@cmdoss/memwal-sdk 0.6.0

package/dist/services/EncryptionService.js

@@ -0,0 +1,558 @@
+/**
+ * EncryptionService - SEAL-based encryption and access control
+ *
+ * Provides identity-based encryption using Mysten's SEAL SDK with decentralized
+ * key management and onchain access control policies.
+ */
+import { SessionKey } from '@mysten/seal';
+import { Transaction } from '@mysten/sui/transactions';
+import { fromHex } from '@mysten/sui/utils';
+import { keccak_256 } from '@noble/hashes/sha3';
+import { SealService } from '../infrastructure/seal/SealService.js';
+import { CrossContextPermissionService } from './CrossContextPermissionService.js';
+export class EncryptionService {
+    constructor(client, config) {
+        this.client = client;
+        this.config = config;
+        this.sessionKeyCache = new Map();
+        this.suiClient = client.client || client;
+        this.packageId = config.packageId || '';
+        this.sealService = this.initializeSealService();
+        // Initialize permission service for OAuth-style access control
+        this.permissionService = new CrossContextPermissionService({
+            packageId: this.packageId,
+            accessRegistryId: config.accessRegistryId || ''
+        }, this.suiClient);
+    }
+    /**
+     * Initialize SEAL service with proper configuration
+     */
+    initializeSealService() {
+        const encryptionConfig = this.config.encryptionConfig;
+        if (!encryptionConfig?.enabled) {
+            console.warn('Encryption is disabled in configuration - creating SealService anyway');
+        }
+        // Default testnet key servers (replace with actual server object IDs)
+        const defaultKeyServers = [
+            '0x73d05d62c18d9374e3ea529e8e0ed6161da1a141a94d3f76ae3fe4e99356db75',
+            '0xf5d14a81a982144ae441cd7d64b09027f116a468bd36e7eca494f750591623c8'
+        ];
+        const keyServerIds = encryptionConfig?.keyServers || defaultKeyServers;
+        // Create SealService with proper configuration
+        const sealConfig = {
+            suiClient: this.suiClient,
+            packageId: this.packageId,
+            keyServerUrls: [], // Empty for now, URLs handled separately if needed
+            keyServerObjectIds: keyServerIds,
+            network: process.env.NODE_ENV === 'production' ? 'mainnet' : 'testnet',
+            threshold: 2,
+            enableMetrics: true,
+            retryAttempts: 3,
+            timeoutMs: 30000
+        };
+        return new SealService(sealConfig);
+    }
+    /**
+     * Build access approval transaction for SEAL key servers (LEGACY)
+     *
+     * @deprecated Use buildAccessTransactionForWallet instead for wallet-based permissions
+     */
+    async buildAccessTransaction(userAddress, accessType = 'read') {
+        console.warn('buildAccessTransaction is deprecated - use buildAccessTransactionForWallet for wallet-based permissions');
+        return this.buildAccessTransactionForWallet(userAddress, userAddress, accessType);
+    }
+    /**
+     * Build access approval transaction using capability pattern
+     *
+     * Uses pdw::capability::seal_approve which validates:
+     * - User owns the MemoryCap object
+     * - Provided key_id matches computed key from owner + nonce
+     *
+     * @param keyId - SEAL key ID bytes (computed from owner + nonce)
+     * @param memoryCapId - MemoryCap object ID on Sui
+     * @returns Transaction for SEAL key server approval
+     */
+    buildCapabilityApproveTransaction(keyId, memoryCapId) {
+        return this.permissionService.buildSealApproveTransaction(keyId, memoryCapId);
+    }
+    /**
+     * Build access approval transaction for a requesting wallet address
+     * Uses CrossContextPermissionService for proper permission validation
+     *
+     * @deprecated Use buildCapabilityApproveTransaction for capability-based access
+     * @param userAddress - User's wallet address (used as SEAL identity)
+     * @param requestingWallet - Wallet requesting access
+     * @param accessType - Access level (read/write)
+     * @returns Transaction for SEAL key server approval
+     */
+    async buildAccessTransactionForWallet(userAddress, requestingWallet, accessType = 'read') {
+        // Legacy: Convert user address to bytes for SEAL identity
+        const identityBytes = fromHex(userAddress.replace('0x', ''));
+        // Use legacy method if memoryCapId is not available
+        return this.permissionService.buildSealApproveTransactionLegacy(identityBytes, requestingWallet);
+    }
+    /**
+     * Encrypt data using SEAL via SealService
+     *
+     * @param data - Data to encrypt
+     * @param userAddress - User's wallet address (used as SEAL identity/id)
+     * @param threshold - Minimum key servers required for decryption (default: 2)
+     * @returns Encrypted data and backup key
+     */
+    async encrypt(data, userAddress, threshold) {
+        try {
+            console.log('🔒 EncryptionService: Starting SEAL encryption...');
+            console.log(`   User address (identity): ${userAddress}`);
+            console.log(`   Data size: ${data.length} bytes`);
+            console.log(`   Threshold: ${threshold || 2} key servers`);
+            const result = await this.sealService.encryptData({
+                data,
+                id: userAddress, // Use user's address as SEAL identity
+                threshold: threshold || 2
+            });
+            console.log('✅ EncryptionService: SEAL encryption successful');
+            console.log(`   Encrypted size: ${result.encryptedObject.length} bytes`);
+            console.log(`   Backup key generated: ${result.key.length} bytes`);
+            return {
+                encryptedObject: result.encryptedObject,
+                backupKey: result.key
+            };
+        }
+        catch (error) {
+            throw new Error(`Encryption failed: ${error}`);
+        }
+    }
+    /**
+     * Decrypt data using SEAL with session keys via SealService
+     * Handles both new binary format (Uint8Array) and legacy base64 format
+     *
+     * Supports two access control patterns:
+     * 1. Capability pattern (recommended): Requires memoryCapId and keyId
+     * 2. Legacy allowlist pattern: Uses requestingWallet for permission check
+     */
+    async decrypt(options) {
+        try {
+            console.log('🔓 EncryptionService: Starting SEAL decryption...');
+            console.log(`   User address: ${options.userAddress}`);
+            const requestingWallet = options.requestingWallet ?? options.userAddress;
+            // Get or create session key
+            let activeSessionKey = options.sessionKey;
+            if (!activeSessionKey) {
+                console.log('🔄 Creating session key...');
+                activeSessionKey = await this.getOrCreateSessionKey(options.userAddress);
+            }
+            // Build access transaction if not provided
+            let txBytes = options.signedTxBytes;
+            if (!txBytes) {
+                // Check if capability pattern is being used
+                if (options.memoryCapId && options.keyId) {
+                    console.log('🔄 Building capability-based access transaction...');
+                    console.log(`   MemoryCap ID: ${options.memoryCapId}`);
+                    console.log(`   Key ID length: ${options.keyId.length} bytes`);
+                    const tx = this.buildCapabilityApproveTransaction(options.keyId, options.memoryCapId);
+                    // CRITICAL: Set sender before building - required by Transaction.build()
+                    tx.setSender(requestingWallet);
+                    console.log(`   Transaction sender set to: ${requestingWallet}`);
+                    // SEAL REQUIREMENT: Must use onlyTransactionKind: true for PTB validation
+                    txBytes = await tx.build({ client: this.suiClient, onlyTransactionKind: true });
+                }
+                else {
+                    // Fallback to legacy allowlist pattern
+                    console.log('🔄 Building legacy access transaction (allowlist pattern)...');
+                    console.warn('   ⚠️  Consider using capability pattern with memoryCapId and keyId');
+                    console.log(`   Requesting wallet: ${requestingWallet}`);
+                    const tx = await this.buildAccessTransactionForWallet(options.userAddress, requestingWallet, 'read');
+                    // CRITICAL: Set sender before building - required by Transaction.build()
+                    tx.setSender(requestingWallet);
+                    console.log(`   Transaction sender set to: ${requestingWallet}`);
+                    // SEAL REQUIREMENT: Must use onlyTransactionKind: true for PTB validation
+                    txBytes = await tx.build({ client: this.suiClient, onlyTransactionKind: true });
+                }
+            }
+            if (!txBytes) {
+                throw new Error('Failed to build SEAL approval transaction bytes');
+            }
+            // ✅ CRITICAL: Handle both binary and legacy formats
+            let encryptedBytes;
+            if (options.encryptedContent && options.encryptedContent instanceof Uint8Array) {
+                // **NEW BINARY FORMAT** (preferred - matches memory-workflow-seal.ts)
+                encryptedBytes = options.encryptedContent;
+                console.log('✅ Using new binary format (Uint8Array)');
+                console.log(`   Binary data size: ${encryptedBytes.length} bytes`);
+                console.log(`   Format: Direct binary (preserves SEAL integrity)`);
+            }
+            else if (options.encryptedData) {
+                // **LEGACY BASE64 FORMAT** (deprecated but supported for backward compatibility)
+                console.log('⚠️  Using legacy base64 format (deprecated)');
+                const encryptedDataBase64 = options.encryptedData;
+                const binaryString = atob(encryptedDataBase64);
+                encryptedBytes = new Uint8Array(binaryString.length);
+                for (let i = 0; i < binaryString.length; i++) {
+                    encryptedBytes[i] = binaryString.charCodeAt(i);
+                }
+                console.log(`   Converted from base64: ${encryptedDataBase64.length} chars → ${encryptedBytes.length} bytes`);
+                console.log('   Recommendation: Use encryptedContent (Uint8Array) for better performance');
+            }
+            else {
+                throw new Error('No encrypted data provided. Use either encryptedContent (Uint8Array) or encryptedData (base64 string)');
+            }
+            console.log('🔄 Calling SEAL decryption...');
+            console.log(`   Encrypted data length: ${encryptedBytes.length} bytes`);
+            console.log(`   Session key available: ${!!activeSessionKey}`);
+            console.log(`   Transaction bytes length: ${txBytes.length} bytes`);
+            // Use SealService for decryption (matches memory-workflow-seal.ts pattern)
+            const decryptResult = await this.sealService.decryptData({
+                encryptedObject: encryptedBytes,
+                sessionKey: activeSessionKey,
+                txBytes
+            });
+            console.log(`✅ EncryptionService: SEAL decryption successful`);
+            console.log(`   Decrypted data size: ${decryptResult.length} bytes`);
+            console.log(`   Binary integrity preserved throughout process`);
+            return decryptResult;
+        }
+        catch (error) {
+            throw new Error(`Decryption failed: ${error}`);
+        }
+    }
+    // ==================== SESSION KEY MANAGEMENT ====================
+    /**
+     * Create a new session key for a user via SealService
+     *
+     * Two usage patterns:
+     * 1. Frontend: Pass signPersonalMessageFn from @mysten/dapp-kit useSignPersonalMessage hook
+     * 2. Backend: Pass keypair for direct signing (auto-converts format)
+     */
+    async createSessionKey(userAddress, signer) {
+        try {
+            console.log('🔄 EncryptionService: Creating SEAL session key...');
+            console.log(`   User address: ${userAddress}`);
+            console.log(`   TTL: 30 minutes (maximum allowed)`);
+            const sessionResult = await this.sealService.createSession({
+                address: userAddress,
+                packageId: this.packageId,
+                ttlMin: 30, // Use 30 minutes (maximum allowed)
+            });
+            // Handle signing based on provided signer type
+            if (signer?.signPersonalMessageFn) {
+                // Frontend pattern: Use dapp-kit signPersonalMessage (RECOMMENDED)
+                console.log('🔄 Signing with dapp-kit signPersonalMessage (recommended)...');
+                const personalMessage = sessionResult.personalMessage;
+                // Convert to string if it's a byte array
+                const messageString = typeof personalMessage === 'string'
+                    ? personalMessage
+                    : new TextDecoder().decode(personalMessage);
+                console.log(`   Message (first 100 chars): ${messageString.substring(0, 100)}...`);
+                // Use dapp-kit signPersonalMessage - returns signature in correct format
+                const result = await signer.signPersonalMessageFn(messageString);
+                console.log(`   Signature from dapp-kit: ${result.signature.substring(0, 20)}...`);
+                console.log(`   ✅ Using dapp-kit signature format (already compatible with SEAL)`);
+                // Set signature directly - dapp-kit returns it in SEAL-compatible format
+                await sessionResult.sessionKey.setPersonalMessageSignature(result.signature);
+                console.log('✅ Personal message signed with dapp-kit');
+            }
+            else if (signer?.keypair) {
+                // Backend pattern: Use Ed25519Keypair with format conversion
+                console.log('🔄 Signing with Ed25519Keypair (backend fallback)...');
+                const personalMessage = sessionResult.personalMessage;
+                // Convert to string if it's a byte array
+                const messageString = typeof personalMessage === 'string'
+                    ? personalMessage
+                    : new TextDecoder().decode(personalMessage);
+                console.log(`   Message (first 100 chars): ${messageString.substring(0, 100)}...`);
+                // Sign with keypair
+                const messageSignature = await signer.keypair.signPersonalMessage(new TextEncoder().encode(messageString));
+                // CRITICAL FIX: Use signature as-is from Ed25519Keypair (SEAL expects original format)
+                // According to SEAL documentation, pass signature directly from keypair.signPersonalMessage()
+                console.log(`   ✅ Using signature as-is from Ed25519Keypair (SEAL-compatible format)`);
+                console.log(`   Original signature: ${messageSignature.signature.substring(0, 20)}...`);
+                // Set signature exactly as returned by keypair (no conversion needed)
+                await sessionResult.sessionKey.setPersonalMessageSignature(messageSignature.signature);
+                console.log('✅ Personal message signed with Ed25519Keypair');
+            }
+            else {
+                console.log('⚠️  No signer provided - session key created but not signed');
+                console.log('   Note: Call setPersonalMessageSignature() later with wallet-signed message');
+                console.log('   Frontend: Use dapp-kit useSignPersonalMessage hook');
+                console.log('   Backend: Provide Ed25519Keypair');
+            }
+            // Cache the session key
+            this.sessionKeyCache.set(userAddress, sessionResult.sessionKey);
+            console.log('✅ EncryptionService: Session key created and cached');
+            return sessionResult.sessionKey;
+        }
+        catch (error) {
+            throw new Error(`Failed to create session key: ${error}`);
+        }
+    }
+    /**
+     * Get cached session key or create new one
+     */
+    async getOrCreateSessionKey(userAddress) {
+        const cached = this.sessionKeyCache.get(userAddress);
+        if (cached) {
+            return cached;
+        }
+        return this.createSessionKey(userAddress);
+    }
+    /**
+     * Export session key for persistence
+     */
+    async exportSessionKey(sessionKey) {
+        try {
+            const exported = sessionKey.export();
+            return JSON.stringify(exported);
+        }
+        catch (error) {
+            throw new Error(`Failed to export session key: ${error}`);
+        }
+    }
+    /**
+     * Import previously exported session key
+     */
+    async importSessionKey(exportedKey, userAddress) {
+        try {
+            const keyData = JSON.parse(exportedKey);
+            const sessionKey = SessionKey.import(keyData, this.suiClient);
+            if (userAddress) {
+                this.sessionKeyCache.set(userAddress, sessionKey);
+            }
+            return sessionKey;
+        }
+        catch (error) {
+            throw new Error(`Failed to import session key: ${error}`);
+        }
+    }
+    // ==================== ACCESS CONTROL TRANSACTIONS ====================
+    /**
+     * Create SEAL approval transaction bytes (matches memory-workflow-seal.ts pattern)
+     * Returns raw PTB format bytes for SEAL verification
+     */
+    async createSealApproveTransaction(userAddress, contentOwner) {
+        try {
+            console.log('🔄 EncryptionService: Creating SEAL approval transaction...');
+            console.log(`   User address: ${userAddress}`);
+            console.log(`   Content owner: ${contentOwner}`);
+            // Create the approval transaction (not signed, just bytes)
+            const tx = await this.buildAccessTransactionForWallet(userAddress, contentOwner, 'read');
+            // CRITICAL: Set sender before building - required by Transaction.build()
+            tx.setSender(contentOwner);
+            const txBytes = await tx.build({ client: this.suiClient });
+            console.log(`✅ Created SEAL approval transaction bytes (${txBytes.length} bytes)`);
+            console.log('   Format: Raw PTB (Programmable Transaction Block) for SEAL verification');
+            return txBytes;
+        }
+        catch (error) {
+            throw new Error(`Failed to create SEAL approval transaction: ${error}`);
+        }
+    }
+    /**
+     * Build transaction to grant access to another user
+     */
+    async buildGrantAccessTransaction(options) {
+        const { ownerAddress, recipientAddress, contentId, accessLevel, expiresIn } = options;
+        const tx = new Transaction();
+        const expiresAt = expiresIn ? Date.now() + expiresIn : Date.now() + 86400000; // 24h default
+        tx.moveCall({
+            target: `${this.packageId}::seal_access_control::grant_access`,
+            arguments: [
+                tx.pure.address(ownerAddress),
+                tx.pure.address(recipientAddress),
+                tx.pure.string(contentId),
+                tx.pure.string(accessLevel),
+                tx.pure.u64(expiresAt),
+            ],
+        });
+        return tx;
+    }
+    /**
+     * Build transaction to revoke access from a user
+     */
+    async buildRevokeAccessTransaction(options) {
+        const { ownerAddress, recipientAddress, contentId } = options;
+        const tx = new Transaction();
+        tx.moveCall({
+            target: `${this.packageId}::seal_access_control::revoke_access`,
+            arguments: [
+                tx.pure.address(ownerAddress),
+                tx.pure.address(recipientAddress),
+                tx.pure.string(contentId),
+            ],
+        });
+        return tx;
+    }
+    /**
+     * Build transaction to register content ownership
+     */
+    async buildRegisterContentTransaction(ownerAddress, contentId, contentHash) {
+        const tx = new Transaction();
+        tx.moveCall({
+            target: `${this.packageId}::seal_access_control::register_content`,
+            arguments: [
+                tx.pure.address(ownerAddress),
+                tx.pure.string(contentId),
+                tx.pure.string(contentHash),
+                tx.pure.string(''), // encryption_info
+            ],
+        });
+        return tx;
+    }
+    // ==================== TRANSACTION BUILDERS ====================
+    get tx() {
+        return {
+            /**
+             * Grant access to encrypted memory
+             */
+            grantAccess: (options) => {
+                return this.buildGrantAccessTransaction(options);
+            },
+            /**
+             * Revoke access to encrypted memory
+             */
+            revokeAccess: (options) => {
+                return this.buildRevokeAccessTransaction(options);
+            },
+            /**
+             * Register content ownership
+             */
+            registerContent: (ownerAddress, contentId, contentHash) => {
+                return this.buildRegisterContentTransaction(ownerAddress, contentId, contentHash);
+            },
+            /**
+             * Build access approval transaction
+             */
+            buildAccessTransaction: (userAddress, accessType = 'read') => {
+                return this.buildAccessTransaction(userAddress, accessType);
+            },
+        };
+    }
+    // ==================== MOVE CALL BUILDERS ====================
+    get call() {
+        return {
+            /**
+             * Move call for granting access
+             */
+            grantAccess: (options) => {
+                return async (tx) => {
+                    const grantTx = await this.buildGrantAccessTransaction(options);
+                    return grantTx;
+                };
+            },
+            /**
+             * Move call for revoking access
+             */
+            revokeAccess: (options) => {
+                return async (tx) => {
+                    const revokeTx = await this.buildRevokeAccessTransaction(options);
+                    return revokeTx;
+                };
+            },
+        };
+    }
+    // ==================== ACCESS CONTROL QUERIES ====================
+    /**
+     * Check if a user has access to decrypt content
+     */
+    async hasAccess(userAddress, contentId, ownerAddress) {
+        try {
+            if (userAddress === ownerAddress) {
+                return true;
+            }
+            const tx = new Transaction();
+            tx.moveCall({
+                target: `${this.packageId}::seal_access_control::check_access`,
+                arguments: [
+                    tx.pure.address(userAddress),
+                    tx.pure.string(contentId),
+                    tx.pure.address(ownerAddress),
+                ],
+            });
+            const result = await this.suiClient.devInspectTransactionBlock({
+                transactionBlock: tx,
+                sender: userAddress,
+            });
+            return result.effects.status.status === 'success';
+        }
+        catch (error) {
+            console.error(`Error checking access: ${error}`);
+            return false;
+        }
+    }
+    // ==================== VIEW METHODS ====================
+    get view() {
+        return {
+            /**
+             * Get access permissions for memories
+             */
+            getAccessPermissions: async (userAddress, memoryId) => {
+                // Note: This would typically require event queries or indexing
+                // For now, return empty array as this requires additional infrastructure
+                console.warn('getAccessPermissions: This method requires event indexing infrastructure');
+                return [];
+            },
+            /**
+             * Check if user has access to content
+             */
+            hasAccess: (userAddress, contentId, ownerAddress) => {
+                return this.hasAccess(userAddress, contentId, ownerAddress);
+            },
+        };
+    }
+    // ==================== UTILITY METHODS ====================
+    /**
+     * Compute SEAL key_id from owner address and nonce
+     *
+     * Mirrors the Move implementation in capability.move:
+     * key_id = keccak256(owner || nonce)
+     *
+     * @param ownerAddress - Owner's Sui address
+     * @param nonce - Nonce from MemoryCap object (32 bytes keccak hash)
+     * @returns key_id bytes for SEAL approval (32 bytes)
+     */
+    computeKeyId(ownerAddress, nonce) {
+        // Convert owner address to bytes (BCS format - 32 bytes)
+        const ownerBytes = fromHex(ownerAddress.replace('0x', '').padStart(64, '0'));
+        // Concatenate owner || nonce (matches Move: bcs::to_bytes(&owner) + nonce)
+        const data = new Uint8Array(ownerBytes.length + nonce.length);
+        data.set(ownerBytes, 0);
+        data.set(nonce, ownerBytes.length);
+        // Use keccak256 hash (matches Move implementation exactly)
+        const keyId = keccak_256(data);
+        console.log(`🔑 Computed key_id from owner ${ownerAddress.slice(0, 10)}... and nonce (${nonce.length} bytes)`);
+        return keyId;
+    }
+    /**
+     * Generate content hash for verification
+     */
+    async generateContentHash(data) {
+        // Create a new Uint8Array to ensure proper typing
+        const dataArray = new Uint8Array(data);
+        const hashBuffer = await crypto.subtle.digest('SHA-256', dataArray);
+        const hashArray = Array.from(new Uint8Array(hashBuffer));
+        return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
+    }
+    /**
+     * Verify content integrity
+     */
+    async verifyContentHash(data, expectedHash) {
+        const actualHash = await this.generateContentHash(data);
+        return actualHash === expectedHash;
+    }
+    /**
+     * Check if SEAL service is available
+     */
+    isAvailable() {
+        return this.sealService !== null;
+    }
+    /**
+     * Get SEAL service configuration info
+     */
+    getClientInfo() {
+        return {
+            isInitialized: this.sealService !== null,
+            packageId: this.packageId,
+            encryptionEnabled: this.config.encryptionConfig?.enabled || false,
+        };
+    }
+}
+//# sourceMappingURL=EncryptionService.js.map

package/dist/services/EncryptionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptionService.js","sourceRoot":"","sources":["../../src/services/EncryptionService.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,OAAO,EAAS,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAyBhF,MAAM,OAAO,iBAAiB;IAO5B,YACU,MAAyB,EACzB,MAAiB;QADjB,WAAM,GAAN,MAAM,CAAmB;QACzB,WAAM,GAAN,MAAM,CAAW;QALnB,oBAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;QAOtD,IAAI,CAAC,SAAS,GAAI,MAAc,CAAC,MAAM,IAAI,MAAM,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEhD,+DAA+D;QAC/D,IAAI,CAAC,iBAAiB,GAAG,IAAI,6BAA6B,CACxD;YACE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE;SAChD,EACD,IAAI,CAAC,SAAS,CACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB;QAC3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAEtD,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACxF,CAAC;QAED,sEAAsE;QACtE,MAAM,iBAAiB,GAAG;YACxB,oEAAoE;YACpE,oEAAoE;SACrE,CAAC;QAEF,MAAM,YAAY,GAAG,gBAAgB,EAAE,UAAU,IAAI,iBAAiB,CAAC;QAEvE,+CAA+C;QAC/C,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,EAAE,EAAE,mDAAmD;YACtE,kBAAkB,EAAE,YAAY;YAChC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,SAAkB;YACxF,SAAS,EAAE,CAAC;YACZ,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,OAAO,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,sBAAsB,CAC1B,WAAmB,EACnB,aAA+B,MAAM;QAErC,OAAO,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;QAExH,OAAO,IAAI,CAAC,+BAA+B,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;;;;OAUG;IACH,iCAAiC,CAC/B,KAAiB,EACjB,WAAmB;QAEnB,OAAO,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,+BAA+B,CACnC,WAAmB,EACnB,gBAAwB,EACxB,aAA+B,MAAM;QAErC,0DAA0D;QAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAE7D,oDAAoD;QACpD,OAAO,IAAI,CAAC,iBAAiB,CAAC,iCAAiC,CAC7D,aAAa,EACb,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,IAAgB,EAChB,WAAmB,EACnB,SAAkB;QAElB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,IAAI,CAAC,cAAc,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;gBAChD,IAAI;gBACJ,EAAE,EAAE,WAAW,EAAE,sCAAsC;gBACvD,SAAS,EAAE,SAAS,IAAI,CAAC;aAC1B,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,eAAe,CAAC,MAAM,QAAQ,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC;YAEnE,OAAO;gBACL,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,SAAS,EAAE,MAAM,CAAC,GAAG;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,WAAW,CAAC;YAEzE,4BAA4B;YAC5B,IAAI,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;YAC1C,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3E,CAAC;YAED,2CAA2C;YAC3C,IAAI,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,4CAA4C;gBAC5C,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBACzC,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;oBAClE,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;oBACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;oBAE/D,MAAM,EAAE,GAAG,IAAI,CAAC,iCAAiC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;oBACtF,yEAAyE;oBACzE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,iCAAiC,gBAAgB,EAAE,CAAC,CAAC;oBACjE,0EAA0E;oBAC1E,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,CAAC;qBAAM,CAAC;oBACN,uCAAuC;oBACvC,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;oBAC5E,OAAO,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;oBACpF,OAAO,CAAC,GAAG,CAAC,yBAAyB,gBAAgB,EAAE,CAAC,CAAC;oBAEzD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,+BAA+B,CACnD,OAAO,CAAC,WAAW,EACnB,gBAAgB,EAChB,MAAM,CACP,CAAC;oBACF,yEAAyE;oBACzE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,iCAAiC,gBAAgB,EAAE,CAAC,CAAC;oBACjE,0EAA0E;oBAC1E,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YAED,oDAAoD;YACpD,IAAI,cAA0B,CAAC;YAE/B,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,YAAY,UAAU,EAAE,CAAC;gBAC/E,sEAAsE;gBACtE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,wBAAwB,cAAc,CAAC,MAAM,QAAQ,CAAC,CAAC;gBACnE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBACjC,iFAAiF;gBACjF,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;gBAC3D,MAAM,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;gBAClD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBAC/C,cAAc,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC7C,cAAc,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,mBAAmB,CAAC,MAAM,YAAY,cAAc,CAAC,MAAM,QAAQ,CAAC,CAAC;gBAC9G,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;YAC7F,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAC;YAC3H,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,cAAc,CAAC,MAAM,QAAQ,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;YAEpE,2EAA2E;YAC3E,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;gBACvD,eAAe,EAAE,cAAc;gBAC/B,UAAU,EAAE,gBAAgB;gBAC5B,OAAO;aACR,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,2BAA2B,aAAa,CAAC,MAAM,QAAQ,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAEhE,OAAO,aAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,mEAAmE;IAEnE;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,MAKC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YAEpD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;gBACzD,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,EAAE,EAAE,mCAAmC;aAChD,CAAC,CAAC;YAEH,+CAA+C;YAC/C,IAAI,MAAM,EAAE,qBAAqB,EAAE,CAAC;gBAClC,mEAAmE;gBACnE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;gBAC7E,MAAM,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;gBAEtD,yCAAyC;gBACzC,MAAM,aAAa,GAAG,OAAO,eAAe,KAAK,QAAQ;oBACvD,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAE9C,OAAO,CAAC,GAAG,CAAC,iCAAiC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAEnF,yEAAyE;gBACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAEjE,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;gBACnF,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;gBAEnF,yEAAyE;gBACzE,MAAM,aAAa,CAAC,UAAU,CAAC,2BAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7E,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YAEzD,CAAC;iBAAM,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC3B,6DAA6D;gBAC7D,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;gBACpE,MAAM,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;gBAEtD,yCAAyC;gBACzC,MAAM,aAAa,GAAG,OAAO,eAAe,KAAK,QAAQ;oBACvD,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAE9C,OAAO,CAAC,GAAG,CAAC,iCAAiC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAEnF,oBAAoB;gBACpB,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;gBAE3G,uFAAuF;gBACvF,8FAA8F;gBAC9F,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;gBACvF,OAAO,CAAC,GAAG,CAAC,0BAA0B,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;gBAExF,sEAAsE;gBACtE,MAAM,aAAa,CAAC,UAAU,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACvF,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAE/D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACrE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YACpD,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;YAEhE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO,aAAa,CAAC,UAAU,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,WAAmB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAsB;QAC3C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,WAAoB;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAE9D,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,wEAAwE;IAExE;;;OAGG;IACH,KAAK,CAAC,4BAA4B,CAAC,WAAmB,EAAE,YAAoB;QAC1E,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,EAAE,CAAC,CAAC;YAEjD,2DAA2D;YAC3D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACzF,yEAAyE;YACzE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAE3D,OAAO,CAAC,GAAG,CAAC,8CAA8C,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;YAEzF,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAAC,OAA2B;QAC3D,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QACtF,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAE7B,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,cAAc;QAE5F,EAAE,CAAC,QAAQ,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,qCAAqC;YAC9D,SAAS,EAAE;gBACT,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC7B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBACjC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACzB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC3B,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;aACvB;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,4BAA4B,CAAC,OAA4B;QAC7D,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAC9D,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAE7B,EAAE,CAAC,QAAQ,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,sCAAsC;YAC/D,SAAS,EAAE;gBACT,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC7B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBACjC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;aAC1B;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,+BAA+B,CACnC,YAAoB,EACpB,SAAiB,EACjB,WAAmB;QAEnB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAE7B,EAAE,CAAC,QAAQ,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,yCAAyC;YAClE,SAAS,EAAE;gBACT,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC7B,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACzB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC3B,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,kBAAkB;aACvC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iEAAiE;IAEjE,IAAI,EAAE;QACJ,OAAO;YACL;;eAEG;YACH,WAAW,EAAE,CAAC,OAA2B,EAAE,EAAE;gBAC3C,OAAO,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YAED;;eAEG;YACH,YAAY,EAAE,CAAC,OAA4B,EAAE,EAAE;gBAC7C,OAAO,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC;YAED;;eAEG;YACH,eAAe,EAAE,CAAC,YAAoB,EAAE,SAAiB,EAAE,WAAmB,EAAE,EAAE;gBAChF,OAAO,IAAI,CAAC,+BAA+B,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YACpF,CAAC;YAED;;eAEG;YACH,sBAAsB,EAAE,CAAC,WAAmB,EAAE,aAA+B,MAAM,EAAE,EAAE;gBACrF,OAAO,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC;IACJ,CAAC;IAED,+DAA+D;IAE/D,IAAI,IAAI;QACN,OAAO;YACL;;eAEG;YACH,WAAW,EAAE,CAAC,OAA2B,EAAS,EAAE;gBAClD,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;oBAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;oBAChE,OAAO,OAAO,CAAC;gBACjB,CAAC,CAAC;YACJ,CAAC;YAED;;eAEG;YACH,YAAY,EAAE,CAAC,OAA4B,EAAS,EAAE;gBACpD,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;oBAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;oBAClE,OAAO,QAAQ,CAAC;gBAClB,CAAC,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,SAAiB,EACjB,YAAoB;QAEpB,IAAI,CAAC;YACH,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;YAC7B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,qCAAqC;gBAC9D,SAAS,EAAE;oBACT,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC5B,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;oBACzB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;iBAC9B;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC;gBAC7D,gBAAgB,EAAE,EAAE;gBACpB,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,yDAAyD;IAEzD,IAAI,IAAI;QACN,OAAO;YACL;;eAEG;YACH,oBAAoB,EAAE,KAAK,EAAE,WAAmB,EAAE,QAAiB,EAA+B,EAAE;gBAClG,+DAA+D;gBAC/D,yEAAyE;gBACzE,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;gBACzF,OAAO,EAAE,CAAC;YACZ,CAAC;YAED;;eAEG;YACH,SAAS,EAAE,CAAC,WAAmB,EAAE,SAAiB,EAAE,YAAoB,EAAE,EAAE;gBAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAE5D;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAoB,EAAE,KAAiB;QAClD,yDAAyD;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAE7E,2EAA2E;QAC3E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAEnC,2DAA2D;QAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/B,OAAO,CAAC,GAAG,CAAC,iCAAiC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAAC,IAAgB;QAChD,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,IAAgB,EAAE,YAAoB;QAC5D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,UAAU,KAAK,YAAY,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,aAAa;QAKX,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;YACxC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,IAAI,KAAK;SAClE,CAAC;IACJ,CAAC;CACF"}