@cloud-copilot/iam-lens 0.1.136 → 0.1.138

package/dist/cjs/principalCan/principalConstraints.js

@@ -0,0 +1,472 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.anyPrincipalConstraint = anyPrincipalConstraint;
+exports.principalConstraint = principalConstraint;
+exports.notPrincipalConstraint = notPrincipalConstraint;
+exports.normalizePrincipalConstraint = normalizePrincipalConstraint;
+exports.normalizePermissionPrincipals = normalizePermissionPrincipals;
+exports.principalIncludes = principalIncludes;
+exports.principalConstraintsOverlap = principalConstraintsOverlap;
+exports.unionPrincipalConstraints = unionPrincipalConstraints;
+exports.intersectPrincipalConstraints = intersectPrincipalConstraints;
+exports.subtractPrincipalConstraint = subtractPrincipalConstraint;
+exports.principalArgsForConstraint = principalArgsForConstraint;
+exports.canonicalPrincipal = canonicalPrincipal;
+exports.principalsFromRawPolicyValue = principalsFromRawPolicyValue;
+exports.principalsToPolicyValue = principalsToPolicyValue;
+const iam_utils_1 = require("@cloud-copilot/iam-utils");
+const principalTypes = ['AWS', 'Service', 'Federated', 'CanonicalUser'];
+/**
+ * Build an unconstrained principal dimension.
+ *
+ * @param explicit - True when the source policy explicitly used Principal: "*".
+ * @returns The unconstrained principal constraint.
+ */
+function anyPrincipalConstraint(explicit) {
+    return { kind: 'any', explicit };
+}
+/**
+ * Build a positive principal constraint.
+ *
+ * @param principals - The positive principal values.
+ * @returns A normalized principal constraint.
+ */
+function principalConstraint(principals) {
+    return normalizePrincipalConstraint(principals, undefined);
+}
+/**
+ * Build a negative principal constraint.
+ *
+ * @param notPrincipals - The excluded principal values.
+ * @returns A normalized not-principal constraint.
+ */
+function notPrincipalConstraint(notPrincipals) {
+    return normalizePrincipalConstraint(undefined, notPrincipals);
+}
+/**
+ * Normalize optional Principal and NotPrincipal values into an internal constraint.
+ *
+ * @param principal - Positive principals, if present.
+ * @param notPrincipal - Negative principals, if present.
+ * @returns The normalized principal constraint.
+ */
+function normalizePrincipalConstraint(principal, notPrincipal) {
+    if (principal && notPrincipal) {
+        throw new Error('Permission must have a principal or notPrincipal, not both.');
+    }
+    if (principal) {
+        const normalized = normalizePermissionPrincipals(principal);
+        if (normalized.wildcard)
+            return { kind: 'any', explicit: true };
+        return { kind: 'principal', principals: normalized };
+    }
+    if (notPrincipal) {
+        const normalized = normalizePermissionPrincipals(notPrincipal);
+        if (normalized.wildcard)
+            return { kind: 'notPrincipal', principals: normalized };
+        return { kind: 'notPrincipal', principals: normalized };
+    }
+    return { kind: 'any', explicit: false };
+}
+/**
+ * Normalize principal values by validating wildcard usage, de-duplicating values, and normalizing STS sessions.
+ *
+ * @param principals - Principal values to normalize.
+ * @returns Normalized principal values.
+ */
+function normalizePermissionPrincipals(principals) {
+    const hasTypedValues = principalTypes.some((type) => (principals[type]?.length ?? 0) > 0);
+    if (principals.wildcard && hasTypedValues) {
+        throw new Error('Permission principals cannot combine wildcard: true with typed principal values');
+    }
+    const normalized = {};
+    if (principals.wildcard) {
+        normalized.wildcard = true;
+    }
+    for (const type of principalTypes) {
+        const values = principals[type];
+        if (values && values.length > 0) {
+            normalized[type] = Array.from(new Set(values.map((value) => normalizePrincipalValue(type, value))));
+        }
+    }
+    if (!normalized.wildcard && principalEntries(normalized).length === 0) {
+        throw new Error('Permission principals must contain at least one principal value');
+    }
+    return normalized;
+}
+/**
+ * Determine whether one principal constraint fully includes another.
+ *
+ * @param a - Candidate including constraint.
+ * @param b - Candidate included constraint.
+ * @returns True when every principal in b is also in a.
+ */
+function principalIncludes(a, b) {
+    if (a.kind === 'any')
+        return true;
+    if (b.kind === 'any')
+        return constraintIsUniversal(a);
+    if (a.kind === 'principal' && b.kind === 'principal') {
+        return entriesIncludeAll(principalEntries(a.principals), principalEntries(b.principals));
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'principal') {
+        return principalEntries(b.principals).every((entry) => !principalEntries(a.principals).some((excluded) => entriesOverlap(excluded, entry)));
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'notPrincipal') {
+        return entriesIncludeAll(principalEntries(b.principals), principalEntries(a.principals));
+    }
+    if (a.kind === 'principal' && b.kind === 'notPrincipal') {
+        return constraintIsUniversal(a);
+    }
+    return false;
+}
+/**
+ * Determine whether two principal constraints have any possible overlap.
+ *
+ * @param a - First principal constraint.
+ * @param b - Second principal constraint.
+ * @returns True when at least one principal can satisfy both constraints.
+ */
+function principalConstraintsOverlap(a, b) {
+    return intersectPrincipalConstraints(a, b).length > 0;
+}
+/**
+ * Return compact principal constraints representing a union.
+ *
+ * @param a - First principal constraint.
+ * @param b - Second principal constraint.
+ * @returns One or more constraints representing the union.
+ */
+function unionPrincipalConstraints(a, b) {
+    if (principalIncludes(a, b))
+        return [a];
+    if (principalIncludes(b, a))
+        return [b];
+    if (a.kind === 'any')
+        return [{ kind: 'any', explicit: a.explicit }];
+    if (b.kind === 'any')
+        return [{ kind: 'any', explicit: b.explicit }];
+    if (a.kind === 'principal' && b.kind === 'principal') {
+        return [{ kind: 'principal', principals: mergePrincipals(a.principals, b.principals) }];
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'notPrincipal') {
+        const intersection = intersectPrincipalMaps(a.principals, b.principals);
+        return intersection
+            ? [{ kind: 'notPrincipal', principals: intersection }]
+            : [{ kind: 'any', explicit: true }];
+    }
+    const positive = a.kind === 'principal' ? a : b.kind === 'principal' ? b : undefined;
+    const negative = a.kind === 'notPrincipal' ? a : b.kind === 'notPrincipal' ? b : undefined;
+    if (positive && negative) {
+        const remainingExclusions = subtractPrincipalMap(negative.principals, positive.principals);
+        return remainingExclusions
+            ? [{ kind: 'notPrincipal', principals: remainingExclusions }]
+            : [{ kind: 'any', explicit: true }];
+    }
+    return [a, b];
+}
+/**
+ * Return constraints representing the intersection of two principal constraints.
+ *
+ * @param a - First principal constraint.
+ * @param b - Second principal constraint.
+ * @returns Constraints for the overlap, or an empty array when disjoint.
+ */
+function intersectPrincipalConstraints(a, b) {
+    if (a.kind === 'any')
+        return [b];
+    if (b.kind === 'any')
+        return [a];
+    if (a.kind === 'principal' && b.kind === 'principal') {
+        const intersection = intersectPrincipalMaps(a.principals, b.principals);
+        return intersection ? [{ kind: 'principal', principals: intersection }] : [];
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'notPrincipal') {
+        return [{ kind: 'notPrincipal', principals: mergePrincipals(a.principals, b.principals) }];
+    }
+    const positive = a.kind === 'principal' ? a : b.kind === 'principal' ? b : undefined;
+    const negative = a.kind === 'notPrincipal' ? a : b.kind === 'notPrincipal' ? b : undefined;
+    if (positive && negative) {
+        const remaining = subtractPrincipalMap(positive.principals, negative.principals);
+        return remaining ? [{ kind: 'principal', principals: remaining }] : [];
+    }
+    return [];
+}
+/**
+ * Return constraints for allow minus deny on the principal dimension.
+ *
+ * @param allow - Allow principal constraint.
+ * @param deny - Deny principal constraint.
+ * @returns Principal constraints that remain allowed.
+ */
+function subtractPrincipalConstraint(allow, deny) {
+    if (!principalConstraintsOverlap(allow, deny))
+        return [allow];
+    if (principalIncludes(deny, allow))
+        return [];
+    if (constraintIsUniversal(allow) && deny.kind === 'principal') {
+        return [{ kind: 'notPrincipal', principals: deny.principals }];
+    }
+    if (constraintIsUniversal(allow) && deny.kind === 'notPrincipal') {
+        return [{ kind: 'principal', principals: deny.principals }];
+    }
+    if (allow.kind === 'principal' && deny.kind === 'principal') {
+        const remaining = subtractPrincipalMap(allow.principals, deny.principals);
+        return remaining ? [{ kind: 'principal', principals: remaining }] : [];
+    }
+    if (allow.kind === 'notPrincipal' && deny.kind === 'principal') {
+        return [
+            { kind: 'notPrincipal', principals: mergePrincipals(allow.principals, deny.principals) }
+        ];
+    }
+    if (allow.kind === 'notPrincipal' && deny.kind === 'notPrincipal') {
+        const remaining = subtractPrincipalMap(deny.principals, allow.principals);
+        return remaining ? [{ kind: 'principal', principals: remaining }] : [];
+    }
+    return [allow];
+}
+/**
+ * Convert a constraint into Permission constructor principal arguments.
+ *
+ * @param constraint - The principal constraint to convert.
+ * @returns Principal and NotPrincipal fields for a Permission.
+ */
+function principalArgsForConstraint(constraint) {
+    if (constraint.kind === 'any') {
+        return {
+            principal: constraint.explicit ? { wildcard: true } : undefined,
+            notPrincipal: undefined
+        };
+    }
+    if (constraint.kind === 'principal') {
+        return { principal: constraint.principals, notPrincipal: undefined };
+    }
+    return { principal: undefined, notPrincipal: constraint.principals };
+}
+/**
+ * Convert principal values to a stable JSON value for bucketing policy statements.
+ *
+ * @param principal - Principal values to canonicalize.
+ * @returns A JSON-compatible canonical representation.
+ */
+function canonicalPrincipal(principal) {
+    if (!principal)
+        return null;
+    const normalized = normalizePermissionPrincipals(principal);
+    const out = {};
+    if (normalized.wildcard)
+        out.wildcard = true;
+    for (const type of principalTypes) {
+        if (normalized[type])
+            out[type] = [...normalized[type]].sort();
+    }
+    return out;
+}
+/**
+ * Convert a Principal/NotPrincipal raw policy value into PermissionPrincipals.
+ *
+ * @param value - The raw Principal or NotPrincipal value.
+ * @returns Permission principal values.
+ */
+function principalsFromRawPolicyValue(value) {
+    if (value === undefined)
+        return undefined;
+    if (value === '*')
+        return { wildcard: true };
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const result = {};
+    const record = value;
+    for (const type of principalTypes) {
+        const rawValues = record[type];
+        if (rawValues === undefined)
+            continue;
+        result[type] = Array.isArray(rawValues) ? [...rawValues] : [rawValues];
+    }
+    return normalizePermissionPrincipals(result);
+}
+/**
+ * Convert PermissionPrincipals into a raw policy Principal or NotPrincipal value.
+ *
+ * @param principals - Principal values to convert.
+ * @returns A raw policy value.
+ */
+function principalsToPolicyValue(principals) {
+    const normalized = normalizePermissionPrincipals(principals);
+    if (normalized.wildcard)
+        return '*';
+    const out = {};
+    for (const type of principalTypes) {
+        const values = normalized[type];
+        if (values)
+            out[type] = values.length === 1 ? values[0] : [...values];
+    }
+    return out;
+}
+function constraintIsUniversal(constraint) {
+    return (constraint.kind === 'any' ||
+        (constraint.kind === 'principal' && isWildcardPrincipals(constraint.principals)));
+}
+function isWildcardPrincipals(principals) {
+    return principals.wildcard === true || principals.AWS?.includes('*') === true;
+}
+function principalEntries(principals) {
+    if (principals.wildcard)
+        return [{ type: 'Any', value: '*', semanticKind: 'wildcard' }];
+    return principalTypes.flatMap((type) => (principals[type] ?? []).map((value) => entryForValue(type, value)));
+}
+function entriesIncludeAll(a, b) {
+    return b.every((bEntry) => a.some((aEntry) => entryIncludes(aEntry, bEntry)));
+}
+function entryIncludes(a, b) {
+    if (a.semanticKind === 'wildcard')
+        return true;
+    if (a.type === 'AWS' && a.value === '*')
+        return true;
+    if (a.type !== b.type)
+        return false;
+    if (a.value === b.value)
+        return true;
+    if (a.semanticKind === 'account' &&
+        b.accountIds?.some((accountId) => a.accountIds?.includes(accountId))) {
+        return true;
+    }
+    return false;
+}
+function entriesOverlap(a, b) {
+    return entryIncludes(a, b) || entryIncludes(b, a);
+}
+function mergePrincipals(a, b) {
+    if (isWildcardPrincipals(a) || isWildcardPrincipals(b))
+        return a.wildcard || b.wildcard ? { wildcard: true } : { AWS: ['*'] };
+    const merged = {};
+    for (const type of principalTypes) {
+        const values = [...(a[type] ?? []), ...(b[type] ?? [])];
+        if (values.length > 0)
+            merged[type] = Array.from(new Set(values.map((v) => normalizePrincipalValue(type, v))));
+    }
+    return normalizePermissionPrincipals(merged);
+}
+function intersectPrincipalMaps(a, b) {
+    if (isWildcardPrincipals(a))
+        return b;
+    if (isWildcardPrincipals(b))
+        return a;
+    const entriesA = principalEntries(a);
+    const entriesB = principalEntries(b);
+    const kept = [];
+    for (const aEntry of entriesA) {
+        for (const bEntry of entriesB) {
+            const intersection = intersectEntries(aEntry, bEntry);
+            if (intersection)
+                kept.push(intersection);
+        }
+    }
+    return principalsFromEntries(kept);
+}
+function subtractPrincipalMap(source, remove) {
+    if (isWildcardPrincipals(remove))
+        return undefined;
+    // Universal-source subtraction that needs a NotPrincipal residual is handled by
+    // subtractPrincipalConstraint before this positive-map helper is called.
+    if (isWildcardPrincipals(source))
+        return source;
+    const removeEntries = principalEntries(remove);
+    const kept = principalEntries(source).filter((entry) => !removeEntries.some((removeEntry) => entryIncludes(removeEntry, entry)));
+    return principalsFromEntries(kept);
+}
+function intersectEntries(a, b) {
+    if (!entriesOverlap(a, b))
+        return undefined;
+    if (entryIncludes(a, b))
+        return b;
+    if (entryIncludes(b, a))
+        return a;
+    return undefined;
+}
+function principalsFromEntries(entries) {
+    const out = {};
+    for (const entry of entries) {
+        if (entry.semanticKind === 'wildcard')
+            return { wildcard: true };
+        if (entry.type === 'Any')
+            return { wildcard: true };
+        const type = entry.type;
+        out[type] = [...(out[type] ?? []), entry.value];
+    }
+    for (const type of principalTypes) {
+        if (out[type])
+            out[type] = Array.from(new Set(out[type]));
+    }
+    return principalEntries(out).length > 0 ? normalizePermissionPrincipals(out) : undefined;
+}
+function entryForValue(type, value) {
+    const normalizedValue = normalizePrincipalValue(type, value);
+    if (normalizedValue === '*')
+        return { type, value: normalizedValue, semanticKind: 'wildcard' };
+    if (type === 'AWS') {
+        const accountId = accountIdForAwsPrincipal(normalizedValue);
+        if (/^\d{12}$/.test(normalizedValue) || normalizedValue.endsWith(':root')) {
+            return {
+                type,
+                value: normalizedValue,
+                semanticKind: 'account',
+                accountIds: accountId ? [accountId] : undefined
+            };
+        }
+        return {
+            type,
+            value: normalizedValue,
+            semanticKind: 'arn',
+            accountIds: accountId ? [accountId] : undefined
+        };
+    }
+    if (type === 'Service') {
+        return {
+            type,
+            value: normalizedValue,
+            semanticKind: 'service',
+            servicePrincipals: [normalizedValue]
+        };
+    }
+    if (type === 'Federated')
+        return { type, value: normalizedValue, semanticKind: 'federated' };
+    return { type, value: normalizedValue, semanticKind: 'canonicalUser' };
+}
+function normalizePrincipalValue(type, value) {
+    if (type !== 'AWS')
+        return value;
+    return normalizeStsAssumedRoleArn(value);
+}
+function accountIdForAwsPrincipal(value) {
+    if (/^\d{12}$/.test(value))
+        return value;
+    if (!value.startsWith('arn:'))
+        return undefined;
+    try {
+        return (0, iam_utils_1.splitArnParts)(value).accountId;
+    }
+    catch (_err) {
+        return undefined;
+    }
+}
+function normalizeStsAssumedRoleArn(value) {
+    if (!value.startsWith('arn:'))
+        return value;
+    let parts;
+    try {
+        parts = (0, iam_utils_1.splitArnParts)(value);
+    }
+    catch (_err) {
+        return value;
+    }
+    const resource = parts.resource ?? '';
+    if (parts.service !== 'sts' || !resource.startsWith('assumed-role/'))
+        return value;
+    const assumedRoleParts = resource.slice('assumed-role/'.length).split('/');
+    if (assumedRoleParts.length < 2)
+        return value;
+    const rolePathAndName = assumedRoleParts.slice(0, -1).join('/');
+    return `arn:${parts.partition}:iam::${parts.accountId}:role/${rolePathAndName}`;
+}
+//# sourceMappingURL=principalConstraints.js.map

package/dist/cjs/principalCan/principalConstraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalConstraints.js","sourceRoot":"","sources":["../../../src/principalCan/principalConstraints.ts"],"names":[],"mappings":";;AAyDA,wDAEC;AAQD,kDAIC;AAQD,wDAIC;AASD,oEAkBC;AAQD,sEA0BC;AASD,8CAuBC;AASD,kEAKC;AASD,8DA8BC;AASD,sEAwBC;AASD,kEA4BC;AAQD,gEAcC;AAQD,gDASC;AAQD,oEAaC;AAQD,0DAUC;AAzXD,wDAAwD;AAiDxD,MAAM,cAAc,GAA8B,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;AAElG;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,QAAiB;IACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CACjC,UAA4C;IAE5C,OAAO,4BAA4B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CACpC,aAA+C;IAE/C,OAAO,4BAA4B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,4BAA4B,CAC1C,SAA2C,EAC3C,YAA8C;IAE9C,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,UAAU,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAA;QAC3D,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC/D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACtD,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAA;QAC9D,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;QAChF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,6BAA6B,CAC3C,UAAgC;IAEhC,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACzF,IAAI,UAAU,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAyB,EAAE,CAAA;IAC3C,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC5B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAC3B,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CACrE,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,CAAsB,EAAE,CAAsB;IAC9E,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAErD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACxD,OAAO,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAC/F,CAAA;IACH,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3D,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACxD,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,2BAA2B,CACzC,CAAsB,EACtB,CAAsB;IAEtB,OAAO,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CACvC,CAAsB,EACtB,CAAsB;IAEtB,IAAI,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAEpE,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3D,MAAM,YAAY,GAAG,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACvE,OAAO,YAAY;YACjB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YACtD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC1F,OAAO,mBAAmB;YACxB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;YAC7D,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,6BAA6B,CAC3C,CAAsB,EACtB,CAAsB;IAEtB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAChC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAEhC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACvE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3D,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAChF,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,2BAA2B,CACzC,KAA0B,EAC1B,IAAyB;IAEzB,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAE7C,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9D,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACzE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;SACzF,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClE,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACzE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,UAA+B;IAIxE,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC/D,YAAY,EAAE,SAAS;SACxB,CAAA;IACH,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;IACtE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,UAAU,EAAE,CAAA;AACtE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,SAA2C;IAC5E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,UAAU,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAA;IAC3D,MAAM,GAAG,GAAoC,EAAE,CAAA;IAC/C,IAAI,UAAU,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAChE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAAC,KAAc;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEjF,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,KAA0C,CAAA;IACzD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,SAAS,KAAK,SAAS;YAAE,SAAQ;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,UAAgC;IACtE,MAAM,UAAU,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,UAAU,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAA;IAEnC,MAAM,GAAG,GAAsC,EAAE,CAAA;IACjD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC5D,OAAO,CACL,UAAU,CAAC,IAAI,KAAK,KAAK;QACzB,CAAC,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,oBAAoB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CACjF,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAgC;IAC5D,OAAO,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAgC;IACxD,IAAI,UAAU,CAAC,QAAQ;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAA;IACvF,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CACpE,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,CAA6B,EAAE,CAA6B;IACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,CAA2B,EAAE,CAA2B;IAC7E,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACpD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACnC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACpC,IACE,CAAC,CAAC,YAAY,KAAK,SAAS;QAC5B,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EACpE,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,CAA2B,EAAE,CAA2B;IAC9E,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,CAAuB,EAAE,CAAuB;IACvE,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;IACvE,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAC7B,CAAuB,EACvB,CAAuB;IAEvB,IAAI,oBAAoB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,IAAI,oBAAoB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACpC,MAAM,IAAI,GAA+B,EAAE,CAAA;IAC3C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACrD,IAAI,YAAY;gBAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA4B,EAC5B,MAA4B;IAE5B,IAAI,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAClD,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IAC/C,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CACnF,CAAA;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,gBAAgB,CACvB,CAA2B,EAC3B,CAA2B;IAE3B,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACjC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACjC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAmC;IAEnC,MAAM,GAAG,GAAyB,EAAE,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,UAAU;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B,EAAE,KAAa;IACjE,MAAM,eAAe,GAAG,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC5D,IAAI,eAAe,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,CAAA;IAC9F,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,wBAAwB,CAAC,eAAe,CAAC,CAAA;QAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,eAAe;gBACtB,YAAY,EAAE,SAAS;gBACvB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aAChD,CAAA;QACH,CAAC;QACD,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAChD,CAAA;IACH,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,CAAC,eAAe,CAAC;SACrC,CAAA;IACH,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,CAAA;IAC5F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,CAAA;AACxE,CAAC;AAED,SAAS,uBAAuB,CAAC,IAA6B,EAAE,KAAa;IAC3E,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAChC,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/C,IAAI,CAAC;QACH,OAAO,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAC,SAAS,CAAA;IACvC,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAuC,CAAA;IAC3C,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,yBAAa,EAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAA;IACrC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAA;IAClF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/D,OAAO,OAAO,KAAK,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,SAAS,eAAe,EAAE,CAAA;AACjF,CAAC"}

package/dist/esm/index.d.ts

@@ -8,6 +8,6 @@ export { simulateRequest, type SimulationRequest } from './simulate/simulate.js'
 export { whoCan, type WhoCanPrincipalScope, type ResourceAccessRequest, type WhoCanAllowed, type WhoCanResponse } from './whoCan/whoCan.js';
 export { WhoCanProcessor, type WhoCanProcessorConfig, type WhoCanProcessorRequest, type WhoCanSettledEvent, type WhoCanSettledSuccess, type WhoCanSettledError, type WorkerBootstrapPlugin } from './whoCan/WhoCanProcessor.js';
 export { type LightRequestAnalysis, type LightResourceAnalysis, type LightResourceAnalysisWithPattern, type SingleResourceLightRequestAnalysis, type WildcardResourceLightRequestAnalysis } from './whoCan/requestAnalysis.js';
-export { PermissionSet, buildPermissionSetFromPolicies, addPoliciesToPermissionSet, toPolicyStatements } from './principalCan/permissionSet.js';
-export { Permission, type PermissionEffect, type PermissionConditions } from './principalCan/permission.js';
+export { PermissionSet, buildPermissionSetFromPolicies, addPoliciesToPermissionSet, toPolicyStatements, type AddStatementToPermissionSetOptions } from './principalCan/permissionSet.js';
+export { Permission, type PermissionEffect, type PermissionConditions, type PermissionPrincipals, type PermissionPrincipalType } from './principalCan/permission.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,aAAa,EACb,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,aAAa,EACb,cAAc,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAChF,OAAO,EACL,MAAM,EACN,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EAC1C,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,aAAa,EACb,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,aAAa,EACb,cAAc,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAChF,OAAO,EACL,MAAM,EACN,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EAC1C,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAClB,KAAK,kCAAkC,EACxC,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC7B,MAAM,8BAA8B,CAAA"}

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EAGhB,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAGnB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,YAAY,EAA0B,MAAM,gCAAgC,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAE3E,OAAO,EAAE,eAAe,EAA0B,MAAM,wBAAwB,CAAA;AAChF,OAAO,EACL,MAAM,EAKP,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,eAAe,EAOhB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAMN,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,UAAU,EAGX,MAAM,8BAA8B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EAGhB,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAGnB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,YAAY,EAA0B,MAAM,gCAAgC,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAE3E,OAAO,EAAE,eAAe,EAA0B,MAAM,wBAAwB,CAAA;AAChF,OAAO,EACL,MAAM,EAKP,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,eAAe,EAOhB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAMN,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAEnB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,UAAU,EAKX,MAAM,8BAA8B,CAAA"}

package/dist/esm/principalCan/permission.d.ts

@@ -1,3 +1,5 @@
+import { type PermissionPrincipals, type PrincipalConstraint } from './principalConstraints.js';
+export type { PermissionPrincipals, PermissionPrincipalType } from './principalConstraints.js';
 export type PermissionEffect = 'Allow' | 'Deny';
 export type PermissionConditions = Record<string, Record<string, string[]>>;
 /**
@@ -14,7 +16,15 @@ export declare class Permission {
     readonly resource: string[] | undefined;
     readonly notResource: string[] | undefined;
     readonly conditions: Record<string, Record<string, string[]>> | undefined;
-    constructor(effect: PermissionEffect, service: string, action: string, resource: string[] | undefined, notResource: string[] | undefined, conditions: Record<string, Record<string, string[]>> | undefined);
+    readonly principal: PermissionPrincipals | undefined;
+    readonly notPrincipal: PermissionPrincipals | undefined;
+    constructor(effect: PermissionEffect, service: string, action: string, resource: string[] | undefined, notResource: string[] | undefined, conditions: Record<string, Record<string, string[]>> | undefined, principal?: PermissionPrincipals | undefined, notPrincipal?: PermissionPrincipals | undefined);
+    /**
+     * Return this permission's principal constraint normalized for set algebra.
+     *
+     * @returns The normalized principal constraint.
+     */
+    principalConstraint(): PrincipalConstraint;
     /**
      * Returns true if this Permission completely includes the other Permission.
      * Only supports merging of "Allow" permissions (same effect, service, action).
@@ -28,12 +38,21 @@ export declare class Permission {
      */
     union(other: Permission): Permission[];
     /**
-     * Returns the intersection of this Permission with another.
-     * Always returns exactly one Permission. If there is no overlap,
-     * returns undefined.
+     * Returns all representable intersections of this Permission with another.
+     *
+     * @param other The other Permission to intersect with.
+     * @returns New Permissions representing the overlap, or an empty array if there is no intersection.
+     */
+    intersections(other: Permission): Permission[];
+    /**
+     * Returns one intersection of this Permission with another.
+     *
+     * Prefer {@link intersections} when correctness depends on all possible overlaps. This
+     * compatibility method returns at most one Permission and may omit additional representable
+     * intersections if future principal algebra produces multiple principal residuals.
      *
      * @param other The other Permission to intersect with.
-     * @returns A new Permission representing the intersection of other and this, or undefined if there is no intersection.
+     * @returns A new Permission representing one intersection of other and this, or undefined if there is no intersection.
      */
     intersection(other: Permission): Permission | undefined;
     /**

package/dist/esm/principalCan/permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../../src/principalCan/permission.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAA;AAE/C,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;AAU3E;;;;;;GAMG;AACH,qBAAa,UAAU;aAEH,MAAM,EAAE,gBAAgB;aACxB,OAAO,EAAE,MAAM;aACf,MAAM,EAAE,MAAM;aACd,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS;aAC9B,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS;aACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,SAAS;gBALhE,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,EACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,SAAS;IASlF;;;OAGG;IACI,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;IAyH3C;;;;;OAKG;IACI,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE;IAiE7C;;;;;;;OAOG;IACI,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS;IAkL9D;;;;;;;;;OASG;IACI,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE;CAyZjD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAC3C,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CAmHjD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAC3C,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CA0DjD;AAkID;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAWxF;AA+BD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAqB1C;AAqCD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,CAiC5F"}
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../../src/principalCan/permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAA;AAElC,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAE9F,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAA;AAE/C,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;AAU3E;;;;;;GAMG;AACH,qBAAa,UAAU;aAEH,MAAM,EAAE,gBAAgB;aACxB,OAAO,EAAE,MAAM;aACf,MAAM,EAAE,MAAM;aACd,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS;aAC9B,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS;aACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,SAAS;aAChE,SAAS,EAAE,oBAAoB,GAAG,SAAS;aAC3C,YAAY,EAAE,oBAAoB,GAAG,SAAS;gBAP9C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,EACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,SAAS,EAChE,SAAS,GAAE,oBAAoB,GAAG,SAAqB,EACvD,YAAY,GAAE,oBAAoB,GAAG,SAAqB;IAU5E;;;;OAIG;IACI,mBAAmB,IAAI,mBAAmB;IAIjD;;;OAGG;IACI,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;IA6H3C;;;;;OAKG;IACI,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE;IAoI7C;;;;;OAKG;IACI,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE;IA4BrD;;;;;;;;;OASG;IACI,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS;IAsN9D;;;;;;;;;OASG;IACI,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE;CAijBjD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAC3C,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CAmHjD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAC3C,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CA0DjD;AAkID;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAWxF;AA+BD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAqB1C;AAqCD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,CAmC5F"}