@naylence/runtime 0.3.3 → 0.3.5-test.0

package/dist/esm/src/naylence/fame/node/envelope-security-handler.js

@@ -0,0 +1,484 @@
+import { DeliveryOriginType } from '@naylence/core';
+import { EncryptionStatus } from '../security/encryption/encryption-manager.js';
+import { CryptoLevel, SecurityAction, } from '../security/policy/security-policy.js';
+import { getLogger } from '../util/logging.js';
+const logger = getLogger('naylence.fame.node.envelope_security_handler');
+const ENCRYPTION_OPTION_ALIAS_PAIRS = [
+    ['recipKid', 'recip_kid'],
+    ['recipientKeyId', 'recipient_key_id'],
+    ['recipPub', 'recip_pub'],
+    ['recipientPublicKey', 'recipient_public_key'],
+    ['privKey', 'priv_key'],
+    ['privateKey', 'private_key'],
+    ['channelKey', 'channel_key'],
+    ['requestAddress', 'request_address'],
+    ['encryptionType', 'encryption_type'],
+];
+function normalizeEncryptionOptions(options) {
+    if (!options) {
+        return undefined;
+    }
+    const normalized = { ...options };
+    for (const [camelKey, snakeKey] of ENCRYPTION_OPTION_ALIAS_PAIRS) {
+        const camelValue = normalized[camelKey];
+        const snakeValue = normalized[snakeKey];
+        if (camelValue !== undefined && snakeValue === undefined) {
+            normalized[snakeKey] = camelValue;
+            continue;
+        }
+        if (snakeValue !== undefined && camelValue === undefined) {
+            normalized[camelKey] = snakeValue;
+        }
+    }
+    return normalized;
+}
+function isDataFrame(frame) {
+    return frame.type === 'Data';
+}
+function isResponseMessage(type) {
+    return type === 'response' || type === 'protocol-response';
+}
+export class EnvelopeSecurityHandler {
+    constructor(options) {
+        this.node = options.nodeLike;
+        this.envelopeSigner = options.envelopeSigner;
+        this.envelopeVerifier = options.envelopeVerifier;
+        this.encryptionManager = options.encryptionManager;
+        this.securityPolicy = options.securityPolicy;
+        this.keyManagementHandler = options.keyManagementHandler;
+    }
+    async handleOutboundSecurity(envelope, context) {
+        const shouldSign = this.securityPolicy
+            ? await this.securityPolicy.shouldSignEnvelope(envelope, context, this.node)
+            : false;
+        logger.debug('checking_signing', {
+            has_signer: Boolean(this.envelopeSigner),
+            should_sign: shouldSign,
+            envp_id: envelope.id,
+        });
+        if (shouldSign) {
+            if (!this.envelopeSigner) {
+                throw new Error('EnvelopeSigner is not configured');
+            }
+            if (!envelope.sid) {
+                const sid = this.node.sid ?? undefined;
+                if (sid) {
+                    envelope.sid = sid;
+                }
+            }
+            this.envelopeSigner.signEnvelope(envelope, {
+                physicalPath: this.node.physicalPath,
+            });
+        }
+        const shouldEncrypt = this.securityPolicy
+            ? await this.securityPolicy.shouldEncryptEnvelope(envelope, context, this.node)
+            : false;
+        logger.debug('checking_encryption', {
+            has_encryption_manager: Boolean(this.encryptionManager),
+            should_encrypt: shouldEncrypt,
+            envp_id: envelope.id,
+            destination: envelope.to ? String(envelope.to) : undefined,
+        });
+        if (this.encryptionManager && this.securityPolicy) {
+            if (envelope.sec?.enc) {
+                logger.debug('skipping_encryption_already_encrypted', {
+                    envp_id: envelope.id,
+                    destination: envelope.to ? String(envelope.to) : undefined,
+                });
+                return true;
+            }
+            const messageType = context.meta?.['message-type'];
+            let desiredCryptoLevel;
+            if (isResponseMessage(messageType)) {
+                const requestCryptoLevel = context.security?.inboundCryptoLevel ??
+                    CryptoLevel.PLAINTEXT;
+                desiredCryptoLevel =
+                    await this.securityPolicy.decideResponseCryptoLevel(requestCryptoLevel, envelope, context);
+                logger.debug('response_crypto_level_decided', {
+                    envp_id: envelope.id,
+                    crypto_level: desiredCryptoLevel,
+                    destination: envelope.to ? String(envelope.to) : undefined,
+                    original_request_crypto_level: requestCryptoLevel,
+                    original_request_id: context.meta?.['response-to-id'],
+                });
+            }
+            else {
+                desiredCryptoLevel =
+                    await this.securityPolicy.decideOutboundCryptoLevel(envelope, context, this.node);
+                logger.debug('outbound_crypto_level_decided', {
+                    envp_id: envelope.id,
+                    frame_type: envelope.frame.type,
+                    crypto_level: desiredCryptoLevel,
+                    destination: envelope.to ? String(envelope.to) : undefined,
+                });
+            }
+            if (desiredCryptoLevel === CryptoLevel.SEALED) {
+                logger.debug('applying_sealed_encryption', { envp_id: envelope.id });
+                return await this.handleSealedEncryption(envelope, context);
+            }
+            if (desiredCryptoLevel === CryptoLevel.CHANNEL) {
+                logger.debug('applying_channel_encryption', { envp_id: envelope.id });
+                return await this.handleChannelEncryption(envelope, context);
+            }
+        }
+        else if (this.encryptionManager && shouldEncrypt) {
+            return await this.handleToBeEncryptedEnvelope(envelope, context);
+        }
+        return true;
+    }
+    async handleEnvelopeSecurity(envelope, context) {
+        if (!context || context.originType === DeliveryOriginType.LOCAL) {
+            return [envelope, true];
+        }
+        if (context && this.securityPolicy) {
+            const inboundCryptoLevel = this.securityPolicy.classifyMessageCryptoLevel(envelope, context);
+            const existingLevel = context.security?.inboundCryptoLevel;
+            let resolvedLevel = inboundCryptoLevel;
+            if (existingLevel) {
+                if (existingLevel === CryptoLevel.SEALED &&
+                    inboundCryptoLevel !== CryptoLevel.SEALED) {
+                    resolvedLevel = existingLevel;
+                }
+                else if (existingLevel === CryptoLevel.CHANNEL &&
+                    inboundCryptoLevel === CryptoLevel.PLAINTEXT) {
+                    resolvedLevel = existingLevel;
+                }
+            }
+            if (!context.security) {
+                context.security = {};
+            }
+            context.security.inboundCryptoLevel = resolvedLevel;
+        }
+        if (context) {
+            if (!context.security) {
+                context.security = {};
+            }
+            context.security.inboundWasSigned = this.isSigned(envelope, context);
+        }
+        if (this.isSigned(envelope, context) && context) {
+            const verified = await this.handleSignedEnvelope(envelope, context);
+            if (!verified) {
+                return [envelope, false];
+            }
+        }
+        else if (context &&
+            this.securityPolicy.isSignatureRequired(envelope, context)) {
+            const frameType = envelope.frame.type;
+            if (frameType === 'KeyRequest' ||
+                frameType === 'KeyAnnounce' ||
+                frameType === 'SecureOpen' ||
+                frameType === 'SecureAccept') {
+                logger.error('critical_frame_unsigned_rejected', {
+                    envp_id: envelope.id,
+                    frame_type: frameType,
+                    reason: 'critical_frames_must_be_signed',
+                });
+                return [envelope, false];
+            }
+            const action = this.securityPolicy.getUnsignedViolationAction(envelope, context);
+            logger.warning('unsigned_envelope_violation', {
+                envp_id: envelope.id,
+                frame_type: frameType,
+                action,
+            });
+            if (action === SecurityAction.REJECT || action === SecurityAction.NACK) {
+                return [envelope, false];
+            }
+        }
+        return [envelope, true];
+    }
+    async handleChannelHandshakeComplete(channelId, destination) {
+        logger.debug('channel_handshake_completed', {
+            channel_id: channelId,
+            destination,
+        });
+        if (this.encryptionManager?.notifyChannelEstablished) {
+            await this.encryptionManager.notifyChannelEstablished(channelId);
+            logger.debug('notified_encryption_manager_channel_ready', {
+                channel_id: channelId,
+            });
+        }
+    }
+    async handleChannelHandshakeFailed(channelId, destination, reason = 'handshake_failed') {
+        logger.debug('channel_handshake_failed', {
+            channel_id: channelId,
+            destination,
+            reason,
+        });
+        if (this.encryptionManager?.notifyChannelFailed) {
+            await this.encryptionManager.notifyChannelFailed(channelId, reason);
+            logger.debug('notified_encryption_manager_channel_failed', {
+                channel_id: channelId,
+                reason,
+            });
+            return;
+        }
+        await this.handleFailedChannelEnvelopeCleanup(destination, reason);
+    }
+    async shouldDecryptEnvelope(envelope, context) {
+        if (this.encryptionManager &&
+            (await this.securityPolicy.shouldDecryptEnvelope(envelope, context, this.node))) {
+            return true;
+        }
+        if (envelope.sec?.enc) {
+            const cryptoLevel = this.securityPolicy.classifyMessageCryptoLevel(envelope, context);
+            if (cryptoLevel === CryptoLevel.CHANNEL) {
+                return true;
+            }
+        }
+        return false;
+    }
+    async decryptEnvelope(envelope, options) {
+        if (!this.encryptionManager) {
+            throw new Error('No encryption manager available for decryption');
+        }
+        return await this.encryptionManager.decryptEnvelope(envelope, options);
+    }
+    async handleSignedEnvelope(envelope, context) {
+        if (!context.originType) {
+            throw new Error('Context origin type must be provided');
+        }
+        if (!envelope.sec?.sig) {
+            throw new Error('Signed envelope missing signature header');
+        }
+        if (!this.envelopeVerifier) {
+            throw new Error('EnvelopeVerifier is not configured');
+        }
+        const fromSystemId = context.fromSystemId ?? 'pending-attachment';
+        const kid = envelope.sec.sig.kid;
+        if (!kid) {
+            throw new Error('Signature header missing key identifier');
+        }
+        if (await this.keyManagementHandler.hasKey(kid)) {
+            const verified = await this.envelopeVerifier.verifyEnvelope(envelope, {
+                checkPayload: false,
+            });
+            if (verified) {
+                logger.debug('envelope_verified', {
+                    envp_id: envelope.id,
+                    sid: envelope.sid,
+                    kid,
+                });
+                return true;
+            }
+            throw new Error(`Envelope signature verification failed for kid=${kid}`);
+        }
+        this.keyManagementHandler.queuePendingSignedEnvelope(kid, envelope, context);
+        await this.keyManagementHandler.maybeRequestSigningKey(kid, context.originType, fromSystemId);
+        logger.debug('queued_envelope_missing_signing_key', {
+            kid,
+            envp_id: envelope.id,
+        });
+        return false;
+    }
+    async handleSealedEncryption(envelope, context) {
+        if (!envelope.to) {
+            logger.warning('sealed_encryption_requested_but_no_destination', {
+                envp_id: envelope.id,
+            });
+            return true;
+        }
+        try {
+            const rawOptions = await this.securityPolicy.getEncryptionOptions(envelope, context, this.node);
+            const options = rawOptions
+                ? normalizeEncryptionOptions(rawOptions)
+                : undefined;
+            if (options) {
+                if (options.encryptionType === 'channel') {
+                    logger.warning('policy_returned_channel_for_sealed_request', {
+                        envp_id: envelope.id,
+                    });
+                    return await this.handleToBeEncryptedEnvelopeWithOptions(envelope, context, normalizeEncryptionOptions({
+                        requestAddress: envelope.to,
+                    }));
+                }
+                logger.debug('using_sealed_encryption_options', {
+                    envp_id: envelope.id,
+                    options,
+                });
+                return await this.handleToBeEncryptedEnvelopeWithOptions(envelope, context, options);
+            }
+            logger.debug('no_encryption_options_requesting_key', {
+                envp_id: envelope.id,
+            });
+            return await this.handleToBeEncryptedEnvelopeWithOptions(envelope, context, normalizeEncryptionOptions({
+                requestAddress: envelope.to,
+            }));
+        }
+        catch (error) {
+            logger.debug('sealed_key_lookup_failed_requesting', {
+                envp_id: envelope.id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return await this.handleToBeEncryptedEnvelopeWithOptions(envelope, context, normalizeEncryptionOptions({
+                requestAddress: envelope.to,
+            }));
+        }
+    }
+    async handleChannelEncryption(envelope, context) {
+        if (!envelope.to) {
+            logger.warning('channel_encryption_requested_but_no_destination', {
+                envp_id: envelope.id,
+            });
+            return true;
+        }
+        return await this.handleToBeEncryptedEnvelopeWithOptions(envelope, context, normalizeEncryptionOptions({
+            encryptionType: 'channel',
+            destination: envelope.to,
+        }));
+    }
+    async handleToBeEncryptedEnvelope(envelope, context) {
+        if (!this.encryptionManager) {
+            return true;
+        }
+        if (context.originType !== DeliveryOriginType.LOCAL) {
+            logger.warning('envelope_encryption_rejected_non_local', {
+                origin: context.originType,
+            });
+            return true;
+        }
+        if (!isDataFrame(envelope.frame)) {
+            logger.trace('skipping_encryption_non_dataframe', {
+                envp_id: envelope.id,
+                frame_type: envelope.frame.type,
+            });
+            return true;
+        }
+        const rawOptions = await this.securityPolicy.getEncryptionOptions(envelope, context, this.node);
+        const options = rawOptions
+            ? normalizeEncryptionOptions(rawOptions)
+            : undefined;
+        if (!options) {
+            logger.warning('no_encryption_options_provided', {
+                envp_id: envelope.id,
+            });
+            return true;
+        }
+        return await this.performEncryption(envelope, context, options);
+    }
+    async handleToBeEncryptedEnvelopeWithOptions(envelope, context, encryptionOptions) {
+        if (!this.encryptionManager) {
+            return true;
+        }
+        if (context.originType !== DeliveryOriginType.LOCAL) {
+            logger.warning('envelope_encryption_rejected_non_local', {
+                origin: context.originType,
+            });
+            return true;
+        }
+        if (!isDataFrame(envelope.frame)) {
+            logger.trace('skipping_encryption_non_dataframe', {
+                envp_id: envelope.id,
+                frame_type: envelope.frame.type,
+            });
+            return true;
+        }
+        const normalizedOptions = normalizeEncryptionOptions(encryptionOptions);
+        return await this.performEncryption(envelope, context, normalizedOptions);
+    }
+    async performEncryption(envelope, context, encryptionOptions) {
+        if (!this.encryptionManager) {
+            return true;
+        }
+        const normalizedOptions = normalizeEncryptionOptions(encryptionOptions);
+        // Skip encryption if envelope is already encrypted
+        // This prevents re-queuing when replayed envelopes go through security again
+        if (envelope.sec?.enc) {
+            logger.debug('skipping_encryption_already_encrypted', {
+                envp_id: envelope.id,
+                destination: envelope.to ? String(envelope.to) : undefined,
+            });
+            return true;
+        }
+        try {
+            const result = await this.encryptionManager.encryptEnvelope(envelope, normalizedOptions);
+            if (result.status === EncryptionStatus.QUEUED) {
+                logger.debug('envelope_queued_for_encryption', {
+                    envp_id: envelope.id,
+                });
+                await this.handleEncryptionQueueing(envelope, context, normalizedOptions);
+                return false;
+            }
+            if (result.status === EncryptionStatus.OK) {
+                logger.debug('envelope_encrypted', { envp_id: envelope.id });
+                if (result.envelope) {
+                    envelope.frame = result.envelope.frame;
+                    envelope.sec = result.envelope.sec;
+                }
+                return true;
+            }
+            if (result.status === EncryptionStatus.SKIPPED) {
+                logger.debug('envelope_encryption_skipped', { envp_id: envelope.id });
+                return true;
+            }
+            logger.warning('unknown_encryption_status', {
+                envp_id: envelope.id,
+                status: result.status,
+            });
+            return true;
+        }
+        catch (error) {
+            logger.error('encryption_failed', {
+                envp_id: envelope.id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return true;
+        }
+    }
+    async handleEncryptionQueueing(envelope, context, options) {
+        if (!context.originType) {
+            throw new Error('Delivery context must include origin type for encryption queueing');
+        }
+        if (!this.encryptionManager) {
+            return;
+        }
+        if (!this.keyManagementHandler) {
+            return;
+        }
+        const fromSystemId = context.fromSystemId ?? 'unknown';
+        const normalizedOptions = normalizeEncryptionOptions(options);
+        if (normalizedOptions.recipKid ||
+            normalizedOptions.recip_kid ||
+            normalizedOptions.recipientKeyId) {
+            const kid = (normalizedOptions.recipKid ??
+                normalizedOptions.recip_kid ??
+                normalizedOptions.recipientKeyId);
+            // Queue envelope for replay when key arrives
+            this.keyManagementHandler.queuePendingEncryptionEnvelope(kid, envelope, context);
+            await this.keyManagementHandler.maybeRequestEncryptionKey(kid, context.originType, fromSystemId);
+            return;
+        }
+        if (normalizedOptions.requestAddress) {
+            const addressKey = String(normalizedOptions.requestAddress);
+            // Queue envelope for replay when key arrives
+            this.keyManagementHandler.queuePendingEncryptionEnvelope(addressKey, envelope, context);
+            // Trigger correlated KeyRequest for key arrival notification
+            await this.keyManagementHandler.maybeRequestEncryptionKeyByAddress(normalizedOptions.requestAddress, context.originType, fromSystemId);
+            return;
+        }
+        if (normalizedOptions.encryptionType === 'channel') {
+            logger.debug('channel_encryption_queueing_handled_internally', {
+                envp_id: envelope.id,
+                destination: normalizedOptions.destination
+                    ? String(normalizedOptions.destination)
+                    : undefined,
+            });
+            return;
+        }
+        logger.warning('unknown_encryption_queueing_options', {
+            envp_id: envelope.id,
+            options: normalizedOptions,
+        });
+    }
+    async handleFailedChannelEnvelopeCleanup(destination, reason) {
+        logger.debug('channel_handshake_failure_cleanup_attempted', {
+            destination,
+            reason,
+            note: 'envelope_cleanup_handled_by_encryption_manager',
+        });
+    }
+    isSigned(envelope, context) {
+        return Boolean(envelope.sec?.sig && context);
+    }
+}
+//# sourceMappingURL=envelope-security-handler.js.map

package/dist/esm/src/naylence/fame/node/envelope-security-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope-security-handler.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/node/envelope-security-handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAMpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAGhF,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,uCAAuC,CAAC;AAI/C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,MAAM,GAAG,SAAS,CAAC,8CAA8C,CAAC,CAAC;AAMzE,MAAM,6BAA6B,GACjC;IACE,CAAC,UAAU,EAAE,WAAW,CAAC;IACzB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACtC,CAAC,UAAU,EAAE,WAAW,CAAC;IACzB,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,SAAS,EAAE,UAAU,CAAC;IACvB,CAAC,YAAY,EAAE,aAAa,CAAC;IAC7B,CAAC,YAAY,EAAE,aAAa,CAAC;IAC7B,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IACrC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CACtC,CAAC;AAKJ,SAAS,0BAA0B,CACjC,OAA2B;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE3D,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,6BAA6B,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACzD,UAAU,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACzD,UAAU,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,UAA+B,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B;IAC/C,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAwB;IACjD,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,mBAAmB,CAAC;AAC7D,CAAC;AAED,MAAM,OAAO,uBAAuB;IAQlC,YAAY,OAOX;QACC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAC3D,CAAC;IAEM,KAAK,CAAC,sBAAsB,CACjC,QAAsB,EACtB,OAA4B;QAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc;YACpC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAC1C,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,IAAI,CACV;YACH,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YAC/B,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;YACxC,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,QAAQ,CAAC,EAAE;SACrB,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;gBACvC,IAAI,GAAG,EAAE,CAAC;oBACR,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,QAAQ,EAAE;gBACzC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;aACrC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc;YACvC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAC7C,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,IAAI,CACV;YACH,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YAClC,sBAAsB,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACvD,cAAc,EAAE,aAAa;YAC7B,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;SAC3D,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAClD,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;oBACpD,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC3D,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,cAAc,CAAuB,CAAC;YACzE,IAAI,kBAA+B,CAAC;YAEpC,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnC,MAAM,kBAAkB,GACrB,OAAO,CAAC,QAAQ,EAAE,kBAA8C;oBACjE,WAAW,CAAC,SAAS,CAAC;gBAExB,kBAAkB;oBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,CACjD,kBAAkB,EAClB,QAAQ,EACR,OAAO,CACR,CAAC;gBAEJ,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;oBAC5C,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,YAAY,EAAE,kBAAkB;oBAChC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC1D,6BAA6B,EAAE,kBAAkB;oBACjD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,kBAAkB;oBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,CACjD,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;gBAEJ,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;oBAC5C,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;oBAC/B,YAAY,EAAE,kBAAkB;oBAChC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC3D,CAAC,CAAC;YACL,CAAC;YAED,IAAI,kBAAkB,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrE,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,kBAAkB,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtE,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,iBAAiB,IAAI,aAAa,EAAE,CAAC;YACnD,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,sBAAsB,CACjC,QAAsB,EACtB,OAA6B;QAE7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAChE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,CAAC,0BAA0B,CACvE,QAAQ,EACR,OAAO,CACR,CAAC;YACF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,kBAE3B,CAAC;YAEd,IAAI,aAAa,GAAG,kBAAkB,CAAC;YACvC,IAAI,aAAa,EAAE,CAAC;gBAClB,IACE,aAAa,KAAK,WAAW,CAAC,MAAM;oBACpC,kBAAkB,KAAK,WAAW,CAAC,MAAM,EACzC,CAAC;oBACD,aAAa,GAAG,aAAa,CAAC;gBAChC,CAAC;qBAAM,IACL,aAAa,KAAK,WAAW,CAAC,OAAO;oBACrC,kBAAkB,KAAK,WAAW,CAAC,SAAS,EAC5C,CAAC;oBACD,aAAa,GAAG,aAAa,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,QAAQ,GAAG,EAAqB,CAAC;YAC3C,CAAC;YAED,OAAO,CAAC,QAAQ,CAAC,kBAAkB,GAAG,aAAa,CAAC;QACtD,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,QAAQ,GAAG,EAAqB,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IACL,OAAO;YACP,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAC1D,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YACtC,IACE,SAAS,KAAK,YAAY;gBAC1B,SAAS,KAAK,aAAa;gBAC3B,SAAS,KAAK,YAAY;gBAC1B,SAAS,KAAK,cAAc,EAC5B,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;oBAC/C,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,gCAAgC;iBACzC,CAAC,CAAC;gBACH,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAC3D,QAAQ,EACR,OAAO,CACR,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;gBAC5C,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,UAAU,EAAE,SAAS;gBACrB,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,MAAM,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBACvE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,8BAA8B,CACzC,SAAiB,EACjB,WAAmB;QAEnB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,UAAU,EAAE,SAAS;YACrB,WAAW;SACZ,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBACxD,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,4BAA4B,CACvC,SAAiB,EACjB,WAAmB,EACnB,MAAM,GAAG,kBAAkB;QAE3B,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACvC,UAAU,EAAE,SAAS;YACrB,WAAW;YACX,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBACzD,UAAU,EAAE,SAAS;gBACrB,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,kCAAkC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAChC,QAAsB,EACtB,OAA6B;QAE7B,IACE,IAAI,CAAC,iBAAiB;YACtB,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAC9C,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAChE,QAAQ,EACR,OAAO,CACR,CAAC;YACF,IAAI,WAAW,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAsB,EACtB,OAA2B;QAE3B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,QAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;QAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;QAEjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,QAAQ,EAAE;gBACpE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBAChC,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,GAAG;iBACJ,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAClD,GAAG,EACH,QAAQ,EACR,OAAO,CACR,CAAC;QACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CACpD,GAAG,EACH,OAAO,CAAC,UAAU,EAClB,YAAY,CACb,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;YAClD,GAAG;YACH,OAAO,EAAE,QAAQ,CAAC,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,QAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,OAAO,CAAC,gDAAgD,EAAE;gBAC/D,OAAO,EAAE,QAAQ,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC/D,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;YACF,MAAM,OAAO,GAAG,UAAU;gBACxB,CAAC,CAAC,0BAA0B,CAAC,UAAU,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,4CAA4C,EAAE;wBAC3D,OAAO,EAAE,QAAQ,CAAC,EAAE;qBACrB,CAAC,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,sCAAsC,CACtD,QAAQ,EACR,OAAO,EACP,0BAA0B,CAAC;wBACzB,cAAc,EAAE,QAAQ,CAAC,EAAE;qBAC5B,CAAC,CACH,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;oBAC9C,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,sCAAsC,CACtD,QAAQ,EACR,OAAO,EACP,OAAO,CACR,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACnD,OAAO,EAAE,QAAQ,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,sCAAsC,CACtD,QAAQ,EACR,OAAO,EACP,0BAA0B,CAAC;gBACzB,cAAc,EAAE,QAAQ,CAAC,EAAE;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAClD,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,sCAAsC,CACtD,QAAQ,EACR,OAAO,EACP,0BAA0B,CAAC;gBACzB,cAAc,EAAE,QAAQ,CAAC,EAAE;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,QAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,OAAO,CAAC,iDAAiD,EAAE;gBAChE,OAAO,EAAE,QAAQ,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,sCAAsC,CACtD,QAAQ,EACR,OAAO,EACP,0BAA0B,CAAC;YACzB,cAAc,EAAE,SAAS;YACzB,WAAW,EAAE,QAAQ,CAAC,EAAE;SACzB,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,QAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,KAAK,kBAAkB,CAAC,KAAK,EAAE,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,wCAAwC,EAAE;gBACvD,MAAM,EAAE,OAAO,CAAC,UAAU;aAC3B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;aAChC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC/D,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;QACF,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,0BAA0B,CAAC,UAAU,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,CAAC,gCAAgC,EAAE;gBAC/C,OAAO,EAAE,QAAQ,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,sCAAsC,CAClD,QAAsB,EACtB,OAA4B,EAC5B,iBAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,KAAK,kBAAkB,CAAC,KAAK,EAAE,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,wCAAwC,EAAE;gBACvD,MAAM,EAAE,OAAO,CAAC,UAAU;aAC3B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;aAChC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAAsB,EACtB,OAA4B,EAC5B,iBAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;QAExE,mDAAmD;QACnD,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACpD,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;aAC3D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CACzD,QAAQ,EACR,iBAAiB,CAClB,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;oBAC7C,OAAO,EAAE,QAAQ,CAAC,EAAE;iBACrB,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,wBAAwB,CACjC,QAAQ,EACR,OAAO,EACP,iBAAiB,CAClB,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACvC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACrC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;gBAC1C,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAChC,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,QAAsB,EACtB,OAA4B,EAC5B,OAA0B;QAE1B,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC;QACvD,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAE9D,IACE,iBAAiB,CAAC,QAAQ;YAC1B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,cAAc,EAChC,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC,QAAQ;gBACrC,iBAAiB,CAAC,SAAS;gBAC3B,iBAAiB,CAAC,cAAc,CAAqB,CAAC;YACxD,6CAA6C;YAC7C,IAAI,CAAC,oBAAoB,CAAC,8BAA8B,CACtD,GAAG,EACH,QAAQ,EACR,OAAO,CACR,CAAC;YACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CACvD,GAAG,EACH,OAAO,CAAC,UAAU,EAClB,YAAY,CACb,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAC5D,6CAA6C;YAC7C,IAAI,CAAC,oBAAoB,CAAC,8BAA8B,CACtD,UAAU,EACV,QAAQ,EACR,OAAO,CACR,CAAC;YACF,6DAA6D;YAC7D,MAAM,IAAI,CAAC,oBAAoB,CAAC,kCAAkC,CAChE,iBAAiB,CAAC,cAAc,EAChC,OAAO,CAAC,UAAU,EAClB,YAAY,CACb,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,iBAAiB,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;gBAC7D,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,WAAW,EAAE,iBAAiB,CAAC,WAAW;oBACxC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;oBACvC,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;YACpD,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kCAAkC,CAC9C,WAAmB,EACnB,MAAc;QAEd,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE;YAC1D,WAAW;YACX,MAAM;YACN,IAAI,EAAE,gDAAgD;SACvD,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CACd,QAAsB,EACtB,OAA6B;QAE7B,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,CAAC;CACF"}