@dyrected/core 2.6.2 → 2.6.4

package/dist/controllers/auth.controller.js

@@ -0,0 +1,572 @@
+import { randomBytes } from "node:crypto";
+import { getLockedUntilMs, resolveAuthLockoutConfig } from "../auth/lockout.js";
+import { hashPassword, verifyPassword } from "../auth/password.js";
+import { signCollectionToken, verifyCollectionToken } from "../auth/token.js";
+import { issueAuthSessionToken, revokeAllAuthSessions, revokeAuthSession, } from "../auth/sessions.js";
+import { sendEmail, buildWelcomeEmail, buildInviteEmail, buildResetPasswordEmail, buildPasswordChangedEmail, } from "../services/email.service.js";
+import { getRequestLogger } from "../observability.js";
+/**
+ * Handles auth endpoints for collections with `auth: true`.
+ *
+ * Routes registered (relative to `/api/collections/:slug`):
+ *   POST   /login
+ *   POST   /logout
+ *   GET    /me
+ *   POST   /refresh-token
+ *   POST   /forgot-password
+ *   POST   /reset-password
+ *   POST   /invite
+ *   POST   /accept-invite
+ */
+export class AuthController {
+    collection;
+    constructor(collection) {
+        this.collection = collection;
+    }
+    sanitizeUser(user) {
+        const { password: _password, loginAttempts: _loginAttempts, lockedUntil: _lockedUntil, ...safeUser } = user;
+        return safeUser;
+    }
+    hasField(name) {
+        return (this.collection.fields || []).some((field) => field.name === name);
+    }
+    async buildPendingInviteData(email) {
+        const data = {
+            email,
+            password: await hashPassword(randomBytes(32).toString("hex")),
+        };
+        if (this.hasField("status")) {
+            data.status = "pending";
+        }
+        return data;
+    }
+    buildAcceptedInviteData(hashedPassword, extraFields) {
+        const data = {
+            ...extraFields,
+            password: hashedPassword,
+        };
+        if (this.hasField("status")) {
+            data.status = "active";
+        }
+        return data;
+    }
+    clearLockoutState(c, userId) {
+        const db = c.get("config").db;
+        if (!db)
+            return Promise.resolve(null);
+        return db.update({
+            collection: this.collection.slug,
+            id: userId,
+            data: {
+                loginAttempts: 0,
+                lockedUntil: null,
+            },
+        });
+    }
+    async recordFailedLogin(c, user) {
+        const db = c.get("config").db;
+        if (!db)
+            return { justLocked: false, retryAfterSeconds: null };
+        const lockout = resolveAuthLockoutConfig(this.collection);
+        if (!lockout.enabled) {
+            return { justLocked: false, retryAfterSeconds: null };
+        }
+        const now = Date.now();
+        const lockedUntilMs = getLockedUntilMs(user.lockedUntil);
+        const lockExpired = lockedUntilMs !== null && lockedUntilMs <= now;
+        const currentAttempts = !lockExpired &&
+            typeof user.loginAttempts === "number" &&
+            user.loginAttempts > 0
+            ? user.loginAttempts
+            : 0;
+        const loginAttempts = currentAttempts + 1;
+        const justLocked = loginAttempts >= lockout.maxLoginAttempts;
+        const nextLockedUntil = justLocked
+            ? new Date(now + lockout.lockTime).toISOString()
+            : null;
+        await db.update({
+            collection: this.collection.slug,
+            id: String(user.id),
+            data: {
+                loginAttempts,
+                lockedUntil: nextLockedUntil,
+            },
+        });
+        return {
+            justLocked,
+            retryAfterSeconds: justLocked
+                ? Math.max(1, Math.ceil(lockout.lockTime / 1000))
+                : null,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // GET /init
+    // Checks if the first user needs to be created.
+    // ---------------------------------------------------------------------------
+    async init(c) {
+        const db = c.get("config").db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const result = await db.find({
+            collection: this.collection.slug,
+            limit: 1,
+        });
+        return c.json({
+            initialized: result.total > 0,
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /first-user
+    // Creates the first user if none exist.
+    // ---------------------------------------------------------------------------
+    async registerFirstUser(c) {
+        const config = c.get("config");
+        const db = config.db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        // 1. Check if users already exist
+        const check = await db.find({
+            collection: this.collection.slug,
+            limit: 1,
+        });
+        if (check.total > 0) {
+            return c.json({ error: true, message: "Initial user already exists." }, 403);
+        }
+        const body = await c.req.json().catch(() => null);
+        if (!body?.email || !body?.password) {
+            return c.json({ error: true, message: "email and password are required." }, 400);
+        }
+        // 2. Create the user
+        const hashedPassword = await hashPassword(body.password);
+        const user = await db.create({
+            collection: this.collection.slug,
+            data: {
+                ...body,
+                password: hashedPassword,
+                roles: ["admin"], // Default first user to admin
+            },
+        });
+        // 3. Log them in immediately
+        const token = await issueAuthSessionToken({
+            config,
+            userId: user.id,
+            email: user.email,
+            collection: this.collection.slug,
+            ip: c.get("clientIp"),
+            authSource: "local",
+        });
+        // Send welcome email (best-effort — never block login)
+        const { subject, html } = buildWelcomeEmail(config, { email: body.email });
+        sendEmail(config, { to: body.email, subject, html }).catch((err) => getRequestLogger(c, "auth").error({
+            err,
+            msg: "Failed to send welcome email",
+            email: body.email,
+        }));
+        const safeUser = this.sanitizeUser(user);
+        return c.json({ token, user: safeUser });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /login
+    // ---------------------------------------------------------------------------
+    async login(c) {
+        const db = c.get("config").db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const body = await c.req.json().catch(() => null);
+        if (!body?.email || !body?.password) {
+            return c.json({ error: true, message: "email and password are required." }, 400);
+        }
+        const result = await db.find({
+            collection: this.collection.slug,
+            where: { email: body.email },
+            limit: 1,
+        });
+        const user = result.docs[0];
+        if (!user) {
+            return c.json({ error: true, message: "Invalid email or password." }, 401);
+        }
+        if (user.status === "pending") {
+            return c.json({ error: true, message: "This invitation has not been accepted yet." }, 403);
+        }
+        const lockedUntilMs = getLockedUntilMs(user.lockedUntil);
+        if (lockedUntilMs !== null && lockedUntilMs > Date.now()) {
+            const retryAfterSeconds = Math.max(1, Math.ceil((lockedUntilMs - Date.now()) / 1000));
+            c.header("Retry-After", String(retryAfterSeconds));
+            return c.json({
+                error: true,
+                message: "Too many login attempts. Try again later.",
+                retryAfterSeconds,
+            }, 429);
+        }
+        const valid = await verifyPassword(body.password, user.password);
+        if (!valid) {
+            const { justLocked, retryAfterSeconds } = await this.recordFailedLogin(c, user);
+            if (justLocked && retryAfterSeconds) {
+                c.header("Retry-After", String(retryAfterSeconds));
+                return c.json({
+                    error: true,
+                    message: "Too many login attempts. Try again later.",
+                    retryAfterSeconds,
+                }, 429);
+            }
+            return c.json({ error: true, message: "Invalid email or password." }, 401);
+        }
+        if ((typeof user.loginAttempts === "number" && user.loginAttempts > 0) ||
+            user.lockedUntil != null) {
+            await this.clearLockoutState(c, String(user.id));
+        }
+        const token = await issueAuthSessionToken({
+            config: c.get("config"),
+            userId: user.id,
+            email: user.email,
+            collection: this.collection.slug,
+            ip: c.get("clientIp"),
+            authSource: "local",
+        });
+        // Strip password before returning
+        const safeUser = this.sanitizeUser(user);
+        return c.json({ token, user: safeUser });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /logout
+    // Revoke the current session by default. Pass `?allSessions=true` to revoke
+    // every active session for the current account.
+    // ---------------------------------------------------------------------------
+    async logout(c) {
+        const requestUser = c.get("user");
+        const tokenPayload = c.get("authTokenPayload");
+        const allSessions = ["1", "true", "yes"].includes((c.req.query("allSessions") || "").toLowerCase());
+        if (!requestUser) {
+            if (allSessions) {
+                return c.json({ error: true, message: "Authentication required." }, 401);
+            }
+            return c.json({
+                success: true,
+                message: "Logged out. Discard your token.",
+            });
+        }
+        if (allSessions) {
+            await revokeAllAuthSessions(c.get("config"), {
+                userId: requestUser.sub,
+                collection: this.collection.slug,
+            });
+            return c.json({
+                success: true,
+                message: "All sessions have been logged out.",
+            });
+        }
+        if (tokenPayload?.sid) {
+            await revokeAuthSession(c.get("config"), tokenPayload.sid);
+            return c.json({
+                success: true,
+                message: "Logged out.",
+            });
+        }
+        return c.json({
+            success: true,
+            message: "Logged out. Discard your token.",
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // GET /me
+    // ---------------------------------------------------------------------------
+    async me(c) {
+        const db = c.get("config").db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const requestUser = c.get("user");
+        if (!requestUser) {
+            return c.json({ error: true, message: "Authentication required." }, 401);
+        }
+        const user = await db.findOne({
+            collection: this.collection.slug,
+            id: requestUser.sub,
+        });
+        if (!user) {
+            return c.json({ error: true, message: "User not found." }, 404);
+        }
+        const safeUser = this.sanitizeUser(user);
+        return c.json(safeUser);
+    }
+    // ---------------------------------------------------------------------------
+    // POST /refresh-token
+    // ---------------------------------------------------------------------------
+    async refreshToken(c) {
+        const requestUser = c.get("user");
+        if (!requestUser) {
+            return c.json({ error: true, message: "Authentication required." }, 401);
+        }
+        if (!requestUser.email) {
+            return c.json({ error: true, message: "Authenticated user is missing an email." }, 400);
+        }
+        const tokenPayload = c.get("authTokenPayload");
+        if (tokenPayload?.sid) {
+            const token = await signCollectionToken({
+                sub: requestUser.sub,
+                email: requestUser.email,
+                collection: this.collection.slug,
+                sid: tokenPayload.sid,
+            });
+            return c.json({ token });
+        }
+        const token = await issueAuthSessionToken({
+            config: c.get("config"),
+            userId: requestUser.sub,
+            email: requestUser.email,
+            collection: this.collection.slug,
+            ip: c.get("clientIp"),
+            authSource: "local",
+        });
+        return c.json({ token });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /forgot-password
+    // Requires config.email to be set. Silently succeeds if email not found
+    // to prevent email enumeration.
+    // ---------------------------------------------------------------------------
+    async forgotPassword(c) {
+        const config = c.get("config");
+        const db = config.db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const body = await c.req.json().catch(() => null);
+        if (!body?.email) {
+            return c.json({ error: true, message: "email is required." }, 400);
+        }
+        const result = await db.find({
+            collection: this.collection.slug,
+            where: { email: body.email },
+            limit: 1,
+        });
+        const user = result.docs[0];
+        if (user) {
+            // Issue a short-lived reset token (1-hour)
+            const resetToken = await signCollectionToken({
+                sub: user.id,
+                email: user.email,
+                collection: this.collection.slug,
+                purpose: "reset",
+            }, "1h");
+            // Append token to resetUrl if provided
+            const resetUrl = body?.resetUrl;
+            const url = resetUrl
+                ? `${resetUrl}${resetUrl.includes("?") ? "&" : "?"}token=${encodeURIComponent(resetToken)}`
+                : undefined;
+            try {
+                const { subject, html } = buildResetPasswordEmail(config, {
+                    token: resetToken,
+                    url,
+                });
+                await sendEmail(config, { to: user.email, subject, html });
+            }
+            catch (err) {
+                getRequestLogger(c, "auth").error({
+                    err,
+                    msg: "Failed to send password reset email",
+                    email: user.email,
+                });
+            }
+        }
+        return c.json({
+            success: true,
+            message: "If an account with that email exists, a reset link has been sent.",
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /reset-password
+    // Expects { token: string, password: string } in body.
+    // The token is the reset JWT issued by /forgot-password.
+    // ---------------------------------------------------------------------------
+    async resetPassword(c) {
+        const config = c.get("config");
+        const db = config.db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const body = await c.req.json().catch(() => null);
+        if (!body?.token || !body?.password) {
+            return c.json({ error: true, message: "token and password are required." }, 400);
+        }
+        // Verify the reset token
+        let payload;
+        try {
+            payload = await verifyCollectionToken(body.token);
+        }
+        catch {
+            return c.json({ error: true, message: "Reset token is invalid or has expired." }, 400);
+        }
+        if (payload.collection !== this.collection.slug ||
+            payload.purpose !== "reset") {
+            return c.json({ error: true, message: "Reset token is invalid or has expired." }, 400);
+        }
+        const hashedPassword = await hashPassword(body.password);
+        await db.update({
+            collection: this.collection.slug,
+            id: payload.sub,
+            data: {
+                password: hashedPassword,
+                loginAttempts: 0,
+                lockedUntil: null,
+            },
+        });
+        await revokeAllAuthSessions(config, {
+            userId: payload.sub,
+            collection: this.collection.slug,
+        });
+        // Notify the user their password was changed (security alert)
+        const { subject, html } = buildPasswordChangedEmail(config, {
+            email: payload.email,
+        });
+        sendEmail(config, { to: payload.email, subject, html }).catch((err) => getRequestLogger(c, "auth").error({
+            err,
+            msg: "Failed to send password-changed email",
+            email: payload.email,
+        }));
+        return c.json({
+            success: true,
+            message: "Password has been reset. You can now log in.",
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /invite
+    // Requires auth. Issues a signed invite token and emails it to the invitee.
+    // If inviteUrl is provided, the email uses a clickable acceptance URL.
+    // ---------------------------------------------------------------------------
+    async invite(c) {
+        const config = c.get("config");
+        const db = config.db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const requestUser = c.get("user");
+        if (!requestUser) {
+            return c.json({ error: true, message: "Authentication required." }, 401);
+        }
+        const body = await c.req.json().catch(() => null);
+        if (!body?.email) {
+            return c.json({ error: true, message: "email is required." }, 400);
+        }
+        // Prevent inviting an email that already has an active account.
+        const existing = await db.find({
+            collection: this.collection.slug,
+            where: { email: body.email },
+            limit: 1,
+        });
+        const existingUser = existing.docs[0];
+        const existingIsPending = existingUser?.status === "pending";
+        if (existingUser && !existingIsPending) {
+            return c.json({ error: true, message: "An account with that email already exists." }, 409);
+        }
+        if (!existingUser) {
+            await db.create({
+                collection: this.collection.slug,
+                data: await this.buildPendingInviteData(body.email),
+            });
+        }
+        // sub = invitee email (no user doc yet); purpose = 'invite'
+        const inviteToken = await signCollectionToken({
+            sub: body.email,
+            email: body.email,
+            collection: this.collection.slug,
+            purpose: "invite",
+        }, "7d");
+        const inviteUrl = body?.inviteUrl;
+        const url = inviteUrl
+            ? `${inviteUrl}${inviteUrl.includes("?") ? "&" : "?"}inviteToken=${encodeURIComponent(inviteToken)}`
+            : undefined;
+        try {
+            const { subject, html } = buildInviteEmail(config, {
+                token: inviteToken,
+                invitedByEmail: requestUser.email,
+                url,
+            });
+            await sendEmail(config, { to: body.email, subject, html });
+        }
+        catch (err) {
+            getRequestLogger(c, "auth").error({
+                err,
+                msg: "Failed to send invite email",
+                email: body.email,
+            });
+        }
+        return c.json({
+            success: true,
+            message: `Invite sent to ${body.email}.`,
+            token: inviteToken,
+            inviteUrl: url,
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // POST /accept-invite
+    // Public. Validates the invite token and creates the user account.
+    // Body: { token, password, ...extraFields }
+    // ---------------------------------------------------------------------------
+    async acceptInvite(c) {
+        const config = c.get("config");
+        const db = config.db;
+        if (!db)
+            return c.json({ message: "Database not configured" }, 500);
+        const body = await c.req.json().catch(() => null);
+        if (!body?.token || !body?.password) {
+            return c.json({ error: true, message: "token and password are required." }, 400);
+        }
+        let payload;
+        try {
+            payload = await verifyCollectionToken(body.token);
+        }
+        catch {
+            return c.json({ error: true, message: "Invite token is invalid or has expired." }, 400);
+        }
+        if (payload.collection !== this.collection.slug ||
+            payload.purpose !== "invite") {
+            return c.json({ error: true, message: "Invite token is invalid or has expired." }, 400);
+        }
+        const inviteeEmail = payload.sub;
+        // Guard against double-accept while still supporting pending pre-provisioned users.
+        const existing = await db.find({
+            collection: this.collection.slug,
+            where: { email: inviteeEmail },
+            limit: 1,
+        });
+        const existingUser = existing.docs[0];
+        const existingIsPending = existingUser?.status === "pending";
+        if (existingUser && !existingIsPending) {
+            return c.json({ error: true, message: "An account with that email already exists." }, 409);
+        }
+        const { token: _t, password: _p, ...extraFields } = body;
+        const hashedPassword = await hashPassword(body.password);
+        const user = existingUser
+            ? await db.update({
+                collection: this.collection.slug,
+                id: String(existingUser.id),
+                data: this.buildAcceptedInviteData(hashedPassword, extraFields),
+            })
+            : await db.create({
+                collection: this.collection.slug,
+                data: {
+                    ...extraFields,
+                    email: inviteeEmail,
+                    ...this.buildAcceptedInviteData(hashedPassword, {}),
+                },
+            });
+        // Log them in immediately
+        const sessionToken = await issueAuthSessionToken({
+            config,
+            userId: user.id,
+            email: inviteeEmail,
+            collection: this.collection.slug,
+            ip: c.get("clientIp"),
+            authSource: "local",
+        });
+        // Send welcome email (best-effort)
+        const { subject, html } = buildWelcomeEmail(config, {
+            email: inviteeEmail,
+        });
+        sendEmail(config, { to: inviteeEmail, subject, html }).catch((err) => getRequestLogger(c, "auth").error({
+            err,
+            msg: "Failed to send welcome email",
+            email: inviteeEmail,
+        }));
+        const safeUser = this.sanitizeUser(user);
+        return c.json({ token: sessionToken, user: safeUser }, 201);
+    }
+}
+//# sourceMappingURL=auth.controller.js.map

package/dist/controllers/auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,cAAc;IACjB,UAAU,CAAmB;IAErC,YAAY,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,MAAM,EACJ,QAAQ,EAAE,SAAS,EACnB,aAAa,EAAE,cAAc,EAC7B,WAAW,EAAE,YAAY,EACzB,GAAG,QAAQ,EACZ,GAAG,IAAI,CAAC;QACT,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,KAAa;QAChD,MAAM,IAAI,GAA4B;YACpC,KAAK;YACL,QAAQ,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC9D,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,uBAAuB,CAC7B,cAAsB,EACtB,WAAoC;QAEpC,MAAM,IAAI,GAA4B;YACpC,GAAG,WAAW;YACd,QAAQ,EAAE,cAAc;SACzB,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,CAA2B,EAAE,MAAc;QACnE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtC,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,MAAM;YACV,IAAI,EAAE;gBACJ,aAAa,EAAE,CAAC;gBAChB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,CAA2B,EAC3B,IAA6B;QAE7B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YACL,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAqB,EAAE,CAAC;QAEzE,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAqB,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,aAAa,KAAK,IAAI,IAAI,aAAa,IAAI,GAAG,CAAC;QACnE,MAAM,eAAe,GACnB,CAAC,WAAW;YACZ,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACtC,IAAI,CAAC,aAAa,GAAG,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC,aAAa;YACpB,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,aAAa,GAAG,eAAe,GAAG,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC;QAC7D,MAAM,eAAe,GAAG,UAAU;YAChC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;YAChD,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,EAAE,CAAC,MAAM,CAAC;YACd,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,EAAE;gBACJ,aAAa;gBACb,WAAW,EAAE,eAAe;aAC7B;SACF,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,iBAAiB,EAAE,UAAU;gBAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;gBACjD,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,gDAAgD;IAChD,8EAA8E;IAC9E,KAAK,CAAC,IAAI,CAAC,CAA2B;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,WAAW,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,wCAAwC;IACxC,8EAA8E;IAC9E,KAAK,CAAC,iBAAiB,CAAC,CAA2B;QACjD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,kCAAkC;QAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE,EACxD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,8BAA8B;aACjD;SACF,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,uDAAuD;QACvD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACjE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;YAChC,GAAG;YACH,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAC9E,KAAK,CAAC,KAAK,CAAC,CAA2B;QACrC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAChC,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAC/C,CAAC;YACF,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,2CAA2C;gBACpD,iBAAiB;aAClB,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAkB,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACpE,CAAC,EACD,IAAI,CACL,CAAC;YACF,IAAI,UAAU,IAAI,iBAAiB,EAAE,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,2CAA2C;oBACpD,iBAAiB;iBAClB,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;YAClE,IAAI,CAAC,WAAW,IAAI,IAAI,EACxB,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,4EAA4E;IAC5E,gDAAgD;IAChD,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAC/C,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CACjD,CAAC;QAEF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;aACjC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CAAC,CAA2B;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,WAAW,CAAC,GAAG;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAAC,CAA2B;QAC5C,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACnE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;gBACtC,GAAG,EAAE,WAAW,CAAC,GAAG;gBACpB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;YAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,wEAAwE;IACxE,gCAAgC;IAChC,8EAA8E;IAC9E,KAAK,CAAC,cAAc,CAAC,CAA2B;QAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,IAAI,EAAE,CAAC;YACT,2CAA2C;YAC3C,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAC1C;gBACE,GAAG,EAAE,IAAI,CAAC,EAAE;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,OAAO,EAAE,OAAO;aACjB,EACD,IAAI,CACL,CAAC;YAEF,uCAAuC;YACvC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,CAAC;YAChC,MAAM,GAAG,GAAG,QAAQ;gBAClB,CAAC,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,kBAAkB,CAAC,UAAU,CAAC,EAAE;gBAC3F,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE;oBACxD,KAAK,EAAE,UAAU;oBACjB,GAAG;iBACJ,CAAC,CAAC;gBACH,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;oBAChC,GAAG;oBACH,GAAG,EAAE,qCAAqC;oBAC1C,KAAK,EAAE,IAAI,CAAC,KAAe;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,uDAAuD;IACvD,yDAAyD;IACzD,8EAA8E;IAC9E,KAAK,CAAC,aAAa,CAAC,CAA2B;QAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAClE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI;YAC3C,OAAO,CAAC,OAAO,KAAK,OAAO,EAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAClE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,MAAM,CAAC;YACd,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACJ,QAAQ,EAAE,cAAc;gBACxB,aAAa,EAAE,CAAC;gBAChB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QACH,MAAM,qBAAqB,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;SACjC,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,yBAAyB,CAAC,MAAM,EAAE;YAC1D,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACpE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;YAChC,GAAG;YACH,GAAG,EAAE,uCAAuC;YAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,4EAA4E;IAC5E,uEAAuE;IACvE,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,gEAAgE;QAChE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAwC,CAAC;QAC7E,MAAM,iBAAiB,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QAE7D,IAAI,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,EAAE,CAAC,MAAM,CAAC;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,IAAI,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,4DAA4D;QAC5D,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAC3C;YACE,GAAG,EAAE,IAAI,CAAC,KAAK;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,OAAO,EAAE,QAAQ;SAClB,EACD,IAAI,CACL,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,CAAC;QAClC,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,kBAAkB,CAAC,WAAW,CAAC,EAAE;YACpG,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE;gBACjD,KAAK,EAAE,WAAW;gBAClB,cAAc,EAAE,WAAW,CAAC,KAAK;gBACjC,GAAG;aACJ,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;gBAChC,GAAG;gBACH,GAAG,EAAE,6BAA6B;gBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,GAAG;YACxC,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,mEAAmE;IACnE,4CAA4C;IAC5C,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAAC,CAA2B;QAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACnE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI;YAC3C,OAAO,CAAC,OAAO,KAAK,QAAQ,EAC5B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACnE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC;QAEjC,oFAAoF;QACpF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;YAC9B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAwC,CAAC;QAC7E,MAAM,iBAAiB,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QAE7D,IAAI,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,YAAY;YACvB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;gBAChB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3B,IAAI,EAAE,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,WAAW,CAAC;aAChE,CAAC;YACF,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;gBAChB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,IAAI,EAAE;oBACJ,GAAG,WAAW;oBACd,KAAK,EAAE,YAAY;oBACnB,GAAG,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,EAAE,CAAC;iBACpD;aACF,CAAC,CAAC;QAEL,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC;YAC/C,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE;YAClD,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACnE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;YAChC,GAAG;YACH,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,YAAY;SACpB,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;CACF"}