agent-messenger 2.34.0 → 2.36.0

package/src/platforms/teams/html-sanitizer.test.ts

@@ -0,0 +1,123 @@
+import { describe, expect, it } from 'bun:test'
+
+import { sanitizeTeamsHtml } from './html-sanitizer'
+
+describe('sanitizeTeamsHtml', () => {
+  it('keeps a Teams mention tag with its id attribute', () => {
+    expect(sanitizeTeamsHtml('Hey <at id="29:x">John</at>')).toBe('Hey <at id="29:x">John</at>')
+  })
+
+  it('keeps whitelisted formatting tags', () => {
+    expect(sanitizeTeamsHtml('<b>bold</b>')).toBe('<b>bold</b>')
+  })
+
+  it('escapes a disallowed tag with a dangerous attribute', () => {
+    expect(sanitizeTeamsHtml('<img src=x onerror=alert(1)>')).toBe('&lt;img src=x onerror=alert(1)&gt;')
+  })
+
+  it('escapes script tags entirely', () => {
+    expect(sanitizeTeamsHtml('<script>alert(1)</script>')).toBe('&lt;script&gt;alert(1)&lt;/script&gt;')
+  })
+
+  it('keeps a whitelisted tag but drops its disallowed attribute', () => {
+    expect(sanitizeTeamsHtml('<b onclick="evil()">x</b>')).toBe('<b>x</b>')
+  })
+
+  it('drops an unsafe href but keeps the anchor tag', () => {
+    expect(sanitizeTeamsHtml('<a href="javascript:alert(1)">x</a>')).toBe('<a>x</a>')
+  })
+
+  it('escapes a bare < that is not part of a recognized tag', () => {
+    expect(sanitizeTeamsHtml('a < b')).toBe('a &lt; b')
+  })
+
+  describe('bypass attempts', () => {
+    it('blocks case-variant script tags', () => {
+      expect(sanitizeTeamsHtml('<ScRiPt>x</ScRiPt>')).toBe('&lt;ScRiPt&gt;x&lt;/ScRiPt&gt;')
+    })
+
+    it('recognizes a whitelisted tag regardless of case', () => {
+      expect(sanitizeTeamsHtml('<AT ID="x">John</AT>')).toBe('<at id="x">John</at>')
+    })
+
+    it('blocks a tag name followed directly by non-whitespace garbage', () => {
+      const result = sanitizeTeamsHtml('<script/x>alert(1)</script>')
+      expect(result).not.toContain('<script')
+      expect(result).toContain('&lt;script/x&gt;')
+    })
+
+    it('blocks a tag name followed by whitespace before the closing bracket', () => {
+      const result = sanitizeTeamsHtml('<script\n>alert(1)</script>')
+      expect(result).not.toContain('<script')
+      expect(result).toContain('&lt;script')
+    })
+
+    it('drops a quoted dangerous attribute alongside an allowed one', () => {
+      expect(sanitizeTeamsHtml('<at id="x" onload="y">John</at>')).toBe('<at id="x">John</at>')
+    })
+
+    it('drops an unquoted dangerous attribute alongside an allowed one', () => {
+      expect(sanitizeTeamsHtml('<at id=x onerror=y>John</at>')).toBe('<at id="x">John</at>')
+    })
+
+    it('never produces a live tag from nested/malformed markup', () => {
+      const result = sanitizeTeamsHtml('<<script>script>')
+      expect(result).not.toMatch(/<script[^>]*>/)
+      expect(result).toBe('&lt;&lt;script&gt;script&gt;')
+    })
+
+    it('sanitizes a disallowed tag nested inside a whitelisted one', () => {
+      expect(sanitizeTeamsHtml('<b><script>alert(1)</script></b>')).toBe('<b>&lt;script&gt;alert(1)&lt;/script&gt;</b>')
+    })
+
+    it('does not double-escape already-escaped content', () => {
+      expect(sanitizeTeamsHtml('&lt;script&gt;')).toBe('&lt;script&gt;')
+    })
+
+    it('accepts void/self-closing br in any spelling', () => {
+      expect(sanitizeTeamsHtml('<br>')).toBe('<br>')
+      expect(sanitizeTeamsHtml('<br/>')).toBe('<br>')
+      expect(sanitizeTeamsHtml('<br />')).toBe('<br>')
+    })
+
+    it('allows an https href', () => {
+      expect(sanitizeTeamsHtml('<a href="https://ok.com">link</a>')).toBe('<a href="https://ok.com">link</a>')
+    })
+
+    it('drops a javascript: href', () => {
+      expect(sanitizeTeamsHtml('<a href="javascript:alert(1)">link</a>')).toBe('<a>link</a>')
+    })
+
+    it('drops a javascript: href even with leading whitespace before it', () => {
+      expect(sanitizeTeamsHtml('<a href=" javascript:alert(1)">link</a>')).toBe('<a>link</a>')
+    })
+
+    it('escapes hyphenated custom elements instead of rewriting them to a shorter allowed tag', () => {
+      // Without a hyphen in the tag-name pattern, "<a-b>" matched as "<a>" plus
+      // leftover text, silently rewriting an unknown element into an anchor.
+      expect(sanitizeTeamsHtml('<a-b onclick="x">hi</a-b>')).toBe('&lt;a-b onclick="x"&gt;hi&lt;/a-b&gt;')
+      expect(sanitizeTeamsHtml('<my-widget>x</my-widget>')).toBe('&lt;my-widget&gt;x&lt;/my-widget&gt;')
+    })
+
+    it('escapes tag names that merely start with an allowed name', () => {
+      // A tag name must end at a real boundary. Otherwise "<at:id>" matched the
+      // "at" prefix and was promoted into a Teams mention, and "<b_extra>" into
+      // bold — arbitrary markup turning into formatting or a mention.
+      expect(sanitizeTeamsHtml('<at:id>x</at:id>')).toBe('&lt;at:id&gt;x&lt;/at:id&gt;')
+      expect(sanitizeTeamsHtml('<b_extra>x</b_extra>')).toBe('&lt;b_extra&gt;x&lt;/b_extra&gt;')
+      expect(sanitizeTeamsHtml('<b.bold>x</b.bold>')).toBe('&lt;b.bold&gt;x&lt;/b.bold&gt;')
+      expect(sanitizeTeamsHtml('<a:link href="https://evil.com">x</a:link>')).toBe(
+        '&lt;a:link href="https://evil.com"&gt;x&lt;/a:link&gt;',
+      )
+    })
+
+    it('ignores attribute names that merely end with an allowed name', () => {
+      // An attribute name must start at a real boundary. Otherwise "foo.id"
+      // was truncated to "id" and "foo.href" to "href", letting arbitrary
+      // attributes forge a mention or a link.
+      expect(sanitizeTeamsHtml('<at foo.id="29:evil">J</at>')).toBe('<at>J</at>')
+      expect(sanitizeTeamsHtml('<at x:id="29:evil">J</at>')).toBe('<at>J</at>')
+      expect(sanitizeTeamsHtml('<a foo.href="https://evil.com">x</a>')).toBe('<a>x</a>')
+    })
+  })
+})

package/src/platforms/teams/html-sanitizer.ts

@@ -0,0 +1,134 @@
+/**
+ * Whitelist-based sanitizer for `--format html` content.
+ *
+ * Kept local to the Teams platform (not `src/shared/utils/`) because `<at>`
+ * is a Teams-specific mention marker — sharing this out would leak
+ * Teams-only semantics into webex's transformer.
+ *
+ * This is a tag/attribute whitelist, not a full HTML parser: it recognizes
+ * `<name ...>` / `</name>` tokens with a regex, keeps the ones on the
+ * whitelist (stripping any attribute not explicitly allowed for that tag),
+ * and escapes everything else — including malformed or disallowed tags and
+ * any stray `<`/`>` that isn't part of a recognized tag. Text that has no
+ * literal `<`/`>` (e.g. already-escaped entities like `&lt;script&gt;`)
+ * passes through untouched, so content is never double-escaped.
+ */
+
+const ALLOWED_TAGS = new Set([
+  'at',
+  'a',
+  'b',
+  'i',
+  'u',
+  's',
+  'strong',
+  'em',
+  'code',
+  'pre',
+  'br',
+  'p',
+  'ul',
+  'ol',
+  'li',
+  'blockquote',
+  'h1',
+  'h2',
+  'h3',
+  'h4',
+  'h5',
+  'h6',
+  'hr',
+])
+
+// Same rule as src/shared/utils/markdown-to-html.ts's SAFE_URL_PATTERN, kept
+// as a separate copy here since this module intentionally does not import
+// from the shared markdown transformer (see the file-level comment above).
+const SAFE_URL_PATTERN = /^(https?:|mailto:|\/|#)/i
+
+// Captures: 1) leading "/" for a closing tag, 2) the tag name, 3) everything
+// else up to the closing ">" (attributes and/or a trailing self-closing
+// "/"). Requires a letter immediately after "<" (or after "</"), so a bare
+// "<" not followed by a tag name — e.g. the outer "<" in "<<script>" — is
+// left as plain text instead of being absorbed into a match.
+//
+// The name must end at a real boundary — whitespace, "/" or ">" — so a name is
+// only ever matched in full. Without that lookahead a tag whose name merely
+// starts with an allowed one was promoted into it: "<at:id>" became a Teams
+// mention and "<b_extra>" became bold. Requiring the boundary makes those fail
+// the whitelist and get escaped like any other unknown tag.
+const TAG_PATTERN = /<(\/)?([a-zA-Z][a-zA-Z0-9-]*)(?=[\s/>])([^<>]*)>/g
+
+// The name must likewise start at a boundary — the beginning of the attribute
+// section, whitespace, or the "/" of a self-closing tag. Scanning without one
+// let a disallowed name be truncated to an allowed suffix, so `foo.id` was read
+// as `id` and `foo.href` as `href`, forging mentions and links out of arbitrary
+// attributes.
+const ATTR_PATTERN = /(?<=^|[\s/])([a-zA-Z][a-zA-Z0-9-]*)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/g
+
+export function sanitizeTeamsHtml(html: string): string {
+  let result = ''
+  let lastIndex = 0
+  TAG_PATTERN.lastIndex = 0
+
+  let match: RegExpExecArray | null
+  while ((match = TAG_PATTERN.exec(html)) !== null) {
+    result += escapeAngles(html.slice(lastIndex, match.index))
+    result += sanitizeTag(match)
+    lastIndex = TAG_PATTERN.lastIndex
+  }
+  result += escapeAngles(html.slice(lastIndex))
+
+  return result
+}
+
+function sanitizeTag(match: RegExpExecArray): string {
+  const [fullMatch, closingSlash, rawName, rest] = match
+  const name = rawName.toLowerCase()
+
+  if (!ALLOWED_TAGS.has(name)) {
+    return escapeAngles(fullMatch)
+  }
+
+  if (closingSlash) {
+    return `</${name}>`
+  }
+
+  const attrs = parseAttributes(rest)
+  const kept: string[] = []
+
+  if (name === 'at') {
+    const id = attrs.get('id')
+    if (id !== undefined) kept.push(`id="${escapeAttributeValue(id)}"`)
+  } else if (name === 'a') {
+    const href = attrs.get('href')
+    if (href !== undefined && isSafeUrl(href)) kept.push(`href="${escapeAttributeValue(href)}"`)
+  }
+
+  return kept.length > 0 ? `<${name} ${kept.join(' ')}>` : `<${name}>`
+}
+
+function parseAttributes(rest: string): Map<string, string> {
+  const attrs = new Map<string, string>()
+  ATTR_PATTERN.lastIndex = 0
+
+  let match: RegExpExecArray | null
+  while ((match = ATTR_PATTERN.exec(rest)) !== null) {
+    const name = match[1].toLowerCase()
+    const value = match[2] ?? match[3] ?? match[4] ?? ''
+    if (!attrs.has(name)) attrs.set(name, value)
+  }
+
+  return attrs
+}
+
+function isSafeUrl(url: string): boolean {
+  return SAFE_URL_PATTERN.test(url.trim())
+}
+
+function escapeAngles(text: string): string {
+  return text.replaceAll('<', '&lt;').replaceAll('>', '&gt;')
+}
+
+function escapeAttributeValue(value: string): string {
+  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;')
+}

package/src/platforms/teams/index.ts

@@ -22,6 +22,7 @@ export type {
   TeamsListenerEventMap,
   TeamsMention,
   TeamsMessage,
+  TeamsMessageFormat,
   TeamsRealtimeMessage,
   TeamsReaction,
   TeamsSearchResult,

package/src/platforms/teams/types.ts

@@ -87,6 +87,8 @@ export type TeamsAccountType = 'work' | 'personal'
 
 export type TeamsRegion = 'amer' | 'emea' | 'apac'
 
+export type TeamsMessageFormat = 'text' | 'markdown' | 'html'
+
 export type TeamsAuthMethod = 'device-code' | 'browser' | 'extracted' | 'manual'
 
 export interface TeamsAccount {

package/src/platforms/webex/client.ts

@@ -1,5 +1,7 @@
 import { createHash } from 'node:crypto'
 
+import { escapeHtml, markdownToHtml, stripMarkdown } from '@/shared/utils/markdown-to-html'
+
 import { WebexCredentialManager } from './credential-manager'
 import { WebexEncryptionService } from './encryption'
 import type { WebexScr } from './encryption'
@@ -11,7 +13,6 @@ import {
   toRestId,
 } from './id-normalizer'
 import { KmsKeyProvider } from './kms-key-provider'
-import { escapeHtml, markdownToHtml, stripMarkdown } from './markdown-to-html'
 import type { WebexConfig, WebexMembership, WebexMessage, WebexPerson, WebexSpace } from './types'
 import { WebexError } from './types'
 

package/src/{platforms/webex → shared/utils}/markdown-to-html.test.ts

@@ -112,6 +112,13 @@ describe('markdownToHtml', () => {
   it('preserves whitespace-only input', () => {
     expect(markdownToHtml('   ')).toBe('   ')
   })
+
+  it('does not clobber a fenced block with an inline placeholder on the same line', () => {
+    const result = markdownToHtml('Run `npm i` then ```\ncode here\n``` done')
+
+    expect(result).toContain('<code>npm i</code>')
+    expect(result).toContain('code here')
+  })
 })
 
 describe('stripMarkdown', () => {

package/dist/src/platforms/webex/markdown-to-html.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"markdown-to-html.d.ts","sourceRoot":"","sources":["../../../../src/platforms/webex/markdown-to-html.ts"],"names":[],"mappings":"AAGA,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgGvD;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBtD;AAqED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD"}

package/dist/src/platforms/webex/markdown-to-html.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"markdown-to-html.js","sourceRoot":"","sources":["../../../../src/platforms/webex/markdown-to-html.ts"],"names":[],"mappings":"AAAA,MAAM,wBAAwB,GAAG,aAAa,CAAA;AAC9C,MAAM,yBAAyB,GAAG,cAAc,CAAA;AAEhD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,SAAS,GAAa,EAAE,CAAA;IAE5B,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAM;QACR,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;QACxE,SAAS,GAAG,EAAE,CAAA;IAChB,CAAC,CAAA;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAI,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,cAAc,EAAE,CAAA;YAChB,KAAK,EAAE,CAAA;YACP,SAAQ;QACV,CAAC;QAED,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,cAAc,EAAE,CAAA;YAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACpB,KAAK,EAAE,CAAA;YACP,SAAQ;QACV,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACpD,IAAI,YAAY,EAAE,CAAC;YACjB,cAAc,EAAE,CAAA;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;YACzG,KAAK,EAAE,CAAA;YACP,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,cAAc,EAAE,CAAA;YAChB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACnB,KAAK,EAAE,CAAA;YACP,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,cAAc,EAAE,CAAA;YAChB,MAAM,UAAU,GAAa,EAAE,CAAA;YAC/B,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;gBAClD,KAAK,EAAE,CAAA;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,eAAe,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;YACvG,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,cAAc,EAAE,CAAA;YAChB,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;gBAC1E,KAAK,EAAE,CAAA;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;YACzC,SAAQ;QACV,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,cAAc,EAAE,CAAA;YAChB,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC9D,KAAK,CAAC,IAAI,CAAC,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;gBAC9E,KAAK,EAAE,CAAA;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;YACzC,SAAQ;QACV,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,KAAK,EAAE,CAAA;IACT,CAAC;IAED,cAAc,EAAE,CAAA;IAEhB,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,QAAQ;SACZ,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACvB,OAAO,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,SAA6B,EAAE,IAAY,EAAE,EAAE;QACnG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC;SACD,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC;SAC3C,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC;SACvC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACnC,OAAO,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,IAAI,IAAI,GAAG,QAAQ,CAAA;IAEnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QACtD,OAAO,uBAAuB,CAAC,YAAY,EAAE,SAAS,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,KAAa,EAAE,GAAW,EAAE,EAAE;QAClF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC;QACD,OAAO,uBAAuB,CAAC,YAAY,EAAE,YAAY,UAAU,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1G,CAAC,CAAC,CAAA;IAEF,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,8BAA8B,CAAC,CAAA;IAC7E,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAA;IAChE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kCAAkC,EAAE,eAAe,CAAC,CAAA;IAExE,OAAO,mBAAmB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAC3B,wCAAwC,EACxC,CAAC,CAAC,EAAE,QAA4B,EAAE,IAAY,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7E,OAAO,sBAAsB,CAAC,MAAM,EAAE,aAAa,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAClG,CAAC,CACF,CAAA;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzB,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAgB,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,GAAG,wBAAwB,GAAG,MAAM,CAAC,MAAM,QAAQ,CAAA;IACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAsB,EAAE,IAAY;IACnE,MAAM,KAAK,GAAG,GAAG,yBAAyB,GAAG,YAAY,CAAC,MAAM,QAAQ,CAAA;IACxE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,wBAAwB,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,MAAgB;IACzD,IAAI,QAAQ,GAAG,IAAI,CAAA;IACnB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,wBAAwB,GAAG,KAAK,QAAQ,EAAE,KAAK,CAAC,CAAA;QAClF,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,yBAAyB,GAAG,KAAK,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAEnD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AAC7B,CAAC"}