@spinajs/telemetry 2.0.506 → 2.0.508

package/lib/cjs/policies/TelemetryTokenPolicy.d.ts

@@ -2,9 +2,12 @@ import { BasePolicy, IController, IRoute, Request } from '@spinajs/http';
 import { Log } from '@spinajs/log';
 /**
  * Shared-token guard for the telemetry endpoints. Reads the expected token from
- * `telemetry.auth.token` and compares it against the `x-metrics-token` header.
- * The header name is deliberately unchanged from the retired
- * `@spinajs/metrics` package so existing scrape configs keep working.
+ * `telemetry.auth.token` and compares it against the `x-metrics-token` header,
+ * or — equivalently — against `Authorization: Bearer <token>`. The custom
+ * header name is deliberately unchanged from the retired `@spinajs/metrics`
+ * package so existing scrape configs keep working; the Bearer form exists
+ * because stock Prometheus / OTel-collector scrape configs can only send
+ * `authorization.credentials` (a Bearer header), not arbitrary headers.
  *
  * Bypassed entirely in development.
  */
@@ -15,5 +18,7 @@ export declare class TelemetryTokenPolicy extends BasePolicy {
     protected HEADER_TOKEN_FIELD: string;
     isEnabled(_action: IRoute, _instance: IController): boolean;
     execute(req: Request): Promise<void>;
+    /** The credentials of an `Authorization: Bearer <token>` header, if present. */
+    protected bearerToken(req: Request): string | undefined;
 }
 //# sourceMappingURL=TelemetryTokenPolicy.d.ts.map

package/lib/cjs/policies/TelemetryTokenPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TelemetryTokenPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAG3C;;;;;;;GAOG;AACH,qBACa,oBAAqB,SAAQ,UAAU;IAElD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IAGxB,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IAEzB,SAAS,CAAC,kBAAkB,SAAqB;IAE1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO,CAEjE;IAEY,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAehD;CACF"}
+{"version":3,"file":"TelemetryTokenPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAG3C;;;;;;;;;;GAUG;AACH,qBACa,oBAAqB,SAAQ,UAAU;IAElD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IAGxB,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IAEzB,SAAS,CAAC,kBAAkB,SAAqB;IAE1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO,CAEjE;IAEY,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAehD;IAED,gFAAgF;IAChF,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAOtD;CACF"}

package/lib/cjs/policies/TelemetryTokenPolicy.js

@@ -17,9 +17,12 @@ const log_1 = require("@spinajs/log");
 const di_1 = require("@spinajs/di");
 /**
  * Shared-token guard for the telemetry endpoints. Reads the expected token from
- * `telemetry.auth.token` and compares it against the `x-metrics-token` header.
- * The header name is deliberately unchanged from the retired
- * `@spinajs/metrics` package so existing scrape configs keep working.
+ * `telemetry.auth.token` and compares it against the `x-metrics-token` header,
+ * or — equivalently — against `Authorization: Bearer <token>`. The custom
+ * header name is deliberately unchanged from the retired `@spinajs/metrics`
+ * package so existing scrape configs keep working; the Bearer form exists
+ * because stock Prometheus / OTel-collector scrape configs can only send
+ * `authorization.credentials` (a Bearer header), not arbitrary headers.
  *
  * Bypassed entirely in development.
  */
@@ -35,9 +38,9 @@ let TelemetryTokenPolicy = class TelemetryTokenPolicy extends http_1.BasePolicy
         if (this.isDev) {
             return;
         }
-        const token = req.headers[this.HEADER_TOKEN_FIELD];
+        const token = req.headers[this.HEADER_TOKEN_FIELD] ?? this.bearerToken(req);
         if (!token) {
-            this.Log.warn(`No token is set for restricted area, header field: ${this.HEADER_TOKEN_FIELD}, policy: TelemetryTokenPolicy, ip: ${req.storage.realIp}`);
+            this.Log.warn(`No token is set for restricted area, header field: ${this.HEADER_TOKEN_FIELD} (or Authorization: Bearer), policy: TelemetryTokenPolicy, ip: ${req.storage.realIp}`);
             throw new exceptions_1.Forbidden('access token is not set');
         }
         if (token !== this.Token) {
@@ -45,6 +48,15 @@ let TelemetryTokenPolicy = class TelemetryTokenPolicy extends http_1.BasePolicy
             throw new exceptions_1.Forbidden('invalid access token');
         }
     }
+    /** The credentials of an `Authorization: Bearer <token>` header, if present. */
+    bearerToken(req) {
+        const auth = req.headers.authorization;
+        if (typeof auth !== 'string' || !auth.startsWith('Bearer ')) {
+            return undefined;
+        }
+        const token = auth.slice('Bearer '.length).trim();
+        return token.length > 0 ? token : undefined;
+    }
 };
 exports.TelemetryTokenPolicy = TelemetryTokenPolicy;
 __decorate([

package/lib/cjs/policies/TelemetryTokenPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"TelemetryTokenPolicy.js","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0DAAgD;AAChD,wCAAyE;AACzE,oDAAgD;AAChD,sCAA2C;AAC3C,oCAAyC;AAEzC;;;;;;;GAOG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,iBAAU;IAA7C;;QAUK,uBAAkB,GAAG,iBAAiB,CAAC;IAsBnD,CAAC;IApBQ,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY;QAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,kBAAkB,uCAAuC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxJ,MAAM,IAAI,sBAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,kBAAkB,uCAAuC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAClJ,MAAM,IAAI,sBAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF,CAAA;;AA9BW;IADT,IAAA,YAAM,EAAC,UAAU,CAAC;8BACJ,SAAG;iDAAC;AAGT;IADT,IAAA,sBAAM,EAAC,sBAAsB,CAAC;;mDACP;AAGd;IADT,IAAA,sBAAM,EAAC,6BAA6B,CAAC;;mDACb;+BARd,oBAAoB;IADhC,IAAA,eAAU,EAAC,iBAAU,CAAC;GACV,oBAAoB,CAgChC"}
+{"version":3,"file":"TelemetryTokenPolicy.js","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0DAAgD;AAChD,wCAAyE;AACzE,oDAAgD;AAChD,sCAA2C;AAC3C,oCAAyC;AAEzC;;;;;;;;;;GAUG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,iBAAU;IAA7C;;QAUK,uBAAkB,GAAG,iBAAiB,CAAC;IAgCnD,CAAC;IA9BQ,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY;QAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,kBAAkB,kEAAkE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnL,MAAM,IAAI,sBAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,kBAAkB,uCAAuC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAClJ,MAAM,IAAI,sBAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,gFAAgF;IACtE,WAAW,CAAC,GAAY;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;CACF,CAAA;;AAxCW;IADT,IAAA,YAAM,EAAC,UAAU,CAAC;8BACJ,SAAG;iDAAC;AAGT;IADT,IAAA,sBAAM,EAAC,sBAAsB,CAAC;;mDACP;AAGd;IADT,IAAA,sBAAM,EAAC,6BAA6B,CAAC;;mDACb;+BARd,oBAAoB;IADhC,IAAA,eAAU,EAAC,iBAAU,CAAC;GACV,oBAAoB,CA0ChC"}

package/lib/mjs/policies/TelemetryTokenPolicy.d.ts

@@ -2,9 +2,12 @@ import { BasePolicy, IController, IRoute, Request } from '@spinajs/http';
 import { Log } from '@spinajs/log';
 /**
  * Shared-token guard for the telemetry endpoints. Reads the expected token from
- * `telemetry.auth.token` and compares it against the `x-metrics-token` header.
- * The header name is deliberately unchanged from the retired
- * `@spinajs/metrics` package so existing scrape configs keep working.
+ * `telemetry.auth.token` and compares it against the `x-metrics-token` header,
+ * or — equivalently — against `Authorization: Bearer <token>`. The custom
+ * header name is deliberately unchanged from the retired `@spinajs/metrics`
+ * package so existing scrape configs keep working; the Bearer form exists
+ * because stock Prometheus / OTel-collector scrape configs can only send
+ * `authorization.credentials` (a Bearer header), not arbitrary headers.
  *
  * Bypassed entirely in development.
  */
@@ -15,5 +18,7 @@ export declare class TelemetryTokenPolicy extends BasePolicy {
     protected HEADER_TOKEN_FIELD: string;
     isEnabled(_action: IRoute, _instance: IController): boolean;
     execute(req: Request): Promise<void>;
+    /** The credentials of an `Authorization: Bearer <token>` header, if present. */
+    protected bearerToken(req: Request): string | undefined;
 }
 //# sourceMappingURL=TelemetryTokenPolicy.d.ts.map

package/lib/mjs/policies/TelemetryTokenPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TelemetryTokenPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAG3C;;;;;;;GAOG;AACH,qBACa,oBAAqB,SAAQ,UAAU;IAElD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IAGxB,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IAEzB,SAAS,CAAC,kBAAkB,SAAqB;IAE1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO,CAEjE;IAEY,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAehD;CACF"}
+{"version":3,"file":"TelemetryTokenPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAG3C;;;;;;;;;;GAUG;AACH,qBACa,oBAAqB,SAAQ,UAAU;IAElD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IAGxB,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IAEzB,SAAS,CAAC,kBAAkB,SAAqB;IAE1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO,CAEjE;IAEY,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAehD;IAED,gFAAgF;IAChF,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAOtD;CACF"}

package/lib/mjs/policies/TelemetryTokenPolicy.js

@@ -14,9 +14,12 @@ import { Log, Logger } from '@spinajs/log';
 import { Injectable } from '@spinajs/di';
 /**
  * Shared-token guard for the telemetry endpoints. Reads the expected token from
- * `telemetry.auth.token` and compares it against the `x-metrics-token` header.
- * The header name is deliberately unchanged from the retired
- * `@spinajs/metrics` package so existing scrape configs keep working.
+ * `telemetry.auth.token` and compares it against the `x-metrics-token` header,
+ * or — equivalently — against `Authorization: Bearer <token>`. The custom
+ * header name is deliberately unchanged from the retired `@spinajs/metrics`
+ * package so existing scrape configs keep working; the Bearer form exists
+ * because stock Prometheus / OTel-collector scrape configs can only send
+ * `authorization.credentials` (a Bearer header), not arbitrary headers.
  *
  * Bypassed entirely in development.
  */
@@ -32,9 +35,9 @@ let TelemetryTokenPolicy = class TelemetryTokenPolicy extends BasePolicy {
         if (this.isDev) {
             return;
         }
-        const token = req.headers[this.HEADER_TOKEN_FIELD];
+        const token = req.headers[this.HEADER_TOKEN_FIELD] ?? this.bearerToken(req);
         if (!token) {
-            this.Log.warn(`No token is set for restricted area, header field: ${this.HEADER_TOKEN_FIELD}, policy: TelemetryTokenPolicy, ip: ${req.storage.realIp}`);
+            this.Log.warn(`No token is set for restricted area, header field: ${this.HEADER_TOKEN_FIELD} (or Authorization: Bearer), policy: TelemetryTokenPolicy, ip: ${req.storage.realIp}`);
             throw new Forbidden('access token is not set');
         }
         if (token !== this.Token) {
@@ -42,6 +45,15 @@ let TelemetryTokenPolicy = class TelemetryTokenPolicy extends BasePolicy {
             throw new Forbidden('invalid access token');
         }
     }
+    /** The credentials of an `Authorization: Bearer <token>` header, if present. */
+    bearerToken(req) {
+        const auth = req.headers.authorization;
+        if (typeof auth !== 'string' || !auth.startsWith('Bearer ')) {
+            return undefined;
+        }
+        const token = auth.slice('Bearer '.length).trim();
+        return token.length > 0 ? token : undefined;
+    }
 };
 __decorate([
     Logger('Security'),

package/lib/mjs/policies/TelemetryTokenPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"TelemetryTokenPolicy.js","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAgC,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;GAOG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,UAAU;IAA7C;;QAUK,uBAAkB,GAAG,iBAAiB,CAAC;IAsBnD,CAAC;IApBQ,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY;QAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,kBAAkB,uCAAuC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxJ,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,kBAAkB,uCAAuC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAClJ,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF,CAAA;AA9BW;IADT,MAAM,CAAC,UAAU,CAAC;8BACJ,GAAG;iDAAC;AAGT;IADT,MAAM,CAAC,sBAAsB,CAAC;;mDACP;AAGd;IADT,MAAM,CAAC,6BAA6B,CAAC;;mDACb;AARd,oBAAoB;IADhC,UAAU,CAAC,UAAU,CAAC;GACV,oBAAoB,CAgChC"}
+{"version":3,"file":"TelemetryTokenPolicy.js","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAgC,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;;;;GAUG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,UAAU;IAA7C;;QAUK,uBAAkB,GAAG,iBAAiB,CAAC;IAgCnD,CAAC;IA9BQ,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY;QAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,kBAAkB,kEAAkE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnL,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,kBAAkB,uCAAuC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAClJ,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,gFAAgF;IACtE,WAAW,CAAC,GAAY;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;CACF,CAAA;AAxCW;IADT,MAAM,CAAC,UAAU,CAAC;8BACJ,GAAG;iDAAC;AAGT;IADT,MAAM,CAAC,sBAAsB,CAAC;;mDACP;AAGd;IADT,MAAM,CAAC,6BAA6B,CAAC;;mDACb;AARd,oBAAoB;IADhC,UAAU,CAAC,UAAU,CAAC;GACV,oBAAoB,CA0ChC"}