@atlasauth/emulator-core 0.1.0 → 0.3.0

package/dist/handlers/emu4-saml.js

@@ -0,0 +1,532 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseXml = parseXml;
+exports.installSaml = installSaml;
+exports.samlHandlers = samlHandlers;
+const errors_1 = require("../errors");
+const store_1 = require("../store");
+const support_1 = require("./support");
+const emu4_shared_1 = require("./emu4-shared");
+/**
+ * SAML HTTP-Artifact binding. Two roles share one emulator:
+ *  - an identity provider for your app: `POST /v1/saml/idp/artifact` answers a SOAP ArtifactResolve with an ArtifactResponse
+ *    carrying the signed-in user's Response exactly once (the artifact is 160 random bits, single use, bound to the app that was
+ *    meant to receive it, valid for a minute);
+ *  - a service provider for an identity provider you federate with: `GET`/`POST /v1/sso/saml/acs` takes a `SAMLart` for a sign-in
+ *    this side started, claims it once, sends a back-channel ArtifactResolve and checks the answer (InResponseTo, issuer, status,
+ *    exactly one Response, audience, recipient, validity window, no assertion replay) before it signs the user in.
+ * Everything the emulator does on either side is driven by the helper routes under `/__emulator/saml/`.
+ * shortcut: XML signatures are neither produced nor verified (the XML carries none), and the SAMLResponse of a SOAP exchange is
+ * built by the emulator IdP, so signature and encryption failures cannot be reproduced.
+ */
+const SAMLP = 'urn:oasis:names:tc:SAML:2.0:protocol';
+const SAML = 'urn:oasis:names:tc:SAML:2.0:assertion';
+const SUCCESS = 'urn:oasis:names:tc:SAML:2.0:status:Success';
+const SOAP_NS = 'http://schemas.xmlsoap.org/soap/envelope/';
+const ARTIFACT_TTL_MS = 60_000;
+const ATTEMPT_TTL_MS = 10 * 60_000;
+const SKEW_MS = 5 * 60_000;
+const TYPE_CODE = 0x0004;
+const unescapeXml = (s) => s.replace(/&lt;/g, '<').replace(/&gt;/g, '>').replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, '&');
+const esc = (s) => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+const local = (n) => n.slice(n.indexOf(':') + 1);
+function parseXml(src) {
+    if (typeof src !== 'string' || src.length > 256 * 1024 || /<!DOCTYPE|<!ENTITY/i.test(src))
+        return null;
+    const tok = /<!--[\s\S]*?-->|<\?[\s\S]*?\?>|<!\[CDATA\[([\s\S]*?)\]\]>|<\/([^\s>]+)\s*>|<([^\s/>!?]+)((?:\s+[^\s=/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*)\s*(\/?)>|([^<]+)/g;
+    const root = { name: '#root', attrs: {}, kids: [], text: '' };
+    const stack = [root];
+    for (let m = tok.exec(src); m; m = tok.exec(src)) {
+        const top = stack[stack.length - 1];
+        if (m[1] !== undefined)
+            top.text += m[1];
+        else if (m[2] !== undefined) {
+            if (stack.length < 2 || local(stack[stack.length - 1].name) !== local(m[2]))
+                return null;
+            stack.pop();
+        }
+        else if (m[3] !== undefined) {
+            const attrs = {};
+            for (const a of m[4].matchAll(/([^\s=/>]+)\s*=\s*(?:"([^"]*)"|'([^']*)')/g))
+                attrs[local(a[1])] = unescapeXml(a[2] ?? a[3] ?? '');
+            const node = { name: local(m[3]), attrs, kids: [], text: '' };
+            top.kids.push(node);
+            if (m[5] !== '/')
+                stack.push(node);
+        }
+        else if (m[6] !== undefined)
+            top.text += unescapeXml(m[6]);
+    }
+    return stack.length === 1 && root.kids.length === 1 ? root.kids[0] : null;
+}
+const kids = (n, name) => (n ? n.kids.filter((k) => k.name === name) : []);
+const textOf = (n) => (n ? n.text.trim() : '');
+const find = (n, name, out = []) => {
+    for (const k of n.kids) {
+        if (k.name === name)
+            out.push(k);
+        find(k, name, out);
+    }
+    return out;
+};
+// ── ids, artifacts ──
+const hexOf = (b) => [...b].map((x) => x.toString(16).padStart(2, '0')).join('');
+const msgId = () => `_${hexOf(crypto.getRandomValues(new Uint8Array(16)))}`;
+const sha1 = async (s) => new Uint8Array(await crypto.subtle.digest('SHA-1', new TextEncoder().encode(s)));
+const b64 = (b) => btoa(String.fromCharCode(...b));
+const unb64 = (s) => {
+    try {
+        return Uint8Array.from(atob(s.trim()), (c) => c.charCodeAt(0));
+    }
+    catch {
+        return null;
+    }
+};
+async function newArtifact(issuer) {
+    const handle = crypto.getRandomValues(new Uint8Array(20));
+    const head = new Uint8Array(4);
+    head[0] = TYPE_CODE >> 8;
+    head[1] = TYPE_CODE & 0xff;
+    const bytes = new Uint8Array(44);
+    bytes.set(head, 0);
+    bytes.set(await sha1(issuer), 4);
+    bytes.set(handle, 24);
+    return { artifact: b64(bytes), handle: hexOf(handle) };
+}
+/** The message handle of an artifact addressed to this issuer; null when malformed, of another type or another source. */
+async function readArtifact(artifact, issuer) {
+    if (typeof artifact !== 'string' || artifact.length > 200)
+        return null;
+    const raw = unb64(artifact);
+    if (!raw || raw.length !== 44 || ((raw[0] << 8) | raw[1]) !== TYPE_CODE)
+        return null;
+    const want = await sha1(issuer);
+    return hexOf(raw.subarray(4, 24)) === hexOf(want) ? hexOf(raw.subarray(24)) : null;
+}
+/** Only the shape of an artifact (any source): what the SP checks before it spends a back-channel call. */
+const wellFormedArtifact = (artifact) => {
+    if (typeof artifact !== 'string' || artifact.length > 200)
+        return false;
+    const raw = unb64(artifact);
+    return !!raw && raw.length === 44 && ((raw[0] << 8) | raw[1]) === TYPE_CODE;
+};
+const st = (0, support_1.engineState)((e) => ({ sps: new store_1.Table('saml_idp_sps', e.clock.now, 'samlsp'), connections: new store_1.Table('saml_connections', e.clock.now, 'samlc'), artifacts: new Map(), attempts: new store_1.Table('saml_attempts', e.clock.now, 'samla'), consumed: new Set(), tickets: new Map() }));
+const idpEntityId = (e) => `${e.issuer}/v1/saml/idp/metadata`;
+const idpArtifactUrl = (e) => `${e.issuer}/v1/saml/idp/artifact`;
+const acsUrl = (e) => `${e.issuer}/v1/sso/saml/acs`;
+const spEntityId = (e, c) => `${e.issuer}/v1/sso/saml/${c.id}/metadata`;
+/** A connection to the emulator's own identity provider follows the issuer; any other keeps what it was given. */
+const connIdp = (e, c) => (c.own_idp === true ? { entity: idpEntityId(e), url: idpArtifactUrl(e) } : { entity: c.idp_entity_id, url: c.artifact_resolution_url ?? null });
+/** An app of the emulator's identity provider; one made for a connection follows the issuer. */
+const spEntity = (e, s) => (s.conn_id ? spEntityId(e, { id: s.conn_id }) : s.entity_id);
+const spAcs = (e, s) => (s.conn_id ? acsUrl(e) : s.acs_url);
+const rawBodies = new WeakMap();
+/** Called once by the engine: hands the SOAP route its raw XML body (the engine itself only reads JSON and form bodies). */
+function installSaml(e) {
+    const handle = e.handle.bind(e);
+    e.handle = async (request) => {
+        if (request.method !== 'POST' || !/^\/v1\/saml\/idp\/artifact\/?$/.test(new URL(request.url).pathname))
+            return handle(request);
+        const raw = await request.text();
+        const headers = new Headers(request.headers);
+        headers.set('content-type', 'application/json');
+        const next = new Request(request.url, { method: 'POST', headers, body: '{}' });
+        rawBodies.set(next, raw);
+        return handle(next);
+    };
+}
+const xmlReply = (status, body) => ({ status, raw: body, headers: { 'content-type': 'text/xml; charset=utf-8', 'cache-control': 'no-store' } });
+const soap = (inner) => `<?xml version="1.0" encoding="UTF-8"?><soap-env:Envelope xmlns:soap-env="${SOAP_NS}"><soap-env:Body>${inner}</soap-env:Body></soap-env:Envelope>`;
+const fault = (status, message) => xmlReply(status, soap(`<soap-env:Fault><faultcode>soap-env:Client</faultcode><faultstring>${message.replace(/[<>&]/g, '')}</faultstring></soap-env:Fault>`));
+const iso = (ms) => new Date(ms).toISOString();
+// ── the identity provider: a Response, an artifact for it, and the resolution service ──
+function buildResponse(e, sp, input) {
+    const now = e.clock.now();
+    const respId = msgId();
+    const assertionId = msgId();
+    const entity = idpEntityId(e);
+    const until = iso(now + (input.ttlMs ?? ARTIFACT_TTL_MS * 5));
+    const irt = input.inResponseTo ? ` InResponseTo="${esc(input.inResponseTo)}"` : '';
+    const attrs = Object.entries({ email: input.email, first_name: input.user.first_name ?? undefined, last_name: input.user.last_name ?? undefined, ...input.attributes })
+        .filter(([, v]) => v !== undefined && v !== null)
+        .map(([k, v]) => `<saml:Attribute Name="${esc(k)}"><saml:AttributeValue>${esc(String(v))}</saml:AttributeValue></saml:Attribute>`)
+        .join('');
+    const xml = `<samlp:Response xmlns:samlp="${SAMLP}" xmlns:saml="${SAML}" ID="${respId}" Version="2.0" IssueInstant="${iso(now)}" Destination="${esc(input.destination)}"${irt}>` +
+        `<saml:Issuer>${esc(entity)}</saml:Issuer><samlp:Status><samlp:StatusCode Value="${SUCCESS}"/></samlp:Status>` +
+        `<saml:Assertion ID="${assertionId}" Version="2.0" IssueInstant="${iso(now)}"><saml:Issuer>${esc(entity)}</saml:Issuer>` +
+        `<saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">${esc(input.email)}</saml:NameID>` +
+        `<saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="${until}" Recipient="${esc(input.destination)}"${irt}/></saml:SubjectConfirmation></saml:Subject>` +
+        `<saml:Conditions NotBefore="${iso(now - 1000)}" NotOnOrAfter="${until}"><saml:AudienceRestriction><saml:Audience>${esc(spEntity(e, sp))}</saml:Audience></saml:AudienceRestriction></saml:Conditions>` +
+        `<saml:AttributeStatement>${attrs}</saml:AttributeStatement></saml:Assertion></samlp:Response>`;
+    return { xml, assertionId };
+}
+async function resolveArtifact(e, body) {
+    const env = parseXml(body);
+    const bodyEl = env && env.name === 'Envelope' ? kids(env, 'Body')[0] : undefined;
+    const root = bodyEl && bodyEl.kids.length === 1 && bodyEl.kids[0].name === 'ArtifactResolve' ? bodyEl.kids[0] : undefined;
+    const id = root?.attrs.ID;
+    const issuer = textOf(kids(root, 'Issuer')[0]);
+    const artifact = textOf(kids(root, 'Artifact')[0]);
+    if (!root || !id || !issuer || !artifact)
+        return fault(400, 'Expected one ArtifactResolve.');
+    const sp = st(e).sps.find((s) => spEntity(e, s) === issuer && s.artifact_binding === true);
+    if (!sp)
+        return fault(403, 'Unknown requester.');
+    const handle = await readArtifact(artifact, idpEntityId(e));
+    const pending = handle ? st(e).artifacts.get(handle) : undefined;
+    if (handle)
+        st(e).artifacts.delete(handle); // single use: spent whether or not it was valid
+    const response = pending && pending.sp_id === sp.id && pending.expires_at >= e.clock.now() ? pending.xml : null;
+    const rid = msgId();
+    return xmlReply(200, soap(`<samlp:ArtifactResponse xmlns:samlp="${SAMLP}" xmlns:saml="${SAML}" ID="${rid}" Version="2.0" IssueInstant="${iso(e.clock.now())}" InResponseTo="${esc(id.replace(/[^\w.-]/g, ''))}">` +
+        `<saml:Issuer>${esc(idpEntityId(e))}</saml:Issuer><samlp:Status><samlp:StatusCode Value="${SUCCESS}"/></samlp:Status>${response ?? ''}</samlp:ArtifactResponse>`));
+}
+// ── the service provider side ──
+const generic = (param) => new errors_1.EmulatorError('VALIDATION_FAILED', 'Could not verify that SAML sign-in.', param);
+/** Why a sign-in failed goes to the audit log and the attempt, never to the browser. */
+function failAttempt(e, attempt, reason, artifact) {
+    if (attempt)
+        Object.assign(attempt, { status: 'failed', failure_reason: reason });
+    (0, emu4_shared_1.audit)(e, null, artifact ? 'sso.saml.artifact_resolve' : 'sso.saml.response', 'sso_connection', attempt?.connection_id ?? 'unknown', { outcome: 'failed', reason });
+    throw generic(artifact ? 'SAMLart' : 'SAMLResponse');
+}
+class Reason extends Error {
+}
+/** Send the ArtifactResolve and return the one Response inside the answer. Throws Reason(code); the code is for the audit log only. */
+async function redeemArtifact(e, conn, artifact) {
+    const id = msgId();
+    const request = soap(`<samlp:ArtifactResolve xmlns:samlp="${SAMLP}" xmlns:saml="${SAML}" ID="${id}" Version="2.0" IssueInstant="${iso(e.clock.now())}" Destination="${esc(connIdp(e, conn).url ?? '')}"><saml:Issuer>${esc(spEntityId(e, conn))}</saml:Issuer><samlp:Artifact>${esc(artifact)}</samlp:Artifact></samlp:ArtifactResolve>`);
+    let status;
+    let text;
+    try {
+        const target = connIdp(e, conn).url;
+        if (target === idpArtifactUrl(e)) {
+            const reply = await resolveArtifact(e, request);
+            status = reply.status ?? 200;
+            text = reply.raw ?? '';
+        }
+        else {
+            const res = await (e.options.fetch ?? fetch)(target, { method: 'POST', headers: { 'content-type': 'text/xml; charset=utf-8', soapaction: 'http://www.oasis-open.org/committees/security' }, body: request, redirect: 'manual' });
+            status = res.status;
+            text = await res.text();
+        }
+    }
+    catch {
+        throw new Reason('transport');
+    }
+    if (status !== 200)
+        throw new Reason('http_status');
+    const env = parseXml(text);
+    if (!env)
+        throw new Reason('malformed');
+    const bodies = env.name === 'Envelope' ? kids(env, 'Body') : [];
+    if (bodies.length !== 1)
+        throw new Reason('malformed');
+    const art = bodies[0].kids.length === 1 && bodies[0].kids[0].name === 'ArtifactResponse' ? bodies[0].kids[0] : null;
+    if (!art || find(env, 'ArtifactResponse').length !== 1)
+        throw new Reason('malformed');
+    if (art.attrs.InResponseTo !== id)
+        throw new Reason('in_response_to_mismatch');
+    const issuers = kids(art, 'Issuer');
+    if (issuers.length !== 1 || textOf(issuers[0]) !== connIdp(e, conn).entity)
+        throw new Reason('issuer_mismatch');
+    const statuses = kids(art, 'Status');
+    const codes = statuses.length === 1 ? kids(statuses[0], 'StatusCode') : [];
+    if (codes.length !== 1 || codes[0].attrs.Value !== SUCCESS)
+        throw new Reason('status_not_success');
+    const inner = kids(art, 'Response');
+    if (inner.length !== 1)
+        throw new Reason('no_response');
+    return serialize(inner[0]);
+}
+function serialize(n) {
+    const attrs = Object.entries(n.attrs).map(([k, v]) => ` ${k}="${esc(v)}"`).join('');
+    return `<${n.name}${attrs}>${esc(n.text)}${n.kids.map(serialize).join('')}</${n.name}>`;
+}
+/** The checks a SAML Response must pass before anyone is signed in. Throws Reason(code). */
+function verifyResponse(e, conn, xml, expectedRequestId) {
+    const root = parseXml(xml);
+    if (!root || root.name !== 'Response')
+        throw new Reason('malformed');
+    const now = e.clock.now();
+    const status = kids(kids(root, 'Status')[0], 'StatusCode')[0]?.attrs.Value;
+    if (status !== SUCCESS)
+        throw new Reason('status_not_success');
+    const irt = root.attrs.InResponseTo ?? null;
+    if (expectedRequestId !== null && irt !== expectedRequestId)
+        throw new Reason('in_response_to_mismatch');
+    if (root.attrs.Destination && root.attrs.Destination !== acsUrl(e))
+        throw new Reason('destination_mismatch');
+    const assertions = kids(root, 'Assertion');
+    if (assertions.length !== 1)
+        throw new Reason('assertion_count');
+    const a = assertions[0];
+    if (textOf(kids(a, 'Issuer')[0]) !== connIdp(e, conn).entity)
+        throw new Reason('issuer_mismatch');
+    const cond = kids(a, 'Conditions')[0];
+    if (!cond)
+        throw new Reason('no_conditions');
+    const nb = cond.attrs.NotBefore ? Date.parse(cond.attrs.NotBefore) : null;
+    const na = cond.attrs.NotOnOrAfter ? Date.parse(cond.attrs.NotOnOrAfter) : null;
+    if (na === null || Number.isNaN(na) || now >= na + SKEW_MS)
+        throw new Reason('expired');
+    if (nb !== null && now < nb - SKEW_MS)
+        throw new Reason('not_yet_valid');
+    const audiences = find(cond, 'Audience').map(textOf);
+    if (!audiences.includes(spEntityId(e, conn)))
+        throw new Reason('audience_mismatch');
+    const scd = find(a, 'SubjectConfirmationData')[0];
+    if (!scd || (scd.attrs.Recipient && scd.attrs.Recipient !== acsUrl(e)))
+        throw new Reason('recipient_mismatch');
+    if (scd.attrs.InResponseTo && irt && scd.attrs.InResponseTo !== irt)
+        throw new Reason('in_response_to_mismatch');
+    const attrOf = (...names) => {
+        for (const at of find(a, 'Attribute'))
+            if (names.includes(at.attrs.Name ?? ''))
+                return textOf(kids(at, 'AttributeValue')[0]) || null;
+        return null;
+    };
+    const nameId = find(a, 'NameID')[0];
+    const email = (nameId?.attrs.Format?.endsWith('emailAddress') ? textOf(nameId) : null) ?? attrOf('email', 'mail', 'emailAddress');
+    if (!email || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email))
+        throw new Reason('no_email');
+    const assertionId = a.attrs.ID;
+    if (!assertionId)
+        throw new Reason('no_assertion_id');
+    if (st(e).consumed.has(assertionId))
+        throw new Reason('replay');
+    return { email: email.toLowerCase(), first_name: attrOf('first_name', 'givenName'), last_name: attrOf('last_name', 'surname', 'sn'), assertion_id: assertionId, in_response_to: irt };
+}
+async function internal(e, method, path, body) {
+    const res = await e.handle(new Request(`http://emulator.internal${path}`, { method, headers: { authorization: `Bearer ${e.keys[0].key}`, 'content-type': 'application/json' }, body: JSON.stringify(body) }));
+    return (await res.json());
+}
+async function completeSignIn(e, conn, attempt, id) {
+    st(e).consumed.add(id.assertion_id);
+    let user = e.db.users.all().find((u) => !u.deleted && u.emails.some((m) => m.email_address.toLowerCase() === id.email));
+    let created = false;
+    if (!user) {
+        if (conn.allow_sign_up === false)
+            throw new Reason('sign_up_disabled');
+        const made = await internal(e, 'POST', '/v1/users', { email_address: id.email, ...(id.first_name ? { first_name: id.first_name } : {}), ...(id.last_name ? { last_name: id.last_name } : {}) });
+        user = e.db.users.get(made.id);
+        created = true;
+        if (!user)
+            throw new Reason('user_create_failed');
+    }
+    if (user.banned)
+        throw new Reason('user_banned');
+    const session = await internal(e, 'POST', '/v1/sessions', { user_id: user.id });
+    if (!session.id)
+        throw new Reason('session_failed');
+    const ticket = `tkt_${hexOf(crypto.getRandomValues(new Uint8Array(24)))}`;
+    st(e).tickets.set(ticket, { attempt_id: attempt.id, session });
+    Object.assign(attempt, { status: 'complete', user_id: user.id, session_id: session.id, ticket, created_user: created, completed_at: e.clock.now() });
+}
+const attemptView = (a) => ({ object: 'saml_attempt', id: a.id, connection_id: a.connection_id, status: a.status, request_id: a.request_id, relay_state: a.relay_state, redirect_url: a.redirect_url, user_id: a.user_id ?? null, session_id: a.session_id ?? null, created_user: a.created_user ?? false, failure_reason: a.failure_reason ?? null, artifact_claimed: a.artifact_claimed === true, created_at: a.created_at, completed_at: a.completed_at ?? null });
+const connView = (e, c) => ({ object: 'saml_connection', id: c.id, name: c.name, idp_entity_id: connIdp(e, c).entity, artifact_resolution_url: connIdp(e, c).url, sp_entity_id: spEntityId(e, c), acs_url: acsUrl(e), allow_sign_up: c.allow_sign_up !== false, created_at: c.created_at });
+const spView = (e, s) => ({ object: 'saml_idp_service_provider', id: s.id, entity_id: spEntity(e, s), acs_url: spAcs(e, s), artifact_binding: s.artifact_binding === true, created_at: s.created_at });
+async function handleAcs(c) {
+    const e = c.engine;
+    const get = (k) => {
+        const v = c.request.method === 'GET' ? c.query.get(k) : c.body[k];
+        return typeof v === 'string' && v ? v : undefined;
+    };
+    const response = c.request.method === 'GET' ? undefined : get('SAMLResponse');
+    const art = get('SAMLart');
+    const relay = get('RelayState');
+    if (response && art)
+        throw (0, emu4_shared_1.bad)('Send a SAMLResponse or a SAMLart, not both.', 'SAMLart');
+    if (!response && !art)
+        throw (0, emu4_shared_1.bad)('Missing SAMLResponse.', 'SAMLResponse');
+    const attempt = relay ? st(e).attempts.find((a) => a.relay_state === relay) : undefined;
+    const now = e.clock.now();
+    const redirect = (url, params) => {
+        const u = new URL(url);
+        for (const [k, v] of Object.entries(params))
+            u.searchParams.set(k, v);
+        return { status: 302, headers: { location: u.toString(), 'cache-control': 'no-store' } };
+    };
+    // IdP-initiated: no attempt behind the RelayState. An artifact has no request to bind to, so it is refused.
+    if (!attempt) {
+        if (!response)
+            throw (0, emu4_shared_1.bad)('Unknown or expired sign-in link.', 'RelayState');
+        const raw = (() => { try {
+            return atob(response);
+        }
+        catch {
+            return '';
+        } })();
+        const issuer = textOf(kids(parseXml(raw) ?? undefined, 'Issuer')[0]);
+        const conn = st(e).connections.find((x) => connIdp(e, x).entity === issuer);
+        const shell = st(e).attempts.insert({ connection_id: conn?.id ?? 'unknown', status: 'pending', relay_state: null, request_id: null, redirect_url: null, created_at: now });
+        if (!conn)
+            failAttempt(e, undefined, 'unknown_connection', false);
+        try {
+            await completeSignIn(e, conn, shell, verifyResponse(e, conn, raw, null));
+        }
+        catch (err) {
+            failAttempt(e, shell, err instanceof Reason ? err.message : 'error', false);
+        }
+        (0, emu4_shared_1.audit)(e, null, 'sso.saml.response', 'sso_connection', conn.id, { outcome: 'ok', initiated: 'idp' });
+        return redirect(e.issuer, { __atlas_attempt: shell.id, __atlas_ticket: shell.ticket });
+    }
+    if (attempt.status !== 'pending' || now > attempt.created_at + ATTEMPT_TTL_MS)
+        throw (0, emu4_shared_1.bad)('Unknown or expired sign-in link.', 'RelayState');
+    const conn = st(e).connections.get(attempt.connection_id);
+    if (!conn)
+        throw (0, emu4_shared_1.bad)('Unknown or expired sign-in link.', 'RelayState');
+    let responseXml;
+    if (art) {
+        // The handle is claimed before the back-channel call: a second use of the same artifact never reaches the IdP.
+        if (attempt.artifact_claimed)
+            throw (0, emu4_shared_1.bad)('Unknown or expired sign-in link.', 'RelayState');
+        attempt.artifact_claimed = true;
+        if (!connIdp(e, conn).url)
+            failAttempt(e, attempt, 'artifact_not_configured', true);
+        if (!wellFormedArtifact(art))
+            failAttempt(e, attempt, 'malformed_artifact', true);
+        try {
+            responseXml = await redeemArtifact(e, conn, art);
+        }
+        catch (err) {
+            failAttempt(e, attempt, err instanceof Reason ? err.message : 'transport', true);
+        }
+    }
+    else {
+        const raw = (() => { try {
+            return atob(response);
+        }
+        catch {
+            return '';
+        } })();
+        if (!raw)
+            failAttempt(e, attempt, 'malformed', false);
+        responseXml = raw;
+    }
+    try {
+        await completeSignIn(e, conn, attempt, verifyResponse(e, conn, responseXml, attempt.request_id));
+    }
+    catch (err) {
+        failAttempt(e, attempt, err instanceof Reason ? err.message : 'error', art !== undefined);
+    }
+    (0, emu4_shared_1.audit)(e, null, art ? 'sso.saml.artifact_resolve' : 'sso.saml.response', 'sso_connection', conn.id, { outcome: 'ok', attempt_id: attempt.id });
+    return redirect(attempt.redirect_url, { __atlas_attempt: attempt.id, __atlas_ticket: attempt.ticket });
+}
+function samlHandlers() {
+    return [
+        // ── the identity provider ──
+        { method: 'GET', pattern: '/v1/saml/idp/metadata', public: true, handler: (c) => {
+                const e = c.engine;
+                const body = `<?xml version="1.0" encoding="UTF-8"?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="${esc(idpEntityId(e))}"><md:IDPSSODescriptor protocolSupportEnumeration="${SAMLP}"><md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="${esc(idpArtifactUrl(e))}" index="0" isDefault="true"/><md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="${esc(`${e.issuer}/v1/saml/idp/sso`)}"/></md:IDPSSODescriptor></md:EntityDescriptor>`;
+                return { raw: body, headers: { 'content-type': 'application/samlmetadata+xml; charset=utf-8', 'cache-control': 'no-store' } };
+            } },
+        { method: 'POST', pattern: '/v1/saml/idp/artifact', public: true, handler: (c) => {
+                const raw = rawBodies.get(c.request);
+                return raw === undefined || !raw.trim() ? fault(400, 'Expected one ArtifactResolve.') : resolveArtifact(c.engine, raw);
+            } },
+        // ── the service provider's metadata ──
+        { method: 'GET', pattern: '/v1/sso/saml/:connectionId/metadata', public: true, handler: (c) => {
+                const e = c.engine;
+                const conn = st(e).connections.get(c.params.connectionId);
+                if (!conn)
+                    throw (0, errors_1.notFound)('SAML connection');
+                const artifact = connIdp(e, conn).url ? `<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="${esc(acsUrl(e))}" index="2"/>` : '';
+                return { raw: `<?xml version="1.0" encoding="UTF-8"?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="${esc(spEntityId(e, conn))}"><md:SPSSODescriptor protocolSupportEnumeration="${SAMLP}"><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="${esc(acsUrl(e))}" index="1" isDefault="true"/>${artifact}</md:SPSSODescriptor></md:EntityDescriptor>`, headers: { 'content-type': 'application/samlmetadata+xml; charset=utf-8' } };
+            } },
+        { method: 'POST', pattern: '/v1/sso/saml/acs', public: true, handler: handleAcs },
+        { method: 'GET', pattern: '/v1/sso/saml/acs', public: true, handler: handleAcs },
+        // ── emulator helpers ──
+        // POST /__emulator/saml/idp/service_providers { entity_id, acs_url, artifact_binding? }: an app the emulator IdP issues Responses for.
+        { method: 'POST', pattern: '/__emulator/saml/idp/service_providers', public: true, handler: (c) => {
+                const e = c.engine;
+                if (typeof c.body.entity_id !== 'string' || !c.body.entity_id)
+                    throw (0, emu4_shared_1.bad)('entity_id is required.', 'entity_id');
+                if (typeof c.body.acs_url !== 'string' || !/^https?:\/\//.test(c.body.acs_url))
+                    throw (0, emu4_shared_1.bad)('acs_url must be an http(s) URL.', 'acs_url');
+                if (c.body.artifact_binding !== undefined && typeof c.body.artifact_binding !== 'boolean')
+                    throw (0, emu4_shared_1.bad)('artifact_binding is a boolean.', 'artifact_binding');
+                if (st(e).sps.find((s) => spEntity(e, s) === c.body.entity_id))
+                    throw new errors_1.EmulatorError('CONFLICT', 'A service provider with this entity_id already exists.');
+                const row = st(e).sps.insert({ entity_id: c.body.entity_id, acs_url: c.body.acs_url, artifact_binding: c.body.artifact_binding !== false, created_at: e.clock.now() });
+                return { status: 201, body: spView(e, row) };
+            } },
+        // POST /__emulator/saml/idp/authenticate { sp_entity_id, user_id? | email?, in_response_to?, relay_state?, binding?: artifact|post, attributes? }: sign a user in at the IdP (an email alone asserts an address nobody has signed up with).
+        { method: 'POST', pattern: '/__emulator/saml/idp/authenticate', public: true, handler: async (c) => {
+                const e = c.engine;
+                const sp = st(e).sps.find((s) => spEntity(e, s) === c.body.sp_entity_id);
+                if (!sp)
+                    throw (0, errors_1.notFound)('Service provider');
+                const user = c.body.user_id !== undefined ? (e.db.users.get(c.body.user_id) ?? {}) : {};
+                if (c.body.user_id !== undefined && (!user.id || user.deleted))
+                    throw (0, errors_1.notFound)('User');
+                if (c.body.email !== undefined && (typeof c.body.email !== 'string' || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(c.body.email)))
+                    throw (0, emu4_shared_1.bad)('email must be an email address.', 'email');
+                const binding = c.body.binding ?? 'artifact';
+                if (binding !== 'artifact' && binding !== 'post')
+                    throw (0, emu4_shared_1.bad)('binding is artifact or post.', 'binding');
+                if (binding === 'artifact' && !sp.artifact_binding)
+                    throw (0, emu4_shared_1.bad)('This service provider does not use the artifact binding.', 'binding');
+                const emails = user.emails ?? [];
+                const email = String(c.body.email ?? (emails.find((m) => m.id === user.primary_email_address_id) ?? emails[0])?.email_address ?? '');
+                if (!email)
+                    throw (0, emu4_shared_1.bad)('Send user_id of a user with an email address, or an email to assert.', 'user_id');
+                const { xml } = buildResponse(e, sp, { inResponseTo: typeof c.body.in_response_to === 'string' ? c.body.in_response_to : null, user, email, attributes: (0, emu4_shared_1.isObj)(c.body.attributes) ? c.body.attributes : {}, destination: spAcs(e, sp) });
+                const relay = typeof c.body.relay_state === 'string' ? c.body.relay_state : null;
+                if (binding === 'post')
+                    return { body: { object: 'saml_post_binding', saml_response: btoa(xml), relay_state: relay, acs_url: spAcs(e, sp) } };
+                const { artifact, handle } = await newArtifact(idpEntityId(e));
+                st(e).artifacts.set(handle, { sp_id: sp.id, xml, expires_at: e.clock.now() + ARTIFACT_TTL_MS });
+                const u = new URL(spAcs(e, sp));
+                u.searchParams.set('SAMLart', artifact);
+                if (relay)
+                    u.searchParams.set('RelayState', relay);
+                return { body: { object: 'saml_artifact_binding', saml_art: artifact, relay_state: relay, acs_url: spAcs(e, sp), redirect_url: u.toString(), expires_at: e.clock.now() + ARTIFACT_TTL_MS } };
+            } },
+        // POST /__emulator/saml/sp/connections { name, idp?: "emulator", idp_entity_id?, artifact_resolution_url?, allow_sign_up? }: an identity provider Atlas federates with.
+        { method: 'POST', pattern: '/__emulator/saml/sp/connections', public: true, handler: (c) => {
+                const e = c.engine;
+                const b = c.body;
+                const own = b.idp === 'emulator';
+                const idpEntity = own ? null : b.idp_entity_id;
+                if (!own && (typeof idpEntity !== 'string' || !idpEntity))
+                    throw (0, emu4_shared_1.bad)('idp_entity_id is required (or idp: "emulator").', 'idp_entity_id');
+                const url = own ? null : (b.artifact_resolution_url ?? null);
+                if (url !== null && (typeof url !== 'string' || !/^https:\/\//.test(url)))
+                    throw (0, emu4_shared_1.bad)('artifact_resolution_url must be an https URL.', 'artifact_resolution_url');
+                if (b.allow_sign_up !== undefined && typeof b.allow_sign_up !== 'boolean')
+                    throw (0, emu4_shared_1.bad)('allow_sign_up is a boolean.', 'allow_sign_up');
+                const row = st(e).connections.insert({ name: typeof b.name === 'string' && b.name ? b.name : 'SAML', own_idp: own, idp_entity_id: idpEntity, artifact_resolution_url: url, allow_sign_up: b.allow_sign_up !== false, created_at: e.clock.now() });
+                if (own)
+                    st(e).sps.insert({ conn_id: row.id, entity_id: spEntityId(e, row), acs_url: acsUrl(e), artifact_binding: true, created_at: e.clock.now() });
+                return { status: 201, body: connView(e, row) };
+            } },
+        // POST /__emulator/saml/sp/connections/:id/start { redirect_url }: begin a sign-in (the AuthnRequest and the RelayState it carries).
+        { method: 'POST', pattern: '/__emulator/saml/sp/connections/:id/start', public: true, handler: (c) => {
+                const e = c.engine;
+                const conn = st(e).connections.get(c.params.id);
+                if (!conn)
+                    throw (0, errors_1.notFound)('SAML connection');
+                if (typeof c.body.redirect_url !== 'string' || !/^https?:\/\//.test(c.body.redirect_url))
+                    throw (0, emu4_shared_1.bad)('redirect_url must be an http(s) URL.', 'redirect_url');
+                const a = st(e).attempts.insert({ connection_id: conn.id, status: 'pending', request_id: msgId(), relay_state: hexOf(crypto.getRandomValues(new Uint8Array(16))), redirect_url: c.body.redirect_url, created_at: e.clock.now() });
+                return { status: 201, body: { ...attemptView(a), sp_entity_id: spEntityId(e, conn) } };
+            } },
+        { method: 'GET', pattern: '/__emulator/saml/attempts/:id', public: true, handler: (c) => {
+                const a = st(c.engine).attempts.get(c.params.id);
+                if (!a)
+                    throw (0, errors_1.notFound)('Attempt');
+                return { body: attemptView(a) };
+            } },
+        // POST /__emulator/saml/attempts/:id/redeem { ticket }: the ticket in the return URL becomes the session, once.
+        { method: 'POST', pattern: '/__emulator/saml/attempts/:id/redeem', public: true, handler: (c) => {
+                const e = c.engine;
+                const t = typeof c.body.ticket === 'string' ? st(e).tickets.get(c.body.ticket) : undefined;
+                if (!t || t.attempt_id !== c.params.id)
+                    throw new errors_1.EmulatorError('VERIFICATION_FAILED', 'The ticket is not valid.');
+                st(e).tickets.delete(c.body.ticket);
+                return { body: t.session };
+            } },
+    ];
+}
+//# sourceMappingURL=emu4-saml.js.map

package/dist/handlers/emu4-saml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emu4-saml.js","sourceRoot":"","sources":["../../src/handlers/emu4-saml.ts"],"names":[],"mappings":";;AAoCA,4BAoBC;AA6ED,kCAWC;AAkPD,oCA+FC;AA/dD,sCAAoD;AAEpD,oCAAiC;AACjC,uCAAwC;AACxC,+CAAkD;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,IAAI,GAAG,uCAAuC,CAAC;AACrD,MAAM,OAAO,GAAG,4CAA4C,CAAC;AAC7D,MAAM,OAAO,GAAG,2CAA2C,CAAC;AAC5D,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AACnC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC;AAC3B,MAAM,SAAS,GAAG,MAAM,CAAC;AAKzB,MAAM,WAAW,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAChK,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAChI,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjE,SAAgB,QAAQ,CAAC,GAAW;IAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,MAAM,GAAG,GAAG,yJAAyJ,CAAC;IACtK,MAAM,IAAI,GAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACrE,MAAM,KAAK,GAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1F,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpI,MAAM,IAAI,GAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAE,IAAY,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/G,MAAM,MAAM,GAAG,CAAC,CAAoB,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1E,MAAM,IAAI,GAAG,CAAC,CAAQ,EAAE,IAAY,EAAE,MAAe,EAAE,EAAW,EAAE;IAClE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,uBAAuB;AAEvB,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrG,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,MAAM,IAAI,GAAG,KAAK,EAAE,CAAS,EAAuB,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxI,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAqB,EAAE;IAC7C,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AACF,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnB,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AACzD,CAAC;AACD,0HAA0H;AAC1H,KAAK,UAAU,YAAY,CAAC,QAAiB,EAAE,MAAc;IAC3D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AACD,2GAA2G;AAC3G,MAAM,kBAAkB,GAAG,CAAC,QAAiB,EAAW,EAAE;IACxD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,SAAS,CAAC;AAChF,CAAC,CAAC;AAeF,MAAM,EAAE,GAAG,IAAA,qBAAW,EAAC,CAAC,CAAS,EAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,aAAK,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,aAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,aAAK,CAAC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtS,MAAM,WAAW,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,uBAAuB,CAAC;AAC9E,MAAM,cAAc,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,uBAAuB,CAAC;AACjF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,kBAAkB,CAAC;AACpE,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,CAAM,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC;AAC7F,kHAAkH;AAClH,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAM,EAA0C,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,uBAAuB,IAAI,IAAI,EAAE,CAAC,CAAC;AAC/N,gGAAgG;AAChG,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAM,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7G,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,CAAM,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAEjF,MAAM,SAAS,GAAG,IAAI,OAAO,EAAmB,CAAC;AACjD,4HAA4H;AAC5H,SAAgB,WAAW,CAAC,CAAS;IACnC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/H,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,yBAAyB,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AACvK,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,4EAA4E,OAAO,oBAAoB,KAAK,sCAAsC,CAAC;AAC3L,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,OAAe,EAAS,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,sEAAsE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;AACvN,MAAM,GAAG,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE/D,0FAA0F;AAE1F,SAAS,aAAa,CAAC,CAAS,EAAE,EAAO,EAAE,KAAsH;IAC/J,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;SACpK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC,0BAA0B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,yCAAyC,CAAC;SACjI,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,GAAG,GACP,gCAAgC,KAAK,iBAAiB,IAAI,SAAS,MAAM,iCAAiC,GAAG,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,GAAG;QACpK,gBAAgB,GAAG,CAAC,MAAM,CAAC,wDAAwD,OAAO,oBAAoB;QAC9G,uBAAuB,WAAW,iCAAiC,GAAG,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,MAAM,CAAC,gBAAgB;QACxH,8FAA8F,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB;QAC9H,wHAAwH,KAAK,gBAAgB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,8CAA8C;QACxN,+BAA+B,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,mBAAmB,KAAK,8CAA8C,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,+DAA+D;QACvM,4BAA4B,KAAK,8DAA8D,CAAC;IAClG,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,CAAS,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5H,MAAM,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC7F,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;IAC3F,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,MAAM;QAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD;IAC5F,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CACvB,wCAAwC,KAAK,iBAAiB,IAAI,SAAS,GAAG,iCAAiC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI;QACvL,gBAAgB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,wDAAwD,OAAO,qBAAqB,QAAQ,IAAI,EAAE,2BAA2B,CACjK,CAAC,CAAC;AACL,CAAC;AAED,kCAAkC;AAElC,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,sBAAa,CAAC,mBAAmB,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAAC;AAExH,wFAAwF;AACxF,SAAS,WAAW,CAAC,CAAS,EAAE,OAAwB,EAAE,MAAc,EAAE,QAAiB;IACzF,IAAI,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,IAAA,mBAAK,EAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,IAAI,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnK,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,MAAO,SAAQ,KAAK;CAAG;AAE7B,uIAAuI;AACvI,KAAK,UAAU,cAAc,CAAC,CAAS,EAAE,IAAS,EAAE,QAAgB;IAClE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,uCAAuC,KAAK,iBAAiB,IAAI,SAAS,EAAE,iCAAiC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,kBAAkB,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,kBAAkB,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,iCAAiC,GAAG,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IAC1U,IAAI,MAAc,CAAC;IACnB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAI,CAAC;QACrC,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;YAC7B,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,yBAAyB,EAAE,UAAU,EAAE,+CAA+C,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjO,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzH,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE;QAAE,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO;QAAE,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,CAAQ;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;AAC1F,CAAC;AAID,4FAA4F;AAC5F,SAAS,cAAc,CAAC,CAAS,EAAE,IAAS,EAAE,GAAW,EAAE,iBAAgC;IACzF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;IAC3E,IAAI,MAAM,KAAK,OAAO;QAAE,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC;IAC5C,IAAI,iBAAiB,KAAK,IAAI,IAAI,GAAG,KAAK,iBAAiB;QAAE,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IACzB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,EAAE,GAAG,OAAO;QAAE,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IACxF,IAAI,EAAE,KAAK,IAAI,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO;QAAE,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC/G,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,GAAG;QAAE,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,CAAC,GAAG,KAAe,EAAiB,EAAE;QACnD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACrI,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAClI,IAAI,CAAC,KAAK,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/B,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;AACxL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,CAAS,EAAE,MAAc,EAAE,IAAY,EAAE,IAAS;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,2BAA2B,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/M,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAAS,EAAE,IAAS,EAAE,OAAY,EAAE,EAAY;IAC5E,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAK,CAAC,CAAC,MAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACnI,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK;YAAE,MAAM,IAAI,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACvJ,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAM,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,KAAK,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;AAChd,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAM,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,KAAK,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAC9S,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,CAAM,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,KAAK,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAEzN,KAAK,UAAU,SAAS,CAAC,CAAe;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,IAAI,QAAQ,IAAI,GAAG;QAAE,MAAM,IAAA,iBAAG,EAAC,6CAA6C,EAAE,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG;QAAE,MAAM,IAAA,iBAAG,EAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,MAA8B,EAAS,EAAE;QACtE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC;IAC3F,CAAC,CAAC;IAEF,4GAA4G;IAC5G,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAA,iBAAG,EAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,IAAI,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAS,CAAC,CAAC;QAClL,IAAI,CAAC,IAAI;YAAE,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC;QACD,IAAA,mBAAK,EAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACpG,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc;QAAE,MAAM,IAAA,iBAAG,EAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;IAC3I,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI;QAAE,MAAM,IAAA,iBAAG,EAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;IAEvE,IAAI,WAAmB,CAAC;IACxB,IAAI,GAAG,EAAE,CAAC;QACR,+GAA+G;QAC/G,IAAI,OAAO,CAAC,gBAAgB;YAAE,MAAM,IAAA,iBAAG,EAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;QAC1F,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG;YAAE,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,QAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,GAAG;YAAE,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACtD,WAAW,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACnG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC5F,CAAC;IACD,IAAA,mBAAK,EAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9I,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACzG,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO;QACL,8BAA8B;QAC9B,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC9E,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,IAAI,GAAG,wHAAwH,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,sDAAsD,KAAK,iGAAiG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,gIAAgI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,kBAAkB,CAAC,iDAAiD,CAAC;gBAC9hB,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,6CAA6C,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC;YAChI,CAAC,EAAE;QACH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC/E,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACrC,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACzH,CAAC,EAAE;QACH,wCAAwC;QACxC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC5F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAA,iBAAQ,EAAC,iBAAiB,CAAC,CAAC;gBAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uGAAuG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClL,OAAO,EAAE,GAAG,EAAE,wHAAwH,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,qDAAqD,KAAK,qGAAqG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iCAAiC,QAAQ,6CAA6C,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,6CAA6C,EAAE,EAAE,CAAC;YAClf,CAAC,EAAE;QACH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;QACjF,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;QAEhF,yBAAyB;QACzB,uIAAuI;QACvI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAA,iBAAG,EAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;gBAChH,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAA,iBAAG,EAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;gBACxI,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;oBAAE,MAAM,IAAA,iBAAG,EAAC,gCAAgC,EAAE,kBAAkB,CAAC,CAAC;gBAC3J,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;oBAAE,MAAM,IAAI,sBAAa,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;gBAC9J,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAS,CAAC,CAAC;gBAC9K,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/C,CAAC,EAAE;QACH,4OAA4O;QAC5O,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACjG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzE,IAAI,CAAC,EAAE;oBAAE,MAAM,IAAA,iBAAQ,EAAC,kBAAkB,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7F,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,MAAM,CAAC,CAAC;gBACvF,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAG,EAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;gBAChL,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC;gBAC7C,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,MAAM;oBAAE,MAAM,IAAA,iBAAG,EAAC,8BAA8B,EAAE,SAAS,CAAC,CAAC;gBACvG,IAAI,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE,CAAC,gBAAgB;oBAAE,MAAM,IAAA,iBAAG,EAAC,0DAA0D,EAAE,SAAS,CAAC,CAAC;gBACrI,MAAM,MAAM,GAAI,IAAI,CAAC,MAA4B,IAAI,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;gBACrI,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAA,iBAAG,EAAC,sEAAsE,EAAE,SAAS,CAAC,CAAC;gBACzG,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAA,mBAAK,EAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxO,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjF,IAAI,OAAO,KAAK,MAAM;oBAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9I,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC;gBAChG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACxC,IAAI,KAAK;oBAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,CAAC;YAC/L,CAAC,EAAE;QACH,wKAAwK;QACxK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACzF,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC;gBACjC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC/C,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC;oBAAE,MAAM,IAAA,iBAAG,EAAC,iDAAiD,EAAE,eAAe,CAAC,CAAC;gBACzI,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,IAAI,IAAI,CAAC,CAAC;gBAC7D,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAG,EAAC,+CAA+C,EAAE,yBAAyB,CAAC,CAAC;gBACjK,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS;oBAAE,MAAM,IAAA,iBAAG,EAAC,6BAA6B,EAAE,eAAe,CAAC,CAAC;gBACrI,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,uBAAuB,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,KAAK,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAS,CAAC,CAAC;gBACzP,IAAI,GAAG;oBAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAS,CAAC,CAAC;gBAC5J,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,CAAC,EAAE;QACH,qIAAqI;QACrI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACnG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAA,iBAAQ,EAAC,iBAAiB,CAAC,CAAC;gBAC7C,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;oBAAE,MAAM,IAAA,iBAAG,EAAC,sCAAsC,EAAE,cAAc,CAAC,CAAC;gBAC5J,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAS,CAAC,CAAC;gBACzO,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC,EAAE;QACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtF,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,SAAS,CAAC,CAAC;gBAClC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,CAAC,EAAE;QACH,gHAAgH;QAChH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC9F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3F,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE;oBAAE,MAAM,IAAI,sBAAa,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,CAAC;gBACnH,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC,EAAE;KACJ,CAAC;AACJ,CAAC"}