@juice-js/audit 0.0.0-stage → 1.0.0-alpha.1

package/README.md

@@ -1,3 +1,75 @@
-# Temporary Holding Version
+# @juice-js/audit
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The Juice Audit pages for an Angular app built on `@juice-js/layout`:
+- **Overview:** totals, failures, users, apps and changed tables over a time window.
+- **Access records:** the audited requests, messages and jobs, with each one's request, response, server and metadata.
+- **Data changes:** each changed row's values before and after, and its history.
+- **Trace:** everything audited under one trace id.
+
+The pages read the audit API that `Juice.Audit.Api` maps with `MapJuiceAudit()`.
+
+## Host (ASP.NET Core)
+
+```csharp
+builder.Services.ConfigureAuditDefault(builder.Configuration);   // or ConfigureAuditGrpcHost() on the audit server
+// …
+app.UseAuthentication();
+app.UseAuthorization();
+app.MapJuiceAudit("/api/audit");                 // any authenticated user (the default policy)
+app.MapJuiceAudit("/api/audit", "AuditReaders"); // or a policy of yours
+```
+
+The records are read through `AuditDbContext`. A tenant sees only its own records, and the root tenant sees all of them. Map the API where the audit database is: in the app itself with `ConfigureAuditDefault()`, or on the gRPC audit server that its apps send to.
+
+## App
+
+```ts
+// app module or app config
+providers: [
+  provideHttpClient(withInterceptorsFromDi()),
+  provideJuiceAudit({ apiBase: '', basePath: '/audit' }),
+],
+
+// routes: mount the pages under basePath, behind your own sign-in guard
+{ path: 'audit', children: AUDIT_ROUTES.map(r => ({ ...r, canActivate: [AuthGuard] })) },
+
+// menu (juice-layout)
+MenuModule.forRoot([...yourMenus, ...auditMenus('/audit', 200)]),
+```
+
+```scss
+// styles.scss (the app's global styles, once): the pages' layout, in the Juice Console's teal theme, light and dark (.dark).
+@use '@juice-js/audit';
+
+// Optional: colours from your own Angular Material (M2) themes instead.
+:root { @include audit.colors($light-theme); }
+.dark { @include audit.colors($dark-theme); }       // under your dark-mode selector
+```
+
+`colors($theme, $tones: ())` sets the `--ja-*` custom properties the pages use:
+- **Text and surfaces:** the theme's background and foreground colours.
+- **Links and selection:** the theme's primary palette.
+- **Failures:** the theme's warn palette.
+- **Tones:** succeeded, warning, modified and neutral default to Material's green, deep orange, blue and greys. Pass `$tones: (ok: …, warn: …, bad: …, info: …, none: …)` to change them.
+
+The default colours use zero-specificity `:where()` selectors, so your `colors()` replaces them wherever it sits in the file. The pages don't style the page itself, so give `body` your own colours.
+
+- `apiBase`: the API origin; empty when the API serves the app.
+- `apiPath`: where `MapJuiceAudit()` mapped the API; `/api/audit` by default.
+- `basePath`: where the routes are mounted; every link between the pages goes under it.
+- `traceLink`: optional. Turns each trace id into a link to your tracing UI, as a route (`id => ['/observability/traces', id]`) or a URL string.
+- The router needs `bindToComponentInputs: true`, because the pages take their route and query parameters as inputs.
+- The host's bearer-token interceptor (`@juice-js/auth`) must cover `apiBase`.
+
+## With @juice-js/observability
+
+The two packages can share one app.
+- **No collisions:** classes start with `ja-` here and `jc-` there, and menu ids start with `audit-`.
+- **Mounting:** mount each package's routes at its own path.
+- **Theme:** pass your theme to both `colors()` mixins.
+- **Traces:** set `traceLink` to the observability trace page, so an audit record opens its spans and logs:
+
+```ts
+provideJuiceObservability({ basePath: '/observability' }),
+provideJuiceAudit({ basePath: '/audit', traceLink: id => ['/observability/traces', id] }),
+```

package/fesm2022/juice-js-audit-access-log.page-CrH7ib4K.mjs

@@ -0,0 +1,291 @@
+import { AuditApiService, AuditContextService, AuditLinkPipe } from "./juice-js-audit.mjs";
+import { a as DataChangeTable, c as TraceRef, d as PrettyJsonPipe, l as DurationPipe, m as apiResource, o as KeyValueTable, p as problemText, r as AuditContextBar, s as StatusBadge } from "./juice-js-audit-ui-DnfhiB6p.mjs";
+import * as i0 from "@angular/core";
+import { ChangeDetectionStrategy, Component, computed, inject, input } from "@angular/core";
+import { RouterLink } from "@angular/router";
+import { of } from "rxjs";
+import { DatePipe } from "@angular/common";
+import * as i1 from "@angular/material/progress-bar";
+import { MatProgressBarModule } from "@angular/material/progress-bar";
+var AccessLogPage = class AccessLogPage {
+	api = inject(AuditApiService);
+	ctx = inject(AuditContextService);
+	id = input.required(...ngDevMode ? [{ debugName: "id" }] : /* istanbul ignore next */ []);
+	log = apiResource({
+		params: () => this.id(),
+		stream: ({ params }) => this.api.accessLog(params)
+	});
+	trace = apiResource({
+		params: () => {
+			const l = this.log.value();
+			return l?.traceId && l.dataChanges > 0 ? l.traceId : void 0;
+		},
+		stream: ({ params }) => params ? this.api.trace(params) : of(void 0)
+	});
+	error = computed(() => problemText(this.log.error()), ...ngDevMode ? [{ debugName: "error" }] : /* istanbul ignore next */ []);
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.4",
+		ngImport: i0,
+		type: AccessLogPage,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.4",
+		type: AccessLogPage,
+		isStandalone: true,
+		selector: "ng-component",
+		inputs: { id: {
+			classPropertyName: "id",
+			publicName: "id",
+			isSignal: true,
+			isRequired: true,
+			transformFunction: null
+		} },
+		ngImport: i0,
+		template: `
+    <ja-context-bar [showRange]="false">
+      <span class="ja-crumb"><a [routerLink]="['access-logs'] | jaLink" [queryParams]="ctx.keep()">Access records</a> /</span>
+      <h1>{{ log.value()?.action ?? 'Access record' }}</h1>
+    </ja-context-bar>
+    @if (log.isLoading()) { <mat-progress-bar mode="indeterminate" /> }
+    @if (log.error()) { <p class="ja-error">{{ error() }}</p> }
+    @if (log.value(); as l) {
+      <div class="ja-summary">
+        <ja-status [status]="l.response?.status" />
+        <span>{{ l.dateTime | date: 'MMM d, y, HH:mm:ss.SSS' }}</span>
+        <span>{{ l.response?.elapsedMs | jaDuration }}</span>
+        <span>by <strong>{{ l.user || 'no user' }}</strong></span>
+        @if (l.tenantId) { <span class="ja-muted">tenant {{ l.tenantId }}</span> }
+        @if (l.isRestricted) { <span class="ja-badge ja-tone-warn">restricted</span> }
+        <span class="ja-muted">trace <ja-trace-ref [traceId]="l.traceId" [short]="false" /></span>
+      </div>
+      <div class="ja-grid-2">
+        <section class="ja-card">
+          <h2>Request</h2>
+          @if (l.request; as r) {
+            <p class="ja-mono">{{ r.method }} {{ r.scheme ? r.scheme + '://' : '' }}{{ r.host }}{{ r.path }}{{ r.query }}</p>
+            <ja-kv [values]="{ 'Remote IP': r.remoteIp, 'Access zone': r.zone }" empty="" />
+            @if (r.headers) { <h3>Headers</h3><pre class="ja-pre">{{ r.headers }}</pre> }
+            @if (r.data) { <h3>Body</h3><pre class="ja-pre">{{ r.data | jaPretty }}</pre> }
+          } @else { <p class="ja-muted">Not recorded.</p> }
+        </section>
+        <section class="ja-card">
+          <h2>Response</h2>
+          @if (l.response; as r) {
+            @if (r.message) { <p>{{ r.message }}</p> }
+            @if (r.error) { <h3>Error</h3><pre class="ja-pre ja-error">{{ r.error }}</pre> }
+            @if (r.headers) { <h3>Headers</h3><pre class="ja-pre">{{ r.headers }}</pre> }
+            @if (r.data) { <h3>Body</h3><pre class="ja-pre">{{ r.data | jaPretty }}</pre> }
+            @if (!r.message && !r.error && !r.headers && !r.data) { <p class="ja-muted">Status and duration only.</p> }
+          } @else { <p class="ja-muted">Not recorded.</p> }
+        </section>
+        <section class="ja-card">
+          <h2>Server</h2>
+          <ja-kv [values]="{ App: l.server?.app, Version: l.server?.appVersion, Machine: l.server?.machine, OS: l.server?.os }" empty="Not recorded." />
+        </section>
+        <section class="ja-card">
+          <h2>Metadata</h2>
+          <ja-kv [values]="l.metadata" />
+        </section>
+      </div>
+      <section class="ja-card">
+        <h2>Data changed ({{ l.dataChanges }})</h2>
+        @if (l.dataChanges === 0) { <p class="ja-muted">No data changes under this trace.</p> }
+        @else {
+          @if (trace.isLoading()) { <mat-progress-bar mode="indeterminate" /> }
+          @if (trace.value(); as t) {
+            <ja-data-change-table [rows]="t.dataChanges" [compact]="true" />
+            @if (t.truncated) { <p class="ja-muted">The trace has more records than shown; <a [routerLink]="['traces', l.traceId] | jaLink">open the trace</a>.</p> }
+          }
+        }
+      </section>
+    }`,
+		isInline: true,
+		dependencies: [
+			{
+				kind: "directive",
+				type: RouterLink,
+				selector: "[routerLink]",
+				inputs: [
+					"target",
+					"queryParams",
+					"fragment",
+					"queryParamsHandling",
+					"state",
+					"info",
+					"relativeTo",
+					"preserveFragment",
+					"skipLocationChange",
+					"replaceUrl",
+					"browserUrl",
+					"routerLink"
+				]
+			},
+			{
+				kind: "ngmodule",
+				type: MatProgressBarModule
+			},
+			{
+				kind: "component",
+				type: i1.MatProgressBar,
+				selector: "mat-progress-bar",
+				inputs: [
+					"color",
+					"value",
+					"bufferValue",
+					"mode"
+				],
+				outputs: ["animationEnd"],
+				exportAs: ["matProgressBar"]
+			},
+			{
+				kind: "component",
+				type: AuditContextBar,
+				selector: "ja-context-bar",
+				inputs: ["showRange"]
+			},
+			{
+				kind: "component",
+				type: DataChangeTable,
+				selector: "ja-data-change-table",
+				inputs: ["rows", "compact"]
+			},
+			{
+				kind: "component",
+				type: KeyValueTable,
+				selector: "ja-kv",
+				inputs: ["values", "empty"]
+			},
+			{
+				kind: "component",
+				type: StatusBadge,
+				selector: "ja-status",
+				inputs: ["status"]
+			},
+			{
+				kind: "component",
+				type: TraceRef,
+				selector: "ja-trace-ref",
+				inputs: ["traceId", "short"]
+			},
+			{
+				kind: "pipe",
+				type: DatePipe,
+				name: "date"
+			},
+			{
+				kind: "pipe",
+				type: AuditLinkPipe,
+				name: "jaLink"
+			},
+			{
+				kind: "pipe",
+				type: DurationPipe,
+				name: "jaDuration"
+			},
+			{
+				kind: "pipe",
+				type: PrettyJsonPipe,
+				name: "jaPretty"
+			}
+		],
+		changeDetection: i0.ChangeDetectionStrategy.OnPush
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.4",
+	ngImport: i0,
+	type: AccessLogPage,
+	decorators: [{
+		type: Component,
+		args: [{
+			changeDetection: ChangeDetectionStrategy.OnPush,
+			imports: [
+				RouterLink,
+				DatePipe,
+				MatProgressBarModule,
+				AuditLinkPipe,
+				DurationPipe,
+				PrettyJsonPipe,
+				AuditContextBar,
+				DataChangeTable,
+				KeyValueTable,
+				StatusBadge,
+				TraceRef
+			],
+			template: `
+    <ja-context-bar [showRange]="false">
+      <span class="ja-crumb"><a [routerLink]="['access-logs'] | jaLink" [queryParams]="ctx.keep()">Access records</a> /</span>
+      <h1>{{ log.value()?.action ?? 'Access record' }}</h1>
+    </ja-context-bar>
+    @if (log.isLoading()) { <mat-progress-bar mode="indeterminate" /> }
+    @if (log.error()) { <p class="ja-error">{{ error() }}</p> }
+    @if (log.value(); as l) {
+      <div class="ja-summary">
+        <ja-status [status]="l.response?.status" />
+        <span>{{ l.dateTime | date: 'MMM d, y, HH:mm:ss.SSS' }}</span>
+        <span>{{ l.response?.elapsedMs | jaDuration }}</span>
+        <span>by <strong>{{ l.user || 'no user' }}</strong></span>
+        @if (l.tenantId) { <span class="ja-muted">tenant {{ l.tenantId }}</span> }
+        @if (l.isRestricted) { <span class="ja-badge ja-tone-warn">restricted</span> }
+        <span class="ja-muted">trace <ja-trace-ref [traceId]="l.traceId" [short]="false" /></span>
+      </div>
+      <div class="ja-grid-2">
+        <section class="ja-card">
+          <h2>Request</h2>
+          @if (l.request; as r) {
+            <p class="ja-mono">{{ r.method }} {{ r.scheme ? r.scheme + '://' : '' }}{{ r.host }}{{ r.path }}{{ r.query }}</p>
+            <ja-kv [values]="{ 'Remote IP': r.remoteIp, 'Access zone': r.zone }" empty="" />
+            @if (r.headers) { <h3>Headers</h3><pre class="ja-pre">{{ r.headers }}</pre> }
+            @if (r.data) { <h3>Body</h3><pre class="ja-pre">{{ r.data | jaPretty }}</pre> }
+          } @else { <p class="ja-muted">Not recorded.</p> }
+        </section>
+        <section class="ja-card">
+          <h2>Response</h2>
+          @if (l.response; as r) {
+            @if (r.message) { <p>{{ r.message }}</p> }
+            @if (r.error) { <h3>Error</h3><pre class="ja-pre ja-error">{{ r.error }}</pre> }
+            @if (r.headers) { <h3>Headers</h3><pre class="ja-pre">{{ r.headers }}</pre> }
+            @if (r.data) { <h3>Body</h3><pre class="ja-pre">{{ r.data | jaPretty }}</pre> }
+            @if (!r.message && !r.error && !r.headers && !r.data) { <p class="ja-muted">Status and duration only.</p> }
+          } @else { <p class="ja-muted">Not recorded.</p> }
+        </section>
+        <section class="ja-card">
+          <h2>Server</h2>
+          <ja-kv [values]="{ App: l.server?.app, Version: l.server?.appVersion, Machine: l.server?.machine, OS: l.server?.os }" empty="Not recorded." />
+        </section>
+        <section class="ja-card">
+          <h2>Metadata</h2>
+          <ja-kv [values]="l.metadata" />
+        </section>
+      </div>
+      <section class="ja-card">
+        <h2>Data changed ({{ l.dataChanges }})</h2>
+        @if (l.dataChanges === 0) { <p class="ja-muted">No data changes under this trace.</p> }
+        @else {
+          @if (trace.isLoading()) { <mat-progress-bar mode="indeterminate" /> }
+          @if (trace.value(); as t) {
+            <ja-data-change-table [rows]="t.dataChanges" [compact]="true" />
+            @if (t.truncated) { <p class="ja-muted">The trace has more records than shown; <a [routerLink]="['traces', l.traceId] | jaLink">open the trace</a>.</p> }
+          }
+        }
+      </section>
+    }`
+		}]
+	}],
+	propDecorators: { id: [{
+		type: i0.Input,
+		args: [{
+			isSignal: true,
+			alias: "id",
+			required: true
+		}]
+	}] }
+});
+export { AccessLogPage };
+
+//# sourceMappingURL=juice-js-audit-access-log.page-CrH7ib4K.mjs.map

package/fesm2022/juice-js-audit-access-log.page-CrH7ib4K.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"juice-js-audit-access-log.page-CrH7ib4K.mjs","names":[],"sources":["../../../../projects/juice-js/audit/src/lib/pages/access-log.page.ts"],"sourcesContent":["import { DatePipe } from '@angular/common';\nimport { ChangeDetectionStrategy, Component, computed, inject, input } from '@angular/core';\nimport { apiResource } from '../shared/resource';\nimport { MatProgressBarModule } from '@angular/material/progress-bar';\nimport { RouterLink } from '@angular/router';\nimport { of } from 'rxjs';\nimport { AuditApiService } from '../core/api.service';\nimport { AuditContextService } from '../core/context.service';\nimport { AuditLinkPipe } from '../core/options';\nimport { DurationPipe, PrettyJsonPipe, problemText } from '../shared/format';\nimport { AuditContextBar, DataChangeTable, KeyValueTable, StatusBadge, TraceRef } from '../shared/ui';\n\n/** One access record: the request, its outcome, where it ran, its metadata and the data it changed. */\n@Component({\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  imports: [RouterLink, DatePipe, MatProgressBarModule, AuditLinkPipe, DurationPipe, PrettyJsonPipe, AuditContextBar,\n    DataChangeTable, KeyValueTable, StatusBadge, TraceRef],\n  template: `\n    <ja-context-bar [showRange]=\"false\">\n      <span class=\"ja-crumb\"><a [routerLink]=\"['access-logs'] | jaLink\" [queryParams]=\"ctx.keep()\">Access records</a> /</span>\n      <h1>{{ log.value()?.action ?? 'Access record' }}</h1>\n    </ja-context-bar>\n    @if (log.isLoading()) { <mat-progress-bar mode=\"indeterminate\" /> }\n    @if (log.error()) { <p class=\"ja-error\">{{ error() }}</p> }\n    @if (log.value(); as l) {\n      <div class=\"ja-summary\">\n        <ja-status [status]=\"l.response?.status\" />\n        <span>{{ l.dateTime | date: 'MMM d, y, HH:mm:ss.SSS' }}</span>\n        <span>{{ l.response?.elapsedMs | jaDuration }}</span>\n        <span>by <strong>{{ l.user || 'no user' }}</strong></span>\n        @if (l.tenantId) { <span class=\"ja-muted\">tenant {{ l.tenantId }}</span> }\n        @if (l.isRestricted) { <span class=\"ja-badge ja-tone-warn\">restricted</span> }\n        <span class=\"ja-muted\">trace <ja-trace-ref [traceId]=\"l.traceId\" [short]=\"false\" /></span>\n      </div>\n      <div class=\"ja-grid-2\">\n        <section class=\"ja-card\">\n          <h2>Request</h2>\n          @if (l.request; as r) {\n            <p class=\"ja-mono\">{{ r.method }} {{ r.scheme ? r.scheme + '://' : '' }}{{ r.host }}{{ r.path }}{{ r.query }}</p>\n            <ja-kv [values]=\"{ 'Remote IP': r.remoteIp, 'Access zone': r.zone }\" empty=\"\" />\n            @if (r.headers) { <h3>Headers</h3><pre class=\"ja-pre\">{{ r.headers }}</pre> }\n            @if (r.data) { <h3>Body</h3><pre class=\"ja-pre\">{{ r.data | jaPretty }}</pre> }\n          } @else { <p class=\"ja-muted\">Not recorded.</p> }\n        </section>\n        <section class=\"ja-card\">\n          <h2>Response</h2>\n          @if (l.response; as r) {\n            @if (r.message) { <p>{{ r.message }}</p> }\n            @if (r.error) { <h3>Error</h3><pre class=\"ja-pre ja-error\">{{ r.error }}</pre> }\n            @if (r.headers) { <h3>Headers</h3><pre class=\"ja-pre\">{{ r.headers }}</pre> }\n            @if (r.data) { <h3>Body</h3><pre class=\"ja-pre\">{{ r.data | jaPretty }}</pre> }\n            @if (!r.message && !r.error && !r.headers && !r.data) { <p class=\"ja-muted\">Status and duration only.</p> }\n          } @else { <p class=\"ja-muted\">Not recorded.</p> }\n        </section>\n        <section class=\"ja-card\">\n          <h2>Server</h2>\n          <ja-kv [values]=\"{ App: l.server?.app, Version: l.server?.appVersion, Machine: l.server?.machine, OS: l.server?.os }\" empty=\"Not recorded.\" />\n        </section>\n        <section class=\"ja-card\">\n          <h2>Metadata</h2>\n          <ja-kv [values]=\"l.metadata\" />\n        </section>\n      </div>\n      <section class=\"ja-card\">\n        <h2>Data changed ({{ l.dataChanges }})</h2>\n        @if (l.dataChanges === 0) { <p class=\"ja-muted\">No data changes under this trace.</p> }\n        @else {\n          @if (trace.isLoading()) { <mat-progress-bar mode=\"indeterminate\" /> }\n          @if (trace.value(); as t) {\n            <ja-data-change-table [rows]=\"t.dataChanges\" [compact]=\"true\" />\n            @if (t.truncated) { <p class=\"ja-muted\">The trace has more records than shown; <a [routerLink]=\"['traces', l.traceId] | jaLink\">open the trace</a>.</p> }\n          }\n        }\n      </section>\n    }`,\n})\nexport class AccessLogPage {\n  private readonly api = inject(AuditApiService);\n  protected readonly ctx = inject(AuditContextService);\n  readonly id = input.required<string>();\n\n  protected readonly log = apiResource({ params: () => this.id(), stream: ({ params }) => this.api.accessLog(params) });\n  protected readonly trace = apiResource({\n    params: () => { const l = this.log.value(); return l?.traceId && l.dataChanges > 0 ? l.traceId : undefined; },\n    stream: ({ params }) => params ? this.api.trace(params) : of(undefined),\n  });\n  protected readonly error = computed(() => problemText(this.log.error()));\n}\n"],"mappings":";;;;;;;;;AA4EA,IAAa,gBAAb,MAAa,cAAa;CACP,MAAM,OAAO,eAAe;CAC1B,MAAM,OAAO,mBAAmB;CAC1C,KAAK,MAAM,SAAkB,GAAA,YAAA,CAAA,EAAA,WAAA,KAAA,CAAA,+BAAA,CAAA,CAAA;CAEnB,MAAM,YAAY;EAAE,cAAc,KAAK,GAAE;EAAI,SAAS,EAAE,aAAa,KAAK,IAAI,UAAU,MAAM;CAAC,CAAE;CACjG,QAAQ,YAAY;EACrC,cAAa;GAAG,MAAM,IAAI,KAAK,IAAI,MAAK;GAAI,OAAO,GAAG,WAAW,EAAE,cAAc,IAAI,EAAE,UAAU;EAAW;EAC5G,SAAS,EAAE,aAAa,SAAS,KAAK,IAAI,MAAM,MAAM,IAAI,GAAG,MAAS;CACvE,CAAA;CACkB,QAAQ,eAAe,YAAY,KAAK,IAAI,MAAK,CAAE,GAAE,GAAA,YAAA,CAAA,EAAA,WAAA,QAAA,CAAA,+BAAA,CAAA,CAAA;CAV7D,OAAA,OAAA,GAAA,mBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,UAAA;EAAA,MAAA;EAAa,MAAA,CAAA;EAAA,QAAA,GAAA,gBAAA;CAAA,CAAA;CAAb,OAAA,OAAA,GAAA,qBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,MAAA;EAAa,cAAA;EAAA,UAAA;EAAA,QAAA,EAAA,IAAA;GAAA,mBAAA;GAAA,YAAA;GAAA,UAAA;GAAA,YAAA;GAAA,mBAAA;EAAA,EAAA;EAAA,UAAA;EAAA,UA3Dd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyDN,UAAA;EAAA,cAAA;GAAA;IAAA,MAAA;IAAA,MA3DM;IAAU,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAY;GAAoB;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,cAAA;IAAA,UAAA,CAAA,gBAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAA+C;IAAe,UAAA;IAAA,QAAA,CAAA,WAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAChH;IAAe,UAAA;IAAA,QAAA,CAAA,QAAA,SAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAa,UAAA;IAAA,QAAA,CAAA,UAAA,OAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAW,UAAA;IAAA,QAAA,CAAA,QAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAQ,UAAA;IAAA,QAAA,CAAA,WAAA,OAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MADjC;IAAQ,MAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAwB;IAAa,MAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAY,MAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAc,MAAA;GAAA;EAAA;EAAA,iBAAA,GAAA,wBAAA;CAAA,CAAA;;AA6DtF,GAAA,yBAAA;CAAA,YAAA;CAAA,SAAA;CAAA,UAAA;CAAA,MAAA;CAAa,YAAA,CAAA;EA/DzB,MAAA;EAAU,MAAA,CAAA;GACT,iBAAiB,wBAAwB;GACzC,SAAS;IAAC;IAAY;IAAU;IAAsB;IAAe;IAAc;IAAgB;IACjG;IAAiB;IAAe;IAAa;GAAQ;GACvD,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0DX,CAAA"}