@actuate-media/cms-admin 0.27.0 → 0.28.0

package/dist/__tests__/views/security-settings.render.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-settings.render.test.d.ts.map

package/dist/__tests__/views/security-settings.render.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-settings.render.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/views/security-settings.render.test.tsx"],"names":[],"mappings":""}

package/dist/__tests__/views/security-settings.render.test.js

@@ -0,0 +1,175 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @vitest-environment happy-dom
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+// The Security tab reads `/security` (computed posture + summaries + editable
+// policy), saves via PUT `/security`, and revokes sessions via POST.
+let securityData;
+const cmsApi = vi.fn(async (endpoint, options) => {
+    const method = options?.method ?? 'GET';
+    if (endpoint === '/security' && method === 'GET')
+        return { data: securityData, status: 200 };
+    if (endpoint === '/security' && method === 'PUT') {
+        const body = JSON.parse(String(options?.body ?? '{}'));
+        securityData = {
+            ...securityData,
+            settings: {
+                mfa: { required: body.mfa.required, gracePeriodDays: body.mfa.gracePeriodDays },
+                session: { maxConcurrentSessions: body.session.maxConcurrentSessions },
+            },
+        };
+        return { data: securityData, status: 200 };
+    }
+    if (endpoint === '/security/sessions/revoke-all' && method === 'POST')
+        return { data: { revoked: 2 }, status: 200 };
+    return { data: {}, status: 200 };
+});
+vi.mock('../../lib/api.js', () => ({ cmsApi: (e, o) => cmsApi(e, o) }));
+const { SecurityTab } = await import('../../views/settings/SecurityTab.js');
+function baseData(overrides = {}) {
+    return {
+        settings: {
+            mfa: { required: false, gracePeriodDays: 7 },
+            session: { maxConcurrentSessions: 5 },
+        },
+        status: {
+            status: 'needs_attention',
+            score: 88,
+            label: 'Needs attention',
+            description: 'Some recommended controls are missing.',
+            checks: [
+                { key: 'mfa', label: 'MFA coverage', status: 'warning', value: '1 of 2 admins' },
+                { key: 'csrf', label: 'CSRF protection', status: 'pass', value: 'Enabled' },
+            ],
+            warnings: [
+                {
+                    id: 'mfa-not-required',
+                    severity: 'warning',
+                    category: 'auth',
+                    title: 'MFA is not required in production',
+                    description: 'Requiring MFA reduces account-takeover risk.',
+                },
+            ],
+            lastCheckedAt: '2026-06-01T00:00:00.000Z',
+        },
+        users: {
+            totalUsers: 3,
+            totalAdmins: 2,
+            withMfa: 1,
+            withoutMfa: 2,
+            adminsWithoutMfa: 1,
+            inactive: 0,
+        },
+        apiKeys: { active: 1, withoutExpiration: 0, broadScope: 0, staleUnused90d: 0 },
+        secrets: {
+            cmsSecret: 'pass',
+            encryptionKey: 'pass',
+            rateLimitBackend: 'distributed',
+            apiKeysHashed: true,
+            webhookSecretsEncrypted: true,
+        },
+        ipAllowlist: {
+            enabled: false,
+            source: 'none',
+            ranges: [],
+            currentIp: '1.2.3.4',
+            currentIpAllowed: null,
+        },
+        failedLogins24h: 0,
+        activeSessions: 2,
+        csrfEnabled: true,
+        uploadValidation: true,
+        auditEnabled: true,
+        sessionMaxAgeHours: 168,
+        viewerHasMfa: true,
+        environment: 'production',
+        sources: {
+            ipAllowlist: { source: 'config', editable: false },
+            csrf: { source: 'computed', editable: false },
+            rateLimiting: { source: 'environment', editable: false },
+            uploadValidation: { source: 'computed', editable: false },
+            cmsSecret: { source: 'environment', editable: false },
+            encryptionKey: { source: 'environment', editable: false },
+            audit: { source: 'computed', editable: false },
+        },
+        ...overrides,
+    };
+}
+beforeEach(() => {
+    cmsApi.mockClear();
+    securityData = baseData();
+});
+describe('SecurityTab', () => {
+    it('renders the status card and all security sections with a disabled save bar', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        expect(screen.getByText('Authentication & MFA')).toBeTruthy();
+        expect(screen.getByText('Session Policy')).toBeTruthy();
+        expect(screen.getByText('Access & Request Protection')).toBeTruthy();
+        expect(screen.getByText('Secrets, Encryption & Audit')).toBeTruthy();
+        // Status badge + warning surfaced.
+        expect(screen.getByText('Needs attention')).toBeTruthy();
+        expect(screen.getByText('MFA is not required in production')).toBeTruthy();
+        expect(screen.getByRole('button', { name: 'Save Changes' }).disabled).toBe(true);
+    });
+    it('enables Save when concurrent-session cap changes and persists via PUT /security', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        const select = screen.getByLabelText(/Maximum concurrent sessions/);
+        fireEvent.change(select, { target: { value: '3' } });
+        const save = screen.getByRole('button', { name: 'Save Changes' });
+        expect(save.disabled).toBe(false);
+        fireEvent.click(save);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/security', expect.objectContaining({
+            method: 'PUT',
+            body: expect.stringContaining('"maxConcurrentSessions":3'),
+        })));
+    });
+    it('blocks enabling Require MFA (lockout-safe) when the acting admin has no MFA', async () => {
+        securityData = baseData({ viewerHasMfa: false });
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        const toggle = screen.getByRole('switch', {
+            name: 'Require MFA for admin users',
+        });
+        // Toggle is disabled until the admin sets up their own MFA.
+        expect(toggle.disabled).toBe(true);
+        expect(screen.getByText(/Set up MFA on your own account/i)).toBeTruthy();
+    });
+    it('confirms before requiring MFA and then persists it (admin has MFA)', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        fireEvent.click(screen.getByRole('switch', { name: 'Require MFA for admin users' }));
+        // Confirmation dialog appears; nothing saved yet.
+        const confirm = await screen.findByRole('button', { name: 'Require MFA' });
+        fireEvent.click(confirm);
+        const save = screen.getByRole('button', { name: 'Save Changes' });
+        expect(save.disabled).toBe(false);
+        fireEvent.click(save);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/security', expect.objectContaining({
+            method: 'PUT',
+            body: expect.stringContaining('"required":true'),
+        })));
+    });
+    it('revokes other sessions through a confirmation flow', async () => {
+        render(_jsx(SecurityTab, { role: "ADMIN" }));
+        await screen.findByText('Security Status');
+        fireEvent.click(screen.getByRole('button', { name: 'Revoke other sessions' }));
+        const confirm = await screen.findByRole('button', { name: 'Revoke sessions' });
+        fireEvent.click(confirm);
+        await waitFor(() => expect(cmsApi).toHaveBeenCalledWith('/security/sessions/revoke-all', expect.objectContaining({ method: 'POST' })));
+        await screen.findByText('Other sessions revoked.');
+    });
+    it('is read-only for non-admin roles', async () => {
+        render(_jsx(SecurityTab, { role: "EDITOR" }));
+        await screen.findByText('Security Status');
+        expect(screen.getByText(/read-only access/i)).toBeTruthy();
+        const toggle = screen.getByRole('switch', {
+            name: 'Require MFA for admin users',
+        });
+        expect(toggle.disabled).toBe(true);
+        const select = screen.getByLabelText(/Maximum concurrent sessions/);
+        expect(select.disabled).toBe(true);
+    });
+});
+//# sourceMappingURL=security-settings.render.test.js.map

package/dist/__tests__/views/security-settings.render.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-settings.render.test.js","sourceRoot":"","sources":["../../../src/__tests__/views/security-settings.render.test.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAE3E,8EAA8E;AAC9E,qEAAqE;AACrE,IAAI,YAAiB,CAAA;AAErB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,QAAgB,EAAE,OAA6C,EAAE,EAAE;IAC7F,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAA;IACvC,IAAI,QAAQ,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC5F,IAAI,QAAQ,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAA;QACtD,YAAY,GAAG;YACb,GAAG,YAAY;YACf,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;gBAC/E,OAAO,EAAE,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;aACvE;SACF,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC5C,CAAC;IACD,IAAI,QAAQ,KAAK,+BAA+B,IAAI,MAAM,KAAK,MAAM;QACnE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAS,EAAE,CAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;AAEhG,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAA;AAE3E,SAAS,QAAQ,CAAC,YAAqC,EAAE;IACvD,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;YAC5C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE;SACtC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,wCAAwC;YACrD,MAAM,EAAE;gBACN,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE;gBAChF,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;aAC5E;YACD,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,kBAAkB;oBACtB,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,mCAAmC;oBAC1C,WAAW,EAAE,8CAA8C;iBAC5D;aACF;YACD,aAAa,EAAE,0BAA0B;SAC1C;QACD,KAAK,EAAE;YACL,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE,CAAC;SACZ;QACD,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;QAC9E,OAAO,EAAE;YACP,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,aAAa;YAC/B,aAAa,EAAE,IAAI;YACnB,uBAAuB,EAAE,IAAI;SAC9B;QACD,WAAW,EAAE;YACX,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,IAAI;SACvB;QACD,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,kBAAkB,EAAE,GAAG;QACvB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE;YACP,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAClD,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC7C,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;YACxD,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzD,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrD,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzD,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC/C;QACD,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,SAAS,EAAE,CAAA;IAClB,YAAY,GAAG,QAAQ,EAAE,CAAA;AAC3B,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QAEpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC7D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACpE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACpE,mCAAmC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QACxD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1E,MAAM,CACH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAuB,CAAC,QAAQ,CACrF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,6BAA6B,CAAsB,CAAA;QACxF,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAEpD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAsB,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,WAAW,EACX,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,CAAC;SAC3D,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,YAAY,GAAG,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,6BAA6B;SACpC,CAAsB,CAAA;QACvB,4DAA4D;QAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAA;QACpF,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;QAC1E,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAExB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAsB,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAErB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,WAAW,EACX,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;SACjD,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,OAAO,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAA;QAC9E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC9E,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAExB,MAAM,OAAO,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,+BAA+B,EAC/B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC5C,CACF,CAAA;QACD,MAAM,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,CAAC,KAAC,WAAW,IAAC,IAAI,EAAC,QAAQ,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;QAE1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,6BAA6B;SACpC,CAAsB,CAAA;QACvB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,6BAA6B,CAAsB,CAAA;QACxF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}