@oneuptime/common 14.0.9 → 14.0.10

package/build/dist/Utils/AiRemediation/Resource/DockerSwarmCommandPolicy.js

@@ -0,0 +1,498 @@
+/*
+ * The docker-swarm command policy: tiers the docker CLI on a swarm manager
+ * (nodes, services, tasks, stacks) for Docker Swarm clusters. The CLI's
+ * grammar — how the command is found, how flags are parsed, which values
+ * are accepted — lives in DockerCliGrammar, shared with the docker-engine
+ * policy.
+ *
+ * Read: node ls / ps / inspect, service ls / ps / inspect, bounded service
+ * logs (--tail N up to 2000, or --since; never --follow), stack ls / ps /
+ * services — and every read the docker-engine policy allows (docker ps,
+ * docker info, docker network ls, ...), since the agent runs on a manager
+ * node whose engine is an ordinary Docker engine.
+ *
+ * SafeWrite — a reversible change to exactly ONE named service:
+ * `service update --force SERVICE` (a rolling restart of its tasks with the
+ * spec it already has; -d/--detach allowed), `service rollback SERVICE`
+ * (back to its previous spec) and `service scale SERVICE=N` with N >= 1.
+ *
+ * RiskyWrite: scaling to 0 or several services at once; `service update`
+ * that changes the image, the replica count, CPU or memory limits and
+ * reservations, or the update parallelism, delay and failure action; and
+ * `node update --availability active NODE`. `node update --availability
+ * drain|pause NODE` is RiskyWrite AND requiresHuman: a drain moves every
+ * task off the node, in every stack, whatever the command names — the swarm
+ * counterpart of kubectl drain.
+ *
+ * Denied: service create / rm, stack deploy / rm / config, secrets,
+ * configs, node rm / promote / demote / labels / role, swarm, every other
+ * `service update` flag (mounts, secrets, configs, capabilities,
+ * environment, user, networks, ports, entrypoint, arguments, hostname,
+ * credential specs, registry auth, ...), the commands neither docker
+ * policy runs (exec, run, rm, prune, ...), and every engine-level change:
+ * restarting or stopping one container on this manager is not a Swarm fix
+ * (a service's containers are its tasks, spread over the nodes and replaced
+ * by the swarm), so the model is pointed at the service commands instead.
+ * As in the engine profile, any flag before the command is refused.
+ *
+ * Targets are service names (a scale's SERVICE, not SERVICE=N) and node
+ * names or ids, exactly as written.
+ *
+ * Part of the import-closed resource policy directory that the resource AI
+ * agent carries a byte-identical copy of: relative imports of that set only.
+ */
+import { ResourceCommandTier } from "../../../Types/ResourceAiAgent/ResourceAiAccess";
+import { DOCKER_ENGINE_READ_COMMANDS, DOCKER_ENGINE_WRITE_PATHS, DOCKER_FILTER_FLAG, DOCKER_FORMAT_FLAG, DOCKER_FORMAT_FLAG_WITH_SHORTHAND, DOCKER_LOG_FLAGS, DOCKER_NO_TRUNC_FLAG, DOCKER_QUIET_FLAG, DockerFlagKind, deniedJudgement, dockerFlagValue, dockerNoArgumentReadSpec, evaluateDockerArgvSafely, findBadDockerFilter, findBadDockerFormat, findBadDockerName, findUnboundedLogProblem, isDockerCpuCount, isDockerImageReference, isDockerMemorySize, isDockerSwitchOn, isGoDuration, mergeDockerCommands, parseDockerCount, readJudgement, } from "./DockerCliGrammar";
+// The largest replica count a scale or --replicas may name.
+export const DOCKER_SWARM_MAX_REPLICAS = 999999;
+const NO_RESOLVE_FLAG = {
+    name: "no-resolve",
+    kind: DockerFlagKind.Bool,
+};
+const DETACH_FLAG = {
+    name: "detach",
+    shorthand: "d",
+    kind: DockerFlagKind.Bool,
+};
+// ---- Reads -------------------------------------------------------------------
+/*
+ * A read that lists the tasks or objects of the positionals it names:
+ * `min`..`max` names of `kind`, the given flags, --format json|table.
+ */
+const namedReadSpec = (data) => {
+    return {
+        verb: data.verb,
+        flags: data.flags,
+        judge(parsed) {
+            const count = parsed.positionals.length;
+            if (count < data.min || count > data.max) {
+                const wanted = data.min === data.max
+                    ? `exactly ${data.min} ${data.kind}`
+                    : `at least ${data.min} ${data.kind}`;
+                return deniedJudgement(`it takes ${wanted} (got ${count})`);
+            }
+            const problem = findBadDockerName(parsed.positionals, data.kind) ||
+                findBadDockerFilter(parsed) ||
+                findBadDockerFormat(parsed, data.formats);
+            return problem ? deniedJudgement(problem) : readJudgement(data.reason);
+        },
+    };
+};
+const TASK_LIST_FLAGS = [
+    DOCKER_FILTER_FLAG,
+    DOCKER_FORMAT_FLAG,
+    NO_RESOLVE_FLAG,
+    DOCKER_NO_TRUNC_FLAG,
+    DOCKER_QUIET_FLAG,
+];
+const PRETTY_FLAG = {
+    name: "pretty",
+    kind: DockerFlagKind.Bool,
+};
+const MANY = Number.MAX_SAFE_INTEGER;
+const SERVICE_LOGS_SPEC = {
+    verb: "service logs",
+    flags: [
+        ...DOCKER_LOG_FLAGS,
+        NO_RESOLVE_FLAG,
+        { name: "no-task-ids", kind: DockerFlagKind.Bool },
+        DOCKER_NO_TRUNC_FLAG,
+        { name: "raw", kind: DockerFlagKind.Bool },
+    ],
+    judge(parsed, command) {
+        if (parsed.positionals.length !== 1) {
+            return deniedJudgement(`it reads exactly one service's (or task's) log (got ${parsed.positionals.length} names)`);
+        }
+        const problem = findBadDockerName(parsed.positionals, "service or task") ||
+            findUnboundedLogProblem(parsed, command);
+        return problem
+            ? deniedJudgement(problem)
+            : readJudgement("reads a bounded slice of one service's log across its tasks; it changes nothing");
+    },
+};
+// The swarm's own read commands, by canonical path.
+export const DOCKER_SWARM_READ_COMMANDS = new Map([
+    [
+        "node ls",
+        dockerNoArgumentReadSpec("node ls", "lists the swarm's nodes; it changes nothing", [DOCKER_FILTER_FLAG, DOCKER_FORMAT_FLAG, DOCKER_QUIET_FLAG], ["json", "table"]),
+    ],
+    [
+        "node ps",
+        namedReadSpec({
+            verb: "node ps",
+            kind: "node",
+            min: 0,
+            max: MANY,
+            flags: TASK_LIST_FLAGS,
+            formats: ["json", "table"],
+            reason: "lists the tasks running on nodes; it changes nothing",
+        }),
+    ],
+    [
+        "node inspect",
+        namedReadSpec({
+            verb: "node inspect",
+            kind: "node",
+            min: 1,
+            max: MANY,
+            flags: [DOCKER_FORMAT_FLAG_WITH_SHORTHAND, PRETTY_FLAG],
+            formats: ["json"],
+            reason: "shows each node's configuration and state; it changes nothing",
+        }),
+    ],
+    [
+        "service ls",
+        dockerNoArgumentReadSpec("service ls", "lists the swarm's services; it changes nothing", [DOCKER_FILTER_FLAG, DOCKER_FORMAT_FLAG, DOCKER_QUIET_FLAG], ["json", "table"]),
+    ],
+    [
+        "service ps",
+        namedReadSpec({
+            verb: "service ps",
+            kind: "service",
+            min: 1,
+            max: MANY,
+            flags: TASK_LIST_FLAGS,
+            formats: ["json", "table"],
+            reason: "lists the tasks of services; it changes nothing",
+        }),
+    ],
+    [
+        "service inspect",
+        namedReadSpec({
+            verb: "service inspect",
+            kind: "service",
+            min: 1,
+            max: MANY,
+            flags: [DOCKER_FORMAT_FLAG_WITH_SHORTHAND, PRETTY_FLAG],
+            formats: ["json"],
+            reason: "shows each service's spec and state (environment values are redacted); it changes nothing",
+        }),
+    ],
+    ["service logs", SERVICE_LOGS_SPEC],
+    [
+        "stack ls",
+        dockerNoArgumentReadSpec("stack ls", "lists the swarm's stacks; it changes nothing", [DOCKER_FORMAT_FLAG], ["json", "table"]),
+    ],
+    [
+        "stack ps",
+        namedReadSpec({
+            verb: "stack ps",
+            kind: "stack",
+            min: 1,
+            max: 1,
+            flags: TASK_LIST_FLAGS,
+            formats: ["json", "table"],
+            reason: "lists the tasks of one stack; it changes nothing",
+        }),
+    ],
+    [
+        "stack services",
+        namedReadSpec({
+            verb: "stack services",
+            kind: "stack",
+            min: 1,
+            max: 1,
+            flags: [DOCKER_FILTER_FLAG, DOCKER_FORMAT_FLAG, DOCKER_QUIET_FLAG],
+            formats: ["json", "table"],
+            reason: "lists the services of one stack; it changes nothing",
+        }),
+    ],
+]);
+// ---- Writes ------------------------------------------------------------------
+/*
+ * The `service update` flags that change the service in a way a human
+ * should approve, each with the check its value must pass.
+ */
+const SERVICE_UPDATE_RISKY_FLAGS = [
+    {
+        name: "image",
+        isValid: isDockerImageReference,
+        expected: "an image reference such as nginx:1.27",
+    },
+    {
+        name: "replicas",
+        isValid: (value) => {
+            return parseDockerCount(value, DOCKER_SWARM_MAX_REPLICAS) !== null;
+        },
+        expected: "a replica count",
+    },
+    {
+        name: "limit-cpu",
+        isValid: isDockerCpuCount,
+        expected: "a number of CPUs such as 0.5 or 2",
+    },
+    {
+        name: "limit-memory",
+        isValid: isDockerMemorySize,
+        expected: "a memory size such as 512M or 1G",
+    },
+    {
+        name: "reserve-cpu",
+        isValid: isDockerCpuCount,
+        expected: "a number of CPUs such as 0.25",
+    },
+    {
+        name: "reserve-memory",
+        isValid: isDockerMemorySize,
+        expected: "a memory size such as 256M",
+    },
+    {
+        name: "update-parallelism",
+        isValid: (value) => {
+            return parseDockerCount(value, 1000) !== null;
+        },
+        expected: "a number of tasks updated at once (0 means all)",
+    },
+    {
+        name: "update-delay",
+        isValid: isGoDuration,
+        expected: "a duration such as 10s or 1m",
+    },
+    {
+        name: "update-failure-action",
+        isValid: (value) => {
+            return value === "pause" || value === "continue" || value === "rollback";
+        },
+        expected: "pause, continue or rollback",
+    },
+];
+/*
+ * `service update` flags that change what the service runs, as whom, or
+ * what it can reach — refused by name so the model hears why.
+ */
+const SERVICE_UPDATE_REFUSAL = "is never allowed: it changes what the service runs, as whom, or what it can reach (mounts, secrets, configs, capabilities, environment, user, networks, ports, entrypoint, arguments, hostname, credentials, registry auth); leave that change to a human";
+const SERVICE_UPDATE_REFUSED_FLAGS = [
+    { name: "mount-add", kind: DockerFlagKind.Value },
+    { name: "mount-rm", kind: DockerFlagKind.Value },
+    { name: "secret-add", kind: DockerFlagKind.Value },
+    { name: "secret-rm", kind: DockerFlagKind.Value },
+    { name: "config-add", kind: DockerFlagKind.Value },
+    { name: "config-rm", kind: DockerFlagKind.Value },
+    { name: "cap-add", kind: DockerFlagKind.Value },
+    { name: "cap-drop", kind: DockerFlagKind.Value },
+    { name: "env-add", kind: DockerFlagKind.Value },
+    { name: "env-rm", kind: DockerFlagKind.Value },
+    { name: "user", shorthand: "u", kind: DockerFlagKind.Value },
+    { name: "group-add", kind: DockerFlagKind.Value },
+    { name: "group-rm", kind: DockerFlagKind.Value },
+    { name: "network-add", kind: DockerFlagKind.Value },
+    { name: "network-rm", kind: DockerFlagKind.Value },
+    { name: "publish-add", kind: DockerFlagKind.Value },
+    { name: "publish-rm", kind: DockerFlagKind.Value },
+    { name: "entrypoint", kind: DockerFlagKind.Value },
+    { name: "args", kind: DockerFlagKind.Value },
+    { name: "hostname", kind: DockerFlagKind.Value },
+    { name: "credential-spec", kind: DockerFlagKind.Value },
+    { name: "with-registry-auth", kind: DockerFlagKind.Bool },
+    { name: "sysctl-add", kind: DockerFlagKind.Value },
+    { name: "sysctl-rm", kind: DockerFlagKind.Value },
+    { name: "host-add", kind: DockerFlagKind.Value },
+    { name: "host-rm", kind: DockerFlagKind.Value },
+    { name: "workdir", shorthand: "w", kind: DockerFlagKind.Value },
+    { name: "init", kind: DockerFlagKind.Bool },
+    { name: "read-only", kind: DockerFlagKind.Bool },
+    { name: "isolation", kind: DockerFlagKind.Value },
+].map((flag) => {
+    return Object.assign(Object.assign({}, flag), { refusal: SERVICE_UPDATE_REFUSAL });
+});
+const SERVICE_UPDATE_SPEC = {
+    verb: "service update",
+    flags: [
+        { name: "force", kind: DockerFlagKind.Bool },
+        DETACH_FLAG,
+        ...SERVICE_UPDATE_RISKY_FLAGS.map((risky) => {
+            return { name: risky.name, kind: DockerFlagKind.Value };
+        }),
+        ...SERVICE_UPDATE_REFUSED_FLAGS,
+    ],
+    judge(parsed) {
+        if (parsed.positionals.length !== 1) {
+            return deniedJudgement(`it updates exactly one service (got ${parsed.positionals.length} names); write docker service update --force NAME`);
+        }
+        const nameProblem = findBadDockerName(parsed.positionals, "service");
+        if (nameProblem) {
+            return deniedJudgement(nameProblem);
+        }
+        const changed = [];
+        for (const risky of SERVICE_UPDATE_RISKY_FLAGS) {
+            const value = dockerFlagValue(parsed, risky.name);
+            if (value === undefined) {
+                continue;
+            }
+            if (!risky.isValid(value)) {
+                return deniedJudgement(`--${risky.name} takes ${risky.expected}, not "${value}"`);
+            }
+            changed.push(`--${risky.name}`);
+        }
+        if (changed.length > 0) {
+            return {
+                tier: ResourceCommandTier.RiskyWrite,
+                reason: `changes a service's ${changed.join(", ")}: a rolling update of every one of its tasks`,
+                targets: parsed.positionals,
+            };
+        }
+        if (isDockerSwitchOn(parsed, "force")) {
+            return {
+                tier: ResourceCommandTier.SafeWrite,
+                reason: "restarts one service's tasks, one by one, with the spec it already has (a rolling restart)",
+                targets: parsed.positionals,
+            };
+        }
+        return deniedJudgement(`it changes nothing as written: add --force to restart the service's tasks, or one of ${SERVICE_UPDATE_RISKY_FLAGS.map((risky) => {
+            return `--${risky.name}`;
+        }).join(", ")}`);
+    },
+};
+const SERVICE_ROLLBACK_SPEC = {
+    verb: "service rollback",
+    flags: [DETACH_FLAG],
+    judge(parsed) {
+        if (parsed.positionals.length !== 1) {
+            return deniedJudgement(`it rolls back exactly one service (got ${parsed.positionals.length} names)`);
+        }
+        const problem = findBadDockerName(parsed.positionals, "service");
+        return problem
+            ? deniedJudgement(problem)
+            : {
+                tier: ResourceCommandTier.SafeWrite,
+                reason: "rolls one service back to the spec it had before its last update",
+                targets: parsed.positionals,
+            };
+    },
+};
+// SERVICE=REPLICAS, as `docker service scale` reads each argument.
+const SCALE_PAIR_REGEX = /^([A-Za-z0-9][A-Za-z0-9_.-]{0,254})=([0-9]{1,9})$/;
+const SERVICE_SCALE_SPEC = {
+    verb: "service scale",
+    flags: [DETACH_FLAG],
+    judge(parsed) {
+        if (parsed.positionals.length === 0) {
+            return deniedJudgement("it needs SERVICE=REPLICAS (e.g. web=3)");
+        }
+        const services = [];
+        let scalesToZero = false;
+        for (const pair of parsed.positionals) {
+            const match = SCALE_PAIR_REGEX.exec(pair);
+            const count = match
+                ? parseDockerCount(match[2] || "", DOCKER_SWARM_MAX_REPLICAS)
+                : null;
+            if (!match || count === null) {
+                return deniedJudgement(`"${pair}" is not SERVICE=REPLICAS with a replica count up to ${DOCKER_SWARM_MAX_REPLICAS} (e.g. web=3)`);
+            }
+            services.push(match[1] || "");
+            if (count === 0) {
+                scalesToZero = true;
+            }
+        }
+        if (scalesToZero) {
+            return {
+                tier: ResourceCommandTier.RiskyWrite,
+                reason: "scaling a service to zero replicas stops it: an outage, not a reversible nudge",
+                targets: services,
+            };
+        }
+        if (services.length > 1) {
+            return {
+                tier: ResourceCommandTier.RiskyWrite,
+                reason: "scales several services at once (a scale is a safe change for exactly one service)",
+                targets: services,
+            };
+        }
+        return {
+            tier: ResourceCommandTier.SafeWrite,
+            reason: "scales one service to a non-zero replica count, which a second scale reverses",
+            targets: services,
+        };
+    },
+};
+const NODE_UPDATE_SPEC = {
+    verb: "node update",
+    flags: [
+        { name: "availability", kind: DockerFlagKind.Value },
+        {
+            name: "label-add",
+            kind: DockerFlagKind.Value,
+            refusal: "is never allowed: node labels steer where every service is placed; leave that change to a human",
+        },
+        {
+            name: "label-rm",
+            kind: DockerFlagKind.Value,
+            refusal: "is never allowed: node labels steer where every service is placed; leave that change to a human",
+        },
+        {
+            name: "role",
+            kind: DockerFlagKind.Value,
+            refusal: "is never allowed: promoting or demoting a node changes the swarm's managers (its Raft quorum)",
+        },
+    ],
+    judge(parsed) {
+        if (parsed.positionals.length !== 1) {
+            return deniedJudgement(`it updates exactly one node (got ${parsed.positionals.length} names)`);
+        }
+        const problem = findBadDockerName(parsed.positionals, "node");
+        if (problem) {
+            return deniedJudgement(problem);
+        }
+        const availability = dockerFlagValue(parsed, "availability");
+        if (availability === "active") {
+            return {
+                tier: ResourceCommandTier.RiskyWrite,
+                reason: "makes a node schedulable again (availability active)",
+                targets: parsed.positionals,
+            };
+        }
+        if (availability === "drain" || availability === "pause") {
+            return {
+                tier: ResourceCommandTier.RiskyWrite,
+                reason: availability === "drain"
+                    ? "drains a node: every task on it, in every stack, is moved to other nodes"
+                    : "pauses a node: the swarm schedules no new task on it",
+                targets: parsed.positionals,
+                requiresHuman: true,
+            };
+        }
+        return deniedJudgement(availability === undefined
+            ? "it needs --availability active|pause|drain, the only node change OneUptime AI may make"
+            : `--availability takes active, pause or drain, not "${availability}"`);
+    },
+};
+// The swarm's write commands, by canonical path.
+export const DOCKER_SWARM_WRITE_COMMANDS = new Map([
+    ["service update", SERVICE_UPDATE_SPEC],
+    ["service rollback", SERVICE_ROLLBACK_SPEC],
+    ["service scale", SERVICE_SCALE_SPEC],
+    ["node update", NODE_UPDATE_SPEC],
+]);
+const ENGINE_WRITE_REFUSAL = "changes one container on this manager node, which is not a Swarm fix: a service's containers are its tasks, spread over the nodes and replaced by the swarm. Use docker service update --force SERVICE (a rolling restart), docker service scale SERVICE=N or docker service rollback SERVICE instead";
+export const DOCKER_SWARM_PROFILE = {
+    name: "docker-swarm",
+    resourceDescription: "a Docker Swarm cluster",
+    commands: mergeDockerCommands(DOCKER_SWARM_READ_COMMANDS, DOCKER_ENGINE_READ_COMMANDS, DOCKER_SWARM_WRITE_COMMANDS),
+    refusals: new Map(DOCKER_ENGINE_WRITE_PATHS.map((path) => {
+        return [path, ENGINE_WRITE_REFUSAL];
+    })),
+    allowedSummary: "Allowed for a Docker Swarm cluster — reads: docker node ls, docker node ps [NODE], docker node inspect NODE, docker service ls, docker service ps SERVICE, docker service inspect SERVICE, docker service logs --tail 200 SERVICE, docker stack ls, docker stack ps STACK, docker stack services STACK, and this manager's engine reads (docker ps, docker container inspect NAME, docker logs --tail 200 NAME, docker info, docker version, docker network ls, ...); changes: docker service update --force SERVICE, docker service rollback SERVICE, docker service scale SERVICE=N, docker service update --image|--replicas|--limit-cpu|--limit-memory|--reserve-cpu|--reserve-memory|--update-parallelism|--update-delay|--update-failure-action VALUE SERVICE, docker node update --availability active|pause|drain NODE",
+};
+const DockerSwarmCommandPolicy = {
+    name: "docker-swarm",
+    programs: ["docker"],
+    readCommandGuide: [
+        "- `docker node ls`, `docker node ps [NODE...]`, `docker node inspect NODE --pretty` — nodes, their state and their tasks",
+        "- `docker service ls`, `docker service ps SERVICE` (`--no-trunc` shows full errors; `--filter KEY=VALUE`, `-q`), `docker service inspect SERVICE --pretty` — environment values come back redacted",
+        "- `docker service logs --tail 200 SERVICE` — `--tail N` (N up to 2000) or `--since 30m` is required (without `--tail`, `--since` must be a duration of at most 24h); `-t`, `--no-trunc`, `--raw`, `--no-task-ids` are fine; never `-f`/`--follow`",
+        "- `docker stack ls`, `docker stack ps STACK`, `docker stack services STACK`",
+        "- This manager's engine: `docker ps -a`, `docker container inspect NAME`, `docker logs --tail 200 NAME`, `docker stats --no-stream`, `docker events --since 30m --until 0s`, `docker info`, `docker version`, `docker network ls`, `docker network inspect NAME`, ...",
+        "- `--format json` (or `table` for lists) only, never a Go template; one command per call, no pipes, no global flags (`-H`, `--context`, ...)",
+    ].join("\n"),
+    writeCommandGuide: [
+        "- Safe (one service; runs unattended in Automatic mode): `docker service update --force SERVICE` (rolling restart; `-d` ok), `docker service rollback SERVICE`, `docker service scale SERVICE=N` (N of 1 or more)",
+        "- Risky (needs approval unless allowlisted or approvals are bypassed): `docker service scale SERVICE=0` or several services, `docker service update` with `--image IMAGE`, `--replicas N`, `--limit-cpu`, `--limit-memory`, `--reserve-cpu`, `--reserve-memory`, `--update-parallelism`, `--update-delay` or `--update-failure-action`, and `docker node update --availability active NODE`",
+        "- Always asks a human: `docker node update --availability drain|pause NODE`",
+        "- Never: service create/rm, stack deploy/rm, secrets, configs, node rm/promote/demote/labels/role, swarm commands, other service update flags (env, mounts, secrets, networks, ports, user, ...), and container-level changes (docker restart/stop/kill/update of one container is not a Swarm fix)",
+    ].join("\n"),
+    evaluateArgv(argv) {
+        return evaluateDockerArgvSafely(DOCKER_SWARM_PROFILE, argv);
+    },
+};
+export default DockerSwarmCommandPolicy;
+//# sourceMappingURL=DockerSwarmCommandPolicy.js.map

package/build/dist/Utils/AiRemediation/Resource/DockerSwarmCommandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DockerSwarmCommandPolicy.js","sourceRoot":"","sources":["../../../../../Utils/AiRemediation/Resource/DockerSwarmCommandPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAKtF,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,iCAAiC,EACjC,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EAEjB,cAAc,EAKd,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,4DAA4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAW,MAAM,CAAC;AAExD,MAAM,eAAe,GAAmB;IACtC,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,cAAc,CAAC,IAAI;CAC1B,CAAC;AAEF,MAAM,WAAW,GAAmB;IAClC,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,GAAG;IACd,IAAI,EAAE,cAAc,CAAC,IAAI;CAC1B,CAAC;AAEF,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,aAAa,GAQO,CAAC,IAQ1B,EAAqB,EAAE;IACtB,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,CAAC,MAAwB;YAC5B,MAAM,KAAK,GAAW,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YAEhD,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzC,MAAM,MAAM,GACV,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBACnB,CAAC,CAAC,WAAW,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE;oBACpC,CAAC,CAAC,YAAY,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAE1C,OAAO,eAAe,CAAC,YAAY,MAAM,SAAS,KAAK,GAAG,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,OAAO,GACX,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC;gBAChD,mBAAmB,CAAC,MAAM,CAAC;gBAC3B,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAE5C,OAAO,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAkC;IACrD,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,oBAAoB;IACpB,iBAAiB;CAClB,CAAC;AAEF,MAAM,WAAW,GAAmB;IAClC,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,cAAc,CAAC,IAAI;CAC1B,CAAC;AAEF,MAAM,IAAI,GAAW,MAAM,CAAC,gBAAgB,CAAC;AAE7C,MAAM,iBAAiB,GAAsB;IAC3C,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE;QACL,GAAG,gBAAgB;QACnB,eAAe;QACf,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE;QAClD,oBAAoB;QACpB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE;KAC3C;IACD,KAAK,CAAC,MAAwB,EAAE,OAAe;QAC7C,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,eAAe,CACpB,uDAAuD,MAAM,CAAC,WAAW,CAAC,MAAM,SAAS,CAC1F,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GACX,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC;YACxD,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3C,OAAO,OAAO;YACZ,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC;YAC1B,CAAC,CAAC,aAAa,CACX,iFAAiF,CAClF,CAAC;IACR,CAAC;CACF,CAAC;AAEF,oDAAoD;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAGnC,IAAI,GAAG,CAA4B;IACrC;QACE,SAAS;QACT,wBAAwB,CACtB,SAAS,EACT,6CAA6C,EAC7C,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,EAC3D,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB;KACF;IACD;QACE,SAAS;QACT,aAAa,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1B,MAAM,EAAE,sDAAsD;SAC/D,CAAC;KACH;IACD;QACE,cAAc;QACd,aAAa,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,CAAC,iCAAiC,EAAE,WAAW,CAAC;YACvD,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,MAAM,EAAE,+DAA+D;SACxE,CAAC;KACH;IACD;QACE,YAAY;QACZ,wBAAwB,CACtB,YAAY,EACZ,gDAAgD,EAChD,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,EAC3D,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB;KACF;IACD;QACE,YAAY;QACZ,aAAa,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1B,MAAM,EAAE,iDAAiD;SAC1D,CAAC;KACH;IACD;QACE,iBAAiB;QACjB,aAAa,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,CAAC,iCAAiC,EAAE,WAAW,CAAC;YACvD,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,MAAM,EACJ,2FAA2F;SAC9F,CAAC;KACH;IACD,CAAC,cAAc,EAAE,iBAAiB,CAAC;IACnC;QACE,UAAU;QACV,wBAAwB,CACtB,UAAU,EACV,8CAA8C,EAC9C,CAAC,kBAAkB,CAAC,EACpB,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB;KACF;IACD;QACE,UAAU;QACV,aAAa,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1B,MAAM,EAAE,kDAAkD;SAC3D,CAAC;KACH;IACD;QACE,gBAAgB;QAChB,aAAa,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;YAClE,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1B,MAAM,EAAE,qDAAqD;SAC9D,CAAC;KACH;CACF,CAAC,CAAC;AAEH,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,0BAA0B,GAI3B;IACH;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,uCAAuC;KAClD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,CAAC,KAAa,EAAW,EAAE;YAClC,OAAO,gBAAgB,CAAC,KAAK,EAAE,yBAAyB,CAAC,KAAK,IAAI,CAAC;QACrE,CAAC;QACD,QAAQ,EAAE,iBAAiB;KAC5B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,mCAAmC;KAC9C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,kCAAkC;KAC7C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,+BAA+B;KAC1C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,4BAA4B;KACvC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,CAAC,KAAa,EAAW,EAAE;YAClC,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;QAChD,CAAC;QACD,QAAQ,EAAE,iDAAiD;KAC5D;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,8BAA8B;KACzC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,CAAC,KAAa,EAAW,EAAE;YAClC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,CAAC;QAC3E,CAAC;QACD,QAAQ,EAAE,6BAA6B;KACxC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,sBAAsB,GAC1B,2PAA2P,CAAC;AAE9P,MAAM,4BAA4B,GAAkC;IAClE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACjD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAChD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACjD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACjD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC/C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAChD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC/C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC9C,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC5D,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACjD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAChD,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACnD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACnD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC5C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAChD,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACvD,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE;IACzD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IACjD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAChD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC/C,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;IAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE;IAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE;IAChD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;CAClD,CAAC,GAAG,CAAC,CAAC,IAAoB,EAAkB,EAAE;IAC7C,uCAAY,IAAI,KAAE,OAAO,EAAE,sBAAsB,IAAG;AACtD,CAAC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAsB;IAC7C,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE;QACL,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE;QAC5C,WAAW;QACX,GAAG,0BAA0B,CAAC,GAAG,CAC/B,CAAC,KAAuB,EAAkB,EAAE;YAC1C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC;QAC1D,CAAC,CACF;QACD,GAAG,4BAA4B;KAChC;IACD,KAAK,CAAC,MAAwB;QAC5B,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,eAAe,CACpB,uCAAuC,MAAM,CAAC,WAAW,CAAC,MAAM,mDAAmD,CACpH,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAkB,iBAAiB,CAClD,MAAM,CAAC,WAAW,EAClB,SAAS,CACV,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAuB,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,eAAe,CACpB,KAAK,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,QAAQ,UAAU,KAAK,GAAG,CAC1D,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,IAAI,EAAE,mBAAmB,CAAC,UAAU;gBACpC,MAAM,EAAE,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C;gBAC/F,OAAO,EAAE,MAAM,CAAC,WAAW;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,mBAAmB,CAAC,SAAS;gBACnC,MAAM,EACJ,4FAA4F;gBAC9F,OAAO,EAAE,MAAM,CAAC,WAAW;aAC5B,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CACpB,wFAAwF,0BAA0B,CAAC,GAAG,CACpH,CAAC,KAAuB,EAAU,EAAE;YAClC,OAAO,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,CACF,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAsB;IAC/C,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,CAAC,WAAW,CAAC;IACpB,KAAK,CAAC,MAAwB;QAC5B,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,eAAe,CACpB,0CAA0C,MAAM,CAAC,WAAW,CAAC,MAAM,SAAS,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAkB,iBAAiB,CAC9C,MAAM,CAAC,WAAW,EAClB,SAAS,CACV,CAAC;QAEF,OAAO,OAAO;YACZ,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC;YAC1B,CAAC,CAAC;gBACE,IAAI,EAAE,mBAAmB,CAAC,SAAS;gBACnC,MAAM,EACJ,kEAAkE;gBACpE,OAAO,EAAE,MAAM,CAAC,WAAW;aAC5B,CAAC;IACR,CAAC;CACF,CAAC;AAEF,mEAAmE;AACnE,MAAM,gBAAgB,GACpB,mDAAmD,CAAC;AAEtD,MAAM,kBAAkB,GAAsB;IAC5C,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,WAAW,CAAC;IACpB,KAAK,CAAC,MAAwB;QAC5B,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,IAAI,YAAY,GAAY,KAAK,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,KAAK,GAA2B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,KAAK,GAAkB,KAAK;gBAChC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC;gBAC7D,CAAC,CAAC,IAAI,CAAC;YAET,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC7B,OAAO,eAAe,CACpB,IAAI,IAAI,wDAAwD,yBAAyB,eAAe,CACzG,CAAC;YACJ,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAE9B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,mBAAmB,CAAC,UAAU;gBACpC,MAAM,EACJ,gFAAgF;gBAClF,OAAO,EAAE,QAAQ;aAClB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,mBAAmB,CAAC,UAAU;gBACpC,MAAM,EACJ,oFAAoF;gBACtF,OAAO,EAAE,QAAQ;aAClB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,mBAAmB,CAAC,SAAS;YACnC,MAAM,EACJ,+EAA+E;YACjF,OAAO,EAAE,QAAQ;SAClB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAsB;IAC1C,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE;QACL,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE;QACpD;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,KAAK;YAC1B,OAAO,EACL,iGAAiG;SACpG;QACD;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,cAAc,CAAC,KAAK;YAC1B,OAAO,EACL,iGAAiG;SACpG;QACD;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,cAAc,CAAC,KAAK;YAC1B,OAAO,EACL,+FAA+F;SAClG;KACF;IACD,KAAK,CAAC,MAAwB;QAC5B,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,eAAe,CACpB,oCAAoC,MAAM,CAAC,WAAW,CAAC,MAAM,SAAS,CACvE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAkB,iBAAiB,CAC9C,MAAM,CAAC,WAAW,EAClB,MAAM,CACP,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,YAAY,GAAuB,eAAe,CACtD,MAAM,EACN,cAAc,CACf,CAAC;QAEF,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,mBAAmB,CAAC,UAAU;gBACpC,MAAM,EAAE,sDAAsD;gBAC9D,OAAO,EAAE,MAAM,CAAC,WAAW;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YACzD,OAAO;gBACL,IAAI,EAAE,mBAAmB,CAAC,UAAU;gBACpC,MAAM,EACJ,YAAY,KAAK,OAAO;oBACtB,CAAC,CAAC,0EAA0E;oBAC5E,CAAC,CAAC,sDAAsD;gBAC5D,OAAO,EAAE,MAAM,CAAC,WAAW;gBAC3B,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CACpB,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,wFAAwF;YAC1F,CAAC,CAAC,qDAAqD,YAAY,GAAG,CACzE,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,iDAAiD;AACjD,MAAM,CAAC,MAAM,2BAA2B,GAGpC,IAAI,GAAG,CAA4B;IACrC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IACvC,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IAC3C,CAAC,eAAe,EAAE,kBAAkB,CAAC;IACrC,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GACxB,uSAAuS,CAAC;AAE1S,MAAM,CAAC,MAAM,oBAAoB,GAAkB;IACjD,IAAI,EAAE,cAAc;IACpB,mBAAmB,EAAE,wBAAwB;IAC7C,QAAQ,EAAE,mBAAmB,CAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,CAC5B;IACD,QAAQ,EAAE,IAAI,GAAG,CACf,yBAAyB,CAAC,GAAG,CAAC,CAAC,IAAY,EAAoB,EAAE;QAC/D,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACtC,CAAC,CAAC,CACH;IACD,cAAc,EACZ,gyBAAgyB;CACnyB,CAAC;AAEF,MAAM,wBAAwB,GAAuB;IACnD,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,gBAAgB,EAAE;QAChB,0HAA0H;QAC1H,oMAAoM;QACpM,mPAAmP;QACnP,6EAA6E;QAC7E,uQAAuQ;QACvQ,8IAA8I;KAC/I,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,iBAAiB,EAAE;QACjB,mNAAmN;QACnN,6XAA6X;QAC7X,6EAA6E;QAC7E,qSAAqS;KACtS,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,YAAY,CAAC,IAAmB;QAC9B,OAAO,wBAAwB,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;CACF,CAAC;AAEF,eAAe,wBAAwB,CAAC"}