` too, so it cannot tell\n // the shell from the form it replaced.\n await expect(page.getByRole(\"complementary\")).toBeVisible();\n });\n },\n\n nav: async ({ page }, use) => {\n await use(shellNav(page));\n },\n});\n\nexport function shellNav(page: Page): ShellNav {\n // Scoped to the SIDEBAR's nav landmark on purpose. BottomNav renders the same\n // destinations (CSS hides it above 901px), so an unscoped getByRole(\"link\")\n // matches twice and every click is strict-mode-ambiguous.\n const primary = page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") });\n\n // Sign out is NOT inside that landmark — AppLayout puts it in the sidebar\n // FOOT, a sibling of

alongside the theme toggle. Scoping it to `primary`\n // finds nothing and fails 45 seconds later as \"waiting for … Sign out\", which\n // reads like the button having been removed. So it is scoped to the\n //

(`complementary`) that contains both. That is still narrow enough to\n // stay unambiguous: BottomNav's own Sign out lives in the More sheet, which is\n // a dialog portalled to and only exists while open.\n const sidebar = page.getByRole(\"complementary\");\n return {\n primary,\n link: (labelKey: string) =>\n primary.getByRole(\"link\", { name: tEn(labelKey as `nav:${string}`), exact: true }),\n signOut: sidebar.getByRole(\"button\", { name: tEn(\"nav:signOut\") }),\n };\n}\n\nexport { expect };\nexport type { Locator, Page };\n// tools/simulation/ui/src/cast.ts — who the personas are, and what they can do.\n//\n// Credentials come from `tools/simulation/.sim-cast.json`, generated by\n// bootstrap.sh and git-ignored. NEVER inline a value from it here: GitGuardian\n// scans PRs and flags a credential-shaped literal even inside a test file, and\n// even in a diff that REMOVES one. k6 reads the same file (k6/config.js) — one\n// fixture, two harnesses.\n//\n// ================== THE CAST FILE'S `role` IS DESCRIPTIVE ==================\n//\n// `.sim-cast.json` says so itself, in its own `notes`: a Worker entry carries no\n// Identity role row at all, so \"role\": \"Worker\" there is a label for humans, not\n// something the app ever sees. What the SPA actually derives (claims.ts) was\n// confirmed by logging every persona in against the live stack and decoding the\n// JWT, rather than by trusting either the file or the seeder's variable names:\n//\n// cast \"Owner\" -> JWT role claim \"Admin\" -> SPA Role \"Admin\" (isAdmin)\n// cast \"Manager\" -> JWT role claim \"Manager\" -> SPA Role \"Manager\" (isAdmin)\n// cast \"Sales\" -> JWT role claim \"Sales\" -> SPA Role \"Sales\"\n// cast \"Worker\" -> NO role claim at all -> SPA Role \"Worker\"\n// cast \"ReadOnly\" -> JWT role claim \"ReadOnly\" -> SPA Role \"ReadOnly\"\n//\n// That \"Owner\" -> \"Admin\" step is the one that bites: a spec asserting on the\n// string \"Owner\" would be asserting on a label the application never uses.\n\nimport { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\n\n/** The role vocabulary the SPA itself derives from the JWT (web/src/auth/claims.ts). */\nexport type SpaRole = \"Admin\" | \"Manager\" | \"Sales\" | \"ReadOnly\" | \"Worker\" | \"Denied\";\n\n/** The descriptive label used in `.sim-cast.json` and by SimulationDataSeeder. */\nexport type CastRole = \"Owner\" | \"Manager\" | \"Sales\" | \"Worker\" | \"ReadOnly\";\n\nexport interface CastMember {\n email: string;\n password: string;\n /** The cast file's own label. Use `spaRole` for anything the app will actually see. */\n role: CastRole;\n /** What claims.ts will derive for this member once signed in. */\n spaRole: SpaRole;\n /** What `currentUserIsAdmin()` will return — Admin or Manager. */\n isAdmin: boolean;\n}\n\ninterface RawCastFile {\n generatedAt: string;\n emailDomain: string;\n owner: { email: string; password: string; role: CastRole };\n cast: Array<{ email: string; password: string; role: CastRole }>;\n}\n\nconst CAST_PATH = fileURLToPath(new URL(\"../../.sim-cast.json\", import.meta.url));\n\n/**\n * cast label -> the Role the SPA will derive. Kept as an explicit table rather\n * than a clever mapping, because the two vocabularies genuinely differ by more\n * than casing and the difference is the whole point of this module.\n */\nconst SPA_ROLE_FOR: Record = {\n Owner: \"Admin\",\n Manager: \"Manager\",\n Sales: \"Sales\",\n Worker: \"Worker\",\n ReadOnly: \"ReadOnly\",\n};\n\nfunction decorate(raw: { email: string; password: string; role: CastRole }): CastMember {\n const spaRole = SPA_ROLE_FOR[raw.role];\n if (!spaRole) {\n throw new Error(\n `.sim-cast.json contains an unknown role \"${raw.role}\" for ${raw.email}. `\n + `SimulationDataSeeder's cast vocabulary changed — update SPA_ROLE_FOR in cast.ts.`,\n );\n }\n return { ...raw, spaRole, isAdmin: spaRole === \"Admin\" || spaRole === \"Manager\" };\n}\n\nlet cached: CastMember[] | null = null;\n\n/** Every cast member, owner first. Read once per process. */\nexport function loadCast(): CastMember[] {\n if (cached) return cached;\n\n let raw: RawCastFile;\n try {\n raw = JSON.parse(readFileSync(CAST_PATH, \"utf8\")) as RawCastFile;\n } catch (cause) {\n throw new Error(\n `Could not read the simulation cast at ${CAST_PATH}. `\n + `Run \\`bash tools/simulation/bootstrap.sh\\` (then \\`reset.sh\\`) to generate it.`,\n { cause },\n );\n }\n\n cached = [decorate(raw.owner), ...raw.cast.map(decorate)];\n return cached;\n}\n\n/**\n * The FIRST cast member with this label — deterministic, because\n * SimulationDataSeeder numbers them (`sim-worker-1`, `sim-worker-2`, …) and\n * seeds them in order.\n *\n * That ordering is load-bearing for exactly one persona: the seeder's\n * `RestrictOneWorkerAsync` restricts `workerIds[0]` — i.e. `sim-worker-1` — to a\n * single flock. `restrictedWorker()` below exists so no spec has to re-derive\n * that from the seeder's source.\n */\nexport function castMember(role: CastRole): CastMember {\n const found = loadCast().find((m) => m.role === role);\n if (!found) {\n throw new Error(\n `No \"${role}\" in the simulation cast. Check Simulation__${role}s in `\n + `tools/simulation/.env.sim — a count of 0 seeds nobody.`,\n );\n }\n return found;\n}\n\n/** The Owner. `.sim-cast.json` puts them outside the `cast` array; loadCast() puts them first. */\nexport function owner(): CastMember {\n return castMember(\"Owner\");\n}\n\n/**\n * The one worker SimulationDataSeeder deliberately narrowed to a single flock.\n *\n * Note what this restriction actually does, because it is NOT what #277 assumed\n * and the difference is now #388: it gates the production **write** path\n * (`422 FlockScope.NotAssigned`) and nothing else. Every read — the flock list,\n * a flock's detail, another flock's 90 days of daily entries — answers 200 for\n * this worker exactly as it does for an unrestricted one. Assert the write.\n */\nexport function restrictedWorker(): CastMember {\n return castMember(\"Worker\");\n}\n\n/** Every cast member carrying this label, in the seeder's deterministic order. */\nexport function castMembers(role: CastRole): CastMember[] {\n return loadCast().filter((m) => m.role === role);\n}\n\n/**\n * A worker with NO flock restriction — the control case for the #388 write\n * assertion, so \"the refusal happened because of the assignment\" is a\n * comparison rather than an assumption.\n */\nexport function unrestrictedWorker(): CastMember {\n const workers = castMembers(\"Worker\");\n if (workers.length < 2) {\n throw new Error(\n `The flock-restriction spec needs at least 2 workers (one restricted, one not); `\n + `the cast has ${workers.length}. Raise Simulation__Workers in tools/simulation/.env.sim.`,\n );\n }\n return workers[1]!;\n}\n\n/**\n * A persona reserved for the i18n spec, and used by nothing else.\n *\n * WHY IT NEEDS ITS OWN. Changing the language is not a client-side toggle:\n * `LanguageSelector` calls `PUT /me/language`, so the choice is PERSISTED against\n * that user. A spec that switched `sim-readonly-1` to Spanish would leave every\n * later run of the ReadOnly persona spec — which asserts English strings — signed\n * in to a Spanish app. The i18n spec restores English when it finishes, but a\n * failure part-way through would not, and \"one red spec poisons four others on\n * the next run\" is the kind of coupling that makes a suite untrustworthy.\n *\n * The cast seeds four ReadOnly members; this takes the last, so growing the\n * ReadOnly count never silently reassigns it onto one a persona spec is using.\n */\nexport function i18nPersona(): CastMember {\n const readOnly = castMembers(\"ReadOnly\");\n if (readOnly.length < 2) {\n throw new Error(\n `The i18n spec needs a ReadOnly persona of its own (the cast has ${readOnly.length}), so that `\n + `persisting a language change cannot affect the personas other specs sign in as. `\n + `Raise Simulation__ReadOnly in tools/simulation/.env.sim.`,\nweb/src/lib/languageHint.ts:// Device-persistent \"last UI language\" hint (#182). The API (`/me.language`) is\nweb/src/lib/languageHint.ts:// language the user last used ON THIS DEVICE instead of always English.\nweb/src/lib/languageHint.ts:// After sign-in, SessionProvider's bootstrap resolves the language from\nweb/src/lib/languageHint.ts:// `/me` + `/account` and overrides this, and i18next's `languageChanged` handler\nweb/src/lib/languageHint.ts:// user meets their own language on the login screen. Non-sensitive — a language\nweb/src/lib/languageHint.ts:// Validate a raw hint against the installed packs, returning the language to\nweb/src/lib/languageHint.ts:// removed pack or junk value can never leave i18next on an uninstalled language.\nweb/src/lib/languageHint.test.ts:import { pickInitialLanguage, readLanguageHint, writeLanguageHint } from \"./languageHint\";\nweb/src/lib/languageHint.test.ts:describe(\"languageHint\", () => {\nweb/src/lib/languageHint.test.ts: it(\"round-trips a language code through localStorage\", () => {\nweb/src/api/cluckwork.ts:// list DTO: this carries the user's UI-language preference. Role is echoed for\nweb/src/api/cluckwork.ts: language: string | null;\nweb/src/api/cluckwork.ts:export const putMeLanguage = (language: string | null): Promise =>\nweb/src/api/cluckwork.ts: apiPut(\"/me/language\", { language });\nweb/src/api/client.test.ts: errors: { language: [\"Language must be a 2–8 letter code.\"], name: [\"required\"] },\nweb/src/api/client.test.ts: errorCodes: { language: [\"Me.Language.Format\"] },\nweb/src/api/client.test.ts: errors: { language: [\"some english message\"] },\nweb/src/api/client.test.ts: errorCodes: { language: [\"Not.A.Real.Code\"] },\nweb/src/session/LanguageSelector.test.tsx:// one here so this file keeps covering the single-language hidden state. The\nweb/src/session/LanguageSelector.test.tsx:// real, multi-language rendering is covered by LanguageSelector.multilang.test.tsx.\nweb/src/session/LanguageSelector.test.tsx: \nweb/src/session/LanguageSelector.test.tsx: it(\"renders nothing while only one language is installed\", () => {\nweb/src/session/LanguageSelector.test.tsx: expect(screen.queryByLabelText(/language/i)).toBeNull();\nweb/src/session/SessionContext.tsx:// ONLY place the UI language is set after login, and it GATES the shell until:\nweb/src/session/SessionContext.tsx:// /me + /account are read concurrently, the language is resolved, and i18next is\nweb/src/session/SessionContext.tsx: // never wedge the gate — we still reveal the shell on the current language.\nweb/src/session/SessionContext.tsx: await i18n.changeLanguage(resolveLanguage(me?.language, account?.locale));\nweb/src/session/SessionContext.tsx: // keep the current (English) language; still reveal the shell below\nweb/src/session/SessionContext.tsx: console.warn(\"Failed to switch UI language during bootstrap\", err);\nweb/src/session/SessionContext.tsx: if (!result) return null; // gate: shell hidden until reads settle + language set\nweb/src/session/LanguageSelector.tsx:// Names of each installed language, keyed by code, in that language's own\nweb/src/session/LanguageSelector.tsx:// Per-user UI language (#182). Hidden while only one language is installed — a\nweb/src/session/LanguageSelector.tsx:// language is installed, which is the case today (en/es/tl). The change path\nweb/src/session/LanguageSelector.tsx:// persists to the server (PUT /me/language) AND switches i18next live.\nweb/src/session/LanguageSelector.tsx: // useTranslation() re-renders this component on i18next's languageChanged\nweb/src/session/LanguageSelector.tsx: // event, so i18n.language is always current — both at bootstrap (seeded from\nweb/src/session/LanguageSelector.tsx: // the resolved user/farm language) and after a switch. Reading me?.language\nweb/src/session/LanguageSelector.tsx: const current = i18n.language;\nweb/src/session/LanguageSelector.tsx: void run(\"language\", () => putMeLanguage(lang)).catch((err) => {\nweb/src/session/LanguageSelector.tsx: console.warn(\"Failed to persist language preference\", err);\nweb/src/session/LanguageSelector.tsx: {t(\"language\")}\nweb/src/session/SessionContext.test.tsx: resolveMe({ id: \"u1\", email: \"a@b.co\", name: null, role: \"Admin\", language: null });\nweb/src/session/SessionContext.test.tsx: expect(i18n.language).toBe(\"en\");\nweb/src/session/SessionContext.test.tsx: it(\"does not switch language or set state when unmounted before the reads settle (cancellation)\", async () => {\nweb/src/session/SessionContext.test.tsx: resolveMe({ id: \"u1\", email: \"a@b.co\", name: null, role: \"Admin\", language: null });\nweb/src/session/SessionContext.test.tsx: it(\"resolves the user's language before revealing the shell\", async () => {\nweb/src/session/SessionContext.test.tsx: mockGetMe.mockResolvedValue({ id: \"u1\", email: \"a@b.co\", name: null, role: \"Admin\", language: \"en\" });\nweb/src/session/LanguageSelector.multilang.test.tsx:describe(\"LanguageSelector with all installed languages\", () => {\nweb/src/session/LanguageSelector.multilang.test.tsx: it(\"shows every installed language and persists + switches on change\", async () => {\nweb/src/session/LanguageSelector.multilang.test.tsx: \nweb/src/session/LanguageSelector.multilang.test.tsx: // Regression guard: the select must reflect the live i18n language, not the\nweb/src/session/LanguageSelector.multilang.test.tsx: // stale `me` object (MeContext is never updated on a language switch).\nweb/src/session/LanguageSelector.multilang.test.tsx: \nweb/src/App.tsx: /me + /account together, resolves + switches the UI language,\nweb/src/test/renderWithProviders.tsx:const DEFAULT_ME: Me = { id: \"u1\", email: \"test@farm.local\", name: null, role: \"Admin\", language: null };\nweb/src/test/setup.ts: // A test that switches the UI language (e.g. via changeLanguage or the\nweb/src/test/setup.ts: // LanguageSelector) must not leak that language into the next test file's\nweb/src/test/setup.ts: // Reset BEFORE clearing storage: the languageChanged handler writes the\nweb/src/components/ThemeToggle.test.tsx:// translations-status.ts), so under ANY UI language the rendered text falls\nweb/src/components/ErrorBoundary.test.tsx:// translations-status.ts), so under ANY UI language the fallback text is\nweb/src/components/useConfirm.test.tsx:// translations-status.ts), so under ANY UI language its rendered text falls\nweb/src/components/NumberField.test.tsx:// translations-status.ts), so under ANY UI language the rendered text falls\nweb/src/pwa/UpdatePrompt.test.tsx:// UI language the rendered text falls back to this exact English string, same\nweb/src/i18n/en.ts: language: \"Language\",\nweb/src/i18n/en.ts: languageHint: \"The language the interface is shown in, just for you.\",\nweb/src/i18n/en.ts: // client-side arithmetic, never routed through i18n.language.\nweb/src/i18n/en.ts: // farm-locale `formatMoney` — never `i18n.language` (formattingIndependence\nweb/src/i18n/en.ts: // never routed through i18n.language.\nweb/src/i18n/en.ts: // never `i18n.language` (formattingIndependence guard).\nweb/src/i18n/en.ts: // (formatMoney is farm-locale-driven, never keyed off i18n.language —\nweb/src/i18n/en.ts: // mechanism, not user-facing language.\nweb/src/i18n/en.ts: \"Interface language. Everyone can choose the language the interface is shown in from \"\nweb/src/i18n/en.ts: + \"in English, whatever language you picked.\",\nweb/src/i18n/en.ts: glossaryUiLanguageTerm: \"UI language\",\nweb/src/i18n/en.ts: \"The per-user language the interface is shown in — English, Español, or Tagalog — chosen from \"\nweb/src/i18n/en.ts: + \"language you picked.\",\nweb/src/i18n/en.ts: \"Full spec-language definitions live in the repository's specs/product/GLOSSARY.md.\",\nweb/src/i18n/resolve.ts:// users.language (if a pack exists) → farm-locale's language subtag (if a pack\nweb/src/i18n/resolve.ts:// — never an error — so a language the SPA can't render degrades to the farm\nweb/src/i18n/index.ts:import { pickInitialLanguage, readLanguageHint, writeLanguageHint } from \"../lib/languageHint\";\n",{"_548":1448,"_530":1449,"_509":510,"_532":516},1785655493626,{"_587":1446,"_588":1450,"_590":1451,"_592":593,"_514":803,"_594":35,"_45":1452,"_596":1453,"_598":599,"_523":117,"_96":600},"/bin/bash -lc \"sed -n '1,280p' web/src/api/client.ts; sed -n '1,240p' tools/simulation/ui/src/fixtures.ts; sed -n '1,180p' tools/simulation/ui/src/cast.ts; rg \\\"language\\\" web/src -g'*.tsx' -g'*.ts' | head -80\"",[1454,1455,1456,1457],"exec-96c4f3d1-96ea-4ff3-995f-8699452099c7","32985",{"_588":1466,"_194":1391,"_169":1339,"_96":1034},{"_588":1463,"_194":1464,"_169":1465,"_96":1034},{"_588":1460,"_194":1461,"_169":1462,"_96":1034},{"_588":1458,"_169":1459,"_1392":294,"_96":1394},"rg language web/src '-g*.tsx' '-g*.ts'","web","sed -n '1,180p' tools/simulation/ui/src/cast.ts","cast.ts","/workspace/cluckwork/tools/simulation/ui/src/cast.ts","sed -n '1,240p' tools/simulation/ui/src/fixtures.ts","fixtures.ts","/workspace/cluckwork/tools/simulation/ui/src/fixtures.ts","sed -n '1,280p' web/src/api/client.ts",{"_530":1468,"_509":510,"_532":516},{"_571":1440,"_45":1469,"_607":1470,"_537":1471,"_194":610,"_611":-5,"_523":117,"_96":612},"ctc_009c6493ce0bc3d9016a6ef0c3c4588190bee5a3b402c44ede","const r = await tools.exec_command({cmd:\"sed -n '1,280p' web/src/api/client.ts; sed -n '1,240p' tools/simulation/ui/src/fixtures.ts; sed -n '1,180p' tools/simulation/ui/src/cast.ts; rg \\\"language\\\" web/src -g'*.tsx' -g'*.ts' | head -80\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":10000,\"max_output_tokens\":24000}); text(r.output);\n",{"_542":516},{"_530":1473,"_509":510,"_532":516},{"_533":-5,"_554":1474,"_45":1475,"_537":1476,"_558":1477,"_96":560},"gAAAAABqbvDD4kqhgSPo34H5DQhzj48AulVeloj4iyPw9rvN3DvCT38k9KbryLU9K3UAxlafXaX83RAFPGx21NDHD5z8UeY0E01YZirNHkKaTRuo-wHYeRXvnZPX55CsiotsPcQQwpwEOimRa5Lo2kanKKvY4W7nb05fbq7rAOqNQa60G3yHZcEYCuVyumROjIUsnXnmhhNnOg73gsmsF5C5yAaaxw0vsnfHH_xAwB2CPutOgNRbhAZnZ6rIHY9wLFaqgrwg5p3nxfmo5bYAfMW11Chv6P9YjYuAsHF8RtgQ4Q8xfE1UbFi5Wg5YDio7a8e1xsQHYZvQ6z72bt1WP4vmrQdN-y28nrqoCe3T6OfM19v3LXQz4kUfivT0NJbHNHCq5tlXgbR1_xocPo4L2GQWod0MDKEXiTaJpswn9iG29j36v5Kno1w14d9LWaThKsU2J6zGO-fASNtV2gntaS9Brs_mBfNTnaAEdEhHzNNPik6liitoSasrJEMgqJt0T2RAyidqF31bqLjT4COCqy3JkRcBm4iUOAiaO3o47nuwln7UkqgYPW2bA8WKyQRXn6q8Lbda2t2wQZNat1Gb-Qjgesc803-aeJooc50eOYtvKv_BjRn-5Miyw9xDcQCpRKjPIVotuDX7PMrBfBgIkIrA89VnwR6skw09c1Mk4Og4bu_wXNcKO5puREIQejjGvpapSeFE9ul96ZRu9vsNGZ2023epD-j5meYJRzdiXFmjbd9Ko9v6q2FUkKPEpRcI2JH1MJhPUFalXDE0uxAp6YEWjyE-1nf1SJqaiOaH-osXYpgq-os1YFKeTlcqNMU5JMqOAXMzdu0RZg7PlhS5JkxmScGyIP-FA7eTDRVgCjc4VdsMTFNFpxur4v6_wH5ShaEuA3J7WoBGDmRjd15HrkcZBNIfrdJNmNOAfXOrrpsK8zXd3ayl5__z6c1jz4NYenznn9cXpelGFEHSV9JMfv62hUIJyfj8CAgkEvPeusLhr9axnpYgilP69nA5X8ruHH1X89RzbUGCIbYdeh_YEkptB3_zARVSrw==","rs_009c6493ce0bc3d9016a6ef0c2f58881909b9b94b04d295843",{"_542":516},[1478],{"_49":1479,"_96":563},"**Planning cookie behavior analysis**",{"_548":1481,"_530":1482,"_509":510,"_532":516},1785655491743,{"_533":1483,"_45":1475,"_558":1484,"_96":560},[],[1479],{"_530":1486,"_509":510,"_532":516},{"_571":1487,"_45":-5,"_537":1488,"_194":-5,"_574":1489,"_96":576},"call_85f1DiKenXaI4DsHVMmmu3dj",{"_542":516},{"_327":1490,"_578":-5},[1491,1492],{"_49":583,"_96":582},{"_49":1493,"_96":582},"// #310 acceptance — the two session-generation races, driven in a real browser.\n//\n// #310 is CLOSED; this is the end-to-end regression layer for it, not the fix.\n// The fix is `sessionGeneration` in `web/src/api/client.ts`: a module-level\n// counter that `login()` and `logout()` bump, captured before each await and\n// re-checked on settlement, so a superseded completion is discarded\n// (`StaleSessionError`) instead of committing tokens.\n//\n// ================== WHY A BROWSER IS THE RIGHT INSTRUMENT ==================\n//\n// Both races are about what happens to a REAL in-flight fetch when the user does\n// something else mid-flight. A unit test can assert the counter's arithmetic; it\n// cannot tell you whether the user ends up looking at somebody else's farm. The\n// assertions below are therefore all about the resulting SCREEN — which session\n// the browser is actually in — not about a counter or a request.\n//\n// ================== HOW THE RACE IS MADE DETERMINISTIC ==================\n//\n// `page.route` holds the refresh request open for a fixed window, so \"in flight\"\n// is a state the spec controls rather than one it hopes to hit. The alternative,\n// firing both actions and hoping the interleaving lands, is a spec that passes\n// most of the time for the wrong reason — and this is precisely the class of bug\n// where \"passed 9 times out of 10\" means \"did not test it 9 times out of 10\".\n\nimport { expect, test } from \"../src/fixtures\";\nimport { castMember, owner } from \"../src/cast\";\nimport { tEn } from \"../src/i18n\";\n\n/** How long a held refresh stays in flight. Long enough to act inside, short enough to run. */\nconst HOLD_MS = 3_000;\n\ntest.describe(\"#310 session races\", () => {\n test(\"a logout during an in-flight refresh cannot be resurrected by the late response\", async ({\n page,\n signIn,\n nav,\n }) => {\n await signIn(owner());\n\n // Hold every refresh open for HOLD_MS.\n await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n await new Promise((r) => setTimeout(r, HOLD_MS));\n await route.continue();\n });\n\n // Provoke a refresh by injecting one 401 (same one-shot technique as\n // session-refresh.spec.ts). The refresh it triggers is now held open.\n let injected = false;\n await page.route(\"**/api/v1/**\", async (route) => {\n const url = route.request().url();\n if (injected || url.includes(\"/auth/\")) {\n await route.fallback();\n return;\n }\n injected = true;\n await route.fulfill({\n status: 401,\n contentType: \"application/problem+json\",\n body: JSON.stringify({ title: \"Unauthorized\", status: 401 }),\n });\n });\n\n await nav.link(\"nav:reports\").click();\n // Do NOT await the refresh here — the whole point is to act while it is\n // still outstanding.\n await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));\n\n // The user signs out mid-flight.\n await nav.signOut.click();\n await expect(page).toHaveURL(/\\/login/);\n\n // Now let the held refresh land, and then some.\n await page.waitForTimeout(HOLD_MS + 2_000);\n\n // THE GUARANTEE, in three independent forms — because \"we are on /login\" on\n // its own would be satisfied by a router that moved while the session\n // quietly survived underneath it.\n //\n // 1. Still on the login screen, not swept back into the app.\n await expect(page).toHaveURL(/\\/login/);\n await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n .toBeHidden();\n\n // 2. The credential itself is gone. If the late refresh had committed, its\n // rotated cookie would be sitting here ready to restore the session.\n const cookies = await page.context().cookies();\n const refreshCookie = cookies.find((c) => c.name === \"cluckwork_rt\" && c.value !== \"\");\n expect(\n refreshCookie,\n \"a live refresh cookie survived the logout — the late response resurrected the session\",\n ).toBeUndefined();\n\n // 3. The strongest form: ask for a protected screen and be refused. This is\n // what an attacker with the abandoned tab would actually try.\n await page.goto(\"/\");\n await expect(\n page,\n \"a protected route was served after logout — the session outlived the sign-out\",\n ).toHaveURL(/\\/login/);\n });\n\n test(\"an explicit login beats a pending bootstrap refresh, and the newer login wins\", async ({\n page,\n signIn,\n nav,\n }) => {\n // Establish a real Owner session first, so the browser is holding a VALID\n // refresh cookie — the bootstrap refresh this race needs must be one that\n // would genuinely succeed. A race against a doomed request proves nothing.\n await signIn(owner());\n\n await page.route(\"**/api/v1/auth/refresh\", async (route) => {\n await new Promise((r) => setTimeout(r, HOLD_MS));\n await route.continue();\n });\n\n // Land on /login with that cookie present: AuthContext's bootstrap fires\n // `restoreSession()` immediately, and it is now held open. /login is outside\n // ProtectedRoute, so the form is interactive while that is pending.\n await page.goto(\"/login\");\n await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));\n\n // A DIFFERENT person signs in on the same browser while the old session's\n // refresh is still outstanding. Different persona on purpose: the two\n // sessions are then distinguishable on screen, so the assertion can name\n // which one won instead of inferring it.\n const sales = castMember(\"Sales\");\n await page.getByLabel(tEn(\"auth:email\")).fill(sales.email);\n await page.getByLabel(tEn(\"auth:password\")).fill(sales.password);\n await page.getByRole(\"button\", { name: tEn(\"auth:signIn\") }).click();\n\n await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))\n .toBeVisible();\n\n // Let the superseded bootstrap refresh land on top of the new session.\n await page.waitForTimeout(HOLD_MS + 2_000);\n\n // THE GUARANTEE: this is the Sales session, and the Owner's has not been\n // restored underneath it. Asserted through the nav's role gates, which\n // differ between the two personas — Sales is not an admin, so the Setup\n // group is absent, and Sales cannot produce, so the Production group is too.\n await expect(\n nav.link(\"nav:audit\"),\n \"an admin destination appeared — the late Owner refresh overwrote the Sales login\",\n ).toBeHidden();\n await expect(nav.link(\"nav:users\")).toBeHidden();\n await expect(nav.link(\"nav:expenses\")).toBeHidden();\n await expect(nav.link(\"nav:dailyEntry\")).toBeHidden();\n\n // Control: the Sales-shaped destinations ARE there, so the assertions above\n // are proving \"the Sales session won\" rather than \"the sidebar is empty\".\n await expect(nav.link(\"nav:sales\")).toBeVisible();\n await expect(nav.link(\"nav:customers\")).toBeVisible();\n });\n});\n// #311 acceptance — the report at its maximum supported date range.\n//\n// #311 is CLOSED; this is the regression layer, not the fix.\n//\n// ================== WHERE THE BOUND ACTUALLY LIVES ==================\n//\n// `src/Cluckwork.Api/Endpoints/Reports/ReportEndpoints.cs`:\n//\n// private const int MaxRangeDays = 366;\n// if (t.DayNumber - f.DayNumber >= MaxRangeDays)\n// return Results.Problem($\"Range cannot exceed {MaxRangeDays} days.\",\n// statusCode: 400, title: \"Report.RangeTooLarge\");\n//\n// Note the `>=`. The largest range the server ACCEPTS is therefore a 365-day\n// difference between `from` and `to` (a 366-day inclusive window) — not 366.\n// Off-by-one here is the difference between testing the boundary and testing a\n// point comfortably inside it, so the spec probes BOTH SIDES: the largest\n// accepted range must work, and one day more must be refused. A test that only\n// asserted the accepted side would still pass if the bound were quietly widened\n// to a year and a half.\n//\n// ReportsPage enforces NO client-side cap — `from` is bounded only by `to`, and\n// `to` only by farm-local today — so the browser genuinely sends these.\n\nimport { expect, test } from \"../src/fixtures\";\nimport { owner } from \"../src/cast\";\nimport { daysBefore, farmToday } from \"../src/farm\";\nimport { tEn } from \"../src/i18n\";\n\n/** Mirrors ReportEndpoints.MaxRangeDays. The comparison there is `>=`. */\nconst MAX_RANGE_DAYS = 366;\n/** The largest `to - from` the server accepts. */\nconst LARGEST_ACCEPTED_SPAN = MAX_RANGE_DAYS - 1;\n\nconst REPORT_PATH = /\\/api\\/v1\\/reports\\//;\n\ntest.describe(\"#311 report range\", () => {\n test(\"renders at the maximum supported range, and records what it cost\", async ({\n page,\n signIn,\n farm,\n }, testInfo) => {\n await signIn(owner());\n\n const to = farmToday(farm.timeZoneId);\n const from = daysBefore(to, LARGEST_ACCEPTED_SPAN);\n\n // Collect every report response the screen makes — ReportsPage fans out to\n // production, sales, expenses and profit, so a single waitForResponse would\n // time one of four and call it \"the\" latency.\n const timings: Array<{ path: string; status: number; ms: number }> = [];\n page.on(\"response\", (res) => {\n if (!REPORT_PATH.test(res.url())) return;\n const t = res.request().timing();\n timings.push({\n path: new URL(res.url()).pathname,\n status: res.status(),\n ms: Math.round(t.responseEnd),\n });\n });\n\n await page.goto(\"/reports\");\n await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();\n\n // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so\n // setting `from` to a far-past date while `to` is still the default would be\n // clamped by the browser and the spec would quietly test a 7-day window.\n //\n // `exact: true` on both: the labels are the single words \"From\" and \"To\",\n // and getByLabel substring-matches accessible names — so a bare \"To\" also\n // resolves the theme toggle (\"Switch to night mode\"). Two elements, strict\n // mode violation, and the failure names the toggle rather than the ambiguity.\n const startedAt = Date.now();\n await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);\n await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);\n\n // THE GUARANTEE: the screen renders the report, rather than the bound\n // refusing it. `role=\"alert\"` is ReportsPage's error region.\n const production = page\n .getByRole(\"table\")\n .filter({ has: page.getByRole(\"columnheader\", { name: tEn(\"reports:dateHeader\") }) });\n await expect(production).toBeVisible();\n await expect(\n page.getByRole(\"alert\"),\n `a ${LARGEST_ACCEPTED_SPAN}-day range was refused, but MaxRangeDays=${MAX_RANGE_DAYS} should accept it`,\n ).toBeHidden();\n const renderedInMs = Date.now() - startedAt;\n\n // The date fields really do hold the wide range — proof the browser did not\n // clamp what was typed, which would make every assertion above describe a\n // narrower request than the one this spec claims to have made.\n await expect(page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true })).toHaveValue(from);\n await expect(page.getByLabel(tEn(\"reports:toLabel\"), { exact: true })).toHaveValue(to);\n\n const atMaxRange = timings.filter((t) => t.status === 200);\n expect(atMaxRange.length, \"no report endpoint responded at the maximum range\").toBeGreaterThan(0);\n\n // Recorded, not asserted. A latency THRESHOLD here would be a flaky test\n // dressed as a performance gate — the number depends on the host, and under\n // the canary (#386) it is supposed to degrade. #311's acceptance item asks\n // for the figure to be captured; the canary is where it gets compared.\n const slowest = Math.max(...atMaxRange.map((t) => t.ms));\n const summary = [\n `range: ${from} .. ${to} (${LARGEST_ACCEPTED_SPAN} days, the documented maximum)`,\n `server: ${atMaxRange.map((t) => `${t.path} ${t.ms}ms`).join(\", \")}`,\n `slowest endpoint: ${slowest}ms`,\n `browser: table rendered ${renderedInMs}ms after the range was applied`,\n ].join(\"\\n\");\n await testInfo.attach(\"report-max-range-timing\", {\n body: summary,\n contentType: \"text/plain\",\n });\n testInfo.annotations.push({ type: \"#311 max-range timing\", description: summary });\n });\n\n test(\"refuses one day beyond the documented bound\", async ({ page, signIn, farm }) => {\n await signIn(owner());\n\n const to = farmToday(farm.timeZoneId);\n // One day wider than the largest accepted span — the first value the\n // server's `>=` rejects.\n const from = daysBefore(to, MAX_RANGE_DAYS);\n\n await page.goto(\"/reports\");\n await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);\n await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);\n\n // The user is TOLD. A silently empty table would be worse than the refusal:\n // it reads as \"no data in that period\" for a farm that has plenty.\n await expect(\n page.getByRole(\"alert\"),\n `a ${MAX_RANGE_DAYS}-day range was accepted — the documented bound is not being enforced`,\n ).toBeVisible();\n\n // And the screen offers a way out rather than stranding them.\n await expect(page.getByRole(\"button\", { name: tEn(\"common:retry\") })).toBeVisible();\n });\n});\n// i18n render — es and tl do not break the screens (#277 cross-cutting, #182).\n//\n// ================== WHAT MAKES THIS NON-VACUOUS ==================\n//\n// The suite builds its selectors from the SPA's own catalogs (src/i18n.ts), so\n// there is an obvious way for this spec to be worthless: pick a key whose\n// Spanish and English strings happen to be identical, assert it renders, and\n// pass no matter what the language machinery does. That is not hypothetical —\n// `nav:dashboard` really is \"Dashboard\" in BOTH en and tl.\n//\n// So the spec asserts, first, that the strings it is about to look for ACTUALLY\n// DIFFER from English, and fails loudly if a catalog change ever makes them the\n// same. Verify the instrument can observe the thing before trusting what it says.\n//\n// ================== AND WHY IT USES ITS OWN PERSONA ==================\n//\n// `LanguageSelector` persists through `PUT /me/language`. Switching language is\n// a durable change to that USER, not a page-local toggle — see `i18nPersona()`.\n\nimport { expect, test, type Page } from \"../src/fixtures\";\nimport { i18nPersona } from \"../src/cast\";\nimport { t, tEn, type Language } from \"../src/i18n\";\n\n/**\n * The language ``, located WITHOUT using its label."," *"," * Its label is `account:language`, which is itself translated (\"Language\" ->"," * \"Idioma\" -> \"Wika\") — so the moment the switch under test works, a"," * `getByLabel(tEn(...))` locator stops matching. That is not a hypothetical: it"," * turned the cleanup hook into a 45-second hang that reported as a failure of"," * the NEXT test. Matching on the option values, which are language-invariant"," * codes, keeps the handle stable across exactly the change being tested."," */","function languageSelect(page: Page) {"," return page.locator('select:has(option[value=\"en\"]):has(option[value=\"es\"])');","}"," * Keys chosen because all three catalogs give them genuinely different strings"," * (en \"Language\" / es \"Idioma\" / tl \"Wika\"; en \"Reports\" / es \"Informes\" /"," * tl \"Mga Report\"). The guard below re-checks that at run time rather than"," * trusting this comment.","const WITNESS_KEYS = [\"account:language\", \"nav:reports\"] as const;","const LANGUAGE_OPTION = { en: \"English\", es: \"Español\", tl: \"Tagalog\" } as const;","test.describe(\"i18n\", () => {"," // Always hand the persona back in English, even when an assertion above fails"," // — otherwise one red run leaves the account in Spanish and the NEXT run of"," // this spec starts from a state it did not choose."," test.afterEach(async ({ page }) => {"," // Best-effort and time-boxed: this is cleanup, and a cleanup hook that can"," // itself hang converts one failure into a cascade across the whole file."," try {"," await page.goto(\"/account\", { timeout: 10_000 });"," await languageSelect(page).selectOption(\"en\", { timeout: 10_000 });"," // Wait for the persist to land, not just the local switch — the point of"," // the reset is the SERVER-side preference, which is what the next run"," // bootstraps from."," await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", \"en\", { timeout: 10_000 });"," } catch {"," // Deliberately swallowed. A failed reset is worth knowing about but is not"," // itself the finding, and re-throwing here would mask the real failure."," }"," });"," for (const lang of [\"es\", \"tl\"] as const satisfies readonly Language[]) {"," test(`switching to ${lang} renders that language across the shell`, async ({ page, signIn }) => {"," // The guard. A key whose translation equals English cannot distinguish"," // \"the language switched\" from \"nothing happened\"."," for (const key of WITNESS_KEYS) {"," expect("," t(lang, key),"," `\"${key}\" is identical in en and ${lang}, so this spec cannot tell a working language `"," + `switch from a broken one. Pick a different witness key.`,"," ).not.toBe(tEn(key));"," }"," await signIn(i18nPersona());"," // Start from a known language rather than whatever this account was last"," // left in — the persona is reserved, but a previous failed run is still a"," // possible starting state."," await page.goto(\"/account\");"," const selector = languageSelect(page);"," await selector.selectOption(\"en\");"," await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeVisible();"," // The switch, made the way a user makes it. Observe the durable write,"," // not only i18next's optimistic local repaint: deleting PUT /me/language"," // must make this test fail even though the visible strings still change."," const persisted = page.waitForResponse((res) =>"," res.request().method() === \"PUT\""," && new URL(res.url()).pathname === \"/api/v1/me/language\","," );"," await selector.selectOption(lang);"," const persistResponse = await persisted;"," expect(persistResponse.status(), \"the language preference was not persisted\").toBe(204);"," // THE ASSERTION: the destination the user reads in the sidebar is now in"," // the new language. The sidebar is the right place to look because it is"," // rendered by a different component tree than the screen that owns the"," // selector — a switch that only repainted the current screen would pass a"," // narrower check and still be broken everywhere else."," await expect("," page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }),"," `the sidebar did not switch to ${lang}`,"," ).toBeVisible();"," await expect(page.getByRole(\"link\", { name: tEn(\"nav:reports\"), exact: true })).toBeHidden();"," // follows. This is a real accessibility guarantee, not"," // decoration: it is what tells a screen reader which voice to use, and"," // index.html ships a static \"en\" that a broken listener would leave in"," // place while the visible text changed underneath it."," await expect(page.locator(\"html\")).toHaveAttribute(\"lang\", lang);"," // And the screens still WORK in that language — the point of #277's \"not"," // broken\", as opposed to \"translated\". A populated data screen renders its"," // table, not an error."," await page.getByRole(\"link\", { name: t(lang, \"nav:reports\"), exact: true }).click();"," await expect(page.getByRole(\"heading\", { name: t(lang, \"reports:title\") })).toBeVisible();"," await expect(page.getByRole(\"alert\")).toBeHidden();"," page"," .getByRole(\"table\")"," .filter({ has: page.getByRole(\"columnheader\", { name: t(lang, \"reports:dateHeader\") }) }),"," // Re-bootstrap the session from the server preference. This distinguishes"," // durable language selection from a page-local changeLanguage call."," await page.reload();"," page.getByRole(\"heading\", { name: t(lang, \"reports:title\") }),"," });"," }"," test(\"the language selector offers every installed pack in its own script\", async ({"," page,"," signIn,"," }) => {"," await signIn(i18nPersona());"," await page.goto(\"/account\");"," // Each pack is named in ITS OWN language (\"Español\", not \"Spanish\") — the"," // one string in the app deliberately left untranslated, because somebody who"," // cannot read the current language must still be able to find their own."," for (const [code, name] of Object.entries(LANGUAGE_OPTION)) {"," await expect(languageSelect(page).locator(`option[value=\"${code}\"]`)).toHaveText(name);","});","tools/simulation/ui/specs/reports-range.spec.ts",[1931],{"_1798":803,"_1799":1932,"_533":1933,"_1802":62},146,[1934,1804,1935,1804,1936,1804,1937,1804,1938,1939,1940,1941,1804,1942,1943,1944,1945,1946,1947,1948,1804,1949,1950,212,1951,1952,1953,1954,212,1955,1956,1957,1958,212,1959,212,1960,1961,1918,1919,1962,1963,1964,212,1965,1966,212,1967,1968,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1915,212,1982,1983,212,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,1994,212,1995,1996,1997,1998,1999,2000,2001,2002,2003,2004,2005,212,2006,2007,2008,2009,2010,212,2011,2012,2013,2014,2015,2016,2017,212,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,2030,2031,1915,2032,1857,212,2033,1964,212,1965,2034,2035,2036,212,1982,1993,1994,212,2037,2038,2001,2002,2039,2040,212,2041,2042,1857,1928],"// #311 acceptance — the report at its maximum supported date range.","// #311 is CLOSED; this is the regression layer, not the fix.","// ================== WHERE THE BOUND ACTUALLY LIVES ==================","// `src/Cluckwork.Api/Endpoints/Reports/ReportEndpoints.cs`:","// private const int MaxRangeDays = 366;","// if (t.DayNumber - f.DayNumber >= MaxRangeDays)","// return Results.Problem($\"Range cannot exceed {MaxRangeDays} days.\",","// statusCode: 400, title: \"Report.RangeTooLarge\");","// Note the `>=`. The largest range the server ACCEPTS is therefore a 365-day","// difference between `from` and `to` (a 366-day inclusive window) — not 366.","// Off-by-one here is the difference between testing the boundary and testing a","// point comfortably inside it, so the spec probes BOTH SIDES: the largest","// accepted range must work, and one day more must be refused. A test that only","// asserted the accepted side would still pass if the bound were quietly widened","// to a year and a half.","// ReportsPage enforces NO client-side cap — `from` is bounded only by `to`, and","// `to` only by farm-local today — so the browser genuinely sends these.","import { expect, test } from \"../src/fixtures\";","import { owner } from \"../src/cast\";","import { daysBefore, farmToday } from \"../src/farm\";","import { tEn } from \"../src/i18n\";","/** Mirrors ReportEndpoints.MaxRangeDays. The comparison there is `>=`. */","const MAX_RANGE_DAYS = 366;","/** The largest `to - from` the server accepts. */","const LARGEST_ACCEPTED_SPAN = MAX_RANGE_DAYS - 1;","const REPORT_PATH = /\\/api\\/v1\\/reports\\//;","test.describe(\"#311 report range\", () => {"," test(\"renders at the maximum supported range, and records what it cost\", async ({"," farm,"," }, testInfo) => {"," await signIn(owner());"," const to = farmToday(farm.timeZoneId);"," const from = daysBefore(to, LARGEST_ACCEPTED_SPAN);"," // Collect every report response the screen makes — ReportsPage fans out to"," // production, sales, expenses and profit, so a single waitForResponse would"," // time one of four and call it \"the\" latency."," const timings: Array<{ path: string; status: number; ms: number; from: string | null; to: string | null }> = [];"," page.on(\"response\", (res) => {"," if (!REPORT_PATH.test(res.url())) return;"," const t = res.request().timing();"," const url = new URL(res.url());"," timings.push({"," path: url.pathname,"," status: res.status(),"," ms: Math.round(t.responseEnd),"," from: url.searchParams.get(\"from\"),"," to: url.searchParams.get(\"to\"),"," });"," await page.goto(\"/reports\");"," await expect(page.getByRole(\"heading\", { name: tEn(\"reports:title\") })).toBeVisible();"," // Widen to the maximum. `to` first: `from`'s own `max` attribute is `to`, so"," // setting `from` to a far-past date while `to` is still the default would be"," // clamped by the browser and the spec would quietly test a 7-day window."," //"," // `exact: true` on both: the labels are the single words \"From\" and \"To\","," // and getByLabel substring-matches accessible names — so a bare \"To\" also"," // resolves the theme toggle (\"Switch to night mode\"). Two elements, strict"," // mode violation, and the failure names the toggle rather than the ambiguity."," const startedAt = Date.now();"," await page.getByLabel(tEn(\"reports:toLabel\"), { exact: true }).fill(to);"," await page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true }).fill(from);"," // THE GUARANTEE: the screen renders the report, rather than the bound"," // refusing it. `role=\"alert\"` is ReportsPage's error region."," const production = page"," .getByRole(\"table\")"," .filter({ has: page.getByRole(\"columnheader\", { name: tEn(\"reports:dateHeader\") }) });"," await expect(production).toBeVisible();"," await expect("," page.getByRole(\"alert\"),"," `a ${LARGEST_ACCEPTED_SPAN}-day range was refused, but MaxRangeDays=${MAX_RANGE_DAYS} should accept it`,"," ).toBeHidden();"," const renderedInMs = Date.now() - startedAt;"," // The date fields really do hold the wide range — proof the browser did not"," // clamp what was typed, which would make every assertion above describe a"," // narrower request than the one this spec claims to have made."," await expect(page.getByLabel(tEn(\"reports:fromLabel\"), { exact: true })).toHaveValue(from);"," await expect(page.getByLabel(tEn(\"reports:toLabel\"), { exact: true })).toHaveValue(to);"," // Match the requested range itself. The listener also sees the screen's"," // initial seven-day load, which must not be allowed to satisfy this check"," // if changing either date ever stops triggering a refetch."," const atMaxRange = timings.filter("," (t) => t.status === 200 && t.from === from && t.to === to,"," );"," expect(atMaxRange.length, \"no report endpoint responded at the maximum range\").toBeGreaterThan(0);"," // Recorded, not asserted. A latency THRESHOLD here would be a flaky test"," // dressed as a performance gate — the number depends on the host, and under"," // the canary (#386) it is supposed to degrade. #311's acceptance item asks"," // for the figure to be captured; the canary is where it gets compared."," const slowest = Math.max(...atMaxRange.map((t) => t.ms));"," const summary = ["," `range: ${from} .. ${to} (${LARGEST_ACCEPTED_SPAN} days, the documented maximum)`,"," `server: ${atMaxRange.map((t) => `${t.path} ${t.ms}ms`).join(\", \")}`,"," `slowest endpoint: ${slowest}ms`,"," `browser: table rendered ${renderedInMs}ms after the range was applied`,"," ].join(\"\\n\");"," await testInfo.attach(\"report-max-range-timing\", {"," body: summary,"," contentType: \"text/plain\","," testInfo.annotations.push({ type: \"#311 max-range timing\", description: summary });"," test(\"refuses one day beyond the documented bound\", async ({ page, signIn, farm }) => {"," // One day wider than the largest accepted span — the first value the"," // server's `>=` rejects."," const from = daysBefore(to, MAX_RANGE_DAYS);"," // The user is TOLD. A silently empty table would be worse than the refusal:"," // it reads as \"no data in that period\" for a farm that has plenty."," `a ${MAX_RANGE_DAYS}-day range was accepted — the documented bound is not being enforced`,"," ).toBeVisible();"," // And the screen offers a way out rather than stranding them."," await expect(page.getByRole(\"button\", { name: tEn(\"common:retry\") })).toBeVisible();","web/src/api/client.test.ts",[2045],{"_1798":803,"_1799":2046,"_533":2047,"_1802":62},1219,[2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,212,2069,2070,2071,2072,2073,212,2074,2075,212,2076,2077,2078,2079,1857,1832,212,2080,2081,2082,1832,212,2083,212,2084,2085,1832,212,2086,2087,1832,212,2088,2089,1832,212,2090,2091,2092,2093,2094,2095,1832,212,2096,2097,2098,212,2099,2100,2101,212,2102,2103,2104,2105,2106,2107,2108,2109,1928,212,2110,2111,2112,2113,2114,1928,212,2115,2116,2117,2118,2119,2120,2121,2122,2123,1857,212,2124,2125,2126,1857,1928,212,2127,2128,2129,2130,2131,2132,2133,2134,2135,1857,212,2136,2129,2137,2138,2139,2140,2141,2142,1857,1928,212,2143,2144,2145,2146,2147,212,2148,2149,2150,2151,1857,212,2152,2153,2154,2155,2156,2157,2151,1857,212,2158,2137,2159,2160,2150,2161,2162,2163,212,2164,2165,1857,212,2166,2167,2168,2169,2170,1857,1928,212,2171,2172,2173,2174,2175,1857,212,2176,2177,2178,2016,2179,2180,2181,2182,1857,212,2183,2184,2185,1857,212,2186,2187,2188,2177,2189,2190,2191,2192,2193,2194,2195,2196,2016,2179,2180,2197,2198,2199,2200,2201,2016,1857,212,2202,2177,2189,2190,2203,2204,2194,2195,2196,2016,2179,2180,2205,2206,1857,212,2207,2208,2177,2209,2016,2179,2180,2182,1857,1928,212,2210,2211,2137,2212,2213,2214,212,2140,2141,2215,212,2216,2217,2218,2219,2220,2221,2222,2223,2224,2225,2226,2227,2228,1857,212,2229,2137,2230,2213,2231,212,2232,2216,2233,2234,2235,2236,2237,2238,2239,2240,2241,1857,212,2242,2243,2244,2245,2246,2247,2248,2249,2250,1868,2251,2252,1915,212,2253,2254,2255,2256,212,2257,2258,2259,2227,1857,212,2260,2137,2261,2262,2263,2264,2265,2266,212,2267,2268,2269,2270,1857,1928,212,2271,2272,2137,2273,2274,212,2179,2180,2275,2276,2277,2132,2278,1857,212,2279,2137,2212,2280,2281,212,2179,2275,2282,2283,2134,2132,2278,1857,212,2284,2137,2212,2285,212,2179,2180,2275,2132,2278,1857,212,2286,2287,2288,2289,2137,2273,2290,212,2179,2180,2291,2292,2293,1857,212,2294,2137,2295,2296,2297,212,2298,2299,2300,2137,2301,2280,2302,2303,2304,1857,1928,212,2305,2306,2307,2308,2309,1857,212,2310,2311,2312,2313,2314,2315,2316,2317,2318,1857,212,2319,2307,2320,2321,1857,212,2322,2125,2323,2120,2324,2325,2326,1857,212,2327,2125,2323,2328,1857,212,2329,2330,2331,2332,2307,2333,2334,1857,212,2335,2307,2308,2336,1857,212,2337,2125,2338,2339,1857,212,2340,2341,2342,212,2343,212,2120,2344,2325,2345,2346,2347,2348,2349,2350,1857,212,2351,2341,2352,2309,1857,212,2353,2354,2355,2137,2356,2357,2358,212,2343,212,2359,2360,2361,2362,2363,2364,2365,1857,212,2366,2125,2367,2120,2368,2369,2370,1857,1928,212,2371,2372,2177,2373,2374,2375,2376,2016,2377,2378,2379,2380,1857,212,2381,2156,2382,2383,1857,212,2384,2137,2385,2213,2386,212,2387,2388,2215,2389,1857,212,2390,2129,2391,2392,2132,2134,2393,1857,1928,212,2394,2395,2129,2396,2397,2398,2399,2227,2120,2400,2401,1857,212,2402,2403,2125,2404,2405,2120,2406,2407,2408,2409,2278,1857,212,2410,2411,2412,2413,2414,2415,2416,2417,2418,2125,212,2404,212,2419,2278,1857,212,2420,2421,2422,2423,2129,2125,212,2404,212,2405,2424,1857,212,2425,2426,2427,2278,1857,212,2428,2129,2125,2429,2405,2430,1857,212,2431,2432,2433,2434,2435,212,2436,2437,2278,212,2438,2439,1857,212,2440,2441,2442,2435,2443,2429,2278,1857,212,2444,2445,2446,2447,2448,2449,2450,2417,2418,2443,212,2429,212,2278,2451,2452,2453,2454,1857,1928,212,2455,2456,2457,2458,2459,2460,2461,2462,2463,2464,212,2465,212,2466,2467,2468,2469,2470,2471,2472,2473,212,2474,2475,2476,2477,1857,212,2478,2479,212,2480,2481,1857,1928,212,2482,2483,2484,2485,2486,2487,2488,212,2489,212,2466,2490,2491,2492,2493,2494,1857,212,2495,2177,2496,212,2497,2180,2498,1857,212,2499,2500,2501,2502,2503,2504,2505,2506,2496,212,2507,212,2405,2508,2509,2510,2511,2512,2513,1857,212,2514,2515,2516,2517,2137,2518,2262,2519,212,2520,212,2494,2521,2134,1857,212,2522,2487,2523,2481,2513,1857,1928,212,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,1915,2537,1916,212,2538,2539,2540,2541,1916,212,2542,2543,2544,212,2545,2546,2547,212,2548,2549,2550,2016,212,2551,2552,212,2553,2509,212,2554,2555,212,2257,2556,2134,2557,2558,2559,2228,1857,212,2560,2543,2544,212,2561,2562,2563,212,2129,2549,2550,2016,212,2564,2565,212,2257,2134,1857,212,2566,2567,2568,2569,2137,2570,2571,212,2572,2573,212,2574,2304,2228,1857,212,2575,2576,1846,2577,2578,2579,2580,2581,2582,2583,2584,2585,2586,1883,212,2587,2588,212,2589,2590,2591,2592,2593,2594,1856,1857,212,2595,2596,2129,2549,2550,2016,212,2597,212,2257,2598,2228,1857,1928,212,2599,2600,2601,2602,2603,2129,2604,212,2573,212,2605,2227,1857,212,2606,2129,2607,2608,2609,2610,2611,1915,212,2612,2552,2134,212,2613,212,2614,2615,212,2616,2617,2618,2619,2620,2621,2622,2623,1857,212,2624,2129,2625,212,2397,212,2626,2227,1857,212,2627,2129,2607,2628,2629,2246,2630,2631,1868,2632,2611,1915,212,2633,2552,212,2634,2635,2227,2636,212,2637,2638,212,2639,2640,1857,212,2641,2642,2643,2644,2129,2607,2608,2609,2645,2646,2611,1915,212,2647,2648,2649,2552,212,2650,2651,212,2652,2653,212,2654,2655,2656,2657,2658,2659,2660,1857,212,2661,2662,2663,2664,2665,2666,2667,2608,2668,2669,2611,1915,212,2670,2671,2552,212,2404,2278,212,2672,2673,212,2674,1857,212,2675,2667,2457,212,2676,212,2476,1857,212,2677,2129,2678,2608,2679,2610,2611,1915,212,2680,2552,212,2681,212,2682,2683,2684,212,2278,2513,2685,2686,2623,1857,212,2687,2688,2689,2690,2691,2129,2607,2608,2609,2610,2611,1915,212,2692,2552,212,2404,2693,212,2653,2694,2695,1857,212,2696,2697,2698,2699,2607,2608,2700,2701,2702,2609,2632,2611,1915,212,2703,2552,212,2397,2704,212,2705,1857,212,2706,2607,2608,2702,2609,2610,2611,1915,212,2692,2552,212,2404,2693,212,2653,2694,2695,1857,212,2707,2708,2709,2607,2608,2710,2711,2712,2609,2632,2611,1915,212,2713,2552,212,2714,2704,212,2715,2716,1857,212,2717,2607,2608,2712,2609,2610,2611,1915,212,2718,2552,212,2404,2693,212,2719,2694,2695,1857,212,2720,2721,2722,2723,2129,2607,2608,2609,2632,2610,2611,1915,212,2724,2552,212,2714,2725,2726,212,2727,2728,1857,1928],"import { describe, it, expect, vi, beforeEach, afterEach } from \"vitest\";","import {"," apiGet,"," apiPost,"," apiPut,"," apiPutBytes,"," apiDelete,"," apiFetch,"," apiGetBlob,"," login,"," logout,"," restoreSession,"," changePassword,"," stepUp,"," STEP_UP_HEADER,"," ApiError,"," setOnUnauthenticated,"," setOnTokensChanged,"," getLastTraceId,","} from \"./client\";","import { getAccessToken, setAccessToken, clearAccessToken } from \"../auth/tokenStore\";","// The fetch client owns the SPA's session lifecycle: bearer-attach, one","// transparent refresh-and-retry on 401, single-flight refresh, and fail-closed","// teardown. Since #145 the refresh token rides an HttpOnly cookie (the browser","// attaches it), so refresh/logout send NO refresh body — only the CSRF header.","// All exercised here against a stubbed global fetch — no network.","const FUTURE = \"2099-01-01T00:00:00Z\";","const CSRF = \"X-Cluckwork-Auth\";","function jsonResponse(body: unknown, status = 200): Response {"," return new Response(JSON.stringify(body), {"," status,"," headers: { \"Content-Type\": \"application/json\" },","// The access-token body login/refresh now return (no refresh token).","function accessResponse(accessToken: string, status = 200): Response {"," return jsonResponse({ accessToken, accessTokenExpiry: FUTURE }, status);","type Call = [string, RequestInit];","function authOf(call: Call): string | null {"," return new Headers(call[1]?.headers ?? {}).get(\"Authorization\");","function headerOf(call: Call, name: string): string | null {"," return new Headers(call[1]?.headers ?? {}).get(name);","function callsTo(mock: ReturnType, suffix: string): Call[] {"," return (mock.mock.calls as Call[]).filter(([url]) => url.endsWith(suffix));","// A promise whose resolution the test controls — lets us hold a refresh open","// until both concurrent callers have provably parked on it (no timing guesses).","function deferred() {"," let resolve!: (v: T) => void;"," const promise = new Promise((r) => (resolve = r));"," return { promise, resolve };","// Runs pending microtasks AND the macrotask queue once, so every in-flight","// fetch resolution + catch handler has settled before we assert / release.","const drain = () => new Promise((r) => setTimeout(r, 0));","let fetchMock: ReturnType;","let onUnauth: ReturnType void>>;","let onTokens: ReturnType void>>;","beforeEach(() => {"," fetchMock = vi.fn();"," vi.stubGlobal(\"fetch\", fetchMock);"," onUnauth = vi.fn();"," onTokens = vi.fn();"," setOnUnauthenticated(onUnauth);"," setOnTokensChanged(onTokens);"," setAccessToken(\"at1\");","afterEach(() => {"," vi.unstubAllGlobals();"," setOnUnauthenticated(null);"," setOnTokensChanged(null);"," clearAccessToken();","describe(\"apiFetch — happy path\", () => {"," it(\"attaches the bearer token and returns parsed JSON\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ value: 42 }));"," const body = await apiGet<{ value: number }>(\"/stock\");"," expect(body).toEqual({ value: 42 });"," const [url, init] = fetchMock.mock.calls[0] as Call;"," expect(url).toBe(\"/api/v1/stock\");"," expect(new Headers(init.headers).get(\"Authorization\")).toBe(\"Bearer at1\");"," expect(onTokens).not.toHaveBeenCalled(); // a plain GET must not touch the token"," it(\"returns undefined for 204 No Content\", async () => {"," fetchMock.mockResolvedValueOnce(new Response(null, { status: 204 }));"," await expect(apiFetch(\"/thing\", { method: \"DELETE\" })).resolves.toBeUndefined();","describe(\"apiFetch — no in-memory token\", () => {"," it(\"attempts one silent refresh; on failure throws 401 and fires onUnauthenticated\", async () => {"," clearAccessToken();"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"no cookie\" }, 401)); // the bootstrap refresh"," await expect(apiGet(\"/stock\")).rejects.toMatchObject({ status: 401 });"," expect(onUnauth).toHaveBeenCalledTimes(1);"," // exactly one fetch — the refresh attempt — and it targeted /auth/refresh"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1);"," expect(callsTo(fetchMock, \"/stock\")).toHaveLength(0);"," it(\"uses the refreshed token when the silent refresh succeeds\", async () => {"," fetchMock"," .mockResolvedValueOnce(accessResponse(\"at2\")) // silent refresh"," .mockResolvedValueOnce(jsonResponse({ ok: true })); // the request, now authed"," const body = await apiGet<{ ok: boolean }>(\"/stock\");"," expect(body).toEqual({ ok: true });"," expect(authOf(callsTo(fetchMock, \"/stock\")[0])).toBe(\"Bearer at2\");","// #217 — every request mints a W3C traceparent so a browser action correlates","// with the API's request log and spans (#214). The client remembers the last","// trace id so a crash report can join the failed screen's server-side story.","describe(\"traceparent correlation\", () => {"," const TRACEPARENT = /^00-[0-9a-f]{32}-[0-9a-f]{16}-01$/;"," it(\"attaches a spec-shaped traceparent header to every JSON request\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ ok: true }));"," await apiGet(\"/stock\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"traceparent\")).toMatch(TRACEPARENT);"," it(\"attaches a traceparent to blob downloads too\", async () => {"," // String body, not `new Blob(...)`: under vitest's jsdom env `Blob` is"," // jsdom's (no .stream()) while `Response` is undici's, and whether that"," // mix works depends on the Node version — it broke on CI's Node."," fetchMock.mockResolvedValueOnce(new Response(\"x\", { status: 200 }));"," await apiGetBlob(\"/export/eggs.csv\");"," it(\"mints a fresh trace id per request and exposes the last one\", async () => {"," .mockResolvedValueOnce(jsonResponse({ ok: true }))"," .mockResolvedValueOnce(jsonResponse({ ok: true }));"," const first = headerOf(fetchMock.mock.calls[0] as Call, \"traceparent\")!;"," await apiGet(\"/flocks\");"," const second = headerOf(fetchMock.mock.calls[1] as Call, \"traceparent\")!;"," expect(second).not.toBe(first);"," expect(getLastTraceId()).toBe(second.split(\"-\")[1]);"," it(\"remembers the trace id even when the request fails — that is the one worth reporting\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"boom\" }, 500));"," await expect(apiGet(\"/stock\")).rejects.toBeInstanceOf(ApiError);"," const sent = headerOf(fetchMock.mock.calls[0] as Call, \"traceparent\")!;"," expect(getLastTraceId()).toBe(sent.split(\"-\")[1]);","describe(\"apiFetch — error mapping\", () => {"," it(\"passes a non-401 error through without attempting a refresh\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"Bad\", detail: \"nope\" }, 400));"," await expect(apiGet(\"/stock\")).rejects.toMatchObject({ status: 400, title: \"Bad\" });"," expect(fetchMock).toHaveBeenCalledTimes(1); // no refresh on non-401"," it(\"flattens a ValidationProblem errors map into the message\", async () => {"," fetchMock.mockResolvedValueOnce("," jsonResponse({ title: \"Validation failed\", errors: { name: [\"required\"], qty: [\"too big\", \"nan\"] } }, 400),"," const err = await apiGet(\"/stock\").catch((e: unknown) => e);"," expect(err).toBeInstanceOf(ApiError);"," expect((err as ApiError).title).toBe(\"Validation failed\");"," expect((err as ApiError).message).toBe(\"required too big nan\");"," it(\"keeps status text when the error body is not JSON\", async () => {"," fetchMock.mockResolvedValueOnce(new Response(\"502\", { status: 502, statusText: \"Bad Gateway\" }));"," await expect(apiGet(\"/stock\")).rejects.toMatchObject({ status: 502, title: \"Bad Gateway\" });"," it(\"maps a known errorCode to its catalog message; an uncoded field (omitted from errorCodes, the real API shape) keeps English\", async () => {"," // The real API OMITS a wholly-uncoded field from errorCodes (ValidationResponse.cs),"," // so `name` has no errorCodes entry at all — it must keep its English message."," jsonResponse("," {"," title: \"Validation\","," errors: { language: [\"Language must be a 2–8 letter code.\"], name: [\"required\"] },"," errorCodes: { language: [\"Me.Language.Format\"] },"," },"," 400,"," ),"," // Exact match (not just toContain): the catalog string adds \", for example"," // 'en'.\" — absent from the server's plain English — so this fails pre-fix"," // (plain flatten yields \"Language must be a 2–8 letter code. required\")."," expect((err as ApiError).message).toBe("," \"Language must be a 2–8 letter code, for example 'en'. required\","," it(\"falls back to the English message for an UNKNOWN code (no catalog key)\", async () => {"," errors: { language: [\"some english message\"] },"," errorCodes: { language: [\"Not.A.Real.Code\"] },"," // defaultValue is the server English message → unknown code degrades to it."," expect((err as ApiError).message).toBe(\"some english message\");"," it(\"keeps the plain flattened English message when there are no errorCodes\", async () => {"," // The pre-#182 contract, unchanged."," jsonResponse({ errors: { name: [\"required\"], qty: [\"too big\", \"nan\"] } }, 400),","describe(\"apiFetch — transparent refresh\", () => {"," it(\"on 401, refreshes once and retries the original request with the new token\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original"," .mockResolvedValueOnce(accessResponse(\"at2\")) // refresh"," .mockResolvedValueOnce(jsonResponse({ ok: true })); // retry"," expect(fetchMock).toHaveBeenCalledTimes(3);"," const calls = fetchMock.mock.calls as Call[];"," // Refresh request contract (#145): POST /auth/refresh with NO body and NO"," // bearer — it authenticates by the HttpOnly cookie — plus the CSRF header."," expect(calls[1][0]).toBe(\"/api/v1/auth/refresh\");"," expect(calls[1][1].method).toBe(\"POST\");"," expect(calls[1][1].body).toBeUndefined();"," expect(authOf(calls[1])).toBeNull();"," expect(headerOf(calls[1], CSRF)).toBe(\"1\");"," // Retry hits the same URL with the refreshed token."," expect(calls[2][0]).toBe(\"/api/v1/stock\");"," expect(authOf(calls[2])).toBe(\"Bearer at2\");"," expect(onTokens).toHaveBeenCalledTimes(1);"," expect(getAccessToken()).toBe(\"at2\");"," it(\"replays a write across a refresh with the SAME idempotency key and body\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original POST"," .mockResolvedValueOnce(jsonResponse({ id: \"1\" })); // retry POST"," await apiPost(\"/customers\", { name: \"x\" }, \"fixed-key\");"," const original = calls[0];"," const retry = calls[2];"," expect(original[1].method).toBe(\"POST\");"," expect(retry[1].method).toBe(\"POST\");"," expect(retry[1].body).toBe(original[1].body); // same payload, not re-serialized differently"," // Same idempotency key → the server dedupes the replay instead of double-writing."," expect(headerOf(retry, \"Idempotency-Key\")).toBe(\"fixed-key\");"," expect(headerOf(original, \"Idempotency-Key\")).toBe(\"fixed-key\");"," expect(authOf(retry)).toBe(\"Bearer at2\"); // only the bearer changed"," it(\"shares a single in-flight refresh across concurrent 401s (single-flight)\", async () => {"," const gate = deferred();"," let refreshes = 0;"," fetchMock.mockImplementation(async (url: string, init: RequestInit) => {"," if (url.endsWith(\"/auth/refresh\")) {"," refreshes += 1;"," if (refreshes > 1) throw new Error(\"a second refresh must not start while one is in flight\");"," await gate.promise; // hold open until both 401s have parked on this refresh"," return accessResponse(\"at2\");"," const auth = new Headers(init.headers).get(\"Authorization\");"," return auth === \"Bearer at1\" ? jsonResponse({ title: \"expired\" }, 401) : jsonResponse({ ok: true });"," const inflight = Promise.all([apiGet<{ ok: boolean }>(\"/a\"), apiGet<{ ok: boolean }>(\"/b\")]);"," await drain(); // both 401s land, both callers park on the one refresh"," gate.resolve();"," const [a, b] = await inflight;"," expect(a).toEqual({ ok: true });"," expect(b).toEqual({ ok: true });"," expect(refreshes).toBe(1); // exactly one refresh, and the guard proves no second one started"," it(\"refreshes again on a later 401 — the single-flight latch is cleared on success\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // cycle 1 original"," .mockResolvedValueOnce(accessResponse(\"at2\"))"," .mockResolvedValueOnce(jsonResponse({ ok: 1 })) // cycle 1 retry"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // cycle 2 original"," .mockResolvedValueOnce(accessResponse(\"at3\"))"," .mockResolvedValueOnce(jsonResponse({ ok: 2 })); // cycle 2 retry"," await apiGet(\"/a\");"," await apiGet(\"/b\");"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(2); // a stuck latch would only refresh once"," expect(getAccessToken()).toBe(\"at3\");","describe(\"apiFetch — refresh failure is fail-closed and non-recursive\", () => {"," it(\"clears the session and rethrows the ORIGINAL error when refresh 401s\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original 401"," .mockResolvedValueOnce(jsonResponse({ title: \"bad refresh token\" }, 401)); // refresh 401"," expect((err as ApiError).status).toBe(401);"," expect((err as ApiError).title).toBe(\"expired\"); // original, not the refresh error"," expect(fetchMock).toHaveBeenCalledTimes(2); // no retry after refresh failed"," expect(getAccessToken()).toBeNull();"," it(\"does NOT retry-refresh when the retry itself 401s (one transparent refresh only)\", async () => {"," .mockResolvedValueOnce(accessResponse(\"at2\")) // refresh ok"," .mockResolvedValueOnce(jsonResponse({ title: \"still 401\" }, 401)); // retry 401"," expect((err as ApiError).title).toBe(\"expired\"); // original surfaced, no recursion"," expect(fetchMock).toHaveBeenCalledTimes(3); // original + one refresh + one retry, then stop"," it(\"surfaces the original 401 when the refresh network call rejects\", async () => {"," .mockRejectedValueOnce(new TypeError(\"network down\")); // refresh fetch rejects"," it(\"does NOT clear the session when refresh is rate-limited (429) — keeps the token and rethrows the 429\", async () => {"," // A 429 during transparent refresh is transient throttling (#143), not a"," // dead session. Wiping the token here would force a re-login through the same"," // rate limit; instead the token is kept and the 429 surfaces."," .mockResolvedValueOnce(jsonResponse({ title: \"Too many requests\" }, 429)); // refresh 429"," expect((err as ApiError).status).toBe(429); // the 429, not the original 401"," expect(onUnauth).not.toHaveBeenCalled(); // session preserved"," expect(getAccessToken()).toBe(\"at1\"); // token untouched"," it(\"recovers on the next request after a failed refresh — the latch is cleared on failure too\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // req 1 original"," .mockResolvedValueOnce(jsonResponse({ title: \"bad refresh\" }, 401)); // req 1 refresh fails"," await apiGet(\"/a\").catch(() => {});"," // Session was torn down; a fresh login reseeds the token and the next 401 must"," // be able to start a brand-new refresh (not reuse a rejected latch)."," setAccessToken(\"at1b\");"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // req 2 original"," .mockResolvedValueOnce(jsonResponse({ ok: true })); // req 2 retry"," await expect(apiGet<{ ok: boolean }>(\"/b\")).resolves.toEqual({ ok: true });"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(2);","describe(\"write idempotency\", () => {"," it(\"apiPost generates an Idempotency-Key when none is given\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ id: \"1\" }));"," await apiPost(\"/customers\", { name: \"x\" });"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBeTruthy();"," it(\"generates a DISTINCT key per call (so two writes are not deduped as one)\", async () => {"," fetchMock.mockImplementation(() => Promise.resolve(jsonResponse({ id: \"1\" }))); // fresh body each call"," await apiPost(\"/customers\", { name: \"a\" });"," await apiPost(\"/customers\", { name: \"b\" });"," const k0 = headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\");"," const k1 = headerOf(fetchMock.mock.calls[1] as Call, \"Idempotency-Key\");"," expect(k0).toBeTruthy();"," expect(k1).toBeTruthy();"," expect(k0).not.toBe(k1);"," it(\"apiPost honours an explicit Idempotency-Key (retry-safe replay)\", async () => {"," await apiPost(\"/customers\", { name: \"x\" }, \"my-fixed-key\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"my-fixed-key\");"," it(\"apiPut sends method PUT with an Idempotency-Key\", async () => {"," await apiPut(\"/egg-grades/1\", { name: \"A\" }, \"put-key\");"," expect(url).toBe(\"/api/v1/egg-grades/1\");"," expect(init.method).toBe(\"PUT\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"put-key\");"," it(\"apiPut declares JSON — the default no caller has to state\", async () => {"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Content-Type\")).toBe(\"application/json\");"," // #308 — apiPost/apiPut's optional 4th param is how CreateUser/SetUserPassword"," // attach the step-up grant. Both sides of the boundary: present when a caller"," // passes one, absent otherwise (every other write in the app)."," it(\"apiPost attaches an extra header (e.g. the step-up grant) when given one\", async () => {"," await apiPost(\"/users\", { role: \"Admin\" }, \"key\", { [STEP_UP_HEADER]: \"grant-abc\" });"," expect(headerOf(fetchMock.mock.calls[0] as Call, STEP_UP_HEADER)).toBe(\"grant-abc\");"," it(\"apiPost carries no step-up header when none is given (every ordinary write)\", async () => {"," expect(headerOf(fetchMock.mock.calls[0] as Call, STEP_UP_HEADER)).toBeNull();"," it(\"apiPut attaches an extra header (e.g. the step-up grant) when given one\", async () => {"," await apiPut(\"/users/1/password\", { newPassword: \"x\" }, \"key\", { [STEP_UP_HEADER]: \"grant-def\" });"," expect(headerOf(fetchMock.mock.calls[0] as Call, STEP_UP_HEADER)).toBe(\"grant-def\");"," it(\"apiPutBytes sends the body as-is under its own content type (#123 logo upload)\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ contentHash: \"abc\" }));"," const bytes = new Blob([new Uint8Array([1, 2, 3])], { type: \"image/png\" });"," await apiPutBytes(\"/account/logo\", bytes, \"image/png\", \"logo-key\");"," expect(url).toBe(\"/api/v1/account/logo\");"," // The caller's type survives: raw() must not overwrite it with JSON, or the"," // body would go up declared as something it is not."," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Content-Type\")).toBe(\"image/png\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"logo-key\");"," // Not JSON-encoded — the Blob itself is the body."," expect(init.body).toBe(bytes);"," it(\"apiPutBytes generates a key when none is given\", async () => {"," await apiPutBytes(\"/account/logo\", new Blob([\"x\"]), \"application/octet-stream\");"," it(\"apiPutBytes retries the SAME bytes after a 401 refresh\", async () => {"," setAccessToken(\"stale\");"," const bytes = new Blob([\"png\"], { type: \"image/png\" });"," .mockResolvedValueOnce(new Response(null, { status: 401 })) // the write"," .mockResolvedValueOnce(accessResponse(\"fresh\")) // the refresh"," .mockResolvedValueOnce(jsonResponse({ contentHash: \"abc\" })); // the retry"," const writes = callsTo(fetchMock, \"/account/logo\");"," expect(writes).toHaveLength(2);"," // A body consumed by the first attempt would make the retry upload nothing;"," // a Blob can be read again, which is why the retry is safe at all."," expect(writes[1][1].body).toBe(bytes);"," expect(authOf(writes[1])).toBe(\"Bearer fresh\");"," expect(headerOf(writes[1], \"Idempotency-Key\")).toBe(\"logo-key\");"," it(\"apiDelete sends method DELETE with an Idempotency-Key\", async () => {"," await apiDelete(\"/sales/1/items/2\", \"del-key\");"," expect(url).toBe(\"/api/v1/sales/1/items/2\");"," expect(init.method).toBe(\"DELETE\");"," expect(headerOf(fetchMock.mock.calls[0] as Call, \"Idempotency-Key\")).toBe(\"del-key\");","describe(\"apiGetBlob — file download\", () => {"," it(\"returns the blob and parses the Content-Disposition filename\", async () => {"," new Response(\"col1,col2\\n\", {"," status: 200,"," headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": 'attachment; filename=\"export.csv\"' },"," }),"," const { blob, filename } = await apiGetBlob(\"/export/all\");"," expect(filename).toBe(\"export.csv\");"," expect(blob.size).toBe(10); // \"col1,col2\\n\" — body flowed through unread"," expect(authOf(fetchMock.mock.calls[0] as Call)).toBe(\"Bearer at1\");"," it(\"has null filename when no Content-Disposition is present\", async () => {"," const { filename } = await apiGetBlob(\"/export/flocks\");"," expect(filename).toBeNull();"," it(\"transparently refreshes on 401 and retries the download with the new token\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"expired\" }, 401)) // original blob request"," .mockResolvedValueOnce(new Response(\"data\", { status: 200 })); // retry"," const { blob } = await apiGetBlob(\"/export/all\");"," expect(blob.size).toBe(4); // \"data\""," expect(authOf(fetchMock.mock.calls[2] as Call)).toBe(\"Bearer at2\");"," it(\"with no session, attempts one refresh, then throws 401 + fires onUnauthenticated\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"no cookie\" }, 401)); // silent refresh"," await expect(apiGetBlob(\"/export/all\")).rejects.toMatchObject({ status: 401 });"," expect(callsTo(fetchMock, \"/export/all\")).toHaveLength(0);","describe(\"auth endpoints\", () => {"," it(\"login stores the access token (memory only) and notifies listeners\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"atL\"));"," await login({ email: \"a@b.co\", password: \"pw\" });"," expect(getAccessToken()).toBe(\"atL\");"," expect(localStorage.length).toBe(0); // never persisted"," expect(url).toBe(\"/api/v1/auth/login\");"," expect(new Headers(init.headers).get(\"Authorization\")).toBeNull(); // login is unauthenticated"," it(\"logout revokes cookie-authenticated (CSRF header, no body), then clears the token\", async () => {"," setAccessToken(\"at-logout\");"," await logout();"," expect(fetchMock).toHaveBeenCalledTimes(1);"," expect(url).toBe(\"/api/v1/auth/logout\");"," expect(init.method).toBe(\"POST\");"," expect(init.body).toBeUndefined(); // refresh token is in the cookie, not the body"," expect(headerOf(fetchMock.mock.calls[0] as Call, CSRF)).toBe(\"1\");"," // #336 — the refresh cookie is per-ORIGIN (one per browser, last login wins)"," // while this token store is per-TAB, so the cookie can belong to a DIFFERENT"," // user than the one logging out. The bearer is what tells the server who"," // actually clicked logout, so their step-up grants are the ones revoked;"," // without it the server revokes the cookie owner's and leaves this user's"," // alive. It must be read BEFORE the synchronous clear, or it is always null."," it(\"logout sends this tab's bearer, captured before the token is cleared\", async () => {"," const token = `tok-${crypto.randomUUID()}`;"," setAccessToken(token);"," expect(authOf(fetchMock.mock.calls[0] as Call)).toBe(`Bearer ${token}`);"," // …but it stays OPTIONAL. The endpoint is AllowAnonymous, so a tab with no"," // token (or an expired one already dropped) must still fire the request and"," // end the session off the cookie alone — never send \"Bearer null\"."," it(\"logout omits the bearer entirely when this tab holds no access token\", async () => {"," expect(authOf(fetchMock.mock.calls[0] as Call)).toBeNull();"," it(\"logout clears the local token even when the server revoke fails\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"revoke failed\" }, 500));"," await expect(logout()).resolves.toBeUndefined(); // best-effort, does not throw"," it(\"logout always calls the endpoint — a cookie may exist even with no in-memory token\", async () => {"," await expect(logout()).resolves.toBeUndefined();"," expect((fetchMock.mock.calls[0] as Call)[0]).toBe(\"/api/v1/auth/logout\");"," // #310 — local invalidation must win immediately, independent of the network."," it(\"clears in-memory auth state synchronously, before the server call settles\", async () => {"," const gate = deferred();"," fetchMock.mockReturnValueOnce(gate.promise); // server call hangs"," setAccessToken(\"live-token\");"," const done = logout();"," await Promise.resolve(); // let logout()'s synchronous prefix run; network still pending"," gate.resolve(new Response(null, { status: 204 }));"," await done;"," // #310 — a full network rejection (not just a non-2xx response) must behave"," // the same as the existing 500 case above: local state wins regardless."," it(\"clears the local token even when the server call rejects outright (network error)\", async () => {"," fetchMock.mockRejectedValueOnce(new TypeError(\"network down\"));"," // #310 — the revoke failure must be observable (not silently swallowed) but"," // must never expose the token that was already cleared."," it(\"reports a server-side revoke failure without leaking the token\", async () => {"," const consoleErr = vi.spyOn(console, \"error\").mockImplementation(() => {});"," // Generated, not a literal: nothing secret-shaped belongs in source"," // (GitGuardian scans test files too), and a unique value makes the"," // \"did not leak\" assertion exact rather than coincidental."," expect(consoleErr).toHaveBeenCalledTimes(1);"," const logged = consoleErr.mock.calls[0].map((a) => String(a)).join(\" \");"," expect(logged).not.toContain(token);"," consoleErr.mockRestore();","describe(\"changePassword (#165)\", () => {"," it(\"posts to /auth/change-password and swaps in the returned access token\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"at-after-change\"));"," // Runtime-generated so no literal secret lands in source. Built through a"," // helper rather than inline: a password-shaped literal sitting directly on a"," // `currentPassword = ...` line trips secret scanners even when the value is"," // a fresh UUID (GitGuardian flagged exactly this on PR #183)."," const freshPassword = () => `Aa1!${crypto.randomUUID()}`;"," const currentPassword = freshPassword();"," const newPassword = freshPassword();"," await changePassword({ currentPassword, newPassword });"," const call = fetchMock.mock.calls[0] as Call;"," expect(call[0]).toBe(\"/api/v1/auth/change-password\");"," // A key rides along (apiPost adds one to every write) but is inert: the"," // SERVER exempts this route from the response cache, because replaying it"," // would return the token without the rotated Set-Cookie (#165 review). The"," // exemption itself is asserted server-side in UserPasswordTests."," expect(authOf(call)).toBe(\"Bearer at1\"); // authenticated write"," expect(JSON.parse(String(call[1].body))).toEqual({ currentPassword, newPassword });"," // The server rotated the session; the returned token replaces the old one so"," // this tab keeps working after every other session was revoked."," expect(getAccessToken()).toBe(\"at-after-change\");"," expect(onTokens).toHaveBeenCalled();"," it(\"propagates a rejection (e.g. wrong current password) and leaves the token alone\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ title: \"Current password is incorrect.\" }, 400));"," await expect(changePassword({ currentPassword: \"x\", newPassword: \"y\" })).rejects.toThrow(ApiError);"," expect(getAccessToken()).toBe(\"at1\"); // unchanged","// #308 — step-up grant issuance. Consumed by UsersPage.tsx immediately before","// the one sensitive write it unlocks; this file only proves the transport","// contract (posts the password, authenticated, returns the grant as-is).","describe(\"stepUp (#308)\", () => {"," it(\"posts the password to /auth/step-up as an authenticated write and returns the grant\", async () => {"," fetchMock.mockResolvedValueOnce(jsonResponse({ token: \"grant-abc\", expiresAt: FUTURE }));"," const password = `Aa1!${crypto.randomUUID()}`;"," const grant = await stepUp(password);"," expect(call[0]).toBe(\"/api/v1/auth/step-up\");"," expect(call[1].method).toBe(\"POST\");"," expect(authOf(call)).toBe(\"Bearer at1\");"," expect(JSON.parse(String(call[1].body))).toEqual({ password });"," expect(grant).toEqual({ token: \"grant-abc\", expiresAt: FUTURE });"," it(\"propagates a rejection (wrong current password) as an ApiError carrying the server's message\", async () => {"," jsonResponse({ title: \"Users.CurrentPasswordIncorrect\", detail: \"Current password is incorrect.\" }, 400));"," const err = await stepUp(\"wrong\").catch((e: unknown) => e);"," expect(err).toMatchObject({ status: 400, message: \"Current password is incorrect.\" });"," // #336 review — the damage a 401 here would do is NOT the status the user"," // sees, it is the replay: apiFetch treats every 401 as an expired access"," // token, refreshes, and re-sends the SAME password. One typed password would"," // then reach the server's password check twice, so its five-attempt account"," // lockout would trip after three submissions and each attempt would burn a"," // refresh-token rotation. Pin the single request, not just the status."," it(\"issues exactly one request for a rejected password — no refresh, no replay\", async () => {"," fetchMock.mockResolvedValue("," await expect(stepUp(\"wrong\")).rejects.toThrow(ApiError);"," expect(callsTo(fetchMock, \"/auth/step-up\")).toHaveLength(1);"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(0);"," // The session is untouched: no teardown, no navigate-to-login."," expect(getAccessToken()).toBe(\"at1\");"," expect(onUnauth).not.toHaveBeenCalled();"," expect(onTokens).not.toHaveBeenCalled();"," // The other side of the boundary: a REAL 401 (the session truly expired) must"," // still take the refresh-and-retry path, so the fix above is a status"," // distinction and not a blanket opt-out of transparent refresh."," it(\"still refreshes and retries when the session itself has expired (401)\", async () => {"," .mockResolvedValueOnce(jsonResponse({ title: \"Unauthorized\" }, 401))"," .mockResolvedValueOnce(jsonResponse({ token: \"grant-abc\", expiresAt: FUTURE }));"," const grant = await stepUp(\"right\");"," expect(callsTo(fetchMock, \"/auth/step-up\")).toHaveLength(2);"," it(\"does not touch in-memory auth state — it is not a token-store writer\", async () => {"," await stepUp(\"whatever\");","describe(\"cross-tab refresh coordination (#169)\", () => {"," // A minimal Web Locks stand-in that is NAME-SCOPED, like the real API: each"," // lock name has its own FIFO queue, and different names never contend. Modelling"," // the scoping is what makes \"the SUT waits behind the SAME name\" a meaningful"," // assertion — if the fake ignored the name, a per-tab (non-shared) lock name"," // would look identical and the #169 fix could silently regress."," function fakeLockManager() {"," const tails = new Map>();"," const request = vi.fn((name: string, cb: () => Promise) => {"," const prev = tails.get(name) ?? Promise.resolve();"," const run = prev.then(() => cb());"," tails.set(name, run.catch(() => {})); // next waiter proceeds even if this one throws"," return run;"," return { request };"," // The SUT's OWN lock acquisition (asserting on `toHaveBeenCalledWith` alone"," // would be satisfied by a test's own setup call, proving nothing about the code)."," function sutLockName(locks: ReturnType): string | undefined {"," return locks.request.mock.calls.at(-1)?.[0] as string | undefined;"," it(\"waits for another tab's in-progress refresh before hitting the server (no cross-tab replay)\", async () => {"," const locks = fakeLockManager();"," vi.stubGlobal(\"navigator\", { locks });"," // Occupy the lock as 'another tab' still rotating the cookie; ours must queue."," const otherTab = deferred();"," locks.request(\"cluckwork.auth.refresh\", () => otherTab.promise);"," clearAccessToken(); // next call forces a silent refresh"," fetchMock.mockImplementation(async (url: string) =>"," url.endsWith(\"/auth/refresh\") ? accessResponse(\"at2\") : jsonResponse({ ok: true }),"," const inflight = apiGet<{ ok: boolean }>(\"/a\");"," await drain();"," // Blocked behind the other tab: our refresh has NOT reached the server yet."," otherTab.resolve(); // the other tab finished; the cookie is now the fresh token"," const a = await inflight;"," // Serialized strictly after the other tab — exactly one refresh, no replay."," // The SUT acquired the SHARED, stable lock name — the crux of cross-tab"," // coordination. (Asserted on the code's own call, not the setup call above.)"," expect(sutLockName(locks)).toBe(\"cluckwork.auth.refresh\");"," it(\"a lock held under a DIFFERENT name does not block refresh (fake is name-scoped, like the real API)\", async () => {"," // Some unrelated feature holds a different lock — must NOT serialise refresh."," const unrelated = deferred();"," locks.request(\"some-other-feature\", () => unrelated.promise);"," const a = await apiGet<{ ok: boolean }>(\"/a\"); // proceeds despite the other lock"," unrelated.resolve();"," it(\"clears the single-flight latch after a lock-guarded refresh FAILS, so a later refresh retries\", async () => {"," // Covers the lock-wrapped rejection path specifically (the existing latch test"," // runs in jsdom with no navigator.locks, i.e. only the fallback branch)."," vi.stubGlobal(\"navigator\", { locks: fakeLockManager() });"," .mockResolvedValueOnce(jsonResponse({ title: \"boom\" }, 500)) // refresh 1 (under lock) fails"," .mockResolvedValueOnce(accessResponse(\"at2\")); // refresh 2 succeeds"," await expect(restoreSession()).resolves.toBe(false);"," await expect(restoreSession()).resolves.toBe(true);"," // A stuck latch would have refused the second refresh entirely."," it(\"aborts and releases the lock if a refresh hangs past the timeout (no cross-tab starvation)\", async () => {"," vi.useFakeTimers();"," vi.stubGlobal(\"navigator\", { locks: fakeLockManager() });"," // A hung server: the fetch never resolves on its own — only the abort signal"," // (fired by our lock timeout) can settle it."," fetchMock.mockImplementation("," (_url: string, init: RequestInit) =>"," new Promise((_resolve, reject) =>"," init.signal?.addEventListener(\"abort\", () =>"," reject(new DOMException(\"timed out\", \"AbortError\")),"," ),"," ),"," const restored = restoreSession(); // parks on the hung refresh"," await vi.advanceTimersByTimeAsync(20_000); // past REFRESH_TIMEOUT_MS"," // The timeout aborted the fetch and released the lock: the promise settles"," // (does not hang forever) — restoreSession catches the abort and reports no"," // session, but crucially the lock is freed for other tabs."," await expect(restored).resolves.toBe(false);"," } finally {"," vi.useRealTimers();"," it(\"degrades gracefully when the Web Locks API is unavailable (older browsers)\", async () => {"," vi.stubGlobal(\"navigator\", {}); // no .locks — like jsdom / older Safari"," const a = await apiGet<{ ok: boolean }>(\"/a\");"," expect(callsTo(fetchMock, \"/auth/refresh\")).toHaveLength(1); // still refreshes, just uncoordinated","// #310 — login, bootstrap refresh, explicit refresh, and logout are one browser","// session state machine. A stale completion (one whose generation was superseded","// by a later login or an earlier logout) may never commit tokens or state.","describe(\"session generation (#310)\", () => {"," it(\"commits a bootstrap refresh normally when nothing else races it (control)\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"bootedToken\"));"," expect(getAccessToken()).toBe(\"bootedToken\");"," it(\"discards a bootstrap refresh that resolves after logout — the session does not resurrect\", async () => {"," const refreshGate = deferred();"," fetchMock.mockImplementation((url: string) => {"," if (url.endsWith(\"/auth/refresh\")) return refreshGate.promise;"," if (url.endsWith(\"/auth/logout\")) return Promise.resolve(new Response(null, { status: 204 }));"," throw new Error(`unexpected fetch: ${url}`);"," const restoring = restoreSession(); // bootstrap refresh in flight, held open"," await logout(); // user logs out while the bootstrap refresh is still pending"," refreshGate.resolve(accessResponse(\"resurrected-token\")); // the stale refresh finally answers"," await expect(restoring).resolves.toBe(false); // discarded — never reports a restored session"," expect(getAccessToken()).toBeNull(); // must stay logged out"," expect(onTokens).not.toHaveBeenCalled(); // the stale completion must not fire tokensChanged"," // #310 review — clearing the in-memory token is only half of it. That"," // response carried a rotated refresh cookie, which the browser applied"," // before any of our code ran, so the server session must be revoked too:"," // one revoke for the logout itself, a second for the cookie the discarded"," // refresh issued. Without it a reload walks straight back in."," expect(callsTo(fetchMock, \"/auth/logout\")).toHaveLength(2);"," it(\"commits an explicit login normally when nothing else races it (control)\", async () => {"," fetchMock.mockResolvedValueOnce(accessResponse(\"loggedInToken\"));"," expect(getAccessToken()).toBe(\"loggedInToken\");"," it(\"does not let a late bootstrap refresh overwrite a newer explicit login\", async () => {"," let refreshSignal: AbortSignal | null = null;"," fetchMock.mockImplementation((url: string, init?: RequestInit) => {"," refreshSignal = init?.signal ?? null;"," return refreshGate.promise;"," if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"newLoginToken\"));"," const restoring = restoreSession(); // older bootstrap refresh in flight"," await login({ email: \"a@b.co\", password: \"pw\" }); // a newer, explicit login completes first"," expect(getAccessToken()).toBe(\"newLoginToken\");"," expect((refreshSignal as AbortSignal | null)?.aborted).toBe(true); // prevent late Set-Cookie"," refreshGate.resolve(accessResponse(\"staleBootstrapToken\")); // the old refresh answers late"," await expect(restoring).resolves.toBe(false); // discarded, not adopted"," expect(getAccessToken()).toBe(\"newLoginToken\"); // untouched by the stale refresh"," expect(onTokens).toHaveBeenCalledTimes(1); // still just the login's single notification"," it(\"a late-FAILING obsolete refresh does not clear or corrupt a newer session\", async () => {"," // Distinct from the success case above: here the stale refresh's own network"," // call fails (refresh token revoked) — the failure path must be gated too, or"," // it would clearAccessToken()/onUnauthenticated() and boot the fresh login."," if (url.endsWith(\"/auth/login\")) return Promise.resolve(accessResponse(\"freshLoginToken\"));"," if (url.endsWith(\"/stock\")) return Promise.resolve(jsonResponse({ ok: true }));"," // apiGet with no in-memory token forces currentAccessToken() to park on a"," // silent refresh — the same refresh a bootstrap would trigger."," const fetching = apiGet<{ ok: boolean }>(\"/stock\").catch((e: unknown) => e);"," await login({ email: \"a@b.co\", password: \"pw\" }); // supersedes the still-parked refresh"," expect(getAccessToken()).toBe(\"freshLoginToken\");"," refreshGate.resolve(jsonResponse({ title: \"refresh token revoked\" }, 401)); // stale refresh FAILS late"," const settled = await fetching;"," expect(getAccessToken()).toBe(\"freshLoginToken\"); // untouched by the stale failure"," expect(onUnauth).not.toHaveBeenCalled(); // must not tear down the fresh session"," // #310 review — the parked request itself must not surface the internal"," // discard marker. The login committed a valid token, so the request the"," // user is actually waiting on proceeds on it rather than failing with"," // \"Discarded: superseded by…\", which every screen would render verbatim."," expect(settled).toEqual({ ok: true });"," // #310 review — changePassword is a token-store writer too, and logout is"," // reachable from every screen, so it needs the same generation guard as"," // login/refresh; without it the response writes a fresh token back over a"," // session the user already ended."," it(\"discards a change-password response that resolves after logout (#310)\", async () => {"," const changeGate = deferred();"," setAccessToken(`tok-${crypto.randomUUID()}`);"," if (url.endsWith(\"/auth/change-password\")) return changeGate.promise;"," if (url.endsWith(\"/auth/logout\")) return Promise.resolve(jsonResponse({}, 204));"," const changing = changePassword({ currentPassword: \"a\", newPassword: \"b\" })"," .catch((e: unknown) => e);"," changeGate.resolve(jsonResponse({ accessToken: \"resurrected\" }));"," await changing;"," expect(getAccessToken()).toBeNull(); // the ended session stays ended"," it(\"commits a change-password response normally when nothing races it (control)\", async () => {"," await changePassword({ currentPassword: \"a\", newPassword: \"b\" });"," it(\"discards a login that resolves after a concurrent logout — does not resurrect authentication\", async () => {"," const loginGate = deferred();"," if (url.endsWith(\"/auth/login\")) return loginGate.promise;"," const loggingIn = login({ email: \"a@b.co\", password: \"pw\" }).catch((e: unknown) => e);"," await logout(); // fires while the login request is still in flight"," loginGate.resolve(accessResponse(\"late-login-token\"));"," const result = await loggingIn;"," expect(result).toBeInstanceOf(Error); // discarded, surfaced as a rejection — not silently accepted"," // The late login's Set-Cookie already reached the browser; revoke it, or a"," // reload restores the session the user just ended."," // #310 review — a request parked on a refresh that a LOGOUT discarded must"," // surface a normal 401, not the internal StaleSessionError whose message"," // every screen would render verbatim. (The newer-login counterpart, where the"," // request proceeds on the fresh token, is asserted above.)"," it(\"surfaces a plain 401 — not the discard marker — when logout ended the session\", async () => {"," const fetching = apiGet(\"/stock\").catch((e: unknown) => e);"," refreshGate.resolve(accessResponse(\"discarded-token\"));"," expect(settled).toBeInstanceOf(ApiError);"," expect(settled).toMatchObject({ status: 401 });"," // The two outcomes again for apiFetch's 401-RETRY branch specifically. The"," // test above enters through currentAccessToken (empty token store); this one"," // starts authenticated, 401s, and is superseded mid-retry — a separate branch."," it(\"retries a request on the newer login's token when the retry refresh is superseded\", async () => {"," if (url.endsWith(\"/stock\") && getAccessToken() === \"newLoginToken\")"," return Promise.resolve(jsonResponse({ value: 7 }));"," if (url.endsWith(\"/stock\")) return Promise.resolve(jsonResponse({ title: \"expired\" }, 401));"," const fetching = apiGet<{ value: number }>(\"/stock\");"," refreshGate.resolve(accessResponse(\"stale-token\"));"," expect(await fetching).toEqual({ value: 7 });"," it(\"surfaces the original 401 when logout supersedes a retry refresh\", async () => {"," // The same two outcomes for the blob path, whose 401-retry is a separate"," // branch from apiFetch's."," it(\"retries a download on the newer login's token when a refresh is superseded\", async () => {"," if (url.endsWith(\"/export/all\") && getAccessToken() === \"newLoginToken\")"," return Promise.resolve(new Response(\"data\", { status: 200 }));"," if (url.endsWith(\"/export/all\")) return Promise.resolve(jsonResponse({ title: \"expired\" }, 401));"," const downloading = apiGetBlob(\"/export/all\");"," await login({ email: \"a@b.co\", password: \"pw\" }); // supersedes the parked refresh"," const { blob } = await downloading;"," expect(blob.size).toBe(4); // \"data\" — served on the live login's token"," it(\"surfaces the original 401 on a download when logout ended the session\", async () => {"," const downloading = apiGetBlob(\"/export/all\").catch((e: unknown) => e);"," const settled = await downloading;"," // #310 review — the revoke is scoped to \"the session is gone\". When a newer"," // LOGIN supersedes an older flight, the cookie in the browser belongs to that"," // live login; revoking it would sign the user out of the thing they just did."," it(\"does not revoke the cookie when a newer login superseded the flight\", async () => {"," const restoring = restoreSession();"," refreshGate.resolve(accessResponse(\"stale-refresh-token\"));"," await restoring;"," expect(getAccessToken()).toBe(\"newLoginToken\"); // the live login survives"," expect(callsTo(fetchMock, \"/auth/logout\")).toHaveLength(0); // and is NOT revoked","web/src/api/client.ts",[2731],{"_1798":803,"_1799":2732,"_533":2733,"_1802":62},575,[2734,2735,2736,2737,2738,212,2739,212,2740,2741,2742,2743,212,2744,2745,2746,2747,212,2748,2749,2750,2751,2752,2753,2754,2755,1916,1832,212,2756,2757,2758,2759,2760,1832,212,2761,2762,2763,2764,2765,2766,1832,212,2767,2768,2769,2770,2771,2772,2773,2774,2775,2776,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,2792,2793,2794,2795,1868,2796,2797,2798,1856,2799,2800,1916,2801,1832,212,2802,2803,2804,2805,2806,2807,1832,212,2808,2809,2810,2811,2812,2813,2814,1832,212,2815,2816,2817,2818,2819,2820,2821,2822,2823,2824,2825,212,2826,2827,2828,2829,1832,212,2830,212,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,212,2842,2843,2844,2845,1916,1832,212,2846,2847,2848,2849,2850,2851,1804,2852,2853,2854,2855,2856,2857,2770,2858,2859,2860,2861,2862,1916,1832,212,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2875,2876,2877,2878,1857,2879,2880,2881,2882,2883,2884,1916,2885,2886,1832,212,2887,2888,2889,2890,1804,2891,2892,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2882,2883,2884,1916,2885,2886,1832,212,2909,2910,2911,2912,2913,2914,2915,2916,1804,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,1832,212,2927,2928,2929,2930,2931,2932,2933,2934,2935,2936,2937,2938,2873,2939,2940,2941,2942,2114,2770,2943,2944,2945,2946,1987,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2016,2859,2960,2961,2962,2963,2964,1916,1832,212,2965,2966,2967,2968,2969,2970,2971,2972,2973,1804,2974,2975,2976,2977,2978,2979,212,2980,2981,2982,2983,2984,212,2985,2986,2987,2988,212,2989,2990,2991,2992,2993,2994,2995,2996,1915,2997,2998,2999,1832,212,3000,3001,3002,3003,3004,212,3005,3006,212,3007,3008,3009,2905,212,3010,3011,3012,3013,3014,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,3027,3028,3029,3030,3031,3032,3033,3034,3028,3035,3036,3037,1915,212,3038,1832,212,3039,3040,3041,3042,2770,3043,3044,2799,3045,1916,1832,212,3046,212,3047,3048,1832,212,3049,3050,3051,3052,1804,3053,3054,3055,3056,2816,3057,3058,3059,2819,3060,2877,3061,3062,1857,1832,212,3063,2816,3064,3058,3059,2819,3060,3065,3061,2878,1857,1832,212,3066,3067,3068,3069,3070,3071,2816,3072,3073,3058,2819,3060,3065,3074,3075,3076,3077,3078,1857,1832,212,3079,3060,3080,3081,1857,1832,212,3082,3083,3084,2816,3085,3086,2770,3087,2859,3088,1846,3089,3090,3091,3092,3093,3094,3095,3096,1868,3097,3098,3099,3100,1856,1916,1832,212,3101,2816,3102,3085,3103,2825,3104,2827,3105,3106,3107,3108,3109,2997,1832,212,3110,3086,2770,3111,2859,3088,1846,3089,3112,3091,3113,3114,3115,3093,3094,3116,3096,1868,3097,3098,3099,3100,1856,1916,1832,212,3117,3118,3119,3120,3121,3122,2770,3123,2859,3124,3125,3126,3127,3128,3129,3130,1916,1832,212,3131,3132,3133,3134,3135,3136,3137,3138,3139,3140,3141,3142,1832,212,3143,3144,3145,3146,3147,3148,3149,3150,3151,3152,3153,3154,1832],"import type { AccessTokenResponse, LoginRequest, ProblemDetails } from \"./types\";","import { clearAccessToken, getAccessToken, setAccessToken } from \"../auth/tokenStore\";","import { newId } from \"../lib/ids\";","import i18n from \"../i18n\";","import { newTraceparent } from \"../lib/traceparent\";","const BASE = \"/api/v1\";","// #145 — refresh/logout ride the HttpOnly refresh cookie; this custom header","// (which a cross-site simple request cannot set) is the CSRF second factor","// alongside the cookie's SameSite=Strict. Mirrors AuthCookies.CsrfHeaderName.","const CSRF_HEADER = \"X-Cluckwork-Auth\";","// #308 — carries a short-lived step-up grant (see stepUp() below) on the two","// sensitive user-administration calls that need one. Mirrors","// AuthEndpoints.StepUpHeaderName.","export const STEP_UP_HEADER = \"X-Cluckwork-Step-Up\";","export class ApiError extends Error {"," constructor("," public status: number,"," public title: string,"," message: string,"," ) {"," super(message);"," this.name = \"ApiError\";","// Called when the session is unrecoverable (refresh failed). AuthContext wires","// this to drop React auth state and bounce to /login.","let onUnauthenticated: (() => void) | null = null;","export function setOnUnauthenticated(cb: (() => void) | null): void {"," onUnauthenticated = cb;","// Called whenever a new token pair is saved (login or transparent refresh).","// AuthContext re-derives the role from the fresh access token so a demotion","// or promotion shows in the UI within one token lifetime, not at next reload.","let onTokensChanged: (() => void) | null = null;","export function setOnTokensChanged(cb: (() => void) | null): void {"," onTokensChanged = cb;","async function parseError(res: Response): Promise {"," let title = res.statusText;"," let detail = res.statusText;"," try {"," const body = (await res.json()) as ProblemDetails & {"," errors?: Record;"," errorCodes?: Record;"," };"," title = body.title ?? title;"," // ValidationProblem carries an errors map and usually no detail — flatten"," // it so the user sees which field is wrong, not just \"Bad Request\"."," if (body.errors && Object.keys(body.errors).length > 0) {"," // Per-field, index-aligned: a slot with an explicit code whose catalog key"," // exists renders the translated message; otherwise the English server"," // message at the SAME index (uncoded slots, or codes without a catalog key,"," // keep their English — matching the additive, explicit-only #45 contract)."," const parts: string[] = [];"," for (const [field, messages] of Object.entries(body.errors)) {"," const codes = body.errorCodes?.[field] ?? [];"," messages.forEach((msg, i) => {"," const code = codes[i];"," // `defaultValue: msg` IS the fallback: a known catalog key wins, an"," // unknown code (or an uncoded/null slot) renders the server English"," // message. This also satisfies i18next's typed t() — a runtime string"," // key needs the defaultValue overload (a bare i18n.t(dynamicKey) is a"," // type error under CustomTypeOptions). keySeparator:false makes the"," // dotted `errors:Me.Language.Format` a literal key, not a nested path."," parts.push(code ? i18n.t(`errors:${code}`, { defaultValue: msg }) : msg);"," });"," detail = parts.join(\" \");"," } else {"," detail = body.detail ?? detail;"," } catch {"," // non-JSON body — keep status text"," return new ApiError(res.status, title, detail);","// #217 — the trace id of the most recent API request, success or failure (a","// FAILED request's id is exactly the one worth having: the crash report","// attaches it, joining a browser crash to that request's server-side story).","let lastTraceId: string | null = null;","export function getLastTraceId(): string | null {"," return lastTraceId;","// Mint per request, never reused: the server treats the incoming id as the","// request's TraceId (#214), so sharing one across requests would fuse","// unrelated request logs into one trace.","function attachTraceparent(headers: Headers): void {"," const tp = newTraceparent();"," headers.set(\"traceparent\", tp.header);"," lastTraceId = tp.traceId;","async function raw("," path: string,"," init: RequestInit,"," accessToken?: string,","): Promise {"," const headers = new Headers(init.headers);"," // A caller that declared its own type keeps it: the farm-logo upload (#123)"," // PUTs raw image bytes, not JSON."," if (!headers.has(\"Content-Type\")) headers.set(\"Content-Type\", \"application/json\");"," if (accessToken) headers.set(\"Authorization\", `Bearer ${accessToken}`);"," attachTraceparent(headers);"," const res = await fetch(`${BASE}${path}`, { ...init, headers });"," if (!res.ok) throw await parseError(res);"," if (res.status === 204) return undefined as T;"," return (await res.json()) as T;","// --- Auth endpoints -------------------------------------------------------","// #310 — login, the load-time bootstrap refresh, an explicit (401-triggered)","// refresh, and logout are treated as ONE browser-session state machine, not","// four independent calls racing each other. Every entry into that machine","// captures the CURRENT generation before its own await; login and logout each","// bump it (login because it is by definition a newer session than anything","// already in flight, logout because ending the session must supersede","// everything). A completion — success OR failure — may only commit tokens or","// user state while the generation it captured is still the current one;","// otherwise it is stale and must be discarded rather than resurrecting or","// clobbering whatever the (newer) generation already did.","let sessionGeneration = 0;","class StaleSessionError extends Error {"," constructor() {"," super(\"Discarded: superseded by a newer login or an intervening logout.\");"," this.name = \"StaleSessionError\";","// #310 review — discarding the JS result is NOT enough for a request that also","// rotates the refresh cookie (/auth/login and /auth/refresh both do). The","// browser applies Set-Cookie the moment the response arrives, before any of our","// code runs, so a login that lands after logout leaves a VALID HttpOnly refresh","// cookie behind: the next reload authenticates straight through","// restoreSession() and the session the user ended comes back.","// So when a cookie-setting response is discarded, ask the server to revoke what","// it just issued. Only when the session is actually gone (no access token): if a","// newer LOGIN superseded this flight, the cookie now belongs to that live","// session and revoking it would sign the user out of the thing they just did.","async function revokeSupersededCookie(): Promise {"," if (getAccessToken()) return; // superseded by a newer login, not by a logout"," await raw(\"/auth/logout\", { method: \"POST\", headers: { [CSRF_HEADER]: \"1\" } });"," } catch (err) {"," // Best-effort, like logout's own revoke: report it rather than swallow, but"," // never surface it to the caller whose result was already discarded."," console.error(\"discarded response: revoking its refresh cookie failed\", err);","export async function login(body: LoginRequest): Promise {"," // #310 — bump first: login is a NEWER session than anything already in"," // flight (a bootstrap refresh, say), so its resolution must be the one that"," // wins, and any earlier flight must see its captured generation go stale."," // Cancel a refresh which has already acquired the cross-tab lock as well."," // The generation check protects the in-memory token, but it cannot undo the"," // browser applying a late refresh response's Set-Cookie header. Without the"," // abort, that stale cookie could restore the older user on the next reload"," // even though the explicit login correctly won in memory."," const generation = ++sessionGeneration;"," abortInFlightRefresh?.();"," // The server sets the HttpOnly refresh cookie; the body returns only the"," // access token, which lives in memory for this tab's lifetime."," const res = await raw(\"/auth/login\", {"," method: \"POST\","," body: JSON.stringify(body),"," // Superseded while in flight (e.g. a logout landed before this resolved) —"," // do not resurrect a session the user already ended. The response already"," // set a refresh cookie, so revoke it too, not just the in-memory token."," if (sessionGeneration !== generation) {"," await revokeSupersededCookie();"," throw new StaleSessionError();"," setAccessToken(res.accessToken);"," onTokensChanged?.();","// #165 — self-service password change. The server revokes every session for the","// user (other devices are signed out) and hands this one a fresh pair, so we","// swap in the returned access token; the rotated refresh cookie is set by the","// response.","// apiPost attaches an Idempotency-Key like any write, but the SERVER exempts","// this route from the response cache, so that key is inert here. Caching this","// response would persist the access token and, on replay, return it WITHOUT the","// rotated Set-Cookie — leaving the client holding a revoked refresh cookie","// (#165 review). Replay protection isn't needed anyway: a repeat can't re-apply,","// because the current password no longer matches.","export async function changePassword("," body: { currentPassword: string; newPassword: string },","): Promise {"," // #310 — this is a token-store writer like login/refresh, so it needs the"," // same generation guard: logout is reachable from every screen (AppLayout's"," // persistent button), so a user who submits a password change and logs out"," // before it lands would otherwise have the response write a fresh token back"," // over the cleared session."," const generation = sessionGeneration;"," const res = await apiPost(\"/auth/change-password\", body);"," // This response rotates the refresh cookie too, so a discarded one needs that"," // cookie revoked, not merely the in-memory token dropped.","// #308 — re-confirms the CURRENT password to mint a short-lived step-up grant","// for one sensitive user-administration call (creating another Owner;","// resetting an Owner's password). The grant is returned to the caller and","// used EXACTLY ONCE, immediately, as the X-Cluckwork-Step-Up header on that","// one follow-up request (see UsersPage.tsx) — this function itself never","// stores the token or the password anywhere longer-lived than its own return","// value, and there is nothing here to clear on logout: unlike the access","// token, no module-level state holds a step-up grant at all.","// #336 review — this goes through apiPost, so it inherits the transparent","// refresh-and-retry every 401 triggers. That is only safe because the server","// answers a REJECTED password with 400 (Users.CurrentPasswordIncorrect), the","// same status change-password uses, and reserves 401 for a genuinely","// unauthenticated caller. If /auth/step-up ever went back to 401 for a wrong","// password, one typed password would be replayed as two failed accesses —","// halving the server's five-attempt account lockout and rotating the refresh","// token per attempt. The contract is pinned by a test in client.test.ts.","export async function stepUp(password: string): Promise<{ token: string; expiresAt: string }> {"," return apiPost<{ token: string; expiresAt: string }>(\"/auth/step-up\", { password });","export async function logout(): Promise {"," // #310 — bump the generation and clear in-memory state SYNCHRONOUSLY, before"," // any await: local logout must win immediately, whatever a slower in-flight"," // login/refresh does later. Also cancel any refresh currently in flight —"," // note this only reaches a refresh that has already been GRANTED the"," // cross-tab lock (#169); one still queued behind another tab has no"," // controller yet, so it will still fire its request and then be discarded on"," // arrival by the generation check. Correctness rests on the generation, not"," // on the abort; the abort is only an optimisation so it stops sooner"," // instead of only being"," // discarded on arrival by the generation check in refreshTokens()."," sessionGeneration++;"," // #336 — capture BEFORE clearing: this tab's access token names the user who"," // actually clicked logout, and the clear below is deliberately synchronous."," // Read it after and we would always send nothing."," const bearer = getAccessToken();"," // Cookie-authenticated: the HttpOnly refresh cookie rides along and the CSRF"," // header satisfies the check. Always fires — JS can't read the HttpOnly"," // cookie to know whether a session exists, so we always ask the server to"," // revoke + clear it."," // #336 — the bearer is sent too, when this tab still has one. The refresh"," // cookie is per-origin (one per browser, last login wins) while this store"," // is per-tab, so the cookie can belong to a DIFFERENT user than the one"," // logging out here; without the bearer the server would revoke that other"," // user's step-up grants and leave this user's alive. It stays OPTIONAL —"," // the endpoint is AllowAnonymous, so an already-expired token just leaves"," // the call unauthenticated and the cookie path still ends the session, and"," // the server exempts /auth/logout from the Idempotency-Key requirement so"," // authenticating it does not make the request need one."," await raw("," \"/auth/logout\","," { method: \"POST\", headers: { [CSRF_HEADER]: \"1\" } },"," bearer ?? undefined,"," // Best-effort revoke: the in-memory token is already cleared above and this"," // failure can never reverse that. Still surfaced (not silently swallowed,"," // #310) so an operator can see the server-side session may be un-revoked —"," // logged, never the (already-cleared) token itself."," console.error(\"logout: server-side session revoke failed\", err);","// #169 — serialise refresh across tabs. The refresh token lives only in the","// shared HttpOnly cookie (#145), so two tabs refreshing at once each present the","// SAME cookie value; the second hits an already-rotated token, the server reads","// that as a replay and revokes the whole family — logging BOTH tabs out. The Web","// Locks API lets only one tab refresh at a time: the next tab runs its refresh","// only AFTER the first has rotated the cookie, so it presents the fresh token,","// not a replay. Server-side reuse-detection stays strict (unchanged). Browsers","// without navigator.locks (older Safari, insecure origins) degrade to per-tab","// single-flight only: no cross-tab guarantee, but never worse than before #169.","// Residual (a page-owned lock cannot make server rotation + cookie receipt","// atomic): if a tab is closed in the sub-second between sending a refresh and","// receiving the rotated cookie, the lock auto-releases while the cookie is still","// the old value, so the next tab can still trip reuse-detection. Narrow, but a","// full fix needs an idempotent server refresh — tracked in #176.","const REFRESH_LOCK = \"cluckwork.auth.refresh\";","// Cap how long one tab may hold the cross-tab lock. fetch() has no default","// timeout, so a hung /auth/refresh would otherwise keep the lock — and every","// other tab's refresh — parked indefinitely (#169 review). On timeout we abort,","// which releases the lock; the aborting tab recovers on its next request.","const REFRESH_TIMEOUT_MS = 15_000;","// #310 — the abort handle of whichever refresh attempt is currently running","// (if any), so logout() can cancel it outright rather than only waiting for","// the generation check below to discard its result on arrival.","let abortInFlightRefresh: (() => void) | null = null;","function withRefreshLock(run: (signal: AbortSignal) => Promise): Promise {"," const attempt = () => {"," const controller = new AbortController();"," abortInFlightRefresh = () => controller.abort();"," const timer = setTimeout(() => controller.abort(), REFRESH_TIMEOUT_MS);"," return run(controller.signal).finally(() => {"," clearTimeout(timer);"," abortInFlightRefresh = null;"," };"," const locks: LockManager | undefined = globalThis.navigator?.locks;"," return locks ? (locks.request(REFRESH_LOCK, attempt) as Promise) : attempt();","// Single-flight refresh: concurrent 401s (and the load-time bootstrap) share one","// in-flight refresh call. The refresh token rides the cookie; no body is sent.","// The per-tab latch dedupes within a tab; the cross-tab Web Lock (above) then","// serialises whatever refresh each tab still needs against the other tabs.","let refreshInFlight: Promise | null = null;","async function refreshTokens(): Promise {"," if (refreshInFlight) return refreshInFlight;"," // #310 — captured once, at the START of this flight. Checked again at"," // settlement (success or failure) so a logout/login that lands WHILE this"," // network call is in the air discards its outcome instead of committing it."," refreshInFlight = withRefreshLock((signal) =>"," raw(\"/auth/refresh\", {"," method: \"POST\","," headers: { [CSRF_HEADER]: \"1\" },"," signal,"," }),"," )"," .then("," async (res) => {"," // A SUCCESSFUL refresh rotated the cookie before we got here, so a"," // discarded one leaves live credentials in the browser — revoke them."," if (sessionGeneration !== generation) {"," await revokeSupersededCookie();"," throw new StaleSessionError();"," }"," setAccessToken(res.accessToken);"," onTokensChanged?.();"," return res.accessToken;"," },"," (err: unknown) => {"," // A late FAILURE from an obsolete generation is discarded the same as"," // a late success: the real error (e.g. a genuinely revoked refresh"," // token) might otherwise tear down a newer, still-valid session. No"," // revoke here — a failed refresh issued no cookie to revoke."," throw sessionGeneration !== generation ? new StaleSessionError() : err;"," )"," .finally(() => {"," refreshInFlight = null;"," return refreshInFlight;","// Session bootstrap (page load): the access token is memory-only, so it's gone","// after a reload — try one silent refresh against the cookie. Resolves true if a","// session was restored, false if unauthenticated (→ clean login, no error flash).","export async function restoreSession(): Promise {"," await refreshTokens();"," return true;"," return false;","// --- Authenticated request with one transparent refresh-and-retry ---------","export function apiGet(path: string): Promise {"," return apiFetch(path, { method: \"GET\" });","// Writes require an Idempotency-Key (server middleware): a retry with the same","// key replays the original response instead of repeating the side effect.","// Callers retrying a logical mutation after an ambiguous failure should pass","// the SAME key so the server dedupes instead of repeating the write.","// #308 — extraHeaders is how CreateUser/SetUserPassword attach the","// X-Cluckwork-Step-Up header for a sensitive operation; every other caller","// omits it.","export function apiPost("," body?: unknown,"," idempotencyKey?: string,"," extraHeaders?: Record,"," return apiFetch(path, {"," headers: { \"Idempotency-Key\": idempotencyKey ?? newId(), ...extraHeaders },"," body: body === undefined ? undefined : JSON.stringify(body),","export function apiPut("," body: unknown,"," method: \"PUT\",","// Raw-bytes write (#123's logo upload): same auth and the same transparent","// refresh-and-retry as apiPut, but the body goes up as it is instead of being","// JSON-encoded. Safe to retry — a Blob can be read more than once. The declared","// content type is courtesy only: the API sniffs the format from the bytes and","// ignores what the client claims.","export function apiPutBytes("," body: Blob,"," contentType: string,"," headers: {"," \"Content-Type\": contentType,"," \"Idempotency-Key\": idempotencyKey ?? newId(),"," },"," body,","export function apiDelete(path: string, idempotencyKey?: string): Promise {"," method: \"DELETE\","," headers: { \"Idempotency-Key\": idempotencyKey ?? newId() },","// File download with the same auth + one transparent refresh-and-retry as","// apiFetch. Returns the body as a Blob plus the server's suggested filename.","export async function apiGetBlob(","): Promise<{ blob: Blob; filename: string | null }> {"," const token = await currentAccessToken();"," return await rawBlob(path, token);"," if (!(err instanceof ApiError) || err.status !== 401) throw err;"," const refreshed = await refreshTokens();"," return await rawBlob(path, refreshed);"," } catch (refreshErr) {"," // #310 review — same supersession handling as apiFetch."," if (refreshErr instanceof StaleSessionError) {"," const fresh = getAccessToken();"," if (fresh) return await rawBlob(path, fresh);"," throw err;"," if (isTransientRefreshFailure(refreshErr)) throw refreshErr;"," clearAccessToken();"," onUnauthenticated?.();"," throw err;","async function rawBlob("," accessToken: string,"," const headers = new Headers({ Authorization: `Bearer ${accessToken}` });"," const res = await fetch(`${BASE}${path}`, { headers });"," const disposition = res.headers.get(\"Content-Disposition\");"," const match = disposition?.match(/filename\\*?=(?:UTF-8''|\")?([^\";]+)/i);"," return {"," blob: await res.blob(),"," filename: match ? decodeURIComponent(match[1]) : null,","export async function apiFetch(path: string, init: RequestInit = {}): Promise {"," return await raw(path, init, token);"," return await raw(path, init, refreshed);"," // #310 review — superseded mid-retry: retry once on the newer login's"," // token, or surface the ORIGINAL 401 if a logout ended the session."," // Never let the internal marker reach the caller."," if (fresh) return await raw(path, init, fresh);","// The in-memory access token, or one obtained via a silent refresh when memory","// is empty (e.g. a request racing the load-time bootstrap). Throws + signals","// unauthenticated if no session can be established.","async function currentAccessToken(): Promise {"," const token = getAccessToken();"," if (token) return token;"," return await refreshTokens();"," // #310 — a stale (obsolete-generation) failure belongs to an already-"," // superseded session: a newer login already committed its own token, or a"," // logout already tore everything down. Either way, this failure must not"," // touch the CURRENT session — no clearing, no onUnauthenticated navigate."," if (err instanceof StaleSessionError) return supersededToken();"," onUnauthenticated?.();"," throw new ApiError(401, \"NoSession\", \"Not authenticated.\");","// #310 review — resolve a discarded refresh against whatever superseded it.","// A newer LOGIN has already committed its token, so the caller's request is","// perfectly valid and should proceed on it. A newer LOGOUT left no session,","// and has already navigated, so this raises a plain 401 rather than firing","// onUnauthenticated a second time. Either way StaleSessionError itself stops","// here: it is an internal control marker, and every screen renders a non-","// ApiError's `.message` verbatim, so letting it escape would show the user","// \"Discarded: superseded by...\" in place of a real error.","function supersededToken(): string {"," const fresh = getAccessToken();"," if (fresh) return fresh;"," throw new ApiError(401, \"NoSession\", \"Not authenticated.\");","// A refresh failure is \"transient\" when the session is likely still valid, so we","// keep the tokens and surface the error rather than forcing a re-login:","// - 429: rate-limit throttling (#143) — re-logging in hits the same limit.","// - AbortError: our own cross-tab lock timeout (#169) fired on a slow/hung","// refresh; the cookie is untouched, so the next attempt can still succeed.","// - StaleSessionError (#310): the refresh belonged to an obsolete generation","// (superseded by a newer login, or discarded by a logout) — a newer/","// already-torn-down session must not be clobbered by this stale failure.","function isTransientRefreshFailure(err: unknown): boolean {"," if (err instanceof StaleSessionError) return true;"," if (err instanceof ApiError && err.status === 429) return true;"," return err instanceof DOMException && err.name === \"AbortError\";","tools/simulation/ui/specs/session-races.spec.ts",[3157],{"_1798":803,"_1799":3158,"_533":3159,"_1802":62},172,[3160,1804,3161,3162,3163,3164,3165,1804,3166,1804,3167,3168,3169,3170,3171,1804,3172,1804,3173,3174,3175,3176,3177,212,1951,3178,1954,212,3179,3180,212,3181,3182,1918,1919,3183,1920,3184,3185,3186,3187,3188,1915,1964,212,3189,3190,3191,3192,1915,212,3193,3194,3195,3196,3197,3198,3199,3200,1868,3201,3202,3203,3204,3205,1981,1915,212,3206,3207,3208,3209,212,3210,3211,3212,212,3213,3214,212,3215,3216,3217,1987,3218,3212,3219,3220,212,3221,3222,3223,3224,3225,3226,3227,3228,212,3229,3230,3231,2001,3232,3233,3234,1857,212,3235,1918,1919,3183,1920,3236,3237,3238,1964,212,3190,3191,3192,1915,212,3239,3240,3241,3242,3209,212,3243,3244,3245,3246,3247,3248,3249,3250,212,3219,3251,212,3252,3214,212,3253,3254,3255,3256,2001,3257,3258,2004,3259,3260,3261,212,3262,3263,3264,3265,212,3266,3267,3268,3269,3219,3251,3270,3259,3264,3265,1857,1928],"// #310 acceptance — the two session-generation races, driven in a real browser.","// #310 is CLOSED; this is the end-to-end regression layer for it, not the fix.","// The fix is `sessionGeneration` in `web/src/api/client.ts`: a module-level","// counter that `login()` and `logout()` bump, captured before each await and","// re-checked on settlement, so a superseded completion is discarded","// (`StaleSessionError`) instead of committing tokens.","// ================== WHY A BROWSER IS THE RIGHT INSTRUMENT ==================","// Both races are about what happens to a REAL in-flight fetch when the user does","// something else mid-flight. A unit test can assert the counter's arithmetic; it","// cannot tell you whether the user ends up looking at somebody else's farm. The","// assertions below are therefore all about the resulting SCREEN — which session","// the browser is actually in — not about a counter or a request.","// ================== HOW THE RACE IS MADE DETERMINISTIC ==================","// `page.route` holds the refresh request open for a fixed window, so \"in flight\"","// is a state the spec controls rather than one it hopes to hit. The alternative,","// firing both actions and hoping the interleaving lands, is a spec that passes","// most of the time for the wrong reason — and this is precisely the class of bug","// where \"passed 9 times out of 10\" means \"did not test it 9 times out of 10\".","import { castMember, owner } from \"../src/cast\";","/** How long a held refresh stays in flight. Long enough to act inside, short enough to run. */","const HOLD_MS = 3_000;","test.describe(\"#310 session races\", () => {"," test(\"a logout during an in-flight refresh cannot be resurrected by the late response\", async ({"," nav,"," // Logout normally aborts the fetch as an optimisation. Disable that"," // optimisation in this test so the late response really settles and the"," // assertions below specifically exercise the sessionGeneration guard."," await page.addInitScript(() => {"," AbortController.prototype.abort = () => undefined;"," // Hold every refresh open for HOLD_MS."," await page.route(\"**/api/v1/auth/refresh\", async (route) => {"," await new Promise((r) => setTimeout(r, HOLD_MS));"," await route.continue();"," // Provoke a refresh by injecting one 401 (same one-shot technique as"," // session-refresh.spec.ts). The refresh it triggers is now held open."," let injected = false;"," await page.route(\"**/api/v1/**\", async (route) => {"," const url = route.request().url();"," if (injected || url.includes(\"/auth/\")) {"," await route.fallback();"," return;"," injected = true;"," await route.fulfill({"," status: 401,"," contentType: \"application/problem+json\","," body: JSON.stringify({ title: \"Unauthorized\", status: 401 }),"," await nav.link(\"nav:reports\").click();"," // Do NOT await the refresh here — the whole point is to act while it is"," // still outstanding."," await page.waitForRequest((r) => r.url().includes(\"/api/v1/auth/refresh\"));"," // The user signs out mid-flight."," await nav.signOut.click();"," await expect(page).toHaveURL(/\\/login/);"," // Now let the held refresh land, and then some."," await page.waitForTimeout(HOLD_MS + 2_000);"," // THE GUARANTEE, in three independent forms — because \"we are on /login\" on"," // its own would be satisfied by a router that moved while the session"," // quietly survived underneath it."," // 1. Still on the login screen, not swept back into the app."," await expect(page.getByRole(\"navigation\", { name: tEn(\"nav:primaryNavAriaLabel\") }))"," .toBeHidden();"," // 2. The credential itself is gone. If the late refresh had committed, its"," // rotated cookie would be sitting here ready to restore the session."," const cookies = await page.context().cookies();"," const refreshCookie = cookies.find((c) => c.name === \"cluckwork_rt\" && c.value !== \"\");"," expect("," refreshCookie,"," \"a live refresh cookie survived the logout — the late response resurrected the session\","," ).toBeUndefined();"," // 3. The strongest form: ask for a protected screen and be refused. This is"," // what an attacker with the abandoned tab would actually try."," await page.goto(\"/\");"," page,"," \"a protected route was served after logout — the session outlived the sign-out\","," ).toHaveURL(/\\/login/);"," test(\"an explicit login beats a pending bootstrap refresh, and the newer login wins\", async ({"," // Establish a real Owner session first, so the browser is holding a VALID"," // refresh cookie — the bootstrap refresh this race needs must be one that"," // would genuinely succeed. A race against a doomed request proves nothing."," // Land on /login with that cookie present: AuthContext's bootstrap fires"," // `restoreSession()` immediately, and it is now held open. /login is outside"," // ProtectedRoute, so the form is interactive while that is pending."," await page.goto(\"/login\");"," // A DIFFERENT person signs in on the same browser while the old session's"," // refresh is still outstanding. Different persona on purpose: the two"," // sessions are then distinguishable on screen, so the assertion can name"," // which one won instead of inferring it."," const sales = castMember(\"Sales\");"," await page.getByLabel(tEn(\"auth:email\")).fill(sales.email);"," await page.getByLabel(tEn(\"auth:password\")).fill(sales.password);"," await page.getByRole(\"button\", { name: tEn(\"auth:signIn\") }).click();"," .toBeVisible();"," // Let the superseded bootstrap refresh land on top of the new session."," // THE GUARANTEE: this is the Sales session, and the Owner's has not been"," // restored underneath it. Asserted through the nav's role gates, which"," // differ between the two personas — Sales is not an admin, so the Setup"," // group is absent, and Sales cannot produce, so the Production group is too."," nav.link(\"nav:audit\"),"," \"an admin destination appeared — the late Owner refresh overwrote the Sales login\","," await expect(nav.link(\"nav:users\")).toBeHidden();"," await expect(nav.link(\"nav:expenses\")).toBeHidden();"," await expect(nav.link(\"nav:dailyEntry\")).toBeHidden();"," // Control: the Sales-shaped destinations ARE there, so the assertions above"," // are proving \"the Sales session won\" rather than \"the sidebar is empty\"."," await expect(nav.link(\"nav:sales\")).toBeVisible();"," await expect(nav.link(\"nav:customers\")).toBeVisible();"," // A response can lose the in-memory race and still have its Set-Cookie"," // applied by the browser. Reload from scratch so bootstrap has to use the"," // durable refresh cookie; the Sales persona must still be the winner."," await page.reload();"," await expect(nav.link(\"nav:audit\")).toBeHidden();",[3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284],{"_1746":49,"_49":3305},{"_1746":3286,"_169":3155,"_1798":3303,"_1799":3304},{"_1746":49,"_49":3302},{"_1746":3286,"_169":2729,"_1798":3300,"_1799":3301},{"_1746":3286,"_169":2043,"_1798":3298,"_1799":3299},{"_1746":49,"_49":3297},{"_1746":3286,"_169":3155,"_1798":3295,"_1799":3296},{"_1746":49,"_49":3294},{"_1746":3286,"_169":1929,"_1798":3292,"_1799":3293},{"_1746":49,"_49":3291},{"_1746":3286,"_169":1792,"_1798":3289,"_1799":3290},{"_1746":3286,"_169":1792,"_1798":3287,"_1799":3288},{"_1746":49,"_49":3285},"\n* Committed the changes as `8c2b1b0` and created PR metadata titled **“test(e2e): close remaining round-1 assertion gaps.”**\n\n**Testing**\n\n* ✅ `cd web && npm run typecheck`\n* ✅ `git diff --check`\n* ⚠️ `cd tools/simulation/ui && npm ci && npm run typecheck` (package registry returned HTTP 403 while fetching `playwright-core`)\n* ⚠️ `cd web && npm test -- --run src/api/client.test.ts` (the available Node 20 runtime rejects Vitest’s configured `--no-experimental-webstorage` worker option)\n* ⚠️ `graphify update .` (`graphify` is not installed in the environment)","repo_file_citation",130,136,96,116,"\n* Made language tests require a successful persistence response and verify the selected language survives a full SPA reload. ",48,63,"\n* Made maximum-range report timing assertions match the requested `from` and `to` query parameters, preventing initial seven-day responses from satisfying the test. ",156,170,"\n* Strengthened the newer-login race test by reloading the SPA and confirming the durable refresh cookie still restores the Sales persona rather than the former Owner. ",965,987,163,178,"\n* Prevented a pending bootstrap refresh from overwriting a newer login’s refresh cookie by aborting it when explicit login begins, with a unit assertion verifying the abort signal. ",33,49,"### Summary\n\n* Closed the logout-race coverage gap by disabling the abort optimization in that scenario, ensuring the late refresh actually settles and exercises the `sessionGeneration` protection. ",{"_96":339,"_45":88,"_100":339,"_3308":3309,"_3310":3311,"_3312":3313,"_136":-5,"_123":3314},[87],"input_items",[3333,3334,3335],"external_post_config",{"_3315":3316,"_276":209,"_3317":318,"_287":-5,"_1766":270,"_3318":-5,"_3319":-5,"_3320":3321,"_3322":3323,"_3324":-5,"_3325":-5,"_3326":3327,"_3328":18,"_3329":62,"_3330":57,"_3331":18,"_3332":-5},"user_model_slug","slug",1785655447.507125,"installation_id",150444056,"pr_number","gitlab_service_account_project_id","review_trigger","comment_id",5156187585,"comment_type","issue","pr_write_guard_token","pending_pr_reaction_id","pending_comment_reaction_id",391563449,"comment_if_no_findings","comment_on_error","share_url","is_parallel_review","review_summary_id",{"_96":541,"_100":339,"_533":3346},{"_325":326,"_327":328,"_3343":332,"_3344":133,"_335":-5,"_96":3345},{"_96":3336,"_327":3337,"_169":3338,"_3339":3340,"_3341":3342},"pull_request_comment","## CodeQL / File data in outbound network request\n\nOutbound network request depends on [file data](1).\n\n[Show more details](https://github.com/mforce/cluckwork/security/code-scanning/120)","tools/simulation/ui/src/api.ts","side","RIGHT","line",39,"base_ref","head_ref","pull_request_info",[3347],{"_1746":49,"_49":3348},"@codex Round-1 review applied. Four reviewers ran (codex, two Claude agents, pi/glm-5.2); findings consolidated below with agreement counts. Fixes are in `7347cad` (distributed across the stack as `feat/277-e2e-smoke` → `feat/386-canary` → `chore/387-e2e-ci`, by merge rather than rebase — these branches are already pushed and force-pushing them is off the table).\n\n## Blocker — confirmed, fixed, and the credential rotated\n\n**Committed Playwright trace archives (3/4 reviewers).** Confirmed by extracting them: **36 occurrences of the Owner password in plaintext, 60 JWTs, 24 refresh-cookie entries** across four zips. Root cause: `.gitignore` listed `playwright-report/`, a trailing-slash pattern that is a literal directory name and never matched `playwright-report-canary/`, combined with `git add -A`.\n\nDone:\n- Files removed; ignore patterns are now globs (`playwright-report*/`, `test-results*/`, `blob-report*/`).\n- **Credentials rotated and verified dead.** I recovered the leaked password *from the committed trace itself* via git history and re-tested it: **401**. The new one: **200**. `bootstrap.sh --force` had silently failed first (`requires openssl on PATH` — this box is NixOS), so the first rotation attempt did nothing; caught by testing rather than assuming.\n- Worth flagging: **GitGuardian passed this PR.** Its scan does not look inside a zip.\n\nThe blobs remain in these branches' history. Purging needs a force-push, which I have not done — the credentials are throwaway, local-only and now rotated, so the exposure is inert, but the call is the owner's.\n\n## Vacuous assertions — all confirmed, all fixed\n\nEach of these would have stayed green with the guarantee removed:\n\n| Finding | Agreement | Fix |\n| --- | --- | --- |\n| Audit filter asserted `filtered <= all` — true for a filter that does nothing | 3/4 | Asserts every visible row carries the selected action |\n| `getByRole(\"row\")` counts the `` row, so a header-only table passed `not.toHaveCount(0)` | codex | `tbody tr` |\n| Dashboard test promised \"sales data\" and never looked at the sales panel | codex | Asserts the sales table has body rows |\n| PWA denylist probed with `fetch()`, which `navigateFallback` does not govern at all | codex | Real `page.goto()` navigations |\n| ReadOnly deep-link asserted a visible error, which a 500 also satisfies | codex | Captures the response and requires **403** |\n| Canary vitals recorded but never validated — deleting every observer gave all-nulls and green | codex | Asserts the instrument collected something |\n\n**The audit fix needed a second pass.** My first version asserted a strict row-count drop; it passed alone and failed **intermittently** in a full run, because the audit log paginates *and* the other specs write to it while it runs. The count comparison is gone — \"every row matches the selected action\" is page-size- and growth-independent. Verified stable over three consecutive full runs.\n\n## Mutation harness — two real defects in my own harness\n\n- **`KILLED` was awarded to any failure, including a crash** (codex + pi). An uncaught `TypeError` reports as `1 failed` exactly like a failed expectation, so the check that claimed to exclude crashes did not. Now requires an assertion-shaped failure; anything else is `INCONCLUSIVE` and **counts as survived**.\n- **`mutants.ts` claimed nav-gate coverage via \"spec-level vacuity mutants\" that did not exist** (3/4). That comment was actively hiding the gap it described. Three mutants added: `nav-role-gate-bypassed`, `payment-never-settles`, `export-returns-nothing`.\n\nThe nav mutant **survived on its first run**, and the harness reporting that is the point: forging the login token is not enough, because the SPA's bootstrap refresh replaces it before the nav renders. Fixed by forging both, and the reasoning is now in the file.\n\n```\nbaseline : GREEN\nkilled : 10 survived : 0\nrestore : GREEN\n```\n\n## Security, beyond the blocker\n\n- **`reset.sh` echoed `bootstrap-admin`'s one-time password** (codex). Unmasked in every CI log of the new workflow. Redacted at the source, so local runs stop printing it too.\n- **Trace archives were being uploaded as a CI artifact** (codex). Same leak as committing them, through a different door. The workflow now strips every `*.zip` before upload and prints what remains; retention cut to 7 days.\n\n## Prose corrected where it claimed more than the code delivered\n\n`mutants.ts` (coverage that did not exist), `browser.ts` (claimed the canary records the browser version — it does not, and that gap is now stated), `vitals.ts` (called a pre-finalisation LCP read \"exact\"), `README.md` (omitted the `CLUCKWORK_E2E_BUNDLED_BROWSER` short-circuit from the resolution order).\n\n## Declined, with reasons\n\n- **\"Worker spec is not re-runnable\" (pi).** Checked rather than accepted: `RecordDailyEntry` is an upsert on `(account, farm, house, flock, date)`, and the spec saves a draft and never submits — so a second run updates the same row. Verified by repeated consecutive runs. The real defect was that this was undocumented, which is fixed.\n- **\"Sales spec exhausts stock\" (2/4).** Real but not fixable here without isolated inventory. Documented in the spec with the symptom and the remedy (`reset.sh`), matching how `manager.spec.ts` already treats its own fixture growth.\n\n## Still open — carried, not silently dropped\n\nThese are codex findings I have **not** fixed, listed so they are visible rather than buried:\n\n1. `session-races.spec.ts` — logout aborts the held refresh via `AbortController`, so the \"late response\" may never settle; the test could pass without the `sessionGeneration` guard.\n2. `session-races.spec.ts` — \"newer login wins\" is asserted only against the in-memory token; a late `Set-Cookie` could still restore Owner after a reload.\n3. `reports-range.spec.ts` — `timings` includes the initial 7-day requests, so removing refetch-on-date-change may leave it green.\n4. `i18n.spec.ts` — assertions observe the optimistic local `changeLanguage`; deleting `PUT /me/language` would leave them green despite the durable-preference claim.\n5. `run-baseline.sh` — a stale canary vitals directory from another commit is folded into any baseline and described as the same window; needs run/commit stamping.\n6. `run-canary.sh` — k6 liveness is only checked during the initial 45s wait, so later screens could run quietly while still labelled \"under load\".\n7. `logout-not-honoured` mutant is killed by the cookie never clearing, not by the stale-refresh guarantee it is mapped to.\n\n(1)–(4) are further vacuous-assertion candidates and are the ones I would take next.\n",[4254,4255,4256],[],{"_1751":1752,"_49":1753,"_1754":1755},{"_1725":4245},{"_349":4244},{"_349":3388},{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":3387,"_341":342,"_343":344,"_345":346,"_347":35},{"_45":127,"_206":207,"_208":209,"_210":18,"_211":212,"_213":214,"_215":3376,"_217":-5,"_218":219,"_220":18,"_221":3377,"_223":212,"_224":212,"_225":3378,"_227":3379,"_229":3380,"_231":-5,"_232":233,"_234":235,"_236":237,"_238":3381,"_58":-5,"_123":240,"_241":3382,"_243":3383,"_245":246,"_247":18,"_248":18},{"_137":3369},[3359,3360,3361,3362,3363,3364,3365,3366,3367,3368],{"_156":184,"_158":159,"_160":161,"_162":163,"_164":185,"_166":167,"_168":35,"_169":-5},{"_156":183,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":181,"_158":159,"_160":161,"_162":163,"_164":182,"_166":167,"_168":35,"_169":-5},{"_156":179,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":178,"_158":174,"_160":175,"_162":163,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":173,"_158":174,"_160":175,"_162":176,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":172,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":171,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":170,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":157,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},[3370,3371,3372],{"_190":3375,"_192":203},{"_190":3374,"_192":199},{"_190":3373,"_192":193},{"_194":195,"_96":196,"_123":197},{"_194":200,"_96":196,"_123":201},{"_194":204,"_96":196,"_123":205},{"_310":311,"_312":-5,"_313":-5,"_314":-5,"_315":-5,"_316":-5},[270],{"_270":3384},{"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},{},[],{"_251":62},{"_249":62,"_250":212},{"_45":272,"_194":273,"_274":3385,"_276":209,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":67,"_288":18,"_289":-5,"_290":-5,"_291":-5,"_292":-5,"_293":-5,"_294":-5,"_168":295,"_296":-5,"_58":3386},{"_302":303,"_45":304,"_96":305,"_306":307,"_308":309},{"_298":18,"_299":18,"_300":18,"_301":18},{"_302":303,"_194":303,"_348":-5,"_306":307,"_45":304},[3389,3390,3391,3392,3393,3394,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,3428,3429,3430,3431,3432,3433,3434,3435,3436,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,3450,3451,3452,3453,3454,3455,3456,3457,3458,3459,3460,3461,3462,3463,3464,3465,3466,3467,3468,3469,3470,3471,3472,3473,3474,3475,3476,3477,3478,3479,3480,3481,3482,3483,3484,3485,3486,3487,3488,3489,3490,3491,3492,3493,3494,3495,3496,3497,3498,3499,3500,3501,3502,3503,3504,3505,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,3516,3517,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3529,3530,3531,3532,3533,3534,3535,3536,3537,3538,3539,3540,3541,3542,3543],{"_162":1697,"_507":4240},{"_162":524,"_507":4237},{"_162":1687,"_507":4234},{"_162":528,"_507":4228},{"_162":528,"_507":4223},{"_162":528,"_507":4218},{"_162":528,"_507":4212},{"_162":528,"_507":4207},{"_162":546,"_507":4202},{"_162":546,"_507":4198},{"_162":528,"_507":4193},{"_162":528,"_507":4190},{"_162":546,"_507":4186},{"_162":528,"_507":4179},{"_162":546,"_507":4175},{"_162":528,"_507":4170},{"_162":528,"_507":4167},{"_162":546,"_507":4159},{"_162":528,"_507":4152},{"_162":546,"_507":4148},{"_162":528,"_507":4143},{"_162":528,"_507":4140},{"_162":546,"_507":4136},{"_162":528,"_507":4129},{"_162":528,"_507":4126},{"_162":546,"_507":4119},{"_162":528,"_507":4112},{"_162":546,"_507":4108},{"_162":528,"_507":4103},{"_162":528,"_507":4100},{"_162":546,"_507":4093},{"_162":528,"_507":4086},{"_162":546,"_507":4082},{"_162":528,"_507":4075},{"_162":546,"_507":4071},{"_162":528,"_507":4065},{"_162":528,"_507":4062},{"_162":546,"_507":4056},{"_162":528,"_507":4049},{"_162":546,"_507":4045},{"_162":528,"_507":4038},{"_162":528,"_507":4035},{"_162":546,"_507":4024},{"_162":528,"_507":4017},{"_162":546,"_507":4013},{"_162":528,"_507":4008},{"_162":528,"_507":4005},{"_162":528,"_507":3998},{"_162":546,"_507":3994},{"_162":546,"_507":3990},{"_162":528,"_507":3985},{"_162":528,"_507":3982},{"_162":528,"_507":3975},{"_162":546,"_507":3971},{"_162":546,"_507":3967},{"_162":528,"_507":3962},{"_162":528,"_507":3959},{"_162":546,"_507":3955},{"_162":528,"_507":3948},{"_162":546,"_507":3944},{"_162":528,"_507":3939},{"_162":528,"_507":3936},{"_162":528,"_507":3933},{"_162":546,"_507":3929},{"_162":528,"_507":3924},{"_162":528,"_507":3921},{"_162":528,"_507":3918},{"_162":528,"_507":3915},{"_162":528,"_507":3912},{"_162":528,"_507":3909},{"_162":528,"_507":3906},{"_162":546,"_507":3902},{"_162":528,"_507":3897},{"_162":528,"_507":3894},{"_162":528,"_507":3891},{"_162":528,"_507":3888},{"_162":528,"_507":3885},{"_162":546,"_507":3881},{"_162":528,"_507":3877},{"_162":528,"_507":3874},{"_162":528,"_507":3867},{"_162":546,"_507":3863},{"_162":528,"_507":3858},{"_162":528,"_507":3855},{"_162":546,"_507":3851},{"_162":528,"_507":3844},{"_162":546,"_507":3840},{"_162":528,"_507":3835},{"_162":528,"_507":3832},{"_162":546,"_507":3827},{"_162":528,"_507":3820},{"_162":546,"_507":3816},{"_162":528,"_507":3811},{"_162":528,"_507":3808},{"_162":546,"_507":3803},{"_162":528,"_507":3796},{"_162":546,"_507":3792},{"_162":546,"_507":3788},{"_162":528,"_507":3783},{"_162":528,"_507":3780},{"_162":528,"_507":3777},{"_162":528,"_507":3774},{"_162":528,"_507":3771},{"_162":528,"_507":3768},{"_162":528,"_507":3765},{"_162":528,"_507":3762},{"_162":528,"_507":3755},{"_162":546,"_507":3751},{"_162":528,"_507":3746},{"_162":528,"_507":3743},{"_162":528,"_507":3740},{"_162":546,"_507":3736},{"_162":528,"_507":3733},{"_162":528,"_507":3726},{"_162":546,"_507":3722},{"_162":528,"_507":3718},{"_162":528,"_507":3715},{"_162":546,"_507":3710},{"_162":528,"_507":3703},{"_162":528,"_507":3700},{"_162":528,"_507":3697},{"_162":546,"_507":3693},{"_162":546,"_507":3689},{"_162":528,"_507":3686},{"_162":528,"_507":3679},{"_162":546,"_507":3675},{"_162":528,"_507":3670},{"_162":528,"_507":3667},{"_162":546,"_507":3663},{"_162":528,"_507":3656},{"_162":546,"_507":3652},{"_162":528,"_507":3647},{"_162":528,"_507":3644},{"_162":528,"_507":3637},{"_162":546,"_507":3633},{"_162":528,"_507":3628},{"_162":528,"_507":3625},{"_162":546,"_507":3621},{"_162":528,"_507":3614},{"_162":546,"_507":3610},{"_162":528,"_507":3605},{"_162":528,"_507":3602},{"_162":546,"_507":3595},{"_162":528,"_507":3588},{"_162":546,"_507":3584},{"_162":528,"_507":3579},{"_162":528,"_507":3576},{"_162":546,"_507":3572},{"_162":528,"_507":3565},{"_162":546,"_507":3561},{"_162":528,"_507":3556},{"_162":546,"_507":3554},{"_162":528,"_507":3549},{"_162":524,"_507":3547},{"_162":506,"_507":3544},{"_509":510,"_91":3545},{"_512":513,"_514":515,"_107":-5,"_45":516,"_517":3546,"_519":520,"_521":522,"_523":117},[],{"_523":3548,"_509":510},{"_96":527},{"_530":3550,"_509":510,"_532":516},{"_533":3551,"_535":-5,"_45":536,"_537":3552,"_539":540,"_100":97,"_96":541},[3553],{"_542":516},{"_49":544,"_96":545},{"_548":549,"_530":3555,"_509":510,"_532":516},{"_45":536,"_539":540,"_49":544,"_96":551},{"_530":3557,"_509":510,"_532":516},{"_533":-5,"_554":555,"_45":556,"_537":3558,"_558":3559,"_96":560},{"_542":516},[3560],{"_49":562,"_96":563},{"_548":565,"_530":3562,"_509":510,"_532":516},{"_533":3563,"_45":556,"_558":3564,"_96":560},[],[562],{"_530":3566,"_509":510,"_532":516},{"_571":572,"_45":-5,"_537":3567,"_194":-5,"_574":3568,"_96":576},{"_542":516},{"_327":3569,"_578":-5},[3570,3571],{"_49":583,"_96":582},{"_49":581,"_96":582},{"_548":585,"_530":3573,"_509":510,"_532":516},{"_587":581,"_588":589,"_590":3574,"_592":593,"_514":35,"_594":35,"_45":595,"_596":597,"_598":599,"_523":117,"_96":600},[3575],{"_588":602,"_96":603},{"_530":3577,"_509":510,"_532":516},{"_571":572,"_45":606,"_607":608,"_537":3578,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3580,"_509":510,"_532":516},{"_533":-5,"_554":615,"_45":616,"_537":3581,"_558":3582,"_96":560},{"_542":516},[3583],{"_49":620,"_96":563},{"_548":622,"_530":3585,"_509":510,"_532":516},{"_533":3586,"_45":616,"_558":3587,"_96":560},[],[620],{"_530":3589,"_509":510,"_532":516},{"_571":628,"_45":-5,"_537":3590,"_194":-5,"_574":3591,"_96":576},{"_542":516},{"_327":3592,"_578":-5},[3593,3594],{"_49":635,"_96":582},{"_49":634,"_96":582},{"_548":637,"_530":3596,"_509":510,"_532":516},{"_639":-5,"_640":3597,"_514":642,"_107":-5,"_45":643,"_644":-5,"_645":-5,"_646":-5,"_647":3598,"_649":650,"_523":117,"_651":650,"_96":652},{"_325":657,"_327":658},{"_653":-5,"_533":3599,"_655":3600},[3601],{"_325":657,"_327":658},{"_96":49,"_49":634},{"_530":3603,"_509":510,"_532":516},{"_571":628,"_45":662,"_607":663,"_537":3604,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3606,"_509":510,"_532":516},{"_533":-5,"_554":667,"_45":668,"_537":3607,"_558":3608,"_96":560},{"_542":516},[3609],{"_49":672,"_96":563},{"_548":674,"_530":3611,"_509":510,"_532":516},{"_533":3612,"_45":668,"_558":3613,"_96":560},[],[672],{"_530":3615,"_509":510,"_532":516},{"_571":680,"_45":-5,"_537":3616,"_194":-5,"_574":3617,"_96":576},{"_542":516},{"_327":3618,"_578":-5},[3619,3620],{"_49":583,"_96":582},{"_49":686,"_96":582},{"_548":688,"_530":3622,"_509":510,"_532":516},{"_587":686,"_588":690,"_590":3623,"_592":593,"_514":35,"_594":35,"_45":692,"_596":693,"_598":599,"_523":117,"_96":600},[3624],{"_588":695,"_96":603},{"_530":3626,"_509":510,"_532":516},{"_571":680,"_45":698,"_607":699,"_537":3627,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3629,"_509":510,"_532":516},{"_533":-5,"_554":703,"_45":704,"_537":3630,"_558":3631,"_96":560},{"_542":516},[3632],{"_49":708,"_96":563},{"_548":710,"_530":3634,"_509":510,"_532":516},{"_533":3635,"_45":704,"_558":3636,"_96":560},[],[708],{"_530":3638,"_509":510,"_532":516},{"_571":716,"_45":-5,"_537":3639,"_194":-5,"_574":3640,"_96":576},{"_542":516},{"_327":3641,"_578":-5},[3642,3643],{"_49":723,"_96":582},{"_49":722,"_96":582},{"_530":3645,"_509":510,"_532":516},{"_571":716,"_45":726,"_607":727,"_537":3646,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3648,"_509":510,"_532":516},{"_533":-5,"_554":731,"_45":732,"_537":3649,"_558":3650,"_96":560},{"_542":516},[3651],{"_49":736,"_96":563},{"_548":738,"_530":3653,"_509":510,"_532":516},{"_533":3654,"_45":732,"_558":3655,"_96":560},[],[736],{"_530":3657,"_509":510,"_532":516},{"_571":744,"_45":-5,"_537":3658,"_194":-5,"_574":3659,"_96":576},{"_542":516},{"_327":3660,"_578":-5},[3661,3662],{"_49":583,"_96":582},{"_49":750,"_96":582},{"_548":752,"_530":3664,"_509":510,"_532":516},{"_587":750,"_588":754,"_590":3665,"_592":593,"_514":35,"_594":35,"_45":756,"_596":757,"_598":599,"_523":117,"_96":600},[3666],{"_588":759,"_96":603},{"_530":3668,"_509":510,"_532":516},{"_571":744,"_45":762,"_607":763,"_537":3669,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3671,"_509":510,"_532":516},{"_533":-5,"_554":767,"_45":768,"_537":3672,"_558":3673,"_96":560},{"_542":516},[3674],{"_49":772,"_96":563},{"_548":774,"_530":3676,"_509":510,"_532":516},{"_533":3677,"_45":768,"_558":3678,"_96":560},[],[772],{"_530":3680,"_509":510,"_532":516},{"_571":780,"_45":-5,"_537":3681,"_574":3682,"_96":783},{"_542":516},{"_327":3683,"_578":-5},[3684,3685],{"_49":723,"_96":582},{"_49":787,"_96":582},{"_530":3687,"_509":510,"_532":516},{"_640":790,"_571":780,"_45":791,"_537":3688,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_548":796,"_530":3690,"_509":510,"_532":516},{"_587":798,"_588":799,"_590":3691,"_592":801,"_514":802,"_594":803,"_45":804,"_596":805,"_598":599,"_523":806,"_96":600},[3692],{"_588":808,"_96":603},{"_548":810,"_530":3694,"_509":510,"_532":516},{"_587":787,"_588":812,"_590":3695,"_592":801,"_514":814,"_594":35,"_45":815,"_596":816,"_598":599,"_523":117,"_96":600},[3696],{"_588":818,"_96":603},{"_530":3698,"_509":510,"_532":516},{"_571":821,"_45":-5,"_537":3699,"_194":-5,"_574":823,"_96":576},{"_542":516},{"_530":3701,"_509":510,"_532":516},{"_571":821,"_45":826,"_607":827,"_537":3702,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3704,"_509":510,"_532":516},{"_571":831,"_45":-5,"_537":3705,"_194":-5,"_574":3706,"_96":576},{"_542":516},{"_327":3707,"_578":-5},[3708,3709],{"_49":635,"_96":582},{"_49":837,"_96":582},{"_548":839,"_530":3711,"_509":510,"_532":516},{"_841":3712,"_45":843,"_523":117,"_96":844},[3713],{"_338":846,"_9":3714,"_169":848},{"_849":-5,"_96":850},{"_530":3716,"_509":510,"_532":516},{"_571":831,"_45":853,"_607":854,"_537":3717,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3719,"_509":510,"_532":516},{"_533":-5,"_554":858,"_45":859,"_537":3720,"_558":3721,"_96":560},{"_542":516},[],{"_548":863,"_530":3723,"_509":510,"_532":516},{"_533":3724,"_45":859,"_558":3725,"_96":560},[],[],{"_530":3727,"_509":510,"_532":516},{"_571":869,"_45":-5,"_537":3728,"_574":3729,"_96":783},{"_542":516},{"_327":3730,"_578":-5},[3731,3732],{"_49":723,"_96":582},{"_49":875,"_96":582},{"_530":3734,"_509":510,"_532":516},{"_640":878,"_571":869,"_45":879,"_537":3735,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_548":882,"_530":3737,"_509":510,"_532":516},{"_587":875,"_588":884,"_590":3738,"_592":801,"_514":886,"_594":803,"_45":887,"_596":888,"_598":599,"_523":806,"_96":600},[3739],{"_588":890,"_96":603},{"_530":3741,"_509":510,"_532":516},{"_571":893,"_45":-5,"_537":3742,"_194":-5,"_574":895,"_96":576},{"_542":516},{"_530":3744,"_509":510,"_532":516},{"_571":893,"_45":898,"_607":899,"_537":3745,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3747,"_509":510,"_532":516},{"_533":-5,"_554":903,"_45":904,"_537":3748,"_558":3749,"_96":560},{"_542":516},[3750],{"_49":908,"_96":563},{"_548":910,"_530":3752,"_509":510,"_532":516},{"_533":3753,"_45":904,"_558":3754,"_96":560},[],[908],{"_530":3756,"_509":510,"_532":516},{"_571":916,"_45":-5,"_537":3757,"_574":3758,"_96":783},{"_542":516},{"_327":3759,"_578":-5},[3760,3761],{"_49":922,"_96":582},{"_49":798,"_96":582},{"_530":3763,"_509":510,"_532":516},{"_640":925,"_571":916,"_45":926,"_537":3764,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3766,"_509":510,"_532":516},{"_571":930,"_45":-5,"_537":3767,"_574":932,"_96":783},{"_542":516},{"_530":3769,"_509":510,"_532":516},{"_640":925,"_571":930,"_45":935,"_537":3770,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3772,"_509":510,"_532":516},{"_571":939,"_45":-5,"_537":3773,"_574":941,"_96":783},{"_542":516},{"_530":3775,"_509":510,"_532":516},{"_640":944,"_571":939,"_45":945,"_537":3776,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3778,"_509":510,"_532":516},{"_571":949,"_45":-5,"_537":3779,"_194":-5,"_574":932,"_96":576},{"_542":516},{"_530":3781,"_509":510,"_532":516},{"_571":949,"_45":953,"_607":954,"_537":3782,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3784,"_509":510,"_532":516},{"_533":-5,"_554":958,"_45":959,"_537":3785,"_558":3786,"_96":560},{"_542":516},[3787],{"_49":963,"_96":563},{"_548":965,"_530":3789,"_509":510,"_532":516},{"_533":3790,"_45":959,"_558":3791,"_96":560},[],[963],{"_548":970,"_530":3793,"_509":510,"_532":516},{"_587":972,"_588":973,"_590":3794,"_592":801,"_514":975,"_594":803,"_45":976,"_596":977,"_598":599,"_523":806,"_96":600},[3795],{"_588":979,"_96":603},{"_530":3797,"_509":510,"_532":516},{"_571":982,"_45":-5,"_537":3798,"_194":-5,"_574":3799,"_96":576},{"_542":516},{"_327":3800,"_578":-5},[3801,3802],{"_49":635,"_96":582},{"_49":837,"_96":582},{"_548":989,"_530":3804,"_509":510,"_532":516},{"_841":3805,"_45":992,"_523":117,"_96":844},[3806],{"_338":994,"_9":3807,"_169":848},{"_849":-5,"_96":850},{"_530":3809,"_509":510,"_532":516},{"_571":982,"_45":998,"_607":999,"_537":3810,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3812,"_509":510,"_532":516},{"_533":-5,"_554":1003,"_45":1004,"_537":3813,"_558":3814,"_96":560},{"_542":516},[3815],{"_49":1008,"_96":563},{"_548":1010,"_530":3817,"_509":510,"_532":516},{"_533":3818,"_45":1004,"_558":3819,"_96":560},[],[1008],{"_530":3821,"_509":510,"_532":516},{"_571":1016,"_45":-5,"_537":3822,"_194":-5,"_574":3823,"_96":576},{"_542":516},{"_327":3824,"_578":-5},[3825,3826],{"_49":583,"_96":582},{"_49":1022,"_96":582},{"_548":1024,"_530":3828,"_509":510,"_532":516},{"_587":1022,"_588":1026,"_590":3829,"_592":593,"_514":35,"_594":35,"_45":1028,"_596":1029,"_598":599,"_523":117,"_96":600},[3830,3831],{"_588":1035,"_194":1033,"_169":848,"_96":1034},{"_588":1032,"_194":1033,"_169":848,"_96":1034},{"_530":3833,"_509":510,"_532":516},{"_571":1016,"_45":1038,"_607":1039,"_537":3834,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3836,"_509":510,"_532":516},{"_533":-5,"_554":1043,"_45":1044,"_537":3837,"_558":3838,"_96":560},{"_542":516},[3839],{"_49":1048,"_96":563},{"_548":1050,"_530":3841,"_509":510,"_532":516},{"_533":3842,"_45":1044,"_558":3843,"_96":560},[],[1048],{"_530":3845,"_509":510,"_532":516},{"_571":1056,"_45":-5,"_537":3846,"_194":-5,"_574":3847,"_96":576},{"_542":516},{"_327":3848,"_578":-5},[3849,3850],{"_49":583,"_96":582},{"_49":1062,"_96":582},{"_548":1064,"_530":3852,"_509":510,"_532":516},{"_587":1062,"_588":1066,"_590":3853,"_592":593,"_514":35,"_594":35,"_45":1068,"_596":1069,"_598":599,"_523":117,"_96":600},[3854],{"_588":1071,"_96":603},{"_530":3856,"_509":510,"_532":516},{"_571":1056,"_45":1074,"_607":1075,"_537":3857,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3859,"_509":510,"_532":516},{"_533":-5,"_554":1079,"_45":1080,"_537":3860,"_558":3861,"_96":560},{"_542":516},[3862],{"_49":1084,"_96":563},{"_548":1086,"_530":3864,"_509":510,"_532":516},{"_533":3865,"_45":1080,"_558":3866,"_96":560},[],[1084],{"_530":3868,"_509":510,"_532":516},{"_571":1092,"_45":-5,"_537":3869,"_574":3870,"_96":783},{"_542":516},{"_327":3871,"_578":-5},[3872,3873],{"_49":723,"_96":582},{"_49":972,"_96":582},{"_530":3875,"_509":510,"_532":516},{"_640":1100,"_571":1092,"_45":1101,"_537":3876,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3878,"_509":510,"_532":516},{"_533":-5,"_554":1105,"_45":1106,"_537":3879,"_558":3880,"_96":560},{"_542":516},[],{"_548":1110,"_530":3882,"_509":510,"_532":516},{"_533":3883,"_45":1106,"_558":3884,"_96":560},[],[],{"_530":3886,"_509":510,"_532":516},{"_571":1116,"_45":-5,"_537":3887,"_574":1118,"_96":783},{"_542":516},{"_530":3889,"_509":510,"_532":516},{"_640":1121,"_571":1116,"_45":1122,"_537":3890,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3892,"_509":510,"_532":516},{"_571":1126,"_45":-5,"_537":3893,"_574":1118,"_96":783},{"_542":516},{"_530":3895,"_509":510,"_532":516},{"_640":1121,"_571":1126,"_45":1130,"_537":3896,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3898,"_509":510,"_532":516},{"_533":-5,"_554":1134,"_45":1135,"_537":3899,"_558":3900,"_96":560},{"_542":516},[3901],{"_49":1139,"_96":563},{"_548":1141,"_530":3903,"_509":510,"_532":516},{"_533":3904,"_45":1135,"_558":3905,"_96":560},[],[1139],{"_530":3907,"_509":510,"_532":516},{"_571":1147,"_45":-5,"_537":3908,"_574":1118,"_96":783},{"_542":516},{"_530":3910,"_509":510,"_532":516},{"_640":1121,"_571":1147,"_45":1151,"_537":3911,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3913,"_509":510,"_532":516},{"_571":1155,"_45":-5,"_537":3914,"_574":1118,"_96":783},{"_542":516},{"_530":3916,"_509":510,"_532":516},{"_640":1121,"_571":1155,"_45":1159,"_537":3917,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3919,"_509":510,"_532":516},{"_571":1163,"_45":-5,"_537":3920,"_574":1118,"_96":783},{"_542":516},{"_530":3922,"_509":510,"_532":516},{"_640":1121,"_571":1163,"_45":1167,"_537":3923,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":3925,"_509":510,"_532":516},{"_533":-5,"_554":1171,"_45":1172,"_537":3926,"_558":3927,"_96":560},{"_542":516},[3928],{"_49":1176,"_96":563},{"_548":1178,"_530":3930,"_509":510,"_532":516},{"_533":3931,"_45":1172,"_558":3932,"_96":560},[],[1176],{"_530":3934,"_509":510,"_532":516},{"_571":1184,"_45":-5,"_537":3935,"_194":-5,"_574":1186,"_96":576},{"_542":516},{"_530":3937,"_509":510,"_532":516},{"_571":1184,"_45":1189,"_607":1190,"_537":3938,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3940,"_509":510,"_532":516},{"_533":-5,"_554":1194,"_45":1195,"_537":3941,"_558":3942,"_96":560},{"_542":516},[3943],{"_49":1199,"_96":563},{"_548":1201,"_530":3945,"_509":510,"_532":516},{"_533":3946,"_45":1195,"_558":3947,"_96":560},[],[1199],{"_530":3949,"_509":510,"_532":516},{"_571":1207,"_45":-5,"_537":3950,"_194":-5,"_574":3951,"_96":576},{"_542":516},{"_327":3952,"_578":-5},[3953,3954],{"_49":583,"_96":582},{"_49":1213,"_96":582},{"_548":1215,"_530":3956,"_509":510,"_532":516},{"_587":1213,"_588":1217,"_590":3957,"_592":593,"_514":35,"_594":1219,"_45":1220,"_596":1221,"_598":599,"_523":806,"_96":600},[3958],{"_588":1223,"_96":603},{"_530":3960,"_509":510,"_532":516},{"_571":1207,"_45":1226,"_607":1227,"_537":3961,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3963,"_509":510,"_532":516},{"_533":-5,"_554":1231,"_45":1232,"_537":3964,"_558":3965,"_96":560},{"_542":516},[3966],{"_49":1236,"_96":563},{"_548":1238,"_530":3968,"_509":510,"_532":516},{"_533":3969,"_45":1232,"_558":3970,"_96":560},[],[1236],{"_548":1243,"_530":3972,"_509":510,"_532":516},{"_587":1245,"_588":1246,"_590":3973,"_592":1248,"_514":1249,"_594":803,"_45":1250,"_596":1251,"_598":599,"_523":806,"_96":600},[3974],{"_588":1253,"_96":603},{"_530":3976,"_509":510,"_532":516},{"_571":1256,"_45":-5,"_537":3977,"_194":-5,"_574":3978,"_96":576},{"_542":516},{"_327":3979,"_578":-5},[3980,3981],{"_49":1262,"_96":582},{"_49":1245,"_96":582},{"_530":3983,"_509":510,"_532":516},{"_571":1256,"_45":1265,"_607":1266,"_537":3984,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":3986,"_509":510,"_532":516},{"_533":-5,"_554":1270,"_45":1271,"_537":3987,"_558":3988,"_96":560},{"_542":516},[3989],{"_49":1275,"_96":563},{"_548":1277,"_530":3991,"_509":510,"_532":516},{"_533":3992,"_45":1271,"_558":3993,"_96":560},[],[1275],{"_548":1282,"_530":3995,"_509":510,"_532":516},{"_587":1284,"_588":1285,"_590":3996,"_592":1248,"_514":1287,"_594":1288,"_45":1289,"_596":1290,"_598":599,"_523":806,"_96":600},[3997],{"_588":1292,"_96":603},{"_530":3999,"_509":510,"_532":516},{"_571":1295,"_45":-5,"_537":4000,"_194":-5,"_574":4001,"_96":576},{"_542":516},{"_327":4002,"_578":-5},[4003,4004],{"_49":1301,"_96":582},{"_49":1284,"_96":582},{"_530":4006,"_509":510,"_532":516},{"_571":1295,"_45":1304,"_607":1305,"_537":4007,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4009,"_509":510,"_532":516},{"_533":-5,"_554":1309,"_45":1310,"_537":4010,"_558":4011,"_96":560},{"_542":516},[4012],{"_49":1314,"_96":563},{"_548":1316,"_530":4014,"_509":510,"_532":516},{"_533":4015,"_45":1310,"_558":4016,"_96":560},[],[1314],{"_530":4018,"_509":510,"_532":516},{"_571":1322,"_45":-5,"_537":4019,"_194":-5,"_574":4020,"_96":576},{"_542":516},{"_327":4021,"_578":-5},[4022,4023],{"_49":635,"_96":582},{"_49":837,"_96":582},{"_548":1329,"_530":4025,"_509":510,"_532":516},{"_841":4026,"_45":1332,"_523":117,"_96":844},[4027,4028,4029,4030],{"_338":1346,"_9":4034,"_169":1348},{"_338":1343,"_9":4033,"_169":1345},{"_338":1340,"_9":4032,"_169":1342},{"_338":1337,"_9":4031,"_169":1339},{"_849":-5,"_96":850},{"_849":-5,"_96":850},{"_849":-5,"_96":850},{"_849":-5,"_96":850},{"_530":4036,"_509":510,"_532":516},{"_571":1322,"_45":1351,"_607":1352,"_537":4037,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4039,"_509":510,"_532":516},{"_533":-5,"_554":1356,"_45":1357,"_537":4040,"_558":4041,"_96":560},{"_542":516},[4042,4043,4044],{"_49":1365,"_96":563},{"_49":1364,"_96":563},{"_49":1363,"_96":563},{"_548":1367,"_530":4046,"_509":510,"_532":516},{"_533":4047,"_45":1357,"_558":4048,"_96":560},[],[1365,1364,1363],{"_530":4050,"_509":510,"_532":516},{"_571":1373,"_45":-5,"_537":4051,"_194":-5,"_574":4052,"_96":576},{"_542":516},{"_327":4053,"_578":-5},[4054,4055],{"_49":583,"_96":582},{"_49":1379,"_96":582},{"_548":1381,"_530":4057,"_509":510,"_532":516},{"_587":1379,"_588":1383,"_590":4058,"_592":593,"_514":35,"_594":35,"_45":1385,"_596":1386,"_598":599,"_523":117,"_96":600},[4059,4060,4061],{"_588":1398,"_194":1399,"_169":1400,"_96":1034},{"_588":1395,"_194":1396,"_169":1397,"_96":1034},{"_588":1390,"_169":1391,"_1392":1393,"_96":1394},{"_530":4063,"_509":510,"_532":516},{"_571":1373,"_45":1403,"_607":1404,"_537":4064,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4066,"_509":510,"_532":516},{"_533":-5,"_554":1408,"_45":1409,"_537":4067,"_558":4068,"_96":560},{"_542":516},[4069,4070],{"_49":1415,"_96":563},{"_49":1414,"_96":563},{"_548":1417,"_530":4072,"_509":510,"_532":516},{"_533":4073,"_45":1409,"_558":4074,"_96":560},[],[1415,1414],{"_530":4076,"_509":510,"_532":516},{"_533":-5,"_554":1423,"_45":1424,"_537":4077,"_558":4078,"_96":560},{"_542":516},[4079,4080,4081],{"_49":1432,"_96":563},{"_49":1431,"_96":563},{"_49":1430,"_96":563},{"_548":1434,"_530":4083,"_509":510,"_532":516},{"_533":4084,"_45":1424,"_558":4085,"_96":560},[],[1432,1431,1430],{"_530":4087,"_509":510,"_532":516},{"_571":1440,"_45":-5,"_537":4088,"_194":-5,"_574":4089,"_96":576},{"_542":516},{"_327":4090,"_578":-5},[4091,4092],{"_49":583,"_96":582},{"_49":1446,"_96":582},{"_548":1448,"_530":4094,"_509":510,"_532":516},{"_587":1446,"_588":1450,"_590":4095,"_592":593,"_514":803,"_594":35,"_45":1452,"_596":1453,"_598":599,"_523":117,"_96":600},[4096,4097,4098,4099],{"_588":1466,"_194":1391,"_169":1339,"_96":1034},{"_588":1463,"_194":1464,"_169":1465,"_96":1034},{"_588":1460,"_194":1461,"_169":1462,"_96":1034},{"_588":1458,"_169":1459,"_1392":294,"_96":1394},{"_530":4101,"_509":510,"_532":516},{"_571":1440,"_45":1469,"_607":1470,"_537":4102,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4104,"_509":510,"_532":516},{"_533":-5,"_554":1474,"_45":1475,"_537":4105,"_558":4106,"_96":560},{"_542":516},[4107],{"_49":1479,"_96":563},{"_548":1481,"_530":4109,"_509":510,"_532":516},{"_533":4110,"_45":1475,"_558":4111,"_96":560},[],[1479],{"_530":4113,"_509":510,"_532":516},{"_571":1487,"_45":-5,"_537":4114,"_194":-5,"_574":4115,"_96":576},{"_542":516},{"_327":4116,"_578":-5},[4117,4118],{"_49":583,"_96":582},{"_49":1493,"_96":582},{"_548":1495,"_530":4120,"_509":510,"_532":516},{"_587":1493,"_588":1497,"_590":4121,"_592":593,"_514":803,"_594":35,"_45":1499,"_596":1500,"_598":599,"_523":117,"_96":600},[4122,4123,4124,4125],{"_588":1512,"_194":1513,"_169":1342,"_96":1034},{"_588":1510,"_194":1511,"_169":1345,"_96":1034},{"_588":1508,"_194":1509,"_169":1348,"_96":1034},{"_588":1505,"_194":1506,"_169":1507,"_96":1034},{"_530":4127,"_509":510,"_532":516},{"_571":1487,"_45":1516,"_607":1517,"_537":4128,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4130,"_509":510,"_532":516},{"_571":1521,"_45":-5,"_537":4131,"_194":-5,"_574":4132,"_96":576},{"_542":516},{"_327":4133,"_578":-5},[4134,4135],{"_49":583,"_96":582},{"_49":1527,"_96":582},{"_548":1529,"_530":4137,"_509":510,"_532":516},{"_587":1527,"_588":1531,"_590":4138,"_592":593,"_514":35,"_594":35,"_45":1533,"_596":1534,"_598":599,"_523":117,"_96":600},[4139],{"_588":1536,"_96":603},{"_530":4141,"_509":510,"_532":516},{"_571":1521,"_45":1539,"_607":1540,"_537":4142,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4144,"_509":510,"_532":516},{"_533":-5,"_554":1544,"_45":1545,"_537":4145,"_558":4146,"_96":560},{"_542":516},[4147],{"_49":1549,"_96":563},{"_548":1551,"_530":4149,"_509":510,"_532":516},{"_533":4150,"_45":1545,"_558":4151,"_96":560},[],[1549],{"_530":4153,"_509":510,"_532":516},{"_571":1557,"_45":-5,"_537":4154,"_194":-5,"_574":4155,"_96":576},{"_542":516},{"_327":4156,"_578":-5},[4157,4158],{"_49":583,"_96":582},{"_49":1563,"_96":582},{"_548":1565,"_530":4160,"_509":510,"_532":516},{"_587":1567,"_588":1568,"_590":4161,"_592":593,"_514":1288,"_594":35,"_45":1570,"_596":1571,"_598":599,"_523":117,"_96":600},[4162,4163,4164,4165,4166],{"_588":1584,"_194":1585,"_169":1586,"_96":1034},{"_588":1582,"_194":1513,"_169":1583,"_96":1034},{"_588":1580,"_194":1511,"_169":1581,"_96":1034},{"_588":1578,"_194":1509,"_169":1579,"_96":1034},{"_588":1577,"_194":1399,"_169":1400,"_96":1034},{"_530":4168,"_509":510,"_532":516},{"_571":1557,"_45":1589,"_607":1590,"_537":4169,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4171,"_509":510,"_532":516},{"_533":-5,"_554":1594,"_45":1595,"_537":4172,"_558":4173,"_96":560},{"_542":516},[4174],{"_49":1599,"_96":563},{"_548":1601,"_530":4176,"_509":510,"_532":516},{"_533":4177,"_45":1595,"_558":4178,"_96":560},[],[1599],{"_530":4180,"_509":510,"_532":516},{"_571":1607,"_45":-5,"_537":4181,"_194":-5,"_574":4182,"_96":576},{"_542":516},{"_327":4183,"_578":-5},[4184,4185],{"_49":1614,"_96":582},{"_49":1613,"_96":582},{"_548":1616,"_530":4187,"_509":510,"_532":516},{"_587":1613,"_588":1618,"_590":4188,"_592":593,"_514":35,"_594":35,"_45":1620,"_596":1621,"_598":599,"_523":117,"_96":600},[4189],{"_588":1623,"_96":603},{"_530":4191,"_509":510,"_532":516},{"_571":1607,"_45":1626,"_607":1627,"_537":4192,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4194,"_509":510,"_532":516},{"_533":-5,"_554":1631,"_45":1632,"_537":4195,"_558":4196,"_96":560},{"_542":516},[4197],{"_49":1636,"_96":563},{"_548":1638,"_530":4199,"_509":510,"_532":516},{"_533":4200,"_45":1632,"_558":4201,"_96":560},[],[1636],{"_548":1643,"_530":4203,"_509":510,"_532":516},{"_1645":-5,"_533":4204,"_45":1647,"_96":1648},[4205],{"_49":1650,"_1651":4206,"_96":49},[],{"_530":4208,"_509":510,"_532":516},{"_533":4209,"_535":-5,"_45":-5,"_537":4210,"_539":-5,"_100":339,"_96":541},[4211],{"_542":516},{"_49":1650,"_96":582},{"_530":4213,"_509":510,"_532":516},{"_533":4214,"_535":-5,"_45":-5,"_537":4215,"_539":-5,"_100":339,"_96":541},[4216,4217],{"_542":516},{"_49":1665,"_96":582},{"_49":1664,"_96":582},{"_530":4219,"_509":510,"_532":516},{"_533":4220,"_535":-5,"_45":-5,"_537":4221,"_539":-5,"_100":1670,"_96":541},[4222],{"_542":516},{"_49":1672,"_96":582},{"_530":4224,"_509":510,"_532":516},{"_533":4225,"_535":-5,"_45":-5,"_537":4226,"_539":-5,"_100":1670,"_96":541},[4227],{"_542":516},{"_49":1678,"_96":582},{"_530":4229,"_509":510,"_532":516},{"_533":4230,"_535":-5,"_45":-5,"_537":4231,"_539":-5,"_100":1670,"_96":541},[4232,4233],{"_542":516},{"_49":1686,"_96":582},{"_49":1685,"_96":582},{"_509":510,"_91":4235},{"_107":-5,"_45":516,"_517":4236,"_519":520,"_521":522,"_523":1691},[],{"_523":4238,"_509":510},{"_1694":4239,"_96":1696},[],{"_1699":4241},{"_1701":-5,"_1702":-5,"_1703":1704,"_1705":522,"_592":593,"_1706":18,"_1707":-5,"_1708":-5,"_1709":-5,"_1710":1711,"_45":510,"_1712":1713,"_194":-5,"_1714":-5,"_169":1715,"_1716":212,"_1717":522,"_1718":510,"_598":1719,"_523":4242,"_1721":-5,"_81":4243,"_1723":522},{"_96":527},[],[],[4246],{"_45":1728,"_1729":4247,"_1731":1732,"_1733":1732,"_533":4248,"_523":1735,"_535":-5,"_1736":35,"_1737":4249,"_1739":1740,"_1741":-5},{"_100":339,"_194":-5,"_1737":4253},{"_1746":49,"_1747":4252},{"_1742":4250},{"_1744":4251},[],[1749],{},{"_96":541,"_100":97,"_533":4281},{"_96":1784,"_1785":4260},{"_96":1759,"_1760":657,"_1761":1762,"_1763":4257,"_1765":-5},{"_96":1763,"_1766":593,"_132":133,"_1767":-5,"_338":1768,"_1769":4258,"_1771":1772,"_1773":1774,"_1775":1776,"_1777":1778,"_1779":4259},{"_1781":1782,"_1783":-5},[],[4261,4262,4263,4264,4265],{"_169":3155,"_1793":-5,"_1794":4278,"_1796":-5},{"_169":2729,"_1793":-5,"_1794":4275,"_1796":-5},{"_169":2043,"_1793":-5,"_1794":4272,"_1796":-5},{"_169":1929,"_1793":-5,"_1794":4269,"_1796":-5},{"_169":1792,"_1793":-5,"_1794":4266,"_1796":-5},[4267],{"_1798":803,"_1799":1800,"_533":4268,"_1802":62},[1803,1804,1805,1804,1806,1807,1808,1809,1810,1804,1811,1812,1813,1804,1814,1804,1815,1816,212,1817,1818,1819,212,1820,1821,1822,1823,1824,1825,1826,1827,1828,1829,1830,1831,1832,212,1820,1833,1834,1835,1836,1829,1837,212,1838,212,1839,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,1851,1852,1853,1854,1855,1856,1857,212,1858,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,212,1869,212,1870,1871,1872,1873,1874,1875,1876,212,1877,1878,1879,1880,1881,1882,1883,1884,1885,1886,212,1887,1888,1889,1890,1891,1892,1893,1894,1895,1896,212,1897,1898,1899,1900,1901,212,1902,1903,1904,1905,1906,1907,1892,1908,1909,1910,1895,212,1911,1912,1913,1901,1892,1914,1895,1915,1916,212,1917,1918,1919,1920,1921,1922,212,1923,1924,1925,1926,1927,1856,1857,1928],[4270],{"_1798":803,"_1799":1932,"_533":4271,"_1802":62},[1934,1804,1935,1804,1936,1804,1937,1804,1938,1939,1940,1941,1804,1942,1943,1944,1945,1946,1947,1948,1804,1949,1950,212,1951,1952,1953,1954,212,1955,1956,1957,1958,212,1959,212,1960,1961,1918,1919,1962,1963,1964,212,1965,1966,212,1967,1968,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1915,212,1982,1983,212,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,1994,212,1995,1996,1997,1998,1999,2000,2001,2002,2003,2004,2005,212,2006,2007,2008,2009,2010,212,2011,2012,2013,2014,2015,2016,2017,212,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,2030,2031,1915,2032,1857,212,2033,1964,212,1965,2034,2035,2036,212,1982,1993,1994,212,2037,2038,2001,2002,2039,2040,212,2041,2042,1857,1928],[4273],{"_1798":803,"_1799":2046,"_533":4274,"_1802":62},[2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,212,2069,2070,2071,2072,2073,212,2074,2075,212,2076,2077,2078,2079,1857,1832,212,2080,2081,2082,1832,212,2083,212,2084,2085,1832,212,2086,2087,1832,212,2088,2089,1832,212,2090,2091,2092,2093,2094,2095,1832,212,2096,2097,2098,212,2099,2100,2101,212,2102,2103,2104,2105,2106,2107,2108,2109,1928,212,2110,2111,2112,2113,2114,1928,212,2115,2116,2117,2118,2119,2120,2121,2122,2123,1857,212,2124,2125,2126,1857,1928,212,2127,2128,2129,2130,2131,2132,2133,2134,2135,1857,212,2136,2129,2137,2138,2139,2140,2141,2142,1857,1928,212,2143,2144,2145,2146,2147,212,2148,2149,2150,2151,1857,212,2152,2153,2154,2155,2156,2157,2151,1857,212,2158,2137,2159,2160,2150,2161,2162,2163,212,2164,2165,1857,212,2166,2167,2168,2169,2170,1857,1928,212,2171,2172,2173,2174,2175,1857,212,2176,2177,2178,2016,2179,2180,2181,2182,1857,212,2183,2184,2185,1857,212,2186,2187,2188,2177,2189,2190,2191,2192,2193,2194,2195,2196,2016,2179,2180,2197,2198,2199,2200,2201,2016,1857,212,2202,2177,2189,2190,2203,2204,2194,2195,2196,2016,2179,2180,2205,2206,1857,212,2207,2208,2177,2209,2016,2179,2180,2182,1857,1928,212,2210,2211,2137,2212,2213,2214,212,2140,2141,2215,212,2216,2217,2218,2219,2220,2221,2222,2223,2224,2225,2226,2227,2228,1857,212,2229,2137,2230,2213,2231,212,2232,2216,2233,2234,2235,2236,2237,2238,2239,2240,2241,1857,212,2242,2243,2244,2245,2246,2247,2248,2249,2250,1868,2251,2252,1915,212,2253,2254,2255,2256,212,2257,2258,2259,2227,1857,212,2260,2137,2261,2262,2263,2264,2265,2266,212,2267,2268,2269,2270,1857,1928,212,2271,2272,2137,2273,2274,212,2179,2180,2275,2276,2277,2132,2278,1857,212,2279,2137,2212,2280,2281,212,2179,2275,2282,2283,2134,2132,2278,1857,212,2284,2137,2212,2285,212,2179,2180,2275,2132,2278,1857,212,2286,2287,2288,2289,2137,2273,2290,212,2179,2180,2291,2292,2293,1857,212,2294,2137,2295,2296,2297,212,2298,2299,2300,2137,2301,2280,2302,2303,2304,1857,1928,212,2305,2306,2307,2308,2309,1857,212,2310,2311,2312,2313,2314,2315,2316,2317,2318,1857,212,2319,2307,2320,2321,1857,212,2322,2125,2323,2120,2324,2325,2326,1857,212,2327,2125,2323,2328,1857,212,2329,2330,2331,2332,2307,2333,2334,1857,212,2335,2307,2308,2336,1857,212,2337,2125,2338,2339,1857,212,2340,2341,2342,212,2343,212,2120,2344,2325,2345,2346,2347,2348,2349,2350,1857,212,2351,2341,2352,2309,1857,212,2353,2354,2355,2137,2356,2357,2358,212,2343,212,2359,2360,2361,2362,2363,2364,2365,1857,212,2366,2125,2367,2120,2368,2369,2370,1857,1928,212,2371,2372,2177,2373,2374,2375,2376,2016,2377,2378,2379,2380,1857,212,2381,2156,2382,2383,1857,212,2384,2137,2385,2213,2386,212,2387,2388,2215,2389,1857,212,2390,2129,2391,2392,2132,2134,2393,1857,1928,212,2394,2395,2129,2396,2397,2398,2399,2227,2120,2400,2401,1857,212,2402,2403,2125,2404,2405,2120,2406,2407,2408,2409,2278,1857,212,2410,2411,2412,2413,2414,2415,2416,2417,2418,2125,212,2404,212,2419,2278,1857,212,2420,2421,2422,2423,2129,2125,212,2404,212,2405,2424,1857,212,2425,2426,2427,2278,1857,212,2428,2129,2125,2429,2405,2430,1857,212,2431,2432,2433,2434,2435,212,2436,2437,2278,212,2438,2439,1857,212,2440,2441,2442,2435,2443,2429,2278,1857,212,2444,2445,2446,2447,2448,2449,2450,2417,2418,2443,212,2429,212,2278,2451,2452,2453,2454,1857,1928,212,2455,2456,2457,2458,2459,2460,2461,2462,2463,2464,212,2465,212,2466,2467,2468,2469,2470,2471,2472,2473,212,2474,2475,2476,2477,1857,212,2478,2479,212,2480,2481,1857,1928,212,2482,2483,2484,2485,2486,2487,2488,212,2489,212,2466,2490,2491,2492,2493,2494,1857,212,2495,2177,2496,212,2497,2180,2498,1857,212,2499,2500,2501,2502,2503,2504,2505,2506,2496,212,2507,212,2405,2508,2509,2510,2511,2512,2513,1857,212,2514,2515,2516,2517,2137,2518,2262,2519,212,2520,212,2494,2521,2134,1857,212,2522,2487,2523,2481,2513,1857,1928,212,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,1915,2537,1916,212,2538,2539,2540,2541,1916,212,2542,2543,2544,212,2545,2546,2547,212,2548,2549,2550,2016,212,2551,2552,212,2553,2509,212,2554,2555,212,2257,2556,2134,2557,2558,2559,2228,1857,212,2560,2543,2544,212,2561,2562,2563,212,2129,2549,2550,2016,212,2564,2565,212,2257,2134,1857,212,2566,2567,2568,2569,2137,2570,2571,212,2572,2573,212,2574,2304,2228,1857,212,2575,2576,1846,2577,2578,2579,2580,2581,2582,2583,2584,2585,2586,1883,212,2587,2588,212,2589,2590,2591,2592,2593,2594,1856,1857,212,2595,2596,2129,2549,2550,2016,212,2597,212,2257,2598,2228,1857,1928,212,2599,2600,2601,2602,2603,2129,2604,212,2573,212,2605,2227,1857,212,2606,2129,2607,2608,2609,2610,2611,1915,212,2612,2552,2134,212,2613,212,2614,2615,212,2616,2617,2618,2619,2620,2621,2622,2623,1857,212,2624,2129,2625,212,2397,212,2626,2227,1857,212,2627,2129,2607,2628,2629,2246,2630,2631,1868,2632,2611,1915,212,2633,2552,212,2634,2635,2227,2636,212,2637,2638,212,2639,2640,1857,212,2641,2642,2643,2644,2129,2607,2608,2609,2645,2646,2611,1915,212,2647,2648,2649,2552,212,2650,2651,212,2652,2653,212,2654,2655,2656,2657,2658,2659,2660,1857,212,2661,2662,2663,2664,2665,2666,2667,2608,2668,2669,2611,1915,212,2670,2671,2552,212,2404,2278,212,2672,2673,212,2674,1857,212,2675,2667,2457,212,2676,212,2476,1857,212,2677,2129,2678,2608,2679,2610,2611,1915,212,2680,2552,212,2681,212,2682,2683,2684,212,2278,2513,2685,2686,2623,1857,212,2687,2688,2689,2690,2691,2129,2607,2608,2609,2610,2611,1915,212,2692,2552,212,2404,2693,212,2653,2694,2695,1857,212,2696,2697,2698,2699,2607,2608,2700,2701,2702,2609,2632,2611,1915,212,2703,2552,212,2397,2704,212,2705,1857,212,2706,2607,2608,2702,2609,2610,2611,1915,212,2692,2552,212,2404,2693,212,2653,2694,2695,1857,212,2707,2708,2709,2607,2608,2710,2711,2712,2609,2632,2611,1915,212,2713,2552,212,2714,2704,212,2715,2716,1857,212,2717,2607,2608,2712,2609,2610,2611,1915,212,2718,2552,212,2404,2693,212,2719,2694,2695,1857,212,2720,2721,2722,2723,2129,2607,2608,2609,2632,2610,2611,1915,212,2724,2552,212,2714,2725,2726,212,2727,2728,1857,1928],[4276],{"_1798":803,"_1799":2732,"_533":4277,"_1802":62},[2734,2735,2736,2737,2738,212,2739,212,2740,2741,2742,2743,212,2744,2745,2746,2747,212,2748,2749,2750,2751,2752,2753,2754,2755,1916,1832,212,2756,2757,2758,2759,2760,1832,212,2761,2762,2763,2764,2765,2766,1832,212,2767,2768,2769,2770,2771,2772,2773,2774,2775,2776,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,2792,2793,2794,2795,1868,2796,2797,2798,1856,2799,2800,1916,2801,1832,212,2802,2803,2804,2805,2806,2807,1832,212,2808,2809,2810,2811,2812,2813,2814,1832,212,2815,2816,2817,2818,2819,2820,2821,2822,2823,2824,2825,212,2826,2827,2828,2829,1832,212,2830,212,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,212,2842,2843,2844,2845,1916,1832,212,2846,2847,2848,2849,2850,2851,1804,2852,2853,2854,2855,2856,2857,2770,2858,2859,2860,2861,2862,1916,1832,212,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2875,2876,2877,2878,1857,2879,2880,2881,2882,2883,2884,1916,2885,2886,1832,212,2887,2888,2889,2890,1804,2891,2892,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2882,2883,2884,1916,2885,2886,1832,212,2909,2910,2911,2912,2913,2914,2915,2916,1804,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,1832,212,2927,2928,2929,2930,2931,2932,2933,2934,2935,2936,2937,2938,2873,2939,2940,2941,2942,2114,2770,2943,2944,2945,2946,1987,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2016,2859,2960,2961,2962,2963,2964,1916,1832,212,2965,2966,2967,2968,2969,2970,2971,2972,2973,1804,2974,2975,2976,2977,2978,2979,212,2980,2981,2982,2983,2984,212,2985,2986,2987,2988,212,2989,2990,2991,2992,2993,2994,2995,2996,1915,2997,2998,2999,1832,212,3000,3001,3002,3003,3004,212,3005,3006,212,3007,3008,3009,2905,212,3010,3011,3012,3013,3014,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,3027,3028,3029,3030,3031,3032,3033,3034,3028,3035,3036,3037,1915,212,3038,1832,212,3039,3040,3041,3042,2770,3043,3044,2799,3045,1916,1832,212,3046,212,3047,3048,1832,212,3049,3050,3051,3052,1804,3053,3054,3055,3056,2816,3057,3058,3059,2819,3060,2877,3061,3062,1857,1832,212,3063,2816,3064,3058,3059,2819,3060,3065,3061,2878,1857,1832,212,3066,3067,3068,3069,3070,3071,2816,3072,3073,3058,2819,3060,3065,3074,3075,3076,3077,3078,1857,1832,212,3079,3060,3080,3081,1857,1832,212,3082,3083,3084,2816,3085,3086,2770,3087,2859,3088,1846,3089,3090,3091,3092,3093,3094,3095,3096,1868,3097,3098,3099,3100,1856,1916,1832,212,3101,2816,3102,3085,3103,2825,3104,2827,3105,3106,3107,3108,3109,2997,1832,212,3110,3086,2770,3111,2859,3088,1846,3089,3112,3091,3113,3114,3115,3093,3094,3116,3096,1868,3097,3098,3099,3100,1856,1916,1832,212,3117,3118,3119,3120,3121,3122,2770,3123,2859,3124,3125,3126,3127,3128,3129,3130,1916,1832,212,3131,3132,3133,3134,3135,3136,3137,3138,3139,3140,3141,3142,1832,212,3143,3144,3145,3146,3147,3148,3149,3150,3151,3152,3153,3154,1832],[4279],{"_1798":803,"_1799":3158,"_533":4280,"_1802":62},[3160,1804,3161,3162,3163,3164,3165,1804,3166,1804,3167,3168,3169,3170,3171,1804,3172,1804,3173,3174,3175,3176,3177,212,1951,3178,1954,212,3179,3180,212,3181,3182,1918,1919,3183,1920,3184,3185,3186,3187,3188,1915,1964,212,3189,3190,3191,3192,1915,212,3193,3194,3195,3196,3197,3198,3199,3200,1868,3201,3202,3203,3204,3205,1981,1915,212,3206,3207,3208,3209,212,3210,3211,3212,212,3213,3214,212,3215,3216,3217,1987,3218,3212,3219,3220,212,3221,3222,3223,3224,3225,3226,3227,3228,212,3229,3230,3231,2001,3232,3233,3234,1857,212,3235,1918,1919,3183,1920,3236,3237,3238,1964,212,3190,3191,3192,1915,212,3239,3240,3241,3242,3209,212,3243,3244,3245,3246,3247,3248,3249,3250,212,3219,3251,212,3252,3214,212,3253,3254,3255,3256,2001,3257,3258,2004,3259,3260,3261,212,3262,3263,3264,3265,212,3266,3267,3268,3269,3219,3251,3270,3259,3264,3265,1857,1928],[4282,4283,4284,4285,4286,4287,4288,4289,4290,4291,4292,4293,4294],{"_1746":49,"_49":3305},{"_1746":3286,"_169":3155,"_1798":3303,"_1799":3304},{"_1746":49,"_49":3302},{"_1746":3286,"_169":2729,"_1798":3300,"_1799":3301},{"_1746":3286,"_169":2043,"_1798":3298,"_1799":3299},{"_1746":49,"_49":3297},{"_1746":3286,"_169":3155,"_1798":3295,"_1799":3296},{"_1746":49,"_49":3294},{"_1746":3286,"_169":1929,"_1798":3292,"_1799":3293},{"_1746":49,"_49":3291},{"_1746":3286,"_169":1792,"_1798":3289,"_1799":3290},{"_1746":3286,"_169":1792,"_1798":3287,"_1799":3288},{"_1746":49,"_49":3285},[5200,5201,5202],[],{"_1751":1752,"_49":1753,"_1754":1755},{"_1725":5191},{"_349":5190},{"_349":4334},{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":4333,"_341":342,"_343":344,"_345":346,"_347":35},{"_45":127,"_206":207,"_208":209,"_210":18,"_211":212,"_213":214,"_215":4322,"_217":-5,"_218":219,"_220":18,"_221":4323,"_223":212,"_224":212,"_225":4324,"_227":4325,"_229":4326,"_231":-5,"_232":233,"_234":235,"_236":237,"_238":4327,"_58":-5,"_123":240,"_241":4328,"_243":4329,"_245":246,"_247":18,"_248":18},{"_137":4315},[4305,4306,4307,4308,4309,4310,4311,4312,4313,4314],{"_156":184,"_158":159,"_160":161,"_162":163,"_164":185,"_166":167,"_168":35,"_169":-5},{"_156":183,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":181,"_158":159,"_160":161,"_162":163,"_164":182,"_166":167,"_168":35,"_169":-5},{"_156":179,"_158":159,"_160":161,"_162":163,"_164":180,"_166":167,"_168":35,"_169":-5},{"_156":178,"_158":174,"_160":175,"_162":163,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":173,"_158":174,"_160":175,"_162":176,"_164":177,"_166":167,"_168":35,"_169":-5},{"_156":172,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":171,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":170,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},{"_156":157,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":35,"_169":-5},[4316,4317,4318],{"_190":4321,"_192":203},{"_190":4320,"_192":199},{"_190":4319,"_192":193},{"_194":195,"_96":196,"_123":197},{"_194":200,"_96":196,"_123":201},{"_194":204,"_96":196,"_123":205},{"_310":311,"_312":-5,"_313":-5,"_314":-5,"_315":-5,"_316":-5},[270],{"_270":4330},{"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},{},[],{"_251":62},{"_249":62,"_250":212},{"_45":272,"_194":273,"_274":4331,"_276":209,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":67,"_288":18,"_289":-5,"_290":-5,"_291":-5,"_292":-5,"_293":-5,"_294":-5,"_168":295,"_296":-5,"_58":4332},{"_302":303,"_45":304,"_96":305,"_306":307,"_308":309},{"_298":18,"_299":18,"_300":18,"_301":18},{"_302":303,"_194":303,"_348":-5,"_306":307,"_45":304},[4335,4336,4337,4338,4339,4340,4341,4342,4343,4344,4345,4346,4347,4348,4349,4350,4351,4352,4353,4354,4355,4356,4357,4358,4359,4360,4361,4362,4363,4364,4365,4366,4367,4368,4369,4370,4371,4372,4373,4374,4375,4376,4377,4378,4379,4380,4381,4382,4383,4384,4385,4386,4387,4388,4389,4390,4391,4392,4393,4394,4395,4396,4397,4398,4399,4400,4401,4402,4403,4404,4405,4406,4407,4408,4409,4410,4411,4412,4413,4414,4415,4416,4417,4418,4419,4420,4421,4422,4423,4424,4425,4426,4427,4428,4429,4430,4431,4432,4433,4434,4435,4436,4437,4438,4439,4440,4441,4442,4443,4444,4445,4446,4447,4448,4449,4450,4451,4452,4453,4454,4455,4456,4457,4458,4459,4460,4461,4462,4463,4464,4465,4466,4467,4468,4469,4470,4471,4472,4473,4474,4475,4476,4477,4478,4479,4480,4481,4482,4483,4484,4485,4486,4487,4488,4489],{"_162":1697,"_507":5186},{"_162":524,"_507":5183},{"_162":1687,"_507":5180},{"_162":528,"_507":5174},{"_162":528,"_507":5169},{"_162":528,"_507":5164},{"_162":528,"_507":5158},{"_162":528,"_507":5153},{"_162":546,"_507":5148},{"_162":546,"_507":5144},{"_162":528,"_507":5139},{"_162":528,"_507":5136},{"_162":546,"_507":5132},{"_162":528,"_507":5125},{"_162":546,"_507":5121},{"_162":528,"_507":5116},{"_162":528,"_507":5113},{"_162":546,"_507":5105},{"_162":528,"_507":5098},{"_162":546,"_507":5094},{"_162":528,"_507":5089},{"_162":528,"_507":5086},{"_162":546,"_507":5082},{"_162":528,"_507":5075},{"_162":528,"_507":5072},{"_162":546,"_507":5065},{"_162":528,"_507":5058},{"_162":546,"_507":5054},{"_162":528,"_507":5049},{"_162":528,"_507":5046},{"_162":546,"_507":5039},{"_162":528,"_507":5032},{"_162":546,"_507":5028},{"_162":528,"_507":5021},{"_162":546,"_507":5017},{"_162":528,"_507":5011},{"_162":528,"_507":5008},{"_162":546,"_507":5002},{"_162":528,"_507":4995},{"_162":546,"_507":4991},{"_162":528,"_507":4984},{"_162":528,"_507":4981},{"_162":546,"_507":4970},{"_162":528,"_507":4963},{"_162":546,"_507":4959},{"_162":528,"_507":4954},{"_162":528,"_507":4951},{"_162":528,"_507":4944},{"_162":546,"_507":4940},{"_162":546,"_507":4936},{"_162":528,"_507":4931},{"_162":528,"_507":4928},{"_162":528,"_507":4921},{"_162":546,"_507":4917},{"_162":546,"_507":4913},{"_162":528,"_507":4908},{"_162":528,"_507":4905},{"_162":546,"_507":4901},{"_162":528,"_507":4894},{"_162":546,"_507":4890},{"_162":528,"_507":4885},{"_162":528,"_507":4882},{"_162":528,"_507":4879},{"_162":546,"_507":4875},{"_162":528,"_507":4870},{"_162":528,"_507":4867},{"_162":528,"_507":4864},{"_162":528,"_507":4861},{"_162":528,"_507":4858},{"_162":528,"_507":4855},{"_162":528,"_507":4852},{"_162":546,"_507":4848},{"_162":528,"_507":4843},{"_162":528,"_507":4840},{"_162":528,"_507":4837},{"_162":528,"_507":4834},{"_162":528,"_507":4831},{"_162":546,"_507":4827},{"_162":528,"_507":4823},{"_162":528,"_507":4820},{"_162":528,"_507":4813},{"_162":546,"_507":4809},{"_162":528,"_507":4804},{"_162":528,"_507":4801},{"_162":546,"_507":4797},{"_162":528,"_507":4790},{"_162":546,"_507":4786},{"_162":528,"_507":4781},{"_162":528,"_507":4778},{"_162":546,"_507":4773},{"_162":528,"_507":4766},{"_162":546,"_507":4762},{"_162":528,"_507":4757},{"_162":528,"_507":4754},{"_162":546,"_507":4749},{"_162":528,"_507":4742},{"_162":546,"_507":4738},{"_162":546,"_507":4734},{"_162":528,"_507":4729},{"_162":528,"_507":4726},{"_162":528,"_507":4723},{"_162":528,"_507":4720},{"_162":528,"_507":4717},{"_162":528,"_507":4714},{"_162":528,"_507":4711},{"_162":528,"_507":4708},{"_162":528,"_507":4701},{"_162":546,"_507":4697},{"_162":528,"_507":4692},{"_162":528,"_507":4689},{"_162":528,"_507":4686},{"_162":546,"_507":4682},{"_162":528,"_507":4679},{"_162":528,"_507":4672},{"_162":546,"_507":4668},{"_162":528,"_507":4664},{"_162":528,"_507":4661},{"_162":546,"_507":4656},{"_162":528,"_507":4649},{"_162":528,"_507":4646},{"_162":528,"_507":4643},{"_162":546,"_507":4639},{"_162":546,"_507":4635},{"_162":528,"_507":4632},{"_162":528,"_507":4625},{"_162":546,"_507":4621},{"_162":528,"_507":4616},{"_162":528,"_507":4613},{"_162":546,"_507":4609},{"_162":528,"_507":4602},{"_162":546,"_507":4598},{"_162":528,"_507":4593},{"_162":528,"_507":4590},{"_162":528,"_507":4583},{"_162":546,"_507":4579},{"_162":528,"_507":4574},{"_162":528,"_507":4571},{"_162":546,"_507":4567},{"_162":528,"_507":4560},{"_162":546,"_507":4556},{"_162":528,"_507":4551},{"_162":528,"_507":4548},{"_162":546,"_507":4541},{"_162":528,"_507":4534},{"_162":546,"_507":4530},{"_162":528,"_507":4525},{"_162":528,"_507":4522},{"_162":546,"_507":4518},{"_162":528,"_507":4511},{"_162":546,"_507":4507},{"_162":528,"_507":4502},{"_162":546,"_507":4500},{"_162":528,"_507":4495},{"_162":524,"_507":4493},{"_162":506,"_507":4490},{"_509":510,"_91":4491},{"_512":513,"_514":515,"_107":-5,"_45":516,"_517":4492,"_519":520,"_521":522,"_523":117},[],{"_523":4494,"_509":510},{"_96":527},{"_530":4496,"_509":510,"_532":516},{"_533":4497,"_535":-5,"_45":536,"_537":4498,"_539":540,"_100":97,"_96":541},[4499],{"_542":516},{"_49":544,"_96":545},{"_548":549,"_530":4501,"_509":510,"_532":516},{"_45":536,"_539":540,"_49":544,"_96":551},{"_530":4503,"_509":510,"_532":516},{"_533":-5,"_554":555,"_45":556,"_537":4504,"_558":4505,"_96":560},{"_542":516},[4506],{"_49":562,"_96":563},{"_548":565,"_530":4508,"_509":510,"_532":516},{"_533":4509,"_45":556,"_558":4510,"_96":560},[],[562],{"_530":4512,"_509":510,"_532":516},{"_571":572,"_45":-5,"_537":4513,"_194":-5,"_574":4514,"_96":576},{"_542":516},{"_327":4515,"_578":-5},[4516,4517],{"_49":583,"_96":582},{"_49":581,"_96":582},{"_548":585,"_530":4519,"_509":510,"_532":516},{"_587":581,"_588":589,"_590":4520,"_592":593,"_514":35,"_594":35,"_45":595,"_596":597,"_598":599,"_523":117,"_96":600},[4521],{"_588":602,"_96":603},{"_530":4523,"_509":510,"_532":516},{"_571":572,"_45":606,"_607":608,"_537":4524,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4526,"_509":510,"_532":516},{"_533":-5,"_554":615,"_45":616,"_537":4527,"_558":4528,"_96":560},{"_542":516},[4529],{"_49":620,"_96":563},{"_548":622,"_530":4531,"_509":510,"_532":516},{"_533":4532,"_45":616,"_558":4533,"_96":560},[],[620],{"_530":4535,"_509":510,"_532":516},{"_571":628,"_45":-5,"_537":4536,"_194":-5,"_574":4537,"_96":576},{"_542":516},{"_327":4538,"_578":-5},[4539,4540],{"_49":635,"_96":582},{"_49":634,"_96":582},{"_548":637,"_530":4542,"_509":510,"_532":516},{"_639":-5,"_640":4543,"_514":642,"_107":-5,"_45":643,"_644":-5,"_645":-5,"_646":-5,"_647":4544,"_649":650,"_523":117,"_651":650,"_96":652},{"_325":657,"_327":658},{"_653":-5,"_533":4545,"_655":4546},[4547],{"_325":657,"_327":658},{"_96":49,"_49":634},{"_530":4549,"_509":510,"_532":516},{"_571":628,"_45":662,"_607":663,"_537":4550,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4552,"_509":510,"_532":516},{"_533":-5,"_554":667,"_45":668,"_537":4553,"_558":4554,"_96":560},{"_542":516},[4555],{"_49":672,"_96":563},{"_548":674,"_530":4557,"_509":510,"_532":516},{"_533":4558,"_45":668,"_558":4559,"_96":560},[],[672],{"_530":4561,"_509":510,"_532":516},{"_571":680,"_45":-5,"_537":4562,"_194":-5,"_574":4563,"_96":576},{"_542":516},{"_327":4564,"_578":-5},[4565,4566],{"_49":583,"_96":582},{"_49":686,"_96":582},{"_548":688,"_530":4568,"_509":510,"_532":516},{"_587":686,"_588":690,"_590":4569,"_592":593,"_514":35,"_594":35,"_45":692,"_596":693,"_598":599,"_523":117,"_96":600},[4570],{"_588":695,"_96":603},{"_530":4572,"_509":510,"_532":516},{"_571":680,"_45":698,"_607":699,"_537":4573,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4575,"_509":510,"_532":516},{"_533":-5,"_554":703,"_45":704,"_537":4576,"_558":4577,"_96":560},{"_542":516},[4578],{"_49":708,"_96":563},{"_548":710,"_530":4580,"_509":510,"_532":516},{"_533":4581,"_45":704,"_558":4582,"_96":560},[],[708],{"_530":4584,"_509":510,"_532":516},{"_571":716,"_45":-5,"_537":4585,"_194":-5,"_574":4586,"_96":576},{"_542":516},{"_327":4587,"_578":-5},[4588,4589],{"_49":723,"_96":582},{"_49":722,"_96":582},{"_530":4591,"_509":510,"_532":516},{"_571":716,"_45":726,"_607":727,"_537":4592,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4594,"_509":510,"_532":516},{"_533":-5,"_554":731,"_45":732,"_537":4595,"_558":4596,"_96":560},{"_542":516},[4597],{"_49":736,"_96":563},{"_548":738,"_530":4599,"_509":510,"_532":516},{"_533":4600,"_45":732,"_558":4601,"_96":560},[],[736],{"_530":4603,"_509":510,"_532":516},{"_571":744,"_45":-5,"_537":4604,"_194":-5,"_574":4605,"_96":576},{"_542":516},{"_327":4606,"_578":-5},[4607,4608],{"_49":583,"_96":582},{"_49":750,"_96":582},{"_548":752,"_530":4610,"_509":510,"_532":516},{"_587":750,"_588":754,"_590":4611,"_592":593,"_514":35,"_594":35,"_45":756,"_596":757,"_598":599,"_523":117,"_96":600},[4612],{"_588":759,"_96":603},{"_530":4614,"_509":510,"_532":516},{"_571":744,"_45":762,"_607":763,"_537":4615,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4617,"_509":510,"_532":516},{"_533":-5,"_554":767,"_45":768,"_537":4618,"_558":4619,"_96":560},{"_542":516},[4620],{"_49":772,"_96":563},{"_548":774,"_530":4622,"_509":510,"_532":516},{"_533":4623,"_45":768,"_558":4624,"_96":560},[],[772],{"_530":4626,"_509":510,"_532":516},{"_571":780,"_45":-5,"_537":4627,"_574":4628,"_96":783},{"_542":516},{"_327":4629,"_578":-5},[4630,4631],{"_49":723,"_96":582},{"_49":787,"_96":582},{"_530":4633,"_509":510,"_532":516},{"_640":790,"_571":780,"_45":791,"_537":4634,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_548":796,"_530":4636,"_509":510,"_532":516},{"_587":798,"_588":799,"_590":4637,"_592":801,"_514":802,"_594":803,"_45":804,"_596":805,"_598":599,"_523":806,"_96":600},[4638],{"_588":808,"_96":603},{"_548":810,"_530":4640,"_509":510,"_532":516},{"_587":787,"_588":812,"_590":4641,"_592":801,"_514":814,"_594":35,"_45":815,"_596":816,"_598":599,"_523":117,"_96":600},[4642],{"_588":818,"_96":603},{"_530":4644,"_509":510,"_532":516},{"_571":821,"_45":-5,"_537":4645,"_194":-5,"_574":823,"_96":576},{"_542":516},{"_530":4647,"_509":510,"_532":516},{"_571":821,"_45":826,"_607":827,"_537":4648,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4650,"_509":510,"_532":516},{"_571":831,"_45":-5,"_537":4651,"_194":-5,"_574":4652,"_96":576},{"_542":516},{"_327":4653,"_578":-5},[4654,4655],{"_49":635,"_96":582},{"_49":837,"_96":582},{"_548":839,"_530":4657,"_509":510,"_532":516},{"_841":4658,"_45":843,"_523":117,"_96":844},[4659],{"_338":846,"_9":4660,"_169":848},{"_849":-5,"_96":850},{"_530":4662,"_509":510,"_532":516},{"_571":831,"_45":853,"_607":854,"_537":4663,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4665,"_509":510,"_532":516},{"_533":-5,"_554":858,"_45":859,"_537":4666,"_558":4667,"_96":560},{"_542":516},[],{"_548":863,"_530":4669,"_509":510,"_532":516},{"_533":4670,"_45":859,"_558":4671,"_96":560},[],[],{"_530":4673,"_509":510,"_532":516},{"_571":869,"_45":-5,"_537":4674,"_574":4675,"_96":783},{"_542":516},{"_327":4676,"_578":-5},[4677,4678],{"_49":723,"_96":582},{"_49":875,"_96":582},{"_530":4680,"_509":510,"_532":516},{"_640":878,"_571":869,"_45":879,"_537":4681,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_548":882,"_530":4683,"_509":510,"_532":516},{"_587":875,"_588":884,"_590":4684,"_592":801,"_514":886,"_594":803,"_45":887,"_596":888,"_598":599,"_523":806,"_96":600},[4685],{"_588":890,"_96":603},{"_530":4687,"_509":510,"_532":516},{"_571":893,"_45":-5,"_537":4688,"_194":-5,"_574":895,"_96":576},{"_542":516},{"_530":4690,"_509":510,"_532":516},{"_571":893,"_45":898,"_607":899,"_537":4691,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4693,"_509":510,"_532":516},{"_533":-5,"_554":903,"_45":904,"_537":4694,"_558":4695,"_96":560},{"_542":516},[4696],{"_49":908,"_96":563},{"_548":910,"_530":4698,"_509":510,"_532":516},{"_533":4699,"_45":904,"_558":4700,"_96":560},[],[908],{"_530":4702,"_509":510,"_532":516},{"_571":916,"_45":-5,"_537":4703,"_574":4704,"_96":783},{"_542":516},{"_327":4705,"_578":-5},[4706,4707],{"_49":922,"_96":582},{"_49":798,"_96":582},{"_530":4709,"_509":510,"_532":516},{"_640":925,"_571":916,"_45":926,"_537":4710,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4712,"_509":510,"_532":516},{"_571":930,"_45":-5,"_537":4713,"_574":932,"_96":783},{"_542":516},{"_530":4715,"_509":510,"_532":516},{"_640":925,"_571":930,"_45":935,"_537":4716,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4718,"_509":510,"_532":516},{"_571":939,"_45":-5,"_537":4719,"_574":941,"_96":783},{"_542":516},{"_530":4721,"_509":510,"_532":516},{"_640":944,"_571":939,"_45":945,"_537":4722,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4724,"_509":510,"_532":516},{"_571":949,"_45":-5,"_537":4725,"_194":-5,"_574":932,"_96":576},{"_542":516},{"_530":4727,"_509":510,"_532":516},{"_571":949,"_45":953,"_607":954,"_537":4728,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4730,"_509":510,"_532":516},{"_533":-5,"_554":958,"_45":959,"_537":4731,"_558":4732,"_96":560},{"_542":516},[4733],{"_49":963,"_96":563},{"_548":965,"_530":4735,"_509":510,"_532":516},{"_533":4736,"_45":959,"_558":4737,"_96":560},[],[963],{"_548":970,"_530":4739,"_509":510,"_532":516},{"_587":972,"_588":973,"_590":4740,"_592":801,"_514":975,"_594":803,"_45":976,"_596":977,"_598":599,"_523":806,"_96":600},[4741],{"_588":979,"_96":603},{"_530":4743,"_509":510,"_532":516},{"_571":982,"_45":-5,"_537":4744,"_194":-5,"_574":4745,"_96":576},{"_542":516},{"_327":4746,"_578":-5},[4747,4748],{"_49":635,"_96":582},{"_49":837,"_96":582},{"_548":989,"_530":4750,"_509":510,"_532":516},{"_841":4751,"_45":992,"_523":117,"_96":844},[4752],{"_338":994,"_9":4753,"_169":848},{"_849":-5,"_96":850},{"_530":4755,"_509":510,"_532":516},{"_571":982,"_45":998,"_607":999,"_537":4756,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4758,"_509":510,"_532":516},{"_533":-5,"_554":1003,"_45":1004,"_537":4759,"_558":4760,"_96":560},{"_542":516},[4761],{"_49":1008,"_96":563},{"_548":1010,"_530":4763,"_509":510,"_532":516},{"_533":4764,"_45":1004,"_558":4765,"_96":560},[],[1008],{"_530":4767,"_509":510,"_532":516},{"_571":1016,"_45":-5,"_537":4768,"_194":-5,"_574":4769,"_96":576},{"_542":516},{"_327":4770,"_578":-5},[4771,4772],{"_49":583,"_96":582},{"_49":1022,"_96":582},{"_548":1024,"_530":4774,"_509":510,"_532":516},{"_587":1022,"_588":1026,"_590":4775,"_592":593,"_514":35,"_594":35,"_45":1028,"_596":1029,"_598":599,"_523":117,"_96":600},[4776,4777],{"_588":1035,"_194":1033,"_169":848,"_96":1034},{"_588":1032,"_194":1033,"_169":848,"_96":1034},{"_530":4779,"_509":510,"_532":516},{"_571":1016,"_45":1038,"_607":1039,"_537":4780,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4782,"_509":510,"_532":516},{"_533":-5,"_554":1043,"_45":1044,"_537":4783,"_558":4784,"_96":560},{"_542":516},[4785],{"_49":1048,"_96":563},{"_548":1050,"_530":4787,"_509":510,"_532":516},{"_533":4788,"_45":1044,"_558":4789,"_96":560},[],[1048],{"_530":4791,"_509":510,"_532":516},{"_571":1056,"_45":-5,"_537":4792,"_194":-5,"_574":4793,"_96":576},{"_542":516},{"_327":4794,"_578":-5},[4795,4796],{"_49":583,"_96":582},{"_49":1062,"_96":582},{"_548":1064,"_530":4798,"_509":510,"_532":516},{"_587":1062,"_588":1066,"_590":4799,"_592":593,"_514":35,"_594":35,"_45":1068,"_596":1069,"_598":599,"_523":117,"_96":600},[4800],{"_588":1071,"_96":603},{"_530":4802,"_509":510,"_532":516},{"_571":1056,"_45":1074,"_607":1075,"_537":4803,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4805,"_509":510,"_532":516},{"_533":-5,"_554":1079,"_45":1080,"_537":4806,"_558":4807,"_96":560},{"_542":516},[4808],{"_49":1084,"_96":563},{"_548":1086,"_530":4810,"_509":510,"_532":516},{"_533":4811,"_45":1080,"_558":4812,"_96":560},[],[1084],{"_530":4814,"_509":510,"_532":516},{"_571":1092,"_45":-5,"_537":4815,"_574":4816,"_96":783},{"_542":516},{"_327":4817,"_578":-5},[4818,4819],{"_49":723,"_96":582},{"_49":972,"_96":582},{"_530":4821,"_509":510,"_532":516},{"_640":1100,"_571":1092,"_45":1101,"_537":4822,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4824,"_509":510,"_532":516},{"_533":-5,"_554":1105,"_45":1106,"_537":4825,"_558":4826,"_96":560},{"_542":516},[],{"_548":1110,"_530":4828,"_509":510,"_532":516},{"_533":4829,"_45":1106,"_558":4830,"_96":560},[],[],{"_530":4832,"_509":510,"_532":516},{"_571":1116,"_45":-5,"_537":4833,"_574":1118,"_96":783},{"_542":516},{"_530":4835,"_509":510,"_532":516},{"_640":1121,"_571":1116,"_45":1122,"_537":4836,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4838,"_509":510,"_532":516},{"_571":1126,"_45":-5,"_537":4839,"_574":1118,"_96":783},{"_542":516},{"_530":4841,"_509":510,"_532":516},{"_640":1121,"_571":1126,"_45":1130,"_537":4842,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4844,"_509":510,"_532":516},{"_533":-5,"_554":1134,"_45":1135,"_537":4845,"_558":4846,"_96":560},{"_542":516},[4847],{"_49":1139,"_96":563},{"_548":1141,"_530":4849,"_509":510,"_532":516},{"_533":4850,"_45":1135,"_558":4851,"_96":560},[],[1139],{"_530":4853,"_509":510,"_532":516},{"_571":1147,"_45":-5,"_537":4854,"_574":1118,"_96":783},{"_542":516},{"_530":4856,"_509":510,"_532":516},{"_640":1121,"_571":1147,"_45":1151,"_537":4857,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4859,"_509":510,"_532":516},{"_571":1155,"_45":-5,"_537":4860,"_574":1118,"_96":783},{"_542":516},{"_530":4862,"_509":510,"_532":516},{"_640":1121,"_571":1155,"_45":1159,"_537":4863,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4865,"_509":510,"_532":516},{"_571":1163,"_45":-5,"_537":4866,"_574":1118,"_96":783},{"_542":516},{"_530":4868,"_509":510,"_532":516},{"_640":1121,"_571":1163,"_45":1167,"_537":4869,"_194":793,"_611":-5,"_96":794},{"_542":516},{"_530":4871,"_509":510,"_532":516},{"_533":-5,"_554":1171,"_45":1172,"_537":4872,"_558":4873,"_96":560},{"_542":516},[4874],{"_49":1176,"_96":563},{"_548":1178,"_530":4876,"_509":510,"_532":516},{"_533":4877,"_45":1172,"_558":4878,"_96":560},[],[1176],{"_530":4880,"_509":510,"_532":516},{"_571":1184,"_45":-5,"_537":4881,"_194":-5,"_574":1186,"_96":576},{"_542":516},{"_530":4883,"_509":510,"_532":516},{"_571":1184,"_45":1189,"_607":1190,"_537":4884,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4886,"_509":510,"_532":516},{"_533":-5,"_554":1194,"_45":1195,"_537":4887,"_558":4888,"_96":560},{"_542":516},[4889],{"_49":1199,"_96":563},{"_548":1201,"_530":4891,"_509":510,"_532":516},{"_533":4892,"_45":1195,"_558":4893,"_96":560},[],[1199],{"_530":4895,"_509":510,"_532":516},{"_571":1207,"_45":-5,"_537":4896,"_194":-5,"_574":4897,"_96":576},{"_542":516},{"_327":4898,"_578":-5},[4899,4900],{"_49":583,"_96":582},{"_49":1213,"_96":582},{"_548":1215,"_530":4902,"_509":510,"_532":516},{"_587":1213,"_588":1217,"_590":4903,"_592":593,"_514":35,"_594":1219,"_45":1220,"_596":1221,"_598":599,"_523":806,"_96":600},[4904],{"_588":1223,"_96":603},{"_530":4906,"_509":510,"_532":516},{"_571":1207,"_45":1226,"_607":1227,"_537":4907,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4909,"_509":510,"_532":516},{"_533":-5,"_554":1231,"_45":1232,"_537":4910,"_558":4911,"_96":560},{"_542":516},[4912],{"_49":1236,"_96":563},{"_548":1238,"_530":4914,"_509":510,"_532":516},{"_533":4915,"_45":1232,"_558":4916,"_96":560},[],[1236],{"_548":1243,"_530":4918,"_509":510,"_532":516},{"_587":1245,"_588":1246,"_590":4919,"_592":1248,"_514":1249,"_594":803,"_45":1250,"_596":1251,"_598":599,"_523":806,"_96":600},[4920],{"_588":1253,"_96":603},{"_530":4922,"_509":510,"_532":516},{"_571":1256,"_45":-5,"_537":4923,"_194":-5,"_574":4924,"_96":576},{"_542":516},{"_327":4925,"_578":-5},[4926,4927],{"_49":1262,"_96":582},{"_49":1245,"_96":582},{"_530":4929,"_509":510,"_532":516},{"_571":1256,"_45":1265,"_607":1266,"_537":4930,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4932,"_509":510,"_532":516},{"_533":-5,"_554":1270,"_45":1271,"_537":4933,"_558":4934,"_96":560},{"_542":516},[4935],{"_49":1275,"_96":563},{"_548":1277,"_530":4937,"_509":510,"_532":516},{"_533":4938,"_45":1271,"_558":4939,"_96":560},[],[1275],{"_548":1282,"_530":4941,"_509":510,"_532":516},{"_587":1284,"_588":1285,"_590":4942,"_592":1248,"_514":1287,"_594":1288,"_45":1289,"_596":1290,"_598":599,"_523":806,"_96":600},[4943],{"_588":1292,"_96":603},{"_530":4945,"_509":510,"_532":516},{"_571":1295,"_45":-5,"_537":4946,"_194":-5,"_574":4947,"_96":576},{"_542":516},{"_327":4948,"_578":-5},[4949,4950],{"_49":1301,"_96":582},{"_49":1284,"_96":582},{"_530":4952,"_509":510,"_532":516},{"_571":1295,"_45":1304,"_607":1305,"_537":4953,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4955,"_509":510,"_532":516},{"_533":-5,"_554":1309,"_45":1310,"_537":4956,"_558":4957,"_96":560},{"_542":516},[4958],{"_49":1314,"_96":563},{"_548":1316,"_530":4960,"_509":510,"_532":516},{"_533":4961,"_45":1310,"_558":4962,"_96":560},[],[1314],{"_530":4964,"_509":510,"_532":516},{"_571":1322,"_45":-5,"_537":4965,"_194":-5,"_574":4966,"_96":576},{"_542":516},{"_327":4967,"_578":-5},[4968,4969],{"_49":635,"_96":582},{"_49":837,"_96":582},{"_548":1329,"_530":4971,"_509":510,"_532":516},{"_841":4972,"_45":1332,"_523":117,"_96":844},[4973,4974,4975,4976],{"_338":1346,"_9":4980,"_169":1348},{"_338":1343,"_9":4979,"_169":1345},{"_338":1340,"_9":4978,"_169":1342},{"_338":1337,"_9":4977,"_169":1339},{"_849":-5,"_96":850},{"_849":-5,"_96":850},{"_849":-5,"_96":850},{"_849":-5,"_96":850},{"_530":4982,"_509":510,"_532":516},{"_571":1322,"_45":1351,"_607":1352,"_537":4983,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":4985,"_509":510,"_532":516},{"_533":-5,"_554":1356,"_45":1357,"_537":4986,"_558":4987,"_96":560},{"_542":516},[4988,4989,4990],{"_49":1365,"_96":563},{"_49":1364,"_96":563},{"_49":1363,"_96":563},{"_548":1367,"_530":4992,"_509":510,"_532":516},{"_533":4993,"_45":1357,"_558":4994,"_96":560},[],[1365,1364,1363],{"_530":4996,"_509":510,"_532":516},{"_571":1373,"_45":-5,"_537":4997,"_194":-5,"_574":4998,"_96":576},{"_542":516},{"_327":4999,"_578":-5},[5000,5001],{"_49":583,"_96":582},{"_49":1379,"_96":582},{"_548":1381,"_530":5003,"_509":510,"_532":516},{"_587":1379,"_588":1383,"_590":5004,"_592":593,"_514":35,"_594":35,"_45":1385,"_596":1386,"_598":599,"_523":117,"_96":600},[5005,5006,5007],{"_588":1398,"_194":1399,"_169":1400,"_96":1034},{"_588":1395,"_194":1396,"_169":1397,"_96":1034},{"_588":1390,"_169":1391,"_1392":1393,"_96":1394},{"_530":5009,"_509":510,"_532":516},{"_571":1373,"_45":1403,"_607":1404,"_537":5010,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":5012,"_509":510,"_532":516},{"_533":-5,"_554":1408,"_45":1409,"_537":5013,"_558":5014,"_96":560},{"_542":516},[5015,5016],{"_49":1415,"_96":563},{"_49":1414,"_96":563},{"_548":1417,"_530":5018,"_509":510,"_532":516},{"_533":5019,"_45":1409,"_558":5020,"_96":560},[],[1415,1414],{"_530":5022,"_509":510,"_532":516},{"_533":-5,"_554":1423,"_45":1424,"_537":5023,"_558":5024,"_96":560},{"_542":516},[5025,5026,5027],{"_49":1432,"_96":563},{"_49":1431,"_96":563},{"_49":1430,"_96":563},{"_548":1434,"_530":5029,"_509":510,"_532":516},{"_533":5030,"_45":1424,"_558":5031,"_96":560},[],[1432,1431,1430],{"_530":5033,"_509":510,"_532":516},{"_571":1440,"_45":-5,"_537":5034,"_194":-5,"_574":5035,"_96":576},{"_542":516},{"_327":5036,"_578":-5},[5037,5038],{"_49":583,"_96":582},{"_49":1446,"_96":582},{"_548":1448,"_530":5040,"_509":510,"_532":516},{"_587":1446,"_588":1450,"_590":5041,"_592":593,"_514":803,"_594":35,"_45":1452,"_596":1453,"_598":599,"_523":117,"_96":600},[5042,5043,5044,5045],{"_588":1466,"_194":1391,"_169":1339,"_96":1034},{"_588":1463,"_194":1464,"_169":1465,"_96":1034},{"_588":1460,"_194":1461,"_169":1462,"_96":1034},{"_588":1458,"_169":1459,"_1392":294,"_96":1394},{"_530":5047,"_509":510,"_532":516},{"_571":1440,"_45":1469,"_607":1470,"_537":5048,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":5050,"_509":510,"_532":516},{"_533":-5,"_554":1474,"_45":1475,"_537":5051,"_558":5052,"_96":560},{"_542":516},[5053],{"_49":1479,"_96":563},{"_548":1481,"_530":5055,"_509":510,"_532":516},{"_533":5056,"_45":1475,"_558":5057,"_96":560},[],[1479],{"_530":5059,"_509":510,"_532":516},{"_571":1487,"_45":-5,"_537":5060,"_194":-5,"_574":5061,"_96":576},{"_542":516},{"_327":5062,"_578":-5},[5063,5064],{"_49":583,"_96":582},{"_49":1493,"_96":582},{"_548":1495,"_530":5066,"_509":510,"_532":516},{"_587":1493,"_588":1497,"_590":5067,"_592":593,"_514":803,"_594":35,"_45":1499,"_596":1500,"_598":599,"_523":117,"_96":600},[5068,5069,5070,5071],{"_588":1512,"_194":1513,"_169":1342,"_96":1034},{"_588":1510,"_194":1511,"_169":1345,"_96":1034},{"_588":1508,"_194":1509,"_169":1348,"_96":1034},{"_588":1505,"_194":1506,"_169":1507,"_96":1034},{"_530":5073,"_509":510,"_532":516},{"_571":1487,"_45":1516,"_607":1517,"_537":5074,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":5076,"_509":510,"_532":516},{"_571":1521,"_45":-5,"_537":5077,"_194":-5,"_574":5078,"_96":576},{"_542":516},{"_327":5079,"_578":-5},[5080,5081],{"_49":583,"_96":582},{"_49":1527,"_96":582},{"_548":1529,"_530":5083,"_509":510,"_532":516},{"_587":1527,"_588":1531,"_590":5084,"_592":593,"_514":35,"_594":35,"_45":1533,"_596":1534,"_598":599,"_523":117,"_96":600},[5085],{"_588":1536,"_96":603},{"_530":5087,"_509":510,"_532":516},{"_571":1521,"_45":1539,"_607":1540,"_537":5088,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":5090,"_509":510,"_532":516},{"_533":-5,"_554":1544,"_45":1545,"_537":5091,"_558":5092,"_96":560},{"_542":516},[5093],{"_49":1549,"_96":563},{"_548":1551,"_530":5095,"_509":510,"_532":516},{"_533":5096,"_45":1545,"_558":5097,"_96":560},[],[1549],{"_530":5099,"_509":510,"_532":516},{"_571":1557,"_45":-5,"_537":5100,"_194":-5,"_574":5101,"_96":576},{"_542":516},{"_327":5102,"_578":-5},[5103,5104],{"_49":583,"_96":582},{"_49":1563,"_96":582},{"_548":1565,"_530":5106,"_509":510,"_532":516},{"_587":1567,"_588":1568,"_590":5107,"_592":593,"_514":1288,"_594":35,"_45":1570,"_596":1571,"_598":599,"_523":117,"_96":600},[5108,5109,5110,5111,5112],{"_588":1584,"_194":1585,"_169":1586,"_96":1034},{"_588":1582,"_194":1513,"_169":1583,"_96":1034},{"_588":1580,"_194":1511,"_169":1581,"_96":1034},{"_588":1578,"_194":1509,"_169":1579,"_96":1034},{"_588":1577,"_194":1399,"_169":1400,"_96":1034},{"_530":5114,"_509":510,"_532":516},{"_571":1557,"_45":1589,"_607":1590,"_537":5115,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":5117,"_509":510,"_532":516},{"_533":-5,"_554":1594,"_45":1595,"_537":5118,"_558":5119,"_96":560},{"_542":516},[5120],{"_49":1599,"_96":563},{"_548":1601,"_530":5122,"_509":510,"_532":516},{"_533":5123,"_45":1595,"_558":5124,"_96":560},[],[1599],{"_530":5126,"_509":510,"_532":516},{"_571":1607,"_45":-5,"_537":5127,"_194":-5,"_574":5128,"_96":576},{"_542":516},{"_327":5129,"_578":-5},[5130,5131],{"_49":1614,"_96":582},{"_49":1613,"_96":582},{"_548":1616,"_530":5133,"_509":510,"_532":516},{"_587":1613,"_588":1618,"_590":5134,"_592":593,"_514":35,"_594":35,"_45":1620,"_596":1621,"_598":599,"_523":117,"_96":600},[5135],{"_588":1623,"_96":603},{"_530":5137,"_509":510,"_532":516},{"_571":1607,"_45":1626,"_607":1627,"_537":5138,"_194":610,"_611":-5,"_523":117,"_96":612},{"_542":516},{"_530":5140,"_509":510,"_532":516},{"_533":-5,"_554":1631,"_45":1632,"_537":5141,"_558":5142,"_96":560},{"_542":516},[5143],{"_49":1636,"_96":563},{"_548":1638,"_530":5145,"_509":510,"_532":516},{"_533":5146,"_45":1632,"_558":5147,"_96":560},[],[1636],{"_548":1643,"_530":5149,"_509":510,"_532":516},{"_1645":-5,"_533":5150,"_45":1647,"_96":1648},[5151],{"_49":1650,"_1651":5152,"_96":49},[],{"_530":5154,"_509":510,"_532":516},{"_533":5155,"_535":-5,"_45":-5,"_537":5156,"_539":-5,"_100":339,"_96":541},[5157],{"_542":516},{"_49":1650,"_96":582},{"_530":5159,"_509":510,"_532":516},{"_533":5160,"_535":-5,"_45":-5,"_537":5161,"_539":-5,"_100":339,"_96":541},[5162,5163],{"_542":516},{"_49":1665,"_96":582},{"_49":1664,"_96":582},{"_530":5165,"_509":510,"_532":516},{"_533":5166,"_535":-5,"_45":-5,"_537":5167,"_539":-5,"_100":1670,"_96":541},[5168],{"_542":516},{"_49":1672,"_96":582},{"_530":5170,"_509":510,"_532":516},{"_533":5171,"_535":-5,"_45":-5,"_537":5172,"_539":-5,"_100":1670,"_96":541},[5173],{"_542":516},{"_49":1678,"_96":582},{"_530":5175,"_509":510,"_532":516},{"_533":5176,"_535":-5,"_45":-5,"_537":5177,"_539":-5,"_100":1670,"_96":541},[5178,5179],{"_542":516},{"_49":1686,"_96":582},{"_49":1685,"_96":582},{"_509":510,"_91":5181},{"_107":-5,"_45":516,"_517":5182,"_519":520,"_521":522,"_523":1691},[],{"_523":5184,"_509":510},{"_1694":5185,"_96":1696},[],{"_1699":5187},{"_1701":-5,"_1702":-5,"_1703":1704,"_1705":522,"_592":593,"_1706":18,"_1707":-5,"_1708":-5,"_1709":-5,"_1710":1711,"_45":510,"_1712":1713,"_194":-5,"_1714":-5,"_169":1715,"_1716":212,"_1717":522,"_1718":510,"_598":1719,"_523":5188,"_1721":-5,"_81":5189,"_1723":522},{"_96":527},[],[],[5192],{"_45":1728,"_1729":5193,"_1731":1732,"_1733":1732,"_533":5194,"_523":1735,"_535":-5,"_1736":35,"_1737":5195,"_1739":1740,"_1741":-5},{"_100":339,"_194":-5,"_1737":5199},{"_1746":49,"_1747":5198},{"_1742":5196},{"_1744":5197},[],[1749],{},{"_96":541,"_100":97,"_533":5227},{"_96":1784,"_1785":5206},{"_96":1759,"_1760":657,"_1761":1762,"_1763":5203,"_1765":-5},{"_96":1763,"_1766":593,"_132":133,"_1767":-5,"_338":1768,"_1769":5204,"_1771":1772,"_1773":1774,"_1775":1776,"_1777":1778,"_1779":5205},{"_1781":1782,"_1783":-5},[],[5207,5208,5209,5210,5211],{"_169":3155,"_1793":-5,"_1794":5224,"_1796":-5},{"_169":2729,"_1793":-5,"_1794":5221,"_1796":-5},{"_169":2043,"_1793":-5,"_1794":5218,"_1796":-5},{"_169":1929,"_1793":-5,"_1794":5215,"_1796":-5},{"_169":1792,"_1793":-5,"_1794":5212,"_1796":-5},[5213],{"_1798":803,"_1799":1800,"_533":5214,"_1802":62},[1803,1804,1805,1804,1806,1807,1808,1809,1810,1804,1811,1812,1813,1804,1814,1804,1815,1816,212,1817,1818,1819,212,1820,1821,1822,1823,1824,1825,1826,1827,1828,1829,1830,1831,1832,212,1820,1833,1834,1835,1836,1829,1837,212,1838,212,1839,1840,1841,1842,1843,1844,1845,1846,1847,1848,1849,1850,1851,1852,1853,1854,1855,1856,1857,212,1858,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,212,1869,212,1870,1871,1872,1873,1874,1875,1876,212,1877,1878,1879,1880,1881,1882,1883,1884,1885,1886,212,1887,1888,1889,1890,1891,1892,1893,1894,1895,1896,212,1897,1898,1899,1900,1901,212,1902,1903,1904,1905,1906,1907,1892,1908,1909,1910,1895,212,1911,1912,1913,1901,1892,1914,1895,1915,1916,212,1917,1918,1919,1920,1921,1922,212,1923,1924,1925,1926,1927,1856,1857,1928],[5216],{"_1798":803,"_1799":1932,"_533":5217,"_1802":62},[1934,1804,1935,1804,1936,1804,1937,1804,1938,1939,1940,1941,1804,1942,1943,1944,1945,1946,1947,1948,1804,1949,1950,212,1951,1952,1953,1954,212,1955,1956,1957,1958,212,1959,212,1960,1961,1918,1919,1962,1963,1964,212,1965,1966,212,1967,1968,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1915,212,1982,1983,212,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,1994,212,1995,1996,1997,1998,1999,2000,2001,2002,2003,2004,2005,212,2006,2007,2008,2009,2010,212,2011,2012,2013,2014,2015,2016,2017,212,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,2030,2031,1915,2032,1857,212,2033,1964,212,1965,2034,2035,2036,212,1982,1993,1994,212,2037,2038,2001,2002,2039,2040,212,2041,2042,1857,1928],[5219],{"_1798":803,"_1799":2046,"_533":5220,"_1802":62},[2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,212,2069,2070,2071,2072,2073,212,2074,2075,212,2076,2077,2078,2079,1857,1832,212,2080,2081,2082,1832,212,2083,212,2084,2085,1832,212,2086,2087,1832,212,2088,2089,1832,212,2090,2091,2092,2093,2094,2095,1832,212,2096,2097,2098,212,2099,2100,2101,212,2102,2103,2104,2105,2106,2107,2108,2109,1928,212,2110,2111,2112,2113,2114,1928,212,2115,2116,2117,2118,2119,2120,2121,2122,2123,1857,212,2124,2125,2126,1857,1928,212,2127,2128,2129,2130,2131,2132,2133,2134,2135,1857,212,2136,2129,2137,2138,2139,2140,2141,2142,1857,1928,212,2143,2144,2145,2146,2147,212,2148,2149,2150,2151,1857,212,2152,2153,2154,2155,2156,2157,2151,1857,212,2158,2137,2159,2160,2150,2161,2162,2163,212,2164,2165,1857,212,2166,2167,2168,2169,2170,1857,1928,212,2171,2172,2173,2174,2175,1857,212,2176,2177,2178,2016,2179,2180,2181,2182,1857,212,2183,2184,2185,1857,212,2186,2187,2188,2177,2189,2190,2191,2192,2193,2194,2195,2196,2016,2179,2180,2197,2198,2199,2200,2201,2016,1857,212,2202,2177,2189,2190,2203,2204,2194,2195,2196,2016,2179,2180,2205,2206,1857,212,2207,2208,2177,2209,2016,2179,2180,2182,1857,1928,212,2210,2211,2137,2212,2213,2214,212,2140,2141,2215,212,2216,2217,2218,2219,2220,2221,2222,2223,2224,2225,2226,2227,2228,1857,212,2229,2137,2230,2213,2231,212,2232,2216,2233,2234,2235,2236,2237,2238,2239,2240,2241,1857,212,2242,2243,2244,2245,2246,2247,2248,2249,2250,1868,2251,2252,1915,212,2253,2254,2255,2256,212,2257,2258,2259,2227,1857,212,2260,2137,2261,2262,2263,2264,2265,2266,212,2267,2268,2269,2270,1857,1928,212,2271,2272,2137,2273,2274,212,2179,2180,2275,2276,2277,2132,2278,1857,212,2279,2137,2212,2280,2281,212,2179,2275,2282,2283,2134,2132,2278,1857,212,2284,2137,2212,2285,212,2179,2180,2275,2132,2278,1857,212,2286,2287,2288,2289,2137,2273,2290,212,2179,2180,2291,2292,2293,1857,212,2294,2137,2295,2296,2297,212,2298,2299,2300,2137,2301,2280,2302,2303,2304,1857,1928,212,2305,2306,2307,2308,2309,1857,212,2310,2311,2312,2313,2314,2315,2316,2317,2318,1857,212,2319,2307,2320,2321,1857,212,2322,2125,2323,2120,2324,2325,2326,1857,212,2327,2125,2323,2328,1857,212,2329,2330,2331,2332,2307,2333,2334,1857,212,2335,2307,2308,2336,1857,212,2337,2125,2338,2339,1857,212,2340,2341,2342,212,2343,212,2120,2344,2325,2345,2346,2347,2348,2349,2350,1857,212,2351,2341,2352,2309,1857,212,2353,2354,2355,2137,2356,2357,2358,212,2343,212,2359,2360,2361,2362,2363,2364,2365,1857,212,2366,2125,2367,2120,2368,2369,2370,1857,1928,212,2371,2372,2177,2373,2374,2375,2376,2016,2377,2378,2379,2380,1857,212,2381,2156,2382,2383,1857,212,2384,2137,2385,2213,2386,212,2387,2388,2215,2389,1857,212,2390,2129,2391,2392,2132,2134,2393,1857,1928,212,2394,2395,2129,2396,2397,2398,2399,2227,2120,2400,2401,1857,212,2402,2403,2125,2404,2405,2120,2406,2407,2408,2409,2278,1857,212,2410,2411,2412,2413,2414,2415,2416,2417,2418,2125,212,2404,212,2419,2278,1857,212,2420,2421,2422,2423,2129,2125,212,2404,212,2405,2424,1857,212,2425,2426,2427,2278,1857,212,2428,2129,2125,2429,2405,2430,1857,212,2431,2432,2433,2434,2435,212,2436,2437,2278,212,2438,2439,1857,212,2440,2441,2442,2435,2443,2429,2278,1857,212,2444,2445,2446,2447,2448,2449,2450,2417,2418,2443,212,2429,212,2278,2451,2452,2453,2454,1857,1928,212,2455,2456,2457,2458,2459,2460,2461,2462,2463,2464,212,2465,212,2466,2467,2468,2469,2470,2471,2472,2473,212,2474,2475,2476,2477,1857,212,2478,2479,212,2480,2481,1857,1928,212,2482,2483,2484,2485,2486,2487,2488,212,2489,212,2466,2490,2491,2492,2493,2494,1857,212,2495,2177,2496,212,2497,2180,2498,1857,212,2499,2500,2501,2502,2503,2504,2505,2506,2496,212,2507,212,2405,2508,2509,2510,2511,2512,2513,1857,212,2514,2515,2516,2517,2137,2518,2262,2519,212,2520,212,2494,2521,2134,1857,212,2522,2487,2523,2481,2513,1857,1928,212,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,1915,2537,1916,212,2538,2539,2540,2541,1916,212,2542,2543,2544,212,2545,2546,2547,212,2548,2549,2550,2016,212,2551,2552,212,2553,2509,212,2554,2555,212,2257,2556,2134,2557,2558,2559,2228,1857,212,2560,2543,2544,212,2561,2562,2563,212,2129,2549,2550,2016,212,2564,2565,212,2257,2134,1857,212,2566,2567,2568,2569,2137,2570,2571,212,2572,2573,212,2574,2304,2228,1857,212,2575,2576,1846,2577,2578,2579,2580,2581,2582,2583,2584,2585,2586,1883,212,2587,2588,212,2589,2590,2591,2592,2593,2594,1856,1857,212,2595,2596,2129,2549,2550,2016,212,2597,212,2257,2598,2228,1857,1928,212,2599,2600,2601,2602,2603,2129,2604,212,2573,212,2605,2227,1857,212,2606,2129,2607,2608,2609,2610,2611,1915,212,2612,2552,2134,212,2613,212,2614,2615,212,2616,2617,2618,2619,2620,2621,2622,2623,1857,212,2624,2129,2625,212,2397,212,2626,2227,1857,212,2627,2129,2607,2628,2629,2246,2630,2631,1868,2632,2611,1915,212,2633,2552,212,2634,2635,2227,2636,212,2637,2638,212,2639,2640,1857,212,2641,2642,2643,2644,2129,2607,2608,2609,2645,2646,2611,1915,212,2647,2648,2649,2552,212,2650,2651,212,2652,2653,212,2654,2655,2656,2657,2658,2659,2660,1857,212,2661,2662,2663,2664,2665,2666,2667,2608,2668,2669,2611,1915,212,2670,2671,2552,212,2404,2278,212,2672,2673,212,2674,1857,212,2675,2667,2457,212,2676,212,2476,1857,212,2677,2129,2678,2608,2679,2610,2611,1915,212,2680,2552,212,2681,212,2682,2683,2684,212,2278,2513,2685,2686,2623,1857,212,2687,2688,2689,2690,2691,2129,2607,2608,2609,2610,2611,1915,212,2692,2552,212,2404,2693,212,2653,2694,2695,1857,212,2696,2697,2698,2699,2607,2608,2700,2701,2702,2609,2632,2611,1915,212,2703,2552,212,2397,2704,212,2705,1857,212,2706,2607,2608,2702,2609,2610,2611,1915,212,2692,2552,212,2404,2693,212,2653,2694,2695,1857,212,2707,2708,2709,2607,2608,2710,2711,2712,2609,2632,2611,1915,212,2713,2552,212,2714,2704,212,2715,2716,1857,212,2717,2607,2608,2712,2609,2610,2611,1915,212,2718,2552,212,2404,2693,212,2719,2694,2695,1857,212,2720,2721,2722,2723,2129,2607,2608,2609,2632,2610,2611,1915,212,2724,2552,212,2714,2725,2726,212,2727,2728,1857,1928],[5222],{"_1798":803,"_1799":2732,"_533":5223,"_1802":62},[2734,2735,2736,2737,2738,212,2739,212,2740,2741,2742,2743,212,2744,2745,2746,2747,212,2748,2749,2750,2751,2752,2753,2754,2755,1916,1832,212,2756,2757,2758,2759,2760,1832,212,2761,2762,2763,2764,2765,2766,1832,212,2767,2768,2769,2770,2771,2772,2773,2774,2775,2776,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,2792,2793,2794,2795,1868,2796,2797,2798,1856,2799,2800,1916,2801,1832,212,2802,2803,2804,2805,2806,2807,1832,212,2808,2809,2810,2811,2812,2813,2814,1832,212,2815,2816,2817,2818,2819,2820,2821,2822,2823,2824,2825,212,2826,2827,2828,2829,1832,212,2830,212,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,212,2842,2843,2844,2845,1916,1832,212,2846,2847,2848,2849,2850,2851,1804,2852,2853,2854,2855,2856,2857,2770,2858,2859,2860,2861,2862,1916,1832,212,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2875,2876,2877,2878,1857,2879,2880,2881,2882,2883,2884,1916,2885,2886,1832,212,2887,2888,2889,2890,1804,2891,2892,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2882,2883,2884,1916,2885,2886,1832,212,2909,2910,2911,2912,2913,2914,2915,2916,1804,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,1832,212,2927,2928,2929,2930,2931,2932,2933,2934,2935,2936,2937,2938,2873,2939,2940,2941,2942,2114,2770,2943,2944,2945,2946,1987,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2016,2859,2960,2961,2962,2963,2964,1916,1832,212,2965,2966,2967,2968,2969,2970,2971,2972,2973,1804,2974,2975,2976,2977,2978,2979,212,2980,2981,2982,2983,2984,212,2985,2986,2987,2988,212,2989,2990,2991,2992,2993,2994,2995,2996,1915,2997,2998,2999,1832,212,3000,3001,3002,3003,3004,212,3005,3006,212,3007,3008,3009,2905,212,3010,3011,3012,3013,3014,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,3027,3028,3029,3030,3031,3032,3033,3034,3028,3035,3036,3037,1915,212,3038,1832,212,3039,3040,3041,3042,2770,3043,3044,2799,3045,1916,1832,212,3046,212,3047,3048,1832,212,3049,3050,3051,3052,1804,3053,3054,3055,3056,2816,3057,3058,3059,2819,3060,2877,3061,3062,1857,1832,212,3063,2816,3064,3058,3059,2819,3060,3065,3061,2878,1857,1832,212,3066,3067,3068,3069,3070,3071,2816,3072,3073,3058,2819,3060,3065,3074,3075,3076,3077,3078,1857,1832,212,3079,3060,3080,3081,1857,1832,212,3082,3083,3084,2816,3085,3086,2770,3087,2859,3088,1846,3089,3090,3091,3092,3093,3094,3095,3096,1868,3097,3098,3099,3100,1856,1916,1832,212,3101,2816,3102,3085,3103,2825,3104,2827,3105,3106,3107,3108,3109,2997,1832,212,3110,3086,2770,3111,2859,3088,1846,3089,3112,3091,3113,3114,3115,3093,3094,3116,3096,1868,3097,3098,3099,3100,1856,1916,1832,212,3117,3118,3119,3120,3121,3122,2770,3123,2859,3124,3125,3126,3127,3128,3129,3130,1916,1832,212,3131,3132,3133,3134,3135,3136,3137,3138,3139,3140,3141,3142,1832,212,3143,3144,3145,3146,3147,3148,3149,3150,3151,3152,3153,3154,1832],[5225],{"_1798":803,"_1799":3158,"_533":5226,"_1802":62},[3160,1804,3161,3162,3163,3164,3165,1804,3166,1804,3167,3168,3169,3170,3171,1804,3172,1804,3173,3174,3175,3176,3177,212,1951,3178,1954,212,3179,3180,212,3181,3182,1918,1919,3183,1920,3184,3185,3186,3187,3188,1915,1964,212,3189,3190,3191,3192,1915,212,3193,3194,3195,3196,3197,3198,3199,3200,1868,3201,3202,3203,3204,3205,1981,1915,212,3206,3207,3208,3209,212,3210,3211,3212,212,3213,3214,212,3215,3216,3217,1987,3218,3212,3219,3220,212,3221,3222,3223,3224,3225,3226,3227,3228,212,3229,3230,3231,2001,3232,3233,3234,1857,212,3235,1918,1919,3183,1920,3236,3237,3238,1964,212,3190,3191,3192,1915,212,3239,3240,3241,3242,3209,212,3243,3244,3245,3246,3247,3248,3249,3250,212,3219,3251,212,3252,3214,212,3253,3254,3255,3256,2001,3257,3258,2004,3259,3260,3261,212,3262,3263,3264,3265,212,3266,3267,3268,3269,3219,3251,3270,3259,3264,3265,1857,1928],[5228,5229,5230,5231,5232,5233,5234,5235,5236,5237,5238,5239,5240],{"_1746":49,"_49":3305},{"_1746":3286,"_169":3155,"_1798":3303,"_1799":3304},{"_1746":49,"_49":3302},{"_1746":3286,"_169":2729,"_1798":3300,"_1799":3301},{"_1746":3286,"_169":2043,"_1798":3298,"_1799":3299},{"_1746":49,"_49":3297},{"_1746":3286,"_169":3155,"_1798":3295,"_1799":3296},{"_1746":49,"_49":3294},{"_1746":3286,"_169":1929,"_1798":3292,"_1799":3293},{"_1746":49,"_49":3291},{"_1746":3286,"_169":1792,"_1798":3289,"_1799":3290},{"_1746":3286,"_169":1792,"_1798":3287,"_1799":3288},{"_1746":49,"_49":3285},[5243,5244,5245],{"_3315":3316,"_276":209,"_3317":318,"_287":-5,"_1766":270,"_3318":-5,"_3319":-5,"_3320":3321,"_3322":3323,"_3324":-5,"_3325":-5,"_3326":3327,"_3328":18,"_3329":62,"_3330":57,"_3331":18,"_3332":-5},{"_96":541,"_100":339,"_533":5246},{"_325":326,"_327":328,"_3343":332,"_3344":133,"_335":-5,"_96":3345},{"_96":3336,"_327":3337,"_169":3338,"_3339":3340,"_3341":3342},[5247],{"_1746":49,"_49":3348},"task_e_6a6ef096b2d48328b7d1dbdbdd06276f",1785655446.698935,"GitHub Mention: test(e2e): Playwright smoke suite for the SPA over the #243 simulation fixture","has_generated_title","has_unread_turn","denormalized_metadata",{"_5278":35,"_5279":5280,"_5281":-5,"_5282":-5,"_5272":5283,"_5284":-5,"_5285":-5,"_5286":-5,"_5287":-5},"task_status_display",{"_5267":5268,"_5269":209,"_134":131,"_5270":-5,"_5271":1759},"creator_workspace","external_pull_requests",[5260],{"_45":5261,"_5262":87,"_5263":5264,"_5265":133},"github-1301193065-390","assistant_turn_id","pull_request",{"_317":318,"_308":319,"_320":321,"_322":62,"_323":18,"_324":18,"_325":326,"_327":328,"_329":280,"_330":131,"_331":332,"_333":334,"_335":336,"_337":-5,"_338":-5,"_339":5266,"_341":342,"_343":344,"_345":346,"_347":35},"codex_updated_sha",{"_302":303,"_194":303,"_348":-5,"_306":307,"_45":304},"latest_turn_status_display",{"_542":87,"_116":117,"_5272":5273,"_98":5274,"_5275":-5,"_5276":-5,"_5277":1759,"_118":-5},"environment_label","fix_task_id","initial_intent","diff_stats",{"_1771":1772,"_1773":1774,"_1775":1776},[],"image_asset_pointer_citations","issue_counts","intent","num_follow_ups","repo_name_map",{},"last_user_turn_created_at","last_turn_status",{"_1771":-5,"_1773":-5,"_1775":-5},"last_pushed_turn_id","start_branch_name","pushed_branch_name","cached_pull_request_data","dd",{"_5302":5303,"_5304":5305},"disablePrefetch","shouldPrefetchAccount","shouldPrefetchUser","shouldPrefetchSystemHints","manageRootRouteStylesheet","mobileWebHandoffEnabled","promoteCss","disableSSR","stripModulepreloadImports","paidCampaignAppRedirect","statsigGateEvaluationsPromise",["P",5301],"traceId","15015961189429818183","traceTime",1787329688692]