@meshmakers/octo-services 3.4.1480 → 3.5.0

package/README.md

@@ -141,7 +141,9 @@ See [CLAUDE.md](CLAUDE.md) for development guidelines, CK ID types, GraphQL util
 ## Dependencies
 
 - **Angular 21** (core, common/http)
-- **Apollo Angular** / **@apollo/client** (GraphQL client)
+- **Apollo Angular** (peer dependency, `^14.0.0`)
+- **@apollo/client** (peer dependency, `^4.1.0` — the oldest 4.x line that has every API used here, so hosts on apollo-angular 14.1 / @apollo/client 4.1 keep installing; imported at runtime: `InMemoryCache`, `ApolloLink`, the error link)
+- **graphql** (peer dependency, `^16.0.0 || ^17.0.0` like apollo-angular / @apollo/client; only the `DocumentNode` type is imported, which the public API exposes)
 - **tus-js-client** (resumable uploads)
 - **@meshmakers/shared-auth** (AuthorizeService for TUS uploads)
 - **@meshmakers/shared-services** (MessageService, PagedResultDto)

package/fesm2022/meshmakers-octo-services-testing.mjs

@@ -0,0 +1,127 @@
+import { print, TypeInfo, visit, visitWithTypeInfo, getNamedType, buildSchema, parse } from 'graphql';
+import { isCredentialLikeAttributeName } from '@meshmakers/octo-services';
+
+const GENERIC_ATTRIBUTE_CONNECTION = 'RtEntityAttributeDtoConnection';
+/** Schema type of a typed SECRET field (AB#5528). */
+const SECRET_STATE_TYPE = 'OctoSecretState';
+const NON_TEXT_SCALARS = new Set(['Boolean', 'Int', 'Float', 'Long', 'Decimal', 'DateTime', 'Date', 'TimeSpan']);
+const INLINE_GQL = /gql`([\s\S]*?)`/g;
+const OPERATION_START = /^\s*(#[^\n]*\n\s*)*(query|mutation|subscription|fragment|\{)/;
+/**
+ * The GraphQL documents of a source file: the whole text of a `.graphql` file, or the inline
+ * `gql` template literals (interpolations removed) of a `.ts` file.
+ */
+function extractGraphQlDocuments(path, source) {
+    if (path.endsWith('.graphql'))
+        return [source];
+    return [...source.matchAll(INLINE_GQL)]
+        .map((m) => m[1].replace(/\$\{[^}]*\}/g, ''))
+        .filter((text) => OPERATION_START.test(text));
+}
+/** Violations of the SECRET rule in one parsed document, validated against `schema`. */
+function findSecretUnsafeSelections(schema, doc, file) {
+    const violations = [];
+    const variableTypes = new Map();
+    for (const def of doc.definitions) {
+        if (def.kind === 'OperationDefinition') {
+            for (const v of def.variableDefinitions ?? [])
+                variableTypes.set(v.variable.name.value, print(v.type));
+        }
+    }
+    const typeInfo = new TypeInfo(schema);
+    const path = [];
+    visit(doc, visitWithTypeInfo(typeInfo, {
+        Field: {
+            enter(node) {
+                path.push(node.alias?.value ?? node.name.value);
+                const fieldPath = path.join('.');
+                const named = getNamedType(typeInfo.getType() ?? undefined);
+                const selectsValue = node.selectionSet?.selections.some((s) => s.kind === 'Field' && s.name.value === 'items'
+                    && s.selectionSet?.selections.some((i) => i.kind === 'Field' && i.name.value === 'value'));
+                const isGeneric = node.name.value === 'attributes'
+                    && (named?.name === GENERIC_ATTRIBUTE_CONNECTION || (!named && !!selectsValue));
+                if (named?.name === SECRET_STATE_TYPE) {
+                    const selectsIsSet = node.selectionSet?.selections.some((s) => s.kind === 'Field' && s.name.value === 'isSet');
+                    if (!selectsIsSet) {
+                        violations.push({
+                            key: `${file}#${fieldPath}`,
+                            message: `SECRET field "${node.name.value}" must be selected as { isSet … }`,
+                        });
+                    }
+                }
+                else if (isGeneric) {
+                    const arg = node.arguments?.find((a) => a.name.value === 'attributeNames');
+                    const key = `${file}#${fieldPath}`;
+                    if (!arg) {
+                        violations.push({ key, message: 'generic `attributes` without `attributeNames` (returns ALL attributes incl. secrets)' });
+                    }
+                    else if (arg.value.kind === 'Variable') {
+                        const type = variableTypes.get(arg.value.name.value);
+                        if (!type?.endsWith('!')) {
+                            violations.push({ key, message: `\`attributeNames\` bound to nullable variable $${arg.value.name.value}: ${type ?? '?'}` });
+                        }
+                    }
+                    else if (arg.value.kind === 'ListValue') {
+                        for (const item of arg.value.values) {
+                            if (item.kind === 'StringValue' && isCredentialLikeAttributeName(item.value)) {
+                                violations.push({ key, message: `\`attributeNames\` lists credential-like "${item.value}"` });
+                            }
+                        }
+                    }
+                    else if (arg.value.kind === 'StringValue') {
+                        // A single string is coerced to a one-element list.
+                        if (isCredentialLikeAttributeName(arg.value.value)) {
+                            violations.push({ key, message: `\`attributeNames\` lists credential-like "${arg.value.value}"` });
+                        }
+                    }
+                    else {
+                        violations.push({ key, message: '`attributeNames` must be a non-null list' });
+                    }
+                }
+                else if (!node.selectionSet && isCredentialLikeAttributeName(node.name.value)) {
+                    const scalar = named?.name;
+                    if (!scalar || !NON_TEXT_SCALARS.has(scalar)) {
+                        violations.push({
+                            key: `${file}#${fieldPath}`,
+                            message: `typed selection of credential-like field "${node.name.value}" (${scalar ?? 'unknown type'})`,
+                        });
+                    }
+                }
+            },
+            leave() {
+                path.pop();
+            },
+        },
+    }));
+    return violations;
+}
+const schemaCache = new Map();
+/**
+ * Same rule as {@link findSecretUnsafeSelections}, but from source text: the schema SDL and the
+ * document are parsed with THIS module's `graphql` instance. Hosts that consume the library as a
+ * published package must use this variant — passing a schema or document built with the host's
+ * own `graphql` copy fails with "Cannot use GraphQLObjectType from another module or realm"
+ * whenever the bundler resolves `graphql` twice (ESM/CJS or nested copies).
+ */
+function findSecretUnsafeSelectionsInSource(schemaSdl, documentText, file) {
+    let schema = schemaCache.get(schemaSdl);
+    if (!schema) {
+        schema = buildSchema(schemaSdl);
+        schemaCache.set(schemaSdl, schema);
+    }
+    return findSecretUnsafeSelections(schema, parse(documentText), file);
+}
+
+/*
+ * Public API Surface of @meshmakers/octo-services/testing (AB#5542)
+ *
+ * Test-only helpers. Not part of the runtime entry point, so apps never bundle them; the
+ * GraphQL SECRET guard specs of the libraries and the Refinery Studio import them from here.
+ */
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { SECRET_STATE_TYPE, extractGraphQlDocuments, findSecretUnsafeSelections, findSecretUnsafeSelectionsInSource };
+//# sourceMappingURL=meshmakers-octo-services-testing.mjs.map

package/fesm2022/meshmakers-octo-services-testing.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"meshmakers-octo-services-testing.mjs","sources":["../../../../projects/meshmakers/octo-services/testing/src/graphql-secret-guard.ts","../../../../projects/meshmakers/octo-services/testing/src/public-api.ts","../../../../projects/meshmakers/octo-services/testing/src/meshmakers-octo-services-testing.ts"],"sourcesContent":["import { buildSchema, DocumentNode, getNamedType, GraphQLSchema, parse, print, TypeInfo, visit, visitWithTypeInfo } from 'graphql';\nimport { isCredentialLikeAttributeName } from '@meshmakers/octo-services';\n\n/**\n * SECRET-safe GraphQL document rule (AB#5542), shared by the guard specs of the libraries\n * (`octo-services/src/lib/graphql-secret-guard.spec.ts`) and the Refinery Studio\n * (`src/app/graphql-secret-guard.spec.ts`). Pure functions — the specs do the file scanning.\n *\n * A document violates the rule when\n * 1. a generic runtime `attributes` selection (`RtEntityAttributeDtoConnection`) has no\n *    `attributeNames` argument, binds it to a NULLABLE variable, or lists a credential-like name\n *    (list or single string) — omitting the filter returns every attribute incl. secrets;\n * 2. a typed selection contains a credential-like String field (`password`, `clientSecret`,\n *    `apiKey`, `botToken`, …; Boolean/number fields such as `isSecret` or `maxTokens` are fine) —\n *    the fallback for models whose credentials are not SECRET yet;\n * 3. a SECRET-typed field (schema type `OctoSecretState`, AB#5528) is selected without `isSet`\n *    (the server refuses a scalar selection anyway; the state must be read as `{ isSet … }`).\n *\n * A non-null variable with a default (`$attributeNames: [String!]! = []`) is accepted.\n */\n\n/** One violation: `key` = `<file>#<field path>` (allow-list key), `message` = human readable. */\nexport interface SecretGuardViolation {\n  readonly key: string;\n  readonly message: string;\n}\n\nconst GENERIC_ATTRIBUTE_CONNECTION = 'RtEntityAttributeDtoConnection';\n/** Schema type of a typed SECRET field (AB#5528). */\nexport const SECRET_STATE_TYPE = 'OctoSecretState';\nconst NON_TEXT_SCALARS = new Set(['Boolean', 'Int', 'Float', 'Long', 'Decimal', 'DateTime', 'Date', 'TimeSpan']);\nconst INLINE_GQL = /gql`([\\s\\S]*?)`/g;\nconst OPERATION_START = /^\\s*(#[^\\n]*\\n\\s*)*(query|mutation|subscription|fragment|\\{)/;\n\n/**\n * The GraphQL documents of a source file: the whole text of a `.graphql` file, or the inline\n * `gql` template literals (interpolations removed) of a `.ts` file.\n */\nexport function extractGraphQlDocuments(path: string, source: string): string[] {\n  if (path.endsWith('.graphql')) return [source];\n  return [...source.matchAll(INLINE_GQL)]\n    .map((m) => m[1].replace(/\\$\\{[^}]*\\}/g, ''))\n    .filter((text) => OPERATION_START.test(text));\n}\n\n/** Violations of the SECRET rule in one parsed document, validated against `schema`. */\nexport function findSecretUnsafeSelections(schema: GraphQLSchema, doc: DocumentNode, file: string): SecretGuardViolation[] {\n  const violations: SecretGuardViolation[] = [];\n  const variableTypes = new Map<string, string>();\n  for (const def of doc.definitions) {\n    if (def.kind === 'OperationDefinition') {\n      for (const v of def.variableDefinitions ?? []) variableTypes.set(v.variable.name.value, print(v.type));\n    }\n  }\n\n  const typeInfo = new TypeInfo(schema);\n  const path: string[] = [];\n  visit(doc, visitWithTypeInfo(typeInfo, {\n    Field: {\n      enter(node) {\n        path.push(node.alias?.value ?? node.name.value);\n        const fieldPath = path.join('.');\n        const named = getNamedType(typeInfo.getType() ?? undefined);\n        const selectsValue = node.selectionSet?.selections.some(\n          (s) => s.kind === 'Field' && s.name.value === 'items'\n            && s.selectionSet?.selections.some((i) => i.kind === 'Field' && i.name.value === 'value'),\n        );\n        const isGeneric = node.name.value === 'attributes'\n          && (named?.name === GENERIC_ATTRIBUTE_CONNECTION || (!named && !!selectsValue));\n\n        if (named?.name === SECRET_STATE_TYPE) {\n          const selectsIsSet = node.selectionSet?.selections.some((s) => s.kind === 'Field' && s.name.value === 'isSet');\n          if (!selectsIsSet) {\n            violations.push({\n              key: `${file}#${fieldPath}`,\n              message: `SECRET field \"${node.name.value}\" must be selected as { isSet … }`,\n            });\n          }\n        } else if (isGeneric) {\n          const arg = node.arguments?.find((a) => a.name.value === 'attributeNames');\n          const key = `${file}#${fieldPath}`;\n          if (!arg) {\n            violations.push({ key, message: 'generic `attributes` without `attributeNames` (returns ALL attributes incl. secrets)' });\n          } else if (arg.value.kind === 'Variable') {\n            const type = variableTypes.get(arg.value.name.value);\n            if (!type?.endsWith('!')) {\n              violations.push({ key, message: `\\`attributeNames\\` bound to nullable variable $${arg.value.name.value}: ${type ?? '?'}` });\n            }\n          } else if (arg.value.kind === 'ListValue') {\n            for (const item of arg.value.values) {\n              if (item.kind === 'StringValue' && isCredentialLikeAttributeName(item.value)) {\n                violations.push({ key, message: `\\`attributeNames\\` lists credential-like \"${item.value}\"` });\n              }\n            }\n          } else if (arg.value.kind === 'StringValue') {\n            // A single string is coerced to a one-element list.\n            if (isCredentialLikeAttributeName(arg.value.value)) {\n              violations.push({ key, message: `\\`attributeNames\\` lists credential-like \"${arg.value.value}\"` });\n            }\n          } else {\n            violations.push({ key, message: '`attributeNames` must be a non-null list' });\n          }\n        } else if (!node.selectionSet && isCredentialLikeAttributeName(node.name.value)) {\n          const scalar = named?.name;\n          if (!scalar || !NON_TEXT_SCALARS.has(scalar)) {\n            violations.push({\n              key: `${file}#${fieldPath}`,\n              message: `typed selection of credential-like field \"${node.name.value}\" (${scalar ?? 'unknown type'})`,\n            });\n          }\n        }\n      },\n      leave() {\n        path.pop();\n      },\n    },\n  }));\n  return violations;\n}\n\nconst schemaCache = new Map<string, GraphQLSchema>();\n\n/**\n * Same rule as {@link findSecretUnsafeSelections}, but from source text: the schema SDL and the\n * document are parsed with THIS module's `graphql` instance. Hosts that consume the library as a\n * published package must use this variant — passing a schema or document built with the host's\n * own `graphql` copy fails with \"Cannot use GraphQLObjectType from another module or realm\"\n * whenever the bundler resolves `graphql` twice (ESM/CJS or nested copies).\n */\nexport function findSecretUnsafeSelectionsInSource(schemaSdl: string, documentText: string, file: string): SecretGuardViolation[] {\n  let schema = schemaCache.get(schemaSdl);\n  if (!schema) {\n    schema = buildSchema(schemaSdl);\n    schemaCache.set(schemaSdl, schema);\n  }\n  return findSecretUnsafeSelections(schema, parse(documentText), file);\n}\n","/*\n * Public API Surface of @meshmakers/octo-services/testing (AB#5542)\n *\n * Test-only helpers. Not part of the runtime entry point, so apps never bundle them; the\n * GraphQL SECRET guard specs of the libraries and the Refinery Studio import them from here.\n */\nexport * from './graphql-secret-guard';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;AA2BA,MAAM,4BAA4B,GAAG,gCAAgC;AACrE;AACO,MAAM,iBAAiB,GAAG;AACjC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAChH,MAAM,UAAU,GAAG,kBAAkB;AACrC,MAAM,eAAe,GAAG,8DAA8D;AAEtF;;;AAGG;AACG,SAAU,uBAAuB,CAAC,IAAY,EAAE,MAAc,EAAA;AAClE,IAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC;IAC9C,OAAO,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;AACnC,SAAA,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3C,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjD;AAEA;SACgB,0BAA0B,CAAC,MAAqB,EAAE,GAAiB,EAAE,IAAY,EAAA;IAC/F,MAAM,UAAU,GAA2B,EAAE;AAC7C,IAAA,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB;AAC/C,IAAA,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE;AACjC,QAAA,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE;AACtC,YAAA,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,mBAAmB,IAAI,EAAE;AAAE,gBAAA,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxG;IACF;AAEA,IAAA,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC;IACrC,MAAM,IAAI,GAAa,EAAE;AACzB,IAAA,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,QAAQ,EAAE;AACrC,QAAA,KAAK,EAAE;AACL,YAAA,KAAK,CAAC,IAAI,EAAA;AACR,gBAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC;gBAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CACrD,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK;uBACzC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,CAC5F;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK;AACjC,wBAAC,KAAK,EAAE,IAAI,KAAK,4BAA4B,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AAEjF,gBAAA,IAAI,KAAK,EAAE,IAAI,KAAK,iBAAiB,EAAE;AACrC,oBAAA,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC;oBAC9G,IAAI,CAAC,YAAY,EAAE;wBACjB,UAAU,CAAC,IAAI,CAAC;AACd,4BAAA,GAAG,EAAE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE;AAC3B,4BAAA,OAAO,EAAE,CAAA,cAAA,EAAiB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,iCAAA,CAAmC;AAC7E,yBAAA,CAAC;oBACJ;gBACF;qBAAO,IAAI,SAAS,EAAE;oBACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,gBAAgB,CAAC;AAC1E,oBAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,SAAS,EAAE;oBAClC,IAAI,CAAC,GAAG,EAAE;wBACR,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,sFAAsF,EAAE,CAAC;oBAC3H;yBAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE;AACxC,wBAAA,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;wBACpD,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE;4BACxB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAA,+CAAA,EAAkD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAA,EAAA,EAAK,IAAI,IAAI,GAAG,CAAA,CAAE,EAAE,CAAC;wBAC7H;oBACF;yBAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE;wBACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;AACnC,4BAAA,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC5E,gCAAA,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAA,0CAAA,EAA6C,IAAI,CAAC,KAAK,CAAA,CAAA,CAAG,EAAE,CAAC;4BAC/F;wBACF;oBACF;yBAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE;;wBAE3C,IAAI,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;AAClD,4BAAA,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAA,0CAAA,EAA6C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAA,CAAA,CAAG,EAAE,CAAC;wBACpG;oBACF;yBAAO;wBACL,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;oBAC/E;gBACF;AAAO,qBAAA,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC/E,oBAAA,MAAM,MAAM,GAAG,KAAK,EAAE,IAAI;oBAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;wBAC5C,UAAU,CAAC,IAAI,CAAC;AACd,4BAAA,GAAG,EAAE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE;4BAC3B,OAAO,EAAE,CAAA,0CAAA,EAA6C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,GAAA,EAAM,MAAM,IAAI,cAAc,CAAA,CAAA,CAAG;AACvG,yBAAA,CAAC;oBACJ;gBACF;YACF,CAAC;YACD,KAAK,GAAA;gBACH,IAAI,CAAC,GAAG,EAAE;YACZ,CAAC;AACF,SAAA;AACF,KAAA,CAAC,CAAC;AACH,IAAA,OAAO,UAAU;AACnB;AAEA,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyB;AAEpD;;;;;;AAMG;SACa,kCAAkC,CAAC,SAAiB,EAAE,YAAoB,EAAE,IAAY,EAAA;IACtG,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE;AACX,QAAA,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC;AAC/B,QAAA,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC;IACpC;IACA,OAAO,0BAA0B,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC;AACtE;;ACxIA;;;;;AAKG;;ACLH;;AAEG;;"}