mongodb-dynamic-api 5.1.0 → 5.2.0

package/test/for-feature/standard-route-auth-ability-predicate.e2e-spec.js

@@ -0,0 +1,177 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const mongoose_1 = require("@nestjs/mongoose");
+const mongoose_2 = require("mongoose");
+const src_1 = require("../../src");
+const e2e_setup_1 = require("../e2e.setup");
+require("dotenv/config");
+const shared_1 = require("../shared");
+(0, vitest_1.describe)('DynamicApiModule forFeature - standard route authAbilityPredicate (e2e)', () => {
+    (0, vitest_1.beforeEach)(() => {
+        src_1.DynamicApiModule.state['resetState']();
+    });
+    (0, vitest_1.afterEach)(async () => {
+        await (0, e2e_setup_1.closeTestingApp)(mongoose_2.default.connections);
+    });
+    let StdAuthPredicateUserEntity = class StdAuthPredicateUserEntity extends src_1.BaseEntity {
+    };
+    __decorate([
+        (0, mongoose_1.Prop)({ type: String, required: true }),
+        __metadata("design:type", String)
+    ], StdAuthPredicateUserEntity.prototype, "email", void 0);
+    __decorate([
+        (0, mongoose_1.Prop)({ type: String, required: true }),
+        __metadata("design:type", String)
+    ], StdAuthPredicateUserEntity.prototype, "password", void 0);
+    __decorate([
+        (0, mongoose_1.Prop)({ type: String, default: 'user' }),
+        __metadata("design:type", String)
+    ], StdAuthPredicateUserEntity.prototype, "role", void 0);
+    StdAuthPredicateUserEntity = __decorate([
+        (0, mongoose_1.Schema)({ collection: 'std_auth_predicate_users' })
+    ], StdAuthPredicateUserEntity);
+    let StdAuthPredicateEntryEntity = class StdAuthPredicateEntryEntity extends src_1.BaseEntity {
+    };
+    __decorate([
+        (0, mongoose_1.Prop)({ type: String, required: true }),
+        __metadata("design:type", String)
+    ], StdAuthPredicateEntryEntity.prototype, "title", void 0);
+    StdAuthPredicateEntryEntity = __decorate([
+        (0, mongoose_1.Schema)({ collection: 'std_auth_predicate_entries' })
+    ], StdAuthPredicateEntryEntity);
+    const registerAndLogin = async (email, role) => {
+        await e2e_setup_1.server.post('/auth/register', { email, password: 'password123', role });
+        const { body: { accessToken } } = await e2e_setup_1.server.post('/auth/login', { email, password: 'password123' });
+        const { body: account } = await e2e_setup_1.server.get('/auth/account', { authToken: accessToken });
+        return { accessToken, id: account.id };
+    };
+    const isAdminRole = (_entity, user) => user.role === 'admin';
+    const setupWithRoutes = async (routes) => {
+        await (0, shared_1.initApp)({
+            entity: StdAuthPredicateEntryEntity,
+            controllerOptions: { path: 'std-auth-predicate-entries' },
+            routes,
+        }, {
+            useAuth: {
+                userEntity: StdAuthPredicateUserEntity,
+                login: { loginField: 'email', passwordField: 'password', additionalFields: ['role'] },
+                register: {
+                    additionalFields: [{ name: 'role', required: false }],
+                },
+            },
+        });
+    };
+    (0, vitest_1.describe)('abilityPredicate alone on CreateOne — the fail-open bug this option exists to fix', () => {
+        (0, vitest_1.beforeEach)(() => setupWithRoutes([
+            { type: 'CreateOne', abilityPredicate: isAdminRole },
+            { type: 'GetMany' },
+        ]));
+        (0, vitest_1.it)('demonstrates the fail-open bug: a non-admin creates a document because the collection is empty', async () => {
+            const nonAdmin = await registerAndLogin('member@std-auth-predicate.co', 'user');
+            const { status } = await e2e_setup_1.server.post('/std-auth-predicate-entries', { title: 'should have been denied' }, { authToken: nonAdmin.accessToken });
+            (0, vitest_1.expect)(status).toBe(201);
+        });
+    });
+    (0, vitest_1.describe)('authAbilityPredicate on CreateOne — the fix (route-level)', () => {
+        (0, vitest_1.beforeEach)(() => setupWithRoutes([
+            { type: 'CreateOne', authAbilityPredicate: (user) => user.role === 'admin' },
+            { type: 'GetMany' },
+        ]));
+        (0, vitest_1.it)('denies a non-admin, regardless of the backing collection being empty', async () => {
+            const nonAdmin = await registerAndLogin('member2@std-auth-predicate.co', 'user');
+            const { status } = await e2e_setup_1.server.post('/std-auth-predicate-entries', { title: 'should be denied' }, { authToken: nonAdmin.accessToken });
+            (0, vitest_1.expect)(status).toBe(403);
+        });
+        (0, vitest_1.it)('allows an admin', async () => {
+            const admin = await registerAndLogin('admin@std-auth-predicate.co', 'admin');
+            const { status, body } = await e2e_setup_1.server.post('/std-auth-predicate-entries', { title: 'allowed' }, { authToken: admin.accessToken });
+            (0, vitest_1.expect)(status).toBe(201);
+            (0, vitest_1.expect)(body.title).toBe('allowed');
+        });
+        (0, vitest_1.it)('denies an unauthenticated request', async () => {
+            const { status } = await e2e_setup_1.server.post('/std-auth-predicate-entries', { title: 'no token' });
+            (0, vitest_1.expect)(status).toBe(401);
+        });
+    });
+    (0, vitest_1.describe)('abilityPredicate alone on GetMany — the fail-open bug this option exists to fix', () => {
+        (0, vitest_1.beforeEach)(() => setupWithRoutes([
+            { type: 'GetMany', abilityPredicate: isAdminRole },
+        ]));
+        (0, vitest_1.it)('demonstrates the fail-open bug: a non-admin gets 200 because the collection is empty', async () => {
+            const nonAdmin = await registerAndLogin('member3@std-auth-predicate.co', 'user');
+            const { status } = await e2e_setup_1.server.get('/std-auth-predicate-entries', { authToken: nonAdmin.accessToken });
+            (0, vitest_1.expect)(status).toBe(200);
+        });
+    });
+    (0, vitest_1.describe)('authAbilityPredicate on GetMany — the fix (route-level)', () => {
+        (0, vitest_1.beforeEach)(() => setupWithRoutes([
+            { type: 'GetMany', authAbilityPredicate: (user) => user.role === 'admin' },
+        ]));
+        (0, vitest_1.it)('denies a non-admin, regardless of the backing collection being empty', async () => {
+            const nonAdmin = await registerAndLogin('member4@std-auth-predicate.co', 'user');
+            const { status } = await e2e_setup_1.server.get('/std-auth-predicate-entries', { authToken: nonAdmin.accessToken });
+            (0, vitest_1.expect)(status).toBe(403);
+        });
+        (0, vitest_1.it)('allows an admin', async () => {
+            const admin = await registerAndLogin('admin2@std-auth-predicate.co', 'admin');
+            const { status, body } = await e2e_setup_1.server.get('/std-auth-predicate-entries', { authToken: admin.accessToken });
+            (0, vitest_1.expect)(status).toBe(200);
+            (0, vitest_1.expect)(body).toEqual([]);
+        });
+    });
+    (0, vitest_1.describe)('authAbilityPredicate via controllerOptions.abilityPredicates — the fix (controller-level shorthand)', () => {
+        (0, vitest_1.beforeEach)(async () => {
+            await (0, shared_1.initApp)({
+                entity: StdAuthPredicateEntryEntity,
+                controllerOptions: {
+                    path: 'std-auth-predicate-entries',
+                    abilityPredicates: [
+                        {
+                            targets: ['CreateOne', 'GetMany'],
+                            predicate: () => true,
+                            authAbilityPredicate: (user) => user.role === 'admin',
+                        },
+                    ],
+                },
+                routes: [{ type: 'CreateOne' }, { type: 'GetMany' }],
+            }, {
+                useAuth: {
+                    userEntity: StdAuthPredicateUserEntity,
+                    login: { loginField: 'email', passwordField: 'password', additionalFields: ['role'] },
+                    register: {
+                        additionalFields: [{ name: 'role', required: false }],
+                    },
+                },
+            });
+        });
+        (0, vitest_1.it)('denies a non-admin on CreateOne', async () => {
+            const nonAdmin = await registerAndLogin('member5@std-auth-predicate.co', 'user');
+            const { status } = await e2e_setup_1.server.post('/std-auth-predicate-entries', { title: 'denied' }, { authToken: nonAdmin.accessToken });
+            (0, vitest_1.expect)(status).toBe(403);
+        });
+        (0, vitest_1.it)('denies a non-admin on GetMany', async () => {
+            const nonAdmin = await registerAndLogin('member6@std-auth-predicate.co', 'user');
+            const { status } = await e2e_setup_1.server.get('/std-auth-predicate-entries', { authToken: nonAdmin.accessToken });
+            (0, vitest_1.expect)(status).toBe(403);
+        });
+        (0, vitest_1.it)('allows an admin on both CreateOne and GetMany', async () => {
+            const admin = await registerAndLogin('admin3@std-auth-predicate.co', 'admin');
+            const createResponse = await e2e_setup_1.server.post('/std-auth-predicate-entries', { title: 'allowed' }, { authToken: admin.accessToken });
+            const getManyResponse = await e2e_setup_1.server.get('/std-auth-predicate-entries', { authToken: admin.accessToken });
+            (0, vitest_1.expect)(createResponse.status).toBe(201);
+            (0, vitest_1.expect)(getManyResponse.status).toBe(200);
+            (0, vitest_1.expect)(getManyResponse.body).toHaveLength(1);
+        });
+    });
+});
+//# sourceMappingURL=standard-route-auth-ability-predicate.e2e-spec.js.map

package/test/for-feature/standard-route-auth-ability-predicate.e2e-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-route-auth-ability-predicate.e2e-spec.js","sourceRoot":"","sources":["../../../libs/dynamic-api/test/for-feature/standard-route-auth-ability-predicate.e2e-spec.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,mCAAqE;AACrE,+CAAgD;AAChD,uCAAgC;AAChC,mCAAgF;AAChF,4CAAuD;AACvD,yBAAuB;AACvB,sCAAoC;AAmBpC,IAAA,iBAAQ,EAAC,yEAAyE,EAAE,GAAG,EAAE;IAEvF,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,sBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAA,2BAAe,EAAC,kBAAQ,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAGH,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,gBAAU;KASlD,CAAA;IAPC;QADC,IAAA,eAAI,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DACzB;IAGd;QADC,IAAA,eAAI,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gEACtB;IAGjB;QADC,IAAA,eAAI,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;;4DAC3B;IART,0BAA0B;QAD/B,IAAA,iBAAM,EAAC,EAAE,UAAU,EAAE,0BAA0B,EAAE,CAAC;OAC7C,0BAA0B,CAS/B;IAMD,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,gBAAU;KAGnD,CAAA;IADC;QADC,IAAA,eAAI,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8DACzB;IAFV,2BAA2B;QADhC,IAAA,iBAAM,EAAC,EAAE,UAAU,EAAE,4BAA4B,EAAE,CAAC;OAC/C,2BAA2B,CAGhC;IAED,MAAM,gBAAgB,GAAG,KAAK,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE;QAC7D,MAAM,kBAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;QACvG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAM,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAExF,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,EAAY,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAClB,OAAoC,EACpC,IAAsB,EACtB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;IAE3B,MAAM,eAAe,GAAG,KAAK,EAAE,MAA4D,EAAE,EAAE;QAC7F,MAAM,IAAA,gBAAO,EACX;YACE,MAAM,EAAE,2BAA2B;YACnC,iBAAiB,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE;YACzD,MAAM;SACP,EACD;YACE,OAAO,EAAE;gBACP,UAAU,EAAE,0BAA0B;gBACtC,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,EAAE;gBACrF,QAAQ,EAAE;oBACR,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;iBACtD;aACF;SACF,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,IAAA,iBAAQ,EAAC,mFAAmF,EAAE,GAAG,EAAE;QACjG,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;YAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE;YACpD,EAAE,IAAI,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC,CAAC;QAEJ,IAAA,WAAE,EAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;YAC9G,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;YAEhF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,IAAI,CAClC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,yBAAyB,EAAE,EACpC,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CACpC,CAAC;YAMF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACzE,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;YAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE;YAC9F,EAAE,IAAI,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC,CAAC;QAEJ,IAAA,WAAE,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;YAEjF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,IAAI,CAClC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAC7B,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CACpC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;YAE7E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAM,CAAC,IAAI,CACxC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CACjC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,IAAI,CAClC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,UAAU,EAAE,CACtB,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,iFAAiF,EAAE,GAAG,EAAE;QAC/F,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;YAC/B,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE;SACnD,CAAC,CAAC,CAAC;QAEJ,IAAA,WAAE,EAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;YACpG,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;YAEjF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,GAAG,CACjC,6BAA6B,EAC7B,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CACpC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACvE,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;YAC/B,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE;SAC7F,CAAC,CAAC,CAAC;QAEJ,IAAA,WAAE,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;YAEjF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,GAAG,CACjC,6BAA6B,EAC7B,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CACpC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC;YAE9E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAM,CAAC,GAAG,CACvC,6BAA6B,EAC7B,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CACjC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,qGAAqG,EAAE,GAAG,EAAE;QACnH,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAA,gBAAO,EACX;gBACE,MAAM,EAAE,2BAA2B;gBACnC,iBAAiB,EAAE;oBACjB,IAAI,EAAE,4BAA4B;oBAClC,iBAAiB,EAAE;wBACjB;4BACE,OAAO,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;4BACjC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;4BACrB,oBAAoB,EAAE,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;yBACxE;qBACF;iBACF;gBACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aACrD,EACD;gBACE,OAAO,EAAE;oBACP,UAAU,EAAE,0BAA0B;oBACtC,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,EAAE;oBACrF,QAAQ,EAAE;wBACR,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;qBACtD;iBACF;aACF,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;YAEjF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,IAAI,CAClC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,QAAQ,EAAE,EACnB,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CACpC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;YAEjF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAM,CAAC,GAAG,CACjC,6BAA6B,EAC7B,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CACpC,CAAC;YAEF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC;YAE9E,MAAM,cAAc,GAAG,MAAM,kBAAM,CAAC,IAAI,CACtC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,SAAS,EAAE,EACpB,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CACjC,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,kBAAM,CAAC,GAAG,CACtC,6BAA6B,EAC7B,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CACjC,CAAC;YAEF,IAAA,eAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxC,IAAA,eAAM,EAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,IAAA,eAAM,EAAC,eAAe,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}