@actsecurity/iam-simulate 0.1.173

package/dist/cjs/resource/resource.js

@@ -0,0 +1,585 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestMatchesStatementResources = requestMatchesStatementResources;
+exports.requestMatchesResources = requestMatchesResources;
+exports.requestMatchesNotResources = requestMatchesNotResources;
+exports.resourcePatternOverlap = resourcePatternOverlap;
+const statementExplain_js_1 = require("../explain/statementExplain.js");
+const util_js_1 = require("../util.js");
+/**
+ * Map of resource matching settings per policy type. Controls how short ARNs are treated:
+ * - `'expand'` — treat missing trailing segments as `*`, then match normally
+ * - `'reject'` — return an error (ARN is not valid for this policy type)
+ * - `'noMatch'` — silently does not match
+ */
+const policyTypeResourceSettings = {
+    identity: { shortArnWithoutWildcard: 'expand', shortArnWithWildcard: 'expand' },
+    session: { shortArnWithoutWildcard: 'expand', shortArnWithWildcard: 'expand' },
+    pb: { shortArnWithoutWildcard: 'expand', shortArnWithWildcard: 'expand' },
+    resource: { shortArnWithoutWildcard: 'noMatch', shortArnWithWildcard: 'expand' },
+    vpce: { shortArnWithoutWildcard: 'noMatch', shortArnWithWildcard: 'expand' },
+    scp: { shortArnWithoutWildcard: 'reject', shortArnWithWildcard: 'expand' },
+    rcp: { shortArnWithoutWildcard: 'reject', shortArnWithWildcard: 'reject' }
+};
+/**
+ * Create a lightweight Resource object from an expanded ARN string.
+ * Used when a short ARN is padded with `*` segments to form a full 6-segment ARN.
+ *
+ * @param expandedValue the full 6-segment ARN string
+ * @returns a Resource object that can be used in the existing matching logic
+ */
+function createExpandedResource(expandedValue) {
+    const parts = expandedValue.split(':');
+    const resource = {
+        value: () => expandedValue,
+        isAllResources: () => false,
+        isArnResource: () => true,
+        path: () => '',
+        partition: () => parts[1],
+        service: () => parts[2],
+        region: () => parts[3],
+        account: () => parts[4],
+        resource: () => parts.slice(5).join(':')
+    };
+    return resource;
+}
+/**
+ * Convert a resource segment to a regular expression. This is without variables.
+ *
+ * @param segment the segment to convert to a regular expression
+ * @returns a regular that replaces any wildcards in the segment with the appropriate regular expression.
+ */
+function convertResourceSegmentToRegex(segment) {
+    if (segment.indexOf(':') != -1) {
+        throw new Error('Segment should not contain a colon');
+    }
+    const pattern = '^' + segment.replace(/\?/g, '.').replace(/\*/g, '.*?') + '$';
+    return new RegExp(pattern, 'i');
+}
+/**
+ * Replace regex characters in a resource pattern with escaped versions.
+ *
+ * @param pattern the resource pattern to escape for use inside a regular expression
+ * @returns the pattern with regex metacharacters escaped
+ */
+function escapeResourcePatternRegexCharacters(pattern) {
+    return pattern.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Convert a request resource pattern to a regex string for overlap checks.
+ * Request resources support asterisks as wildcards, but question marks are literals.
+ *
+ * @param requestString the request resource pattern to convert
+ * @returns a regex string that matches the request resource pattern
+ */
+function requestResourcePatternToRegexString(requestString) {
+    return '^' + escapeResourcePatternRegexCharacters(requestString).replace(/\\\*/g, '.*?') + '$';
+}
+/**
+ * Convert a policy resource pattern to a regex string for overlap checks.
+ * Policy resources support asterisks and question marks as IAM wildcards.
+ *
+ * @param policyString the policy resource pattern to convert
+ * @returns a regex string that matches the policy resource pattern
+ */
+function policyResourcePatternToRegexString(policyString) {
+    return ('^' +
+        escapeResourcePatternRegexCharacters(policyString)
+            .replace(/\\\?/g, '.')
+            .replace(/\\\*/g, '.*?') +
+        '$');
+}
+/**
+ * Check if a request matches the Resource or NotResource elements of a statement.
+ *
+ * @param request the request to check
+ * @param statement the statement to check against
+ * @param policyType the type of policy being evaluated
+ * @returns true if the request matches the resources in the statement, false otherwise
+ */
+function requestMatchesStatementResources(request, statement, policyType) {
+    if (statement.isResourceStatement()) {
+        const { matches, explains } = requestMatchesResources(request, statement.resources(), 'Resource', statement.effect(), policyType);
+        if (!statement.resourceIsArray()) {
+            return { matches, details: { resources: explains[0] } };
+        }
+        return { matches, details: { resources: explains } };
+    }
+    else if (statement.isNotResourceStatement()) {
+        const { matches, explains } = requestMatchesNotResources(request, statement.notResources(), 'NotResource', statement.effect(), policyType);
+        if (!statement.notResourceIsArray()) {
+            return { matches, details: { notResources: explains[0] } };
+        }
+        return { matches, details: { notResources: explains } };
+    }
+    return { matches: true, details: {} };
+}
+/**
+ * Check if a request matches a set of resources.
+ *
+ * @param request the request to check
+ * @param policyResources the resources to check against
+ * @param resourceType whether this is a Resource or NotResource element
+ * @param effect the effect of the statement
+ * @param policyType the type of policy being evaluated
+ * @returns true if the request matches any of the resources, false otherwise
+ */
+function requestMatchesResources(request, policyResources, resourceType, effect, policyType) {
+    const explains = policyResources.map((policyResource) => singleResourceMatchesRequest(request, policyResource, resourceType, effect, policyType));
+    const matches = explains.some((explain) => explain.matches);
+    return { matches, explains };
+}
+/**
+ * Check if a request matches a NotResource element in a policy.
+ *
+ * @param request the request to check
+ * @param policyResources the resources to check against
+ * @param resourceType whether this is a Resource or NotResource element
+ * @param effect the effect of the statement
+ * @param policyType the type of policy being evaluated
+ * @returns true if the request does not match any of the resources, false otherwise
+ */
+function requestMatchesNotResources(request, policyResources, resourceType, effect, policyType) {
+    const explains = policyResources.map((policyResource) => {
+        const explain = singleResourceMatchesRequest(request, policyResource, resourceType, effect, policyType);
+        if (shouldInvertNotResourceExplain(explain)) {
+            explain.matches = !explain.matches;
+            delete explain.errors;
+            delete explain.mismatchReason;
+        }
+        return explain;
+    });
+    const matches = !explains.some((explain) => !explain.matches);
+    return { matches, explains };
+}
+/**
+ * Determine whether a Resource match explain can be inverted for NotResource matching.
+ *
+ * The resource mismatch reason registry owns the decision about which mismatches
+ * definitively prove the request is outside the NotResource set and can be inverted.
+ *
+ * @param explain the Resource matching explain to inspect
+ * @returns true when the explain should be inverted for NotResource semantics
+ */
+function shouldInvertNotResourceExplain(explain) {
+    if (explain.matches) {
+        return true;
+    }
+    if (!explain.mismatchReason) {
+        throw new Error(`Non-matching resource explain is missing mismatchReason: ${explain.resource}`);
+    }
+    return statementExplain_js_1.resourceMismatchReasons[explain.mismatchReason].invertible;
+}
+/*
+Specifications for **request resource** wildcards:
+- Asterisks (*) can be used to match any sequence of characters (including an empty sequence)
+- Asterisks can appear in any segment of the ARN (partition, service, region, account, resource)
+- Asterisks are not greedy, and can be followed or preceded by other characters in the same segment
+- Existing rules of matching wildcard segments in ARNs still apply
+- Question marks (?) are not supported in the request resource ARN
+
+If the string in the policy is the same as the resolved string after variable substitution, it is a match
+
+For an Allow/Resource Statement:
+- If the resolved string matches the request resource, it is a match
+- If the resolved string is a superset of the request resource, it is a match
+- If the resolved string is a subset of the request resource, it is a match
+- If there is no overlap at all between the resolved string and the request resource, it is not a match
+
+For a Deny/Resource Statement:
+- If the resolved string matches the request resource, it is a match
+- If the resolved string is a superset of the request resource, it is a match
+- If the resolved string is a subset of the request resource, it is not a match
+- If there is no overlap at all between the resolved string and the request resource, it is not a match
+
+For an Allow/NotResource Statement:
+- If the resolved string matches the request resource, it is not a match
+- If the resolved string is a superset of the request resource, it is not a match
+- If the resolved string is a subset of the request resource, it is a match
+- If there is no overlap at all between the resolved string and the request resource, it is a match
+
+For a Deny/NotResource Statement:
+- If the resolved string matches the request resource, it is not a match
+- If the resolved string is a superset of the request resource, it is not a match
+- If the resolved string is a subset of the request resource, it is not a match
+- If there is no overlap at all between the resolved string and the request resource, it is a match
+*/
+/**
+ * Check if a single resource matches a request.
+ *
+ * @param request the request to check against
+ * @param policyResource the resource to check against
+ * @param resourceType whether this is a Resource or NotResource element
+ * @param effect the effect of the statement
+ * @param policyType the type of policy being evaluated
+ * @returns true if the request matches the resource, false otherwise
+ */
+function singleResourceMatchesRequest(request, policyResource, resourceType, effect, policyType) {
+    // Policy is all resources
+    if (policyResource.isAllResources()) {
+        return {
+            resource: policyResource.value(),
+            matches: true
+        };
+    }
+    // Short ARN handling — fewer than 6 colon-separated segments
+    if (policyResource.isArnResource() && policyResource.value().split(':').length < 6) {
+        const settings = policyTypeResourceSettings[policyType];
+        // For policy types that reject short ARNs without wildcards, only a wildcard
+        // in the last segment counts — a wildcard in the middle doesn't make it valid.
+        const lastSegment = policyResource.value().split(':').at(-1) ?? '';
+        const hasTrailingWildcard = lastSegment.endsWith('*');
+        const hasAnyWildcard = policyResource.value().includes('*');
+        const hasWildcard = settings.shortArnWithoutWildcard === 'reject' ? hasTrailingWildcard : hasAnyWildcard;
+        const behavior = hasWildcard ? settings.shortArnWithWildcard : settings.shortArnWithoutWildcard;
+        if (behavior === 'reject') {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Policy resource ARN is not valid for this policy type'],
+                mismatchReason: 'invalidPolicyResourceArn'
+            };
+        }
+        if (behavior === 'noMatch') {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                mismatchReason: 'shortArnNoMatch'
+            };
+        }
+        // behavior === 'expand': pad missing segments with '*' and recurse with expanded resource
+        const segments = policyResource.value().split(':');
+        while (segments.length < 6) {
+            segments.push('*');
+        }
+        const result = singleResourceMatchesRequest(request, createExpandedResource(segments.join(':')), resourceType, effect, policyType);
+        // Preserve the original (unexpanded) resource value in the explain
+        result.resource = policyResource.value();
+        if (!result.matches && result.mismatchReason) {
+            result.mismatchReason = 'shortArnExpandedMismatch';
+        }
+        return result;
+    }
+    // Request is all resources
+    if (request.resource?.isAllResources()) {
+        // For wildcard-only actions, only a literal "*" policy resource (handled above) grants access.
+        // A specific ARN in the policy does not match a wildcard-only action's "*" request resource.
+        if (request.wildcardOnlyAction) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                mismatchReason: 'wildcardOnlyActionSpecificResource'
+            };
+        }
+        if (effect === 'Allow' && resourceType === 'Resource') {
+            return {
+                resource: policyResource.value(),
+                matches: true
+            };
+        }
+        else if (effect === 'Allow' && resourceType === 'NotResource') {
+            return {
+                resource: policyResource.value(),
+                matches: false, // This gets inverted in the caller
+                mismatchReason: 'requestAllResourcesSpecificNotResource'
+            };
+        }
+        else if (effect === 'Deny' && resourceType === 'Resource') {
+            // This is a Deny statement that is not all resources, so it's not a match
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                mismatchReason: 'requestAllResourcesDenySpecificResource'
+            };
+        }
+        else if (effect === 'Deny' && resourceType === 'NotResource') {
+            return {
+                resource: policyResource.value(),
+                matches: true // This gets inverted in the caller
+            };
+        }
+        throw new Error(`Unknown Resource Type and Effect Combination: ${resourceType} ${effect}`);
+    }
+    // Request contains wildcards but neither is a full *
+    if (request.resource.hasWildcards() && policyResource.isArnResource()) {
+        const overlaps = [
+            resourcePatternOverlap(policyResource.partition(), request.resource.partition()),
+            resourcePatternOverlap(policyResource.service(), request.resource.service()),
+            resourcePatternOverlap(policyResource.region(), request.resource.region()),
+            resourcePatternOverlap(policyResource.account(), request.resource.account()),
+            resourcePatternOverlap(policyResource.resource(), request.resource.resource())
+        ];
+        if (resourceType === 'Resource' && effect === 'Allow') {
+            if (overlaps.every((o) => o !== 'none')) {
+                return {
+                    resource: policyResource.value(),
+                    matches: true
+                };
+            }
+        }
+        else if (resourceType === 'Resource' && effect === 'Deny') {
+            if (overlaps.some((o) => o === 'none' || o === 'policy_is_subset')) {
+                return {
+                    resource: policyResource.value(),
+                    matches: false,
+                    mismatchReason: 'resourcePatternMismatch'
+                };
+            }
+        }
+        else if (resourceType === 'NotResource' && effect === 'Allow') {
+            /*
+             * For an Allow/NotResource Statement:
+                - If the resolved string matches the request resource, it is not a match
+                - If the resolved string is a superset of the request resource, it is not a match
+                - If the resolved string is a subset of the request resource, it is a match
+                - If there is no overlap at all between the resolved string and the request resource, it is a match
+             */
+            if (overlaps.every((o) => o === 'equal' || o === 'policy_is_superset')) {
+                return {
+                    resource: policyResource.value(),
+                    // This gets inverted in the caller
+                    matches: true
+                };
+            }
+            else {
+                return {
+                    resource: policyResource.value(),
+                    // This gets inverted in the caller
+                    matches: false,
+                    mismatchReason: 'resourcePatternMismatch'
+                };
+            }
+        }
+        else if (resourceType === 'NotResource' && effect === 'Deny') {
+            /*
+              For a Deny/NotResource Statement:
+              - If the resolved string matches the request resource, it is not a match
+              - If the resolved string is a superset of the request resource, it is not a match
+              - If the resolved string is a subset of the request resource, it is not a match
+              - If there is no overlap at all between the resolved string and the request resource, it is a match
+            */
+            if (overlaps.some((o) => o === 'none')) {
+                return {
+                    resource: policyResource.value(),
+                    // This gets inverted in the caller
+                    matches: false,
+                    mismatchReason: 'resourcePatternMismatch'
+                };
+            }
+            else {
+                return {
+                    resource: policyResource.value(),
+                    // This gets inverted in the caller
+                    matches: true
+                };
+            }
+        }
+        else {
+            throw new Error(`Unknown Resource Type and Effect Combination: ${resourceType} ${effect}`);
+        }
+    }
+    if (policyResource.isArnResource()) {
+        if (!request.resource) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Request does not have a resource'],
+                mismatchReason: 'requestMissingResource'
+            };
+        }
+        const resource = request.resource;
+        if (!convertResourceSegmentToRegex(policyResource.partition()).test(resource.partition())) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Partition does not match'],
+                mismatchReason: 'partitionMismatch'
+            };
+        }
+        if (!convertResourceSegmentToRegex(policyResource.service()).test(resource.service())) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Service does not match'],
+                mismatchReason: 'serviceMismatch'
+            };
+        }
+        if (!convertResourceSegmentToRegex(policyResource.region()).test(resource.region())) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Region does not match'],
+                mismatchReason: 'regionMismatch'
+            };
+        }
+        if (!convertResourceSegmentToRegex(policyResource.account()).test(resource.account())) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Account does not match'],
+                mismatchReason: 'accountMismatch'
+            };
+        }
+        //Wildcards and variables are not allowed in the product segment https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html "Incorrect wildcard usage"
+        const [policyProduct, policyResourceId] = (0, util_js_1.getResourceSegments)(policyResource);
+        if (!resource.resource().startsWith(policyProduct)) {
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors: ['Product does not match'],
+                mismatchReason: 'productMismatch'
+            };
+        }
+        const requestResourceId = resource.resource().slice(policyProduct.length);
+        const { pattern, errors } = (0, util_js_1.convertIamString)(policyResourceId, request);
+        const resolvedResourceId = (0, util_js_1.convertIamString)(policyResourceId, request, {
+            convertToRegex: false,
+            replaceWildcards: false
+        });
+        const resolvedResource = policyResource.value().slice(0, policyResource.value().length - policyResourceId.length) +
+            resolvedResourceId;
+        const resolvedValue = resolvedResource === policyResource.value() ? undefined : resolvedResource;
+        if (!pattern.test(requestResourceId)) {
+            const mismatchReason = errors?.length ? 'unresolvablePolicyVariable' : 'resourceIdMismatch';
+            return {
+                resource: policyResource.value(),
+                matches: false,
+                errors,
+                mismatchReason,
+                resolvedValue
+            };
+        }
+        return {
+            resource: policyResource.value(),
+            matches: true,
+            resolvedValue
+        };
+    }
+    else {
+        throw new Error('Unknown resource type');
+    }
+}
+/**
+ * Determines if the policy string is equal to, a subset of, a superset of,
+ * or has no overlap with the request string.
+ *
+ * @param policyString the policy string to use
+ * @param requestString the request string to compare to the policy string
+ * @returns 'equal' if the strings are equal, 'subset' if the policy string is a subset of the request string, 'superset' if the policy string is a superset of the request string, 'overlap' if the strings have a non-empty intersection but neither contains the other, or 'none' if there is no overlap
+ */
+function resourcePatternOverlap(policyString, requestString) {
+    if (policyString === requestString) {
+        return 'equal';
+    }
+    const requestPattern = requestResourcePatternToRegexString(requestString);
+    if (policyString.match(requestPattern)) {
+        return 'policy_is_subset';
+    }
+    const policyPattern = policyResourcePatternToRegexString(policyString);
+    if (requestString.match(policyPattern)) {
+        return 'policy_is_superset';
+    }
+    if (resourcePatternsIntersect(policyString, requestString)) {
+        return 'overlap';
+    }
+    return 'none';
+}
+/**
+ * Checks whether a policy resource pattern and request resource pattern share
+ * at least one concrete resource string.
+ *
+ * Policy patterns use IAM `*` and `?` wildcards. Request patterns only treat
+ * `*` as a wildcard; `?` remains literal to match the existing request
+ * wildcard semantics in this module.
+ *
+ * @param policyString the policy-side resource pattern segment to compare
+ * @param requestString the request-side resource pattern segment to compare
+ * @returns true when the patterns have a non-empty intersection
+ */
+function resourcePatternsIntersect(policyString, requestString) {
+    const policyPattern = [...policyString];
+    const requestPattern = [...requestString];
+    const visited = new Set();
+    const queue = [[0, 0]];
+    const key = (policyIndex, requestIndex) => `${policyIndex},${requestIndex}`;
+    while (queue.length > 0) {
+        const [policyIndex, requestIndex] = queue.shift();
+        const stateKey = key(policyIndex, requestIndex);
+        if (visited.has(stateKey)) {
+            continue;
+        }
+        visited.add(stateKey);
+        if (policyIndex === policyPattern.length && requestIndex === requestPattern.length) {
+            return true;
+        }
+        const policyToken = tokenAt(policyPattern, policyIndex);
+        const requestToken = tokenAt(requestPattern, requestIndex);
+        if (policyToken === '*') {
+            queue.push([policyIndex + 1, requestIndex]);
+        }
+        if (requestToken === '*') {
+            queue.push([policyIndex, requestIndex + 1]);
+        }
+        if (resourcePatternTokensCanConsumeSameCharacter(policyToken, requestToken)) {
+            const nextPolicyIndexes = nextResourcePatternIndexesAfterOneCharacter(policyPattern, policyIndex, true);
+            const nextRequestIndexes = nextResourcePatternIndexesAfterOneCharacter(requestPattern, requestIndex, false);
+            for (const nextPolicyIndex of nextPolicyIndexes) {
+                for (const nextRequestIndex of nextRequestIndexes) {
+                    queue.push([nextPolicyIndex, nextRequestIndex]);
+                }
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Reads a token from a pattern, returning null at the end of the pattern.
+ *
+ * @param pattern the pattern characters
+ * @param index the index to read
+ * @returns the token at the index, or null when the index is past the end
+ */
+function tokenAt(pattern, index) {
+    return index < pattern.length ? pattern[index] : null;
+}
+/**
+ * Determines whether policy and request pattern tokens can match the same next
+ * concrete character under their respective wildcard semantics.
+ *
+ * @param policyToken token from the policy pattern, where `*` and `?` are wildcards
+ * @param requestToken token from the request pattern, where only `*` is a wildcard
+ * @returns true if both tokens can consume the same concrete character
+ */
+function resourcePatternTokensCanConsumeSameCharacter(policyToken, requestToken) {
+    if (policyToken === null || requestToken === null) {
+        return false;
+    }
+    const policyWildcard = policyToken === '*' || policyToken === '?';
+    const requestWildcard = requestToken === '*';
+    if (!policyWildcard && !requestWildcard) {
+        return policyToken === requestToken;
+    }
+    return true;
+}
+/**
+ * Returns possible next indexes after consuming one concrete character from a pattern.
+ *
+ * @param pattern the pattern characters
+ * @param index current pattern index
+ * @param questionMarkIsWildcard whether `?` should be treated as a one-character wildcard
+ * @returns possible next indexes after one concrete character is consumed
+ */
+function nextResourcePatternIndexesAfterOneCharacter(pattern, index, questionMarkIsWildcard) {
+    const token = tokenAt(pattern, index);
+    if (token === null) {
+        return [];
+    }
+    if (token === '*') {
+        return [index];
+    }
+    if (token === '?' && questionMarkIsWildcard) {
+        return [index + 1];
+    }
+    return [index + 1];
+}
+//# sourceMappingURL=resource.js.map

package/dist/cjs/resource/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../src/resource/resource.ts"],"names":[],"mappings":";;AA0HA,4EA+BC;AAYD,0DAYC;AAYD,gEAwBC;AAuVD,wDAsBC;AAjkBD,wEAIuC;AAGvC,wCAAkE;AAelE;;;;;GAKG;AACH,MAAM,0BAA0B,GAAmD;IACjF,QAAQ,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE;IAC/E,OAAO,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE;IAC9E,EAAE,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE;IACzE,QAAQ,EAAE,EAAE,uBAAuB,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE;IAChF,IAAI,EAAE,EAAE,uBAAuB,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE;IAC5E,GAAG,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE;IAC1E,GAAG,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE;CAC3E,CAAA;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,aAAqB;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,GAAG,EAAE,CAAC,aAAa;QAC1B,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK;QAC3B,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;QACzB,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE;QACd,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACzC,CAAA;IACD,OAAO,QAA+B,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CAAC,OAAe;IACpD,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,GAAG,CAAA;IAC7E,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAS,oCAAoC,CAAC,OAAe;IAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mCAAmC,CAAC,aAAqB;IAChE,OAAO,GAAG,GAAG,oCAAoC,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,GAAG,CAAA;AAChG,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kCAAkC,CAAC,YAAoB;IAC9D,OAAO,CACL,GAAG;QACH,oCAAoC,CAAC,YAAY,CAAC;aAC/C,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;QAC1B,GAAG,CACJ,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gCAAgC,CAC9C,OAAmB,EACnB,SAAoB,EACpB,UAAsB;IAEtB,IAAI,SAAS,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,uBAAuB,CACnD,OAAO,EACP,SAAS,CAAC,SAAS,EAAE,EACrB,UAAU,EACV,SAAS,CAAC,MAAM,EAAsB,EACtC,UAAU,CACX,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QACzD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAA;IACtD,CAAC;SAAM,IAAI,SAAS,CAAC,sBAAsB,EAAE,EAAE,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,0BAA0B,CACtD,OAAO,EACP,SAAS,CAAC,YAAY,EAAE,EACxB,aAAa,EACb,SAAS,CAAC,MAAM,EAAsB,EACtC,UAAU,CACX,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QAC5D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,uBAAuB,CACrC,OAAmB,EACnB,eAA2B,EAC3B,YAAwC,EACxC,MAAwB,EACxB,UAAsB;IAEtB,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CACtD,4BAA4B,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,CACxF,CAAA;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,OAAmB,EACnB,eAA2B,EAC3B,YAAwC,EACxC,MAAwB,EACxB,UAAsB;IAEtB,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,4BAA4B,CAC1C,OAAO,EACP,cAAc,EACd,YAAY,EACZ,MAAM,EACN,UAAU,CACX,CAAA;QACD,IAAI,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAA;YAClC,OAAO,OAAO,CAAC,MAAM,CAAA;YACrB,OAAO,OAAO,CAAC,cAAc,CAAA;QAC/B,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,8BAA8B,CAAC,OAAwB;IAC9D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4DAA4D,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IACjG,CAAC;IAED,OAAO,6CAAuB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,UAAU,CAAA;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCE;AAEF;;;;;;;;;GASG;AACH,SAAS,4BAA4B,CACnC,OAAmB,EACnB,cAAwB,EACxB,YAAwC,EACxC,MAAwB,EACxB,UAAsB;IAEtB,0BAA0B;IAC1B,IAAI,cAAc,CAAC,cAAc,EAAE,EAAE,CAAC;QACpC,OAAO;YACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;YAChC,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,6DAA6D;IAC7D,IAAI,cAAc,CAAC,aAAa,EAAE,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAA;QACvD,6EAA6E;QAC7E,+EAA+E;QAC/E,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAClE,MAAM,mBAAmB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACrD,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC3D,MAAM,WAAW,GACf,QAAQ,CAAC,uBAAuB,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAA;QACtF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAA;QAE/F,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,uDAAuD,CAAC;gBACjE,cAAc,EAAE,0BAA0B;aAC3C,CAAA;QACH,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,cAAc,EAAE,iBAAiB;aAClC,CAAA;QACH,CAAC;QAED,0FAA0F;QAC1F,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CACzC,OAAO,EACP,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC1C,YAAY,EACZ,MAAM,EACN,UAAU,CACX,CAAA;QACD,mEAAmE;QACnE,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,CAAA;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7C,MAAM,CAAC,cAAc,GAAG,0BAA0B,CAAA;QACpD,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,CAAC;QACvC,+FAA+F;QAC/F,6FAA6F;QAC7F,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,cAAc,EAAE,oCAAoC;aACrD,CAAA;QACH,CAAC;QAED,IAAI,MAAM,KAAK,OAAO,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;aAAM,IAAI,MAAM,KAAK,OAAO,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YAChE,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK,EAAE,mCAAmC;gBACnD,cAAc,EAAE,wCAAwC;aACzD,CAAA;QACH,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAC5D,0EAA0E;YAC1E,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,cAAc,EAAE,yCAAyC;aAC1D,CAAA;QACH,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YAC/D,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,IAAI,CAAC,mCAAmC;aAClD,CAAA;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,YAAY,IAAI,MAAM,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,cAAc,CAAC,aAAa,EAAE,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG;YACf,sBAAsB,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAChF,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5E,sBAAsB,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5E,sBAAsB,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;SAC/E,CAAA;QAED,IAAI,YAAY,KAAK,UAAU,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;oBAChC,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;QACH,CAAC;aAAM,IAAI,YAAY,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,kBAAkB,CAAC,EAAE,CAAC;gBACnE,OAAO;oBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;oBAChC,OAAO,EAAE,KAAK;oBACd,cAAc,EAAE,yBAAyB;iBAC1C,CAAA;YACH,CAAC;QACH,CAAC;aAAM,IAAI,YAAY,KAAK,aAAa,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAChE;;;;;;eAMG;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,oBAAoB,CAAC,EAAE,CAAC;gBACvE,OAAO;oBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;oBAChC,mCAAmC;oBACnC,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;oBAChC,mCAAmC;oBACnC,OAAO,EAAE,KAAK;oBACd,cAAc,EAAE,yBAAyB;iBAC1C,CAAA;YACH,CAAC;QACH,CAAC;aAAM,IAAI,YAAY,KAAK,aAAa,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/D;;;;;;cAME;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;gBACvC,OAAO;oBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;oBAChC,mCAAmC;oBACnC,OAAO,EAAE,KAAK;oBACd,cAAc,EAAE,yBAAyB;iBAC1C,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;oBAChC,mCAAmC;oBACnC,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,iDAAiD,YAAY,IAAI,MAAM,EAAE,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC;IAED,IAAI,cAAc,CAAC,aAAa,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,kCAAkC,CAAC;gBAC5C,cAAc,EAAE,wBAAwB;aACzC,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QACjC,IAAI,CAAC,6BAA6B,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YAC1F,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,0BAA0B,CAAC;gBACpC,cAAc,EAAE,mBAAmB;aACpC,CAAA;QACH,CAAC;QAED,IAAI,CAAC,6BAA6B,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACtF,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,wBAAwB,CAAC;gBAClC,cAAc,EAAE,iBAAiB;aAClC,CAAA;QACH,CAAC;QAED,IAAI,CAAC,6BAA6B,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACpF,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,uBAAuB,CAAC;gBACjC,cAAc,EAAE,gBAAgB;aACjC,CAAA;QACH,CAAC;QAED,IAAI,CAAC,6BAA6B,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACtF,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,wBAAwB,CAAC;gBAClC,cAAc,EAAE,iBAAiB;aAClC,CAAA;QACH,CAAC;QAED,gKAAgK;QAChK,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,IAAA,6BAAmB,EAAC,cAAc,CAAC,CAAA;QAC7E,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC,wBAAwB,CAAC;gBAClC,cAAc,EAAE,iBAAiB;aAClC,CAAA;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAgB,EAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACvE,MAAM,kBAAkB,GAAG,IAAA,0BAAgB,EAAC,gBAAgB,EAAE,OAAO,EAAE;YACrE,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAA;QACF,MAAM,gBAAgB,GACpB,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACxF,kBAAkB,CAAA;QACpB,MAAM,aAAa,GAAG,gBAAgB,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAA;QAEhG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,oBAAoB,CAAA;YAC3F,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,cAAc;gBACd,aAAa;aACd,CAAA;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE;YAChC,OAAO,EAAE,IAAI;YACb,aAAa;SACd,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CACpC,YAAoB,EACpB,aAAqB;IAErB,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,MAAM,cAAc,GAAG,mCAAmC,CAAC,aAAa,CAAC,CAAA;IACzE,IAAI,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,OAAO,kBAAkB,CAAA;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,kCAAkC,CAAC,YAAY,CAAC,CAAA;IACtE,IAAI,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,OAAO,oBAAoB,CAAA;IAC7B,CAAC;IAED,IAAI,yBAAyB,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,yBAAyB,CAAC,YAAoB,EAAE,aAAqB;IAC5E,MAAM,aAAa,GAAG,CAAC,GAAG,YAAY,CAAC,CAAA;IACvC,MAAM,cAAc,GAAG,CAAC,GAAG,aAAa,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,KAAK,GAA4B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/C,MAAM,GAAG,GAAG,CAAC,WAAmB,EAAE,YAAoB,EAAE,EAAE,CAAC,GAAG,WAAW,IAAI,YAAY,EAAE,CAAA;IAE3F,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAA;QAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAErB,IAAI,WAAW,KAAK,aAAa,CAAC,MAAM,IAAI,YAAY,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YACnF,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QAE1D,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7C,CAAC;QAED,IAAI,4CAA4C,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;YAC5E,MAAM,iBAAiB,GAAG,2CAA2C,CACnE,aAAa,EACb,WAAW,EACX,IAAI,CACL,CAAA;YACD,MAAM,kBAAkB,GAAG,2CAA2C,CACpE,cAAc,EACd,YAAY,EACZ,KAAK,CACN,CAAA;YACD,KAAK,MAAM,eAAe,IAAI,iBAAiB,EAAE,CAAC;gBAChD,KAAK,MAAM,gBAAgB,IAAI,kBAAkB,EAAE,CAAC;oBAClD,KAAK,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,OAAiB,EAAE,KAAa;IAC/C,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,4CAA4C,CACnD,WAA0B,EAC1B,YAA2B;IAE3B,IAAI,WAAW,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,GAAG,CAAA;IACjE,MAAM,eAAe,GAAG,YAAY,KAAK,GAAG,CAAA;IAC5C,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,OAAO,WAAW,KAAK,YAAY,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,2CAA2C,CAClD,OAAiB,EACjB,KAAa,EACb,sBAA+B;IAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,CAAA;IAChB,CAAC;IACD,IAAI,KAAK,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;AACpB,CAAC"}