@corgelabs/corge 0.0.1 → 1.0.0

package/dist/auth/oidc.js

@@ -0,0 +1,298 @@
+import { createHash, createPublicKey, verify as cryptoVerify } from 'node:crypto';
+import { HTTPException } from 'hono/http-exception';
+import { CORE_CONFIG } from '../config';
+import { socialSignInInput } from './schema';
+import { fetchIdentityToolkit } from './utils';
+const jwksCache = new Map();
+const JWKS_TTL_MS = 60 * 60 * 1000;
+const JWKS_URLS = {
+    google: 'https://www.googleapis.com/oauth2/v3/certs',
+    apple: 'https://appleid.apple.com/auth/keys'
+};
+let testOidcPublicKeyJwk = null;
+export class AuthOidcEngine {
+    #core;
+    #session;
+    constructor(coreClient, session) {
+        this.#core = coreClient;
+        this.#session = session;
+    }
+    registerTestOidcPublicKey = (jwk) => {
+        testOidcPublicKeyJwk = jwk;
+    };
+    #getProviderJwks = async (provider, force = false) => {
+        const cached = jwksCache.get(provider);
+        if (!force && cached && Date.now() - cached.fetchedAt < JWKS_TTL_MS) {
+            return cached.keys;
+        }
+        const res = await fetch(JWKS_URLS[provider], { signal: AbortSignal.timeout(10_000) });
+        if (!res.ok)
+            throw new Error(`Failed to fetch ${provider} JWKS (${res.status})`);
+        const data = (await res.json());
+        const keys = data.keys ?? [];
+        jwksCache.set(provider, { keys, fetchedAt: Date.now() });
+        return keys;
+    };
+    #verifyNonceClaim = (rawNonce, tokenNonce) => {
+        if (!rawNonce)
+            return;
+        if (typeof tokenNonce !== 'string' || !tokenNonce) {
+            this.#core.errors.httpError(401, 'Missing OIDC nonce claim in ID token', 'INVALID_NONCE');
+        }
+        const sha256Hex = createHash('sha256').update(rawNonce).digest('hex');
+        const sha256B64 = createHash('sha256').update(rawNonce).digest('base64url');
+        if (tokenNonce !== rawNonce && tokenNonce !== sha256Hex && tokenNonce !== sha256B64) {
+            this.#core.errors.httpError(401, 'OIDC nonce mismatch', 'INVALID_NONCE');
+        }
+    };
+    #verifyOidcSignature = async (provider, header, headerB64, payloadB64, sigB64, isDev) => {
+        let jwk;
+        if (isDev && testOidcPublicKeyJwk && header.kid === (testOidcPublicKeyJwk.kid ?? 'test-oidc-key')) {
+            jwk = testOidcPublicKeyJwk;
+        }
+        else {
+            const keys = await this.#getProviderJwks(provider);
+            jwk = keys.find((k) => k.kid === header.kid);
+            if (!jwk && header.kid) {
+                const refreshed = await this.#getProviderJwks(provider, true);
+                jwk = refreshed.find((k) => k.kid === header.kid);
+            }
+        }
+        if (!jwk) {
+            this.#core.errors.httpError(401, 'Unable to find matching OIDC JWK for token kid', 'INVALID_ID_TOKEN');
+        }
+        try {
+            const pubKey = createPublicKey({ key: jwk, format: 'jwk' });
+            const signingInput = Buffer.from(`${headerB64}.${payloadB64}`, 'utf8');
+            const signature = Buffer.from(sigB64, 'base64url');
+            const valid = cryptoVerify('RSA-SHA256', signingInput, pubKey, signature);
+            if (!valid)
+                this.#core.errors.httpError(401, 'Invalid OIDC ID token signature', 'INVALID_ID_TOKEN');
+        }
+        catch (err) {
+            if (err instanceof HTTPException)
+                throw err;
+            this.#core.errors.httpError(401, 'OIDC signature verification failed', 'INVALID_ID_TOKEN');
+        }
+    };
+    verifyOidcIdToken = async (provider, idToken, nonce, isDev) => {
+        const parts = idToken.split('.');
+        if (parts.length !== 3)
+            return this.#core.errors.httpError(401, 'Malformed OIDC ID token', 'INVALID_ID_TOKEN');
+        const [headerB64, payloadB64, sigB64] = parts;
+        let header;
+        let payload;
+        try {
+            header = JSON.parse(Buffer.from(headerB64, 'base64url').toString('utf8'));
+            payload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString('utf8'));
+        }
+        catch {
+            return this.#core.errors.httpError(401, 'Malformed OIDC ID token JSON', 'INVALID_ID_TOKEN');
+        }
+        if (header.alg !== 'RS256') {
+            return this.#core.errors.httpError(401, 'Unsupported OIDC signature algorithm', 'INVALID_ID_TOKEN');
+        }
+        const exp = typeof payload.exp === 'number' ? payload.exp : 0;
+        if (exp * 1000 <= Date.now()) {
+            return this.#core.errors.httpError(401, 'OIDC ID token has expired', 'TOKEN_EXPIRED');
+        }
+        const iss = String(payload.iss ?? '');
+        const validIss = provider === 'google'
+            ? iss === 'https://accounts.google.com' || iss === 'accounts.google.com'
+            : iss === 'https://appleid.apple.com';
+        if (!validIss) {
+            return this.#core.errors.httpError(401, `Invalid OIDC issuer for ${provider}: ${iss}`, 'INVALID_ISSUER');
+        }
+        const allowedClientIds = provider === 'google' ? CORE_CONFIG.auth.oauth?.googleClientIds : CORE_CONFIG.auth.oauth?.appleClientIds;
+        if (allowedClientIds && allowedClientIds.length > 0) {
+            const aud = payload.aud;
+            const audList = Array.isArray(aud) ? aud.map(String) : [String(aud ?? '')];
+            if (!audList.some((a) => allowedClientIds.includes(a))) {
+                return this.#core.errors.httpError(401, `Invalid OIDC audience for ${provider}`, 'INVALID_AUDIENCE');
+            }
+        }
+        this.#verifyNonceClaim(nonce, payload.nonce);
+        await this.#verifyOidcSignature(provider, header, headerB64, payloadB64, sigB64, this.#session.resolveDefaultIsDev(isDev));
+        const sub = String(payload.sub ?? '').trim();
+        if (!sub)
+            return this.#core.errors.httpError(401, 'Missing OIDC subject (sub) claim', 'INVALID_ID_TOKEN');
+        const email = typeof payload.email === 'string' && payload.email ? payload.email.trim().toLowerCase() : null;
+        const emailVerified = payload.email_verified === true || payload.email_verified === 'true';
+        return {
+            sub,
+            email,
+            emailVerified,
+            ...(typeof payload.name === 'string' && payload.name ? { name: payload.name } : {}),
+            ...(typeof payload.picture === 'string' && payload.picture ? { picture: payload.picture } : {})
+        };
+    };
+    #tryIdentityToolkitIdp = async (key, provider, idToken, nonce, accessToken) => {
+        try {
+            const providerId = provider === 'apple' ? 'apple.com' : 'google.com';
+            const params = new URLSearchParams({ providerId });
+            if (idToken)
+                params.set('id_token', idToken);
+            if (accessToken)
+                params.set('access_token', accessToken);
+            if (nonce)
+                params.set('rawNonce', nonce);
+            const { ok, data } = await fetchIdentityToolkit('accounts:signInWithIdp', key, {
+                postBody: params.toString(),
+                requestUri: 'http://localhost',
+                returnIdpCredential: true,
+                returnSecureToken: true
+            });
+            if (!ok || !data.idToken || !data.localId)
+                return null;
+            return {
+                firebaseIdToken: data.idToken,
+                localId: data.localId,
+                ...(data.federatedId ? { federatedId: data.federatedId } : {}),
+                ...(data.email ? { email: data.email.trim().toLowerCase() } : {}),
+                ...(typeof data.emailVerified === 'boolean' ? { emailVerified: data.emailVerified } : {}),
+                ...(data.displayName ? { displayName: data.displayName } : {}),
+                ...(data.photoUrl ? { photoUrl: data.photoUrl } : {})
+            };
+        }
+        catch {
+            return null;
+        }
+    };
+    #resolveOrCreateSocialUser = async (providerKey, oidcClaims, resolvedName, resolvedAvatar, isDev) => {
+        const auth = this.#session.getAuth();
+        const db = this.#core.db.firestore(isDev);
+        let userRecord;
+        const existingProviderSnap = await db
+            .collection('user_auth_meta')
+            .where('providerKeys', 'array-contains', providerKey)
+            .limit(1)
+            .get();
+        if (!existingProviderSnap.empty) {
+            userRecord = await auth.getUser(existingProviderSnap.docs[0].id).catch(() => undefined);
+        }
+        if (!userRecord && oidcClaims.email && oidcClaims.emailVerified) {
+            userRecord = await auth.getUserByEmail(oidcClaims.email).catch(() => undefined);
+            if (userRecord && !userRecord.emailVerified) {
+                userRecord = await auth.updateUser(userRecord.uid, { emailVerified: true }).catch(() => userRecord);
+            }
+        }
+        if (!userRecord && oidcClaims._idpResult?.localId) {
+            userRecord = await auth.getUser(oidcClaims._idpResult.localId).catch(() => undefined);
+        }
+        if (!userRecord) {
+            const created = await auth.createUser({
+                ...(oidcClaims.email ? { email: oidcClaims.email } : {}),
+                emailVerified: oidcClaims.emailVerified,
+                ...(resolvedName ? { displayName: resolvedName } : {}),
+                ...(resolvedAvatar ? { photoURL: resolvedAvatar } : {})
+            });
+            return { userRecord: created, isNewUser: true };
+        }
+        const updates = {};
+        if (resolvedName && !userRecord.displayName)
+            updates.displayName = resolvedName;
+        if (resolvedAvatar && !userRecord.photoURL)
+            updates.photoURL = resolvedAvatar;
+        if (oidcClaims.emailVerified && !userRecord.emailVerified && userRecord.email === oidcClaims.email) {
+            updates.emailVerified = true;
+        }
+        if (Object.keys(updates).length > 0) {
+            userRecord = await auth.updateUser(userRecord.uid, updates).catch(() => userRecord);
+        }
+        return { userRecord, isNewUser: false };
+    };
+    #maybeSendWelcomeEmail = async (userId, email) => {
+        const normalized = email?.trim().toLowerCase();
+        if (!normalized)
+            return;
+        const flowCfg = this.#core.config.emails.authFlows.welcome;
+        const hasWelcome = Boolean(this.#core.internals.registry.getEmailTemplate(flowCfg?.templateId ?? 'welcome')) ||
+            Boolean(flowCfg?.onSend) ||
+            Boolean(this.#core.config.emails.onAuthEmail);
+        if (!hasWelcome)
+            return;
+        await this.#core.internals.emails
+            .dispatchAuthEmail({
+            to: normalized,
+            purpose: 'welcome',
+            code: '',
+            token: '',
+            expiresInMinutes: 0,
+            userId
+        })
+            .catch(() => { });
+    };
+    signInSocial = async (raw) => {
+        const { provider, idToken, nonce, accessToken, profile } = socialSignInInput.parse(raw);
+        const targetIsDev = this.#core.env.isDev;
+        const oidcClaims = await this.verifyOidcIdToken(provider, idToken, nonce, targetIsDev).catch(async (err) => {
+            if (err instanceof HTTPException)
+                throw err;
+            const idp = await this.#tryIdentityToolkitIdp(this.#core.env.WEB_API_KEY, provider, idToken, nonce, accessToken);
+            if (!idp)
+                throw err;
+            return {
+                sub: idp.federatedId ?? idp.localId,
+                email: idp.email ?? null,
+                emailVerified: Boolean(idp.emailVerified),
+                ...(idp.displayName ? { name: idp.displayName } : {}),
+                ...(idp.photoUrl ? { picture: idp.photoUrl } : {}),
+                _idpResult: idp
+            };
+        });
+        const providerKey = `${provider}:${oidcClaims.sub}`;
+        const resolvedName = profile?.name ?? oidcClaims.name;
+        const resolvedAvatar = profile?.avatarUrl ?? oidcClaims.picture;
+        const { userRecord, isNewUser } = await this.#resolveOrCreateSocialUser(providerKey, oidcClaims, resolvedName, resolvedAvatar, targetIsDev);
+        const existingMeta = await this.#session.getUserAuthMeta(userRecord.uid, targetIsDev);
+        const existingProviders = existingMeta?.linkedProviders ?? [];
+        const now = new Date();
+        const updatedProviders = [
+            ...existingProviders.filter((p) => !(p.provider === provider && p.providerUserId === oidcClaims.sub)),
+            {
+                provider,
+                providerUserId: oidcClaims.sub,
+                ...(oidcClaims.email ? { email: oidcClaims.email } : {}),
+                linkedAt: existingProviders.find((p) => p.provider === provider && p.providerUserId === oidcClaims.sub)?.linkedAt ?? now
+            }
+        ];
+        await this.#session.upsertUserAuthMeta(userRecord.uid, {
+            email: userRecord.email ?? oidcClaims.email ?? existingMeta?.email ?? null,
+            emailVerified: Boolean(userRecord.emailVerified || oidcClaims.emailVerified || existingMeta?.emailVerified),
+            name: userRecord.displayName ?? resolvedName ?? existingMeta?.name ?? null,
+            ...(resolvedAvatar || userRecord.photoURL || existingMeta?.avatarUrl
+                ? { avatarUrl: userRecord.photoURL ?? resolvedAvatar ?? existingMeta?.avatarUrl ?? null }
+                : {}),
+            linkedProviders: updatedProviders,
+            providerKeys: updatedProviders.map((p) => `${p.provider}:${p.providerUserId}`)
+        }, targetIsDev);
+        if (isNewUser) {
+            await this.#maybeSendWelcomeEmail(userRecord.uid, userRecord.email ?? oidcClaims.email);
+        }
+        return this.#session.mintSessionForUid(userRecord.uid, {
+            ...(userRecord.email ?? oidcClaims.email ? { email: (userRecord.email ?? oidcClaims.email) } : {}),
+            ...(userRecord.displayName ?? resolvedName ? { name: (userRecord.displayName ?? resolvedName) } : {}),
+            ...(userRecord.photoURL ?? resolvedAvatar ? { avatarUrl: (userRecord.photoURL ?? resolvedAvatar) } : {}),
+            emailVerified: Boolean(userRecord.emailVerified || oidcClaims.emailVerified)
+        });
+    };
+    #identityToolkit = async (key, endpoint, email, password, displayName) => {
+        const { ok, data } = await fetchIdentityToolkit(endpoint, key, { email, password, ...(displayName ? { displayName } : {}), returnSecureToken: true });
+        if (!ok || !data.idToken) {
+            const msg = data.error?.message ?? 'AUTH_FAILED';
+            return this.#core.errors.httpError(msg === 'EMAIL_EXISTS' ? 409 : 401, msg, msg);
+        }
+        return data;
+    };
+    signUpEmail = async (email, password, name) => {
+        const { idToken } = await this.#identityToolkit(this.#core.env.WEB_API_KEY, 'accounts:signUp', email, password, name);
+        const session = await this.#session.createSession(idToken, { email, name });
+        await this.#maybeSendWelcomeEmail(session.user.id, session.user.email ?? email);
+        return session;
+    };
+    signInEmail = async (email, password) => {
+        const { idToken, displayName } = await this.#identityToolkit(this.#core.env.WEB_API_KEY, 'accounts:signInWithPassword', email, password);
+        return this.#session.createSession(idToken, { email, ...(displayName ? { name: displayName } : {}) });
+    };
+}
+//# sourceMappingURL=oidc.js.map

package/dist/auth/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../src/auth/oidc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,IAAI,YAAY,EAAmB,MAAM,aAAa,CAAA;AAElG,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAEvC,OAAO,EACL,iBAAiB,EAMlB,MAAM,UAAU,CAAA;AAEjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAO9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAA;AAC1D,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAClC,MAAM,SAAS,GAAkC;IAC/C,MAAM,EAAE,4CAA4C;IACpD,KAAK,EAAE,qCAAqC;CAC7C,CAAA;AAED,IAAI,oBAAoB,GAA2C,IAAI,CAAA;AAEvE,MAAM,OAAO,cAAc;IAChB,KAAK,CAAM;IACX,QAAQ,CAAmB;IAEpC,YAAY,UAAgB,EAAE,OAA0B;QACtD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAA;QACvB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED,yBAAyB,GAAG,CAAC,GAA2C,EAAQ,EAAE;QAChF,oBAAoB,GAAG,GAAG,CAAA;IAC5B,CAAC,CAAA;IAED,gBAAgB,GAAG,KAAK,EACtB,QAAuB,EACvB,KAAK,GAAG,KAAK,EAC+B,EAAE;QAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;YACpE,OAAO,MAAM,CAAC,IAAI,CAAA;QACpB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;QAChF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiD,CAAA;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;QAC5B,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACxD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,iBAAiB,GAAG,CAAC,QAA4B,EAAE,UAAmB,EAAQ,EAAE;QAC9E,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,sCAAsC,EAAE,eAAe,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC3E,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACpF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,qBAAqB,EAAE,eAAe,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC,CAAA;IAED,oBAAoB,GAAG,KAAK,EAC1B,QAAuB,EACvB,MAAsC,EACtC,SAAiB,EACjB,UAAkB,EAClB,MAAc,EACd,KAAc,EACC,EAAE;QACjB,IAAI,GAAgD,CAAA;QACpD,IAAI,KAAK,IAAI,oBAAoB,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC;YAClG,GAAG,GAAG,oBAAoB,CAAA;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAClD,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAA;YAC5C,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;gBAC7D,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,gDAAgD,EAAE,kBAAkB,CAAC,CAAA;QACxG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;YACtE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;YACzE,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,iCAAiC,EAAE,kBAAkB,CAAC,CAAA;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAA;YAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,oCAAoC,EAAE,kBAAkB,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC,CAAA;IAED,iBAAiB,GAAG,KAAK,EACvB,QAAuB,EACvB,OAAe,EACf,KAAc,EACd,KAAe,EACc,EAAE;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,yBAAyB,EAAE,kBAAkB,CAAC,CAAA;QAC9G,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAA;QAEzE,IAAI,MAAsC,CAAA;QAC1C,IAAI,OAAgC,CAAA;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAmC,CAAA;YAC3G,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAA;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,8BAA8B,EAAE,kBAAkB,CAAC,CAAA;QAC7F,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,sCAAsC,EAAE,kBAAkB,CAAC,CAAA;QACrG,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7D,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,2BAA2B,EAAE,eAAe,CAAC,CAAA;QACvF,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,QAAQ,GACZ,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,GAAG,KAAK,6BAA6B,IAAI,GAAG,KAAK,qBAAqB;YACxE,CAAC,CAAC,GAAG,KAAK,2BAA2B,CAAA;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,2BAA2B,QAAQ,KAAK,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAA;QAC1G,CAAC;QAED,MAAM,gBAAgB,GACpB,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAA;QAC1G,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;YAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,6BAA6B,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAA;YACtG,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,IAAI,CAAC,oBAAoB,CAC7B,QAAQ,EACR,MAAM,EACN,SAAS,EACT,UAAU,EACV,MAAM,EACN,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CACzC,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,kCAAkC,EAAE,kBAAkB,CAAC,CAAA;QACzG,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5G,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM,CAAA;QAE1F,OAAO;YACL,GAAG;YACH,KAAK;YACL,aAAa;YACb,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG,CAAA;IACH,CAAC,CAAA;IAED,sBAAsB,GAAG,KAAK,EAC5B,GAAW,EACX,QAAuB,EACvB,OAAe,EACf,KAAc,EACd,WAAoB,EASZ,EAAE;QACV,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAA;YACpE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;YAClD,IAAI,OAAO;gBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YAC5C,IAAI,WAAW;gBAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;YACxD,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YAExC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,oBAAoB,CAQ5C,wBAAwB,EAAE,GAAG,EAAE;gBAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBAC3B,UAAU,EAAE,kBAAkB;gBAC9B,mBAAmB,EAAE,IAAI;gBACzB,iBAAiB,EAAE,IAAI;aACxB,CAAC,CAAA;YACF,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACtD,OAAO;gBACL,eAAe,EAAE,IAAI,CAAC,OAAO;gBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IAED,0BAA0B,GAAG,KAAK,EAChC,WAAmB,EACnB,UAAqE,EACrE,YAAgC,EAChC,cAAkC,EAClC,KAAc,EAC2C,EAAE;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,UAAkC,CAAA;QAEtC,MAAM,oBAAoB,GAAG,MAAM,EAAE;aAClC,UAAU,CAAC,gBAAgB,CAAC;aAC5B,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,WAAW,CAAC;aACpD,KAAK,CAAC,CAAC,CAAC;aACR,GAAG,EAAE,CAAA;QAER,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;YAChC,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1F,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YAChE,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC/E,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC5C,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAA;YACrG,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;YAClD,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACvF,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;gBACpC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC,CAAA;YACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QACjD,CAAC;QAED,MAAM,OAAO,GAAyE,EAAE,CAAA;QACxF,IAAI,YAAY,IAAI,CAAC,UAAU,CAAC,WAAW;YAAE,OAAO,CAAC,WAAW,GAAG,YAAY,CAAA;QAC/E,IAAI,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,cAAc,CAAA;QAC7E,IAAI,UAAU,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;YACnG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAA;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAW,CAAC,CAAA;QACtF,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IACzC,CAAC,CAAA;IAED,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAE,KAAqB,EAAiB,EAAE;QACtF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC9C,IAAI,CAAC,UAAU;YAAE,OAAM;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAA;QAC1D,MAAM,UAAU,GACd,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;YACzF,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU;YAAE,OAAM;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;aAC9B,iBAAiB,CAAC;YACjB,EAAE,EAAE,UAAU;YACd,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE;YACT,gBAAgB,EAAE,CAAC;YACnB,MAAM;SACP,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpB,CAAC,CAAA;IAED,YAAY,GAAG,KAAK,EAAE,GAAsB,EAAsD,EAAE;QAClG,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAA;QAExC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACzG,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAA;YAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;YAChH,IAAI,CAAC,GAAG;gBAAE,MAAM,GAAG,CAAA;YACnB,OAAO;gBACL,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO;gBACnC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;gBACxB,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;gBACzC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,UAAU,EAAE,GAAG;aAC6C,CAAA;QAChE,CAAC,CAAC,CAAA;QAEF,MAAM,WAAW,GAAG,GAAG,QAAQ,IAAI,UAAU,CAAC,GAAG,EAAE,CAAA;QACnD,MAAM,YAAY,GAAG,OAAO,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAA;QACrD,MAAM,cAAc,GAAG,OAAO,EAAE,SAAS,IAAI,UAAU,CAAC,OAAO,CAAA;QAC/D,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,0BAA0B,CACrE,WAAW,EACX,UAAU,EACV,YAAY,EACZ,cAAc,EACd,WAAW,CACZ,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACrF,MAAM,iBAAiB,GAAG,YAAY,EAAE,eAAe,IAAI,EAAE,CAAA;QAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,gBAAgB,GAAqB;YACzC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC;YACrG;gBACE,QAAQ;gBACR,cAAc,EAAE,UAAU,CAAC,GAAG;gBAC9B,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,EACN,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,KAAK,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,GAAG;aACjH;SACF,CAAA;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CACpC,UAAU,CAAC,GAAG,EACd;YACE,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,IAAI,YAAY,EAAE,KAAK,IAAI,IAAI;YAC1E,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,IAAI,YAAY,EAAE,aAAa,CAAC;YAC3G,IAAI,EAAE,UAAU,CAAC,WAAW,IAAI,YAAY,IAAI,YAAY,EAAE,IAAI,IAAI,IAAI;YAC1E,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,QAAQ,IAAI,YAAY,EAAE,SAAS;gBAClE,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,IAAI,cAAc,IAAI,YAAY,EAAE,SAAS,IAAI,IAAI,EAAE;gBACzF,CAAC,CAAC,EAAE,CAAC;YACP,eAAe,EAAE,gBAAgB;YACjC,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;SAC/E,EACD,WAAW,CACZ,CAAA;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;QACzF,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAG,EAAE;YACrD,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,IAAI,YAAY,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtG,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,QAAQ,IAAI,cAAc,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC;SAC7E,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,gBAAgB,GAAG,KAAK,EACtB,GAAW,EACX,QAA2D,EAC3D,KAAa,EACb,QAAgB,EAChB,WAAoB,EACiD,EAAE;QACvE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,oBAAoB,CAK5C,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAA;QACxG,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,aAAa,CAAA;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QAClF,CAAC;QACD,OAAO,IAAkE,CAAA;IAC3E,CAAC,CAAA;IAED,WAAW,GAAG,KAAK,EACjB,KAAa,EACb,QAAgB,EAChB,IAAa,EACuC,EAAE;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAC1B,iBAAiB,EACjB,KAAK,EACL,QAAQ,EACR,IAAI,CACL,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAA;QAC/E,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,WAAW,GAAG,KAAK,EAAE,KAAa,EAAE,QAAgB,EAAsD,EAAE;QAC1G,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAC1B,6BAA6B,EAC7B,KAAK,EACL,QAAQ,CACT,CAAA;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACvG,CAAC,CAAA;CACF"}

package/dist/auth/recovery.d.ts

@@ -0,0 +1,41 @@
+import type { EntryId } from '../db';
+import type { Core } from '../index';
+import { type AuthEmailPurpose, type AuthUser, type CompleteAccountRecoveryInput, type ForgotPasswordInput, type InitiateAccountRecoveryInput, type ResetPasswordInput, type SetRecoveryEmailInput, type TransactionalEmailPayload, type VerifyEmailInput, type VerifyRecoveryEmailInput } from './schema';
+import type { AuthSessionEngine } from './session';
+export declare class AuthRecoveryEngine {
+    #private;
+    constructor(coreClient: Core, session: AuthSessionEngine);
+    getLastDevEmail: (to: string, purpose: AuthEmailPurpose) => TransactionalEmailPayload | undefined;
+    sendVerificationEmail: (userId?: EntryId) => Promise<{
+        sent: true;
+        expiresInMinutes: number;
+    }>;
+    verifyEmail: (raw: VerifyEmailInput) => Promise<{
+        verified: true;
+        userId: string;
+    }>;
+    forgotPassword: (raw: ForgotPasswordInput) => Promise<{
+        sent: true;
+    }>;
+    resetPassword: (raw: ResetPasswordInput) => Promise<{
+        reset: true;
+    }>;
+    setRecoveryEmail: (raw: SetRecoveryEmailInput, userId?: EntryId) => Promise<{
+        recoveryEmail: string;
+        recoveryEmailVerified: false;
+        sent: true;
+    }>;
+    verifyRecoveryEmail: (raw: VerifyRecoveryEmailInput, userId?: EntryId) => Promise<{
+        recoveryEmail: string;
+        recoveryEmailVerified: true;
+        verified: true;
+    }>;
+    initiateAccountRecovery: (raw: InitiateAccountRecoveryInput) => Promise<{
+        initiated: true;
+    }>;
+    completeAccountRecovery: (raw: CompleteAccountRecoveryInput) => Promise<{
+        user: AuthUser;
+        sessionCookie: string;
+    }>;
+}
+//# sourceMappingURL=recovery.d.ts.map

package/dist/auth/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../src/auth/recovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AACpC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAQL,KAAK,gBAAgB,EAErB,KAAK,QAAQ,EACb,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC9B,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAGlD,qBAAa,kBAAkB;;IAI7B,YAAY,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAGvD;IAED,eAAe,OAAQ,MAAM,WAAW,gBAAgB,KAAG,yBAAyB,GAAG,SAAS,CACtC;IA4I1D,qBAAqB,YACX,OAAO,KACd,OAAO,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC,CAYnD;IAaD,WAAW,QAAe,gBAAgB,KAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAcvF;IAED,cAAc,QAAe,mBAAmB,KAAG,OAAO,CAAC;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAWzE;IAED,aAAa,QAAe,kBAAkB,KAAG,OAAO,CAAC;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAOxE;IAED,gBAAgB,QACT,qBAAqB,WAClB,OAAO,KACd,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAmC9E;IAED,mBAAmB,QACZ,wBAAwB,WACrB,OAAO,KACd,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAejF;IAED,uBAAuB,QAAe,4BAA4B,KAAG,OAAO,CAAC;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,CAoBhG;IAED,uBAAuB,QAChB,4BAA4B,KAChC,OAAO,CAAC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAqCpD;CACF"}

package/dist/auth/recovery.js

@@ -0,0 +1,250 @@
+import { randomBytes, randomInt } from 'node:crypto';
+import { completeAccountRecoveryBody, forgotPasswordBody, initiateAccountRecoveryBody, resetPasswordBody, setRecoveryEmailBody, verifyEmailBody, verifyRecoveryEmailBody } from './schema';
+import { hashToken, normalizeDate, safeEqualHex } from './utils';
+export class AuthRecoveryEngine {
+    #core;
+    #session;
+    constructor(coreClient, session) {
+        this.#core = coreClient;
+        this.#session = session;
+    }
+    getLastDevEmail = (to, purpose) => this.#core.internals.emails.getLastDevEmail(to, purpose);
+    #issueAuthToken = async (userId, purpose, targetEmail, expiresInMinutes = this.#core.config.emails.otpTtlMinutes) => {
+        const normalizedTarget = targetEmail.trim().toLowerCase();
+        const code = String(randomInt(100_000, 1_000_000));
+        const token = randomBytes(32).toString('base64url');
+        const tokenHash = hashToken(code);
+        const urlTokenHash = hashToken(token);
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + expiresInMinutes * 60_000);
+        const docId = `${userId}_${purpose}`;
+        await this.#core.db
+            .firestore()
+            .collection('auth_tokens')
+            .doc(docId)
+            .set({
+            id: docId,
+            userId,
+            purpose,
+            targetEmail: normalizedTarget,
+            tokenHash,
+            urlTokenHash,
+            attempts: 0,
+            expiresAt,
+            consumedAt: null,
+            deleted: false,
+            createdAt: now,
+            updatedAt: now
+        });
+        const payload = {
+            to: normalizedTarget,
+            purpose,
+            code,
+            token,
+            expiresInMinutes,
+            userId
+        };
+        await this.#core.internals.emails.dispatchAuthEmail(payload);
+        return payload;
+    };
+    #consumeAuthToken = async (userId, purpose, expectedTargetEmail, codeOrToken) => {
+        const db = this.#core.db.firestore();
+        const docRef = db.collection('auth_tokens').doc(`${userId}_${purpose}`);
+        const maxAttempts = this.#core.config.emails.maxVerifyAttempts;
+        const normalizedExpected = expectedTargetEmail.trim().toLowerCase();
+        const candidateHash = hashToken(codeOrToken);
+        const outcome = await db.runTransaction(async (tx) => {
+            const snap = await tx.get(docRef);
+            if (!snap.exists)
+                return 'missing_or_consumed';
+            const data = snap.data();
+            if (!data || data.deleted === true || data.consumedAt != null)
+                return 'missing_or_consumed';
+            const attempts = typeof data.attempts === 'number' ? data.attempts : 0;
+            if (attempts >= maxAttempts)
+                return 'max_attempts';
+            const now = new Date();
+            if (normalizeDate(data.expiresAt, new Date(0)).getTime() <= now.getTime()) {
+                tx.update(docRef, { deleted: true, updatedAt: now });
+                return 'expired';
+            }
+            const targetEmail = String(data.targetEmail ?? '').trim().toLowerCase();
+            const tokenHash = String(data.tokenHash ?? '');
+            const urlTokenHash = typeof data.urlTokenHash === 'string' ? data.urlTokenHash : '';
+            const matches = targetEmail === normalizedExpected &&
+                (safeEqualHex(candidateHash, tokenHash) ||
+                    (Boolean(urlTokenHash) && safeEqualHex(candidateHash, urlTokenHash)));
+            if (!matches) {
+                const nextAttempts = attempts + 1;
+                const exhausted = nextAttempts >= maxAttempts;
+                tx.update(docRef, {
+                    attempts: nextAttempts,
+                    ...(exhausted ? { deleted: true, consumedAt: now } : {}),
+                    updatedAt: now
+                });
+                return exhausted ? 'max_attempts' : 'mismatch';
+            }
+            tx.update(docRef, { consumedAt: now, deleted: true, updatedAt: now });
+            return 'valid';
+        });
+        if (outcome === 'valid')
+            return;
+        if (outcome === 'expired')
+            this.#core.errors.httpError(400, 'Verification token has expired', 'TOKEN_EXPIRED');
+        if (outcome === 'max_attempts') {
+            this.#core.errors.httpError(400, 'Maximum verification attempts exceeded; token invalidated', 'TOKEN_MAX_ATTEMPTS_EXCEEDED');
+        }
+        this.#core.errors.httpError(400, 'Invalid or expired verification code', 'INVALID_TOKEN');
+    };
+    #requireUserByEmail = async (email, errMessage, errCode, rejectDisabled = false) => {
+        const normalizedEmail = email.trim().toLowerCase();
+        const user = await this.#session
+            .getAuth()
+            .getUserByEmail(normalizedEmail)
+            .catch(() => undefined);
+        if (!user || !user.email || (rejectDisabled && user.disabled)) {
+            return this.#core.errors.httpError(400, errMessage, errCode);
+        }
+        return { user, normalizedEmail };
+    };
+    #revokeAllUserSessions = async (uid) => {
+        this.#session.evictUserTokens(uid);
+        await Promise.all([
+            this.#session.recordRevocation(uid, this.#core.env.isDev),
+            this.#session
+                .getAuth()
+                .revokeRefreshTokens(uid)
+                .catch(() => { })
+        ]);
+    };
+    sendVerificationEmail = async (userId = this.#core.userId) => {
+        if (!userId)
+            return this.#core.errors.httpError(401, 'Unauthorized', 'UNAUTHORIZED');
+        const user = await this.#session
+            .getAuth()
+            .getUser(userId)
+            .catch(() => undefined);
+        if (!user || !user.email) {
+            return this.#core.errors.httpError(400, 'User does not have a primary email address', 'MISSING_EMAIL');
+        }
+        const expiresInMinutes = this.#core.config.emails.otpTtlMinutes;
+        await this.#issueAuthToken(user.uid, 'verify_email', user.email, expiresInMinutes);
+        return { sent: true, expiresInMinutes };
+    };
+    #consumeAndUpsertMeta = async (uid, purpose, targetEmail, codeOrToken, metaPatch) => {
+        await this.#consumeAuthToken(uid, purpose, targetEmail, codeOrToken);
+        await this.#session.upsertUserAuthMeta(uid, metaPatch, this.#core.env.isDev);
+    };
+    verifyEmail = async (raw) => {
+        const { email, codeOrToken } = verifyEmailBody.parse(raw);
+        const { user, normalizedEmail } = await this.#requireUserByEmail(email, 'Invalid email or verification token', 'INVALID_TOKEN');
+        await this.#consumeAndUpsertMeta(user.uid, 'verify_email', user.email, codeOrToken, {
+            email: normalizedEmail,
+            emailVerified: true
+        });
+        await this.#session.getAuth().updateUser(user.uid, { emailVerified: true });
+        this.#session.evictUserTokens(user.uid);
+        return { verified: true, userId: user.uid };
+    };
+    forgotPassword = async (raw) => {
+        const { email } = forgotPasswordBody.parse(raw);
+        const normalizedEmail = email.trim().toLowerCase();
+        const user = await this.#session
+            .getAuth()
+            .getUserByEmail(normalizedEmail)
+            .catch(() => undefined);
+        if (user && user.email && !user.disabled) {
+            await this.#issueAuthToken(user.uid, 'reset_password', user.email, this.#core.config.emails.otpTtlMinutes);
+        }
+        return { sent: true };
+    };
+    resetPassword = async (raw) => {
+        const { email, codeOrToken, newPassword } = resetPasswordBody.parse(raw);
+        const { user } = await this.#requireUserByEmail(email, 'Invalid email or reset token', 'INVALID_TOKEN');
+        await this.#consumeAuthToken(user.uid, 'reset_password', user.email, codeOrToken);
+        await this.#session.getAuth().updateUser(user.uid, { password: newPassword });
+        await this.#revokeAllUserSessions(user.uid);
+        return { reset: true };
+    };
+    setRecoveryEmail = async (raw, userId = this.#core.userId) => {
+        if (!userId)
+            return this.#core.errors.httpError(401, 'Unauthorized', 'UNAUTHORIZED');
+        const { recoveryEmail } = setRecoveryEmailBody.parse(raw);
+        const normalizedRecovery = recoveryEmail.trim().toLowerCase();
+        const user = await this.#session
+            .getAuth()
+            .getUser(userId)
+            .catch(() => undefined);
+        if (!user)
+            return this.#core.errors.httpError(404, 'User not found', 'NOT_FOUND');
+        const primaryEmail = (user.email ?? '').trim().toLowerCase();
+        if (primaryEmail && normalizedRecovery === primaryEmail) {
+            return this.#core.errors.httpError(400, 'Recovery email must be different from primary email', 'INVALID_RECOVERY_EMAIL');
+        }
+        await this.#session.upsertUserAuthMeta(user.uid, {
+            ...(primaryEmail ? { email: primaryEmail } : {}),
+            recoveryEmail: normalizedRecovery,
+            recoveryEmailVerified: false
+        }, this.#core.env.isDev);
+        await this.#issueAuthToken(user.uid, 'verify_recovery_email', normalizedRecovery, this.#core.config.emails.otpTtlMinutes);
+        return { recoveryEmail: normalizedRecovery, recoveryEmailVerified: false, sent: true };
+    };
+    verifyRecoveryEmail = async (raw, userId = this.#core.userId) => {
+        if (!userId)
+            return this.#core.errors.httpError(401, 'Unauthorized', 'UNAUTHORIZED');
+        const { codeOrToken } = verifyRecoveryEmailBody.parse(raw);
+        const meta = await this.#session.getUserAuthMeta(userId, this.#core.env.isDev);
+        if (!meta?.recoveryEmail) {
+            return this.#core.errors.httpError(400, 'No recovery email configured for this account', 'MISSING_RECOVERY_EMAIL');
+        }
+        await this.#consumeAndUpsertMeta(userId, 'verify_recovery_email', meta.recoveryEmail, codeOrToken, {
+            recoveryEmailVerified: true
+        });
+        return { recoveryEmail: meta.recoveryEmail, recoveryEmailVerified: true, verified: true };
+    };
+    initiateAccountRecovery = async (raw) => {
+        const { primaryEmail, recoveryEmail } = initiateAccountRecoveryBody.parse(raw);
+        const normPrimary = primaryEmail.trim().toLowerCase();
+        const normRecovery = recoveryEmail.trim().toLowerCase();
+        const user = await this.#session
+            .getAuth()
+            .getUserByEmail(normPrimary)
+            .catch(() => undefined);
+        if (user && !user.disabled && (user.email ?? '').trim().toLowerCase() === normPrimary) {
+            const meta = await this.#session.getUserAuthMeta(user.uid, this.#core.env.isDev);
+            if (meta?.recoveryEmail === normRecovery && meta.recoveryEmailVerified === true) {
+                await this.#issueAuthToken(user.uid, 'account_recovery', normRecovery, this.#core.config.emails.recoveryOtpTtlMinutes);
+            }
+        }
+        return { initiated: true };
+    };
+    completeAccountRecovery = async (raw) => {
+        const { primaryEmail, recoveryEmail, codeOrToken, newPrimaryEmail, newPassword } = completeAccountRecoveryBody.parse(raw);
+        const normPrimary = primaryEmail.trim().toLowerCase();
+        const normRecovery = recoveryEmail.trim().toLowerCase();
+        const normNewPrimary = newPrimaryEmail.trim().toLowerCase();
+        const { user } = await this.#requireUserByEmail(normPrimary, 'Invalid account recovery request or token', 'INVALID_RECOVERY_REQUEST', true);
+        if ((user.email ?? '').trim().toLowerCase() !== normPrimary) {
+            return this.#core.errors.httpError(400, 'Invalid account recovery request or token', 'INVALID_RECOVERY_REQUEST');
+        }
+        const meta = await this.#session.getUserAuthMeta(user.uid, this.#core.env.isDev);
+        if (!meta || meta.recoveryEmail !== normRecovery || meta.recoveryEmailVerified !== true) {
+            return this.#core.errors.httpError(400, 'Invalid account recovery request or token', 'INVALID_RECOVERY_REQUEST');
+        }
+        await this.#consumeAndUpsertMeta(user.uid, 'account_recovery', normRecovery, codeOrToken, {
+            email: normNewPrimary,
+            emailVerified: true
+        });
+        await this.#session.getAuth().updateUser(user.uid, {
+            email: normNewPrimary,
+            emailVerified: true,
+            ...(newPassword ? { password: newPassword } : {})
+        });
+        await this.#revokeAllUserSessions(user.uid);
+        return this.#session.mintSessionForUid(user.uid, {
+            email: normNewPrimary,
+            emailVerified: true
+        });
+    };
+}
+//# sourceMappingURL=recovery.js.map

package/dist/auth/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/auth/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAIpD,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EAYxB,MAAM,UAAU,CAAA;AAEjB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAEhE,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAM;IACX,QAAQ,CAAmB;IAEpC,YAAY,UAAgB,EAAE,OAA0B;QACtD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAA;QACvB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED,eAAe,GAAG,CAAC,EAAU,EAAE,OAAyB,EAAyC,EAAE,CACjG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAE1D,eAAe,GAAG,KAAK,EACrB,MAAe,EACf,OAAyB,EACzB,WAAmB,EACnB,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EACrB,EAAE;QACtC,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;QAClD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,gBAAgB,GAAG,MAAM,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAA;QAEpC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE;aAChB,SAAS,EAAE;aACX,UAAU,CAAC,aAAa,CAAC;aACzB,GAAG,CAAC,KAAK,CAAC;aACV,GAAG,CAAC;YACH,EAAE,EAAE,KAAK;YACT,MAAM;YACN,OAAO;YACP,WAAW,EAAE,gBAAgB;YAC7B,SAAS;YACT,YAAY;YACZ,QAAQ,EAAE,CAAC;YACX,SAAS;YACT,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAA;QAEJ,MAAM,OAAO,GAA8B;YACzC,EAAE,EAAE,gBAAgB;YACpB,OAAO;YACP,IAAI;YACJ,KAAK;YACL,gBAAgB;YAChB,MAAM;SACP,CAAA;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,iBAAiB,GAAG,KAAK,EACvB,MAAe,EACf,OAAyB,EACzB,mBAA2B,EAC3B,WAAmB,EACJ,EAAE;QACjB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAA;QACpC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAA;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAA;QAC9D,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnE,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA;QAI5C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,CAAiB,KAAK,EAAE,EAAE,EAAE,EAAE;YACnE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO,qBAAqB,CAAA;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAyC,CAAA;YAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI;gBAAE,OAAO,qBAAqB,CAAA;YAE3F,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;YACtE,IAAI,QAAQ,IAAI,WAAW;gBAAE,OAAO,cAAc,CAAA;YAElD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC1E,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;gBACpD,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YACvE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;YAC9C,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAA;YACnF,MAAM,OAAO,GACX,WAAW,KAAK,kBAAkB;gBAClC,CAAC,YAAY,CAAC,aAAa,EAAE,SAAS,CAAC;oBACrC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;YAEzE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,YAAY,GAAG,QAAQ,GAAG,CAAC,CAAA;gBACjC,MAAM,SAAS,GAAG,YAAY,IAAI,WAAW,CAAA;gBAC7C,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE;oBAChB,QAAQ,EAAE,YAAY;oBACtB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,SAAS,EAAE,GAAG;iBACf,CAAC,CAAA;gBACF,OAAO,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAA;YAChD,CAAC;YAED,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;YACrE,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;QAEF,IAAI,OAAO,KAAK,OAAO;YAAE,OAAM;QAC/B,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,gCAAgC,EAAE,eAAe,CAAC,CAAA;QAC9G,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CACzB,GAAG,EACH,2DAA2D,EAC3D,6BAA6B,CAC9B,CAAA;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,sCAAsC,EAAE,eAAe,CAAC,CAAA;IAC3F,CAAC,CAAA;IAED,mBAAmB,GAAG,KAAK,EACzB,KAAa,EACb,UAAkB,EAClB,OAAe,EACf,cAAc,GAAG,KAAK,EACkC,EAAE;QAC1D,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7B,OAAO,EAAE;aACT,cAAc,CAAC,eAAe,CAAC;aAC/B,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;IAClC,CAAC,CAAA;IAED,sBAAsB,GAAG,KAAK,EAAE,GAAY,EAAiB,EAAE;QAC7D,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;YACzD,IAAI,CAAC,QAAQ;iBACV,OAAO,EAAE;iBACT,mBAAmB,CAAC,GAAG,CAAC;iBACxB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;SACnB,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,qBAAqB,GAAG,KAAK,EAC3B,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EACgB,EAAE;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QACpF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7B,OAAO,EAAE;aACT,OAAO,CAAC,MAAM,CAAC;aACf,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,4CAA4C,EAAE,eAAe,CAAC,CAAA;QACxG,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAA;QAC/D,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAA;IAED,qBAAqB,GAAG,KAAK,EAC3B,GAAY,EACZ,OAAyB,EACzB,WAAmB,EACnB,WAAmB,EACnB,SAAiE,EAClD,EAAE;QACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QACpE,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC9E,CAAC,CAAA;IAED,WAAW,GAAG,KAAK,EAAE,GAAqB,EAA+C,EAAE;QACzF,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC9D,KAAK,EACL,qCAAqC,EACrC,eAAe,CAChB,CAAA;QACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,KAAM,EAAE,WAAW,EAAE;YACnF,KAAK,EAAE,eAAe;YACtB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;IAC7C,CAAC,CAAA;IAED,cAAc,GAAG,KAAK,EAAE,GAAwB,EAA2B,EAAE;QAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7B,OAAO,EAAE;aACT,cAAc,CAAC,eAAe,CAAC;aAC/B,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC5G,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACvB,CAAC,CAAA;IAED,aAAa,GAAG,KAAK,EAAE,GAAuB,EAA4B,EAAE;QAC1E,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,8BAA8B,EAAE,eAAe,CAAC,CAAA;QACvG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAM,EAAE,WAAW,CAAC,CAAA;QAClF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7E,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC,CAAA;IAED,gBAAgB,GAAG,KAAK,EACtB,GAA0B,EAC1B,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAC2C,EAAE;QAChF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QACpF,MAAM,EAAE,aAAa,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,MAAM,kBAAkB,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7B,OAAO,EAAE;aACT,OAAO,CAAC,MAAM,CAAC;aACf,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAA;QAEjF,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC5D,IAAI,YAAY,IAAI,kBAAkB,KAAK,YAAY,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAChC,GAAG,EACH,qDAAqD,EACrD,wBAAwB,CACzB,CAAA;QACH,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CACpC,IAAI,CAAC,GAAG,EACR;YACE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,aAAa,EAAE,kBAAkB;YACjC,qBAAqB,EAAE,KAAK;SAC7B,EACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CACrB,CAAA;QACD,MAAM,IAAI,CAAC,eAAe,CACxB,IAAI,CAAC,GAAG,EACR,uBAAuB,EACvB,kBAAkB,EAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CACvC,CAAA;QACD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACxF,CAAC,CAAA;IAED,mBAAmB,GAAG,KAAK,EACzB,GAA6B,EAC7B,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAC8C,EAAE;QACnF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QACpF,MAAM,EAAE,WAAW,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC9E,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAChC,GAAG,EACH,+CAA+C,EAC/C,wBAAwB,CACzB,CAAA;QACH,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,uBAAuB,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE;YACjG,qBAAqB,EAAE,IAAI;SAC5B,CAAC,CAAA;QACF,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC3F,CAAC,CAAA;IAED,uBAAuB,GAAG,KAAK,EAAE,GAAiC,EAAgC,EAAE;QAClG,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9E,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACrD,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7B,OAAO,EAAE;aACT,cAAc,CAAC,WAAW,CAAC;aAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChF,IAAI,IAAI,EAAE,aAAa,KAAK,YAAY,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;gBAChF,MAAM,IAAI,CAAC,eAAe,CACxB,IAAI,CAAC,GAAG,EACR,kBAAkB,EAClB,YAAY,EACZ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAC/C,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC,CAAA;IAED,uBAAuB,GAAG,KAAK,EAC7B,GAAiC,EACmB,EAAE;QACtD,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,GAC9E,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACrD,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAE3D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC7C,WAAW,EACX,2CAA2C,EAC3C,0BAA0B,EAC1B,IAAI,CACL,CAAA;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAA;QAClH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,YAAY,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAA;QAClH,CAAC;QAED,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE;YACxF,KAAK,EAAE,cAAc;YACrB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;YACjD,KAAK,EAAE,cAAc;YACrB,aAAa,EAAE,IAAI;YACnB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE3C,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE;YAC/C,KAAK,EAAE,cAAc;YACrB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;IACJ,CAAC,CAAA;CACF"}