@alchemy.run/kubernetes 0.0.0 → 2.0.0-beta.84

package/lib/Deployment.js

@@ -0,0 +1,533 @@
+import { isResolved } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import { Platform } from "alchemy/Platform";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import { createHostRuntimeContext, } from "alchemy/Runtime/Process";
+import { Stack } from "alchemy/Stack";
+import { createInternalTags } from "alchemy/Tags";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { connectCluster, deleteObjects, ifClusterExists, readObject, reconcileObjects, } from "./Client.js";
+import { findClusterAdapter, } from "./ClusterAdapter.js";
+import { toConnection } from "./Connection.js";
+import { makeConnectionRegistry } from "./internal/registry.js";
+import { collectBindingEnv, containerEnvValue, connectionIdentity, connectionOfOutput, deepMerge, imagePlatformOf, makeServerBootstrap, resolveWorkloadImage, tryConnectionOf, workloadImageHash, } from "./internal/workload.js";
+import { toKubernetesObjectRef, } from "./Objects.js";
+export const isDeployment = (value) => typeof value === "object" &&
+    value !== null &&
+    "Type" in value &&
+    value.Type === "Kubernetes.Deployment";
+/**
+ * A replicated Kubernetes server on any cluster, running a container image
+ * or an HTTP server written in Effect.
+ *
+ * `Deployment` provisions a Kubernetes `Deployment` + `Service` (+
+ * `ServiceAccount`) via server-side apply, with the container image from
+ * exactly one of three sources flat on props: `main` (bundle an inline
+ * Effect program), `context` (build your own Dockerfile), or `image` (a
+ * pre-built registry reference). `main` and `context` images are built on
+ * the deploying machine and pushed to the connection's registry
+ * (`Kubernetes.LocalCluster` includes one; EKS uses ECR; GKE uses
+ * Artifact Registry). Bindings attach environment variables on any
+ * cluster; cloud credential grants need a platform with workload identity.
+ * On `AWS.EKS.Cluster` targets it accepts the `{ env, policyStatements }`
+ * contract of `AWS.Lambda.Function`: IAM policy statements go to a
+ * generated pod-identity role. On `GCP.Container.Cluster` targets it
+ * accepts the `{ env, iam }` contract of `GCP.Run.Service`: IAM roles are
+ * granted to the Kubernetes ServiceAccount's Workload Identity Federation
+ * principal.
+ * ### Creating a Deployment
+ * **Example:** Run an image on a local cluster
+ * ```typescript
+ * const cluster = yield* Kubernetes.LocalCluster("Cluster", {
+ *   name: "alchemy",
+ * });
+ *
+ * const web = yield* Kubernetes.Deployment("Web", {
+ *   cluster,
+ *   image: "ghcr.io/stefanprodan/podinfo:6.15.0",
+ *   replicas: 2,
+ *   port: 9898,
+ *   serviceType: "ClusterIP",
+ * });
+ * web.serviceName; // K8s-native attrs
+ * ```
+ *
+ * **Example:** Any cluster via kubeconfig
+ * ```typescript
+ * const cluster = Kubernetes.KubeConfig({ context: "prod-east" });
+ *
+ * const nginx = yield* Kubernetes.Deployment("Nginx", {
+ *   cluster,
+ *   image: "nginx:1.27",
+ *   replicas: 3,
+ *   port: 80,
+ *   serviceType: "LoadBalancer",
+ * });
+ * nginx.url; // the load balancer's address
+ * ```
+ *
+ * **Example:** Build your own Dockerfile
+ * ```typescript
+ * const legacy = yield* Kubernetes.Deployment("LegacyApp", {
+ *   cluster,
+ *   context: "./legacy",
+ *   replicas: 2,
+ *   port: 8080,
+ * });
+ * ```
+ *
+ * ### Effect Servers
+ * **Example:** Inline Effect server
+ * ```typescript
+ * const api = yield* Kubernetes.Deployment(
+ *   "Api",
+ *   { cluster, main: import.meta.url, port: 3000, replicas: 2 },
+ *   Effect.gen(function* () {
+ *     return {
+ *       fetch: Effect.succeed(HttpServerResponse.text("ok")),
+ *     };
+ *   }),
+ * );
+ * ```
+ *
+ * **Example:** Push to your own registry
+ * ```typescript
+ * const cluster = Kubernetes.KubeConfig({
+ *   context: "prod-east",
+ *   registry: { server: "ghcr.io/acme" },
+ * });
+ *
+ * const api = yield* Kubernetes.Deployment(
+ *   "Api",
+ *   { cluster, main: import.meta.url, port: 3000 },
+ *   Effect.gen(function* () {
+ *     return {
+ *       fetch: Effect.succeed(HttpServerResponse.text("ok")),
+ *     };
+ *   }),
+ * );
+ * ```
+ *
+ * **Example:** DynamoDB binding on EKS
+ * ```typescript
+ * const cluster = yield* AWS.EKS.Cluster("Cluster", { compute: "auto" });
+ *
+ * const api = yield* Kubernetes.Deployment(
+ *   "Api",
+ *   { cluster, main: import.meta.url, port: 3000 },
+ *   Effect.gen(function* () {
+ *     const putItem = yield* AWS.DynamoDB.PutItem(table);
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         yield* putItem({ Item: { id: { S: "1" } } });
+ *         return HttpServerResponse.text("ok");
+ *       }),
+ *     };
+ *   }).pipe(Effect.provide(AWS.DynamoDB.PutItemHttp)),
+ * );
+ * ```
+ *
+ * **Example:** Tagged Effect server
+ * ```typescript
+ * export class Api extends Kubernetes.Deployment<Api, {
+ *   health: () => Effect.Effect<string>;
+ * }>()("Api") {}
+ *
+ * export default Api.make(
+ *   { cluster, main: import.meta.url, port: 3000 },
+ *   Effect.gen(function* () {
+ *     return {
+ *       fetch: Effect.gen(function* () {
+ *         return HttpServerResponse.text("ok");
+ *       }),
+ *       health: () => Effect.succeed("ok"),
+ *     };
+ *   }),
+ * );
+ * ```
+ *
+ * ### Bundling & Tree-shaking
+ * `main` is bundled with rolldown at deploy time. Unused code is
+ * tree-shaken. `effect`, alchemy, and `@distilled.cloud` are marked
+ * pure so unused parts prune more aggressively. Your app is not
+ * marked pure.
+ *
+ * **Example:** Mark additional packages as pure
+ * Only list packages with no top-level side effects.
+ * ```typescript
+ * {
+ *   main: import.meta.url,
+ *   build: {
+ *     pure: { packages: ["my-lib", "@my-scope/*"] },
+ *   },
+ * }
+ * ```
+ *
+ * **Example:** Turn it off
+ * ```typescript
+ * {
+ *   main: import.meta.url,
+ *   build: { pure: false },
+ * }
+ * ```
+ *
+ * ### Kubernetes Escape Hatch
+ * **Example:** Tune the synthesized pod template
+ * ```typescript
+ * const tuned = yield* Kubernetes.Deployment("Api", {
+ *   cluster,
+ *   main: import.meta.url,
+ *   port: 3000,
+ *   podTemplate: {
+ *     spec: {
+ *       tolerations: [{ key: "gpu", operator: "Exists" }],
+ *       nodeSelector: { pool: "arm" },
+ *     },
+ *   },
+ * });
+ * ```
+ *
+ * @resource
+ * @product Workloads
+ */
+export const Deployment = Platform("Kubernetes.Deployment", {
+    aliases: ["AWS.EKS.Deployment"],
+    // `{ cluster: Cluster }` at module scope is an Effect. Yield it here so the
+    // cluster is registered and `news.cluster` is resolved at reconcile (same
+    // as `yield* Cluster` inside Effect.gen).
+    transformProps: (_id, props) => Effect.gen(function* () {
+        if (globalThis.__ALCHEMY_RUNTIME__)
+            return props;
+        const cluster = Effect.isEffect(props.cluster)
+            ? yield* props.cluster
+            : props.cluster;
+        return { ...props, cluster };
+    }),
+    createRuntimeContext: createHostRuntimeContext("Kubernetes.Deployment"),
+});
+/**
+ * `cluster` as the provider sees it. `transformProps` yields an Effect-valued
+ * `cluster` before any lifecycle operation runs, so only the resolved shape
+ * reaches the provider.
+ */
+const clusterOf = (cluster) => cluster;
+class ServiceNotReady extends Data.TaggedError("Kubernetes.ServiceNotReady") {
+}
+// Bounded ~3 min wait for the cloud load balancer to publish its hostname
+// (an EKS Auto Mode NLB typically appears within 2–3 min of the Service
+// apply).
+const loadBalancerRetrySchedule = Schedule.max([Schedule.spaced("5 seconds"), Schedule.recurs(36)]);
+/**
+ * Explicitly-typed pipeable retry for the LB-hostname wait. An inline
+ * `Effect.retry` in the provider leaks `Retry.Return`'s conditional into
+ * declaration emit and widens the provider layer to `unknown` R.
+ */
+const retryUntilServiceReady = (self) => Effect.retry(self, {
+    while: (error) => error instanceof ServiceNotReady,
+    schedule: loadBalancerRetrySchedule,
+});
+class ServiceStillExists extends Data.TaggedError("Kubernetes.ServiceStillExists") {
+}
+/**
+ * Bounded (~3 min) wait for a deleted Service to disappear, i.e. for the
+ * cloud controller to tear down its load balancer and drop the finalizer.
+ */
+const waitForServiceGone = (transport, service) => Effect.retry(readObject({ transport, object: service }).pipe(Effect.flatMap(() => Effect.fail(new ServiceStillExists())), Effect.catchTag("KubernetesNotFound", () => Effect.void)), { while: (error) => error instanceof ServiceStillExists, schedule: loadBalancerRetrySchedule });
+export const DeploymentProvider = () => Provider.effect(Deployment, Effect.gen(function* () {
+    const stack = yield* Stack;
+    const connectionRegistry = yield* makeConnectionRegistry;
+    const alchemyEnv = {
+        ALCHEMY_STACK_NAME: stack.name,
+        ALCHEMY_STAGE: stack.stage,
+        ALCHEMY_PHASE: "runtime",
+    };
+    // The base name doubles as the `app.kubernetes.io/name` label value
+    // (and the Service name), both capped at 63 characters.
+    const toBaseName = (id, props = {}) => props.name
+        ? Effect.succeed(props.name)
+        : createPhysicalName({ id, maxLength: 63, lowercase: true }).pipe(Effect.map((name) => name.replaceAll(/[^a-z0-9-]/g, "-")));
+    // Read a LoadBalancer Service's assigned hostname (bounded wait).
+    const waitForLoadBalancer = (transport, service) => readObject({ transport, object: service }).pipe(Effect.map((response) => {
+        const ingress = response?.status?.loadBalancer?.ingress?.[0];
+        return ingress?.hostname ?? ingress?.ip;
+    }), Effect.flatMap((hostname) => hostname ? Effect.succeed(hostname) : Effect.fail(new ServiceNotReady())), retryUntilServiceReady, Effect.catchTag("Kubernetes.ServiceNotReady", () => Effect.succeed(undefined)));
+    return {
+        stables: [
+            "connection",
+            "namespace",
+            "serviceAccountName",
+            "deploymentName",
+            "serviceName",
+            "identity",
+            "registry",
+        ],
+        // A Deployment's identity spans in-cluster Kubernetes objects plus
+        // adapter-owned cloud resources (identity role, image repository).
+        // There is no single enumeration that faithfully reconstructs that
+        // composite, so enumeration is intentionally empty — `read` (below)
+        // refreshes a known instance from its persisted output.
+        list: () => Effect.succeed([]),
+        diff: Effect.fn(function* ({ olds = {}, news: input, output }) {
+            // `exports` carries the program's runtime Effects (never plain
+            // data); everything else must be resolved to diff.
+            const { exports: _exports, ...declared } = input;
+            if (!isResolved(declared))
+                return;
+            const news = input;
+            const oldCluster = connectionIdentity(tryConnectionOf(clusterOf(olds.cluster)));
+            const newCluster = connectionIdentity(tryConnectionOf(clusterOf(news.cluster)));
+            // Workload identity keys on (cluster, namespace, serviceAccount);
+            // a change to either forces a replacement. Only compare when the
+            // old value is present so a first create (empty `olds`) doesn't
+            // spuriously replace.
+            if (oldCluster !== undefined && newCluster !== undefined && oldCluster !== newCluster) {
+                return { action: "replace" };
+            }
+            if (oldCluster !== undefined &&
+                (olds.namespace ?? "default") !== (news.namespace ?? "default")) {
+                return { action: "replace" };
+            }
+            // Content drift: the props don't change when files under a build
+            // context (or the bundled program) do, so surface hash drift as
+            // an update.
+            const connection = tryConnectionOf(clusterOf(news.cluster));
+            if (output && connection) {
+                const adapter = yield* findClusterAdapter(connection.auth.kind);
+                const source = news;
+                const hash = yield* workloadImageHash({
+                    adapter,
+                    connection,
+                    connectionRegistry,
+                    source,
+                    platform: imagePlatformOf(news.architecture, connection),
+                    port: news.port ?? 3000,
+                    isExternal: news.isExternal,
+                    bootstrap: (adapter.bootstrap?.server ?? makeServerBootstrap)(source.handler ?? "default"),
+                });
+                if (hash !== undefined && hash !== output.code.hash) {
+                    return { action: "update" };
+                }
+            }
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (!output)
+                return undefined;
+            const connection = connectionOfOutput(output);
+            if (!connection)
+                return undefined;
+            const transport = yield* connectCluster(connection);
+            // The ServiceAccount is the stable first object of the workload
+            // (one-shot Job objects are content-addressed and may have been
+            // TTL-collected, so they are not an existence signal).
+            const anchor = (output.kubernetesObjects ?? [])[0];
+            if (!anchor)
+                return output;
+            const observed = yield* readObject({ transport, object: anchor }).pipe(Effect.catchTag("KubernetesNotFound", () => Effect.succeed(undefined)));
+            if (observed === undefined)
+                return undefined;
+            return output;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, bindings, output, session }) {
+            const connection = toConnection(clusterOf(news.cluster));
+            const adapter = yield* findClusterAdapter(connection.auth.kind);
+            const transport = yield* adapter.connect(connection);
+            const namespace = news.namespace ?? "default";
+            const port = news.port ?? 3000;
+            const serviceType = news.serviceType ?? "LoadBalancer";
+            const baseName = output?.deploymentName ?? (yield* toBaseName(id, news));
+            const serviceAccountName = output?.serviceAccountName ?? baseName;
+            const tags = { ...(yield* createInternalTags(id)), ...news.tags };
+            // Environment from bindings is collected generically; cloud
+            // credential grants (any non-env binding channel) require the
+            // cluster platform's identity adapter.
+            const { env: bindingEnv, grantKeys } = collectBindingEnv(bindings);
+            if (grantKeys.length > 0 && adapter.identity === undefined) {
+                return yield* Effect.die(new Error(`'${id}': bindings carry cloud credential grants ` +
+                    `(${grantKeys.join(", ")}) but this cluster's platform ` +
+                    "has no workload-identity adapter. Target a managed " +
+                    "cluster (e.g. AWS.EKS.Cluster) or bind through " +
+                    "environment variables instead."));
+            }
+            const identity = adapter.identity
+                ? yield* adapter.identity.reconcile({
+                    id,
+                    connection,
+                    namespace,
+                    serviceAccount: serviceAccountName,
+                    bindings,
+                    options: news.identity,
+                    state: output?.identity ??
+                        output,
+                    tags,
+                })
+                : undefined;
+            // Resolve the container image from whichever source the props
+            // declare (`main` | `context` | `image`) through the platform's
+            // registry adapter (pre-built `image` refs pass through verbatim
+            // on registry-less clusters).
+            const source = news;
+            const resolved = yield* resolveWorkloadImage({
+                adapter,
+                connection,
+                connectionRegistry,
+                id,
+                source,
+                platform: imagePlatformOf(news.architecture, connection),
+                port,
+                isExternal: news.isExternal,
+                bootstrap: (adapter.bootstrap?.server ?? makeServerBootstrap)(source.handler ?? "default"),
+                tags,
+                state: output?.registry ??
+                    output,
+                session,
+            });
+            // Synthesize the Kubernetes objects. Container env merges binding
+            // env (Output-referenced resource attributes flow via the
+            // RuntimeContext into `news.env`), adapter env (e.g. AWS_REGION on
+            // EKS), alchemy env, and user env. The generated name label is
+            // always present so the Service selector stays workload-unique
+            // even when user labels are set.
+            const labels = { "app.kubernetes.io/name": baseName, ...news.labels };
+            const containerEnv = {
+                ...bindingEnv,
+                ...identity?.env,
+                ...alchemyEnv,
+                PORT: String(port),
+                ...news.env,
+            };
+            const serviceAccountObject = {
+                apiVersion: "v1",
+                kind: "ServiceAccount",
+                metadata: {
+                    name: serviceAccountName,
+                    namespace,
+                    labels,
+                    ...(identity?.serviceAccountAnnotations
+                        ? { annotations: identity.serviceAccountAnnotations }
+                        : {}),
+                },
+            };
+            const podTemplate = deepMerge({
+                metadata: { labels },
+                spec: {
+                    serviceAccountName,
+                    containers: [
+                        {
+                            name: baseName,
+                            image: resolved.imageUri,
+                            command: news.command,
+                            args: news.args,
+                            ports: [{ containerPort: port }],
+                            env: Object.entries(containerEnv).map(([name, value]) => ({
+                                name,
+                                value: containerEnvValue(value),
+                            })),
+                            resources: news.resources,
+                        },
+                    ],
+                },
+            }, news.podTemplate);
+            const deploymentObject = {
+                apiVersion: "apps/v1",
+                kind: "Deployment",
+                metadata: { name: baseName, namespace, labels },
+                spec: {
+                    replicas: news.replicas ?? 1,
+                    selector: { matchLabels: labels },
+                    template: podTemplate,
+                },
+            };
+            // `LoadBalancer` Services need platform defaults on some managed
+            // clouds (EKS Auto Mode only reconciles Services carrying its
+            // `loadBalancerClass`, and defaults new NLBs to the internal
+            // scheme) — ask the adapter. User `serviceAnnotations` always win.
+            let loadBalancerClass;
+            let serviceAnnotations = news.serviceAnnotations;
+            if (serviceType === "LoadBalancer") {
+                const defaults = adapter.loadBalancerDefaults
+                    ? yield* adapter.loadBalancerDefaults({ connection })
+                    : undefined;
+                loadBalancerClass = defaults?.loadBalancerClass;
+                serviceAnnotations = { ...defaults?.annotations, ...news.serviceAnnotations };
+            }
+            const serviceObject = {
+                apiVersion: "v1",
+                kind: "Service",
+                metadata: { name: baseName, namespace, labels, annotations: serviceAnnotations },
+                spec: {
+                    type: serviceType,
+                    ...(loadBalancerClass !== undefined ? { loadBalancerClass } : {}),
+                    selector: labels,
+                    ports: [{ port, targetPort: port, protocol: "TCP" }],
+                },
+            };
+            const desiredObjects = [serviceAccountObject, deploymentObject, serviceObject];
+            const kubernetesObjects = yield* reconcileObjects({
+                transport,
+                previousObjects: output?.kubernetesObjects ?? [],
+                desiredObjects,
+            });
+            yield* session.note(`Applied Kubernetes Deployment ${namespace}/${baseName}`);
+            // Resolve the LoadBalancer URL if applicable. The cloud listener
+            // is the Service `port` (Kubernetes maps `spec.ports[].port` 1:1
+            // to it), so the URL carries the port unless it's 80 — mirroring
+            // `AWS.ECS.Service`'s url semantics.
+            const hostname = serviceType === "LoadBalancer"
+                ? yield* waitForLoadBalancer(transport, toKubernetesObjectRef(serviceObject))
+                : undefined;
+            const url = hostname === undefined
+                ? undefined
+                : port === 80
+                    ? `http://${hostname}`
+                    : `http://${hostname}:${port}`;
+            return {
+                connection,
+                namespace,
+                deploymentName: baseName,
+                serviceName: baseName,
+                serviceAccountName,
+                port,
+                imageUri: resolved.imageUri,
+                identity: identity?.state,
+                registry: resolved.state,
+                url,
+                kubernetesObjects,
+                code: { hash: resolved.codeHash },
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            const connection = connectionOfOutput(output);
+            if (!connection)
+                return;
+            const adapter = yield* findClusterAdapter(connection.auth.kind);
+            // Skip only a missing cluster, then still clean up adapter-owned
+            // cloud resources (image repository, identity role).
+            const transport = yield* ifClusterExists(adapter.connect(connection));
+            if (transport && (output.kubernetesObjects ?? []).length > 0) {
+                yield* deleteObjects({ transport, objects: output.kubernetesObjects ?? [] });
+                // A LoadBalancer Service carries the cloud controller's cleanup
+                // finalizer; wait for it so the cloud load balancer is gone
+                // before the cluster (and its controller) can be deleted —
+                // deleting the cluster first leaks the load balancer.
+                yield* Effect.forEach((output.kubernetesObjects ?? []).filter((object) => object.kind === "Service"), (service) => waitForServiceGone(transport, service), { discard: true });
+            }
+            if (adapter.identity) {
+                yield* adapter.identity.delete({
+                    connection,
+                    state: output.identity ??
+                        output,
+                });
+            }
+            if (adapter.registry) {
+                yield* adapter.registry.delete({
+                    state: output.registry ??
+                        output,
+                });
+            }
+        }),
+    };
+}));
+//# sourceMappingURL=Deployment.js.map

package/lib/Deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Deployment.js","sourceRoot":"","sources":["../src/Deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAiC,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,wBAAwB,GAGzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,EACf,UAAU,EACV,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,GAQnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAqC,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAGtB,MAAM,cAAc,CAAC;AAGtB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAU,EAAuB,EAAE,CAC9D,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,MAAM,IAAI,KAAK;IACf,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC;AA4MzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6KG;AACH,MAAM,CAAC,MAAM,UAAU,GAKnB,QAAQ,CAAC,uBAAuB,EAAE;IACpC,OAAO,EAAE,CAAC,oBAAoB,CAAC;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,0CAA0C;IAC1C,cAAc,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,UAAU,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5C,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAqC;YACpD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QAClB,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC;IACJ,oBAAoB,EAAE,wBAAwB,CAAC,uBAAuB,CAEzC;CAC9B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,SAAS,GAAG,CAAC,OAAmD,EAAE,EAAE,CACxE,OAAkC,CAAC;AAErC,MAAM,eAAgB,SAAQ,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAAK;CAAG;AAEnF,0EAA0E;AAC1E,wEAAwE;AACxE,UAAU;AACV,MAAM,yBAAyB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEpG;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,CAAU,IAA4B,EAA0B,EAAE,CAC/F,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;IACjB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,eAAe;IAClD,QAAQ,EAAE,yBAAyB;CACpC,CAAC,CAAC;AAEL,MAAM,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,+BAA+B,CAAK;CAAG;AAEzF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CACzB,SAA2B,EAC3B,OAA4B,EACE,EAAE,CAChC,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC,EAC3D,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACzD,EACD,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,kBAAkB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAC/F,CAAC;AAEJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC;IAEzD,MAAM,UAAU,GAAG;QACjB,kBAAkB,EAAE,KAAK,CAAC,IAAI;QAC9B,aAAa,EAAE,KAAK,CAAC,KAAK;QAC1B,aAAa,EAAE,SAAS;KACzB,CAAC;IAEF,oEAAoE;IACpE,wDAAwD;IACxD,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAK,GAAsB,EAAE,EAAE,EAAE,CAC/D,KAAK,CAAC,IAAI;QACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAC1D,CAAC;IAER,kEAAkE;IAClE,MAAM,mBAAmB,GAAG,CAAC,SAA2B,EAAE,OAA4B,EAAE,EAAE,CACxF,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtB,MAAM,OAAO,GACX,QAGD,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,EAAE,CAAC;IAC1C,CAAC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,CACzE,EACD,sBAAsB,EACtB,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC/E,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE;YACP,YAAY;YACZ,WAAW;YACX,oBAAoB;YACpB,gBAAgB;YAChB,aAAa;YACb,UAAU;YACV,UAAU;SACX;QACD,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,wDAAwD;QACxD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAgC,CAAC;QAC5D,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,EAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;YAC9E,+DAA+D;YAC/D,mDAAmD;YACnD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,KAA6C,CAAC;YACzF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAClC,MAAM,IAAI,GAAG,KAAmC,CAAC;YACjD,MAAM,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,sBAAsB;YACtB,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBACtF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IACE,UAAU,KAAK,SAAS;gBACxB,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,EAC/D,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,iEAAiE;YACjE,gEAAgE;YAChE,aAAa;YACb,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,IAA2B,CAAC;gBAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;oBACpC,OAAO;oBACP,UAAU;oBACV,kBAAkB;oBAClB,MAAM;oBACN,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC;oBACxD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,SAAS,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,mBAAmB,CAAC,CAC3D,MAAM,CAAC,OAAO,IAAI,SAAS,CAC5B;iBACF,CAAC,CAAC;gBACH,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACpD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACpD,gEAAgE;YAChE,gEAAgE;YAChE,uDAAuD;YACvD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACvE,CAAC;YACF,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;YACrE,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc,CAAC;YAEvD,MAAM,QAAQ,GAAG,MAAM,EAAE,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YACzE,MAAM,kBAAkB,GAAG,MAAM,EAAE,kBAAkB,IAAI,QAAQ,CAAC;YAClE,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAElE,4DAA4D;YAC5D,8DAA8D;YAC9D,uCAAuC;YACvC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACnE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CACP,IAAI,EAAE,4CAA4C;oBAChD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC;oBACxD,qDAAqD;oBACrD,iDAAiD;oBACjD,gCAAgC,CACnC,CACF,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;gBAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAChC,EAAE;oBACF,UAAU;oBACV,SAAS;oBACT,cAAc,EAAE,kBAAkB;oBAClC,QAAQ;oBACR,OAAO,EAAE,IAAI,CAAC,QAAQ;oBACtB,KAAK,EACF,MAAM,EAAE,QAAgD;wBACxD,MAA8C;oBACjD,IAAI;iBACL,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;YAEd,8DAA8D;YAC9D,gEAAgE;YAChE,iEAAiE;YACjE,8BAA8B;YAC9B,MAAM,MAAM,GAAG,IAA2B,CAAC;YAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;gBAC3C,OAAO;gBACP,UAAU;gBACV,kBAAkB;gBAClB,EAAE;gBACF,MAAM;gBACN,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC;gBACxD,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,mBAAmB,CAAC,CAC3D,MAAM,CAAC,OAAO,IAAI,SAAS,CAC5B;gBACD,IAAI;gBACJ,KAAK,EACF,MAAM,EAAE,QAAgD;oBACxD,MAA8C;gBACjD,OAAO;aACR,CAAC,CAAC;YAEH,kEAAkE;YAClE,0DAA0D;YAC1D,mEAAmE;YACnE,+DAA+D;YAC/D,+DAA+D;YAC/D,iCAAiC;YACjC,MAAM,MAAM,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtE,MAAM,YAAY,GAAG;gBACnB,GAAG,UAAU;gBACb,GAAG,QAAQ,EAAE,GAAG;gBAChB,GAAG,UAAU;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,GAAG,IAAI,CAAC,GAAG;aACZ,CAAC;YAEF,MAAM,oBAAoB,GAA+B;gBACvD,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE;oBACR,IAAI,EAAE,kBAAkB;oBACxB,SAAS;oBACT,MAAM;oBACN,GAAG,CAAC,QAAQ,EAAE,yBAAyB;wBACrC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,yBAAyB,EAAE;wBACrD,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC;YACF,MAAM,WAAW,GAAG,SAAS,CAC3B;gBACE,QAAQ,EAAE,EAAE,MAAM,EAAE;gBACpB,IAAI,EAAE;oBACJ,kBAAkB;oBAClB,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,QAAQ,CAAC,QAAQ;4BACxB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;4BAChC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gCACxD,IAAI;gCACJ,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC;6BAChC,CAAC,CAAC;4BACH,SAAS,EAAE,IAAI,CAAC,SAAS;yBAC1B;qBACF;iBACF;aACF,EACD,IAAI,CAAC,WAAW,CACjB,CAAC;YACF,MAAM,gBAAgB,GAA+B;gBACnD,UAAU,EAAE,SAAS;gBACrB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC/C,IAAI,EAAE;oBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;oBAC5B,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;oBACjC,QAAQ,EAAE,WAAW;iBACtB;aACF,CAAC;YACF,iEAAiE;YACjE,8DAA8D;YAC9D,6DAA6D;YAC7D,mEAAmE;YACnE,IAAI,iBAAqC,CAAC;YAC1C,IAAI,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACjD,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB;oBAC3C,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC;oBACrD,CAAC,CAAC,SAAS,CAAC;gBACd,iBAAiB,GAAG,QAAQ,EAAE,iBAAiB,CAAC;gBAChD,kBAAkB,GAAG,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChF,CAAC;YACD,MAAM,aAAa,GAA+B;gBAChD,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBAChF,IAAI,EAAE;oBACJ,IAAI,EAAE,WAAW;oBACjB,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;iBACrD;aACF,CAAC;YAEF,MAAM,cAAc,GAAG,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAE/E,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBAChD,SAAS;gBACT,eAAe,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE;gBAChD,cAAc;aACf,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;YAE9E,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,qCAAqC;YACrC,MAAM,QAAQ,GACZ,WAAW,KAAK,cAAc;gBAC5B,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAC7E,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,GAAG,GACP,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,KAAK,EAAE;oBACX,CAAC,CAAC,UAAU,QAAQ,EAAE;oBACtB,CAAC,CAAC,UAAU,QAAQ,IAAI,IAAI,EAAE,CAAC;YAErC,OAAO;gBACL,UAAU;gBACV,SAAS;gBACT,cAAc,EAAE,QAAQ;gBACxB,WAAW,EAAE,QAAQ;gBACrB,kBAAkB;gBAClB,IAAI;gBACJ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,QAAQ,EAAE,KAAK;gBACzB,QAAQ,EAAE,QAAQ,CAAC,KAAK;gBACxB,GAAG;gBACH,iBAAiB;gBACjB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE;aAClC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhE,iEAAiE;YACjE,qDAAqD;YACrD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YACtE,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7D,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7E,gEAAgE;gBAChE,4DAA4D;gBAC5D,2DAA2D;gBAC3D,sDAAsD;gBACtD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,EAC9E,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,EACnD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC7B,UAAU;oBACV,KAAK,EACF,MAAM,CAAC,QAAgD;wBACvD,MAAkC;iBACtC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC7B,KAAK,EACF,MAAM,CAAC,QAAgD;wBACvD,MAAkC;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}