@dyrected/core 2.8.2 → 2.9.0

package/dist/controllers/auth.controller.js

@@ -1,572 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { getLockedUntilMs, resolveAuthLockoutConfig } from "../auth/lockout.js";
-import { hashPassword, verifyPassword } from "../auth/password.js";
-import { signCollectionToken, verifyCollectionToken } from "../auth/token.js";
-import { issueAuthSessionToken, revokeAllAuthSessions, revokeAuthSession, } from "../auth/sessions.js";
-import { sendEmail, buildWelcomeEmail, buildInviteEmail, buildResetPasswordEmail, buildPasswordChangedEmail, } from "../services/email.service.js";
-import { getRequestLogger } from "../observability.js";
-/**
- * Handles auth endpoints for collections with `auth: true`.
- *
- * Routes registered (relative to `/api/collections/:slug`):
- *   POST   /login
- *   POST   /logout
- *   GET    /me
- *   POST   /refresh-token
- *   POST   /forgot-password
- *   POST   /reset-password
- *   POST   /invite
- *   POST   /accept-invite
- */
-export class AuthController {
-    collection;
-    constructor(collection) {
-        this.collection = collection;
-    }
-    sanitizeUser(user) {
-        const { password: _password, loginAttempts: _loginAttempts, lockedUntil: _lockedUntil, ...safeUser } = user;
-        return safeUser;
-    }
-    hasField(name) {
-        return (this.collection.fields || []).some((field) => field.name === name);
-    }
-    async buildPendingInviteData(email) {
-        const data = {
-            email,
-            password: await hashPassword(randomBytes(32).toString("hex")),
-        };
-        if (this.hasField("status")) {
-            data.status = "pending";
-        }
-        return data;
-    }
-    buildAcceptedInviteData(hashedPassword, extraFields) {
-        const data = {
-            ...extraFields,
-            password: hashedPassword,
-        };
-        if (this.hasField("status")) {
-            data.status = "active";
-        }
-        return data;
-    }
-    clearLockoutState(c, userId) {
-        const db = c.get("config").db;
-        if (!db)
-            return Promise.resolve(null);
-        return db.update({
-            collection: this.collection.slug,
-            id: userId,
-            data: {
-                loginAttempts: 0,
-                lockedUntil: null,
-            },
-        });
-    }
-    async recordFailedLogin(c, user) {
-        const db = c.get("config").db;
-        if (!db)
-            return { justLocked: false, retryAfterSeconds: null };
-        const lockout = resolveAuthLockoutConfig(this.collection);
-        if (!lockout.enabled) {
-            return { justLocked: false, retryAfterSeconds: null };
-        }
-        const now = Date.now();
-        const lockedUntilMs = getLockedUntilMs(user.lockedUntil);
-        const lockExpired = lockedUntilMs !== null && lockedUntilMs <= now;
-        const currentAttempts = !lockExpired &&
-            typeof user.loginAttempts === "number" &&
-            user.loginAttempts > 0
-            ? user.loginAttempts
-            : 0;
-        const loginAttempts = currentAttempts + 1;
-        const justLocked = loginAttempts >= lockout.maxLoginAttempts;
-        const nextLockedUntil = justLocked
-            ? new Date(now + lockout.lockTime).toISOString()
-            : null;
-        await db.update({
-            collection: this.collection.slug,
-            id: String(user.id),
-            data: {
-                loginAttempts,
-                lockedUntil: nextLockedUntil,
-            },
-        });
-        return {
-            justLocked,
-            retryAfterSeconds: justLocked
-                ? Math.max(1, Math.ceil(lockout.lockTime / 1000))
-                : null,
-        };
-    }
-    // ---------------------------------------------------------------------------
-    // GET /init
-    // Checks if the first user needs to be created.
-    // ---------------------------------------------------------------------------
-    async init(c) {
-        const db = c.get("config").db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const result = await db.find({
-            collection: this.collection.slug,
-            limit: 1,
-        });
-        return c.json({
-            initialized: result.total > 0,
-        });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /first-user
-    // Creates the first user if none exist.
-    // ---------------------------------------------------------------------------
-    async registerFirstUser(c) {
-        const config = c.get("config");
-        const db = config.db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        // 1. Check if users already exist
-        const check = await db.find({
-            collection: this.collection.slug,
-            limit: 1,
-        });
-        if (check.total > 0) {
-            return c.json({ error: true, message: "Initial user already exists." }, 403);
-        }
-        const body = await c.req.json().catch(() => null);
-        if (!body?.email || !body?.password) {
-            return c.json({ error: true, message: "email and password are required." }, 400);
-        }
-        // 2. Create the user
-        const hashedPassword = await hashPassword(body.password);
-        const user = await db.create({
-            collection: this.collection.slug,
-            data: {
-                ...body,
-                password: hashedPassword,
-                roles: ["admin"], // Default first user to admin
-            },
-        });
-        // 3. Log them in immediately
-        const token = await issueAuthSessionToken({
-            config,
-            userId: user.id,
-            email: user.email,
-            collection: this.collection.slug,
-            ip: c.get("clientIp"),
-            authSource: "local",
-        });
-        // Send welcome email (best-effort — never block login)
-        const { subject, html } = buildWelcomeEmail(config, { email: body.email });
-        sendEmail(config, { to: body.email, subject, html }).catch((err) => getRequestLogger(c, "auth").error({
-            err,
-            msg: "Failed to send welcome email",
-            email: body.email,
-        }));
-        const safeUser = this.sanitizeUser(user);
-        return c.json({ token, user: safeUser });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /login
-    // ---------------------------------------------------------------------------
-    async login(c) {
-        const db = c.get("config").db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const body = await c.req.json().catch(() => null);
-        if (!body?.email || !body?.password) {
-            return c.json({ error: true, message: "email and password are required." }, 400);
-        }
-        const result = await db.find({
-            collection: this.collection.slug,
-            where: { email: body.email },
-            limit: 1,
-        });
-        const user = result.docs[0];
-        if (!user) {
-            return c.json({ error: true, message: "Invalid email or password." }, 401);
-        }
-        if (user.status === "pending") {
-            return c.json({ error: true, message: "This invitation has not been accepted yet." }, 403);
-        }
-        const lockedUntilMs = getLockedUntilMs(user.lockedUntil);
-        if (lockedUntilMs !== null && lockedUntilMs > Date.now()) {
-            const retryAfterSeconds = Math.max(1, Math.ceil((lockedUntilMs - Date.now()) / 1000));
-            c.header("Retry-After", String(retryAfterSeconds));
-            return c.json({
-                error: true,
-                message: "Too many login attempts. Try again later.",
-                retryAfterSeconds,
-            }, 429);
-        }
-        const valid = await verifyPassword(body.password, user.password);
-        if (!valid) {
-            const { justLocked, retryAfterSeconds } = await this.recordFailedLogin(c, user);
-            if (justLocked && retryAfterSeconds) {
-                c.header("Retry-After", String(retryAfterSeconds));
-                return c.json({
-                    error: true,
-                    message: "Too many login attempts. Try again later.",
-                    retryAfterSeconds,
-                }, 429);
-            }
-            return c.json({ error: true, message: "Invalid email or password." }, 401);
-        }
-        if ((typeof user.loginAttempts === "number" && user.loginAttempts > 0) ||
-            user.lockedUntil != null) {
-            await this.clearLockoutState(c, String(user.id));
-        }
-        const token = await issueAuthSessionToken({
-            config: c.get("config"),
-            userId: user.id,
-            email: user.email,
-            collection: this.collection.slug,
-            ip: c.get("clientIp"),
-            authSource: "local",
-        });
-        // Strip password before returning
-        const safeUser = this.sanitizeUser(user);
-        return c.json({ token, user: safeUser });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /logout
-    // Revoke the current session by default. Pass `?allSessions=true` to revoke
-    // every active session for the current account.
-    // ---------------------------------------------------------------------------
-    async logout(c) {
-        const requestUser = c.get("user");
-        const tokenPayload = c.get("authTokenPayload");
-        const allSessions = ["1", "true", "yes"].includes((c.req.query("allSessions") || "").toLowerCase());
-        if (!requestUser) {
-            if (allSessions) {
-                return c.json({ error: true, message: "Authentication required." }, 401);
-            }
-            return c.json({
-                success: true,
-                message: "Logged out. Discard your token.",
-            });
-        }
-        if (allSessions) {
-            await revokeAllAuthSessions(c.get("config"), {
-                userId: requestUser.sub,
-                collection: this.collection.slug,
-            });
-            return c.json({
-                success: true,
-                message: "All sessions have been logged out.",
-            });
-        }
-        if (tokenPayload?.sid) {
-            await revokeAuthSession(c.get("config"), tokenPayload.sid);
-            return c.json({
-                success: true,
-                message: "Logged out.",
-            });
-        }
-        return c.json({
-            success: true,
-            message: "Logged out. Discard your token.",
-        });
-    }
-    // ---------------------------------------------------------------------------
-    // GET /me
-    // ---------------------------------------------------------------------------
-    async me(c) {
-        const db = c.get("config").db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const requestUser = c.get("user");
-        if (!requestUser) {
-            return c.json({ error: true, message: "Authentication required." }, 401);
-        }
-        const user = await db.findOne({
-            collection: this.collection.slug,
-            id: requestUser.sub,
-        });
-        if (!user) {
-            return c.json({ error: true, message: "User not found." }, 404);
-        }
-        const safeUser = this.sanitizeUser(user);
-        return c.json(safeUser);
-    }
-    // ---------------------------------------------------------------------------
-    // POST /refresh-token
-    // ---------------------------------------------------------------------------
-    async refreshToken(c) {
-        const requestUser = c.get("user");
-        if (!requestUser) {
-            return c.json({ error: true, message: "Authentication required." }, 401);
-        }
-        if (!requestUser.email) {
-            return c.json({ error: true, message: "Authenticated user is missing an email." }, 400);
-        }
-        const tokenPayload = c.get("authTokenPayload");
-        if (tokenPayload?.sid) {
-            const token = await signCollectionToken({
-                sub: requestUser.sub,
-                email: requestUser.email,
-                collection: this.collection.slug,
-                sid: tokenPayload.sid,
-            });
-            return c.json({ token });
-        }
-        const token = await issueAuthSessionToken({
-            config: c.get("config"),
-            userId: requestUser.sub,
-            email: requestUser.email,
-            collection: this.collection.slug,
-            ip: c.get("clientIp"),
-            authSource: "local",
-        });
-        return c.json({ token });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /forgot-password
-    // Requires config.email to be set. Silently succeeds if email not found
-    // to prevent email enumeration.
-    // ---------------------------------------------------------------------------
-    async forgotPassword(c) {
-        const config = c.get("config");
-        const db = config.db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const body = await c.req.json().catch(() => null);
-        if (!body?.email) {
-            return c.json({ error: true, message: "email is required." }, 400);
-        }
-        const result = await db.find({
-            collection: this.collection.slug,
-            where: { email: body.email },
-            limit: 1,
-        });
-        const user = result.docs[0];
-        if (user) {
-            // Issue a short-lived reset token (1-hour)
-            const resetToken = await signCollectionToken({
-                sub: user.id,
-                email: user.email,
-                collection: this.collection.slug,
-                purpose: "reset",
-            }, "1h");
-            // Append token to resetUrl if provided
-            const resetUrl = body?.resetUrl;
-            const url = resetUrl
-                ? `${resetUrl}${resetUrl.includes("?") ? "&" : "?"}token=${encodeURIComponent(resetToken)}`
-                : undefined;
-            try {
-                const { subject, html } = buildResetPasswordEmail(config, {
-                    token: resetToken,
-                    url,
-                });
-                await sendEmail(config, { to: user.email, subject, html });
-            }
-            catch (err) {
-                getRequestLogger(c, "auth").error({
-                    err,
-                    msg: "Failed to send password reset email",
-                    email: user.email,
-                });
-            }
-        }
-        return c.json({
-            success: true,
-            message: "If an account with that email exists, a reset link has been sent.",
-        });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /reset-password
-    // Expects { token: string, password: string } in body.
-    // The token is the reset JWT issued by /forgot-password.
-    // ---------------------------------------------------------------------------
-    async resetPassword(c) {
-        const config = c.get("config");
-        const db = config.db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const body = await c.req.json().catch(() => null);
-        if (!body?.token || !body?.password) {
-            return c.json({ error: true, message: "token and password are required." }, 400);
-        }
-        // Verify the reset token
-        let payload;
-        try {
-            payload = await verifyCollectionToken(body.token);
-        }
-        catch {
-            return c.json({ error: true, message: "Reset token is invalid or has expired." }, 400);
-        }
-        if (payload.collection !== this.collection.slug ||
-            payload.purpose !== "reset") {
-            return c.json({ error: true, message: "Reset token is invalid or has expired." }, 400);
-        }
-        const hashedPassword = await hashPassword(body.password);
-        await db.update({
-            collection: this.collection.slug,
-            id: payload.sub,
-            data: {
-                password: hashedPassword,
-                loginAttempts: 0,
-                lockedUntil: null,
-            },
-        });
-        await revokeAllAuthSessions(config, {
-            userId: payload.sub,
-            collection: this.collection.slug,
-        });
-        // Notify the user their password was changed (security alert)
-        const { subject, html } = buildPasswordChangedEmail(config, {
-            email: payload.email,
-        });
-        sendEmail(config, { to: payload.email, subject, html }).catch((err) => getRequestLogger(c, "auth").error({
-            err,
-            msg: "Failed to send password-changed email",
-            email: payload.email,
-        }));
-        return c.json({
-            success: true,
-            message: "Password has been reset. You can now log in.",
-        });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /invite
-    // Requires auth. Issues a signed invite token and emails it to the invitee.
-    // If inviteUrl is provided, the email uses a clickable acceptance URL.
-    // ---------------------------------------------------------------------------
-    async invite(c) {
-        const config = c.get("config");
-        const db = config.db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const requestUser = c.get("user");
-        if (!requestUser) {
-            return c.json({ error: true, message: "Authentication required." }, 401);
-        }
-        const body = await c.req.json().catch(() => null);
-        if (!body?.email) {
-            return c.json({ error: true, message: "email is required." }, 400);
-        }
-        // Prevent inviting an email that already has an active account.
-        const existing = await db.find({
-            collection: this.collection.slug,
-            where: { email: body.email },
-            limit: 1,
-        });
-        const existingUser = existing.docs[0];
-        const existingIsPending = existingUser?.status === "pending";
-        if (existingUser && !existingIsPending) {
-            return c.json({ error: true, message: "An account with that email already exists." }, 409);
-        }
-        if (!existingUser) {
-            await db.create({
-                collection: this.collection.slug,
-                data: await this.buildPendingInviteData(body.email),
-            });
-        }
-        // sub = invitee email (no user doc yet); purpose = 'invite'
-        const inviteToken = await signCollectionToken({
-            sub: body.email,
-            email: body.email,
-            collection: this.collection.slug,
-            purpose: "invite",
-        }, "7d");
-        const inviteUrl = body?.inviteUrl;
-        const url = inviteUrl
-            ? `${inviteUrl}${inviteUrl.includes("?") ? "&" : "?"}inviteToken=${encodeURIComponent(inviteToken)}`
-            : undefined;
-        try {
-            const { subject, html } = buildInviteEmail(config, {
-                token: inviteToken,
-                invitedByEmail: requestUser.email,
-                url,
-            });
-            await sendEmail(config, { to: body.email, subject, html });
-        }
-        catch (err) {
-            getRequestLogger(c, "auth").error({
-                err,
-                msg: "Failed to send invite email",
-                email: body.email,
-            });
-        }
-        return c.json({
-            success: true,
-            message: `Invite sent to ${body.email}.`,
-            token: inviteToken,
-            inviteUrl: url,
-        });
-    }
-    // ---------------------------------------------------------------------------
-    // POST /accept-invite
-    // Public. Validates the invite token and creates the user account.
-    // Body: { token, password, ...extraFields }
-    // ---------------------------------------------------------------------------
-    async acceptInvite(c) {
-        const config = c.get("config");
-        const db = config.db;
-        if (!db)
-            return c.json({ message: "Database not configured" }, 500);
-        const body = await c.req.json().catch(() => null);
-        if (!body?.token || !body?.password) {
-            return c.json({ error: true, message: "token and password are required." }, 400);
-        }
-        let payload;
-        try {
-            payload = await verifyCollectionToken(body.token);
-        }
-        catch {
-            return c.json({ error: true, message: "Invite token is invalid or has expired." }, 400);
-        }
-        if (payload.collection !== this.collection.slug ||
-            payload.purpose !== "invite") {
-            return c.json({ error: true, message: "Invite token is invalid or has expired." }, 400);
-        }
-        const inviteeEmail = payload.sub;
-        // Guard against double-accept while still supporting pending pre-provisioned users.
-        const existing = await db.find({
-            collection: this.collection.slug,
-            where: { email: inviteeEmail },
-            limit: 1,
-        });
-        const existingUser = existing.docs[0];
-        const existingIsPending = existingUser?.status === "pending";
-        if (existingUser && !existingIsPending) {
-            return c.json({ error: true, message: "An account with that email already exists." }, 409);
-        }
-        const { token: _t, password: _p, ...extraFields } = body;
-        const hashedPassword = await hashPassword(body.password);
-        const user = existingUser
-            ? await db.update({
-                collection: this.collection.slug,
-                id: String(existingUser.id),
-                data: this.buildAcceptedInviteData(hashedPassword, extraFields),
-            })
-            : await db.create({
-                collection: this.collection.slug,
-                data: {
-                    ...extraFields,
-                    email: inviteeEmail,
-                    ...this.buildAcceptedInviteData(hashedPassword, {}),
-                },
-            });
-        // Log them in immediately
-        const sessionToken = await issueAuthSessionToken({
-            config,
-            userId: user.id,
-            email: inviteeEmail,
-            collection: this.collection.slug,
-            ip: c.get("clientIp"),
-            authSource: "local",
-        });
-        // Send welcome email (best-effort)
-        const { subject, html } = buildWelcomeEmail(config, {
-            email: inviteeEmail,
-        });
-        sendEmail(config, { to: inviteeEmail, subject, html }).catch((err) => getRequestLogger(c, "auth").error({
-            err,
-            msg: "Failed to send welcome email",
-            email: inviteeEmail,
-        }));
-        const safeUser = this.sanitizeUser(user);
-        return c.json({ token: sessionToken, user: safeUser }, 201);
-    }
-}
-//# sourceMappingURL=auth.controller.js.map

package/dist/controllers/auth.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,cAAc;IACjB,UAAU,CAAmB;IAErC,YAAY,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,MAAM,EACJ,QAAQ,EAAE,SAAS,EACnB,aAAa,EAAE,cAAc,EAC7B,WAAW,EAAE,YAAY,EACzB,GAAG,QAAQ,EACZ,GAAG,IAAI,CAAC;QACT,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,KAAa;QAChD,MAAM,IAAI,GAA4B;YACpC,KAAK;YACL,QAAQ,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC9D,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,uBAAuB,CAC7B,cAAsB,EACtB,WAAoC;QAEpC,MAAM,IAAI,GAA4B;YACpC,GAAG,WAAW;YACd,QAAQ,EAAE,cAAc;SACzB,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,CAA2B,EAAE,MAAc;QACnE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtC,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,MAAM;YACV,IAAI,EAAE;gBACJ,aAAa,EAAE,CAAC;gBAChB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,CAA2B,EAC3B,IAA6B;QAE7B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YACL,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAqB,EAAE,CAAC;QAEzE,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAqB,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,aAAa,KAAK,IAAI,IAAI,aAAa,IAAI,GAAG,CAAC;QACnE,MAAM,eAAe,GACnB,CAAC,WAAW;YACZ,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACtC,IAAI,CAAC,aAAa,GAAG,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC,aAAa;YACpB,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,aAAa,GAAG,eAAe,GAAG,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC;QAC7D,MAAM,eAAe,GAAG,UAAU;YAChC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;YAChD,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,EAAE,CAAC,MAAM,CAAC;YACd,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,EAAE;gBACJ,aAAa;gBACb,WAAW,EAAE,eAAe;aAC7B;SACF,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,iBAAiB,EAAE,UAAU;gBAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;gBACjD,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,gDAAgD;IAChD,8EAA8E;IAC9E,KAAK,CAAC,IAAI,CAAC,CAA2B;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,WAAW,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,wCAAwC;IACxC,8EAA8E;IAC9E,KAAK,CAAC,iBAAiB,CAAC,CAA2B;QACjD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,kCAAkC;QAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE,EACxD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,8BAA8B;aACjD;SACF,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,uDAAuD;QACvD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACjE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;YAChC,GAAG;YACH,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAC9E,KAAK,CAAC,KAAK,CAAC,CAA2B;QACrC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAChC,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAC/C,CAAC;YACF,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,2CAA2C;gBACpD,iBAAiB;aAClB,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAkB,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACpE,CAAC,EACD,IAAI,CACL,CAAC;YACF,IAAI,UAAU,IAAI,iBAAiB,EAAE,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,2CAA2C;oBACpD,iBAAiB;iBAClB,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;YAClE,IAAI,CAAC,WAAW,IAAI,IAAI,EACxB,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,4EAA4E;IAC5E,gDAAgD;IAChD,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAC/C,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CACjD,CAAC;QAEF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;aACjC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CAAC,CAA2B;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,WAAW,CAAC,GAAG;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAAC,CAA2B;QAC5C,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACnE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;gBACtC,GAAG,EAAE,WAAW,CAAC,GAAG;gBACpB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;YAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,wEAAwE;IACxE,gCAAgC;IAChC,8EAA8E;IAC9E,KAAK,CAAC,cAAc,CAAC,CAA2B;QAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,IAAI,EAAE,CAAC;YACT,2CAA2C;YAC3C,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAC1C;gBACE,GAAG,EAAE,IAAI,CAAC,EAAE;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,OAAO,EAAE,OAAO;aACjB,EACD,IAAI,CACL,CAAC;YAEF,uCAAuC;YACvC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,CAAC;YAChC,MAAM,GAAG,GAAG,QAAQ;gBAClB,CAAC,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,kBAAkB,CAAC,UAAU,CAAC,EAAE;gBAC3F,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE;oBACxD,KAAK,EAAE,UAAU;oBACjB,GAAG;iBACJ,CAAC,CAAC;gBACH,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;oBAChC,GAAG;oBACH,GAAG,EAAE,qCAAqC;oBAC1C,KAAK,EAAE,IAAI,CAAC,KAAe;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,uDAAuD;IACvD,yDAAyD;IACzD,8EAA8E;IAC9E,KAAK,CAAC,aAAa,CAAC,CAA2B;QAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAClE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI;YAC3C,OAAO,CAAC,OAAO,KAAK,OAAO,EAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAClE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,MAAM,CAAC;YACd,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACJ,QAAQ,EAAE,cAAc;gBACxB,aAAa,EAAE,CAAC;gBAChB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QACH,MAAM,qBAAqB,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;SACjC,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,yBAAyB,CAAC,MAAM,EAAE;YAC1D,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACpE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;YAChC,GAAG;YACH,GAAG,EAAE,uCAAuC;YAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,4EAA4E;IAC5E,uEAAuE;IACvE,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,gEAAgE;QAChE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAwC,CAAC;QAC7E,MAAM,iBAAiB,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QAE7D,IAAI,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,EAAE,CAAC,MAAM,CAAC;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,IAAI,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,4DAA4D;QAC5D,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAC3C;YACE,GAAG,EAAE,IAAI,CAAC,KAAK;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,OAAO,EAAE,QAAQ;SAClB,EACD,IAAI,CACL,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,CAAC;QAClC,MAAM,GAAG,GAAG,SAAS;YACnB,CAAC,CAAC,GAAG,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,kBAAkB,CAAC,WAAW,CAAC,EAAE;YACpG,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE;gBACjD,KAAK,EAAE,WAAW;gBAClB,cAAc,EAAE,WAAW,CAAC,KAAK;gBACjC,GAAG;aACJ,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;gBAChC,GAAG;gBACH,GAAG,EAAE,6BAA6B;gBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,GAAG;YACxC,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,mEAAmE;IACnE,4CAA4C;IAC5C,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAAC,CAA2B;QAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACnE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI;YAC3C,OAAO,CAAC,OAAO,KAAK,QAAQ,EAC5B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACnE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC;QAEjC,oFAAoF;QACpF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;YAC9B,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAwC,CAAC;QAC7E,MAAM,iBAAiB,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC;QAE7D,IAAI,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,YAAY;YACvB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;gBAChB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3B,IAAI,EAAE,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,WAAW,CAAC;aAChE,CAAC;YACF,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;gBAChB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,IAAI,EAAE;oBACJ,GAAG,WAAW;oBACd,KAAK,EAAE,YAAY;oBACnB,GAAG,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,EAAE,CAAC;iBACpD;aACF,CAAC,CAAC;QAEL,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC;YAC/C,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE;YAClD,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACnE,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;YAChC,GAAG;YACH,GAAG,EAAE,8BAA8B;YACnC,KAAK,EAAE,YAAY;SACpB,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;CACF"}