tapimo 0.15.1 → 0.18.1

package/dist/apps/management/routes/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../src/apps/management/routes/cli.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAK7B,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AAGzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAG5C,+CAA+C;AAC/C,yBAAiB,MAAM,CAAC;IACtB,oDAAoD;IAC7C,MAAM,cAAc;;qBAQzB,CAAA;IA8BF,kDAAkD;IAC3C,MAAM,MAAM;;qBAEjB,CAAA;IAEF,uCAAuC;IAChC,MAAM,aAAa;;;;qBAUzB,CAAA;IAED,6BAA6B;IACtB,MAAM,cAAc;;;;;qBAoB1B,CAAA;IAED,wDAAwD;IACjD,MAAM,aAAa;;;;;;;;;;;;;;;qBAgCzB,CAAA;IAED,iDAAiD;IAC1C,MAAM,QAAQ;;;;;;qBAQpB,CAAA;IAED,uEAAuE;IAChE,MAAM,YAAY;;qBAQxB,CAAA;IAED,+DAA+D;IACxD,MAAM,aAAa;;;;;;;;;iCA6BvB,CAAA;CACJ;AAgBD;;;GAGG;AACH,wBAAgB,GAAG,CAAC,OAAO,GAAE,GAAG,CAAC,OAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2DAyR5C;AAED,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,0CAA0C;IAC1C,KAAK,OAAO,GAAG;QACb,qFAAqF;QACrF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAChC,CAAA;CACF"}

package/dist/apps/management/routes/cli.js

@@ -0,0 +1,416 @@
+import { Hono } from 'hono';
+import * as z from 'zod/mini';
+import * as Auth from '../../../internal/Auth.js';
+import * as CliAuth from '../../../internal/CliAuth.js';
+import * as OpenApi from '../../../internal/OpenApi.js';
+import * as Response from '../../../internal/Response.js';
+import * as Schema from '../../../internal/Schema.js';
+import * as Scope from '../../../Scope.js';
+import * as ManagementError from '../Error.js';
+/** Schemas owned by the CLI sign-in routes. */
+export var schema;
+(function (schema) {
+    /** API permissions approved for this CLI device. */
+    schema.ApproveRequest = z.object({
+        scopes: z.optional(z.array(z.string()).check(z.refine((scopes) => new Set(scopes).size === scopes.length), z.describe('API scopes approved for this device. Omit to use the default scopes.'), z.meta({ examples: [['data:read', 'routes:read', 'routes:write', 'rpc-relay:read']] }))),
+    });
+    const code = z
+        .string()
+        .check(z.describe('Code shown in both the terminal and the console to match the request.'), z.meta({ examples: ['BCDF-GHJK'] }));
+    const expiresAt = z.iso
+        .datetime()
+        .check(z.describe('When the pending sign-in expires (ISO 8601).'), z.meta({ examples: ['2026-01-01T00:10:00.000Z'] }));
+    const device = z
+        .string()
+        .check(z.minLength(1), z.maxLength(100), z.describe('Hostname of the machine running the CLI.'), z.meta({ examples: ['build-box'] }));
+    const name = z
+        .string()
+        .check(z.minLength(1), z.maxLength(100), z.describe('CLI name and version.'), z.meta({ examples: ['tempo api 0.1.0'] }));
+    /** Path parameters naming one sign-in request. */
+    schema.Params = z.object({
+        code: z.string().check(z.describe('Authorization code.'), z.meta({ examples: ['BCDF-GHJK'] })),
+    });
+    /** Body for starting a CLI sign-in. */
+    schema.CreateRequest = Schema.describe(z.object({
+        codeChallenge: CliAuth.schema.CodeChallenge.check(z.describe('PKCE S256 challenge: base64url SHA-256 of the code verifier, unpadded.'), z.meta({ examples: ['E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM'] })),
+        device: z.optional(device),
+        name: z.optional(name),
+    }), 'Fields for starting a CLI sign-in.');
+    /** A started CLI sign-in. */
+    schema.CreateResponse = Schema.describe(z.object({
+        code,
+        expiresAt,
+        interval: z
+            .number()
+            .check(z.int(), z.positive(), z.describe('Seconds to wait between token polls.'), z.meta({ examples: [CliAuth.pollInterval] })),
+        verificationUrl: z
+            .url()
+            .check(z.describe('Console page where the user approves the sign-in.'), z.meta({ examples: ['https://console.tempo.xyz/cli?code=BCDF-GHJK'] })),
+    }), 'A started CLI sign-in.');
+    /** A sign-in request as shown to the approving user. */
+    schema.Authorization = Schema.describe(z.object({
+        client: z
+            .object({ device: z.optional(device), name: z.optional(name) })
+            .check(z.describe('CLI details reported when the sign-in started.')),
+        code,
+        createdAt: z.iso
+            .datetime()
+            .check(z.describe('When the sign-in started (ISO 8601).'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] })),
+        expiresAt,
+        ip: z.optional(z
+            .string()
+            .check(z.describe('IP address that started the sign-in.'), z.meta({ examples: ['203.0.113.7'] }))),
+        scopes: z
+            .array(z.string())
+            .check(z.describe('Default or approved API scopes for this device.'), z.meta({ examples: [['data:read', 'routes:read', 'routes:write', 'rpc-relay:read']] })),
+        status: z
+            .enum(['approved', 'denied', 'pending'])
+            .check(z.describe('Whether the sign-in was decided.'), z.meta({ examples: ['pending'] })),
+    }), 'A pending CLI sign-in.');
+    /** Outcome of approving or denying a sign-in. */
+    schema.Decision = Schema.describe(z.object({
+        code,
+        status: z
+            .enum(['approved', 'denied'])
+            .check(z.describe('The recorded decision.'), z.meta({ examples: ['approved'] })),
+    }), 'The recorded decision.');
+    /** Body for exchanging an approved sign-in for a CLI session token. */
+    schema.TokenRequest = Schema.describe(z.object({
+        codeVerifier: CliAuth.schema.CodeVerifier.check(z.describe('PKCE code verifier whose challenge started the sign-in.'), z.meta({ examples: ['dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk'] })),
+    }), 'Fields for exchanging a sign-in for a CLI session.');
+    /** Sign-in state, carrying the session token once approved. */
+    schema.TokenResponse = z
+        .discriminatedUnion('status', [
+        z.object({ status: z.literal('pending') }),
+        z.object({ status: z.literal('denied') }),
+        z.object({
+            expiresAt: z.iso
+                .datetime()
+                .check(z.describe('When the CLI session expires (ISO 8601).'), z.meta({ examples: ['2026-01-31T00:00:00.000Z'] })),
+            scopes: z
+                .array(z.string())
+                .check(z.describe('API scopes approved for this device.'), z.meta({ examples: [['data:read', 'routes:read']] })),
+            status: z.literal('approved'),
+            token: z
+                .string()
+                .check(z.describe('CLI session token, sent as `Authorization: Bearer`. Shown once.'), z.meta({ examples: [`tempo:cli:${'ab'.repeat(32)}`] })),
+        }),
+    ])
+        .check(z.describe('Sign-in state; `approved` carries the session token.'), z.meta({ examples: [{ status: 'pending' }] }));
+})(schema || (schema = {}));
+const bodyValidation = {
+    code: 'body_invalid',
+    message: 'Check the request body and try again.',
+};
+const paramValidation = {
+    code: 'param_invalid',
+    message: 'Check the path parameters and try again.',
+};
+// These routes are CLI-to-console plumbing, not public API surface: they stay
+// out of the OpenAPI document, so neither generated CLI commands nor MCP tools
+// expose them. `hide: true` still registers each route with the auth policy.
+const hide = true;
+/**
+ * CLI sign-in: a CLI starts a PKCE-bound request, a signed-in console user
+ * approves it, and the CLI exchanges the approval for a CLI session token.
+ */
+export function cli(options = {}) {
+    const consoleUrl = (options.consoleUrl ?? 'https://console.tempo.xyz').replace(/\/$/, '');
+    const validateApproval = OpenApi.validate('json', schema.ApproveRequest, bodyValidation);
+    return new Hono()
+        .post('/v1/cli/authorizations', Auth.policy({ public: true }), OpenApi.validate('json', schema.CreateRequest, bodyValidation), OpenApi.describeRoute({
+        hide,
+        operationId: 'createCliAuthorization',
+        responses: OpenApi.responses({
+            errors: {
+                400: { codes: ['body_invalid'], description: 'Invalid body.' },
+                404: { codes: ['cli_auth_not_enabled'], description: 'CLI sign-in is not enabled.' },
+            },
+            success: { description: 'The started sign-in.', schema: schema.CreateResponse },
+        }),
+        summary: 'Start CLI sign-in',
+        tags: ['Authentication'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.accessError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, bodyValidation);
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        const { codeChallenge, device, name } = c.req.valid('json');
+        try {
+            const ip = Auth.getTrustedClientIp(c);
+            const authorization = await CliAuth.authorize(kv.store, {
+                client: { ...(device ? { device } : {}), ...(name ? { name } : {}) },
+                codeChallenge,
+                ...(ip ? { ip } : {}),
+            });
+            const code = CliAuth.formatCode(authorization.code);
+            const verificationUrl = new URL(`${consoleUrl}/cli`);
+            verificationUrl.searchParams.set('code', code);
+            return c.json(Response.validated(schema.CreateResponse, {
+                code,
+                expiresAt: authorization.expiresAt,
+                interval: CliAuth.pollInterval,
+                verificationUrl: verificationUrl.toString(),
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .get('/v1/cli/authorizations/:code{[A-Za-z -]+}', Auth.policy({ session: true }), OpenApi.validate('param', schema.Params, paramValidation), OpenApi.describeRoute({
+        hide,
+        operationId: 'getCliAuthorization',
+        responses: OpenApi.responses({
+            errors: {
+                400: { codes: ['param_invalid'], description: 'Invalid path.' },
+                403: { codes: ['forbidden'], description: 'A console session is required.' },
+                404: {
+                    codes: ['cli_auth_not_enabled', 'cli_authorization_not_found'],
+                    description: 'No pending sign-in was found for this code.',
+                },
+            },
+            success: { description: 'The sign-in request.', schema: schema.Authorization },
+        }),
+        summary: 'Get CLI sign-in',
+        tags: ['Authentication'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, paramValidation);
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        if (!consoleSession(c))
+            return consoleSessionRequired(c);
+        const code = CliAuth.normalizeCode(c.req.valid('param').code);
+        if (!code)
+            return notFound(c);
+        try {
+            const authorization = await CliAuth.getAuthorization(kv.store, code);
+            if (!authorization)
+                return notFound(c);
+            const { client, createdAt, expiresAt, ip, status } = authorization;
+            return c.json(Response.validated(schema.Authorization, {
+                client,
+                code: CliAuth.formatCode(code),
+                createdAt,
+                expiresAt,
+                ...(ip ? { ip } : {}),
+                scopes: authorization.scopes ??
+                    CliAuth.defaultScopes.filter((scope) => Scope.includes(c.get('scopeCatalog'), scope)),
+                status,
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .post('/v1/cli/authorizations/:code{[A-Za-z -]+}/approve', Auth.policy({ session: true }), OpenApi.validate('param', schema.Params, paramValidation), OpenApi.documentJsonRequest(schema.ApproveRequest), async (c, next) => {
+        // Legacy approvals omit the body, even when their Content-Type declares JSON.
+        if ((await c.req.text()) !== '')
+            return validateApproval(c, next);
+        c.req.addValidatedData('json', {});
+        return next();
+    }, OpenApi.describeRoute({
+        hide,
+        operationId: 'approveCliAuthorization',
+        responses: OpenApi.responses({
+            errors: {
+                400: {
+                    codes: ['body_invalid', 'param_invalid'],
+                    description: 'Invalid path or scopes.',
+                },
+                403: { codes: ['forbidden'], description: 'A console session is required.' },
+                404: {
+                    codes: ['cli_auth_not_enabled', 'cli_authorization_not_found'],
+                    description: 'No pending sign-in was found for this code.',
+                },
+                409: {
+                    codes: ['cli_authorization_decided'],
+                    description: 'The sign-in was already decided.',
+                },
+            },
+            success: { description: 'The sign-in was approved.', schema: schema.Decision },
+        }),
+        summary: 'Approve CLI sign-in',
+        tags: ['Authentication'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, paramValidation);
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        const principal = consoleSession(c);
+        if (!principal)
+            return consoleSessionRequired(c);
+        const code = CliAuth.normalizeCode(c.req.valid('param').code);
+        if (!code)
+            return notFound(c);
+        try {
+            const catalog = c.get('scopeCatalog');
+            const scopes = c.req.valid('json').scopes ??
+                CliAuth.defaultScopes.filter((scope) => Scope.includes(catalog, scope));
+            if (!scopes.every((scope) => Scope.selfServeFrom(catalog).includes(scope) || scope === 'routes:write'))
+                return Response.error(c, {
+                    code: 'body_invalid',
+                    message: 'Select supported CLI API scopes.',
+                    status: 400,
+                });
+            const result = await CliAuth.approve(kv.store, { code, scopes, userId: principal.id });
+            if (result.status === 'not_found')
+                return notFound(c);
+            if (result.status === 'conflict')
+                return decided(c);
+            return c.json(Response.validated(schema.Decision, {
+                code: CliAuth.formatCode(code),
+                status: 'approved',
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .post('/v1/cli/authorizations/:code{[A-Za-z -]+}/deny', Auth.policy({ session: true }), OpenApi.validate('param', schema.Params, paramValidation), OpenApi.describeRoute({
+        hide,
+        operationId: 'denyCliAuthorization',
+        responses: OpenApi.responses({
+            errors: {
+                400: { codes: ['param_invalid'], description: 'Invalid path.' },
+                403: { codes: ['forbidden'], description: 'A console session is required.' },
+                404: {
+                    codes: ['cli_auth_not_enabled', 'cli_authorization_not_found'],
+                    description: 'No pending sign-in was found for this code.',
+                },
+                409: {
+                    codes: ['cli_authorization_decided'],
+                    description: 'The sign-in was already decided.',
+                },
+            },
+            success: { description: 'The sign-in was denied.', schema: schema.Decision },
+        }),
+        summary: 'Deny CLI sign-in',
+        tags: ['Authentication'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, paramValidation);
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        if (!consoleSession(c))
+            return consoleSessionRequired(c);
+        const code = CliAuth.normalizeCode(c.req.valid('param').code);
+        if (!code)
+            return notFound(c);
+        try {
+            const result = await CliAuth.deny(kv.store, code);
+            if (result.status === 'not_found')
+                return notFound(c);
+            if (result.status === 'conflict')
+                return decided(c);
+            return c.json(Response.validated(schema.Decision, {
+                code: CliAuth.formatCode(code),
+                status: 'denied',
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .post('/v1/cli/authorizations/:code{[A-Za-z -]+}/token', Auth.policy({ public: true }), OpenApi.validate('param', schema.Params, paramValidation), OpenApi.validate('json', schema.TokenRequest, bodyValidation), OpenApi.describeRoute({
+        hide,
+        operationId: 'exchangeCliAuthorization',
+        responses: OpenApi.responses({
+            errors: {
+                400: { codes: ['body_invalid', 'param_invalid'], description: 'Invalid path or body.' },
+                404: {
+                    codes: ['cli_auth_not_enabled', 'cli_authorization_not_found'],
+                    description: 'The sign-in expired, was redeemed, or the verifier does not match.',
+                },
+            },
+            success: { description: 'The sign-in state.', schema: schema.TokenResponse },
+        }),
+        summary: 'Exchange CLI sign-in',
+        tags: ['Authentication'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.accessError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, paramValidation);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, bodyValidation);
+        const kv = c.get('kv');
+        if (!kv)
+            return notEnabled(c);
+        const code = CliAuth.normalizeCode(c.req.valid('param').code);
+        if (!code)
+            return notFound(c);
+        try {
+            const result = await CliAuth.redeem(kv.store, {
+                code,
+                codeVerifier: c.req.valid('json').codeVerifier,
+            });
+            if (!result)
+                return notFound(c);
+            // Pending and denied states must never be cached; the token only appears once.
+            c.header('Cache-Control', 'no-store');
+            if (result.status !== 'approved')
+                return c.json(Response.validated(schema.TokenResponse, { status: result.status }), 200);
+            return c.json(Response.validated(schema.TokenResponse, {
+                expiresAt: result.session.expiresAt,
+                scopes: result.session.scopes ?? CliAuth.defaultScopes,
+                status: 'approved',
+                token: result.token,
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    });
+}
+// Only browser sessions may decide sign-ins, so a leaked CLI token cannot mint fresh CLI sessions.
+function consoleSession(c) {
+    const principal = Auth.getPrincipal(c);
+    if (principal?.type !== 'session' || principal.identity.provider === 'cli')
+        return undefined;
+    return principal;
+}
+function consoleSessionRequired(c) {
+    const principal = Auth.getPrincipal(c);
+    if (principal?.type !== 'session')
+        return ManagementError.sessionRequired(c);
+    return Response.error(c, {
+        code: 'forbidden',
+        message: 'Approve CLI sign-ins from the console',
+        status: 403,
+    });
+}
+function decided(c) {
+    return Response.error(c, {
+        code: 'cli_authorization_decided',
+        message: 'This sign-in was already approved or denied. Start a new sign-in from the CLI.',
+        status: 409,
+    });
+}
+function notEnabled(c) {
+    return Response.error(c, {
+        code: 'cli_auth_not_enabled',
+        message: 'CLI sign-in is not enabled for this Tempo API deployment.',
+        status: 404,
+    });
+}
+function notFound(c) {
+    return Response.error(c, {
+        code: 'cli_authorization_not_found',
+        message: 'Sign-in not found or expired. Start a new sign-in from the CLI.',
+        status: 404,
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/apps/management/routes/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../src/apps/management/routes/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAA;AACrD,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAE1C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAE9C,+CAA+C;AAC/C,MAAM,KAAW,MAAM,CAyKtB;AAzKD,WAAiB,MAAM;IACrB,oDAAoD;IACvC,qBAAc,GAAG,CAAC,CAAC,MAAM,CAAC;QACrC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAChB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CACvB,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,EAC5D,CAAC,CAAC,QAAQ,CAAC,sEAAsE,CAAC,EAClF,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CACvF,CACF;KACF,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC;SACX,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,uEAAuE,CAAC,EACnF,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CACpC,CAAA;IACH,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG;SACpB,QAAQ,EAAE;SACV,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC,EAC1D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD,CAAA;IACH,MAAM,MAAM,GAAG,CAAC;SACb,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EACtD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CACpC,CAAA;IACH,MAAM,IAAI,GAAG,CAAC;SACX,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EACnC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAC1C,CAAA;IAEH,kDAAkD;IACrC,aAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;KAC/F,CAAC,CAAA;IAEF,uCAAuC;IAC1B,oBAAa,GAAG,MAAM,CAAC,QAAQ,CAC1C,CAAC,CAAC,MAAM,CAAC;QACP,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAC/C,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC,EACpF,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,6CAA6C,CAAC,EAAE,CAAC,CACtE;QACD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KACvB,CAAC,EACF,oCAAoC,CACrC,CAAA;IAED,6BAA6B;IAChB,qBAAc,GAAG,MAAM,CAAC,QAAQ,CAC3C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI;QACJ,SAAS;QACT,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,GAAG,EAAE,EACP,CAAC,CAAC,QAAQ,EAAE,EACZ,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAClD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAC7C;QACH,eAAe,EAAE,CAAC;aACf,GAAG,EAAE;aACL,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAC/D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8CAA8C,CAAC,EAAE,CAAC,CACvE;KACJ,CAAC,EACF,wBAAwB,CACzB,CAAA;IAED,wDAAwD;IAC3C,oBAAa,GAAG,MAAM,CAAC,QAAQ,CAC1C,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;aAC9D,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;QACtE,IAAI;QACJ,SAAS,EAAE,CAAC,CAAC,GAAG;aACb,QAAQ,EAAE;aACV,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAClD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;QACH,SAAS;QACT,EAAE,EAAE,CAAC,CAAC,QAAQ,CACZ,CAAC;aACE,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAClD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CACtC,CACJ;QACD,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAC7D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CACvF;QACH,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;KAC5F,CAAC,EACF,wBAAwB,CACzB,CAAA;IAED,iDAAiD;IACpC,eAAQ,GAAG,MAAM,CAAC,QAAQ,CACrC,CAAC,CAAC,MAAM,CAAC;QACP,IAAI;QACJ,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;aAC5B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;KACnF,CAAC,EACF,wBAAwB,CACzB,CAAA;IAED,uEAAuE;IAC1D,mBAAY,GAAG,MAAM,CAAC,QAAQ,CACzC,CAAC,CAAC,MAAM,CAAC;QACP,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAC7C,CAAC,CAAC,QAAQ,CAAC,yDAAyD,CAAC,EACrE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,6CAA6C,CAAC,EAAE,CAAC,CACtE;KACF,CAAC,EACF,oDAAoD,CACrD,CAAA;IAED,+DAA+D;IAClD,oBAAa,GAAG,CAAC;SAC3B,kBAAkB,CAAC,QAAQ,EAAE;QAC5B,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC;YACP,SAAS,EAAE,CAAC,CAAC,GAAG;iBACb,QAAQ,EAAE;iBACV,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EACtD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;YACH,MAAM,EAAE,CAAC;iBACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAClD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CACrD;YACH,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7B,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC,EAC7E,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CACvD;SACJ,CAAC;KACH,CAAC;SACD,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAClE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAC9C,CAAA;AACL,CAAC,EAzKgB,MAAM,KAAN,MAAM,QAyKtB;AAED,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,uCAAuC;CACxC,CAAA;AACV,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,0CAA0C;CAC3C,CAAA;AAEV,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,IAAI,GAAG,IAAI,CAAA;AAEjB;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,OAAO,GAAgB,EAAE;IAC3C,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IACxF,OAAO,IAAI,IAAI,EAAe;SAC3B,IAAI,CACH,wBAAwB,EACxB,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,EAC9D,OAAO,CAAC,aAAa,CAAC;QACpB,IAAI;QACJ,WAAW,EAAE,wBAAwB;QACrC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;gBAC9D,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE;aACrF;YACD,OAAO,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE;SAChF,CAAC;QACF,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,gBAAgB,CAAC;KACzB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAC/E,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;YACrC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;gBACtD,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACpE,aAAa;gBACb,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtB,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;YACnD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,GAAG,UAAU,MAAM,CAAC,CAAA;YACpD,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC9C,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE;gBACxC,IAAI;gBACJ,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,QAAQ,EAAE,OAAO,CAAC,YAAY;gBAC9B,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;aAC5C,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,GAAG,CACF,2CAA2C,EAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACzD,OAAO,CAAC,aAAa,CAAC;QACpB,IAAI;QACJ,WAAW,EAAE,qBAAqB;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;gBAC/D,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE;gBAC5E,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;oBAC9D,WAAW,EAAE,6CAA6C;iBAC3D;aACF;YACD,OAAO,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE;SAC/E,CAAC;QACF,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAE,CAAC,gBAAgB,CAAC;KACzB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YAAE,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACpE,IAAI,CAAC,aAAa;gBAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,aAAa,CAAA;YAClE,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE;gBACvC,MAAM;gBACN,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC9B,SAAS;gBACT,SAAS;gBACT,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,EACJ,aAAa,CAAC,MAAM;oBACpB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACrC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAC7C;gBACH,MAAM;aACP,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,IAAI,CACH,mDAAmD,EACnD,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACzD,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,EAClD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChB,8EAA8E;QAC9E,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;YAAE,OAAO,gBAAgB,CAAC,CAAU,EAAE,IAAI,CAAC,CAAA;QAC1E,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAClC,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,EACD,OAAO,CAAC,aAAa,CAAC;QACpB,IAAI;QACJ,WAAW,EAAE,yBAAyB;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;oBACxC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE;gBAC5E,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;oBAC9D,WAAW,EAAE,6CAA6C;iBAC3D;gBACD,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,2BAA2B,CAAC;oBACpC,WAAW,EAAE,kCAAkC;iBAChD;aACF;YACD,OAAO,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;SAC/E,CAAC;QACF,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,CAAC,gBAAgB,CAAC;KACzB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC,SAAS;YAAE,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAA;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YACrC,MAAM,MAAM,GACV,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM;gBAC1B,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;YACzE,IACE,CAAC,MAAM,CAAC,KAAK,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,cAAc,CACpF;gBAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACvB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,kCAAkC;oBAC3C,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;YACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA;YACtF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnD,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC9B,MAAM,EAAE,UAAU;aACnB,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,IAAI,CACH,gDAAgD,EAChD,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACzD,OAAO,CAAC,aAAa,CAAC;QACpB,IAAI;QACJ,WAAW,EAAE,sBAAsB;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;gBAC/D,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE;gBAC5E,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;oBAC9D,WAAW,EAAE,6CAA6C;iBAC3D;gBACD,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,2BAA2B,CAAC;oBACpC,WAAW,EAAE,kCAAkC;iBAChD;aACF;YACD,OAAO,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;SAC7E,CAAC;QACF,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;KACzB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YAAE,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACjD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnD,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC9B,MAAM,EAAE,QAAQ;aACjB,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,IAAI,CACH,iDAAiD,EACjD,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,EAC7D,OAAO,CAAC,aAAa,CAAC;QACpB,IAAI;QACJ,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBACvF,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;oBAC9D,WAAW,EAAE,oEAAoE;iBAClF;aACF;YACD,OAAO,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE;SAC7E,CAAC;QACF,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,CAAC,gBAAgB,CAAC;KACzB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChF,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAC/E,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE;gBAC5C,IAAI;gBACJ,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY;aAC/C,CAAC,CAAA;YACF,IAAI,CAAC,MAAM;gBAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;YAC/B,+EAA+E;YAC/E,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;YACrC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;YACzF,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE;gBACvC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;gBACnC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa;gBACtD,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF,CAAA;AACL,CAAC;AAUD,mGAAmG;AACnG,SAAS,cAAc,CAAC,CAAuB;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5F,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAuB;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC5E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,CAAuB;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gFAAgF;QACzF,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAuB;IACzC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,2DAA2D;QACpE,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAuB;IACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC"}

package/dist/apps/management/routes/faucet.d.ts

@@ -98,14 +98,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "body_invalid";
+                    code: "organization_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     orgId: string;
@@ -118,14 +118,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -138,14 +138,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "forbidden";
+                    code: "body_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -158,14 +158,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "organization_not_found";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 400;
             input: {
                 param: {
                     orgId: string;