@connexum/ai-governance 1.0.0-beta.11

package/dist/audit/destinations/datadog-logs.js

@@ -0,0 +1,576 @@
+"use strict";
+/**
+ * DatadogLogsDestination -- Datadog Logs Intake output adapter.
+ *
+ * Delivers governance events to the Datadog Logs Intake API v2 using an
+ * array-of-log-objects POST. Mirrors the structural pattern of SplunkHecDestination
+ * (plain Node HTTPS, no SDK, same retry / DLQ / gzip semantics).
+ *
+ * Design decisions:
+ *   - No Datadog SDK. Plain HTTPS POST via Node built-ins (no supply-chain risk).
+ *   - API key is NEVER stored in plaintext. Only a KMS reference (apiKeyRef) is held.
+ *     Resolved at send-time via the injected secret resolver.
+ *   - Retry semantics mirror splunk-hec.ts and webhook-delivery.ts:
+ *     429 (rate-limited) + 408 (timeout) + 5xx = retryable.
+ *     4xx other than 429 / 408 = non-retryable, DLQ immediately.
+ *     On 429: Retry-After header is honoured if present.
+ *   - Gzip compression (built-in zlib) applied by default. Configurable.
+ *   - packBinding is mandatory. Empty binding throws UnboundDataError immediately.
+ *   - API key is never emitted to any log stream.
+ *   - Max 1000 events per request; max 5 MB body size (uncompressed). Chunking
+ *     splits oversized batches into multiple requests automatically.
+ *
+ * Datadog Logs Intake wire format (v2):
+ *   POST https://http-intake.logs.datadoghq.com/api/v2/logs
+ *   DD-API-KEY: <api-key>
+ *   Content-Type: application/json
+ *   Content-Encoding: gzip  (when compression enabled)
+ *   Body: [{ ddsource, ddtags, service, hostname, message, timestamp }, ...]
+ *
+ * Supported sites:
+ *   us1     -> http-intake.logs.datadoghq.com   (default)
+ *   us3     -> http-intake.logs.us3.datadoghq.com
+ *   us5     -> http-intake.logs.us5.datadoghq.com
+ *   eu1     -> http-intake.logs.datadoghq.eu
+ *   us1-fed -> http-intake.logs.ddog-gov.com
+ *
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatadogLogsDestination = exports.SITE_HOSTS = void 0;
+exports.resolveIntakeUrl = resolveIntakeUrl;
+exports.buildLogEvent = buildLogEvent;
+exports.chunkEvents = chunkEvents;
+exports.validateIntakeUrl = validateIntakeUrl;
+exports.exponentialDelay = exponentialDelay;
+exports.parseRetryAfter = parseRetryAfter;
+const https = __importStar(require("https"));
+const http = __importStar(require("http"));
+const zlib = __importStar(require("zlib"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const log_1 = require("../../util/log");
+const index_1 = require("../../errors/index");
+const log = (0, log_1.createLogger)('datadog-logs');
+// ---------------------------------------------------------------------------
+// Site -> host mapping
+// ---------------------------------------------------------------------------
+/**
+ * Canonical Datadog Logs Intake host for each supported site.
+ * Source: https://docs.datadoghq.com/logs/log_collection/
+ */
+exports.SITE_HOSTS = {
+    'us1': 'http-intake.logs.datadoghq.com',
+    'us3': 'http-intake.logs.us3.datadoghq.com',
+    'us5': 'http-intake.logs.us5.datadoghq.com',
+    'eu1': 'http-intake.logs.datadoghq.eu',
+    'us1-fed': 'http-intake.logs.ddog-gov.com',
+};
+const LOGS_PATH = '/api/v2/logs';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Hard maximum events per Datadog Logs request. */
+const DD_MAX_EVENTS = 1_000;
+/** Hard maximum uncompressed body size per Datadog Logs request (5 MB). */
+const DD_MAX_BYTES = 5_000_000;
+/** Conservative default max events per chunk request. */
+const DEFAULT_MAX_EVENTS_PER_REQUEST = 500;
+/** Conservative default max bytes per chunk (leaves safety margin). */
+const DEFAULT_MAX_BYTES_PER_REQUEST = 4_500_000;
+/** HTTP status codes that are retryable. */
+const RETRYABLE_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
+/** HTTP status codes that are immediately terminal (write to DLQ, no retry). */
+const NON_RETRYABLE_4XX = new Set([400, 401, 403, 404, 413]);
+// ---------------------------------------------------------------------------
+// Pure helper exports (usable in tests without instantiating the class)
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the resolved Datadog intake URL from config.
+ * baseUrl takes precedence over site. Falls back to us1.
+ */
+function resolveIntakeUrl(cfg) {
+    if (cfg.baseUrl) {
+        return cfg.baseUrl;
+    }
+    const site = cfg.site ?? 'us1';
+    const host = exports.SITE_HOSTS[site];
+    if (!host) {
+        throw new Error(`DatadogLogsDestination: unknown site "${site}". ` +
+            `Supported values: ${Object.keys(exports.SITE_HOSTS).join(', ')}`);
+    }
+    return `https://${host}${LOGS_PATH}`;
+}
+/**
+ * Map a governance EventPayload to a Datadog log object.
+ *
+ * Mapping table:
+ *   message    <- JSON.stringify of event (full payload; Datadog parses nested JSON)
+ *   timestamp  <- epoch ms from event.timestamp
+ *   ddsource   <- cfg.ddsource
+ *   ddtags     <- cfg.ddtags + "event_type:<type>,source:<source>"
+ *   service    <- cfg.service
+ *   hostname   <- cfg.hostname
+ */
+function buildLogEvent(event, ddsource, ddtags, service, hostname) {
+    const epochMs = new Date(event.timestamp).getTime();
+    // Enrich ddtags with per-event type and source for SIEM filtering.
+    const enrichedTags = [ddtags, `event_type:${event.type}`, `governance_source:${event.source}`]
+        .filter(Boolean)
+        .join(',');
+    return {
+        ddsource,
+        ddtags: enrichedTags,
+        service,
+        hostname,
+        message: JSON.stringify(event),
+        timestamp: epochMs,
+    };
+}
+/**
+ * Chunk a flat array of events into sub-arrays that respect both the per-request
+ * event count limit and the per-request byte size limit.
+ *
+ * Strategy:
+ *   1. Iterate events, accumulating a running JSON array byte count.
+ *   2. When adding the next event would exceed maxEvents or maxBytes, flush the
+ *      current chunk and start a new one.
+ */
+function chunkEvents(events, maxEvents, maxBytes) {
+    // Clamp to hard Datadog limits.
+    const effectiveMaxEvents = Math.min(maxEvents, DD_MAX_EVENTS);
+    const effectiveMaxBytes = Math.min(maxBytes, DD_MAX_BYTES);
+    const chunks = [];
+    let current = [];
+    // Start with 2 for the outer array brackets [].
+    let currentBytes = 2;
+    for (const evt of events) {
+        // Add comma separator after first element.
+        const eventJson = JSON.stringify(evt);
+        const eventBytes = eventJson.length + (current.length > 0 ? 1 : 0);
+        if (current.length >= effectiveMaxEvents ||
+            (current.length > 0 && currentBytes + eventBytes > effectiveMaxBytes)) {
+            chunks.push(current);
+            current = [];
+            currentBytes = 2;
+        }
+        current.push(evt);
+        currentBytes += eventBytes;
+    }
+    if (current.length > 0) {
+        chunks.push(current);
+    }
+    return chunks;
+}
+// ---------------------------------------------------------------------------
+// Endpoint validation (pure, exported for tests)
+// ---------------------------------------------------------------------------
+/**
+ * Validate a Datadog intake URL at construction time.
+ * Throws a descriptive error on malformed input (PT-DATADOG-2).
+ */
+function validateIntakeUrl(url, allowInsecure) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error(`DatadogLogsDestination: malformed intake URL "${url}". ` +
+            'Provide a valid HTTPS URL, e.g. https://http-intake.logs.datadoghq.com/api/v2/logs');
+    }
+    if (!allowInsecure && parsed.protocol !== 'https:') {
+        throw new Error(`DatadogLogsDestination: intake URL must use HTTPS. Received protocol: "${parsed.protocol}". ` +
+            'Set allowInsecure:true only in test environments.');
+    }
+}
+// ---------------------------------------------------------------------------
+// Main class
+// ---------------------------------------------------------------------------
+class DatadogLogsDestination {
+    cfg;
+    resolver;
+    dlqFile;
+    intakeUrl;
+    constructor(config, resolver) {
+        // Pack-binding primacy: empty binding throws UnboundDataError before anything else.
+        if (!config.packBinding || config.packBinding.length === 0) {
+            throw new index_1.UnboundDataError('DatadogLogsDestination.config', 'unknown');
+        }
+        // Validate site early (PT-DATADOG-2).
+        if (config.site !== undefined && !(config.site in exports.SITE_HOSTS)) {
+            throw new Error(`DatadogLogsDestination: invalid site "${config.site}". ` +
+                `Supported values: ${Object.keys(exports.SITE_HOSTS).join(', ')}`);
+        }
+        // Resolve and validate the intake URL at construction (not at first deliver).
+        const intakeUrl = resolveIntakeUrl({ site: config.site, baseUrl: config.baseUrl });
+        validateIntakeUrl(intakeUrl, config.allowInsecure ?? false);
+        this.intakeUrl = intakeUrl;
+        this.resolver = resolver;
+        this.cfg = {
+            site: config.site ?? 'us1',
+            baseUrl: config.baseUrl ?? '',
+            ddsource: 'aiagents:governance',
+            ddtags: '',
+            service: 'my-cc-governance',
+            hostname: process.env['HOSTNAME'] ?? 'unknown',
+            maxEventsPerRequest: DEFAULT_MAX_EVENTS_PER_REQUEST,
+            maxBytesPerRequest: DEFAULT_MAX_BYTES_PER_REQUEST,
+            compress: true,
+            allowInsecure: false,
+            timeoutMs: 10_000,
+            maxRetries: 3,
+            retryDelayMs: 1_000,
+            ...config,
+        };
+        if (!fs.existsSync(this.cfg.dlqDir)) {
+            fs.mkdirSync(this.cfg.dlqDir, { recursive: true });
+        }
+        this.dlqFile = path.join(this.cfg.dlqDir, 'datadog-logs-dlq.jsonl');
+    }
+    // ---------------------------------------------------------------------------
+    // Public API
+    // ---------------------------------------------------------------------------
+    /**
+     * Deliver one or more governance events to Datadog Logs Intake.
+     *
+     * Automatically chunks oversized batches respecting Datadog's per-request
+     * limits (1000 events / 5 MB body). Returns an aggregate result for all chunks.
+     *
+     * The API key is resolved per-call from the secret resolver (PT-DATADOG-1).
+     * It is never cached in instance state.
+     */
+    async deliver(events) {
+        if (events.length === 0) {
+            return { success: true, eventCount: 0, attempts: 0 };
+        }
+        // Resolve API key at deliver-time; never cached on the instance.
+        let apiKey;
+        try {
+            apiKey = await this.resolver(this.cfg.apiKeyRef);
+        }
+        catch (err) {
+            const error = `Secret resolver failed for apiKeyRef "${this.cfg.apiKeyRef}": ${err.message}`;
+            this.writeDLQ(events, error, 0, false);
+            return { success: false, eventCount: events.length, attempts: 0, error, retryable: false };
+        }
+        const logEvents = events.map(e => buildLogEvent(e, this.cfg.ddsource, this.cfg.ddtags, this.cfg.service, this.cfg.hostname));
+        const chunks = chunkEvents(logEvents, this.cfg.maxEventsPerRequest, this.cfg.maxBytesPerRequest);
+        let totalAttempts = 0;
+        let lastStatus;
+        let firstError;
+        for (const chunk of chunks) {
+            const result = await this.postChunk(chunk, events, apiKey);
+            totalAttempts += result.attempts;
+            if (result.statusCode !== undefined) {
+                lastStatus = result.statusCode;
+            }
+            if (!result.success) {
+                firstError = result.error;
+                // On first chunk failure, stop delivering subsequent chunks.
+                return {
+                    success: false,
+                    eventCount: events.length,
+                    statusCode: lastStatus,
+                    attempts: totalAttempts,
+                    error: firstError,
+                    retryable: result.retryable,
+                };
+            }
+        }
+        return {
+            success: true,
+            eventCount: events.length,
+            statusCode: lastStatus,
+            attempts: totalAttempts,
+            deliveredAt: new Date().toISOString(),
+            retryable: false,
+        };
+    }
+    /**
+     * Flush alias for API symmetry with SplunkHecDestination.
+     * DatadogLogsDestination does not internally buffer events (deliver is
+     * always immediate), so flush() is a no-op that returns success.
+     */
+    async flush() {
+        return { success: true, eventCount: 0, attempts: 0 };
+    }
+    /** Retrieve dead-letter queue entries (most recent `limit` entries). */
+    getDLQ(limit = 100) {
+        if (!fs.existsSync(this.dlqFile))
+            return [];
+        try {
+            const lines = fs.readFileSync(this.dlqFile, 'utf-8')
+                .trim()
+                .split('\n')
+                .filter(Boolean);
+            return lines
+                .slice(-limit)
+                .map(line => {
+                try {
+                    return JSON.parse(line);
+                }
+                catch {
+                    return null;
+                }
+            })
+                .filter((e) => e !== null);
+        }
+        catch {
+            return [];
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    /**
+     * POST one chunk of Datadog log events with retry + DLQ semantics.
+     *
+     * API key is accepted as a parameter and only used in the DD-API-KEY header.
+     * It is never stored in instance state or written to any log (PT-DATADOG-1).
+     */
+    async postChunk(chunk, originalEvents, apiKey) {
+        const bodyStr = JSON.stringify(chunk);
+        let lastError = '';
+        let lastStatus;
+        let retryable = true;
+        for (let attempt = 1; attempt <= this.cfg.maxRetries; attempt++) {
+            try {
+                const result = await this.httpPost(bodyStr, apiKey, this.cfg.compress);
+                lastStatus = result.statusCode;
+                if (result.statusCode >= 200 && result.statusCode < 300) {
+                    return {
+                        success: true,
+                        eventCount: chunk.length,
+                        statusCode: result.statusCode,
+                        attempts: attempt,
+                        deliveredAt: new Date().toISOString(),
+                        retryable: false,
+                    };
+                }
+                if (result.statusCode === 429) {
+                    // Rate limited. Honour Retry-After if provided, else exponential backoff.
+                    lastError = 'HTTP 429 (rate limited)';
+                    retryable = true;
+                    if (attempt < this.cfg.maxRetries) {
+                        const retryAfterMs = parseRetryAfter(result.retryAfterHeader);
+                        const backoff = retryAfterMs ?? exponentialDelay(attempt, this.cfg.retryDelayMs);
+                        log.warn('Datadog rate limited, waiting before retry', {
+                            attempt,
+                            waitMs: backoff,
+                            site: this.cfg.site,
+                        });
+                        await new Promise(r => setTimeout(r, backoff));
+                    }
+                    continue;
+                }
+                if (NON_RETRYABLE_4XX.has(result.statusCode)) {
+                    lastError = `HTTP ${result.statusCode} (non-retryable)`;
+                    retryable = false;
+                    // Log endpoint only; never log the key.
+                    log.error('Datadog Logs non-retryable error', {
+                        status: result.statusCode,
+                        intakeUrl: this.safeUrl(),
+                    });
+                    break;
+                }
+                if (RETRYABLE_STATUS_CODES.has(result.statusCode)) {
+                    lastError = `HTTP ${result.statusCode}`;
+                    retryable = true;
+                }
+                else {
+                    // Unexpected status code -- treat as terminal.
+                    lastError = `HTTP ${result.statusCode} (unexpected)`;
+                    retryable = false;
+                    break;
+                }
+            }
+            catch (err) {
+                lastError = err.message ?? 'Connection error';
+                retryable = true;
+                log.warn('Datadog Logs connection error', {
+                    attempt,
+                    intakeUrl: this.safeUrl(),
+                    error: lastError,
+                });
+            }
+            if (attempt < this.cfg.maxRetries && retryable) {
+                const backoff = exponentialDelay(attempt, this.cfg.retryDelayMs);
+                await new Promise(r => setTimeout(r, backoff));
+            }
+        }
+        const error = lastError || `HTTP ${lastStatus}`;
+        this.writeDLQ(originalEvents, error, this.cfg.maxRetries, retryable);
+        return {
+            success: false,
+            eventCount: chunk.length,
+            statusCode: lastStatus,
+            attempts: this.cfg.maxRetries,
+            error,
+            retryable,
+        };
+    }
+    /**
+     * Execute the HTTPS POST to the Datadog Logs intake endpoint.
+     * The API key is accepted as a parameter and used only in the DD-API-KEY header.
+     * It is never stored in instance state or logged.
+     */
+    httpPost(body, apiKey, compress) {
+        return new Promise((resolve, reject) => {
+            const url = new URL(this.intakeUrl);
+            const isHttps = url.protocol === 'https:';
+            const transport = isHttps ? https : http;
+            const dispatch = (finalBody, extraHeaders) => {
+                const headers = {
+                    'Content-Type': 'application/json',
+                    'Content-Length': finalBody.length.toString(),
+                    'User-Agent': '@connexum/ai-governance datadog-logs/1.0',
+                    // Datadog authentication -- API key NEVER logged.
+                    'DD-API-KEY': apiKey,
+                    ...extraHeaders,
+                };
+                const req = transport.request({
+                    hostname: url.hostname,
+                    port: url.port || (isHttps ? 443 : 80),
+                    path: url.pathname + url.search,
+                    method: 'POST',
+                    headers,
+                    timeout: this.cfg.timeoutMs,
+                }, (res) => {
+                    let rb = '';
+                    res.on('data', (chunk) => { rb += chunk.toString(); });
+                    res.on('end', () => {
+                        resolve({
+                            statusCode: res.statusCode ?? 0,
+                            body: rb,
+                            retryAfterHeader: res.headers['retry-after'],
+                        });
+                    });
+                });
+                req.on('error', (err) => {
+                    // Sanitise error message: ensure API key never surfaces in error propagation.
+                    const raw = err.message ?? '';
+                    if (raw.includes(apiKey)) {
+                        reject(new Error('Connection error (details redacted for security)'));
+                    }
+                    else {
+                        reject(err);
+                    }
+                });
+                req.on('timeout', () => {
+                    req.destroy(new Error('Datadog Logs request timeout'));
+                });
+                req.write(finalBody);
+                req.end();
+            };
+            const bodyBuf = Buffer.from(body, 'utf-8');
+            if (compress) {
+                zlib.gzip(bodyBuf, (err, compressed) => {
+                    if (err) {
+                        reject(err);
+                        return;
+                    }
+                    dispatch(compressed, {
+                        'Content-Encoding': 'gzip',
+                        'Content-Length': compressed.length.toString(),
+                    });
+                });
+            }
+            else {
+                dispatch(bodyBuf, {});
+            }
+        });
+    }
+    /** Strip credentials from the intake URL before logging. */
+    safeUrl() {
+        try {
+            const u = new URL(this.intakeUrl);
+            u.password = '';
+            u.username = '';
+            return u.toString();
+        }
+        catch {
+            return '[invalid-url]';
+        }
+    }
+    writeDLQ(events, error, attempts, retryable) {
+        const entry = {
+            events,
+            error,
+            attempts,
+            failedAt: new Date().toISOString(),
+            retryable,
+        };
+        try {
+            fs.appendFileSync(this.dlqFile, JSON.stringify(entry) + '\n');
+        }
+        catch {
+            log.error('Failed to write Datadog Logs DLQ entry', { dlqFile: this.dlqFile });
+        }
+    }
+}
+exports.DatadogLogsDestination = DatadogLogsDestination;
+// ---------------------------------------------------------------------------
+// Module-level pure helpers (internal use + test access)
+// ---------------------------------------------------------------------------
+/**
+ * Compute exponential backoff with 25% jitter.
+ *   delay = base * 2^(attempt-1) + random(0, base * 0.25)
+ */
+function exponentialDelay(attempt, baseMs) {
+    const base = baseMs * Math.pow(2, attempt - 1);
+    const jitter = Math.floor(Math.random() * base * 0.25);
+    return base + jitter;
+}
+/**
+ * Parse the Retry-After header value.
+ * Accepts: integer seconds ("30") or HTTP-date ("Wed, 21 Oct 2015 07:28:00 GMT").
+ * Returns milliseconds to wait, or undefined if unparseable.
+ */
+function parseRetryAfter(headerValue) {
+    if (!headerValue)
+        return undefined;
+    const seconds = parseInt(headerValue, 10);
+    if (!Number.isNaN(seconds) && seconds > 0) {
+        return seconds * 1_000;
+    }
+    const date = new Date(headerValue);
+    if (!Number.isNaN(date.getTime())) {
+        const diff = date.getTime() - Date.now();
+        return diff > 0 ? diff : undefined;
+    }
+    return undefined;
+}
+//# sourceMappingURL=datadog-logs.js.map

package/dist/audit/destinations/datadog-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"datadog-logs.js","sourceRoot":"","sources":["../../../src/audit/destinations/datadog-logs.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2MH,4CAaC;AAaD,sCAsBC;AAWD,kCAqCC;AAUD,8CAiBC;AAiYD,4CAIC;AAOD,0CAeC;AA/tBD,6CAA+B;AAC/B,2CAA6B;AAC7B,2CAA6B;AAC7B,uCAAyB;AACzB,2CAA6B;AAC7B,wCAA8C;AAC9C,8CAAsD;AAGtD,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,cAAc,CAAC,CAAC;AAgJzC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;GAGG;AACU,QAAA,UAAU,GAAgC;IACrD,KAAK,EAAM,gCAAgC;IAC3C,KAAK,EAAM,oCAAoC;IAC/C,KAAK,EAAM,oCAAoC;IAC/C,KAAK,EAAM,+BAA+B;IAC1C,SAAS,EAAE,+BAA+B;CAC3C,CAAC;AAEF,MAAM,SAAS,GAAG,cAAc,CAAC;AAEjC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,oDAAoD;AACpD,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B,2EAA2E;AAC3E,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,yDAAyD;AACzD,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,uEAAuE;AACvE,MAAM,6BAA6B,GAAG,SAAS,CAAC;AAEhD,4CAA4C;AAC5C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEvE,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7D,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,GAAgD;IAC/E,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAgB,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,kBAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,KAAK;YAClD,qBAAqB,MAAM,CAAC,IAAI,CAAC,kBAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,IAAI,GAAG,SAAS,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,aAAa,CAC3B,KAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAEpD,mEAAmE;IACnE,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,CAAC,IAAI,EAAE,EAAE,qBAAqB,KAAK,CAAC,MAAM,EAAE,CAAC;SAC3F,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,YAAY;QACpB,OAAO;QACP,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAC9B,SAAS,EAAE,OAAO;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,WAAW,CACzB,MAAyB,EACzB,SAAiB,EACjB,QAAgB;IAEhB,gCAAgC;IAChC,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE3D,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAsB,EAAE,CAAC;IACpC,gDAAgD;IAChD,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,2CAA2C;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnE,IACE,OAAO,CAAC,MAAM,IAAI,kBAAkB;YACpC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,GAAG,UAAU,GAAG,iBAAiB,CAAC,EACrE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,YAAY,IAAI,UAAU,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,GAAW,EAAE,aAAsB;IACnE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,iDAAiD,GAAG,KAAK;YACzD,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,0EAA0E,MAAM,CAAC,QAAQ,KAAK;YAC9F,mDAAmD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAa,sBAAsB;IAChB,GAAG,CAA8B;IACjC,QAAQ,CAAiB;IACzB,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,YAAY,MAAyB,EAAE,QAAwB;QAC7D,oFAAoF;QACpF,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,wBAAgB,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;QACzE,CAAC;QAED,sCAAsC;QACtC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,kBAAU,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,CAAC,IAAI,KAAK;gBACzD,qBAAqB,MAAM,CAAC,IAAI,CAAC,kBAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1D,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,CAAC,GAAG,GAAG;YACT,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,QAAQ,EAAE,qBAAqB;YAC/B,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;YAC9C,mBAAmB,EAAE,8BAA8B;YACnD,kBAAkB,EAAE,6BAA6B;YACjD,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,KAAK;YACpB,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,KAAK;YACnB,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACtE,CAAC;IAED,8EAA8E;IAC9E,aAAa;IACb,8EAA8E;IAE9E;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,MAAsB;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAED,iEAAiE;QACjE,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,yCAAyC,IAAI,CAAC,GAAG,CAAC,SAAS,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC;YACxG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC7F,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC/B,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC1F,CAAC;QAEF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAEjG,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,UAA8B,CAAC;QACnC,IAAI,UAA8B,CAAC;QAEnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC;YACjC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC1B,6DAA6D;gBAC7D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,MAAM,CAAC,MAAM;oBACzB,UAAU,EAAE,UAAU;oBACtB,QAAQ,EAAE,aAAa;oBACvB,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,QAAgB,GAAG;QACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;iBACjD,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC,CAAC;YAEnB,OAAO,KAAK;iBACT,KAAK,CAAC,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,IAAI,CAAC,EAAE;gBACV,IAAI,CAAC;oBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC;YAC5E,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;;;;OAKG;IACK,KAAK,CAAC,SAAS,CACrB,KAAwB,EACxB,cAA8B,EAC9B,MAAc;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,UAA8B,CAAC;QACnC,IAAI,SAAS,GAAG,IAAI,CAAC;QAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvE,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBAE/B,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;oBACxD,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,UAAU,EAAE,KAAK,CAAC,MAAM;wBACxB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,QAAQ,EAAE,OAAO;wBACjB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACrC,SAAS,EAAE,KAAK;qBACjB,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC9B,0EAA0E;oBAC1E,SAAS,GAAG,yBAAyB,CAAC;oBACtC,SAAS,GAAG,IAAI,CAAC;oBAEjB,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;wBAClC,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;wBAC9D,MAAM,OAAO,GAAG,YAAY,IAAI,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBACjF,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;4BACrD,OAAO;4BACP,MAAM,EAAE,OAAO;4BACf,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;yBACpB,CAAC,CAAC;wBACH,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBACjD,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC7C,SAAS,GAAG,QAAQ,MAAM,CAAC,UAAU,kBAAkB,CAAC;oBACxD,SAAS,GAAG,KAAK,CAAC;oBAClB,wCAAwC;oBACxC,GAAG,CAAC,KAAK,CAAC,kCAAkC,EAAE;wBAC5C,MAAM,EAAE,MAAM,CAAC,UAAU;wBACzB,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE;qBAC1B,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClD,SAAS,GAAG,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;oBACxC,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,+CAA+C;oBAC/C,SAAS,GAAG,QAAQ,MAAM,CAAC,UAAU,eAAe,CAAC;oBACrD,SAAS,GAAG,KAAK,CAAC;oBAClB,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAI,GAAa,CAAC,OAAO,IAAI,kBAAkB,CAAC;gBACzD,SAAS,GAAG,IAAI,CAAC;gBACjB,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE;oBACxC,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE;oBACzB,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACjE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,IAAI,QAAQ,UAAU,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAErE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU;YAC7B,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,QAAQ,CACd,IAAY,EACZ,MAAc,EACd,QAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAEzC,MAAM,QAAQ,GAAG,CACf,SAAiB,EACjB,YAAoC,EACpC,EAAE;gBACF,MAAM,OAAO,GAA2B;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAC7C,YAAY,EAAE,0CAA0C;oBACxD,kDAAkD;oBAClD,YAAY,EAAE,MAAM;oBACpB,GAAG,YAAY;iBAChB,CAAC;gBAEF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B;oBACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtC,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;oBAC/B,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;iBAC5B,EACD,CAAC,GAAG,EAAE,EAAE;oBACN,IAAI,EAAE,GAAG,EAAE,CAAC;oBACZ,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACjB,OAAO,CAAC;4BACN,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;4BAC/B,IAAI,EAAE,EAAE;4BACR,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAuB;yBACnE,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC,CACF,CAAC;gBAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;oBAC7C,8EAA8E;oBAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC9B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;oBACxE,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACrB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBACzD,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE3C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;oBACrC,IAAI,GAAG,EAAE,CAAC;wBAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACjC,QAAQ,CAAC,UAAU,EAAE;wBACnB,kBAAkB,EAAE,MAAM;wBAC1B,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE;qBAC/C,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4DAA4D;IACpD,OAAO;QACb,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;YAChB,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,QAAQ,CACd,MAAsB,EACtB,KAAa,EACb,QAAgB,EAChB,SAAkB;QAElB,MAAM,KAAK,GAAoB;YAC7B,MAAM;YACN,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,SAAS;SACV,CAAC;QAEF,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;CACF;AAjXD,wDAiXC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACvD,OAAO,IAAI,GAAG,MAAM,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,WAA+B;IAC7D,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,OAAO,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}