unified-notification-core 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,76 @@
 # Changelog
 
+## 0.1.2
+
+- Validate runtime `preferencePolicy` values and dispatch limits before any
+  publication, claim, or provider invocation.
+- Validate every caller-provided JSON payload recursively before persistence,
+  with an iterative 256-depth/10,000-node budget that rejects cycles,
+  unsupported values, accessors, array extras, non-finite numbers, and
+  non-plain objects without invoking getters.
+- Keep resolved provider calls truthfully `sent` when optional adapter output is
+  invalid: discard the optional result, persist diagnostic error details, and
+  never retry the provider for result-shape failures.
+- Isolate retry-delay and logger callbacks from delivery state. Invalid or
+  synchronously/asynchronously throwing retry policies and native Promises
+  now use the deterministic built-in backoff without unhandled rejections.
+- Cap persisted, logged, and returned delivery diagnostic messages at 10,000
+  characters through one non-throwing normalization boundary.
+- Reject every present runtime `channelData` value unless it is a plain own-key
+  JSON object; falsy non-objects can no longer bypass validation.
+- Replace per-recipient publication queries with bulk inserts/selects while
+  preserving recipient order, channel uniqueness, preferences, custom text
+  identifiers, and per-recipient idempotency under concurrent publication.
+- Avoid repeatedly normalizing immutable preference defaults during a batch.
+- Reject PostgreSQL-unsafe NUL and unpaired-surrogate strings in public input
+  and JSON keys/values before mutation. Invalid optional adapter output follows
+  the existing sent-safe diagnostic path, while valid Unicode pairs are kept.
+- Capture the durable finalization timestamp before provider invocation so an
+  application clock callback cannot fail after provider acceptance.
+- Consume exact native logger Promise rejections and time out exact native retry
+  Promises after 100 ms with deterministic fallback and late-rejection handling.
+- Validate exact runtime booleans, configured adapter functions, finite integer
+  limits, identifiers, dates, and complete preference batches before writes.
+- Reserve JSON child-node capacity immediately after `ownKeys`, before child
+  descriptor inspection, so oversized Proxy objects remain bounded.
+- Restrict async logger/retry results to exact same-realm native Node Promises,
+  detected with a hook-free brand check and captured intrinsic verification.
+  Arbitrary thenables are rejected without reading or invoking `then`.
+- Harden `NotificationDeliveryError` options: only omitted or
+  plain/null-prototype records are accepted, a present `retryable` is an exact
+  boolean, and code/message strings are bounded and PostgreSQL-safe.
+- Descriptor-capture constructor configuration, public method wrappers, public
+  arrays, schema-factory options, and preference-resolver input once before any
+  transaction, claim, or provider call, preventing mutable Proxy values from
+  changing after validation.
+- Require configuration/API wrappers and channel-keyed maps to be plain or
+  null-prototype records, rejecting maps, sets, dates, arrays, functions, class
+  instances, accessors, and symbol keys while keeping Drizzle database/schema
+  dependencies opaque.
+- Start the monotonic 100 ms retry-policy deadline before invoking application
+  code and reject values produced after synchronous policy stalls.
+- Observe genuine logger Promises immediately without awaiting them. Ignore
+  invalid logger return values without traversal; synchronous logger callback
+  work remains application-owned.
+- Reject Promise subclasses, cross-realm Promises, custom `PromiseLike` values,
+  and native Promises with own `then`/`constructor` hooks at runtime. Invalid
+  retry results use deterministic fallback.
+- Require exact `Array.prototype` public/JSON arrays with canonical in-range
+  indices only; reject subclasses, exotic prototypes, accessors, index
+  `4294967295`, and every other extra property before mutation.
+- Convert revoked-Proxy inspection failures, including `Array.isArray`, into
+  public `NotificationConfigurationError` values.
+- Capture and bind every retry-isolation intrinsic at module initialization,
+  install native deadline settlement before policy invocation, attach accepted
+  Promise rejection handling before checking post-callback lateness, and remove
+  reliance on mutable public `Promise.race`.
+- Enforce one PostgreSQL-safe `maxAttempts` range of 1 through 2,147,483,647 for
+  core defaults, scalar/per-channel publication, requeue, and claim overflow
+  guards.
+- Classify native retry Promise lateness inside its actual fulfillment or
+  rejection callback using the captured monotonic clock, so event-loop ordering
+  cannot let a settlement after 100 ms beat a starved deadline timer.
+
 ## 0.1.1
 
 - Made delivery claims unique per row and attempt, with durable attempt counts

package/README.md

@@ -150,6 +150,44 @@ const result = await notificationCore.publishAndDispatch({
 `publish()` only persists. `publishAndDispatch()` persists and immediately
 attempts due deliveries. Both use the same durable outbox records.
 
+Publication validates the complete JSON payload before opening its transaction.
+`data`, channel-specific values, and other persisted payload properties must be
+recursive JSON values: cycles, `undefined`, functions, symbols, bigints,
+non-finite numbers, sparse arrays, accessors, and non-plain objects are rejected
+with `NotificationConfigurationError`. TypeScript's `JsonValue` cannot express
+the finite-number restriction, so this is also enforced at runtime. Invalid
+publish input creates no notification or delivery rows.
+
+Every persisted public string and JSON key/value must also be PostgreSQL-safe
+UTF-8 text: NUL and unpaired UTF-16 surrogates are rejected, while valid
+surrogate pairs such as emoji remain supported. Optional actor/entity ids must
+be non-empty strings when present. Runtime booleans are exact booleans; truthy
+or falsy substitutes are not accepted.
+
+Configuration objects, public method option/input wrappers, and channel-keyed
+maps must be plain or null-prototype records. Maps, Sets, Dates, arrays,
+functions, class instances, symbols, and accessor properties are rejected at
+those record boundaries. UNC captures every accepted field and array element
+through its descriptor into an immutable snapshot before opening a transaction
+or invoking a callback, so caller-side getters and later mutations cannot
+change one operation midway through execution. Drizzle database and schema
+objects are opaque values and are not subjected to the plain-record rule.
+Public arrays must use `Array.prototype` directly and contain only canonical
+indices from zero through `2^32 - 2` below their captured length. Subclasses,
+exotic prototypes, accessors, sparse entries, and all extra properties are
+rejected without invoking getters.
+
+Validation is iterative and bounded to 256 nesting levels and 10,000 total JSON
+nodes per checked value. It inspects own property descriptors without invoking
+getters, rejects symbol/non-canonical/extra array properties, and copies accepted
+values through descriptors before persistence. A present `channelData` must be
+a plain own-key JSON object; `null`, `false`, `0`, and empty strings are invalid
+rather than being treated as absence.
+
+Recipients and deliveries are inserted and read in bulk. The number of database
+query waves stays constant as recipient/channel count grows, while returned
+recipients preserve first-seen input order and channels remain unique.
+
 A core constructed with a Drizzle `PgTransaction` is publish-only. This lets an
 application commit its own row and `publish()` atomically. Do not call
 `publishAndDispatch()` or `dispatchDue()` on that core: both fail before writing
@@ -167,6 +205,11 @@ await notificationCore.dispatchDue({
 });
 ```
 
+`dispatchDue()` accepts `limit` from 1 through 1000 and `concurrency` from 1
+through 100. `publishAndDispatch()` accepts the same concurrency range. Runtime
+values must be finite positive integers; invalid values fail before publishing,
+claiming, or calling a provider.
+
 This can run from a cron handler, queue consumer, scheduled function, or an
 application-owned interval. The package starts no timer and exposes no port.
 Concurrent workers claim rows with `FOR UPDATE SKIP LOCKED`; abandoned
@@ -260,6 +303,11 @@ await notificationCore.publish({
 });
 ```
 
+The only accepted runtime policy values are `"respect"` and `"ignore"`.
+Omitting the property defaults to `"respect"`; an explicitly supplied `null`,
+`undefined`, or any other value is a `NotificationConfigurationError` before
+the publication transaction starts.
+
 ## In-app inbox
 
 ```ts
@@ -307,6 +355,13 @@ throw new NotificationDeliveryError(
 );
 ```
 
+`NotificationDeliveryError` accepts omitted options or a plain/null-prototype
+options record. If `retryable` is present it must be an exact boolean; only
+omission defaults it to `true`. The code is trimmed, non-empty, PostgreSQL-safe,
+and at most 191 characters. The message is non-empty, PostgreSQL-safe, and at
+most 10,000 characters. Options are descriptor-captured once before the Error
+is constructed.
+
 Unknown errors are retryable. The default backoff is 1 minute, 5 minutes,
 15 minutes, 1 hour, then 6 hours. Configure `retryDelayMs` and
 `defaultMaxAttempts` for application policy. A failed delivery can be explicitly
@@ -315,11 +370,67 @@ is claimed, before the adapter runs. `requeueDelivery()` preserves that counter
 by default and therefore requires remaining attempt capacity; pass a larger
 `maxAttempts`, or set `resetAttempts: true` to start a new attempt budget.
 Only a `failed` delivery whose notification is not canceled can be requeued.
+Constructor defaults, scalar or per-channel publish overrides, and requeue
+overrides all accept `maxAttempts` from 1 through 2,147,483,647, matching the
+positive PostgreSQL `integer` range. Larger values fail before a transaction or
+claim, and claim predicates prevent `attempts` from overflowing that range.
+
+`retryDelayMs` may return a number or an exact same-realm native Node
+`Promise<number>`. UNC installs the deadline before invoking the policy and
+awaits it inside that boundary for at most 100 ms measured with a trusted
+monotonic clock. Synchronous policy or Promise handling that crosses the
+deadline cannot submit a late value. The resolved value must be finite,
+non-negative, and produce a valid retry timestamp. Synchronous throws,
+asynchronous rejections, never-settling Promises, timeouts, and
+invalid values are consumed and logged before the deterministic built-in
+backoff is used; the provider failure is still durably finalized and never left
+stuck in `processing`. Late policy rejections are consumed. Logger callbacks may
+return `void` or an exact native `Promise<void>`. UNC observes that Promise
+immediately without awaiting it, so rejection is consumed while dispatch remains
+independent. The logger callback itself is synchronous application code and must
+return promptly.
+
+The monotonic clock, timer functions, Promise constructor/prototype/`then`,
+Promise brand check, and required Object/Reflect inspection operations are
+captured and bound when the module initializes. Deadline settlement is installed
+before application policy code runs. For an accepted native Promise, rejection
+handling is attached before UNC checks whether synchronous policy work already
+crossed the deadline. Fulfillment and rejection callbacks read the captured
+monotonic clock before settling the deadline, so a timer starved by blocking
+event-loop work cannot admit a value produced after 100 ms. UNC does not depend
+on mutable public `Promise.race`.
+
+Arbitrary `PromiseLike` values, custom thenables, cross-realm Promises, Promise
+subclasses, and genuine Promises with own `then`/`constructor` hooks are invalid.
+UNC uses Node's hook-free Promise brand check plus the captured exact native
+prototype/intrinsics and never reads or calls an invalid value's `then` property.
+An invalid retry result uses deterministic fallback; an invalid logger result is
+ignored. The caller remains responsible for any rejected Promise hidden inside
+an invalid object.
 
 If a provider callback already has its own durable queue, returning after a
 successful enqueue is correct. UNC then tracks acceptance by that
 queue; provider delivery events may be stored in the adapter's own tables.
 
+After an adapter resolves, provider success is final even if its optional return
+value is malformed. `providerMessageId`, when present, must be a non-empty
+string of at most 10,000 characters. `metadata`, when present, must be a finite
+recursive JSON object under the same rules as publish input. If either field is
+invalid, UNC discards the entire optional adapter result, durably marks the
+delivery `sent`, stores `invalid_adapter_result` diagnostics, and logs the
+problem without invoking the provider again.
+
+Optional adapter strings and metadata must obey the same PostgreSQL-safe string
+contract. Invalid NUL or unpaired-surrogate output is discarded through the
+same sent-safe path. UNC captures the finalization timestamp with the claim,
+before calling the provider, so a later failure in an application-supplied
+`now()` callback cannot turn provider acceptance into a resend risk.
+
+Diagnostic extraction never invokes error getters, `toString`, or coercion
+hooks. Persisted `errorMessage`, logger context, and returned `DispatchResult`
+share one 10,000-character cap, including malformed adapter-result diagnostics;
+unsafe PostgreSQL characters are replaced before the diagnostic is persisted.
+
 ## Idempotency and scheduling
 
 An `idempotencyKey` is unique per recipient. Publishing the same key again

package/dist/core.d.ts

@@ -10,7 +10,7 @@ export type NotificationCoreConfig<TChannel extends string, TData extends JsonOb
     preferenceDefaults?: PreferenceDefaults<TChannel>;
     defaultPreferenceEnabled?: boolean;
     defaultMaxAttempts?: number;
-    retryDelayMs?: (attempt: number, error: unknown) => number;
+    retryDelayMs?: (attempt: number, error: unknown) => number | Promise<number>;
     lockTimeoutMs?: number;
     now?: () => Date;
     logger?: NotificationLogger;

package/dist/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAerE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,mBAAmB,EAEnB,KAAK,gBAAgB,EAErB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EAEf,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB,KAAK,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAE/C,MAAM,MAAM,sBAAsB,CAChC,QAAQ,SAAS,MAAM,EACvB,KAAK,SAAS,UAAU,GAAG,UAAU,IACnC;IACF,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,CAAC,EAAE,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7C,eAAe,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AA0GF,qBAAa,uBAAuB,CAClC,QAAQ,SAAS,MAAM,EACvB,KAAK,SAAS,UAAU,GAAG,UAAU;;gBAgBzB,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC;IAwCrD,OAAO,CACX,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,GACnC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAkO5C,kBAAkB,CACtB,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,EACpC,OAAO,GAAE;QACP,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACjB,GACL,OAAO,CAAC;QACT,SAAS,EAAE,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC7C,CAAC;IAiBI,WAAW,CACf,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACjB,GACL,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IAIrC,aAAa,CACjB,UAAU,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC;IA4DV,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,aAAa,CACxB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAClD,GACA,OAAO,CAAC,IAAI,CAAC;IA+DV,eAAe,CAAC,KAAK,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,QAAQ,GAAG,OAAO,mBAAmB,CAAC;KAChD,GAAG,OAAO,CAAC,OAAO,CAAC;IAyCd,cAAc,CAAC,KAAK,EAAE;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC/B,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IA6C1C,SAAS,CAAC,KAAK,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IA+DvB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2BjD,QAAQ,CAAC,KAAK,EAAE;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBd,OAAO,CAAC,KAAK,EAAE;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBd,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiDhD,eAAe,CAAC,KAAK,EAAE;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,OAAO,CAAC;CA4crB;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,SAAS,MAAM,EACvB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,GAC9C,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAE1C"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAiCrE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,mBAAmB,EAEnB,KAAK,gBAAgB,EAErB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EAEf,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB,KAAK,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAE/C,MAAM,MAAM,sBAAsB,CAChC,QAAQ,SAAS,MAAM,EACvB,KAAK,SAAS,UAAU,GAAG,UAAU,IACnC;IACF,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,CAAC,EAAE,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7C,eAAe,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,CACb,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,KACX,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAodF,qBAAa,uBAAuB,CAClC,QAAQ,SAAS,MAAM,EACvB,KAAK,SAAS,UAAU,GAAG,UAAU;;gBAmBzB,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC;IAyGrD,OAAO,CACX,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,GACnC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;IA4U5C,kBAAkB,CACtB,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,EACpC,OAAO,GAAE;QACP,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACjB,GACL,OAAO,CAAC;QACT,SAAS,EAAE,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC7C,CAAC;IAiCI,WAAW,CACf,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACjB,GACL,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IASrC,aAAa,CACjB,UAAU,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC;IAkEV,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,aAAa,CACxB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAClD,GACA,OAAO,CAAC,IAAI,CAAC;IAgFV,eAAe,CAAC,KAAK,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,QAAQ,GAAG,OAAO,mBAAmB,CAAC;KAChD,GAAG,OAAO,CAAC,OAAO,CAAC;IA8Cd,cAAc,CAAC,KAAK,EAAE;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;KAC/B,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAiD1C,SAAS,CAAC,KAAK,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAyFvB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2BjD,QAAQ,CAAC,KAAK,EAAE;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqCd,OAAO,CAAC,KAAK,EAAE;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqCd,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4DhD,eAAe,CAAC,KAAK,EAAE;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,OAAO,CAAC;CAinBrB;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,SAAS,MAAM,EACvB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,GAC9C,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAE1C"}