@dreamdata_io/verify-tracking 0.1.0

package/dist/evidence/consent-accept.js

@@ -0,0 +1,377 @@
+import { BANNER_CONTEXT_KEYWORDS, GENERIC_ACCEPT_PHRASES, GENERIC_REJECT_PHRASES, PREFERENCE_CENTER_COUNTERPART_PHRASES, } from "./constants.js";
+import { runHeuristicBanner } from "./heuristic-banner.js";
+import { drivePreferenceCenter } from "./preference-center.js";
+import { clickFirstMatching } from "./selector-probe.js";
+import { logger } from "../utils/logger.js";
+/**
+ * Selectors used only when no vendor API is reachable. Kept narrow and
+ * vendor-specific rather than matching any button whose text says "accept"
+ * or "reject", so we never click an unrelated control.
+ */
+const ACCEPT_SELECTORS = [
+    "#CybotCookiebotDialogBodyLevelButtonLevelOptinAllowAll",
+    "#CybotCookiebotDialogBodyButtonAccept",
+    "#onetrust-accept-btn-handler",
+    ".onetrust-close-btn-handler.accept-cookies",
+    "#usercentrics-root >>> button[data-testid='uc-accept-all-button']",
+    ".cky-btn-accept",
+    "#cookiescript_accept",
+    "button#iubenda-cs-accept-btn",
+    "[aria-label='Accept all cookies']",
+    ".osano-cm-accept-all",
+    ".cmplz-accept",
+    "#hs-eu-confirmation-button",
+    "#pi_tracking_opt_in_yes",
+];
+/** Reject-side equivalents of ACCEPT_SELECTORS, for the same vendors. */
+const REJECT_SELECTORS = [
+    "#CybotCookiebotDialogBodyLevelButtonLevelOptinDeclineAll",
+    "#CybotCookiebotDialogBodyButtonDecline",
+    "#onetrust-reject-all-handler",
+    ".onetrust-close-btn-handler.reject-cookies",
+    "#usercentrics-root >>> button[data-testid='uc-deny-all-button']",
+    ".cky-btn-reject",
+    "#cookiescript_reject",
+    "button#iubenda-cs-reject-btn",
+    "[aria-label='Reject all cookies']",
+    "[aria-label='Decline all cookies']",
+    ".osano-cm-denyAll",
+    ".cmplz-deny",
+    "#hs-eu-decline-button",
+    "#pi_tracking_opt_in_no",
+];
+const HEURISTIC_ACCEPT_ARGS = {
+    mode: "click",
+    direction: "accept",
+    acceptPhrases: GENERIC_ACCEPT_PHRASES,
+    rejectPhrases: GENERIC_REJECT_PHRASES,
+    preferenceCounterpartPhrases: PREFERENCE_CENTER_COUNTERPART_PHRASES,
+    contextKeywords: BANNER_CONTEXT_KEYWORDS,
+};
+const HEURISTIC_REJECT_ARGS = {
+    mode: "click",
+    direction: "reject",
+    acceptPhrases: GENERIC_ACCEPT_PHRASES,
+    rejectPhrases: GENERIC_REJECT_PHRASES,
+    preferenceCounterpartPhrases: PREFERENCE_CENTER_COUNTERPART_PHRASES,
+    contextKeywords: BANNER_CONTEXT_KEYWORDS,
+};
+/**
+ * Attempts to grant analytics consent through the CMP's own API, falling back
+ * to its accept button. Returns what was tried so the report can state plainly
+ * whether the page was observed pre- or post-consent.
+ *
+ * Only ever called by the grant phase.
+ */
+export async function acceptConsent(page, timeoutMs) {
+    const viaApi = await page
+        .evaluate(() => {
+        const w = window;
+        if (typeof w.Cookiebot?.submitCustomConsent === "function") {
+            w.Cookiebot.submitCustomConsent(true, true, true);
+            return "Cookiebot.submitCustomConsent(true, true, true)";
+        }
+        if (typeof w.Cookiebot?.dialog?.submitAll === "function") {
+            w.Cookiebot.dialog.submitAll();
+            return "Cookiebot.dialog.submitAll()";
+        }
+        if (typeof w.OneTrust?.AllowAll === "function") {
+            w.OneTrust.AllowAll();
+            return "OneTrust.AllowAll()";
+        }
+        if (typeof w.UC_UI?.acceptAllConsents === "function") {
+            void w.UC_UI.acceptAllConsents().then(() => w.UC_UI?.closeCMP?.());
+            return "UC_UI.acceptAllConsents()";
+        }
+        return null;
+    })
+        .catch((err) => {
+        logger.debug("Consent API call failed", err);
+        return null;
+    });
+    if (viaApi)
+        return { attempted: true, succeeded: true, detail: `granted via ${viaApi}` };
+    const matched = await clickFirstMatching(page, ACCEPT_SELECTORS, timeoutMs);
+    if (matched) {
+        return { attempted: true, succeeded: true, detail: `clicked ${matched}` };
+    }
+    // Last resort: no known vendor API or selector reached anything, which is
+    // expected for a bespoke banner. Try the generic text-matched fallback
+    // before giving up — see heuristic-banner.ts for what counts as a match.
+    const viaHeuristic = await page.evaluate(runHeuristicBanner, HEURISTIC_ACCEPT_ARGS).catch(() => null);
+    if (viaHeuristic?.clicked) {
+        return { attempted: true, succeeded: true, detail: `clicked heuristically-matched button "${viaHeuristic.clicked}"` };
+    }
+    // Nothing on the banner itself answers it. Some banners only ever answer
+    // through their preference centre — see preference-center.ts.
+    const viaPreferences = await drivePreferenceCenter(page, "accept", timeoutMs);
+    if (viaPreferences.succeeded)
+        return { attempted: true, succeeded: true, detail: `granted via the preference centre: ${viaPreferences.detail}` };
+    return {
+        attempted: true,
+        succeeded: false,
+        detail: `no CMP API, accept button, or heuristically-matched banner control could be reached, and the preference centre did not answer it either (${viaPreferences.detail})`,
+    };
+}
+/**
+ * Symmetric counterpart to acceptConsent: attempts to DENY analytics consent
+ * through the CMP's own API, falling back to its reject/decline button.
+ *
+ * This lets a run observe the explicit-denial state (as opposed to the
+ * pre-consent default), which is required to tell "consent was never asked"
+ * apart from "consent was asked and refused, but the site tracked anyway" —
+ * a distinct defect (see checklist consent-mode / event-behavior items).
+ *
+ * Only ever called by the reject phase.
+ */
+export async function rejectConsent(page, timeoutMs) {
+    const viaApi = await page
+        .evaluate(() => {
+        const w = window;
+        if (typeof w.Cookiebot?.submitCustomConsent === "function") {
+            w.Cookiebot.submitCustomConsent(false, false, false);
+            return "Cookiebot.submitCustomConsent(false, false, false)";
+        }
+        if (typeof w.Cookiebot?.dialog?.submitDecline === "function") {
+            w.Cookiebot.dialog.submitDecline();
+            return "Cookiebot.dialog.submitDecline()";
+        }
+        if (typeof w.OneTrust?.RejectAll === "function") {
+            w.OneTrust.RejectAll();
+            return "OneTrust.RejectAll()";
+        }
+        if (typeof w.UC_UI?.denyAllConsents === "function") {
+            void w.UC_UI.denyAllConsents().then(() => w.UC_UI?.closeCMP?.());
+            return "UC_UI.denyAllConsents()";
+        }
+        return null;
+    })
+        .catch((err) => {
+        logger.debug("Consent API call failed", err);
+        return null;
+    });
+    if (viaApi)
+        return { attempted: true, succeeded: true, detail: `denied via ${viaApi}` };
+    const matched = await clickFirstMatching(page, REJECT_SELECTORS, timeoutMs);
+    if (matched) {
+        return { attempted: true, succeeded: true, detail: `clicked ${matched}` };
+    }
+    const viaHeuristic = await page.evaluate(runHeuristicBanner, HEURISTIC_REJECT_ARGS).catch(() => null);
+    if (viaHeuristic?.clicked) {
+        return { attempted: true, succeeded: true, detail: `clicked heuristically-matched button "${viaHeuristic.clicked}"` };
+    }
+    // The common shape this exists for: a banner offering only "Accept all"
+    // and a "Settings" link, where the visitor's only way to refuse is to open
+    // the panel, leave analytics off and save. Without this the phase reports
+    // the refusal as undrivable and every consent verdict goes inconclusive on
+    // a site a visitor can plainly say no to.
+    const viaPreferences = await drivePreferenceCenter(page, "reject", timeoutMs);
+    if (viaPreferences.succeeded)
+        return { attempted: true, succeeded: true, detail: `denied via the preference centre: ${viaPreferences.detail}` };
+    return {
+        attempted: true,
+        succeeded: false,
+        detail: `no CMP API, reject button, or heuristically-matched banner control could be reached, and the preference centre did not answer it either (${viaPreferences.detail})`,
+    };
+}
+/**
+ * Cookies CMPs write to record the visitor's answer. Prefix-matched, since
+ * several append an id or a group suffix.
+ */
+const CONSENT_COOKIE_PREFIXES = [
+    "CookieConsent",
+    "OptanonConsent",
+    "OptanonAlertBoxClosed",
+    "cookieyes-consent",
+    "usercentrics",
+    "cookiescript_key",
+    "euconsent-v2",
+    "osano_consentmanager",
+    "cmplz_",
+    "__hs_cookie_cat_pref",
+    "__hs_opt_out",
+    "pi_opt_in987432",
+];
+/**
+ * Cookies third-party infrastructure writes on a schedule of its own —
+ * bot-management, CDN session, and load-balancer cookies being the most
+ * common — that have nothing to do with the banner. The generic "any cookie
+ * that wasn't there before" fallback below exists for bespoke banners with no
+ * recognised name; without this exclusion list it fires on the first
+ * Cloudflare `__cf_bm` rotation a click happens to race against, on any site
+ * sitting behind it, regardless of what the visitor actually answered.
+ */
+const NOISE_COOKIE_PREFIXES = ["__cf_bm", "_cfuvid", "cf_clearance", "__cflb", "AWSALB", "AWSALBCORS", "incap_ses", "visid_incap"];
+/**
+ * Entries a CMP writes on page load and then REWRITES IN PLACE when the
+ * visitor answers, rather than creating fresh. Usercentrics is the common
+ * case: ucData/ucString are there from the first page view, so neither the
+ * cookie-name rule nor the "something new appeared" fallback can ever see a
+ * decision land on one of those sites — the value changing is the only
+ * evidence that exists. Matched against cookie names and localStorage keys
+ * alike, and only ever consulted as a value-changed check, so an entry that
+ * merely exists still proves nothing.
+ */
+const CONSENT_STORAGE_PREFIXES = [...CONSENT_COOKIE_PREFIXES, "ucData", "ucString", "uc_"];
+/**
+ * The same idea for a banner nobody has heard of, matched on the name rather
+ * than a vendor prefix.
+ *
+ * meteomatics.com is the case: its hand-rolled banner keeps the decision in
+ * localStorage under `cookie-consent`, and writes that key on page load —
+ * `{"consents":[],"consentedAt":null,"rejectedAt":null}` — before the visitor
+ * has answered anything. So neither the vendor-prefix rule nor the "a key
+ * that wasn't there before appeared" fallback can ever see the answer land,
+ * and a click that worked perfectly was reported as `not-persisted`, which
+ * sank the whole phase. The value moving is the only evidence such a banner
+ * produces.
+ *
+ * Only ever consulted as a value-CHANGED check within the few seconds after
+ * a click we drove ourselves, so a key merely existing still proves nothing.
+ */
+const CONSENT_ENTRY_NAME_PATTERN = /consent|cookie[-_. ]?(?:prefs|preferences|settings|choices|notice|banner)/i;
+/**
+ * Snapshots what's already there BEFORE the banner is clicked, so
+ * waitForConsentPersisted's generic fallback can tell "the site just wrote
+ * something new" apart from "this cookie was already here on load".
+ */
+export async function snapshotStorage(page) {
+    const cookies = await page.context().cookies().catch(() => []);
+    const localStorageEntries = await page
+        .evaluate(() => {
+        try {
+            return Object.keys(window.localStorage).map((k) => [k, window.localStorage.getItem(k)]);
+        }
+        catch {
+            return [];
+        }
+    })
+        .catch(() => []);
+    return {
+        cookies: Object.fromEntries(cookies.map((c) => [c.name, c.value])),
+        localStorage: Object.fromEntries(localStorageEntries),
+    };
+}
+/**
+ * Waits until the CMP has durably recorded the grant, then returns.
+ *
+ * submitCustomConsent() and friends persist asynchronously, so reloading the
+ * moment they return can beat the cookie being written — the reload then
+ * replays the pre-consent page and the run reports nothing tracked on a
+ * healthy install. Polling both the vendor API and the cookie jar closes that
+ * race; a false return means the grant may not have stuck.
+ *
+ * `before` — taken with snapshotStorage() ahead of the click — backs two
+ * fallbacks for banners with no recognised vendor API and no cookie name in
+ * CONSENT_COOKIE_PREFIXES: any cookie or localStorage key that did not exist
+ * before the click is evidence the site recorded *something*, even though
+ * this harness cannot name what; and any recognised consent entry whose
+ * value changed covers the CMPs that rewrite an entry they already had
+ * (see CONSENT_STORAGE_PREFIXES).
+ */
+export async function waitForConsentPersisted(page, timeoutMs, before) {
+    const deadline = Date.now() + Math.min(8000, timeoutMs);
+    const isConsentEntry = (name) => CONSENT_STORAGE_PREFIXES.some((prefix) => name.startsWith(prefix)) || CONSENT_ENTRY_NAME_PATTERN.test(name);
+    while (Date.now() < deadline) {
+        const viaApi = await page
+            .evaluate(() => {
+            const w = window;
+            if (typeof w.Cookiebot?.hasResponse === "boolean")
+                return w.Cookiebot.hasResponse;
+            if (typeof w.OneTrust?.IsAlertBoxClosed === "function") {
+                try {
+                    return Boolean(w.OneTrust.IsAlertBoxClosed());
+                }
+                catch {
+                    return false;
+                }
+            }
+            return false;
+        })
+            .catch(() => false);
+        if (viaApi)
+            return true;
+        const cookies = await page.context().cookies().catch(() => []);
+        if (cookies.some((c) => CONSENT_COOKIE_PREFIXES.some((prefix) => c.name.startsWith(prefix))))
+            return true;
+        // Generic fallback for a custom banner with no recognised cookie name.
+        // Third-party infrastructure noise is excluded — see NOISE_COOKIE_PREFIXES.
+        if (cookies.some((c) => !(c.name in before.cookies) && !NOISE_COOKIE_PREFIXES.some((prefix) => c.name.startsWith(prefix))))
+            return true;
+        // A recognised consent entry whose value moved. Restricted to names we
+        // recognise, because plenty of unrelated entries (session ids, A/B test
+        // buckets, analytics timestamps) churn on their own and would otherwise
+        // certify any drive at all.
+        if (cookies.some((c) => isConsentEntry(c.name) && c.name in before.cookies && before.cookies[c.name] !== c.value))
+            return true;
+        const storage = await page
+            .evaluate(() => {
+            try {
+                return Object.keys(window.localStorage).map((k) => [k, window.localStorage.getItem(k)]);
+            }
+            catch {
+                return [];
+            }
+        })
+            .catch(() => []);
+        if (storage.some(([k]) => !(k in before.localStorage)))
+            return true;
+        if (storage.some(([k, v]) => isConsentEntry(k) && k in before.localStorage && before.localStorage[k] !== v))
+            return true;
+        await page.waitForTimeout(250);
+    }
+    return false;
+}
+/**
+ * Waits for Consent Mode to actually reflect the choice we just drove.
+ *
+ * waitForConsentPersisted only proves the CMP wrote *a* cookie. A CMP that
+ * records a decision but never emits gtag('consent','update',…) leaves every
+ * Consent-Mode-gated tag — including a GTM-managed Dreamdata bundle — exactly
+ * where it was, which is itself the defect worth reporting. Confirming the
+ * signal separately is what lets the report say which of the two happened.
+ *
+ * Only an explicit `update` counts as confirmation. A value the page was
+ * already sitting on — a declared default, or gtag.js's own fallback (see
+ * classifyAnalyticsStorage) — was never caused by anything we did, even when
+ * it happens to equal `expected`: a site that defaults analytics_storage to
+ * denied, or never wires up Consent Mode at all, reads "denied" that way by
+ * coincidence on every reject phase, which would otherwise be
+ * indistinguishable from a CMP that genuinely relayed the refusal.
+ *
+ * null means there was no readable Consent Mode state at all (no gtag on the
+ * page), which is not a failure — only sites using Consent Mode can be held
+ * to it.
+ */
+export async function waitForConsentSignal(page, expected, timeoutMs) {
+    const deadline = Date.now() + Math.min(8000, timeoutMs);
+    let sawConsentMode = false;
+    while (Date.now() < deadline) {
+        const result = await page
+            .evaluate(() => {
+            const w = window;
+            const entry = w.google_tag_data?.ics?.entries?.["analytics_storage"];
+            if (!entry)
+                return null;
+            const hasUpdate = entry.update !== undefined && entry.update !== null;
+            const value = hasUpdate ? entry.update : entry.default;
+            let state;
+            if (value === true || value === "granted")
+                state = "granted";
+            else if (value === false || value === "denied")
+                state = "denied";
+            else
+                state = "unset";
+            return { state, hasUpdate };
+        })
+            .catch(() => null);
+        if (result !== null) {
+            sawConsentMode = true;
+            if (result.state === expected && result.hasUpdate)
+                return true;
+        }
+        await page.waitForTimeout(250);
+    }
+    return sawConsentMode ? false : null;
+}
+//# sourceMappingURL=consent-accept.js.map

package/dist/evidence/consent-accept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-accept.js","sourceRoot":"","sources":["../../src/evidence/consent-accept.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAa5C;;;;GAIG;AACH,MAAM,gBAAgB,GAAG;IACvB,wDAAwD;IACxD,uCAAuC;IACvC,8BAA8B;IAC9B,4CAA4C;IAC5C,mEAAmE;IACnE,iBAAiB;IACjB,sBAAsB;IACtB,8BAA8B;IAC9B,mCAAmC;IACnC,sBAAsB;IACtB,eAAe;IACf,4BAA4B;IAC5B,yBAAyB;CAC1B,CAAC;AAEF,yEAAyE;AACzE,MAAM,gBAAgB,GAAG;IACvB,0DAA0D;IAC1D,wCAAwC;IACxC,8BAA8B;IAC9B,4CAA4C;IAC5C,iEAAiE;IACjE,iBAAiB;IACjB,sBAAsB;IACtB,8BAA8B;IAC9B,mCAAmC;IACnC,oCAAoC;IACpC,mBAAmB;IACnB,aAAa;IACb,uBAAuB;IACvB,wBAAwB;CACzB,CAAC;AAEF,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,sBAAsB;IACrC,aAAa,EAAE,sBAAsB;IACrC,4BAA4B,EAAE,qCAAqC;IACnE,eAAe,EAAE,uBAAuB;CAChC,CAAC;AAEX,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,sBAAsB;IACrC,aAAa,EAAE,sBAAsB;IACrC,4BAA4B,EAAE,qCAAqC;IACnE,eAAe,EAAE,uBAAuB;CAChC,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,SAAiB;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI;SACtB,QAAQ,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,GAAG,MAIT,CAAC;QAEF,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,mBAAmB,KAAK,UAAU,EAAE,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,iDAAiD,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,8BAA8B,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC/C,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,KAAK,EAAE,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACrD,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnE,OAAO,2BAA2B,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,IAAI,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;IAEzF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtG,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,YAAY,CAAC,OAAO,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,IAAI,cAAc,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;IAEjJ,OAAO;QACL,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,4IAA4I,cAAc,CAAC,MAAM,GAAG;KAC7K,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,SAAiB;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI;SACtB,QAAQ,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,GAAG,MAIT,CAAC;QAEF,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,mBAAmB,KAAK,UAAU,EAAE,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,oDAAoD,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;YAC7D,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO,kCAAkC,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;YAChD,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,sBAAsB,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,KAAK,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;YACnD,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjE,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,IAAI,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,MAAM,EAAE,EAAE,CAAC;IAExF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtG,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,YAAY,CAAC,OAAO,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,IAAI,cAAc,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhJ,OAAO;QACL,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,4IAA4I,cAAc,CAAC,MAAM,GAAG;KAC7K,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,uBAAuB,GAAG;IAC9B,eAAe;IACf,gBAAgB;IAChB,uBAAuB;IACvB,mBAAmB;IACnB,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,sBAAsB;IACtB,QAAQ;IACR,sBAAsB;IACtB,cAAc;IACd,iBAAiB;CAClB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAEnI;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAG,CAAC,GAAG,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAE3F;;;;;;;;;;;;;;;GAeG;AACH,MAAM,0BAA0B,GAAG,4EAA4E,CAAC;AAUhH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAU;IAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,mBAAmB,GAAG,MAAM,IAAI;SACnC,QAAQ,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAA4B,CAAC,CAAC;QACrH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAA+B,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAA+B,CAAC,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAU,EAAE,SAAiB,EAAE,MAAuB;IAClG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,EAAE,CACtC,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9G,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI;aACtB,QAAQ,CAAC,GAAG,EAAE;YACb,MAAM,CAAC,GAAG,MAGT,CAAC;YACF,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,WAAW,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;YAClF,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBACvD,IAAI,CAAC;oBACH,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1G,uEAAuE;QACvE,4EAA4E;QAC5E,IACE,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CACzG;YAED,OAAO,IAAI,CAAC;QACd,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,4BAA4B;QAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAC/G,OAAO,IAAI,CAAC;QAEd,MAAM,OAAO,GAAG,MAAM,IAAI;aACvB,QAAQ,CAAC,GAAG,EAAE;YACb,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAA4B,CACtE,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAA+B,CAAC;YACzC,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAA+B,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACzG,OAAO,IAAI,CAAC;QAEd,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAU,EACV,QAA8B,EAC9B,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI;aACtB,QAAQ,CAAC,GAAG,EAAE;YACb,MAAM,CAAC,GAAG,MAIT,CAAC;YACF,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;YACtE,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACvD,IAAI,KAAqC,CAAC;YAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,GAAG,SAAS,CAAC;iBACxD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ;gBAAE,KAAK,GAAG,QAAQ,CAAC;;gBAC5D,KAAK,GAAG,OAAO,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAErB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,cAAc,GAAG,IAAI,CAAC;YACtB,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC"}