@setsquare/review-sdk 0.0.1

package/dist/sanitise.js

@@ -0,0 +1,247 @@
+import { MAX_CONTEXT_LABEL_LENGTH, MAX_FAILURE_SUMMARY_LENGTH, MAX_SELECTORS_PER_FINDING, MAX_SELECTOR_LENGTH, MAX_URL_PATTERN_LENGTH, hostileCharacters, } from '@setsquare/schema/limits';
+/**
+ * Sanitisation at source.
+ *
+ * The trust posture the platform sells rests on this file: "PII-safe by
+ * construction" has to be a property of the SDK, not a promise about the
+ * platform, because the platform can only be careful with what it receives.
+ * Everything here runs in the customer's own process, before a byte crosses any
+ * boundary — including the boundary into Playwright's own HTML report and trace,
+ * which is why this is the one thing the fixture does rather than the reporter.
+ *
+ * Every function is pure. No I/O, no page access, no state. That is what lets the
+ * fixture call them without becoming stateful, and what lets them be tested
+ * against genuinely awful inputs rather than mocked ones.
+ *
+ * The limits come from `packages/schema` rather than being restated here. A cap
+ * that drifted from the contract would surface as rejected payloads in a
+ * customer's CI, which is the worst possible place to discover it.
+ *
+ * What this file deliberately does NOT do: neutralise injection. `<script>` and
+ * `](evil)` survive intact, because they are legitimate content in a CSS
+ * selector and because destroying evidence to feel safer is a bad trade. Output
+ * encoding belongs to each sink — the platform UI, PR-comment markdown, exports,
+ * MCP payloads — and each has to do its own.
+ */
+/**
+ * Remove characters that exist only to deceive.
+ *
+ * Zero-width characters make two visually identical selectors unequal, which
+ * breaks dedupe and clustering silently. Bidi overrides make a rendered line read
+ * backwards. Control characters break logs and terminals. None has any business
+ * in a CSS selector, so removal loses nothing real.
+ */
+export function stripHostileCharacters(value) {
+    return value.replace(hostileCharacters(), '');
+}
+/**
+ * Cap a string's length, marking the cut.
+ *
+ * The ellipsis matters: a silently shortened selector looks like a selector that
+ * was always that short, and someone will eventually try to use it to find the
+ * element. One character of honesty prevents that.
+ */
+export function capLength(value, max) {
+    if (value.length <= max)
+        return value;
+    return `${value.slice(0, max - 1)}…`;
+}
+/** Strip, then cap. The order matters — stripping can only shorten. */
+function clean(value, max) {
+    return capLength(stripHostileCharacters(value), max);
+}
+/**
+ * Reduce a finding's selectors to a representative, bounded set.
+ *
+ * Deduplicated before capping, deliberately. The hostile fixture emits 617
+ * selectors of which 600 are near-identical `span:nth-child(N)`; taking the first
+ * ten raw would return ten variations of the same thing and describe nothing.
+ * Deduplicating first means the cap spends its budget on distinct shapes.
+ *
+ * Note that dedupe happens AFTER stripping, which is the only order that works:
+ * two selectors differing solely by a zero-width character are the same selector
+ * wearing a disguise, and comparing them before stripping would keep both.
+ */
+export function sanitiseSelectors(raw, max = MAX_SELECTORS_PER_FINDING) {
+    const seen = new Set();
+    const selectors = [];
+    let shortened = false;
+    for (const candidate of raw) {
+        const stripped = stripHostileCharacters(candidate);
+        if (stripped.length === 0)
+            continue;
+        const capped = capLength(stripped, MAX_SELECTOR_LENGTH);
+        if (capped !== stripped)
+            shortened = true;
+        if (seen.has(capped))
+            continue;
+        seen.add(capped);
+        if (selectors.length < max)
+            selectors.push(capped);
+    }
+    return {
+        selectors,
+        selectorsTruncated: shortened || seen.size > selectors.length,
+    };
+}
+/** Axe's prose, bounded. */
+export function sanitiseFailureSummary(value) {
+    if (!value)
+        return undefined;
+    const cleaned = clean(value, MAX_FAILURE_SUMMARY_LENGTH);
+    return cleaned.length > 0 ? cleaned : undefined;
+}
+/** Theme, persona and state labels — short, and page-derived often enough to matter. */
+export function sanitiseLabel(value) {
+    if (!value)
+        return undefined;
+    const cleaned = clean(value, MAX_CONTEXT_LABEL_LENGTH);
+    return cleaned.length > 0 ? cleaned : undefined;
+}
+/**
+ * Test identifiers and titles.
+ *
+ * A deliberately different treatment from page-derived strings, and the
+ * difference is worth stating because it looks inconsistent otherwise.
+ *
+ * Test titles are AUTHORED BY THE CUSTOMER'S DEVELOPERS, not derived from a
+ * scanned page. They are not attacker-influenceable in the way a class name is,
+ * and they are the only human-readable handle the runs list has — so identifiers
+ * inside them are left alone. `the item editor loads for 8fa1c0de` stays exactly
+ * that, because redacting it would produce a run list of indistinguishable rows.
+ *
+ * They can still carry personal data: a data-driven test titled with a candidate's
+ * email is entirely ordinary. That is accepted rather than solved, and it is
+ * consistent with the posture already recorded in the dev plan — run envelopes
+ * structurally carry personal data of customer staff (commit author names and
+ * emails, annotation identities), which is exactly why Setsquare designs as a
+ * processor rather than pretending the risk away.
+ *
+ * What IS applied is character sanitisation, because a bidi override in a test
+ * title breaks a terminal, a log and a grid cell just as thoroughly as one in a
+ * selector, whoever wrote it.
+ */
+export function sanitiseTestText(value, max) {
+    return clean(value, max);
+}
+/**
+ * Turn a URL into a route pattern, dropping everything that identifies a visit.
+ *
+ * This is sanitisation, not inference, and the distinction is worth being precise
+ * about because it decides which stage owns it. Replacing `/items/42/edit` with
+ * `/items/:id/edit` removes a record identifier; replacing
+ * `/reset-password/8f3a…` removes a live credential. Naming that pattern
+ * `item-editor` is inference, and belongs with surface resolution.
+ *
+ * Three things are removed unconditionally:
+ *
+ *   - the origin, because the schema has no `url` field and the surface is the
+ *     path, not the host
+ *   - the query string, which is where tokens, emails and search terms live
+ *   - the fragment, for the same reason
+ *
+ * And then any segment that looks like an identifier rather than a name is
+ * replaced. The test is deliberately conservative in the SAFE direction: a
+ * word-like segment is kept, and anything else becomes `:id`. Over-redacting
+ * costs a slightly coarser grid row; under-redacting ships someone's password
+ * reset token to a server.
+ */
+export function toUrlPattern(url) {
+    let path;
+    try {
+        // A relative URL still parses against a base we then discard, so a caller
+        // does not have to know which kind it holds.
+        path = new URL(url, 'http://localhost').pathname;
+    }
+    catch {
+        return { pattern: '/', redacted: false };
+    }
+    if (path === '' || path === '/')
+        return { pattern: '/', redacted: false };
+    let redacted = false;
+    const segments = path.split('/').map((segment) => {
+        if (segment === '')
+            return segment;
+        const decoded = decodeSegment(segment);
+        if (looksLikeIdentifier(decoded)) {
+            redacted = true;
+            return ':id';
+        }
+        return stripHostileCharacters(decoded);
+    });
+    return {
+        pattern: capLength(segments.join('/'), MAX_URL_PATTERN_LENGTH) || '/',
+        redacted,
+    };
+}
+/** Percent-encoding hides the shape of a segment; decode before judging it. */
+function decodeSegment(segment) {
+    try {
+        return decodeURIComponent(segment);
+    }
+    catch {
+        return segment;
+    }
+}
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const ULID = /^[0-9A-HJKMNP-TV-Z]{26}$/;
+const ALL_DIGITS = /^\d+$/;
+const LONG_HEX = /^[0-9a-f]{8,}$/i;
+/** `job`, `v1`, `2fa` — lowercase words, optionally with digits. */
+const LOWER_WORD = /^[a-z0-9]+$/;
+/** `API`, `EU` — acronyms do appear in routes. */
+const UPPER_WORD = /^[A-Z0-9]+$/;
+/** `Settings` — capitalised, as some frameworks route. */
+const CAPITALISED_WORD = /^[A-Z][a-z0-9]*$/;
+/** Longer than any plausible route word, before separators are considered. */
+const MAX_NAME_PART = 24;
+/** A letters-and-digits run this long with no separator is a token, not a name. */
+const TOKENISH_MIXED_LENGTH = 12;
+/**
+ * Is one separator-delimited part of a segment a name rather than a token?
+ *
+ * The load-bearing signal is CASE. Route segments are lowercase, kebab-case,
+ * occasionally capitalised or an acronym — they do not mix cases inside a single
+ * unseparated run. Tokens do, constantly: `aGVsbG8gd29ybGQK` is alphanumeric and
+ * starts with a letter, which an earlier version of this function accepted as a
+ * word and passed straight through. Base64 is the common case and it was the
+ * case that broke it.
+ */
+function partIsNameLike(part) {
+    if (part.length === 0 || part.length > MAX_NAME_PART)
+        return false;
+    if (!(LOWER_WORD.test(part) || UPPER_WORD.test(part) || CAPITALISED_WORD.test(part))) {
+        return false;
+    }
+    // `2fa` is fine; `abc123def456ghi` is a token wearing lowercase.
+    const mixesLettersAndDigits = /[a-zA-Z]/.test(part) && /\d/.test(part);
+    return !(mixesLettersAndDigits && part.length >= TOKENISH_MIXED_LENGTH);
+}
+/**
+ * Is this path segment an identifier rather than a name?
+ *
+ * Ordered so the cheap certain cases decide first, and biased toward redaction:
+ * the final rule KEEPS only what looks like a name, so novel token formats are
+ * redacted by default rather than by enumeration. A redaction list that has to
+ * predict every id format is a redaction list that eventually misses one — and
+ * the thing it misses is a live credential in someone's URL.
+ */
+function looksLikeIdentifier(segment) {
+    if (segment.length === 0)
+        return false;
+    if (ALL_DIGITS.test(segment))
+        return true;
+    if (UUID.test(segment))
+        return true;
+    if (ULID.test(segment))
+        return true;
+    if (LONG_HEX.test(segment))
+        return true;
+    // An email address in a path. Rare, and unmistakably personal data.
+    if (segment.includes('@'))
+        return true;
+    // Every separator-delimited part must look like a name. One token-shaped part
+    // is enough to redact the whole segment: `Xj9__aB4-zQ` is not a route.
+    return !segment.split(/[-_.]/).every(partIsNameLike);
+}
+//# sourceMappingURL=sanitise.js.map

package/dist/sanitise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitise.js","sourceRoot":"","sources":["../src/sanitise.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAW;IAClD,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AACvC,CAAC;AAED,uEAAuE;AACvE,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW;IACvC,OAAO,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAsB,EACtB,GAAG,GAAG,yBAAyB;IAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEpC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,QAAQ;YAAE,SAAS,GAAG,IAAI,CAAC;QAE1C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjB,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,SAAS;QACT,kBAAkB,EAAE,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM;KAC9D,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,sBAAsB,CAAC,KAAyB;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,GAAW;IACzD,OAAO,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,IAAY,CAAC;IAEjB,IAAI,CAAC;QACH,0EAA0E;QAC1E,6CAA6C;QAC7C,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAE1E,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/C,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC;QAEnC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,sBAAsB,CAAC,IAAI,GAAG;QACrE,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,IAAI,GAAG,0BAA0B,CAAC;AACxC,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,oEAAoE;AACpE,MAAM,UAAU,GAAG,aAAa,CAAC;AACjC,kDAAkD;AAClD,MAAM,UAAU,GAAG,aAAa,CAAC;AACjC,0DAA0D;AAC1D,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,8EAA8E;AAC9E,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,mFAAmF;AACnF,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;QAAE,OAAO,KAAK,CAAC;IAEnE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iEAAiE;IACjE,MAAM,qBAAqB,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvE,OAAO,CAAC,CAAC,qBAAqB,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,oEAAoE;IACpE,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,8EAA8E;IAC9E,uEAAuE;IACvE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AACvD,CAAC"}

package/dist/scan.d.ts

@@ -0,0 +1,60 @@
+import { type Page } from '@playwright/test';
+import { type WcagTarget } from './rules.js';
+import { toUrlPattern } from './sanitise.js';
+/**
+ * Level 2: the explicit scan API.
+ *
+ * Auto-scan gets a grid for free from a suite nobody edited. This is for the
+ * states auto-scan cannot reach on its own — a modal that is open, a form showing
+ * validation errors, a theme the suite toggles deliberately — where the customer
+ * knows something we could never infer and says so.
+ *
+ * The signature takes `page` explicitly rather than arriving as a Playwright
+ * fixture, and that is a deliberate trade. A fixture would read marginally better
+ * (`async ({ page, setsquare }) => …`) but would need TypeScript declaration merging
+ * to type at all, since the customer imports `test` from `@playwright/test` and
+ * not from us. Passing `page` costs one argument, types perfectly, matches what
+ * `@axe-core/playwright` already trained everyone to expect — and calling this at
+ * all is a test edit by definition, so the "zero test rewrites" promise (which is
+ * about auto-scan) is untouched.
+ */
+export interface ScanOptions {
+    /** The named state being evidenced: `validation-errors`, `menu-open`. */
+    state?: string;
+    /** Overrides whatever the DOM says. A customer's statement outranks our sniffing. */
+    theme?: string;
+    /** Overrides the project-name mapping for this scan. */
+    persona?: string;
+}
+/**
+ * What a scan found, returned to the caller.
+ *
+ * SDK-computed facts only, and no comparison of any kind — there is nothing here
+ * to compare against, locally, ever. Returned rather than kept private so a
+ * customer can assert on their own conformance if they want to; P5's `setsquare
+ * verify` is the supported way to do that, but nothing here should stop someone
+ * writing `expect(result.violations).toBe(0)` today.
+ */
+export interface ScanSummary {
+    surface: string;
+    /** The conformance level this scan was assessed against. */
+    wcagTarget: WcagTarget;
+    violations: number;
+    incomplete: number;
+    passes: number;
+    /** False when the scan could not run. The SDK never throws into a customer's test. */
+    scanned: boolean;
+}
+declare function scan(page: Page, surface: string, options?: ScanOptions): Promise<ScanSummary>;
+/**
+ * The explicit API surface.
+ *
+ * An object rather than a bare function so the shape has room to grow — P5 adds
+ * `setsquare.verify()` — without the import line changing under anyone.
+ */
+export declare const setsquare: {
+    scan: typeof scan;
+};
+/** Exported for the reporter's surface normalisation; the same function scans use. */
+export { toUrlPattern };
+//# sourceMappingURL=scan.d.ts.map

package/dist/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAmBnD,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,OAAO,EAAE,OAAO,CAAC;CAClB;AAuCD,iBAAe,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAoMhG;AAQD;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;CAAW,CAAC;AAElC,sFAAsF;AACtF,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/scan.js

@@ -0,0 +1,246 @@
+import { createHash } from 'node:crypto';
+import { test } from '@playwright/test';
+import { engineVersion, rulesetDigest, runAxe } from './axe.js';
+import { SCAN_RECORD_ATTACHMENT, SCAN_RECORD_VERSION, } from './contract.js';
+import { toFindings, toInapplicable, toPasses } from './findings.js';
+import { capturePerf } from './perf.js';
+import { readDocumentFacts } from './document.js';
+import { pageRuntime } from './observe.js';
+import { recordUnscannable } from './unscannable.js';
+import { isDisabled } from './options.js';
+import { runStatusMessages, runTextSpacing } from './checks/dynamic.js';
+import { setsquareCheckVersions } from './checks/versions.js';
+import { runReadingLevel } from './reading-level.js';
+import { readingLevelEnabled, rulePolicy, scanTimeoutMs } from './runtime.js';
+import { tagsFor } from './rules.js';
+import { sanitiseLabel } from './sanitise.js';
+import { toUrlPattern } from './sanitise.js';
+/**
+ * Page loads, tracked so scans of one load share a `visitRef`.
+ *
+ * A `WeakMap` because the key is a Playwright `Page` and we must not keep it
+ * alive: a suite with thousands of pages would otherwise leak every one of them
+ * for the lifetime of the worker.
+ *
+ * The heuristic is "same URL means same visit", which is right for the case that
+ * matters — scanning one page repeatedly as its state changes — and wrong only if
+ * a test navigates away and back to the identical URL, where it merges two visits
+ * that produced identical perf numbers anyway.
+ */
+const visits = new WeakMap();
+function visitFor(page, url) {
+    const existing = visits.get(page);
+    if (existing && existing.url === url)
+        return { ref: existing.ref, firstOfVisit: false };
+    const ref = createHash('sha256')
+        .update(`${url}#${Date.now()}#${Math.random()}`, 'utf8')
+        .digest('hex')
+        .slice(0, 16);
+    visits.set(page, { url, ref, perfCaptured: false });
+    return { ref, firstOfVisit: true };
+}
+/** Marks this visit's perf as taken, so later scans of the same load skip it. */
+function markPerfCaptured(page) {
+    const existing = visits.get(page);
+    if (existing)
+        existing.perfCaptured = true;
+}
+function perfAlreadyCaptured(page) {
+    return visits.get(page)?.perfCaptured ?? false;
+}
+async function scan(page, surface, options = {}) {
+    const declared = { surface };
+    const state = sanitiseLabel(options.state);
+    if (state)
+        declared.state = state;
+    const theme = sanitiseLabel(options.theme);
+    if (theme)
+        declared.theme = theme;
+    const persona = sanitiseLabel(options.persona);
+    if (persona)
+        declared.persona = persona;
+    const policy = rulePolicy();
+    /*
+     * `SETSQUARE_DISABLED` means off, including here.
+     *
+     * An explicit `setsquare.scan()` is the customer's own call, so there is an argument
+     * for honouring it regardless — but the switch exists so somebody can answer
+     * "is it you or is it me" in one command, and a baseline with half the SDK
+     * still running answers nothing. Off means off.
+     *
+     * Returns the same shape a refused scan returns, so a spec that asserts on the
+     * result keeps working rather than throwing on `undefined` the moment the
+     * switch is set.
+     */
+    if (isDisabled()) {
+        return {
+            surface,
+            wcagTarget: policy.target,
+            violations: 0,
+            incomplete: 0,
+            passes: 0,
+            scanned: false,
+        };
+    }
+    try {
+        const scanStartedAt = Date.now();
+        const results = await runAxe(page, policy, scanTimeoutMs());
+        const axeMs = Date.now() - scanStartedAt;
+        if (!results) {
+            // Explicit scans get the same ceiling as automatic ones. A customer who
+            // called `setsquare.scan()` still did not agree to lend us their whole test
+            // budget, and the honest return is "no scan" rather than an empty one.
+            recordUnscannable(page, toUrlPattern(page.url()).pattern, 'scan-timed-out');
+            return {
+                surface,
+                wcagTarget: policy.target,
+                violations: 0,
+                incomplete: 0,
+                passes: 0,
+                scanned: false,
+            };
+        }
+        const findings = toFindings(results);
+        const passes = toPasses(results);
+        const inapplicable = toInapplicable(results);
+        // Setsquare's own checks ride alongside axe's, in the same findings array
+        // and under the same never-fail discipline. The digest names the run's
+        // configured check set, never which scans happened to execute one — see
+        // setsquareCheckVersions for why.
+        const setsquareChecks = setsquareCheckVersions(policy);
+        if (readingLevelEnabled()) {
+            const readingLevel = await runReadingLevel(page);
+            if (readingLevel)
+                findings.push(readingLevel);
+        }
+        /*
+         * Dynamic checks run on explicit scans because the moment is safe by
+         * construction: the customer's test is awaiting this call, the page is
+         * single-threaded, and the text-spacing probe injects, measures and
+         * removes its stylesheet before we return. An explicit scan of an error
+         * state (`{ state: 'validation-errors' }`) is also exactly when the
+         * status-message layer has something real to look at.
+         */
+        for (const check of [await runTextSpacing(page), await runStatusMessages(page)]) {
+            if (check.finding)
+                findings.push(check.finding);
+            if (check.pass)
+                passes.push(check.pass);
+            if (check.inapplicable)
+                inapplicable.push(check.inapplicable);
+        }
+        const url = page.url();
+        const visit = visitFor(page, url);
+        const record = {
+            recordVersion: SCAN_RECORD_VERSION,
+            kind: 'scan',
+            page: {
+                project: test.info().project.name,
+                engine: engineOf(page),
+                url,
+            },
+            declared,
+            visitRef: visit.ref,
+            axeVersion: engineVersion(results) ?? 'unknown',
+            rulesetDigest: rulesetDigest(engineVersion(results) ?? 'unknown', results, tagsFor(policy), setsquareChecks),
+            wcagTarget: policy.target,
+            findings,
+            passes,
+            inapplicable,
+        };
+        const viewport = page.viewportSize();
+        if (viewport)
+            record.page.viewport = viewport;
+        const probesStartedAt = Date.now();
+        // One round-trip for theme and document facts, as the auto-scan path does.
+        const facts = await readDocumentFacts(page);
+        if (facts.theme)
+            record.page.observedTheme = facts.theme;
+        if (facts.document)
+            record.document = facts.document;
+        /*
+         * Performance is a property of the PAGE LOAD, not of the scan.
+         *
+         * Scanning one page repeatedly as its state changes — modal closed, then
+         * modal open — produces several scans from a single navigation, and every one
+         * of them would report identical timings. Emitting it once per visit is what
+         * stops pillar 3's averages being weighted by how many states a surface
+         * happens to have, which would skew the trend line in a way nobody could see
+         * from the chart.
+         *
+         * Emitted once rather than emitted repeatedly and de-duplicated server-side:
+         * the same outcome, minus a whole class of bug.
+         */
+        if (!perfAlreadyCaptured(page)) {
+            const perf = await capturePerf(page);
+            if (perf)
+                record.perf = perf;
+            // Page-runtime rides the same gate for the same reason: it describes the
+            // LOAD, so scanning one page in four states must not report the same 500
+            // four times.
+            const runtime = pageRuntime(page);
+            if (runtime)
+                record.runtime = runtime;
+            // Marked regardless of whether either block materialised — the gate means
+            // "this visit's page-load facts have been taken", not "perf existed".
+            markPerfCaptured(page);
+        }
+        const probesMs = Date.now() - probesStartedAt;
+        record.cost = {
+            totalMs: Date.now() - scanStartedAt,
+            axeMs,
+            ...(probesMs > 0 ? { probesMs } : {}),
+        };
+        await test.info().attach(SCAN_RECORD_ATTACHMENT, {
+            body: Buffer.from(JSON.stringify(record), 'utf8'),
+            contentType: 'application/json',
+        });
+        return {
+            surface,
+            wcagTarget: policy.target,
+            violations: findings.filter((finding) => finding.status === 'violation').length,
+            incomplete: findings.filter((finding) => finding.status === 'incomplete').length,
+            passes: passes.length,
+            scanned: true,
+        };
+    }
+    catch (error) {
+        /*
+         * A scan failure is never the customer's build failing.
+         *
+         * The suite's verdict belongs to the suite; our evidence-gathering has no
+         * standing to overturn it. This warns through Playwright's own annotation
+         * channel — so it appears in their report next to the test it happened in —
+         * and returns a summary that says plainly that nothing was scanned, rather
+         * than zeroes that would read as a clean page.
+         */
+        recordUnscannable(page, toUrlPattern(page.url()).pattern, 'scan-failed');
+        test.info().annotations.push({
+            type: 'setsquare-warning',
+            description: `Setsquare could not scan "${surface}": ${error instanceof Error ? error.message : String(error)}. Your test is unaffected.`,
+        });
+        return {
+            surface,
+            wcagTarget: policy.target,
+            violations: 0,
+            incomplete: 0,
+            passes: 0,
+            scanned: false,
+        };
+    }
+}
+/** Playwright exposes the browser type on the page's context. */
+function engineOf(page) {
+    const name = page.context().browser()?.browserType().name();
+    return name === 'firefox' || name === 'webkit' ? name : 'chromium';
+}
+/**
+ * The explicit API surface.
+ *
+ * An object rather than a bare function so the shape has room to grow — P5 adds
+ * `setsquare.verify()` — without the import line changing under anyone.
+ */
+export const setsquare = { scan };
+/** Exported for the reporter's surface normalisation; the same function scans use. */
+export { toUrlPattern };
+//# sourceMappingURL=scan.js.map

package/dist/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAa,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAmB,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAiD7C;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,GAAG,IAAI,OAAO,EAA6D,CAAC;AAExF,SAAS,QAAQ,CAAC,IAAU,EAAE,GAAW;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAExF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC7B,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC;SACvD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,IAAU;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,QAAQ;QAAE,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU;IACrC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY,IAAI,KAAK,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAU,EAAE,OAAe,EAAE,UAAuB,EAAE;IACxE,MAAM,QAAQ,GAAoB,EAAE,OAAO,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;IAExC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B;;;;;;;;;;;OAWG;IACH,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,wEAAwE;YACxE,4EAA4E;YAC5E,uEAAuE;YACvE,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAC5E,OAAO;gBACL,OAAO;gBACP,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAE7C,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,kCAAkC;QAClC,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,mBAAmB,EAAE,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,YAAY;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAED;;;;;;;WAOG;QACH,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,KAAK,CAAC,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,YAAY;gBAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAElC,MAAM,MAAM,GAAqB;YAC/B,aAAa,EAAE,mBAAmB;YAClC,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI;gBACjC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC;gBACtB,GAAG;aACJ;YACD,QAAQ;YACR,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,SAAS;YAC/C,aAAa,EAAE,aAAa,CAC1B,aAAa,CAAC,OAAO,CAAC,IAAI,SAAS,EACnC,OAAO,EACP,OAAO,CAAC,MAAM,CAAC,EACf,eAAe,CAChB;YACD,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,QAAQ;YACR,MAAM;YACN,YAAY;SACb,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAE9C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEnC,2EAA2E;QAC3E,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;QACzD,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAErD;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YAE7B,yEAAyE;YACzE,yEAAyE;YACzE,cAAc;YACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YAEtC,0EAA0E;YAC1E,sEAAsE;YACtE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAC9C,MAAM,CAAC,IAAI,GAAG;YACZ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa;YACnC,KAAK;YACL,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;QAEF,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,sBAAsB,EAAE;YAC/C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YACjD,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YAC/E,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM;YAChF,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf;;;;;;;;WAQG;QACH,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEzE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,6BAA6B,OAAO,MAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,4BAA4B;SAC7B,CAAC,CAAC;QAEH,OAAO;YACL,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,SAAS,QAAQ,CAAC,IAAU;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5D,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,CAAC;AAElC,sFAAsF;AACtF,OAAO,EAAE,YAAY,EAAE,CAAC"}