@demiurgejs/core 0.2.0-beta.3 → 0.2.0-beta.5

package/dist/chunks/session-store-ChModVcq.js

@@ -0,0 +1,92 @@
+function N(e) {
+  const r = e.entries ?? /* @__PURE__ */ new Map(), f = A(e.namespace), i = (t) => `${f}:${t}`;
+  return {
+    create(t) {
+      const s = i(t.id);
+      if (r.has(s))
+        return { status: "conflict" };
+      const n = a(t, 0);
+      return r.set(s, n), { record: u(n), status: "stored" };
+    },
+    destroy(t) {
+      return r.delete(i(t));
+    },
+    read(t, s) {
+      const n = i(t), o = r.get(n);
+      if (o) {
+        if (S(o, s)) {
+          r.delete(n);
+          return;
+        }
+        return u(o);
+      }
+    },
+    rotate(t, s, n) {
+      const o = i(t), c = i(s.id), g = r.get(o);
+      if (!g || g.version !== n || c !== o && r.has(c))
+        return { status: "conflict" };
+      const y = a(s, n + 1);
+      return r.delete(o), r.set(c, y), { record: u(y), status: "stored" };
+    },
+    update(t, s) {
+      const n = i(t.id), o = r.get(n);
+      if (!o || o.version !== s)
+        return { status: "conflict" };
+      const c = a(t, s + 1);
+      return r.set(n, c), { record: u(c), status: "stored" };
+    }
+  };
+}
+function x(e) {
+  if (!(!h(e) || !d(e.createdAt) || !d(e.expiresAt) || typeof e.id != "string" || e.id.length === 0 || !b(e.version) || e.idleExpiresAt !== void 0 && !d(e.idleExpiresAt) || !p(e.data)))
+    return e;
+}
+function d(e) {
+  return typeof e == "number" && Number.isSafeInteger(e) && e >= 0;
+}
+function b(e) {
+  return typeof e == "number" && Number.isSafeInteger(e) && e >= 0;
+}
+function p(e) {
+  return e === null || typeof e == "boolean" || typeof e == "string" ? !0 : typeof e == "number" ? Number.isFinite(e) : Array.isArray(e) ? e.every(p) : h(e) && Object.values(e).every(p);
+}
+function h(e) {
+  return typeof e == "object" && e !== null && !Array.isArray(e);
+}
+function A(e) {
+  const r = m("app", e.app), f = m(
+    "environment",
+    e.environment
+  );
+  if (typeof e.schemaVersion == "number" && (!Number.isInteger(e.schemaVersion) || e.schemaVersion < 0))
+    throw new Error(
+      "Demiurge session namespace schemaVersion must be a non-negative integer or string."
+    );
+  const i = m(
+    "schemaVersion",
+    String(e.schemaVersion)
+  );
+  return [r, f, i].map(encodeURIComponent).join(":");
+}
+function m(e, r) {
+  if (r.length === 0 || r.trim() !== r)
+    throw new Error(
+      `Demiurge session namespace ${e} must be a non-empty value without leading or trailing whitespace.`
+    );
+  return r;
+}
+function S(e, r) {
+  return e.expiresAt <= r || e.idleExpiresAt !== void 0 && e.idleExpiresAt <= r;
+}
+function a(e, r) {
+  return u({ ...e, version: r });
+}
+function u(e) {
+  return structuredClone(e);
+}
+export {
+  N as c,
+  x as p,
+  A as s
+};
+//# sourceMappingURL=session-store-ChModVcq.js.map

package/dist/chunks/session-store-ChModVcq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store-ChModVcq.js","sources":["../../src/security/session-store.ts"],"sourcesContent":["export type SessionPrimitive = boolean | null | number | string;\n\nexport type SessionData =\n  | SessionPrimitive\n  | { readonly [key: string]: SessionData }\n  | readonly SessionData[];\n\nexport type SessionNamespace = {\n  app: string;\n  environment: string;\n  schemaVersion: number | string;\n};\n\nexport type SessionRecord<TData extends SessionData = SessionData> = {\n  createdAt: number;\n  data: TData;\n  expiresAt: number;\n  id: string;\n  idleExpiresAt?: number;\n  version: number;\n};\n\nexport type SessionStoreCandidate<TData extends SessionData = SessionData> =\n  Omit<SessionRecord<TData>, \"version\">;\n\nexport type SessionStoreWriteResult<TData extends SessionData = SessionData> =\n  | { record: SessionRecord<TData>; status: \"stored\" }\n  | { status: \"conflict\" }\n  | { status: \"unavailable\" };\n\ntype MaybePromise<T> = T | Promise<T>;\n\nexport type SessionStore<TData extends SessionData = SessionData> = {\n  create: (\n    candidate: SessionStoreCandidate<TData>,\n  ) => MaybePromise<SessionStoreWriteResult<TData>>;\n  destroy: (id: string) => MaybePromise<boolean>;\n  read: (\n    id: string,\n    now: number,\n  ) => MaybePromise<SessionRecord<TData> | undefined>;\n  rotate: (\n    currentId: string,\n    candidate: SessionStoreCandidate<TData>,\n    expectedVersion: number,\n  ) => MaybePromise<SessionStoreWriteResult<TData>>;\n  update: (\n    candidate: SessionStoreCandidate<TData>,\n    expectedVersion: number,\n  ) => MaybePromise<SessionStoreWriteResult<TData>>;\n};\n\nexport type MemorySessionStoreOptions<\n  TData extends SessionData = SessionData,\n> = {\n  entries?: Map<string, SessionRecord<TData>>;\n  namespace: SessionNamespace;\n};\n\nexport function createMemorySessionStore<\n  TData extends SessionData = SessionData,\n>(options: MemorySessionStoreOptions<TData>): SessionStore<TData> {\n  const entries = options.entries ?? new Map<string, SessionRecord<TData>>();\n  const namespace = serializeSessionNamespace(options.namespace);\n  const key = (id: string) => `${namespace}:${id}`;\n\n  return {\n    create(candidate) {\n      const storageKey = key(candidate.id);\n\n      if (entries.has(storageKey)) {\n        return { status: \"conflict\" };\n      }\n\n      const record = toRecord(candidate, 0);\n      entries.set(storageKey, record);\n      return { record: cloneRecord(record), status: \"stored\" };\n    },\n    destroy(id) {\n      return entries.delete(key(id));\n    },\n    read(id, now) {\n      const storageKey = key(id);\n      const record = entries.get(storageKey);\n\n      if (!record) {\n        return undefined;\n      }\n\n      if (isExpired(record, now)) {\n        entries.delete(storageKey);\n        return undefined;\n      }\n\n      return cloneRecord(record);\n    },\n    rotate(currentId, candidate, expectedVersion) {\n      const currentKey = key(currentId);\n      const nextKey = key(candidate.id);\n      const current = entries.get(currentKey);\n\n      if (\n        !current ||\n        current.version !== expectedVersion ||\n        (nextKey !== currentKey && entries.has(nextKey))\n      ) {\n        return { status: \"conflict\" };\n      }\n\n      const record = toRecord(candidate, expectedVersion + 1);\n      entries.delete(currentKey);\n      entries.set(nextKey, record);\n      return { record: cloneRecord(record), status: \"stored\" };\n    },\n    update(candidate, expectedVersion) {\n      const storageKey = key(candidate.id);\n      const current = entries.get(storageKey);\n\n      if (!current || current.version !== expectedVersion) {\n        return { status: \"conflict\" };\n      }\n\n      const record = toRecord(candidate, expectedVersion + 1);\n      entries.set(storageKey, record);\n      return { record: cloneRecord(record), status: \"stored\" };\n    },\n  };\n}\n\n/**\n * Validates that an untrusted parsed value conforms to the `SessionRecord`\n * envelope before it is trusted as a session. Backend session stores read\n * raw JSON from shared infrastructure (KV, Redis) that a corrupted entry,\n * manual edit, or deployment version skew could have produced, so the shape\n * must be proven rather than assumed. Mirrors the validation cookie-session\n * applies to its own decoded payloads.\n */\nexport function parseSessionRecord<TData extends SessionData = SessionData>(\n  value: unknown,\n): SessionRecord<TData> | undefined {\n  if (\n    !isObject(value) ||\n    !isSafeTimestamp(value.createdAt) ||\n    !isSafeTimestamp(value.expiresAt) ||\n    typeof value.id !== \"string\" ||\n    value.id.length === 0 ||\n    !isNonNegativeInteger(value.version) ||\n    (value.idleExpiresAt !== undefined &&\n      !isSafeTimestamp(value.idleExpiresAt)) ||\n    !isSessionData(value.data)\n  ) {\n    return undefined;\n  }\n\n  // TYPE-EVIDENCE: validation above proves each field and the recursive session data shape.\n  return value as SessionRecord<TData>;\n}\n\nfunction isSafeTimestamp(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction isNonNegativeInteger(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction isSessionData(value: unknown): value is SessionData {\n  if (\n    value === null ||\n    typeof value === \"boolean\" ||\n    typeof value === \"string\"\n  ) {\n    return true;\n  }\n\n  if (typeof value === \"number\") {\n    return Number.isFinite(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.every(isSessionData);\n  }\n\n  return isObject(value) && Object.values(value).every(isSessionData);\n}\n\nfunction isObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nexport function serializeSessionNamespace(namespace: SessionNamespace) {\n  const app = validateNamespacePart(\"app\", namespace.app);\n  const environment = validateNamespacePart(\n    \"environment\",\n    namespace.environment,\n  );\n\n  if (\n    typeof namespace.schemaVersion === \"number\" &&\n    (!Number.isInteger(namespace.schemaVersion) || namespace.schemaVersion < 0)\n  ) {\n    throw new Error(\n      \"Demiurge session namespace schemaVersion must be a non-negative integer or string.\",\n    );\n  }\n\n  const schemaVersion = validateNamespacePart(\n    \"schemaVersion\",\n    String(namespace.schemaVersion),\n  );\n\n  return [app, environment, schemaVersion].map(encodeURIComponent).join(\":\");\n}\n\nfunction validateNamespacePart(name: string, value: string) {\n  if (value.length === 0 || value.trim() !== value) {\n    throw new Error(\n      `Demiurge session namespace ${name} must be a non-empty value without leading or trailing whitespace.`,\n    );\n  }\n\n  return value;\n}\n\nfunction isExpired(record: SessionRecord, now: number) {\n  return record.expiresAt <= now ||\n    (record.idleExpiresAt !== undefined && record.idleExpiresAt <= now);\n}\n\nfunction toRecord<TData extends SessionData>(\n  candidate: SessionStoreCandidate<TData>,\n  version: number,\n): SessionRecord<TData> {\n  return cloneRecord({ ...candidate, version });\n}\n\nfunction cloneRecord<TData extends SessionData>(\n  record: SessionRecord<TData>,\n): SessionRecord<TData> {\n  return structuredClone(record);\n}\n"],"names":["createMemorySessionStore","options","entries","namespace","serializeSessionNamespace","key","id","candidate","storageKey","record","toRecord","cloneRecord","now","isExpired","currentId","expectedVersion","currentKey","nextKey","current","parseSessionRecord","value","isObject","isSafeTimestamp","isNonNegativeInteger","isSessionData","app","validateNamespacePart","environment","schemaVersion","name","version"],"mappings":"AA2DO,SAASA,EAEdC,GAAgE;AAChE,QAAMC,IAAUD,EAAQ,WAAW,oBAAI,IAAA,GACjCE,IAAYC,EAA0BH,EAAQ,SAAS,GACvDI,IAAM,CAACC,MAAe,GAAGH,CAAS,IAAIG,CAAE;AAE9C,SAAO;AAAA,IACL,OAAOC,GAAW;AAChB,YAAMC,IAAaH,EAAIE,EAAU,EAAE;AAEnC,UAAIL,EAAQ,IAAIM,CAAU;AACxB,eAAO,EAAE,QAAQ,WAAA;AAGnB,YAAMC,IAASC,EAASH,GAAW,CAAC;AACpC,aAAAL,EAAQ,IAAIM,GAAYC,CAAM,GACvB,EAAE,QAAQE,EAAYF,CAAM,GAAG,QAAQ,SAAA;AAAA,IAChD;AAAA,IACA,QAAQH,GAAI;AACV,aAAOJ,EAAQ,OAAOG,EAAIC,CAAE,CAAC;AAAA,IAC/B;AAAA,IACA,KAAKA,GAAIM,GAAK;AACZ,YAAMJ,IAAaH,EAAIC,CAAE,GACnBG,IAASP,EAAQ,IAAIM,CAAU;AAErC,UAAKC,GAIL;AAAA,YAAII,EAAUJ,GAAQG,CAAG,GAAG;AAC1B,UAAAV,EAAQ,OAAOM,CAAU;AACzB;AAAA,QACF;AAEA,eAAOG,EAAYF,CAAM;AAAA;AAAA,IAC3B;AAAA,IACA,OAAOK,GAAWP,GAAWQ,GAAiB;AAC5C,YAAMC,IAAaX,EAAIS,CAAS,GAC1BG,IAAUZ,EAAIE,EAAU,EAAE,GAC1BW,IAAUhB,EAAQ,IAAIc,CAAU;AAEtC,UACE,CAACE,KACDA,EAAQ,YAAYH,KACnBE,MAAYD,KAAcd,EAAQ,IAAIe,CAAO;AAE9C,eAAO,EAAE,QAAQ,WAAA;AAGnB,YAAMR,IAASC,EAASH,GAAWQ,IAAkB,CAAC;AACtD,aAAAb,EAAQ,OAAOc,CAAU,GACzBd,EAAQ,IAAIe,GAASR,CAAM,GACpB,EAAE,QAAQE,EAAYF,CAAM,GAAG,QAAQ,SAAA;AAAA,IAChD;AAAA,IACA,OAAOF,GAAWQ,GAAiB;AACjC,YAAMP,IAAaH,EAAIE,EAAU,EAAE,GAC7BW,IAAUhB,EAAQ,IAAIM,CAAU;AAEtC,UAAI,CAACU,KAAWA,EAAQ,YAAYH;AAClC,eAAO,EAAE,QAAQ,WAAA;AAGnB,YAAMN,IAASC,EAASH,GAAWQ,IAAkB,CAAC;AACtD,aAAAb,EAAQ,IAAIM,GAAYC,CAAM,GACvB,EAAE,QAAQE,EAAYF,CAAM,GAAG,QAAQ,SAAA;AAAA,IAChD;AAAA,EAAA;AAEJ;AAUO,SAASU,EACdC,GACkC;AAClC,MACE,GAACC,EAASD,CAAK,KACf,CAACE,EAAgBF,EAAM,SAAS,KAChC,CAACE,EAAgBF,EAAM,SAAS,KAChC,OAAOA,EAAM,MAAO,YACpBA,EAAM,GAAG,WAAW,KACpB,CAACG,EAAqBH,EAAM,OAAO,KAClCA,EAAM,kBAAkB,UACvB,CAACE,EAAgBF,EAAM,aAAa,KACtC,CAACI,EAAcJ,EAAM,IAAI;AAM3B,WAAOA;AACT;AAEA,SAASE,EAAgBF,GAAiC;AACxD,SAAO,OAAOA,KAAU,YAAY,OAAO,cAAcA,CAAK,KAAKA,KAAS;AAC9E;AAEA,SAASG,EAAqBH,GAAiC;AAC7D,SAAO,OAAOA,KAAU,YAAY,OAAO,cAAcA,CAAK,KAAKA,KAAS;AAC9E;AAEA,SAASI,EAAcJ,GAAsC;AAC3D,SACEA,MAAU,QACV,OAAOA,KAAU,aACjB,OAAOA,KAAU,WAEV,KAGL,OAAOA,KAAU,WACZ,OAAO,SAASA,CAAK,IAG1B,MAAM,QAAQA,CAAK,IACdA,EAAM,MAAMI,CAAa,IAG3BH,EAASD,CAAK,KAAK,OAAO,OAAOA,CAAK,EAAE,MAAMI,CAAa;AACpE;AAEA,SAASH,EAASD,GAAkD;AAClE,SAAO,OAAOA,KAAU,YAAYA,MAAU,QAAQ,CAAC,MAAM,QAAQA,CAAK;AAC5E;AAEO,SAAShB,EAA0BD,GAA6B;AACrE,QAAMsB,IAAMC,EAAsB,OAAOvB,EAAU,GAAG,GAChDwB,IAAcD;AAAA,IAClB;AAAA,IACAvB,EAAU;AAAA,EAAA;AAGZ,MACE,OAAOA,EAAU,iBAAkB,aAClC,CAAC,OAAO,UAAUA,EAAU,aAAa,KAAKA,EAAU,gBAAgB;AAEzE,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,QAAMyB,IAAgBF;AAAA,IACpB;AAAA,IACA,OAAOvB,EAAU,aAAa;AAAA,EAAA;AAGhC,SAAO,CAACsB,GAAKE,GAAaC,CAAa,EAAE,IAAI,kBAAkB,EAAE,KAAK,GAAG;AAC3E;AAEA,SAASF,EAAsBG,GAAcT,GAAe;AAC1D,MAAIA,EAAM,WAAW,KAAKA,EAAM,KAAA,MAAWA;AACzC,UAAM,IAAI;AAAA,MACR,8BAA8BS,CAAI;AAAA,IAAA;AAItC,SAAOT;AACT;AAEA,SAASP,EAAUJ,GAAuBG,GAAa;AACrD,SAAOH,EAAO,aAAaG,KACxBH,EAAO,kBAAkB,UAAaA,EAAO,iBAAiBG;AACnE;AAEA,SAASF,EACPH,GACAuB,GACsB;AACtB,SAAOnB,EAAY,EAAE,GAAGJ,GAAW,SAAAuB,GAAS;AAC9C;AAEA,SAASnB,EACPF,GACsB;AACtB,SAAO,gBAAgBA,CAAM;AAC/B;"}

package/dist/chunks/static-files-ehaD1kE7.js

@@ -0,0 +1,51 @@
+const e = /-[A-Za-z0-9_-]{8,}\.[A-Za-z0-9]+$/, s = "public, max-age=31536000, immutable", n = "public, max-age=0, must-revalidate";
+function p(t) {
+  return e.test(t);
+}
+const i = "application/octet-stream", o = {
+  ".avif": "image/avif",
+  ".css": "text/css; charset=utf-8",
+  ".eot": "application/vnd.ms-fontobject",
+  ".gif": "image/gif",
+  ".gz": "application/gzip",
+  ".html": "text/html; charset=utf-8",
+  ".ico": "image/x-icon",
+  ".jpeg": "image/jpeg",
+  ".jpg": "image/jpeg",
+  ".js": "text/javascript; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".map": "application/json; charset=utf-8",
+  ".mjs": "text/javascript; charset=utf-8",
+  ".mp3": "audio/mpeg",
+  ".mp4": "video/mp4",
+  ".ogg": "audio/ogg",
+  ".ogv": "video/ogg",
+  ".otf": "font/otf",
+  ".pdf": "application/pdf",
+  ".png": "image/png",
+  ".svg": "image/svg+xml",
+  ".ttf": "font/ttf",
+  ".txt": "text/plain; charset=utf-8",
+  ".vtt": "text/vtt; charset=utf-8",
+  ".wasm": "application/wasm",
+  ".wav": "audio/wav",
+  ".webm": "video/webm",
+  ".webmanifest": "application/manifest+json",
+  ".webp": "image/webp",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".xml": "application/xml; charset=utf-8"
+};
+function c(t) {
+  const a = t.toLowerCase();
+  return o[a.startsWith(".") ? a : `.${a}`] ?? i;
+}
+export {
+  e as C,
+  i as D,
+  s as I,
+  n as R,
+  c,
+  p as i
+};
+//# sourceMappingURL=static-files-ehaD1kE7.js.map

package/dist/chunks/static-files-ehaD1kE7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-files-ehaD1kE7.js","sources":["../../src/static-files.ts"],"sourcesContent":["export const CONTENT_HASHED_FILE_NAME_PATTERN =\n  /-[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9]+$/;\n\nexport const IMMUTABLE_FILE_CACHE_CONTROL =\n  \"public, max-age=31536000, immutable\";\n\nexport const REVALIDATED_FILE_CACHE_CONTROL =\n  \"public, max-age=0, must-revalidate\";\n\nexport function isContentHashedFileName(fileName: string) {\n  return CONTENT_HASHED_FILE_NAME_PATTERN.test(fileName);\n}\n\nexport const DEFAULT_CONTENT_TYPE = \"application/octet-stream\";\n\nconst CONTENT_TYPES_BY_EXTENSION: Record<string, string> = {\n  \".avif\": \"image/avif\",\n  \".css\": \"text/css; charset=utf-8\",\n  \".eot\": \"application/vnd.ms-fontobject\",\n  \".gif\": \"image/gif\",\n  \".gz\": \"application/gzip\",\n  \".html\": \"text/html; charset=utf-8\",\n  \".ico\": \"image/x-icon\",\n  \".jpeg\": \"image/jpeg\",\n  \".jpg\": \"image/jpeg\",\n  \".js\": \"text/javascript; charset=utf-8\",\n  \".json\": \"application/json; charset=utf-8\",\n  \".map\": \"application/json; charset=utf-8\",\n  \".mjs\": \"text/javascript; charset=utf-8\",\n  \".mp3\": \"audio/mpeg\",\n  \".mp4\": \"video/mp4\",\n  \".ogg\": \"audio/ogg\",\n  \".ogv\": \"video/ogg\",\n  \".otf\": \"font/otf\",\n  \".pdf\": \"application/pdf\",\n  \".png\": \"image/png\",\n  \".svg\": \"image/svg+xml\",\n  \".ttf\": \"font/ttf\",\n  \".txt\": \"text/plain; charset=utf-8\",\n  \".vtt\": \"text/vtt; charset=utf-8\",\n  \".wasm\": \"application/wasm\",\n  \".wav\": \"audio/wav\",\n  \".webm\": \"video/webm\",\n  \".webmanifest\": \"application/manifest+json\",\n  \".webp\": \"image/webp\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".xml\": \"application/xml; charset=utf-8\",\n};\n\n/**\n * Resolves the content type for a file extension, with or without the leading\n * dot and in any letter case.\n *\n * The table covers the common web asset extensions and is not exhaustive by\n * design. `application/octet-stream` is the correct answer for anything the\n * table does not name, so an unlisted extension is a safe result rather than a\n * defect. Responses that carry this value are served with `nosniff`, which\n * keeps an unknown body from being interpreted as an executable type.\n */\nexport function contentTypeForExtension(extension: string): string {\n  const normalized = extension.toLowerCase();\n\n  return (\n    CONTENT_TYPES_BY_EXTENSION[\n      normalized.startsWith(\".\") ? normalized : `.${normalized}`\n    ] ?? DEFAULT_CONTENT_TYPE\n  );\n}\n"],"names":["CONTENT_HASHED_FILE_NAME_PATTERN","IMMUTABLE_FILE_CACHE_CONTROL","REVALIDATED_FILE_CACHE_CONTROL","isContentHashedFileName","fileName","DEFAULT_CONTENT_TYPE","CONTENT_TYPES_BY_EXTENSION","contentTypeForExtension","extension","normalized"],"mappings":"AAAO,MAAMA,IACX,qCAEWC,IACX,uCAEWC,IACX;AAEK,SAASC,EAAwBC,GAAkB;AACxD,SAAOJ,EAAiC,KAAKI,CAAQ;AACvD;AAEO,MAAMC,IAAuB,4BAE9BC,IAAqD;AAAA,EACzD,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,QAAQ;AACV;AAYO,SAASC,EAAwBC,GAA2B;AACjE,QAAMC,IAAaD,EAAU,YAAA;AAE7B,SACEF,EACEG,EAAW,WAAW,GAAG,IAAIA,IAAa,IAAIA,CAAU,EAC1D,KAAKJ;AAET;"}