tapimo 0.19.0 → 0.20.0

package/dist/admin/apps/zone-delegation-requests.d.ts

@@ -0,0 +1,332 @@
+import * as Response from '../../internal/Response.js';
+import type * as App from '../App.js';
+/** Mounts authenticated request, review, approval, application, and cancellation operations. */
+export declare function zoneDelegationRequests(): import("hono/hono-base").HonoBase<App.Environment, {
+    "/": {
+        $post: {
+            output: {
+                error: {
+                    code: "payload_too_large";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 413;
+            input: {
+                json: {
+                    accounts?: `0x${string}`[] | undefined;
+                    accountsAll: boolean;
+                    chainId: unknown;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokens?: `0x${string}`[] | undefined;
+                    tokensAll: boolean;
+                };
+            };
+        } | {
+            output: {
+                error: {
+                    code: "not_found";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 404;
+            input: {
+                json: {
+                    accounts?: `0x${string}`[] | undefined;
+                    accountsAll: boolean;
+                    chainId: unknown;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokens?: `0x${string}`[] | undefined;
+                    tokensAll: boolean;
+                };
+            };
+        } | {
+            output: {
+                createdAt: string;
+                delegationId: string | null;
+                expiresAt: string;
+                groupId: string;
+                id: string;
+                input: {
+                    accounts?: readonly string[] | undefined;
+                    tokens?: readonly string[] | undefined;
+                    accountsAll: boolean;
+                    chainId: number;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokensAll: boolean;
+                };
+                requesterEmail: string;
+                requesterId: string;
+                status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+            };
+            outputFormat: "json";
+            status: 201;
+            input: {
+                json: {
+                    accounts?: `0x${string}`[] | undefined;
+                    accountsAll: boolean;
+                    chainId: unknown;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokens?: `0x${string}`[] | undefined;
+                    tokensAll: boolean;
+                };
+            };
+        };
+    };
+} & {
+    "/": {
+        $get: {
+            output: {
+                data: {
+                    createdAt: string;
+                    delegationId: string | null;
+                    expiresAt: string;
+                    groupId: string;
+                    id: string;
+                    input: {
+                        accounts?: readonly string[] | undefined;
+                        tokens?: readonly string[] | undefined;
+                        accountsAll: boolean;
+                        chainId: number;
+                        environment: "production" | "sandbox";
+                        orgId: string;
+                        tokensAll: boolean;
+                    };
+                    requesterEmail: string;
+                    requesterId: string;
+                    status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+                }[];
+                nextCursor: string | null;
+            };
+            outputFormat: "json";
+            status: 200;
+            input: {
+                query?: {
+                    cursor?: string | string[];
+                } | undefined;
+            };
+        };
+    };
+} & {
+    "/:id": {
+        $get: {
+            output: {
+                error: {
+                    code: "not_found";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 404;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        } | {
+            output: {
+                approvals: {
+                    approvedAt: string;
+                    approverEmail: string;
+                    approverId: string;
+                    createdAt: string;
+                    delegationId: string | null;
+                    expiresAt: string;
+                    groupId: string;
+                    id: string;
+                    input: {
+                        accounts?: readonly string[] | undefined;
+                        tokens?: readonly string[] | undefined;
+                        accountsAll: boolean;
+                        chainId: number;
+                        environment: "production" | "sandbox";
+                        orgId: string;
+                        tokensAll: boolean;
+                    };
+                    requestId: string;
+                    requesterEmail: string;
+                    requesterId: string;
+                    status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+                }[];
+                createdAt: string;
+                delegationId: string | null;
+                expiresAt: string;
+                groupId: string;
+                id: string;
+                input: {
+                    accounts?: readonly string[] | undefined;
+                    tokens?: readonly string[] | undefined;
+                    accountsAll: boolean;
+                    chainId: number;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokensAll: boolean;
+                };
+                requesterEmail: string;
+                requesterId: string;
+                status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+            };
+            outputFormat: "json";
+            status: 200;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        };
+    };
+} & {
+    "/:id/approve": {
+        $post: {
+            output: {
+                approvals: {
+                    approvedAt: string;
+                    approverEmail: string;
+                    approverId: string;
+                    createdAt: string;
+                    delegationId: string | null;
+                    expiresAt: string;
+                    groupId: string;
+                    id: string;
+                    input: {
+                        accounts?: readonly string[] | undefined;
+                        tokens?: readonly string[] | undefined;
+                        accountsAll: boolean;
+                        chainId: number;
+                        environment: "production" | "sandbox";
+                        orgId: string;
+                        tokensAll: boolean;
+                    };
+                    requestId: string;
+                    requesterEmail: string;
+                    requesterId: string;
+                    status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+                }[];
+                createdAt: string;
+                delegationId: string | null;
+                expiresAt: string;
+                groupId: string;
+                id: string;
+                input: {
+                    accounts?: readonly string[] | undefined;
+                    tokens?: readonly string[] | undefined;
+                    accountsAll: boolean;
+                    chainId: number;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokensAll: boolean;
+                };
+                requesterEmail: string;
+                requesterId: string;
+                status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+            } | null;
+            outputFormat: "json";
+            status: 200;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        };
+    };
+} & {
+    "/:id/apply": {
+        $post: {
+            output: {
+                data: {
+                    accountsAll: boolean;
+                    chainId: number;
+                    createdAt: string;
+                    environment: "production" | "sandbox";
+                    id: string;
+                    orgId: string;
+                    revokedAt?: string | undefined;
+                    tokensAll: boolean;
+                    updatedAt: string;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        } | {
+            output: {
+                error: {
+                    code: "zone_delegation_exists";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 409;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        };
+    };
+} & {
+    "/:id": {
+        $delete: {
+            output: {
+                error: {
+                    code: "not_found";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 404;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        } | {
+            output: {
+                createdAt: string;
+                delegationId: string | null;
+                expiresAt: string;
+                groupId: string;
+                id: string;
+                input: {
+                    accounts?: readonly string[] | undefined;
+                    tokens?: readonly string[] | undefined;
+                    accountsAll: boolean;
+                    chainId: number;
+                    environment: "production" | "sandbox";
+                    orgId: string;
+                    tokensAll: boolean;
+                };
+                requesterEmail: string;
+                requesterId: string;
+                status: "applied" | "applying" | "cancelled" | "failed" | "pending";
+            };
+            outputFormat: "json";
+            status: 200;
+            input: {
+                param: {
+                    id: string;
+                };
+            };
+        };
+    };
+}, "/", "/:id">;
+//# sourceMappingURL=zone-delegation-requests.d.ts.map

package/dist/admin/apps/zone-delegation-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-delegation-requests.d.ts","sourceRoot":"","sources":["../../../src/admin/apps/zone-delegation-requests.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAA;AAEtD,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AAyBrC,gGAAgG;AAChG,wBAAgB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAkMrC"}

package/dist/admin/apps/zone-delegation-requests.js

@@ -0,0 +1,200 @@
+import { Hono } from 'hono';
+import * as z from 'zod/mini';
+import * as Db from '../../db/Db.js';
+import * as Organizations from '../../db/tables/organizations.js';
+import * as ZoneDelegationRequests from '../../db/tables/zoneDelegationRequests.js';
+import * as ZoneDelegations from '../../db/tables/zoneDelegations.js';
+import * as Cursor from '../../internal/Cursor.js';
+import * as OpenApi from '../../internal/OpenApi.js';
+import * as Response from '../../internal/Response.js';
+import * as ZoneDelegationApproval from '../../internal/ZoneDelegationApproval.js';
+import * as Delegations from './zone-delegations.js';
+/** Request schemas for the Zone delegation approval workflow. */
+var schema;
+(function (schema) {
+    schema.Query = z.object({
+        cursor: z
+            .optional(z.string().check(z.maxLength(512), z.refine((value) => Boolean(Cursor.decode(value, ['timestamp', 'id'])))))
+            .check(z.describe('Next-page cursor from a prior response.'), z.meta({ examples: [Cursor.encode(['2026-01-01T00:00:00.000Z', 'zdr_example'])] })),
+    });
+    schema.Params = z.object({
+        id: z
+            .string()
+            .check(z.regex(/^zdr_[A-Za-z0-9_-]+$/), z.describe('Zone delegation request identifier.')),
+    });
+})(schema || (schema = {}));
+/** Mounts authenticated request, review, approval, application, and cancellation operations. */
+export function zoneDelegationRequests() {
+    return new Hono()
+        .use('*', async (c, next) => {
+        const config = c.get('delegationApproval');
+        if (!config?.groupId || !config.lookup)
+            return Response.error(c, {
+                code: 'zone_delegation_approval_unconfigured',
+                message: 'The internal identity approver group is not configured.',
+                status: 503,
+            });
+        try {
+            const member = await config.identify(c.req.raw, c);
+            if (!ZoneDelegationApproval.active(member) ||
+                member.email.toLowerCase() !== c.get('identity')?.email.toLowerCase())
+                return Response.error(c, {
+                    code: 'unauthorized',
+                    message: 'A verified internal identity session is required.',
+                    status: 401,
+                });
+            c.set('approver', member);
+            await next();
+            if (c.error)
+                throw c.error;
+            return;
+        }
+        catch (cause) {
+            if (cause instanceof ZoneDelegationApproval.RequiredError) {
+                c.res = Response.error(c, {
+                    code: 'zone_delegation_approval_required',
+                    message: cause.message,
+                    status: 403,
+                });
+                return c.res;
+            }
+            c.get('metrics')?.count('zone_delegation_approval_failure_count', 1);
+            // Downstream errors may already have finalized Hono's response.
+            c.res = Response.upstream(c, cause);
+            return c.res;
+        }
+    })
+        .post('/', OpenApi.validate('json', Delegations.schema.Body, {
+        code: 'body_invalid',
+        // Two member lists of 1,000 addresses.
+        maxBytes: 256 * 1_024,
+        message: 'Invalid delegation request.',
+    }), OpenApi.describeRoute({
+        description: 'File a new delegation for two-approver review. Widening an active delegation is revoking it and filing a new one.', // prettier-ignore
+        operationId: 'createZoneDelegationRequest',
+        responses: {
+            201: { description: 'The pending Zone delegation request.' },
+            404: { description: 'Organization not found.' },
+        },
+        summary: 'Request Zone delegation',
+        tags: ['Zone Delegation Requests'],
+    }), async (c) => {
+        const config = c.get('delegationApproval');
+        const input = c.req.valid('json');
+        const db = Db.get(c.get('db'));
+        if (!(await Organizations.get(db, input.orgId)))
+            return notFound(c);
+        const request = await ZoneDelegationRequests.create(db, {
+            groupId: config.groupId,
+            input,
+            requester: c.get('approver'),
+        });
+        return c.json(request, 201);
+    })
+        .get('/', OpenApi.validate('query', schema.Query, {
+        code: 'query_invalid',
+        message: 'Invalid request cursor.',
+    }), OpenApi.describeRoute({
+        operationId: 'listZoneDelegationRequests',
+        responses: { 200: { description: 'A page of Zone delegation requests, newest first.' } },
+        summary: 'List delegation requests',
+        tags: ['Zone Delegation Requests'],
+    }), async (c) => c.json(await ZoneDelegationRequests.list(Db.get(c.get('db')), c.req.valid('query')), 200))
+        .get('/:id', OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Invalid request id.',
+    }), OpenApi.describeRoute({
+        operationId: 'getZoneDelegationRequest',
+        responses: { 200: { description: 'The Zone delegation request with its approvals.' } },
+        summary: 'Get delegation request',
+        tags: ['Zone Delegation Requests'],
+    }), async (c) => {
+        const request = await ZoneDelegationRequests.get(Db.get(c.get('db')), c.req.valid('param').id); // prettier-ignore
+        if (!request)
+            return Response.error(c, {
+                code: 'not_found',
+                message: 'Request not found.',
+                status: 404,
+            });
+        return c.json(request, 200);
+    })
+        .post('/:id/approve', OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Invalid request id.',
+    }), OpenApi.describeRoute({
+        operationId: 'approveZoneDelegationRequest',
+        responses: { 200: { description: 'The request with the recorded approval.' } },
+        summary: 'Approve delegation request',
+        tags: ['Zone Delegation Requests'],
+    }), async (c) => {
+        const request = await ZoneDelegationRequests.approve(Db.get(c.get('db')), {
+            groupId: c.get('delegationApproval').groupId,
+            id: c.req.valid('param').id,
+            lookup: (ids) => c.get('delegationApproval').lookup(c.req.raw, ids),
+            member: c.get('approver'),
+        });
+        return c.json(request, 200);
+    })
+        .post('/:id/apply', OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Invalid request id.',
+    }), OpenApi.describeRoute({
+        operationId: 'applyZoneDelegationRequest',
+        responses: OpenApi.responses({
+            errors: { 409: 'An active delegation already covers this Zone.' },
+            success: { description: 'The created delegation.', schema: Delegations.schema.Response },
+        }),
+        summary: 'Apply delegation request',
+        tags: ['Zone Delegation Requests'],
+    }), async (c) => {
+        const db = Db.get(c.get('db'));
+        const request = await ZoneDelegationRequests.claim(db, {
+            groupId: c.get('delegationApproval').groupId,
+            id: c.req.valid('param').id,
+            lookup: (ids) => c.get('delegationApproval').lookup(c.req.raw, ids),
+            member: c.get('approver'),
+        });
+        try {
+            const data = await ZoneDelegations.create(db, request.input);
+            await ZoneDelegationRequests.finish(db, request.id, { delegationId: data.id, status: 'applied' }); // prettier-ignore
+            return c.json(Response.validated(Delegations.schema.Response, { data }), 200);
+        }
+        catch (cause) {
+            // A consumed claim is never replayed: the requester files a new request.
+            await ZoneDelegationRequests.finish(db, request.id, { status: 'failed' });
+            if (cause instanceof ZoneDelegations.ConflictError)
+                return Response.error(c, {
+                    code: 'zone_delegation_exists',
+                    message: 'An active delegation already covers this organization, environment, and Zone.', // prettier-ignore
+                    status: 409,
+                });
+            throw cause;
+        }
+    })
+        .delete('/:id', OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Invalid request id.',
+    }), OpenApi.describeRoute({
+        operationId: 'cancelZoneDelegationRequest',
+        responses: { 200: { description: 'The cancelled Zone delegation request.' } },
+        summary: 'Cancel delegation request',
+        tags: ['Zone Delegation Requests'],
+    }), async (c) => {
+        const request = await ZoneDelegationRequests.cancel(Db.get(c.get('db')), c.req.valid('param').id); // prettier-ignore
+        if (!request)
+            return Response.error(c, {
+                code: 'not_found',
+                message: 'Pending request not found.',
+                status: 404,
+            });
+        return c.json(request, 200);
+    });
+}
+function notFound(c) {
+    return Response.error(c, {
+        code: 'not_found',
+        message: 'Organization not found.',
+        status: 404,
+    });
+}
+//# sourceMappingURL=zone-delegation-requests.js.map

package/dist/admin/apps/zone-delegation-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-delegation-requests.js","sourceRoot":"","sources":["../../../src/admin/apps/zone-delegation-requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,KAAK,aAAa,MAAM,kCAAkC,CAAA;AACjE,OAAO,KAAK,sBAAsB,MAAM,2CAA2C,CAAA;AACnF,OAAO,KAAK,eAAe,MAAM,oCAAoC,CAAA;AACrE,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAA;AACtD,OAAO,KAAK,sBAAsB,MAAM,0CAA0C,CAAA;AAElF,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAA;AAEpD,iEAAiE;AACjE,IAAU,MAAM,CAmBf;AAnBD,WAAU,MAAM;IACD,YAAK,GAAG,CAAC,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,CAAC;aACN,QAAQ,CACP,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CACxE,CACF;aACA,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EACrD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACnF;KACJ,CAAC,CAAA;IACW,aAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAC7B,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;KAC7F,CAAC,CAAA;AACJ,CAAC,EAnBS,MAAM,KAAN,MAAM,QAmBf;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,IAAI,EAAmB;SAC/B,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM;YACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;gBACvB,IAAI,EAAE,uCAAuC;gBAC7C,OAAO,EAAE,yDAAyD;gBAClE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QACJ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAClD,IACE,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE;gBAErE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACvB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,mDAAmD;oBAC5D,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;YACJ,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzB,MAAM,IAAI,EAAE,CAAA;YACZ,IAAI,CAAC,CAAC,KAAK;gBAAE,MAAM,CAAC,CAAC,KAAK,CAAA;YAC1B,OAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB,CAAC,aAAa,EAAE,CAAC;gBAC1D,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACxB,IAAI,EAAE,mCAAmC;oBACzC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;gBACF,OAAO,CAAC,CAAC,GAAG,CAAA;YACd,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAA;YACpE,gEAAgE;YAChE,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YACnC,OAAO,CAAC,CAAC,GAAG,CAAA;QACd,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CACH,GAAG,EACH,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE;QAChD,IAAI,EAAE,cAAc;QACpB,uCAAuC;QACvC,QAAQ,EAAE,GAAG,GAAG,KAAK;QACrB,OAAO,EAAE,6BAA6B;KACvC,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,mHAAmH,EAAE,kBAAkB;QACpJ,WAAW,EAAE,6BAA6B;QAC1C,SAAS,EAAE;YACT,GAAG,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE;YAC5D,GAAG,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE;SAChD;QACD,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,CAAC,0BAA0B,CAAC;KACnC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE;YACtD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK;YACL,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC7B,CAAC,CAAA;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CACF;SACA,GAAG,CACF,GAAG,EACH,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE;QACtC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,yBAAyB;KACnC,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,4BAA4B;QACzC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,mDAAmD,EAAE,EAAE;QACxF,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,CAAC,0BAA0B,CAAC;KACnC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAC5F;SACA,GAAG,CACF,MAAM,EACN,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE,EAAE;QACtF,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,CAAC,0BAA0B,CAAC;KACnC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA,CAAC,kBAAkB;QACjH,IAAI,CAAC,OAAO;YACV,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;gBACvB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,oBAAoB;gBAC7B,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QACJ,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CACF;SACA,IAAI,CACH,cAAc,EACd,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,8BAA8B;QAC3C,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE,EAAE;QAC9E,OAAO,EAAE,4BAA4B;QACrC,IAAI,EAAE,CAAC,0BAA0B,CAAC;KACnC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE;YACxE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAE,CAAC,OAAO;YAC7C,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE;YAC3B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;YACpE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC1B,CAAC,CAAA;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CACF;SACA,IAAI,CACH,YAAY,EACZ,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,4BAA4B;QACzC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,gDAAgD,EAAE;YACjE,OAAO,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE;SACzF,CAAC;QACF,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,CAAC,0BAA0B,CAAC;KACnC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE;YACrD,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAE,CAAC,OAAO;YAC7C,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE;YAC3B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;YACpE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SAC1B,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5D,MAAM,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA,CAAC,kBAAkB;YACpH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,MAAM,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YACzE,IAAI,KAAK,YAAY,eAAe,CAAC,aAAa;gBAChD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACvB,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,+EAA+E,EAAE,kBAAkB;oBAC5G,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;YACJ,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CACF;SACA,MAAM,CACL,MAAM,EACN,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,6BAA6B;QAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,wCAAwC,EAAE,EAAE;QAC7E,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,CAAC,0BAA0B,CAAC;KACnC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA,CAAC,kBAAkB;QACpH,IAAI,CAAC,OAAO;YACV,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;gBACvB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,4BAA4B;gBACrC,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QACJ,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,CAA2B;IAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC"}