@oneuptime/common 12.0.25 → 12.0.27

package/build/dist/Server/Utils/SecurityEvent/ThreatIntel/ThreatIntelFeedPoller.js

@@ -0,0 +1,527 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import ThreatIntelFeed from "../../../../Models/DatabaseModels/ThreatIntelFeed";
+import LIMIT_MAX from "../../../../Types/Database/LimitMax";
+import OneUptimeDate from "../../../../Types/Date";
+import ObjectID from "../../../../Types/ObjectID";
+import { THREAT_INTEL_DEFAULT_VALID_DAYS } from "../../../../Types/SecurityEvent/ThreatIntelConstants";
+import StixPatternParser from "../../../../Utils/SecurityEvent/ThreatIntel/StixPatternParser";
+import ThreatIntelFeedService from "../../../Services/ThreatIntelFeedService";
+import ThreatIntelIndicatorService from "../../../Services/ThreatIntelIndicatorService";
+import logger from "../../Logger";
+import CaptureSpan from "../../Telemetry/CaptureSpan";
+import ConnectorErrorMessage from "../ConnectorErrorMessage";
+import TaxiiClient from "./TaxiiClient";
+import ThreatIntelEnricher from "./ThreatIntelEnricher";
+/*
+ * The TAXII feed poller: every enabled feed that is due (per-feed poll
+ * interval) fetches new STIX objects from its collection, parses the
+ * indicator patterns this platform supports into normalized IOC rows,
+ * and upserts them into the ThreatIntelIndicator ClickHouse table.
+ *
+ * Cursor semantics: added_after tracks the X-TAXII-Date-Added-Last
+ * response header — the spec's own resume point — so a large initial
+ * sync progresses across successive polls (MAX_PAGES_PER_POLL pages per
+ * poll, polls one poll-interval apart) and a timed-out run resumes where
+ * it left off. When a server omits the header, an undrained poll saves
+ * the envelope's next-page token instead, and a fully drained poll falls
+ * back to "now minus a minute of overlap"; redelivered objects are
+ * harmless because rows upsert by (identity, version).
+ *
+ * Deactivations are first-class: revocations and updates whose
+ * valid_until has already passed are INGESTED (as newer versions that
+ * fail the active predicate), never skipped — skipping them would leave
+ * the older, still-active version the argMax winner forever. Values an
+ * updated pattern no longer contains are retracted with tombstone
+ * versions for the same reason.
+ */
+// TAXII page size asked for; servers may serve less.
+export const TAXII_PAGE_SIZE = 500;
+/*
+ * Pages fetched per feed per poll. Bounds one poll's memory and wall
+ * clock against a multi-million-object collection; the cursor carries
+ * the sync forward on the feed's next due poll.
+ */
+export const MAX_PAGES_PER_POLL = 10;
+/*
+ * Overlap when falling back to a time-based cursor, so objects added
+ * while the poll ran are never skipped (GoogleSecOpsPoller precedent).
+ */
+const CURSOR_OVERLAP_IN_MINUTES = 1;
+/*
+ * ClickHouse DateTime64 overflows past 2262 and DateTime past 2106, and
+ * feeds use far-future valid_until values (9999-12-31) as a "never
+ * expires" idiom. Clamp parsed STIX dates so every row is representable;
+ * matching treats a 2100 validUntil as effectively never-expiring anyway.
+ */
+export const MAX_INDICATOR_DATE_MILLIS = Date.UTC(2100, 0, 1);
+export default class ThreatIntelFeedPoller {
+    static async pollAllDueFeeds() {
+        var _a;
+        const feeds = await ThreatIntelFeedService.findBy({
+            query: {
+                isEnabled: true,
+            },
+            select: {
+                _id: true,
+                projectId: true,
+                name: true,
+                apiRootUrl: true,
+                collectionId: true,
+                apiToken: true,
+                basicAuthUsername: true,
+                basicAuthPassword: true,
+                minimumConfidence: true,
+                pollIntervalInMinutes: true,
+                lastPolledAt: true,
+                cursor: true,
+                nextPageToken: true,
+            },
+            skip: 0,
+            limit: LIMIT_MAX,
+            props: {
+                isRoot: true,
+            },
+        });
+        const now = OneUptimeDate.getCurrentDate();
+        for (const feed of feeds) {
+            const intervalInMinutes = Math.max(1, feed.pollIntervalInMinutes || 60);
+            if (feed.lastPolledAt) {
+                const dueAt = OneUptimeDate.addRemoveMinutes(feed.lastPolledAt, intervalInMinutes);
+                if (OneUptimeDate.isAfter(dueAt, now)) {
+                    continue;
+                }
+            }
+            try {
+                await this.pollFeed(feed);
+            }
+            catch (error) {
+                logger.error(`ThreatIntelFeedPoller: error polling feed ${(_a = feed.id) === null || _a === void 0 ? void 0 : _a.toString()}:`);
+                logger.error(error);
+                /*
+                 * Best-effort bookkeeping that must never take the loop down
+                 * with it — the ConnectorErrorMessage discipline shared with the
+                 * SecOps poller and the detection engine. The saved page token is
+                 * cleared too: a failing fetch is how an expired token surfaces,
+                 * and the added_after cursor restarts the window cleanly.
+                 */
+                if (feed.id) {
+                    const feedId = feed.id;
+                    await ConnectorErrorMessage.recordFailure({
+                        label: `ThreatIntelFeedPoller: feed ${feedId.toString()}`,
+                        write: async () => {
+                            await ThreatIntelFeedService.updateOneById({
+                                id: feedId,
+                                data: {
+                                    lastPolledAt: OneUptimeDate.getCurrentDate(),
+                                    lastError: ConnectorErrorMessage.toMessage(error),
+                                    nextPageToken: null,
+                                },
+                                props: {
+                                    isRoot: true,
+                                },
+                            });
+                        },
+                    });
+                }
+            }
+        }
+    }
+    static async pollFeed(feed, clientOverride) {
+        if (!feed.id || !feed.projectId || !feed.apiRootUrl || !feed.collectionId) {
+            throw new Error("Threat intel feed is missing id, projectId, API root URL, or collection ID.");
+        }
+        const client = clientOverride ||
+            new TaxiiClient({
+                apiRootUrl: feed.apiRootUrl,
+                collectionId: feed.collectionId,
+                apiToken: feed.apiToken,
+                basicAuthUsername: feed.basicAuthUsername,
+                basicAuthPassword: feed.basicAuthPassword,
+            });
+        const context = {
+            projectId: feed.projectId,
+            feedId: feed.id,
+            feedName: feed.name || "",
+            minimumConfidence: Math.max(0, feed.minimumConfidence || 0),
+        };
+        const endTime = OneUptimeDate.getCurrentDate();
+        const result = {
+            pages: 0,
+            objectsFetched: 0,
+            indicatorRowsIngested: 0,
+            unsupportedPatterns: 0,
+            filteredByConfidence: 0,
+            deadOnArrival: 0,
+            valuesRetracted: 0,
+            drained: false,
+        };
+        let dateAddedLast = null;
+        /*
+         * A poll interrupted mid-pagination resumes from the saved token
+         * (paired with the unchanged added_after cursor), so header-less
+         * servers still make progress across polls.
+         */
+        let nextToken = feed.nextPageToken || undefined;
+        let resumeToken = null;
+        while (result.pages < MAX_PAGES_PER_POLL) {
+            const page = await client.fetchIndicatorObjects({
+                limit: TAXII_PAGE_SIZE,
+                addedAfter: feed.cursor || undefined,
+                next: nextToken,
+            });
+            result.pages++;
+            result.objectsFetched += page.objects.length;
+            const pageRows = [];
+            const pageObjects = [];
+            for (const stixObject of page.objects) {
+                const parsed = this.parseStixIndicator(stixObject, context, endTime);
+                switch (parsed.outcome) {
+                    case "ingested":
+                        pageRows.push(...parsed.rows);
+                        pageObjects.push({
+                            stixId: parsed.stixId,
+                            version: parsed.version,
+                            values: new Set(parsed.rows.map((row) => {
+                                return String(row["indicatorValue"]);
+                            })),
+                        });
+                        if (parsed.deadOnArrival) {
+                            result.deadOnArrival++;
+                        }
+                        break;
+                    case "unsupported":
+                        result.unsupportedPatterns++;
+                        break;
+                    case "filtered":
+                        result.filteredByConfidence++;
+                        break;
+                    default:
+                        break;
+                }
+            }
+            if (pageRows.length > 0) {
+                const retracted = await this.reconcileWithStoredVersions({
+                    context,
+                    pageRows,
+                    pageObjects,
+                    now: endTime,
+                });
+                await ThreatIntelIndicatorService.insertJsonRows(pageRows);
+                result.indicatorRowsIngested += pageRows.length - retracted;
+                result.valuesRetracted += retracted;
+            }
+            if (page.dateAddedLast) {
+                dateAddedLast = page.dateAddedLast;
+            }
+            if (!page.more) {
+                result.drained = true;
+                resumeToken = null;
+                break;
+            }
+            if (!page.next) {
+                /*
+                 * The server says more pages exist but gave no next token; only
+                 * the added_after cursor (when the server sends the header) can
+                 * resume the sync.
+                 */
+                resumeToken = null;
+                break;
+            }
+            nextToken = page.next;
+            // If the page cap ends the loop, this is the first unfetched page.
+            resumeToken = page.next;
+        }
+        /*
+         * Cursor: the header cursor when the server provided one; a
+         * time-based fallback only when the collection was fully drained
+         * (advancing past unfetched pages would skip objects forever).
+         */
+        let newCursor = undefined;
+        if (dateAddedLast) {
+            newCursor = dateAddedLast;
+        }
+        else if (result.drained) {
+            newCursor = OneUptimeDate.addRemoveMinutes(endTime, -CURSOR_OVERLAP_IN_MINUTES).toISOString();
+        }
+        /*
+         * The page token is persisted only when it is the sole resume point:
+         * an advanced header cursor supersedes it (tokens pair with the
+         * added_after they were issued under), and a drained poll needs none.
+         */
+        const persistedNextToken = !result.drained && !dateAddedLast && resumeToken ? resumeToken : null;
+        await ThreatIntelFeedService.updateOneById({
+            id: feed.id,
+            data: Object.assign(Object.assign({ lastPolledAt: endTime }, (newCursor ? { cursor: newCursor } : {})), { nextPageToken: persistedNextToken, lastError: null, lastPollSummary: this.buildPollSummary(result, {
+                    hasCursor: Boolean(newCursor),
+                    hasToken: Boolean(persistedNextToken),
+                }) }),
+            props: {
+                isRoot: true,
+            },
+        });
+        if (result.indicatorRowsIngested > 0 || result.valuesRetracted > 0) {
+            /*
+             * New or retracted indicators change what the ingest-time enricher
+             * should match; drop its per-project caches so the next batch sees
+             * the change.
+             */
+            ThreatIntelEnricher.invalidateProjectCache(feed.projectId);
+        }
+        return result;
+    }
+    /*
+     * One STIX object -> zero or more ThreatIntelIndicator rows (one per
+     * IOC value in the pattern; multi-value OR patterns fan out with the
+     * same stixId). Exported for tests.
+     *
+     * Deactivations are ingested, not skipped: a revocation, and an update
+     * whose valid_until already passed, must land as a NEWER version so it
+     * wins the argMax over the older, still-active row it supersedes. Such
+     * dead-on-arrival rows get tombstone retention (at least a year out)
+     * so partition-granular TTL can never drop the tombstone before the
+     * row it masks.
+     */
+    static parseStixIndicator(stixObject, context, now) {
+        if (stixObject["type"] !== "indicator") {
+            return { outcome: "not-indicator", rows: [] };
+        }
+        const stixId = String(stixObject["id"] || "").trim();
+        const patternType = String(stixObject["pattern_type"] || "stix");
+        if (!stixId || patternType !== "stix") {
+            return { outcome: "unsupported", rows: [] };
+        }
+        const values = StixPatternParser.parse(String(stixObject["pattern"] || ""));
+        if (values === null) {
+            return { outcome: "unsupported", rows: [] };
+        }
+        const revoked = stixObject["revoked"] === true;
+        const rawConfidence = Number(stixObject["confidence"]);
+        const confidence = Number.isFinite(rawConfidence)
+            ? Math.min(100, Math.max(0, Math.trunc(rawConfidence)))
+            : 0;
+        /*
+         * Unscored indicators (confidence 0) always pass the filter: a feed
+         * that does not score its indicators should not be silently empty
+         * the moment someone sets a minimum. Revocations bypass it entirely —
+         * they are retractions, not new claims, and filtering one out would
+         * leave the indicator it retracts active forever.
+         */
+        if (!revoked &&
+            context.minimumConfidence > 0 &&
+            confidence > 0 &&
+            confidence < context.minimumConfidence) {
+            return { outcome: "filtered", rows: [] };
+        }
+        const validFrom = this.clampToClickhouseRange(this.parseStixDate(stixObject["valid_from"]) ||
+            this.parseStixDate(stixObject["created"]) ||
+            now);
+        const validUntil = this.clampToClickhouseRange(this.parseStixDate(stixObject["valid_until"]) ||
+            OneUptimeDate.addRemoveDays(validFrom, THREAT_INTEL_DEFAULT_VALID_DAYS));
+        const deadOnArrival = revoked || !OneUptimeDate.isAfter(validUntil, now);
+        const version = (this.parseStixDate(stixObject["modified"]) ||
+            this.parseStixDate(stixObject["created"]) ||
+            now).getTime();
+        const labels = Array.isArray(stixObject["labels"])
+            ? stixObject["labels"]
+                .filter((label) => {
+                return typeof label === "string" && label.trim() !== "";
+            })
+                .map((label) => {
+                return String(label);
+            })
+            : [];
+        const indicatorName = String(stixObject["name"] || "");
+        /*
+         * Live rows expire a day after their validity; dead-on-arrival rows
+         * are tombstones whose whole job is masking older versions, so they
+         * must outlive anything they could be masking — a year from now is
+         * the ceiling any earlier version's default window can reach, and
+         * reconcileWithStoredVersions raises it further when a stored
+         * version's retention is later still.
+         */
+        const retentionDate = deadOnArrival
+            ? this.laterOf(OneUptimeDate.addRemoveDays(validUntil, 1), OneUptimeDate.addRemoveDays(now, THREAT_INTEL_DEFAULT_VALID_DAYS + 1))
+            : OneUptimeDate.addRemoveDays(validUntil, 1);
+        const rows = values.map((value) => {
+            return {
+                _id: ObjectID.generateTimeOrdered().toString(),
+                createdAt: OneUptimeDate.toClickhouseDateTime(now),
+                projectId: context.projectId.toString(),
+                feedId: context.feedId.toString(),
+                feedName: context.feedName,
+                stixId: stixId,
+                indicatorType: value.type,
+                indicatorValue: value.value,
+                indicatorName: indicatorName,
+                confidence: confidence,
+                stixLabels: labels,
+                validFrom: OneUptimeDate.toClickhouseDateTime64(validFrom),
+                validUntil: OneUptimeDate.toClickhouseDateTime64(validUntil),
+                revoked: revoked,
+                version: version,
+                retentionDate: OneUptimeDate.toClickhouseDateTime(retentionDate),
+            };
+        });
+        return { outcome: "ingested", rows, stixId, version, deadOnArrival };
+    }
+    /*
+     * Pre-ingest reconciliation against what the table already stores for
+     * this page's STIX objects. Two jobs, one query:
+     *
+     *  - RETENTION MONOTONICITY: a superseding version must never land in
+     *    an earlier retention partition than a version it masks, or a TTL
+     *    part-drop would delete the winner and resurrect the loser. Every
+     *    new row's retentionDate is raised to its object's stored ceiling.
+     *
+     *  - VALUE RETRACTION: an update that drops a value from a multi-value
+     *    pattern leaves that value's identity with the old version as its
+     *    argMax winner forever. A tombstone row (revoked, the update's
+     *    version) is appended for each stored value the newer pattern no
+     *    longer contains.
+     *
+     * Mutates pageRows in place (appending tombstones); returns how many
+     * tombstones were appended.
+     */
+    static async reconcileWithStoredVersions(data) {
+        const { context, pageRows, pageObjects, now } = data;
+        if (pageObjects.length === 0) {
+            return 0;
+        }
+        // Newest version per stixId in this page — the retraction basis.
+        const newestByStixId = new Map();
+        for (const info of pageObjects) {
+            const existing = newestByStixId.get(info.stixId);
+            if (!existing || info.version > existing.version) {
+                newestByStixId.set(info.stixId, info);
+            }
+        }
+        const stored = await ThreatIntelIndicatorService.findLatestVersionsByStixIds({
+            projectId: context.projectId,
+            feedId: context.feedId,
+            stixIds: Array.from(newestByStixId.keys()),
+        });
+        if (stored.length === 0) {
+            return 0;
+        }
+        const retentionCeilingByStixId = new Map();
+        for (const storedVersion of stored) {
+            const storedRetention = this.parseStixDate(storedVersion.retentionDate);
+            if (!storedRetention) {
+                continue;
+            }
+            const ceiling = retentionCeilingByStixId.get(storedVersion.stixId);
+            if (!ceiling || storedRetention.getTime() > ceiling.getTime()) {
+                retentionCeilingByStixId.set(storedVersion.stixId, storedRetention);
+            }
+        }
+        for (const row of pageRows) {
+            const ceiling = retentionCeilingByStixId.get(String(row["stixId"]));
+            if (!ceiling) {
+                continue;
+            }
+            const own = this.parseStixDate(String(row["retentionDate"]));
+            if (own && ceiling.getTime() > own.getTime()) {
+                row["retentionDate"] = OneUptimeDate.toClickhouseDateTime(ceiling);
+            }
+        }
+        let retracted = 0;
+        for (const storedVersion of stored) {
+            const newest = newestByStixId.get(storedVersion.stixId);
+            if (!newest ||
+                storedVersion.version >= newest.version ||
+                newest.values.has(storedVersion.indicatorValue)) {
+                continue;
+            }
+            const storedRetention = this.parseStixDate(storedVersion.retentionDate) || now;
+            const tombstoneRetention = this.laterOf(storedRetention, OneUptimeDate.addRemoveDays(now, THREAT_INTEL_DEFAULT_VALID_DAYS + 1));
+            pageRows.push({
+                _id: ObjectID.generateTimeOrdered().toString(),
+                createdAt: OneUptimeDate.toClickhouseDateTime(now),
+                projectId: context.projectId.toString(),
+                feedId: context.feedId.toString(),
+                feedName: context.feedName,
+                stixId: storedVersion.stixId,
+                indicatorType: storedVersion.indicatorType,
+                indicatorValue: storedVersion.indicatorValue,
+                indicatorName: storedVersion.indicatorName,
+                confidence: storedVersion.confidence,
+                stixLabels: [],
+                // Carried through verbatim — already ClickHouse-formatted.
+                validFrom: storedVersion.validFrom,
+                validUntil: storedVersion.validUntil,
+                revoked: true,
+                version: newest.version,
+                retentionDate: OneUptimeDate.toClickhouseDateTime(tombstoneRetention),
+            });
+            retracted++;
+        }
+        return retracted;
+    }
+    static parseStixDate(value) {
+        if (typeof value !== "string" || value.trim() === "") {
+            return null;
+        }
+        const parsed = new Date(value);
+        return Number.isNaN(parsed.getTime()) ? null : parsed;
+    }
+    static clampToClickhouseRange(date) {
+        if (date.getTime() > MAX_INDICATOR_DATE_MILLIS) {
+            return new Date(MAX_INDICATOR_DATE_MILLIS);
+        }
+        return date;
+    }
+    static laterOf(first, second) {
+        return first.getTime() >= second.getTime() ? first : second;
+    }
+    static buildPollSummary(result, resume) {
+        const parts = [
+            `Fetched ${result.objectsFetched} STIX object${result.objectsFetched === 1 ? "" : "s"} across ${result.pages} page${result.pages === 1 ? "" : "s"}`,
+            `ingested ${result.indicatorRowsIngested} indicator value${result.indicatorRowsIngested === 1 ? "" : "s"}`,
+        ];
+        if (result.unsupportedPatterns > 0) {
+            parts.push(`skipped ${result.unsupportedPatterns} unsupported patterns`);
+        }
+        if (result.filteredByConfidence > 0) {
+            parts.push(`${result.filteredByConfidence} below minimum confidence`);
+        }
+        if (result.deadOnArrival > 0) {
+            parts.push(`${result.deadOnArrival} already inactive (revoked or expired) ingested as deactivations`);
+        }
+        if (result.valuesRetracted > 0) {
+            parts.push(`retracted ${result.valuesRetracted} value${result.valuesRetracted === 1 ? "" : "s"} dropped by updated patterns`);
+        }
+        if (!result.drained) {
+            if (resume.hasCursor) {
+                parts.push("more pages remain; the next poll continues from the cursor");
+            }
+            else if (resume.hasToken) {
+                parts.push("more pages remain; the next poll continues from the saved page token");
+            }
+            else {
+                parts.push("more pages remain but the server provided no resume point (no next token or X-TAXII-Date-Added-Last header); the next poll retries this window");
+            }
+        }
+        return `${parts.join(", ")}.`;
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], ThreatIntelFeedPoller, "pollAllDueFeeds", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ThreatIntelFeed, Object]),
+    __metadata("design:returntype", Promise)
+], ThreatIntelFeedPoller, "pollFeed", null);
+//# sourceMappingURL=ThreatIntelFeedPoller.js.map

package/build/dist/Server/Utils/SecurityEvent/ThreatIntel/ThreatIntelFeedPoller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ThreatIntelFeedPoller.js","sourceRoot":"","sources":["../../../../../../Server/Utils/SecurityEvent/ThreatIntel/ThreatIntelFeedPoller.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mDAAmD,CAAC;AAChF,OAAO,SAAS,MAAM,qCAAqC,CAAC;AAC5D,OAAO,aAAa,MAAM,wBAAwB,CAAC;AAEnD,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,+BAA+B,EAAE,MAAM,sDAAsD,CAAC;AACvG,OAAO,iBAEN,MAAM,+DAA+D,CAAC;AACvE,OAAO,sBAAsB,MAAM,0CAA0C,CAAC;AAC9E,OAAO,2BAEN,MAAM,+CAA+C,CAAC;AACvD,OAAO,MAAM,MAAM,cAAc,CAAC;AAClC,OAAO,WAAW,MAAM,6BAA6B,CAAC;AACtD,OAAO,qBAAqB,MAAM,0BAA0B,CAAC;AAC7D,OAAO,WAAiC,MAAM,eAAe,CAAC;AAC9D,OAAO,mBAAmB,MAAM,uBAAuB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAW,GAAG,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,EAAE,CAAC;AAE7C;;;GAGG;AACH,MAAM,yBAAyB,GAAW,CAAC,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAW,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAkDtE,MAAM,CAAC,OAAO,OAAO,qBAAqB;IAEpB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe;;QACjC,MAAM,KAAK,GAA2B,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACxE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI;aAChB;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,IAAI;gBACd,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,IAAI;gBACvB,qBAAqB,EAAE,IAAI;gBAC3B,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,IAAI;aACpB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;QAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,iBAAiB,GAAW,IAAI,CAAC,GAAG,CACxC,CAAC,EACD,IAAI,CAAC,qBAAqB,IAAI,EAAE,CACjC,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAS,aAAa,CAAC,gBAAgB,CAChD,IAAI,CAAC,YAAY,EACjB,iBAAiB,CAClB,CAAC;gBAEF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,6CAA6C,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CACpE,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEpB;;;;;;mBAMG;gBACH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oBACZ,MAAM,MAAM,GAAa,IAAI,CAAC,EAAE,CAAC;oBAEjC,MAAM,qBAAqB,CAAC,aAAa,CAAC;wBACxC,KAAK,EAAE,+BAA+B,MAAM,CAAC,QAAQ,EAAE,EAAE;wBACzD,KAAK,EAAE,KAAK,IAAmB,EAAE;4BAC/B,MAAM,sBAAsB,CAAC,aAAa,CAAC;gCACzC,EAAE,EAAE,MAAM;gCACV,IAAI,EAAE;oCACJ,YAAY,EAAE,aAAa,CAAC,cAAc,EAAE;oCAC5C,SAAS,EAAE,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC;oCACjD,aAAa,EAAE,IAAyB;iCACzC;gCACD,KAAK,EAAE;oCACL,MAAM,EAAE,IAAI;iCACb;6BACF,CAAC,CAAC;wBACL,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,QAAQ,CAC1B,IAAqB,EACrB,cAAwC;QAExC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GACV,cAAc;YACd,IAAI,WAAW,CAAC;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC,CAAC;QAEL,MAAM,OAAO,GAAqB;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACzB,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;SAC5D,CAAC;QAEF,MAAM,OAAO,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;QAErD,MAAM,MAAM,GAAmB;YAC7B,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,CAAC;YACjB,qBAAqB,EAAE,CAAC;YACxB,mBAAmB,EAAE,CAAC;YACtB,oBAAoB,EAAE,CAAC;YACvB,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC;;;;WAIG;QACH,IAAI,SAAS,GAAuB,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;QACpE,IAAI,WAAW,GAAkB,IAAI,CAAC;QAEtC,OAAO,MAAM,CAAC,KAAK,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAqB,MAAM,MAAM,CAAC,qBAAqB,CAAC;gBAChE,KAAK,EAAE,eAAe;gBACtB,UAAU,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;gBACpC,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAE7C,MAAM,QAAQ,GAAsB,EAAE,CAAC;YACvC,MAAM,WAAW,GAA0B,EAAE,CAAC;YAE9C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,MAAM,GAA6B,IAAI,CAAC,kBAAkB,CAC9D,UAAU,EACV,OAAO,EACP,OAAO,CACR,CAAC;gBAEF,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvB,KAAK,UAAU;wBACb,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC9B,WAAW,CAAC,IAAI,CAAC;4BACf,MAAM,EAAE,MAAM,CAAC,MAAO;4BACtB,OAAO,EAAE,MAAM,CAAC,OAAQ;4BACxB,MAAM,EAAE,IAAI,GAAG,CACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAe,EAAU,EAAE;gCAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;4BACvC,CAAC,CAAC,CACH;yBACF,CAAC,CAAC;wBACH,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;4BACzB,MAAM,CAAC,aAAa,EAAE,CAAC;wBACzB,CAAC;wBACD,MAAM;oBACR,KAAK,aAAa;wBAChB,MAAM,CAAC,mBAAmB,EAAE,CAAC;wBAC7B,MAAM;oBACR,KAAK,UAAU;wBACb,MAAM,CAAC,oBAAoB,EAAE,CAAC;wBAC9B,MAAM;oBACR;wBACE,MAAM;gBACV,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAW,MAAM,IAAI,CAAC,2BAA2B,CAAC;oBAC/D,OAAO;oBACP,QAAQ;oBACR,WAAW;oBACX,GAAG,EAAE,OAAO;iBACb,CAAC,CAAC;gBAEH,MAAM,2BAA2B,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3D,MAAM,CAAC,qBAAqB,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC5D,MAAM,CAAC,eAAe,IAAI,SAAS,CAAC;YACtC,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACrC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBACtB,WAAW,GAAG,IAAI,CAAC;gBACnB,MAAM;YACR,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf;;;;mBAIG;gBACH,WAAW,GAAG,IAAI,CAAC;gBACnB,MAAM;YACR,CAAC;YAED,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;YACtB,mEAAmE;YACnE,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED;;;;WAIG;QACH,IAAI,SAAS,GAAuB,SAAS,CAAC;QAE9C,IAAI,aAAa,EAAE,CAAC;YAClB,SAAS,GAAG,aAAa,CAAC;QAC5B,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,SAAS,GAAG,aAAa,CAAC,gBAAgB,CACxC,OAAO,EACP,CAAC,yBAAyB,CAC3B,CAAC,WAAW,EAAE,CAAC;QAClB,CAAC;QAED;;;;WAIG;QACH,MAAM,kBAAkB,GACtB,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAExE,MAAM,sBAAsB,CAAC,aAAa,CAAC;YACzC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,gCACF,YAAY,EAAE,OAAO,IAClB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAC3C,aAAa,EAAE,kBAAuC,EACtD,SAAS,EAAE,IAAyB,EACpC,eAAe,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAC7C,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;oBAC7B,QAAQ,EAAE,OAAO,CAAC,kBAAkB,CAAC;iBACtC,CAAC,GACH;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,qBAAqB,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YACnE;;;;eAIG;YACH,mBAAmB,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;OAWG;IACI,MAAM,CAAC,kBAAkB,CAC9B,UAAsB,EACtB,OAAyB,EACzB,GAAS;QAET,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GAAW,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAW,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAuC,iBAAiB,CAAC,KAAK,CACxE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CACpC,CAAC;QAEF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,OAAO,GAAY,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;QAExD,MAAM,aAAa,GAAW,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAW,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YACvD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC,CAAC;QAEN;;;;;;WAMG;QACH,IACE,CAAC,OAAO;YACR,OAAO,CAAC,iBAAiB,GAAG,CAAC;YAC7B,UAAU,GAAG,CAAC;YACd,UAAU,GAAG,OAAO,CAAC,iBAAiB,EACtC,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,SAAS,GAAS,IAAI,CAAC,sBAAsB,CACjD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzC,GAAG,CACN,CAAC;QAEF,MAAM,UAAU,GAAS,IAAI,CAAC,sBAAsB,CAClD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC3C,aAAa,CAAC,aAAa,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAC1E,CAAC;QAEF,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAErD,MAAM,OAAO,GAAW,CACtB,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzC,GAAG,CACJ,CAAC,OAAO,EAAE,CAAC;QAEZ,MAAM,MAAM,GAAkB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC,CAAE,UAAU,CAAC,QAAQ,CAAoB;iBACrC,MAAM,CAAC,CAAC,KAAc,EAAW,EAAE;gBAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1D,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,KAAc,EAAU,EAAE;gBAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC;YACN,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,aAAa,GAAW,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/D;;;;;;;WAOG;QACH,MAAM,aAAa,GAAS,aAAa;YACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CACV,aAAa,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,EAC1C,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,+BAA+B,GAAG,CAAC,CAAC,CACtE;YACH,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAE/C,MAAM,IAAI,GAAsB,MAAM,CAAC,GAAG,CACxC,CAAC,KAA2B,EAAc,EAAE;YAC1C,OAAO;gBACL,GAAG,EAAE,QAAQ,CAAC,mBAAmB,EAAE,CAAC,QAAQ,EAAE;gBAC9C,SAAS,EAAE,aAAa,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAClD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACvC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM;gBACd,aAAa,EAAE,KAAK,CAAC,IAAI;gBACzB,cAAc,EAAE,KAAK,CAAC,KAAK;gBAC3B,aAAa,EAAE,aAAa;gBAC5B,UAAU,EAAE,UAAU;gBACtB,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,aAAa,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBAC1D,UAAU,EAAE,aAAa,CAAC,sBAAsB,CAAC,UAAU,CAAC;gBAC5D,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,OAAO;gBAChB,aAAa,EAAE,aAAa,CAAC,oBAAoB,CAAC,aAAa,CAAC;aAC5C,CAAC;QACzB,CAAC,CACF,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACvE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAKhD;QACC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAErD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,iEAAiE;QACjE,MAAM,cAAc,GAAgC,IAAI,GAAG,EAGxD,CAAC;QAEJ,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAA+B,cAAc,CAAC,GAAG,CAC7D,IAAI,CAAC,MAAM,CACZ,CAAC;YAEF,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACjD,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GACV,MAAM,2BAA2B,CAAC,2BAA2B,CAAC;YAC5D,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;SAC3C,CAAC,CAAC;QAEL,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,wBAAwB,GAAsB,IAAI,GAAG,EAAgB,CAAC;QAE5E,KAAK,MAAM,aAAa,IAAI,MAAM,EAAE,CAAC;YACnC,MAAM,eAAe,GAAgB,IAAI,CAAC,aAAa,CACrD,aAAa,CAAC,aAAa,CAC5B,CAAC;YAEF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAqB,wBAAwB,CAAC,GAAG,CAC5D,aAAa,CAAC,MAAM,CACrB,CAAC;YAEF,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9D,wBAAwB,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAqB,wBAAwB,CAAC,GAAG,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CACtB,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAgB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAE1E,IAAI,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7C,GAAG,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,IAAI,SAAS,GAAW,CAAC,CAAC;QAE1B,KAAK,MAAM,aAAa,IAAI,MAAM,EAAE,CAAC;YACnC,MAAM,MAAM,GAA+B,cAAc,CAAC,GAAG,CAC3D,aAAa,CAAC,MAAM,CACrB,CAAC;YAEF,IACE,CAAC,MAAM;gBACP,aAAa,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;gBACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,EAC/C,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,eAAe,GACnB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;YAEzD,MAAM,kBAAkB,GAAS,IAAI,CAAC,OAAO,CAC3C,eAAe,EACf,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,+BAA+B,GAAG,CAAC,CAAC,CACtE,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,QAAQ,CAAC,mBAAmB,EAAE,CAAC,QAAQ,EAAE;gBAC9C,SAAS,EAAE,aAAa,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAClD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACvC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,aAAa,EAAE,aAAa,CAAC,aAAa;gBAC1C,cAAc,EAAE,aAAa,CAAC,cAAc;gBAC5C,aAAa,EAAE,aAAa,CAAC,aAAa;gBAC1C,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,UAAU,EAAE,EAAE;gBACd,2DAA2D;gBAC3D,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,aAAa,EAAE,aAAa,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;aACjD,CAAC,CAAC;YAExB,SAAS,EAAE,CAAC;QACd,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,aAAa,CAAC,KAAc;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAErC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IAEO,MAAM,CAAC,sBAAsB,CAAC,IAAU;QAC9C,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,yBAAyB,EAAE,CAAC;YAC/C,OAAO,IAAI,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,OAAO,CAAC,KAAW,EAAE,MAAY;QAC9C,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAC7B,MAAsB,EACtB,MAAiD;QAEjD,MAAM,KAAK,GAAkB;YAC3B,WAAW,MAAM,CAAC,cAAc,eAC9B,MAAM,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,WAAW,MAAM,CAAC,KAAK,QAAQ,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YAC9D,YAAY,MAAM,CAAC,qBAAqB,mBACtC,MAAM,CAAC,qBAAqB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAC5C,EAAE;SACH,CAAC;QAEF,IAAI,MAAM,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,mBAAmB,uBAAuB,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,MAAM,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,oBAAoB,2BAA2B,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,aAAa,kEAAkE,CAC1F,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,CAAC,eAAe,SACjC,MAAM,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACtC,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CACR,4DAA4D,CAC7D,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CACR,sEAAsE,CACvE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CACR,gJAAgJ,CACjJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAChC,CAAC;CACF;AA9mBqB;IADnB,WAAW,EAAE;;;;kDAoFb;AAGmB;IADnB,WAAW,EAAE;;qCAEN,eAAe;;2CAwLtB"}