npm - github-issue-tower-defence-management - Versions diffs - 1.128.0 → 1.128.1 - Mend

github-issue-tower-defence-management 1.128.0 → 1.128.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (26) hide show

package/src/adapter/entry-points/console/ui-dist/index.html CHANGED Viewed

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>TDPM Console</title>
-    <script type="module" crossorigin src="/assets/index-8H0HejYa.js"></script>
+    <script type="module" crossorigin src="/assets/index-CufymFM1.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-N9M1qhkw.css">
   </head>
   <body>

package/src/adapter/entry-points/console/webServer.test.ts CHANGED Viewed

@@ -6,11 +6,13 @@ import { mock } from 'jest-mock-extended';
 import {
   DEFAULT_WEB_PORT,
   CONSOLE_TOKEN_HEADER,
+  CONSOLE_TOKEN_COOKIE,
   hasDotSegment,
   requiresToken,
   isTokenValid,
   isConsoleAppRoute,
   extractProvidedToken,
+  extractCookieToken,
   resolveFlatInTmuxFilePath,
   resolveDashboardFilePath,
   startWebServer,
@@ -109,16 +111,53 @@ describe('webServer pure helpers', () => {
   describe('extractProvidedToken', () => {
     it('prefers the query token', () => {
-      expect(extractProvidedToken('fromQuery', 'fromHeader')).toBe('fromQuery');
+      expect(
+        extractProvidedToken('fromQuery', 'fromHeader', 'fromCookie'),
+      ).toBe('fromQuery');
     });
-    it('falls back to the header token', () => {
-      expect(extractProvidedToken(null, 'fromHeader')).toBe('fromHeader');
+    it('falls back to the header token before the cookie token', () => {
+      expect(extractProvidedToken(null, 'fromHeader', 'fromCookie')).toBe(
+        'fromHeader',
+      );
+    });
+    it('falls back to the cookie token when query and header are absent', () => {
+      expect(extractProvidedToken(null, undefined, 'fromCookie')).toBe(
+        'fromCookie',
+      );
+    });
+    it('returns null when none is present', () => {
+      expect(extractProvidedToken(null, undefined, null)).toBeNull();
+      expect(extractProvidedToken('', undefined, '')).toBeNull();
+    });
+  });
+  describe('extractCookieToken', () => {
+    it('reads the token cookie value from a cookie header', () => {
+      expect(extractCookieToken(`${CONSOLE_TOKEN_COOKIE}=cookie-value`)).toBe(
+        'cookie-value',
+      );
+    });
+    it('reads the token cookie when other cookies are present', () => {
+      expect(
+        extractCookieToken(
+          `other=1; ${CONSOLE_TOKEN_COOKIE}=cookie-value; a=b`,
+        ),
+      ).toBe('cookie-value');
     });
-    it('returns null when neither is present', () => {
-      expect(extractProvidedToken(null, undefined)).toBeNull();
-      expect(extractProvidedToken('', undefined)).toBeNull();
+    it('decodes a percent-encoded cookie value', () => {
+      expect(extractCookieToken(`${CONSOLE_TOKEN_COOKIE}=a%20b`)).toBe('a b');
+    });
+    it('returns null when the token cookie is absent, empty, or undefined', () => {
+      expect(extractCookieToken('other=1')).toBeNull();
+      expect(extractCookieToken(`${CONSOLE_TOKEN_COOKIE}=`)).toBeNull();
+      expect(extractCookieToken(undefined)).toBeNull();
+      expect(extractCookieToken('')).toBeNull();
     });
   });
 });
@@ -1618,3 +1657,241 @@ describe('webServer image proxy', () => {
     }
   });
 });
+describe('webServer token cookie redirect', () => {
+  const testToken = 'integration-test-token-value';
+  const closeServer = (server: http.Server): Promise<void> =>
+    new Promise((resolve, reject) => {
+      server.close((error) => {
+        if (error) {
+          reject(error);
+          return;
+        }
+        resolve();
+      });
+    });
+  const requestServer = (
+    server: http.Server,
+    requestPath: string,
+    headers: http.OutgoingHttpHeaders = {},
+  ): Promise<{
+    statusCode: number;
+    body: string;
+    location: string | undefined;
+    setCookie: string[] | undefined;
+    referrerPolicy: string | string[] | undefined;
+    cacheControl: string | undefined;
+  }> => {
+    const address = server.address();
+    if (address === null || typeof address === 'string') {
+      throw new Error('server is not listening on a TCP port');
+    }
+    const port = address.port;
+    return new Promise((resolve, reject) => {
+      const httpRequest = http.request(
+        { host: '127.0.0.1', port, path: requestPath, headers },
+        (response) => {
+          const chunks: Uint8Array[] = [];
+          response.on('data', (chunk: Uint8Array) => chunks.push(chunk));
+          response.on('end', () => {
+            resolve({
+              statusCode: response.statusCode ?? 0,
+              body: Buffer.concat(chunks).toString('utf-8'),
+              location: response.headers['location'],
+              setCookie: response.headers['set-cookie'],
+              referrerPolicy: response.headers['referrer-policy'],
+              cacheControl: response.headers['cache-control'],
+            });
+          });
+        },
+      );
+      httpRequest.on('error', reject);
+      httpRequest.end();
+    });
+  };
+  const startWithUiDist = async (): Promise<{
+    server: http.Server;
+    tmpDir: string;
+  }> => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'console-server-'));
+    const uiDistDir = path.join(tmpDir, 'ui-dist');
+    fs.mkdirSync(uiDistDir, { recursive: true });
+    fs.writeFileSync(
+      path.join(uiDistDir, 'index.html'),
+      '<!DOCTYPE html><title>spa</title><div id="root"></div>',
+    );
+    const server = await startWebServer({
+      accessToken: testToken,
+      uiDistDir,
+      consoleDataOutputDir: null,
+      inTmuxDataDir: null,
+      dashboardDir: null,
+      dashboardDataDir: null,
+      dashboardProjectNames: [],
+      port: 0,
+    });
+    return { server, tmpDir };
+  };
+  const firstSetCookie = (setCookie: string[] | undefined): string => {
+    expect(setCookie).toBeDefined();
+    expect(setCookie).toHaveLength(1);
+    return (setCookie ?? [''])[0];
+  };
+  it('redirects a per-project app route carrying ?k= to the keyless path and sets an HttpOnly SameSite=Strict cookie', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const response = await requestServer(
+        server,
+        `/projects/umino?k=${testToken}`,
+      );
+      expect(response.statusCode).toBe(302);
+      expect(response.location).toBe('/projects/umino');
+      expect(response.body).not.toContain(testToken);
+      const cookie = firstSetCookie(response.setCookie);
+      expect(cookie).toContain(`${CONSOLE_TOKEN_COOKIE}=${testToken}`);
+      expect(cookie).toContain('HttpOnly');
+      expect(cookie).toContain('SameSite=Strict');
+      expect(cookie).toContain('Path=/');
+      expect(response.referrerPolicy).toBe('no-referrer');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('redirects a per-project tab route carrying ?k= and preserves other query parameters', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const response = await requestServer(
+        server,
+        `/projects/xmile/prs?k=${testToken}&foo=bar`,
+      );
+      expect(response.statusCode).toBe(302);
+      expect(response.location).toBe('/projects/xmile/prs?foo=bar');
+      const cookie = firstSetCookie(response.setCookie);
+      expect(cookie).toContain(`${CONSOLE_TOKEN_COOKIE}=${testToken}`);
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('redirects the root and index.html routes carrying ?k= to a keyless path', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const root = await requestServer(server, `/?k=${testToken}`);
+      expect(root.statusCode).toBe(302);
+      expect(root.location).toBe('/');
+      expect(firstSetCookie(root.setCookie)).toContain(
+        `${CONSOLE_TOKEN_COOKIE}=${testToken}`,
+      );
+      const indexHtml = await requestServer(
+        server,
+        `/index.html?k=${testToken}`,
+      );
+      expect(indexHtml.statusCode).toBe(302);
+      expect(indexHtml.location).toBe('/index.html');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('serves the app route without a token and never leaks a token in the URL', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const response = await requestServer(server, '/projects/umino');
+      expect(response.statusCode).toBe(200);
+      expect(response.body).toContain('spa');
+      expect(response.setCookie).toBeUndefined();
+      expect(response.referrerPolicy).toBe('no-referrer');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('sets Referrer-Policy: no-referrer on the console HTML responses', async () => {
+    const { server, tmpDir } = await startWithUiDist();
+    try {
+      const root = await requestServer(server, '/');
+      expect(root.statusCode).toBe(200);
+      expect(root.referrerPolicy).toBe('no-referrer');
+      const projectTab = await requestServer(server, '/projects/xmile/prs');
+      expect(projectTab.statusCode).toBe(200);
+      expect(projectTab.referrerPolicy).toBe('no-referrer');
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('authenticates a data list request through the cookie without a token in the URL', async () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'console-server-'));
+    const dataDir = path.join(tmpDir, 'data');
+    const listDir = path.join(dataDir, 'umino', 'prs');
+    fs.mkdirSync(listDir, { recursive: true });
+    fs.writeFileSync(
+      path.join(listDir, 'list.json'),
+      JSON.stringify({ pjcode: 'umino', items: [] }),
+    );
+    const server = await startWebServer({
+      accessToken: testToken,
+      uiDistDir: path.join(tmpDir, 'ui-dist'),
+      consoleDataOutputDir: dataDir,
+      inTmuxDataDir: null,
+      dashboardDir: null,
+      dashboardDataDir: null,
+      dashboardProjectNames: [],
+      port: 0,
+    });
+    try {
+      const withCookie = await requestServer(
+        server,
+        '/projects/umino/prs/list.json',
+        { Cookie: `${CONSOLE_TOKEN_COOKIE}=${testToken}` },
+      );
+      expect(withCookie.statusCode).toBe(200);
+      expect(JSON.parse(withCookie.body)).toEqual({
+        pjcode: 'umino',
+        items: [],
+      });
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+  it('rejects a data or api request when no token and no cookie are present', async () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'console-server-'));
+    const server = await startWebServer({
+      accessToken: testToken,
+      uiDistDir: path.join(tmpDir, 'ui-dist'),
+      consoleDataOutputDir: null,
+      inTmuxDataDir: null,
+      dashboardDir: null,
+      dashboardDataDir: null,
+      dashboardProjectNames: [],
+      port: 0,
+    });
+    try {
+      const noToken = await requestServer(server, '/data/situation.json');
+      expect(noToken.statusCode).toBe(401);
+      const wrongCookie = await requestServer(server, '/api/review', {
+        Cookie: `${CONSOLE_TOKEN_COOKIE}=wrong-token`,
+      });
+      expect(wrongCookie.statusCode).toBe(401);
+    } finally {
+      await closeServer(server);
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+});

package/src/adapter/entry-points/console/webServer.ts CHANGED Viewed

@@ -41,6 +41,8 @@ export const DEFAULT_DASHBOARD_PROJECT_NAMES = DASHBOARD_PROJECT_NAMES;
 export const CONSOLE_TOKEN_HEADER = 'x-pv-token';
+export const CONSOLE_TOKEN_COOKIE = 'pv_token';
 const PLACEHOLDER_INDEX_HTML = `<!DOCTYPE html>
 <html lang="en">
   <head>
@@ -112,9 +114,34 @@ export const isTokenValid = (
   providedToken: string | null,
 ): boolean => providedToken !== null && providedToken === expectedToken;
+export const extractCookieToken = (
+  cookieHeader: string | undefined,
+): string | null => {
+  if (typeof cookieHeader !== 'string' || cookieHeader.length === 0) {
+    return null;
+  }
+  for (const segment of cookieHeader.split(';')) {
+    const separatorIndex = segment.indexOf('=');
+    if (separatorIndex === -1) {
+      continue;
+    }
+    const name = segment.slice(0, separatorIndex).trim();
+    if (name !== CONSOLE_TOKEN_COOKIE) {
+      continue;
+    }
+    const value = segment.slice(separatorIndex + 1).trim();
+    if (value.length === 0) {
+      return null;
+    }
+    return decodeURIComponent(value);
+  }
+  return null;
+};
 export const extractProvidedToken = (
   queryToken: string | string[] | null,
   headerToken: string | string[] | undefined,
+  cookieToken: string | null,
 ): string | null => {
   if (typeof queryToken === 'string' && queryToken.length > 0) {
     return queryToken;
@@ -122,9 +149,24 @@ export const extractProvidedToken = (
   if (typeof headerToken === 'string' && headerToken.length > 0) {
     return headerToken;
   }
+  if (cookieToken !== null && cookieToken.length > 0) {
+    return cookieToken;
+  }
   return null;
 };
+export const buildTokenCookie = (token: string): string =>
+  `${CONSOLE_TOKEN_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Strict`;
+export const buildKeylessLocation = (requestUrl: URL): string => {
+  const params = new URLSearchParams(requestUrl.searchParams);
+  params.delete('k');
+  const query = params.toString();
+  return query.length > 0
+    ? `${requestUrl.pathname}?${query}`
+    : requestUrl.pathname;
+};
 const contentTypeForPath = (filePath: string): string => {
   const extension = path.extname(filePath).toLowerCase();
   return MIME_TYPES[extension] ?? 'application/octet-stream';
@@ -245,6 +287,7 @@ const serveBootstrapIndex = (response: http.ServerResponse): void => {
   response.writeHead(200, {
     'Content-Type': 'text/html; charset=utf-8',
     'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
   });
   response.end(PLACEHOLDER_INDEX_HTML);
 };
@@ -263,10 +306,25 @@ const serveIndexHtml = (
   response.writeHead(200, {
     'Content-Type': 'text/html; charset=utf-8',
     'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
   });
   response.end(indexContent);
 };
+const redirectStrippingToken = (
+  response: http.ServerResponse,
+  requestUrl: URL,
+  token: string,
+): void => {
+  response.writeHead(302, {
+    Location: buildKeylessLocation(requestUrl),
+    'Set-Cookie': buildTokenCookie(token),
+    'Referrer-Policy': 'no-referrer',
+    'Cache-Control': 'no-store',
+  });
+  response.end();
+};
 const sendJson = (
   response: http.ServerResponse,
   statusCode: number,
@@ -626,6 +684,7 @@ export const handleWebRequest = async (
     const providedToken = extractProvidedToken(
       requestUrl.searchParams.get('k'),
       request.headers[CONSOLE_TOKEN_HEADER],
+      extractCookieToken(request.headers.cookie),
     );
     if (!isTokenValid(options.accessToken, providedToken)) {
       sendUnauthorized(response);
@@ -646,6 +705,11 @@ export const handleWebRequest = async (
     requestPath === '/index.html' ||
     isConsoleAppRoute(requestPath)
   ) {
+    const queryToken = requestUrl.searchParams.get('k');
+    if (queryToken !== null && queryToken.length > 0) {
+      redirectStrippingToken(response, requestUrl, queryToken);
+      return;
+    }
     serveIndexHtml(options, response);
     return;
   }

package/types/adapter/entry-points/console/webServer.d.ts CHANGED Viewed

@@ -6,11 +6,15 @@ import { ImageFetcher } from './consoleImageProxy';
 export declare const DEFAULT_WEB_PORT = 9981;
 export declare const DEFAULT_DASHBOARD_PROJECT_NAMES: string[];
 export declare const CONSOLE_TOKEN_HEADER = "x-pv-token";
+export declare const CONSOLE_TOKEN_COOKIE = "pv_token";
 export declare const hasDotSegment: (requestPath: string) => boolean;
 export declare const requiresToken: (requestPath: string) => boolean;
 export declare const isConsoleAppRoute: (requestPath: string) => boolean;
 export declare const isTokenValid: (expectedToken: string, providedToken: string | null) => boolean;
-export declare const extractProvidedToken: (queryToken: string | string[] | null, headerToken: string | string[] | undefined) => string | null;
+export declare const extractCookieToken: (cookieHeader: string | undefined) => string | null;
+export declare const extractProvidedToken: (queryToken: string | string[] | null, headerToken: string | string[] | undefined, cookieToken: string | null) => string | null;
+export declare const buildTokenCookie: (token: string) => string;
+export declare const buildKeylessLocation: (requestUrl: URL) => string;
 export type WebServerOptions = {
     accessToken: string;
     uiDistDir: string;

package/types/adapter/entry-points/console/webServer.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webServer.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/console/webServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAM9F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAQvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,sBAAsB,EACtB,sBAAsB,EAMvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAOtE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,eAAO,MAAM,+BAA+B,UAA0B,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAe,CAAC;~~AAmCjD~~,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGrB,CAAC;AAIhC,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,OAmBvD,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,eAAe,MAAM,EACrB,eAAe,MAAM,GAAG,IAAI,KAC3B,OAAoE,CAAC;AAExE,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EACpC,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,~~KACzC~~,MAAM,GAAG,~~IAQX~~,CAAC;AAuCF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD,CAAC;AAMF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAInD,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,EACpB,aAAa,MAAM,KAClB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,eAAe,MAAM,EACrB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;~~AA0VF~~,eAAO,MAAM,uBAAuB,GAClC,SAAS,gBAAgB,EACzB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,SAAS,gBAAgB,EACzB,SAAS,IAAI,CAAC,eAAe,EAC7B,UAAU,IAAI,CAAC,cAAc,KAC5B,OAAO,CAAC,IAAI,~~CAwEd~~,CAAC;AAcF,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,IAAI,CAAC,MAM7D,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAQlB,CAAC"}
1	+ {"version":3,"file":"webServer.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/console/webServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAM9F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAQvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,sBAAsB,EACtB,sBAAsB,EAMvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAOtE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,eAAO,MAAM,+BAA+B,UAA0B,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAmC/C,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGrB,CAAC;AAIhC,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,OAmBvD,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,eAAe,MAAM,EACrB,eAAe,MAAM,GAAG,IAAI,KAC3B,OAAoE,CAAC;AAExE,eAAO,MAAM,kBAAkB,GAC7B,cAAc,MAAM,GAAG,SAAS,KAC/B,MAAM,GAAG,IAoBX,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EACpC,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,MAAM,GAAG,IAAI,KACzB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,MAC0C,CAAC;AAE5F,eAAO,MAAM,oBAAoB,GAAI,YAAY,GAAG,KAAG,MAOtD,CAAC;AAuCF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD,CAAC;AAMF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAInD,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,EACpB,aAAa,MAAM,KAClB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,eAAe,MAAM,EACrB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AA0WF,eAAO,MAAM,uBAAuB,GAClC,SAAS,gBAAgB,EACzB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,SAAS,gBAAgB,EACzB,SAAS,IAAI,CAAC,eAAe,EAC7B,UAAU,IAAI,CAAC,cAAc,KAC5B,OAAO,CAAC,IAAI,CA8Ed,CAAC;AAcF,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,IAAI,CAAC,MAM7D,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAQlB,CAAC"}