@actuate-media/cms-admin 0.26.0 → 0.28.0

package/dist/__tests__/views/appearance-settings.render.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appearance-settings.render.test.d.ts.map

package/dist/__tests__/views/appearance-settings.render.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appearance-settings.render.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/views/appearance-settings.render.test.tsx"],"names":[],"mappings":""}

package/dist/__tests__/views/appearance-settings.render.test.js

@@ -0,0 +1,95 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @vitest-environment happy-dom
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+// The Appearance tab reads `/appearance` (settings + resolved brand), then on
+// save read-modify-writes `/globals/settings`. Uploads POST `/media/upload`.
+let appearanceData;
+const cmsApi = vi.fn(async (endpoint, options) => {
+    const method = options?.method ?? 'GET';
+    if (endpoint === '/appearance' && method === 'GET')
+        return { data: appearanceData, status: 200 };
+    if (endpoint === '/globals/settings' && method === 'GET')
+        return { data: { siteTitle: 'Actuate Media' }, status: 200 };
+    if (endpoint === '/globals/settings' && method === 'PUT')
+        return { data: {}, status: 200 };
+    if (endpoint === '/media/upload' && method === 'POST')
+        return {
+            data: { id: 'new-logo', url: 'https://cdn.example.com/x.svg', mimeType: 'image/svg+xml' },
+            status: 200,
+        };
+    return { data: {}, status: 200 };
+});
+vi.mock('../../lib/api.js', () => ({ cmsApi: (e, o) => cmsApi(e, o) }));
+const { AppearanceTab } = await import('../../views/settings/AppearanceTab.js');
+function baseData(overrides = {}) {
+    return {
+        appearance: {
+            adminColorModeDefault: 'system',
+            adminAccentColor: 'purple',
+            sidebarDensity: 'default',
+            contentFont: 'DM Sans',
+            reduceMotion: false,
+        },
+        brand: { mode: 'inheritPublicBrand' },
+        resolved: { admin: { initials: 'AM' } },
+        assets: [],
+        siteTitle: 'Actuate Media',
+        ...overrides,
+    };
+}
+beforeEach(() => {
+    cmsApi.mockClear();
+    appearanceData = baseData();
+});
+describe('AppearanceTab', () => {
+    it('renders the branding/theme/typography cards with a clean (disabled) save bar', async () => {
+        render(_jsx(AppearanceTab, { role: "ADMIN" }));
+        await screen.findByText('Branding');
+        expect(screen.getByText('Admin Theme')).toBeTruthy();
+        expect(screen.getByText('Typography & Motion')).toBeTruthy();
+        expect(screen.getByText('Brand Preview')).toBeTruthy();
+        expect(screen.getByRole('button', { name: 'Save Changes' }).disabled).toBe(true);
+    });
+    it('enables Save when the accent changes and persists appearance to the settings global', async () => {
+        render(_jsx(AppearanceTab, { role: "ADMIN" }));
+        await screen.findByText('Branding');
+        fireEvent.click(screen.getByRole('radio', { name: 'Blue' }));
+        const save = screen.getByRole('button', { name: 'Save Changes' });
+        expect(save.disabled).toBe(false);
+        fireEvent.click(save);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/globals/settings', expect.objectContaining({
+            method: 'PUT',
+            body: expect.stringContaining('"adminAccentColor":"blue"'),
+        })));
+    });
+    it('warns when dark mode is the default but no dark-mode logo is set', async () => {
+        appearanceData = baseData({
+            appearance: {
+                adminColorModeDefault: 'dark',
+                adminAccentColor: 'purple',
+                sidebarDensity: 'default',
+                contentFont: 'DM Sans',
+                reduceMotion: false,
+            },
+        });
+        render(_jsx(AppearanceTab, { role: "ADMIN" }));
+        expect(await screen.findByText(/no dark-mode logo is set/i)).toBeTruthy();
+    });
+    it('uploads a logo through the Media Center and enables Save', async () => {
+        render(_jsx(AppearanceTab, { role: "ADMIN" }));
+        await screen.findByText('Branding');
+        const input = screen.getByLabelText('Primary Logo');
+        const file = new File(['<svg viewBox="0 0 400 100" xmlns="http://www.w3.org/2000/svg"></svg>'], 'logo.svg', { type: 'image/svg+xml' });
+        fireEvent.change(input, { target: { files: [file] } });
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/media/upload', expect.objectContaining({ method: 'POST' })));
+        await waitFor(() => expect(screen.getByRole('button', { name: 'Save Changes' }).disabled).toBe(false));
+    });
+    it('is read-only for non-admins', async () => {
+        render(_jsx(AppearanceTab, { role: "EDITOR" }));
+        expect(await screen.findByText(/read-only access to appearance/i)).toBeTruthy();
+        // Upload control disabled.
+        expect(screen.getByRole('button', { name: /upload primary logo/i }).disabled).toBe(true);
+    });
+});
+//# sourceMappingURL=appearance-settings.render.test.js.map

package/dist/__tests__/views/appearance-settings.render.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appearance-settings.render.test.js","sourceRoot":"","sources":["../../../src/__tests__/views/appearance-settings.render.test.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAE3E,8EAA8E;AAC9E,6EAA6E;AAC7E,IAAI,cAAmB,CAAA;AAEvB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,QAAgB,EAAE,OAA6C,EAAE,EAAE;IAC7F,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAA;IACvC,IAAI,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAChG,IAAI,QAAQ,KAAK,mBAAmB,IAAI,MAAM,KAAK,KAAK;QACtD,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9D,IAAI,QAAQ,KAAK,mBAAmB,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC1F,IAAI,QAAQ,KAAK,eAAe,IAAI,MAAM,KAAK,MAAM;QACnD,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,+BAA+B,EAAE,QAAQ,EAAE,eAAe,EAAE;YACzF,MAAM,EAAE,GAAG;SACZ,CAAA;IACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAS,EAAE,CAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;AAEhG,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAA;AAE/E,SAAS,QAAQ,CAAC,YAAqC,EAAE;IACvD,OAAO;QACL,UAAU,EAAE;YACV,qBAAqB,EAAE,QAAQ;YAC/B,gBAAgB,EAAE,QAAQ;YAC1B,cAAc,EAAE,SAAS;YACzB,WAAW,EAAE,SAAS;YACtB,YAAY,EAAE,KAAK;SACpB;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACrC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACvC,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,eAAe;QAC1B,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,SAAS,EAAE,CAAA;IAClB,cAAc,GAAG,QAAQ,EAAE,CAAA;AAC7B,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,CAAC,KAAC,aAAa,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QAEtC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACpD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC5D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACtD,MAAM,CACH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAuB,CAAC,QAAQ,CACrF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,CAAC,KAAC,aAAa,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QAEnC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAsB,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEjC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,mBAAmB,EACnB,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,CAAC;SAC3D,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,cAAc,GAAG,QAAQ,CAAC;YACxB,UAAU,EAAE;gBACV,qBAAqB,EAAE,MAAM;gBAC7B,gBAAgB,EAAE,QAAQ;gBAC1B,cAAc,EAAE,SAAS;gBACzB,WAAW,EAAE,SAAS;gBACtB,YAAY,EAAE,KAAK;aACpB;SACF,CAAC,CAAA;QACF,MAAM,CAAC,KAAC,aAAa,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QAEtC,MAAM,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,KAAC,aAAa,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QAEnC,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,cAAc,CAAqB,CAAA;QACvE,MAAM,IAAI,GAAG,IAAI,IAAI,CACnB,CAAC,sEAAsE,CAAC,EACxE,UAAU,EACV,EAAE,IAAI,EAAE,eAAe,EAAE,CAC1B,CAAA;QACD,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;QAEtD,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,eAAe,EACf,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC5C,CACF,CAAA;QACD,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CACH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAuB,CAAC,QAAQ,CACrF,CAAC,IAAI,CAAC,KAAK,CAAC,CACd,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,CAAC,KAAC,aAAa,IAAC,IAAI,EAAC,QAAQ,GAAG,CAAC,CAAA;QAEvC,MAAM,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC/E,2BAA2B;QAC3B,MAAM,CACH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAuB,CAAC,QAAQ,CAC7F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/views/security-settings.render.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-settings.render.test.d.ts.map

package/dist/__tests__/views/security-settings.render.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-settings.render.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/views/security-settings.render.test.tsx"],"names":[],"mappings":""}

package/dist/__tests__/views/security-settings.render.test.js

@@ -0,0 +1,175 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @vitest-environment happy-dom
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+// The Security tab reads `/security` (computed posture + summaries + editable
+// policy), saves via PUT `/security`, and revokes sessions via POST.
+let securityData;
+const cmsApi = vi.fn(async (endpoint, options) => {
+    const method = options?.method ?? 'GET';
+    if (endpoint === '/security' && method === 'GET')
+        return { data: securityData, status: 200 };
+    if (endpoint === '/security' && method === 'PUT') {
+        const body = JSON.parse(String(options?.body ?? '{}'));
+        securityData = {
+            ...securityData,
+            settings: {
+                mfa: { required: body.mfa.required, gracePeriodDays: body.mfa.gracePeriodDays },
+                session: { maxConcurrentSessions: body.session.maxConcurrentSessions },
+            },
+        };
+        return { data: securityData, status: 200 };
+    }
+    if (endpoint === '/security/sessions/revoke-all' && method === 'POST')
+        return { data: { revoked: 2 }, status: 200 };
+    return { data: {}, status: 200 };
+});
+vi.mock('../../lib/api.js', () => ({ cmsApi: (e, o) => cmsApi(e, o) }));
+const { SecurityTab } = await import('../../views/settings/SecurityTab.js');
+function baseData(overrides = {}) {
+    return {
+        settings: {
+            mfa: { required: false, gracePeriodDays: 7 },
+            session: { maxConcurrentSessions: 5 },
+        },
+        status: {
+            status: 'needs_attention',
+            score: 88,
+            label: 'Needs attention',
+            description: 'Some recommended controls are missing.',
+            checks: [
+                { key: 'mfa', label: 'MFA coverage', status: 'warning', value: '1 of 2 admins' },
+                { key: 'csrf', label: 'CSRF protection', status: 'pass', value: 'Enabled' },
+            ],
+            warnings: [
+                {
+                    id: 'mfa-not-required',
+                    severity: 'warning',
+                    category: 'auth',
+                    title: 'MFA is not required in production',
+                    description: 'Requiring MFA reduces account-takeover risk.',
+                },
+            ],
+            lastCheckedAt: '2026-06-01T00:00:00.000Z',
+        },
+        users: {
+            totalUsers: 3,
+            totalAdmins: 2,
+            withMfa: 1,
+            withoutMfa: 2,
+            adminsWithoutMfa: 1,
+            inactive: 0,
+        },
+        apiKeys: { active: 1, withoutExpiration: 0, broadScope: 0, staleUnused90d: 0 },
+        secrets: {
+            cmsSecret: 'pass',
+            encryptionKey: 'pass',
+            rateLimitBackend: 'distributed',
+            apiKeysHashed: true,
+            webhookSecretsEncrypted: true,
+        },
+        ipAllowlist: {
+            enabled: false,
+            source: 'none',
+            ranges: [],
+            currentIp: '1.2.3.4',
+            currentIpAllowed: null,
+        },
+        failedLogins24h: 0,
+        activeSessions: 2,
+        csrfEnabled: true,
+        uploadValidation: true,
+        auditEnabled: true,
+        sessionMaxAgeHours: 168,
+        viewerHasMfa: true,
+        environment: 'production',
+        sources: {
+            ipAllowlist: { source: 'config', editable: false },
+            csrf: { source: 'computed', editable: false },
+            rateLimiting: { source: 'environment', editable: false },
+            uploadValidation: { source: 'computed', editable: false },
+            cmsSecret: { source: 'environment', editable: false },
+            encryptionKey: { source: 'environment', editable: false },
+            audit: { source: 'computed', editable: false },
+        },
+        ...overrides,
+    };
+}
+beforeEach(() => {
+    cmsApi.mockClear();
+    securityData = baseData();
+});
+describe('SecurityTab', () => {
+    it('renders the status card and all security sections with a disabled save bar', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        expect(screen.getByText('Authentication & MFA')).toBeTruthy();
+        expect(screen.getByText('Session Policy')).toBeTruthy();
+        expect(screen.getByText('Access & Request Protection')).toBeTruthy();
+        expect(screen.getByText('Secrets, Encryption & Audit')).toBeTruthy();
+        // Status badge + warning surfaced.
+        expect(screen.getByText('Needs attention')).toBeTruthy();
+        expect(screen.getByText('MFA is not required in production')).toBeTruthy();
+        expect(screen.getByRole('button', { name: 'Save Changes' }).disabled).toBe(true);
+    });
+    it('enables Save when concurrent-session cap changes and persists via PUT /security', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        const select = screen.getByLabelText(/Maximum concurrent sessions/);
+        fireEvent.change(select, { target: { value: '3' } });
+        const save = screen.getByRole('button', { name: 'Save Changes' });
+        expect(save.disabled).toBe(false);
+        fireEvent.click(save);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/security', expect.objectContaining({
+            method: 'PUT',
+            body: expect.stringContaining('"maxConcurrentSessions":3'),
+        })));
+    });
+    it('blocks enabling Require MFA (lockout-safe) when the acting admin has no MFA', async () => {
+        securityData = baseData({ viewerHasMfa: false });
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        const toggle = screen.getByRole('switch', {
+            name: 'Require MFA for admin users',
+        });
+        // Toggle is disabled until the admin sets up their own MFA.
+        expect(toggle.disabled).toBe(true);
+        expect(screen.getByText(/Set up MFA on your own account/i)).toBeTruthy();
+    });
+    it('confirms before requiring MFA and then persists it (admin has MFA)', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        fireEvent.click(screen.getByRole('switch', { name: 'Require MFA for admin users' }));
+        // Confirmation dialog appears; nothing saved yet.
+        const confirm = await screen.findByRole('button', { name: 'Require MFA' });
+        fireEvent.click(confirm);
+        const save = screen.getByRole('button', { name: 'Save Changes' });
+        expect(save.disabled).toBe(false);
+        fireEvent.click(save);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/security', expect.objectContaining({
+            method: 'PUT',
+            body: expect.stringContaining('"required":true'),
+        })));
+    });
+    it('revokes other sessions through a confirmation flow', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        fireEvent.click(screen.getByRole('button', { name: 'Revoke other sessions' }));
+        const confirm = await screen.findByRole('button', { name: 'Revoke sessions' });
+        fireEvent.click(confirm);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/security/sessions/revoke-all', expect.objectContaining({ method: 'POST' })));
+        await screen.findByText('Other sessions revoked.');
+    });
+    it('is read-only for non-admin roles', async () => {
+        render(_jsx(SecurityTab, { role: "EDITOR" }));
+        await screen.findByText('Security Status');
+        expect(screen.getByText(/read-only access/i)).toBeTruthy();
+        const toggle = screen.getByRole('switch', {
+            name: 'Require MFA for admin users',
+        });
+        expect(toggle.disabled).toBe(true);
+        const select = screen.getByLabelText(/Maximum concurrent sessions/);
+        expect(select.disabled).toBe(true);
+    });
+});
+//# sourceMappingURL=security-settings.render.test.js.map

package/dist/__tests__/views/security-settings.render.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-settings.render.test.js","sourceRoot":"","sources":["../../../src/__tests__/views/security-settings.render.test.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAE3E,8EAA8E;AAC9E,qEAAqE;AACrE,IAAI,YAAiB,CAAA;AAErB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,QAAgB,EAAE,OAA6C,EAAE,EAAE;IAC7F,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAA;IACvC,IAAI,QAAQ,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC5F,IAAI,QAAQ,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAA;QACtD,YAAY,GAAG;YACb,GAAG,YAAY;YACf,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;gBAC/E,OAAO,EAAE,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;aACvE;SACF,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC5C,CAAC;IACD,IAAI,QAAQ,KAAK,+BAA+B,IAAI,MAAM,KAAK,MAAM;QACnE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAS,EAAE,CAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;AAEhG,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAA;AAE3E,SAAS,QAAQ,CAAC,YAAqC,EAAE;IACvD,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;YAC5C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE;SACtC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,wCAAwC;YACrD,MAAM,EAAE;gBACN,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE;gBAChF,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;aAC5E;YACD,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,kBAAkB;oBACtB,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,mCAAmC;oBAC1C,WAAW,EAAE,8CAA8C;iBAC5D;aACF;YACD,aAAa,EAAE,0BAA0B;SAC1C;QACD,KAAK,EAAE;YACL,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE,CAAC;SACZ;QACD,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;QAC9E,OAAO,EAAE;YACP,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,aAAa;YAC/B,aAAa,EAAE,IAAI;YACnB,uBAAuB,EAAE,IAAI;SAC9B;QACD,WAAW,EAAE;YACX,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,IAAI;SACvB;QACD,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,kBAAkB,EAAE,GAAG;QACvB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE;YACP,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAClD,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC7C,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;YACxD,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzD,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrD,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzD,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC/C;QACD,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,SAAS,EAAE,CAAA;IAClB,YAAY,GAAG,QAAQ,EAAE,CAAA;AAC3B,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QAEpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC7D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACpE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACpE,mCAAmC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACxD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1E,MAAM,CACH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAuB,CAAC,QAAQ,CACrF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,6BAA6B,CAAsB,CAAA;QACxF,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAEpD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAsB,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,WAAW,EACX,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,CAAC;SAC3D,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,YAAY,GAAG,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,6BAA6B;SACpC,CAAsB,CAAA;QACvB,4DAA4D;QAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAA;QACpF,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;QAC1E,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAExB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAsB,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,WAAW,EACX,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;SACjD,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAA;QAC9E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC9E,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAExB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,+BAA+B,EAC/B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC5C,CACF,CAAA;QACD,MAAM,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,QAAQ,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,6BAA6B;SACpC,CAAsB,CAAA;QACvB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,6BAA6B,CAAsB,CAAA;QACxF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}