@mahiframework/permissions 0.1.4

package/dist/permission-registrar.js

@@ -0,0 +1,573 @@
+import { AUTH_TOKEN, CACHE_TOKEN } from "@mahiframework/core";
+import { DB } from "@mahiframework/database";
+import { assigneeCacheKey, resolveAssignee, } from "./assignee.js";
+import { DuplicateNameError, PermissionNotFoundError, RoleNotFoundError, UnresolvedGuardError, } from "./errors.js";
+import { buildMap, deserializeMap, mapKey, serializeMap, } from "./permission-map.js";
+import { Permission } from "./models/permission.model.js";
+import { Role } from "./models/role.model.js";
+import { assignmentMemo, forgetMemoisedAssignments, } from "./request-cache.js";
+/** Roles and permissions, their relationships, and who holds them. */
+export class PermissionRegistrar {
+    app;
+    config;
+    constructor(app, config) {
+        this.app = app;
+        this.config = config;
+    }
+    // ---------------------------------------------------------------- guards
+    /**
+     * The guard a call operates on.
+     *
+     * `auth.default` is the last resort rather than the ambient
+     * `currentGuard()`, which would read the guard that authenticated THIS
+     * request. That is tempting and wrong: it throws outside a request
+     * scope (`MissingAuthContextError`), so a queue job or a seeder
+     * assigning a role would crash, and it would make the same
+     * `createRole("admin")` produce a different row depending on who
+     * happened to call it.
+     *
+     * Throws rather than defaulting to `""`: `guard_name` is NOT NULL with
+     * no wildcard, so an unresolvable guard has no safe representation, and
+     * a role stamped with the empty string is a role no check will ever
+     * match.
+     */
+    guardName(options = {}) {
+        const named = options.guard ?? this.config.guard ?? this.defaultGuard();
+        if (named === null || named === "") {
+            throw new UnresolvedGuardError();
+        }
+        return named;
+    }
+    defaultGuard() {
+        if (!this.app.has(AUTH_TOKEN)) {
+            return null;
+        }
+        return this.app.make(AUTH_TOKEN).getDefaultDriver();
+    }
+    // ----------------------------------------------------------- the cache
+    /**
+     * The role/permission map, from cache or the database.
+     *
+     * `remember()` treats `undefined` as its miss sentinel, so the loader
+     * must never return it — this one always returns an object, even for an
+     * app with no roles at all.
+     *
+     * The map crosses the cache boundary serialised (ids as strings): see
+     * `permission-map.ts` for why a `bigint` cannot be cached.
+     */
+    async map() {
+        const store = this.cache().store(this.config.cacheStore);
+        const serialized = await store.remember(this.config.cacheKey, () => this.loadMap(), this.config.cacheTtlSeconds);
+        return deserializeMap(serialized);
+    }
+    /** Read every role, permission, and role-permission link. Three queries, no joins. */
+    async loadMap() {
+        const [roleRows, permissionRows, links] = await Promise.all([
+            DB.table("roles").select("id", "name", "guard_name").get(),
+            DB.table("permissions").select("id", "name", "guard_name").get(),
+            DB.table("role_has_permissions").select("role_id", "permission_id").get(),
+        ]);
+        const grouped = new Map();
+        for (const link of links) {
+            const key = String(link.role_id);
+            const existing = grouped.get(key);
+            if (existing === undefined) {
+                grouped.set(key, [BigInt(link.permission_id)]);
+            }
+            else {
+                existing.push(BigInt(link.permission_id));
+            }
+        }
+        const roles = roleRows.map((row) => ({
+            id: BigInt(row.id),
+            name: row.name,
+            guardName: row.guard_name,
+            permissionIds: grouped.get(String(row.id)) ?? [],
+        }));
+        const permissions = permissionRows.map((row) => ({
+            id: BigInt(row.id),
+            name: row.name,
+            guardName: row.guard_name,
+        }));
+        return serializeMap(buildMap(roles, permissions));
+    }
+    /**
+     * Drop the cached map and every memoised assignment.
+     *
+     * Called by every write here, and by the model-event listeners for
+     * writes that bypass this class (a seeder calling `Role.create()`).
+     * Forgets exactly one key — `@mahiframework/cache` has no tags, so
+     * there is no flush-by-pattern, and `flush()` would take out the app's
+     * entire cache.
+     */
+    async forgetCache() {
+        forgetMemoisedAssignments();
+        await this.cache().store(this.config.cacheStore).forget(this.config.cacheKey);
+    }
+    cache() {
+        return this.app.make(CACHE_TOKEN);
+    }
+    // ------------------------------------------------------ role/permission CRUD
+    /** Create a role. Throws if one already exists with this name for this guard. */
+    async createRole(name, options = {}) {
+        const guard = this.guardName(options);
+        if ((await this.map()).roleByName.has(mapKey(guard, name))) {
+            throw new DuplicateNameError("role", name, guard);
+        }
+        const role = await Role.create({ name, guard_name: guard });
+        await this.forgetCache();
+        return role;
+    }
+    /** Create a permission. Throws if one already exists with this name for this guard. */
+    async createPermission(name, options = {}) {
+        const guard = this.guardName(options);
+        if ((await this.map()).permissionByName.has(mapKey(guard, name))) {
+            throw new DuplicateNameError("permission", name, guard);
+        }
+        const permission = await Permission.create({ name, guard_name: guard });
+        await this.forgetCache();
+        return permission;
+    }
+    /** Create a role only if it doesn't exist, returning either way. */
+    async findOrCreateRole(name, options = {}) {
+        const guard = this.guardName(options);
+        const existing = (await this.map()).roleByName.get(mapKey(guard, name));
+        if (existing !== undefined) {
+            return (await Role.findOrFail(existing.id));
+        }
+        return this.createRole(name, { guard });
+    }
+    /** Create a permission only if it doesn't exist, returning either way. */
+    async findOrCreatePermission(name, options = {}) {
+        const guard = this.guardName(options);
+        const existing = (await this.map()).permissionByName.get(mapKey(guard, name));
+        if (existing !== undefined) {
+            return (await Permission.findOrFail(existing.id));
+        }
+        return this.createPermission(name, { guard });
+    }
+    /** The role with this name, or `RoleNotFoundError`. */
+    async findRole(name, options = {}) {
+        const guard = this.guardName(options);
+        const mapped = (await this.map()).roleByName.get(mapKey(guard, name));
+        if (mapped === undefined) {
+            throw new RoleNotFoundError(name, guard);
+        }
+        return (await Role.findOrFail(mapped.id));
+    }
+    /** The permission with this name, or `PermissionNotFoundError`. */
+    async findPermission(name, options = {}) {
+        const guard = this.guardName(options);
+        const mapped = (await this.map()).permissionByName.get(mapKey(guard, name));
+        if (mapped === undefined) {
+            throw new PermissionNotFoundError(name, guard);
+        }
+        return (await Permission.findOrFail(mapped.id));
+    }
+    /**
+     * Delete a role. Its assignments and permission links go with it, via
+     * the pivots' `cascadeOnDelete` foreign keys.
+     */
+    async deleteRole(role, options = {}) {
+        const id = await this.roleId(role, options);
+        await Role.delete(id);
+        await this.forgetCache();
+    }
+    /** Delete a permission. Its assignments and role links cascade. */
+    async deletePermission(permission, options = {}) {
+        const id = await this.permissionId(permission, options);
+        await Permission.delete(id);
+        await this.forgetCache();
+    }
+    // --------------------------------------------------- role -> permissions
+    /** Grant permissions to a role, ignoring any it already has. */
+    async givePermissionToRole(role, permissions, options = {}) {
+        const roleId = await this.roleId(role, options);
+        const ids = await this.permissionIds(permissions, options);
+        const held = new Set(((await this.map()).roleById.get(roleId)?.permissionIds ?? []).map(String));
+        const missing = ids.filter((id) => !held.has(String(id)));
+        if (missing.length === 0) {
+            return;
+        }
+        await this.insertChunked("role_has_permissions", missing.map((id) => ({ role_id: roleId, permission_id: id })));
+        await this.forgetCache();
+    }
+    /** Revoke permissions from a role. */
+    async revokePermissionFromRole(role, permissions, options = {}) {
+        const roleId = await this.roleId(role, options);
+        const ids = await this.permissionIds(permissions, options);
+        if (ids.length === 0) {
+            return;
+        }
+        await DB.table("role_has_permissions")
+            .where("role_id", roleId)
+            .whereIn("permission_id", ids)
+            .delete();
+        await this.forgetCache();
+    }
+    /**
+     * Make a role's permissions exactly this list.
+     *
+     * An empty list revokes everything, which is the whole point of a sync
+     * and the one behaviour worth being explicit about: the framework's own
+     * `detach([])` is a deliberate no-op, so a caller passing
+     * `request.input("permissions")` through that API would silently keep
+     * the old set. This writes pivots directly and means what it says.
+     */
+    async syncRolePermissions(role, permissions, options = {}) {
+        const roleId = await this.roleId(role, options);
+        const wanted = await this.permissionIds(permissions, options);
+        await DB.transaction(async () => {
+            await DB.table("role_has_permissions").where("role_id", roleId).delete();
+            await this.insertChunked("role_has_permissions", wanted.map((id) => ({ role_id: roleId, permission_id: id })));
+        });
+        await this.forgetCache();
+    }
+    // ------------------------------------------------------- subject -> roles
+    /** Assign roles to a subject. Already-held roles are skipped, so this is idempotent. */
+    async assignRole(assignee, roles, options = {}) {
+        const subject = resolveAssignee(assignee);
+        const ids = await this.roleIds(roles, options);
+        const current = await this.assignmentsFor(subject);
+        const held = new Set(current.roleIds.map(String));
+        const missing = ids.filter((id) => !held.has(String(id)));
+        if (missing.length === 0) {
+            return;
+        }
+        await this.insertChunked("model_has_roles", missing.map((id) => ({
+            role_id: id,
+            model_type: subject.morphType,
+            model_id: subject.key,
+        })));
+        forgetMemoisedAssignments(assigneeCacheKey(subject));
+    }
+    /** Remove roles from a subject. */
+    async removeRole(assignee, roles, options = {}) {
+        const subject = resolveAssignee(assignee);
+        const ids = await this.roleIds(roles, options);
+        if (ids.length === 0) {
+            return;
+        }
+        await DB.table("model_has_roles")
+            .where("model_type", subject.morphType)
+            .where("model_id", subject.key)
+            .whereIn("role_id", ids)
+            .delete();
+        forgetMemoisedAssignments(assigneeCacheKey(subject));
+    }
+    /** Make a subject's roles exactly this list. An empty list removes all of them. */
+    async syncRoles(assignee, roles, options = {}) {
+        const subject = resolveAssignee(assignee);
+        const wanted = await this.roleIds(roles, options);
+        await DB.transaction(async () => {
+            await DB.table("model_has_roles")
+                .where("model_type", subject.morphType)
+                .where("model_id", subject.key)
+                .delete();
+            await this.insertChunked("model_has_roles", wanted.map((id) => ({
+                role_id: id,
+                model_type: subject.morphType,
+                model_id: subject.key,
+            })));
+        });
+        forgetMemoisedAssignments(assigneeCacheKey(subject));
+    }
+    // ------------------------------------------------- subject -> permissions
+    /** Grant permissions to a subject directly, alongside whatever its roles grant. */
+    async givePermissionTo(assignee, permissions, options = {}) {
+        const subject = resolveAssignee(assignee);
+        const ids = await this.permissionIds(permissions, options);
+        const current = await this.assignmentsFor(subject);
+        const held = new Set(current.permissionIds.map(String));
+        const missing = ids.filter((id) => !held.has(String(id)));
+        if (missing.length === 0) {
+            return;
+        }
+        await this.insertChunked("model_has_permissions", missing.map((id) => ({
+            permission_id: id,
+            model_type: subject.morphType,
+            model_id: subject.key,
+        })));
+        forgetMemoisedAssignments(assigneeCacheKey(subject));
+    }
+    /**
+     * Revoke a directly-granted permission.
+     *
+     * Only touches `model_has_permissions`. A permission the subject also
+     * holds through a role survives this call, and `hasPermissionTo()` will
+     * still answer true — which is correct, and the reason
+     * `hasDirectPermission()` exists to tell the two apart.
+     */
+    async revokePermissionTo(assignee, permissions, options = {}) {
+        const subject = resolveAssignee(assignee);
+        const ids = await this.permissionIds(permissions, options);
+        if (ids.length === 0) {
+            return;
+        }
+        await DB.table("model_has_permissions")
+            .where("model_type", subject.morphType)
+            .where("model_id", subject.key)
+            .whereIn("permission_id", ids)
+            .delete();
+        forgetMemoisedAssignments(assigneeCacheKey(subject));
+    }
+    /** Make a subject's direct permissions exactly this list. An empty list removes all of them. */
+    async syncPermissions(assignee, permissions, options = {}) {
+        const subject = resolveAssignee(assignee);
+        const wanted = await this.permissionIds(permissions, options);
+        await DB.transaction(async () => {
+            await DB.table("model_has_permissions")
+                .where("model_type", subject.morphType)
+                .where("model_id", subject.key)
+                .delete();
+            await this.insertChunked("model_has_permissions", wanted.map((id) => ({
+                permission_id: id,
+                model_type: subject.morphType,
+                model_id: subject.key,
+            })));
+        });
+        forgetMemoisedAssignments(assigneeCacheKey(subject));
+    }
+    // ------------------------------------------------------------- the checks
+    /** Does this subject hold this role? */
+    async hasRole(assignee, role, options = {}) {
+        return this.hasAnyRole(assignee, [role], options);
+    }
+    /** Does this subject hold at least one of these roles? */
+    async hasAnyRole(assignee, roles, options = {}) {
+        const names = await this.getRoleNames(assignee, options);
+        const map = await this.map();
+        const guard = this.guardName(options);
+        return roles.some((role) => names.has(this.roleNameOf(map, role, guard)));
+    }
+    /** Does this subject hold every one of these roles? */
+    async hasAllRoles(assignee, roles, options = {}) {
+        const names = await this.getRoleNames(assignee, options);
+        const map = await this.map();
+        const guard = this.guardName(options);
+        return roles.every((role) => names.has(this.roleNameOf(map, role, guard)));
+    }
+    /**
+     * Does this subject hold this permission, by any route?
+     *
+     * An unknown permission name returns false rather than throwing. This
+     * one is a check, not a write: the gate hook calls it with every
+     * ability string in the app, almost none of which are permissions, so
+     * throwing would turn `can("view-dashboard")` into a 500. The write
+     * methods still throw on an unknown name, which is where a typo
+     * actually matters.
+     */
+    async hasPermissionTo(assignee, permission, options = {}) {
+        return this.hasAnyPermission(assignee, [permission], options);
+    }
+    /** Does this subject hold at least one of these permissions, by any route? */
+    async hasAnyPermission(assignee, permissions, options = {}) {
+        const held = await this.getAllPermissions(assignee, options);
+        const map = await this.map();
+        const guard = this.guardName(options);
+        return permissions.some((permission) => held.has(this.permissionNameOf(map, permission, guard)));
+    }
+    /** Does this subject hold every one of these permissions, by any route? */
+    async hasAllPermissions(assignee, permissions, options = {}) {
+        const held = await this.getAllPermissions(assignee, options);
+        const map = await this.map();
+        const guard = this.guardName(options);
+        return permissions.every((permission) => held.has(this.permissionNameOf(map, permission, guard)));
+    }
+    /** Does this subject hold this permission DIRECTLY, ignoring its roles? */
+    async hasDirectPermission(assignee, permission, options = {}) {
+        const held = await this.getDirectPermissions(assignee, options);
+        const map = await this.map();
+        return held.has(this.permissionNameOf(map, permission, this.guardName(options)));
+    }
+    // ------------------------------------------------------- introspection
+    /** This subject's role names, for the resolved guard. */
+    async getRoleNames(assignee, options = {}) {
+        const guard = this.guardName(options);
+        const map = await this.map();
+        const assignments = await this.assignmentsFor(resolveAssignee(assignee));
+        const names = new Set();
+        for (const roleId of assignments.roleIds) {
+            const role = map.roleById.get(roleId);
+            // A guard mismatch is not a filter but the entire isolation
+            // guarantee: an `api` role must not answer a `web` question, even
+            // though the assignment row says the subject holds it.
+            if (role !== undefined && role.guardName === guard) {
+                names.add(role.name);
+            }
+        }
+        return names;
+    }
+    /** Permission names this subject holds via its roles only. */
+    async getPermissionsViaRoles(assignee, options = {}) {
+        const guard = this.guardName(options);
+        const map = await this.map();
+        const assignments = await this.assignmentsFor(resolveAssignee(assignee));
+        const names = new Set();
+        for (const roleId of assignments.roleIds) {
+            const role = map.roleById.get(roleId);
+            if (role === undefined || role.guardName !== guard) {
+                continue;
+            }
+            for (const permissionId of role.permissionIds) {
+                const permission = map.permissionById.get(permissionId);
+                if (permission !== undefined && permission.guardName === guard) {
+                    names.add(permission.name);
+                }
+            }
+        }
+        return names;
+    }
+    /** Permission names granted to this subject directly, ignoring its roles. */
+    async getDirectPermissions(assignee, options = {}) {
+        const guard = this.guardName(options);
+        const map = await this.map();
+        const assignments = await this.assignmentsFor(resolveAssignee(assignee));
+        const names = new Set();
+        for (const permissionId of assignments.permissionIds) {
+            const permission = map.permissionById.get(permissionId);
+            if (permission !== undefined && permission.guardName === guard) {
+                names.add(permission.name);
+            }
+        }
+        return names;
+    }
+    /** Every permission name this subject holds, by either route. */
+    async getAllPermissions(assignee, options = {}) {
+        const [viaRoles, direct] = await Promise.all([
+            this.getPermissionsViaRoles(assignee, options),
+            this.getDirectPermissions(assignee, options),
+        ]);
+        for (const name of direct) {
+            viaRoles.add(name);
+        }
+        return viaRoles;
+    }
+    // ------------------------------------------------------------- internals
+    /**
+     * One subject's raw assignment ids, memoised per request.
+     *
+     * Two queries, in parallel, and at most once per subject per request.
+     * The memo is what makes the gate hook affordable: it fires on every
+     * authorization check, so a controller with five `can()` calls would
+     * otherwise be ten queries against rows that cannot have changed.
+     */
+    async assignmentsFor(subject) {
+        const memo = assignmentMemo();
+        const key = assigneeCacheKey(subject);
+        const cached = memo?.get(key);
+        if (cached !== undefined) {
+            return cached;
+        }
+        const [roleRows, permissionRows] = await Promise.all([
+            DB.table("model_has_roles")
+                .select("role_id")
+                .where("model_type", subject.morphType)
+                .where("model_id", subject.key)
+                .get(),
+            DB.table("model_has_permissions")
+                .select("permission_id")
+                .where("model_type", subject.morphType)
+                .where("model_id", subject.key)
+                .get(),
+        ]);
+        const record = {
+            roleIds: roleRows.map((row) => BigInt(row.role_id)),
+            permissionIds: permissionRows.map((row) => BigInt(row.permission_id)),
+        };
+        memo?.set(key, record);
+        return record;
+    }
+    /** The role's name, whether it was named by name or by id. Unknown ids yield a non-matching sentinel. */
+    roleNameOf(map, role, guard) {
+        if (typeof role === "string") {
+            return role;
+        }
+        const mapped = map.roleById.get(role);
+        return mapped !== undefined && mapped.guardName === guard ? mapped.name : UNMATCHABLE;
+    }
+    permissionNameOf(map, permission, guard) {
+        if (typeof permission === "string") {
+            return permission;
+        }
+        const mapped = map.permissionById.get(permission);
+        return mapped !== undefined && mapped.guardName === guard ? mapped.name : UNMATCHABLE;
+    }
+    /** Resolve a role reference to its id, throwing on an unknown name. */
+    async roleId(role, options) {
+        if (typeof role === "bigint") {
+            return role;
+        }
+        if (role instanceof Role) {
+            return role.id;
+        }
+        const guard = this.guardName(options);
+        const mapped = (await this.map()).roleByName.get(mapKey(guard, role));
+        if (mapped === undefined) {
+            throw new RoleNotFoundError(role, guard);
+        }
+        return mapped.id;
+    }
+    async permissionId(permission, options) {
+        if (typeof permission === "bigint") {
+            return permission;
+        }
+        if (permission instanceof Permission) {
+            return permission.id;
+        }
+        const guard = this.guardName(options);
+        const mapped = (await this.map()).permissionByName.get(mapKey(guard, permission));
+        if (mapped === undefined) {
+            throw new PermissionNotFoundError(permission, guard);
+        }
+        return mapped.id;
+    }
+    async roleIds(roles, options) {
+        const list = Array.isArray(roles) ? roles : [roles];
+        return Promise.all(list.map((role) => this.roleId(role, options)));
+    }
+    async permissionIds(permissions, options) {
+        const list = Array.isArray(permissions) ? permissions : [permissions];
+        return Promise.all(list.map((permission) => this.permissionId(permission, options)));
+    }
+    /**
+     * Insert pivot rows, in chunks, as one multi-row statement each.
+     *
+     * Goes to raw Kysely rather than `QueryBuilder`, whose `insert()` takes
+     * a single row: a per-row loop would turn a 500-permission sync into
+     * 500 round trips. `Role.resolveConnection()` is the handle rather
+     * than a `DatabaseManager` lookup because it swaps in the active
+     * transaction when there is one, which is what makes the `sync*`
+     * methods' delete-then-insert atomic.
+     *
+     * Chunked because pivot writes in this framework do not bound their
+     * parameter count, and a multi-row insert binds one parameter per
+     * column per row — three columns here, so a sync of 12,000 would
+     * exceed SQLite's 32,766-binding ceiling (Postgres' is 65,535) and
+     * fail at the driver rather than anywhere meaningful. 1,000 rows is
+     * 3,000 bindings, well inside every engine. Sequential, since the
+     * chunks all target one table inside one transaction.
+     */
+    async insertChunked(table, rows) {
+        if (rows.length === 0) {
+            return;
+        }
+        const connection = Role.resolveConnection();
+        for (let index = 0; index < rows.length; index += INSERT_CHUNK) {
+            await connection
+                .insertInto(table)
+                .values(rows.slice(index, index + INSERT_CHUNK))
+                .execute();
+        }
+    }
+}
+/**
+ * A name no role or permission can have, returned when an id-addressed
+ * lookup finds nothing. Returning this rather than throwing keeps
+ * `hasAnyRole([someDeletedId, "admin"])` answering the question it was
+ * asked; `\u0000` cannot appear in a name that came from the map, because
+ * the map's own keys use it as a separator.
+ */
+const UNMATCHABLE = "\u0000unmatchable";
+const INSERT_CHUNK = 1_000;
+//# sourceMappingURL=permission-registrar.js.map

package/dist/permission-registrar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-registrar.js","sourceRoot":"","sources":["../src/permission-registrar.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,EAAE,EAAE,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,eAAe,GAGhB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,QAAQ,EACR,cAAc,EACd,MAAM,EACN,YAAY,GAKb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,yBAAyB,GAE1B,MAAM,oBAAoB,CAAC;AA6D5B,sEAAsE;AACtE,MAAM,OAAO,mBAAmB;IAEX;IACA;IAFnB,YACmB,GAAgB,EAChB,MAAiC;QADjC,QAAG,GAAH,GAAG,CAAa;QAChB,WAAM,GAAN,MAAM,CAA2B;IACjD,CAAC;IAEJ,0EAA0E;IAE1E;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,UAAuB,EAAE;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAExE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAqB,UAAU,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC1E,CAAC;IAED,wEAAwE;IAExE;;;;;;;;;OASG;IACH,KAAK,CAAC,GAAG;QACP,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEzD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,QAAQ,CACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EACpB,IAAI,CAAC,MAAM,CAAC,eAAe,CAC5B,CAAC;QAEF,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,OAAO;QACnB,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,EAAE,CAAC,KAAK,CAAU,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,GAAG,EAAE;YACnE,EAAE,CAAC,KAAK,CAAgB,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,GAAG,EAAE;YAC/E,EAAE,CAAC,KAAK,CAAoB,sBAAsB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,GAAG,EAAE;SAC7F,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAElC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAiB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjD,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;SACjD,CAAC,CAAC,CAAC;QAEJ,MAAM,WAAW,GAAuB,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;QAEJ,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW;QACf,yBAAyB,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAe,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,8EAA8E;IAE9E,iFAAiF;IACjF,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,UAAuB,EAAE;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,UAAuB,EAAE;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,UAAuB,EAAE;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAExE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAS,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,sBAAsB,CAAC,IAAY,EAAE,UAAuB,EAAE;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAE9E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAe,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,UAAuB,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAEtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAS,CAAC;IACpD,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,UAAuB,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAE5E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAe,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,IAAa,EAAE,UAAuB,EAAE;QACvD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,gBAAgB,CAAC,UAAyB,EAAE,UAAuB,EAAE;QACzE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAE1E,gEAAgE;IAChE,KAAK,CAAC,oBAAoB,CACxB,IAAa,EACb,WAA4C,EAC5C,UAAuB,EAAE;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAC3E,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CACtB,sBAAsB,EACtB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,CAC9D,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,wBAAwB,CAC5B,IAAa,EACb,WAA4C,EAC5C,UAAuB,EAAE;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,CAAC,KAAK,CAAoB,sBAAsB,CAAC;aACtD,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;aACxB,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;aAC7B,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,mBAAmB,CACvB,IAAa,EACb,WAA4C,EAC5C,UAAuB,EAAE;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE9D,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,EAAE,CAAC,KAAK,CAAoB,sBAAsB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;YAC5F,MAAM,IAAI,CAAC,aAAa,CACtB,sBAAsB,EACtB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,2EAA2E;IAE3E,wFAAwF;IACxF,KAAK,CAAC,UAAU,CACd,QAAkB,EAClB,KAA0B,EAC1B,UAAuB,EAAE;QAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CACtB,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACnB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,OAAO,CAAC,GAAG;SACtB,CAAC,CAAC,CACJ,CAAC;QACF,yBAAyB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,UAAU,CACd,QAAkB,EAClB,KAA0B,EAC1B,UAAuB,EAAE;QAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,CAAC,KAAK,CAAe,iBAAiB,CAAC;aAC5C,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;aACtC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;aAC9B,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,MAAM,EAAE,CAAC;QACZ,yBAAyB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,SAAS,CACb,QAAkB,EAClB,KAA0B,EAC1B,UAAuB,EAAE;QAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAElD,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,EAAE,CAAC,KAAK,CAAe,iBAAiB,CAAC;iBAC5C,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;iBACtC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;iBAC9B,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,aAAa,CACtB,iBAAiB,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClB,OAAO,EAAE,EAAE;gBACX,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,QAAQ,EAAE,OAAO,CAAC,GAAG;aACtB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,yBAAyB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,2EAA2E;IAE3E,mFAAmF;IACnF,KAAK,CAAC,gBAAgB,CACpB,QAAkB,EAClB,WAA4C,EAC5C,UAAuB,EAAE;QAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CACtB,uBAAuB,EACvB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACnB,aAAa,EAAE,EAAE;YACjB,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,OAAO,CAAC,GAAG;SACtB,CAAC,CAAC,CACJ,CAAC;QACF,yBAAyB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CACtB,QAAkB,EAClB,WAA4C,EAC5C,UAAuB,EAAE;QAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,CAAC,KAAK,CAAqB,uBAAuB,CAAC;aACxD,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;aACtC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;aAC9B,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;aAC7B,MAAM,EAAE,CAAC;QACZ,yBAAyB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,eAAe,CACnB,QAAkB,EAClB,WAA4C,EAC5C,UAAuB,EAAE;QAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE9D,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,EAAE,CAAC,KAAK,CAAqB,uBAAuB,CAAC;iBACxD,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;iBACtC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;iBAC9B,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,aAAa,CACtB,uBAAuB,EACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClB,aAAa,EAAE,EAAE;gBACjB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,QAAQ,EAAE,OAAO,CAAC,GAAG;aACtB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,yBAAyB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,2EAA2E;IAE3E,wCAAwC;IACxC,KAAK,CAAC,OAAO,CACX,QAAkB,EAClB,IAAqB,EACrB,UAAuB,EAAE;QAEzB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,UAAU,CACd,QAAkB,EAClB,KAA6B,EAC7B,UAAuB,EAAE;QAEzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,WAAW,CACf,QAAkB,EAClB,KAA6B,EAC7B,UAAuB,EAAE;QAEzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CACnB,QAAkB,EAClB,UAA2B,EAC3B,UAAuB,EAAE;QAEzB,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,gBAAgB,CACpB,QAAkB,EAClB,WAAmC,EACnC,UAAuB,EAAE;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,iBAAiB,CACrB,QAAkB,EAClB,WAAmC,EACnC,UAAuB,EAAE;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,mBAAmB,CACvB,QAAkB,EAClB,UAA2B,EAC3B,UAAuB,EAAE;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,wEAAwE;IAExE,yDAAyD;IACzD,KAAK,CAAC,YAAY,CAAC,QAAkB,EAAE,UAAuB,EAAE;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEtC,4DAA4D;YAC5D,kEAAkE;YAClE,uDAAuD;YACvD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBACnD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,sBAAsB,CAC1B,QAAkB,EAClB,UAAuB,EAAE;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEtC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBACnD,SAAS;YACX,CAAC;YAED,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAExD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;oBAC/D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,oBAAoB,CAAC,QAAkB,EAAE,UAAuB,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,KAAK,MAAM,YAAY,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAExD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC/D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,iBAAiB,CAAC,QAAkB,EAAE,UAAuB,EAAE;QACnE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC9C,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC7C,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0EAA0E;IAE1E;;;;;;;OAOG;IACK,KAAK,CAAC,cAAc,CAAC,OAAyB;QACpD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAE9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,EAAE,CAAC,KAAK,CAAe,iBAAiB,CAAC;iBACtC,MAAM,CAAC,SAAS,CAAC;iBACjB,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;iBACtC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,EAAE;YACR,EAAE,CAAC,KAAK,CAAqB,uBAAuB,CAAC;iBAClD,MAAM,CAAC,eAAe,CAAC;iBACvB,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;iBACtC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,MAAM,GAAqB;YAC/B,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,aAAa,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;SACtE,CAAC;QAEF,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yGAAyG;IACjG,UAAU,CAAC,GAAkB,EAAE,IAAqB,EAAE,KAAa;QACzE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IACxF,CAAC;IAEO,gBAAgB,CAAC,GAAkB,EAAE,UAA2B,EAAE,KAAa;QACrF,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAElD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IACxF,CAAC;IAED,uEAAuE;IAC/D,KAAK,CAAC,MAAM,CAAC,IAAa,EAAE,OAAoB;QACtD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAEtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAyB,EAAE,OAAoB;QACxE,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,UAAU,YAAY,UAAU,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAElF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,KAA0B,EAAE,OAAoB;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEpD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,WAA4C,EAC5C,OAAoB;QAEpB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAEtE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,KAAK,CAAC,aAAa,CACzB,KAAa,EACb,IAA4C;QAE5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,YAAY,EAAE,CAAC;YAC/D,MAAM,UAAU;iBACb,UAAU,CAAC,KAAK,CAAC;iBACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,YAAY,CAAC,CAAC;iBAC/C,OAAO,EAAE,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAExC,MAAM,YAAY,GAAG,KAAK,CAAC"}