@openora/core 0.4.0

package/dist/iam/service/iam.service.js

@@ -0,0 +1,563 @@
+import { makeNotFoundError, makeConflictError, createDomainError, findOneOrThrow, pageToOffset, serializeRow, statement, roles, readActions, SUPPORTED_LEVELS, levelToActions, levelRank, isLevelSufficient, cached, invalidate, actionsToLevel, } from '@openora/core/server';
+import { eq, and, gt, inArray, sql } from 'drizzle-orm';
+import { adminRole, adminRolePermission, adminRoleAssignment, adminInvitation, } from '../schema/index.js';
+// Read-only cross-domain schema import (sanctioned): assignRole verifies the target is an admin user.
+import { user } from '@openora/core/pam/schema/identity';
+export const RoleNotFoundError = makeNotFoundError('AdminRole');
+export const InvitationNotFoundError = makeNotFoundError('AdminInvitation');
+export const InvitationConflictError = makeConflictError('AdminInvitation', 'Invitation already exists or token invalid');
+export const InvalidGrantError = createDomainError('InvalidGrantError', () => 'Unknown module or level');
+// Privilege escalation guard: mapped to FORBIDDEN in the router.
+export const GrantEscalationError = createDomainError('GrantEscalationError', () => 'Cannot grant or assign permissions you do not hold');
+export const NotSuperAdminError = createDomainError('NotSuperAdminError', () => 'Super-admin access required');
+export const AdminUserNotFoundError = makeNotFoundError('AdminUser');
+// Guards against assigning a backoffice role to a player account (privilege escalation).
+export const NotAnAdminUserError = createDomainError('NotAnAdminUserError', () => 'Roles can only be assigned to admin users');
+export const ProtectedRoleError = makeConflictError('AdminRole', 'This role is protected and cannot be modified or deleted');
+// Removing the final super-admin assignment would lock out admin management.
+export const LastSuperAdminError = makeConflictError('AdminRole', 'Cannot remove the last super-admin');
+// The `admin` module is NOT operator-assignable: granting `admin: read_write` to a
+// custom role would pass the router's adminGuard - it must come ONLY from `isSuperAdmin`.
+const NON_ASSIGNABLE_MODULES = new Set(['admin']);
+function buildCatalog() {
+    return {
+        modules: Object.keys(statement)
+            .filter((resource) => !NON_ASSIGNABLE_MODULES.has(resource))
+            .map((resource) => ({
+            resource,
+            actions: statement[resource].slice(),
+            readActions: (readActions[resource] ?? []).slice(),
+        })),
+        levels: SUPPORTED_LEVELS.slice(),
+    };
+}
+function validateGrants(grants) {
+    for (const g of grants) {
+        const known = statement[g.resource];
+        // `admin` grants are super-admin-only (A6) and must not be assignable via the matrix.
+        if (!known || NON_ASSIGNABLE_MODULES.has(g.resource)) {
+            throw new InvalidGrantError();
+        }
+        if (!SUPPORTED_LEVELS.includes(g.level)) {
+            throw new InvalidGrantError();
+        }
+    }
+}
+function staticGrantsForRole(roleName) {
+    const role = roles[roleName];
+    if (!role)
+        return [];
+    return Object.keys(statement).flatMap((resource) => statement[resource]
+        .filter((action) => role.authorize({ [resource]: [action] }).success)
+        .map((action) => ({ resource: resource, action })));
+}
+function grantsToLevelMap(grants) {
+    const byResource = new Map();
+    for (const g of grants) {
+        if (!byResource.has(g.resource))
+            byResource.set(g.resource, new Set());
+        byResource.get(g.resource).add(g.action);
+    }
+    const map = {};
+    for (const [resource, actions] of byResource) {
+        const all = statement[resource];
+        if (!all)
+            continue;
+        if (all.every((a) => actions.has(a))) {
+            map[resource] = 'read_write';
+        }
+        else {
+            const read = readActions[resource] ?? [];
+            map[resource] = read.length > 0 && read.every((a) => actions.has(a)) ? 'read' : 'no_access';
+        }
+    }
+    return map;
+}
+function toRoleDto(row) {
+    return serializeRow(row, { dateFields: ['createdAt'] });
+}
+function toAssignmentDto(row) {
+    return serializeRow(row, { dateFields: ['createdAt'] });
+}
+function toInvitationDto(row) {
+    return serializeRow(row, { dateFields: ['expiresAt', 'acceptedAt', 'createdAt'] });
+}
+// Short TTL: grants are cached only to spare the DB on the per-request guard path,
+// so a stale entry means a revoked admin keeps access for at most this window. The
+// event-driven purge below normally beats the TTL; this is just the safety floor.
+const GRANTS_CACHE_TTL_MS = 10_000;
+const grantsCacheKey = (userId) => `admin-grants:${userId}`;
+/** Implements ADMIN_PERMISSION_RESOLVER; returns null when the user has no DB assignment (guard falls back to static roles for the bootstrap admin path). */
+export class DbAdminPermissionResolver {
+    drizzle;
+    cache;
+    constructor(drizzle, cache) {
+        this.drizzle = drizzle;
+        this.cache = cache;
+    }
+    getGrants(userId) {
+        // A cached `null` (no assignment) is a valid, cacheable answer - cached() treats
+        // only `undefined` as a miss, so repeated forbidden hits don't re-query either.
+        return cached(this.cache, grantsCacheKey(userId), GRANTS_CACHE_TTL_MS, () => this.loadGrants(userId));
+    }
+    async loadGrants(userId) {
+        // One indexed join (on admin_role_assignment_user_id_idx) replaces the old
+        // 2 + N-per-role fan-out. leftJoin keeps super-admin roles (no permission rows)
+        // and empty roles in the result so the null/[]/grants semantics are unchanged.
+        const rows = await this.drizzle.db
+            .select({
+            isSuperAdmin: adminRole.isSuperAdmin,
+            resource: adminRolePermission.resource,
+            level: adminRolePermission.level,
+        })
+            .from(adminRoleAssignment)
+            .innerJoin(adminRole, eq(adminRole.id, adminRoleAssignment.roleId))
+            .leftJoin(adminRolePermission, eq(adminRolePermission.roleId, adminRole.id))
+            .where(eq(adminRoleAssignment.userId, userId));
+        if (rows.length === 0)
+            return null;
+        if (rows.some((r) => r.isSuperAdmin))
+            return allGrants();
+        const seen = new Set();
+        const grants = [];
+        for (const r of rows) {
+            if (!r.resource || !r.level)
+                continue; // leftJoin null: role with no permission rows
+            for (const action of levelToActions(r.resource, r.level)) {
+                const key = `${r.resource}:${action}`;
+                if (seen.has(key))
+                    continue;
+                seen.add(key);
+                grants.push({ resource: r.resource, action });
+            }
+        }
+        return grants;
+    }
+    /** Drop one user's cached grants - called on assign/revoke so revocation is instant. */
+    async invalidateUser(userId) {
+        await invalidate(this.cache, grantsCacheKey(userId));
+    }
+    /** Drop cached grants for every current holder of a role - for a role-wide permission change. */
+    async invalidateRole(roleId) {
+        const holders = await this.drizzle.db
+            .select({ userId: adminRoleAssignment.userId })
+            .from(adminRoleAssignment)
+            .where(eq(adminRoleAssignment.roleId, roleId));
+        if (holders.length > 0) {
+            await invalidate(this.cache, holders.map((h) => grantsCacheKey(h.userId)));
+        }
+    }
+}
+function allGrants() {
+    return Object.keys(statement).flatMap((resource) => statement[resource].map((action) => ({
+        resource: resource,
+        action,
+    })));
+}
+export class IamService {
+    drizzle;
+    events;
+    email;
+    sessionCommands;
+    constructor(drizzle, events, email, sessionCommands) {
+        this.drizzle = drizzle;
+        this.events = events;
+        this.email = email;
+        this.sessionCommands = sessionCommands;
+    }
+    async callerGrants(caller) {
+        const resolver = new DbAdminPermissionResolver(this.drizzle);
+        const dbGrants = await resolver.getGrants(caller.userId);
+        return dbGrants ?? staticGrantsForRole(caller.role);
+    }
+    // True for a DB super-admin assignment OR (no DB row AND user.role === 'admin').
+    // The second clause keeps the bootstrap admin accessible before any role is seeded.
+    // `user.role` is written only by trusted provisioning (seed/IdP), so it is safe here.
+    async isSuperAdmin(caller) {
+        const assignments = await this.drizzle.db
+            .select({ roleId: adminRoleAssignment.roleId })
+            .from(adminRoleAssignment)
+            .where(eq(adminRoleAssignment.userId, caller.userId));
+        if (assignments.length === 0) {
+            return caller.role === 'admin';
+        }
+        const roleIds = assignments.map((a) => a.roleId);
+        const superRows = await this.drizzle.db
+            .select({ id: adminRole.id })
+            .from(adminRole)
+            .where(and(inArray(adminRole.id, roleIds), eq(adminRole.isSuperAdmin, true)));
+        return superRows.length > 0;
+    }
+    async assertSuperAdmin(caller) {
+        if (!(await this.isSuperAdmin(caller))) {
+            throw new NotSuperAdminError();
+        }
+    }
+    listCatalog() {
+        return buildCatalog();
+    }
+    async rolePermissions(roleId) {
+        const rows = await this.drizzle.db
+            .select({ resource: adminRolePermission.resource, level: adminRolePermission.level })
+            .from(adminRolePermission)
+            .where(eq(adminRolePermission.roleId, roleId));
+        return rows.map((r) => ({ resource: r.resource, level: r.level }));
+    }
+    async listRoles({ page, limit }) {
+        const offset = pageToOffset(page, limit);
+        const [rows, countResult] = await Promise.all([
+            this.drizzle.db.select().from(adminRole).limit(limit).offset(offset),
+            this.drizzle.db.select({ count: sql `count(*)::int` }).from(adminRole),
+        ]);
+        const items = await Promise.all(rows.map(async (row) => ({
+            ...toRoleDto(row),
+            permissions: await this.rolePermissions(row.id),
+        })));
+        return { items, total: countResult[0]?.count ?? 0, page, limit };
+    }
+    async getRole(roleId) {
+        const row = findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, roleId)), new RoleNotFoundError(roleId));
+        return { ...toRoleDto(row), permissions: await this.rolePermissions(roleId) };
+    }
+    async createRole(input) {
+        await this.assertSuperAdmin(input.caller);
+        const [row] = await this.drizzle.db.insert(adminRole).values({ name: input.name }).returning();
+        const dto = toRoleDto(row);
+        this.events.emit('iam.role.created', {
+            roleId: dto.id,
+            name: dto.name,
+            actorId: input.caller.userId,
+        });
+        return dto;
+    }
+    async updateRole(input) {
+        await this.assertSuperAdmin(input.caller);
+        const existing = findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, input.roleId)), new RoleNotFoundError(input.roleId));
+        // The super-admin role bypasses authz and must never be renamed.
+        if (existing.isSuperAdmin) {
+            throw new ProtectedRoleError();
+        }
+        const patch = {};
+        if (input.name !== undefined)
+            patch.name = input.name;
+        const [row] = await this.drizzle.db
+            .update(adminRole)
+            .set(patch)
+            .where(eq(adminRole.id, input.roleId))
+            .returning();
+        const dto = toRoleDto(row);
+        this.events.emit('iam.role.updated', {
+            roleId: dto.id,
+            name: input.name,
+            actorId: input.caller.userId,
+        });
+        return dto;
+    }
+    async deleteRole(input) {
+        await this.assertSuperAdmin(input.caller);
+        const row = findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, input.roleId)), new RoleNotFoundError(input.roleId));
+        if (row.isSystem || row.isSuperAdmin) {
+            throw new ProtectedRoleError();
+        }
+        // The three child FKs are ON DELETE CASCADE, so deleting the role removes permission,
+        // assignment, and invitation rows automatically. Holder rows are read FOR UPDATE inside
+        // the tx so a concurrent assign cannot slip a row past the audit.
+        const affectedUserIds = await this.drizzle.db.transaction(async (txn) => {
+            const holders = await txn
+                .select({ userId: adminRoleAssignment.userId })
+                .from(adminRoleAssignment)
+                .where(eq(adminRoleAssignment.roleId, input.roleId))
+                .for('update');
+            await txn.delete(adminRole).where(eq(adminRole.id, input.roleId));
+            return holders.map((h) => h.userId);
+        });
+        // One revoke per affected admin so each lost-role is individually attributable in the audit log.
+        for (const userId of affectedUserIds) {
+            this.events.emit('iam.role.revoked', {
+                roleId: input.roleId,
+                userId,
+                actorId: input.caller.userId,
+            });
+        }
+        this.events.emit('iam.role.deleted', {
+            roleId: input.roleId,
+            actorId: input.caller.userId,
+        });
+        return { success: true };
+    }
+    async setRolePermissions(input) {
+        await this.assertSuperAdmin(input.caller);
+        const role = findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, input.roleId)), new RoleNotFoundError(input.roleId));
+        if (role.isSuperAdmin) {
+            throw new ProtectedRoleError();
+        }
+        validateGrants(input.grants);
+        // No-escalation check retained for a future delegated-admin mode; today
+        // assertSuperAdmin already proved the caller holds all levels.
+        const callerMap = grantsToLevelMap(await this.callerGrants(input.caller));
+        for (const g of input.grants) {
+            if (g.level === 'no_access')
+                continue;
+            const have = callerMap[g.resource] ?? 'no_access';
+            if (!isLevelSufficient(have, g.level)) {
+                throw new GrantEscalationError();
+            }
+        }
+        // Replace in one transaction - a crash or concurrent call must not leave the role at no_access.
+        const persist = input.grants.filter((g) => g.level !== 'no_access');
+        const { before, after } = await this.drizzle.db.transaction(async (txn) => {
+            const beforeRows = await txn
+                .select({ resource: adminRolePermission.resource, level: adminRolePermission.level })
+                .from(adminRolePermission)
+                .where(eq(adminRolePermission.roleId, input.roleId));
+            await txn.delete(adminRolePermission).where(eq(adminRolePermission.roleId, input.roleId));
+            if (persist.length > 0) {
+                await txn
+                    .insert(adminRolePermission)
+                    .values(persist.map((g) => ({ ...g, roleId: input.roleId })));
+            }
+            const afterRows = await txn
+                .select({ resource: adminRolePermission.resource, level: adminRolePermission.level })
+                .from(adminRolePermission)
+                .where(eq(adminRolePermission.roleId, input.roleId));
+            const toLevels = (rows) => rows.map((r) => ({ resource: r.resource, level: r.level }));
+            return { before: toLevels(beforeRows), after: toLevels(afterRows) };
+        });
+        this.events.emit('iam.role.permissions.changed', {
+            roleId: input.roleId,
+            before,
+            after,
+            actorId: input.caller.userId,
+        });
+        return this.getRole(input.roleId);
+    }
+    async assignRole(input) {
+        await this.assertSuperAdmin(input.caller);
+        findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, input.roleId)), new RoleNotFoundError(input.roleId));
+        // The target must be an admin account - the resolver grants admin access to anyone with
+        // an assignment row, so assigning to a player would silently escalate them.
+        const target = findOneOrThrow(await this.drizzle.db.select({ role: user.role }).from(user).where(eq(user.id, input.userId)), new AdminUserNotFoundError(input.userId));
+        if (target.role !== 'admin') {
+            throw new NotAnAdminUserError();
+        }
+        // Return the existing row rather than 500-ing on the unique (userId, roleId) index.
+        const existing = await this.drizzle.db
+            .select()
+            .from(adminRoleAssignment)
+            .where(and(eq(adminRoleAssignment.userId, input.userId), eq(adminRoleAssignment.roleId, input.roleId)));
+        if (existing.length > 0) {
+            return toAssignmentDto(existing[0]);
+        }
+        const [row] = await this.drizzle.db
+            .insert(adminRoleAssignment)
+            .values({ userId: input.userId, roleId: input.roleId })
+            .returning();
+        const dto = toAssignmentDto(row);
+        this.events.emit('iam.role.assigned', {
+            roleId: input.roleId,
+            userId: input.userId,
+            actorId: input.caller.userId,
+        });
+        return dto;
+    }
+    async unassignRole(input) {
+        await this.assertSuperAdmin(input.caller);
+        const role = findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, input.roleId)), new RoleNotFoundError(input.roleId));
+        // Count-then-delete must be atomic (TOCTOU). Lock super-admin holder rows FOR UPDATE
+        // so a concurrent unassign blocks until after the first commits.
+        const deleted = await this.drizzle.db.transaction(async (txn) => {
+            if (role.isSuperAdmin) {
+                const superRoleRows = await txn
+                    .select({ id: adminRole.id })
+                    .from(adminRole)
+                    .where(eq(adminRole.isSuperAdmin, true));
+                const superRoleIds = superRoleRows.map((r) => r.id);
+                const holders = await txn
+                    .select({ userId: adminRoleAssignment.userId, roleId: adminRoleAssignment.roleId })
+                    .from(adminRoleAssignment)
+                    .where(inArray(adminRoleAssignment.roleId, superRoleIds))
+                    .for('update');
+                const remaining = holders.filter((h) => !(h.userId === input.userId && h.roleId === input.roleId));
+                if (remaining.length === 0) {
+                    throw new LastSuperAdminError();
+                }
+            }
+            const removed = await txn
+                .delete(adminRoleAssignment)
+                .where(and(eq(adminRoleAssignment.userId, input.userId), eq(adminRoleAssignment.roleId, input.roleId)))
+                .returning({ id: adminRoleAssignment.id });
+            return removed.length > 0;
+        });
+        // No-op unassign returns success but emits nothing - no ghost revocation in the audit log.
+        if (deleted) {
+            this.events.emit('iam.role.revoked', {
+                roleId: input.roleId,
+                userId: input.userId,
+                actorId: input.caller.userId,
+            });
+        }
+        return { success: true };
+    }
+    async listAssignments(input) {
+        const { page, limit, userId } = input;
+        const offset = pageToOffset(page, limit);
+        const where = userId ? eq(adminRoleAssignment.userId, userId) : undefined;
+        const [rows, countResult] = await Promise.all([
+            this.drizzle.db
+                .select({
+                id: adminRoleAssignment.id,
+                userId: adminRoleAssignment.userId,
+                roleId: adminRoleAssignment.roleId,
+                createdAt: adminRoleAssignment.createdAt,
+                roleName: adminRole.name,
+                roleKey: adminRole.key,
+            })
+                .from(adminRoleAssignment)
+                .innerJoin(adminRole, eq(adminRole.id, adminRoleAssignment.roleId))
+                .where(where)
+                .limit(limit)
+                .offset(offset),
+            this.drizzle.db
+                .select({ count: sql `count(*)::int` })
+                .from(adminRoleAssignment)
+                .where(where),
+        ]);
+        const items = rows.map((r) => ({
+            id: r.id,
+            userId: r.userId,
+            roleId: r.roleId,
+            createdAt: r.createdAt.toISOString(),
+            roleName: r.roleName,
+            roleKey: r.roleKey ?? null,
+        }));
+        return { items, total: countResult[0]?.count ?? 0, page, limit };
+    }
+    async previewEffectivePermissions(input) {
+        let roleIds;
+        if ('userId' in input) {
+            const assignments = await this.drizzle.db
+                .select({ roleId: adminRoleAssignment.roleId })
+                .from(adminRoleAssignment)
+                .where(eq(adminRoleAssignment.userId, input.userId));
+            roleIds = assignments.map((a) => a.roleId);
+        }
+        else {
+            roleIds = input.roleIds;
+        }
+        if (roleIds.length === 0 && 'userId' in input) {
+            const [u] = await this.drizzle.db
+                .select({ role: user.role })
+                .from(user)
+                .where(eq(user.id, input.userId))
+                .limit(1);
+            if (u && roles[u.role]) {
+                const staticGrants = staticGrantsForRole(u.role);
+                const byResource = new Map();
+                for (const g of staticGrants) {
+                    if (!byResource.has(g.resource))
+                        byResource.set(g.resource, []);
+                    byResource.get(g.resource).push(g.action);
+                }
+                const permissions = [...byResource.entries()]
+                    .map(([resource, actions]) => ({
+                    resource,
+                    level: actionsToLevel(resource, actions),
+                }))
+                    .filter((p) => p.level !== 'no_access');
+                return { permissions };
+            }
+        }
+        if (roleIds.length === 0) {
+            return { permissions: [] };
+        }
+        const superRows = await this.drizzle.db
+            .select({ id: adminRole.id })
+            .from(adminRole)
+            .where(and(inArray(adminRole.id, roleIds), eq(adminRole.isSuperAdmin, true)));
+        if (superRows.length > 0) {
+            return {
+                permissions: Object.keys(statement).map((resource) => ({
+                    resource,
+                    level: 'read_write',
+                })),
+            };
+        }
+        const rows = await this.drizzle.db
+            .select({ resource: adminRolePermission.resource, level: adminRolePermission.level })
+            .from(adminRolePermission)
+            .where(inArray(adminRolePermission.roleId, roleIds));
+        const max = new Map();
+        for (const r of rows) {
+            const level = r.level;
+            const cur = max.get(r.resource);
+            if (!cur || levelRank(level) > levelRank(cur))
+                max.set(r.resource, level);
+        }
+        return {
+            permissions: [...max.entries()].map(([resource, level]) => ({ resource, level })),
+        };
+    }
+    async listInvitations({ page, limit }) {
+        const offset = pageToOffset(page, limit);
+        const [rows, countResult] = await Promise.all([
+            this.drizzle.db.select().from(adminInvitation).limit(limit).offset(offset),
+            this.drizzle.db.select({ count: sql `count(*)::int` }).from(adminInvitation),
+        ]);
+        return { items: rows.map(toInvitationDto), total: countResult[0]?.count ?? 0, page, limit };
+    }
+    async inviteAdmin(input) {
+        // Inviting to a role is a role grant by another name, so it is super-admin-only -
+        // consistent with assignRole. A non-super admin must not invite to a role
+        // exceeding their own (esp. super-admin).
+        await this.assertSuperAdmin(input.caller);
+        findOneOrThrow(await this.drizzle.db.select().from(adminRole).where(eq(adminRole.id, input.roleId)), new RoleNotFoundError(input.roleId));
+        const token = crypto.randomUUID();
+        const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
+        const [row] = await this.drizzle.db
+            .insert(adminInvitation)
+            .values({
+            email: input.email,
+            roleId: input.roleId,
+            token,
+            status: 'pending',
+            expiresAt,
+        })
+            .returning();
+        await this.email.send({
+            to: input.email,
+            subject: 'You have been invited as an administrator',
+            body: `Your admin invitation token: ${token}. It expires at ${expiresAt.toISOString()}.`,
+        });
+        return toInvitationDto(row);
+    }
+    async acceptInvitation(token) {
+        // Atomic conditional UPDATE: the DB evaluates pending + not-expired under row lock,
+        // so two concurrent accepts cannot both succeed. Public path - tenant is derived
+        // from the row, not the request, so no tenant predicate is needed.
+        const now = new Date();
+        const [row] = await this.drizzle.db
+            .update(adminInvitation)
+            .set({ status: 'accepted', acceptedAt: now })
+            .where(and(eq(adminInvitation.token, token), eq(adminInvitation.status, 'pending'), gt(adminInvitation.expiresAt, now)))
+            .returning();
+        if (!row) {
+            throw new InvitationConflictError();
+        }
+        // Emit only on actual transition - a replayed accept must never double-provision.
+        this.events.emit('iam.invitation.accepted', {
+            email: row.email,
+            roleId: row.roleId,
+            invitationId: row.id,
+        });
+        return { success: true, email: row.email };
+    }
+    async forceLogout(input) {
+        await this.assertSuperAdmin(input.caller);
+        if (!this.sessionCommands) {
+            throw new Error('SessionCommands adapter not provided');
+        }
+        await this.sessionCommands.revokeAll(input.userId, input.caller.userId);
+        return { success: true };
+    }
+}
+//# sourceMappingURL=iam.service.js.map

package/dist/iam/service/iam.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.service.js","sourceRoot":"","sources":["../../../src/iam/service/iam.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAEjB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,KAAK,EACL,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,cAAc,GAIf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAQxD,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,sGAAsG;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAC;AAGzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CACtD,iBAAiB,EACjB,4CAA4C,CAC7C,CAAC;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAChD,mBAAmB,EACnB,GAAG,EAAE,CAAC,yBAAyB,CAChC,CAAC;AACF,iEAAiE;AACjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CACnD,sBAAsB,EACtB,GAAG,EAAE,CAAC,oDAAoD,CAC3D,CAAC;AACF,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CACjD,oBAAoB,EACpB,GAAG,EAAE,CAAC,6BAA6B,CACpC,CAAC;AACF,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACrE,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAClD,qBAAqB,EACrB,GAAG,EAAE,CAAC,2CAA2C,CAClD,CAAC;AACF,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CACjD,WAAW,EACX,0DAA0D,CAC3D,CAAC;AACF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAClD,WAAW,EACX,oCAAoC,CACrC,CAAC;AAMF,mFAAmF;AACnF,0FAA0F;AAC1F,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAEvE,SAAS,YAAY;IACnB,OAAO;QACL,OAAO,EAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAoB;aAChD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAClB,QAAQ;YACR,OAAO,EAAG,SAAS,CAAC,QAAQ,CAAuB,CAAC,KAAK,EAAE;YAC3D,WAAW,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE;SACnD,CAAC,CAAC;QACL,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAA0D;IAChF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAwB,CAAkC,CAAC;QACrF,sFAAsF;QACtF,IAAI,CAAC,KAAK,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAwB,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAoB,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAQ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAoB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpE,SAAS,CAAC,QAAQ,CAAuB;SACvC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;SACpE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA6B;IACrD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACvE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,GAAoC,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,QAAwB,CAAkC,CAAC;QACjF,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,WAAW,CAAC,QAAwB,CAAC,IAAI,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAkC;IACnD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,GAA4C;IACnE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,GAAwC;IAC/D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,mFAAmF;AACnF,mFAAmF;AACnF,kFAAkF;AAClF,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,gBAAgB,MAAM,EAAE,CAAC;AAEpE,6JAA6J;AAC7J,MAAM,OAAO,yBAAyB;IAEjB;IACA;IAFnB,YACmB,OAAuB,EACvB,KAAoB;QADpB,YAAO,GAAP,OAAO,CAAgB;QACvB,UAAK,GAAL,KAAK,CAAe;IACpC,CAAC;IAEJ,SAAS,CAAC,MAAc;QACtB,iFAAiF;QACjF,gFAAgF;QAChF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAC1E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,MAAc;QACrC,2EAA2E;QAC3E,gFAAgF;QAChF,+EAA+E;QAC/E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;YACtC,KAAK,EAAE,mBAAmB,CAAC,KAAK;SACjC,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;aAClE,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;aAC3E,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAEjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QAEzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK;gBAAE,SAAS,CAAC,8CAA8C;YACrF,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAwB,CAAC,EAAE,CAAC;gBAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAClC,MAAM,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;aAC9C,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,UAAU,CACd,IAAI,CAAC,KAAK,EACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS;IAChB,OAAQ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAoB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpE,SAAS,CAAC,QAAQ,CAAuB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1D,QAAQ,EAAE,QAAkB;QAC5B,MAAM;KACP,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,UAAU;IAEF;IACA;IACA;IACA;IAJnB,YACmB,OAAuB,EACvB,MAAgB,EAChB,KAAoB,EACpB,eAAiC;QAHjC,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;QAChB,UAAK,GAAL,KAAK,CAAe;QACpB,oBAAe,GAAf,eAAe,CAAkB;IACjD,CAAC;IAEI,KAAK,CAAC,YAAY,CAAC,MAAc;QACvC,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,QAAQ,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,iFAAiF;IACjF,oFAAoF;IACpF,sFAAsF;IAC9E,KAAK,CAAC,YAAY,CAAC,MAAc;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACtC,MAAM,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;aAC9C,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;QACjC,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACpC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;aAC5B,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC3C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAc;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;aACpF,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAwB,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAQ;QACnC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;SAC9E,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACvB,GAAG,SAAS,CAAC,GAAG,CAAC;YACjB,WAAW,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC,CACJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,EAC9E,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAC9B,CAAC;QACF,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAuC;QACtD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QAC/F,MAAM,GAAG,GAAG,SAAS,CAAC,GAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACnC,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC7B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAwD;QACvE,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,cAAc,CAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EACpF,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CACpC,CAAC;QAEF,iEAAiE;QACjE,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAEtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC,KAAK,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;aACrC,SAAS,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,SAAS,CAAC,GAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACnC,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC7B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAyC;QACxD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EACpF,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CACpC,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAED,sFAAsF;QACtF,wFAAwF;QACxF,kEAAkE;QAClE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtE,MAAM,OAAO,GAAG,MAAM,GAAG;iBACtB,MAAM,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;iBAC9C,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;iBACnD,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEjB,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAElE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,iGAAiG;QACjG,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAIxB;QACC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,cAAc,CACzB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EACpF,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CACpC,CAAC;QAEF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAED,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE7B,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC;YAClD,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,oBAAoB,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QAED,gGAAgG;QAChG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;QACpE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxE,MAAM,UAAU,GAAG,MAAM,GAAG;iBACzB,MAAM,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;iBACpF,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAEvD,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAE1F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,GAAG;qBACN,MAAM,CAAC,mBAAmB,CAAC;qBAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,GAAG;iBACxB,MAAM,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;iBACpF,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAEvD,MAAM,QAAQ,GAAG,CAAC,IAA2C,EAAE,EAAE,CAC/D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAwB,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM;YACN,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAyD;QACxE,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,cAAc,CACZ,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EACpF,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CACpC,CAAC;QAEF,wFAAwF;QACxF,4EAA4E;QAC5E,MAAM,MAAM,GAAG,cAAc,CAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAC7F,IAAI,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CACzC,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,oFAAoF;QACpF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACnC,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAC7C,CACF,CAAC;QACJ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,mBAAmB,CAAC;aAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aACtD,SAAS,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,eAAe,CAAC,GAAI,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC7B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAIlB;QACC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,cAAc,CACzB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EACpF,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CACpC,CAAC;QAEF,qFAAqF;QACrF,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,aAAa,GAAG,MAAM,GAAG;qBAC5B,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;qBAC5B,IAAI,CAAC,SAAS,CAAC;qBACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,GAAG;qBACtB,MAAM,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;qBAClF,IAAI,CAAC,mBAAmB,CAAC;qBACzB,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;qBACxD,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACjB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CACjE,CAAC;gBACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,mBAAmB,EAAE,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,GAAG;iBACtB,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAC7C,CACF;iBACA,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,2FAA2F;QAC3F,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAiC;QACrD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1E,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,MAAM,CAAC;gBACN,EAAE,EAAE,mBAAmB,CAAC,EAAE;gBAC1B,MAAM,EAAE,mBAAmB,CAAC,MAAM;gBAClC,MAAM,EAAE,mBAAmB,CAAC,MAAM;gBAClC,SAAS,EAAE,mBAAmB,CAAC,SAAS;gBACxC,QAAQ,EAAE,SAAS,CAAC,IAAI;gBACxB,OAAO,EAAE,SAAS,CAAC,GAAG;aACvB,CAAC;iBACD,IAAI,CAAC,mBAAmB,CAAC;iBACzB,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;iBAClE,KAAK,CAAC,KAAK,CAAC;iBACZ,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,MAAM,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;iBAC7C,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;SAC3B,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,KAAiD;QAEjD,IAAI,OAAiB,CAAC;QACtB,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBACtC,MAAM,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC;iBAC9C,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACvD,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC9C,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBAC9B,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC3B,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;iBAChC,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAA0B,CAAC,EAAE,CAAC;gBAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;gBAC/C,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;wBAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAChE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC7C,CAAC;gBACD,MAAM,WAAW,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;qBAC1C,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7B,QAAQ;oBACR,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC;iBACzC,CAAC,CAAC;qBACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;gBAC1C,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACpC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;aAC5B,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,WAAW,EAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAoB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACzE,QAAQ;oBACR,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;aACpF,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAwB,CAAC;YACzC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SAClF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAQ;QACzC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;SACpF,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAwD;QACxE,kFAAkF;QAClF,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,cAAc,CACZ,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EACpF,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CACpC,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEjE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,eAAe,CAAC;aACvB,MAAM,CAAC;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,SAAS;SACV,CAAC;aACD,SAAS,EAAE,CAAC;QAEf,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACpB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,OAAO,EAAE,2CAA2C;YACpD,IAAI,EAAE,gCAAgC,KAAK,mBAAmB,SAAS,CAAC,WAAW,EAAE,GAAG;SACzF,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,GAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,oFAAoF;QACpF,iFAAiF;QACjF,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,eAAe,CAAC;aACvB,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aAC5C,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,EAChC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,EACrC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CACnC,CACF;aACA,SAAS,EAAE,CAAC;QAEf,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACtC,CAAC;QAED,kFAAkF;QAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,YAAY,EAAE,GAAG,CAAC,EAAE;SACrB,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAyC;QACzD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACpC,CAAC;CACF"}

package/dist/pam/contracts.d.ts

@@ -0,0 +1,5 @@
+export * as identity from './identity/contract/index.js';
+export * as profile from './profile/contract/index.js';
+export * as tag from './tag/contract/index.js';
+export * as playerNote from './player-note/contract/index.js';
+//# sourceMappingURL=contracts.d.ts.map

package/dist/pam/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/pam/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAC;AACvD,OAAO,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAC/C,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC"}

package/dist/pam/contracts.js

@@ -0,0 +1,5 @@
+export * as identity from './identity/contract/index.js';
+export * as profile from './profile/contract/index.js';
+export * as tag from './tag/contract/index.js';
+export * as playerNote from './player-note/contract/index.js';
+//# sourceMappingURL=contracts.js.map

package/dist/pam/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/pam/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAC;AACvD,OAAO,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAC/C,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC"}

package/dist/pam/identity/__tests__/admin-user-directory.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-user-directory.test.d.ts.map

package/dist/pam/identity/__tests__/admin-user-directory.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-user-directory.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/admin-user-directory.test.ts"],"names":[],"mappings":""}