@timber-js/app 0.2.0-alpha.204 → 0.2.0-alpha.205

package/dist/_chunks/csp-nonce-hOGniaG4.js

@@ -1,227 +0,0 @@
-import { r as requestContextAls } from "./als-registry-C6kcfprT.js";
-import { R as getSetCookieHeaders, m as setLogger, q as getTraceId } from "./logger-DqJ2VoAY.js";
-import { r as isRscRequest } from "./rsc-media-type-DDc7duTD.js";
-//#region src/server/instrumentation.ts
-/**
-* Instrumentation — loads and runs the user's instrumentation.ts file.
-*
-* instrumentation.ts is a file convention at the project root that exports:
-* - register() — called once at server startup, before the first request
-* - onRequestError() — called for every unhandled server error
-* - logger — any object with info/warn/error/debug methods
-*
-* See design/17-logging.md §"instrumentation.ts — The Entry Point"
-*/
-var _initialized = false;
-var _onRequestError = null;
-/**
-* Load and initialize the user's instrumentation.ts module.
-*
-* - Awaits register() before returning (server blocks on this).
-* - Picks up the logger export and wires it into the framework logger.
-* - Stores onRequestError for later invocation.
-*
-* @param loader - Function that dynamically imports the user's instrumentation module.
-*                 Returns null if no instrumentation.ts exists.
-*/
-async function loadInstrumentation(loader) {
-	if (_initialized) return;
-	_initialized = true;
-	let mod;
-	try {
-		mod = await loader();
-	} catch (error) {
-		console.error("[timber] Failed to load instrumentation.ts:", error);
-		return;
-	}
-	if (!mod) return;
-	if (mod.logger && typeof mod.logger.info === "function") setLogger(mod.logger);
-	if (typeof mod.onRequestError === "function") _onRequestError = mod.onRequestError;
-	if (typeof mod.register === "function") try {
-		await mod.register();
-	} catch (error) {
-		console.error("[timber] instrumentation.ts register() threw:", error);
-		throw error;
-	}
-}
-/**
-* Call the user's onRequestError hook. Catches and logs any errors thrown
-* by the hook itself — it must not affect the response.
-*/
-async function callOnRequestError(error, request, context) {
-	if (!_onRequestError) return;
-	try {
-		await _onRequestError(error, request, context);
-	} catch (hookError) {
-		console.error("[timber] onRequestError hook threw:", hookError);
-	}
-}
-/**
-* Check if onRequestError is registered.
-*/
-function hasOnRequestError() {
-	return _onRequestError !== null;
-}
-//#endregion
-//#region src/server/pipeline-helpers.ts
-/**
-* Build a proxy resolver closure from the declared source. Called exactly
-* once at `createPipeline` setup time, so the hot path sees only the branch
-* that corresponds to this pipeline's configured variant.
-*
-* Returns `null` when the app has no proxy.ts — the hot path short-circuits
-* around `runProxyPhase` entirely in that case.
-*
-* Accepts the sugar form (a bare `ProxyExport` — function or function array)
-* and normalises it to the static variant. Functions and arrays are
-* structurally distinct from the tagged `{ kind: 'lazy', loader }` object,
-* so discrimination is unambiguous.
-*/
-function makeProxyResolver(proxy) {
-	if (proxy === void 0) return null;
-	if (typeof proxy === "function" || Array.isArray(proxy)) {
-		const exp = proxy;
-		return () => exp;
-	}
-	if (proxy.kind === "static") {
-		const exp = proxy.export;
-		return () => exp;
-	}
-	const loader = proxy.loader;
-	return async () => (await loader()).default;
-}
-/**
-* Apply all Set-Cookie headers from the cookie jar to a Headers object.
-* Each cookie gets its own Set-Cookie header per RFC 6265 §4.1.
-*/
-function applyCookieJar(headers) {
-	for (const value of getSetCookieHeaders()) headers.append("Set-Cookie", value);
-}
-/**
-* Merge framework-managed response headers onto a terminal response without
-* overwriting headers the terminal response already set itself.
-*/
-function mergeMissingHeaders(target, source) {
-	const existingKeys = new Set([...target.keys()].map((key) => key.toLowerCase()));
-	for (const [key, value] of source.entries()) if (!existingKeys.has(key.toLowerCase())) target.append(key, value);
-}
-/**
-* Clone a Response into a fresh one whose header bag is guaranteed mutable.
-*
-* `Response.redirect()` and some platform-level passthrough responses (notably
-* on Cloudflare Workers) return objects with frozen header bags. Calling
-* `.set()` or `.append()` on them throws `TypeError: immutable`, which the
-* pipeline can hit when it appends Set-Cookie or Server-Timing entries.
-*
-* The pipeline calls this at the producer sites where user-controlled
-* responses enter the framework — `outcomeToResponse` for all phase outcomes,
-* and `handleRequest` for metadata-route and auto-sitemap user handlers — so
-* downstream code can write headers without runtime feature-detection.
-*
-* The clone is unconditional. This is a deliberate trade: we avoid a
-* try/catch + thrown `TypeError` on every request (the previous probe-based
-* approach paid that cost on the hot path) and accept one cheap Response
-* rewrap at the framework boundary instead.
-*/
-function cloneWithMutableHeaders(response) {
-	return new Response(response.body, {
-		status: response.status,
-		statusText: response.statusText,
-		headers: new Headers(response.headers)
-	});
-}
-/**
-* Build a redirect Response from a RedirectSignal.
-*
-* For RSC payload requests (client navigation), returns 204 + X-Timber-Redirect
-* so the client router can perform a soft SPA redirect. A raw 302 would be
-* turned into an opaque redirect by fetch({redirect:'manual'}), crashing
-* createFromFetch. See design/19-client-navigation.md.
-*/
-function buildRedirectResponse(signal, req, headers) {
-	if (isRscRequest(req)) {
-		headers.set("X-Timber-Redirect", signal.location);
-		return new Response(null, {
-			status: 204,
-			headers
-		});
-	}
-	headers.set("Location", signal.location);
-	return new Response(null, {
-		status: signal.status,
-		headers
-	});
-}
-/**
-* Fire the user's onRequestError hook with request context.
-* Extracts request info from the Request object and calls the instrumentation hook.
-*/
-async function fireOnRequestError(error, req, phase) {
-	const url = new URL(req.url);
-	const headersObj = {};
-	req.headers.forEach((v, k) => {
-		headersObj[k] = v;
-	});
-	await callOnRequestError(error, {
-		method: req.method,
-		path: url.pathname,
-		headers: headersObj
-	}, {
-		phase,
-		routePath: url.pathname,
-		routeType: "page",
-		traceId: getTraceId()
-	});
-}
-//#endregion
-//#region src/server/csp-nonce.ts
-/**
-* CSP nonce — per-request, generated on demand.
-*
-* timber emits several inline `<script>` tags per HTML response — React's
-* bootstrap script and Fizz runtime, the Flight init/chunk scripts, the
-* segment-tree script, and the post-flush noindex script. Under a strict
-* `Content-Security-Policy` (`script-src 'nonce-…' 'strict-dynamic'`) every
-* one of them needs the request's nonce or the browser refuses to run it.
-*
-* The app opts in by reading `ctx.nonce` in `middleware.ts` and putting it
-* in the CSP header it sets through `ctx.headers`. The first read generates
-* the value and stores it on the request context; the render pipeline reads
-* it back with `getCspNonce()` and stamps it on every inline script. A
-* request whose middleware never reads `ctx.nonce` has no nonce, and its
-* markup is byte-identical to a render without this feature. timber does
-* not parse the CSP header — the app owns the policy, timber owns the
-* markup, and `ctx.nonce` is the one value both are built from.
-*
-* `proxy.ts` cannot participate: it only sees the finished response from
-* `next()`, after the markup exists.
-*
-* See design/13-security.md §"Content Security Policy" (TIM-1414).
-*/
-/**
-* Generate a CSP nonce: 128 random bits, base64. Matches CSP's
-* `base64-value` grammar, so it is valid in the header verbatim and safe
-* inside a double-quoted HTML attribute without escaping.
-*/
-function generateNonce() {
-	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
-	let binary = "";
-	for (const b of bytes) binary += String.fromCharCode(b);
-	return btoa(binary);
-}
-/**
-* The request's CSP nonce, creating it on first call. Backs the
-* `ctx.nonce` getter on `MiddlewareContext`. Outside a request context
-* (tests, build-time rendering) a fresh value is returned but not
-* retained, since there is no request for it to belong to.
-*/
-function requestCspNonce() {
-	const store = requestContextAls.getStore();
-	if (!store) return generateNonce();
-	store.cspNonce ??= generateNonce();
-	return store.cspNonce;
-}
-//#endregion
-export { fireOnRequestError as a, callOnRequestError as c, cloneWithMutableHeaders as i, hasOnRequestError as l, applyCookieJar as n, makeProxyResolver as o, buildRedirectResponse as r, mergeMissingHeaders as s, requestCspNonce as t, loadInstrumentation as u };
-
-//# sourceMappingURL=csp-nonce-hOGniaG4.js.map

package/dist/_chunks/csp-nonce-hOGniaG4.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"csp-nonce-hOGniaG4.js","names":[],"sources":["../../src/server/instrumentation.ts","../../src/server/pipeline-helpers.ts","../../src/server/csp-nonce.ts"],"sourcesContent":["/**\n * Instrumentation — loads and runs the user's instrumentation.ts file.\n *\n * instrumentation.ts is a file convention at the project root that exports:\n * - register() — called once at server startup, before the first request\n * - onRequestError() — called for every unhandled server error\n * - logger — any object with info/warn/error/debug methods\n *\n * See design/17-logging.md §\"instrumentation.ts — The Entry Point\"\n */\n\nimport { setLogger, type TimberLogger } from './logger.ts';\n\n// ─── Instrumentation Types ────────────────────────────────────────────────\n\nexport type InstrumentationOnRequestError = (\n  error: unknown,\n  request: InstrumentationRequestInfo,\n  context: InstrumentationErrorContext\n) => void | Promise<void>;\n\nexport interface InstrumentationRequestInfo {\n  /** HTTP method: 'GET', 'POST', etc. */\n  method: string;\n  /** Request path: '/dashboard/projects/123' */\n  path: string;\n  /** Request headers as a plain object. */\n  headers: Record<string, string>;\n}\n\nexport interface InstrumentationErrorContext {\n  /** Which pipeline phase the error occurred in. */\n  phase: 'proxy' | 'handler' | 'render' | 'action' | 'route';\n  /** The route pattern: '/dashboard/projects/[id]' */\n  routePath: string;\n  /** Type of route that was matched. */\n  routeType: 'page' | 'route' | 'action';\n  /** Always set — OTEL trace ID or UUID fallback. */\n  traceId: string;\n}\n\n// ─── Instrumentation Module Shape ─────────────────────────────────────────\n\ninterface InstrumentationModule {\n  register?: () => void | Promise<void>;\n  onRequestError?: InstrumentationOnRequestError;\n  logger?: TimberLogger;\n}\n\n// ─── State ────────────────────────────────────────────────────────────────\n//\n// Intentional per-app singletons (not per-request). Instrumentation loads\n// once at server startup and persists for the lifetime of the process/isolate.\n// These must NOT be migrated to ALS — they are correctly scoped to the app.\n\nlet _initialized = false;\nlet _onRequestError: InstrumentationOnRequestError | null = null;\n\n/**\n * Load and initialize the user's instrumentation.ts module.\n *\n * - Awaits register() before returning (server blocks on this).\n * - Picks up the logger export and wires it into the framework logger.\n * - Stores onRequestError for later invocation.\n *\n * @param loader - Function that dynamically imports the user's instrumentation module.\n *                 Returns null if no instrumentation.ts exists.\n */\nexport async function loadInstrumentation(\n  loader: () => Promise<InstrumentationModule | null>\n): Promise<void> {\n  if (_initialized) return;\n  _initialized = true;\n\n  let mod: InstrumentationModule | null;\n  try {\n    mod = await loader();\n  } catch (error) {\n    console.error('[timber] Failed to load instrumentation.ts:', error);\n    return;\n  }\n\n  if (!mod) return;\n\n  // Wire up the logger export\n  if (mod.logger && typeof mod.logger.info === 'function') {\n    setLogger(mod.logger);\n  }\n\n  // Store onRequestError for later\n  if (typeof mod.onRequestError === 'function') {\n    _onRequestError = mod.onRequestError;\n  }\n\n  // Await register() — server does not accept requests until this resolves\n  if (typeof mod.register === 'function') {\n    try {\n      await mod.register();\n    } catch (error) {\n      console.error('[timber] instrumentation.ts register() threw:', error);\n      throw error;\n    }\n  }\n}\n\n/**\n * Call the user's onRequestError hook. Catches and logs any errors thrown\n * by the hook itself — it must not affect the response.\n */\nexport async function callOnRequestError(\n  error: unknown,\n  request: InstrumentationRequestInfo,\n  context: InstrumentationErrorContext\n): Promise<void> {\n  if (!_onRequestError) return;\n  try {\n    await _onRequestError(error, request, context);\n  } catch (hookError) {\n    console.error('[timber] onRequestError hook threw:', hookError);\n  }\n}\n\n/**\n * Check if onRequestError is registered.\n */\nexport function hasOnRequestError(): boolean {\n  return _onRequestError !== null;\n}\n\n/**\n * Reset instrumentation state. Test-only.\n */\nexport function resetInstrumentation(): void {\n  _initialized = false;\n  _onRequestError = null;\n}\n","/**\n * Pipeline helpers — small utility functions used by `pipeline.ts` and\n * `pipeline-phases.ts`. Lifted out of `pipeline.ts` to keep that file\n * focused on the request handler entry point.\n *\n * Each helper is intentionally a free function with no closure capture, so\n * it can be unit-tested in isolation.\n *\n * See design/07-routing.md §\"Request Lifecycle\".\n */\n\nimport type { ProxyExport } from './proxy.ts';\nimport { getSetCookieHeaders } from './cookie-context.ts';\nimport { callOnRequestError } from './instrumentation.ts';\nimport { getTraceId } from './tracing.ts';\nimport { RedirectSignal } from './primitives.ts';\nimport type { ProxyConfig } from './pipeline.ts';\nimport { isRscRequest } from '../shared/rsc-media-type.ts';\n\n// ─── Prototype-Pollution-Safe Sanitizer ────────────────────────────────────\n\n// ─── Proxy Resolver ────────────────────────────────────────────────────────\n\n/**\n * Resolver closure produced once at pipeline construction. The lazy variant\n * still calls `loader()` per-request (HMR relies on re-importing), but the\n * choice of which branch to take is made once, not on every request.\n */\nexport type ProxyResolver = () => ProxyExport | Promise<ProxyExport>;\n\n/**\n * Build a proxy resolver closure from the declared source. Called exactly\n * once at `createPipeline` setup time, so the hot path sees only the branch\n * that corresponds to this pipeline's configured variant.\n *\n * Returns `null` when the app has no proxy.ts — the hot path short-circuits\n * around `runProxyPhase` entirely in that case.\n *\n * Accepts the sugar form (a bare `ProxyExport` — function or function array)\n * and normalises it to the static variant. Functions and arrays are\n * structurally distinct from the tagged `{ kind: 'lazy', loader }` object,\n * so discrimination is unambiguous.\n */\nexport function makeProxyResolver(\n  proxy: ProxyConfig | ProxyExport | undefined\n): ProxyResolver | null {\n  if (proxy === undefined) return null;\n  // Sugar: a bare ProxyExport (function or function array) — treat as static.\n  if (typeof proxy === 'function' || Array.isArray(proxy)) {\n    const exp = proxy;\n    return () => exp;\n  }\n  if (proxy.kind === 'static') {\n    const exp = proxy.export;\n    return () => exp;\n  }\n  const loader = proxy.loader;\n  return async () => (await loader()).default;\n}\n\n// ─── Cookie / Header Helpers ───────────────────────────────────────────────\n\n/**\n * Apply all Set-Cookie headers from the cookie jar to a Headers object.\n * Each cookie gets its own Set-Cookie header per RFC 6265 §4.1.\n */\nexport function applyCookieJar(headers: Headers): void {\n  for (const value of getSetCookieHeaders()) {\n    headers.append('Set-Cookie', value);\n  }\n}\n\n/**\n * Merge framework-managed response headers onto a terminal response without\n * overwriting headers the terminal response already set itself.\n */\nexport function mergeMissingHeaders(target: Headers, source: Headers): void {\n  const existingKeys = new Set([...target.keys()].map((key) => key.toLowerCase()));\n  for (const [key, value] of source.entries()) {\n    if (!existingKeys.has(key.toLowerCase())) {\n      target.append(key, value);\n    }\n  }\n}\n\n// ─── Mutable Response Cloning ──────────────────────────────────────────────\n\n/**\n * Clone a Response into a fresh one whose header bag is guaranteed mutable.\n *\n * `Response.redirect()` and some platform-level passthrough responses (notably\n * on Cloudflare Workers) return objects with frozen header bags. Calling\n * `.set()` or `.append()` on them throws `TypeError: immutable`, which the\n * pipeline can hit when it appends Set-Cookie or Server-Timing entries.\n *\n * The pipeline calls this at the producer sites where user-controlled\n * responses enter the framework — `outcomeToResponse` for all phase outcomes,\n * and `handleRequest` for metadata-route and auto-sitemap user handlers — so\n * downstream code can write headers without runtime feature-detection.\n *\n * The clone is unconditional. This is a deliberate trade: we avoid a\n * try/catch + thrown `TypeError` on every request (the previous probe-based\n * approach paid that cost on the hot path) and accept one cheap Response\n * rewrap at the framework boundary instead.\n */\nexport function cloneWithMutableHeaders(response: Response): Response {\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers: new Headers(response.headers),\n  });\n}\n\n// ─── Redirect Builder ──────────────────────────────────────────────────────\n\n/**\n * Build a redirect Response from a RedirectSignal.\n *\n * For RSC payload requests (client navigation), returns 204 + X-Timber-Redirect\n * so the client router can perform a soft SPA redirect. A raw 302 would be\n * turned into an opaque redirect by fetch({redirect:'manual'}), crashing\n * createFromFetch. See design/19-client-navigation.md.\n */\nexport function buildRedirectResponse(\n  signal: RedirectSignal,\n  req: Request,\n  headers: Headers\n): Response {\n  if (isRscRequest(req)) {\n    headers.set('X-Timber-Redirect', signal.location);\n    return new Response(null, { status: 204, headers });\n  }\n  headers.set('Location', signal.location);\n  return new Response(null, { status: signal.status, headers });\n}\n\n// ─── Instrumentation ───────────────────────────────────────────────────────\n\n/**\n * Fire the user's onRequestError hook with request context.\n * Extracts request info from the Request object and calls the instrumentation hook.\n */\nexport async function fireOnRequestError(\n  error: unknown,\n  req: Request,\n  phase: 'proxy' | 'handler' | 'render' | 'action' | 'route'\n): Promise<void> {\n  const url = new URL(req.url);\n  const headersObj: Record<string, string> = {};\n  req.headers.forEach((v, k) => {\n    headersObj[k] = v;\n  });\n\n  await callOnRequestError(\n    error,\n    { method: req.method, path: url.pathname, headers: headersObj },\n    { phase, routePath: url.pathname, routeType: 'page', traceId: getTraceId() }\n  );\n}\n","/**\n * CSP nonce — per-request, generated on demand.\n *\n * timber emits several inline `<script>` tags per HTML response — React's\n * bootstrap script and Fizz runtime, the Flight init/chunk scripts, the\n * segment-tree script, and the post-flush noindex script. Under a strict\n * `Content-Security-Policy` (`script-src 'nonce-…' 'strict-dynamic'`) every\n * one of them needs the request's nonce or the browser refuses to run it.\n *\n * The app opts in by reading `ctx.nonce` in `middleware.ts` and putting it\n * in the CSP header it sets through `ctx.headers`. The first read generates\n * the value and stores it on the request context; the render pipeline reads\n * it back with `getCspNonce()` and stamps it on every inline script. A\n * request whose middleware never reads `ctx.nonce` has no nonce, and its\n * markup is byte-identical to a render without this feature. timber does\n * not parse the CSP header — the app owns the policy, timber owns the\n * markup, and `ctx.nonce` is the one value both are built from.\n *\n * `proxy.ts` cannot participate: it only sees the finished response from\n * `next()`, after the markup exists.\n *\n * See design/13-security.md §\"Content Security Policy\" (TIM-1414).\n */\n\nimport { requestContextAls } from './als-registry.ts';\n\n/**\n * Generate a CSP nonce: 128 random bits, base64. Matches CSP's\n * `base64-value` grammar, so it is valid in the header verbatim and safe\n * inside a double-quoted HTML attribute without escaping.\n */\nfunction generateNonce(): string {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  let binary = '';\n  for (const b of bytes) binary += String.fromCharCode(b);\n  return btoa(binary);\n}\n\n/**\n * The request's CSP nonce, creating it on first call. Backs the\n * `ctx.nonce` getter on `MiddlewareContext`. Outside a request context\n * (tests, build-time rendering) a fresh value is returned but not\n * retained, since there is no request for it to belong to.\n */\nexport function requestCspNonce(): string {\n  const store = requestContextAls.getStore();\n  if (!store) return generateNonce();\n  store.cspNonce ??= generateNonce();\n  return store.cspNonce;\n}\n\n/**\n * The request's CSP nonce if middleware asked for one, else `undefined` —\n * in which case the pipeline emits bare `<script>` tags.\n */\nexport function getCspNonce(): string | undefined {\n  return requestContextAls.getStore()?.cspNonce;\n}\n\n/**\n * The ` nonce=\"…\"` attribute fragment for a timber-generated `<script>` tag,\n * or `''` when the request has no nonce. Callers interpolate it directly\n * after the tag name: `` `<script${nonceAttr(nonce)}>` ``.\n *\n * The value comes from `generateNonce` and is base64, so no attribute\n * escaping is required.\n */\nexport function nonceAttr(nonce: string | undefined): string {\n  return nonce ? ` nonce=\"${nonce}\"` : '';\n}\n"],"mappings":";;;;;;;;;;;;;;AAuDA,IAAI,eAAe;AACnB,IAAI,kBAAwD;;;;;;;;;;;AAY5D,eAAsB,oBACpB,QACe;CACf,IAAI,cAAc;CAClB,eAAe;CAEf,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,OAAO;CACrB,SAAS,OAAO;EACd,QAAQ,MAAM,+CAA+C,KAAK;EAClE;CACF;CAEA,IAAI,CAAC,KAAK;CAGV,IAAI,IAAI,UAAU,OAAO,IAAI,OAAO,SAAS,YAC3C,UAAU,IAAI,MAAM;CAItB,IAAI,OAAO,IAAI,mBAAmB,YAChC,kBAAkB,IAAI;CAIxB,IAAI,OAAO,IAAI,aAAa,YAC1B,IAAI;EACF,MAAM,IAAI,SAAS;CACrB,SAAS,OAAO;EACd,QAAQ,MAAM,iDAAiD,KAAK;EACpE,MAAM;CACR;AAEJ;;;;;AAMA,eAAsB,mBACpB,OACA,SACA,SACe;CACf,IAAI,CAAC,iBAAiB;CACtB,IAAI;EACF,MAAM,gBAAgB,OAAO,SAAS,OAAO;CAC/C,SAAS,WAAW;EAClB,QAAQ,MAAM,uCAAuC,SAAS;CAChE;AACF;;;;AAKA,SAAgB,oBAA6B;CAC3C,OAAO,oBAAoB;AAC7B;;;;;;;;;;;;;;;;ACpFA,SAAgB,kBACd,OACsB;CACtB,IAAI,UAAU,KAAA,GAAW,OAAO;CAEhC,IAAI,OAAO,UAAU,cAAc,MAAM,QAAQ,KAAK,GAAG;EACvD,MAAM,MAAM;EACZ,aAAa;CACf;CACA,IAAI,MAAM,SAAS,UAAU;EAC3B,MAAM,MAAM,MAAM;EAClB,aAAa;CACf;CACA,MAAM,SAAS,MAAM;CACrB,OAAO,aAAa,MAAM,OAAO,EAAA,CAAG;AACtC;;;;;AAQA,SAAgB,eAAe,SAAwB;CACrD,KAAK,MAAM,SAAS,oBAAoB,GACtC,QAAQ,OAAO,cAAc,KAAK;AAEtC;;;;;AAMA,SAAgB,oBAAoB,QAAiB,QAAuB;CAC1E,MAAM,eAAe,IAAI,IAAI,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,CAAC;CAC/E,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GACxC,IAAI,CAAC,aAAa,IAAI,IAAI,YAAY,CAAC,GACrC,OAAO,OAAO,KAAK,KAAK;AAG9B;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,wBAAwB,UAA8B;CACpE,OAAO,IAAI,SAAS,SAAS,MAAM;EACjC,QAAQ,SAAS;EACjB,YAAY,SAAS;EACrB,SAAS,IAAI,QAAQ,SAAS,OAAO;CACvC,CAAC;AACH;;;;;;;;;AAYA,SAAgB,sBACd,QACA,KACA,SACU;CACV,IAAI,aAAa,GAAG,GAAG;EACrB,QAAQ,IAAI,qBAAqB,OAAO,QAAQ;EAChD,OAAO,IAAI,SAAS,MAAM;GAAE,QAAQ;GAAK;EAAQ,CAAC;CACpD;CACA,QAAQ,IAAI,YAAY,OAAO,QAAQ;CACvC,OAAO,IAAI,SAAS,MAAM;EAAE,QAAQ,OAAO;EAAQ;CAAQ,CAAC;AAC9D;;;;;AAQA,eAAsB,mBACpB,OACA,KACA,OACe;CACf,MAAM,MAAM,IAAI,IAAI,IAAI,GAAG;CAC3B,MAAM,aAAqC,CAAC;CAC5C,IAAI,QAAQ,SAAS,GAAG,MAAM;EAC5B,WAAW,KAAK;CAClB,CAAC;CAED,MAAM,mBACJ,OACA;EAAE,QAAQ,IAAI;EAAQ,MAAM,IAAI;EAAU,SAAS;CAAW,GAC9D;EAAE;EAAO,WAAW,IAAI;EAAU,WAAW;EAAQ,SAAS,WAAW;CAAE,CAC7E;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC/HA,SAAS,gBAAwB;CAC/B,MAAM,QAAQ,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CACvD,IAAI,SAAS;CACb,KAAK,MAAM,KAAK,OAAO,UAAU,OAAO,aAAa,CAAC;CACtD,OAAO,KAAK,MAAM;AACpB;;;;;;;AAQA,SAAgB,kBAA0B;CACxC,MAAM,QAAQ,kBAAkB,SAAS;CACzC,IAAI,CAAC,OAAO,OAAO,cAAc;CACjC,MAAM,aAAa,cAAc;CACjC,OAAO,MAAM;AACf"}