pipework 0.7.12 → 0.7.13

package/dist/request/http/middleware.d.ts

@@ -0,0 +1,20 @@
+import type { FastifyRequest } from 'fastify';
+import type { Manifold } from '../../core/pipework.js';
+import type { AuthStrategy, AuthRequest } from '../../auth/auth/types.js';
+import type { AuthEnricher, TenantResolver } from '../../auth/auth/chain.js';
+import type { AuthRequirement } from '../di/types.js';
+import type { TenantConfig } from '../../auth/tenant/types.js';
+import type { LoggingConfig } from '../../core/logging/types.js';
+import { type Flow } from '../context/index.js';
+export declare function buildAuthRequest(req: FastifyRequest): AuthRequest;
+export interface ContextOptions {
+    instance: Manifold;
+    strategies: AuthStrategy<unknown>[];
+    enrichers: AuthEnricher<unknown>[];
+    tenantResolver: TenantResolver<unknown> | undefined;
+    tenantConfig: TenantConfig | null;
+    authOptional: boolean;
+    logging: LoggingConfig | null;
+}
+export declare function buildContext(req: FastifyRequest, options: ContextOptions, authRequirement?: AuthRequirement): Promise<Flow>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/request/http/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/request/http/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAe,MAAM,0BAA0B,CAAA;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAwB,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAMrE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,WAAW,CAKjE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAA;IAClB,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;IACnC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;IAClC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAA;IACnD,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,YAAY,EAAE,OAAO,CAAA;IACrB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAA;CAC9B;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,cAAc,EACvB,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/request/http/middleware.js

@@ -0,0 +1,71 @@
+import { createRequestContext } from '../context/index.js';
+import { runAuthChain } from '../../auth/auth/chain.js';
+import { extractTenant } from '../../auth/tenant/index.js';
+import { validateTenantId } from '../../auth/tenant/validate.js';
+import { UnauthorizedError } from '../../core/errors/index.js';
+export function buildAuthRequest(req) {
+    return {
+        headers: req.headers,
+        cookies: {},
+    };
+}
+export async function buildContext(req, options, authRequirement) {
+    let auth = null;
+    let tenant = null;
+    const isPublic = authRequirement === 'none';
+    const isOptional = authRequirement === 'optional' || options.authOptional;
+    if (options.strategies.length > 0 && !isPublic) {
+        const authReq = buildAuthRequest(req);
+        const authContext = buildAuthContext(options.instance);
+        const result = await runAuthChain({
+            strategies: options.strategies,
+            ...(options.enrichers.length > 0 ? { enrichers: options.enrichers } : {}),
+            ...(options.tenantResolver ? { tenantResolver: options.tenantResolver } : {}),
+        }, authReq, { optional: isOptional }, authContext);
+        auth = result.auth;
+        tenant = result.tenant;
+    }
+    if (options.tenantConfig) {
+        if (tenant === null && auth !== null) {
+            const extracted = extractTenant(auth, options.tenantConfig);
+            tenant = extracted.tenant;
+        }
+        else if (tenant !== null) {
+            const validator = options.tenantConfig.validate ?? validateTenantId;
+            if (!validator(tenant)) {
+                throw new UnauthorizedError(`Invalid tenant identifier: "${tenant.slice(0, 40)}${tenant.length > 40 ? '...' : ''}". ` +
+                    `Tenant IDs must be valid UUIDs (or pass your custom validate function).`);
+            }
+        }
+    }
+    const loggingCfg = options.logging;
+    const traceHeader = loggingCfg?.traceHeader ?? 'x-trace-id';
+    const requestIdHeader = loggingCfg?.requestIdHeader ?? 'x-request-id';
+    const sessionHeader = loggingCfg?.sessionHeader ?? 'x-session-id';
+    const traceId = req.headers[traceHeader]
+        ?? req.headers[requestIdHeader]
+        ?? req.id;
+    const sessionId = req.headers[sessionHeader] ?? null;
+    return createRequestContext({
+        instance: options.instance,
+        requestId: String(req.id),
+        auth,
+        tenant,
+        metadata: {
+            method: req.method,
+            path: req.url,
+            startedAt: Date.now(),
+            traceId: String(traceId),
+            sessionId,
+        },
+    });
+}
+function buildAuthContext(instance) {
+    return {
+        db(name) {
+            const dbConfig = instance.config.database(name);
+            return instance.pool.getOrCreate(dbConfig).drizzle;
+        },
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/request/http/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/request/http/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAa,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAE9D,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAA6C;QAC1D,OAAO,EAAE,EAAE;KACZ,CAAA;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAmB,EACnB,OAAuB,EACvB,eAAiC;IAEjC,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,IAAI,MAAM,GAAkB,IAAI,CAAA;IAEhC,MAAM,QAAQ,GAAG,eAAe,KAAK,MAAM,CAAA;IAC3C,MAAM,UAAU,GAAG,eAAe,KAAK,UAAU,IAAI,OAAO,CAAC,YAAY,CAAA;IAEzE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B;YACE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,EACD,OAAO,EACP,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,WAAW,CACZ,CAAA;QACD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QAClB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IACxB,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YAC3D,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;QAC3B,CAAC;aAAM,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,IAAI,gBAAgB,CAAA;YACnE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,iBAAiB,CACzB,+BAA+B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK;oBACzF,yEAAyE,CAC1E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAA;IAClC,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,IAAI,YAAY,CAAA;IAC3D,MAAM,eAAe,GAAG,UAAU,EAAE,eAAe,IAAI,cAAc,CAAA;IACrE,MAAM,aAAa,GAAG,UAAU,EAAE,aAAa,IAAI,cAAc,CAAA;IAEjE,MAAM,OAAO,GAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAwB;WAC1D,GAAG,CAAC,OAAO,CAAC,eAAe,CAAwB;WACpD,GAAG,CAAC,EAAE,CAAA;IAEX,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAwB,IAAI,IAAI,CAAA;IAE5E,OAAO,oBAAoB,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI;QACJ,MAAM;QACN,QAAQ,EAAE;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACxB,SAAS;SACV;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO;QACL,EAAE,CAAC,IAAa;YACd,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAA;QACpD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/request/http/namespace.d.ts

@@ -0,0 +1,3 @@
+/** HTTP server namespace — managed by manifold.start(), not directly accessible. */
+export declare const http: {};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/request/http/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/request/http/namespace.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,eAAO,MAAM,IAAI,IAAc,CAAA"}

package/dist/request/http/namespace.js

@@ -0,0 +1,3 @@
+/** HTTP server namespace — managed by manifold.start(), not directly accessible. */
+export const http = {};
+//# sourceMappingURL=namespace.js.map

package/dist/request/http/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/request/http/namespace.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,CAAC,MAAM,IAAI,GAAG,EAAW,CAAA"}

package/dist/request/http/response.d.ts

@@ -0,0 +1,5 @@
+import { PipeworkError } from '../../core/errors/index.js';
+import type { ErrorResponse } from './types.js';
+export declare function buildErrorResponse(error: PipeworkError): ErrorResponse;
+export declare function buildInternalErrorResponse(): ErrorResponse;
+//# sourceMappingURL=response.d.ts.map

package/dist/request/http/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../src/request/http/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAmB,MAAM,4BAA4B,CAAA;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAatE;AAED,wBAAgB,0BAA0B,IAAI,aAAa,CAO1D"}

package/dist/request/http/response.js

@@ -0,0 +1,22 @@
+import { PipeworkError, ValidationError } from '../../core/errors/index.js';
+export function buildErrorResponse(error) {
+    const response = {
+        error: {
+            code: error.code,
+            message: error.message,
+        },
+    };
+    if (error instanceof ValidationError) {
+        response.error.fields = error.fieldErrors;
+    }
+    return response;
+}
+export function buildInternalErrorResponse() {
+    return {
+        error: {
+            code: 'INTERNAL_ERROR',
+            message: 'An unexpected error occurred',
+        },
+    };
+}
+//# sourceMappingURL=response.js.map

package/dist/request/http/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../../src/request/http/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAG3E,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,MAAM,QAAQ,GAAkB;QAC9B,KAAK,EAAE;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;KACF,CAAA;IAED,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,WAAW,CAAA;IAC3C,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,8BAA8B;SACxC;KACF,CAAA;AACH,CAAC"}

package/dist/request/http/server.d.ts

@@ -0,0 +1,17 @@
+import type { Manifold } from '../../core/pipework.js';
+import type { Handler, HttpMethod } from '../di/types.js';
+import type { ServerConfig, InjectOptions, InjectResponse } from './types.js';
+import type { Resource } from '../fixture/types.js';
+/** Fastify server wrapper with route registration, handler auto-wiring, and inject() for testing. */
+export interface PipeworkServer {
+    route(method: HttpMethod, path: string, handler: Handler<Record<string, unknown>, unknown>): void;
+    registerHandlers(handlers: Handler<Record<string, unknown>, unknown>[]): void;
+    registerResource(resource: Resource<unknown>): void;
+    ready(): Promise<void>;
+    inject(opts: InjectOptions): Promise<InjectResponse>;
+    listen(): Promise<string>;
+    close(): Promise<void>;
+}
+/** Creates a PipeworkServer — wraps Fastify with auto request IDs, CORS, rate limiting, and transaction-per-request. */
+export declare function createServer(instance: Manifold, config?: ServerConfig): PipeworkServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/request/http/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/request/http/server.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,KAAK,EAAE,YAAY,EAAsC,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAkBjH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAGnD,qGAAqG;AACrG,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACjG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAA;IAC7E,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;IACnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACpD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,wHAAwH;AACxH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAE,YAAiB,GAAG,cAAc,CA4O1F"}

package/dist/request/http/server.js

@@ -0,0 +1,391 @@
+import { randomUUID } from 'node:crypto';
+import { Readable } from 'node:stream';
+import Fastify, {} from 'fastify';
+import fastifyCors from '@fastify/cors';
+import fastifyHelmet from '@fastify/helmet';
+import fastifyRateLimit from '@fastify/rate-limit';
+import { runInContext } from '../context/store.js';
+import { bindTransaction } from '../context/guard.js';
+import { resolveAndExecute } from '../di/resolve.js';
+import { buildContext } from './middleware.js';
+import { buildErrorResponse, buildInternalErrorResponse } from './response.js';
+import { sql } from '../../data/db/sql.js';
+import { PipeworkError } from '../../core/errors/index.js';
+import { toJsonSchema } from '../../data/schema/json-schema.js';
+import { generateOpenAPI } from '../openapi/generate.js';
+import { getBaseLogger, setLoggingConfig } from '../../core/logging/index.js';
+import { setupDrain } from '../../core/lifecycle/drain.js';
+import { registerHealthRoutes } from '../../core/lifecycle/health.js';
+import { propagateTenantLocals, validateSessionVarName } from '../../auth/tenant/index.js';
+import { ForbiddenError } from '../../core/errors/index.js';
+import { resourceToHandlers } from '../fixture/to-handlers.js';
+/** Creates a PipeworkServer — wraps Fastify with auto request IDs, CORS, rate limiting, and transaction-per-request. */
+export function createServer(instance, config = {}) {
+    if (instance.config.environment === 'production') {
+        validateProductionConfig(config);
+    }
+    const fastifyOpts = {
+        trustProxy: config.trustProxy ?? false,
+        genReqId: () => randomUUID(),
+        requestIdHeader: false,
+    };
+    if (config.logger === false) {
+        fastifyOpts['logger'] = false;
+    }
+    else {
+        fastifyOpts['loggerInstance'] = config.logger ?? getBaseLogger();
+    }
+    const app = Fastify(fastifyOpts);
+    // Validation is handled by Pipework's DI layer (parse + ValidationError).
+    // Pass-through compiler lets us attach JSON Schema for OpenAPI without AJV double-validating.
+    app.setValidatorCompiler(() => () => ({ value: undefined }));
+    if (config.cors !== false) {
+        void app.register(fastifyCors, (config.cors ?? {}));
+    }
+    if (config.security !== false) {
+        void app.register(fastifyHelmet, (config.security ?? {}));
+    }
+    if (config.rateLimit !== false) {
+        void app.register(fastifyRateLimit, (config.rateLimit ?? {}));
+    }
+    if (config.logging) {
+        setLoggingConfig(config.logging);
+    }
+    app.decorateRequest('rawBody', undefined);
+    app.addHook('onSend', (_req, reply, payload, done) => {
+        void reply.header('x-request-id', _req.id);
+        done(null, payload);
+    });
+    const routes = [];
+    const authConfig = config.auth;
+    const strategies = authConfig
+        ? ('strategies' in authConfig ? authConfig.strategies : [authConfig.strategy])
+        : [];
+    const enrichers = authConfig && 'enrichers' in authConfig ? (authConfig.enrichers ?? []) : [];
+    const tenantResolver = authConfig && 'tenantResolver' in authConfig ? authConfig.tenantResolver : undefined;
+    const tenantConfig = config.tenant ?? null;
+    if (tenantConfig?.sessionVars) {
+        for (const name of Object.keys(tenantConfig.sessionVars)) {
+            validateSessionVarName(name);
+        }
+    }
+    const contextOptions = {
+        instance,
+        strategies,
+        enrichers,
+        tenantResolver,
+        tenantConfig,
+        authOptional: authConfig?.optional ?? false,
+        logging: config.logging ?? null,
+    };
+    const gracefulShutdownMs = config.gracefulShutdownMs ?? 10000;
+    const drain = setupDrain(app);
+    if (config.health !== false) {
+        registerHealthRoutes(app, instance, config.healthChecks ?? [], {
+            health: config.healthPath ?? '/health',
+            ready: config.readyPath ?? '/ready',
+        });
+    }
+    const rbacInstance = config.rbac ?? null;
+    const txDatabases = config.transactionPerRequest !== undefined && config.transactionPerRequest !== false
+        ? (config.transactionPerRequest === true
+            ? [...instance.config.databases().keys()]
+            : config.transactionPerRequest)
+        : null;
+    const txTimeoutMs = config.transactionTimeoutMs ?? 5000;
+    if (tenantConfig?.sessionVars !== undefined && txDatabases === null) {
+        throw new Error('[pipework] Tenant session variables require transactionPerRequest.\n\n' +
+            '  Your server config has tenant.sessionVars configured, but transactionPerRequest\n' +
+            '  is not enabled. Session variables are propagated via SET LOCAL inside a\n' +
+            '  transaction — without transactionPerRequest, they are silently skipped.\n\n' +
+            '  Fix: Add transactionPerRequest: true (or a list of database names) to your\n' +
+            '  createServer() config.\n');
+    }
+    function route(method, path, handler) {
+        routes.push({ method, path, handler });
+        const fastifyMethod = method.toLowerCase();
+        const schema = {};
+        if (handler.meta.inputSchema) {
+            schema['body'] = toJsonSchema(handler.meta.inputSchema);
+        }
+        if (handler.meta.outputSchemas.size > 0) {
+            const response = {};
+            for (const [status, outputSchema] of handler.meta.outputSchemas) {
+                response[String(status)] = toJsonSchema(outputSchema);
+            }
+            schema['response'] = response;
+        }
+        if (handler.meta.querySchema) {
+            schema['querystring'] = toJsonSchema(handler.meta.querySchema);
+        }
+        if (handler.meta.paramsSchema) {
+            schema['params'] = toJsonSchema(handler.meta.paramsSchema);
+        }
+        const opts = Object.keys(schema).length > 0 ? { schema } : {};
+        if (handler.meta.wantsRawBody) {
+            opts['preParsing'] = async (req, _reply, payload) => {
+                const chunks = [];
+                for await (const chunk of payload)
+                    chunks.push(chunk);
+                const raw = Buffer.concat(chunks);
+                req.rawBody = raw;
+                return Readable.from(raw);
+            };
+        }
+        app[fastifyMethod](path, opts, async (req, reply) => {
+            try {
+                const ctx = await buildContext(req, contextOptions, handler.meta.authRequirement);
+                if (handler.meta.permission && rbacInstance) {
+                    await enforceHandlerPermission(instance, ctx, handler.meta, rbacInstance);
+                }
+                const requestObj = { headers: req.headers };
+                const rawBodyBuffer = handler.meta.wantsRawBody
+                    ? req.rawBody
+                    : undefined;
+                if (rawBodyBuffer !== undefined) {
+                    requestObj.rawBody = rawBodyBuffer;
+                }
+                const httpOptions = {
+                    request: requestObj,
+                    response: { header: (name, value) => { void reply.header(name, value); } },
+                    ...(rawBodyBuffer !== undefined ? { rawBody: rawBodyBuffer } : {}),
+                };
+                let result;
+                if (txDatabases !== null && txDatabases.length > 0) {
+                    result = await executeInTransaction(instance, ctx, txDatabases, handler, req, tenantConfig, txTimeoutMs, httpOptions);
+                }
+                else {
+                    result = await runInContext(ctx, () => resolveAndExecute(handler, req.body, req.query, req.params, httpOptions));
+                }
+                return sendResult(reply, result);
+            }
+            catch (error) {
+                if (error instanceof PipeworkError) {
+                    return reply.status(error.httpStatus).send(buildErrorResponse(error));
+                }
+                req.log.error(error, 'Unhandled error in route handler');
+                return reply.status(500).send(buildInternalErrorResponse());
+            }
+        });
+    }
+    function registerHandlers(handlers) {
+        for (const handler of handlers) {
+            if (handler.meta.route) {
+                route(handler.meta.route.method, handler.meta.route.path, handler);
+            }
+        }
+    }
+    function registerResourceFn(resource) {
+        registerHandlers(resourceToHandlers(resource));
+    }
+    if (config.openapi) {
+        const openApiPath = config.openApiPath ?? '/openapi.json';
+        const openApiInfo = config.openapi;
+        app.get(openApiPath, async (_req, reply) => {
+            return reply.send(generateOpenAPI(openApiInfo, routes));
+        });
+    }
+    async function listen() {
+        const address = await app.listen({
+            port: config.port ?? 3000,
+            host: config.host ?? '0.0.0.0',
+        });
+        if (config.managed !== true) {
+            setupGracefulShutdown(app, instance, drain, gracefulShutdownMs);
+        }
+        return address;
+    }
+    async function close() {
+        await app.close();
+        await instance.pool.closeAll();
+    }
+    async function ready() {
+        await app.ready();
+    }
+    async function inject(opts) {
+        const response = await app.inject({
+            method: opts.method,
+            url: opts.url,
+            headers: opts.headers,
+            payload: opts.payload,
+            query: opts.query,
+        });
+        const r = response;
+        return { statusCode: r.statusCode, headers: r.headers, body: r.body, json: () => r.json() };
+    }
+    return { route, registerHandlers, registerResource: registerResourceFn, ready, inject, listen, close };
+}
+function setupGracefulShutdown(app, instance, drain, timeoutMs) {
+    const shutdown = async (signal) => {
+        app.log.info({ signal }, 'Graceful shutdown initiated');
+        const timer = setTimeout(() => {
+            process.exit(1);
+        }, timeoutMs);
+        let exitCode = 0;
+        try {
+            await drain.waitForDrain(timeoutMs - 1000);
+            await app.close();
+            await instance.pool.closeAll();
+        }
+        catch {
+            exitCode = 1;
+        }
+        finally {
+            clearTimeout(timer);
+            process.exit(exitCode);
+        }
+    };
+    process.once('SIGTERM', () => { void shutdown('SIGTERM'); });
+    process.once('SIGINT', () => { void shutdown('SIGINT'); });
+}
+async function executeInTransaction(instance, ctx, databases, handler, req, tenant, timeoutMs, httpOptions) {
+    if (databases.length === 1) {
+        const dbName = databases[0];
+        const dbConfig = instance.config.database(dbName);
+        const conn = instance.pool.getOrCreate(dbConfig);
+        return conn.drizzle.transaction(async (tx) => {
+            const childCtx = {
+                ...ctx,
+                transactions: new Map(ctx.transactions),
+            };
+            childCtx.transactions.set(dbName, bindTransaction(ctx, dbName, tx));
+            await propagateLocals(tx, ctx, tenant);
+            return runInContext(childCtx, () => resolveAndExecute(handler, req.body, req.query, req.params, httpOptions));
+        });
+    }
+    // Multiple databases: nested transactions (each independent)
+    const childCtx = {
+        ...ctx,
+        transactions: new Map(ctx.transactions),
+    };
+    const txPromises = [];
+    const readyPromises = [];
+    const readyDatabases = new Set();
+    let releaseAll;
+    let abortAll;
+    const donePromise = new Promise((resolve, reject) => {
+        releaseAll = resolve;
+        abortAll = reject;
+    });
+    donePromise.catch(() => { });
+    for (const dbName of databases) {
+        const dbConfig = instance.config.database(dbName);
+        const conn = instance.pool.getOrCreate(dbConfig);
+        let signalReady;
+        readyPromises.push(new Promise(r => { signalReady = r; }));
+        txPromises.push(conn.drizzle.transaction(async (tx) => {
+            childCtx.transactions.set(dbName, bindTransaction(ctx, dbName, tx));
+            await propagateLocals(tx, ctx, tenant);
+            readyDatabases.add(dbName);
+            signalReady();
+            await donePromise;
+        }));
+    }
+    const timeoutPromise = new Promise((_, reject) => {
+        const timer = setTimeout(() => {
+            const pending = databases.filter(db => !readyDatabases.has(db));
+            reject(new Error(`[pipework] Multi-database transaction setup timed out after ${timeoutMs}ms.\n\n` +
+                `  Database(s) that failed to become ready: ${pending.join(', ')}\n` +
+                `  Database(s) that are ready: ${[...readyDatabases].join(', ') || '(none)'}\n\n` +
+                '  This usually means one of the databases is unreachable or under heavy load.\n' +
+                '  You can increase the timeout via createServer({ transactionTimeoutMs }).\n'));
+        }, timeoutMs);
+        timer.unref();
+    });
+    try {
+        await Promise.race([Promise.all(readyPromises), timeoutPromise]);
+    }
+    catch (err) {
+        abortAll(err instanceof Error ? err : new Error(String(err)));
+        await Promise.allSettled(txPromises);
+        throw err;
+    }
+    try {
+        const result = await runInContext(childCtx, () => resolveAndExecute(handler, req.body, req.query, req.params, httpOptions));
+        releaseAll();
+        await Promise.all(txPromises);
+        return result;
+    }
+    catch (err) {
+        abortAll(err instanceof Error ? err : new Error(String(err)));
+        await Promise.allSettled(txPromises);
+        throw err;
+    }
+}
+async function propagateLocals(tx, ctx, tenant) {
+    if (ctx.requestId !== '') {
+        await tx.execute(sql `SELECT set_config('pipework.request_id', ${ctx.requestId}, true)`);
+    }
+    if (ctx.tenant !== null) {
+        await tx.execute(sql `SELECT set_config('pipework.tenant_id', ${ctx.tenant}, true)`);
+    }
+    if (tenant !== null && tenant.sessionVars !== undefined && ctx.tenant !== null) {
+        const tenantCtx = {
+            tenant: ctx.tenant,
+            requestId: ctx.requestId,
+            userId: ctx.auth !== null && typeof ctx.auth === 'object' && 'userId' in ctx.auth
+                ? ctx.auth.userId
+                : null,
+        };
+        await propagateTenantLocals(tx, tenant, tenantCtx);
+    }
+}
+function sendResult(reply, result) {
+    if (result !== null && typeof result === 'object' && 'status' in result && typeof result['status'] === 'number') {
+        const response = result;
+        if (response.body !== undefined) {
+            return reply.status(response.status).send(response.body);
+        }
+        return reply.status(response.status).send();
+    }
+    return reply.status(200).send(result);
+}
+function validateProductionConfig(config) {
+    const problems = [];
+    if (config.cors !== false) {
+        const corsOpts = config.cors ?? {};
+        if (!('origin' in corsOpts)) {
+            problems.push('CORS: No explicit origin configured. In production, CORS defaults to allowing all origins.\n' +
+                '  Fix: Set cors.origin to your domain(s), or set cors: false if this is an internal API.');
+        }
+    }
+    if (config.rateLimit === undefined) {
+        problems.push('Rate limiting: Not configured. Production APIs should have rate limiting.\n' +
+            '  Fix: Set rateLimit: { max: 100, timeWindow: "1 minute" }, or set rateLimit: false to explicitly opt out.');
+    }
+    if (config.auth !== undefined && config.tenant === undefined) {
+        problems.push('Tenant isolation: Auth is configured but no tenant config is set.\n' +
+            '  Fix: Set tenant: { mode: "schema" | "rls" | "header", ... } to enforce tenant isolation,\n' +
+            '  or acknowledge this by setting tenant: null in your server config.');
+    }
+    if (problems.length > 0) {
+        throw new Error(`[pipework] Production server configuration is missing security settings:\n\n${problems.map((p, i) => `  ${i + 1}. ${p}`).join('\n\n')}\n\n` +
+            '  Pipework refuses to start a production server with insecure defaults.\n' +
+            '  Set each option explicitly to confirm your security posture.\n');
+    }
+}
+async function enforceHandlerPermission(instance, ctx, meta, rbac) {
+    const permission = meta.permission;
+    if (ctx.auth === null || typeof ctx.auth !== 'object') {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+    const auth = ctx.auth;
+    const userId = typeof auth['userId'] === 'string' ? auth['userId'] : null;
+    const tenantId = ctx.tenant;
+    const authVersion = typeof auth['authVersion'] === 'number' ? auth['authVersion'] : 1;
+    if (userId === null || tenantId === null) {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+    const dbName = meta.databases[0] ?? [...instance.config.databases().keys()][0];
+    if (dbName === undefined) {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+    const dbConfig = instance.config.database(dbName);
+    const conn = instance.pool.getOrCreate(dbConfig);
+    const permissionSet = await rbac.resolve(conn.drizzle, userId, tenantId, authVersion);
+    const granted = rbac.check(permissionSet, permission.resource, permission.action, permission.scope);
+    if (!granted) {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/request/http/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/request/http/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,OAAO,EAAE,EAAgE,MAAM,SAAS,CAAA;AAC/F,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,gBAAgB,MAAM,qBAAqB,CAAA;AAKlD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAuB,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,YAAY,EAAuB,MAAM,iBAAiB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAC9E,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAG1F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAa9D,wHAAwH;AACxH,MAAM,UAAU,YAAY,CAAC,QAAkB,EAAE,SAAuB,EAAE;IACxE,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACjD,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,WAAW,GAA4B;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;QACtC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC5B,eAAe,EAAE,KAAK;KACvB,CAAA;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAA;IAC/B,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAEhC,0EAA0E;IAC1E,8FAA8F;IAC9F,GAAG,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAE5D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAA;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,KAAK,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC,CAAA;IACtF,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC/B,KAAK,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAEzC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACnD,KAAK,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAwB,EAAE,CAAA;IAEtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAA;IAC9B,MAAM,UAAU,GAAG,UAAU;QAC3B,CAAC,CAAC,CAAC,YAAY,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,SAAS,GAAG,UAAU,IAAI,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7F,MAAM,cAAc,GAAG,UAAU,IAAI,gBAAgB,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;IAE3G,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAA;IAC1C,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,sBAAsB,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAmB;QACrC,QAAQ;QACR,UAAU;QACV,SAAS;QACT,cAAc;QACd,YAAY;QACZ,YAAY,EAAE,UAAU,EAAE,QAAQ,IAAI,KAAK;QAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;KAChC,CAAA;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAA;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE;YAC7D,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YACtC,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ;SACpC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAA;IAExC,MAAM,WAAW,GAAoB,MAAM,CAAC,qBAAqB,KAAK,SAAS,IAAI,MAAM,CAAC,qBAAqB,KAAK,KAAK;QACvH,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,KAAK,IAAI;YACpC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;YACzC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACnC,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAA;IAEvD,IAAI,YAAY,EAAE,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,qFAAqF;YACrF,6EAA6E;YAC7E,+EAA+E;YAC/E,gFAAgF;YAChF,4BAA4B,CAC7B,CAAA;IACH,CAAC;IAED,SAAS,KAAK,CACZ,MAAkB,EAClB,IAAY,EACZ,OAAkD;QAElD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAEtC,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,EAAiD,CAAA;QAEzF,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,QAAQ,GAA4B,EAAE,CAAA;YAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAChE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;YACvD,CAAC;YACD,MAAM,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAA;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,IAAI,GAA4B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAEtF,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,GAAmB,EAAE,MAAoB,EAAE,OAA8B,EAAE,EAAE;gBACvG,MAAM,MAAM,GAAa,EAAE,CAAA;gBAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACrD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;gBAAC,GAA4C,CAAC,OAAO,GAAG,GAAG,CAAA;gBAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC,CAAA;QACH,CAAC;QAED,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAmB,EAAE,KAAmB,EAAE,EAAE;YAChF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;gBAEjF,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,YAAY,EAAE,CAAC;oBAC5C,MAAM,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;gBAC3E,CAAC;gBAED,MAAM,UAAU,GAAqC,EAAE,OAAO,EAAE,GAAG,CAAC,OAA6C,EAAE,CAAA;gBACnH,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY;oBAC7C,CAAC,CAAE,GAA4C,CAAC,OAAO;oBACvD,CAAC,CAAC,SAAS,CAAA;gBACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAC/B,UAAkC,CAAC,OAAO,GAAG,aAAa,CAAA;gBAC7D,CAAC;gBAED,MAAM,WAAW,GAAmB;oBAClC,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,EAAE;oBACzF,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAA;gBAED,IAAI,MAAe,CAAA;gBACnB,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;gBACvH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;gBAClH,CAAC;gBAED,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;oBACnC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;gBACvE,CAAC;gBAED,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAA;gBACxD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,SAAS,gBAAgB,CAAC,QAAqD;QAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,kBAAkB,CAAC,QAA2B;QACrD,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,eAAe,CAAA;QACzD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAA;QAClC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YACzC,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;SAC/B,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC5B,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAA;QACjE,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QACjB,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;IACnB,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,IAAmB;QACvC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,MAAe;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAiC;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAiB;YAC/B,KAAK,EAAE,IAAI,CAAC,KAA+B;SAC5C,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,QAA6I,CAAA;QACvJ,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;IAC7F,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACxG,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAoB,EACpB,QAAkB,EAClB,KAAoC,EACpC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC,EAAE,SAAS,CAAC,CAAA;QAEb,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;YAC1C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;YACjB,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,CAAC,CAAA;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxB,CAAC;IACH,CAAC,CAAA;IAED,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAC3D,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAkB,EAClB,GAAuC,EACvC,SAAmB,EACnB,OAAkD,EAClD,GAAmB,EACnB,MAA2B,EAC3B,SAAiB,EACjB,WAA4B;IAE5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,CAAA;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAEhD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3C,MAAM,QAAQ,GAAuC;gBACnD,GAAG,GAAG;gBACN,YAAY,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;aACxC,CAAA;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAEnE,MAAM,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YAEtC,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;QAC/G,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAuC;QACnD,GAAG,GAAG;QACN,YAAY,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;KACxC,CAAA;IAED,MAAM,UAAU,GAAoB,EAAE,CAAA;IACtC,MAAM,aAAa,GAAoB,EAAE,CAAA;IACzC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IACxC,IAAI,UAAuB,CAAA;IAC3B,IAAI,QAA+B,CAAA;IAEnC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,UAAU,GAAG,OAAO,CAAA;QACpB,QAAQ,GAAG,MAAM,CAAA;IACnB,CAAC,CAAC,CAAA;IACF,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE3B,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAEhD,IAAI,WAAwB,CAAA;QAC5B,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,GAAG,WAAW,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAA;QAE/D,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YACnE,MAAM,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YACtC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1B,WAAW,EAAE,CAAA;YACb,MAAM,WAAW,CAAA;QACnB,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/D,MAAM,CAAC,IAAI,KAAK,CACd,+DAA+D,SAAS,SAAS;gBACjF,8CAA8C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpE,iCAAiC,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM;gBACjF,iFAAiF;gBACjF,8EAA8E,CAC/E,CAAC,CAAA;QACJ,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,KAAK,CAAC,KAAK,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,CAAC,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,GAAG,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;QAC3H,UAAU,EAAE,CAAA;QACZ,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC7B,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,EAAM,EACN,GAAuC,EACvC,MAA2B;IAE3B,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,4CAA4C,GAAG,CAAC,SAAS,SAAS,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,2CAA2C,GAAG,CAAC,MAAM,SAAS,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC/E,MAAM,SAAS,GAAkB;YAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI;gBAC/E,CAAC,CAAE,GAAG,CAAC,IAA2B,CAAC,MAAM;gBACzC,CAAC,CAAC,IAAI;SACT,CAAA;QACD,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAmB,EAAE,MAAe;IACtD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,OAAQ,MAAkC,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7I,MAAM,QAAQ,GAAG,MAAyB,CAAA;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAoB;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAA;QAClC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CACX,8FAA8F;gBAC9F,0FAA0F,CAC3F,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CACX,6EAA6E;YAC7E,4GAA4G,CAC7G,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CACX,qEAAqE;YACrE,8FAA8F;YAC9F,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,+EAA+E,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAC5I,2EAA2E;YAC3E,kEAAkE,CACnE,CAAA;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAAkB,EAClB,GAAuC,EACvC,IAA0C,EAC1C,IAAU;IAEV,MAAM,UAAU,GAAG,IAAI,CAAC,UAAW,CAAA;IAEnC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAA;IAChD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;IAC3B,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAErF,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAEhD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IACnG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;AACH,CAAC"}