From e5a0266a666496df7983ea3836c7beb9526982a1 Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Mon, 22 Jun 2026 12:39:39 -0300 Subject: [PATCH 01/10] Add explicit typing for native-bindings RealtimeChannel --- .../dart/example/bin/e2e/realtime_test.dart | 13 +++++------- .../BlocksE2ETests/RealtimeE2ETests.swift | 21 +++++++++++++++++++ test-apps/native-bindings/aws-blocks/index.ts | 3 ++- 3 files changed, 28 insertions(+), 9 deletions(-) diff --git a/native/dart/example/bin/e2e/realtime_test.dart b/native/dart/example/bin/e2e/realtime_test.dart index f4c8a5a1..a54cbe59 100644 --- a/native/dart/example/bin/e2e/realtime_test.dart +++ b/native/dart/example/bin/e2e/realtime_test.dart @@ -23,7 +23,7 @@ void main() async { group('Realtime: subscribe and receive'); final ch = await blocks.api.realtimeGetChannel(channel: 'dart-test'); final stream = ch.subscribe(); - final completer = Completer(); + final completer = Completer(); final sub = stream.listen((msg) { if (!completer.isCompleted) completer.complete(msg); @@ -38,13 +38,10 @@ void main() async { try { final msg = await completer.future.timeout(Duration(seconds: 5)); - check(msg != null, 'received message via WebSocket'); - if (msg is Map) { - check(msg['userId'] == 'dart-sub-test', 'message userId matches'); - check(msg['x'] == 42, 'message x matches'); - } else { - check(true, 'received message (type: ${msg.runtimeType})'); - } + check(msg.userId == 'dart-sub-test', 'message userId matches'); + check(msg.x == 42, 'message x matches'); + check(msg.y == 99, 'message y matches'); + check(msg.color == '#00ff00', 'message color matches'); } on TimeoutException { check(false, 'WebSocket message received within 5s (timed out)'); } finally { diff --git a/native/swift/Tests/BlocksE2ETests/RealtimeE2ETests.swift b/native/swift/Tests/BlocksE2ETests/RealtimeE2ETests.swift index ad69d5ad..58aea237 100644 --- a/native/swift/Tests/BlocksE2ETests/RealtimeE2ETests.swift +++ b/native/swift/Tests/BlocksE2ETests/RealtimeE2ETests.swift @@ -21,6 +21,27 @@ final class RealtimeE2ETests: BlocksE2ETestCase { XCTAssertTrue(result.success) } + func testSubscribeAndReceive() async throws { + let channel = try await api.realtimeGetChannel(channel: "swift-sub-test") + let stream = channel.subscribe() + + try await Task.sleep(nanoseconds: 500_000_000) + + let published = Cursor(color: "#00ff00", userId: "swift-sub-test", x: 42, y: 99) + _ = try await api.realtimePublish(cursor: published, channel: "swift-sub-test") + + let deadline = Date().addingTimeInterval(5) + for try await msg in stream { + XCTAssertEqual(msg.userId, "swift-sub-test") + XCTAssertEqual(msg.x, 42) + XCTAssertEqual(msg.y, 99) + XCTAssertEqual(msg.color, "#00ff00") + break + } + XCTAssertTrue(Date() < deadline, "Timed out waiting for message") + channel.close() + } + func testMultiplePublishes() async throws { for idx in 0 ..< 5 { let cursor = Cursor(color: "#000", userId: "burst-\(idx)", x: Double(idx), y: Double(idx * 10)) diff --git a/test-apps/native-bindings/aws-blocks/index.ts b/test-apps/native-bindings/aws-blocks/index.ts index b2b84c3c..e6015a2c 100644 --- a/test-apps/native-bindings/aws-blocks/index.ts +++ b/test-apps/native-bindings/aws-blocks/index.ts @@ -15,6 +15,7 @@ import { stubIdp, relayOrigin, Realtime, + RealtimeChannel, FileBucket, DistributedTable, } from '@aws-blocks/blocks'; @@ -339,7 +340,7 @@ export const api = new ApiNamespace(scope, 'api', (context) => ({ // Realtime // -------------------------------------------------------------------------- - async realtimeGetChannel(channel?: string) { + async realtimeGetChannel(channel?: string): Promise> { return realtime.getChannel('cursors', channel ?? 'default'); }, From 8a032d52a06743a50a6e47377a3da8405c699c3f Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Mon, 22 Jun 2026 13:28:00 -0300 Subject: [PATCH 02/10] Add ability to clear cookies --- .../kotlin/com/aws/blocks/kotlin/BlocksClient.kt | 10 ++++++++++ .../com/aws/blocks/kotlin/PersistentCookiesStorage.kt | 4 ++++ 2 files changed, 14 insertions(+) diff --git a/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/BlocksClient.kt b/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/BlocksClient.kt index 483b9b3b..828d1f1f 100644 --- a/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/BlocksClient.kt +++ b/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/BlocksClient.kt @@ -24,6 +24,16 @@ class BlocksClient( ) { internal val httpClient: HttpClient = defaultHttpClient() + companion object { + /** + * Clears all persisted cookies (e.g. session tokens). + * Call this to ensure a fully logged-out state across app restarts. + */ + fun clearCookies() { + PersistentCookiesStorage().clear() + } + } + suspend fun execute(request: BlocksRequest): JsonElement { val json = Json.encodeToString(request) diff --git a/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/PersistentCookiesStorage.kt b/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/PersistentCookiesStorage.kt index 3591bbab..558d33c5 100644 --- a/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/PersistentCookiesStorage.kt +++ b/native/kotlin/runtime/src/commonMain/kotlin/com/aws/blocks/kotlin/PersistentCookiesStorage.kt @@ -22,5 +22,9 @@ internal class PersistentCookiesStorage( .mapNotNull { (_, value) -> parseServerSetCookieHeader(value) } } + fun clear() { + store.getAll().keys.forEach { store.remove(it) } + } + override fun close() {} } From b3e5b6a1ccfd9bf5cb0a07c9c293b88beac24e46 Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Thu, 18 Jun 2026 12:01:40 -0300 Subject: [PATCH 03/10] Add Kotlin e2e tests --- .github/workflows/native-sdk-e2e.yml | 124 +++++++-- native/kotlin/e2e/.gitignore | 3 + native/kotlin/e2e/build.gradle.kts | 46 ++++ native/kotlin/e2e/gradle.properties | 1 + .../e2e/gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 43705 bytes .../gradle/wrapper/gradle-wrapper.properties | 8 + native/kotlin/e2e/gradlew | 251 ++++++++++++++++++ native/kotlin/e2e/gradlew.bat | 94 +++++++ native/kotlin/e2e/settings.gradle.kts | 31 +++ .../aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt | 100 +++++++ .../blocks/kotlin/e2e/BlocksE2ETestCase.kt | 12 + .../blocks/kotlin/e2e/FileBucketE2ETest.kt | 75 ++++++ .../aws/blocks/kotlin/e2e/KvStoreE2ETest.kt | 95 +++++++ .../aws/blocks/kotlin/e2e/RealtimeE2ETest.kt | 74 ++++++ .../com/aws/blocks/kotlin/e2e/TestEnv.kt | 3 + .../com/aws/blocks/kotlin/e2e/TodosE2ETest.kt | 113 ++++++++ .../com/aws/blocks/kotlin/e2e/TestEnv.ios.kt | 6 + .../com/aws/blocks/kotlin/e2e/TestEnv.jvm.kt | 4 + native/kotlin/run-e2e.sh | 101 +++++++ 19 files changed, 1124 insertions(+), 17 deletions(-) create mode 100644 native/kotlin/e2e/.gitignore create mode 100644 native/kotlin/e2e/build.gradle.kts create mode 100644 native/kotlin/e2e/gradle.properties create mode 100644 native/kotlin/e2e/gradle/wrapper/gradle-wrapper.jar create mode 100644 native/kotlin/e2e/gradle/wrapper/gradle-wrapper.properties create mode 100755 native/kotlin/e2e/gradlew create mode 100644 native/kotlin/e2e/gradlew.bat create mode 100644 native/kotlin/e2e/settings.gradle.kts create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/BlocksE2ETestCase.kt create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/FileBucketE2ETest.kt create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/KvStoreE2ETest.kt create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/RealtimeE2ETest.kt create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.kt create mode 100644 native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TodosE2ETest.kt create mode 100644 native/kotlin/e2e/src/iosTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.ios.kt create mode 100644 native/kotlin/e2e/src/jvmTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.jvm.kt create mode 100755 native/kotlin/run-e2e.sh diff --git a/.github/workflows/native-sdk-e2e.yml b/.github/workflows/native-sdk-e2e.yml index aca6b35b..b593fe4b 100644 --- a/.github/workflows/native-sdk-e2e.yml +++ b/.github/workflows/native-sdk-e2e.yml @@ -159,12 +159,107 @@ jobs: # BLOCKS_URL is provided via $GITHUB_ENV from the "Pick a free port" step. run: dart run bin/e2e_test.dart - # Kotlin E2E (TODO: add when ready) - # kotlin-e2e: - # name: Kotlin E2E - # needs: [detect-changes, setup] - # if: needs.detect-changes.outputs.source-changed == 'true' - # ... + kotlin-e2e-jvm: + name: Kotlin E2E (JVM) + needs: [detect-changes, setup] + if: needs.detect-changes.outputs.source-changed == 'true' + runs-on: ubuntu-latest + timeout-minutes: 15 + steps: + - uses: actions/checkout@v5 + with: + ref: ${{ github.event.pull_request.head.sha }} + persist-credentials: false + + - uses: actions/setup-node@v5 + with: + node-version-file: '.nvmrc' + cache: npm + + - uses: actions/setup-java@v4 + with: + distribution: temurin + java-version: 17 + + - run: npm ci + - run: npm run build + + - name: Download spec + uses: actions/download-artifact@v4 + with: + name: blocks-spec + path: native/kotlin/e2e/ + + - name: Run Kotlin codegen + working-directory: native/kotlin/e2e + run: ./gradlew awsBlocksCodegen + + - name: Start native-bindings server + working-directory: test-apps/native-bindings + run: | + npx tsx aws-blocks/scripts/server.ts & + for i in $(seq 1 30); do + curl -s -X POST http://localhost:3001/aws-blocks/api \ + -H "Content-Type: application/json" \ + -d '{"jsonrpc":"2.0","method":"api.kvGet","params":{"key":"healthcheck"},"id":1}' && break + sleep 1 + done + + - name: Run E2E tests + working-directory: native/kotlin/e2e + run: ./gradlew jvmTest -DBLOCKS_URL=http://localhost:3001/aws-blocks/api + + kotlin-e2e-ios: + name: Kotlin E2E (iOS) + needs: [detect-changes, setup] + if: needs.detect-changes.outputs.source-changed == 'true' + runs-on: macos-15 + timeout-minutes: 20 + steps: + - uses: actions/checkout@v5 + with: + ref: ${{ github.event.pull_request.head.sha }} + persist-credentials: false + + - uses: actions/setup-node@v5 + with: + node-version-file: '.nvmrc' + cache: npm + + - uses: actions/setup-java@v4 + with: + distribution: temurin + java-version: 17 + + - run: npm ci + - run: npm run build + + - name: Download spec + uses: actions/download-artifact@v4 + with: + name: blocks-spec + path: native/kotlin/e2e/ + + - name: Run Kotlin codegen + working-directory: native/kotlin/e2e + run: ./gradlew awsBlocksCodegen + + - name: Start native-bindings server + working-directory: test-apps/native-bindings + run: | + npx tsx aws-blocks/scripts/server.ts & + for i in $(seq 1 30); do + curl -s -X POST http://localhost:3001/aws-blocks/api \ + -H "Content-Type: application/json" \ + -d '{"jsonrpc":"2.0","method":"api.kvGet","params":{"key":"healthcheck"},"id":1}' && break + sleep 1 + done + + - name: Run E2E tests + working-directory: native/kotlin/e2e + env: + BLOCKS_URL: http://localhost:3001/aws-blocks/api + run: ./gradlew iosSimulatorArm64Test swift-e2e: name: Swift E2E @@ -483,25 +578,20 @@ jobs: native-sdk-e2e-required: name: Native SDK E2E (Required) if: always() - needs: [detect-changes, setup, dart-e2e, swift-e2e] + needs: [detect-changes, setup, dart-e2e, kotlin-e2e-jvm, kotlin-e2e-ios, swift-e2e] runs-on: ubuntu-latest steps: - name: Check results run: | - echo "detect-changes=${{ needs.detect-changes.result }} setup=${{ needs.setup.result }} dart-e2e=${{ needs.dart-e2e.result }} swift-e2e=${{ needs.swift-e2e.result }}" - # Required gate = SDK correctness: detect-changes + setup + the local - # dart-e2e suite (no AWS). The deploying `dart-e2e-sandbox` job still - # runs as a NON-BLOCKING signal — it depends on deployed-backend config - # that isn't part of the SDK (real-Cognito email code delivery, which a - # dev-only `cognitoGetLastCode` hook can't satisfy; and fresh-deploy - # OIDC state). The OIDC relay suite was verified 5/5 against a live - # sandbox, so this is environment, not SDK. Re-add `dart-e2e-sandbox` - # to this gate once the deployed Cognito sign-in path is testable. - # Skipped jobs (no source changes) are treated as passing. + echo "detect-changes=${{ needs.detect-changes.result }} setup=${{ needs.setup.result }} dart-e2e=${{ needs.dart-e2e.result }} kotlin-e2e-jvm=${{ needs.kotlin-e2e-jvm.result }} kotlin-e2e-ios=${{ needs.kotlin-e2e-ios.result }} swift-e2e=${{ needs.swift-e2e.result }}" + # Required gate = SDK correctness. Skipped jobs (no source changes) + # are treated as passing. for result in \ "${{ needs.detect-changes.result }}" \ "${{ needs.setup.result }}" \ "${{ needs.dart-e2e.result }}" \ + "${{ needs.kotlin-e2e-jvm.result }}" \ + "${{ needs.kotlin-e2e-ios.result }}" \ "${{ needs.swift-e2e.result }}"; do if [ "$result" = "failure" ] || [ "$result" = "cancelled" ]; then echo "A required native SDK E2E job failed (or was cancelled)." diff --git a/native/kotlin/e2e/.gitignore b/native/kotlin/e2e/.gitignore new file mode 100644 index 00000000..946cfe29 --- /dev/null +++ b/native/kotlin/e2e/.gitignore @@ -0,0 +1,3 @@ +build/ +.gradle/ +blocks.spec.json diff --git a/native/kotlin/e2e/build.gradle.kts b/native/kotlin/e2e/build.gradle.kts new file mode 100644 index 00000000..8289ba33 --- /dev/null +++ b/native/kotlin/e2e/build.gradle.kts @@ -0,0 +1,46 @@ +plugins { + alias(libs.plugins.kotlin.multiplatform) + alias(libs.plugins.kotlinx.serialization) + id("com.aws.blocks.kotlin") +} + +kotlin { + jvm() + + iosSimulatorArm64() + + sourceSets { + commonMain.dependencies { + implementation("com.aws.blocks.kotlin:runtime") + } + + commonTest.dependencies { + implementation(kotlin("test")) + implementation(libs.kotest.assertions.core) + implementation(libs.kotlinx.coroutines.test) + } + + jvmTest.dependencies { + implementation(libs.kotest.runner.junit5) + implementation(libs.ktor.client.okhttp) + } + + iosTest.dependencies { + implementation(libs.ktor.client.darwin) + } + } +} + +tasks.named("jvmTest") { + useJUnitPlatform() + val url = providers.systemProperty("BLOCKS_URL").orElse( + providers.environmentVariable("BLOCKS_URL") + ).getOrElse("") + systemProperty("BLOCKS_URL", url) + environment("BLOCKS_URL", url) +} + +awsBlocks { + apiSpec = file("blocks.spec.json") + packageName = "blocks.e2e" +} diff --git a/native/kotlin/e2e/gradle.properties b/native/kotlin/e2e/gradle.properties new file mode 100644 index 00000000..8c16cf3d --- /dev/null +++ b/native/kotlin/e2e/gradle.properties @@ -0,0 +1 @@ +kotlin.mpp.enableCInteropCommonization=true diff --git a/native/kotlin/e2e/gradle/wrapper/gradle-wrapper.jar b/native/kotlin/e2e/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..9bbc975c742b298b441bfb90dbc124400a3751b9 GIT binary patch literal 43705 zcma&Obx`DOvL%eWOXJW;V64viP??$)@wHcsJ68)>bJS6*&iHnskXE8MjvIPVl|FrmV}Npeql07fCw6`pw`0s zGauF(<*@v{3t!qoUU*=j)6;|-(yg@jvDx&fV^trtZt27?4Tkn729qrItVh@PMwG5$ z+oXHSPM??iHZ!cVP~gYact-CwV`}~Q+R}PPNRy+T-geK+>fHrijpllon_F4N{@b-} z1M0=a!VbVmJM8Xk@NRv)m&aRYN}FSJ{LS;}2ArQ5baSjfy40l@T5)1r-^0fAU6f_} zzScst%$Nd-^ElV~H0TetQhMc%S{}Q4lssln=|;LG?Ulo}*mhg8YvBAUY7YFdXs~vv zv~{duzVw%C#GxkBwX=TYp1Dh*Uaum2?RmsvPaLlzO^fIJ`L?&OV?Y&kKj~^kWC`Ly zfL-}J^4a0Ojuz9O{jUbIS;^JatJ5+YNNHe}6nG9Yd6P-lJiK2ms)A^xq^H2fKrTF) zp!6=`Ece~57>^9(RA4OB9;f1FAhV%zVss%#rDq$9ZW3N2cXC7dMz;|UcRFecBm`DA z1pCO!#6zKp#@mx{2>Qcme8y$Qg_gnA%(`Vtg3ccwgb~D(&@y8#Jg8nNYW*-P{_M#E zZ|wCsQoO1(iIKd-2B9xzI}?l#Q@G5d$m1Lfh0q;iS5FDQ&9_2X-H)VDKA*fa{b(sV zL--krNCXibi1+*C2;4qVjb0KWUVGjjRT{A}Q*!cFmj0tRip2ra>WYJ>ZK4C|V~RYs z6;~+*)5F^x^aQqk9tjh)L;DOLlD8j+0<>kHc8MN|68PxQV`tJFbgxSfq-}b(_h`luA0&;Vk<@51i0 z_cu6{_*=vlvYbKjDawLw+t^H?OV00_73Cn3goU5?})UYFuoSX6Xqw;TKcrsc|r# z$sMWYl@cs#SVopO$hpHZ)cdU-+Ui%z&Sa#lMI~zWW@vE%QDh@bTe0&V9nL>4Et9`N zGT8(X{l@A~loDx}BDz`m6@tLv@$mTlVJ;4MGuj!;9Y=%;;_kj#o8n5tX%@M)2I@}u z_{I!^7N1BxW9`g&Z+K#lZ@7_dXdsqp{W9_`)zgZ=sD~%WS5s$`7z#XR!Lfy(4se(m zR@a3twgMs19!-c4jh`PfpJOSU;vShBKD|I0@rmv_x|+ogqslnLLOepJpPMOxhRb*i zGHkwf#?ylQ@k9QJL?!}MY4i7joSzMcEhrDKJH&?2v{-tgCqJe+Y0njl7HYff z{&~M;JUXVR$qM1FPucIEY(IBAuCHC@^~QG6O!dAjzQBxDOR~lJEr4KS9R*idQ^p{D zS#%NQADGbAH~6wAt}(1=Uff-1O#ITe)31zCL$e9~{w)gx)g>?zFE{Bc9nJT6xR!i8 z)l)~9&~zSZTHk{?iQL^MQo$wLi}`B*qnvUy+Y*jEraZMnEhuj`Fu+>b5xD1_Tp z)8|wedv42#3AZUL7x&G@p@&zcUvPkvg=YJS6?1B7ZEXr4b>M+9Gli$gK-Sgh{O@>q7TUg+H zNJj`6q#O@>4HpPJEHvNij`sYW&u%#=215HKNg;C!0#hH1vlO5+dFq9& zS)8{5_%hz?#D#wn&nm@aB?1_|@kpA@{%jYcs{K%$a4W{k@F zPyTav?jb;F(|GaZhm6&M#g|`ckO+|mCtAU)5_(hn&Ogd z9Ku}orOMu@K^Ac>eRh3+0-y^F`j^noa*OkS3p^tLV`TY$F$cPXZJ48!xz1d7%vfA( zUx2+sDPqHfiD-_wJDb38K^LtpN2B0w=$A10z%F9f_P2aDX63w7zDG5CekVQJGy18I zB!tI`6rZr7TK10L(8bpiaQ>S@b7r_u@lh^vakd0e6USWw7W%d_Ob%M!a`K>#I3r-w zo2^+9Y)Sb?P9)x0iA#^ns+Kp{JFF|$09jb6ZS2}_<-=$?^#IUo5;g`4ICZknr!_aJ zd73%QP^e-$%Xjt|28xM}ftD|V@76V_qvNu#?Mt*A-OV{E4_zC4Ymo|(cb+w^`Wv== z>)c%_U0w`d$^`lZQp@midD89ta_qTJW~5lRrIVwjRG_9aRiQGug%f3p@;*%Y@J5uQ|#dJ+P{Omc`d2VR)DXM*=ukjVqIpkb<9gn9{*+&#p)Ek zN=4zwNWHF~=GqcLkd!q0p(S2_K=Q`$whZ}r@ec_cb9hhg9a z6CE=1n8Q;hC?;ujo0numJBSYY6)GTq^=kB~`-qE*h%*V6-ip=c4+Yqs*7C@@b4YAi zuLjsmD!5M7r7d5ZPe>4$;iv|zq=9=;B$lI|xuAJwi~j~^Wuv!Qj2iEPWjh9Z&#+G>lZQpZ@(xfBrhc{rlLwOC;optJZDj4Xfu3$u6rt_=YY0~lxoy~fq=*L_&RmD7dZWBUmY&12S;(Ui^y zBpHR0?Gk|`U&CooNm_(kkO~pK+cC%uVh^cnNn)MZjF@l{_bvn4`Jc}8QwC5_)k$zs zM2qW1Zda%bIgY^3NcfL)9ug`05r5c%8ck)J6{fluBQhVE>h+IA&Kb}~$55m-^c1S3 zJMXGlOk+01qTQUFlh5Jc3xq|7McY$nCs$5=`8Y;|il#Ypb{O9}GJZD8!kYh{TKqs@ z-mQn1K4q$yGeyMcryHQgD6Ra<6^5V(>6_qg`3uxbl|T&cJVA*M_+OC#>w(xL`RoPQ zf1ZCI3G%;o-x>RzO!mc}K!XX{1rih0$~9XeczHgHdPfL}4IPi~5EV#ZcT9 zdgkB3+NPbybS-d;{8%bZW^U+x@Ak+uw;a5JrZH!WbNvl!b~r4*vs#he^bqz`W93PkZna2oYO9dBrKh2QCWt{dGOw)%Su%1bIjtp4dKjZ^ zWfhb$M0MQiDa4)9rkip9DaH0_tv=XxNm>6MKeWv>`KNk@QVkp$Lhq_~>M6S$oliq2 zU6i7bK;TY)m>-}X7hDTie>cc$J|`*}t=MAMfWIALRh2=O{L57{#fA_9LMnrV(HrN6 zG0K_P5^#$eKt{J|#l~U0WN_3)p^LLY(XEqes0OvI?3)GTNY&S13X+9`6PLVFRf8K) z9x@c|2T72+-KOm|kZ@j4EDDec>03FdgQlJ!&FbUQQH+nU^=U3Jyrgu97&#-W4C*;_ z(WacjhBDp@&Yon<9(BWPb;Q?Kc0gR5ZH~aRNkPAWbDY!FiYVSu!~Ss^9067|JCrZk z-{Rn2KEBR|Wti_iy) zXnh2wiU5Yz2L!W{{_#LwNWXeNPHkF=jjXmHC@n*oiz zIoM~Wvo^T@@t!QQW?Ujql-GBOlnB|HjN@x~K8z)c(X}%%5Zcux09vC8=@tvgY>czq z3D(U&FiETaN9aP}FDP3ZSIXIffq>M3{~eTB{uauL07oYiM=~K(XA{SN!rJLyXeC+Y zOdeebgHOc2aCIgC=8>-Q>zfuXV*=a&gp{l#E@K|{qft@YtO>xaF>O7sZz%8);e86? z+jJlFB{0fu6%8ew^_<+v>>%6eB8|t*_v7gb{x=vLLQYJKo;p7^o9!9A1)fZZ8i#ZU z<|E?bZakjkEV8xGi?n+{Xh3EgFKdM^;4D;5fHmc04PI>6oU>>WuLy6jgpPhf8$K4M zjJo*MbN0rZbZ!5DmoC^@hbqXiP^1l7I5;Wtp2i9Jkh+KtDJoXP0O8qmN;Sp(+%upX zAxXs*qlr(ck+-QG_mMx?hQNXVV~LT{$Q$ShX+&x?Q7v z@8t|UDylH6@RZ?WsMVd3B0z5zf50BP6U<&X_}+y3uJ0c5OD}+J&2T8}A%2Hu#Nt_4 zoOoTI$A!hQ<2pk5wfZDv+7Z{yo+Etqry=$!*pvYyS+kA4xnJ~3b~TBmA8Qd){w_bE zqDaLIjnU8m$wG#&T!}{e0qmHHipA{$j`%KN{&#_Kmjd&#X-hQN+ju$5Ms$iHj4r?) z&5m8tI}L$ih&95AjQ9EDfPKSmMj-@j?Q+h~C3<|Lg2zVtfKz=ft{YaQ1i6Om&EMll zzov%MsjSg=u^%EfnO+W}@)O6u0LwoX709h3Cxdc2Rwgjd%LLTChQvHZ+y<1q6kbJXj3_pq1&MBE{8 zd;aFotyW>4WHB{JSD8Z9M@jBitC1RF;!B8;Rf-B4nOiVbGlh9w51(8WjL&e{_iXN( zAvuMDIm_>L?rJPxc>S`bqC|W$njA0MKWa?V$u6mN@PLKYqak!bR!b%c^ze(M`ec(x zv500337YCT4gO3+9>oVIJLv$pkf`01S(DUM+4u!HQob|IFHJHm#>eb#eB1X5;bMc| z>QA4Zv}$S?fWg~31?Lr(C>MKhZg>gplRm`2WZ--iw%&&YlneQYY|PXl;_4*>vkp;I z$VYTZq|B*(3(y17#@ud@o)XUZPYN*rStQg5U1Sm2gM}7hf_G<>*T%6ebK*tF(kbJc zNPH4*xMnJNgw!ff{YXrhL&V$6`ylY={qT_xg9znQWw9>PlG~IbhnpsG_94Kk_(V-o&v7#F znra%uD-}KOX2dkak**hJnZZQyp#ERyyV^lNe!Qrg=VHiyr7*%j#PMvZMuYNE8o;JM zGrnDWmGGy)(UX{rLzJ*QEBd(VwMBXnJ@>*F8eOFy|FK*Vi0tYDw;#E zu#6eS;%Nm2KY+7dHGT3m{TM7sl=z8|V0e!DzEkY-RG8vTWDdSQFE|?+&FYA146@|y zV(JP>LWL;TSL6rao@W5fWqM1-xr$gRci#RQV2DX-x4@`w{uEUgoH4G|`J%H!N?*Qn zy~rjzuf(E7E!A9R2bSF|{{U(zO+;e29K_dGmC^p7MCP!=Bzq@}&AdF5=rtCwka zTT1A?5o}i*sXCsRXBt)`?nOL$zxuP3i*rm3Gmbmr6}9HCLvL*45d|(zP;q&(v%}S5yBmRVdYQQ24zh z6qL2<2>StU$_Ft29IyF!6=!@;tW=o8vNzVy*hh}XhZhUbxa&;9~woye<_YmkUZ)S?PW{7t; zmr%({tBlRLx=ffLd60`e{PQR3NUniWN2W^~7Sy~MPJ>A#!6PLnlw7O0(`=PgA}JLZ ztqhiNcKvobCcBel2 z-N82?4-()eGOisnWcQ9Wp23|ybG?*g!2j#>m3~0__IX1o%dG4b;VF@^B+mRgKx|ij zWr5G4jiRy}5n*(qu!W`y54Y*t8g`$YrjSunUmOsqykYB4-D(*(A~?QpuFWh;)A;5= zPl|=x+-w&H9B7EZGjUMqXT}MkcSfF}bHeRFLttu!vHD{Aq)3HVhvtZY^&-lxYb2%` zDXk7>V#WzPfJs6u{?ZhXpsMdm3kZscOc<^P&e&684Rc1-d=+=VOB)NR;{?0NjTl~D z1MXak$#X4{VNJyD$b;U~Q@;zlGoPc@ny!u7Pe;N2l4;i8Q=8>R3H{>HU(z z%hV2?rSinAg6&wuv1DmXok`5@a3@H0BrqsF~L$pRYHNEXXuRIWom0l zR9hrZpn1LoYc+G@q@VsFyMDNX;>_Vf%4>6$Y@j;KSK#g)TZRmjJxB!_NmUMTY(cAV zmewn7H{z`M3^Z& z2O$pWlDuZHAQJ{xjA}B;fuojAj8WxhO}_9>qd0|p0nBXS6IIRMX|8Qa!YDD{9NYYK z%JZrk2!Ss(Ra@NRW<7U#%8SZdWMFDU@;q<}%F{|6n#Y|?FaBgV$7!@|=NSVoxlJI4G-G(rn}bh|?mKkaBF$-Yr zA;t0r?^5Nz;u6gwxURapQ0$(-su(S+24Ffmx-aP(@8d>GhMtC5x*iEXIKthE*mk$` zOj!Uri|EAb4>03C1xaC#(q_I<;t}U7;1JqISVHz3tO{) zD(Yu@=>I9FDmDtUiWt81;BeaU{_=es^#QI7>uYl@e$$lGeZ~Q(f$?^3>$<<{n`Bn$ zn8bamZlL@6r^RZHV_c5WV7m2(G6X|OI!+04eAnNA5=0v1Z3lxml2#p~Zo57ri;4>;#16sSXXEK#QlH>=b$inEH0`G#<_ zvp;{+iY)BgX$R!`HmB{S&1TrS=V;*5SB$7*&%4rf_2wQS2ed2E%Wtz@y$4ecq4w<) z-?1vz_&u>s?BMrCQG6t9;t&gvYz;@K@$k!Zi=`tgpw*v-#U1Pxy%S9%52`uf$XMv~ zU}7FR5L4F<#9i%$P=t29nX9VBVv)-y7S$ZW;gmMVBvT$BT8d}B#XV^@;wXErJ-W2A zA=JftQRL>vNO(!n4mcd3O27bHYZD!a0kI)6b4hzzL9)l-OqWn)a~{VP;=Uo|D~?AY z#8grAAASNOkFMbRDdlqVUfB;GIS-B-_YXNlT_8~a|LvRMVXf!<^uy;)d$^OR(u)!) zHHH=FqJF-*BXif9uP~`SXlt0pYx|W&7jQnCbjy|8b-i>NWb@!6bx;1L&$v&+!%9BZ z0nN-l`&}xvv|wwxmC-ZmoFT_B#BzgQZxtm|4N+|;+(YW&Jtj^g!)iqPG++Z%x0LmqnF875%Ry&2QcCamx!T@FgE@H zN39P6e#I5y6Yl&K4eUP{^biV`u9{&CiCG#U6xgGRQr)zew;Z%x+ z-gC>y%gvx|dM=OrO`N@P+h2klPtbYvjS!mNnk4yE0+I&YrSRi?F^plh}hIp_+OKd#o7ID;b;%*c0ES z!J))9D&YufGIvNVwT|qsGWiZAwFODugFQ$VsNS%gMi8OJ#i${a4!E3<-4Jj<9SdSY z&xe|D0V1c`dZv+$8>(}RE|zL{E3 z-$5Anhp#7}oO(xm#}tF+W=KE*3(xxKxhBt-uuJP}`_K#0A< zE%rhMg?=b$ot^i@BhE3&)bNBpt1V*O`g?8hhcsV-n#=|9wGCOYt8`^#T&H7{U`yt2 z{l9Xl5CVsE=`)w4A^%PbIR6uG_5Ww9k`=q<@t9Bu662;o{8PTjDBzzbY#tL;$wrpjONqZ{^Ds4oanFm~uyPm#y1Ll3(H57YDWk9TlC zq;kebC!e=`FU&q2ojmz~GeLxaJHfs0#F%c(i+~gg$#$XOHIi@1mA72g2pFEdZSvp}m0zgQb5u2?tSRp#oo!bp`FP}< zaK4iuMpH+Jg{bb7n9N6eR*NZfgL7QiLxI zk6{uKr>xxJ42sR%bJ%m8QgrL|fzo9@?9eQiMW8O`j3teoO_R8cXPe_XiLnlYkE3U4 zN!^F)Z4ZWcA8gekEPLtFqX-Q~)te`LZnJK_pgdKs)Dp50 zdUq)JjlJeELskKg^6KY!sIou-HUnSFRsqG^lsHuRs`Z{f(Ti9eyd3cwu*Kxp?Ws7l z3cN>hGPXTnQK@qBgqz(n*qdJ2wbafELi?b90fK~+#XIkFGU4+HihnWq;{{)1J zv*Txl@GlnIMOjzjA1z%g?GsB2(6Zb-8fooT*8b0KF2CdsIw}~Hir$d3TdVHRx1m3c z4C3#h@1Xi@{t4zge-#B6jo*ChO%s-R%+9%-E|y<*4;L>$766RiygaLR?X%izyqMXA zb|N=Z-0PSFeH;W6aQ3(5VZWVC>5Ibgi&cj*c%_3=o#VyUJv* zM&bjyFOzlaFq;ZW(q?|yyi|_zS%oIuH^T*MZ6NNXBj;&yM3eQ7!CqXY?`7+*+GN47 zNR#%*ZH<^x{(0@hS8l{seisY~IE*)BD+R6^OJX}<2HRzo^fC$n>#yTOAZbk4%=Bei=JEe=o$jm`or0YDw*G?d> z=i$eEL7^}_?UI^9$;1Tn9b>$KOM@NAnvWrcru)r`?LodV%lz55O3y(%FqN;cKgj7t zlJ7BmLTQ*NDX#uelGbCY>k+&H*iSK?x-{w;f5G%%!^e4QT9z<_0vHbXW^MLR} zeC*jezrU|{*_F`I0mi)9=sUj^G03i@MjXx@ePv@(Udt2CCXVOJhRh4yp~fpn>ssHZ z?k(C>2uOMWKW5FVsBo#Nk!oqYbL`?#i~#!{3w^qmCto05uS|hKkT+iPrC-}hU_nbL zO622#mJupB21nChpime}&M1+whF2XM?prT-Vv)|EjWYK(yGYwJLRRMCkx;nMSpu?0 zNwa*{0n+Yg6=SR3-S&;vq=-lRqN`s9~#)OOaIcy3GZ&~l4g@2h| zThAN#=dh{3UN7Xil;nb8@%)wx5t!l z0RSe_yJQ+_y#qEYy$B)m2yDlul^|m9V2Ia$1CKi6Q19~GTbzqk*{y4;ew=_B4V8zw zScDH&QedBl&M*-S+bH}@IZUSkUfleyM45G>CnYY{hx8J9q}ME?Iv%XK`#DJRNmAYt zk2uY?A*uyBA=nlYjkcNPMGi*552=*Q>%l?gDK_XYh*Rya_c)ve{=ps`QYE0n!n!)_$TrGi_}J|>1v}(VE7I~aP-wns#?>Y zu+O7`5kq32zM4mAQpJ50vJsUDT_^s&^k-llQMy9!@wRnxw@~kXV6{;z_wLu3i=F3m z&eVsJmuauY)8(<=pNUM5!!fQ4uA6hBkJoElL1asWNkYE#qaP?a+biwWw~vB48PRS7 zY;DSHvgbIB$)!uJU)xA!yLE*kP0owzYo`v@wfdux#~f!dv#uNc_$SF@Qq9#3q5R zfuQnPPN_(z;#X#nRHTV>TWL_Q%}5N-a=PhkQ^GL+$=QYfoDr2JO-zo#j;mCsZVUQ) zJ96e^OqdLW6b-T@CW@eQg)EgIS9*k`xr$1yDa1NWqQ|gF^2pn#dP}3NjfRYx$pTrb zwGrf8=bQAjXx*8?du*?rlH2x~^pXjiEmj^XwQo{`NMonBN=Q@Y21!H)D( zA~%|VhiTjaRQ%|#Q9d*K4j~JDXOa4wmHb0L)hn*;Eq#*GI}@#ux4}bt+olS(M4$>c z=v8x74V_5~xH$sP+LZCTrMxi)VC%(Dg!2)KvW|Wwj@pwmH6%8zd*x0rUUe$e(Z%AW z@Q{4LL9#(A-9QaY2*+q8Yq2P`pbk3!V3mJkh3uH~uN)+p?67d(r|Vo0CebgR#u}i? zBxa^w%U|7QytN%L9bKaeYhwdg7(z=AoMeP0)M3XZA)NnyqL%D_x-(jXp&tp*`%Qsx z6}=lGr;^m1<{;e=QQZ!FNxvLcvJVGPkJ63at5%*`W?46!6|5FHYV0qhizSMT>Zoe8 zsJ48kb2@=*txGRe;?~KhZgr-ZZ&c0rNV7eK+h$I-UvQ=552@psVrvj#Ys@EU4p8`3 zsNqJu-o=#@9N!Pq`}<=|((u)>^r0k^*%r<{YTMm+mOPL>EoSREuQc-e2~C#ZQ&Xve zZ}OUzmE4{N-7cqhJiUoO_V#(nHX11fdfVZJT>|6CJGX5RQ+Ng$Nq9xs-C86-)~`>p zW--X53J`O~vS{WWjsAuGq{K#8f#2iz` zzSSNIf6;?5sXrHig%X(}0q^Y=eYwvh{TWK-fT>($8Ex>!vo_oGFw#ncr{vmERi^m7lRi%8Imph})ZopLoIWt*eFWSPuBK zu>;Pu2B#+e_W|IZ0_Q9E9(s@0>C*1ft`V{*UWz^K<0Ispxi@4umgGXW!j%7n+NC~* zBDhZ~k6sS44(G}*zg||X#9Weto;u*Ty;fP!+v*7be%cYG|yEOBomch#m8Np!Sw`L)q+T` zmrTMf2^}7j=RPwgpO9@eXfb{Q>GW#{X=+xt`AwTl!=TgYm)aS2x5*`FSUaaP_I{Xi zA#irF%G33Bw>t?^1YqX%czv|JF0+@Pzi%!KJ?z!u$A`Catug*tYPO`_Zho5iip0@! z;`rR0-|Ao!YUO3yaujlSQ+j-@*{m9dHLtve!sY1Xq_T2L3&=8N;n!!Eb8P0Z^p4PL zQDdZ?An2uzbIakOpC|d@=xEA}v-srucnX3Ym{~I#Ghl~JZU(a~Ppo9Gy1oZH&Wh%y zI=KH_s!Lm%lAY&`_KGm*Ht)j*C{-t}Nn71drvS!o|I|g>ZKjE3&Mq0TCs6}W;p>%M zQ(e!h*U~b;rsZ1OPigud>ej=&hRzs@b>>sq6@Yjhnw?M26YLnDH_Wt#*7S$-BtL08 zVyIKBm$}^vp?ILpIJetMkW1VtIc&7P3z0M|{y5gA!Yi5x4}UNz5C0Wdh02!h zNS>923}vrkzl07CX`hi)nj-B?#n?BJ2Vk0zOGsF<~{Fo7OMCN_85daxhk*pO}x_8;-h>}pcw26V6CqR-=x2vRL?GB#y%tYqi;J}kvxaz}*iFO6YO0ha6!fHU9#UI2Nv z_(`F#QU1B+P;E!t#Lb)^KaQYYSewj4L!_w$RH%@IL-M($?DV@lGj%3ZgVdHe^q>n(x zyd5PDpGbvR-&p*eU9$#e5#g3-W_Z@loCSz}f~{94>k6VRG`e5lI=SE0AJ7Z_+=nnE zTuHEW)W|a8{fJS>2TaX zuRoa=LCP~kP)kx4L+OqTjtJOtXiF=y;*eUFgCn^Y@`gtyp?n14PvWF=zhNGGsM{R- z^DsGxtoDtx+g^hZi@E2Y(msb-hm{dWiHdoQvdX88EdM>^DS#f}&kCGpPFDu*KjEpv$FZtLpeT>@)mf|z#ZWEsueeW~hF78Hu zfY9a+Gp?<)s{Poh_qdcSATV2oZJo$OH~K@QzE2kCADZ@xX(; z)0i=kcAi%nvlsYagvUp(z0>3`39iKG9WBDu3z)h38p|hLGdD+Khk394PF3qkX!02H z#rNE`T~P9vwNQ_pNe0toMCRCBHuJUmNUl)KFn6Gu2je+p>{<9^oZ4Gfb!)rLZ3CR3 z-o&b;Bh>51JOt=)$-9+Z!P}c@cKev_4F1ZZGs$I(A{*PoK!6j@ZJrAt zv2LxN#p1z2_0Ox|Q8PVblp9N${kXkpsNVa^tNWhof)8x8&VxywcJz#7&P&d8vvxn` zt75mu>yV=Dl#SuiV!^1BPh5R)`}k@Nr2+s8VGp?%Le>+fa{3&(XYi~{k{ z-u4#CgYIdhp~GxLC+_wT%I*)tm4=w;ErgmAt<5i6c~)7JD2olIaK8by{u-!tZWT#RQddptXRfEZxmfpt|@bs<*uh?Y_< zD>W09Iy4iM@@80&!e^~gj!N`3lZwosC!!ydvJtc0nH==K)v#ta_I}4Tar|;TLb|+) zSF(;=?$Z0?ZFdG6>Qz)6oPM}y1&zx_Mf`A&chb znSERvt9%wdPDBIU(07X+CY74u`J{@SSgesGy~)!Mqr#yV6$=w-dO;C`JDmv=YciTH zvcrN1kVvq|(3O)NNdth>X?ftc`W2X|FGnWV%s})+uV*bw>aoJ#0|$pIqK6K0Lw!@- z3pkPbzd`ljS=H2Bt0NYe)u+%kU%DWwWa>^vKo=lzDZHr>ruL5Ky&#q7davj-_$C6J z>V8D-XJ}0cL$8}Xud{T_{19#W5y}D9HT~$&YY-@=Th219U+#nT{tu=d|B)3K`pL53 zf7`I*|L@^dPEIDJkI3_oA9vsH7n7O}JaR{G~8 zfi$?kmKvu20(l`dV7=0S43VwVKvtF!7njv1Q{Ju#ysj=|dASq&iTE8ZTbd-iiu|2& zmll%Ee1|M?n9pf~?_tdQ<7%JA53!ulo1b^h#s|Su2S4r{TH7BRB3iIOiX5|vc^;5( zKfE1+ah18YA9o1EPT(AhBtve5(%GMbspXV)|1wf5VdvzeYt8GVGt0e*3|ELBhwRaO zE|yMhl;Bm?8Ju3-;DNnxM3Roelg`^!S%e({t)jvYtJCKPqN`LmMg^V&S z$9OIFLF$%Py~{l?#ReyMzpWixvm(n(Y^Am*#>atEZ8#YD&?>NUU=zLxOdSh0m6mL? z_twklB0SjM!3+7U^>-vV=KyQZI-6<(EZiwmNBzGy;Sjc#hQk%D;bay$v#zczt%mFCHL*817X4R;E$~N5(N$1Tv{VZh7d4mhu?HgkE>O+^-C*R@ zR0ima8PsEV*WFvz`NaB+lhX3&LUZcWWJJrG7ZjQrOWD%_jxv=)`cbCk zMgelcftZ%1-p9u!I-Zf_LLz{hcn5NRbxkWby@sj2XmYfAV?iw^0?hM<$&ZDctdC`; zsL|C-7d;w$z2Gt0@hsltNlytoPnK&$>ksr(=>!7}Vk#;)Hp)LuA7(2(Hh(y3LcxRY zim!`~j6`~B+sRBv4 z<#B{@38kH;sLB4eH2+8IPWklhd25r5j2VR}YK$lpZ%7eVF5CBr#~=kUp`i zlb+>Z%i%BJH}5dmfg1>h7U5Q(-F{1d=aHDbMv9TugohX5lq#szPAvPE|HaokMQIi_ zTcTNsO53(oX=hg2w!XA&+qP}nwr$(C)pgG8emS@Mf7m0&*kiA!wPLS`88c=aD$niJ zp?3j%NI^uy|5*MzF`k4hFbsyQZ@wu!*IY+U&&9PwumdmyfL(S0#!2RFfmtzD3m9V7 zsNOw9RQofl-XBfKBF^~~{oUVouka#r3EqRf=SnleD=r1Hm@~`y8U7R)w16fgHvK-6?-TFth)f3WlklbZh+}0 zx*}7oDF4U^1tX4^$qd%987I}g;+o0*$Gsd=J>~Uae~XY6UtbdF)J8TzJXoSrqHVC) zJ@pMgE#;zmuz?N2MIC+{&)tx=7A%$yq-{GAzyz zLzZLf=%2Jqy8wGHD;>^x57VG)sDZxU+EMfe0L{@1DtxrFOp)=zKY1i%HUf~Dro#8} zUw_Mj10K7iDsX}+fThqhb@&GI7PwONx!5z;`yLmB_92z0sBd#HiqTzDvAsTdx+%W{ z2YL#U=9r!@3pNXMp_nvximh+@HV3psUaVa-lOBekVuMf1RUd26~P*|MLouQrb}XM-bEw(UgQxMI6M&l3Nha z{MBcV=tl(b_4}oFdAo}WX$~$Mj-z70FowdoB{TN|h2BdYs?$imcj{IQpEf9q z)rzpttc0?iwopSmEoB&V!1aoZqEWEeO-MKMx(4iK7&Fhc(94c zdy}SOnSCOHX+A8q@i>gB@mQ~Anv|yiUsW!bO9hb&5JqTfDit9X6xDEz*mQEiNu$ay zwqkTV%WLat|Ar+xCOfYs0UQNM`sdsnn*zJr>5T=qOU4#Z(d90!IL76DaHIZeWKyE1 zqwN%9+~lPf2d7)vN2*Q?En?DEPcM+GQwvA<#;X3v=fqsxmjYtLJpc3)A8~*g(KqFx zZEnqqruFDnEagXUM>TC7ngwKMjc2Gx%#Ll#=N4qkOuK|;>4%=0Xl7k`E69@QJ-*Vq zk9p5!+Ek#bjuPa<@Xv7ku4uiWo|_wy)6tIr`aO!)h>m5zaMS-@{HGIXJ0UilA7*I} z?|NZ!Tp8@o-lnyde*H+@8IHME8VTQOGh96&XX3E+}OB zA>VLAGW+urF&J{H{9Gj3&u+Gyn?JAVW84_XBeGs1;mm?2SQm9^!3UE@(_FiMwgkJI zZ*caE={wMm`7>9R?z3Ewg!{PdFDrbzCmz=RF<@(yQJ_A6?PCd_MdUf5vv6G#9Mf)i#G z($OxDT~8RNZ>1R-vw|nN699a}MQN4gJE_9gA-0%>a?Q<9;f3ymgoi$OI!=aE6Elw z2I`l!qe-1J$T$X&x9Zz#;3!P$I);jdOgYY1nqny-k=4|Q4F!mkqACSN`blRji>z1` zc8M57`~1lgL+Ha%@V9_G($HFBXH%k;Swyr>EsQvg%6rNi){Tr&+NAMga2;@85531V z_h+h{jdB&-l+%aY{$oy2hQfx`d{&?#psJ78iXrhrO)McOFt-o80(W^LKM{Zw93O}m z;}G!51qE?hi=Gk2VRUL2kYOBRuAzktql%_KYF4>944&lJKfbr+uo@)hklCHkC=i)E zE*%WbWr@9zoNjumq|kT<9Hm*%&ahcQ)|TCjp@uymEU!&mqqgS;d|v)QlBsE0Jw|+^ zFi9xty2hOk?rlGYT3)Q7i4k65@$RJ-d<38o<`}3KsOR}t8sAShiVWevR8z^Si4>dS z)$&ILfZ9?H#H&lumngpj7`|rKQQ`|tmMmFR+y-9PP`;-425w+#PRKKnx7o-Rw8;}*Ctyw zKh~1oJ5+0hNZ79!1fb(t7IqD8*O1I_hM;o*V~vd_LKqu7c_thyLalEF8Y3oAV=ODv z$F_m(Z>ucO(@?+g_vZ`S9+=~Msu6W-V5I-V6h7->50nQ@+TELlpl{SIfYYNvS6T6D z`9cq=at#zEZUmTfTiM3*vUamr!OB~g$#?9$&QiwDMbSaEmciWf3O2E8?oE0ApScg38hb&iN%K+kvRt#d))-tr^ zD+%!d`i!OOE3in0Q_HzNXE!JcZ<0;cu6P_@;_TIyMZ@Wv!J z)HSXAYKE%-oBk`Ye@W3ShYu-bfCAZ}1|J16hFnLy z?Bmg2_kLhlZ*?`5R8(1%Y?{O?xT)IMv{-)VWa9#1pKH|oVRm4!lLmls=u}Lxs44@g^Zwa0Z_h>Rk<(_mHN47=Id4oba zQ-=qXGz^cNX(b*=NT0<^23+hpS&#OXzzVO@$Z2)D`@oS=#(s+eQ@+FSQcpXD@9npp zlxNC&q-PFU6|!;RiM`?o&Sj&)<4xG3#ozRyQxcW4=EE;E)wcZ&zUG*5elg;{9!j}I z9slay#_bb<)N!IKO16`n3^@w=Y%duKA-{8q``*!w9SW|SRbxcNl50{k&CsV@b`5Xg zWGZ1lX)zs_M65Yt&lO%mG0^IFxzE_CL_6$rDFc&#xX5EXEKbV8E2FOAt>Ka@e0aHQ zMBf>J$FLrCGL@$VgPKSbRkkqo>sOXmU!Yx+Dp7E3SRfT`v~!mjU3qj-*!!YjgI*^) z+*05x78FVnVwSGKr^A|FW*0B|HYgc{c;e3Ld}z4rMI7hVBKaiJRL_e$rxDW^8!nGLdJ<7ex9dFoyj|EkODflJ#Xl`j&bTO%=$v)c+gJsLK_%H3}A_} z6%rfG?a7+k7Bl(HW;wQ7BwY=YFMSR3J43?!;#~E&)-RV_L!|S%XEPYl&#`s!LcF>l zn&K8eemu&CJp2hOHJKaYU#hxEutr+O161ze&=j3w12)UKS%+LAwbjqR8sDoZHnD=m0(p62!zg zxt!Sj65S?6WPmm zL&U9c`6G}T`irf=NcOiZ!V)qhnvMNOPjVkyO2^CGJ+dKTnNAPa?!AxZEpO7yL_LkB zWpolpaDfSaO-&Uv=dj7`03^BT3_HJOAjn~X;wz-}03kNs@D^()_{*BD|0mII!J>5p z1h06PTyM#3BWzAz1FPewjtrQfvecWhkRR=^gKeFDe$rmaYAo!np6iuio3>$w?az$E zwGH|zy@OgvuXok}C)o1_&N6B3P7ZX&-yimXc1hAbXr!K&vclCL%hjVF$yHpK6i_Wa z*CMg1RAH1(EuuA01@lA$sMfe*s@9- z$jNWqM;a%d3?(>Hzp*MiOUM*?8eJ$=(0fYFis!YA;0m8s^Q=M0Hx4ai3eLn%CBm14 zOb8lfI!^UAu_RkuHmKA-8gx8Z;##oCpZV{{NlNSe<i;9!MfIN!&;JI-{|n{(A19|s z9oiGesENcLf@NN^9R0uIrgg(46r%kjR{0SbnjBqPq()wDJ@LC2{kUu_j$VR=l`#RdaRe zxx;b7bu+@IntWaV$si1_nrQpo*IWGLBhhMS13qH zTy4NpK<-3aVc;M)5v(8JeksSAGQJ%6(PXGnQ-g^GQPh|xCop?zVXlFz>42%rbP@jg z)n)% zM9anq5(R=uo4tq~W7wES$g|Ko z1iNIw@-{x@xKxSXAuTx@SEcw(%E49+JJCpT(y=d+n9PO0Gv1SmHkYbcxPgDHF}4iY zkXU4rkqkwVBz<{mcv~A0K|{zpX}aJcty9s(u-$je2&=1u(e#Q~UA{gA!f;0EAaDzdQ=}x7g(9gWrWYe~ zV98=VkHbI!5Rr;+SM;*#tOgYNlfr7;nLU~MD^jSdSpn@gYOa$TQPv+e8DyJ&>aInB zDk>JmjH=}<4H4N4z&QeFx>1VPY8GU&^1c&71T*@2#dINft%ibtY(bAm%<2YwPL?J0Mt{ z7l7BR718o5=v|jB!<7PDBafdL>?cCdVmKC;)MCOobo5edt%RTWiReAMaIU5X9h`@El0sR&Z z7Ed+FiyA+QAyWn zf7=%(8XpcS*C4^-L24TBUu%0;@s!Nzy{e95qjgkzElf0#ou`sYng<}wG1M|L? zKl6ITA1X9mt6o@S(#R3B{uwJI8O$&<3{+A?T~t>Kapx6#QJDol6%?i-{b1aRu?&9B z*W@$T*o&IQ&5Kc*4LK_)MK-f&Ys^OJ9FfE?0SDbAPd(RB)Oju#S(LK)?EVandS1qb#KR;OP|86J?;TqI%E8`vszd&-kS%&~;1Als=NaLzRNnj4q=+ zu5H#z)BDKHo1EJTC?Cd_oq0qEqNAF8PwU7fK!-WwVEp4~4g z3SEmE3-$ddli))xY9KN$lxEIfyLzup@utHn=Q{OCoz9?>u%L^JjClW$M8OB`txg4r6Q-6UlVx3tR%%Z!VMb6#|BKRL`I))#g zij8#9gk|p&Iwv+4s+=XRDW7VQrI(+9>DikEq!_6vIX8$>poDjSYIPcju%=qluSS&j zI-~+ztl1f71O-B+s7Hf>AZ#}DNSf`7C7*)%(Xzf|ps6Dr7IOGSR417xsU=Rxb z1pgk9vv${17h7mZ{)*R{mc%R=!i}8EFV9pl8V=nXCZruBff`$cqN3tpB&RK^$yH!A8RL zJ5KltH$&5%xC7pLZD}6wjD2-uq3&XL8CM$@V9jqalF{mvZ)c4Vn?xXbvkB(q%xbSdjoXJXanVN@I;8I`)XlBX@6BjuQKD28Jrg05} z^ImmK-Ux*QMn_A|1ionE#AurP8Vi?x)7jG?v#YyVe_9^up@6^t_Zy^T1yKW*t* z&Z0+0Eo(==98ig=^`he&G^K$I!F~1l~gq}%o5#pR6?T+ zLmZu&_ekx%^nys<^tC@)s$kD`^r8)1^tUazRkWEYPw0P)=%cqnyeFo3nW zyV$^0DXPKn5^QiOtOi4MIX^#3wBPJjenU#2OIAgCHPKXv$OY=e;yf7+_vI7KcjKq% z?RVzC24ekYp2lEhIE^J$l&wNX0<}1Poir8PjM`m#zwk-AL0w6WvltT}*JN8WFmtP_ z6#rK7$6S!nS!}PSFTG6AF7giGJw5%A%14ECde3x95(%>&W3zUF!8x5%*h-zk8b@Bz zh`7@ixoCVCZ&$$*YUJpur90Yg0X-P82>c~NMzDy7@Ed|6(#`;{)%t7#Yb>*DBiXC3 zUFq(UDFjrgOsc%0KJ_L;WQKF0q!MINpQzSsqwv?#Wg+-NO; z84#4nk$+3C{2f#}TrRhin=Erdfs77TqBSvmxm0P?01Tn@V(}gI_ltHRzQKPyvQ2=M zX#i1-a(>FPaESNx+wZ6J{^m_q3i})1n~JG80c<%-Ky!ZdTs8cn{qWY%x%X^27-Or_ z`KjiUE$OG9K4lWS16+?aak__C*)XA{ z6HmS*8#t_3dl}4;7ZZgn4|Tyy1lOEM1~6Qgl(|BgfQF{Mfjktch zB5kc~4NeehRYO%)3Z!FFHhUVVcV@uEX$eft5Qn&V3g;}hScW_d)K_h5i)vxjKCxcf zL>XlZ^*pQNuX*RJQn)b6;blT3<7@Ap)55)aK3n-H08GIx65W zO9B%gE%`!fyT`)hKjm-&=on)l&!i-QH+mXQ&lbXg0d|F{Ac#U;6b$pqQcpqWSgAPo zmr$gOoE*0r#7J=cu1$5YZE%uylM!i3L{;GW{ae9uy)+EaV>GqW6QJ)*B2)-W`|kLL z)EeeBtpgm;79U_1;Ni5!c^0RbG8yZ0W98JiG~TC8rjFRjGc6Zi8BtoC);q1@8h7UV zFa&LRzYsq%6d!o5-yrqyjXi>jg&c8bu}{Bz9F2D(B%nnuVAz74zmBGv)PAdFXS2(A z=Z?uupM2f-ar0!A)C6l2o8a|+uT*~huH)!h3i!&$ zr>76mt|lwexD(W_+5R{e@2SwR15lGxsnEy|gbS-s5?U}l*kcfQlfnQKo5=LZXizrL zM=0ty+$#f_qGGri-*t@LfGS?%7&LigUIU#JXvwEdJZvIgPCWFBTPT`@Re5z%%tRDO zkMlJCoqf2A=hkU7Ih=IxmPF~fEL90)u76nfFRQwe{m7b&Ww$pnk~$4Lx#s9|($Cvt ze|p{Xozhb^g1MNh-PqS_dLY|Fex4|rhM#lmzq&mhebD$5P>M$eqLoV|z=VQY{)7&sR#tW zl(S1i!!Rrg7kv+V@EL51PGpm511he%MbX2-Jl+DtyYA(0gZyZQjPZP@`SAH{n&25@ zd)emg(p2T3$A!Nmzo|%=z%AhLX)W4hsZNFhmd4<1l6?b3&Fg)G(Zh%J{Cf8Q;?_++ zgO7O<(-)H|Es@QqUgcXNJEfC-BCB~#dhi6ADVZtL!)Mx|u7>ukD052z!QZ5UC-+rd zYXWNRpCmdM{&?M9OMa;OiN{Y#0+F>lBQ=W@M;OXq;-7v3niC$pM8p!agNmq7F04;| z@s-_98JJB&s`Pr6o$KZ=8}qO*7m6SMp7kVmmh$jfnG{r@O(auI7Z^jj!x}NTLS9>k zdo}&Qc2m4Ws3)5qFw#<$h=g%+QUKiYog33bE)e4*H~6tfd42q+|FT5+vmr6Y$6HGC zV!!q>B`1Ho|6E|D<2tYE;4`8WRfm2#AVBBn%_W)mi(~x@g;uyQV3_)~!#A6kmFy0p zY~#!R1%h5E{5;rehP%-#kjMLt*{g((o@0-9*8lKVu+t~CtnOxuaMgo2ssI6@kX09{ zkn~q8Gx<6T)l}7tWYS#q0&~x|-3ho@l}qIr79qOJQcm&Kfr7H54=BQto0)vd1A_*V z)8b2{xa5O^u95~TS=HcJF5b9gMV%&M6uaj<>E zPNM~qGjJ~xbg%QTy#(hPtfc46^nN=Y_GmPYY_hTL{q`W3NedZyRL^kgU@Q$_KMAjEzz*eip`3u6AhPDcWXzR=Io5EtZRPme>#K9 z4lN&87i%YYjoCKN_z9YK+{fJu{yrriba#oGM|2l$ir017UH86Eoig3x+;bz32R*;n zt)Eyg#PhQbbGr^naCv0?H<=@+Poz)Xw*3Gn00qdSL|zGiyYKOA0CP%qk=rBAlt~hr zEvd3Z4nfW%g|c`_sfK$z8fWsXTQm@@eI-FpLGrW<^PIjYw)XC-xFk+M<6>MfG;WJr zuN}7b;p^`uc0j(73^=XJcw;|D4B(`)Flm|qEbB?>qBBv2V?`mWA?Q3yRdLkK7b}y& z+!3!JBI{+&`~;%Pj#n&&y+<;IQzw5SvqlbC+V=kLZLAHOQb zS{{8E&JXy1p|B&$K!T*GKtSV^{|Uk;`oE*F;?@q1dX|>|KWb@|Dy*lbGV0Gx;gpA$ z*N16`v*gQ?6Skw(f^|SL;;^ox6jf2AQ$Zl?gvEV&H|-ep*hIS@0TmGu1X1ZmEPY&f zKCrV{UgRAiNU*=+Uw%gjIQhTAC@67m)6(_D+N>)(^gK74F%M2NUpWpho}aq|Kxh$3 zz#DWOmQV4Lg&}`XTU41Z|P~5;wN2c?2L{a=)Xi~!m#*=22c~&AW zgG#yc!_p##fI&E{xQD9l#^x|9`wSyCMxXe<3^kDIkS0N>=oAz7b`@M>aT?e$IGZR; zS;I{gnr4cS^u$#>D(sjkh^T6_$s=*o%vNLC5+6J=HA$&0v6(Y1lm|RDn&v|^CTV{= zjVrg_S}WZ|k=zzp>DX08AtfT@LhW&}!rv^);ds7|mKc5^zge_Li>FTNFoA8dbk@K$ zuuzmDQRL1leikp%m}2_`A7*7=1p2!HBlj0KjPC|WT?5{_aa%}rQ+9MqcfXI0NtjvXz1U)|H>0{6^JpHspI4MfXjV%1Tc1O!tdvd{!IpO+@ z!nh()i-J3`AXow^MP!oVLVhVW&!CDaQxlD9b|Zsc%IzsZ@d~OfMvTFXoEQg9Nj|_L zI+^=(GK9!FGck+y8!KF!nzw8ZCX>?kQr=p@7EL_^;2Mlu1e7@ixfZQ#pqpyCJ```(m;la2NpJNoLQR};i4E;hd+|QBL@GdQy(Cc zTSgZ)4O~hXj86x<7&ho5ePzDrVD`XL7{7PjjNM1|6d5>*1hFPY!E(XDMA+AS;_%E~ z(dOs)vy29&I`5_yEw0x{8Adg%wvmoW&Q;x?5`HJFB@KtmS+o0ZFkE@f)v>YYh-z&m z#>ze?@JK4oE7kFRFD%MPC@x$^p{aW}*CH9Y_(oJ~St#(2)4e-b34D>VG6giMGFA83 zpZTHM2I*c8HE}5G;?Y7RXMA2k{Y?RxHb2 zZFQv?!*Kr_q;jt3`{?B5Wf}_a7`roT&m1BN9{;5Vqo6JPh*gnN(gj}#=A$-F(SRJj zUih_ce0f%K19VLXi5(VBGOFbc(YF zLvvOJl+W<}>_6_4O?LhD>MRGlrk;~J{S#Q;Q9F^;Cu@>EgZAH=-5fp02(VND(v#7n zK-`CfxEdonk!!65?3Ry(s$=|CvNV}u$5YpUf?9kZl8h@M!AMR7RG<9#=`_@qF@})d ztJDH>=F!5I+h!4#^DN6C$pd6^)_;0Bz7|#^edb9_qFg&eI}x{Roovml5^Yf5;=ehZ zGqz-x{I`J$ejkmGTFipKrUbv-+1S_Yga=)I2ZsO16_ye@!%&Op^6;#*Bm;=I^#F;? z27Sz-pXm4x-ykSW*3`)y4$89wy6dNOP$(@VYuPfb97XPDTY2FE{Z+{6=}LLA23mAc zskjZJ05>b)I7^SfVc)LnKW(&*(kP*jBnj>jtph`ZD@&30362cnQpZW8juUWcDnghc zy|tN1T6m?R7E8iyrL%)53`ymXX~_;#r${G`4Q(&7=m7b#jN%wdLlS0lb~r9RMdSuU zJ{~>>zGA5N`^QmrzaqDJ(=9y*?@HZyE!yLFONJO!8q5Up#2v>fR6CkquE$PEcvw5q zC8FZX!15JgSn{Gqft&>A9r0e#be^C<%)psE*nyW^e>tsc8s4Q}OIm})rOhuc{3o)g1r>Q^w5mas) zDlZQyjQefhl0PmH%cK05*&v{-M1QCiK=rAP%c#pdCq_StgDW}mmw$S&K6ASE=`u4+ z5wcmtrP27nAlQCc4qazffZoFV7*l2=Va}SVJD6CgRY^=5Ul=VYLGqR7H^LHA;H^1g}ekn=4K8SPRCT+pel*@jUXnLz+AIePjz@mUsslCN2 z({jl?BWf&DS+FlE5Xwp%5zXC7{!C=k9oQLP5B;sLQxd`pg+B@qPRqZ6FU(k~QkQu{ zF~5P=kLhs+D}8qqa|CQo2=cv$wkqAzBRmz_HL9(HRBj&73T@+B{(zZahlkkJ>EQmQ zenp59dy+L;sSWYde!z_W+I~-+2Xnm;c;wI_wH=RTgxpMlCW@;Us*0}L74J#E z8XbDWJGpBscw?W$&ZxZNxUq(*DKDwNzW7_}AIw$HF6Ix|;AJ3t6lN=v(c9=?n9;Y0 zK9A0uW4Ib9|Mp-itnzS#5in=Ny+XhGO8#(1_H4%Z6yEBciBiHfn*h;^r9gWb^$UB4 zJtN8^++GfT`1!WfQt#3sXGi-p<~gIVdMM<#ZZ0e_kdPG%Q5s20NNt3Jj^t$(?5cJ$ zGZ#FT(Lt>-0fP4b5V3az4_byF12k%}Spc$WsRydi&H|9H5u1RbfPC#lq=z#a9W(r1 z!*}KST!Yhsem0tO#r!z`znSL-=NnP~f(pw-sE+Z$e7i7t9nBP^5ts1~WFmW+j+<@7 zIh@^zKO{1%Lpx^$w8-S+T_59v;%N;EZtJzcfN%&@(Ux5 z@YzX^MwbbXESD*d(&qT7-eOHD6iaH-^N>p2sVdq&(`C$;?#mgBANIc5$r| z^A$r)@c{Z}N%sbfo?T`tTHz9-YpiMW?6>kr&W9t$Cuk{q^g1<$I~L zo++o2!!$;|U93cI#p4hyc!_Mv2QKXxv419}Ej#w#%N+YIBDdnn8;35!f2QZkUG?8O zpP47Wf9rnoI^^!9!dy~XsZ&!DU4bVTAi3Fc<9$_krGR&3TI=Az9uMgYU5dd~ksx+} zP+bs9y+NgEL>c@l>H1R%@>5SWg2k&@QZL(qNUI4XwDl6(=!Q^U%o984{|0e|mR$p+ z9BcwttR#7?As?@Q{+j?K6H7R71PuiA^Dl$=f47nUKL|koCwutc_P<-m{|Al3C~o7w z=4S=}s5LcJFT1zjS)+10X_r$74`K78pz!nGGH%JV%w75!YSIt#hT7}}K>+@{{a+Im z5p#6%^X*txY?}|T17xWW*sa^?G2QHt#@tlcw0GIcy;|NR2vaCBDvn=`h)1il7E5Rx z%)mA4$`$OZx)NF5vXZnaJ1)*cA6ryx6Ll~t!LzhxvcTedxT;>JS&e=?-&DXUPaQ2~ zH*69ezE`hgV{K-|0z|m~ld}=X^-Ob={wpex&}*+Rz{gx)G}gn!C_VN{UN=>^EV=Xc zr$-HO09cW&p4^M}V3yBjTP_xrVcc8iU_^Y-JD~(bgw*@GXGB1gYKz5DWO+O`>})|N zWrC)MR93yA)3{&27-M)TJB6Ml3~?zZg#mYsF=#OSTaw&K z@hBftpt+2l@)YK@|3DvTjl(8wZtpLp9Ik!6G$CSL_idZ$Ti?R)4toe8bb)l|)lNb}?K;O2K9vyn1QG zd=v#y-Ld49UVkmfRU>Egc+(Y$^-;6vW;3Lcu*6~etz}0|@+b|+!UCal)DEYGLbHWJ zll5Wi^$Y<6@S%^y%hdjRh6&{!z1Py|lZ|q&Wub3l41uN2zEF8E&5H5?PL*&V}?*a}Lp% zCYi{ghjpRNT^^B+_U59No50Ghih5qn(W5`RkrsDWr{~A1dgtv{sRkH4RU2^A{jb&0 zxVRnrm|u<;$iI;M6A>$POP)TWGU-gSjAERk*EGmVT(aw$!XUSe~7Ql-oRA54^4V(JWS6Q1mG?!vZ zx+pE!FEtvqr|Xrcb3oR`%LHFLmU_&{=p%mGy6MRe2Yz_5WJ8p@IgU2 zdVvvhhQtiQkChK%*&PsiPCBL9oDOoJX8!$S(V>R}+1M}wzK*U*A{KJ`r=lM;mPrKU zQDqqN(W*u-5-?$(SIk<6A0E}34y&@-IVC%S!a1F4kz<3bIKjlyD)ooO_7ftl%S_(6w`!vX&1PZ!K`@D@L6JR)6zO@Dl!YF{RY}d3HZ7?Q5E>w=$ ze)H_)48Ds*Ov4?zoGb2fe3}{!5Ooc|KCIni1o)(Gj+CO?`*7jsV`hIv@8J(22o4Q? zu?Bvi)zDG(me?7XKeL|iF9ZRgZdT*}Ffsl62Cu;{Gv9j6dO zPt*H2GqC)-C`V`ceuu=tM{7!2yTEj=*5+T~5DYiZ)Hy)*PARYI6R2lZXoOj;v8M4W z*O-NX(7_~Q&A3>Oaw&1lBH_H%SwmISX-i3)HfHvBOeVwTT{LUM3}ZuZmg<(>)KE;d zbs2!0v6>J;1nQ0UJkUxnkE@Ibi~Q}M=-=Rk;hcOnxO$luOKEVxZc|!XECgex(2`}T z3Y;Q_6rL)e+SrOZhQj5_e}Lv>w7n*Pep$yWZNQl>ubBgb_NIWWDn3kNpn+MPQXV;8 zV|_Ba5jsQ(w&Ey^IM|@|y!AqcJ#3m0#Q6_qvgCG~eoF#mnGmbO(;DP+bW%_aOs1R_ z@9p#7X2UA^--#Nwx_Hvk2l1`eO{P*#j@q2UELtH|Uh6hxR`h_847wIJo0=5CQQ`6it|%a-I$^&a@we1rc&*;QIu5Ck^?) zx*5eSd*mG#=6Hi(5!;5uUi&{HfnT1S8X-)?gE5CZ6KWoqM5|CyrULmuFBKOU8SOp* z{IB1$OCcq`S-k*xs;4fmhKsIGZ;GYAY*%(@875NxhMq|j*m4CNLI(Vho|N|F);!E0cS5y^$H^Izje?z}oTgyr`9x9G&rlJZw&uqIoBMtz zzhU0(9;w02?m#0!)cFi*r+8YvooQ;(s2lLVvyLqAE%Xqe!vtWbIs!l1Bpp(FIht-Z zPn#CN-2C|J*GhA2fuHqYQ2mJiXlGTzD}mkr2;ia8Wp}h^;OS7+N^Mw|en!1${vN6 z-x{8N*4UekA~`IV2&K-GzhAqau|}d*pEQ$1MH$cFi03OG^1NetZ_jW^STaEzr&Xho zB452St%v3ez2#TFm~`gZh$vi=in+y2d!z<{OZ~Kty-5bQ;0O=k_ESi8Nx9{*T`LJy6jqR>&|+>OZ;+=0hA04 zE25t^sE9HG)3^KKR_A5WDkqispweP9!I-@dCO&N!JrD@i{WBHnfQ z95o8;d$`AFnca3;N-0iX-CmbbAp5yQ!GoH;h7Cn?m{ammZJI8igP{U73lFnl2&gCs zqJ4(Vo~^j`{zOAzScL5B_Sm?Mjtek1d(A6X5ObcZi$;aOYy|g$}BY z$GEP3#i60Ju_&3SHzryH!gUFwC9-295u??cf+aYRQ1$+!rc#42YNattd6mZEFI@?C zqFM>6+zxEunIHDZ>{Z15u##>N(28Dw!>G(k*dB{NHvip@aP}f`@=Q;!o;zRMWo{Cx zo?kyzh8n7#f1g0&g>Cd>O-2g?uPwy8sy8hZbHSsXPmU;@l=HL=zm7mN(=@*|D$i+u zs~TllkCTvD$f&-#b9B?}#Lg*-ibK13R_a$RyoN3m5`10tdhAq{+VW)K#Bht-ra1*J z+n$N%V>u0rVtx`aKJDwXXrxaD7nS<>$=c82v7@KVx^S@vT;h=SZE37K>iahpx3;VDzEr9GY=2(%uaqM;^76eSP0QLzo4sI z>p_Eei*T$K;|qK`sq;?Hesp}(@VvX2Q4sAMYAJ}b&d$htDMC{FG-$o4k9ApECi1$a zXdamjiOGKHBh(4M<3(2x6n-CrmZMCknkQxdSS!qlis#I}btfX;J`JU3RlvtLdrymP zG0ZzrsGXVFiq+Wk1=BFay&9ZiCE#(`h~CL+c-Hs@iGTU@YxM%vlg;)`Tf~IknA^02 zXkN#Txo6aR{j$wP5T#|UH#5AP2{rSY8p?jKFv zG3kn3y`FaV!*Jq%m39_TQEhD>M@l*bhEPGe1{ft3q#K5AknT=F2_=T^l#ou5ln@D# z5Tzs(kRG@qNDa~HLNvfv7Z0g=bSlb?`QAx|Gfoni|iHJ%K0cy z;~Nsaa+{8HP_qrb{nj+xzkdYhSI@W4N_1`z(eSGIkbDP)!Ko|M%}Rqp(~KI2hl~eE zvJ!j4m6iwMgKy>fkCLC)`M$z9EV}B+sq1}}kVf$(ig0pWTY?rHz1Sm=4srTGNb^JG z=2$9wz-C@aZZZ2!HY#HNejqZRmE=pN(D$Kui$NpfhU`!y_s{@MIxiJdHb1|{6xb`> zE74_@QtgtG{4=3P1$^vn&m}7Aw8!1DnT$2thO#~44wl(N#ao8S0@t@m+Z!KD2CfK; z)n5DAPKV_etmH1aLDK$?`;sL91iVt$D z*SG}=-LIAg(*+JON!-5ivqOMQ1S!OQUgHglDsKik&Mwg;vva523`JwQH6SRz9eTY# zTIi23145~kc3r1mSWC_RzD%hs$S#!pkI9!BU80jJCJcwo*FZolQG$q`8C1d9pP@ND zG^&-ZraIvhg_FDVSfKGwkcI=avIan%2sK4coUs~Nr8jC*&!G0#?}_^s3r-c}-uAqi zM-Lw>Y}I``T;IS%Y|qH;s{F*ZefM!4{I5awr!K+T@uPd*Vu*iPWI}>(-D{zxsN>LG z=@747a_Rb2>q?y8xYf?dq2HM5tFO8Y5e4N;Y=xy8yAhI zsm>oy%R5;7)7T3V_b2%`aH^tNlsQpFxIFW#iV#8?{6{^cGr{A0@1bA)|K z>MMTuZD(pd2t|7vmHtywGXb%%=)S<`OG~}U+jm#xd%H8 z$v8-C%F?ah3$;hn?{G3(LT!SgvCVi$vwsZssAQvUwT`Q%qSw!LSd!(I!64w1=%Sc1Mck)q1@pZ@)=SY zoX}d+L3-RA|c?G3_BQNm&( z!i$AZ7cI(z7q|e9VM##6T3Xorj1JG(9os$;(I$y%mBy(#8{|3l4|x*oBAQL^XhZ0g zy1FR1teRrpKq{uLAibTLx#n({qwjlkOvR{OdSAeT5ah4-sNN)n4Clg1T9lzF)&yj; zyal1%+s4n1IG;^VPWJ;#olpk8Z42Gj-tjFeQ&PlxB)`oCNoUYKj4U$AeG8rYiD{pK zndDf&2;2;)D|KvOZP+e7fcPU9k4M2sfhr@vC~Ly0?S-4dz)ZGAYpCsAhChgbxLd4g zhTrbIPkO5SEp_kD>Ha0m12h5n3s;mE8kn515&nzSf+^D= zyE{JnJ;43l&BH55CL<=W%CF;6iUI)V5C*6!`**KqvzR2=Fj*3Y4`HYwx}TYD445(K z-QtXwtL?m*(F=LVH*H4oM>dXHBW=38q_dZ-_Vr&qpEPxd9Fs95P5W~@Z|Rt+WZP6l zPSQ}~Dh4V?Pp1g&Hk*Px?lm16C@X6M29Vrk%Rw@E||E-v~$ zb_E~{z<}#8i`Mx9mkqtd#Z1lZ-E_J8I+2oumc#x1)jdvh{W76NKm6x-RYpM~v!P8$ zw3e|YVf|}Hse9~oC@N7^j}Fi$hNpyaYnu1}bdXsD=^oI*%WKvbme|BI}$G3>smu#6y)ls|j? zF7Bhu9Z)j)C;3cZb+I>0stSK^WLOYV^U{pUYkgv>?+Nt^5j*CUB=eGw-CvU&40>y~ zGoHLXxY^7k5Xgv62{iQy|5jJQuq0|LU`}lE@flQ2Z*Zn*VWcQjm4FTb>LSVox^S4q zLn`LfS@mrjKCmg$nb^af?d?0&$aX6#2u(JyzIJvuJ*lwPrh|0~aEnSACCTezSdG%h zmSQg`17j@$Iq)r1&?+eR@1nlX|H`<}_!?BQSF&N+QQnvEAqZe+mIFui!0V49R?|9*$ zv!K1A01{8xq;L()Tv*Qk0-$Oj6+vCT*TUD{HvxO@3JjxBwM!4g3ydy&eaJw4CoQBF zJtULJ!YxgNR7_Ls%LmogyI7uIs=!B&?=MYY^yX+v;j@D_xGeZg>eZk0C;4e|HRNSi z6KlD9>q=3v-$4Zik&^ZDhNm1X)+7LCH1k!s+T3tn zUn@={1U&NJLq@K?~w|(=Y<4W{ucX}FdRr6pLw(l2$iK)At%t3gYBMlJz#(K0Nqm;=KAML!&MMSNz=%k=j*zh77r34Rs37iCY` z=_kva_41bdrj(b=4Wc5MO0~q^z#pIWJ>)vDSgIQF=3JVJe1iDy%h)8oNy{s_r&;m` zL{DYKSB_5xRb9xKNOS{qAY3qv5sSXVrrf%~*q5HO|CQ&lbKMePa$M5D{vlJcoGrCZ zD?fKbZN$6rWwz)w7`9h4DAmh1ij2}EO|bO#A9L0_RW6l*$sPPUJrUbhLC75L9%W5iO$Iw5~Yut-qBeu~hF|xD7-eQ%l z412vpq_;t%^F*pYDk%Q35c-erK|6Ve=FxQbAv~ikZ4c9$Y4;ee#ciOD9{yRqf55Qk zumv}#+JciT|Gj$uFOxBUze)=?l{B}qaC0_7m`t82<$K53!4Xvi9Tr)ADp3Off?O8o zVDG0Yx|tfn@r((m?Nxrh(b0DGjg)$;DfO&$6uY;4&F!4jnxkhP}Y3x zS?WFFt>=HWzqlQhffVfvM$Ta8Sg*r3j!Eo&rUOW7SCL2~lG7<+XZ;+{&8h5g8ElI+P>>yR2U%S93NN!Xhm|C682t6ysH-=o1=Bd*N*VlnG%l+KZFtjG`UkL;%65qn0UYQ`h zh0{9jDQx(`aBe7J0Aj3Z)4}`A|4OMM0a;?{j}qkYwi)~O8$9D}ITiMH2buiU>ixYp zhL${nwj6X($*OwmpVG`y5b6v45tX*J8?og}Qju6eJ9H}`X87iEd%BUo7<`2q(HJx+ zMR}d-J4oAf{V1W^a2~`M-YAdZ81dd4o6NPO{cmZaAS@RS4ir#Sr zfFZO-VIL|VN<%nEXr2` z$0FK2L#8O_f1w~c@G70JrB@N}r(gJ!Vmkk6{r68w!o$qO?HrFcjeU0_3F5;*!E2%( zTx>4?gP8w z1B?3UVZmz^%d_dIps>>0{cB~mp3{9UoPR6uQFecVq&} zY{ebB?AlPAD_}(ll{fK99;Wh1cgRbnw)maD^F>*J!R}eHM*W0VYN1TADWMy9H=$00 z5bHY${oDgwX7(W9LZw?}{!8(_{JB~Xkje6{0x4fgC4kUmpfJ+LT1DYD*TWu4#h{Y7 zFLronmc=hS=W=j1ar3r1JNjQoWo2hMWsqW*e?TF%#&{GpsaLp}iN~$)ar+7Ti}E&X z-nq~+Gkp(`qF0F_4A22>VZn-x>I$?PDZSeG8h_ifoWf^DxIb5%T7UytYo3}F|4#RC zUHpg$=)qVqD~=m(!~?XwocuxU1u}9qhhM7d^eqmJPi_e-!IO`*{u7A zbu*?L$Mbj-X9n3G2>+Kc#l`@d8}Xb9{l*IN{#M*d;s+3Pdr8FO$EBELR=8{ zd?LJbSv9fI`{OqTH)5{b?WulgMb)psp+W|@cSp=jtl-&5C}9lw@*0H+gEW(}mAWNz zf{~U;;N}|wdSaphgqnH{FWUy!{y3^=AC*c?RJ5Eb<^ zCgH_v7^axIUVmHSFL^zlj2R$zow$|y#7>%#U7d#Vp_ezcp3lefMyd5ES=q$>4pWyA zp_Zso^^NP~lu2=S6nD(3Z5u=Uy&B&F1i$J*3;3KhEkD_lgscHGR*;T;U!9vgQa(hI}oh9IzEf_PU_8F+i77t-~gDX z490Sb)LyVZmf18N6w{+37$aO<2!Av0 ztLaPOv^J<2@p{WnMiDudoghX_`luFZt_4eNU}*~cF5i%eEcNLs;D>QVIwr8mH;=dc z09`}JV;aaF;13@&iS(w>Jc=k~|d_1hcpM(l|O zu>!@}me%isTT$xT#hNUvh(ATd0wT4fbv=6htcHNEZIw9%E6wlYmwfu2{j0kh1y=$;Yf!|NldgB9ul zB{dbE&LfRnr8ITm@;-68wo#VV?8lG3ed&9k1}QBS3}WGV9%26?A1rBkkDR9Z3o+g+ z)eQg8BY3y(Dh5&z?VLLNdDV`C=muUvCPpGg!oYxIgOI3^%4>5d7jTh~ni!Fg2;fhx z(*c%H6Je84kmQh;5tC3*l~7khLxK-e|Cz?FLh!yYe7g|*LwqU?2wv^_ZyKT$fYVkGJo@AK0$+ml?}zJeB~deT2WL1vz}dxB z)y??t!}%M@)u$_IyW~)6u1SttJ!awd6N5lx|xBrmyrBh>tb&D*=C+Z3nPfq$1%WgY0bY*?PZ#Hk|=xn zGM#0*w4CaB^y0G(J4q=;5NeM@m-P}#mv7QZNF)M!dK^w{mk_!n0`+Y3PQutu-%NBt zzgPXug?JLEbUL{e_dk;Vd896&yPe(hliVK!lj%5+@BKdcrEZ2Nc_*i@ve*2lB>u~{ zFozd2FM|_0+nAGR4TLNHanQn_Oeb!JrUcvzJ?7p9TTNB}ocO3j$7ij!li8#k6 z@2tSd1>K03K9A#_-MIq)S;T#oE^;>U$)&}okIvDf3lm?kI{d80$>~xKUoS!%q1Pi?WpsUUt(tI ztjNjY*y&Rm9(S(DC2GuPHBJs@5M{RGm`c1z<6nwyN^)rMo-AS{M2$oM9|y%fM|}G~ DHx0+F literal 0 HcmV?d00001 diff --git a/native/kotlin/e2e/gradle/wrapper/gradle-wrapper.properties b/native/kotlin/e2e/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000..c5e47f3e --- /dev/null +++ b/native/kotlin/e2e/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,8 @@ +#Wed May 13 11:21:16 ADT 2026 +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-9.4.1-bin.zip +networkTimeout=10000 +validateDistributionUrl=true +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/native/kotlin/e2e/gradlew b/native/kotlin/e2e/gradlew new file mode 100755 index 00000000..faf93008 --- /dev/null +++ b/native/kotlin/e2e/gradlew @@ -0,0 +1,251 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/HEAD/platforms/jvm/plugins-application/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +# This is normally unused +# shellcheck disable=SC2034 +APP_BASE_NAME=${0##*/} +# Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036) +APP_HOME=$( cd -P "${APP_HOME:-./}" > /dev/null && printf '%s\n' "$PWD" ) || exit + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + if ! command -v java >/dev/null 2>&1 + then + die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC2039,SC3045 + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC2039,SC3045 + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Collect all arguments for the java command: +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments, +# and any embedded shellness will be escaped. +# * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be +# treated as '${Hostname}' itself on the command line. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/native/kotlin/e2e/gradlew.bat b/native/kotlin/e2e/gradlew.bat new file mode 100644 index 00000000..9d21a218 --- /dev/null +++ b/native/kotlin/e2e/gradlew.bat @@ -0,0 +1,94 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem +@rem SPDX-License-Identifier: Apache-2.0 +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +@rem This is normally unused +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. 1>&2 +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 1>&2 +echo. 1>&2 +echo Please set the JAVA_HOME variable in your environment to match the 1>&2 +echo location of your Java installation. 1>&2 + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. 1>&2 +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 1>&2 +echo. 1>&2 +echo Please set the JAVA_HOME variable in your environment to match the 1>&2 +echo location of your Java installation. 1>&2 + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/native/kotlin/e2e/settings.gradle.kts b/native/kotlin/e2e/settings.gradle.kts new file mode 100644 index 00000000..27b88b0f --- /dev/null +++ b/native/kotlin/e2e/settings.gradle.kts @@ -0,0 +1,31 @@ +pluginManagement { + includeBuild("../") + repositories { + google { + content { + includeGroupByRegex("com\\.android.*") + includeGroupByRegex("com\\.google.*") + includeGroupByRegex("androidx.*") + } + } + mavenCentral() + gradlePluginPortal() + } +} + +dependencyResolutionManagement { + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } + versionCatalogs { + create("libs") { + from(files("../gradle/libs.versions.toml")) + } + } +} + +rootProject.name = "aws-blocks-kotlin-e2e" + +includeBuild("../") diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt new file mode 100644 index 00000000..c26d22ec --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt @@ -0,0 +1,100 @@ +package com.aws.blocks.kotlin.e2e + +import com.aws.blocks.kotlin.exceptions.ApiException +import io.kotest.matchers.booleans.shouldBeFalse +import io.kotest.matchers.booleans.shouldBeTrue +import io.kotest.matchers.nulls.shouldBeNull +import io.kotest.matchers.nulls.shouldNotBeNull +import io.kotest.matchers.shouldBe +import io.kotest.matchers.string.shouldNotBeBlank +import kotlinx.coroutines.test.runTest +import kotlinx.datetime.Clock +import kotlin.test.Test +import kotlin.test.assertFailsWith + +class AuthBasicE2ETest { + + private val api = createApi() + private val suffix = Clock.System.now().toEpochMilliseconds().toString() + private val username = "basicuser_$suffix" + private val password = "pass1234" + + @Test + fun signUpAndSignIn() = runTest { + val r = api.basicSignUp(username, password) + r.success.shouldBeTrue() + + val user = api.basicSignIn(username, password) + user.username shouldBe username + user.userId.shouldNotBeBlank() + } + + @Test + fun checkAuthWhenSignedIn() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + val authed = api.basicCheckAuth() + authed.shouldBeTrue() + } + + @Test + fun requireAuthWhenSignedIn() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + val user = api.basicRequireAuth() + user.username shouldBe username + } + + @Test + fun getCurrentUserWhenSignedIn() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + val current = api.basicGetCurrentUser() + current.shouldNotBeNull() + current.username shouldBe username + } + + @Test + fun signOut() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + val r = api.basicSignOut() + r.success.shouldBeTrue() + + val afterSignOut = api.basicGetCurrentUser() + afterSignOut.shouldBeNull() + } + + @Test + fun checkAuthAfterSignOut() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + api.basicSignOut() + + val authed = api.basicCheckAuth() + authed.shouldBeFalse() + } + + @Test + fun requireAuthWhenNotAuthenticatedThrows() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + api.basicSignOut() + + assertFailsWith { + api.basicRequireAuth() + } + } + + @Test + fun wrongPasswordThrows() = runTest { + api.basicSignUp(username, password) + + assertFailsWith { + api.basicSignIn(username, "wrong5678") + } + } +} diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/BlocksE2ETestCase.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/BlocksE2ETestCase.kt new file mode 100644 index 00000000..080a546d --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/BlocksE2ETestCase.kt @@ -0,0 +1,12 @@ +package com.aws.blocks.kotlin.e2e + +import blocks.e2e.Api +import com.aws.blocks.kotlin.BlocksServer + +private val blocksUrl: String = + getEnv("BLOCKS_URL")?.takeIf { it.isNotBlank() } + ?: "http://localhost:3001/aws-blocks/api" + +private val server = BlocksServer(name = "e2e", url = blocksUrl) + +fun createApi(): Api = Api(server = server) diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/FileBucketE2ETest.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/FileBucketE2ETest.kt new file mode 100644 index 00000000..2bb517e5 --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/FileBucketE2ETest.kt @@ -0,0 +1,75 @@ +package com.aws.blocks.kotlin.e2e + +import io.kotest.matchers.booleans.shouldBeTrue +import io.kotest.matchers.collections.shouldHaveAtLeastSize +import io.kotest.matchers.nulls.shouldBeNull +import io.kotest.matchers.nulls.shouldNotBeNull +import io.kotest.matchers.shouldBe +import io.kotest.matchers.string.shouldNotBeBlank +import kotlinx.coroutines.test.runTest +import kotlinx.datetime.Clock +import kotlin.test.Test + +class FileBucketE2ETest { + + private val api = createApi() + private val prefix = "test_kotlin_${Clock.System.now().toEpochMilliseconds()}" + + @Test + fun uploadAndDownloadViaHandles() = runTest { + val handle = api.fileCreateUploadHandle("$prefix/hello.txt") + handle.url.shouldNotBeBlank() + handle.upload("hello from kotlin".encodeToByteArray()) + + val download = api.fileGetHandle("$prefix/hello.txt") + val bytes = download.download() + bytes.decodeToString() shouldBe "hello from kotlin" + } + + @Test + fun binaryDataRoundTrip() = runTest { + val data = ByteArray(256) { it.toByte() } + val handle = api.fileCreateUploadHandle("$prefix/binary.bin") + handle.upload(data) + + val download = api.fileGetHandle("$prefix/binary.bin") + val bytes = download.download() + bytes.size shouldBe 256 + bytes shouldBe data + } + + @Test + fun serverSidePutAndGet() = runTest { + api.filePut("$prefix/server.txt", "server-side") + val file = api.fileGet("$prefix/server.txt") + file.shouldNotBeNull() + file.body shouldBe "server-side" + } + + @Test + fun deleteFile() = runTest { + api.filePut("$prefix/del.txt", "temp") + api.fileDelete("$prefix/del.txt") + val deleted = api.fileGet("$prefix/del.txt") + deleted.shouldBeNull() + } + + @Test + fun scanWithPrefix() = runTest { + api.filePut("$prefix/scan/a.txt", "a") + api.filePut("$prefix/scan/b.txt", "b") + val scanned = api.fileScan("$prefix/scan/") + scanned.shouldHaveAtLeastSize(2) + } + + @Test + fun largeFile() = runTest { + val data = ByteArray(100_000) { (it % 256).toByte() } + val handle = api.fileCreateUploadHandle("$prefix/large.bin") + handle.upload(data) + + val download = api.fileGetHandle("$prefix/large.bin") + val bytes = download.download() + bytes.size shouldBe 100_000 + } +} diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/KvStoreE2ETest.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/KvStoreE2ETest.kt new file mode 100644 index 00000000..75eb1e43 --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/KvStoreE2ETest.kt @@ -0,0 +1,95 @@ +package com.aws.blocks.kotlin.e2e + +import io.kotest.matchers.nulls.shouldBeNull +import io.kotest.matchers.shouldBe +import io.kotest.matchers.booleans.shouldBeTrue +import kotlinx.coroutines.async +import kotlinx.coroutines.awaitAll +import kotlinx.coroutines.test.runTest +import kotlinx.datetime.Clock +import kotlin.test.Test + +class KvStoreE2ETest { + + private val api = createApi() + private val prefix = "kv_kotlin_${Clock.System.now().toEpochMilliseconds()}" + + @Test + fun basicRoundTrip() = runTest { + val key = "${prefix}_a" + val r = api.kvPut(key, "hello") + r.success.shouldBeTrue() + val v = api.kvGet(key) + v shouldBe "hello" + } + + @Test + fun missingKeyReturnsNull() = runTest { + val v = api.kvGet("${prefix}_nonexistent") + v.shouldBeNull() + } + + @Test + fun overwrite() = runTest { + val key = "${prefix}_b" + api.kvPut(key, "first") + api.kvPut(key, "second") + val v = api.kvGet(key) + v shouldBe "second" + } + + @Test + fun emptyStringValue() = runTest { + val key = "${prefix}_empty" + api.kvPut(key, "") + val v = api.kvGet(key) + v shouldBe "" + } + + @Test + fun unicode() = runTest { + val key = "${prefix}_uni" + api.kvPut(key, "日本語 🎉 émojis") + val v = api.kvGet(key) + v shouldBe "日本語 🎉 émojis" + } + + @Test + fun largeValue() = runTest { + val key = "${prefix}_large" + val large = "x".repeat(10_000) + api.kvPut(key, large) + val v = api.kvGet(key) + v shouldBe large + } + + @Test + fun specialCharactersInKey() = runTest { + val key = "${prefix}/slashes/and spaces!@#" + api.kvPut(key, "ok") + val v = api.kvGet(key) + v shouldBe "ok" + } + + @Test + fun delete() = runTest { + val key = "${prefix}_del" + api.kvPut(key, "temp") + api.kvDelete(key) + val v = api.kvGet(key) + v.shouldBeNull() + } + + @Test + fun parallelWritesAndReads() = runTest { + val writes = (0 until 10).map { i -> + async { api.kvPut("${prefix}_par_$i", "val_$i") } + } + writes.awaitAll().forEach { it.success.shouldBeTrue() } + + for (i in 0 until 10) { + val v = api.kvGet("${prefix}_par_$i") + v shouldBe "val_$i" + } + } +} diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/RealtimeE2ETest.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/RealtimeE2ETest.kt new file mode 100644 index 00000000..77120cfd --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/RealtimeE2ETest.kt @@ -0,0 +1,74 @@ +package com.aws.blocks.kotlin.e2e + +import blocks.e2e.Cursor +import io.kotest.matchers.booleans.shouldBeTrue +import io.kotest.matchers.shouldBe +import io.kotest.matchers.string.shouldNotBeBlank +import io.kotest.matchers.string.shouldStartWith +import kotlinx.coroutines.Dispatchers +import kotlinx.coroutines.async +import kotlinx.coroutines.delay +import kotlinx.coroutines.flow.first +import kotlinx.coroutines.test.runTest +import kotlinx.coroutines.withContext +import kotlinx.coroutines.withTimeout +import kotlin.test.Test +import kotlin.time.Duration.Companion.seconds + +class RealtimeE2ETest { + + private val api = createApi() + + @Test + fun getChannelDescriptor() = runTest { + val channel = api.realtimeGetChannel() + channel.channel.shouldNotBeBlank() + channel.wsUrl.shouldStartWith("ws") + channel.token.shouldNotBeBlank() + } + + @Test + fun publishCursor() = runTest { + val r = api.realtimePublish( + cursor = Cursor(userId = "user-a", x = 10.0, y = 20.0, color = "#ff0000") + ) + r.success.shouldBeTrue() + } + + @Test + fun subscribeAndReceive() = runTest { + val ch = api.realtimeGetChannel("kotlin-test") + + val msg = withContext(Dispatchers.Default) { + val deferred = async { + ch.subscribe().first() + } + + // Publish repeatedly until the subscriber receives the message. + // The subscription may not be established yet (WebSocket handshake + + // subscribe ack), so early publishes are lost — keep retrying. + withTimeout(10.seconds) { + while (deferred.isActive) { + api.realtimePublish( + channel = "kotlin-test", + cursor = Cursor(userId = "kotlin-sub", x = 42.0, y = 99.0, color = "#00ff00") + ) + delay(100) + } + deferred.await() + } + } + msg.userId shouldBe "kotlin-sub" + msg.x shouldBe 42.0 + } + + @Test + fun multiplePublishes() = runTest { + for (i in 0 until 5) { + val r = api.realtimePublish( + cursor = Cursor(userId = "burst-$i", x = i.toDouble(), y = (i * 10).toDouble(), color = "#000") + ) + r.success.shouldBeTrue() + } + } +} diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.kt new file mode 100644 index 00000000..fb8a478d --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.kt @@ -0,0 +1,3 @@ +package com.aws.blocks.kotlin.e2e + +expect fun getEnv(name: String): String? diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TodosE2ETest.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TodosE2ETest.kt new file mode 100644 index 00000000..6dd11cf5 --- /dev/null +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/TodosE2ETest.kt @@ -0,0 +1,113 @@ +package com.aws.blocks.kotlin.e2e + +import blocks.e2e.Api +import com.aws.blocks.kotlin.BlocksClient +import com.aws.blocks.kotlin.exceptions.ApiException +import io.kotest.assertions.throwables.shouldThrow +import io.kotest.matchers.booleans.shouldBeFalse +import io.kotest.matchers.booleans.shouldBeTrue +import io.kotest.matchers.collections.shouldHaveAtLeastSize +import io.kotest.matchers.nulls.shouldBeNull +import io.kotest.matchers.nulls.shouldNotBeNull +import io.kotest.matchers.shouldBe +import io.kotest.matchers.string.shouldNotBeBlank +import kotlinx.coroutines.test.runTest +import kotlinx.datetime.Clock +import kotlin.test.Test + +class TodosE2ETest { + + private val api = createApi() + private val suffix = Clock.System.now().toEpochMilliseconds().toString() + private val username = "todouser_$suffix" + private val password = "pass1234" + + @Test + fun authGateRejectsUnauthenticated() = runTest { + BlocksClient.clearCookies() + + shouldThrow { api.listTodos() } + shouldThrow { api.createTodo("should-fail") } + } + + @Test + fun createAndGetTodo() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + val t = api.createTodo("first todo", 1.0) + t.todoId.shouldNotBeBlank() + t.title shouldBe "first todo" + t.completed.shouldBeFalse() + t.priority shouldBe 1.0 + + val got = api.getTodo(t.todoId) + got.shouldNotBeNull() + got.title shouldBe "first todo" + } + + @Test + fun listTodos() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + api.createTodo("todo 1", 1.0) + api.createTodo("todo 2", 3.0) + api.createTodo("todo 3", 2.0) + + val all = api.listTodos() + all.shouldHaveAtLeastSize(3) + } + + @Test + fun listTodosSortedByPriority() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + api.createTodo("low", 1.0) + api.createTodo("high", 3.0) + api.createTodo("mid", 2.0) + + val sorted = api.listTodos(Api.ListTodos.SortBy.Priority) + val priorities = sorted.map { it.priority } + priorities shouldBe priorities.sorted() + } + + @Test + fun updateTodo() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + val t = api.createTodo("to update", 2.0) + val r = api.updateTodo(t.todoId, Api.UpdateTodo.Updates(completed = true, title = "updated")) + r.success.shouldBeTrue() + + val got = api.getTodo(t.todoId) + got.shouldNotBeNull() + got.completed.shouldBeTrue() + got.title shouldBe "updated" + } + + @Test + fun deleteTodo() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + + val t = api.createTodo("to delete", 2.0) + val r = api.deleteTodo(t.todoId) + r.success.shouldBeTrue() + + val got = api.getTodo(t.todoId) + got.shouldBeNull() + } + + @Test + fun isolationAfterSignOut() = runTest { + api.basicSignUp(username, password) + api.basicSignIn(username, password) + api.createTodo("some todo", 1.0) + api.basicSignOut() + + shouldThrow { api.listTodos() } + } +} diff --git a/native/kotlin/e2e/src/iosTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.ios.kt b/native/kotlin/e2e/src/iosTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.ios.kt new file mode 100644 index 00000000..9945082a --- /dev/null +++ b/native/kotlin/e2e/src/iosTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.ios.kt @@ -0,0 +1,6 @@ +package com.aws.blocks.kotlin.e2e + +import platform.Foundation.NSProcessInfo + +actual fun getEnv(name: String): String? = + NSProcessInfo.processInfo.environment[name] as? String diff --git a/native/kotlin/e2e/src/jvmTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.jvm.kt b/native/kotlin/e2e/src/jvmTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.jvm.kt new file mode 100644 index 00000000..ff281350 --- /dev/null +++ b/native/kotlin/e2e/src/jvmTest/kotlin/com/aws/blocks/kotlin/e2e/TestEnv.jvm.kt @@ -0,0 +1,4 @@ +package com.aws.blocks.kotlin.e2e + +actual fun getEnv(name: String): String? = + System.getProperty(name) ?: System.getenv(name) diff --git a/native/kotlin/run-e2e.sh b/native/kotlin/run-e2e.sh new file mode 100755 index 00000000..253d02aa --- /dev/null +++ b/native/kotlin/run-e2e.sh @@ -0,0 +1,101 @@ +#!/bin/bash +set -e + +# Native SDK E2E — runs the full pipeline locally or in CI. +# Usage: ./run-e2e.sh [--blocks-url URL] [--target jvm|ios] +# +# From the monorepo root, this script: +# 1. Generates the OpenRPC spec from test-apps/native-bindings +# 2. Copies the spec into the e2e project +# 3. Runs Kotlin codegen via the Gradle plugin +# 4. Starts the local dev server (unless --blocks-url is provided) +# 5. Runs the E2E test suite for the specified target +# 6. Stops the server + +SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)" +MONOREPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +BACKEND="$MONOREPO_ROOT/test-apps/native-bindings" +E2E_DIR="$SCRIPT_DIR/e2e" + +BLOCKS_URL="" +SERVER_PID="" +TARGET="jvm" + +cleanup() { + if [ -n "$SERVER_PID" ]; then + echo "Stopping server (PID: $SERVER_PID)..." + kill "$SERVER_PID" 2>/dev/null || true + fi +} +trap cleanup EXIT + +# Parse args +while [[ $# -gt 0 ]]; do + case $1 in + --blocks-url) BLOCKS_URL="$2"; shift 2 ;; + --target) TARGET="$2"; shift 2 ;; + *) echo "Unknown arg: $1"; exit 1 ;; + esac +done + +echo "Step 1: Generate OpenRPC spec from test-apps/native-bindings" +cd "$BACKEND" +npm run spec +SPEC_PATH="$BACKEND/aws-blocks/blocks.spec.json" +echo " Spec: $SPEC_PATH" + +echo "" +echo "Step 2: Copy spec to e2e project" +cp "$SPEC_PATH" "$E2E_DIR/blocks.spec.json" +echo " Copied to: $E2E_DIR/blocks.spec.json" + +echo "" +echo "Step 3: Run Kotlin codegen" +cd "$E2E_DIR" +./gradlew awsBlocksCodegen --quiet +echo " Codegen complete" + +if [ -z "$BLOCKS_URL" ]; then + echo "" + echo "Step 4: Start native-bindings dev server" + cd "$BACKEND" + npx tsx aws-blocks/scripts/server.ts > /tmp/blocks-kotlin-e2e-server.log 2>&1 & + SERVER_PID=$! + BLOCKS_URL="http://localhost:3001/aws-blocks/api" + + # Wait for server + for i in $(seq 1 30); do + if curl -s -X POST "$BLOCKS_URL" \ + -H "Content-Type: application/json" \ + -d '{"jsonrpc":"2.0","method":"api.kvGet","params":{"key":"healthcheck"},"id":1}' 2>/dev/null | grep -q "result"; then + echo " Server ready at $BLOCKS_URL" + break + fi + sleep 1 + if [ $i -eq 30 ]; then + echo " Server failed to start. Logs:" + cat /tmp/blocks-kotlin-e2e-server.log + exit 1 + fi + done +else + echo "" + echo "Step 4: Using provided endpoint: $BLOCKS_URL" +fi + +echo "" +echo "Step 5: Run E2E tests (target: $TARGET)" +cd "$E2E_DIR" + +case $TARGET in + jvm) + ./gradlew jvmTest -DBLOCKS_URL="$BLOCKS_URL" + ;; + ios) + ./gradlew iosSimulatorArm64Test -DBLOCKS_URL="$BLOCKS_URL" + ;; + *) + echo "Unknown target: $TARGET (expected: jvm, ios)" + exit 1 + ;; +esac From 74cb3bce1015dcc51811dd4f1644d57525d4a4b5 Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Wed, 24 Jun 2026 14:04:12 -0300 Subject: [PATCH 04/10] Add sandbox job and use matrix for the platforms --- .github/workflows/native-sdk-e2e.yml | 164 +++++++++++++++++---------- 1 file changed, 105 insertions(+), 59 deletions(-) diff --git a/.github/workflows/native-sdk-e2e.yml b/.github/workflows/native-sdk-e2e.yml index b593fe4b..e771973a 100644 --- a/.github/workflows/native-sdk-e2e.yml +++ b/.github/workflows/native-sdk-e2e.yml @@ -159,62 +159,24 @@ jobs: # BLOCKS_URL is provided via $GITHUB_ENV from the "Pick a free port" step. run: dart run bin/e2e_test.dart - kotlin-e2e-jvm: - name: Kotlin E2E (JVM) + kotlin-e2e: + name: Kotlin E2E (${{ matrix.label }}) needs: [detect-changes, setup] if: needs.detect-changes.outputs.source-changed == 'true' - runs-on: ubuntu-latest - timeout-minutes: 15 - steps: - - uses: actions/checkout@v5 - with: - ref: ${{ github.event.pull_request.head.sha }} - persist-credentials: false - - - uses: actions/setup-node@v5 - with: - node-version-file: '.nvmrc' - cache: npm - - - uses: actions/setup-java@v4 - with: - distribution: temurin - java-version: 17 - - - run: npm ci - - run: npm run build - - - name: Download spec - uses: actions/download-artifact@v4 - with: - name: blocks-spec - path: native/kotlin/e2e/ - - - name: Run Kotlin codegen - working-directory: native/kotlin/e2e - run: ./gradlew awsBlocksCodegen - - - name: Start native-bindings server - working-directory: test-apps/native-bindings - run: | - npx tsx aws-blocks/scripts/server.ts & - for i in $(seq 1 30); do - curl -s -X POST http://localhost:3001/aws-blocks/api \ - -H "Content-Type: application/json" \ - -d '{"jsonrpc":"2.0","method":"api.kvGet","params":{"key":"healthcheck"},"id":1}' && break - sleep 1 - done - - - name: Run E2E tests - working-directory: native/kotlin/e2e - run: ./gradlew jvmTest -DBLOCKS_URL=http://localhost:3001/aws-blocks/api - - kotlin-e2e-ios: - name: Kotlin E2E (iOS) - needs: [detect-changes, setup] - if: needs.detect-changes.outputs.source-changed == 'true' - runs-on: macos-15 - timeout-minutes: 20 + runs-on: ${{ matrix.runs-on }} + timeout-minutes: ${{ matrix.timeout }} + strategy: + fail-fast: false + matrix: + include: + - label: JVM + runs-on: ubuntu-latest + gradle-task: jvmTest + timeout: 15 + - label: iOS + runs-on: macos-15 + gradle-task: iosSimulatorArm64Test + timeout: 20 steps: - uses: actions/checkout@v5 with: @@ -259,7 +221,7 @@ jobs: working-directory: native/kotlin/e2e env: BLOCKS_URL: http://localhost:3001/aws-blocks/api - run: ./gradlew iosSimulatorArm64Test + run: ./gradlew ${{ matrix.gradle-task }} swift-e2e: name: Swift E2E @@ -572,26 +534,110 @@ jobs: working-directory: test-apps/native-bindings run: npm run destroy || true + kotlin-e2e-sandbox: + name: Kotlin E2E (${{ matrix.label }}, sandbox) + needs: [detect-changes, kotlin-e2e] + if: >- + needs.detect-changes.outputs.source-changed == 'true' && + (github.event_name == 'workflow_dispatch' || + github.event.pull_request.head.repo.full_name == github.repository) + runs-on: ${{ matrix.runs-on }} + timeout-minutes: 30 + environment: publish + strategy: + fail-fast: false + matrix: + include: + - label: JVM + suffix: jvm + runs-on: ubuntu-latest + gradle-task: jvmTest + - label: iOS + suffix: ios + runs-on: macos-15 + gradle-task: iosSimulatorArm64Test + env: + BLOCKS_STACK_SUFFIX: native-kotlin-${{ matrix.suffix }}-${{ github.event.pull_request.number || github.run_id }}-${{ github.run_attempt }} + steps: + - uses: actions/checkout@v5 + with: + ref: ${{ github.event.pull_request.head.sha }} + persist-credentials: false + + - uses: actions/setup-node@v5 + with: + node-version-file: '.nvmrc' + cache: npm + + - uses: actions/setup-java@v4 + with: + distribution: temurin + java-version: 17 + + - run: npm ci + - run: npm run build + + - name: Configure AWS credentials + uses: aws-actions/configure-aws-credentials@v6 + with: + role-to-assume: ${{ secrets.AWS_ROLE_ARN }} + aws-region: us-east-1 + + - name: Deploy sandbox + working-directory: test-apps/native-bindings + run: npm run deploy + + - name: Resolve BLOCKS_URL + id: url + working-directory: test-apps/native-bindings + run: | + URL=$(python3 -c "import json; print(json.load(open('.blocks-sandbox/config.json'))['apiUrl'])") + echo "blocks_url=${URL}/aws-blocks/api" >> $GITHUB_OUTPUT + + - name: Generate OpenRPC spec + working-directory: test-apps/native-bindings + run: npm run spec + + - name: Download spec + uses: actions/download-artifact@v4 + with: + name: blocks-spec + path: native/kotlin/e2e/ + + - name: Run Kotlin codegen + working-directory: native/kotlin/e2e + run: ./gradlew awsBlocksCodegen + + - name: Run Kotlin E2E against sandbox + working-directory: native/kotlin/e2e + env: + BLOCKS_URL: ${{ steps.url.outputs.blocks_url }} + run: ./gradlew ${{ matrix.gradle-task }} + + - name: Destroy sandbox + if: always() + working-directory: test-apps/native-bindings + run: npm run destroy || true + # Aggregate gate so this can be a single required status check in branch # protection. Always runs (even when the e2e jobs are skipped for unrelated # or fork PRs) and only fails if a job that actually ran failed. native-sdk-e2e-required: name: Native SDK E2E (Required) if: always() - needs: [detect-changes, setup, dart-e2e, kotlin-e2e-jvm, kotlin-e2e-ios, swift-e2e] + needs: [detect-changes, setup, dart-e2e, kotlin-e2e, swift-e2e] runs-on: ubuntu-latest steps: - name: Check results run: | - echo "detect-changes=${{ needs.detect-changes.result }} setup=${{ needs.setup.result }} dart-e2e=${{ needs.dart-e2e.result }} kotlin-e2e-jvm=${{ needs.kotlin-e2e-jvm.result }} kotlin-e2e-ios=${{ needs.kotlin-e2e-ios.result }} swift-e2e=${{ needs.swift-e2e.result }}" + echo "detect-changes=${{ needs.detect-changes.result }} setup=${{ needs.setup.result }} dart-e2e=${{ needs.dart-e2e.result }} kotlin-e2e=${{ needs.kotlin-e2e.result }} swift-e2e=${{ needs.swift-e2e.result }}" # Required gate = SDK correctness. Skipped jobs (no source changes) # are treated as passing. for result in \ "${{ needs.detect-changes.result }}" \ "${{ needs.setup.result }}" \ "${{ needs.dart-e2e.result }}" \ - "${{ needs.kotlin-e2e-jvm.result }}" \ - "${{ needs.kotlin-e2e-ios.result }}" \ + "${{ needs.kotlin-e2e.result }}" \ "${{ needs.swift-e2e.result }}"; do if [ "$result" = "failure" ] || [ "$result" = "cancelled" ]; then echo "A required native SDK E2E job failed (or was cancelled)." From 14bc63548c007259bb2337ac9692a51354d7f81c Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Wed, 24 Jun 2026 14:11:34 -0300 Subject: [PATCH 05/10] Use shouldThrow instead of assertFailsWith --- .../com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt index c26d22ec..3ba889b7 100644 --- a/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt +++ b/native/kotlin/e2e/src/commonTest/kotlin/com/aws/blocks/kotlin/e2e/AuthBasicE2ETest.kt @@ -1,16 +1,16 @@ package com.aws.blocks.kotlin.e2e import com.aws.blocks.kotlin.exceptions.ApiException +import io.kotest.assertions.throwables.shouldThrow import io.kotest.matchers.booleans.shouldBeFalse import io.kotest.matchers.booleans.shouldBeTrue import io.kotest.matchers.nulls.shouldBeNull import io.kotest.matchers.nulls.shouldNotBeNull import io.kotest.matchers.shouldBe import io.kotest.matchers.string.shouldNotBeBlank +import kotlin.test.Test import kotlinx.coroutines.test.runTest import kotlinx.datetime.Clock -import kotlin.test.Test -import kotlin.test.assertFailsWith class AuthBasicE2ETest { @@ -84,17 +84,13 @@ class AuthBasicE2ETest { api.basicSignIn(username, password) api.basicSignOut() - assertFailsWith { - api.basicRequireAuth() - } + shouldThrow { api.basicRequireAuth() } } @Test fun wrongPasswordThrows() = runTest { api.basicSignUp(username, password) - assertFailsWith { - api.basicSignIn(username, "wrong5678") - } + shouldThrow { api.basicSignIn(username, "wrong5678") } } } From 775859d423b15736532de630b95e4a28717572bd Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Wed, 24 Jun 2026 14:21:36 -0300 Subject: [PATCH 06/10] Tag the native-bindings stack so it will be cleaned up by the janitor job --- test-apps/native-bindings/aws-blocks/index.cdk.ts | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/test-apps/native-bindings/aws-blocks/index.cdk.ts b/test-apps/native-bindings/aws-blocks/index.cdk.ts index f42b8824..4b624f22 100644 --- a/test-apps/native-bindings/aws-blocks/index.cdk.ts +++ b/test-apps/native-bindings/aws-blocks/index.cdk.ts @@ -35,6 +35,12 @@ export const blocksStack = await BlocksStack.create(app, stackName, { backendCDKPath: join(__dirname, 'index.ts'), }); +// Tag for the scheduled stack janitor (cleanup-stacks.yml). It only deletes +// stacks tagged blocks:purpose=e2e-*, so without this a leaked per-run sandbox +// (failed `npm run destroy`) matches the bb-test- prefix but is skipped and +// accumulates forever. Mirrors every other e2e test-app's index.cdk.ts. +cdk.Tags.of(blocksStack).add('blocks:purpose', 'e2e-native-bindings'); + // E2E stacks must be fully deletable so the CI teardown (`npm run destroy`) // can't leave a stuck DELETE_FAILED stack or deletion-protected resources behind. RemovalPolicies.of(blocksStack).destroy(); From 431d58c749fc358440f6a4ca1253a670883934a6 Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Thu, 25 Jun 2026 10:56:16 -0300 Subject: [PATCH 07/10] Add changeset --- native/kotlin/.changeset/heavy-worlds-give.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 native/kotlin/.changeset/heavy-worlds-give.md diff --git a/native/kotlin/.changeset/heavy-worlds-give.md b/native/kotlin/.changeset/heavy-worlds-give.md new file mode 100644 index 00000000..467b11e0 --- /dev/null +++ b/native/kotlin/.changeset/heavy-worlds-give.md @@ -0,0 +1,5 @@ +--- +"aws-blocks-kotlin": minor +--- + +Add ability to clear cookies From 082eca774e60f6516a09c4dff31eb605a4b5ee63 Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Fri, 26 Jun 2026 12:45:15 -0300 Subject: [PATCH 08/10] Bump Kotlin version to match AGP and resolve iOS e2e compilation issue --- native/kotlin/.changeset/fuzzy-tables-sit.md | 5 +++++ native/kotlin/README.md | 4 ++-- native/kotlin/gradle/libs.versions.toml | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) create mode 100644 native/kotlin/.changeset/fuzzy-tables-sit.md diff --git a/native/kotlin/.changeset/fuzzy-tables-sit.md b/native/kotlin/.changeset/fuzzy-tables-sit.md new file mode 100644 index 00000000..4e9d9237 --- /dev/null +++ b/native/kotlin/.changeset/fuzzy-tables-sit.md @@ -0,0 +1,5 @@ +--- +"aws-blocks-kotlin": minor +--- + +Bump Kotlin version to 2.2.10 diff --git a/native/kotlin/README.md b/native/kotlin/README.md index 5db6e5cc..e8627547 100644 --- a/native/kotlin/README.md +++ b/native/kotlin/README.md @@ -1,7 +1,7 @@ # AWS Blocks Kotlin [![Maven Central](https://img.shields.io/maven-central/v/com.aws.blocks.kotlin/runtime)](https://central.sonatype.com/search?namespace=com.aws.blocks.kotlin) -[![Kotlin](https://img.shields.io/badge/kotlin-2.1.21-blue.svg?logo=kotlin)](https://kotlinlang.org) +[![Kotlin](https://img.shields.io/badge/kotlin-2.2.10-blue.svg?logo=kotlin)](https://kotlinlang.org) ![Android](http://img.shields.io/badge/platform-android-6EDB8D.svg?style=flat) ![iOS](http://img.shields.io/badge/platform-ios-CDCDCD.svg?style=flat) ![Desktop](http://img.shields.io/badge/platform-desktop-DB413D.svg?style=flat) @@ -106,7 +106,7 @@ See the [`example/android`](example/android) directory for a complete Android ap ## Requirements -- Kotlin 2.x +- Kotlin 2.1+ - JDK 17+ - Gradle 7.4+ - Android Gradle Plugin 7.1+ (for Android targets) diff --git a/native/kotlin/gradle/libs.versions.toml b/native/kotlin/gradle/libs.versions.toml index f14764d9..8150d52c 100644 --- a/native/kotlin/gradle/libs.versions.toml +++ b/native/kotlin/gradle/libs.versions.toml @@ -1,6 +1,6 @@ [versions] agp = "9.2.0" -kotlin = "2.1.21" +kotlin = "2.2.10" coreKtx = "1.18.0" junit = "4.13.2" junitVersion = "1.3.0" From 9f5fcaa52b6650b99d58c4eb1bbc3c9c9e692f25 Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Fri, 26 Jun 2026 13:39:56 -0300 Subject: [PATCH 09/10] Fix keychain usage in iOS runtime --- .../kotlin/.changeset/brave-geckos-flash.md | 5 + .../aws/blocks/kotlin/KeyValueStore.ios.kt | 153 ++++++++++++------ 2 files changed, 110 insertions(+), 48 deletions(-) create mode 100644 native/kotlin/.changeset/brave-geckos-flash.md diff --git a/native/kotlin/.changeset/brave-geckos-flash.md b/native/kotlin/.changeset/brave-geckos-flash.md new file mode 100644 index 00000000..ae9dad93 --- /dev/null +++ b/native/kotlin/.changeset/brave-geckos-flash.md @@ -0,0 +1,5 @@ +--- +"aws-blocks-kotlin": patch +--- + +Fix handling of keychain in the iOS runtime diff --git a/native/kotlin/runtime/src/iosMain/kotlin/com/aws/blocks/kotlin/KeyValueStore.ios.kt b/native/kotlin/runtime/src/iosMain/kotlin/com/aws/blocks/kotlin/KeyValueStore.ios.kt index 10533290..0adfda76 100644 --- a/native/kotlin/runtime/src/iosMain/kotlin/com/aws/blocks/kotlin/KeyValueStore.ios.kt +++ b/native/kotlin/runtime/src/iosMain/kotlin/com/aws/blocks/kotlin/KeyValueStore.ios.kt @@ -6,8 +6,15 @@ import kotlinx.cinterop.alloc import kotlinx.cinterop.memScoped import kotlinx.cinterop.ptr import kotlinx.cinterop.value +import platform.CoreFoundation.CFDictionaryAddValue +import platform.CoreFoundation.CFDictionaryCreateMutable import platform.CoreFoundation.CFDictionaryRef +import platform.CoreFoundation.CFRelease +import platform.CoreFoundation.CFTypeRef import platform.CoreFoundation.CFTypeRefVar +import platform.CoreFoundation.kCFBooleanTrue +import platform.CoreFoundation.kCFTypeDictionaryKeyCallBacks +import platform.CoreFoundation.kCFTypeDictionaryValueCallBacks import platform.Foundation.CFBridgingRelease import platform.Foundation.CFBridgingRetain import platform.Foundation.NSData @@ -32,75 +39,115 @@ import platform.darwin.OSStatus internal actual fun encryptedKeyValueStore(name: String): KeyValueStore = KeychainKeyValueStore(name) +/** + * Builds a Keychain query directly as a `CFDictionary`, runs [block] with it, then releases + * the dictionary and any owned temporaries. + * + * A Kotlin `mapOf(...)` bridged to a dictionary via `CFBridgingRetain` does not produce a + * valid query: `SecItem*` rejects it with `errSecParam`, and even when otherwise valid the + * `CFBoolean` flags (e.g. `kSecReturnData`) do not survive the Foundation bridge. Creating + * the `CFDictionary` directly from CoreFoundation values preserves every value type. + * + * Values come from [QueryBuilder]: `kSec*` constants pass through directly, while Kotlin + * strings/data are bridged with `CFBridgingRetain` and tracked so their owning reference is + * released after the query is used (the dictionary holds its own retain meanwhile). + */ +@OptIn(ExperimentalForeignApi::class) +private inline fun withQuery(build: QueryBuilder.() -> Unit, block: (CFDictionaryRef) -> R): R { + val builder = QueryBuilder().apply(build) + val dict = CFDictionaryCreateMutable( + null, + builder.pairs.size.toLong(), + kCFTypeDictionaryKeyCallBacks.ptr, + kCFTypeDictionaryValueCallBacks.ptr + ) + builder.pairs.forEach { (k, v) -> CFDictionaryAddValue(dict, k, v) } + try { + return block(dict!!) + } finally { + CFRelease(dict) + // Release the references we created via CFBridgingRetain; the dictionary kept its own. + builder.owned.forEach { CFRelease(it) } + } +} + +@OptIn(ExperimentalForeignApi::class, BetaInteropApi::class) +private class QueryBuilder { + val pairs = mutableListOf>() + val owned = mutableListOf() + + /** Adds a pair whose value is an immortal CF constant (not released). */ + fun constant(key: CFTypeRef?, value: CFTypeRef?) { + pairs += key to value + } + + /** Adds a pair whose value is bridged from a Kotlin object and owned by this builder. */ + fun bridged(key: CFTypeRef?, value: Any) { + val ref = CFBridgingRetain(value) + if (ref != null) owned += ref + pairs += key to ref + } +} + @OptIn(ExperimentalForeignApi::class, BetaInteropApi::class) private class KeychainKeyValueStore(private val service: String) : KeyValueStore { override fun put(key: String, value: String) { remove(key) val data = (value as NSString).dataUsingEncoding(NSUTF8StringEncoding) ?: return - val query = mapOf( - kSecClass to kSecClassGenericPassword, - kSecAttrService to service, - kSecAttrAccount to key, - kSecValueData to data - ) - @Suppress("UNCHECKED_CAST") - SecItemAdd(CFBridgingRetain(query) as CFDictionaryRef, null) + withQuery({ + constant(kSecClass, kSecClassGenericPassword) + bridged(kSecAttrService, service as NSString) + bridged(kSecAttrAccount, key as NSString) + bridged(kSecValueData, data) + }) { query -> + SecItemAdd(query, null) + } } - override fun get(key: String): String? { - val query = mapOf( - kSecClass to kSecClassGenericPassword, - kSecAttrService to service, - kSecAttrAccount to key, - kSecReturnData to true - ) + override fun get(key: String): String? = withQuery({ + constant(kSecClass, kSecClassGenericPassword) + bridged(kSecAttrService, service as NSString) + bridged(kSecAttrAccount, key as NSString) + constant(kSecReturnData, kCFBooleanTrue) + }) { query -> memScoped { val result = alloc() - @Suppress("UNCHECKED_CAST") - val status: OSStatus = SecItemCopyMatching( - CFBridgingRetain(query) as CFDictionaryRef, - result.ptr - ) - if (status != errSecSuccess) return null - val data = CFBridgingRelease(result.value) as? NSData ?: return null - return NSString.create(data = data, encoding = NSUTF8StringEncoding) as? String + val status: OSStatus = SecItemCopyMatching(query, result.ptr) + if (status != errSecSuccess) return@memScoped null + val data = CFBridgingRelease(result.value) as? NSData ?: return@memScoped null + NSString.create(data = data, encoding = NSUTF8StringEncoding) as? String } } override fun remove(key: String) { - val query = mapOf( - kSecClass to kSecClassGenericPassword, - kSecAttrService to service, - kSecAttrAccount to key - ) - @Suppress("UNCHECKED_CAST") - SecItemDelete(CFBridgingRetain(query) as CFDictionaryRef) + withQuery({ + constant(kSecClass, kSecClassGenericPassword) + bridged(kSecAttrService, service as NSString) + bridged(kSecAttrAccount, key as NSString) + }) { query -> + SecItemDelete(query) + } } - override fun getAll(): Map { - val query = mapOf( - kSecClass to kSecClassGenericPassword, - kSecAttrService to service, - kSecReturnAttributes to true, - kSecReturnData to true, - kSecMatchLimit to kSecMatchLimitAll - ) + override fun getAll(): Map = withQuery({ + constant(kSecClass, kSecClassGenericPassword) + bridged(kSecAttrService, service as NSString) + constant(kSecReturnAttributes, kCFBooleanTrue) + constant(kSecReturnData, kCFBooleanTrue) + constant(kSecMatchLimit, kSecMatchLimitAll) + }) { query -> memScoped { val result = alloc() - @Suppress("UNCHECKED_CAST") - val status: OSStatus = SecItemCopyMatching( - CFBridgingRetain(query) as CFDictionaryRef, - result.ptr - ) - if (status != errSecSuccess) return emptyMap() + val status: OSStatus = SecItemCopyMatching(query, result.ptr) + if (status != errSecSuccess) return@memScoped emptyMap() @Suppress("UNCHECKED_CAST") val items = CFBridgingRelease(result.value) as? List> - ?: return emptyMap() - return items.mapNotNull { item -> - val account = item[kSecAttrAccount] as? String ?: return@mapNotNull null - val data = item[kSecValueData] as? NSData ?: return@mapNotNull null + ?: return@memScoped emptyMap() + items.mapNotNull { item -> + val account = item[kSecAttrAccount.bridgedKey()] as? String ?: return@mapNotNull null + val data = item[kSecValueData.bridgedKey()] as? NSData ?: return@mapNotNull null val value = NSString.create(data = data, encoding = NSUTF8StringEncoding) as? String ?: return@mapNotNull null account to value @@ -108,3 +155,13 @@ private class KeychainKeyValueStore(private val service: String) : KeyValueStore } } } + +/** + * The dictionary returned by `SecItemCopyMatching` is bridged to a Kotlin `Map` whose keys + * are the `kSec*` attribute constants as bridged `NSString`s. `CFBridgingRelease` of a + * retained copy yields that same `NSString` for lookup, without consuming the immortal + * constant's own reference. + */ +@OptIn(ExperimentalForeignApi::class) +private fun CFTypeRef?.bridgedKey(): Any? = + CFBridgingRelease(this?.let { platform.CoreFoundation.CFRetain(it) }) From e952cc996b2a06998aefffb2bc94f3465e83de6a Mon Sep 17 00:00:00 2001 From: Matt Creaser Date: Fri, 26 Jun 2026 14:00:33 -0300 Subject: [PATCH 10/10] Update iOS e2e tests to use a booted simulator to allow keychain access --- native/kotlin/e2e/build.gradle.kts | 42 +++++++++++++++++++++++++++- native/kotlin/e2e/entitlements.plist | 12 ++++++++ 2 files changed, 53 insertions(+), 1 deletion(-) create mode 100644 native/kotlin/e2e/entitlements.plist diff --git a/native/kotlin/e2e/build.gradle.kts b/native/kotlin/e2e/build.gradle.kts index 8289ba33..131be11a 100644 --- a/native/kotlin/e2e/build.gradle.kts +++ b/native/kotlin/e2e/build.gradle.kts @@ -1,3 +1,5 @@ +import org.jetbrains.kotlin.gradle.targets.native.tasks.KotlinNativeSimulatorTest + plugins { alias(libs.plugins.kotlin.multiplatform) alias(libs.plugins.kotlinx.serialization) @@ -7,7 +9,18 @@ plugins { kotlin { jvm() - iosSimulatorArm64() + iosSimulatorArm64 { + // PersistentCookiesStorage on iOS is Keychain-backed. The bare Kotlin/Native + // simulator test binary has no keychain-access-groups entitlement, so Keychain + // calls fail with errSecNotAvailable and session cookies never persist. Embed an + // entitlements section into the test binary; combined with the booted, non-standalone + // test run configured below, the simulator honors the entitlement so the Keychain + // works under test. + binaries.getTest("DEBUG").linkerOpts( + "-sectcreate", "__TEXT", "__entitlements", + "${projectDir}/entitlements.plist" + ) + } sourceSets { commonMain.dependencies { @@ -40,6 +53,33 @@ tasks.named("jvmTest") { environment("BLOCKS_URL", url) } +// Boots and opens an iOS simulator. The Keychain-backed tests run non-standalone against a +// booted device (see below), which requires a simulator to already be running. Making the +// iOS test task depend on this keeps CI and local `run-e2e.sh` working without a manual boot. +val launchIosSimulator by tasks.registering(Exec::class) { + isIgnoreExitValue = true + // No-op if a simulator is already booted; otherwise boot the first available iPhone. + // `open -a Simulator` is macOS-only and harmless if already open. + commandLine( + "sh", "-c", + """ + if ! xcrun simctl list devices booted | grep -q Booted; then + udid=${'$'}(xcrun simctl list devices available | grep -Eo '[0-9A-F-]{36}' | head -1) + [ -n "${'$'}udid" ] && xcrun simctl boot "${'$'}udid" + fi + open -a Simulator 2>/dev/null || true + """.trimIndent() + ) +} + +tasks.withType().configureEach { + dependsOn(launchIosSimulator) + // Launch as an app on a booted simulator (not a standalone `simctl spawn`) so the + // embedded keychain-access-groups entitlement is honored and Keychain storage works. + standalone.set(false) + device.set("booted") +} + awsBlocks { apiSpec = file("blocks.spec.json") packageName = "blocks.e2e" diff --git a/native/kotlin/e2e/entitlements.plist b/native/kotlin/e2e/entitlements.plist new file mode 100644 index 00000000..59825ac9 --- /dev/null +++ b/native/kotlin/e2e/entitlements.plist @@ -0,0 +1,12 @@ + + + + + application-identifier + com.aws.blocks.kotlin.e2e + keychain-access-groups + + com.aws.blocks.kotlin.e2e + + +