@cleocode/core 2026.9.20 → 2026.9.21

package/dist/cloud/journal.js

@@ -0,0 +1,428 @@
+import { AppendSegmentResult, BlobDownload, CheckpointId, CompleteUploadResult, CreateCheckpointResult, ListCheckpointsResult, MAX_INLINE_SEGMENT_BYTES, MAX_PULL_LIMIT, PresignUploadResult, PullSegmentsResult, } from '@cleocode/contracts/cloud';
+import { DecryptError, open, seal, sha256Hex, signEd25519, uuidv7, verifyEd25519, } from './crypto.js';
+import { isSecureUrl, NexusError, } from './http.js';
+import { liveKeys, signerKeys } from './keys.js';
+import { checkpointEndorsementMessage, checkpointSigningMessage, manifestCanonical, replicasCanonical, segmentMetaCanonical, segmentSigningMessage, } from './signing.js';
+const refuse = (code, reason, message) => new NexusError(code, message, 0, null, { reason });
+function uploaderFor(fetchImpl) {
+    return async (url, headers, bytes) => {
+        if (!isSecureUrl(url))
+            throw refuse('E_PROTOCOL', 'payload', 'upload URL must be https');
+        const res = await fetchImpl(url, { method: 'PUT', headers, body: bytes, redirect: 'error' });
+        if (!res.ok)
+            throw new NexusError('E_BLOB_INTEGRITY', `upload refused: HTTP ${res.status}`, res.status, null);
+    };
+}
+/** The default downloader: https only, no redirects, and it stops reading past `maxBytes`. */
+export function cappedDownloader(fetchImpl) {
+    return async (url, maxBytes) => {
+        if (!isSecureUrl(url))
+            throw refuse('E_PROTOCOL', 'payload', 'download URL must be https');
+        const abort = new AbortController();
+        const res = await fetchImpl(url, { redirect: 'error', signal: abort.signal });
+        if (!res.ok)
+            throw new NexusError('E_BLOB_MISSING', `download failed: HTTP ${res.status}`, res.status, null);
+        const tooLarge = () => {
+            abort.abort();
+            return refuse('E_PAYLOAD_TOO_LARGE', 'too-large', `download exceeds the expected ${maxBytes} bytes`);
+        };
+        const declared = Number(res.headers.get('content-length') ?? Number.NaN);
+        if (Number.isFinite(declared) && declared > maxBytes)
+            throw tooLarge();
+        if (!res.body)
+            return Buffer.alloc(0);
+        const reader = res.body.getReader();
+        const chunks = [];
+        let received = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            received += value.byteLength;
+            if (received > maxBytes) {
+                await reader.cancel().catch(() => { });
+                throw tooLarge();
+            }
+            chunks.push(value);
+        }
+        return Buffer.concat(chunks);
+    };
+}
+export const initialPullCursor = () => ({
+    after: 0,
+    knowsAllReplicas: true,
+    replicas: {},
+});
+/** A cursor that resumes right after a (verified) checkpoint, seeded from its signed replica map. */
+export function cursorFromCheckpoint(cp) {
+    const replicas = {};
+    for (const [id, h] of Object.entries(cp.replicas)) {
+        replicas[id] = { deviceId: h.deviceId, replicaSeq: h.lastReplicaSeq };
+    }
+    return { after: cp.coversSeq, knowsAllReplicas: true, replicas };
+}
+/**
+ * The pins for revoking `deviceId`'s key: the last replicaSeq of each of its replicas in the given
+ * cursors, and the highest coversSeq of its checkpoints in the given (already verified) lists. Compute
+ * them from pulls this client verified itself, with the key trusted as pending (certifiedSigners with
+ * includePending), before signing the revocation.
+ */
+export function revocationPins(deviceId, streams) {
+    const pins = { replicas: {}, checkpoints: {} };
+    for (const st of streams) {
+        for (const [id, r] of Object.entries(st.cursor.replicas)) {
+            if (r.deviceId === deviceId)
+                pins.replicas[id] = Math.max(pins.replicas[id] ?? 0, r.replicaSeq);
+        }
+        for (const cp of st.checkpoints ?? []) {
+            if (cp.deviceId === deviceId && cp.streamId === st.streamId) {
+                pins.checkpoints[st.streamId] = Math.max(pins.checkpoints[st.streamId] ?? 0, cp.coversSeq);
+            }
+        }
+    }
+    return pins;
+}
+const DEFAULT_MAX_SEGMENT_BLOB_BYTES = 256 * 1024 * 1024;
+const utf8 = (s) => Buffer.from(s, 'utf8');
+/** sha256 of the canonical segment metadata. Covered by the segment signature and the ciphertext AAD. */
+export const segmentMetaHash = (m) => sha256Hex(utf8(segmentMetaCanonical(m)));
+/** sha256 of the canonical manifest. Covered by the checkpoint signature. */
+export const manifestHash = (m) => sha256Hex(utf8(manifestCanonical(m)));
+/** sha256 of the canonical replica map. Covered by the checkpoint signature. */
+export const replicasHash = (r) => sha256Hex(utf8(replicasCanonical(r)));
+const checkpointParts = (cp) => ({
+    streamId: cp.streamId,
+    checkpointId: cp.checkpointId,
+    parentCheckpointId: cp.parentCheckpointId,
+    replicaId: cp.replicaId,
+    deviceId: cp.deviceId,
+    coversSeq: cp.coversSeq,
+    manifestHash: manifestHash(cp.manifest),
+    replicasHash: replicasHash(cp.replicas),
+    blobSha256: cp.blobSha256,
+    sizeBytes: cp.sizeBytes,
+});
+const segmentContext = (streamId, replicaId, replicaSeq, metaHash) => `segment/v2\n${streamId}\n${replicaId}\n${replicaSeq}\n${metaHash}`;
+const checkpointContext = (streamId, checkpointId, coversSeq) => `checkpoint/v2\n${streamId}\n${checkpointId}\n${coversSeq}`;
+const metaOf = (s) => ({
+    opCount: s.opCount,
+    hlcMin: s.hlcMin,
+    hlcMax: s.hlcMax,
+    deltas: s.deltas,
+    schemaVersion: s.schemaVersion,
+});
+/**
+ * One replica's view of one journal stream. The caller owns durable state (`nextReplicaSeq`, the
+ * PullCursor and the highest checkpoint coversSeq seen) and must persist it in the same local
+ * transaction that records what was sent or applied.
+ */
+export class Journal {
+    o;
+    up;
+    down;
+    base;
+    maxSegmentBlobBytes;
+    constructor(o) {
+        this.o = o;
+        const f = o.fetch ?? ((i, init) => globalThis.fetch(i, init));
+        this.up = o.uploader ?? uploaderFor(f);
+        this.down = o.downloader ?? cappedDownloader(f);
+        this.base = `/v1/streams/${encodeURIComponent(o.streamId)}`;
+        this.maxSegmentBlobBytes = o.maxSegmentBlobBytes ?? DEFAULT_MAX_SEGMENT_BLOB_BYTES;
+    }
+    /**
+     * Encrypt, sign and append one segment of ops. Safe to retry with the same replicaSeq, metadata and
+     * `sealed` bytes (from sealSegment): re-encrypting would change the hash and defeat idempotency.
+     */
+    async push(replicaSeq, plaintext, meta, sealed) {
+        const { streamId, replicaId, deviceId } = this.o;
+        const metaHash = segmentMetaHash(meta);
+        const ciphertext = sealed ?? this.sealSegment(replicaSeq, plaintext, meta);
+        const segmentHash = sha256Hex(ciphertext);
+        const signature = signEd25519(this.o.signing, segmentSigningMessage({ streamId, replicaId, deviceId, replicaSeq, segmentHash, metaHash })).toString('base64');
+        const body = {
+            replicaId,
+            deviceId,
+            segmentHash,
+            replicaSeq,
+            signature,
+            ...metaOf(meta),
+            ...(ciphertext.length > MAX_INLINE_SEGMENT_BYTES
+                ? { blobSha256: await this.uploadBlob(ciphertext, 'segment') }
+                : { ciphertext: ciphertext.toString('base64') }),
+        };
+        return this.o.http.request('POST', `${this.base}/segments`, AppendSegmentResult, body);
+    }
+    /**
+     * Encrypt a segment without sending it, so the caller can persist the exact bytes before pushing.
+     * The AAD covers the metadata hash, so the same `meta` must be passed to push.
+     */
+    sealSegment(replicaSeq, plaintext, meta) {
+        return seal(this.o.key, plaintext, 'segment', segmentContext(this.o.streamId, this.o.replicaId, replicaSeq, segmentMetaHash(meta)));
+    }
+    /**
+     * Pull, verify and decrypt the segments after `cursor.after`. Nothing unverified is ever returned for
+     * applying: the pull stops with a NexusError (see RefusalReason) when a segment
+     * - is not strictly after the previous one (replayed or reordered: `seq-order`);
+     * - is signed by a device outside `trustedSigners` (`unknown-signer`), or its signature fails over the
+     *   stream, replica, device, position, ciphertext hash and metadata hash (`bad-signature`);
+     * - belongs to a replica pinned to another device (`replica-device`), repeats a replicaSeq
+     *   (`replica-replay`) or skips one (`replica-gap`);
+     * - is signed by a revoked key past its revocation pin (`revoked-signer`);
+     * - has bytes that do not match its hash (`hash-mismatch`, `blob-hash`, `blob-size`) or fail to decrypt.
+     * Returns the next cursor; persist it with the applied ops, together with the TrustState returned by the
+     * certifiedSigners call that built `trustedSigners`, in the same local transaction. Nothing in core does
+     * this yet; the caller must.
+     */
+    async pull(cursor, trustedSigners, limit = 200) {
+        if (!Number.isSafeInteger(cursor.after) || cursor.after < 0)
+            throw refuse('E_VALIDATION', 'page', 'cursor.after must be a non-negative integer');
+        if (!Number.isInteger(limit) || limit < 1 || limit > MAX_PULL_LIMIT)
+            throw refuse('E_VALIDATION', 'page', `limit must be between 1 and ${MAX_PULL_LIMIT}`);
+        const page = await this.o.http.request('GET', `${this.base}/segments?after=${cursor.after}&limit=${limit}`, PullSegmentsResult);
+        if (page.streamId !== this.o.streamId)
+            throw refuse('E_PROTOCOL', 'page', 'pull answered for another stream');
+        if (page.segments.length > limit)
+            throw refuse('E_PROTOCOL', 'page', 'pull returned more than the limit');
+        const replicas = {};
+        for (const [id, r] of Object.entries(cursor.replicas))
+            replicas[id] = { ...r };
+        let last = cursor.after;
+        const out = [];
+        for (const s of page.segments) {
+            if (s.seq <= last) {
+                throw refuse('E_PROTOCOL', 'seq-order', `segment ${s.seq} is not after ${last}: replayed or reordered`);
+            }
+            const pin = replicas[s.replicaId];
+            if (pin && pin.deviceId !== s.deviceId) {
+                throw refuse('E_PROTOCOL', 'replica-device', `segment ${s.seq}: replica ${s.replicaId} belongs to device ${pin.deviceId}, not ${s.deviceId}`);
+            }
+            const expected = pin ? pin.replicaSeq + 1 : cursor.knowsAllReplicas ? 0 : s.replicaSeq;
+            if (s.replicaSeq !== expected) {
+                const replay = pin !== undefined && s.replicaSeq <= pin.replicaSeq;
+                throw refuse('E_PROTOCOL', replay ? 'replica-replay' : 'replica-gap', `segment ${s.seq}: replica ${s.replicaId} sent replicaSeq ${s.replicaSeq}, expected ${expected}`);
+            }
+            out.push(await this.verifyAndOpen(s, trustedSigners));
+            replicas[s.replicaId] = { deviceId: s.deviceId, replicaSeq: s.replicaSeq };
+            last = s.seq;
+        }
+        if (page.nextAfter !== last)
+            throw refuse('E_PROTOCOL', 'page', 'nextAfter does not match the last segment');
+        if (page.head < last)
+            throw refuse('E_PROTOCOL', 'page', 'head is behind the segments returned');
+        const next = { after: last, knowsAllReplicas: cursor.knowsAllReplicas, replicas };
+        return { segments: out, head: page.head, cursor: next };
+    }
+    async verifyAndOpen(s, trusted) {
+        const keys = signerKeys(trusted, s.deviceId);
+        if (keys.length === 0) {
+            throw refuse('E_FORBIDDEN', 'unknown-signer', `segment ${s.seq} is signed by an unknown device ${s.deviceId}`);
+        }
+        const metaHash = segmentMetaHash(s);
+        const msg = segmentSigningMessage({
+            streamId: this.o.streamId,
+            replicaId: s.replicaId,
+            deviceId: s.deviceId,
+            replicaSeq: s.replicaSeq,
+            segmentHash: s.segmentHash,
+            metaHash,
+        });
+        const signature = Buffer.from(s.signature, 'base64');
+        const signer = keys.find((k) => verifyEd25519(k.publicKey, msg, signature));
+        if (!signer) {
+            throw refuse('E_FORBIDDEN', 'bad-signature', `segment ${s.seq} has an invalid signature`);
+        }
+        const pinned = signer.pin?.replicas[s.replicaId];
+        if (signer.pin && (pinned === undefined || s.replicaSeq > pinned)) {
+            throw refuse('E_FORBIDDEN', 'revoked-signer', `segment ${s.seq} was signed by a revoked key past its pin (replica ${s.replicaId}, replicaSeq ${s.replicaSeq})`);
+        }
+        if ((s.ciphertext === null) === (s.blobSha256 === null)) {
+            throw refuse('E_PROTOCOL', 'payload', `segment ${s.seq} must carry exactly one of ciphertext or blob`);
+        }
+        const ciphertext = s.ciphertext !== null
+            ? Buffer.from(s.ciphertext, 'base64')
+            : await this.downloadSegmentBlob(s);
+        if (sha256Hex(ciphertext) !== s.segmentHash) {
+            throw refuse('E_BLOB_INTEGRITY', 'hash-mismatch', `segment ${s.seq} ciphertext does not match its hash`);
+        }
+        const plaintext = this.decrypt(ciphertext, 'segment', segmentContext(this.o.streamId, s.replicaId, s.replicaSeq, metaHash), `segment ${s.seq}`);
+        return {
+            seq: s.seq,
+            replicaId: s.replicaId,
+            replicaSeq: s.replicaSeq,
+            deviceId: s.deviceId,
+            plaintext,
+            meta: metaOf(s),
+        };
+    }
+    decrypt(ciphertext, purpose, context, what) {
+        try {
+            return open(this.o.key, ciphertext, purpose, context);
+        }
+        catch (err) {
+            if (err instanceof DecryptError)
+                throw refuse('E_BLOB_INTEGRITY', 'decrypt', `${what} does not decrypt`);
+            throw err;
+        }
+    }
+    /**
+     * Encrypt, upload and sign a checkpoint bundle, then register it. The client mints the checkpoint id,
+     * because the signature and the bundle's AAD both cover it. `cursor` is this replica's pull cursor at
+     * the point the bundle captures: it gives coversSeq and the signed replica map, so it must know every
+     * replica. The server verifies the signature and the replica map, and refuses lineage breaks and
+     * regressions. A retry of the same checkpoint returns it again.
+     */
+    async pushCheckpoint(args) {
+        const { streamId, replicaId, deviceId } = this.o;
+        if (!args.cursor.knowsAllReplicas)
+            throw refuse('E_VALIDATION', 'checkpoint-replicas', 'a checkpoint needs a cursor that knows every replica');
+        const replicas = {};
+        for (const [id, r] of Object.entries(args.cursor.replicas)) {
+            replicas[id] = { deviceId: r.deviceId, lastReplicaSeq: r.replicaSeq };
+        }
+        const coversSeq = args.cursor.after;
+        const checkpointId = uuidv7();
+        const ciphertext = seal(this.o.key, args.bundle, 'checkpoint', checkpointContext(streamId, checkpointId, coversSeq));
+        const blobSha256 = await this.uploadBlob(ciphertext, 'checkpoint');
+        const record = {
+            checkpointId,
+            streamId,
+            parentCheckpointId: args.parentCheckpointId,
+            replicaId,
+            deviceId,
+            coversSeq,
+            manifest: args.manifest,
+            replicas,
+            blobSha256,
+            sizeBytes: ciphertext.length,
+        };
+        const signature = signEd25519(this.o.signing, checkpointSigningMessage(checkpointParts(record))).toString('base64');
+        const { streamId: _stream, ...body } = record;
+        const res = await this.o.http.request('POST', `${this.base}/checkpoints`, CreateCheckpointResult, {
+            ...body,
+            signature,
+        });
+        if (res.checkpoint.checkpointId !== checkpointId || res.checkpoint.signature !== signature) {
+            throw refuse('E_PROTOCOL', 'payload', 'the server recorded a different checkpoint');
+        }
+        return res.checkpoint;
+    }
+    /**
+     * Check a checkpoint record: it belongs to this stream, and a trusted key signed every field that
+     * matters (ids, lineage, coversSeq, manifest, replica map, bundle hash and size). Accepted signers:
+     * - the author, with a live key, or with a revoked key whose pin for this stream covers coversSeq;
+     * - otherwise, any live device that endorsed (re-signed) it.
+     */
+    verifyCheckpoint(cp, trustedSigners) {
+        if (cp.streamId !== this.o.streamId) {
+            throw refuse('E_PROTOCOL', 'checkpoint-stream', `checkpoint ${cp.checkpointId} belongs to another stream`);
+        }
+        const parts = checkpointParts(cp);
+        const endorsed = cp.endorsements.some((e) => {
+            const msg = checkpointEndorsementMessage(e.deviceId, parts);
+            const sig = Buffer.from(e.signature, 'base64');
+            return liveKeys(trustedSigners, e.deviceId).some((k) => verifyEd25519(k.publicKey, msg, sig));
+        });
+        const keys = signerKeys(trustedSigners, cp.deviceId);
+        const msg = checkpointSigningMessage(parts);
+        const sig = Buffer.from(cp.signature, 'base64');
+        const author = keys.find((k) => verifyEd25519(k.publicKey, msg, sig));
+        const pinned = author?.pin?.checkpoints[cp.streamId];
+        const authorOk = author !== undefined &&
+            (author.pin === null || (pinned !== undefined && cp.coversSeq <= pinned));
+        if (authorOk || endorsed)
+            return;
+        if (keys.length === 0) {
+            throw refuse('E_FORBIDDEN', 'unknown-signer', `checkpoint ${cp.checkpointId} is signed by an unknown device ${cp.deviceId}`);
+        }
+        if (!author) {
+            throw refuse('E_FORBIDDEN', 'bad-signature', `checkpoint ${cp.checkpointId} has an invalid signature`);
+        }
+        throw refuse('E_FORBIDDEN', 'revoked-signer', `checkpoint ${cp.checkpointId} was signed by a revoked key past its pin, and no live device endorsed it`);
+    }
+    /**
+     * Re-sign (endorse) a checkpoint with this device's key, after checking it against `trustedSigners`,
+     * for example so that a checkpoint written by a device about to be revoked stays restorable without its pin.
+     */
+    async endorseCheckpoint(cp, trustedSigners) {
+        this.verifyCheckpoint(cp, trustedSigners);
+        const signature = signEd25519(this.o.signing, checkpointEndorsementMessage(this.o.deviceId, checkpointParts(cp))).toString('base64');
+        const res = await this.o.http.request('POST', `${this.base}/checkpoints/${cp.checkpointId}/endorsements`, CreateCheckpointResult, { deviceId: this.o.deviceId, signature });
+        return res.checkpoint;
+    }
+    /**
+     * Download, verify and decrypt a checkpoint bundle (point-in-time restore). `minCoversSeq` is the
+     * highest checkpoint coversSeq this replica has already seen (the caller persists it): an older
+     * checkpoint is refused, so the server cannot roll the replica back. The returned cursor resumes the
+     * pull after the checkpoint, seeded from its signed replica map.
+     */
+    async restoreCheckpoint(checkpointId, trustedSigners, opts = {}) {
+        if (!CheckpointId.safeParse(checkpointId).success)
+            throw refuse('E_VALIDATION', 'payload', 'not a checkpoint id');
+        const list = await this.o.http.request('GET', `${this.base}/checkpoints`, ListCheckpointsResult);
+        const cp = list.checkpoints.find((c) => c.checkpointId === checkpointId);
+        if (!cp)
+            throw new NexusError('E_NOT_FOUND', 'checkpoint not found', 404, null);
+        this.verifyCheckpoint(cp, trustedSigners);
+        if (cp.coversSeq < (opts.minCoversSeq ?? 0)) {
+            throw refuse('E_PROTOCOL', 'checkpoint-rollback', `checkpoint ${cp.checkpointId} covers seq ${cp.coversSeq}, older than ${opts.minCoversSeq} already seen`);
+        }
+        const dl = await this.o.http.request('GET', `${this.base}/checkpoints/${cp.checkpointId}/download`, BlobDownload);
+        if (dl.sha256 !== cp.blobSha256 || dl.sizeBytes !== cp.sizeBytes) {
+            throw refuse('E_BLOB_INTEGRITY', 'blob-hash', 'checkpoint download names a different bundle');
+        }
+        const ciphertext = await this.down(dl.url, cp.sizeBytes);
+        if (ciphertext.length !== cp.sizeBytes) {
+            throw refuse('E_BLOB_INTEGRITY', 'blob-size', 'checkpoint bundle does not match its size');
+        }
+        if (sha256Hex(ciphertext) !== cp.blobSha256) {
+            throw refuse('E_BLOB_INTEGRITY', 'blob-hash', 'checkpoint bundle does not match its hash');
+        }
+        const bundle = this.decrypt(ciphertext, 'checkpoint', checkpointContext(this.o.streamId, cp.checkpointId, cp.coversSeq), `checkpoint ${cp.checkpointId}`);
+        return { bundle, checkpoint: cp, cursor: cursorFromCheckpoint(cp) };
+    }
+    async uploadBlob(bytes, purpose) {
+        const sha256 = sha256Hex(bytes);
+        const pre = await this.o.http.request('POST', '/v1/blobs/presign', PresignUploadResult, {
+            sha256,
+            sizeBytes: bytes.length,
+            purpose,
+        });
+        if (!pre.alreadyPresent) {
+            if (!pre.uploadUrl || !pre.uploadHeaders)
+                throw new NexusError('E_INTERNAL', 'presign returned no URL', 0, null);
+            await this.up(pre.uploadUrl, pre.uploadHeaders, bytes);
+            const done = await this.o.http.request('POST', `/v1/blobs/${sha256}/complete`, CompleteUploadResult);
+            if (done.sha256 !== sha256)
+                throw refuse('E_PROTOCOL', 'payload', 'upload completed for another blob');
+        }
+        return sha256;
+    }
+    /**
+     * Download a segment stored as a blob. The blob may have been uploaded by another member, so it is
+     * fetched through the stream (`GET …/segments/:seq/blob`), not the caller's own blob scope. At most the
+     * announced size is read, and the bytes must match that size and the segment's sha256.
+     */
+    async downloadSegmentBlob(s) {
+        if (!Number.isSafeInteger(s.seq) || s.seq < 1)
+            throw refuse('E_VALIDATION', 'payload', 'invalid segment seq');
+        if (!s.blobSha256)
+            throw refuse('E_VALIDATION', 'payload', `segment ${s.seq} is inline, not a blob`);
+        const r = await this.o.http.request('GET', `${this.base}/segments/${s.seq}/blob`, BlobDownload);
+        if (r.sha256 !== s.blobSha256) {
+            throw refuse('E_BLOB_INTEGRITY', 'blob-hash', `segment ${s.seq} blob download names a different sha256`);
+        }
+        if (r.sizeBytes > this.maxSegmentBlobBytes) {
+            throw refuse('E_PAYLOAD_TOO_LARGE', 'too-large', `segment ${s.seq} blob exceeds the client limit`);
+        }
+        const bytes = await this.down(r.url, r.sizeBytes);
+        if (bytes.length !== r.sizeBytes) {
+            throw refuse('E_BLOB_INTEGRITY', 'blob-size', `segment ${s.seq} blob does not match its size`);
+        }
+        if (sha256Hex(bytes) !== s.blobSha256) {
+            throw refuse('E_BLOB_INTEGRITY', 'blob-hash', `segment ${s.seq} blob does not match its sha256`);
+        }
+        return bytes;
+    }
+}
+//# sourceMappingURL=journal.js.map

package/dist/cloud/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/cloud/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mBAAmB,EACnB,YAAY,EAEZ,YAAY,EACZ,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,cAAc,EAEd,mBAAmB,EACnB,kBAAkB,GAInB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,YAAY,EAEZ,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,WAAW,EACX,MAAM,EACN,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,WAAW,EACX,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,QAAQ,EAAkB,UAAU,EAAuB,MAAM,WAAW,CAAC;AACtF,OAAO,EAEL,4BAA4B,EAC5B,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EAEjB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAiCtB,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAE,MAAqB,EAAE,OAAe,EAAE,EAAE,CAC/E,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAErD,SAAS,WAAW,CAAC,SAAoB;IACvC,OAAO,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,MAAM,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,wBAAwB,GAAG,CAAC,MAAM,EAAE,EACpC,GAAG,CAAC,MAAM,EACV,IAAI,CACL,CAAC;IACN,CAAC,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,SAAoB;IACnD,OAAO,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,MAAM,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,4BAA4B,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,yBAAyB,GAAG,CAAC,MAAM,EAAE,EACrC,GAAG,CAAC,MAAM,EACV,IAAI,CACL,CAAC;QACJ,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,MAAM,CACX,qBAAqB,EACrB,WAAW,EACX,iCAAiC,QAAQ,QAAQ,CAClD,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;YAAE,MAAM,QAAQ,EAAE,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;YAC7B,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;gBACxB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACtC,MAAM,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AA+BD,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAe,EAAE,CAAC,CAAC;IAClD,KAAK,EAAE,CAAC;IACR,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,EAAE;CACb,CAAC,CAAC;AAEH,qGAAqG;AACrG,MAAM,UAAU,oBAAoB,CAAC,EAA8C;IACjF,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,OAAiG;IAEjG,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/D,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACzB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC;gBAC5D,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD,MAAM,8BAA8B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEnD,yGAAyG;AACzG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnF,gFAAgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvF,MAAM,eAAe,GAAG,CACtB,EAAgE,EACxC,EAAE,CAAC,CAAC;IAC5B,QAAQ,EAAE,EAAE,CAAC,QAAQ;IACrB,YAAY,EAAE,EAAE,CAAC,YAAY;IAC7B,kBAAkB,EAAE,EAAE,CAAC,kBAAkB;IACzC,SAAS,EAAE,EAAE,CAAC,SAAS;IACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ;IACrB,SAAS,EAAE,EAAE,CAAC,SAAS;IACvB,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC;IACvC,UAAU,EAAE,EAAE,CAAC,UAAU;IACzB,SAAS,EAAE,EAAE,CAAC,SAAS;CACxB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CACrB,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,EAAE,CAAC,eAAe,QAAQ,KAAK,SAAS,KAAK,UAAU,KAAK,QAAQ,EAAE,CAAC;AACzE,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAE,YAAoB,EAAE,SAAiB,EAAE,EAAE,CACtF,kBAAkB,QAAQ,KAAK,YAAY,KAAK,SAAS,EAAE,CAAC;AAE9D,MAAM,MAAM,GAAG,CAAC,CAAoB,EAAe,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,aAAa,EAAE,CAAC,CAAC,aAAa;CAC/B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,OAAO,OAAO;IAMW;IALZ,EAAE,CAAW;IACb,IAAI,CAAa;IACjB,IAAI,CAAS;IACb,mBAAmB,CAAS;IAE7C,YAA6B,CAAiB;QAAjB,MAAC,GAAD,CAAC,CAAgB;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,eAAe,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;IACrF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,SAAqB,EACrB,IAAiB,EACjB,MAAe;QAEf,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,WAAW,CAC3B,IAAI,CAAC,CAAC,CAAC,OAAO,EACd,qBAAqB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAC5F,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,GAAyB;YACjC,SAAS;YACT,QAAQ;YACR,WAAW;YACX,UAAU;YACV,SAAS;YACT,GAAG,MAAM,CAAC,IAAI,CAAC;YACf,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,wBAAwB;gBAC9C,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;SACnD,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,UAAkB,EAAE,SAAqB,EAAE,IAAiB;QACtE,OAAO,IAAI,CACT,IAAI,CAAC,CAAC,CAAC,GAAG,EACV,SAAS,EACT,SAAS,EACT,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CACrF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,IAAI,CAAC,MAAkB,EAAE,cAA8B,EAAE,KAAK,GAAG,GAAG;QACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC;YACzD,MAAM,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,6CAA6C,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,cAAc;YACjE,MAAM,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,+BAA+B,cAAc,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CACpC,KAAK,EACL,GAAG,IAAI,CAAC,IAAI,mBAAmB,MAAM,CAAC,KAAK,UAAU,KAAK,EAAE,EAC5D,kBAAkB,CACnB,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ;YACnC,MAAM,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK;YAC9B,MAAM,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,mCAAmC,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/E,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,MAAM,GAAG,GAAoB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,MAAM,CACV,YAAY,EACZ,WAAW,EACX,WAAW,CAAC,CAAC,GAAG,iBAAiB,IAAI,yBAAyB,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACvC,MAAM,MAAM,CACV,YAAY,EACZ,gBAAgB,EAChB,WAAW,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,SAAS,sBAAsB,GAAG,CAAC,QAAQ,SAAS,CAAC,CAAC,QAAQ,EAAE,CAChG,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YACvF,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC;gBACnE,MAAM,MAAM,CACV,YAAY,EACZ,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EACzC,WAAW,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,SAAS,oBAAoB,CAAC,CAAC,UAAU,cAAc,QAAQ,EAAE,CACjG,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;YACtD,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;YAC3E,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;YACzB,MAAM,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,2CAA2C,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;YAClB,MAAM,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QAC9F,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,CAAU,EAAE,OAAuB;QAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,CACV,aAAa,EACb,gBAAgB,EAChB,WAAW,CAAC,CAAC,GAAG,mCAAmC,CAAC,CAAC,QAAQ,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,qBAAqB,CAAC;YAChC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ;YACzB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,CACV,aAAa,EACb,gBAAgB,EAChB,WAAW,CAAC,CAAC,GAAG,sDAAsD,CAAC,CAAC,SAAS,gBAAgB,CAAC,CAAC,UAAU,GAAG,CACjH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,CACV,YAAY,EACZ,SAAS,EACT,WAAW,CAAC,CAAC,GAAG,+CAA+C,CAChE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GACd,CAAC,CAAC,UAAU,KAAK,IAAI;YACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC;YACrC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,MAAM,CACV,kBAAkB,EAClB,eAAe,EACf,WAAW,CAAC,CAAC,GAAG,qCAAqC,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAC5B,UAAU,EACV,SAAS,EACT,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,EACpE,WAAW,CAAC,CAAC,GAAG,EAAE,CACnB,CAAC;QACF,OAAO;YACL,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS;YACT,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;SAChB,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,UAAkB,EAAE,OAAe,EAAE,OAAe,EAAE,IAAY;QAChF,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY;gBAC7B,MAAM,MAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;YAC1E,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,IAKpB;QACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAC/B,MAAM,MAAM,CACV,cAAc,EACd,qBAAqB,EACrB,sDAAsD,CACvD,CAAC;QACJ,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CACrB,IAAI,CAAC,CAAC,CAAC,GAAG,EACV,IAAI,CAAC,MAAM,EACX,YAAY,EACZ,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CACrD,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG;YACb,YAAY;YACZ,QAAQ;YACR,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,SAAS;YACT,QAAQ;YACR,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ;YACR,UAAU;YACV,SAAS,EAAE,UAAU,CAAC,MAAM;SAC7B,CAAC;QACF,MAAM,SAAS,GAAG,WAAW,CAC3B,IAAI,CAAC,CAAC,CAAC,OAAO,EACd,wBAAwB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAClD,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CACnC,MAAM,EACN,GAAG,IAAI,CAAC,IAAI,cAAc,EAC1B,sBAAsB,EACtB;YACE,GAAG,IAAI;YACP,SAAS;SACV,CACF,CAAC;QACF,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC3F,MAAM,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,4CAA4C,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,GAAG,CAAC,UAAU,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,EAAc,EAAE,cAA8B;QAC7D,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,CACV,YAAY,EACZ,mBAAmB,EACnB,cAAc,EAAE,CAAC,YAAY,4BAA4B,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1C,MAAM,GAAG,GAAG,4BAA4B,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAA0B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GACZ,MAAM,KAAK,SAAS;YACpB,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC;QAC5E,IAAI,QAAQ,IAAI,QAAQ;YAAE,OAAO;QACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,CACV,aAAa,EACb,gBAAgB,EAChB,cAAc,EAAE,CAAC,YAAY,mCAAmC,EAAE,CAAC,QAAQ,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,CACV,aAAa,EACb,eAAe,EACf,cAAc,EAAE,CAAC,YAAY,2BAA2B,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,CACV,aAAa,EACb,gBAAgB,EAChB,cAAc,EAAE,CAAC,YAAY,2EAA2E,CACzG,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,EAAc,EAAE,cAA8B;QACpE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,WAAW,CAC3B,IAAI,CAAC,CAAC,CAAC,OAAO,EACd,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CACnE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CACnC,MAAM,EACN,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC,YAAY,eAAe,EAC1D,sBAAsB,EACtB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CACzC,CAAC;QACF,OAAO,GAAG,CAAC,UAAU,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,cAA8B,EAC9B,OAAkC,EAAE;QAEpC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO;YAC/C,MAAM,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CACpC,KAAK,EACL,GAAG,IAAI,CAAC,IAAI,cAAc,EAC1B,qBAAqB,CACtB,CAAC;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,CACV,YAAY,EACZ,qBAAqB,EACrB,cAAc,EAAE,CAAC,YAAY,eAAe,EAAE,CAAC,SAAS,gBAAgB,IAAI,CAAC,YAAY,eAAe,CACzG,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAClC,KAAK,EACL,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC,YAAY,WAAW,EACtD,YAAY,CACb,CAAC;QACF,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,SAAS,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC;YACjE,MAAM,MAAM,CAAC,kBAAkB,EAAE,WAAW,EAAE,8CAA8C,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,kBAAkB,EAAE,WAAW,EAAE,2CAA2C,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,kBAAkB,EAAE,WAAW,EAAE,2CAA2C,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CACzB,UAAU,EACV,YAAY,EACZ,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,EACjE,cAAc,EAAE,CAAC,YAAY,EAAE,CAChC,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,KAAa,EACb,OAAgD;QAEhD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,mBAAmB,EAAE;YACtF,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa;gBACtC,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,yBAAyB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACzE,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CACpC,MAAM,EACN,aAAa,MAAM,WAAW,EAC9B,oBAAoB,CACrB,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBACxB,MAAM,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,mCAAmC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,CAAsC;QAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;YAC3C,MAAM,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,UAAU;YACf,MAAM,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,CAAC,CAAC;QAChG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,CACV,kBAAkB,EAClB,WAAW,EACX,WAAW,CAAC,CAAC,GAAG,yCAAyC,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3C,MAAM,MAAM,CACV,qBAAqB,EACrB,WAAW,EACX,WAAW,CAAC,CAAC,GAAG,gCAAgC,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,CACV,kBAAkB,EAClB,WAAW,EACX,WAAW,CAAC,CAAC,GAAG,+BAA+B,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,MAAM,CACV,kBAAkB,EAClB,WAAW,EACX,WAAW,CAAC,CAAC,GAAG,iCAAiC,CAClD,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}