tapimo 0.0.2 → 0.2.0

package/dist/apps/platform/routes/api-keys.js

@@ -0,0 +1,328 @@
+import { Hono } from 'hono';
+import * as z from 'zod/mini';
+import * as ApiKeys from '../../../ApiKeys.js';
+import * as Auth from '../../../internal/Auth.js';
+import * as OpenApi from '../../../internal/OpenApi.js';
+import * as Response from '../../../internal/Response.js';
+import * as Schema from '../../../internal/Schema.js';
+import * as Scope from '../../../Scope.js';
+/** Zod schemas owned by the API-keys resource. */
+export var schema;
+(function (schema) {
+    /** One API key: metadata only — the token appears once, at mint. */
+    schema.Key = Schema.describe(z.object({
+        createdAt: z
+            .string()
+            .check(z.describe('When the key was minted (ISO 8601).'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] })),
+        createdBy: z
+            .optional(z.string())
+            .check(z.describe('Identity that minted the key (`usr_…`, or `super_admin`).'), z.meta({ examples: ['usr_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        environment: z
+            .enum(['production', 'sandbox'])
+            .check(z.describe('Key environment.'), z.meta({ examples: ['sandbox'] })),
+        expiresAt: z
+            .optional(z.string())
+            .check(z.describe('When the key expires (ISO 8601). Absent for a non-expiring key.'), z.meta({ examples: ['2027-01-01T00:00:00.000Z'] })),
+        id: z
+            .string()
+            .check(z.describe('Opaque key id (`key_…`).'), z.meta({ examples: ['key_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        name: z
+            .optional(z.string())
+            .check(z.describe('Human-readable key name.'), z.meta({ examples: ['CI'] })),
+        orgId: z
+            .string()
+            .check(z.describe('Owning organization id (`org_…`).'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        projectId: z
+            .string()
+            .check(z.describe('Owning project id (`prj_…`).'), z.meta({ examples: ['prj_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        scopes: z
+            .array(z.enum([...Scope.catalog.map((entry) => entry.scope), Scope.wildcard]))
+            .check(z.describe("Granted scopes. '*' (grant-all) appears only on keys minted by the super admin."), z.meta({ examples: [['data:read']] })),
+        tokenLast4: z
+            .string()
+            .check(z.describe('Last 4 characters of the plaintext token.'), z.meta({ examples: ['a1b2'] })),
+    }), 'An API key: metadata only — the token appears once, at mint.');
+    /** Path parameters addressing a project's key collection. */
+    schema.Params = z
+        .object({
+        orgId: z
+            .string()
+            .check(z.describe('The organization id (`org_…`).'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        projectId: z
+            .string()
+            .check(z.describe('The project id (`prj_…`).'), z.meta({ examples: ['prj_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    })
+        .check(z.describe("Path parameters for a project's API keys."));
+    /** Path parameters addressing one API key. */
+    schema.KeyParams = z
+        .object({
+        keyId: z
+            .string()
+            .check(z.describe('The key id (`key_…`).'), z.meta({ examples: ['key_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        orgId: z
+            .string()
+            .check(z.describe('The organization id (`org_…`).'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        projectId: z
+            .string()
+            .check(z.describe('The project id (`prj_…`).'), z.meta({ examples: ['prj_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    })
+        .check(z.describe('Path parameters for one API key.'));
+    /** Request body minting a key. The wildcard scope is not issuable here. */
+    schema.KeyBody = z
+        .object({
+        environment: z
+            ._default(z.enum(['production', 'sandbox']), 'production')
+            .check(z.describe('Key environment.'), z.meta({ examples: ['sandbox'] })),
+        name: z
+            .optional(z.string().check(z.minLength(1), z.maxLength(100)))
+            .check(z.describe('Human-readable key name.'), z.meta({ examples: ['CI'] })),
+        scopes: z
+            .array(z.enum(Scope.catalog.map((entry) => entry.scope)))
+            .check(z.minLength(1), z.describe('Scopes to grant.'), z.meta({ examples: [['data:read']] })),
+    })
+        .check(z.describe('Fields for minting an API key.'));
+    /** Schemas for the createApiKey operation. */
+    let createApiKey;
+    (function (createApiKey) {
+        /** The minted key plus its one-time token. */
+        createApiKey.Response = Schema.describe(z.extend(schema.Key, {
+            token: z
+                .string()
+                .check(z.describe('The plaintext token — shown once, unrecoverable afterward.'), z.meta({ examples: ['tempo_sandbox:sk:…'] })),
+        }), 'The minted key, including its one-time token.');
+    })(createApiKey = schema.createApiKey || (schema.createApiKey = {}));
+    /** Schemas for the listApiKeys operation. */
+    let listApiKeys;
+    (function (listApiKeys) {
+        /** Non-paginated list of a project's keys. */
+        listApiKeys.Response = Schema.describe(z.object({
+            data: z.array(schema.Key).check(z.describe("The project's keys, newest first.")),
+        }), "A non-paginated list of a project's API keys (metadata only).");
+    })(listApiKeys = schema.listApiKeys || (schema.listApiKeys = {}));
+    /** Schemas for the revokeApiKey operation. */
+    let revokeApiKey;
+    (function (revokeApiKey) {
+        /** Confirmation that the key was revoked. */
+        revokeApiKey.Response = z
+            .object({
+            id: z
+                .string()
+                .check(z.describe('ID of the key that was revoked.'), z.meta({ examples: ['key_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        })
+            .check(z.describe('Confirmation that the key was revoked.'));
+    })(revokeApiKey = schema.revokeApiKey || (schema.revokeApiKey = {}));
+})(schema || (schema = {}));
+/**
+ * Mounts the `/orgs/:orgId/projects/:projectId/api-keys` resource:
+ * project-scoped API keys over the KV state store. Access follows the project
+ * scope (owning session or super admin); the token appears once, at mint.
+ */
+export function apiKeys(options = {}) {
+    const hidden = !options.enabled;
+    return new Hono()
+        .post('/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/projects/:projectId{prj_[A-Za-z0-9_-]+}/api-keys', Auth.policy({ session: true }), Auth.ensureOrg({ role: 'admin' }), Auth.ensureProject(), OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.validate('json', schema.KeyBody, {
+        code: 'body_invalid',
+        message: 'Check the request body and try again.',
+    }), OpenApi.describeRoute({
+        description: 'Mint a project-scoped API key. The token appears once and is never shown again.', // prettier-ignore
+        hide: hidden,
+        operationId: 'createApiKey',
+        responses: OpenApi.responses({
+            errors: {
+                403: {
+                    codes: ['scope_not_issuable'],
+                    description: 'The requested scopes are not issuable.',
+                },
+                404: 'No accessible project was found for this id.',
+            },
+            success: {
+                description: 'The minted key, including its one-time token.',
+                schema: schema.createApiKey.Response,
+            },
+        }),
+        summary: 'Create API key',
+        tags: ['API Keys'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (Auth.narrowScope)
+            return Auth.ensureProjectError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'body_invalid',
+                message: 'Check the request body and try again.',
+            });
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        const createdBy = mintedBy(c);
+        if (!createdBy)
+            return sessionRequired(c);
+        const body = c.req.valid('json');
+        // Sessions mint only self-issuable scopes; the super admin grants the
+        // full catalog.
+        if (createdBy !== 'super_admin') {
+            const denied = body.scopes.filter((scope) => !Scope.selfServe.includes(scope));
+            if (denied.length > 0)
+                return Response.error(c, {
+                    code: 'scope_not_issuable',
+                    message: 'The requested scopes are not issuable.',
+                    status: 403,
+                });
+        }
+        try {
+            const { record, token } = await ApiKeys.mint(kv.store, {
+                createdBy,
+                environment: body.environment,
+                ...(body.name === undefined ? {} : { name: body.name }),
+                orgId: Auth.org(c).id,
+                projectId: Auth.project(c).id,
+                scopes: body.scopes,
+            });
+            return c.json(Response.validated(schema.createApiKey.Response, { ...serializeKey(record), token }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .get('/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/projects/:projectId{prj_[A-Za-z0-9_-]+}/api-keys', Auth.policy({ session: true }), Auth.ensureOrg(), Auth.ensureProject(), OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.describeRoute({
+        hide: hidden,
+        operationId: 'listApiKeys',
+        responses: OpenApi.responses({
+            errors: { 404: 'No accessible project was found for this id.' },
+            success: {
+                description: "The project's keys, newest first (metadata only).",
+                schema: schema.listApiKeys.Response,
+            },
+        }),
+        summary: 'List API keys',
+        tags: ['API Keys'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (Auth.narrowScope)
+            return Auth.ensureProjectError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        try {
+            const records = await ApiKeys.listByOrg(kv.store, Auth.org(c).id, {
+                projectId: Auth.project(c).id,
+            });
+            return c.json(Response.validated(schema.listApiKeys.Response, {
+                data: records.map(serializeKey),
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .delete('/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/projects/:projectId{prj_[A-Za-z0-9_-]+}/api-keys/:keyId{key_[A-Za-z0-9_-]+}', Auth.policy({ session: true }), Auth.ensureOrg({ role: 'admin' }), Auth.ensureProject(), OpenApi.validate('param', schema.KeyParams, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.describeRoute({
+        description: 'Revoke an API key. Requests presenting its token stop resolving.',
+        hide: hidden,
+        operationId: 'revokeApiKey',
+        responses: OpenApi.responses({
+            errors: { 404: 'No accessible API key was found for this id.' },
+            success: {
+                description: 'Confirmation that the key was revoked.',
+                schema: schema.revokeApiKey.Response,
+            },
+        }),
+        summary: 'Revoke API key',
+        tags: ['API Keys'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (Auth.narrowScope)
+            return Auth.ensureProjectError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        const { keyId } = c.req.valid('param');
+        try {
+            // Bind the key to the scoped project before revoking: a key id from
+            // another org or project must be indistinguishable from a missing one.
+            const record = await ApiKeys.get(kv.store, keyId);
+            if (!record || record.orgId !== Auth.org(c).id || record.projectId !== Auth.project(c).id)
+                return keyNotFound(c);
+            const revoked = await ApiKeys.revoke(kv.store, keyId);
+            if (!revoked)
+                return keyNotFound(c);
+            return c.json(Response.validated(schema.revokeApiKey.Response, { id: keyId }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    });
+}
+/** Projects a persisted record onto the platform key shape (no rate limits, no token). */
+function serializeKey(record) {
+    return {
+        createdAt: record.createdAt,
+        ...(record.createdBy === undefined ? {} : { createdBy: record.createdBy }),
+        environment: record.environment,
+        ...(record.expiresAt === undefined ? {} : { expiresAt: record.expiresAt }),
+        id: record.id,
+        ...(record.name === undefined ? {} : { name: record.name }),
+        orgId: record.orgId,
+        // The project filter guarantees attribution; the fallback never renders.
+        projectId: record.projectId ?? '',
+        scopes: [...record.scopes],
+        tokenLast4: record.tokenLast4,
+    };
+}
+/** The caller identity recorded as `createdBy`, or `undefined` for non-minting principals. */
+function mintedBy(c) {
+    const principal = Auth.getPrincipal(c);
+    if (principal?.type === 'super_admin')
+        return 'super_admin';
+    if (principal?.type === 'session')
+        return principal.id;
+    return undefined;
+}
+function keyNotFound(c) {
+    return Response.error(c, {
+        code: 'api_key_not_found',
+        message: 'API key not found',
+        status: 404,
+    });
+}
+function notEnabled(c) {
+    return Response.error(c, {
+        code: 'api_keys_not_enabled',
+        message: 'API keys are not enabled for this Tempo API deployment.',
+        status: 404,
+    });
+}
+function sessionRequired(c) {
+    return Response.error(c, {
+        code: 'forbidden',
+        message: 'Session required',
+        status: 403,
+    });
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/apps/platform/routes/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../../src/apps/platform/routes/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAA;AAE9C,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAA;AACrD,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,kDAAkD;AAClD,MAAM,KAAW,MAAM,CAsKtB;AAtKD,WAAiB,MAAM;IACrB,oEAAoE;IACvD,UAAG,GAAG,MAAM,CAAC,QAAQ,CAChC,CAAC,CAAC,MAAM,CAAC;QACP,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EACjD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;QACH,SAAS,EAAE,CAAC;aACT,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACpB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC,EACvE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,WAAW,EAAE,CAAC;aACX,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3E,SAAS,EAAE,CAAC;aACT,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACpB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC,EAC7E,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;QACH,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EACtC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,IAAI,EAAE,CAAC;aACJ,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAC/C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAC1C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;aAC7E,KAAK,CACJ,CAAC,CAAC,QAAQ,CACR,iFAAiF,CAClF,EACD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CACtC;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC,EACvD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAC/B;KACJ,CAAC,EACF,8DAA8D,CAC/D,CAAA;IAED,6DAA6D;IAChD,aAAM,GAAG,CAAC;SACpB,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC,CAAA;IAEjE,8CAA8C;IACjC,gBAAS,GAAG,CAAC;SACvB,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EACnC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,CAAA;IAExD,2EAA2E;IAC9D,cAAO,GAAG,CAAC;SACrB,MAAM,CAAC;QACN,WAAW,EAAE,CAAC;aACX,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC;aACzD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,EAAE,CAAC;aACJ,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;aAC5D,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;aACxD,KAAK,CACJ,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAC9B,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CACtC;KACJ,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAA;IAEtD,8CAA8C;IAC9C,IAAiB,YAAY,CAa5B;IAbD,WAAiB,YAAY;QAC3B,8CAA8C;QACjC,qBAAQ,GAAG,MAAM,CAAC,QAAQ,CACrC,CAAC,CAAC,MAAM,CAAC,UAAG,EAAE;YACZ,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC,EACxE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAC7C;SACJ,CAAC,EACF,+CAA+C,CAChD,CAAA;IACH,CAAC,EAbgB,YAAY,GAAZ,OAAA,YAAY,KAAZ,OAAA,YAAY,QAa5B;IAED,6CAA6C;IAC7C,IAAiB,WAAW,CAQ3B;IARD,WAAiB,WAAW;QAC1B,8CAA8C;QACjC,oBAAQ,GAAG,MAAM,CAAC,QAAQ,CACrC,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;SAC1E,CAAC,EACF,+DAA+D,CAChE,CAAA;IACH,CAAC,EARgB,WAAW,GAAX,OAAA,WAAW,KAAX,OAAA,WAAW,QAQ3B;IAED,8CAA8C;IAC9C,IAAiB,YAAY,CAY5B;IAZD,WAAiB,YAAY;QAC3B,6CAA6C;QAChC,qBAAQ,GAAG,CAAC;aACtB,MAAM,CAAC;YACN,EAAE,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAC7C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;SACJ,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAA;IAChE,CAAC,EAZgB,YAAY,GAAZ,OAAA,YAAY,KAAZ,OAAA,YAAY,QAY5B;AACH,CAAC,EAtKgB,MAAM,KAAN,MAAM,QAsKtB;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,OAAO,GAAoB,EAAE;IACnD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAA;IAC/B,OAAO,IAAI,IAAI,EAAmB;SAC/B,IAAI,CACH,sFAAsF,EACtF,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACjC,IAAI,CAAC,aAAa,EAAE,EACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE;QACvC,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,uCAAuC;KACjD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,iFAAiF,EAAE,kBAAkB;QAClH,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,cAAc;QAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,oBAAoB,CAAC;oBAC7B,WAAW,EAAE,wCAAwC;iBACtD;gBACD,GAAG,EAAE,8CAA8C;aACpD;YACD,OAAO,EAAE;gBACP,WAAW,EAAE,+CAA+C;gBAC5D,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ;aACrC;SACF,CAAC;QACF,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACvD,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QACJ,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,uCAAuC;aACjD,CAAC,CAAA;QAEJ,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,SAAS;YAAE,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAEzC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAEhC,sEAAsE;QACtE,gBAAgB;QAChB,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;YAC9E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBACnB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACvB,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,wCAAwC;oBACjD,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;QACN,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE;gBACrD,SAAS;gBACT,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACvD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBACrB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EACpF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,GAAG,CACF,sFAAsF,EACtF,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,EAAE,EAChB,IAAI,CAAC,aAAa,EAAE,EACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC/D,OAAO,EAAE;gBACP,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ;aACpC;SACF,CAAC;QACF,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACvD,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QAEJ,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBAChE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;aAC9B,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE;gBAC9C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;aAChC,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,MAAM,CACL,iHAAiH,EACjH,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACjC,IAAI,CAAC,aAAa,EAAE,EACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE;QAC1C,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,kEAAkE;QAC/E,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,cAAc;QAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC/D,OAAO,EAAE;gBACP,WAAW,EAAE,wCAAwC;gBACrD,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ;aACrC;SACF,CAAC;QACF,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,CAAC,UAAU,CAAC;KACnB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACvD,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QAEJ,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC;YACH,oEAAoE;YACpE,uEAAuE;YACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvF,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;YACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACrD,IAAI,CAAC,OAAO;gBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF,CAAA;AACL,CAAC;AAUD,0FAA0F;AAC1F,SAAS,YAAY,CAAC,MAAsB;IAC1C,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1E,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1E,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3D,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,yEAAyE;QACzE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACjC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAS,QAAQ,CAAC,CAA2B;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,SAAS,EAAE,IAAI,KAAK,aAAa;QAAE,OAAO,aAAa,CAAA;IAC3D,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,EAAE,CAAA;IACtD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,CAA2B;IAC9C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAA2B;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,yDAAyD;QAClE,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAA2B;IAClD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC"}