@agentunion/fastaun 0.5.17 → 0.5.19

package/dist/ownership-proof.js

@@ -0,0 +1,436 @@
+import { createCipheriv, createDecipheriv, createHash, pbkdf2Sync, randomBytes, X509Certificate } from 'node:crypto';
+import { canonicalJson } from './v2/crypto/canonical.js';
+import { validateAIDFormat } from './validators.js';
+import { isStrictBase64, verifySignatureWithCert, certFingerprint, certCommonName } from './cert-utils.js';
+import { ValidationError } from './errors.js';
+export const OWNERSHIP_RELATION_DOMAIN = 'AUN-AID-OWNER-RELATION-V1;';
+export const OWNERSHIP_RELEASE_DOMAIN = 'AUN-AID-OWNER-RELEASE-V1;';
+export const OWNERSHIP_MESSAGE_TYPE = 'aun.ownership.v1';
+export const CERT_ESCROW_VERSION = 1;
+export const CERT_ESCROW_ITERATIONS = 200_000;
+export const CERT_ESCROW_AAD = Buffer.from('AUN-CERT-ESCROW-V1', 'utf8');
+const PROOF_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const FINGERPRINT_RE = /^sha256:[0-9a-f]{64}$/i;
+function encryptEscrowBytes(plaintext, password) {
+    if (!plaintext.length)
+        throw new ValidationError('certificate escrow plaintext is empty');
+    const secret = String(password ?? '').trim() || randomBytes(24).toString('base64url');
+    const salt = randomBytes(16);
+    const nonce = randomBytes(12);
+    const key = pbkdf2Sync(Buffer.from(secret, 'utf8'), salt, CERT_ESCROW_ITERATIONS, 32, 'sha256');
+    const cipher = createCipheriv('aes-256-gcm', key, nonce);
+    cipher.setAAD(CERT_ESCROW_AAD);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final(), cipher.getAuthTag()]);
+    return {
+        envelope: { version: CERT_ESCROW_VERSION, alg: 'AES-256-GCM', kdf: 'PBKDF2-SHA256', iterations: CERT_ESCROW_ITERATIONS, salt: salt.toString('base64'), nonce: nonce.toString('base64'), ciphertext: ciphertext.toString('base64'), sha256: createHash('sha256').update(plaintext).digest('hex') },
+        password: secret,
+    };
+}
+function decryptEscrowBytes(envelope, password) {
+    if (!envelope || envelope.version !== CERT_ESCROW_VERSION || envelope.alg !== 'AES-256-GCM' || envelope.kdf !== 'PBKDF2-SHA256' || envelope.iterations !== CERT_ESCROW_ITERATIONS)
+        throw new ValidationError('unsupported certificate escrow envelope');
+    const salt = Buffer.from(String(envelope.salt ?? ''), 'base64');
+    const nonce = Buffer.from(String(envelope.nonce ?? ''), 'base64');
+    const ciphertext = Buffer.from(String(envelope.ciphertext ?? ''), 'base64');
+    if (salt.length !== 16 || nonce.length !== 12 || ciphertext.length <= 16)
+        throw new ValidationError('invalid certificate escrow fields');
+    const key = pbkdf2Sync(Buffer.from(String(password ?? ''), 'utf8'), salt, CERT_ESCROW_ITERATIONS, 32, 'sha256');
+    const tag = ciphertext.subarray(ciphertext.length - 16);
+    const cipher = createDecipheriv('aes-256-gcm', key, nonce);
+    cipher.setAAD(CERT_ESCROW_AAD);
+    cipher.setAuthTag(tag);
+    let plaintext;
+    try {
+        plaintext = Buffer.concat([cipher.update(ciphertext.subarray(0, -16)), cipher.final()]);
+    }
+    catch (error) {
+        throw new ValidationError(`certificate escrow decryption failed: ${String(error)}`);
+    }
+    if (createHash('sha256').update(plaintext).digest('hex') !== String(envelope.sha256 ?? '').toLowerCase())
+        throw new ValidationError('certificate escrow hash mismatch');
+    return plaintext;
+}
+export function encryptCertificate(certPem, password) {
+    return encryptEscrowBytes(Buffer.from(String(certPem ?? ''), 'utf8'), password);
+}
+export function decryptCertificate(envelope, password) {
+    return decryptEscrowBytes(envelope, password).toString('utf8');
+}
+export function encryptIdentity(identity, password) {
+    if (!identity || typeof identity !== 'object' || Array.isArray(identity))
+        throw new ValidationError('identity escrow package must be an object');
+    if (!String(identity.aid ?? '').trim() || !String(identity.private_key_pem ?? '').trim() || !String(identity.cert ?? '').trim())
+        throw new ValidationError('identity escrow package is incomplete');
+    return encryptEscrowBytes(Buffer.from(JSON.stringify(identity), 'utf8'), password);
+}
+export function decryptIdentity(envelope, password) {
+    let value;
+    try {
+        value = JSON.parse(decryptEscrowBytes(envelope, password).toString('utf8'));
+    }
+    catch (error) {
+        throw new ValidationError(`certificate escrow identity package is invalid JSON: ${String(error)}`);
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new ValidationError('certificate escrow identity package must be an object');
+    const result = value;
+    if (!String(result.aid ?? '').trim() || !String(result.private_key_pem ?? '').trim() || !String(result.cert ?? '').trim())
+        throw new ValidationError('certificate escrow identity package is incomplete');
+    return result;
+}
+export class OwnershipStatement {
+    proofId;
+    subjectAid;
+    ownerAid;
+    canonicalFact;
+    canonicalStatement;
+    signerAid;
+    role;
+    extensions;
+    version;
+    signedAt;
+    constructor(proofId, subjectAid, ownerAid, signerAid = '', role = '', extensions, version = 1, signedAt = 0) {
+        this.proofId = proofId;
+        this.subjectAid = subjectAid;
+        this.ownerAid = ownerAid;
+        this.signerAid = signerAid;
+        this.role = role;
+        this.extensions = extensions && Object.keys(extensions).length ? { ...extensions } : undefined;
+        this.version = version;
+        this.signedAt = signedAt;
+        this.canonicalFact = canonicalJson({ subject_aid: subjectAid, owner_aid: ownerAid });
+        const statement = { proof_id: proofId, subject_aid: subjectAid, owner_aid: ownerAid };
+        if (version === 2) {
+            statement.version = 2;
+            statement.signer_aid = signerAid;
+            statement.role = role;
+            if (this.extensions)
+                statement.extensions = this.extensions;
+            statement.signed_at = signedAt;
+        }
+        this.canonicalStatement = canonicalJson(statement);
+    }
+    static create(proofId, subjectAid, ownerAid) {
+        const id = String(proofId ?? '').trim();
+        if (!PROOF_ID_RE.test(id))
+            throw new ValidationError('invalid proof_id');
+        let subject;
+        let owner;
+        try {
+            subject = validateAIDFormat(subjectAid, 'subject_aid');
+            owner = validateAIDFormat(ownerAid, 'owner_aid');
+        }
+        catch (error) {
+            throw new ValidationError(String(error instanceof Error ? error.message : error));
+        }
+        return new OwnershipStatement(id, subject, owner);
+    }
+    static createSigned(proofId, subjectAid, ownerAid, options) {
+        const base = OwnershipStatement.create(proofId, subjectAid, ownerAid);
+        const signerAid = validateAIDFormat(options.signerAid, 'signer_aid');
+        const role = options.role;
+        const expected = role === 'subject' ? base.subjectAid : role === 'owner' ? base.ownerAid : '';
+        if (!expected)
+            throw new ValidationError('ownership signer role must be subject or owner');
+        if (signerAid !== expected)
+            throw new ValidationError('ownership signer does not match role');
+        if (options.extensions !== undefined && (!options.extensions || typeof options.extensions !== 'object' || Array.isArray(options.extensions))) {
+            throw new ValidationError('ownership extensions must be an object');
+        }
+        const signedAt = options.signedAt ?? Math.floor(Date.now() / 1000);
+        if (!Number.isSafeInteger(signedAt) || signedAt <= 0)
+            throw new ValidationError('signed_at must be a positive integer');
+        return new OwnershipStatement(base.proofId, base.subjectAid, base.ownerAid, signerAid, role, options.extensions, 2, signedAt);
+    }
+    static fromMapping(value) {
+        const version = Number(value.version ?? 1) || 1;
+        if (version === 2) {
+            if (!Number.isSafeInteger(value.signed_at) || Number(value.signed_at) <= 0)
+                throw new ValidationError('signed_at must be a positive integer');
+            return OwnershipStatement.createSigned(String(value.proof_id ?? ''), String(value.subject_aid ?? ''), String(value.owner_aid ?? ''), { signerAid: String(value.signer_aid ?? ''), role: String(value.role ?? ''), extensions: value.extensions, signedAt: value.signed_at });
+        }
+        return OwnershipStatement.create(String(value.proof_id ?? ''), String(value.subject_aid ?? ''), String(value.owner_aid ?? ''));
+    }
+    toMapping() {
+        const value = { proof_id: this.proofId, subject_aid: this.subjectAid, owner_aid: this.ownerAid };
+        if (this.version === 2) {
+            value.version = 2;
+            value.signer_aid = this.signerAid;
+            value.role = this.role;
+            if (this.extensions)
+                value.extensions = { ...this.extensions };
+            value.signed_at = this.signedAt;
+        }
+        return value;
+    }
+    get signingBytes() {
+        const prefix = new TextEncoder().encode(OWNERSHIP_RELATION_DOMAIN);
+        const result = new Uint8Array(prefix.length + this.canonicalStatement.length);
+        result.set(prefix);
+        result.set(this.canonicalStatement, prefix.length);
+        return result;
+    }
+}
+export function isOwnershipPayload(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value)
+        && String(value.type ?? '').trim() === OWNERSHIP_MESSAGE_TYPE;
+}
+export function ownershipMessageBody(message) {
+    if (!message || typeof message !== 'object' || Array.isArray(message))
+        return null;
+    const record = message;
+    if (record.payload && typeof record.payload === 'object' && !Array.isArray(record.payload)) {
+        return record.payload;
+    }
+    return isOwnershipPayload(record) ? record : null;
+}
+export function buildOwnershipMessage(action, options) {
+    const payload = {
+        type: OWNERSHIP_MESSAGE_TYPE,
+        action: String(action ?? '').trim(),
+        request_id: String(options.requestId ?? '').trim(),
+        proof_id: String(options.proofId ?? '').trim(),
+        subject_aid: String(options.subjectAid ?? '').trim().toLowerCase(),
+        owner_aid: String(options.ownerAid ?? '').trim().toLowerCase(),
+    };
+    for (const [key, value] of Object.entries(options)) {
+        if (!['requestId', 'proofId', 'subjectAid', 'ownerAid'].includes(key) && value !== undefined) {
+            payload[key] = value;
+        }
+    }
+    return payload;
+}
+export function validateOwnershipFrontmatter(frontmatter, expectedAid) {
+    const ownerPresent = Object.prototype.hasOwnProperty.call(frontmatter, 'owner');
+    const proofPresent = Object.prototype.hasOwnProperty.call(frontmatter, 'ownership_proof');
+    const releasePresent = Object.prototype.hasOwnProperty.call(frontmatter, 'ownership_release');
+    if (releasePresent) {
+        if (ownerPresent || proofPresent)
+            throw new ValidationError('ownership_release cannot be combined with owner or ownership_proof');
+        validateOwnershipRelease(frontmatter.ownership_release, String(frontmatter.aid ?? expectedAid ?? ''));
+        return;
+    }
+    if (proofPresent && !ownerPresent)
+        throw new ValidationError('ownership_proof requires owner');
+    const typeValue = String(frontmatter.type ?? '').trim().toLowerCase();
+    if (typeValue === 'human' && (ownerPresent || proofPresent))
+        throw new ValidationError('human AID cannot specify owner');
+    if (!ownerPresent)
+        return;
+    const aid = validateAIDFormat(frontmatter.aid, 'aid');
+    const owner = validateAIDFormat(frontmatter.owner, 'owner');
+    if (String(frontmatter.aid).trim() !== aid || String(frontmatter.owner).trim() !== owner)
+        throw new ValidationError('owner and subject AID must be lowercase');
+    if (expectedAid && aid !== expectedAid.trim().toLowerCase())
+        throw new ValidationError('ownership subject AID does not match expected AID');
+    if (!proofPresent)
+        return;
+    if (!frontmatter.ownership_proof || typeof frontmatter.ownership_proof !== 'object' || Array.isArray(frontmatter.ownership_proof))
+        throw new ValidationError('ownership_proof must be an object');
+    const raw = frontmatter.ownership_proof;
+    const allowed = new Set(['proof_id', 'subject_aid', 'owner_aid', 'subject_signature', 'owner_signature']);
+    if (Object.keys(raw).some((key) => !allowed.has(key)))
+        throw new ValidationError('ownership_proof contains unknown fields');
+    if (raw.subject_aid !== undefined && raw.subject_aid !== aid || raw.owner_aid !== undefined && raw.owner_aid !== owner)
+        throw new ValidationError('ownership_proof does not match agent.md owner');
+    if (!('proof_id' in raw) && Object.keys(raw).every((key) => ['subject_aid', 'owner_aid'].includes(key)))
+        return;
+    const statement = OwnershipStatement.create(String(raw.proof_id ?? ''), String(raw.subject_aid ?? aid), String(raw.owner_aid ?? owner));
+    if (statement.subjectAid !== aid || statement.ownerAid !== owner)
+        throw new ValidationError('ownership_proof does not match agent.md owner');
+    if ('subject_signature' in raw) {
+        const subjectSignature = raw.subject_signature;
+        if (!subjectSignature || typeof subjectSignature !== 'object' || Array.isArray(subjectSignature) || Object.keys(subjectSignature).some((key) => !['cert_fingerprint', 'signature', 'signer_aid', 'role', 'statement'].includes(key)) || !validSignature(subjectSignature))
+            throw new ValidationError('subject_signature is invalid');
+        validateNestedSignature(subjectSignature, statement, aid, 'subject', 'subject_signature');
+    }
+    if (aid === owner) {
+        if (raw.owner_signature !== undefined)
+            throw new ValidationError('self-owner proof must not contain owner_signature');
+    }
+    else if ('owner_signature' in raw) {
+        if (!raw.owner_signature || typeof raw.owner_signature !== 'object' || Array.isArray(raw.owner_signature) || !validSignature(raw.owner_signature))
+            throw new ValidationError('owner_signature is invalid');
+        if (Object.keys(raw.owner_signature).some((key) => !['cert_fingerprint', 'signature', 'signer_aid', 'role', 'statement'].includes(key)))
+            throw new ValidationError('owner_signature contains unknown fields');
+        validateNestedSignature(raw.owner_signature, statement, owner, 'owner', 'owner_signature');
+    }
+}
+export function createOwnershipReleaseStatement(proofId, subjectAid, ownerAid, signedAt = Math.floor(Date.now() / 1000)) {
+    const relation = OwnershipStatement.create(proofId, subjectAid, ownerAid);
+    if (!Number.isSafeInteger(signedAt) || signedAt <= 0)
+        throw new ValidationError('signed_at must be a positive integer');
+    return { version: 1, action: 'release', proof_id: relation.proofId, subject_aid: relation.subjectAid, owner_aid: relation.ownerAid, signer_aid: relation.ownerAid, role: 'owner', signed_at: signedAt };
+}
+function parseOwnershipReleaseStatement(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new ValidationError('ownership_release statement is invalid');
+    const raw = value;
+    const allowed = new Set(['version', 'action', 'proof_id', 'subject_aid', 'owner_aid', 'signer_aid', 'role', 'signed_at']);
+    if (Object.keys(raw).some((key) => !allowed.has(key)))
+        throw new ValidationError('ownership_release statement contains unknown fields');
+    const statement = createOwnershipReleaseStatement(String(raw.proof_id ?? ''), String(raw.subject_aid ?? ''), String(raw.owner_aid ?? ''), Number(raw.signed_at));
+    if (raw.version !== 1 || raw.action !== 'release' || String(raw.signer_aid ?? '').trim().toLowerCase() !== statement.owner_aid || raw.role !== 'owner')
+        throw new ValidationError('ownership_release statement is invalid');
+    return statement;
+}
+function ownershipReleaseBytes(statement) {
+    const prefix = new TextEncoder().encode(OWNERSHIP_RELEASE_DOMAIN);
+    const canonical = canonicalJson(statement);
+    const result = new Uint8Array(prefix.length + canonical.length);
+    result.set(prefix);
+    result.set(canonical, prefix.length);
+    return result;
+}
+function validateOwnershipRelease(value, expectedSubject) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new ValidationError('ownership_release must be an object');
+    const release = value;
+    if (Object.keys(release).some((key) => !['cert_fingerprint', 'signature', 'signer_aid', 'role', 'statement'].includes(key)))
+        throw new ValidationError('ownership_release contains unknown fields');
+    const signature = release;
+    if (!validSignature(signature) || !signature.statement)
+        throw new ValidationError('ownership_release signature is invalid');
+    const statement = parseOwnershipReleaseStatement(signature.statement);
+    if (expectedSubject && statement.subject_aid !== expectedSubject.trim().toLowerCase())
+        throw new ValidationError('ownership_release subject does not match agent.md AID');
+    if (signature.signer_aid && signature.signer_aid.trim().toLowerCase() !== statement.owner_aid)
+        throw new ValidationError('ownership_release signer does not match owner');
+    if (signature.role && signature.role !== 'owner')
+        throw new ValidationError('ownership_release role must be owner');
+    signature.statement = statement;
+    return signature;
+}
+export function signOwnershipRelease(aid, statement) {
+    const signed = aid.sign(Buffer.from(ownershipReleaseBytes(statement)));
+    if (!signed.ok || !signed.data)
+        throw new ValidationError(signed.error?.message ?? 'ownership release signature failed');
+    if (!FINGERPRINT_RE.test(aid.certFingerprint))
+        throw new ValidationError('certificate fingerprint is unavailable');
+    return { cert_fingerprint: aid.certFingerprint, signature: signed.data.signature, signer_aid: statement.owner_aid, role: 'owner', statement };
+}
+export function verifyOwnershipRelease(certPem, value) {
+    try {
+        const release = validateOwnershipRelease(value, '');
+        const statement = release.statement;
+        return certFingerprint(certPem).toLowerCase() === release.cert_fingerprint.toLowerCase()
+            && certCommonName(certPem).toLowerCase() === statement.owner_aid
+            && verifySignatureWithCert(certPem, Buffer.from(release.signature, 'base64'), Buffer.from(ownershipReleaseBytes(statement)));
+    }
+    catch {
+        return false;
+    }
+}
+export function validateOwnershipProof(proof, expectedSubject, expectedOwner) {
+    let subject;
+    let owner;
+    try {
+        subject = validateAIDFormat(expectedSubject, 'subject_aid');
+        owner = validateAIDFormat(expectedOwner, 'owner_aid');
+    }
+    catch (error) {
+        throw new ValidationError(String(error instanceof Error ? error.message : error));
+    }
+    if (proof.statement.subjectAid !== subject || proof.statement.ownerAid !== owner)
+        throw new ValidationError('ownership proof statement does not match owner or subject');
+    if (!validSignature(proof.subject_signature))
+        throw new ValidationError('subject_signature is invalid');
+    validateNestedSignature(proof.subject_signature, proof.statement, subject, 'subject', 'subject_signature');
+    if (subject === owner) {
+        if (proof.owner_signature)
+            throw new ValidationError('self-owner proof must not contain owner_signature');
+    }
+    else if (!proof.owner_signature || !validSignature(proof.owner_signature)) {
+        throw new ValidationError('owner_signature is required');
+    }
+    else {
+        validateNestedSignature(proof.owner_signature, proof.statement, owner, 'owner', 'owner_signature');
+    }
+}
+function validateNestedSignature(signature, relation, expectedSigner, expectedRole, name) {
+    if (signature.statement === undefined)
+        return;
+    if (!signature.statement || typeof signature.statement !== 'object' || Array.isArray(signature.statement))
+        throw new ValidationError(`${name} statement is invalid`);
+    const statement = OwnershipStatement.fromMapping(signature.statement);
+    if (statement.version !== 2 || statement.proofId !== relation.proofId || statement.subjectAid !== relation.subjectAid || statement.ownerAid !== relation.ownerAid)
+        throw new ValidationError(`${name} statement does not match ownership relation`);
+    if (statement.signerAid !== expectedSigner || statement.role !== expectedRole)
+        throw new ValidationError(`${name} statement signer does not match role`);
+    if (signature.signer_aid && signature.signer_aid !== statement.signerAid)
+        throw new ValidationError(`${name} signer_aid mismatch`);
+    if (signature.role && signature.role !== statement.role)
+        throw new ValidationError(`${name} role mismatch`);
+}
+function validSignature(signature) {
+    return !!signature && FINGERPRINT_RE.test(String(signature?.cert_fingerprint ?? '').trim()) && isStrictBase64(String(signature?.signature ?? ''));
+}
+export function signOwnershipStatement(aid, statement) {
+    const result = aid.sign(Buffer.from(statement.signingBytes));
+    if (!result.ok || !result.data)
+        throw new ValidationError(result.error?.message ?? 'ownership signature failed');
+    if (!FINGERPRINT_RE.test(aid.certFingerprint))
+        throw new ValidationError('certificate fingerprint is unavailable');
+    return {
+        cert_fingerprint: aid.certFingerprint,
+        signature: result.data.signature,
+        ...(statement.version === 2 ? { signer_aid: statement.signerAid, role: statement.role, statement: statement.toMapping() } : {}),
+    };
+}
+export function verifyOwnershipSignature(certPem, statement, signature) {
+    if (!validSignature(signature))
+        return false;
+    try {
+        const signedStatement = signature.statement ? OwnershipStatement.fromMapping(signature.statement) : statement;
+        if (signedStatement.version !== 2 || signedStatement.proofId !== statement.proofId || signedStatement.subjectAid !== statement.subjectAid || signedStatement.ownerAid !== statement.ownerAid)
+            return false;
+        if (signature.signer_aid && signature.signer_aid !== signedStatement.signerAid || signature.role && signature.role !== signedStatement.role)
+            return false;
+        if (certFingerprint(certPem).toLowerCase() !== signature.cert_fingerprint.toLowerCase() || certCommonName(certPem).toLowerCase() !== signedStatement.signerAid)
+            return false;
+        const cert = new X509Certificate(certPem);
+        const signedAt = signedStatement.signedAt * 1000;
+        if (signedAt < new Date(cert.validFrom).getTime() || signedAt > new Date(cert.validTo).getTime())
+            return false;
+        return verifySignatureWithCert(certPem, Buffer.from(signature.signature, 'base64'), Buffer.from(signedStatement.signingBytes));
+    }
+    catch {
+        return false;
+    }
+}
+export function verifyOwnershipProof(proof, subjectCertPem, ownerCertPem) {
+    validateOwnershipProof(proof, proof.statement.subjectAid, proof.statement.ownerAid);
+    if (certCommonName(subjectCertPem).toLowerCase() !== proof.statement.subjectAid.toLowerCase() || !verifyOwnershipSignature(subjectCertPem, proof.statement, proof.subject_signature))
+        return false;
+    return proof.statement.subjectAid === proof.statement.ownerAid
+        || (!!ownerCertPem && !!proof.owner_signature && certCommonName(ownerCertPem).toLowerCase() === proof.statement.ownerAid.toLowerCase() && verifyOwnershipSignature(ownerCertPem, proof.statement, proof.owner_signature));
+}
+export function verifyOwnershipFrontmatterStatus(frontmatter, subjectCertPem, ownerCertPem) {
+    try {
+        validateOwnershipFrontmatter(frontmatter);
+        if (!Object.prototype.hasOwnProperty.call(frontmatter, 'owner')) {
+            if (frontmatter.ownership_release !== undefined)
+                return ownerCertPem && verifyOwnershipRelease(ownerCertPem, frontmatter.ownership_release) ? 'released' : 'invalid';
+            return 'unbound';
+        }
+        const raw = (frontmatter.ownership_proof ?? {});
+        const subjectSignature = raw.subject_signature;
+        const ownerSignature = raw.owner_signature;
+        if (!subjectSignature && !ownerSignature)
+            return 'incomplete';
+        const statement = OwnershipStatement.create(String(raw.proof_id ?? ''), String(raw.subject_aid ?? frontmatter.aid), String(raw.owner_aid ?? frontmatter.owner));
+        if (subjectSignature && (!subjectCertPem || !verifyOwnershipSignature(subjectCertPem, statement, subjectSignature)))
+            return 'invalid';
+        if (ownerSignature && (!ownerCertPem || !verifyOwnershipSignature(ownerCertPem, statement, ownerSignature)))
+            return 'invalid';
+        return subjectSignature && (statement.subjectAid === statement.ownerAid || ownerSignature) ? 'complete' : 'incomplete';
+    }
+    catch {
+        return 'invalid';
+    }
+}
+export function verifyOwnershipFrontmatter(frontmatter, subjectCertPem, ownerCertPem) {
+    const status = verifyOwnershipFrontmatterStatus(frontmatter, subjectCertPem, ownerCertPem);
+    return status === 'unbound' || status === 'complete' || status === 'released';
+}
+//# sourceMappingURL=ownership-proof.js.map

package/dist/ownership-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership-proof.js","sourceRoot":"","sources":["../src/ownership-proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrH,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAa,uBAAuB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AACzE,MAAM,WAAW,GAAG,uEAAuE,CAAC;AAC5F,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAYhD,SAAS,kBAAkB,CAAC,SAAiB,EAAE,QAAiB;IAC9D,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,uCAAuC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAClG,OAAO;QACL,QAAQ,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACjS,QAAQ,EAAE,MAAM;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAmC,EAAE,QAAgB;IAC/E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,mBAAmB,IAAI,QAAQ,CAAC,GAAG,KAAK,aAAa,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,IAAI,QAAQ,CAAC,UAAU,KAAK,sBAAsB;QAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IACxP,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IACzI,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChH,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACvM,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;IACxK,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,QAAiB;IACnE,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAmC,EAAE,QAAgB;IACtF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAiC,EAAE,QAAiB;IAClF,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACjJ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,uCAAuC,CAAC,CAAC;IACpM,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAmC,EAAE,QAAgB;IACnF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,wDAAwD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC1M,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAC;IACpJ,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IAC1M,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,kBAAkB;IACpB,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,QAAQ,CAAS;IACjB,aAAa,CAAa;IAC1B,kBAAkB,CAAa;IAC/B,SAAS,CAAS;IAClB,IAAI,CAA2B;IAC/B,UAAU,CAAsC;IAChD,OAAO,CAAS;IAChB,QAAQ,CAAS;IAE1B,YACE,OAAe,EACf,UAAkB,EAClB,QAAgB,EAChB,SAAS,GAAG,EAAE,EACd,OAAiC,EAAE,EACnC,UAAoC,EACpC,OAAO,GAAG,CAAC,EACX,QAAQ,GAAG,CAAC;QAEZ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrF,MAAM,SAAS,GAA4B,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC/G,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC;YACtB,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC;YACjC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;YACtB,IAAI,IAAI,CAAC,UAAU;gBAAE,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5D,SAAS,CAAC,SAAS,GAAG,QAAQ,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,OAAe,EAAE,UAAkB,EAAE,QAAgB;QACjE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;QACzE,IAAI,OAAe,CAAC;QACpB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACvD,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,OAAe,EACf,UAAkB,EAClB,QAAgB,EAChB,OAAkH;QAElH,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;QAC3F,IAAI,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC7I,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;QACxH,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChI,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,KAA8B;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;YAC9I,OAAO,kBAAkB,CAAC,YAAY,CACpC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAC5F,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAwB,EAAE,UAAU,EAAE,KAAK,CAAC,UAAiD,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAmB,EAAE,CAC/M,CAAC;QACJ,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IACjI,CAAC;IAED,SAAS;QACP,MAAM,KAAK,GAA4B,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1H,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;YAClB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAClC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,IAAI,CAAC,UAAU;gBAAE,KAAK,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/D,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,YAAY;QACd,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAWD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC/D,MAAM,CAAE,KAAiC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,sBAAsB,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3F,OAAO,MAAM,CAAC,OAAkC,CAAC;IACnD,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,OAMC;IAED,MAAM,OAAO,GAAe;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAClD,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC9C,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAClE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;KAC/D,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,GAAG,KAAkB,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,WAAoC,EAAE,WAAoB;IACrG,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC9F,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,YAAY,IAAI,YAAY;YAAE,MAAM,IAAI,eAAe,CAAC,oEAAoE,CAAC,CAAC;QAClI,wBAAwB,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IACD,IAAI,YAAY,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;IACzH,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IAC/J,IAAI,WAAW,IAAI,GAAG,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IAC5I,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,IAAI,CAAC,WAAW,CAAC,eAAe,IAAI,OAAO,WAAW,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IAClM,MAAM,GAAG,GAAG,WAAW,CAAC,eAA0C,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC1G,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IAC5H,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IACnM,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO;IAChH,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC;IACxI,IAAI,SAAS,CAAC,UAAU,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IAC7I,IAAI,mBAAmB,IAAI,GAAG,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,GAAG,CAAC,iBAAuC,CAAC;QACrE,IAAI,CAAC,gBAAgB,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;QACrU,uBAAuB,CAAC,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IACxH,CAAC;SAAM,IAAI,iBAAiB,IAAI,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,eAAqC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC;QACjO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;QACxN,uBAAuB,CAAC,GAAG,CAAC,eAAqC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAe,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7I,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;IACxH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC1M,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACrI,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1H,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,qDAAqD,CAAC,CAAC;IACxI,MAAM,SAAS,GAAG,+BAA+B,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACjK,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IAC5N,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAoC;IACjE,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,eAAuB;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;IAClI,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACpM,MAAM,SAAS,GAAG,OAAsC,CAAC;IACzD,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IAC5H,MAAM,SAAS,GAAG,8BAA8B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,eAAe,IAAI,SAAS,CAAC,WAAW,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAC;IAC1K,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IAC1K,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;IACpH,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAA4I,EAAE,SAAoC;IACrN,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,oCAAoC,CAAC,CAAC;IACzH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACnH,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAc;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE;eACnF,cAAc,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,SAAS;eAC7D,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjI,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB,EAAE,eAAuB,EAAE,aAAqB;IAC1G,IAAI,OAAe,CAAC;IACpB,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,GAAG,iBAAiB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC5D,KAAK,GAAG,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,2DAA2D,CAAC,CAAC;IACzK,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;IACxG,uBAAuB,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3G,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,eAAe;YAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IAC5G,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAA6B,EAAE,QAA4B,EAAE,cAAsB,EAAE,YAAiC,EAAE,IAAY;IACnK,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO;IAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IACrK,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,8CAA8C,CAAC,CAAC;IACpP,IAAI,SAAS,CAAC,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IACzJ,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACnI,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,cAAc,CAAC,SAA6B;IACnD,OAAO,CAAC,CAAC,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AACpJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA4I,EAAE,SAA6B;IAChN,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,4BAA4B,CAAC,CAAC;IACjH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACnH,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,eAAe;QACrC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,IAA2B,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,SAA6B,EAAE,SAA6B;IACpH,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,IAAI,eAAe,CAAC,OAAO,KAAK,CAAC,IAAI,eAAe,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,eAAe,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,IAAI,eAAe,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3M,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,KAAK,eAAe,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1J,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7K,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,GAAG,IAAI,CAAC;QACjD,IAAI,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/G,OAAO,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IACjI,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAqB,EAAE,cAAsB,EAAE,YAAqB;IACvG,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpF,IAAI,cAAc,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,KAAK,CAAC;IACnM,OAAO,KAAK,CAAC,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS,CAAC,QAAQ;WACzD,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,eAAe,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,wBAAwB,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;AAC9N,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,WAAoC,EAAE,cAAuB,EAAE,YAAqB;IACnI,IAAI,CAAC;QACH,4BAA4B,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;YAChE,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS;gBAAE,OAAO,YAAY,IAAI,sBAAsB,CAAC,YAAY,EAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACrK,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;QAC3E,MAAM,gBAAgB,GAAG,GAAG,CAAC,iBAAmD,CAAC;QACjF,MAAM,cAAc,GAAG,GAAG,CAAC,eAAiD,CAAC;QAC7E,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc;YAAE,OAAO,YAAY,CAAC;QAC9D,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAChK,IAAI,gBAAgB,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACtI,IAAI,cAAc,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9H,OAAO,gBAAgB,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IACzH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAoC,EAAE,cAAsB,EAAE,YAAqB;IAC5H,MAAM,MAAM,GAAG,gCAAgC,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;IAC3F,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,CAAC;AAChF,CAAC"}