@researchdatabox/redbox-core 0.0.0-bootstrap.0

package/dist/config/dompurify.config.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * DOMPurify Config Interface
+ * (sails.config.dompurify)
+ *
+ * DOMPurify sanitization profiles and hooks.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dompurify = void 0;
+exports.dompurify = {
+    /**
+     * Configuration profiles for different content types
+     */
+    profiles: {
+        /**
+         * SVG sanitization profile for user-uploaded SVG content
+         * Used primarily for branding logos and icons
+         *
+         * SECURITY NOTE: 'foreignObject' is explicitly forbidden as it's a high-risk
+         * XSS vector that can embed arbitrary HTML/iframes inside SVG, bypassing
+         * content security policies and allowing script execution.
+         */
+        svg: {
+            USE_PROFILES: { svg: true, svgFilters: true },
+            ALLOWED_TAGS: [
+                'svg', 'g', 'path', 'circle', 'ellipse', 'line', 'rect', 'polygon', 'polyline',
+                'text', 'tspan', 'textPath', 'defs', 'clipPath', 'mask', 'pattern', 'image',
+                'linearGradient', 'radialGradient', 'stop', 'symbol', 'marker', 'title', 'desc',
+                'use'
+            ],
+            ALLOWED_ATTR: [
+                // Core SVG attributes
+                'class', 'id', 'style', 'fill', 'stroke', 'stroke-width', 'stroke-dasharray',
+                'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit',
+                'fill-opacity', 'stroke-opacity', 'opacity', 'transform', 'clip-path', 'mask',
+                // Geometric attributes
+                'x', 'y', 'x1', 'y1', 'x2', 'y2', 'cx', 'cy', 'r', 'rx', 'ry', 'width', 'height',
+                'd', 'points', 'viewBox', 'preserveAspectRatio',
+                // Text attributes
+                'font-family', 'font-size', 'font-weight', 'font-style', 'text-anchor',
+                'dominant-baseline', 'alignment-baseline', 'dx', 'dy', 'rotate',
+                // Gradient attributes
+                'gradientUnits', 'gradientTransform', 'spreadMethod', 'offset', 'stop-color',
+                'stop-opacity', 'x1', 'y1', 'x2', 'y2', 'cx', 'cy', 'r', 'fx', 'fy',
+                // Pattern attributes
+                'patternUnits', 'patternContentUnits', 'patternTransform',
+                // Animation attributes (safe ones)
+                'dur', 'begin', 'end', 'repeatCount', 'values', 'keyTimes', 'keySplines',
+                'calcMode', 'attributeName', 'attributeType', 'from', 'to', 'by',
+                // Link attributes (restricted to fragments only)
+                'href', 'xlink:href'
+            ],
+            FORBID_TAGS: [
+                'script', 'iframe', 'embed', 'object', 'applet', 'meta', 'link', 'style',
+                // Explicitly forbid foreignObject - high-risk XSS vector that can embed arbitrary HTML
+                'foreignObject'
+            ],
+            FORBID_ATTR: [
+                // All event handlers
+                'onload', 'onerror', 'onclick', 'onmouseover', 'onmouseout', 'onfocus', 'onblur',
+                'onchange', 'onsubmit', 'onreset', 'onselect', 'onkeydown', 'onkeypress', 'onkeyup',
+                'onmousedown', 'onmouseup', 'onmousemove', 'onmouseenter', 'onmouseleave',
+                'ondblclick', 'oncontextmenu', 'onwheel', 'ondrag', 'ondrop', 'ondragover',
+                'ondragstart', 'ondragend', 'ondragenter', 'ondragleave', 'onscroll', 'onresize',
+                'onunload', 'onbeforeunload', 'onhashchange', 'onpopstate', 'onstorage',
+                'onanimationstart', 'onanimationend', 'onanimationiteration', 'ontransitionend',
+                'onplay', 'onpause', 'onended', 'ontimeupdate', 'onvolumechange', 'onwaiting',
+                // SVG-specific animation events
+                'onbegin', 'onend', 'onrepeat'
+            ],
+            ALLOW_DATA_ATTR: false,
+            ALLOW_UNKNOWN_PROTOCOLS: false,
+            ALLOWED_URI_REGEXP: /^(?:#|(?:\.{1,2}\/|\/(?!\/)))/i,
+            SANITIZE_DOM: true,
+            KEEP_CONTENT: false,
+            IN_PLACE: false
+        },
+        /**
+         * HTML content sanitization profile for rich text content
+         * More restrictive than SVG, suitable for user-generated HTML content
+         *
+         * SECURITY NOTE: The 'target' attribute is allowed, but any link with target="_blank"
+         * MUST have rel="noopener noreferrer" to prevent tabnapping attacks. This is enforced
+         * via DOMPurify hooks (see afterSanitizeAttributes hook below) that automatically add
+         * the required rel attribute to any anchor tag with target="_blank".
+         */
+        html: {
+            ALLOWED_TAGS: [
+                'a', 'p', 'br', 'strong', 'em', 'u', 'i', 'b', 'span', 'div',
+                'ul', 'ol', 'li', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6'
+            ],
+            ALLOWED_ATTR: ['class', 'id', 'title', 'href', 'target', 'rel'],
+            FORBID_TAGS: [
+                'script', 'iframe', 'embed', 'object', 'applet'
+            ],
+            FORBID_ATTR: [
+                // Forbid all event handlers
+                'onload', 'onerror', 'onclick', 'onmouseover', 'onmouseout', 'onfocus', 'onblur',
+                'onchange', 'onsubmit', 'onreset', 'onselect', 'onkeydown', 'onkeypress', 'onkeyup',
+                'onmousedown', 'onmouseup', 'onmousemove', 'onmouseenter', 'onmouseleave',
+                'ondblclick', 'oncontextmenu', 'onwheel', 'ondrag', 'ondrop', 'ondragover'
+            ],
+            ALLOW_DATA_ATTR: false,
+            ALLOW_UNKNOWN_PROTOCOLS: false,
+            ALLOWED_URI_REGEXP: /^(?:(?:(?:f|ht)tps?|mailto|tel):|[^a-z]|[a-z+.-]+(?:[^a-z+.-:]|$))/i,
+            SANITIZE_DOM: true,
+            KEEP_CONTENT: true,
+            IN_PLACE: false
+        },
+        /**
+         * Minimal sanitization profile for trusted content
+         * Use only for content from trusted sources that needs light sanitization
+         */
+        minimal: {
+            FORBID_TAGS: [
+                'script', 'iframe', 'embed', 'object', 'applet'
+            ],
+            FORBID_ATTR: [
+                // Forbid all event handlers
+                'onload', 'onerror', 'onclick', 'onmouseover', 'onmouseout', 'onfocus', 'onblur',
+                'onchange', 'onsubmit', 'onreset', 'onselect', 'onkeydown', 'onkeypress', 'onkeyup',
+                'onmousedown', 'onmouseup', 'onmousemove', 'onmouseenter', 'onmouseleave',
+                'ondblclick', 'oncontextmenu', 'onwheel', 'ondrag', 'ondrop', 'ondragover'
+            ],
+            ALLOW_DATA_ATTR: true,
+            ALLOW_UNKNOWN_PROTOCOLS: false,
+            ALLOWED_URI_REGEXP: /^(?:(?:(?:f|ht)tps?|mailto|tel):|[^a-z]|[a-z+.-]+(?:[^a-z+.-:]|$))/i,
+            SANITIZE_DOM: true,
+            KEEP_CONTENT: true,
+            IN_PLACE: false
+        }
+    },
+    /**
+     * Default profile to use if none is specified
+     */
+    defaultProfile: 'html',
+    /**
+     * DOMPurify hooks for additional sanitization logic
+     * These hooks are applied during the sanitization process
+     */
+    hooks: {
+        /**
+         * afterSanitizeAttributes hook: Automatically add rel="noopener noreferrer"
+         * to any anchor tag with target="_blank" to prevent tabnapping attacks.
+         */
+        afterSanitizeAttributes: function (node) {
+            // Check if node is an anchor tag with target="_blank"
+            const el = node;
+            // Note: tagName is usually uppercase in DOM APIs but good to check safe access
+            if (el.tagName === 'A' && el.hasAttribute('target')) {
+                const target = el.getAttribute('target');
+                if (target === '_blank') {
+                    // Get existing rel attribute value or empty string
+                    const existingRel = el.getAttribute('rel') || '';
+                    const relValues = existingRel.split(/\s+/).filter(v => v);
+                    // Add 'noopener' if not present
+                    if (!relValues.includes('noopener')) {
+                        relValues.push('noopener');
+                    }
+                    // Add 'noreferrer' if not present
+                    if (!relValues.includes('noreferrer')) {
+                        relValues.push('noreferrer');
+                    }
+                    // Set the updated rel attribute
+                    el.setAttribute('rel', relValues.join(' '));
+                }
+            }
+        }
+    },
+    /**
+     * Global settings that apply to all profiles
+     */
+    globalSettings: {
+        // Add any global DOMPurify settings here
+        FORCE_BODY: false,
+        RETURN_DOM: false,
+        RETURN_DOM_FRAGMENT: false,
+        RETURN_TRUSTED_TYPE: false
+    }
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist/config/dynamicasset.config.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Dynamic Asset Config Interface and Default Values
+ * Auto-generated from config/dynamicasset.js
+ */
+export interface DynamicAssetDefinition {
+    view: string;
+    type: string;
+}
+export interface DynamicAssetConfig {
+    [assetName: string]: DynamicAssetDefinition;
+}
+export declare const dynamicasset: DynamicAssetConfig;
+//# sourceMappingURL=dynamicasset.config.d.ts.map

package/dist/config/dynamicasset.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamicasset.config.d.ts","sourceRoot":"","sources":["../../src/config/dynamicasset.config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,sBAAsB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IAC/B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAAC;CAC/C;AAED,eAAO,MAAM,YAAY,EAAE,kBAS1B,CAAC"}

package/dist/config/dynamicasset.config.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * Dynamic Asset Config Interface and Default Values
+ * Auto-generated from config/dynamicasset.js
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dynamicasset = void 0;
+exports.dynamicasset = {
+    apiClientConfig: {
+        view: "apiClientConfig",
+        type: "application/json"
+    },
+    dynamicScriptAsset: {
+        view: "dynamicScriptAsset",
+        type: "text/javascript",
+    },
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZHluYW1pY2Fzc2V0LmNvbmZpZy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9jb25maWcvZHluYW1pY2Fzc2V0LmNvbmZpZy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBQUE7OztHQUdHOzs7QUFXVSxRQUFBLFlBQVksR0FBdUI7SUFDNUMsZUFBZSxFQUFFO1FBQ2IsSUFBSSxFQUFFLGlCQUFpQjtRQUN2QixJQUFJLEVBQUUsa0JBQWtCO0tBQzNCO0lBQ0Qsa0JBQWtCLEVBQUU7UUFDaEIsSUFBSSxFQUFFLG9CQUFvQjtRQUMxQixJQUFJLEVBQUUsaUJBQWlCO0tBQzFCO0NBQ0osQ0FBQyJ9

package/dist/config/dynamicconfig.config.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Dynamic Config Interface
+ * (sails.config.dynamicconfig)
+ *
+ * Dynamic configuration settings.
+ */
+export interface DynamicConfigConfig {
+    /** Active dynamic config modules */
+    active: string[];
+}
+export declare const dynamicconfig: DynamicConfigConfig;
+//# sourceMappingURL=dynamicconfig.config.d.ts.map

package/dist/config/dynamicconfig.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamicconfig.config.d.ts","sourceRoot":"","sources":["../../src/config/dynamicconfig.config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,mBAAmB;IAChC,oCAAoC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,eAAO,MAAM,aAAa,EAAE,mBAE3B,CAAC"}

package/dist/config/dynamicconfig.config.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Dynamic Config Interface
+ * (sails.config.dynamicconfig)
+ *
+ * Dynamic configuration settings.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dynamicconfig = void 0;
+exports.dynamicconfig = {
+    active: ['auth']
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZHluYW1pY2NvbmZpZy5jb25maWcuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL2R5bmFtaWNjb25maWcuY29uZmlnLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQTs7Ozs7R0FLRzs7O0FBT1UsUUFBQSxhQUFhLEdBQXdCO0lBQzlDLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztDQUNuQixDQUFDIn0=

package/dist/config/emailnotification.config.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Email Notification Config Interface
+ * (sails.config.emailnotification)
+ *
+ * Email notification service configuration.
+ */
+export interface EmailApiEndpoint {
+    method: 'post' | 'get';
+    url: string;
+}
+export interface EmailServerOptions {
+    host: string;
+    port: number;
+    secure: boolean;
+    tls?: {
+        rejectUnauthorized: boolean;
+    };
+    auth?: {
+        user: string;
+        pass: string;
+    };
+}
+export interface EmailSettings {
+    enabled: boolean;
+    from: string;
+    templateDir: string;
+    serverOptions: EmailServerOptions;
+}
+export interface EmailDefaults {
+    from: string;
+    subject: string;
+    format: 'html' | 'text';
+}
+export interface EmailTemplate {
+    subject: string;
+    template: string;
+}
+export interface EmailNotificationConfig {
+    api: {
+        send: EmailApiEndpoint;
+    };
+    settings: EmailSettings;
+    defaults: EmailDefaults;
+    templates: {
+        [templateName: string]: EmailTemplate;
+    };
+}
+export declare const emailnotification: EmailNotificationConfig;
+//# sourceMappingURL=emailnotification.config.d.ts.map

package/dist/config/emailnotification.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailnotification.config.d.ts","sourceRoot":"","sources":["../../src/config/emailnotification.config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,gBAAgB;IAC7B,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE;QACF,kBAAkB,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,IAAI,CAAC,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KAChB,CAAC;CACL;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,kBAAkB,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACpC,GAAG,EAAE;QACD,IAAI,EAAE,gBAAgB,CAAC;KAC1B,CAAC;IACF,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE;QACP,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,CAAC;KACzC,CAAC;CACL;AAED,eAAO,MAAM,iBAAiB,EAAE,uBA0B/B,CAAC"}

package/dist/config/emailnotification.config.js

@@ -0,0 +1,37 @@
+"use strict";
+/**
+ * Email Notification Config Interface
+ * (sails.config.emailnotification)
+ *
+ * Email notification service configuration.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emailnotification = void 0;
+exports.emailnotification = {
+    api: {
+        send: { method: 'post', url: '/api/v1/messaging/emailnotification' },
+    },
+    settings: {
+        enabled: true,
+        from: 'noreply@redbox',
+        templateDir: 'views/emailTemplates/',
+        serverOptions: {
+            host: 'integration-testing-email-1',
+            port: 1025,
+            secure: false,
+            tls: {
+                rejectUnauthorized: false,
+            },
+        },
+    },
+    defaults: {
+        from: 'redbox@dev',
+        subject: 'ReDBox Notification',
+        format: 'html',
+    },
+    templates: {
+        transferOwnerTo: { subject: 'Ownership of DMP record/s has been transferred to you', template: 'transferOwnerTo' },
+        test: { subject: 'Test Email Message', template: 'test' },
+    },
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist/config/figshareAPI.config.d.ts

@@ -0,0 +1,116 @@
+/**
+ * Figshare API Config Interface
+ * (sails.config.figshareAPI)
+ *
+ * Figshare integration configuration.
+ */
+interface FigshareFieldValidation {
+    template?: string;
+    message?: string;
+    maxLength?: number;
+    addSuffix?: boolean;
+    [key: string]: unknown;
+}
+interface FigshareFieldMapping {
+    figName: string;
+    rbName: string;
+    template?: string;
+    defaultValue?: unknown;
+    runByNameOnly?: boolean;
+    unset?: boolean;
+    validations?: FigshareFieldValidation[];
+    [key: string]: unknown;
+}
+interface FigshareRuntimeArtifactTemplate {
+    template: string;
+    [key: string]: unknown;
+}
+export interface FigshareApiConfig {
+    frontEndURL: string;
+    baseURL: string;
+    APIToken: string;
+    attachmentsTempDir: string;
+    attachmentsFigshareTempDir: string;
+    diskSpaceThreshold: number;
+    testMode: boolean;
+    extraVerboseLogging: boolean;
+    testUsers: unknown[];
+    testLicenses: unknown[];
+    testCategories: unknown[];
+    testResponse: unknown;
+    mapping: {
+        figshareItemGroupId: number;
+        figshareItemType: string;
+        figshareAuthorUserId: string;
+        figshareCurationStatus: string;
+        figshareCurationStatusTargetValue: string;
+        figshareDisableUpdateByCurationStatus: boolean;
+        figshareNeedsPublishAfterFileUpload: boolean;
+        figshareForceEmbargoUpdateAlways: boolean;
+        figshareOnlyPublishSelectedAttachmentFiles: boolean;
+        figshareOnlyPublishSelectedLocationURLs: boolean;
+        figshareScheduledTransitionRecordWorkflowFromArticlePropertiesJob: {
+            enabled: boolean;
+            namedQuery: string;
+            targetStep: string;
+            paramMap: Record<string, unknown>;
+            figshareTargetFieldKey: string;
+            figshareTargetFieldValue: string;
+            username: string;
+            userType: string;
+        };
+        recordFigArticleId: string;
+        recordFigArticleURL: string | string[];
+        recordDataLocations: string;
+        recordAuthorExternalName: string;
+        recordAuthorUniqueBy: string;
+        response: {
+            entityId: string;
+            location: string;
+            article: unknown[];
+        };
+        artifacts: Record<string, unknown>;
+        runtimeArtifacts: {
+            getContributorsFromRecord: FigshareRuntimeArtifactTemplate;
+            getCategoryIDs: FigshareRuntimeArtifactTemplate;
+            isRecordEmbargoed: FigshareRuntimeArtifactTemplate;
+            isRecordEmbargoCleared: FigshareRuntimeArtifactTemplate;
+            [key: string]: FigshareRuntimeArtifactTemplate | unknown;
+        };
+        templates: {
+            impersonate: Record<string, unknown>;
+            customFields: {
+                create: Record<string, unknown>;
+                update: Record<string, unknown>;
+            };
+            getAuthor: Array<Record<string, unknown>>;
+            [key: string]: unknown;
+        };
+        customFields: {
+            path: string;
+            create: FigshareFieldMapping[];
+            update: FigshareFieldMapping[];
+        };
+        standardFields: {
+            create: FigshareFieldMapping[];
+            update: FigshareFieldMapping[];
+            embargo: FigshareFieldMapping[];
+        };
+        targetState: {
+            publish?: FigshareFieldMapping[];
+            draft?: FigshareFieldMapping[];
+            [key: string]: FigshareFieldMapping[] | undefined;
+        };
+        upload: {
+            attachments: FigshareFieldMapping[];
+            override: {
+                template?: string;
+                [key: string]: unknown;
+            };
+        };
+        [key: string]: unknown;
+    };
+}
+export declare const figshareAPI: FigshareApiConfig;
+export {};
+//# sourceMappingURL=figshareAPI.config.d.ts.map

package/dist/config/figshareAPI.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"figshareAPI.config.d.ts","sourceRoot":"","sources":["../../src/config/figshareAPI.config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,oBAAoB;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACxC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,+BAA+B;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,YAAY,EAAE,OAAO,EAAE,CAAC;IACxB,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE;QACL,mBAAmB,EAAE,MAAM,CAAC;QAC5B,gBAAgB,EAAE,MAAM,CAAC;QACzB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,iCAAiC,EAAE,MAAM,CAAC;QAC1C,qCAAqC,EAAE,OAAO,CAAC;QAC/C,mCAAmC,EAAE,OAAO,CAAC;QAC7C,gCAAgC,EAAE,OAAO,CAAC;QAC1C,0CAA0C,EAAE,OAAO,CAAC;QACpD,uCAAuC,EAAE,OAAO,CAAC;QACjD,iEAAiE,EAAE;YAC/D,OAAO,EAAE,OAAO,CAAC;YACjB,UAAU,EAAE,MAAM,CAAC;YACnB,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClC,sBAAsB,EAAE,MAAM,CAAC;YAC/B,wBAAwB,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;SACpB,CAAC;QACF,kBAAkB,EAAE,MAAM,CAAC;QAC3B,mBAAmB,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACvC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,wBAAwB,EAAE,MAAM,CAAC;QACjC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE;YACN,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,CAAC;SACtB,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,gBAAgB,EAAE;YAChB,yBAAyB,EAAE,+BAA+B,CAAC;YAC3D,cAAc,EAAE,+BAA+B,CAAC;YAChD,iBAAiB,EAAE,+BAA+B,CAAC;YACnD,sBAAsB,EAAE,+BAA+B,CAAC;YACxD,CAAC,GAAG,EAAE,MAAM,GAAG,+BAA+B,GAAG,OAAO,CAAC;SAC1D,CAAC;QACF,SAAS,EAAE;YACT,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrC,YAAY,EAAE;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;aACjC,CAAC;YACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;SACxB,CAAC;QACF,YAAY,EAAE;YACZ,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,oBAAoB,EAAE,CAAC;YAC/B,MAAM,EAAE,oBAAoB,EAAE,CAAC;SAChC,CAAC;QACF,cAAc,EAAE;YACd,MAAM,EAAE,oBAAoB,EAAE,CAAC;YAC/B,MAAM,EAAE,oBAAoB,EAAE,CAAC;YAC/B,OAAO,EAAE,oBAAoB,EAAE,CAAC;SACjC,CAAC;QACF,WAAW,EAAE;YACX,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;YACjC,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;YAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,EAAE,GAAG,SAAS,CAAC;SACnD,CAAC;QACF,MAAM,EAAE;YACN,WAAW,EAAE,oBAAoB,EAAE,CAAC;YACpC,QAAQ,EAAE;gBACR,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;aACxB,CAAC;SACH,CAAC;QACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,CAAC;CACL;AAGD,eAAO,MAAM,WAAW,EAAE,iBA80BzB,CAAC"}