stitchkit 0.94.0 → 0.94.1

package/dist/entrypoints/server.js

@@ -4,16 +4,22 @@ import {
   bindProcessSignals,
   bindRealtimeServer,
   composeWebSocketHandlers,
+  contextContributionDelta,
   createHandler,
+  createImplementRegistry,
+  createScopedImplementRegistry,
   createSocketIOServer,
   createUnixClientTransport,
+  implementRegistry,
+  mergeContextContribution,
   ndjsonRoute,
   parseMultipart,
+  prepareContextContribution,
   socketIoLane,
   sseRoute,
   streamingRoute,
   webSocketLane
-} from "../index-p81267c2.js";
+} from "../index-p3vsv1fb.js";
 import"../index-y91ry9h2.js";
 import {
   withDeadline
@@ -25,28 +31,20 @@ import {
   ShutdownStatusSchema,
   createServerLifecycle
 } from "../index-3z73fh2c.js";
-import"../index-x4799c19.js";
-import"../index-2qzskm8h.js";
+import"../index-ndddxtyx.js";
+import"../index-dce5wxcq.js";
 import {
   inputIsQuery
 } from "../index-48ffdxgk.js";
-import"../index-r7nmqpsg.js";
+import"../index-7p1f0vp2.js";
 import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES
 } from "../index-wqgjfstn.js";
 import {
-  composeAuthHooks,
-  createAuthHook,
-  createBearerResolver,
-  defineCookie,
-  extractToken,
-  parseCookieHeader,
-  parseCookies,
-  serializeCookie,
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-e2z3ahw9.js";
+} from "../index-e01r054k.js";
 import {
   deriveCodeChallenge
 } from "../index-hr4tzbwq.js";
@@ -56,20 +54,18 @@ import {
   corsHeaders,
   corsPreflightResponse,
   createImplement,
-  createImplementRegistry,
   createMultipartStream,
   createScopedImplement,
-  createScopedImplementRegistry,
   defineMultipartStream,
-  implement,
-  implementRegistry
-} from "../index-xnj9bgxe.js";
-import"../index-kvj7f4hq.js";
+  implement
+} from "../index-2gxzjvyr.js";
+import"../index-2bxbyab0.js";
 import"../index-rxfy4cq7.js";
+import"../index-k30h66yd.js";
 import {
   joinRoutePath,
   parseTrailingWildcard
-} from "../index-gyr48nzg.js";
+} from "../index-4gcnakhx.js";
 import"../index-6k1937bx.js";
 import {
   isWithinDir,
@@ -111,7 +107,9 @@ import {
   rateLimited,
   unauthorized
 } from "../index-2vtcmrj9.js";
-import"../index-kzfs85xp.js";
+import {
+  isUnsafeKey
+} from "../index-kzfs85xp.js";
 import {
   isRecord
 } from "../index-hffjpmq9.js";
@@ -336,6 +334,47 @@ var authorizedRoom = Symbol("stitchkit.authorized-room");
 function freezeRoom(name) {
   return Object.freeze({ name, [authorizedRoom]: true });
 }
+async function leaveQuietly(member, room) {
+  try {
+    await member.connection.raw.leave(room);
+  } catch {}
+}
+async function replayMember(member, options, token, isClosed) {
+  if (!options.replay || member.disconnected || isClosed())
+    return !member.disconnected && !isClosed();
+  const attempts = Math.max(1, options.replayAttempts ?? 3);
+  for (let attempt = 0;attempt < attempts && !member.disconnected && !isClosed(); attempt += 1) {
+    member.buffer = [];
+    member.overflow = false;
+    const before = await options.revision?.();
+    if (member.disconnected || isClosed())
+      break;
+    const frames = await options.replay({
+      identity: member.identity,
+      rooms: Object.freeze([...member.joined].map(token)),
+      revision: before
+    });
+    const after = await options.revision?.();
+    if (member.disconnected || isClosed())
+      break;
+    if (options.revision && !Object.is(before, after))
+      continue;
+    if (member.overflow)
+      continue;
+    for (const frame of frames)
+      member.connection.events.emit(frame.event, ...frame.args);
+    const buffered = member.buffer;
+    member.buffer = null;
+    for (const deferred of buffered ?? [])
+      deferred();
+    return !member.disconnected && !isClosed();
+  }
+  member.buffer = null;
+  member.overflow = false;
+  if (!member.disconnected)
+    await options.onResyncRequired?.(member.connection.raw.id, member.identity);
+  return false;
+}
 function bindSocketRegistry(server, options) {
   const members = new Map;
   const minted = new WeakSet;
@@ -353,11 +392,6 @@ function bindSocketRegistry(server, options) {
       throw new Error("Room was not authorized by this registry");
     return room.name;
   };
-  const leaveQuietly = async (member, room) => {
-    try {
-      await member.connection.raw.leave(room);
-    } catch {}
-  };
   const remove = async (member) => {
     if (member.disconnected)
       return;
@@ -370,46 +404,10 @@ function bindSocketRegistry(server, options) {
     member.buffer = null;
     revision += 1;
   };
-  const replayMember = async (member) => {
-    if (!options.replay || member.disconnected || closed)
-      return !member.disconnected && !closed;
-    const attempts = Math.max(1, options.replayAttempts ?? 3);
-    for (let attempt = 0;attempt < attempts && !member.disconnected && !closed; attempt += 1) {
-      member.buffer = [];
-      member.overflow = false;
-      const before = await options.revision?.();
-      if (member.disconnected || closed)
-        break;
-      const frames = await options.replay({
-        identity: member.identity,
-        rooms: Object.freeze([...member.joined].map(token)),
-        revision: before
-      });
-      const after = await options.revision?.();
-      if (member.disconnected || closed)
-        break;
-      if (options.revision && !Object.is(before, after))
-        continue;
-      if (member.overflow)
-        continue;
-      for (const frame of frames)
-        member.connection.events.emit(frame.event, ...frame.args);
-      const buffered = member.buffer;
-      member.buffer = null;
-      for (const deferred of buffered ?? [])
-        deferred();
-      return !member.disconnected && !closed;
-    }
-    member.buffer = null;
-    member.overflow = false;
-    if (!member.disconnected)
-      await options.onResyncRequired?.(member.connection.raw.id, member.identity);
-    return false;
-  };
   const resyncMember = (member) => {
     if (member.replayPromise)
       return member.replayPromise;
-    const active = replayMember(member).finally(() => {
+    const active = replayMember(member, options, token, () => closed).finally(() => {
       if (member.replayPromise === active)
         member.replayPromise = undefined;
     });
@@ -577,6 +575,22 @@ function reclaimStaleUnixSocket(path) {
   }
   unlinkSync(path);
 }
+function assertUnixListenConfig(config, unixPath) {
+  if (unixPath.length === 0) {
+    throw new Error("[stitchkit] createServer: `unix` must be a non-empty socket path");
+  }
+  if (config.port !== undefined || config.hostname !== undefined) {
+    throw new Error("[stitchkit] createServer: `unix` is mutually exclusive with `port`/`hostname`");
+  }
+  if (config.socket) {
+    throw new Error("[stitchkit] createServer: the Socket.IO lifecycle cannot listen on a unix socket — socket.io clients dial TCP only");
+  }
+}
+async function waitForRequestDrain(server) {
+  while (server.pendingRequests > 0) {
+    await new Promise((resolve) => setTimeout(resolve, 5));
+  }
+}
 function createServer(config) {
   const {
     websocket: configuredWebSocket,
@@ -588,17 +602,8 @@ function createServer(config) {
   } = config;
   const unixPath = typeof config.unix === "string" ? config.unix : config.unix?.path;
   const unixMode = typeof config.unix === "string" ? undefined : config.unix?.mode;
-  if (unixPath !== undefined) {
-    if (unixPath.length === 0) {
-      throw new Error("[stitchkit] createServer: `unix` must be a non-empty socket path");
-    }
-    if (config.port !== undefined || config.hostname !== undefined) {
-      throw new Error("[stitchkit] createServer: `unix` is mutually exclusive with `port`/`hostname`");
-    }
-    if (socket) {
-      throw new Error("[stitchkit] createServer: the Socket.IO lifecycle cannot listen on a unix socket — socket.io clients dial TCP only");
-    }
-  }
+  if (unixPath !== undefined)
+    assertUnixListenConfig(config, unixPath);
   const socketRoutePrefix = socket?.route.path.replace(/\*socketPath$/, "");
   const websocket = configuredWebSocket ?? socket?.websocket;
   const openSockets = new Set;
@@ -616,11 +621,6 @@ function createServer(config) {
       return Promise.resolve();
     return new Promise((resolve) => socketDrainWaiters.add(resolve));
   };
-  const waitForRequestDrain = async (server2) => {
-    while (server2.pendingRequests > 0) {
-      await new Promise((resolve) => setTimeout(resolve, 5));
-    }
-  };
   const trackedWebSocket = websocket ? {
     ...websocket,
     open(ws) {
@@ -1258,6 +1258,220 @@ function composeLifecycleHooks(...hooks) {
     }
   };
 }
+// src/server/middleware/cookies.ts
+function parseCookieHeader(header) {
+  if (!header)
+    return [];
+  const pairs = [];
+  for (const pair of header.split(";")) {
+    const eq = pair.indexOf("=");
+    if (eq === -1)
+      continue;
+    const key = pair.slice(0, eq).trim();
+    if (!key)
+      continue;
+    const raw = pair.slice(eq + 1).trim();
+    let value = raw;
+    try {
+      value = decodeURIComponent(raw);
+    } catch {}
+    pairs.push([key, value]);
+  }
+  return pairs;
+}
+function parseCookies(header) {
+  const cookies = {};
+  for (const [key, value] of parseCookieHeader(header)) {
+    if (isUnsafeKey(key))
+      continue;
+    cookies[key] = value;
+  }
+  return cookies;
+}
+function serializeCookie(name, value, opts = {}) {
+  let cookie = `${name}=${encodeURIComponent(value)}`;
+  if (opts.maxAge !== undefined)
+    cookie += `; Max-Age=${opts.maxAge}`;
+  if (opts.path)
+    cookie += `; Path=${opts.path}`;
+  if (opts.domain)
+    cookie += `; Domain=${opts.domain}`;
+  if (opts.secure)
+    cookie += "; Secure";
+  if (opts.httpOnly)
+    cookie += "; HttpOnly";
+  if (opts.sameSite)
+    cookie += `; SameSite=${opts.sameSite}`;
+  return cookie;
+}
+function defineCookie(config) {
+  const { name, duplicates = "last", ...options } = config;
+  const getAll = (req) => parseCookieHeader(req.headers.get("cookie")).flatMap(([key, value]) => key === name ? [value] : []);
+  return {
+    get(req) {
+      const values = getAll(req);
+      if (values.length === 0)
+        return;
+      if (duplicates === "first")
+        return values[0];
+      if (duplicates === "reject") {
+        return new Set(values).size === 1 ? values[0] : undefined;
+      }
+      return values[values.length - 1];
+    },
+    getAll,
+    set(value) {
+      return serializeCookie(name, value, options);
+    },
+    clear() {
+      return serializeCookie(name, "", { ...options, maxAge: 0 });
+    }
+  };
+}
+
+// src/server/middleware/auth.ts
+function extractToken(req, cookieName) {
+  const authHeader = req.headers.get("authorization");
+  if (authHeader?.startsWith("Bearer "))
+    return authHeader.slice(7);
+  if (cookieName) {
+    const cookies = parseCookies(req.headers.get("cookie"));
+    return cookies[cookieName] ?? null;
+  }
+  return null;
+}
+function isThenable(value) {
+  try {
+    return "then" in value && typeof value.then === "function";
+  } catch {
+    return false;
+  }
+}
+var scopedAuthHookBrand = Symbol("stitchkit.scoped-auth-hook");
+var authOwnershipPlans = new WeakMap;
+function createShadowContext(ctx) {
+  const shadow = {
+    params: ctx.params,
+    input: ctx.input,
+    source: ctx.source
+  };
+  Object.defineProperties(shadow, Object.getOwnPropertyDescriptors(ctx));
+  return shadow;
+}
+function createAuthHook(config) {
+  const onAnonymous = config.onAnonymous ?? (() => unauthorized());
+  const onForbidden = config.onForbidden ?? (() => forbidden());
+  async function auth(ctx, endpoint) {
+    const identity = ctx.source === "http" ? await config.resolve(ctx) : await config.resolveFromContext?.(ctx) ?? null;
+    config.inject?.(ctx, identity);
+    const scope = endpoint.scope ?? config.defaultScope;
+    if (!scope)
+      return;
+    const entry = Object.hasOwn(config.rules, scope) ? config.rules[scope] : undefined;
+    if (!entry) {
+      throw new Error(`[stitchkit] auth: no rule for scope "${scope}"`);
+    }
+    const rule = typeof entry === "object" ? entry.rule : entry;
+    if (typeof entry === "object" && entry.inject && identity !== null) {
+      const fields = entry.inject(identity, ctx);
+      if (typeof fields === "object" && fields !== null && isThenable(fields)) {
+        throw new Error(`[stitchkit] auth: the inject of scope "${scope}" must be synchronous — an async inject merges a Promise, not fields`);
+      }
+      mergeContextContribution(ctx, fields, scope);
+    }
+    if (rule === "public")
+      return;
+    if (!identity) {
+      onAnonymous();
+      return;
+    }
+    if (rule === "authenticated")
+      return;
+    const result = await rule(identity, ctx);
+    if (result === false) {
+      onForbidden();
+      return;
+    }
+    if (result === true)
+      return;
+    mergeContextContribution(ctx, result, scope);
+  }
+  auth[scopedAuthHookBrand] = () => {
+    return;
+  };
+  authOwnershipPlans.set(auth, {
+    defaultScope: config.defaultScope,
+    hook: auth,
+    scopes: new Set(Object.keys(config.rules))
+  });
+  return auth;
+}
+function composeAuthHooks(config) {
+  const plans = [];
+  for (const hook of config.hooks) {
+    const plan = authOwnershipPlans.get(hook);
+    if (!plan) {
+      throw new TypeError("[stitchkit] auth: composeAuthHooks accepts only hooks created by createAuthHook or composeAuthHooks");
+    }
+    if (plan.defaultScope !== undefined && plan.defaultScope !== config.defaultScope) {
+      throw new TypeError(`[stitchkit] auth: child default scope ${JSON.stringify(plan.defaultScope)} must match the composite default scope`);
+    }
+    plans.push(plan);
+  }
+  const defaultScope = config.defaultScope;
+  if (defaultScope !== undefined && !plans.some((plan) => plan.scopes.has(defaultScope))) {
+    throw new TypeError(`[stitchkit] auth: composite default scope ${JSON.stringify(defaultScope)} has no owner`);
+  }
+  const ownedScopes = new Set;
+  for (const plan of plans) {
+    for (const scope of plan.scopes)
+      ownedScopes.add(scope);
+  }
+  async function composed(ctx, endpoint) {
+    const scope = endpoint.scope ?? config.defaultScope;
+    if (!scope)
+      return;
+    const owners = plans.filter((plan) => plan.scopes.has(scope));
+    if (owners.length === 0) {
+      throw new Error(`[stitchkit] auth: no rule for scope "${scope}"`);
+    }
+    const scopedEndpoint = { ...endpoint, scope };
+    const contribution = Object.create(null);
+    const contributionOwners = new Set;
+    for (const owner of owners) {
+      ctx.signal?.throwIfAborted();
+      const shadow = createShadowContext(ctx);
+      await owner.hook(shadow, scopedEndpoint);
+      const ownerContribution = prepareContextContribution(contextContributionDelta(ctx, shadow, scope), scope);
+      for (const key of Object.keys(ownerContribution)) {
+        if (contributionOwners.has(key)) {
+          throw new TypeError(`[stitchkit] auth: multiple owners contributed context key ${JSON.stringify(key)} for scope ${JSON.stringify(scope)}`);
+        }
+        contributionOwners.add(key);
+      }
+      Object.assign(contribution, ownerContribution);
+    }
+    ctx.signal?.throwIfAborted();
+    mergeContextContribution(ctx, contribution, scope);
+  }
+  composed[scopedAuthHookBrand] = () => {
+    return;
+  };
+  authOwnershipPlans.set(composed, {
+    defaultScope: config.defaultScope,
+    hook: composed,
+    scopes: ownedScopes
+  });
+  return composed;
+}
+function createBearerResolver(config) {
+  return async (req) => {
+    const token = extractToken(req);
+    if (!token)
+      return null;
+    return config.lookup(token, req);
+  };
+}
 // src/server/middleware/trust-fence.ts
 var DEFAULT_PORTS = new Set(["80", "443"]);
 function readAuthority(value) {

package/dist/entrypoints/testing.d.ts

@@ -4,6 +4,7 @@
  */
 export * from '../testing/handler-clients.js';
 export { type ManagedResourceConformanceConfig, type ManagedResourceConformanceControls, ManagedResourceConformanceError, type ManagedResourceConformanceFactoryInput, type ManagedResourceConformanceFixture, type ManagedResourceConformancePhase, ManagedResourceConformancePhaseSchema, type ManagedResourceConformanceScenario, type ManagedResourceConformanceScenarioId, ManagedResourceConformanceScenarioIdSchema, ManagedResourceConformanceScenarioSchema, type ManagedResourceConformanceTraceEntry, ManagedResourceConformanceTraceEntrySchema, type ManagedResourceConformanceTraceOutcome, ManagedResourceConformanceTraceOutcomeSchema, runManagedResourceConformance, } from '../testing/managed-resource-conformance.js';
-export { assertSurfaceDiscovery, type ConformanceTransport, type CreateRealtimeProbeDriverConfig, createRealtimeProbeDriver, type DefineRealtimeProbeConfig, defineRealtimeProbe, type RealtimeDisconnectObservation, RealtimeDisconnectObservationSchema, type RealtimeProbeAdapter, type RealtimeProbeFixture, type RealtimeProbeScenario, type RealtimeRejectionObservation, RealtimeRejectionObservationSchema, type RunSurfaceProbesConfig, runSurfaceProbes, type SurfaceDiscoveryObservation, type SurfaceProbe, type SurfaceProbeDriver, type SurfaceRealtimeDiscoveryObservation, type SurfaceToolDiscoveryObservation, type TransportObservation, TransportObservationSchema, } from '../testing/surface-conformance.js';
+export { type CreateRealtimeProbeDriverConfig, createRealtimeProbeDriver, type DefineRealtimeProbeConfig, defineRealtimeProbe, type RealtimeProbeAdapter, type RealtimeProbeFixture, type RealtimeProbeScenario, } from '../testing/realtime-probe.js';
+export { assertSurfaceDiscovery, type ConformanceTransport, type RealtimeDisconnectObservation, RealtimeDisconnectObservationSchema, type RealtimeRejectionObservation, RealtimeRejectionObservationSchema, type RunSurfaceProbesConfig, runSurfaceProbes, type SurfaceDiscoveryObservation, type SurfaceProbe, type SurfaceProbeDriver, type SurfaceRealtimeDiscoveryObservation, type SurfaceToolDiscoveryObservation, type TransportObservation, TransportObservationSchema, } from '../testing/surface-conformance.js';
 export { assertSurfaceManifestSnapshot, buildSurfaceManifest, type IncompatibleSchemaPolicy, type McpSchemaValidationConfig, SURFACE_MANIFEST_VERSION, type SurfaceAgentProjection, type SurfaceManifest, type SurfaceManifestConfig, type SurfaceManifestExtension, SurfaceManifestExtensionSchema, type SurfaceManifestOperation, type SurfaceManifestOperationMcp, SurfaceManifestOperationMcpSchema, SurfaceManifestOperationSchema, type SurfaceManifestOperationToolView, SurfaceManifestOperationToolViewSchema, type SurfaceManifestRealtimeEvent, SurfaceManifestRealtimeEventSchema, SurfaceManifestSchema, type SurfaceManifestTool, SurfaceManifestToolSchema, type SurfaceManifestToolSurface, SurfaceManifestToolSurfaceSchema, type SurfaceMcpPreparation, SurfaceRealtimeSchemaPairSchema, type SurfaceRuntimeToolDefinition, SurfaceSchemaDigestsSchema, type SurfaceToolDefinition, type SurfaceToolExtension, serializeSurfaceValue, } from '../testing/surface-manifest.js';
 //# sourceMappingURL=testing.d.ts.map

package/dist/entrypoints/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/entrypoints/testing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,+BAA+B,EAC/B,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,+BAA+B,EACpC,qCAAqC,EACrC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,wCAAwC,EACxC,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,KAAK,sCAAsC,EAC3C,4CAA4C,EAC5C,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,yBAAyB,EACzB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,6BAA6B,EAClC,mCAAmC,EACnC,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,mCAAmC,EACxC,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,0BAA0B,GAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,8BAA8B,EAC9B,KAAK,gCAAgC,EACrC,sCAAsC,EACtC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,KAAK,qBAAqB,EAC1B,+BAA+B,EAC/B,KAAK,4BAA4B,EACjC,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/entrypoints/testing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,+BAA+B,EAC/B,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,+BAA+B,EACpC,qCAAqC,EACrC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,wCAAwC,EACxC,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,KAAK,sCAAsC,EAC3C,4CAA4C,EAC5C,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,KAAK,+BAA+B,EACpC,yBAAyB,EACzB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,EAClC,mCAAmC,EACnC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,mCAAmC,EACxC,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,0BAA0B,GAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,8BAA8B,EAC9B,KAAK,gCAAgC,EACrC,sCAAsC,EACtC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,KAAK,qBAAqB,EAC1B,+BAA+B,EAC/B,KAAK,4BAA4B,EACjC,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC"}