aimeat 1.2.0

package/dist/src/middleware/__tests__/cookie-consent.test.js

@@ -0,0 +1,432 @@
+import { describe, it, expect, vi } from 'vitest';
+import { cookieConsentMiddleware, buildStandaloneSnippetJs } from '../cookie-consent.js';
+/** Helper to create a minimal AimeatConfig with cookie consent fields */
+function makeConfig(overrides = {}) {
+    return {
+        cookieConsentEnabled: false,
+        cookieConsentCategories: ['necessary'],
+        cookieConsentPolicyUrl: null,
+        // Provide minimal defaults for other required fields so TS is happy
+        port: 40050,
+        baseUrl: 'http://localhost:40050',
+        nodeId: 'test-node',
+        nodeType: 'full',
+        dbUrl: null,
+        adminPassword: null,
+        devMode: false,
+        anonymousMode: false,
+        jwtTtlSeconds: 3600,
+        welcomeBonus: 100,
+        dailyAllowance: 50,
+        dailyAllowanceCap: 500,
+        burnRate: 0.1,
+        keyedBrowseEnabled: true,
+        extendedFeaturesEnabled: true,
+        maxRelayHops: 3,
+        depeeringGracePeriodHours: 72,
+        keyCacheRefreshMinutes: 5,
+        memoryQuotaMb: 10,
+        storageQuotaMb: 100,
+        microMemoryQuotaKb: 500,
+        memoryOverageMorselsPerMbMonth: 10,
+        storageOverageMorselsPerGbMonth: 100,
+        maxOperatorMintPerDay: 10000,
+        boardPostBaseCost: 5,
+        boardPostCostPerKb: 2,
+        webhookMaxRetries: 5,
+        workQueueMaxPending: 10,
+        otkTtlMs: 300000,
+        otkGraceMs: 60000,
+        maxUrlLength: 8192,
+        indexNowKey: null,
+        extensionHooks: {
+            pre_owner_registration: [],
+            post_owner_registration: [],
+            pre_agent_registration: [],
+            post_agent_registration: [],
+            owner_recovery: [],
+            agent_rekey: [],
+            pre_work_request: [],
+            post_work_delivery: [],
+            post_settlement: [],
+            pre_board_post: [],
+            pre_federation_peer: [],
+        },
+        federationRole: 'standalone',
+        genesisUrl: null,
+        consentEnabled: true,
+        consentAuditRetentionDays: 365,
+        consentMaxPerUser: 100,
+        totpEnabled: false,
+        totpIssuer: 'AIMEAT',
+        totpPeriod: 30,
+        totpWindow: 1,
+        totpBackupCodeCount: 10,
+        totpSecretEncryptionKey: null,
+        totpMaxFailedAttempts: 5,
+        totpLockoutSeconds: 300,
+        personalNodesEnabled: false,
+        personalNodeMaxSlots: 100,
+        personalNodeMailboxQuotaMb: 50,
+        personalNodeMailboxRetentionDays: 7,
+        personalNodeHeartbeatIntervalMs: 30000,
+        personalNodeOfflineThresholdMs: 300000,
+        smtpHost: null,
+        smtpPort: 587,
+        smtpUser: null,
+        smtpPass: null,
+        smtpFrom: 'AIMEAT <noreply@localhost>',
+        smtpSecure: false,
+        emailConfirmationRequired: false,
+        emailEnabled: false,
+        matchNotificationIntervalHours: 24,
+        matchNotificationEnabled: false,
+        matchingEnabled: false,
+        matchIntervalHours: 24,
+        matchThreshold: 0.5,
+        matchMaxSuggestions: 5,
+        matchMaxDistanceKm: 100,
+        matchCooldownDays: 7,
+        marketplaceEnabled: false,
+        marketplaceListingFeeMorsels: 2,
+        marketplaceTransactionFeePercent: 5,
+        marketplaceEscrowEnabled: false,
+        pushEnabled: false,
+        vapidPublicKey: null,
+        vapidPrivateKey: null,
+        vapidSubject: 'mailto:admin@aimeat.example.com',
+        eudiwEnabled: false,
+        eudiwClientId: 'aimeat-verifier-001',
+        eudiwRedirectUri: '',
+        ftnEnabled: false,
+        ftnProviderUrl: 'https://tunnistautuminen.suomi.fi',
+        vcIssuerDid: '',
+        crossFederationEnabled: false,
+        maxGenesisPeers: 10,
+        genesisSyncIntervalHours: 6,
+        rlGlobal: 300,
+        rlAuth: 20,
+        rlWork: 60,
+        rlMemory: 120,
+        rlBoards: 60,
+        rlOwners: 300,
+        rlGhii: 300,
+        rlFlags: 300,
+        rlAppeals: 300,
+        rlAdminSetup: 300,
+        rlFederation: 300,
+        rlCatalogue: 300,
+        rlAuthChallenge: 300,
+        rateLimits: {
+            global: { windowMs: 1000, max: 300 },
+            auth: { windowMs: 1000, max: 20 },
+            work: { windowMs: 1000, max: 60 },
+            memory: { windowMs: 1000, max: 120 },
+            boards: { windowMs: 1000, max: 60 },
+            owners: { windowMs: 1000, max: 300 },
+            ghii: { windowMs: 1000, max: 300 },
+            flags: { windowMs: 1000, max: 300 },
+            appeals: { windowMs: 1000, max: 300 },
+            adminSetup: { windowMs: 1000, max: 300 },
+            federation: { windowMs: 1000, max: 300 },
+            catalogue: { windowMs: 1000, max: 300 },
+            authChallenge: { windowMs: 1000, max: 300 },
+            roleMultipliers: { operator: 10, owner: 2, agent: 1, anonymous: 0.5 },
+        },
+        ...overrides,
+    };
+}
+/** Helper to create mock Express req/res/next */
+function createMocks() {
+    const req = {};
+    const headers = new Map();
+    const res = {
+        getHeader: (name) => headers.get(name.toLowerCase()),
+        setHeader: (name, value) => { headers.set(name.toLowerCase(), value); return res; },
+        send: vi.fn().mockReturnThis(),
+    };
+    const next = vi.fn();
+    return { req, res, next, headers };
+}
+describe('cookieConsentMiddleware', () => {
+    it('no-op when disabled — calls next() without modifying res.send', () => {
+        const config = makeConfig({ cookieConsentEnabled: false });
+        const middleware = cookieConsentMiddleware(config);
+        const { req, res, next } = createMocks();
+        const originalSend = res.send;
+        middleware(req, res, next);
+        expect(next).toHaveBeenCalled();
+        // res.send should NOT have been replaced
+        expect(res.send).toBe(originalSend);
+    });
+    it('injects snippet into HTML response before </body>', () => {
+        const config = makeConfig({ cookieConsentEnabled: true });
+        const middleware = cookieConsentMiddleware(config);
+        const { req, res, next, headers } = createMocks();
+        middleware(req, res, next);
+        expect(next).toHaveBeenCalled();
+        // Simulate Express setting Content-Type and calling send
+        headers.set('content-type', 'text/html; charset=utf-8');
+        const htmlBody = '<html><body><p>Hello</p></body></html>';
+        // The overridden send should inject the snippet
+        // We need to capture what the original send receives
+        const originalSend = vi.fn().mockReturnThis();
+        // Swap in a spy for the underlying send
+        const wrappedSend = res.send;
+        // The middleware replaced res.send with a wrapper that calls originalSend
+        // Let's just call it and verify it modifies the body
+        // Re-create to properly test the interception
+        const req2 = {};
+        const headers2 = new Map();
+        let capturedBody;
+        const res2 = {
+            getHeader: (name) => headers2.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next2 = vi.fn();
+        const middleware2 = cookieConsentMiddleware(config);
+        middleware2(req2, res2, next2);
+        headers2.set('content-type', 'text/html; charset=utf-8');
+        res2.send(htmlBody);
+        expect(typeof capturedBody).toBe('string');
+        const result = capturedBody;
+        expect(result).toContain('cookieconsent.css');
+        expect(result).toContain('cookieconsent.umd.js');
+        expect(result).toContain('CookieConsent.run(');
+        expect(result).toContain('</body>');
+        // Snippet should appear before </body>
+        const snippetIndex = result.indexOf('CookieConsent.run(');
+        const bodyCloseIndex = result.indexOf('</body>');
+        expect(snippetIndex).toBeLessThan(bodyCloseIndex);
+    });
+    it('skips non-HTML responses (application/json)', () => {
+        const config = makeConfig({ cookieConsentEnabled: true });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'application/json');
+        const jsonBody = '{"ok":true}';
+        res.send(jsonBody);
+        expect(capturedBody).toBe(jsonBody);
+    });
+    it('includes configured categories in the snippet', () => {
+        const config = makeConfig({
+            cookieConsentEnabled: true,
+            cookieConsentCategories: ['necessary', 'analytics', 'marketing'],
+        });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'text/html');
+        res.send('<html><body></body></html>');
+        const result = capturedBody;
+        expect(result).toContain('"analytics"');
+        expect(result).toContain('"marketing"');
+        expect(result).toContain('"necessary"');
+    });
+    it('includes policy URL when cookieConsentPolicyUrl is set', () => {
+        const config = makeConfig({
+            cookieConsentEnabled: true,
+            cookieConsentPolicyUrl: 'https://example.com/privacy',
+        });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'text/html');
+        res.send('<html><body></body></html>');
+        const result = capturedBody;
+        expect(result).toContain('https://example.com/privacy');
+        expect(result).toContain('Privacy Policy');
+    });
+    it('omits footer link when cookieConsentPolicyUrl is null', () => {
+        const config = makeConfig({
+            cookieConsentEnabled: true,
+            cookieConsentPolicyUrl: null,
+        });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'text/html');
+        res.send('<html><body></body></html>');
+        const result = capturedBody;
+        expect(result).not.toContain('Privacy Policy');
+        expect(result).not.toContain('footer');
+    });
+    it('passes HTML through unchanged when there is no </body> tag', () => {
+        const config = makeConfig({ cookieConsentEnabled: true });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'text/html');
+        const htmlWithoutBody = '<html><head><title>No body tag</title></head></html>';
+        res.send(htmlWithoutBody);
+        // Body should pass through without any injection
+        expect(capturedBody).toBe(htmlWithoutBody);
+        expect(capturedBody).not.toContain('CookieConsent');
+        expect(capturedBody).not.toContain('cookieconsent.css');
+    });
+    it('handles empty string body gracefully', () => {
+        const config = makeConfig({ cookieConsentEnabled: true });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'text/html');
+        res.send('');
+        // Empty body should pass through unchanged
+        expect(capturedBody).toBe('');
+    });
+    it('passes non-string body through unchanged (e.g. Buffer)', () => {
+        const config = makeConfig({ cookieConsentEnabled: true });
+        const middleware = cookieConsentMiddleware(config);
+        const req = {};
+        const headers = new Map();
+        let capturedBody;
+        const res = {
+            getHeader: (name) => headers.get(name.toLowerCase()),
+            send: vi.fn(function (body) {
+                capturedBody = body;
+                return this;
+            }),
+        };
+        const next = vi.fn();
+        middleware(req, res, next);
+        headers.set('content-type', 'text/html');
+        const buf = Buffer.from('<html><body></body></html>');
+        res.send(buf);
+        // Non-string body should pass through without modification
+        expect(capturedBody).toBe(buf);
+    });
+});
+/**
+ * Extract the JSON config object from a CookieConsent.run(...) call inside a JS string.
+ * Uses a balanced-brace counter since the config is a JSON object.
+ */
+function extractRunConfig(js) {
+    const marker = 'CookieConsent.run(';
+    const start = js.indexOf(marker);
+    if (start === -1)
+        throw new Error('CookieConsent.run( not found');
+    const jsonStart = start + marker.length;
+    let depth = 0;
+    let jsonEnd = -1;
+    for (let i = jsonStart; i < js.length; i++) {
+        if (js[i] === '{')
+            depth++;
+        else if (js[i] === '}') {
+            depth--;
+            if (depth === 0) {
+                jsonEnd = i + 1;
+                break;
+            }
+        }
+    }
+    if (jsonEnd === -1)
+        throw new Error('Unbalanced braces in CookieConsent.run()');
+    return JSON.parse(js.slice(jsonStart, jsonEnd));
+}
+describe('buildStandaloneSnippetJs', () => {
+    it('returns a JS IIFE containing CookieConsent.run', () => {
+        const config = makeConfig({
+            cookieConsentEnabled: true,
+            cookieConsentCategories: ['necessary', 'analytics'],
+            cookieConsentPolicyUrl: 'https://example.com/privacy',
+        });
+        const js = buildStandaloneSnippetJs(config);
+        expect(js).toMatch(/^\(function\(\)\{/);
+        expect(js).toMatch(/\}\)\(\);$/);
+        expect(js).toContain('CookieConsent.run(');
+        expect(js).toContain('cookieconsent.css');
+        expect(js).toContain('cookieconsent.umd.js');
+        expect(js).toContain('"analytics"');
+    });
+    it('always includes necessary category as enabled + readOnly even if not in config categories', () => {
+        const config = makeConfig({
+            cookieConsentEnabled: true,
+            cookieConsentCategories: ['analytics', 'marketing'],
+        });
+        const js = buildStandaloneSnippetJs(config);
+        const runConfig = extractRunConfig(js);
+        // necessary must always be present with enabled: true, readOnly: true
+        expect(runConfig.categories.necessary).toEqual({ enabled: true, readOnly: true });
+        // Other categories should also be present
+        expect(runConfig.categories.analytics).toBeDefined();
+        expect(runConfig.categories.marketing).toBeDefined();
+    });
+    it('does not duplicate necessary when it is explicitly included in config categories', () => {
+        const config = makeConfig({
+            cookieConsentEnabled: true,
+            cookieConsentCategories: ['necessary', 'analytics'],
+        });
+        const js = buildStandaloneSnippetJs(config);
+        const runConfig = extractRunConfig(js);
+        // necessary must still be enabled + readOnly
+        expect(runConfig.categories.necessary).toEqual({ enabled: true, readOnly: true });
+        // Should have exactly 2 categories
+        expect(Object.keys(runConfig.categories)).toHaveLength(2);
+        expect(runConfig.categories.analytics).toBeDefined();
+    });
+});
+//# sourceMappingURL=cookie-consent.test.js.map

package/dist/src/middleware/__tests__/cookie-consent.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-consent.test.js","sourceRoot":"","sources":["../../../../src/middleware/__tests__/cookie-consent.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAGlD,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEzF,yEAAyE;AACzE,SAAS,UAAU,CAAC,YAAmC,EAAE;IACvD,OAAO;QACL,oBAAoB,EAAE,KAAK;QAC3B,uBAAuB,EAAE,CAAC,WAAW,CAAC;QACtC,sBAAsB,EAAE,IAAI;QAC5B,oEAAoE;QACpE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,wBAAwB;QACjC,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,GAAG;QACjB,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,GAAG;QACtB,QAAQ,EAAE,GAAG;QACb,kBAAkB,EAAE,IAAI;QACxB,uBAAuB,EAAE,IAAI;QAC7B,YAAY,EAAE,CAAC;QACf,yBAAyB,EAAE,EAAE;QAC7B,sBAAsB,EAAE,CAAC;QACzB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,GAAG;QACnB,kBAAkB,EAAE,GAAG;QACvB,8BAA8B,EAAE,EAAE;QAClC,+BAA+B,EAAE,GAAG;QACpC,qBAAqB,EAAE,KAAK;QAC5B,iBAAiB,EAAE,CAAC;QACpB,kBAAkB,EAAE,CAAC;QACrB,iBAAiB,EAAE,CAAC;QACpB,mBAAmB,EAAE,EAAE;QACvB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE;YACd,sBAAsB,EAAE,EAAE;YAC1B,uBAAuB,EAAE,EAAE;YAC3B,sBAAsB,EAAE,EAAE;YAC1B,uBAAuB,EAAE,EAAE;YAC3B,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,EAAE;YACf,gBAAgB,EAAE,EAAE;YACpB,kBAAkB,EAAE,EAAE;YACtB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,mBAAmB,EAAE,EAAE;SACxB;QACD,cAAc,EAAE,YAAY;QAC5B,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,IAAI;QACpB,yBAAyB,EAAE,GAAG;QAC9B,iBAAiB,EAAE,GAAG;QACtB,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,CAAC;QACb,mBAAmB,EAAE,EAAE;QACvB,uBAAuB,EAAE,IAAI;QAC7B,qBAAqB,EAAE,CAAC;QACxB,kBAAkB,EAAE,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,oBAAoB,EAAE,GAAG;QACzB,0BAA0B,EAAE,EAAE;QAC9B,gCAAgC,EAAE,CAAC;QACnC,+BAA+B,EAAE,KAAK;QACtC,8BAA8B,EAAE,MAAM;QACtC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,4BAA4B;QACtC,UAAU,EAAE,KAAK;QACjB,yBAAyB,EAAE,KAAK;QAChC,YAAY,EAAE,KAAK;QACnB,8BAA8B,EAAE,EAAE;QAClC,wBAAwB,EAAE,KAAK;QAC/B,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,EAAE;QACtB,cAAc,EAAE,GAAG;QACnB,mBAAmB,EAAE,CAAC;QACtB,kBAAkB,EAAE,GAAG;QACvB,iBAAiB,EAAE,CAAC;QACpB,kBAAkB,EAAE,KAAK;QACzB,4BAA4B,EAAE,CAAC;QAC/B,gCAAgC,EAAE,CAAC;QACnC,wBAAwB,EAAE,KAAK;QAC/B,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,iCAAiC;QAC/C,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,qBAAqB;QACpC,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,mCAAmC;QACnD,WAAW,EAAE,EAAE;QACf,sBAAsB,EAAE,KAAK;QAC7B,eAAe,EAAE,EAAE;QACnB,wBAAwB,EAAE,CAAC;QAC3B,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,GAAG;QACZ,SAAS,EAAE,GAAG;QACd,YAAY,EAAE,GAAG;QACjB,YAAY,EAAE,GAAG;QACjB,WAAW,EAAE,GAAG;QAChB,eAAe,EAAE,GAAG;QACpB,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACpC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YACjC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACpC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YACnC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACpC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YAClC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACnC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACrC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACxC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACxC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YACvC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3C,eAAe,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;SACtE;QACD,GAAG,SAAS;KACG,CAAC;AACpB,CAAC;AAED,iDAAiD;AACjD,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,EAAa,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;IACvE,MAAM,GAAG,GAAG;QACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5D,SAAS,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACnG,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;KACR,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;IAChD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;QAEzC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;QAC9B,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAChC,yCAAyC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;QAElD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAEhC,yDAAyD;QACzD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,wCAAwC,CAAC;QAE1D,gDAAgD;QAChD,qDAAqD;QACrD,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC;QAC9C,wCAAwC;QACxC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC;QAC7B,0EAA0E;QAC1E,qDAAqD;QACrD,8CAA8C;QAC9C,MAAM,IAAI,GAAG,EAAa,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+C,CAAC;QACxE,IAAI,YAAqB,CAAC;QAC1B,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEjD,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE/B,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpB,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,YAAsB,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpC,uCAAuC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEnB,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,YAAsB,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,oBAAoB,EAAE,IAAI;YAC1B,sBAAsB,EAAE,6BAA6B;SACtD,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,YAAsB,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,oBAAoB,EAAE,IAAI;YAC1B,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,YAAsB,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,eAAe,GAAG,sDAAsD,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE1B,iDAAiD;QACjD,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEb,2CAA2C;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,EAAa,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;QACvE,IAAI,YAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG;YACV,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAA0B,IAAc;gBAClD,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;SACoB,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAA6B,CAAC;QAEhD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEd,2DAA2D;QAC3D,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,gBAAgB,CAAC,EAAU;IAClC,MAAM,MAAM,GAAG,oBAAoB,CAAC;IACpC,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACtB,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACvB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;YACnD,sBAAsB,EAAE,6BAA6B;SACtD,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAA4C,CAAC;QAElF,sEAAsE;QACtE,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,0CAA0C;QAC1C,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAA4C,CAAC;QAElF,6CAA6C;QAC7C,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,mCAAmC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/middleware/cookie-consent.d.ts

@@ -0,0 +1,19 @@
+import type { RequestHandler } from 'express';
+import type { AimeatConfig } from '../config.js';
+/**
+ * Express middleware that injects vanilla-cookieconsent banner HTML/JS
+ * into HTML responses before </body>.
+ *
+ * If config.cookieConsentEnabled is false, returns a no-op middleware.
+ * The snippet is pre-built once at middleware creation time.
+ */
+export declare function cookieConsentMiddleware(config: AimeatConfig): RequestHandler;
+/**
+ * Returns a self-executing JS function (IIFE) that dynamically injects
+ * the CSS link, loads the UMD script, and initializes CookieConsent.
+ *
+ * This is for manual integration via the portal endpoint
+ * GET /v1/portal/cookie-consent.js
+ */
+export declare function buildStandaloneSnippetJs(config: AimeatConfig): string;
+//# sourceMappingURL=cookie-consent.d.ts.map

package/dist/src/middleware/cookie-consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-consent.d.ts","sourceRoot":"","sources":["../../../src/middleware/cookie-consent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAmC,MAAM,SAAS,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAoFjD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc,CA4B5E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAarE"}

package/dist/src/middleware/cookie-consent.js

@@ -0,0 +1,127 @@
+/**
+ * Build the CookieConsent.run() configuration object as a JS string.
+ * Categories are built from config.cookieConsentCategories.
+ * 'necessary' is always included as enabled + readOnly.
+ */
+function buildCookieConsentRunConfig(config) {
+    // Build categories object
+    const categories = {
+        necessary: { enabled: true, readOnly: true },
+    };
+    for (const cat of config.cookieConsentCategories) {
+        if (cat !== 'necessary') {
+            categories[cat] = {};
+        }
+    }
+    // Build preference sections
+    const sections = [
+        { title: 'Cookie usage', description: 'We use cookies to ensure basic site functionality and to improve your experience.' },
+        { title: 'Necessary', linkedCategory: 'necessary' },
+    ];
+    for (const cat of config.cookieConsentCategories) {
+        if (cat !== 'necessary') {
+            sections.push({
+                title: cat.charAt(0).toUpperCase() + cat.slice(1),
+                linkedCategory: cat,
+            });
+        }
+    }
+    // Build footer with policy URL if set
+    const footer = config.cookieConsentPolicyUrl
+        ? `<a href="${config.cookieConsentPolicyUrl}">Privacy Policy</a>`
+        : undefined;
+    const runConfig = {
+        categories,
+        guiOptions: {
+            consentModal: { layout: 'box', position: 'bottom right' },
+            preferencesModal: { layout: 'box' },
+        },
+        language: {
+            default: 'en',
+            autoDetect: 'document',
+            translations: {
+                en: {
+                    consentModal: {
+                        title: 'Cookie Settings',
+                        description: 'This site uses cookies to ensure you get the best experience.',
+                        acceptAllBtn: 'Accept all',
+                        acceptNecessaryBtn: 'Reject all',
+                        showPreferencesBtn: 'Settings',
+                        ...(footer ? { footer } : {}),
+                    },
+                    preferencesModal: {
+                        title: 'Cookie Preferences',
+                        acceptAllBtn: 'Accept all',
+                        acceptNecessaryBtn: 'Reject all',
+                        savePreferencesBtn: 'Save settings',
+                        sections,
+                    },
+                },
+            },
+        },
+    };
+    return JSON.stringify(runConfig);
+}
+/**
+ * Build the HTML snippet to inject before </body>.
+ * Includes the CSS link, UMD script, and CookieConsent.run() call.
+ */
+function buildInjectSnippet(config) {
+    const runConfig = buildCookieConsentRunConfig(config);
+    return (`<link rel="stylesheet" href="/cookieconsent.css">` +
+        `<script src="/cookieconsent.umd.js"></script>` +
+        `<script>CookieConsent.run(${runConfig});</script>`);
+}
+/**
+ * Express middleware that injects vanilla-cookieconsent banner HTML/JS
+ * into HTML responses before </body>.
+ *
+ * If config.cookieConsentEnabled is false, returns a no-op middleware.
+ * The snippet is pre-built once at middleware creation time.
+ */
+export function cookieConsentMiddleware(config) {
+    if (!config.cookieConsentEnabled) {
+        return (_req, _res, next) => next();
+    }
+    // Pre-build the snippet once
+    const snippet = buildInjectSnippet(config);
+    return (_req, res, next) => {
+        const originalSend = res.send.bind(res);
+        res.send = function (body) {
+            // Only inject into string bodies with text/html content type
+            if (typeof body === 'string') {
+                const contentType = res.getHeader('Content-Type');
+                const ctString = typeof contentType === 'string' ? contentType : '';
+                if (ctString.includes('text/html')) {
+                    const closingBodyIndex = body.lastIndexOf('</body>');
+                    if (closingBodyIndex !== -1) {
+                        body = body.slice(0, closingBodyIndex) + snippet + body.slice(closingBodyIndex);
+                    }
+                }
+            }
+            return originalSend(body);
+        };
+        next();
+    };
+}
+/**
+ * Returns a self-executing JS function (IIFE) that dynamically injects
+ * the CSS link, loads the UMD script, and initializes CookieConsent.
+ *
+ * This is for manual integration via the portal endpoint
+ * GET /v1/portal/cookie-consent.js
+ */
+export function buildStandaloneSnippetJs(config) {
+    const runConfig = buildCookieConsentRunConfig(config);
+    return `(function(){` +
+        `var link=document.createElement('link');` +
+        `link.rel='stylesheet';` +
+        `link.href='/cookieconsent.css';` +
+        `document.head.appendChild(link);` +
+        `var script=document.createElement('script');` +
+        `script.src='/cookieconsent.umd.js';` +
+        `script.onload=function(){CookieConsent.run(${runConfig});};` +
+        `document.head.appendChild(script);` +
+        `})();`;
+}
+//# sourceMappingURL=cookie-consent.js.map

package/dist/src/middleware/cookie-consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-consent.js","sourceRoot":"","sources":["../../../src/middleware/cookie-consent.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,SAAS,2BAA2B,CAAC,MAAoB;IACvD,0BAA0B;IAC1B,MAAM,UAAU,GAA8D;QAC5E,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC7C,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACjD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAA4E;QACxF,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,mFAAmF,EAAE;QAC3H,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE;KACpD,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACjD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjD,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,sBAAsB;QAC1C,CAAC,CAAC,YAAY,MAAM,CAAC,sBAAsB,sBAAsB;QACjE,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,SAAS,GAAG;QAChB,UAAU;QACV,UAAU,EAAE;YACV,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE;YACzD,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SACpC;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE;gBACZ,EAAE,EAAE;oBACF,YAAY,EAAE;wBACZ,KAAK,EAAE,iBAAiB;wBACxB,WAAW,EAAE,+DAA+D;wBAC5E,YAAY,EAAE,YAAY;wBAC1B,kBAAkB,EAAE,YAAY;wBAChC,kBAAkB,EAAE,UAAU;wBAC9B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9B;oBACD,gBAAgB,EAAE;wBAChB,KAAK,EAAE,oBAAoB;wBAC3B,YAAY,EAAE,YAAY;wBAC1B,kBAAkB,EAAE,YAAY;wBAChC,kBAAkB,EAAE,eAAe;wBACnC,QAAQ;qBACT;iBACF;aACF;SACF;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,CACL,mDAAmD;QACnD,+CAA+C;QAC/C,6BAA6B,SAAS,aAAa,CACpD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAoB;IAC1D,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO,CAAC,IAAa,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,6BAA6B;IAC7B,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3C,OAAO,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC1D,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,GAAG,CAAC,IAAI,GAAG,UAAU,IAAc;YACjC,6DAA6D;YAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBACnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;oBACrD,IAAI,gBAAgB,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC5B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAoB;IAC3D,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAEtD,OAAO,cAAc;QACnB,0CAA0C;QAC1C,wBAAwB;QACxB,iCAAiC;QACjC,kCAAkC;QAClC,8CAA8C;QAC9C,qCAAqC;QACrC,8CAA8C,SAAS,MAAM;QAC7D,oCAAoC;QACpC,OAAO,CAAC;AACZ,CAAC"}

package/dist/src/middleware/cors.d.ts

@@ -0,0 +1,12 @@
+/**
+ * CORS middleware — per-entity origin resolution.
+ *
+ * Phase 1: Node-level only (config.corsAllowedOrigins).
+ * Phase 2: GHII-level — authenticated users can restrict their origins.
+ *          Resolution: GHII.allowedOrigins → node default.
+ */
+import type { RequestHandler } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function corsMiddleware(config: AimeatConfig, getStorage?: () => Storage | null): RequestHandler;
+//# sourceMappingURL=cors.d.ts.map

package/dist/src/middleware/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,OAAO,GAAG,IAAI,GAAG,cAAc,CA6CtG"}