning');
+    const parts = [];
+    if (errors.length > 0) {
+        const formatted = errors.map((e) => {
+            const prefix = e.line ? `[line ${e.line}] ` : '';
+            const suffix = e.uri ? ` (${e.uri})` : '';
+            return `- ${prefix}${e.text}${suffix}`;
+        });
+        parts.push(`Errors:\n${formatted.join('\n')}`);
+    }
+    if (warnings.length > 0) {
+        const formatted = warnings.map((w) => {
+            const prefix = w.line ? `[line ${w.line}] ` : '';
+            return `- ${prefix}${w.text}`;
+        });
+        parts.push(`Warnings:\n${formatted.join('\n')}`);
+    }
+    // Fall back to flat messages if no errors/warnings but info messages exist
+    if (parts.length === 0 && result.messages.length > 0) {
+        return `\nMessages: ${result.messages.join('; ')}`;
+    }
+    return parts.length > 0 ? `\n${parts.join('\n')}` : '';
+}
+function normalizeActivationUri(uri) {
+    if (!uri)
+        return undefined;
+    return uri.replace(/#.*$/, '').replace(/\/+$/, '').toLowerCase();
+}
+export function buildBatchActivationStatuses(objects, result) {
+    // Group error details by object. SAP error URIs may be subpaths of the object URL
+    // (e.g. .../classes/zcl_demo/source/main for object .../classes/ZCL_DEMO) and may
+    // differ in case, so we lowercase and use startsWith for matching.
+    const objectKeys = objects.map((obj) => normalizeActivationUri(obj.url) ?? '');
+    const perObject = objects.map(() => []);
+    const unassigned = [];
+    for (const detail of result.details) {
+        const detailUri = normalizeActivationUri(detail.uri);
+        const prefix = detail.line ? `[line ${detail.line}] ` : '';
+        const suffix = detail.uri ? ` (${detail.uri})` : '';
+        if (!detailUri) {
+            unassigned.push(`${prefix}${detail.text}${suffix}`);
+            continue;
+        }
+        const matchIdx = objectKeys.findIndex((k) => k && detailUri.startsWith(k));
+        if (matchIdx >= 0) {
+            perObject[matchIdx].push({ severity: detail.severity, text: `${prefix}${detail.text}${suffix}` });
+        }
+        else {
+            unassigned.push(`${prefix}${detail.text}${suffix}`);
+        }
+    }
+    return objects.map((obj, index) => {
+        const details = perObject[index];
+        const hasError = details.some((detail) => detail.severity === 'error');
+        const hasWarning = details.some((detail) => detail.severity === 'warning');
+        const status = hasError ? 'error' : hasWarning ? 'warning' : 'active';
+        const messages = details.map((detail) => detail.text);
+        if (index === 0 && unassigned.length > 0) {
+            messages.push(...unassigned);
+        }
+        return {
+            type: obj.type,
+            name: obj.name,
+            status,
+            messages,
+        };
+    });
+}
+export function formatBatchActivationStatuses(statuses) {
+    if (statuses.length === 0)
+        return '';
+    const lines = [];
+    for (const status of statuses) {
+        if (status.messages.length === 0) {
+            lines.push(`- ${status.name} (${status.type}): ${status.status}`);
+        }
+        else {
+            for (const msg of status.messages) {
+                lines.push(`- ${status.name} (${status.type}) ${msg}`);
+            }
+        }
+    }
+    return `\n${lines.join('\n')}`;
+}
+// ─── SAPDiagnose Handler ─────────────────────────────────────────────
+//# sourceMappingURL=activate.js.map

package/dist/handlers/activate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.js","sourceRoot":"","sources":["../../src/handlers/activate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAEL,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEvH,OAAO,EAA6B,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAmB,UAAU,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,iCAAiC,EACjC,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,wEAAwE;AAExE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAiB,EACjB,IAA6B,EAC7B,YAAsC,EACtC,aAAmC;IAEnC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IAC/C,MAAM,mBAAmB,GAAG,IAAI,CAAC,YAAkC,CAAC;IAEpE,kEAAkE;IAClE,8FAA8F;IAC9F,KAAK,UAAU,kBAAkB;QAC/B,IAAI,mBAAmB,KAAK,SAAS,IAAI,mBAAmB,KAAK,SAAS;YAAE,OAAO,mBAAmB,CAAC;QACvG,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0BAA0B;IAC1B,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,WAAW,CAAC,4DAA4D,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,iCAAiC,CACrC,MAAM,EACN,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,EAC9B,+BAA+B,IAAI,GAAG,EACtC,wBAAwB,CACzB,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACnG,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,WAAW,CAChB,qCAAqC,IAAI,KAAK,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClH,CAAC;QACJ,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,WAAW,CAChB,wBAAwB,IAAI,kFAAkF,CAC/G,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CACf,0CAA0C,IAAI,gEAAgE,CAC/G,CAAC;QACJ,CAAC;QACD,mDAAmD;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBACjC,OAAO,WAAW,CAChB,8BAA8B,IAAI,uDAAuD,QAAQ,EAAE,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oFAAoF;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,UAAU,CACf,uBAAuB,IAAI,8EAA8E,QAAQ,EAAE,CACpH,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,0CAA0C,IAAI,QAAQ,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,WAAW,CAAC,8DAA8D,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,iCAAiC,CACrC,MAAM,EACN,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,EAC9B,iCAAiC,IAAI,GAAG,EACxC,wBAAwB,CACzB,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACrG,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,WAAW,CAChB,uCAAuC,IAAI,KAAK,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpH,CAAC;QACJ,CAAC;QACD,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;QACD,mDAAmD;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;oBAChC,OAAO,WAAW,CAChB,gCAAgC,IAAI,qDAAqD,QAAQ,EAAE,CACpG,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,UAAU,CACf,yBAAyB,IAAI,qDAAqD,QAAQ,CAAC,CAAC,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC,CAAC,gCAAgC,EAAE,CACzK,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,4CAA4C,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,YAAY,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvE,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAyC,CAAC;QAClE,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,uEAAuE;QACvE,0EAA0E;QAC1E,WAAW;QACX,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,GAAW,CAAC;YAChB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,qEAAqE;gBACrE,mEAAmE;gBACnE,yDAAyD;gBACzD,GAAG,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,OAAO,EAAE;oBACvD,uBAAuB,EAAE,yBAAyB,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,YAAY;wBAC3B,CAAC,CAAC,MAAM,YAAY,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC;wBACtD,CAAC,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;oBAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,KAAK,CACb,yCAAyC,OAAO,0DAA0D,CAC3G,CAAC;oBACJ,CAAC;oBACD,KAAK,GAAG,QAAQ,CAAC;gBACnB,CAAC;gBACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACxD,GAAG,GAAG,gCAAgC,OAAO,aAAa,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACxG,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC/C,CAAC,CAAC,CACH,CAAC;QAEF,gFAAgF;QAChF,8EAA8E;QAC9E,0FAA0F;QAC1F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,iCAAiC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;QAEnE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5D,CAAC;YACD,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAC5D,OAAO,UAAU,CAAC,0BAA0B,OAAO,CAAC,MAAM,aAAa,KAAK,IAAI,aAAa,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,2EAA2E;QAC3E,8FAA8F;QAC9F,MAAM,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACjG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CACvF,CAAC;QACF,MAAM,YAAY,GAAG,WAAW;aAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACxE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,OAAO,WAAW,CAChB,gCAAgC,KAAK,IAAI,aAAa,KAAK,wBAAwB,CAAC,MAAM,CAAC,GAAG,YAAY,EAAE,CAC7G,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,8DAA8D;IAC9D,uEAAuE;IACvE,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,SAAiB,CAAC;IACtB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,IAAI,EAAE;gBAC1D,uBAAuB,EAAE,yBAAyB,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAI,UAAU,YAAY,cAAc,EAAE,CAAC;gBACzC,OAAO,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,UAAU,CAAC;QACnB,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,YAAY;gBAC3B,CAAC,CAAC,MAAM,YAAY,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;gBACnD,CAAC,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,WAAW,CAAC,yCAAyC,IAAI,8CAA8C,CAAC,CAAC;YAClH,CAAC;YACD,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,SAAS,GAAG,gCAAgC,OAAO,aAAa,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;IAC3G,CAAC;SAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,+FAA+F;QAC/F,yFAAyF;QACzF,oGAAoG;QACpG,SAAS,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,+EAA+E;IAC/E,iFAAiF;IACjF,qFAAqF;IACrF,oFAAoF;IACpF,6FAA6F;IAC7F,MAAM,iCAAiC,CACrC,MAAM,EACN,SAAS,EACT,iBAAiB,IAAI,KAAK,IAAI,GAAG,EACjC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/E,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAC5D,OAAO,UAAU,CAAC,0BAA0B,IAAI,IAAI,IAAI,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,wFAAwF;IACxF,kFAAkF;IAClF,8FAA8F;IAC9F,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,eAAe,GAAG,yBAAyB,IAAI,IAAI,IAAI,MAAM,wBAAwB,CAAC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;IACnH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,eAAe,IAAI,OAAO,MAAM,gCAAgC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;AACtC,CAAC;AAED,mGAAmG;AACnG,SAAS,wBAAwB,CAAC,MAAwB;IACxD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAExE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,YAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,2EAA2E;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,eAAe,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAeD,SAAS,sBAAsB,CAAC,GAAuB;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAgC,EAChC,MAAwB;IAExB,kFAAkF;IAClF,kFAAkF;IAClF,mEAAmE;IACnE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,SAAS,GAA2E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChH,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC3E,MAAM,MAAM,GAA0C,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7G,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAuC;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,wEAAwE"}

package/dist/handlers/cache-security.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Cache-security context for per-user (principal-propagation) clients — upstream fix #393.
+ *
+ * Under PP, every user gets their own SAP session; shared per-process caches (the inactive-object
+ * list, the dependency-payload cache) must be keyed per user — or bypassed — so one user's view
+ * never leaks into another's. handleToolCall builds the context once per call and threads it into
+ * the read/write/activate/context handlers and the server-driven write engine.
+ *
+ * This is the leaf home for the helpers because five handler modules + dispatch consume them.
+ */
+import type { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';
+import type { AdtClient } from '../adt/client.js';
+import type { CachingLayer } from '../cache/caching-layer.js';
+export interface CacheSecurityContext {
+    isPerUserClient: boolean;
+    userKey?: string;
+}
+export declare function buildCacheSecurityContext(authInfo: AuthInfo | undefined, isPerUserClient?: boolean): CacheSecurityContext;
+export declare function inactiveListUserKey(client: AdtClient, cacheSecurity: CacheSecurityContext): string | undefined;
+export declare function invalidateInactiveList(cachingLayer: CachingLayer | undefined, client: AdtClient, cacheSecurity: CacheSecurityContext): void;
+export declare function contextCacheForDependencyPayloads(cachingLayer: CachingLayer | undefined, cacheSecurity: CacheSecurityContext): CachingLayer | undefined;
+//# sourceMappingURL=cache-security.d.ts.map

package/dist/handlers/cache-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-security.d.ts","sourceRoot":"","sources":["../../src/handlers/cache-security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAiCD,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAC9B,eAAe,CAAC,EAAE,OAAO,GACxB,oBAAoB,CAMtB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAE9G;AAED,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,MAAM,EAAE,SAAS,EACjB,aAAa,EAAE,oBAAoB,GAClC,IAAI,CAEN;AAED,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,aAAa,EAAE,oBAAoB,GAClC,YAAY,GAAG,SAAS,CAE1B"}

package/dist/handlers/cache-security.js

@@ -0,0 +1,51 @@
+/**
+ * Cache-security context for per-user (principal-propagation) clients — upstream fix #393.
+ *
+ * Under PP, every user gets their own SAP session; shared per-process caches (the inactive-object
+ * list, the dependency-payload cache) must be keyed per user — or bypassed — so one user's view
+ * never leaks into another's. handleToolCall builds the context once per call and threads it into
+ * the read/write/activate/context handlers and the server-driven write engine.
+ *
+ * This is the leaf home for the helpers because five handler modules + dispatch consume them.
+ */
+function nonEmptyString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+function resolveCacheUserKey(authInfo) {
+    if (!authInfo)
+        return undefined;
+    const extra = (authInfo.extra ?? {});
+    const issuerOrClient = nonEmptyString(extra.iss) ?? nonEmptyString(authInfo.clientId) ?? 'unknown-auth-source';
+    const namespace = issuerOrClient.toLowerCase();
+    const userName = nonEmptyString(extra.userName);
+    if (userName)
+        return `${namespace}:userName:${userName.toUpperCase()}`;
+    const email = nonEmptyString(extra.email);
+    if (email)
+        return `${namespace}:email:${email.toLowerCase()}`;
+    const sub = nonEmptyString(extra.sub);
+    if (sub)
+        return `${namespace}:sub:${sub}`;
+    const preferredUsername = nonEmptyString(extra.preferred_username);
+    if (preferredUsername)
+        return `${namespace}:preferred_username:${preferredUsername.toLowerCase()}`;
+    return undefined;
+}
+export function buildCacheSecurityContext(authInfo, isPerUserClient) {
+    if (!isPerUserClient)
+        return { isPerUserClient: false };
+    return {
+        isPerUserClient: true,
+        userKey: resolveCacheUserKey(authInfo),
+    };
+}
+export function inactiveListUserKey(client, cacheSecurity) {
+    return cacheSecurity.isPerUserClient ? cacheSecurity.userKey : client.username;
+}
+export function invalidateInactiveList(cachingLayer, client, cacheSecurity) {
+    cachingLayer?.inactiveLists.invalidate(inactiveListUserKey(client, cacheSecurity));
+}
+export function contextCacheForDependencyPayloads(cachingLayer, cacheSecurity) {
+    return cacheSecurity.isPerUserClient ? undefined : cachingLayer;
+}
+//# sourceMappingURL=cache-security.js.map

package/dist/handlers/cache-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-security.js","sourceRoot":"","sources":["../../src/handlers/cache-security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA8B;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAMlC,CAAC;IACF,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,qBAAqB,CAAC;IAC/G,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IAE/C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,GAAG,SAAS,aAAa,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IAEvE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,KAAK;QAAE,OAAO,GAAG,SAAS,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAE9D,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG;QAAE,OAAO,GAAG,SAAS,QAAQ,GAAG,EAAE,CAAC;IAE1C,MAAM,iBAAiB,GAAG,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnE,IAAI,iBAAiB;QAAE,OAAO,GAAG,SAAS,uBAAuB,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC;IAEnG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAA8B,EAC9B,eAAyB;IAEzB,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACxD,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,aAAmC;IACxF,OAAO,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,YAAsC,EACtC,MAAiB,EACjB,aAAmC;IAEnC,YAAY,EAAE,aAAa,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,YAAsC,EACtC,aAAmC;IAEnC,OAAO,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;AAClE,CAAC"}

package/dist/handlers/cds-hints.d.ts

@@ -0,0 +1,26 @@
+/**
+ * CDS impact + pre-write hint helpers.
+ *
+ * Downstream-impact bucketing/ordering, where-used scoping, the update/delete/activation
+ * dependency hints, and the CDS reserved-keyword guard. Shared by the SAPWrite, SAPActivate and
+ * SAPContext handlers.
+ */
+import type { AdtClient } from '../adt/client.js';
+import type { ResolvedFeatures } from '../adt/types.js';
+import { errorResult } from './shared.js';
+export declare const CDS_DEPENDENCY_SENSITIVE_TYPES: Set<string>;
+export declare function buildCdsUpdateCrudHint(client: AdtClient, name: string, objectUrl: string): Promise<string>;
+export declare function buildCdsDeleteDependencyHint(client: AdtClient, type: string, name: string, objectUrl: string): Promise<string | undefined>;
+export declare function buildCdsActivationDependencyHint(client: AdtClient, name: string, objectUrl: string): Promise<string>;
+/**
+ * Guard CDS syntax against known version-dependent features.
+ * Returns an error result if the source uses unsupported syntax, or undefined to proceed.
+ * Best-effort: if cachedFeatures is not available (no probe yet), always proceeds.
+ */
+export declare function guardCdsSyntax(type: string, source: string, features: ResolvedFeatures | undefined): ReturnType<typeof errorResult> | undefined;
+/**
+ * Detect CDS reserved keywords used as field names in DDL source.
+ * Returns a warning string listing suspicious field names, or undefined if none found.
+ */
+export declare function warnCdsReservedKeywords(source: string): string | undefined;
+//# sourceMappingURL=cds-hints.d.ts.map

package/dist/handlers/cds-hints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cds-hints.d.ts","sourceRoot":"","sources":["../../src/handlers/cds-hints.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,eAAO,MAAM,8BAA8B,aAAoE,CAAC;AAgOhH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BhH;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2C7B;AAED,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAsBjB;AAuCD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GACrC,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,SAAS,CA8B5C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAyB1E"}