@dreamdata_io/verify-tracking 0.1.0

package/dist/evidence/collect.js

@@ -0,0 +1,527 @@
+import { chromium } from "playwright";
+import { EvidenceCollectionError } from "../utils/errors.js";
+import { logger } from "../utils/logger.js";
+import { acceptConsent as runConsentAcceptance, rejectConsent as runConsentRejection, snapshotStorage, waitForConsentPersisted, waitForConsentSignal, } from "./consent-accept.js";
+import { nudgeVisitorInteraction, readConsentState } from "./consent.js";
+import { DEFAULT_SCRIPT_HOSTS, DEFAULT_TRACKING_HOSTS, NETWORK_SETTLE_MS } from "./constants.js";
+import { attachConsoleCollector, readCookiesAndStorage, readDreamdataGlobals, } from "./globals.js";
+import { probeServedMarkup } from "./http-probe.js";
+import { installEvidenceHooks } from "./init-script.js";
+import { attachNetworkCollector, attachThirdPartySegmentCollector, determineCookielessSeenFirst, partitionCarriedOverRequests, partitionSecondPageRequests, summarizeDreamdataRequestCounts, summarizeModeCounts, summarizeObservedLibraries, summarizeObservedWriteKeys, } from "./network.js";
+import { deriveNormalBundleSignals, detectThirdPartySegmentScript, readScriptPresence, scanTagManagerContainers, } from "./script.js";
+import { navigateToSecondPage } from "./second-page.js";
+import { installStealthPatches } from "./stealth.js";
+import { ALL_PHASES } from "./types.js";
+// Real Chrome (when installed) renders and fingerprints like an actual
+// user's browser; the bundled Chromium build is a reasonable fallback for
+// machines without Chrome (e.g. CI). --disable-blink-features and dropping
+// --enable-automation remove the most visible automation signals on top of
+// whichever binary we end up running.
+async function launchRealisticBrowser(headless) {
+    const launchOptions = {
+        headless,
+        args: ["--disable-blink-features=AutomationControlled"],
+        ignoreDefaultArgs: ["--enable-automation"],
+    };
+    try {
+        const browser = await chromium.launch({ ...launchOptions, channel: "chrome" });
+        return { browser, channel: "chrome" };
+    }
+    catch (err) {
+        logger.debug("Real Chrome channel unavailable, falling back to bundled Chromium", err);
+        const browser = await chromium.launch(launchOptions);
+        return { browser, channel: "chromium-bundled" };
+    }
+}
+/**
+ * A bounded wait for the page to go quiet, on top of a navigation that only
+ * waited for the document to parse.
+ *
+ * The two used to be one condition: every navigation waited on `networkidle`
+ * for the whole navigation timeout, which always ran to the full timeout and
+ * then THREW on any page that keeps a socket open. Each phase logged a scary
+ * "did not reach networkidle" warning and then measured whatever state the
+ * page happened to be in — on zoominfo.com all three phases spent their
+ * entire budget waiting on a bot-wall interstitial that was never going to
+ * settle. Never reaching idle is not an error and is not reported as one;
+ * batchFlushWaitMs is what actually gives requests time to leave.
+ */
+async function settleNetwork(page, timeoutMs, label) {
+    const quiet = await page
+        .waitForLoadState("networkidle", { timeout: Math.min(NETWORK_SETTLE_MS, timeoutMs) })
+        .then(() => true)
+        .catch(() => false);
+    if (!quiet) {
+        logger.debug(`${label}: the page was still making requests after ${NETWORK_SETTLE_MS}ms; carrying on`);
+    }
+}
+/**
+ * Waits until `deadline`, rather than sleeping for a fixed span on top of
+ * whatever waiting already happened since the page loaded.
+ *
+ * `settleNetwork` and friends already spend time watching this same page
+ * before a flush wait runs; stacking a full `batchFlushWaitMs` on top of that
+ * makes the observation window longer than intended without giving requests
+ * any more time to arrive than they already had. This keeps the window at
+ * exactly `batchFlushWaitMs` measured from page-load start, never less.
+ */
+async function waitUntilDeadline(page, deadline) {
+    const remaining = deadline - Date.now();
+    if (remaining > 0)
+        await page.waitForTimeout(remaining);
+}
+/**
+ * The single most consequential automation tell there is: headless Chrome
+ * writes `HeadlessChrome/<version>` into its User-Agent, in the header and in
+ * `navigator.userAgent` alike, and `isbot`-style checks match that substring.
+ *
+ * Sites do not merely log the visitor as a bot when they see it — they change
+ * what they render. meteomatics.com never mounts its consent banner at all
+ * for a matching UA, so every phase found no CMP, no accept control and
+ * nothing to drive, and all three consent states measured the same
+ * banner-free page. Nothing downstream can recover from that: the run is
+ * describing a page no visitor is ever served.
+ *
+ * Renaming it back to `Chrome` is not a disguise — it is what this same
+ * binary reports when it has a window — and it is applied at the CONTEXT
+ * level so the request header changes too, not just the JS-visible copy that
+ * a server-side check never reads.
+ *
+ * Returns undefined when the UA needs no correction (any headed run), so a
+ * context is only ever pinned to a UA when there is a reason to.
+ */
+async function headlessSafeUserAgent(browser) {
+    const context = await browser.newContext();
+    try {
+        const page = await context.newPage();
+        const ua = await page.evaluate(() => navigator.userAgent);
+        return ua.includes("HeadlessChrome") ? ua.replace("HeadlessChrome", "Chrome") : undefined;
+    }
+    catch (err) {
+        logger.debug("Could not read the browser's default user agent", err);
+        return undefined;
+    }
+    finally {
+        await context.close().catch(() => { });
+    }
+}
+const NO_ACCEPTANCE = {
+    attempted: false,
+    vendor: null,
+    succeeded: false,
+    detail: null,
+    direction: null,
+    consentSignalConfirmed: null,
+    undrivenReason: null,
+};
+/**
+ * Walks to a second page and summarises what tracked there.
+ *
+ * `requests` is the phase's live request log; everything appended from here on
+ * belongs to the second page, so the boundary is taken before the navigation
+ * rather than by clearing the log — the first page's evidence has to survive
+ * intact for the two to be compared at all.
+ *
+ * The index boundary alone is not enough. A request the FIRST page created can
+ * still be queued when the click lands and only reach the network afterwards,
+ * which would credit the second page with a page view it never sent — the
+ * exact shape of a "tracking survived the navigation" pass on a site where it
+ * did not. Those are separated out by creation time and handed back to the
+ * caller, which owns the first page's counts.
+ */
+async function collectSecondPage(page, requests, timeoutMs, batchFlushWaitMs, options) {
+    const boundary = requests.length;
+    const walkStartedAt = Date.now();
+    const navigation = await navigateToSecondPage(page, timeoutMs, options);
+    // Measured from the ACCEPTED navigation, so a walk that had to step past two
+    // uninstrumented sub-sites still gives the page it settled on its full flush
+    // window rather than one already spent on the retries.
+    await waitUntilDeadline(page, navigation.startedAt + batchFlushWaitMs);
+    const { fired: secondPageRequests, carriedOver } = partitionSecondPageRequests(requests.slice(boundary), walkStartedAt, navigation.startedAt);
+    const evidence = {
+        ...navigation,
+        network: {
+            requests: secondPageRequests,
+            dreamdataRequestCounts: summarizeDreamdataRequestCounts(secondPageRequests),
+            ...summarizeModeCounts(secondPageRequests),
+        },
+        hardLoad: navigation.kind === "hard" ? null : await collectHardLoad(page, requests, timeoutMs, batchFlushWaitMs),
+        cookies: await readCookiesAndStorage(page),
+    };
+    return { evidence, carriedOverToFirstPage: carriedOver };
+}
+/**
+ * Loads the current URL as a document, so the phase has ONE page view whose
+ * requests cannot be explained by anything but that load.
+ *
+ * Only called when the walk did not already produce a hard load. See
+ * SecondPageEvidence.hardLoad for why a phase that never gets one cannot be
+ * judged on double-counting at all: its entry page was loaded twice around
+ * the consent answer, and its second page — reached by the site's own router
+ * — never re-ran a script.
+ *
+ * The requests are attributed by their own creation time, so anything the
+ * pre-reload page had queued stays with the page that made it rather than
+ * being credited to this load as a second event it never sent.
+ */
+async function collectHardLoad(page, requests, timeoutMs, batchFlushWaitMs) {
+    const url = page.url();
+    const boundary = requests.length;
+    const startedAt = Date.now();
+    const failedReason = await page
+        .reload({ waitUntil: "domcontentloaded", timeout: timeoutMs })
+        .then(() => null)
+        .catch((err) => `the document did not load within ${timeoutMs}ms: ${err.message}`);
+    if (failedReason === null)
+        await settleNetwork(page, timeoutMs, "hard load");
+    await waitUntilDeadline(page, startedAt + batchFlushWaitMs);
+    const { fired } = partitionCarriedOverRequests(requests.slice(boundary), startedAt);
+    return {
+        url,
+        network: {
+            requests: fired,
+            dreamdataRequestCounts: summarizeDreamdataRequestCounts(fired),
+            ...summarizeModeCounts(fired),
+        },
+        failedReason,
+    };
+}
+/**
+ * Observes one consent state end to end in a FRESH browser context.
+ *
+ * The isolation is load-bearing: a grant leaves the CMP's decision in a
+ * cookie, so a reject phase sharing that jar would replay the granted page
+ * and report the site as ignoring the refusal.
+ */
+async function collectPhase(phase, ctx, options) {
+    const { url, headless, timeoutMs, batchFlushWaitMs, trackingHosts = DEFAULT_TRACKING_HOSTS, scanTagManager = true, probeSecondPage = true, } = options;
+    const collectionErrors = [];
+    // The bundle can be served from a CDN host while requests go to a
+    // first-party one, so script detection watches the union of both.
+    const scriptHosts = [...new Set([...DEFAULT_SCRIPT_HOSTS, ...trackingHosts])];
+    let context = null;
+    try {
+        context = await ctx.browser.newContext({ userAgent: ctx.userAgent });
+        const page = await context.newPage();
+        page.setDefaultTimeout(timeoutMs);
+        await page.addInitScript(installStealthPatches);
+        await page.addInitScript(installEvidenceHooks);
+        const network = attachNetworkCollector(page, trackingHosts);
+        const { requests } = network;
+        const thirdPartySegmentRequests = attachThirdPartySegmentCollector(page);
+        const consoleCollector = attachConsoleCollector(page);
+        const navigate = async (action, label) => {
+            try {
+                await action();
+            }
+            catch (err) {
+                collectionErrors.push(`${label} did not complete within ${timeoutMs}ms: ${err.message}`);
+                return;
+            }
+            await settleNetwork(page, timeoutMs, label);
+        };
+        const initialNavigationStartedAt = Date.now();
+        await navigate(() => page.goto(url, { waitUntil: "domcontentloaded", timeout: timeoutMs }), "Navigation");
+        // Before ANY consent read, including the clean phase's — a banner that
+        // only builds itself on the visitor's first mouse move is absent from
+        // every phase otherwise, and "no consent platform was detected" then
+        // voids the whole consent half of the report. See
+        // nudgeVisitorInteraction.
+        const bannerReveal = await nudgeVisitorInteraction(page, async () => (await readConsentState(page)).cmpDetected);
+        let consentAcceptance = NO_ACCEPTANCE;
+        /**
+         * ics as it read BEFORE the banner was answered, for the driven phases.
+         *
+         * Kept because wasSetLate cannot be trusted from the settled read of a
+         * driven phase: that read happens after a reload that carries the CMP's
+         * own cookie, and a CMP restoring a stored answer can declare its
+         * defaults earlier than it does on a first visit. The late-setting a real
+         * first-time visitor meets only shows here.
+         */
+        let icsBeforeDecision = null;
+        // Set once the post-consent reload is under way, so requests the answered
+        // page had already created can be told apart from the reloaded page's own.
+        let consentReloadStartedAt = null;
+        if (phase !== "clean") {
+            const direction = phase === "grant" ? "grant" : "deny";
+            const preAcceptance = await readConsentState(page);
+            icsBeforeDecision = preAcceptance.ics;
+            const expectedSignal = phase === "grant" ? "granted" : "denied";
+            // waitForConsentPersisted/waitForConsentSignal below are read on the
+            // PAGE WE ARE ABOUT TO DISCARD. A CMP can flip its in-memory
+            // "answered" flag synchronously while the response cookie it depends
+            // on is still in flight to its own consent host — that flag and the
+            // reload race each other, and reloading the instant the flag flips can
+            // beat the cookie, discarding it. The reloaded page then reports the
+            // banner as unanswered again, and this pass silently measures a
+            // pre-consent visit under a "grant"/"reject" label. The only page that
+            // can actually answer "did the decision survive?" is the one this
+            // function is about to describe, so it's checked again after the
+            // reload and retried once if the decision didn't make it across.
+            const MAX_ATTEMPTS = 2;
+            let attempt = 0;
+            let outcome = null;
+            let persisted = false;
+            let consentSignalConfirmed = null;
+            let survivedReload = false;
+            while (attempt < MAX_ATTEMPTS && !survivedReload) {
+                attempt += 1;
+                // Taken before the click so a generic (non-vendor) persistence check
+                // can tell "the site just wrote this" apart from "this was already
+                // here" — see waitForConsentPersisted.
+                const preClickStorage = await snapshotStorage(page);
+                outcome = phase === "grant" ? await runConsentAcceptance(page, timeoutMs) : await runConsentRejection(page, timeoutMs);
+                if (!outcome.succeeded) {
+                    collectionErrors.push(`The ${phase} phase could not drive the banner${attempt > 1 ? ` (attempt ${attempt})` : ""}: ${outcome.detail}`);
+                    break;
+                }
+                // The grant/denial persists asynchronously; reloading before it lands
+                // would replay the pre-consent page and misreport a healthy install.
+                // Run alongside the Consent Mode check below rather than after it —
+                // the two questions are independent (one reads the CMP's own storage,
+                // the other reads window.google_tag_data), so waiting for them one at
+                // a time only doubles the worst-case 8s poll for no reason.
+                [persisted, consentSignalConfirmed] = await Promise.all([
+                    waitForConsentPersisted(page, timeoutMs, preClickStorage),
+                    waitForConsentSignal(page, expectedSignal, timeoutMs),
+                ]);
+                if (!persisted) {
+                    collectionErrors.push(`Consent was submitted (${phase} phase${attempt > 1 ? `, attempt ${attempt}` : ""}) but the CMP never recorded a response; the evidence below may still be pre-consent.`);
+                }
+                // Separate question from the one above: did Consent Mode itself move?
+                // A CMP that stores a decision without emitting the gtag update leaves
+                // every consent-gated tag untouched, which reads exactly like a broken
+                // bundle unless the two are reported apart.
+                if (consentSignalConfirmed === false) {
+                    collectionErrors.push(`The CMP recorded the ${direction}${attempt > 1 ? ` (attempt ${attempt})` : ""} but analytics_storage never moved to ${expectedSignal}; anything gated on Consent Mode could not have reacted.`);
+                }
+                // CMPs with automatic blocking neutralise tracking tags during parse,
+                // so the choice only takes effect on the next load. Evidence from the
+                // pre-consent load is dropped to keep the two states from mixing.
+                requests.length = 0;
+                consentReloadStartedAt = Date.now();
+                await navigate(() => page.reload({ waitUntil: "domcontentloaded", timeout: timeoutMs }), phase === "grant" ? "Post-consent reload" : "Post-rejection reload");
+                // The reloaded document is a fresh page that has seen no interaction,
+                // so anything interaction-gated has to be woken again — catonetworks'
+                // GTM tags fire on scroll, and without this the grant and reject
+                // phases measured an entry page on which no tag had ever loaded while
+                // the clean phase (nudged once, never reloaded) tracked fine.
+                await nudgeVisitorInteraction(page, async () => (await readConsentState(page)).cmpDetected);
+                // cmpHasResponse is read fresh on the reloaded page: for a known
+                // vendor/DOM banner it reflects what that page's own script found in
+                // storage, not what the discarded page remembered in memory. null
+                // (no vendor we can read this way — e.g. an unknown-custom heuristic
+                // match) is treated as "can't tell, proceed" rather than a failure,
+                // since there is no reliable general signal for a bespoke banner.
+                const reloadedConsent = await readConsentState(page);
+                survivedReload = reloadedConsent.cmpHasResponse !== false;
+                if (!survivedReload) {
+                    collectionErrors.push(`The ${phase} phase's decision did not survive the reload${attempt > 1 ? ` (attempt ${attempt})` : ""}: the reloaded page reports the banner as unanswered again, so this pass would have measured a pre-consent state under a driven label.${attempt < MAX_ATTEMPTS ? " Retrying." : " Giving up after the retry — treating this phase as not successfully driven."}`);
+                }
+            }
+            // Kept apart from the composite below: only a submitted decision gets
+            // as far as the post-decision reload, so which condition failed decides
+            // whether this phase's numbers describe the answered page at all.
+            const submitted = outcome?.succeeded ?? false;
+            const drove = submitted && persisted && survivedReload;
+            consentAcceptance = {
+                ...(outcome ?? { attempted: true, succeeded: false, detail: null }),
+                vendor: preAcceptance.cmpVendor,
+                direction,
+                consentSignalConfirmed,
+                succeeded: drove,
+                undrivenReason: drove
+                    ? null
+                    : !submitted
+                        ? "not-submitted"
+                        : !survivedReload
+                            ? "did-not-survive-reload"
+                            : "not-persisted",
+            };
+        }
+        // Wait for requests to flush BEFORE snapshotting globals: a bundle that
+        // takes slightly longer than readDreamdataGlobals' own ready-callback
+        // timeout to attach its global was previously read as "never
+        // initialized" even though its request had already reached the server
+        // by the time this function returned — a false global-object failure
+        // racing against a true core-tracking pass. Measured from when the
+        // CURRENT page's load started (the post-consent reload when there was
+        // one, the initial navigation otherwise) rather than added on top of
+        // whatever settling already happened — the window stays exactly
+        // batchFlushWaitMs long, never longer.
+        const flushDeadlineFrom = consentReloadStartedAt ?? initialNavigationStartedAt;
+        await waitUntilDeadline(page, flushDeadlineFrom + batchFlushWaitMs);
+        // Clearing the log above only drops requests that were already on the
+        // wire. Answering the banner is itself a tracking event for a bundle the
+        // answer just un-gated, and that request can still be queued when the
+        // reload starts — reaching the network afterwards, where it is
+        // indistinguishable from one the reloaded page sent. Counted there it
+        // reads as a single page view tracked twice, with no second loader
+        // anywhere in the DOM to explain it, which is a false exclusivity failure
+        // this harness manufactured for itself. The event's own creation
+        // timestamp is what separates them.
+        if (consentReloadStartedAt !== null) {
+            const { fired, carriedOver } = partitionCarriedOverRequests(requests, consentReloadStartedAt);
+            if (carriedOver.length > 0) {
+                requests.length = 0;
+                requests.push(...fired);
+                logger.debug(`Dropped ${carriedOver.length} request(s) in the ${phase} phase that the pre-reload page created and delivered after the reload`);
+            }
+        }
+        // All six are independent reads of the same settled page, so they run
+        // together rather than one after another.
+        const [globals, presence, cookiesAndStorage, consent, thirdPartySegmentScript, tagManager] = await Promise.all([
+            readDreamdataGlobals(page, Math.min(2000, timeoutMs)),
+            readScriptPresence(page, scriptHosts),
+            readCookiesAndStorage(page),
+            readConsentState(page).then((snapshot) => ({ ...snapshot, bannerReveal, icsBeforeDecision })),
+            page.content().then((html) => detectThirdPartySegmentScript(html, page.url())),
+            scanTagManager
+                ? scanTagManagerContainers(page, timeoutMs, ctx.containerCache, ctx.httpProbe?.tagManagerContainerIds ?? [])
+                : Promise.resolve({
+                    scanned: false,
+                    containerIds: [],
+                    normalBundleTagFound: false,
+                    cookielessBundleTagFound: false,
+                    thirdPartySegmentTagFound: false,
+                    normalBundleConsentGate: null,
+                    normalBundleBlockingTriggers: null,
+                    errors: [],
+                }),
+        ]);
+        // The page has now been read, so the key this install carries is known and
+        // requests on a first-party delivery domain can be claimed — before the
+        // first-page log is frozen and before the second-page probe starts
+        // slicing it, so both pages see the same set.
+        network.attributeTo(presence.writeKey);
+        // Everything above describes the first page, so its requests are frozen
+        // here: the collector keeps appending to `requests`, and mixing the second
+        // page's events into these counts would hide the exact failure the second
+        // page exists to find — a bundle that fires once and then stops.
+        const firstPageRequests = [...requests];
+        const secondPageResult = probeSecondPage
+            ? await collectSecondPage(page, requests, timeoutMs, batchFlushWaitMs, {
+                // Read from the page we are leaving. A site with no install anywhere
+                // has nothing to walk towards, so the retry does not run at all.
+                firstPageInstalled: presence.present || globals.dreamdataExists || globals.cookielessGlobalExists || tagManager.containerIds.length > 0,
+                trackingHosts,
+                // Shared across phases: what one consent state learned about a
+                // section holds for the others. See SecondPageOptions.
+                barredSections: ctx.barredSections,
+            })
+            : null;
+        const secondPage = secondPageResult?.evidence ?? null;
+        // A request the first page created but only delivered after the click
+        // belongs to the page that made it, wherever it landed.
+        firstPageRequests.push(...(secondPageResult?.carriedOverToFirstPage ?? []));
+        if (secondPage?.skippedReason) {
+            collectionErrors.push(`Tracking across a page change could not be observed in the ${phase} phase: ${secondPage.skippedReason}`);
+        }
+        const modeCounts = summarizeModeCounts(firstPageRequests);
+        const normalBundleSignals = deriveNormalBundleSignals({
+            presence,
+            tagManager,
+            dreamdataIsStubQueue: globals.dreamdataIsStubQueue,
+            // Existence, not behaviour: a normal request on either page proves the
+            // bundle belongs to this deployment, whichever page it fired on.
+            normalRequestCount: modeCounts.normalRequestCount + (secondPage?.network.normalRequestCount ?? 0),
+            httpMarkup: ctx.httpProbe?.script ?? null,
+        });
+        return {
+            phase,
+            url,
+            timestamp: new Date().toISOString(),
+            browser: { browserType: "chromium", channel: ctx.channel, headless },
+            script: {
+                ...presence,
+                tagManager,
+                normalBundleSignals,
+                normalBundleConfigured: normalBundleSignals.length > 0,
+            },
+            network: {
+                requests: firstPageRequests,
+                dreamdataRequestCounts: summarizeDreamdataRequestCounts(firstPageRequests),
+                ...modeCounts,
+                cookielessRequestSeenFirst: determineCookielessSeenFirst(firstPageRequests),
+                trackingHosts: [...trackingHosts],
+                observedWriteKeys: summarizeObservedWriteKeys(firstPageRequests),
+                observedLibraries: summarizeObservedLibraries(firstPageRequests),
+                // The entry URL was loaded twice in this phase — once before the
+                // banner was answered, once after — so two page events for it are
+                // the consent upgrade rather than two loaders.
+                spansConsentAnswer: consentReloadStartedAt !== null,
+                unattributedRequests: network.unattributedRequests,
+            },
+            globals,
+            cookies: cookiesAndStorage,
+            consent,
+            consentAcceptance,
+            secondPage,
+            thirdPartySegment: {
+                ...thirdPartySegmentScript,
+                requestCount: thirdPartySegmentRequests.count(),
+            },
+            console: consoleCollector,
+            collectionErrors,
+        };
+    }
+    finally {
+        await context
+            ?.close()
+            .catch((err) => logger.warn(`Failed to close the ${phase} context cleanly: ${err.message}`));
+    }
+}
+/**
+ * Walks every requested consent state in one browser, each in its own
+ * context, and returns them together.
+ *
+ * The three states are what make a consent verdict possible at all: a single
+ * pass cannot tell a bundle that is correctly gated from one that is broken,
+ * because both look like "nothing fired".
+ */
+export async function collectEvidence(options, onPhase) {
+    const phases = options.phases ?? ALL_PHASES;
+    if (phases.length === 0)
+        throw new EvidenceCollectionError("No phases were requested.");
+    // Never allowed to fail the run: it is the one observation that survives a
+    // page the browser cannot read, so it must not depend on the browser
+    // working. It also has no dependency ON the browser — it's a bare fetch —
+    // so it runs alongside the launch rather than blocking it.
+    const [httpProbe, { browser, channel }] = await Promise.all([
+        options.probeOverHttp === false
+            ? Promise.resolve(null)
+            : probeServedMarkup(options.url, options.timeoutMs, options.trackingHosts ?? []),
+        launchRealisticBrowser(options.headless).catch((err) => {
+            throw new EvidenceCollectionError(`Failed to launch a browser: ${err.message}`, err);
+        }),
+    ]);
+    if (httpProbe !== null && httpProbe.failedReason !== null) {
+        logger.debug(`Plain-HTTP probe did not corroborate this run: ${httpProbe.failedReason}`);
+    }
+    const ctx = {
+        browser,
+        channel,
+        userAgent: await headlessSafeUserAgent(browser),
+        containerCache: new Map(),
+        barredSections: new Set(),
+        httpProbe,
+    };
+    try {
+        const collected = [];
+        for (const [index, phase] of phases.entries()) {
+            onPhase?.(phase, index, phases.length);
+            collected.push(await collectPhase(phase, ctx, options));
+        }
+        return {
+            url: options.url,
+            timestamp: new Date().toISOString(),
+            browser: { browserType: "chromium", channel, headless: options.headless },
+            httpProbe,
+            phases: collected,
+        };
+    }
+    finally {
+        await browser.close().catch((err) => logger.warn(`Failed to close browser cleanly: ${err.message}`));
+    }
+}
+//# sourceMappingURL=collect.js.map

package/dist/evidence/collect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect.js","sourceRoot":"","sources":["../../src/evidence/collect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAgD,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,aAAa,IAAI,oBAAoB,EACrC,aAAa,IAAI,mBAAmB,EACpC,eAAe,EACf,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACjG,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAA0B,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAYxC,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,sCAAsC;AACtC,KAAK,UAAU,sBAAsB,CACnC,QAAiB;IAEjB,MAAM,aAAa,GAAG;QACpB,QAAQ;QACR,IAAI,EAAE,CAAC,+CAA+C,CAAC;QACvD,iBAAiB,EAAE,CAAC,qBAAqB,CAAC;KAC3C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,mEAAmE,EAAE,GAAG,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,SAAiB,EAAE,KAAa;IACvE,MAAM,KAAK,GAAG,MAAM,IAAI;SACrB,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC;SACpF,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,8CAA8C,iBAAiB,iBAAiB,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAAU,EAAE,QAAgB;IAC3D,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAAgB;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAsCD,MAAM,aAAa,GAAsB;IACvC,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,IAAI;IACf,sBAAsB,EAAE,IAAI;IAC5B,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAAU,EACV,QAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,OAA0B;IAE1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxE,6EAA6E;IAC7E,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,GAAG,gBAAgB,CAAC,CAAC;IAEvE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,2BAA2B,CAC5E,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EACxB,aAAa,EACb,UAAU,CAAC,SAAS,CACrB,CAAC;IACF,MAAM,QAAQ,GAAuB;QACnC,GAAG,UAAU;QACb,OAAO,EAAE;YACP,QAAQ,EAAE,kBAAkB;YAC5B,sBAAsB,EAAE,+BAA+B,CAAC,kBAAkB,CAAC;YAC3E,GAAG,mBAAmB,CAAC,kBAAkB,CAAC;SAC3C;QACD,QAAQ,EAAE,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAChH,OAAO,EAAE,MAAM,qBAAqB,CAAC,IAAI,CAAC;KAC3C,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAU,EACV,QAA0B,EAC1B,SAAiB,EACjB,gBAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,MAAM,IAAI;SAC5B,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;SAC7D,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,oCAAoC,SAAS,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,IAAI,YAAY,KAAK,IAAI;QAAE,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7E,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,GAAG,gBAAgB,CAAC,CAAC;IAE5D,MAAM,EAAE,KAAK,EAAE,GAAG,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACpF,OAAO;QACL,GAAG;QACH,OAAO,EAAE;YACP,QAAQ,EAAE,KAAK;YACf,sBAAsB,EAAE,+BAA+B,CAAC,KAAK,CAAC;YAC9D,GAAG,mBAAmB,CAAC,KAAK,CAAC;SAC9B;QACD,YAAY;KACb,CAAC;AACJ,CAAC;AAyBD;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,KAAgB,EAChB,GAAiB,EACjB,OAAuB;IAEvB,MAAM,EACJ,GAAG,EACH,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,aAAa,GAAG,sBAAsB,EACtC,cAAc,GAAG,IAAI,EACrB,eAAe,GAAG,IAAI,GACvB,GAAG,OAAO,CAAC;IACZ,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,kEAAkE;IAClE,kEAAkE;IAClE,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,oBAAoB,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAE9E,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElC,MAAM,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7B,MAAM,yBAAyB,GAAG,gCAAgC,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,QAAQ,GAAG,KAAK,EAAE,MAA8B,EAAE,KAAa,EAAiB,EAAE;YACtF,IAAI,CAAC;gBACH,MAAM,MAAM,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,IAAI,CAAC,GAAG,KAAK,4BAA4B,SAAS,OAAQ,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpG,OAAO;YACT,CAAC;YACD,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC;QAEF,MAAM,0BAA0B,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QAE1G,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,kDAAkD;QAClD,2BAA2B;QAC3B,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAEjH,IAAI,iBAAiB,GAAG,aAAa,CAAC;QACtC;;;;;;;;WAQG;QACH,IAAI,iBAAiB,GAAuB,IAAI,CAAC;QACjD,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,sBAAsB,GAAkB,IAAI,CAAC;QACjD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,MAAM,SAAS,GAAqB,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnD,iBAAiB,GAAG,aAAa,CAAC,GAAG,CAAC;YACtC,MAAM,cAAc,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAEhE,qEAAqE;YACrE,6DAA6D;YAC7D,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,qEAAqE;YACrE,gEAAgE;YAChE,uEAAuE;YACvE,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,YAAY,GAAG,CAAC,CAAC;YACvB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,OAAO,GAA4D,IAAI,CAAC;YAC5E,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,sBAAsB,GAAmB,IAAI,CAAC;YAClD,IAAI,cAAc,GAAG,KAAK,CAAC;YAE3B,OAAO,OAAO,GAAG,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;gBACjD,OAAO,IAAI,CAAC,CAAC;gBACb,qEAAqE;gBACrE,mEAAmE;gBACnE,uCAAuC;gBACvC,MAAM,eAAe,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;gBACpD,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAEvH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACvB,gBAAgB,CAAC,IAAI,CACnB,OAAO,KAAK,oCAAoC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAChH,CAAC;oBACF,MAAM;gBACR,CAAC;gBAED,sEAAsE;gBACtE,qEAAqE;gBACrE,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,4DAA4D;gBAC5D,CAAC,SAAS,EAAE,sBAAsB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACtD,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;oBACzD,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC;iBACtD,CAAC,CAAC;gBACH,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,gBAAgB,CAAC,IAAI,CACnB,0BAA0B,KAAK,SAAS,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,uFAAuF,CACzK,CAAC;gBACJ,CAAC;gBAED,sEAAsE;gBACtE,uEAAuE;gBACvE,uEAAuE;gBACvE,4CAA4C;gBAC5C,IAAI,sBAAsB,KAAK,KAAK,EAAE,CAAC;oBACrC,gBAAgB,CAAC,IAAI,CACnB,wBAAwB,SAAS,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,yCAAyC,cAAc,0DAA0D,CAChM,CAAC;gBACJ,CAAC;gBAED,sEAAsE;gBACtE,sEAAsE;gBACtE,kEAAkE;gBAClE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACpB,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACpC,MAAM,QAAQ,CACZ,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EACxE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,uBAAuB,CACpE,CAAC;gBAEF,sEAAsE;gBACtE,sEAAsE;gBACtE,iEAAiE;gBACjE,sEAAsE;gBACtE,8DAA8D;gBAC9D,MAAM,uBAAuB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAE5F,iEAAiE;gBACjE,qEAAqE;gBACrE,kEAAkE;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,kEAAkE;gBAClE,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACrD,cAAc,GAAG,eAAe,CAAC,cAAc,KAAK,KAAK,CAAC;gBAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,gBAAgB,CAAC,IAAI,CACnB,OAAO,KAAK,+CAA+C,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,yIAAyI,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,8EAA8E,EAAE,CACvW,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC;YAC9C,MAAM,KAAK,GAAG,SAAS,IAAI,SAAS,IAAI,cAAc,CAAC;YACvD,iBAAiB,GAAG;gBAClB,GAAG,CAAC,OAAO,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACnE,MAAM,EAAE,aAAa,CAAC,SAAS;gBAC/B,SAAS;gBACT,sBAAsB;gBACtB,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,KAAK;oBACnB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,CAAC,SAAS;wBACV,CAAC,CAAC,eAAe;wBACjB,CAAC,CAAC,CAAC,cAAc;4BACf,CAAC,CAAC,wBAAwB;4BAC1B,CAAC,CAAC,eAAe;aACxB,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,6DAA6D;QAC7D,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,gEAAgE;QAChE,uCAAuC;QACvC,MAAM,iBAAiB,GAAG,sBAAsB,IAAI,0BAA0B,CAAC;QAC/E,MAAM,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAAC,CAAC;QAEpE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,+DAA+D;QAC/D,sEAAsE;QACtE,mEAAmE;QACnE,0EAA0E;QAC1E,iEAAiE;QACjE,oCAAoC;QACpC,IAAI,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,4BAA4B,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YAC9F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CACV,WAAW,WAAW,CAAC,MAAM,sBAAsB,KAAK,wEAAwE,CACjI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7G,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC;YACrC,qBAAqB,CAAC,IAAI,CAAC;YAC3B,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9E,cAAc;gBACZ,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,sBAAsB,IAAI,EAAE,CAAC;gBAC5G,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;oBACd,OAAO,EAAE,KAAK;oBACd,YAAY,EAAE,EAAE;oBAChB,oBAAoB,EAAE,KAAK;oBAC3B,wBAAwB,EAAE,KAAK;oBAC/B,yBAAyB,EAAE,KAAK;oBAChC,uBAAuB,EAAE,IAAI;oBAC7B,4BAA4B,EAAE,IAAI;oBAClC,MAAM,EAAE,EAAE;iBACX,CAAC;SACP,CAAC,CAAC;QAEH,2EAA2E;QAC3E,wEAAwE;QACxE,mEAAmE;QACnE,8CAA8C;QAC9C,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvC,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,iBAAiB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,eAAe;YACtC,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE;gBACnE,qEAAqE;gBACrE,iEAAiE;gBACjE,kBAAkB,EAChB,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,sBAAsB,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBACrH,aAAa;gBACb,+DAA+D;gBAC/D,uDAAuD;gBACvD,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,UAAU,GAAG,gBAAgB,EAAE,QAAQ,IAAI,IAAI,CAAC;QACtD,sEAAsE;QACtE,wDAAwD;QACxD,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,UAAU,EAAE,aAAa,EAAE,CAAC;YAC9B,gBAAgB,CAAC,IAAI,CACnB,8DAA8D,KAAK,WAAW,UAAU,CAAC,aAAa,EAAE,CACzG,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;YACpD,QAAQ;YACR,UAAU;YACV,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,uEAAuE;YACvE,iEAAiE;YACjE,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;YACjG,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI;SAC1C,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,GAAG;YACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE;YACpE,MAAM,EAAE;gBACN,GAAG,QAAQ;gBACX,UAAU;gBACV,mBAAmB;gBACnB,sBAAsB,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC;aACvD;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,iBAAiB;gBAC3B,sBAAsB,EAAE,+BAA+B,CAAC,iBAAiB,CAAC;gBAC1E,GAAG,UAAU;gBACb,0BAA0B,EAAE,4BAA4B,CAAC,iBAAiB,CAAC;gBAC3E,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;gBACjC,iBAAiB,EAAE,0BAA0B,CAAC,iBAAiB,CAAC;gBAChE,iBAAiB,EAAE,0BAA0B,CAAC,iBAAiB,CAAC;gBAChE,iEAAiE;gBACjE,kEAAkE;gBAClE,+CAA+C;gBAC/C,kBAAkB,EAAE,sBAAsB,KAAK,IAAI;gBACnD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;aACnD;YACD,OAAO;YACP,OAAO,EAAE,iBAAiB;YAC1B,OAAO;YACP,iBAAiB;YACjB,UAAU;YACV,iBAAiB,EAAE;gBACjB,GAAG,uBAAuB;gBAC1B,YAAY,EAAE,yBAAyB,CAAC,KAAK,EAAE;aAChD;YACD,OAAO,EAAE,gBAAgB;YACzB,gBAAgB;SACjB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO;YACX,EAAE,KAAK,EAAE;aACR,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,OAAkE;IAElE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,CAAC,CAAC;IAExF,2EAA2E;IAC3E,qEAAqE;IACrE,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,OAAO,CAAC,aAAa,KAAK,KAAK;YAC7B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAClF,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,MAAM,IAAI,uBAAuB,CAAC,+BAAgC,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAClG,CAAC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,kDAAkD,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,GAAG,GAAiB;QACxB,OAAO;QACP,OAAO;QACP,SAAS,EAAE,MAAM,qBAAqB,CAAC,OAAO,CAAC;QAC/C,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,SAAS;KACV,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,SAAS,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YACzE,SAAS;YACT,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;AACH,CAAC"}