@dotdo/oauth 0.1.0

package/dist/server.js

@@ -0,0 +1,579 @@
+/**
+ * @dotdo/oauth - OAuth 2.1 Server Implementation
+ *
+ * Creates a Hono app that implements OAuth 2.1 authorization server endpoints:
+ * - /.well-known/oauth-authorization-server (RFC 8414)
+ * - /.well-known/oauth-protected-resource (draft-ietf-oauth-resource-metadata)
+ * - /authorize (authorization endpoint)
+ * - /callback (upstream OAuth callback)
+ * - /token (token endpoint)
+ * - /register (dynamic client registration - RFC 7591)
+ * - /revoke (token revocation - RFC 7009)
+ *
+ * This server acts as a federated OAuth 2.1 server:
+ * - It is an OAuth SERVER to downstream clients (Claude, ChatGPT, etc.)
+ * - It is an OAuth CLIENT to upstream providers (WorkOS, Auth0, etc.)
+ */
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { generateAuthorizationCode, generateToken, generateState, verifyCodeChallenge, hashClientSecret, } from './pkce';
+/**
+ * Create an OAuth 2.1 server as a Hono app
+ *
+ * @example
+ * ```typescript
+ * import { createOAuth21Server, MemoryOAuthStorage } from '@dotdo/oauth'
+ *
+ * const oauthServer = createOAuth21Server({
+ *   issuer: 'https://mcp.do',
+ *   storage: new MemoryOAuthStorage(),
+ *   upstream: {
+ *     provider: 'workos',
+ *     apiKey: env.WORKOS_API_KEY,
+ *     clientId: env.WORKOS_CLIENT_ID,
+ *   },
+ * })
+ *
+ * // Mount on your main app
+ * app.route('/', oauthServer)
+ * ```
+ */
+export function createOAuth21Server(config) {
+    const { issuer, storage, upstream, scopes = ['openid', 'profile', 'email', 'offline_access'], accessTokenTtl = 3600, refreshTokenTtl = 2592000, authCodeTtl = 600, enableDynamicRegistration = true, onUserAuthenticated, debug = false, } = config;
+    const app = new Hono();
+    // CORS for all endpoints
+    app.use('*', cors({
+        origin: '*',
+        allowMethods: ['GET', 'POST', 'OPTIONS'],
+        allowHeaders: ['Content-Type', 'Authorization'],
+        exposeHeaders: ['WWW-Authenticate'],
+    }));
+    // ═══════════════════════════════════════════════════════════════════════════
+    // Well-Known Endpoints
+    // ═══════════════════════════════════════════════════════════════════════════
+    /**
+     * OAuth 2.1 Authorization Server Metadata (RFC 8414)
+     */
+    app.get('/.well-known/oauth-authorization-server', (c) => {
+        const metadata = {
+            issuer,
+            authorization_endpoint: `${issuer}/authorize`,
+            token_endpoint: `${issuer}/token`,
+            registration_endpoint: enableDynamicRegistration ? `${issuer}/register` : undefined,
+            revocation_endpoint: `${issuer}/revoke`,
+            scopes_supported: scopes,
+            response_types_supported: ['code'],
+            grant_types_supported: ['authorization_code', 'refresh_token'],
+            token_endpoint_auth_methods_supported: ['none', 'client_secret_basic', 'client_secret_post'],
+            code_challenge_methods_supported: ['S256'],
+        };
+        return c.json(metadata);
+    });
+    /**
+     * OAuth 2.1 Protected Resource Metadata
+     */
+    app.get('/.well-known/oauth-protected-resource', (c) => {
+        const metadata = {
+            resource: issuer,
+            authorization_servers: [issuer],
+            scopes_supported: scopes,
+            bearer_methods_supported: ['header'],
+        };
+        return c.json(metadata);
+    });
+    // ═══════════════════════════════════════════════════════════════════════════
+    // Authorization Endpoint
+    // ═══════════════════════════════════════════════════════════════════════════
+    /**
+     * Authorization endpoint - starts the OAuth flow
+     *
+     * Required parameters:
+     * - response_type: must be 'code'
+     * - client_id: registered client ID
+     * - redirect_uri: must match registered URI
+     * - code_challenge: PKCE code challenge
+     * - code_challenge_method: must be 'S256'
+     *
+     * Optional:
+     * - scope: requested scopes
+     * - state: CSRF protection
+     */
+    app.get('/authorize', async (c) => {
+        const params = c.req.query();
+        // Validate required parameters
+        const clientId = params.client_id;
+        const redirectUri = params.redirect_uri;
+        const responseType = params.response_type;
+        const codeChallenge = params.code_challenge;
+        const codeChallengeMethod = params.code_challenge_method;
+        const scope = params.scope;
+        const state = params.state;
+        if (debug) {
+            console.log('[OAuth] Authorize request:', { clientId, redirectUri, responseType, scope });
+        }
+        // Validate response_type
+        if (responseType !== 'code') {
+            return c.json({ error: 'unsupported_response_type', error_description: 'Only code response type is supported' }, 400);
+        }
+        // Validate client
+        if (!clientId) {
+            return c.json({ error: 'invalid_request', error_description: 'client_id is required' }, 400);
+        }
+        const client = await storage.getClient(clientId);
+        if (!client) {
+            return c.json({ error: 'invalid_client', error_description: 'Client not found' }, 400);
+        }
+        // Validate redirect_uri
+        if (!redirectUri) {
+            return c.json({ error: 'invalid_request', error_description: 'redirect_uri is required' }, 400);
+        }
+        if (!client.redirectUris.includes(redirectUri)) {
+            return c.json({ error: 'invalid_request', error_description: 'redirect_uri not registered for this client' }, 400);
+        }
+        // Validate PKCE (required in OAuth 2.1)
+        if (!codeChallenge) {
+            return redirectWithError(redirectUri, 'invalid_request', 'code_challenge is required for OAuth 2.1', state);
+        }
+        if (codeChallengeMethod !== 'S256') {
+            return redirectWithError(redirectUri, 'invalid_request', 'code_challenge_method must be S256', state);
+        }
+        // Store the authorization request and redirect to upstream
+        const upstreamState = generateState(64);
+        // Store pending auth as a temporary authorization code that will be replaced
+        await storage.saveAuthorizationCode({
+            code: `pending:${upstreamState}`,
+            clientId,
+            userId: '', // Will be filled after upstream auth
+            redirectUri,
+            scope,
+            codeChallenge,
+            codeChallengeMethod: 'S256',
+            state,
+            issuedAt: Date.now(),
+            expiresAt: Date.now() + authCodeTtl * 1000,
+        });
+        // Build upstream authorization URL
+        const upstreamAuthUrl = buildUpstreamAuthUrl(upstream, {
+            redirectUri: `${issuer}/callback`,
+            state: upstreamState,
+            scope: scope || 'openid profile email',
+        });
+        if (debug) {
+            console.log('[OAuth] Redirecting to upstream:', upstreamAuthUrl);
+        }
+        return c.redirect(upstreamAuthUrl);
+    });
+    /**
+     * Callback from upstream OAuth provider
+     */
+    app.get('/callback', async (c) => {
+        const code = c.req.query('code');
+        const upstreamState = c.req.query('state');
+        const error = c.req.query('error');
+        const errorDescription = c.req.query('error_description');
+        if (debug) {
+            console.log('[OAuth] Callback received:', { code: !!code, state: upstreamState, error });
+        }
+        if (error) {
+            // Retrieve pending auth to get redirect_uri
+            const pendingAuth = await storage.consumeAuthorizationCode(`pending:${upstreamState}`);
+            if (pendingAuth) {
+                return redirectWithError(pendingAuth.redirectUri, error, errorDescription, pendingAuth.state);
+            }
+            return c.json({ error, error_description: errorDescription }, 400);
+        }
+        if (!code || !upstreamState) {
+            return c.json({ error: 'invalid_request', error_description: 'Missing code or state' }, 400);
+        }
+        // Retrieve pending authorization
+        const pendingAuth = await storage.consumeAuthorizationCode(`pending:${upstreamState}`);
+        if (!pendingAuth) {
+            return c.json({ error: 'invalid_request', error_description: 'Invalid or expired state' }, 400);
+        }
+        try {
+            // Exchange code with upstream provider
+            const upstreamTokens = await exchangeUpstreamCode(upstream, code, `${issuer}/callback`);
+            if (debug) {
+                console.log('[OAuth] Upstream tokens received:', { hasAccessToken: !!upstreamTokens.access_token });
+            }
+            // Get or create user
+            const user = await getOrCreateUser(storage, upstreamTokens.user, onUserAuthenticated);
+            // Generate our own authorization code
+            const authCode = generateAuthorizationCode();
+            await storage.saveAuthorizationCode({
+                code: authCode,
+                clientId: pendingAuth.clientId,
+                userId: user.id,
+                redirectUri: pendingAuth.redirectUri,
+                scope: pendingAuth.scope,
+                codeChallenge: pendingAuth.codeChallenge,
+                codeChallengeMethod: 'S256',
+                state: pendingAuth.state,
+                issuedAt: Date.now(),
+                expiresAt: Date.now() + authCodeTtl * 1000,
+            });
+            // Redirect back to client with our code
+            const redirectUrl = new URL(pendingAuth.redirectUri);
+            redirectUrl.searchParams.set('code', authCode);
+            if (pendingAuth.state) {
+                redirectUrl.searchParams.set('state', pendingAuth.state);
+            }
+            if (debug) {
+                console.log('[OAuth] Redirecting to client:', redirectUrl.toString());
+            }
+            return c.redirect(redirectUrl.toString());
+        }
+        catch (err) {
+            if (debug) {
+                console.error('[OAuth] Callback error:', err);
+            }
+            return redirectWithError(pendingAuth.redirectUri, 'server_error', err instanceof Error ? err.message : 'Authentication failed', pendingAuth.state);
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════════════════
+    // Token Endpoint
+    // ═══════════════════════════════════════════════════════════════════════════
+    /**
+     * Token endpoint - exchanges authorization code for tokens
+     */
+    app.post('/token', async (c) => {
+        const contentType = c.req.header('content-type');
+        let params;
+        if (contentType?.includes('application/json')) {
+            params = await c.req.json();
+        }
+        else {
+            const formData = await c.req.parseBody();
+            params = Object.fromEntries(Object.entries(formData).map(([k, v]) => [k, String(v)]));
+        }
+        const grantType = params.grant_type;
+        if (debug) {
+            console.log('[OAuth] Token request:', { grantType, clientId: params.client_id });
+        }
+        if (grantType === 'authorization_code') {
+            return handleAuthorizationCodeGrant(c, params, storage, accessTokenTtl, refreshTokenTtl, debug);
+        }
+        else if (grantType === 'refresh_token') {
+            return handleRefreshTokenGrant(c, params, storage, accessTokenTtl, refreshTokenTtl, debug);
+        }
+        else {
+            return c.json({ error: 'unsupported_grant_type', error_description: 'Only authorization_code and refresh_token grants are supported' }, 400);
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════════════════
+    // Dynamic Client Registration
+    // ═══════════════════════════════════════════════════════════════════════════
+    if (enableDynamicRegistration) {
+        /**
+         * Client registration endpoint (RFC 7591)
+         */
+        app.post('/register', async (c) => {
+            const body = await c.req.json();
+            if (debug) {
+                console.log('[OAuth] Client registration:', body);
+            }
+            if (!body.client_name) {
+                return c.json({ error: 'invalid_client_metadata', error_description: 'client_name is required' }, 400);
+            }
+            if (!body.redirect_uris || body.redirect_uris.length === 0) {
+                return c.json({ error: 'invalid_client_metadata', error_description: 'redirect_uris is required' }, 400);
+            }
+            // Generate client credentials
+            const clientId = `client_${generateToken(24)}`;
+            const clientSecret = generateToken(48);
+            const clientSecretHash = await hashClientSecret(clientSecret);
+            const client = {
+                clientId,
+                clientSecretHash,
+                clientName: body.client_name,
+                redirectUris: body.redirect_uris,
+                grantTypes: body.grant_types || ['authorization_code', 'refresh_token'],
+                responseTypes: body.response_types || ['code'],
+                tokenEndpointAuthMethod: body.token_endpoint_auth_method || 'client_secret_basic',
+                scope: body.scope,
+                createdAt: Date.now(),
+            };
+            await storage.saveClient(client);
+            // Return client credentials (secret is only shown once)
+            return c.json({
+                client_id: clientId,
+                client_secret: clientSecret,
+                client_id_issued_at: Math.floor(client.createdAt / 1000),
+                client_secret_expires_at: 0, // Never expires
+                client_name: client.clientName,
+                redirect_uris: client.redirectUris,
+                grant_types: client.grantTypes,
+                response_types: client.responseTypes,
+                token_endpoint_auth_method: client.tokenEndpointAuthMethod,
+                scope: client.scope,
+            }, 201);
+        });
+    }
+    // ═══════════════════════════════════════════════════════════════════════════
+    // Token Revocation
+    // ═══════════════════════════════════════════════════════════════════════════
+    /**
+     * Token revocation endpoint (RFC 7009)
+     */
+    app.post('/revoke', async (c) => {
+        const formData = await c.req.parseBody();
+        const token = String(formData.token || '');
+        const tokenTypeHint = String(formData.token_type_hint || '');
+        if (!token) {
+            return c.json({ error: 'invalid_request', error_description: 'token is required' }, 400);
+        }
+        // Try to revoke as access token first
+        if (tokenTypeHint !== 'refresh_token') {
+            await storage.revokeAccessToken(token);
+        }
+        // Then try as refresh token
+        if (tokenTypeHint !== 'access_token') {
+            await storage.revokeRefreshToken(token);
+        }
+        // RFC 7009 says to return 200 OK even if token was invalid
+        return c.json({ success: true });
+    });
+    return app;
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// Helper Functions
+// ═══════════════════════════════════════════════════════════════════════════
+function redirectWithError(redirectUri, error, description, state) {
+    const url = new URL(redirectUri);
+    url.searchParams.set('error', error);
+    if (description) {
+        url.searchParams.set('error_description', description);
+    }
+    if (state) {
+        url.searchParams.set('state', state);
+    }
+    return Response.redirect(url.toString(), 302);
+}
+function buildUpstreamAuthUrl(upstream, params) {
+    if (upstream.provider === 'workos') {
+        const url = new URL('https://api.workos.com/user_management/authorize');
+        url.searchParams.set('client_id', upstream.clientId);
+        url.searchParams.set('redirect_uri', params.redirectUri);
+        url.searchParams.set('response_type', 'code');
+        url.searchParams.set('state', params.state);
+        url.searchParams.set('provider', 'authkit');
+        return url.toString();
+    }
+    // Custom provider
+    if (!upstream.authorizationEndpoint) {
+        throw new Error('authorizationEndpoint is required for custom providers');
+    }
+    const url = new URL(upstream.authorizationEndpoint);
+    url.searchParams.set('client_id', upstream.clientId);
+    url.searchParams.set('redirect_uri', params.redirectUri);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('state', params.state);
+    url.searchParams.set('scope', params.scope);
+    return url.toString();
+}
+async function exchangeUpstreamCode(upstream, code, redirectUri) {
+    if (upstream.provider === 'workos') {
+        const response = await fetch('https://api.workos.com/user_management/authenticate', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Authorization': `Bearer ${upstream.apiKey}`,
+            },
+            body: new URLSearchParams({
+                grant_type: 'authorization_code',
+                client_id: upstream.clientId,
+                code,
+                redirect_uri: redirectUri,
+            }).toString(),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`WorkOS authentication failed: ${response.status} - ${error}`);
+        }
+        return response.json();
+    }
+    // Custom provider
+    if (!upstream.tokenEndpoint) {
+        throw new Error('tokenEndpoint is required for custom providers');
+    }
+    const response = await fetch(upstream.tokenEndpoint, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: upstream.clientId,
+            client_secret: upstream.apiKey,
+            code,
+            redirect_uri: redirectUri,
+        }).toString(),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Token exchange failed: ${response.status} - ${error}`);
+    }
+    return response.json();
+}
+async function getOrCreateUser(storage, upstreamUser, onUserAuthenticated) {
+    // Try to find existing user by email
+    let user = await storage.getUserByEmail(upstreamUser.email);
+    if (!user) {
+        // Create new user
+        user = {
+            id: upstreamUser.id,
+            email: upstreamUser.email,
+            name: [upstreamUser.first_name, upstreamUser.last_name].filter(Boolean).join(' ') || undefined,
+            organizationId: upstreamUser.organization_id,
+            createdAt: Date.now(),
+            updatedAt: Date.now(),
+            lastLoginAt: Date.now(),
+        };
+        await storage.saveUser(user);
+    }
+    else {
+        // Update last login
+        user.lastLoginAt = Date.now();
+        user.updatedAt = Date.now();
+        await storage.saveUser(user);
+    }
+    await onUserAuthenticated?.(user);
+    return user;
+}
+async function handleAuthorizationCodeGrant(c, params, storage, accessTokenTtl, refreshTokenTtl, debug) {
+    const { code, client_id, redirect_uri, code_verifier } = params;
+    if (!code) {
+        return c.json({ error: 'invalid_request', error_description: 'code is required' }, 400);
+    }
+    if (!client_id) {
+        return c.json({ error: 'invalid_request', error_description: 'client_id is required' }, 400);
+    }
+    // Consume authorization code (one-time use)
+    const authCode = await storage.consumeAuthorizationCode(code);
+    if (!authCode) {
+        return c.json({ error: 'invalid_grant', error_description: 'Invalid or expired authorization code' }, 400);
+    }
+    // Verify client
+    if (authCode.clientId !== client_id) {
+        return c.json({ error: 'invalid_grant', error_description: 'Client mismatch' }, 400);
+    }
+    // Verify redirect_uri
+    if (redirect_uri && authCode.redirectUri !== redirect_uri) {
+        return c.json({ error: 'invalid_grant', error_description: 'redirect_uri mismatch' }, 400);
+    }
+    // Verify PKCE
+    if (authCode.codeChallenge) {
+        if (!code_verifier) {
+            return c.json({ error: 'invalid_request', error_description: 'code_verifier is required' }, 400);
+        }
+        const valid = await verifyCodeChallenge(code_verifier, authCode.codeChallenge, authCode.codeChallengeMethod || 'S256');
+        if (!valid) {
+            return c.json({ error: 'invalid_grant', error_description: 'Invalid code_verifier' }, 400);
+        }
+    }
+    // Check expiration
+    if (Date.now() > authCode.expiresAt) {
+        return c.json({ error: 'invalid_grant', error_description: 'Authorization code expired' }, 400);
+    }
+    // Generate tokens
+    const accessToken = generateToken(48);
+    const refreshToken = generateToken(64);
+    const now = Date.now();
+    await storage.saveAccessToken({
+        token: accessToken,
+        tokenType: 'Bearer',
+        clientId: authCode.clientId,
+        userId: authCode.userId,
+        scope: authCode.scope,
+        issuedAt: now,
+        expiresAt: now + accessTokenTtl * 1000,
+    });
+    await storage.saveRefreshToken({
+        token: refreshToken,
+        clientId: authCode.clientId,
+        userId: authCode.userId,
+        scope: authCode.scope,
+        issuedAt: now,
+        expiresAt: refreshTokenTtl > 0 ? now + refreshTokenTtl * 1000 : undefined,
+    });
+    // Save grant
+    await storage.saveGrant({
+        id: `${authCode.userId}:${authCode.clientId}`,
+        userId: authCode.userId,
+        clientId: authCode.clientId,
+        scope: authCode.scope,
+        createdAt: now,
+        lastUsedAt: now,
+    });
+    if (debug) {
+        console.log('[OAuth] Tokens issued for user:', authCode.userId);
+    }
+    const response = {
+        access_token: accessToken,
+        token_type: 'Bearer',
+        expires_in: accessTokenTtl,
+        refresh_token: refreshToken,
+        scope: authCode.scope,
+    };
+    return c.json(response);
+}
+async function handleRefreshTokenGrant(c, params, storage, accessTokenTtl, refreshTokenTtl, debug) {
+    const { refresh_token, client_id } = params;
+    if (!refresh_token) {
+        return c.json({ error: 'invalid_request', error_description: 'refresh_token is required' }, 400);
+    }
+    const storedRefresh = await storage.getRefreshToken(refresh_token);
+    if (!storedRefresh) {
+        return c.json({ error: 'invalid_grant', error_description: 'Invalid refresh token' }, 400);
+    }
+    if (storedRefresh.revoked) {
+        return c.json({ error: 'invalid_grant', error_description: 'Refresh token has been revoked' }, 400);
+    }
+    if (storedRefresh.expiresAt && Date.now() > storedRefresh.expiresAt) {
+        return c.json({ error: 'invalid_grant', error_description: 'Refresh token expired' }, 400);
+    }
+    if (client_id && storedRefresh.clientId !== client_id) {
+        return c.json({ error: 'invalid_grant', error_description: 'Client mismatch' }, 400);
+    }
+    // Generate new tokens
+    const accessToken = generateToken(48);
+    const newRefreshToken = generateToken(64);
+    const now = Date.now();
+    await storage.saveAccessToken({
+        token: accessToken,
+        tokenType: 'Bearer',
+        clientId: storedRefresh.clientId,
+        userId: storedRefresh.userId,
+        scope: storedRefresh.scope,
+        issuedAt: now,
+        expiresAt: now + accessTokenTtl * 1000,
+    });
+    // Rotate refresh token
+    await storage.revokeRefreshToken(refresh_token);
+    await storage.saveRefreshToken({
+        token: newRefreshToken,
+        clientId: storedRefresh.clientId,
+        userId: storedRefresh.userId,
+        scope: storedRefresh.scope,
+        issuedAt: now,
+        expiresAt: refreshTokenTtl > 0 ? now + refreshTokenTtl * 1000 : undefined,
+    });
+    // Update grant last used
+    const grant = await storage.getGrant(storedRefresh.userId, storedRefresh.clientId);
+    if (grant) {
+        grant.lastUsedAt = now;
+        await storage.saveGrant(grant);
+    }
+    if (debug) {
+        console.log('[OAuth] Tokens refreshed for user:', storedRefresh.userId);
+    }
+    const response = {
+        access_token: accessToken,
+        token_type: 'Bearer',
+        expires_in: accessTokenTtl,
+        refresh_token: newRefreshToken,
+        scope: storedRefresh.scope,
+    };
+    return c.json(response);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAWhC,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,QAAQ,CAAA;AA4Bf;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,EACJ,MAAM,EACN,OAAO,EACP,QAAQ,EACR,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,EACzD,cAAc,GAAG,IAAI,EACrB,eAAe,GAAG,OAAO,EACzB,WAAW,GAAG,GAAG,EACjB,yBAAyB,GAAG,IAAI,EAChC,mBAAmB,EACnB,KAAK,GAAG,KAAK,GACd,GAAG,MAAM,CAAA;IAEV,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IAEtB,yBAAyB;IACzB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;QAChB,MAAM,EAAE,GAAG;QACX,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;QACxC,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC/C,aAAa,EAAE,CAAC,kBAAkB,CAAC;KACpC,CAAC,CAAC,CAAA;IAEH,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAE9E;;OAEG;IACH,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,CAAC,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAwB;YACpC,MAAM;YACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;YAC7C,cAAc,EAAE,GAAG,MAAM,QAAQ;YACjC,qBAAqB,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,SAAS;YACnF,mBAAmB,EAAE,GAAG,MAAM,SAAS;YACvC,gBAAgB,EAAE,MAAM;YACxB,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,qCAAqC,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;YAC5F,gCAAgC,EAAE,CAAC,MAAM,CAAC;SAC3C,CAAA;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF;;OAEG;IACH,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,QAAQ,GAA0B;YACtC,QAAQ,EAAE,MAAM;YAChB,qBAAqB,EAAE,CAAC,MAAM,CAAC;YAC/B,gBAAgB,EAAE,MAAM;YACxB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;SACrC,CAAA;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAE9E;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;QAE5B,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAA;QACjC,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAA;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAA;QACzC,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAA;QAC3C,MAAM,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAA;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QAE1B,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3F,CAAC;QAED,yBAAyB;QACzB,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,sCAAsC,EAAgB,EAAE,GAAG,CAAC,CAAA;QACrI,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;QAC5G,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAgB,EAAE,GAAG,CAAC,CAAA;QACtG,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,0BAA0B,EAAgB,EAAE,GAAG,CAAC,CAAA;QAC/G,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,6CAA6C,EAAgB,EAAE,GAAG,CAAC,CAAA;QAClI,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAA;QAC7G,CAAC;QAED,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAA;QACvG,CAAC;QAED,2DAA2D;QAC3D,MAAM,aAAa,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;QAEvC,6EAA6E;QAC7E,MAAM,OAAO,CAAC,qBAAqB,CAAC;YAClC,IAAI,EAAE,WAAW,aAAa,EAAE;YAChC,QAAQ;YACR,MAAM,EAAE,EAAE,EAAE,qCAAqC;YACjD,WAAW;YACX,KAAK;YACL,aAAa;YACb,mBAAmB,EAAE,MAAM;YAC3B,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI;SAC3C,CAAC,CAAA;QAEF,mCAAmC;QACnC,MAAM,eAAe,GAAG,oBAAoB,CAAC,QAAQ,EAAE;YACrD,WAAW,EAAE,GAAG,MAAM,WAAW;YACjC,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,KAAK,IAAI,sBAAsB;SACvC,CAAC,CAAA;QAEF,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,eAAe,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF;;OAEG;IACH,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAEzD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1F,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,4CAA4C;YAC5C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,WAAW,aAAa,EAAE,CAAC,CAAA;YACtF,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,iBAAiB,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;YAC/F,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAgB,EAAE,GAAG,CAAC,CAAA;QAClF,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;QAC5G,CAAC;QAED,iCAAiC;QACjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,WAAW,aAAa,EAAE,CAAC,CAAA;QACtF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,0BAA0B,EAAgB,EAAE,GAAG,CAAC,CAAA;QAC/G,CAAC;QAED,IAAI,CAAC;YACH,uCAAuC;YACvC,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,CAAA;YAEvF,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAA;YACrG,CAAC;YAED,qBAAqB;YACrB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;YAErF,sCAAsC;YACtC,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAA;YAE5C,MAAM,OAAO,CAAC,qBAAqB,CAAC;gBAClC,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,mBAAmB,EAAE,MAAM;gBAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;gBACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI;aAC3C,CAAC,CAAA;YAEF,wCAAwC;YACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;YACpD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC9C,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACtB,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;YAC1D,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;YACvE,CAAC;YAED,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,iBAAiB,CACtB,WAAW,CAAC,WAAW,EACvB,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAC5D,WAAW,CAAC,KAAK,CAClB,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,iBAAiB;IACjB,8EAA8E;IAE9E;;OAEG;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QAChD,IAAI,MAA8B,CAAA;QAElC,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAA;YACxC,MAAM,GAAG,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACzD,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAA;QAEnC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,OAAO,4BAA4B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,CAAC,CAAA;QACjG,CAAC;aAAM,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YACzC,OAAO,uBAAuB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,CAAC,CAAA;QAC5F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gEAAgE,EAAgB,EAAE,GAAG,CAAC,CAAA;QAC5J,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E,IAAI,yBAAyB,EAAE,CAAC;QAC9B;;WAEG;QACH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAOzB,CAAA;YAEJ,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAA;YACnD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,yBAAyB,EAAgB,EAAE,GAAG,CAAC,CAAA;YACtH,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,2BAA2B,EAAgB,EAAE,GAAG,CAAC,CAAA;YACxH,CAAC;YAED,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,UAAU,aAAa,CAAC,EAAE,CAAC,EAAE,CAAA;YAC9C,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;YACtC,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAA;YAE7D,MAAM,MAAM,GAAgB;gBAC1B,QAAQ;gBACR,gBAAgB;gBAChB,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,UAAU,EAAG,IAAI,CAAC,WAAyC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACtG,aAAa,EAAG,IAAI,CAAC,cAA+C,IAAI,CAAC,MAAM,CAAC;gBAChF,uBAAuB,EAAG,IAAI,CAAC,0BAAqE,IAAI,qBAAqB;gBAC7H,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAA;YAED,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAEhC,wDAAwD;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;gBAC3B,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;gBACxD,wBAAwB,EAAE,CAAC,EAAE,gBAAgB;gBAC7C,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;gBACpC,0BAA0B,EAAE,MAAM,CAAC,uBAAuB;gBAC1D,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,EAAE,GAAG,CAAC,CAAA;QACT,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E;;OAEG;IACH,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;QAC1C,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC,CAAA;QAE5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAgB,EAAE,GAAG,CAAC,CAAA;QACxG,CAAC;QAED,sCAAsC;QACtC,IAAI,aAAa,KAAK,eAAe,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC;QAED,4BAA4B;QAC5B,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACzC,CAAC;QAED,2DAA2D;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,iBAAiB,CAAC,WAAmB,EAAE,KAAa,EAAE,WAAoB,EAAE,KAAc;IACjG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;IAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACpC,IAAI,WAAW,EAAE,CAAC;QAChB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA6B,EAC7B,MAA6D;IAE7D,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kDAAkD,CAAC,CAAA;QACvE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;QAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAC3C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;IACvB,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAA;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAA6B,EAC7B,IAAY,EACZ,WAAmB;IAanB,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qDAAqD,EAAE;YAClF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,eAAe,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE;aAC7C;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,IAAI;gBACJ,YAAY,EAAE,WAAW;aAC1B,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,MAAM,KAAK,EAAE,CAAC,CAAA;QAChF,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,IAAI;YACJ,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,KAAK,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;AACxB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAqB,EACrB,YAA8G,EAC9G,mBAA+D;IAE/D,qCAAqC;IACrC,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;IAE3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,kBAAkB;QAClB,IAAI,GAAG;YACL,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;YAC9F,cAAc,EAAE,YAAY,CAAC,eAAe;YAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAA;QACD,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;SAAM,CAAC;QACN,oBAAoB;QACpB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3B,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAA;IAEjC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,CAAM,EACN,MAA8B,EAC9B,OAAqB,EACrB,cAAsB,EACtB,eAAuB,EACvB,KAAc;IAEd,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAAgB,EAAE,GAAG,CAAC,CAAA;IACvG,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;IAC5G,CAAC;IAED,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,uCAAuC,EAAgB,EAAE,GAAG,CAAC,CAAA;IAC1H,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAgB,EAAE,GAAG,CAAC,CAAA;IACpG,CAAC;IAED,sBAAsB;IACtB,IAAI,YAAY,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;IAC1G,CAAC;IAED,cAAc;IACd,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,2BAA2B,EAAgB,EAAE,GAAG,CAAC,CAAA;QAChH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAA;QACtH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;QAC1G,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,4BAA4B,EAAgB,EAAE,GAAG,CAAC,CAAA;IAC/G,CAAC;IAED,kBAAkB;IAClB,MAAM,WAAW,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IACrC,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,OAAO,CAAC,eAAe,CAAC;QAC5B,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG,GAAG,cAAc,GAAG,IAAI;KACvC,CAAC,CAAA;IAEF,MAAM,OAAO,CAAC,gBAAgB,CAAC;QAC7B,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CAAA;IAEF,aAAa;IACb,MAAM,OAAO,CAAC,SAAS,CAAC;QACtB,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE;QAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,GAAG;QACd,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,QAAQ,GAAkB;QAC9B,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,YAAY;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAA;IAED,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,CAAM,EACN,MAA8B,EAC9B,OAAqB,EACrB,cAAsB,EACtB,eAAuB,EACvB,KAAc;IAEd,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAE3C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,2BAA2B,EAAgB,EAAE,GAAG,CAAC,CAAA;IAChH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAA;IAClE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;IAC1G,CAAC;IAED,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,gCAAgC,EAAgB,EAAE,GAAG,CAAC,CAAA;IACnH,CAAC;IAED,IAAI,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;QACpE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAgB,EAAE,GAAG,CAAC,CAAA;IAC1G,CAAC;IAED,IAAI,SAAS,IAAI,aAAa,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAgB,EAAE,GAAG,CAAC,CAAA;IACpG,CAAC;IAED,sBAAsB;IACtB,MAAM,WAAW,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IACrC,MAAM,eAAe,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,OAAO,CAAC,eAAe,CAAC;QAC5B,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG,GAAG,cAAc,GAAG,IAAI;KACvC,CAAC,CAAA;IAEF,uBAAuB;IACvB,MAAM,OAAO,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;IAC/C,MAAM,OAAO,CAAC,gBAAgB,CAAC;QAC7B,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CAAA;IAEF,yBAAyB;IACzB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAClF,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,UAAU,GAAG,GAAG,CAAA;QACtB,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,QAAQ,GAAkB;QAC9B,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,eAAe;QAC9B,KAAK,EAAE,aAAa,CAAC,KAAK;KAC3B,CAAA;IAED,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC"}