@kywi-software/core 0.15.0 → 0.15.2

package/dist/api/audience-runtime-routes.js

@@ -1,45 +1,328 @@
-import { jsonOk, jsonError, unauthorized, forbidden } from './response.js';
-import { getAudienceById, upsertAdapterIdentity, deleteAdapterIdentity } from '../audiences/queries.js';
+import { jsonOk, listOk, jsonError, unauthorized, forbidden } from './response.js';
+import { getAudienceById, getActiveAudiences, listPublicAudiences, listSelfIdFields, upsertAdapterIdentity, deleteAdapterIdentity, } from '../audiences/queries.js';
 import { verifyHmacSignature } from '../audiences/hmac.js';
+import { verifyCsrfToken } from '../forms/csrf.js';
 import { COOKIE_NAMES, COOKIE_MAX_AGE, buildSetCookieHeader } from '../audiences/cookies.js';
 import { cookieAllowedByHeader } from '../audiences/consent.js';
 import { buildAudiencePinValue } from '../audiences/collectors/pinned-audience.js';
+import { runServerCollectors } from '../audiences/collectors/index.js';
+import { resolveAudiences } from '../audiences/evaluator/resolver.js';
+import { createEmptySignals } from '../audiences/types.js';
 /**
- * True unless the request carries an `Origin` from a different site. This route
- * is unauthenticated and now visitor-facing (the transparency panel's audience
- * switcher, #105), so a third-party page must not be able to pin a visitor's
- * audience from a cross-origin fetch. A missing `Origin` is allowed: browsers
- * omit it on same-origin GET-style navigations and on some same-site requests,
- * and non-browser clients never send it.
+ * Is `candidate` the same site as the request being served?
+ *
+ * Exact origin match first. Behind a proxy the request URL's authority can
+ * differ from what the browser saw, so the forwarded `Host` is a fallback — but
+ * only within the same scheme when the request is https, or an `http://` origin
+ * would be trusted on an https endpoint (a downgrade an active attacker can
+ * arrange).
  */
-function isSameOrigin(req) {
-    const origin = req.headers.get('origin');
-    if (!origin)
+function isSameSiteUrl(candidate, req, requestUrl) {
+    if (candidate.origin === requestUrl.origin)
         return true;
-    let originUrl;
+    const host = req.headers.get('host');
+    if (host === null || candidate.host !== host)
+        return false;
+    return requestUrl.protocol !== 'https:' || candidate.protocol === 'https:';
+}
+/**
+ * May this unauthenticated WRITE be trusted as coming from this site's own page?
+ *
+ * These routes are visitor-facing and cookie-authenticated by construction (the
+ * visitor IS the credential), and the self-ID form path posts
+ * `application/x-www-form-urlencoded` — a "simple request" that needs no
+ * preflight. So any page on the internet can submit it with the visitor's
+ * cookies attached, and the ONLY thing standing in the way is what the browser
+ * says about where the request came from.
+ *
+ * That is why a MISSING `Origin` is no longer treated as same-origin (it was,
+ * and it made the check decorative for exactly the request shape that needed
+ * it). A write must present positive evidence, in order:
+ *
+ *   1. `Origin` — must match. Present-but-different is a rejection, never a
+ *      fall-through, and the opaque `null` origin a sandboxed iframe sends
+ *      matches nothing.
+ *   2. `Sec-Fetch-Site` — `same-origin` / `same-site`, or `none` for a
+ *      user-initiated navigation. Sent by every current browser.
+ *   3. A same-origin `Referer`.
+ *
+ * Nothing at all is a 403. Non-browser clients (curl, a server-side script)
+ * therefore have to say where they are posting from — which is the point: they
+ * are indistinguishable from a forged submit otherwise.
+ */
+function isTrustedWrite(req) {
+    const requestUrl = new URL(req.url);
+    const origin = req.headers.get('origin');
+    if (origin !== null) {
+        if (origin === 'null')
+            return false;
+        let originUrl;
+        try {
+            originUrl = new URL(origin);
+        }
+        catch {
+            return false;
+        }
+        return isSameSiteUrl(originUrl, req, requestUrl);
+    }
+    const fetchSite = req.headers.get('sec-fetch-site');
+    if (fetchSite !== null) {
+        return fetchSite === 'same-origin' || fetchSite === 'same-site' || fetchSite === 'none';
+    }
+    return refererPage(req) !== null;
+}
+/**
+ * Double-submit CSRF, for a site that issues one.
+ *
+ * `@kywi-software/js` already sends `X-CSRF-Token` (from the
+ * `meta[name="kywi:csrf-token"]` a host may render) on every runtime write, and
+ * until now nothing read it. It is honoured here rather than dropped from the
+ * client: when the request carries a `kywi_csrf` cookie — i.e. the site has
+ * wired token issuance — a matching token is REQUIRED, header or `_csrf` form
+ * field. A site that issues no such cookie is exactly where it was, protected
+ * by the origin evidence above.
+ *
+ * Comparison is `verifyCsrfToken`'s constant-time one, shared with the form
+ * routes so there is a single notion of "matching token" in the codebase.
+ */
+function csrfRejected(req, formToken) {
+    const cookieToken = req.headers.get('cookie')?.match(/(?:^|;\s*)kywi_csrf=([^;]*)/)?.[1] ?? '';
+    if (!cookieToken)
+        return false;
+    const submitted = req.headers.get('x-csrf-token') ?? formToken ?? '';
+    return !verifyCsrfToken(decodeURIComponent(cookieToken), submitted);
+}
+/**
+ * The page the visitor was on when they submitted, from the `Referer` — or null
+ * when there is none, it will not parse, or it belongs to somebody else.
+ */
+function refererPage(req) {
+    const referer = req.headers.get('referer');
+    if (!referer)
+        return null;
     try {
-        originUrl = new URL(origin);
+        const parsed = new URL(referer);
+        const sameOrigin = parsed.origin === new URL(req.url).origin || parsed.host === req.headers.get('host');
+        return sameOrigin ? parsed : null;
     }
     catch {
-        return false;
+        return null;
     }
-    const requestUrl = new URL(req.url);
-    if (originUrl.origin === requestUrl.origin)
-        return true;
-    // Behind a proxy the request URL's authority can differ from what the browser
-    // saw, so fall back to the forwarded Host header.
-    const host = req.headers.get('host');
-    return host !== null && originUrl.host === host;
+}
+/**
+ * Merge the self-ID answers a submit carries into the signals of the PAGE the
+ * visitor is on.
+ *
+ * The page matters: this route's own URL is `/api/v1/kywi/self-id`, so
+ * collecting signals off it would make `session.entryPage` the API path and
+ * `query.*` empty, and every rule combining a role with a campaign link would
+ * stop matching at the moment the visitor answers. The `Referer` is the page —
+ * accepted only when it is same-origin, and falling back to this request's URL
+ * when it is missing or foreign.
+ */
+function pageSignals(req, fields, gate) {
+    const pageRequest = new Request(refererPage(req)?.href ?? req.url, { headers: req.headers });
+    const collected = runServerCollectors(pageRequest, gate);
+    const base = createEmptySignals();
+    return {
+        ...base,
+        ...collected,
+        // The submitted answers REPLACE any stored ones: this is the visitor telling
+        // us who they are now, not adding to a history.
+        selfId: fields,
+    };
+}
+/**
+ * Only same-origin, root-relative paths — never an open redirect.
+ *
+ * Three ways a "clearly relative" string is not:
+ *
+ *   `//evil.example`    protocol-relative.
+ *   `/\evil.example`    browsers normalise a backslash to a slash, so this is
+ *                       the same bypass wearing a hat.
+ *   `/\t/evil.example`  the URL parser STRIPS tab, CR and LF from ANYWHERE in a
+ *                       URL, so a shape check that runs before they are removed
+ *                       reads a different string than the browser will. `\n`
+ *                       additionally throws out of `Headers.set`, which would
+ *                       turn an anonymous POST into a 500.
+ *
+ * The whitespace test therefore runs FIRST, on the raw value, before any shape
+ * check can be fooled by characters that are about to disappear.
+ */
+function safeReturnTo(raw, req) {
+    const value = typeof raw === 'string' ? raw.trim() : '';
+    if (/[\t\r\n]/.test(value))
+        return refererFallback(req);
+    if (/^\/[^/\\]/.test(value) || value === '/')
+        return value;
+    return refererFallback(req);
+}
+/** Where to send a visitor whose `returnTo` we refused: their own last page. */
+function refererFallback(req) {
+    const page = refererPage(req);
+    return page ? `${page.pathname}${page.search}` : '/';
+}
+/**
+ * Cookie-size cap on the serialized answers, and the field-count / length caps
+ * that keep one submit from spending the whole budget on a single key.
+ *
+ * The answers live in a cookie, and a cookie the visitor's browser refuses to
+ * send back is worse than no answer at all: it would silently stop every later
+ * request resolving self-ID. So an oversized submit is REFUSED (413) rather
+ * than written and quietly ignored forever after.
+ *
+ * The measurement is of the ENCODED value, not the raw JSON — `buildSetCookieHeader`
+ * percent-encodes what it writes, and `{"role":"marketer"}` roughly doubles in
+ * the process, so measuring the JSON bytes would let through a cookie twice the
+ * size we thought we allowed.
+ */
+const SELFID_MAX_BYTES = 2048;
+const SELFID_MAX_FIELDS = 16;
+const SELFID_MAX_KEY = 64;
+const SELFID_MAX_VALUE = 256;
+/**
+ * Read a self-ID submit off the request, from JSON or a plain HTML form.
+ *
+ * Form bodies are flat (`role=marketer&returnTo=/developers`), so every key
+ * except the three reserved ones (`returnTo`, `_csrf`, `audienceId`) is an
+ * answer — that is what lets the no-JS `<form>` post straight here with no
+ * wrapper. Values that arrive empty are DROPPED rather than stored blank, so
+ * `role=''` means "forget my role", which is exactly what a "Change" control
+ * submits.
+ */
+async function readSelfIdSubmit(req) {
+    // Refuse before reading the body at all. Buffering a multi-megabyte form only
+    // to reject it afterwards is work an unauthenticated caller should not be
+    // able to make the server do. The bound is generous (percent-encoding and
+    // form syntax both inflate the wire form) — it is a bomb guard, not the real
+    // limit, which is applied to the parsed answers below.
+    const declared = Number(req.headers.get('content-length') ?? '0');
+    if (Number.isFinite(declared) && declared > SELFID_MAX_BYTES * 4) {
+        return { ok: false, reason: 'too_large' };
+    }
+    const contentType = req.headers.get('content-type') ?? '';
+    const isForm = contentType.includes('application/x-www-form-urlencoded') ||
+        contentType.includes('multipart/form-data');
+    const fields = {};
+    let audienceId = null;
+    if (isForm) {
+        let form;
+        try {
+            form = await req.formData();
+        }
+        catch {
+            return { ok: false, reason: 'invalid' };
+        }
+        let oversized = false;
+        // `forEach` rather than a for-of: the package's lib set is ES2022 + DOM
+        // without DOM.Iterable, so FormData is not typed as iterable here.
+        form.forEach((value, key) => {
+            if (typeof value !== 'string')
+                return;
+            if (key === 'returnTo' || key === '_csrf')
+                return;
+            if (key === 'audienceId') {
+                audienceId = value.trim() || null;
+                return;
+            }
+            const trimmed = value.trim();
+            if (trimmed === '')
+                return;
+            if (key.length > SELFID_MAX_KEY || trimmed.length > SELFID_MAX_VALUE) {
+                oversized = true;
+                return;
+            }
+            fields[key] = trimmed;
+        });
+        if (oversized || Object.keys(fields).length > SELFID_MAX_FIELDS) {
+            return { ok: false, reason: 'too_large' };
+        }
+        const formCsrf = form.get('_csrf');
+        return {
+            ok: true,
+            submit: {
+                fields,
+                audienceId,
+                isForm,
+                returnTo: safeReturnTo(form.get('returnTo'), req),
+                formCsrfToken: typeof formCsrf === 'string' ? formCsrf : undefined,
+            },
+        };
+    }
+    let body;
+    try {
+        body = await req.json();
+    }
+    catch {
+        return { ok: false, reason: 'invalid' };
+    }
+    if (typeof body !== 'object' || body === null)
+        return { ok: false, reason: 'invalid' };
+    const raw = body.fields;
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        return { ok: false, reason: 'invalid' };
+    const rawAudienceId = body.audienceId;
+    if (rawAudienceId !== undefined && typeof rawAudienceId !== 'string')
+        return { ok: false, reason: 'invalid' };
+    audienceId = typeof rawAudienceId === 'string' ? rawAudienceId.trim() || null : null;
+    for (const [key, value] of Object.entries(raw)) {
+        if (typeof value !== 'string')
+            return { ok: false, reason: 'invalid' };
+        const trimmed = value.trim();
+        if (trimmed === '')
+            continue;
+        if (key.length > SELFID_MAX_KEY || trimmed.length > SELFID_MAX_VALUE) {
+            return { ok: false, reason: 'too_large' };
+        }
+        fields[key] = trimmed;
+    }
+    if (Object.keys(fields).length > SELFID_MAX_FIELDS)
+        return { ok: false, reason: 'too_large' };
+    return { ok: true, submit: { fields, audienceId, isForm, returnTo: '/', formCsrfToken: undefined } };
+}
+/** Would these answers make a cookie the browser will refuse to carry? */
+function tooLargeForCookie(fields) {
+    return encodeURIComponent(JSON.stringify(fields)).length > SELFID_MAX_BYTES;
+}
+/**
+ * Keep only the answers the site actually asked for.
+ *
+ * The self-ID fields an editor configured (`kywi_selfid_fields`) ARE the
+ * vocabulary of this endpoint: a page can only meaningfully submit what an
+ * audience rule can read back. Anything else is dropped rather than stored, so
+ * a stray hidden input — or a forged submit that got past the origin checks —
+ * cannot fill a visitor's cookie with keys nobody will ever match on.
+ *
+ * A site with no self-ID fields configured therefore stores no answers. That is
+ * the honest behaviour and it is visible: the response echoes the `fields` that
+ * survived, so a page submitting into a site that never declared the field sees
+ * an empty bag rather than silently accumulating dead data. Configure the field
+ * in Audiences → Self-ID Fields first.
+ */
+function allowedFields(fields, declared) {
+    const out = {};
+    for (const [key, value] of Object.entries(fields)) {
+        if (declared.has(key))
+            out[key] = value;
+    }
+    return out;
+}
+/** Append `?selfid=error` to a same-origin return path (no-JS error signal). */
+function withErrorFlag(returnTo) {
+    return `${returnTo}${returnTo.includes('?') ? '&' : '?'}selfid=error`;
 }
 export function registerAudienceRuntimeRoutes(router, ctx) {
     const { db, webhookSecret } = ctx;
+    const defaultSiteId = ctx.defaultSiteId ?? '';
     // Built conditionally: under `exactOptionalPropertyTypes` an explicit
     // `undefined` is not the same as an absent key.
     const gate = ctx.requireConsent === undefined ? {} : { requireConsent: ctx.requireConsent };
     // POST /kywi/audience — update kywi_audience cookie
     router.post('/kywi/audience', async (req) => {
-        if (!isSameOrigin(req))
+        if (!isTrustedWrite(req))
             return forbidden('Cross-origin request rejected');
+        if (csrfRejected(req))
+            return forbidden('CSRF token missing or invalid');
         const body = await req.json();
         if (!body.audienceId)
             return jsonError('VALIDATION_ERROR', 'audienceId required', 400);
@@ -66,7 +349,7 @@ export function registerAudienceRuntimeRoutes(router, ctx) {
         //                       would make the panel lie about what its buttons do.
         //
         // `source` is client-supplied, but this route is same-origin-hardened
-        // (isSameOrigin above), so only this site's own page can assert it — the
+        // (isTrustedWrite above), so only this site's own page can assert it — the
         // same trust model the client-supplied `audienceId` already relies on.
         //
         // Either way the pin is accepted and echoed back so the caller can act on it
@@ -85,6 +368,174 @@ export function registerAudienceRuntimeRoutes(router, ctx) {
             status: 200, headers,
         });
     });
+    // POST /kywi/self-id — record the visitor's self-identification
+    //
+    // The public half of self-ID (kywi-cms#200). Before this, a site that wanted
+    // its own "What brings you here?" control instead of the built-in hello-bar
+    // widget had nothing to call: the runtime's `storeSelfId` is module-private,
+    // `POST /kywi/audience` needs an audience UUID a public page cannot discover,
+    // and `GET /audiences` is admin-only. Sites wrote their own route; this is
+    // that route, made first-class.
+    //
+    // What it does, in order:
+    //   1. Store the answers in `kywi_selfid` so the SERVER can resolve
+    //      `selfId.*` rules on later renders — gated on personalization consent,
+    //      because a stored attribute bag is exactly the tracking the gate governs.
+    //   2. Re-resolve the site's active audiences with those answers merged into
+    //      the signals of the page the visitor is on.
+    //   3. Pin the winner as a `switcher:` pin — an ESSENTIAL preference, stored
+    //      whatever the consent decision, on the same argument as the transparency
+    //      panel's switcher and `kywi_optout`: a control the visitor operated by
+    //      hand must be honoured or the buttons lie about what they do.
+    //
+    // Step 3 is the one that makes the feature work at all. Since kywi-cms#167
+    // every variant arm is chosen AND PRUNED on the server, so the arms the
+    // visitor did not get are not in the DOM for any client-side re-evaluation to
+    // swap to. Only a fresh server render can show them, and the only thing that
+    // render reads is the pin.
+    //
+    // Deliberately NOT resolved through `createAudienceEngine`: the engine prefers
+    // an existing pin over the signal-derived winner, which is right for a page
+    // render and wrong here — the visitor is REPLACING their earlier answer, so
+    // the new signals must win.
+    router.post('/kywi/self-id', async (req) => {
+        if (!isTrustedWrite(req))
+            return forbidden('Cross-origin request rejected');
+        const read = await readSelfIdSubmit(req);
+        if (!read.ok) {
+            // Answered as JSON even for a form post: the body could not be read, so
+            // there is no `returnTo` to redirect back to. Errors raised AFTER the
+            // parse do bounce the form back with `?selfid=error`.
+            //
+            // 413 vs 400 is a real distinction for the caller: "what you sent is too
+            // big" is fixed by sending less, "that was not a self-ID submit" by
+            // sending something else.
+            return read.reason === 'too_large'
+                ? jsonError('PAYLOAD_TOO_LARGE', 'Self-ID answers are too large to store', 413)
+                : jsonError('VALIDATION_ERROR', 'fields object required', 400);
+        }
+        const { audienceId, isForm, returnTo, formCsrfToken } = read.submit;
+        // A security refusal, not a user error: it is answered the same way for
+        // both shapes rather than bounced back to the page, because nothing the
+        // visitor can do on that page fixes it and a forged submit deserves no
+        // redirect.
+        if (csrfRejected(req, formCsrfToken))
+            return forbidden('CSRF token missing or invalid');
+        const cookieHeader = req.headers.get('cookie');
+        const secure = new URL(req.url).protocol === 'https:';
+        // Only answers the site declared as self-ID fields are stored — see
+        // `allowedFields`. Loaded once per request and reused for the evaluation,
+        // so the signals and the cookie can never disagree about what was accepted.
+        const declared = await listSelfIdFields(db, defaultSiteId);
+        const fields = allowedFields(read.submit.fields, new Set(declared.map((f) => f.id)));
+        if (tooLargeForCookie(fields)) {
+            return isForm
+                ? new Response(null, { status: 303, headers: { Location: withErrorFlag(returnTo) } })
+                : jsonError('PAYLOAD_TOO_LARGE', 'Self-ID answers are too large to store', 413);
+        }
+        const signals = pageSignals(req, fields, gate);
+        // Opt-out beats a pin in the engine, so pinning a visitor who turned
+        // personalization off would write a cookie every render is under orders to
+        // ignore. Answer honestly instead of pretending it took.
+        const optedOut = signals.meta.isOptedOut;
+        // An explicit `audienceId` names one of the site's PUBLIC audiences — the
+        // ones `GET /kywi/audiences` lists — so a chooser rendered from that list
+        // can pin exactly what the visitor picked, without the site having to
+        // author a rule per option (kywi-cms#200). Validated against the same
+        // site-scoped list the listing route serves, so it can neither reach a
+        // private audience nor another site's.
+        let winner = null;
+        if (audienceId !== null) {
+            const offered = await listPublicAudiences(db, defaultSiteId);
+            const picked = offered.find((a) => a.id === audienceId);
+            if (!picked) {
+                return isForm
+                    ? new Response(null, { status: 303, headers: { Location: withErrorFlag(returnTo) } })
+                    : jsonError('INVALID_AUDIENCE', 'Audience not found, not active, or not public', 400);
+            }
+            if (!optedOut)
+                winner = { id: picked.id, name: picked.name };
+        }
+        else if (Object.keys(fields).length > 0 && !optedOut) {
+            const audiences = await getActiveAudiences(db, defaultSiteId);
+            const { winningAudienceId } = resolveAudiences(audiences, signals);
+            const match = winningAudienceId ? audiences.find((a) => a.id === winningAudienceId) : undefined;
+            winner = match ? { id: match.id, name: match.name } : null;
+        }
+        const headers = new Headers({ 'Content-Type': 'application/json' });
+        // The answers themselves: stored for a consenting visitor, cleared when the
+        // submit is empty ("forget what I told you"), otherwise left alone.
+        // Not HttpOnly, deliberately and for the same reason `kywi_audience` is not:
+        // `clearDeniedCookies` runs in the browser, and a Reject that cannot delete
+        // this cookie would be a revocation that does not revoke.
+        const mayStore = cookieAllowedByHeader(COOKIE_NAMES.SELFID, cookieHeader, gate);
+        const persisted = mayStore && Object.keys(fields).length > 0;
+        if (persisted) {
+            headers.append('Set-Cookie', buildSetCookieHeader(COOKIE_NAMES.SELFID, JSON.stringify(fields), COOKIE_MAX_AGE.SELFID, { httpOnly: false, secure }));
+        }
+        else if (Object.keys(fields).length === 0) {
+            headers.append('Set-Cookie', buildSetCookieHeader(COOKIE_NAMES.SELFID, '', 0, { httpOnly: false, secure }));
+        }
+        // The pin. A submit that resolves to nothing CLEARS it rather than leaving
+        // the visitor pinned to the answer they just replaced.
+        //
+        // Its LIFETIME depends on consent (owner ruling). The click is honoured
+        // either way — it is a preference the visitor operated by hand, so it is
+        // never withheld — but for a visitor who has not consented to
+        // personalization it is a SESSION cookie: it changes the pages they are
+        // reading right now and is forgotten when they close the browser, rather
+        // than becoming a 30-day record of a segment they never agreed to be filed
+        // under. Consent turns the same pin into the durable one.
+        if (!optedOut) {
+            const pinLifetime = mayStore ? COOKIE_MAX_AGE.AUDIENCE : COOKIE_MAX_AGE.SESSION;
+            headers.append('Set-Cookie', winner
+                ? buildSetCookieHeader(COOKIE_NAMES.AUDIENCE, buildAudiencePinValue(winner.id, true), pinLifetime, { httpOnly: false, secure })
+                : buildSetCookieHeader(COOKIE_NAMES.AUDIENCE, '', 0, { httpOnly: false, secure }));
+        }
+        if (isForm) {
+            // No-JS path: 303 back to the page so the browser re-requests it with the
+            // cookies above, and the server renders the arms this visitor now gets.
+            headers.set('Location', returnTo);
+            return new Response(null, { status: 303, headers });
+        }
+        return new Response(JSON.stringify({
+            data: {
+                audience: winner ? { id: winner.id, name: winner.name } : null,
+                fields,
+                persisted,
+                optedOut,
+            },
+        }), { status: 200, headers });
+    });
+    // GET /kywi/audiences — the audiences a page may offer BY NAME
+    //
+    // Public and consent-independent (kywi-cms#200). `GET /api/v1/audiences` is
+    // admin-only and returns whole audiences including their condition groups, so
+    // a page had no way to discover even the id of the audience it wanted to
+    // offer. THIS ENDPOINT PUBLISHES ONLY id/name, for audiences that are active
+    // AND flagged `public`, and an audience is not listed until an editor
+    // deliberately publishes its name.
+    //
+    // That is a statement about this endpoint, not a privacy guarantee about
+    // audience rules in general: the client runtime is handed the active
+    // audiences so it can re-evaluate on client signals, so how a visitor is
+    // classified is readable in the page either way (see kywi-cms#167 and
+    // AGENT-PATTERNS §8). Author rules accordingly.
+    //
+    // Consent does not gate it because nothing is stored and nothing about the
+    // visitor is read: offering a list of choices is not tracking, and a chooser
+    // that disappeared for a visitor who rejected cookies would be the worse
+    // outcome. It answers for ONE site — the configured one — so it cannot be
+    // used to enumerate another site's audiences.
+    router.get('/kywi/audiences', async () => {
+        const audiences = await listPublicAudiences(db, defaultSiteId);
+        // `label` is what to SHOW a visitor and `name` is what identifies the
+        // audience. They are the same string today; the field exists so a page's
+        // markup does not have to change when a separate visitor-facing label
+        // arrives. The description is deliberately not used: it is an editor's
+        // internal note and often describes the targeting.
+        return listOk(audiences.map((a) => ({ id: a.id, name: a.name, label: a.name })));
+    });
     // POST /kywi/identity/:visitorId — push adapter identity
     router.post('/kywi/identity/:visitorId', async (req, params) => {
         const bodyText = await req.text();

package/dist/api/audience-runtime-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience-runtime-routes.js","sourceRoot":"","sources":["../../src/api/audience-runtime-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAA2B,MAAM,yBAAyB,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAA;AAalF;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,SAAc,CAAA;IAClB,IAAI,CAAC;QAAC,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACvD,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACpC,OAAO,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc,EAAE,GAAwB;IACpF,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAA;IACjC,sEAAsE;IACtE,gDAAgD;IAChD,MAAM,IAAI,GACR,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAA;IAEhF,oDAAoD;IACpD,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAA;QACzE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA8C,CAAA;QACzE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAA;QACtF,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC3D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAA;QAC5H,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,EAAE;QACF,wEAAwE;QACxE,mCAAmC;QACnC,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,6CAA6C;QAC7C,uEAAuE;QACvE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,EAAE;QACF,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,EAAE;QACF,6EAA6E;QAC7E,2EAA2E;QAC3E,gDAAgD;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAA;QAC9C,MAAM,SAAS,GACb,WAAW,IAAI,qBAAqB,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9F,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAA;QAC9E,IAAI,SAAS,EAAE,CAAC;YACd,2EAA2E;YAC3E,yEAAyE;YACzE,iDAAiD;YACjD,OAAO,CAAC,YAAY,CAAC,GAAG,oBAAoB,CAC1C,YAAY,CAAC,QAAQ,EACrB,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EACnD,cAAc,CAAC,QAAQ,EACvB,EAAE,QAAQ,EAAE,KAAK,EAAE,CACpB,CAAA;QACH,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE;YACxF,MAAM,EAAE,GAAG,EAAE,OAAO;SACrB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,CAAC,iCAAiC,CAAC,CAAA;QACtE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,mBAAmB,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA2C,CAAA;QAC3E,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAA;QACpF,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,SAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAA+B,IAAI,EAAE,CAAC,CAAA;QAC9G,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,iDAAiD;IACjD,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,CAAC,iCAAiC,CAAC,CAAA;QACtE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,mBAAmB,CAAC,CAAA;QACpD,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,SAAU,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAC9D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE;YAC/D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,EAAE;SACnF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"audience-runtime-routes.js","sourceRoot":"","sources":["../../src/api/audience-runtime-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAA2B,MAAM,yBAAyB,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAA;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAuB,MAAM,uBAAuB,CAAA;AA8B/E;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,SAAc,EAAE,GAAY,EAAE,UAAe;IAClE,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACvD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC1D,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAA;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAA;QACnC,IAAI,SAAc,CAAA;QAClB,IAAI,CAAC;YAAC,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QAC1D,OAAO,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;IAClD,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACnD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,MAAM,CAAA;IACzF,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;AAClC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,SAAkB;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9F,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,IAAI,EAAE,CAAA;IACpE,OAAO,CAAC,eAAe,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAA;AACrE,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,UAAU,GACd,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACtF,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAClB,GAAY,EACZ,MAA8B,EAC9B,IAAwB;IAExB,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5F,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IACxD,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAA;IACjC,OAAO;QACL,GAAG,IAAI;QACP,GAAG,SAAS;QACZ,6EAA6E;QAC7E,gDAAgD;QAChD,MAAM,EAAE,MAAM;KACf,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,GAAY;IAC9C,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAC1D,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;AAC7B,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAC7B,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAkB5B;;;;;;;;;GASG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAY;IAEZ,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAC3C,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IACzD,MAAM,MAAM,GACV,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACzD,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,IAAI,UAAU,GAAkB,IAAI,CAAA;IAEpC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,IAAc,CAAA;QAClB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAAC,CAAC;QACrF,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAM;YACrC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,OAAO;gBAAE,OAAM;YACjD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBAAC,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;gBAAC,OAAM;YAAC,CAAC;YACvE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;YAC5B,IAAI,OAAO,KAAK,EAAE;gBAAE,OAAM;YAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,OAAM;YAAC,CAAC;YAClG,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;QACvB,CAAC,CAAC,CAAA;QACF,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QAC3C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE;gBACN,MAAM;gBACN,UAAU;gBACV,MAAM;gBACN,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC;gBACjD,aAAa,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACnE;SACF,CAAA;IACH,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAAC,CAAC;IACjF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACtF,MAAM,GAAG,GAAI,IAA6B,CAAC,MAAM,CAAA;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC1G,MAAM,aAAa,GAAI,IAAiC,CAAC,UAAU,CAAA;IACnE,IAAI,aAAa,KAAK,SAAS,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC7G,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACpF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QACtE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,SAAQ;QAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QAC3C,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;IACvB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,iBAAiB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAA;AACtG,CAAC;AAED,0EAA0E;AAC1E,SAAS,iBAAiB,CAAC,MAA8B;IACvD,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,gBAAgB,CAAA;AAC7E,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,aAAa,CACpB,MAA8B,EAC9B,QAAqB;IAErB,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc,EAAE,GAAwB;IACpF,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAA;IACjC,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAA;IAC7C,sEAAsE;IACtE,gDAAgD;IAChD,MAAM,IAAI,GACR,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAA;IAEhF,oDAAoD;IACpD,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAA;QAC3E,IAAI,YAAY,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA8C,CAAA;QACzE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAA;QACtF,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC3D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAA;QAC5H,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,EAAE;QACF,wEAAwE;QACxE,mCAAmC;QACnC,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,6CAA6C;QAC7C,uEAAuE;QACvE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,uEAAuE;QACvE,EAAE;QACF,6EAA6E;QAC7E,2EAA2E;QAC3E,gDAAgD;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAA;QAC9C,MAAM,SAAS,GACb,WAAW,IAAI,qBAAqB,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9F,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAA;QAC9E,IAAI,SAAS,EAAE,CAAC;YACd,2EAA2E;YAC3E,yEAAyE;YACzE,iDAAiD;YACjD,OAAO,CAAC,YAAY,CAAC,GAAG,oBAAoB,CAC1C,YAAY,CAAC,QAAQ,EACrB,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EACnD,cAAc,CAAC,QAAQ,EACvB,EAAE,QAAQ,EAAE,KAAK,EAAE,CACpB,CAAA;QACH,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE;YACxF,MAAM,EAAE,GAAG,EAAE,OAAO;SACrB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,gEAAgE;IAChE,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,gCAAgC;IAChC,EAAE;IACF,0BAA0B;IAC1B,oEAAoE;IACpE,6EAA6E;IAC7E,gFAAgF;IAChF,6EAA6E;IAC7E,kDAAkD;IAClD,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,2BAA2B;IAC3B,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAA;QAC3E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,wEAAwE;YACxE,sEAAsE;YACtE,sDAAsD;YACtD,EAAE;YACF,yEAAyE;YACzE,oEAAoE;YACpE,0BAA0B;YAC1B,OAAO,IAAI,CAAC,MAAM,KAAK,WAAW;gBAChC,CAAC,CAAC,SAAS,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,GAAG,CAAC;gBAC/E,CAAC,CAAC,SAAS,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QACnE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,YAAY;QACZ,IAAI,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC;YAAE,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAA;QAEvF,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAA;QAErD,oEAAoE;QACpE,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACpF,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO,MAAM;gBACX,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACrF,CAAC,CAAC,SAAS,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,GAAG,CAAC,CAAA;QACnF,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC9C,qEAAqE;QACrE,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAA;QAExC,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,uCAAuC;QACvC,IAAI,MAAM,GAAwC,IAAI,CAAA;QACtD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAA;YACvD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,MAAM;oBACX,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACrF,CAAC,CAAC,SAAS,CAAC,kBAAkB,EAAE,+CAA+C,EAAE,GAAG,CAAC,CAAA;YACzF,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAM,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC9D,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;YAC7D,MAAM,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAClE,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC/F,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAEnE,4EAA4E;QAC5E,oEAAoE;QACpE,6EAA6E;QAC7E,4EAA4E;QAC5E,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QAC/E,MAAM,SAAS,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;QAC5D,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CACZ,YAAY,EACZ,oBAAoB,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CACtH,CAAA;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QAC7G,CAAC;QAED,2EAA2E;QAC3E,uDAAuD;QACvD,EAAE;QACF,wEAAwE;QACxE,yEAAyE;QACzE,8DAA8D;QAC9D,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,0DAA0D;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAA;YAC/E,OAAO,CAAC,MAAM,CACZ,YAAY,EACZ,MAAM;gBACJ,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC/H,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CACpF,CAAA;QACH,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,0EAA0E;YAC1E,wEAAwE;YACxE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE;gBACJ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC9D,MAAM;gBACN,SAAS;gBACT,QAAQ;aACT;SACF,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CACzB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,+DAA+D;IAC/D,EAAE;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,yEAAyE;IACzE,6EAA6E;IAC7E,sEAAsE;IACtE,mCAAmC;IACnC,EAAE;IACF,yEAAyE;IACzE,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,gDAAgD;IAChD,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;QAC9D,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,mDAAmD;QACnD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,CAAC,iCAAiC,CAAC,CAAA;QACtE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,mBAAmB,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA2C,CAAA;QAC3E,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAA;QACpF,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,SAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAA+B,IAAI,EAAE,CAAC,CAAA;QAC9G,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,iDAAiD;IACjD,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,CAAC,iCAAiC,CAAC,CAAA;QACtE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,mBAAmB,CAAC,CAAA;QACpD,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,SAAU,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAC9D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE;YAC/D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,EAAE;SACnF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/ax-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ax-routes.d.ts","sourceRoot":"","sources":["../../src/api/ax-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,gBAAgB,CAAA;AAYtE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,iBAAiB,CAAA;IAChC,aAAa,EAAE,eAAe,CAAA;IAC9B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC;AAID;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAoH1E"}
+{"version":3,"file":"ax-routes.d.ts","sourceRoot":"","sources":["../../src/api/ax-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,gBAAgB,CAAA;AAYtE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,iBAAiB,CAAA;IAChC,aAAa,EAAE,eAAe,CAAA;IAC9B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC;AAID;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAwH1E"}

package/dist/api/ax-routes.js

@@ -62,9 +62,13 @@ export function registerAxRoutes(router, ctx) {
         if (!slug)
             return mdNotFound();
         const siteId = siteIdFor(req);
-        const nodes = await contentSource.listForSite(siteId);
-        const node = nodes.find((n) => n.slug === slug && n.excludeFromSearch !== true);
-        if (!node)
+        // Prefer the per-node read: `listForSite` projects EVERY page's layout, and
+        // this route is uncached (kywi-cms#195). Sources that predate `getForSite`
+        // still work through the list path.
+        const node = contentSource.getForSite
+            ? await contentSource.getForSite(siteId, slug)
+            : (await contentSource.listForSite(siteId)).find((n) => n.slug === slug) ?? null;
+        if (!node || node.excludeFromSearch === true)
             return mdNotFound();
         const renderCtx = await buildRenderCtx(req, siteId);
         const md = generatePageMarkdown(node, renderCtx);

package/dist/api/ax-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"ax-routes.js","sourceRoot":"","sources":["../../src/api/ax-routes.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAa7D;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,GAAmB;IAClE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;IAE/D,SAAS,SAAS,CAAC,GAAY;QAC7B,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,MAAc;QACxD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAChD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACpC,CAAC;IAED,KAAK,UAAU,KAAK,CAClB,GAAY,EACZ,OAAmB,EACnB,WAAmB,EACnB,cAAmC,EACnC,QAAkE;QAElE,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAA;QAC/B,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK,IAAI,cAAc,KAAK,KAAK;YAAE,OAAO,QAAQ,EAAE,CAAA;QAEvE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,GAAG,GAAG,MAAM,MAAM,IAAI,OAAO,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;QAE9E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QACvC,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;IACzD,CAAC;IAED,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACjF,eAAe,CAAC,aAAa,EAAE,CAAC,CAAC,CAClC,CACF,CAAA;IAED,qBAAqB;IACrB,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE,CACnC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC1F,mBAAmB,CAAC,aAAa,EAAE,CAAC,CAAC,CACtC,CACF,CAAA;IAED,mBAAmB;IACnB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,gCAAgC,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACzF,kBAAkB,CAAC,aAAa,EAAE,CAAC,CAAC,CACrC,CACF,CAAA;IAED,kBAAkB;IAClB,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAChC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAClF,iBAAiB,CAAC,CAAC,CAAC,CACrB,CACF,CAAA;IAED,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACpD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI;YAAE,OAAO,QAAQ,EAAE,CAAA;QAE5E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,UAAU,EAAE,CAAA;QAE9B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAA;QAC/E,IAAI,CAAC,IAAI;YAAE,OAAO,UAAU,EAAE,CAAA;QAE9B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAChD,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,8BAA8B,EAAE,WAAW,EAAE,UAAU,EAAE;SACrF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,wFAAwF;IACxF,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAA;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAA;QACzE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7E,OAAO,MAAM,CAAC;YACZ,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK;YAC7B,QAAQ,EAAE;gBACR,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK;gBACtC,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,KAAK;gBAC3C,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK;gBACtC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK;gBACpC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK;gBACpC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI;aACxC;YACD,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,aAAa;aACtB;YACD,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;SAC3C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,EAAsC;IACzD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,CAAA;IAC7C,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,WAAmB,EAAE,OAAe,EAAE,GAAW;IACtF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,WAAW;YAC3B,eAAe,EAAE,mBAAmB,GAAG,EAAE;YACzC,WAAW,EAAE,OAAO;SACrB;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE;QAC3C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE;QACjC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"ax-routes.js","sourceRoot":"","sources":["../../src/api/ax-routes.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAa7D;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,GAAmB;IAClE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;IAE/D,SAAS,SAAS,CAAC,GAAY;QAC7B,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,MAAc;QACxD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAChD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACpC,CAAC;IAED,KAAK,UAAU,KAAK,CAClB,GAAY,EACZ,OAAmB,EACnB,WAAmB,EACnB,cAAmC,EACnC,QAAkE;QAElE,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAA;QAC/B,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK,IAAI,cAAc,KAAK,KAAK;YAAE,OAAO,QAAQ,EAAE,CAAA;QAEvE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,GAAG,GAAG,MAAM,MAAM,IAAI,OAAO,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;QAE9E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QACvC,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;IACzD,CAAC;IAED,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACjF,eAAe,CAAC,aAAa,EAAE,CAAC,CAAC,CAClC,CACF,CAAA;IAED,qBAAqB;IACrB,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE,CACnC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC1F,mBAAmB,CAAC,aAAa,EAAE,CAAC,CAAC,CACtC,CACF,CAAA;IAED,mBAAmB;IACnB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,gCAAgC,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACzF,kBAAkB,CAAC,aAAa,EAAE,CAAC,CAAC,CACrC,CACF,CAAA;IAED,kBAAkB;IAClB,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAChC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAClF,iBAAiB,CAAC,CAAC,CAAC,CACrB,CACF,CAAA;IAED,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACpD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI;YAAE,OAAO,QAAQ,EAAE,CAAA;QAE5E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,UAAU,EAAE,CAAA;QAE9B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,4EAA4E;QAC5E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU;YACnC,CAAC,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;YAC9C,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAA;QAClF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI;YAAE,OAAO,UAAU,EAAE,CAAA;QAEjE,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAChD,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,8BAA8B,EAAE,WAAW,EAAE,UAAU,EAAE;SACrF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,wFAAwF;IACxF,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAA;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAA;QACzE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7E,OAAO,MAAM,CAAC;YACZ,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK;YAC7B,QAAQ,EAAE;gBACR,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK;gBACtC,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,KAAK;gBAC3C,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK;gBACtC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK;gBACpC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK;gBACpC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI;aACxC;YACD,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,aAAa;aACtB;YACD,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;SAC3C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,EAAsC;IACzD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,CAAA;IAC7C,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,WAAmB,EAAE,OAAe,EAAE,GAAW;IACtF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,WAAW;YAC3B,eAAe,EAAE,mBAAmB,GAAG,EAAE;YACzC,WAAW,EAAE,OAAO;SACrB;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE;QAC3C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE;QACjC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}